grpc 1.55.0 → 1.58.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (908) hide show
  1. checksums.yaml +4 -4
  2. data/Makefile +783 -492
  3. data/include/grpc/event_engine/event_engine.h +26 -36
  4. data/include/grpc/event_engine/memory_allocator.h +2 -2
  5. data/include/grpc/grpc_audit_logging.h +96 -0
  6. data/include/grpc/grpc_security.h +19 -0
  7. data/include/grpc/impl/channel_arg_names.h +371 -0
  8. data/include/grpc/impl/grpc_types.h +1 -350
  9. data/include/grpc/module.modulemap +3 -0
  10. data/include/grpc/support/json.h +218 -0
  11. data/include/grpc/support/port_platform.h +29 -23
  12. data/src/core/ext/filters/backend_metrics/backend_metric_filter.cc +6 -1
  13. data/src/core/ext/filters/channel_idle/channel_idle_filter.cc +2 -1
  14. data/src/core/ext/filters/client_channel/backend_metric.cc +2 -0
  15. data/src/core/ext/filters/client_channel/channel_connectivity.cc +4 -4
  16. data/src/core/ext/filters/client_channel/client_channel.cc +137 -115
  17. data/src/core/ext/filters/client_channel/client_channel.h +6 -0
  18. data/src/core/ext/filters/client_channel/client_channel_channelz.cc +19 -18
  19. data/src/core/ext/filters/client_channel/client_channel_internal.h +16 -21
  20. data/src/core/ext/filters/client_channel/config_selector.h +9 -24
  21. data/src/core/ext/filters/client_channel/dynamic_filters.h +3 -3
  22. data/src/core/ext/filters/client_channel/http_proxy.cc +6 -1
  23. data/src/core/ext/filters/client_channel/lb_policy/address_filtering.cc +27 -53
  24. data/src/core/ext/filters/client_channel/lb_policy/address_filtering.h +23 -9
  25. data/src/core/ext/filters/client_channel/lb_policy/backend_metric_data.h +3 -0
  26. data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.cc +25 -35
  27. data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.cc +84 -136
  28. data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.cc +2 -1
  29. data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.cc +4 -3
  30. data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.h +3 -1
  31. data/src/core/ext/filters/client_channel/lb_policy/health_check_client.cc +480 -0
  32. data/src/core/ext/filters/client_channel/lb_policy/health_check_client.h +52 -0
  33. data/src/core/ext/filters/client_channel/lb_policy/health_check_client_internal.h +202 -0
  34. data/src/core/ext/filters/client_channel/lb_policy/oob_backend_metric.cc +6 -9
  35. data/src/core/ext/filters/client_channel/lb_policy/oob_backend_metric_internal.h +2 -0
  36. data/src/core/ext/filters/client_channel/lb_policy/outlier_detection/outlier_detection.cc +132 -74
  37. data/src/core/ext/filters/client_channel/lb_policy/outlier_detection/outlier_detection.h +9 -2
  38. data/src/core/ext/filters/client_channel/lb_policy/pick_first/pick_first.cc +168 -104
  39. data/src/core/ext/filters/client_channel/lb_policy/pick_first/pick_first.h +20 -0
  40. data/src/core/ext/filters/client_channel/lb_policy/priority/priority.cc +14 -43
  41. data/src/core/ext/filters/client_channel/lb_policy/ring_hash/ring_hash.cc +22 -14
  42. data/src/core/ext/filters/client_channel/lb_policy/ring_hash/ring_hash.h +18 -1
  43. data/src/core/ext/filters/client_channel/lb_policy/rls/rls.cc +33 -88
  44. data/src/core/ext/filters/client_channel/lb_policy/round_robin/round_robin.cc +7 -5
  45. data/src/core/ext/filters/client_channel/lb_policy/subchannel_list.h +57 -22
  46. data/src/core/ext/filters/client_channel/lb_policy/weighted_round_robin/static_stride_scheduler.cc +76 -6
  47. data/src/core/ext/filters/client_channel/lb_policy/weighted_round_robin/weighted_round_robin.cc +53 -43
  48. data/src/core/ext/filters/client_channel/lb_policy/weighted_target/weighted_target.cc +17 -52
  49. data/src/core/ext/filters/client_channel/lb_policy/xds/cds.cc +55 -114
  50. data/src/core/ext/filters/client_channel/lb_policy/xds/xds_channel_args.h +8 -0
  51. data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_impl.cc +32 -83
  52. data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_manager.cc +21 -67
  53. data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_resolver.cc +62 -133
  54. data/src/core/ext/filters/client_channel/lb_policy/xds/xds_override_host.cc +23 -62
  55. data/src/core/ext/filters/client_channel/lb_policy/xds/xds_wrr_locality.cc +24 -93
  56. data/src/core/ext/filters/client_channel/resolver/dns/c_ares/dns_resolver_ares.cc +2 -5
  57. data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_posix.cc +102 -11
  58. data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.cc +44 -37
  59. data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.h +4 -1
  60. data/src/core/ext/filters/client_channel/resolver/dns/dns_resolver_plugin.cc +6 -0
  61. data/src/core/ext/filters/client_channel/resolver/dns/event_engine/event_engine_client_channel_resolver.cc +135 -73
  62. data/src/core/ext/filters/client_channel/resolver/dns/event_engine/service_config_helper.cc +1 -1
  63. data/src/core/ext/filters/client_channel/resolver/dns/native/dns_resolver.cc +1 -1
  64. data/src/core/ext/filters/client_channel/resolver/google_c2p/google_c2p_resolver.cc +28 -27
  65. data/src/core/ext/filters/client_channel/resolver/polling_resolver.cc +10 -4
  66. data/src/core/ext/filters/client_channel/resolver/polling_resolver.h +1 -0
  67. data/src/core/ext/filters/client_channel/resolver/sockaddr/sockaddr_resolver.cc +25 -13
  68. data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.cc +428 -256
  69. data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.h +32 -1
  70. data/src/core/ext/filters/client_channel/retry_filter.cc +39 -2498
  71. data/src/core/ext/filters/client_channel/retry_filter.h +92 -1
  72. data/src/core/ext/filters/client_channel/retry_filter_legacy_call_data.cc +2052 -0
  73. data/src/core/ext/filters/client_channel/retry_filter_legacy_call_data.h +442 -0
  74. data/src/core/ext/filters/client_channel/retry_service_config.cc +2 -1
  75. data/src/core/ext/filters/client_channel/service_config_channel_arg_filter.cc +40 -90
  76. data/src/core/ext/filters/client_channel/subchannel.cc +17 -199
  77. data/src/core/ext/filters/client_channel/subchannel.h +14 -48
  78. data/src/core/ext/filters/client_channel/subchannel_interface_internal.h +3 -0
  79. data/src/core/ext/filters/deadline/deadline_filter.cc +1 -1
  80. data/src/core/ext/filters/http/client/http_client_filter.cc +1 -0
  81. data/src/core/ext/filters/http/client_authority_filter.cc +1 -1
  82. data/src/core/ext/filters/http/message_compress/compression_filter.cc +6 -5
  83. data/src/core/ext/filters/http/server/http_server_filter.cc +1 -1
  84. data/src/core/ext/filters/message_size/message_size_filter.cc +1 -0
  85. data/src/core/ext/filters/rbac/rbac_filter.cc +40 -111
  86. data/src/core/ext/filters/rbac/rbac_filter.h +12 -30
  87. data/src/core/ext/filters/rbac/rbac_service_config_parser.cc +94 -3
  88. data/src/core/ext/filters/server_config_selector/server_config_selector_filter.cc +6 -8
  89. data/src/core/ext/filters/stateful_session/stateful_session_filter.cc +164 -88
  90. data/src/core/ext/filters/stateful_session/stateful_session_filter.h +16 -7
  91. data/src/core/ext/transport/chttp2/client/chttp2_connector.cc +1 -0
  92. data/src/core/ext/transport/chttp2/server/chttp2_server.cc +15 -16
  93. data/src/core/ext/transport/chttp2/transport/chttp2_transport.cc +463 -519
  94. data/src/core/ext/transport/chttp2/transport/decode_huff.cc +6569 -174
  95. data/src/core/ext/transport/chttp2/transport/decode_huff.h +2278 -441
  96. data/src/core/ext/transport/chttp2/transport/flow_control.cc +46 -95
  97. data/src/core/ext/transport/chttp2/transport/frame_ping.cc +6 -20
  98. data/src/core/ext/transport/chttp2/transport/hpack_parse_result.cc +176 -0
  99. data/src/core/ext/transport/chttp2/transport/hpack_parse_result.h +326 -0
  100. data/src/core/ext/transport/chttp2/transport/hpack_parser.cc +631 -547
  101. data/src/core/ext/transport/chttp2/transport/hpack_parser.h +157 -11
  102. data/src/core/ext/transport/chttp2/transport/hpack_parser_table.cc +47 -33
  103. data/src/core/ext/transport/chttp2/transport/hpack_parser_table.h +19 -5
  104. data/src/core/ext/transport/chttp2/transport/internal.h +39 -76
  105. data/src/core/ext/transport/chttp2/transport/parsing.cc +43 -22
  106. data/src/core/ext/transport/chttp2/transport/ping_abuse_policy.cc +80 -0
  107. data/src/core/ext/transport/chttp2/transport/ping_abuse_policy.h +55 -0
  108. data/src/core/ext/transport/chttp2/transport/ping_rate_policy.cc +98 -0
  109. data/src/core/ext/transport/chttp2/transport/ping_rate_policy.h +73 -0
  110. data/src/core/ext/transport/chttp2/transport/writing.cc +82 -91
  111. data/src/core/ext/transport/inproc/inproc_transport.cc +1 -0
  112. data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.c +27 -6
  113. data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.h +143 -0
  114. data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.c +2 -9
  115. data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.h +0 -39
  116. data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.c +13 -8
  117. data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.h +35 -6
  118. data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.c +17 -13
  119. data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.h +85 -20
  120. data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.c +26 -7
  121. data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.h +45 -3
  122. data/src/core/ext/upb-generated/envoy/config/metrics/v3/metrics_service.upb.c +4 -3
  123. data/src/core/ext/upb-generated/envoy/config/metrics/v3/metrics_service.upb.h +21 -0
  124. data/src/core/ext/upb-generated/envoy/config/overload/v3/overload.upb.c +30 -6
  125. data/src/core/ext/upb-generated/envoy/config/overload/v3/overload.upb.h +180 -0
  126. data/src/core/ext/upb-generated/envoy/data/accesslog/v3/accesslog.upb.c +558 -0
  127. data/src/core/ext/upb-generated/envoy/data/accesslog/v3/accesslog.upb.h +2710 -0
  128. data/src/core/ext/upb-generated/envoy/extensions/filters/http/fault/v3/fault.upb.c +30 -11
  129. data/src/core/ext/upb-generated/envoy/extensions/filters/http/fault/v3/fault.upb.h +53 -24
  130. data/src/core/ext/upb-generated/envoy/extensions/filters/http/router/v3/router.upb.c +30 -5
  131. data/src/core/ext/upb-generated/envoy/extensions/filters/http/router/v3/router.upb.h +110 -0
  132. data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.c +41 -15
  133. data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.h +150 -27
  134. data/src/core/ext/upb-generated/envoy/extensions/load_balancing_policies/client_side_weighted_round_robin/v3/client_side_weighted_round_robin.upb.c +1 -0
  135. data/src/core/ext/upb-generated/envoy/extensions/load_balancing_policies/pick_first/v3/pick_first.upb.c +47 -0
  136. data/src/core/ext/upb-generated/envoy/extensions/load_balancing_policies/pick_first/v3/pick_first.upb.h +93 -0
  137. data/src/core/ext/upb-generated/xds/data/orca/v3/orca_load_report.upb.c +11 -2
  138. data/src/core/ext/upb-generated/xds/data/orca/v3/orca_load_report.upb.h +15 -0
  139. data/src/core/ext/upbdefs-generated/envoy/config/accesslog/v3/accesslog.upbdefs.c +88 -76
  140. data/src/core/ext/upbdefs-generated/envoy/config/accesslog/v3/accesslog.upbdefs.h +5 -0
  141. data/src/core/ext/upbdefs-generated/envoy/config/core/v3/config_source.upbdefs.c +11 -12
  142. data/src/core/ext/upbdefs-generated/envoy/config/core/v3/config_source.upbdefs.h +0 -5
  143. data/src/core/ext/upbdefs-generated/envoy/config/core/v3/grpc_service.upbdefs.c +162 -160
  144. data/src/core/ext/upbdefs-generated/envoy/config/core/v3/health_check.upbdefs.c +129 -118
  145. data/src/core/ext/upbdefs-generated/envoy/config/core/v3/protocol.upbdefs.c +141 -135
  146. data/src/core/ext/upbdefs-generated/envoy/config/metrics/v3/metrics_service.upbdefs.c +19 -12
  147. data/src/core/ext/upbdefs-generated/envoy/config/overload/v3/overload.upbdefs.c +38 -30
  148. data/src/core/ext/upbdefs-generated/envoy/config/overload/v3/overload.upbdefs.h +5 -0
  149. data/src/core/ext/upbdefs-generated/envoy/data/accesslog/v3/accesslog.upbdefs.c +402 -0
  150. data/src/core/ext/upbdefs-generated/envoy/data/accesslog/v3/accesslog.upbdefs.h +111 -0
  151. data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/fault/v3/fault.upbdefs.c +80 -74
  152. data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/router/v3/router.upbdefs.c +63 -47
  153. data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/router/v3/router.upbdefs.h +5 -0
  154. data/src/core/ext/upbdefs-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upbdefs.c +315 -293
  155. data/src/core/ext/upbdefs-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upbdefs.h +5 -0
  156. data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/regex.upbdefs.c +29 -29
  157. data/src/core/ext/xds/certificate_provider_store.cc +4 -9
  158. data/src/core/ext/xds/certificate_provider_store.h +1 -1
  159. data/src/core/ext/xds/file_watcher_certificate_provider_factory.cc +30 -42
  160. data/src/core/ext/xds/file_watcher_certificate_provider_factory.h +14 -9
  161. data/src/core/ext/xds/xds_api.cc +9 -6
  162. data/src/core/ext/xds/xds_api.h +3 -2
  163. data/src/core/ext/xds/xds_audit_logger_registry.cc +122 -0
  164. data/src/core/ext/xds/xds_audit_logger_registry.h +68 -0
  165. data/src/core/ext/xds/xds_bootstrap_grpc.cc +51 -36
  166. data/src/core/ext/xds/xds_bootstrap_grpc.h +10 -13
  167. data/src/core/ext/xds/xds_client.cc +5 -4
  168. data/src/core/ext/xds/xds_client_grpc.cc +12 -6
  169. data/src/core/ext/xds/xds_client_grpc.h +16 -2
  170. data/src/core/ext/xds/xds_client_stats.h +11 -1
  171. data/src/core/ext/xds/xds_cluster.cc +46 -35
  172. data/src/core/ext/xds/xds_cluster_specifier_plugin.cc +11 -8
  173. data/src/core/ext/xds/xds_common_types.cc +3 -1
  174. data/src/core/ext/xds/xds_endpoint.cc +4 -7
  175. data/src/core/ext/xds/xds_health_status.cc +0 -17
  176. data/src/core/ext/xds/xds_health_status.h +5 -25
  177. data/src/core/ext/xds/xds_http_fault_filter.cc +14 -12
  178. data/src/core/ext/xds/xds_http_rbac_filter.cc +147 -65
  179. data/src/core/ext/xds/xds_http_stateful_session_filter.cc +13 -10
  180. data/src/core/ext/xds/xds_lb_policy_registry.cc +58 -16
  181. data/src/core/ext/xds/xds_listener.cc +1 -0
  182. data/src/core/ext/xds/xds_route_config.cc +44 -3
  183. data/src/core/ext/xds/xds_transport_grpc.cc +2 -1
  184. data/src/core/lib/address_utils/parse_address.cc +63 -1
  185. data/src/core/lib/address_utils/parse_address.h +8 -0
  186. data/src/core/lib/address_utils/sockaddr_utils.cc +46 -1
  187. data/src/core/lib/address_utils/sockaddr_utils.h +2 -2
  188. data/src/core/lib/avl/avl.h +15 -173
  189. data/src/core/lib/backoff/random_early_detection.h +5 -0
  190. data/src/core/lib/channel/call_tracer.cc +289 -0
  191. data/src/core/lib/channel/call_tracer.h +35 -0
  192. data/src/core/lib/channel/channel_args.cc +120 -46
  193. data/src/core/lib/channel/channel_args.h +52 -4
  194. data/src/core/lib/channel/channel_trace.cc +16 -12
  195. data/src/core/lib/channel/channelz.cc +159 -132
  196. data/src/core/lib/channel/channelz.h +42 -35
  197. data/src/core/lib/channel/channelz_registry.cc +23 -20
  198. data/src/core/lib/channel/connected_channel.cc +21 -8
  199. data/src/core/lib/channel/promise_based_filter.cc +4 -5
  200. data/src/core/lib/channel/promise_based_filter.h +3 -0
  201. data/src/core/lib/compression/compression_internal.cc +8 -7
  202. data/src/core/lib/config/config_vars.cc +20 -18
  203. data/src/core/lib/config/config_vars.h +4 -4
  204. data/src/core/lib/config/load_config.cc +13 -0
  205. data/src/core/lib/config/load_config.h +6 -0
  206. data/src/core/lib/debug/event_log.h +1 -1
  207. data/src/core/lib/debug/stats_data.cc +93 -21
  208. data/src/core/lib/debug/stats_data.h +42 -1
  209. data/src/core/lib/debug/trace.cc +21 -55
  210. data/src/core/lib/debug/trace.h +3 -1
  211. data/src/core/lib/event_engine/ares_resolver.cc +712 -0
  212. data/src/core/lib/event_engine/ares_resolver.h +150 -0
  213. data/src/core/lib/event_engine/cf_engine/cf_engine.cc +218 -0
  214. data/src/core/lib/event_engine/cf_engine/cf_engine.h +86 -0
  215. data/src/core/lib/event_engine/cf_engine/cfstream_endpoint.cc +354 -0
  216. data/src/core/lib/event_engine/cf_engine/cfstream_endpoint.h +146 -0
  217. data/src/core/lib/event_engine/cf_engine/cftype_unique_ref.h +79 -0
  218. data/src/core/lib/event_engine/cf_engine/dns_service_resolver.cc +229 -0
  219. data/src/core/lib/event_engine/cf_engine/dns_service_resolver.h +117 -0
  220. data/src/core/lib/event_engine/default_event_engine.cc +13 -1
  221. data/src/core/lib/event_engine/default_event_engine_factory.cc +14 -2
  222. data/src/core/lib/event_engine/event_engine.cc +0 -12
  223. data/src/core/lib/event_engine/forkable.cc +62 -43
  224. data/src/core/lib/event_engine/forkable.h +15 -0
  225. data/src/core/lib/event_engine/grpc_polled_fd.h +73 -0
  226. data/src/core/lib/event_engine/handle_containers.h +0 -4
  227. data/src/core/lib/event_engine/poller.h +2 -2
  228. data/src/core/lib/event_engine/posix.h +4 -0
  229. data/src/core/lib/event_engine/posix_engine/ev_epoll1_linux.cc +5 -7
  230. data/src/core/lib/event_engine/posix_engine/ev_poll_posix.cc +29 -9
  231. data/src/core/lib/event_engine/posix_engine/ev_poll_posix.h +10 -1
  232. data/src/core/lib/event_engine/posix_engine/grpc_polled_fd_posix.h +197 -0
  233. data/src/core/lib/event_engine/posix_engine/lockfree_event.cc +7 -18
  234. data/src/core/lib/event_engine/posix_engine/posix_endpoint.cc +28 -14
  235. data/src/core/lib/event_engine/posix_engine/posix_endpoint.h +12 -1
  236. data/src/core/lib/event_engine/posix_engine/posix_engine.cc +82 -21
  237. data/src/core/lib/event_engine/posix_engine/posix_engine.h +22 -14
  238. data/src/core/lib/event_engine/posix_engine/posix_engine_listener.cc +70 -31
  239. data/src/core/lib/event_engine/posix_engine/posix_engine_listener.h +12 -8
  240. data/src/core/lib/event_engine/posix_engine/posix_engine_listener_utils.cc +4 -2
  241. data/src/core/lib/event_engine/posix_engine/tcp_socket_utils.cc +43 -2
  242. data/src/core/lib/event_engine/posix_engine/tcp_socket_utils.h +6 -0
  243. data/src/core/lib/event_engine/posix_engine/timer.h +10 -37
  244. data/src/core/lib/event_engine/posix_engine/timer_manager.h +1 -1
  245. data/src/core/lib/event_engine/posix_engine/traced_buffer_list.cc +2 -0
  246. data/src/core/lib/event_engine/shim.cc +7 -1
  247. data/src/core/lib/event_engine/tcp_socket_utils.cc +67 -7
  248. data/src/core/lib/event_engine/tcp_socket_utils.h +3 -0
  249. data/src/core/lib/event_engine/{thread_pool.cc → thread_pool/original_thread_pool.cc} +28 -25
  250. data/src/core/lib/event_engine/{thread_pool.h → thread_pool/original_thread_pool.h} +11 -15
  251. data/src/core/lib/event_engine/thread_pool/thread_count.cc +58 -0
  252. data/src/core/lib/event_engine/thread_pool/thread_count.h +161 -0
  253. data/src/core/lib/event_engine/{executor/executor.h → thread_pool/thread_pool.h} +21 -9
  254. data/src/core/lib/event_engine/thread_pool/thread_pool_factory.cc +47 -0
  255. data/src/core/lib/event_engine/thread_pool/work_stealing_thread_pool.cc +517 -0
  256. data/src/core/lib/event_engine/thread_pool/work_stealing_thread_pool.h +223 -0
  257. data/src/core/lib/event_engine/thready_event_engine/thready_event_engine.cc +157 -0
  258. data/src/core/lib/event_engine/thready_event_engine/thready_event_engine.h +104 -0
  259. data/src/core/lib/event_engine/windows/iocp.cc +4 -3
  260. data/src/core/lib/event_engine/windows/iocp.h +3 -3
  261. data/src/core/lib/event_engine/windows/win_socket.cc +6 -6
  262. data/src/core/lib/event_engine/windows/win_socket.h +4 -4
  263. data/src/core/lib/event_engine/windows/windows_endpoint.cc +60 -59
  264. data/src/core/lib/event_engine/windows/windows_endpoint.h +17 -13
  265. data/src/core/lib/event_engine/windows/windows_engine.cc +21 -18
  266. data/src/core/lib/event_engine/windows/windows_engine.h +14 -18
  267. data/src/core/lib/event_engine/windows/windows_listener.cc +3 -3
  268. data/src/core/lib/event_engine/windows/windows_listener.h +3 -2
  269. data/src/core/lib/event_engine/work_queue/basic_work_queue.cc +63 -0
  270. data/src/core/lib/event_engine/work_queue/basic_work_queue.h +71 -0
  271. data/src/core/lib/event_engine/work_queue/work_queue.h +62 -0
  272. data/src/core/lib/experiments/config.cc +112 -29
  273. data/src/core/lib/experiments/config.h +33 -5
  274. data/src/core/lib/experiments/experiments.cc +226 -64
  275. data/src/core/lib/experiments/experiments.h +93 -30
  276. data/src/core/lib/gpr/log_internal.h +55 -0
  277. data/src/core/lib/gprpp/crash.cc +10 -0
  278. data/src/core/lib/gprpp/crash.h +3 -0
  279. data/src/core/lib/gprpp/dual_ref_counted.h +9 -9
  280. data/src/core/lib/gprpp/fork.cc +8 -9
  281. data/src/core/lib/gprpp/fork.h +6 -5
  282. data/src/core/lib/gprpp/if_list.h +4530 -0
  283. data/src/core/lib/gprpp/orphanable.h +3 -3
  284. data/src/core/lib/gprpp/per_cpu.cc +33 -0
  285. data/src/core/lib/gprpp/per_cpu.h +29 -6
  286. data/src/core/lib/gprpp/ref_counted.h +9 -7
  287. data/src/core/lib/gprpp/ref_counted_string.cc +44 -0
  288. data/src/core/lib/gprpp/ref_counted_string.h +146 -0
  289. data/src/core/lib/gprpp/sorted_pack.h +3 -12
  290. data/src/core/lib/gprpp/status_helper.h +16 -15
  291. data/src/core/lib/gprpp/time.cc +1 -0
  292. data/src/core/lib/gprpp/time.h +13 -1
  293. data/src/core/lib/gprpp/type_list.h +32 -0
  294. data/src/core/lib/gprpp/work_serializer.cc +36 -0
  295. data/src/core/lib/gprpp/work_serializer.h +5 -0
  296. data/src/core/lib/http/httpcli.h +6 -9
  297. data/src/core/lib/http/httpcli_security_connector.cc +1 -0
  298. data/src/core/lib/iomgr/buffer_list.cc +2 -0
  299. data/src/core/lib/iomgr/cfstream_handle.cc +1 -1
  300. data/src/core/lib/iomgr/endpoint_cfstream.cc +10 -8
  301. data/src/core/lib/iomgr/error.cc +32 -2
  302. data/src/core/lib/iomgr/error.h +9 -10
  303. data/src/core/lib/iomgr/ev_apple.cc +12 -12
  304. data/src/core/lib/iomgr/ev_epoll1_linux.cc +15 -10
  305. data/src/core/lib/iomgr/ev_poll_posix.cc +6 -5
  306. data/src/core/lib/iomgr/event_engine_shims/endpoint.cc +22 -23
  307. data/src/core/lib/iomgr/exec_ctx.h +11 -0
  308. data/src/core/lib/iomgr/iocp_windows.cc +24 -3
  309. data/src/core/lib/iomgr/iocp_windows.h +11 -0
  310. data/src/core/lib/iomgr/iomgr_posix_cfstream.cc +1 -1
  311. data/src/core/lib/iomgr/pollset.h +4 -5
  312. data/src/core/lib/iomgr/port.h +10 -0
  313. data/src/core/lib/iomgr/resolve_address.cc +13 -1
  314. data/src/core/lib/iomgr/resolve_address.h +17 -3
  315. data/src/core/lib/iomgr/sockaddr_posix.h +7 -0
  316. data/src/core/lib/iomgr/socket_utils_common_posix.cc +33 -2
  317. data/src/core/lib/iomgr/socket_utils_posix.cc +2 -0
  318. data/src/core/lib/iomgr/socket_utils_posix.h +6 -0
  319. data/src/core/lib/iomgr/socket_windows.cc +61 -7
  320. data/src/core/lib/iomgr/socket_windows.h +9 -2
  321. data/src/core/lib/iomgr/tcp_client_cfstream.cc +14 -3
  322. data/src/core/lib/iomgr/tcp_client_posix.cc +4 -1
  323. data/src/core/lib/iomgr/tcp_posix.cc +24 -7
  324. data/src/core/lib/iomgr/tcp_server_posix.cc +184 -120
  325. data/src/core/lib/iomgr/tcp_server_utils_posix.h +13 -1
  326. data/src/core/lib/iomgr/tcp_server_utils_posix_common.cc +26 -2
  327. data/src/core/lib/iomgr/tcp_server_windows.cc +1 -1
  328. data/src/core/lib/iomgr/tcp_windows.cc +1 -3
  329. data/src/core/lib/iomgr/vsock.cc +59 -0
  330. data/src/core/lib/iomgr/vsock.h +38 -0
  331. data/src/core/lib/iomgr/wakeup_fd_posix.h +3 -6
  332. data/src/core/lib/json/json.h +2 -166
  333. data/src/core/lib/json/json_object_loader.cc +8 -9
  334. data/src/core/lib/json/json_object_loader.h +25 -18
  335. data/src/core/lib/json/json_reader.cc +13 -6
  336. data/src/core/lib/json/json_util.cc +6 -11
  337. data/src/core/lib/json/json_writer.cc +7 -8
  338. data/src/core/lib/load_balancing/delegating_helper.h +115 -0
  339. data/src/core/lib/load_balancing/lb_policy.h +33 -0
  340. data/src/core/lib/load_balancing/lb_policy_registry.cc +2 -1
  341. data/src/core/lib/load_balancing/subchannel_interface.h +6 -0
  342. data/src/core/lib/matchers/matchers.cc +3 -4
  343. data/src/core/lib/matchers/matchers.h +2 -1
  344. data/src/core/lib/promise/activity.cc +5 -0
  345. data/src/core/lib/promise/activity.h +10 -0
  346. data/src/core/lib/promise/detail/basic_seq.h +1 -372
  347. data/src/core/lib/promise/detail/promise_factory.h +1 -1
  348. data/src/core/lib/promise/detail/seq_state.h +2076 -0
  349. data/src/core/lib/promise/party.cc +31 -13
  350. data/src/core/lib/promise/party.h +12 -3
  351. data/src/core/lib/promise/pipe.h +9 -2
  352. data/src/core/lib/promise/prioritized_race.h +95 -0
  353. data/src/core/lib/promise/seq.h +19 -2
  354. data/src/core/lib/promise/sleep.cc +2 -1
  355. data/src/core/lib/promise/sleep.h +5 -10
  356. data/src/core/lib/promise/try_seq.h +34 -2
  357. data/src/core/lib/resolver/resolver_factory.h +3 -2
  358. data/src/core/lib/resolver/server_address.cc +9 -102
  359. data/src/core/lib/resolver/server_address.h +10 -70
  360. data/src/core/lib/resource_quota/api.cc +1 -0
  361. data/src/core/lib/resource_quota/arena.cc +2 -0
  362. data/src/core/lib/resource_quota/arena.h +42 -8
  363. data/src/core/lib/resource_quota/memory_quota.cc +7 -8
  364. data/src/core/lib/resource_quota/memory_quota.h +2 -3
  365. data/src/core/lib/resource_quota/resource_quota.h +1 -0
  366. data/src/core/lib/security/authorization/audit_logging.cc +98 -0
  367. data/src/core/lib/security/authorization/audit_logging.h +73 -0
  368. data/src/core/lib/security/authorization/authorization_policy_provider.h +1 -1
  369. data/src/core/lib/security/authorization/grpc_authorization_engine.cc +47 -2
  370. data/src/core/lib/security/authorization/grpc_authorization_engine.h +18 -1
  371. data/src/core/lib/security/authorization/rbac_policy.cc +36 -4
  372. data/src/core/lib/security/authorization/rbac_policy.h +19 -2
  373. data/src/core/lib/security/authorization/stdout_logger.cc +75 -0
  374. data/src/core/lib/security/authorization/stdout_logger.h +61 -0
  375. data/src/core/lib/security/certificate_provider/certificate_provider_factory.h +8 -4
  376. data/src/core/lib/security/certificate_provider/certificate_provider_registry.cc +8 -18
  377. data/src/core/lib/security/certificate_provider/certificate_provider_registry.h +14 -8
  378. data/src/core/lib/security/credentials/channel_creds_registry.h +51 -27
  379. data/src/core/lib/security/credentials/channel_creds_registry_init.cc +169 -9
  380. data/src/core/lib/security/credentials/composite/composite_credentials.cc +1 -1
  381. data/src/core/lib/security/credentials/composite/composite_credentials.h +3 -1
  382. data/src/core/lib/security/credentials/external/aws_external_account_credentials.cc +19 -12
  383. data/src/core/lib/security/credentials/external/aws_request_signer.cc +8 -0
  384. data/src/core/lib/security/credentials/external/external_account_credentials.cc +44 -3
  385. data/src/core/lib/security/credentials/external/external_account_credentials.h +6 -0
  386. data/src/core/lib/security/credentials/external/file_external_account_credentials.cc +1 -0
  387. data/src/core/lib/security/credentials/external/url_external_account_credentials.cc +1 -0
  388. data/src/core/lib/security/credentials/fake/fake_credentials.cc +30 -38
  389. data/src/core/lib/security/credentials/fake/fake_credentials.h +28 -0
  390. data/src/core/lib/security/credentials/google_default/google_default_credentials.cc +2 -0
  391. data/src/core/lib/security/credentials/jwt/json_token.cc +32 -14
  392. data/src/core/lib/security/credentials/jwt/json_token.h +4 -0
  393. data/src/core/lib/security/credentials/jwt/jwt_credentials.cc +4 -2
  394. data/src/core/lib/security/credentials/jwt/jwt_verifier.cc +43 -0
  395. data/src/core/lib/security/credentials/oauth2/oauth2_credentials.cc +1 -0
  396. data/src/core/lib/security/credentials/ssl/ssl_credentials.cc +1 -0
  397. data/src/core/lib/security/credentials/tls/grpc_tls_certificate_provider.cc +4 -0
  398. data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.cc +8 -0
  399. data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.h +5 -1
  400. data/src/core/lib/security/credentials/tls/tls_credentials.cc +2 -1
  401. data/src/core/lib/security/credentials/tls/tls_credentials.h +3 -1
  402. data/src/core/lib/security/credentials/xds/xds_credentials.cc +1 -0
  403. data/src/core/lib/security/security_connector/alts/alts_security_connector.cc +2 -5
  404. data/src/core/lib/security/security_connector/fake/fake_security_connector.cc +1 -0
  405. data/src/core/lib/security/security_connector/ssl_utils.cc +3 -1
  406. data/src/core/lib/security/security_connector/ssl_utils.h +1 -1
  407. data/src/core/lib/security/security_connector/tls/tls_security_connector.cc +1 -1
  408. data/src/core/lib/security/transport/client_auth_filter.cc +8 -5
  409. data/src/core/lib/security/transport/security_handshaker.cc +1 -0
  410. data/src/core/lib/security/transport/server_auth_filter.cc +2 -0
  411. data/src/core/lib/security/util/json_util.cc +1 -0
  412. data/src/core/lib/service_config/service_config_call_data.h +54 -20
  413. data/src/core/lib/service_config/service_config_impl.cc +2 -1
  414. data/src/core/lib/slice/slice.h +16 -0
  415. data/src/core/lib/surface/call.cc +100 -59
  416. data/src/core/lib/surface/channel.cc +1 -0
  417. data/src/core/lib/surface/completion_queue.cc +16 -2
  418. data/src/core/lib/surface/init.cc +1 -0
  419. data/src/core/lib/surface/server.cc +67 -64
  420. data/src/core/lib/surface/server.h +1 -15
  421. data/src/core/lib/surface/validate_metadata.cc +37 -22
  422. data/src/core/lib/surface/validate_metadata.h +13 -3
  423. data/src/core/lib/surface/version.cc +2 -2
  424. data/src/core/lib/transport/batch_builder.cc +15 -12
  425. data/src/core/lib/transport/batch_builder.h +39 -35
  426. data/src/core/lib/transport/metadata_batch.cc +7 -7
  427. data/src/core/lib/transport/metadata_batch.h +86 -48
  428. data/src/core/lib/transport/parsed_metadata.h +34 -20
  429. data/src/core/lib/transport/simple_slice_based_metadata.h +9 -2
  430. data/src/core/plugin_registry/grpc_plugin_registry.cc +0 -2
  431. data/src/core/plugin_registry/grpc_plugin_registry_extra.cc +2 -0
  432. data/src/core/tsi/alts/crypt/aes_gcm.cc +27 -2
  433. data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol_common.cc +4 -6
  434. data/src/core/tsi/alts/zero_copy_frame_protector/alts_zero_copy_grpc_protector.cc +1 -2
  435. data/src/core/tsi/ssl_transport_security.cc +44 -9
  436. data/src/core/tsi/ssl_transport_security.h +13 -1
  437. data/src/ruby/bin/math_pb.rb +24 -18
  438. data/src/ruby/ext/grpc/extconf.rb +27 -27
  439. data/src/ruby/ext/grpc/rb_call.c +62 -39
  440. data/src/ruby/ext/grpc/rb_call_credentials.c +0 -1
  441. data/src/ruby/ext/grpc/rb_channel.c +109 -84
  442. data/src/ruby/ext/grpc/rb_channel.h +1 -0
  443. data/src/ruby/ext/grpc/rb_channel_args.c +16 -2
  444. data/src/ruby/ext/grpc/rb_channel_args.h +4 -0
  445. data/src/ruby/ext/grpc/rb_channel_credentials.c +0 -1
  446. data/src/ruby/ext/grpc/rb_compression_options.c +0 -1
  447. data/src/ruby/ext/grpc/rb_event_thread.c +22 -6
  448. data/src/ruby/ext/grpc/rb_event_thread.h +1 -0
  449. data/src/ruby/ext/grpc/rb_grpc.c +192 -30
  450. data/src/ruby/ext/grpc/rb_grpc.h +8 -2
  451. data/src/ruby/ext/grpc/rb_grpc_imports.generated.c +2 -0
  452. data/src/ruby/ext/grpc/rb_grpc_imports.generated.h +3 -0
  453. data/src/ruby/ext/grpc/rb_server.c +62 -45
  454. data/src/ruby/ext/grpc/rb_server_credentials.c +0 -1
  455. data/src/ruby/ext/grpc/rb_xds_channel_credentials.c +0 -1
  456. data/src/ruby/ext/grpc/rb_xds_server_credentials.c +0 -1
  457. data/src/ruby/lib/grpc/generic/active_call.rb +9 -14
  458. data/src/ruby/lib/grpc/generic/bidi_call.rb +2 -0
  459. data/src/ruby/lib/grpc/version.rb +1 -1
  460. data/src/ruby/pb/grpc/health/v1/health_pb.rb +24 -13
  461. data/src/ruby/pb/src/proto/grpc/testing/empty_pb.rb +24 -3
  462. data/src/ruby/pb/src/proto/grpc/testing/messages_pb.rb +25 -111
  463. data/src/ruby/pb/src/proto/grpc/testing/test_pb.rb +25 -2
  464. data/src/ruby/pb/test/client.rb +16 -0
  465. data/src/ruby/spec/generic/rpc_server_spec.rb +3 -3
  466. data/third_party/abseil-cpp/absl/algorithm/container.h +3 -2
  467. data/third_party/abseil-cpp/absl/base/attributes.h +58 -5
  468. data/third_party/abseil-cpp/absl/base/call_once.h +1 -1
  469. data/third_party/abseil-cpp/absl/base/casts.h +8 -8
  470. data/third_party/abseil-cpp/absl/base/config.h +89 -106
  471. data/third_party/abseil-cpp/absl/base/dynamic_annotations.h +26 -1
  472. data/third_party/abseil-cpp/absl/base/internal/direct_mmap.h +2 -2
  473. data/third_party/abseil-cpp/absl/base/internal/low_level_alloc.cc +50 -39
  474. data/third_party/abseil-cpp/absl/base/internal/low_level_alloc.h +2 -1
  475. data/third_party/abseil-cpp/absl/base/internal/prefetch.h +17 -18
  476. data/third_party/abseil-cpp/absl/base/internal/raw_logging.cc +32 -3
  477. data/third_party/abseil-cpp/absl/base/internal/raw_logging.h +24 -4
  478. data/third_party/abseil-cpp/absl/base/internal/sysinfo.cc +31 -73
  479. data/third_party/abseil-cpp/absl/base/internal/thread_identity.cc +9 -8
  480. data/third_party/abseil-cpp/absl/base/internal/thread_identity.h +11 -11
  481. data/third_party/abseil-cpp/absl/base/internal/throw_delegate.cc +23 -32
  482. data/third_party/abseil-cpp/absl/base/internal/unscaledcycleclock.cc +2 -3
  483. data/third_party/abseil-cpp/absl/base/options.h +1 -1
  484. data/third_party/abseil-cpp/absl/base/policy_checks.h +3 -3
  485. data/third_party/abseil-cpp/absl/base/prefetch.h +198 -0
  486. data/third_party/abseil-cpp/absl/container/fixed_array.h +54 -29
  487. data/third_party/abseil-cpp/absl/container/flat_hash_map.h +5 -1
  488. data/third_party/abseil-cpp/absl/container/flat_hash_set.h +6 -2
  489. data/third_party/abseil-cpp/absl/container/inlined_vector.h +167 -79
  490. data/third_party/abseil-cpp/absl/container/internal/common_policy_traits.h +1 -1
  491. data/third_party/abseil-cpp/absl/container/internal/compressed_tuple.h +3 -21
  492. data/third_party/abseil-cpp/absl/container/internal/container_memory.h +1 -1
  493. data/third_party/abseil-cpp/absl/container/internal/hash_function_defaults.h +46 -0
  494. data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler.cc +2 -0
  495. data/third_party/abseil-cpp/absl/container/internal/inlined_vector.h +85 -26
  496. data/third_party/abseil-cpp/absl/container/internal/raw_hash_map.h +35 -18
  497. data/third_party/abseil-cpp/absl/container/internal/raw_hash_set.cc +70 -29
  498. data/third_party/abseil-cpp/absl/container/internal/raw_hash_set.h +437 -236
  499. data/third_party/abseil-cpp/absl/crc/crc32c.h +8 -1
  500. data/third_party/abseil-cpp/absl/crc/internal/cpu_detect.cc +14 -8
  501. data/third_party/abseil-cpp/absl/crc/internal/crc.cc +4 -35
  502. data/third_party/abseil-cpp/absl/crc/internal/crc.h +2 -10
  503. data/third_party/abseil-cpp/absl/crc/internal/crc32_x86_arm_combined_simd.h +1 -1
  504. data/third_party/abseil-cpp/absl/crc/internal/crc_cord_state.cc +1 -1
  505. data/third_party/abseil-cpp/absl/crc/internal/crc_cord_state.h +4 -4
  506. data/third_party/abseil-cpp/absl/crc/internal/crc_internal.h +8 -10
  507. data/third_party/abseil-cpp/absl/crc/internal/crc_memcpy_x86_64.cc +17 -19
  508. data/third_party/abseil-cpp/absl/crc/internal/crc_x86_arm_combined.cc +8 -8
  509. data/third_party/abseil-cpp/absl/debugging/internal/elf_mem_image.h +2 -1
  510. data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_aarch64-inl.inc +59 -23
  511. data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_powerpc-inl.inc +1 -1
  512. data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_x86-inl.inc +1 -1
  513. data/third_party/abseil-cpp/absl/debugging/internal/symbolize.h +1 -1
  514. data/third_party/abseil-cpp/absl/debugging/symbolize_elf.inc +43 -19
  515. data/third_party/abseil-cpp/absl/debugging/symbolize_emscripten.inc +3 -0
  516. data/third_party/abseil-cpp/absl/flags/commandlineflag.h +1 -1
  517. data/third_party/abseil-cpp/absl/flags/internal/commandlineflag.cc +1 -1
  518. data/third_party/abseil-cpp/absl/flags/internal/flag.cc +2 -2
  519. data/third_party/abseil-cpp/absl/flags/internal/flag.h +16 -15
  520. data/third_party/abseil-cpp/absl/flags/internal/flag_msvc.inc +1 -1
  521. data/third_party/abseil-cpp/absl/flags/marshalling.cc +43 -2
  522. data/third_party/abseil-cpp/absl/flags/marshalling.h +5 -0
  523. data/third_party/abseil-cpp/absl/functional/any_invocable.h +9 -1
  524. data/third_party/abseil-cpp/absl/functional/bind_front.h +1 -1
  525. data/third_party/abseil-cpp/absl/functional/function_ref.h +3 -3
  526. data/third_party/abseil-cpp/absl/functional/internal/any_invocable.h +37 -24
  527. data/third_party/abseil-cpp/absl/functional/internal/function_ref.h +19 -9
  528. data/third_party/abseil-cpp/absl/hash/hash.h +7 -4
  529. data/third_party/abseil-cpp/absl/hash/internal/hash.h +38 -15
  530. data/third_party/abseil-cpp/absl/hash/internal/low_level_hash.cc +6 -0
  531. data/third_party/abseil-cpp/absl/meta/type_traits.h +48 -373
  532. data/third_party/abseil-cpp/absl/numeric/bits.h +4 -4
  533. data/third_party/abseil-cpp/absl/numeric/int128.cc +20 -8
  534. data/third_party/abseil-cpp/absl/numeric/int128.h +36 -39
  535. data/third_party/abseil-cpp/absl/numeric/int128_have_intrinsic.inc +0 -3
  536. data/third_party/abseil-cpp/absl/numeric/int128_no_intrinsic.inc +47 -30
  537. data/third_party/abseil-cpp/absl/random/internal/fast_uniform_bits.h +4 -3
  538. data/third_party/abseil-cpp/absl/random/internal/generate_real.h +1 -1
  539. data/third_party/abseil-cpp/absl/random/internal/platform.h +1 -1
  540. data/third_party/abseil-cpp/absl/random/internal/randen_detect.cc +4 -0
  541. data/third_party/abseil-cpp/absl/random/internal/randen_engine.h +1 -1
  542. data/third_party/abseil-cpp/absl/random/internal/randen_hwaes.cc +1 -1
  543. data/third_party/abseil-cpp/absl/random/internal/uniform_helper.h +1 -1
  544. data/third_party/abseil-cpp/absl/status/internal/status_internal.h +4 -0
  545. data/third_party/abseil-cpp/absl/status/internal/statusor_internal.h +12 -24
  546. data/third_party/abseil-cpp/absl/status/status.cc +11 -7
  547. data/third_party/abseil-cpp/absl/status/status.h +11 -2
  548. data/third_party/abseil-cpp/absl/status/statusor.h +22 -8
  549. data/third_party/abseil-cpp/absl/strings/ascii.cc +54 -6
  550. data/third_party/abseil-cpp/absl/strings/charconv.cc +21 -4
  551. data/third_party/abseil-cpp/absl/strings/charconv.h +2 -2
  552. data/third_party/abseil-cpp/absl/strings/cord.cc +1 -2
  553. data/third_party/abseil-cpp/absl/strings/cord.h +32 -5
  554. data/third_party/abseil-cpp/absl/strings/cord_analysis.cc +23 -1
  555. data/third_party/abseil-cpp/absl/strings/cord_analysis.h +18 -0
  556. data/third_party/abseil-cpp/absl/strings/cord_buffer.h +2 -5
  557. data/third_party/abseil-cpp/absl/strings/escaping.cc +10 -32
  558. data/third_party/abseil-cpp/absl/strings/escaping.h +1 -1
  559. data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.cc +2 -4
  560. data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.h +3 -3
  561. data/third_party/abseil-cpp/absl/strings/internal/cord_internal.cc +0 -1
  562. data/third_party/abseil-cpp/absl/strings/internal/cord_internal.h +15 -13
  563. data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree.cc +13 -4
  564. data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree.h +8 -0
  565. data/third_party/abseil-cpp/absl/strings/internal/cord_rep_consume.cc +5 -3
  566. data/third_party/abseil-cpp/absl/strings/internal/cord_rep_consume.h +4 -7
  567. data/third_party/abseil-cpp/absl/strings/internal/cord_rep_flat.h +8 -0
  568. data/third_party/abseil-cpp/absl/strings/internal/cord_rep_ring.h +2 -2
  569. data/third_party/abseil-cpp/absl/strings/internal/cordz_handle.cc +46 -20
  570. data/third_party/abseil-cpp/absl/strings/internal/cordz_handle.h +1 -34
  571. data/third_party/abseil-cpp/absl/strings/internal/cordz_info.cc +2 -1
  572. data/third_party/abseil-cpp/absl/strings/internal/escaping.cc +23 -0
  573. data/third_party/abseil-cpp/absl/strings/internal/escaping.h +1 -0
  574. data/third_party/abseil-cpp/absl/strings/internal/memutil.cc +2 -77
  575. data/third_party/abseil-cpp/absl/strings/internal/memutil.h +4 -112
  576. data/third_party/abseil-cpp/absl/strings/internal/stl_type_traits.h +1 -1
  577. data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.cc +10 -31
  578. data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.h +8 -8
  579. data/third_party/abseil-cpp/absl/strings/internal/str_format/bind.h +5 -20
  580. data/third_party/abseil-cpp/absl/strings/internal/str_format/constexpr_parser.h +1 -0
  581. data/third_party/abseil-cpp/absl/strings/internal/str_format/extension.h +1 -1
  582. data/third_party/abseil-cpp/absl/strings/internal/str_format/float_conversion.cc +9 -9
  583. data/third_party/abseil-cpp/absl/strings/internal/str_split_internal.h +56 -6
  584. data/third_party/abseil-cpp/absl/strings/match.cc +87 -0
  585. data/third_party/abseil-cpp/absl/strings/match.h +19 -0
  586. data/third_party/abseil-cpp/absl/strings/numbers.cc +154 -122
  587. data/third_party/abseil-cpp/absl/strings/numbers.h +1 -6
  588. data/third_party/abseil-cpp/absl/strings/str_cat.cc +7 -50
  589. data/third_party/abseil-cpp/absl/strings/str_cat.h +83 -15
  590. data/third_party/abseil-cpp/absl/strings/str_format.h +6 -3
  591. data/third_party/abseil-cpp/absl/strings/str_split.cc +9 -6
  592. data/third_party/abseil-cpp/absl/strings/string_view.cc +26 -4
  593. data/third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.cc +5 -0
  594. data/third_party/abseil-cpp/absl/synchronization/internal/futex.h +63 -43
  595. data/third_party/abseil-cpp/absl/synchronization/internal/futex_waiter.cc +111 -0
  596. data/third_party/abseil-cpp/absl/synchronization/internal/futex_waiter.h +63 -0
  597. data/third_party/abseil-cpp/absl/synchronization/internal/graphcycles.cc +11 -7
  598. data/third_party/abseil-cpp/absl/synchronization/internal/kernel_timeout.cc +225 -0
  599. data/third_party/abseil-cpp/absl/synchronization/internal/kernel_timeout.h +122 -114
  600. data/third_party/abseil-cpp/absl/synchronization/internal/per_thread_sem.cc +12 -8
  601. data/third_party/abseil-cpp/absl/synchronization/internal/per_thread_sem.h +10 -1
  602. data/third_party/abseil-cpp/absl/synchronization/internal/pthread_waiter.cc +167 -0
  603. data/third_party/abseil-cpp/absl/synchronization/internal/pthread_waiter.h +60 -0
  604. data/third_party/abseil-cpp/absl/synchronization/internal/sem_waiter.cc +122 -0
  605. data/third_party/abseil-cpp/absl/synchronization/internal/sem_waiter.h +65 -0
  606. data/third_party/abseil-cpp/absl/synchronization/internal/stdcpp_waiter.cc +91 -0
  607. data/third_party/abseil-cpp/absl/synchronization/internal/stdcpp_waiter.h +56 -0
  608. data/third_party/abseil-cpp/absl/synchronization/internal/waiter.h +19 -113
  609. data/third_party/abseil-cpp/absl/synchronization/internal/waiter_base.cc +42 -0
  610. data/third_party/abseil-cpp/absl/synchronization/internal/waiter_base.h +90 -0
  611. data/third_party/abseil-cpp/absl/synchronization/internal/win32_waiter.cc +151 -0
  612. data/third_party/abseil-cpp/absl/synchronization/internal/win32_waiter.h +70 -0
  613. data/third_party/abseil-cpp/absl/synchronization/mutex.cc +407 -411
  614. data/third_party/abseil-cpp/absl/synchronization/mutex.h +152 -118
  615. data/third_party/abseil-cpp/absl/time/clock.cc +6 -7
  616. data/third_party/abseil-cpp/absl/time/duration.cc +24 -26
  617. data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/time_zone.h +1 -0
  618. data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_fixed.cc +1 -1
  619. data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_format.cc +3 -3
  620. data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_if.cc +8 -6
  621. data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_if.h +6 -3
  622. data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.cc +4 -2
  623. data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.h +4 -0
  624. data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.cc +322 -295
  625. data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.h +8 -17
  626. data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_libc.cc +51 -33
  627. data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_libc.h +7 -2
  628. data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_lookup.cc +128 -2
  629. data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_posix.h +1 -1
  630. data/third_party/abseil-cpp/absl/time/internal/cctz/src/tzfile.h +5 -1
  631. data/third_party/abseil-cpp/absl/time/internal/cctz/src/zone_info_source.cc +34 -34
  632. data/third_party/abseil-cpp/absl/time/time.cc +9 -2
  633. data/third_party/abseil-cpp/absl/time/time.h +115 -15
  634. data/third_party/abseil-cpp/absl/types/internal/optional.h +0 -52
  635. data/third_party/abseil-cpp/absl/types/internal/span.h +2 -2
  636. data/third_party/abseil-cpp/absl/types/internal/variant.h +2 -2
  637. data/third_party/abseil-cpp/absl/types/optional.h +15 -13
  638. data/third_party/abseil-cpp/absl/types/span.h +1 -2
  639. data/third_party/boringssl-with-bazel/err_data.c +554 -553
  640. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_gentm.c +7 -3
  641. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_mbstr.c +9 -8
  642. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_strex.c +7 -7
  643. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_strnid.c +6 -6
  644. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_time.c +34 -1
  645. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_utctm.c +11 -4
  646. data/third_party/boringssl-with-bazel/src/crypto/asn1/internal.h +3 -3
  647. data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_dec.c +10 -6
  648. data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_enc.c +7 -4
  649. data/third_party/boringssl-with-bazel/src/crypto/bio/bio.c +9 -7
  650. data/third_party/boringssl-with-bazel/src/crypto/bio/bio_mem.c +7 -8
  651. data/third_party/boringssl-with-bazel/src/crypto/bio/connect.c +7 -7
  652. data/third_party/boringssl-with-bazel/src/crypto/bio/errno.c +92 -0
  653. data/third_party/boringssl-with-bazel/src/crypto/bio/fd.c +7 -50
  654. data/third_party/boringssl-with-bazel/src/crypto/bio/file.c +23 -22
  655. data/third_party/boringssl-with-bazel/src/crypto/bio/internal.h +16 -6
  656. data/third_party/boringssl-with-bazel/src/crypto/bio/pair.c +4 -2
  657. data/third_party/boringssl-with-bazel/src/crypto/bio/socket.c +4 -4
  658. data/third_party/boringssl-with-bazel/src/crypto/bio/socket_helper.c +11 -2
  659. data/third_party/boringssl-with-bazel/src/crypto/blake2/blake2.c +31 -22
  660. data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbs.c +1 -1
  661. data/third_party/boringssl-with-bazel/src/crypto/chacha/chacha.c +19 -1
  662. data/third_party/boringssl-with-bazel/src/crypto/chacha/internal.h +8 -1
  663. data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_tls.c +29 -26
  664. data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/internal.h +8 -0
  665. data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/tls_cbc.c +189 -13
  666. data/third_party/boringssl-with-bazel/src/crypto/conf/conf.c +31 -192
  667. data/third_party/boringssl-with-bazel/src/crypto/conf/conf_def.h +3 -7
  668. data/third_party/boringssl-with-bazel/src/crypto/conf/internal.h +8 -0
  669. data/third_party/boringssl-with-bazel/src/crypto/cpu_aarch64_apple.c +3 -2
  670. data/third_party/boringssl-with-bazel/src/crypto/cpu_aarch64_fuchsia.c +0 -1
  671. data/third_party/boringssl-with-bazel/src/crypto/cpu_aarch64_linux.c +0 -2
  672. data/third_party/boringssl-with-bazel/src/crypto/{cpu_aarch64_freebsd.c → cpu_aarch64_openbsd.c} +23 -24
  673. data/third_party/boringssl-with-bazel/src/crypto/cpu_aarch64_sysreg.c +93 -0
  674. data/third_party/boringssl-with-bazel/src/crypto/cpu_aarch64_win.c +1 -1
  675. data/third_party/boringssl-with-bazel/src/crypto/cpu_arm_freebsd.c +0 -1
  676. data/third_party/boringssl-with-bazel/src/crypto/cpu_arm_linux.c +0 -2
  677. data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519.c +55 -50
  678. data/third_party/boringssl-with-bazel/src/crypto/{cpu_arm.c → curve25519/curve25519_64_adx.c} +4 -24
  679. data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519_tables.h +2834 -7442
  680. data/third_party/boringssl-with-bazel/src/crypto/curve25519/internal.h +26 -8
  681. data/third_party/boringssl-with-bazel/src/crypto/dh_extra/dh_asn1.c +4 -0
  682. data/third_party/boringssl-with-bazel/src/crypto/dh_extra/params.c +5 -0
  683. data/third_party/boringssl-with-bazel/src/crypto/dsa/dsa.c +4 -0
  684. data/third_party/boringssl-with-bazel/src/crypto/dsa/internal.h +20 -0
  685. data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_asn1.c +110 -72
  686. data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_derive.c +4 -3
  687. data/third_party/boringssl-with-bazel/src/crypto/ec_extra/hash_to_curve.c +42 -34
  688. data/third_party/boringssl-with-bazel/src/crypto/ec_extra/internal.h +17 -11
  689. data/third_party/boringssl-with-bazel/src/crypto/ecdh_extra/ecdh_extra.c +1 -1
  690. data/third_party/boringssl-with-bazel/src/crypto/err/err.c +23 -21
  691. data/third_party/boringssl-with-bazel/src/crypto/evp/evp.c +35 -12
  692. data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec.c +2 -4
  693. data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec_asn1.c +3 -7
  694. data/third_party/boringssl-with-bazel/src/crypto/evp/p_rsa.c +1 -1
  695. data/third_party/boringssl-with-bazel/src/crypto/evp/pbkdf.c +3 -3
  696. data/third_party/boringssl-with-bazel/src/crypto/evp/print.c +7 -6
  697. data/third_party/boringssl-with-bazel/src/crypto/ex_data.c +34 -72
  698. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bcm.c +2 -1
  699. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/div.c +12 -5
  700. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/gcd.c +5 -6
  701. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/internal.h +12 -6
  702. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery.c +17 -18
  703. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery_inv.c +51 -15
  704. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/rsaz_exp.c +7 -7
  705. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/delocate.h +5 -6
  706. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/dh/check.c +37 -8
  707. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/dh/dh.c +41 -19
  708. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/dh/internal.h +9 -0
  709. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/builtin_curves.h +277 -0
  710. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec.c +204 -428
  711. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_key.c +4 -4
  712. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_montgomery.c +31 -64
  713. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/felem.c +17 -13
  714. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/internal.h +105 -143
  715. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/oct.c +19 -19
  716. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p224-64.c +16 -18
  717. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-nistz.c +27 -30
  718. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256.c +23 -26
  719. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256_table.h +1 -1
  720. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/scalar.c +24 -24
  721. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple.c +21 -37
  722. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple_mul.c +31 -31
  723. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/wnaf.c +16 -16
  724. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdh/ecdh.c +1 -1
  725. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdsa/ecdsa.c +11 -5
  726. data/third_party/boringssl-with-bazel/src/crypto/{hkdf → fipsmodule/hkdf}/hkdf.c +2 -2
  727. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/cbc.c +2 -10
  728. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/ctr.c +1 -4
  729. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/gcm.c +115 -133
  730. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/gcm_nohw.c +12 -14
  731. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/internal.h +57 -47
  732. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/ofb.c +1 -8
  733. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/polyval.c +27 -28
  734. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.c +40 -26
  735. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/internal.h +21 -7
  736. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/rand.c +38 -19
  737. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/urandom.c +2 -41
  738. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/internal.h +76 -16
  739. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/padding.c +5 -288
  740. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa.c +143 -83
  741. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa_impl.c +126 -233
  742. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/self_check.c +113 -24
  743. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/service_indicator/service_indicator.c +4 -7
  744. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/tls/internal.h +8 -0
  745. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/tls/kdf.c +33 -0
  746. data/third_party/boringssl-with-bazel/src/crypto/hpke/hpke.c +169 -6
  747. data/third_party/boringssl-with-bazel/src/crypto/internal.h +216 -87
  748. data/third_party/boringssl-with-bazel/src/crypto/kyber/kyber.c +23 -15
  749. data/third_party/boringssl-with-bazel/src/crypto/mem.c +7 -8
  750. data/third_party/boringssl-with-bazel/src/crypto/obj/obj.c +25 -46
  751. data/third_party/boringssl-with-bazel/src/crypto/obj/obj_dat.h +6 -13
  752. data/third_party/boringssl-with-bazel/src/crypto/pem/pem_lib.c +18 -14
  753. data/third_party/boringssl-with-bazel/src/crypto/pkcs8/internal.h +3 -3
  754. data/third_party/boringssl-with-bazel/src/crypto/pkcs8/p5_pbev2.c +3 -3
  755. data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8.c +7 -7
  756. data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8_x509.c +8 -5
  757. data/third_party/boringssl-with-bazel/src/crypto/pool/internal.h +1 -0
  758. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/deterministic.c +7 -6
  759. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/forkunsafe.c +6 -12
  760. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/getentropy.c +52 -0
  761. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/{fuchsia.c → ios.c} +8 -8
  762. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/trusty.c +38 -0
  763. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/windows.c +41 -19
  764. data/third_party/boringssl-with-bazel/src/crypto/{refcount_c11.c → refcount.c} +11 -17
  765. data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/internal.h +77 -0
  766. data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/rsa_crypt.c +568 -0
  767. data/third_party/boringssl-with-bazel/src/crypto/stack/stack.c +152 -72
  768. data/third_party/boringssl-with-bazel/src/crypto/thread_none.c +0 -8
  769. data/third_party/boringssl-with-bazel/src/crypto/thread_pthread.c +6 -35
  770. data/third_party/boringssl-with-bazel/src/crypto/thread_win.c +5 -26
  771. data/third_party/boringssl-with-bazel/src/crypto/trust_token/internal.h +62 -0
  772. data/third_party/boringssl-with-bazel/src/crypto/trust_token/pmbtoken.c +230 -60
  773. data/third_party/boringssl-with-bazel/src/crypto/trust_token/trust_token.c +35 -0
  774. data/third_party/boringssl-with-bazel/src/crypto/trust_token/voprf.c +580 -120
  775. data/third_party/boringssl-with-bazel/src/crypto/x509/a_sign.c +27 -18
  776. data/third_party/boringssl-with-bazel/src/crypto/x509/asn1_gen.c +1 -1
  777. data/third_party/boringssl-with-bazel/src/crypto/x509/by_dir.c +8 -19
  778. data/third_party/boringssl-with-bazel/src/crypto/x509/by_file.c +0 -3
  779. data/third_party/boringssl-with-bazel/src/crypto/x509/internal.h +1 -1
  780. data/third_party/boringssl-with-bazel/src/crypto/x509/name_print.c +17 -39
  781. data/third_party/boringssl-with-bazel/src/crypto/x509/t_x509.c +39 -48
  782. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_att.c +1 -141
  783. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_d2.c +1 -3
  784. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_lu.c +2 -4
  785. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_req.c +72 -23
  786. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_trs.c +1 -1
  787. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_v3.c +8 -12
  788. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vfy.c +19 -20
  789. data/third_party/boringssl-with-bazel/src/crypto/x509/x509name.c +22 -29
  790. data/third_party/boringssl-with-bazel/src/crypto/x509/x509spki.c +1 -1
  791. data/third_party/boringssl-with-bazel/src/crypto/x509/x_crl.c +5 -5
  792. data/third_party/boringssl-with-bazel/src/crypto/x509/x_name.c +1 -1
  793. data/third_party/boringssl-with-bazel/src/crypto/x509/x_pubkey.c +7 -7
  794. data/third_party/boringssl-with-bazel/src/crypto/x509/x_x509a.c +2 -2
  795. data/third_party/boringssl-with-bazel/src/crypto/x509v3/internal.h +1 -1
  796. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_alt.c +2 -3
  797. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_conf.c +33 -46
  798. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_cpols.c +1 -0
  799. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_info.c +3 -5
  800. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_lib.c +16 -49
  801. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_prn.c +14 -26
  802. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_purp.c +4 -6
  803. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_skey.c +17 -10
  804. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_utl.c +1 -1
  805. data/third_party/boringssl-with-bazel/src/include/openssl/aead.h +5 -7
  806. data/third_party/boringssl-with-bazel/src/include/openssl/arm_arch.h +4 -119
  807. data/third_party/boringssl-with-bazel/src/include/openssl/asm_base.h +207 -0
  808. data/third_party/boringssl-with-bazel/src/include/openssl/asn1.h +11 -4
  809. data/third_party/boringssl-with-bazel/src/include/openssl/base.h +37 -112
  810. data/third_party/boringssl-with-bazel/src/include/openssl/bio.h +11 -5
  811. data/third_party/boringssl-with-bazel/src/include/openssl/blake2.h +1 -4
  812. data/third_party/boringssl-with-bazel/src/include/openssl/bn.h +0 -2
  813. data/third_party/boringssl-with-bazel/src/include/openssl/chacha.h +6 -0
  814. data/third_party/boringssl-with-bazel/src/include/openssl/conf.h +5 -1
  815. data/third_party/boringssl-with-bazel/src/include/openssl/dh.h +4 -1
  816. data/third_party/boringssl-with-bazel/src/include/openssl/dsa.h +0 -21
  817. data/third_party/boringssl-with-bazel/src/include/openssl/ec.h +28 -11
  818. data/third_party/boringssl-with-bazel/src/include/openssl/ec_key.h +19 -6
  819. data/third_party/boringssl-with-bazel/src/include/openssl/evp.h +14 -10
  820. data/third_party/boringssl-with-bazel/src/include/openssl/hpke.h +34 -2
  821. data/third_party/boringssl-with-bazel/src/include/openssl/nid.h +2 -11
  822. data/third_party/boringssl-with-bazel/src/include/openssl/pem.h +0 -3
  823. data/third_party/boringssl-with-bazel/src/include/openssl/rand.h +13 -14
  824. data/third_party/boringssl-with-bazel/src/include/openssl/rsa.h +91 -62
  825. data/third_party/boringssl-with-bazel/src/include/openssl/span.h +26 -19
  826. data/third_party/boringssl-with-bazel/src/include/openssl/ssl.h +275 -96
  827. data/third_party/boringssl-with-bazel/src/include/openssl/stack.h +236 -213
  828. data/third_party/boringssl-with-bazel/src/include/openssl/target.h +201 -0
  829. data/third_party/boringssl-with-bazel/src/include/openssl/thread.h +1 -25
  830. data/third_party/boringssl-with-bazel/src/include/openssl/tls1.h +4 -0
  831. data/third_party/boringssl-with-bazel/src/include/openssl/trust_token.h +8 -0
  832. data/third_party/boringssl-with-bazel/src/include/openssl/x509.h +758 -603
  833. data/third_party/boringssl-with-bazel/src/include/openssl/x509v3.h +45 -12
  834. data/third_party/boringssl-with-bazel/src/ssl/encrypted_client_hello.cc +11 -6
  835. data/third_party/boringssl-with-bazel/src/ssl/extensions.cc +10 -68
  836. data/third_party/boringssl-with-bazel/src/ssl/handoff.cc +20 -20
  837. data/third_party/boringssl-with-bazel/src/ssl/handshake_client.cc +24 -16
  838. data/third_party/boringssl-with-bazel/src/ssl/handshake_server.cc +1 -1
  839. data/third_party/boringssl-with-bazel/src/ssl/internal.h +69 -29
  840. data/third_party/boringssl-with-bazel/src/ssl/s3_both.cc +37 -18
  841. data/third_party/boringssl-with-bazel/src/ssl/ssl_cipher.cc +209 -209
  842. data/third_party/boringssl-with-bazel/src/ssl/ssl_file.cc +4 -4
  843. data/third_party/boringssl-with-bazel/src/ssl/ssl_key_share.cc +46 -155
  844. data/third_party/boringssl-with-bazel/src/ssl/ssl_lib.cc +209 -33
  845. data/third_party/boringssl-with-bazel/src/ssl/ssl_privkey.cc +17 -4
  846. data/third_party/boringssl-with-bazel/src/ssl/ssl_versions.cc +27 -19
  847. data/third_party/boringssl-with-bazel/src/ssl/tls13_client.cc +2 -3
  848. data/third_party/boringssl-with-bazel/src/ssl/tls13_enc.cc +5 -21
  849. data/third_party/boringssl-with-bazel/src/ssl/tls13_server.cc +5 -2
  850. data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_64_adx.h +691 -0
  851. data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_64_msvc.h +1281 -0
  852. data/third_party/boringssl-with-bazel/src/third_party/fiat/p256_64_msvc.h +2002 -0
  853. data/third_party/cares/cares/include/ares.h +23 -1
  854. data/third_party/cares/cares/{src/lib → include}/ares_nameser.h +9 -7
  855. data/third_party/cares/cares/include/ares_rules.h +2 -2
  856. data/third_party/cares/cares/include/ares_version.h +3 -3
  857. data/third_party/cares/cares/src/lib/ares__addrinfo2hostent.c +266 -0
  858. data/third_party/cares/cares/src/lib/ares__addrinfo_localhost.c +240 -0
  859. data/third_party/cares/cares/src/lib/ares__parse_into_addrinfo.c +49 -80
  860. data/third_party/cares/cares/src/lib/ares__readaddrinfo.c +37 -43
  861. data/third_party/cares/cares/src/lib/ares__sortaddrinfo.c +12 -4
  862. data/third_party/cares/cares/src/lib/ares_data.c +16 -0
  863. data/third_party/cares/cares/src/lib/ares_data.h +7 -0
  864. data/third_party/cares/cares/src/lib/ares_destroy.c +8 -0
  865. data/third_party/cares/cares/src/lib/ares_expand_name.c +17 -6
  866. data/third_party/cares/cares/src/lib/ares_freeaddrinfo.c +1 -0
  867. data/third_party/cares/cares/src/lib/ares_getaddrinfo.c +156 -78
  868. data/third_party/cares/cares/src/lib/ares_gethostbyname.c +130 -326
  869. data/third_party/cares/cares/src/lib/ares_init.c +97 -485
  870. data/third_party/cares/cares/src/lib/ares_library_init.c +2 -89
  871. data/third_party/cares/cares/src/lib/ares_parse_a_reply.c +23 -142
  872. data/third_party/cares/cares/src/lib/ares_parse_aaaa_reply.c +22 -142
  873. data/third_party/cares/cares/src/lib/ares_parse_uri_reply.c +184 -0
  874. data/third_party/cares/cares/src/lib/ares_private.h +30 -16
  875. data/third_party/cares/cares/src/lib/ares_process.c +55 -16
  876. data/third_party/cares/cares/src/lib/ares_query.c +1 -35
  877. data/third_party/cares/cares/src/lib/ares_rand.c +279 -0
  878. data/third_party/cares/cares/src/lib/ares_send.c +5 -7
  879. data/third_party/cares/cares/src/lib/ares_strdup.c +12 -19
  880. data/third_party/cares/cares/src/lib/ares_strsplit.c +44 -128
  881. data/third_party/cares/cares/src/lib/ares_strsplit.h +9 -10
  882. data/third_party/cares/cares/src/lib/inet_net_pton.c +78 -116
  883. data/third_party/cares/cares/src/tools/ares_getopt.h +53 -0
  884. data/third_party/upb/upb/collections/map.c +3 -3
  885. metadata +106 -45
  886. data/src/core/ext/filters/client_channel/health/health_check_client.cc +0 -175
  887. data/src/core/ext/filters/client_channel/health/health_check_client.h +0 -43
  888. data/src/core/ext/filters/client_channel/lb_policy/xds/xds_attributes.cc +0 -42
  889. data/src/core/ext/filters/client_channel/lb_policy/xds/xds_attributes.h +0 -64
  890. data/src/core/ext/transport/chttp2/transport/stream_map.cc +0 -177
  891. data/src/core/ext/transport/chttp2/transport/stream_map.h +0 -68
  892. data/src/core/lib/promise/detail/basic_join.h +0 -197
  893. data/src/core/lib/promise/detail/switch.h +0 -1455
  894. data/src/core/lib/promise/try_join.h +0 -82
  895. data/third_party/abseil-cpp/absl/synchronization/internal/waiter.cc +0 -403
  896. data/third_party/boringssl-with-bazel/src/crypto/refcount_lock.c +0 -52
  897. data/third_party/cares/cares/src/lib/ares_library_init.h +0 -43
  898. data/third_party/re2/util/benchmark.h +0 -156
  899. data/third_party/re2/util/flags.h +0 -26
  900. data/third_party/re2/util/malloc_counter.h +0 -19
  901. data/third_party/re2/util/pcre.cc +0 -1025
  902. data/third_party/re2/util/pcre.h +0 -681
  903. data/third_party/re2/util/test.h +0 -50
  904. data/third_party/upb/upb/mini_table.h +0 -36
  905. data/third_party/zlib/gzclose.c +0 -25
  906. data/third_party/zlib/gzlib.c +0 -639
  907. data/third_party/zlib/gzread.c +0 -650
  908. data/third_party/zlib/gzwrite.c +0 -677
@@ -104,9 +104,13 @@ typedef void *(*X509V3_EXT_R2I)(const X509V3_EXT_METHOD *method,
104
104
  struct v3_ext_method {
105
105
  int ext_nid;
106
106
  int ext_flags;
107
- // If this is set the following four fields are ignored
107
+
108
+ // it determines how values of this extension are allocated, released, parsed,
109
+ // and marshalled. This must be non-NULL.
108
110
  ASN1_ITEM_EXP *it;
109
- // Old style ASN1 calls
111
+
112
+ // The following functions are ignored in favor of |it|. They are retained in
113
+ // the struct only for source compatibility with existing struct definitions.
110
114
  X509V3_EXT_NEW ext_new;
111
115
  X509V3_EXT_FREE ext_free;
112
116
  X509V3_EXT_D2I d2i;
@@ -130,7 +134,6 @@ struct v3_ext_method {
130
134
  DEFINE_STACK_OF(X509V3_EXT_METHOD)
131
135
 
132
136
  // ext_flags values
133
- #define X509V3_EXT_DYNAMIC 0x1
134
137
  #define X509V3_EXT_CTX_DEP 0x2
135
138
  #define X509V3_EXT_MULTILINE 0x4
136
139
 
@@ -546,9 +549,11 @@ OPENSSL_EXPORT void X509V3_conf_free(CONF_VALUE *val);
546
549
  //
547
550
  // These functions are not safe to use with untrusted inputs. The string formats
548
551
  // may implicitly reference context information and, in OpenSSL (though not
549
- // BoringSSL), one even allows reading arbitrary files. They additionally see
550
- // much less testing and review than most of the library and may have bugs
551
- // including memory leaks or crashes.
552
+ // BoringSSL), one even allows reading arbitrary files. Many formats can also
553
+ // produce far larger outputs than their inputs, so untrusted inputs may lead to
554
+ // denial-of-service attacks. Finally, the parsers see much less testing and
555
+ // review than most of the library and may have bugs including memory leaks or
556
+ // crashes.
552
557
 
553
558
  // v3_ext_ctx, aka |X509V3_CTX|, contains additional context information for
554
559
  // constructing extensions. Some string formats reference additional values in
@@ -663,10 +668,37 @@ OPENSSL_EXPORT ASN1_INTEGER *s2i_ASN1_INTEGER(const X509V3_EXT_METHOD *meth,
663
668
  const char *value);
664
669
  OPENSSL_EXPORT char *i2s_ASN1_ENUMERATED(const X509V3_EXT_METHOD *meth,
665
670
  const ASN1_ENUMERATED *aint);
666
- OPENSSL_EXPORT int X509V3_EXT_add(X509V3_EXT_METHOD *ext);
667
- OPENSSL_EXPORT int X509V3_EXT_add_list(X509V3_EXT_METHOD *extlist);
668
- OPENSSL_EXPORT int X509V3_EXT_add_alias(int nid_to, int nid_from);
669
- OPENSSL_EXPORT void X509V3_EXT_cleanup(void);
671
+
672
+ // X509V3_EXT_add registers |ext| as a custom extension for the extension type
673
+ // |ext->ext_nid|. |ext| must be valid for the remainder of the address space's
674
+ // lifetime. It returns one on success and zero on error.
675
+ //
676
+ // WARNING: This function modifies global state. If other code in the same
677
+ // address space also registers an extension with type |ext->ext_nid|, the two
678
+ // registrations will conflict. Which registration takes effect is undefined. If
679
+ // the two registrations use incompatible in-memory representations, code
680
+ // expecting the other registration will then cast a type to the wrong type,
681
+ // resulting in a potentially exploitable memory error. This conflict can also
682
+ // occur if BoringSSL later adds support for |ext->ext_nid|, with a different
683
+ // in-memory representation than the one expected by |ext|.
684
+ //
685
+ // This function, additionally, is not thread-safe and cannot be called
686
+ // concurrently with any other BoringSSL function.
687
+ //
688
+ // As a result, it is impossible to safely use this function. Registering a
689
+ // custom extension has no impact on certificate verification so, instead,
690
+ // callers should simply handle the custom extension with the byte-based
691
+ // |X509_EXTENSION| APIs directly. Registering |ext| with the library has little
692
+ // practical value.
693
+ OPENSSL_EXPORT OPENSSL_DEPRECATED int X509V3_EXT_add(X509V3_EXT_METHOD *ext);
694
+
695
+ // X509V3_EXT_add_alias registers a custom extension with NID |nid_to|. The
696
+ // corresponding ASN.1 type is copied from |nid_from|. It returns one on success
697
+ // and zero on error.
698
+ //
699
+ // WARNING: Do not use this function. See |X509V3_EXT_add|.
700
+ OPENSSL_EXPORT OPENSSL_DEPRECATED int X509V3_EXT_add_alias(int nid_to,
701
+ int nid_from);
670
702
 
671
703
  OPENSSL_EXPORT const X509V3_EXT_METHOD *X509V3_EXT_get(
672
704
  const X509_EXTENSION *ext);
@@ -874,12 +906,13 @@ OPENSSL_EXPORT const ASN1_INTEGER *X509_get0_authority_serial(X509 *x509);
874
906
 
875
907
  OPENSSL_EXPORT int X509_PURPOSE_get_count(void);
876
908
  OPENSSL_EXPORT X509_PURPOSE *X509_PURPOSE_get0(int idx);
877
- OPENSSL_EXPORT int X509_PURPOSE_get_by_sname(char *sname);
909
+ OPENSSL_EXPORT int X509_PURPOSE_get_by_sname(const char *sname);
878
910
  OPENSSL_EXPORT int X509_PURPOSE_get_by_id(int id);
879
911
  OPENSSL_EXPORT int X509_PURPOSE_add(int id, int trust, int flags,
880
912
  int (*ck)(const X509_PURPOSE *,
881
913
  const X509 *, int),
882
- char *name, char *sname, void *arg);
914
+ const char *name, const char *sname,
915
+ void *arg);
883
916
  OPENSSL_EXPORT char *X509_PURPOSE_get0_name(const X509_PURPOSE *xp);
884
917
  OPENSSL_EXPORT char *X509_PURPOSE_get0_sname(const X509_PURPOSE *xp);
885
918
  OPENSSL_EXPORT int X509_PURPOSE_get_trust(const X509_PURPOSE *xp);
@@ -601,8 +601,8 @@ bool ssl_is_valid_ech_config_list(Span<const uint8_t> ech_config_list) {
601
601
 
602
602
  static bool select_ech_cipher_suite(const EVP_HPKE_KDF **out_kdf,
603
603
  const EVP_HPKE_AEAD **out_aead,
604
- Span<const uint8_t> cipher_suites) {
605
- const bool has_aes_hardware = EVP_has_aes_hardware();
604
+ Span<const uint8_t> cipher_suites,
605
+ const bool has_aes_hardware) {
606
606
  const EVP_HPKE_AEAD *aead = nullptr;
607
607
  CBS cbs = cipher_suites;
608
608
  while (CBS_len(&cbs) != 0) {
@@ -660,7 +660,10 @@ bool ssl_select_ech_config(SSL_HANDSHAKE *hs, Span<uint8_t> out_enc,
660
660
  const EVP_HPKE_AEAD *aead;
661
661
  if (supported && //
662
662
  ech_config.kem_id == EVP_HPKE_DHKEM_X25519_HKDF_SHA256 &&
663
- select_ech_cipher_suite(&kdf, &aead, ech_config.cipher_suites)) {
663
+ select_ech_cipher_suite(&kdf, &aead, ech_config.cipher_suites,
664
+ hs->ssl->config->aes_hw_override
665
+ ? hs->ssl->config->aes_hw_override_value
666
+ : EVP_has_aes_hardware())) {
664
667
  ScopedCBB info;
665
668
  static const uint8_t kInfoLabel[] = "tls ech"; // includes trailing NUL
666
669
  if (!CBB_init(info.get(), sizeof(kInfoLabel) + ech_config.raw.size()) ||
@@ -714,9 +717,11 @@ static bool setup_ech_grease(SSL_HANDSHAKE *hs) {
714
717
  }
715
718
 
716
719
  const uint16_t kdf_id = EVP_HPKE_HKDF_SHA256;
717
- const EVP_HPKE_AEAD *aead = EVP_has_aes_hardware()
718
- ? EVP_hpke_aes_128_gcm()
719
- : EVP_hpke_chacha20_poly1305();
720
+ const bool has_aes_hw = hs->ssl->config->aes_hw_override
721
+ ? hs->ssl->config->aes_hw_override_value
722
+ : EVP_has_aes_hardware();
723
+ const EVP_HPKE_AEAD *aead =
724
+ has_aes_hw ? EVP_hpke_aes_128_gcm() : EVP_hpke_chacha20_poly1305();
720
725
  static_assert(ssl_grease_ech_config_id < sizeof(hs->grease_seed),
721
726
  "hs->grease_seed is too small");
722
727
  uint8_t config_id = hs->grease_seed[ssl_grease_ech_config_id];
@@ -206,9 +206,7 @@ static bool tls1_check_duplicate_extensions(const CBS *cbs) {
206
206
 
207
207
  static bool is_post_quantum_group(uint16_t id) {
208
208
  switch (id) {
209
- case SSL_CURVE_CECPQ2:
210
- case SSL_CURVE_X25519KYBER768:
211
- case SSL_CURVE_P256KYBER768:
209
+ case SSL_GROUP_X25519_KYBER768_DRAFT00:
212
210
  return true;
213
211
  default:
214
212
  return false;
@@ -309,9 +307,9 @@ bool ssl_client_hello_get_extension(const SSL_CLIENT_HELLO *client_hello,
309
307
  }
310
308
 
311
309
  static const uint16_t kDefaultGroups[] = {
312
- SSL_CURVE_X25519,
313
- SSL_CURVE_SECP256R1,
314
- SSL_CURVE_SECP384R1,
310
+ SSL_GROUP_X25519,
311
+ SSL_GROUP_SECP256R1,
312
+ SSL_GROUP_SECP384R1,
315
313
  };
316
314
 
317
315
  Span<const uint16_t> tls1_get_grouplist(const SSL_HANDSHAKE *hs) {
@@ -360,61 +358,10 @@ bool tls1_get_shared_group(SSL_HANDSHAKE *hs, uint16_t *out_group_id) {
360
358
  return false;
361
359
  }
362
360
 
363
- bool tls1_set_curves(Array<uint16_t> *out_group_ids, Span<const int> curves) {
364
- Array<uint16_t> group_ids;
365
- if (!group_ids.Init(curves.size())) {
366
- return false;
367
- }
368
-
369
- for (size_t i = 0; i < curves.size(); i++) {
370
- if (!ssl_nid_to_group_id(&group_ids[i], curves[i])) {
371
- return false;
372
- }
373
- }
374
-
375
- *out_group_ids = std::move(group_ids);
376
- return true;
377
- }
378
-
379
- bool tls1_set_curves_list(Array<uint16_t> *out_group_ids, const char *curves) {
380
- // Count the number of curves in the list.
381
- size_t count = 0;
382
- const char *ptr = curves, *col;
383
- do {
384
- col = strchr(ptr, ':');
385
- count++;
386
- if (col) {
387
- ptr = col + 1;
388
- }
389
- } while (col);
390
-
391
- Array<uint16_t> group_ids;
392
- if (!group_ids.Init(count)) {
393
- return false;
394
- }
395
-
396
- size_t i = 0;
397
- ptr = curves;
398
- do {
399
- col = strchr(ptr, ':');
400
- if (!ssl_name_to_group_id(&group_ids[i++], ptr,
401
- col ? (size_t)(col - ptr) : strlen(ptr))) {
402
- return false;
403
- }
404
- if (col) {
405
- ptr = col + 1;
406
- }
407
- } while (col);
408
-
409
- assert(i == count);
410
- *out_group_ids = std::move(group_ids);
411
- return true;
412
- }
413
-
414
361
  bool tls1_check_group_id(const SSL_HANDSHAKE *hs, uint16_t group_id) {
415
362
  if (is_post_quantum_group(group_id) &&
416
363
  ssl_protocol_version(hs->ssl) < TLS1_3_VERSION) {
417
- // CECPQ2(b) requires TLS 1.3.
364
+ // Post-quantum "groups" require TLS 1.3.
418
365
  return false;
419
366
  }
420
367
 
@@ -4155,12 +4102,7 @@ bool tls1_verify_channel_id(SSL_HANDSHAKE *hs, const SSLMessage &msg) {
4155
4102
  return false;
4156
4103
  }
4157
4104
 
4158
- UniquePtr<EC_GROUP> p256(EC_GROUP_new_by_curve_name(NID_X9_62_prime256v1));
4159
- if (!p256) {
4160
- OPENSSL_PUT_ERROR(SSL, SSL_R_NO_P256_SUPPORT);
4161
- return false;
4162
- }
4163
-
4105
+ const EC_GROUP *p256 = EC_group_p256();
4164
4106
  UniquePtr<ECDSA_SIG> sig(ECDSA_SIG_new());
4165
4107
  UniquePtr<BIGNUM> x(BN_new()), y(BN_new());
4166
4108
  if (!sig || !x || !y) {
@@ -4176,11 +4118,11 @@ bool tls1_verify_channel_id(SSL_HANDSHAKE *hs, const SSLMessage &msg) {
4176
4118
  }
4177
4119
 
4178
4120
  UniquePtr<EC_KEY> key(EC_KEY_new());
4179
- UniquePtr<EC_POINT> point(EC_POINT_new(p256.get()));
4121
+ UniquePtr<EC_POINT> point(EC_POINT_new(p256));
4180
4122
  if (!key || !point ||
4181
- !EC_POINT_set_affine_coordinates_GFp(p256.get(), point.get(), x.get(),
4182
- y.get(), nullptr) ||
4183
- !EC_KEY_set_group(key.get(), p256.get()) ||
4123
+ !EC_POINT_set_affine_coordinates_GFp(p256, point.get(), x.get(), y.get(),
4124
+ nullptr) ||
4125
+ !EC_KEY_set_group(key.get(), p256) ||
4184
4126
  !EC_KEY_set_public_key(key.get(), point.get())) {
4185
4127
  return false;
4186
4128
  }
@@ -52,12 +52,12 @@ static bool serialize_features(CBB *out) {
52
52
  return false;
53
53
  }
54
54
  }
55
- CBB curves;
56
- if (!CBB_add_asn1(out, &curves, CBS_ASN1_OCTETSTRING)) {
55
+ CBB groups;
56
+ if (!CBB_add_asn1(out, &groups, CBS_ASN1_OCTETSTRING)) {
57
57
  return false;
58
58
  }
59
59
  for (const NamedGroup& g : NamedGroups()) {
60
- if (!CBB_add_u16(&curves, g.group_id)) {
60
+ if (!CBB_add_u16(&groups, g.group_id)) {
61
61
  return false;
62
62
  }
63
63
  }
@@ -169,46 +169,46 @@ static bool apply_remote_features(SSL *ssl, CBS *in) {
169
169
  return false;
170
170
  }
171
171
 
172
- CBS curves;
173
- if (!CBS_get_asn1(in, &curves, CBS_ASN1_OCTETSTRING)) {
172
+ CBS groups;
173
+ if (!CBS_get_asn1(in, &groups, CBS_ASN1_OCTETSTRING)) {
174
174
  return false;
175
175
  }
176
- Array<uint16_t> supported_curves;
177
- if (!supported_curves.Init(CBS_len(&curves) / 2)) {
176
+ Array<uint16_t> supported_groups;
177
+ if (!supported_groups.Init(CBS_len(&groups) / 2)) {
178
178
  return false;
179
179
  }
180
180
  size_t idx = 0;
181
- while (CBS_len(&curves)) {
182
- uint16_t curve;
183
- if (!CBS_get_u16(&curves, &curve)) {
181
+ while (CBS_len(&groups)) {
182
+ uint16_t group;
183
+ if (!CBS_get_u16(&groups, &group)) {
184
184
  return false;
185
185
  }
186
- supported_curves[idx++] = curve;
186
+ supported_groups[idx++] = group;
187
187
  }
188
- Span<const uint16_t> configured_curves =
188
+ Span<const uint16_t> configured_groups =
189
189
  tls1_get_grouplist(ssl->s3->hs.get());
190
- Array<uint16_t> new_configured_curves;
191
- if (!new_configured_curves.Init(configured_curves.size())) {
190
+ Array<uint16_t> new_configured_groups;
191
+ if (!new_configured_groups.Init(configured_groups.size())) {
192
192
  return false;
193
193
  }
194
194
  idx = 0;
195
- for (uint16_t configured_curve : configured_curves) {
195
+ for (uint16_t configured_group : configured_groups) {
196
196
  bool ok = false;
197
- for (uint16_t supported_curve : supported_curves) {
198
- if (supported_curve == configured_curve) {
197
+ for (uint16_t supported_group : supported_groups) {
198
+ if (supported_group == configured_group) {
199
199
  ok = true;
200
200
  break;
201
201
  }
202
202
  }
203
203
  if (ok) {
204
- new_configured_curves[idx++] = configured_curve;
204
+ new_configured_groups[idx++] = configured_group;
205
205
  }
206
206
  }
207
207
  if (idx == 0) {
208
208
  return false;
209
209
  }
210
- new_configured_curves.Shrink(idx);
211
- ssl->config->supported_group_list = std::move(new_configured_curves);
210
+ new_configured_groups.Shrink(idx);
211
+ ssl->config->supported_group_list = std::move(new_configured_groups);
212
212
 
213
213
  CBS alps;
214
214
  CBS_init(&alps, nullptr, 0);
@@ -215,6 +215,14 @@ static void ssl_get_client_disabled(const SSL_HANDSHAKE *hs,
215
215
  }
216
216
  }
217
217
 
218
+ static bool ssl_add_tls13_cipher(CBB *cbb, uint16_t cipher_id,
219
+ ssl_compliance_policy_t policy) {
220
+ if (ssl_tls13_cipher_meets_policy(cipher_id, policy)) {
221
+ return CBB_add_u16(cbb, cipher_id);
222
+ }
223
+ return true;
224
+ }
225
+
218
226
  static bool ssl_write_client_cipher_list(const SSL_HANDSHAKE *hs, CBB *out,
219
227
  ssl_client_hello_type_t type) {
220
228
  const SSL *const ssl = hs->ssl;
@@ -235,22 +243,22 @@ static bool ssl_write_client_cipher_list(const SSL_HANDSHAKE *hs, CBB *out,
235
243
  // Add TLS 1.3 ciphers. Order ChaCha20-Poly1305 relative to AES-GCM based on
236
244
  // hardware support.
237
245
  if (hs->max_version >= TLS1_3_VERSION) {
238
- const bool include_chacha20 = ssl_tls13_cipher_meets_policy(
239
- TLS1_3_CK_CHACHA20_POLY1305_SHA256 & 0xffff,
240
- ssl->config->only_fips_cipher_suites_in_tls13);
241
-
242
- if (!EVP_has_aes_hardware() && //
243
- include_chacha20 && //
244
- !CBB_add_u16(&child, TLS1_3_CK_CHACHA20_POLY1305_SHA256 & 0xffff)) {
245
- return false;
246
- }
247
- if (!CBB_add_u16(&child, TLS1_3_CK_AES_128_GCM_SHA256 & 0xffff) ||
248
- !CBB_add_u16(&child, TLS1_3_CK_AES_256_GCM_SHA384 & 0xffff)) {
249
- return false;
250
- }
251
- if (EVP_has_aes_hardware() && //
252
- include_chacha20 && //
253
- !CBB_add_u16(&child, TLS1_3_CK_CHACHA20_POLY1305_SHA256 & 0xffff)) {
246
+ const bool has_aes_hw = ssl->config->aes_hw_override
247
+ ? ssl->config->aes_hw_override_value
248
+ : EVP_has_aes_hardware();
249
+
250
+ if ((!has_aes_hw && //
251
+ !ssl_add_tls13_cipher(&child,
252
+ TLS1_3_CK_CHACHA20_POLY1305_SHA256 & 0xffff,
253
+ ssl->config->tls13_cipher_policy)) ||
254
+ !ssl_add_tls13_cipher(&child, TLS1_3_CK_AES_128_GCM_SHA256 & 0xffff,
255
+ ssl->config->tls13_cipher_policy) ||
256
+ !ssl_add_tls13_cipher(&child, TLS1_3_CK_AES_256_GCM_SHA384 & 0xffff,
257
+ ssl->config->tls13_cipher_policy) ||
258
+ (has_aes_hw && //
259
+ !ssl_add_tls13_cipher(&child,
260
+ TLS1_3_CK_CHACHA20_POLY1305_SHA256 & 0xffff,
261
+ ssl->config->tls13_cipher_policy))) {
254
262
  return false;
255
263
  }
256
264
  }
@@ -483,7 +483,7 @@ static bool is_probably_jdk11_with_tls13(const SSL_CLIENT_HELLO *client_hello) {
483
483
  while (CBS_len(&supported_groups) > 0) {
484
484
  uint16_t group;
485
485
  if (!CBS_get_u16(&supported_groups, &group) ||
486
- group == SSL_CURVE_X25519) {
486
+ group == SSL_GROUP_X25519) {
487
487
  return false;
488
488
  }
489
489
  }
@@ -451,6 +451,27 @@ class GrowableArray {
451
451
  // CBBFinishArray behaves like |CBB_finish| but stores the result in an Array.
452
452
  OPENSSL_EXPORT bool CBBFinishArray(CBB *cbb, Array<uint8_t> *out);
453
453
 
454
+ // GetAllNames helps to implement |*_get_all_*_names| style functions. It
455
+ // writes at most |max_out| string pointers to |out| and returns the number that
456
+ // it would have liked to have written. The strings written consist of
457
+ // |fixed_names_len| strings from |fixed_names| followed by |objects_len|
458
+ // strings taken by projecting |objects| through |name|.
459
+ template <typename T, typename Name>
460
+ inline size_t GetAllNames(const char **out, size_t max_out,
461
+ Span<const char *const> fixed_names, Name(T::*name),
462
+ Span<const T> objects) {
463
+ auto span = bssl::MakeSpan(out, max_out);
464
+ for (size_t i = 0; !span.empty() && i < fixed_names.size(); i++) {
465
+ span[0] = fixed_names[i];
466
+ span = span.subspan(1);
467
+ }
468
+ span = span.subspan(0, objects.size());
469
+ for (size_t i = 0; i < span.size(); i++) {
470
+ span[i] = objects[i].*name;
471
+ }
472
+ return fixed_names.size() + objects.size();
473
+ }
474
+
454
475
 
455
476
  // Protocol versions.
456
477
  //
@@ -547,15 +568,15 @@ BSSL_NAMESPACE_BEGIN
547
568
  #define SSL_AES256 0x00000004u
548
569
  #define SSL_AES128GCM 0x00000008u
549
570
  #define SSL_AES256GCM 0x00000010u
550
- #define SSL_eNULL 0x00000020u
551
- #define SSL_CHACHA20POLY1305 0x00000040u
571
+ #define SSL_CHACHA20POLY1305 0x00000020u
552
572
 
553
573
  #define SSL_AES (SSL_AES128 | SSL_AES256 | SSL_AES128GCM | SSL_AES256GCM)
554
574
 
555
575
  // Bits for |algorithm_mac| (symmetric authentication).
556
576
  #define SSL_SHA1 0x00000001u
577
+ #define SSL_SHA256 0x00000002u
557
578
  // SSL_AEAD is set for all AEADs.
558
- #define SSL_AEAD 0x00000002u
579
+ #define SSL_AEAD 0x00000004u
559
580
 
560
581
  // Bits for |algorithm_prf| (handshake digest).
561
582
  #define SSL_HANDSHAKE_MAC_DEFAULT 0x1
@@ -633,9 +654,11 @@ const EVP_MD *ssl_get_handshake_digest(uint16_t version,
633
654
  // newly-allocated |SSLCipherPreferenceList| containing the result. It returns
634
655
  // true on success and false on failure. If |strict| is true, nonsense will be
635
656
  // rejected. If false, nonsense will be silently ignored. An empty result is
636
- // considered an error regardless of |strict|.
657
+ // considered an error regardless of |strict|. |has_aes_hw| indicates if the
658
+ // list should be ordered based on having support for AES in hardware or not.
637
659
  bool ssl_create_cipher_list(UniquePtr<SSLCipherPreferenceList> *out_cipher_list,
638
- const char *rule_str, bool strict);
660
+ const bool has_aes_hw, const char *rule_str,
661
+ bool strict);
639
662
 
640
663
  // ssl_cipher_auth_mask_for_key returns the mask of cipher |algorithm_auth|
641
664
  // values suitable for use with |key| in TLS 1.2 and below.
@@ -659,14 +682,20 @@ size_t ssl_cipher_get_record_split_len(const SSL_CIPHER *cipher);
659
682
 
660
683
  // ssl_choose_tls13_cipher returns an |SSL_CIPHER| corresponding with the best
661
684
  // available from |cipher_suites| compatible with |version|, |group_id|, and
662
- // |only_fips|. It returns NULL if there isn't a compatible cipher.
663
- const SSL_CIPHER *ssl_choose_tls13_cipher(CBS cipher_suites, uint16_t version,
664
- uint16_t group_id, bool only_fips);
685
+ // |policy|. It returns NULL if there isn't a compatible cipher. |has_aes_hw|
686
+ // indicates if the choice should be made as if support for AES in hardware
687
+ // is available.
688
+ const SSL_CIPHER *ssl_choose_tls13_cipher(CBS cipher_suites, bool has_aes_hw,
689
+ uint16_t version, uint16_t group_id,
690
+ enum ssl_compliance_policy_t policy);
665
691
 
666
692
  // ssl_tls13_cipher_meets_policy returns true if |cipher_id| is acceptable given
667
- // |only_fips|. (For now there's only a single policy and so the policy argument
668
- // is just a bool.)
669
- bool ssl_tls13_cipher_meets_policy(uint16_t cipher_id, bool only_fips);
693
+ // |policy|.
694
+ bool ssl_tls13_cipher_meets_policy(uint16_t cipher_id,
695
+ enum ssl_compliance_policy_t policy);
696
+
697
+ // ssl_cipher_is_deprecated returns true if |cipher| is deprecated.
698
+ OPENSSL_EXPORT bool ssl_cipher_is_deprecated(const SSL_CIPHER *cipher);
670
699
 
671
700
 
672
701
  // Transcript layer.
@@ -1103,7 +1132,7 @@ class SSLKeyShare {
1103
1132
  struct NamedGroup {
1104
1133
  int nid;
1105
1134
  uint16_t group_id;
1106
- const char name[12], alias[12];
1135
+ const char name[32], alias[32];
1107
1136
  };
1108
1137
 
1109
1138
  // NamedGroups returns all supported groups.
@@ -1119,6 +1148,10 @@ bool ssl_nid_to_group_id(uint16_t *out_group_id, int nid);
1119
1148
  // true. Otherwise, it returns false.
1120
1149
  bool ssl_name_to_group_id(uint16_t *out_group_id, const char *name, size_t len);
1121
1150
 
1151
+ // ssl_group_id_to_nid returns the NID corresponding to |group_id| or
1152
+ // |NID_undef| if unknown.
1153
+ int ssl_group_id_to_nid(uint16_t group_id);
1154
+
1122
1155
 
1123
1156
  // Handshake messages.
1124
1157
 
@@ -3059,6 +3092,10 @@ struct SSL_CONFIG {
3059
3092
  // structure for the client to use when negotiating ECH.
3060
3093
  Array<uint8_t> client_ech_config_list;
3061
3094
 
3095
+ // tls13_cipher_policy limits the set of ciphers that can be selected when
3096
+ // negotiating a TLS 1.3 connection.
3097
+ enum ssl_compliance_policy_t tls13_cipher_policy = ssl_compliance_policy_none;
3098
+
3062
3099
  // verify_mode is a bitmask of |SSL_VERIFY_*| values.
3063
3100
  uint8_t verify_mode = SSL_VERIFY_NONE;
3064
3101
 
@@ -3108,9 +3145,14 @@ struct SSL_CONFIG {
3108
3145
  // permute_extensions is whether to permute extensions when sending messages.
3109
3146
  bool permute_extensions : 1;
3110
3147
 
3111
- // only_fips_cipher_suites_in_tls13 constrains the selection of cipher suites
3112
- // in TLS 1.3 such that only FIPS approved ones will be selected.
3113
- bool only_fips_cipher_suites_in_tls13 : 1;
3148
+ // aes_hw_override if set indicates we should override checking for aes
3149
+ // hardware support, and use the value in aes_hw_override_value instead.
3150
+ bool aes_hw_override : 1;
3151
+
3152
+ // aes_hw_override_value is used for testing to indicate the support or lack
3153
+ // of support for AES hw. The value is only considered if |aes_hw_override| is
3154
+ // true.
3155
+ bool aes_hw_override_value : 1;
3114
3156
  };
3115
3157
 
3116
3158
  // From RFC 8446, used in determining PSK modes.
@@ -3315,17 +3357,6 @@ bool tls1_check_group_id(const SSL_HANDSHAKE *ssl, uint16_t group_id);
3315
3357
  // found, it returns false.
3316
3358
  bool tls1_get_shared_group(SSL_HANDSHAKE *hs, uint16_t *out_group_id);
3317
3359
 
3318
- // tls1_set_curves converts the array of NIDs in |curves| into a newly allocated
3319
- // array of TLS group IDs. On success, the function returns true and writes the
3320
- // array to |*out_group_ids|. Otherwise, it returns false.
3321
- bool tls1_set_curves(Array<uint16_t> *out_group_ids, Span<const int> curves);
3322
-
3323
- // tls1_set_curves_list converts the string of curves pointed to by |curves|
3324
- // into a newly allocated array of TLS group IDs. On success, the function
3325
- // returns true and writes the array to |*out_group_ids|. Otherwise, it returns
3326
- // false.
3327
- bool tls1_set_curves_list(Array<uint16_t> *out_group_ids, const char *curves);
3328
-
3329
3360
  // ssl_add_clienthello_tlsext writes ClientHello extensions to |out| for |type|.
3330
3361
  // It returns true on success and false on failure. The |header_len| argument is
3331
3362
  // the length of the ClientHello written so far and is used to compute the
@@ -3671,6 +3702,10 @@ struct ssl_ctx_st {
3671
3702
  int (*legacy_ocsp_callback)(SSL *ssl, void *arg) = nullptr;
3672
3703
  void *legacy_ocsp_callback_arg = nullptr;
3673
3704
 
3705
+ // tls13_cipher_policy limits the set of ciphers that can be selected when
3706
+ // negotiating a TLS 1.3 connection.
3707
+ enum ssl_compliance_policy_t tls13_cipher_policy = ssl_compliance_policy_none;
3708
+
3674
3709
  // verify_sigalgs, if not empty, is the set of signature algorithms
3675
3710
  // accepted from the peer in decreasing order of preference.
3676
3711
  bssl::Array<uint16_t> verify_sigalgs;
@@ -3718,9 +3753,14 @@ struct ssl_ctx_st {
3718
3753
  // If enable_early_data is true, early data can be sent and accepted.
3719
3754
  bool enable_early_data : 1;
3720
3755
 
3721
- // only_fips_cipher_suites_in_tls13 constrains the selection of cipher suites
3722
- // in TLS 1.3 such that only FIPS approved ones will be selected.
3723
- bool only_fips_cipher_suites_in_tls13 : 1;
3756
+ // aes_hw_override if set indicates we should override checking for AES
3757
+ // hardware support, and use the value in aes_hw_override_value instead.
3758
+ bool aes_hw_override : 1;
3759
+
3760
+ // aes_hw_override_value is used for testing to indicate the support or lack
3761
+ // of support for AES hardware. The value is only considered if
3762
+ // |aes_hw_override| is true.
3763
+ bool aes_hw_override_value : 1;
3724
3764
 
3725
3765
  private:
3726
3766
  ~ssl_ctx_st();
@@ -663,7 +663,7 @@ void tls_next_message(SSL *ssl) {
663
663
  // the client.
664
664
  class CipherScorer {
665
665
  public:
666
- CipherScorer() : aes_is_fine_(EVP_has_aes_hardware()) {}
666
+ CipherScorer(bool has_aes_hw) : aes_is_fine_(has_aes_hw) {}
667
667
 
668
668
  typedef std::tuple<bool, bool> Score;
669
669
 
@@ -685,31 +685,50 @@ class CipherScorer {
685
685
  const bool aes_is_fine_;
686
686
  };
687
687
 
688
- bool ssl_tls13_cipher_meets_policy(uint16_t cipher_id, bool only_fips) {
689
- if (!only_fips) {
690
- return true;
691
- }
692
-
693
- switch (cipher_id) {
694
- case TLS1_3_CK_AES_128_GCM_SHA256 & 0xffff:
695
- case TLS1_3_CK_AES_256_GCM_SHA384 & 0xffff:
688
+ bool ssl_tls13_cipher_meets_policy(uint16_t cipher_id,
689
+ enum ssl_compliance_policy_t policy) {
690
+ switch (policy) {
691
+ case ssl_compliance_policy_none:
696
692
  return true;
697
- case TLS1_3_CK_CHACHA20_POLY1305_SHA256 & 0xffff:
698
- return false;
699
- default:
700
- assert(false);
701
- return false;
693
+
694
+ case ssl_compliance_policy_fips_202205:
695
+ switch (cipher_id) {
696
+ case TLS1_3_CK_AES_128_GCM_SHA256 & 0xffff:
697
+ case TLS1_3_CK_AES_256_GCM_SHA384 & 0xffff:
698
+ return true;
699
+ case TLS1_3_CK_CHACHA20_POLY1305_SHA256 & 0xffff:
700
+ return false;
701
+ default:
702
+ assert(false);
703
+ return false;
704
+ }
705
+
706
+ case ssl_compliance_policy_wpa3_192_202304:
707
+ switch (cipher_id) {
708
+ case TLS1_3_CK_AES_256_GCM_SHA384 & 0xffff:
709
+ return true;
710
+ case TLS1_3_CK_AES_128_GCM_SHA256 & 0xffff:
711
+ case TLS1_3_CK_CHACHA20_POLY1305_SHA256 & 0xffff:
712
+ return false;
713
+ default:
714
+ assert(false);
715
+ return false;
716
+ }
702
717
  }
718
+
719
+ assert(false);
720
+ return false;
703
721
  }
704
722
 
705
- const SSL_CIPHER *ssl_choose_tls13_cipher(CBS cipher_suites, uint16_t version,
706
- uint16_t group_id, bool only_fips) {
723
+ const SSL_CIPHER *ssl_choose_tls13_cipher(CBS cipher_suites, bool has_aes_hw,
724
+ uint16_t version, uint16_t group_id,
725
+ enum ssl_compliance_policy_t policy) {
707
726
  if (CBS_len(&cipher_suites) % 2 != 0) {
708
727
  return nullptr;
709
728
  }
710
729
 
711
730
  const SSL_CIPHER *best = nullptr;
712
- CipherScorer scorer;
731
+ CipherScorer scorer(has_aes_hw);
713
732
  CipherScorer::Score best_score = scorer.MinScore();
714
733
 
715
734
  while (CBS_len(&cipher_suites) > 0) {
@@ -727,7 +746,7 @@ const SSL_CIPHER *ssl_choose_tls13_cipher(CBS cipher_suites, uint16_t version,
727
746
  }
728
747
 
729
748
  if (!ssl_tls13_cipher_meets_policy(SSL_CIPHER_get_protocol_id(candidate),
730
- only_fips)) {
749
+ policy)) {
731
750
  continue;
732
751
  }
733
752