grpc 1.56.2 → 1.57.0.pre1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/Makefile +29 -22
- data/include/grpc/event_engine/event_engine.h +22 -32
- data/include/grpc/impl/grpc_types.h +3 -0
- data/include/grpc/support/port_platform.h +29 -23
- data/src/core/ext/filters/client_channel/client_channel.cc +44 -8
- data/src/core/ext/filters/client_channel/dynamic_filters.h +3 -3
- data/src/core/ext/filters/client_channel/http_proxy.cc +5 -0
- data/src/core/ext/filters/client_channel/lb_policy/address_filtering.cc +21 -52
- data/src/core/ext/filters/client_channel/lb_policy/address_filtering.h +19 -7
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.cc +25 -35
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.cc +78 -132
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.cc +2 -1
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.cc +4 -3
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.h +3 -1
- data/src/core/ext/filters/client_channel/lb_policy/health_check_client.cc +38 -15
- data/src/core/ext/filters/client_channel/lb_policy/health_check_client.h +3 -5
- data/src/core/ext/filters/client_channel/lb_policy/health_check_client_internal.h +22 -6
- data/src/core/ext/filters/client_channel/lb_policy/oob_backend_metric_internal.h +2 -0
- data/src/core/ext/filters/client_channel/lb_policy/outlier_detection/outlier_detection.cc +97 -71
- data/src/core/ext/filters/client_channel/lb_policy/outlier_detection/outlier_detection.h +2 -16
- data/src/core/ext/filters/client_channel/lb_policy/pick_first/pick_first.cc +56 -11
- data/src/core/ext/filters/client_channel/lb_policy/pick_first/pick_first.h +25 -0
- data/src/core/ext/filters/client_channel/lb_policy/priority/priority.cc +6 -32
- data/src/core/ext/filters/client_channel/lb_policy/ring_hash/ring_hash.cc +4 -6
- data/src/core/ext/filters/client_channel/lb_policy/rls/rls.cc +20 -79
- data/src/core/ext/filters/client_channel/lb_policy/round_robin/round_robin.cc +1 -1
- data/src/core/ext/filters/client_channel/lb_policy/subchannel_list.h +31 -19
- data/src/core/ext/filters/client_channel/lb_policy/weighted_round_robin/weighted_round_robin.cc +1 -1
- data/src/core/ext/filters/client_channel/lb_policy/weighted_target/weighted_target.cc +7 -41
- data/src/core/ext/filters/client_channel/lb_policy/xds/cds.cc +3 -67
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_channel_args.h +8 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_impl.cc +31 -74
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_manager.cc +7 -51
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_resolver.cc +16 -87
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_override_host.cc +16 -50
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_wrr_locality.cc +12 -74
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/dns_resolver_ares.cc +1 -4
- data/src/core/ext/filters/client_channel/resolver/dns/event_engine/event_engine_client_channel_resolver.cc +69 -59
- data/src/core/ext/filters/client_channel/resolver/polling_resolver.cc +7 -2
- data/src/core/ext/filters/client_channel/resolver/polling_resolver.h +1 -0
- data/src/core/ext/filters/client_channel/resolver/sockaddr/sockaddr_resolver.cc +25 -13
- data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.cc +366 -311
- data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.h +17 -1
- data/src/core/ext/filters/client_channel/retry_filter.cc +39 -2498
- data/src/core/ext/filters/client_channel/retry_filter.h +91 -1
- data/src/core/ext/filters/client_channel/retry_filter_legacy_call_data.cc +2052 -0
- data/src/core/ext/filters/client_channel/retry_filter_legacy_call_data.h +442 -0
- data/src/core/ext/filters/client_channel/service_config_channel_arg_filter.cc +38 -58
- data/src/core/ext/filters/client_channel/subchannel.h +3 -3
- data/src/core/ext/filters/client_channel/subchannel_interface_internal.h +3 -0
- data/src/core/ext/filters/rbac/rbac_filter.cc +40 -111
- data/src/core/ext/filters/rbac/rbac_filter.h +12 -30
- data/src/core/ext/filters/stateful_session/stateful_session_filter.cc +162 -86
- data/src/core/ext/filters/stateful_session/stateful_session_filter.h +0 -6
- data/src/core/ext/transport/chttp2/server/chttp2_server.cc +7 -4
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.cc +131 -186
- data/src/core/ext/transport/chttp2/transport/decode_huff.cc +6569 -174
- data/src/core/ext/transport/chttp2/transport/decode_huff.h +2278 -441
- data/src/core/ext/transport/chttp2/transport/frame_ping.cc +2 -3
- data/src/core/ext/transport/chttp2/transport/hpack_parse_result.h +4 -3
- data/src/core/ext/transport/chttp2/transport/hpack_parser.cc +9 -8
- data/src/core/ext/transport/chttp2/transport/hpack_parser_table.cc +4 -4
- data/src/core/ext/transport/chttp2/transport/hpack_parser_table.h +3 -2
- data/src/core/ext/transport/chttp2/transport/internal.h +8 -4
- data/src/core/ext/transport/chttp2/transport/parsing.cc +15 -3
- data/src/core/ext/transport/chttp2/transport/writing.cc +2 -3
- data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.c +27 -6
- data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.h +143 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.c +2 -9
- data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.h +0 -39
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.c +13 -8
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.h +35 -6
- data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.c +17 -13
- data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.h +85 -20
- data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.c +26 -7
- data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.h +45 -3
- data/src/core/ext/upb-generated/envoy/config/metrics/v3/metrics_service.upb.c +4 -3
- data/src/core/ext/upb-generated/envoy/config/metrics/v3/metrics_service.upb.h +21 -0
- data/src/core/ext/upb-generated/envoy/config/overload/v3/overload.upb.c +30 -6
- data/src/core/ext/upb-generated/envoy/config/overload/v3/overload.upb.h +180 -0
- data/src/core/ext/upb-generated/envoy/data/accesslog/v3/accesslog.upb.c +558 -0
- data/src/core/ext/upb-generated/envoy/data/accesslog/v3/accesslog.upb.h +2710 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/fault/v3/fault.upb.c +30 -11
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/fault/v3/fault.upb.h +53 -24
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/router/v3/router.upb.c +30 -5
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/router/v3/router.upb.h +110 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.c +41 -15
- data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.h +150 -27
- data/src/core/ext/upb-generated/envoy/extensions/load_balancing_policies/client_side_weighted_round_robin/v3/client_side_weighted_round_robin.upb.c +1 -0
- data/src/core/ext/upb-generated/envoy/extensions/load_balancing_policies/pick_first/v3/pick_first.upb.c +47 -0
- data/src/core/ext/upb-generated/envoy/extensions/load_balancing_policies/pick_first/v3/pick_first.upb.h +93 -0
- data/src/core/ext/upbdefs-generated/envoy/config/accesslog/v3/accesslog.upbdefs.c +88 -76
- data/src/core/ext/upbdefs-generated/envoy/config/accesslog/v3/accesslog.upbdefs.h +5 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/config_source.upbdefs.c +11 -12
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/config_source.upbdefs.h +0 -5
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/grpc_service.upbdefs.c +162 -160
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/health_check.upbdefs.c +129 -118
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/protocol.upbdefs.c +141 -135
- data/src/core/ext/upbdefs-generated/envoy/config/metrics/v3/metrics_service.upbdefs.c +19 -12
- data/src/core/ext/upbdefs-generated/envoy/config/overload/v3/overload.upbdefs.c +38 -30
- data/src/core/ext/upbdefs-generated/envoy/config/overload/v3/overload.upbdefs.h +5 -0
- data/src/core/ext/upbdefs-generated/envoy/data/accesslog/v3/accesslog.upbdefs.c +402 -0
- data/src/core/ext/upbdefs-generated/envoy/data/accesslog/v3/accesslog.upbdefs.h +111 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/fault/v3/fault.upbdefs.c +80 -74
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/router/v3/router.upbdefs.c +63 -47
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/router/v3/router.upbdefs.h +5 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upbdefs.c +315 -293
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upbdefs.h +5 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/regex.upbdefs.c +29 -29
- data/src/core/ext/xds/xds_bootstrap_grpc.cc +33 -30
- data/src/core/ext/xds/xds_bootstrap_grpc.h +5 -13
- data/src/core/ext/xds/xds_client_grpc.cc +11 -6
- data/src/core/ext/xds/xds_client_grpc.h +16 -2
- data/src/core/ext/xds/xds_client_stats.h +10 -0
- data/src/core/ext/xds/xds_cluster.cc +26 -16
- data/src/core/ext/xds/xds_endpoint.cc +4 -7
- data/src/core/ext/xds/xds_health_status.cc +0 -17
- data/src/core/ext/xds/xds_health_status.h +5 -25
- data/src/core/ext/xds/xds_lb_policy_registry.cc +39 -0
- data/src/core/ext/xds/xds_route_config.cc +4 -0
- data/src/core/ext/xds/xds_transport_grpc.cc +1 -3
- data/src/core/lib/address_utils/parse_address.cc +63 -1
- data/src/core/lib/address_utils/parse_address.h +8 -0
- data/src/core/lib/address_utils/sockaddr_utils.cc +46 -1
- data/src/core/lib/address_utils/sockaddr_utils.h +2 -2
- data/src/core/lib/channel/channel_args.cc +21 -10
- data/src/core/lib/channel/channel_args.h +3 -0
- data/src/core/lib/channel/connected_channel.cc +4 -1
- data/src/core/lib/channel/promise_based_filter.h +1 -0
- data/src/core/lib/debug/trace.cc +1 -4
- data/src/core/lib/event_engine/cf_engine/cf_engine.cc +2 -1
- data/src/core/lib/event_engine/cf_engine/cf_engine.h +1 -1
- data/src/core/lib/event_engine/event_engine.cc +0 -12
- data/src/core/lib/event_engine/forkable.cc +47 -42
- data/src/core/lib/event_engine/handle_containers.h +0 -4
- data/src/core/lib/event_engine/posix_engine/ev_epoll1_linux.cc +4 -6
- data/src/core/lib/event_engine/posix_engine/ev_poll_posix.cc +4 -6
- data/src/core/lib/event_engine/posix_engine/posix_endpoint.cc +25 -11
- data/src/core/lib/event_engine/posix_engine/posix_endpoint.h +3 -1
- data/src/core/lib/event_engine/posix_engine/posix_engine.cc +2 -1
- data/src/core/lib/event_engine/posix_engine/posix_engine.h +8 -12
- data/src/core/lib/event_engine/posix_engine/posix_engine_listener.cc +37 -27
- data/src/core/lib/event_engine/posix_engine/posix_engine_listener.h +2 -0
- data/src/core/lib/event_engine/posix_engine/posix_engine_listener_utils.cc +4 -2
- data/src/core/lib/event_engine/posix_engine/tcp_socket_utils.cc +42 -2
- data/src/core/lib/event_engine/posix_engine/tcp_socket_utils.h +6 -0
- data/src/core/lib/event_engine/posix_engine/timer.h +10 -37
- data/src/core/lib/event_engine/tcp_socket_utils.cc +67 -7
- data/src/core/lib/event_engine/tcp_socket_utils.h +3 -0
- data/src/core/lib/event_engine/thread_pool/work_stealing_thread_pool.cc +90 -37
- data/src/core/lib/event_engine/thread_pool/work_stealing_thread_pool.h +32 -12
- data/src/core/lib/event_engine/thready_event_engine/thready_event_engine.cc +12 -21
- data/src/core/lib/event_engine/thready_event_engine/thready_event_engine.h +8 -12
- data/src/core/lib/event_engine/windows/windows_endpoint.cc +55 -54
- data/src/core/lib/event_engine/windows/windows_endpoint.h +15 -12
- data/src/core/lib/event_engine/windows/windows_engine.cc +2 -1
- data/src/core/lib/event_engine/windows/windows_engine.h +8 -12
- data/src/core/lib/experiments/config.cc +60 -22
- data/src/core/lib/experiments/config.h +20 -8
- data/src/core/lib/experiments/experiments.cc +278 -0
- data/src/core/lib/experiments/experiments.h +59 -1
- data/src/core/lib/gprpp/dual_ref_counted.h +9 -9
- data/src/core/lib/gprpp/fork.cc +8 -9
- data/src/core/lib/gprpp/fork.h +6 -5
- data/src/core/lib/gprpp/if_list.h +4530 -0
- data/src/core/lib/gprpp/orphanable.h +3 -3
- data/src/core/lib/gprpp/ref_counted.h +6 -6
- data/src/core/lib/gprpp/sorted_pack.h +3 -12
- data/src/core/lib/gprpp/status_helper.h +16 -15
- data/src/core/lib/gprpp/time.h +12 -0
- data/src/core/lib/gprpp/type_list.h +32 -0
- data/src/core/lib/http/httpcli.h +6 -9
- data/src/core/lib/iomgr/error.cc +32 -2
- data/src/core/lib/iomgr/error.h +9 -10
- data/src/core/lib/iomgr/ev_epoll1_linux.cc +5 -7
- data/src/core/lib/iomgr/ev_poll_posix.cc +6 -5
- data/src/core/lib/iomgr/exec_ctx.h +11 -0
- data/src/core/lib/iomgr/pollset.h +4 -5
- data/src/core/lib/iomgr/port.h +10 -0
- data/src/core/lib/iomgr/resolve_address.cc +13 -1
- data/src/core/lib/iomgr/resolve_address.h +17 -3
- data/src/core/lib/iomgr/sockaddr_posix.h +7 -0
- data/src/core/lib/iomgr/socket_utils_common_posix.cc +29 -0
- data/src/core/lib/iomgr/socket_utils_posix.cc +2 -0
- data/src/core/lib/iomgr/socket_utils_posix.h +6 -0
- data/src/core/lib/iomgr/tcp_client_posix.cc +4 -1
- data/src/core/lib/iomgr/tcp_posix.cc +21 -4
- data/src/core/lib/iomgr/tcp_server_posix.cc +3 -2
- data/src/core/lib/iomgr/tcp_server_utils_posix_common.cc +5 -2
- data/src/core/lib/iomgr/tcp_windows.cc +1 -3
- data/src/core/lib/iomgr/vsock.cc +59 -0
- data/src/core/lib/iomgr/vsock.h +38 -0
- data/src/core/lib/iomgr/wakeup_fd_posix.h +3 -6
- data/src/core/lib/load_balancing/delegating_helper.h +115 -0
- data/src/core/lib/load_balancing/lb_policy.h +20 -0
- data/src/core/lib/load_balancing/subchannel_interface.h +6 -0
- data/src/core/lib/promise/party.h +1 -1
- data/src/core/lib/resolver/resolver_factory.h +3 -2
- data/src/core/lib/resolver/server_address.cc +9 -94
- data/src/core/lib/resolver/server_address.h +10 -64
- data/src/core/lib/resource_quota/memory_quota.h +1 -1
- data/src/core/lib/security/credentials/channel_creds_registry.h +51 -27
- data/src/core/lib/security/credentials/channel_creds_registry_init.cc +169 -9
- data/src/core/lib/security/credentials/composite/composite_credentials.cc +1 -1
- data/src/core/lib/security/credentials/composite/composite_credentials.h +3 -1
- data/src/core/lib/security/credentials/external/external_account_credentials.cc +40 -1
- data/src/core/lib/security/credentials/external/external_account_credentials.h +6 -0
- data/src/core/lib/security/credentials/fake/fake_credentials.cc +30 -38
- data/src/core/lib/security/credentials/fake/fake_credentials.h +28 -0
- data/src/core/lib/security/credentials/tls/tls_credentials.cc +1 -1
- data/src/core/lib/security/credentials/tls/tls_credentials.h +3 -1
- data/src/core/lib/service_config/service_config_call_data.h +5 -0
- data/src/core/lib/slice/slice.h +16 -0
- data/src/core/lib/surface/call.cc +31 -29
- data/src/core/lib/surface/server.h +2 -2
- data/src/core/lib/surface/version.cc +2 -2
- data/src/core/lib/transport/metadata_batch.cc +7 -7
- data/src/core/lib/transport/metadata_batch.h +86 -48
- data/src/core/lib/transport/parsed_metadata.h +34 -20
- data/src/core/lib/transport/simple_slice_based_metadata.h +9 -2
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol_common.cc +4 -6
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_zero_copy_grpc_protector.cc +1 -2
- data/src/core/tsi/ssl_transport_security.cc +28 -7
- data/src/ruby/bin/math_pb.rb +24 -18
- data/src/ruby/ext/grpc/extconf.rb +19 -18
- data/src/ruby/ext/grpc/rb_call.c +62 -39
- data/src/ruby/ext/grpc/rb_call_credentials.c +0 -1
- data/src/ruby/ext/grpc/rb_channel.c +126 -49
- data/src/ruby/ext/grpc/rb_channel.h +1 -0
- data/src/ruby/ext/grpc/rb_channel_args.c +16 -2
- data/src/ruby/ext/grpc/rb_channel_args.h +4 -0
- data/src/ruby/ext/grpc/rb_channel_credentials.c +0 -1
- data/src/ruby/ext/grpc/rb_compression_options.c +0 -1
- data/src/ruby/ext/grpc/rb_event_thread.c +22 -6
- data/src/ruby/ext/grpc/rb_event_thread.h +1 -0
- data/src/ruby/ext/grpc/rb_grpc.c +192 -30
- data/src/ruby/ext/grpc/rb_grpc.h +8 -2
- data/src/ruby/ext/grpc/rb_server.c +62 -45
- data/src/ruby/ext/grpc/rb_server_credentials.c +0 -1
- data/src/ruby/ext/grpc/rb_xds_channel_credentials.c +0 -1
- data/src/ruby/ext/grpc/rb_xds_server_credentials.c +0 -1
- data/src/ruby/lib/grpc/generic/bidi_call.rb +2 -0
- data/src/ruby/lib/grpc/version.rb +1 -1
- data/src/ruby/pb/grpc/health/v1/health_pb.rb +24 -13
- data/src/ruby/pb/src/proto/grpc/testing/empty_pb.rb +24 -3
- data/src/ruby/pb/src/proto/grpc/testing/messages_pb.rb +25 -111
- data/src/ruby/pb/src/proto/grpc/testing/test_pb.rb +25 -2
- data/third_party/boringssl-with-bazel/err_data.c +552 -552
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_strnid.c +5 -5
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_time.c +34 -1
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_utctm.c +4 -1
- data/third_party/boringssl-with-bazel/src/crypto/bio/bio.c +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/bio/bio_mem.c +7 -8
- data/third_party/boringssl-with-bazel/src/crypto/bio/connect.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/bio/fd.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/bio/file.c +8 -8
- data/third_party/boringssl-with-bazel/src/crypto/bio/socket.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/bio/socket_helper.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/chacha/chacha.c +19 -1
- data/third_party/boringssl-with-bazel/src/crypto/chacha/internal.h +8 -1
- data/third_party/boringssl-with-bazel/src/crypto/conf/conf.c +28 -185
- data/third_party/boringssl-with-bazel/src/crypto/conf/conf_def.h +3 -7
- data/third_party/boringssl-with-bazel/src/crypto/conf/internal.h +8 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu_aarch64_apple.c +3 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519.c +49 -46
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519_64_adx.c +18 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519_tables.h +2809 -7417
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/internal.h +27 -5
- data/third_party/boringssl-with-bazel/src/crypto/dsa/internal.h +20 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_asn1.c +110 -72
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_derive.c +4 -3
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/hash_to_curve.c +15 -14
- data/third_party/boringssl-with-bazel/src/crypto/err/err.c +13 -10
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp.c +35 -12
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec.c +2 -4
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec_asn1.c +3 -7
- data/third_party/boringssl-with-bazel/src/crypto/evp/pbkdf.c +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/evp/print.c +7 -6
- data/third_party/boringssl-with-bazel/src/crypto/ex_data.c +34 -72
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bcm.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/div.c +12 -5
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/gcd.c +5 -6
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/internal.h +12 -6
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery.c +17 -18
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery_inv.c +51 -15
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/rsaz_exp.c +7 -7
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/delocate.h +5 -6
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/dh/internal.h +2 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/builtin_curves.h +277 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec.c +180 -404
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_key.c +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_montgomery.c +24 -57
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/felem.c +17 -13
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/internal.h +33 -71
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/oct.c +18 -17
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p224-64.c +5 -7
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-nistz.c +15 -18
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256.c +9 -11
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/scalar.c +24 -24
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple.c +11 -27
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple_mul.c +8 -8
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/wnaf.c +4 -4
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdsa/ecdsa.c +9 -3
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/hkdf/hkdf.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.c +40 -26
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/internal.h +21 -7
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/rand.c +38 -19
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/urandom.c +2 -29
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/internal.h +55 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa_impl.c +33 -52
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/self_check.c +3 -8
- data/third_party/boringssl-with-bazel/src/crypto/internal.h +198 -79
- data/third_party/boringssl-with-bazel/src/crypto/kyber/kyber.c +5 -4
- data/third_party/boringssl-with-bazel/src/crypto/mem.c +7 -8
- data/third_party/boringssl-with-bazel/src/crypto/obj/obj.c +19 -23
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/internal.h +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/p5_pbev2.c +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8.c +7 -7
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8_x509.c +8 -5
- data/third_party/boringssl-with-bazel/src/crypto/pool/internal.h +1 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/deterministic.c +7 -6
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/forkunsafe.c +6 -12
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/getentropy.c +48 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/{fuchsia.c → ios.c} +8 -8
- data/third_party/boringssl-with-bazel/src/crypto/{refcount_no_threads.c → rand_extra/trusty.c} +15 -19
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/windows.c +41 -19
- data/third_party/boringssl-with-bazel/src/crypto/{refcount_c11.c → refcount.c} +11 -17
- data/third_party/boringssl-with-bazel/src/crypto/stack/stack.c +147 -72
- data/third_party/boringssl-with-bazel/src/crypto/thread_none.c +0 -8
- data/third_party/boringssl-with-bazel/src/crypto/thread_pthread.c +6 -35
- data/third_party/boringssl-with-bazel/src/crypto/thread_win.c +5 -26
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/pmbtoken.c +14 -18
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/voprf.c +54 -143
- data/third_party/boringssl-with-bazel/src/crypto/x509/by_dir.c +7 -13
- data/third_party/boringssl-with-bazel/src/crypto/x509/internal.h +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_att.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_lu.c +2 -4
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_req.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_trs.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_v3.c +8 -12
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vfy.c +19 -20
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509name.c +11 -15
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_crl.c +5 -5
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_name.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_pubkey.c +7 -7
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_lib.c +2 -3
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_purp.c +4 -6
- data/third_party/boringssl-with-bazel/src/include/openssl/arm_arch.h +4 -119
- data/third_party/boringssl-with-bazel/src/include/openssl/asm_base.h +207 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/asn1.h +5 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/base.h +2 -116
- data/third_party/boringssl-with-bazel/src/include/openssl/bn.h +0 -2
- data/third_party/boringssl-with-bazel/src/include/openssl/chacha.h +6 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/conf.h +5 -1
- data/third_party/boringssl-with-bazel/src/include/openssl/dsa.h +0 -21
- data/third_party/boringssl-with-bazel/src/include/openssl/ec.h +21 -2
- data/third_party/boringssl-with-bazel/src/include/openssl/ec_key.h +19 -6
- data/third_party/boringssl-with-bazel/src/include/openssl/evp.h +11 -7
- data/third_party/boringssl-with-bazel/src/include/openssl/rand.h +13 -14
- data/third_party/boringssl-with-bazel/src/include/openssl/rsa.h +0 -61
- data/third_party/boringssl-with-bazel/src/include/openssl/ssl.h +127 -81
- data/third_party/boringssl-with-bazel/src/include/openssl/stack.h +224 -209
- data/third_party/boringssl-with-bazel/src/include/openssl/target.h +154 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/thread.h +1 -29
- data/third_party/boringssl-with-bazel/src/include/openssl/x509.h +4 -4
- data/third_party/boringssl-with-bazel/src/include/openssl/x509v3.h +3 -2
- data/third_party/boringssl-with-bazel/src/ssl/extensions.cc +9 -65
- data/third_party/boringssl-with-bazel/src/ssl/handoff.cc +20 -20
- data/third_party/boringssl-with-bazel/src/ssl/handshake_server.cc +1 -1
- data/third_party/boringssl-with-bazel/src/ssl/internal.h +4 -11
- data/third_party/boringssl-with-bazel/src/ssl/ssl_cipher.cc +24 -18
- data/third_party/boringssl-with-bazel/src/ssl/ssl_key_share.cc +37 -30
- data/third_party/boringssl-with-bazel/src/ssl/ssl_lib.cc +125 -26
- data/third_party/boringssl-with-bazel/src/ssl/tls13_client.cc +2 -3
- data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_64_adx.h +691 -0
- data/third_party/upb/upb/collections/map.c +3 -3
- metadata +27 -12
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_attributes.cc +0 -42
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_attributes.h +0 -64
- data/src/core/ext/transport/chttp2/transport/stream_map.cc +0 -177
- data/src/core/ext/transport/chttp2/transport/stream_map.h +0 -68
- data/third_party/boringssl-with-bazel/src/crypto/refcount_win.c +0 -89
@@ -72,7 +72,7 @@
|
|
72
72
|
DEFINE_LHASH_OF(ASN1_STRING_TABLE)
|
73
73
|
|
74
74
|
static LHASH_OF(ASN1_STRING_TABLE) *string_tables = NULL;
|
75
|
-
static
|
75
|
+
static CRYPTO_MUTEX string_tables_lock = CRYPTO_MUTEX_INIT;
|
76
76
|
|
77
77
|
void ASN1_STRING_set_default_mask(unsigned long mask) {}
|
78
78
|
|
@@ -176,11 +176,11 @@ static const ASN1_STRING_TABLE *asn1_string_table_get(int nid) {
|
|
176
176
|
return tbl;
|
177
177
|
}
|
178
178
|
|
179
|
-
|
179
|
+
CRYPTO_MUTEX_lock_read(&string_tables_lock);
|
180
180
|
if (string_tables != NULL) {
|
181
181
|
tbl = lh_ASN1_STRING_TABLE_retrieve(string_tables, &key);
|
182
182
|
}
|
183
|
-
|
183
|
+
CRYPTO_MUTEX_unlock_read(&string_tables_lock);
|
184
184
|
// Note returning |tbl| without the lock is only safe because
|
185
185
|
// |ASN1_STRING_TABLE_add| cannot modify or delete existing entries. If we
|
186
186
|
// wish to support that, this function must copy the result under a lock.
|
@@ -196,7 +196,7 @@ int ASN1_STRING_TABLE_add(int nid, long minsize, long maxsize,
|
|
196
196
|
}
|
197
197
|
|
198
198
|
int ret = 0;
|
199
|
-
|
199
|
+
CRYPTO_MUTEX_lock_write(&string_tables_lock);
|
200
200
|
|
201
201
|
if (string_tables == NULL) {
|
202
202
|
string_tables = lh_ASN1_STRING_TABLE_new(table_hash, table_cmp);
|
@@ -232,7 +232,7 @@ int ASN1_STRING_TABLE_add(int nid, long minsize, long maxsize,
|
|
232
232
|
ret = 1;
|
233
233
|
|
234
234
|
err:
|
235
|
-
|
235
|
+
CRYPTO_MUTEX_unlock_write(&string_tables_lock);
|
236
236
|
return ret;
|
237
237
|
}
|
238
238
|
|
@@ -61,6 +61,7 @@
|
|
61
61
|
#include <time.h>
|
62
62
|
|
63
63
|
#include <openssl/asn1t.h>
|
64
|
+
#include <openssl/bytestring.h>
|
64
65
|
#include <openssl/err.h>
|
65
66
|
#include <openssl/mem.h>
|
66
67
|
|
@@ -82,6 +83,10 @@ ASN1_TIME *ASN1_TIME_set(ASN1_TIME *s, time_t time) {
|
|
82
83
|
return ASN1_TIME_adj(s, time, 0, 0);
|
83
84
|
}
|
84
85
|
|
86
|
+
static int fits_in_utc_time(const struct tm *tm) {
|
87
|
+
return 50 <= tm->tm_year && tm->tm_year < 150;
|
88
|
+
}
|
89
|
+
|
85
90
|
ASN1_TIME *ASN1_TIME_adj(ASN1_TIME *s, int64_t posix_time, int offset_day,
|
86
91
|
long offset_sec) {
|
87
92
|
struct tm tm;
|
@@ -95,7 +100,7 @@ ASN1_TIME *ASN1_TIME_adj(ASN1_TIME *s, int64_t posix_time, int offset_day,
|
|
95
100
|
return NULL;
|
96
101
|
}
|
97
102
|
}
|
98
|
-
if ((tm
|
103
|
+
if (fits_in_utc_time(&tm)) {
|
99
104
|
return ASN1_UTCTIME_adj(s, posix_time, offset_day, offset_sec);
|
100
105
|
}
|
101
106
|
return ASN1_GENERALIZEDTIME_adj(s, posix_time, offset_day, offset_sec);
|
@@ -171,6 +176,34 @@ int ASN1_TIME_set_string(ASN1_TIME *s, const char *str) {
|
|
171
176
|
ASN1_GENERALIZEDTIME_set_string(s, str);
|
172
177
|
}
|
173
178
|
|
179
|
+
int ASN1_TIME_set_string_X509(ASN1_TIME *s, const char *str) {
|
180
|
+
CBS cbs;
|
181
|
+
CBS_init(&cbs, (const uint8_t*)str, strlen(str));
|
182
|
+
int type;
|
183
|
+
struct tm tm;
|
184
|
+
if (CBS_parse_utc_time(&cbs, /*out_tm=*/NULL,
|
185
|
+
/*allow_timezone_offset=*/0)) {
|
186
|
+
type = V_ASN1_UTCTIME;
|
187
|
+
} else if (CBS_parse_generalized_time(&cbs, &tm,
|
188
|
+
/*allow_timezone_offset=*/0)) {
|
189
|
+
type = V_ASN1_GENERALIZEDTIME;
|
190
|
+
if (fits_in_utc_time(&tm)) {
|
191
|
+
type = V_ASN1_UTCTIME;
|
192
|
+
CBS_skip(&cbs, 2);
|
193
|
+
}
|
194
|
+
} else {
|
195
|
+
return 0;
|
196
|
+
}
|
197
|
+
|
198
|
+
if (s != NULL) {
|
199
|
+
if (!ASN1_STRING_set(s, CBS_data(&cbs), CBS_len(&cbs))) {
|
200
|
+
return 0;
|
201
|
+
}
|
202
|
+
s->type = type;
|
203
|
+
}
|
204
|
+
return 1;
|
205
|
+
}
|
206
|
+
|
174
207
|
static int asn1_time_to_tm(struct tm *tm, const ASN1_TIME *t,
|
175
208
|
int allow_timezone_offset) {
|
176
209
|
if (t == NULL) {
|
@@ -83,11 +83,14 @@ int ASN1_UTCTIME_check(const ASN1_UTCTIME *d) {
|
|
83
83
|
}
|
84
84
|
|
85
85
|
int ASN1_UTCTIME_set_string(ASN1_UTCTIME *s, const char *str) {
|
86
|
+
// Although elsewhere we allow timezone offsets with UTCTime, to be compatible
|
87
|
+
// with some existing misissued certificates, this function is used to
|
88
|
+
// construct new certificates and can be stricter.
|
86
89
|
size_t len = strlen(str);
|
87
90
|
CBS cbs;
|
88
91
|
CBS_init(&cbs, (const uint8_t *)str, len);
|
89
92
|
if (!CBS_parse_utc_time(&cbs, /*out_tm=*/NULL,
|
90
|
-
/*allow_timezone_offset=*/
|
93
|
+
/*allow_timezone_offset=*/0)) {
|
91
94
|
return 0;
|
92
95
|
}
|
93
96
|
if (s != NULL) {
|
@@ -628,14 +628,14 @@ void BIO_set_retry_special(BIO *bio) {
|
|
628
628
|
|
629
629
|
int BIO_set_write_buffer_size(BIO *bio, int buffer_size) { return 0; }
|
630
630
|
|
631
|
-
static
|
631
|
+
static CRYPTO_MUTEX g_index_lock = CRYPTO_MUTEX_INIT;
|
632
632
|
static int g_index = BIO_TYPE_START;
|
633
633
|
|
634
634
|
int BIO_get_new_index(void) {
|
635
|
-
|
635
|
+
CRYPTO_MUTEX_lock_write(&g_index_lock);
|
636
636
|
// If |g_index| exceeds 255, it will collide with the flags bits.
|
637
637
|
int ret = g_index > 255 ? -1 : g_index++;
|
638
|
-
|
638
|
+
CRYPTO_MUTEX_unlock_write(&g_index_lock);
|
639
639
|
return ret;
|
640
640
|
}
|
641
641
|
|
@@ -206,7 +206,6 @@ static int mem_gets(BIO *bio, char *buf, int size) {
|
|
206
206
|
|
207
207
|
static long mem_ctrl(BIO *bio, int cmd, long num, void *ptr) {
|
208
208
|
long ret = 1;
|
209
|
-
char **pptr;
|
210
209
|
|
211
210
|
BUF_MEM *b = (BUF_MEM *)bio->ptr;
|
212
211
|
|
@@ -232,8 +231,8 @@ static long mem_ctrl(BIO *bio, int cmd, long num, void *ptr) {
|
|
232
231
|
case BIO_CTRL_INFO:
|
233
232
|
ret = (long)b->length;
|
234
233
|
if (ptr != NULL) {
|
235
|
-
pptr =
|
236
|
-
*pptr =
|
234
|
+
char **pptr = ptr;
|
235
|
+
*pptr = b->data;
|
237
236
|
}
|
238
237
|
break;
|
239
238
|
case BIO_C_SET_BUF_MEM:
|
@@ -243,8 +242,8 @@ static long mem_ctrl(BIO *bio, int cmd, long num, void *ptr) {
|
|
243
242
|
break;
|
244
243
|
case BIO_C_GET_BUF_MEM_PTR:
|
245
244
|
if (ptr != NULL) {
|
246
|
-
pptr =
|
247
|
-
*pptr =
|
245
|
+
BUF_MEM **pptr = ptr;
|
246
|
+
*pptr = b;
|
248
247
|
}
|
249
248
|
break;
|
250
249
|
case BIO_CTRL_GET_CLOSE:
|
@@ -294,15 +293,15 @@ int BIO_mem_contents(const BIO *bio, const uint8_t **out_contents,
|
|
294
293
|
}
|
295
294
|
|
296
295
|
long BIO_get_mem_data(BIO *bio, char **contents) {
|
297
|
-
return BIO_ctrl(bio, BIO_CTRL_INFO, 0,
|
296
|
+
return BIO_ctrl(bio, BIO_CTRL_INFO, 0, contents);
|
298
297
|
}
|
299
298
|
|
300
299
|
int BIO_get_mem_ptr(BIO *bio, BUF_MEM **out) {
|
301
|
-
return (int)BIO_ctrl(bio, BIO_C_GET_BUF_MEM_PTR, 0,
|
300
|
+
return (int)BIO_ctrl(bio, BIO_C_GET_BUF_MEM_PTR, 0, out);
|
302
301
|
}
|
303
302
|
|
304
303
|
int BIO_set_mem_buf(BIO *bio, BUF_MEM *b, int take_ownership) {
|
305
|
-
return (int)BIO_ctrl(bio, BIO_C_SET_BUF_MEM, take_ownership,
|
304
|
+
return (int)BIO_ctrl(bio, BIO_C_SET_BUF_MEM, take_ownership, b);
|
306
305
|
}
|
307
306
|
|
308
307
|
int BIO_set_mem_eof_return(BIO *bio, int eof_value) {
|
@@ -56,7 +56,7 @@
|
|
56
56
|
|
57
57
|
#include <openssl/bio.h>
|
58
58
|
|
59
|
-
#if !defined(
|
59
|
+
#if !defined(OPENSSL_NO_SOCK)
|
60
60
|
|
61
61
|
#include <assert.h>
|
62
62
|
#include <errno.h>
|
@@ -544,4 +544,4 @@ int BIO_do_connect(BIO *bio) {
|
|
544
544
|
return (int)BIO_ctrl(bio, BIO_C_DO_STATE_MACHINE, 0, NULL);
|
545
545
|
}
|
546
546
|
|
547
|
-
#endif //
|
547
|
+
#endif // OPENSSL_NO_SOCK
|
@@ -56,7 +56,7 @@
|
|
56
56
|
|
57
57
|
#include <openssl/bio.h>
|
58
58
|
|
59
|
-
#if !defined(
|
59
|
+
#if !defined(OPENSSL_NO_POSIX_IO)
|
60
60
|
|
61
61
|
#include <errno.h>
|
62
62
|
#include <string.h>
|
@@ -276,4 +276,4 @@ int BIO_get_fd(BIO *bio, int *out_fd) {
|
|
276
276
|
return (int)BIO_ctrl(bio, BIO_C_GET_FD, 0, (char *) out_fd);
|
277
277
|
}
|
278
278
|
|
279
|
-
#endif //
|
279
|
+
#endif // OPENSSL_NO_POSIX_IO
|
@@ -172,7 +172,6 @@ static long file_ctrl(BIO *b, int cmd, long num, void *ptr) {
|
|
172
172
|
long ret = 1;
|
173
173
|
FILE *fp = (FILE *)b->ptr;
|
174
174
|
FILE **fpp;
|
175
|
-
char p[4];
|
176
175
|
|
177
176
|
switch (cmd) {
|
178
177
|
case BIO_CTRL_RESET:
|
@@ -197,27 +196,28 @@ static long file_ctrl(BIO *b, int cmd, long num, void *ptr) {
|
|
197
196
|
case BIO_C_SET_FILENAME:
|
198
197
|
file_free(b);
|
199
198
|
b->shutdown = (int)num & BIO_CLOSE;
|
199
|
+
const char *mode;
|
200
200
|
if (num & BIO_FP_APPEND) {
|
201
201
|
if (num & BIO_FP_READ) {
|
202
|
-
|
202
|
+
mode = "a+";
|
203
203
|
} else {
|
204
|
-
|
204
|
+
mode = "a";
|
205
205
|
}
|
206
206
|
} else if ((num & BIO_FP_READ) && (num & BIO_FP_WRITE)) {
|
207
|
-
|
207
|
+
mode = "r+";
|
208
208
|
} else if (num & BIO_FP_WRITE) {
|
209
|
-
|
209
|
+
mode = "w";
|
210
210
|
} else if (num & BIO_FP_READ) {
|
211
|
-
|
211
|
+
mode = "r";
|
212
212
|
} else {
|
213
213
|
OPENSSL_PUT_ERROR(BIO, BIO_R_BAD_FOPEN_MODE);
|
214
214
|
ret = 0;
|
215
215
|
break;
|
216
216
|
}
|
217
|
-
fp = fopen(ptr,
|
217
|
+
fp = fopen(ptr, mode);
|
218
218
|
if (fp == NULL) {
|
219
219
|
OPENSSL_PUT_SYSTEM_ERROR();
|
220
|
-
ERR_add_error_data(5, "fopen('", ptr, "','",
|
220
|
+
ERR_add_error_data(5, "fopen('", ptr, "','", mode, "')");
|
221
221
|
OPENSSL_PUT_ERROR(BIO, ERR_R_SYS_LIB);
|
222
222
|
ret = 0;
|
223
223
|
break;
|
@@ -56,7 +56,7 @@
|
|
56
56
|
|
57
57
|
#include <openssl/bio.h>
|
58
58
|
|
59
|
-
#if !defined(
|
59
|
+
#if !defined(OPENSSL_NO_SOCK)
|
60
60
|
|
61
61
|
#include <fcntl.h>
|
62
62
|
#include <string.h>
|
@@ -186,4 +186,4 @@ BIO *BIO_new_socket(int fd, int close_flag) {
|
|
186
186
|
return ret;
|
187
187
|
}
|
188
188
|
|
189
|
-
#endif //
|
189
|
+
#endif // OPENSSL_NO_SOCK
|
@@ -20,7 +20,7 @@
|
|
20
20
|
#include <openssl/bio.h>
|
21
21
|
#include <openssl/err.h>
|
22
22
|
|
23
|
-
#if !defined(
|
23
|
+
#if !defined(OPENSSL_NO_SOCK)
|
24
24
|
|
25
25
|
#include <fcntl.h>
|
26
26
|
#include <string.h>
|
@@ -121,4 +121,4 @@ int bio_sock_error(int sock) {
|
|
121
121
|
return error;
|
122
122
|
}
|
123
123
|
|
124
|
-
#endif //
|
124
|
+
#endif // OPENSSL_NO_SOCK
|
@@ -91,7 +91,25 @@ void CRYPTO_chacha_20(uint8_t *out, const uint8_t *in, size_t in_len,
|
|
91
91
|
}
|
92
92
|
#endif
|
93
93
|
|
94
|
-
|
94
|
+
while (in_len > 0) {
|
95
|
+
// The assembly functions do not have defined overflow behavior. While
|
96
|
+
// overflow is almost always a bug in the caller, we prefer our functions to
|
97
|
+
// behave the same across platforms, so divide into multiple calls to avoid
|
98
|
+
// this case.
|
99
|
+
uint64_t todo = 64 * ((UINT64_C(1) << 32) - counter_nonce[0]);
|
100
|
+
if (todo > in_len) {
|
101
|
+
todo = in_len;
|
102
|
+
}
|
103
|
+
|
104
|
+
ChaCha20_ctr32(out, in, (size_t)todo, key_ptr, counter_nonce);
|
105
|
+
in += todo;
|
106
|
+
out += todo;
|
107
|
+
in_len -= todo;
|
108
|
+
|
109
|
+
// We're either done and will next break out of the loop, or we stopped at
|
110
|
+
// the wraparound point and the counter should continue at zero.
|
111
|
+
counter_nonce[0] = 0;
|
112
|
+
}
|
95
113
|
}
|
96
114
|
|
97
115
|
#else
|
@@ -32,7 +32,14 @@ void CRYPTO_hchacha20(uint8_t out[32], const uint8_t key[32],
|
|
32
32
|
defined(OPENSSL_ARM) || defined(OPENSSL_AARCH64))
|
33
33
|
#define CHACHA20_ASM
|
34
34
|
|
35
|
-
// ChaCha20_ctr32
|
35
|
+
// ChaCha20_ctr32 encrypts |in_len| bytes from |in| and writes the result to
|
36
|
+
// |out|. If |in| and |out| alias, they must be equal.
|
37
|
+
//
|
38
|
+
// |counter[0]| is the initial 32-bit block counter, and the remainder is the
|
39
|
+
// 96-bit nonce. If the counter overflows, the output is undefined. The function
|
40
|
+
// will produce output, but the output may vary by machine and may not be
|
41
|
+
// self-consistent. (On some architectures, the assembly implements a mix of
|
42
|
+
// 64-bit and 32-bit counters.)
|
36
43
|
void ChaCha20_ctr32(uint8_t *out, const uint8_t *in, size_t in_len,
|
37
44
|
const uint32_t key[8], const uint32_t counter[4]);
|
38
45
|
#endif
|
@@ -68,21 +68,10 @@
|
|
68
68
|
#include "conf_def.h"
|
69
69
|
#include "internal.h"
|
70
70
|
#include "../internal.h"
|
71
|
-
#include "../lhash/internal.h"
|
72
71
|
|
73
72
|
|
74
|
-
DEFINE_LHASH_OF(CONF_VALUE)
|
75
|
-
|
76
|
-
struct conf_st {
|
77
|
-
LHASH_OF(CONF_VALUE) *data;
|
78
|
-
};
|
79
|
-
|
80
73
|
static const char kDefaultSectionName[] = "default";
|
81
74
|
|
82
|
-
// The maximum length we can grow a value to after variable expansion. 64k
|
83
|
-
// should be more than enough for all reasonable uses.
|
84
|
-
#define MAX_CONF_VALUE_LENGTH 65536
|
85
|
-
|
86
75
|
static uint32_t conf_value_hash(const CONF_VALUE *v) {
|
87
76
|
const uint32_t section_hash = v->section ? OPENSSL_strhash(v->section) : 0;
|
88
77
|
const uint32_t name_hash = v->name ? OPENSSL_strhash(v->name) : 0;
|
@@ -139,24 +128,23 @@ CONF_VALUE *CONF_VALUE_new(void) {
|
|
139
128
|
}
|
140
129
|
|
141
130
|
static void value_free_contents(CONF_VALUE *value) {
|
142
|
-
|
143
|
-
OPENSSL_free(value->section);
|
144
|
-
}
|
131
|
+
OPENSSL_free(value->section);
|
145
132
|
if (value->name) {
|
146
133
|
OPENSSL_free(value->name);
|
147
|
-
|
148
|
-
OPENSSL_free(value->value);
|
149
|
-
}
|
134
|
+
OPENSSL_free(value->value);
|
150
135
|
} else {
|
151
|
-
|
152
|
-
|
153
|
-
|
136
|
+
// TODO(davidben): When |value->name| is NULL, |CONF_VALUE| is actually an
|
137
|
+
// entirely different structure. This is fragile and confusing. Make a
|
138
|
+
// proper |CONF_SECTION| type that doesn't require this.
|
139
|
+
sk_CONF_VALUE_free((STACK_OF(CONF_VALUE) *)value->value);
|
154
140
|
}
|
155
141
|
}
|
156
142
|
|
157
143
|
static void value_free(CONF_VALUE *value) {
|
158
|
-
|
159
|
-
|
144
|
+
if (value != NULL) {
|
145
|
+
value_free_contents(value);
|
146
|
+
OPENSSL_free(value);
|
147
|
+
}
|
160
148
|
}
|
161
149
|
|
162
150
|
static void value_free_arg(CONF_VALUE *value, void *arg) { value_free(value); }
|
@@ -192,28 +180,21 @@ static CONF_VALUE *NCONF_new_section(const CONF *conf, const char *section) {
|
|
192
180
|
if (!lh_CONF_VALUE_insert(conf->data, &old_value, v)) {
|
193
181
|
goto err;
|
194
182
|
}
|
195
|
-
|
196
|
-
value_free(old_value);
|
197
|
-
}
|
183
|
+
value_free(old_value);
|
198
184
|
ok = 1;
|
199
185
|
|
200
186
|
err:
|
201
187
|
if (!ok) {
|
202
|
-
|
203
|
-
|
204
|
-
}
|
205
|
-
if (v != NULL) {
|
206
|
-
OPENSSL_free(v);
|
207
|
-
}
|
188
|
+
sk_CONF_VALUE_free(sk);
|
189
|
+
OPENSSL_free(v);
|
208
190
|
v = NULL;
|
209
191
|
}
|
210
192
|
return v;
|
211
193
|
}
|
212
194
|
|
213
195
|
static int str_copy(CONF *conf, char *section, char **pto, char *from) {
|
214
|
-
int q,
|
215
|
-
char
|
216
|
-
const char *p;
|
196
|
+
int q, to = 0, len = 0;
|
197
|
+
char v;
|
217
198
|
BUF_MEM *buf;
|
218
199
|
|
219
200
|
buf = BUF_MEM_new();
|
@@ -242,22 +223,6 @@ static int str_copy(CONF *conf, char *section, char **pto, char *from) {
|
|
242
223
|
if (*from == q) {
|
243
224
|
from++;
|
244
225
|
}
|
245
|
-
} else if (IS_DQUOTE(conf, *from)) {
|
246
|
-
q = *from;
|
247
|
-
from++;
|
248
|
-
while (!IS_EOF(conf, *from)) {
|
249
|
-
if (*from == q) {
|
250
|
-
if (*(from + 1) == q) {
|
251
|
-
from++;
|
252
|
-
} else {
|
253
|
-
break;
|
254
|
-
}
|
255
|
-
}
|
256
|
-
buf->data[to++] = *(from++);
|
257
|
-
}
|
258
|
-
if (*from == q) {
|
259
|
-
from++;
|
260
|
-
}
|
261
226
|
} else if (IS_ESC(conf, *from)) {
|
262
227
|
from++;
|
263
228
|
v = *(from++);
|
@@ -276,102 +241,23 @@ static int str_copy(CONF *conf, char *section, char **pto, char *from) {
|
|
276
241
|
} else if (IS_EOF(conf, *from)) {
|
277
242
|
break;
|
278
243
|
} else if (*from == '$') {
|
279
|
-
//
|
280
|
-
|
281
|
-
|
282
|
-
|
283
|
-
q = '}';
|
284
|
-
} else if (*s == '(') {
|
285
|
-
q = ')';
|
286
|
-
} else {
|
287
|
-
q = 0;
|
288
|
-
}
|
289
|
-
|
290
|
-
if (q) {
|
291
|
-
s++;
|
292
|
-
}
|
293
|
-
cp = section;
|
294
|
-
e = np = s;
|
295
|
-
while (IS_ALPHA_NUMERIC(conf, *e)) {
|
296
|
-
e++;
|
297
|
-
}
|
298
|
-
if (e[0] == ':' && e[1] == ':') {
|
299
|
-
cp = np;
|
300
|
-
rrp = e;
|
301
|
-
rr = *e;
|
302
|
-
*rrp = '\0';
|
303
|
-
e += 2;
|
304
|
-
np = e;
|
305
|
-
while (IS_ALPHA_NUMERIC(conf, *e)) {
|
306
|
-
e++;
|
307
|
-
}
|
308
|
-
}
|
309
|
-
r = *e;
|
310
|
-
*e = '\0';
|
311
|
-
rp = e;
|
312
|
-
if (q) {
|
313
|
-
if (r != q) {
|
314
|
-
OPENSSL_PUT_ERROR(CONF, CONF_R_NO_CLOSE_BRACE);
|
315
|
-
goto err;
|
316
|
-
}
|
317
|
-
e++;
|
318
|
-
}
|
319
|
-
// So at this point we have
|
320
|
-
// np which is the start of the name string which is
|
321
|
-
// '\0' terminated.
|
322
|
-
// cp which is the start of the section string which is
|
323
|
-
// '\0' terminated.
|
324
|
-
// e is the 'next point after'.
|
325
|
-
// r and rr are the chars replaced by the '\0'
|
326
|
-
// rp and rrp is where 'r' and 'rr' came from.
|
327
|
-
p = NCONF_get_string(conf, cp, np);
|
328
|
-
if (rrp != NULL) {
|
329
|
-
*rrp = rr;
|
330
|
-
}
|
331
|
-
*rp = r;
|
332
|
-
if (p == NULL) {
|
333
|
-
OPENSSL_PUT_ERROR(CONF, CONF_R_VARIABLE_HAS_NO_VALUE);
|
334
|
-
goto err;
|
335
|
-
}
|
336
|
-
size_t newsize = strlen(p) + buf->length - (e - from);
|
337
|
-
if (newsize > MAX_CONF_VALUE_LENGTH) {
|
338
|
-
OPENSSL_PUT_ERROR(CONF, CONF_R_VARIABLE_EXPANSION_TOO_LONG);
|
339
|
-
goto err;
|
340
|
-
}
|
341
|
-
if (!BUF_MEM_grow_clean(buf, newsize)) {
|
342
|
-
goto err;
|
343
|
-
}
|
344
|
-
while (*p) {
|
345
|
-
buf->data[to++] = *(p++);
|
346
|
-
}
|
347
|
-
|
348
|
-
/* Since we change the pointer 'from', we also have
|
349
|
-
to change the perceived length of the string it
|
350
|
-
points at. /RL */
|
351
|
-
len -= e - from;
|
352
|
-
from = e;
|
353
|
-
|
354
|
-
/* In case there were no braces or parenthesis around
|
355
|
-
the variable reference, we have to put back the
|
356
|
-
character that was replaced with a '\0'. /RL */
|
357
|
-
*rp = r;
|
244
|
+
// Historically, $foo would expand to a previously-parsed value. This
|
245
|
+
// feature has been removed as it was unused and is a DoS vector.
|
246
|
+
OPENSSL_PUT_ERROR(CONF, CONF_R_VARIABLE_EXPANSION_NOT_SUPPORTED);
|
247
|
+
goto err;
|
358
248
|
} else {
|
359
249
|
buf->data[to++] = *(from++);
|
360
250
|
}
|
361
251
|
}
|
362
252
|
|
363
253
|
buf->data[to] = '\0';
|
364
|
-
|
365
|
-
OPENSSL_free(*pto);
|
366
|
-
}
|
254
|
+
OPENSSL_free(*pto);
|
367
255
|
*pto = buf->data;
|
368
256
|
OPENSSL_free(buf);
|
369
257
|
return 1;
|
370
258
|
|
371
259
|
err:
|
372
|
-
|
373
|
-
BUF_MEM_free(buf);
|
374
|
-
}
|
260
|
+
BUF_MEM_free(buf);
|
375
261
|
return 0;
|
376
262
|
}
|
377
263
|
|
@@ -472,33 +358,8 @@ static char *scan_quote(CONF *conf, char *p) {
|
|
472
358
|
return p;
|
473
359
|
}
|
474
360
|
|
475
|
-
|
476
|
-
static char *scan_dquote(CONF *conf, char *p) {
|
477
|
-
int q = *p;
|
478
|
-
|
479
|
-
p++;
|
480
|
-
while (!(IS_EOF(conf, *p))) {
|
481
|
-
if (*p == q) {
|
482
|
-
if (*(p + 1) == q) {
|
483
|
-
p++;
|
484
|
-
} else {
|
485
|
-
break;
|
486
|
-
}
|
487
|
-
}
|
488
|
-
p++;
|
489
|
-
}
|
490
|
-
if (*p == q) {
|
491
|
-
p++;
|
492
|
-
}
|
493
|
-
return p;
|
494
|
-
}
|
495
|
-
|
496
361
|
static void clear_comments(CONF *conf, char *p) {
|
497
362
|
for (;;) {
|
498
|
-
if (IS_FCOMMENT(conf, *p)) {
|
499
|
-
*p = '\0';
|
500
|
-
return;
|
501
|
-
}
|
502
363
|
if (!IS_WS(conf, *p)) {
|
503
364
|
break;
|
504
365
|
}
|
@@ -510,10 +371,6 @@ static void clear_comments(CONF *conf, char *p) {
|
|
510
371
|
*p = '\0';
|
511
372
|
return;
|
512
373
|
}
|
513
|
-
if (IS_DQUOTE(conf, *p)) {
|
514
|
-
p = scan_dquote(conf, p);
|
515
|
-
continue;
|
516
|
-
}
|
517
374
|
if (IS_QUOTE(conf, *p)) {
|
518
375
|
p = scan_quote(conf, p);
|
519
376
|
continue;
|
@@ -707,21 +564,13 @@ static int def_load_bio(CONF *conf, BIO *in, long *out_error_line) {
|
|
707
564
|
v = NULL;
|
708
565
|
}
|
709
566
|
}
|
710
|
-
|
711
|
-
|
712
|
-
}
|
713
|
-
if (section != NULL) {
|
714
|
-
OPENSSL_free(section);
|
715
|
-
}
|
567
|
+
BUF_MEM_free(buff);
|
568
|
+
OPENSSL_free(section);
|
716
569
|
return 1;
|
717
570
|
|
718
571
|
err:
|
719
|
-
|
720
|
-
|
721
|
-
}
|
722
|
-
if (section != NULL) {
|
723
|
-
OPENSSL_free(section);
|
724
|
-
}
|
572
|
+
BUF_MEM_free(buff);
|
573
|
+
OPENSSL_free(section);
|
725
574
|
if (out_error_line != NULL) {
|
726
575
|
*out_error_line = eline;
|
727
576
|
}
|
@@ -729,15 +578,9 @@ err:
|
|
729
578
|
ERR_add_error_data(2, "line ", btmp);
|
730
579
|
|
731
580
|
if (v != NULL) {
|
732
|
-
|
733
|
-
|
734
|
-
|
735
|
-
if (v->value != NULL) {
|
736
|
-
OPENSSL_free(v->value);
|
737
|
-
}
|
738
|
-
if (v != NULL) {
|
739
|
-
OPENSSL_free(v);
|
740
|
-
}
|
581
|
+
OPENSSL_free(v->name);
|
582
|
+
OPENSSL_free(v->value);
|
583
|
+
OPENSSL_free(v);
|
741
584
|
}
|
742
585
|
return 0;
|
743
586
|
}
|
@@ -55,8 +55,9 @@
|
|
55
55
|
* [including the GNU Public Licence.]
|
56
56
|
*/
|
57
57
|
|
58
|
-
|
59
|
-
|
58
|
+
// This file was historically generated by keysets.pl in OpenSSL.
|
59
|
+
//
|
60
|
+
// TODO(davidben): Replace it with something more readable.
|
60
61
|
|
61
62
|
#define CONF_NUMBER 1
|
62
63
|
#define CONF_UPPER 2
|
@@ -66,9 +67,7 @@
|
|
66
67
|
#define CONF_WS 16
|
67
68
|
#define CONF_ESC 32
|
68
69
|
#define CONF_QUOTE 64
|
69
|
-
#define CONF_DQUOTE 1024
|
70
70
|
#define CONF_COMMENT 128
|
71
|
-
#define CONF_FCOMMENT 2048
|
72
71
|
#define CONF_EOF 8
|
73
72
|
#define CONF_HIGHBIT 4096
|
74
73
|
#define CONF_ALPHA (CONF_UPPER|CONF_LOWER)
|
@@ -78,7 +77,6 @@
|
|
78
77
|
|
79
78
|
#define KEYTYPES(c) CONF_type_default
|
80
79
|
#define IS_COMMENT(c,a) (KEYTYPES(c)[(a)&0xff]&CONF_COMMENT)
|
81
|
-
#define IS_FCOMMENT(c,a) (KEYTYPES(c)[(a)&0xff]&CONF_FCOMMENT)
|
82
80
|
#define IS_EOF(c,a) (KEYTYPES(c)[(a)&0xff]&CONF_EOF)
|
83
81
|
#define IS_ESC(c,a) (KEYTYPES(c)[(a)&0xff]&CONF_ESC)
|
84
82
|
#define IS_NUMBER(c,a) (KEYTYPES(c)[(a)&0xff]&CONF_NUMBER)
|
@@ -87,8 +85,6 @@
|
|
87
85
|
#define IS_ALPHA_NUMERIC_PUNCT(c,a) \
|
88
86
|
(KEYTYPES(c)[(a)&0xff]&CONF_ALPHA_NUMERIC_PUNCT)
|
89
87
|
#define IS_QUOTE(c,a) (KEYTYPES(c)[(a)&0xff]&CONF_QUOTE)
|
90
|
-
#define IS_DQUOTE(c,a) (KEYTYPES(c)[(a)&0xff]&CONF_DQUOTE)
|
91
|
-
#define IS_HIGHBIT(c,a) (KEYTYPES(c)[(a)&0xff]&CONF_HIGHBIT)
|
92
88
|
|
93
89
|
static const unsigned short CONF_type_default[256]={
|
94
90
|
0x0008,0x0000,0x0000,0x0000,0x0000,0x0000,0x0000,0x0000,
|