protocol-quic 0.0.0

data/ext/ngtcp2/examples/util_test.cc

@@ -0,0 +1,237 @@
+/*
+ * ngtcp2
+ *
+ * Copyright (c) 2018 ngtcp2 contributors
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining
+ * a copy of this software and associated documentation files (the
+ * "Software"), to deal in the Software without restriction, including
+ * without limitation the rights to use, copy, modify, merge, publish,
+ * distribute, sublicense, and/or sell copies of the Software, and to
+ * permit persons to whom the Software is furnished to do so, subject to
+ * the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be
+ * included in all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+ * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+ * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+ * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+ * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+ * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+ */
+#include "util_test.h"
+
+#include <limits>
+
+#include <CUnit/CUnit.h>
+
+#include "util.h"
+
+namespace ngtcp2 {
+
+void test_util_format_durationf() {
+  CU_ASSERT("0ns" == util::format_durationf(0));
+  CU_ASSERT("999ns" == util::format_durationf(999));
+  CU_ASSERT("1.00us" == util::format_durationf(1000));
+  CU_ASSERT("1.00us" == util::format_durationf(1004));
+  CU_ASSERT("1.00us" == util::format_durationf(1005));
+  CU_ASSERT("1.02us" == util::format_durationf(1015));
+  CU_ASSERT("2.00us" == util::format_durationf(1999));
+  CU_ASSERT("1.00ms" == util::format_durationf(999999));
+  CU_ASSERT("3.50ms" == util::format_durationf(3500111));
+  CU_ASSERT("9999.99s" == util::format_durationf(9999990000000llu));
+}
+
+void test_util_format_uint() {
+  CU_ASSERT("0" == util::format_uint(0));
+  CU_ASSERT("18446744073709551615" ==
+            util::format_uint(18446744073709551615ull));
+}
+
+void test_util_format_uint_iec() {
+  CU_ASSERT("0" == util::format_uint_iec(0));
+  CU_ASSERT("1023" == util::format_uint_iec((1 << 10) - 1));
+  CU_ASSERT("1K" == util::format_uint_iec(1 << 10));
+  CU_ASSERT("1M" == util::format_uint_iec(1 << 20));
+  CU_ASSERT("1G" == util::format_uint_iec(1 << 30));
+  CU_ASSERT("18446744073709551615" ==
+            util::format_uint_iec(std::numeric_limits<uint64_t>::max()));
+  CU_ASSERT("1025K" == util::format_uint_iec((1 << 20) + (1 << 10)));
+}
+
+void test_util_format_duration() {
+  CU_ASSERT("0ns" == util::format_duration(0));
+  CU_ASSERT("999ns" == util::format_duration(999));
+  CU_ASSERT("1us" == util::format_duration(1000));
+  CU_ASSERT("1ms" == util::format_duration(1000000));
+  CU_ASSERT("1s" == util::format_duration(1000000000));
+  CU_ASSERT("1m" == util::format_duration(60000000000ull));
+  CU_ASSERT("1h" == util::format_duration(3600000000000ull));
+  CU_ASSERT("18446744073709551615ns" ==
+            util::format_duration(std::numeric_limits<uint64_t>::max()));
+  CU_ASSERT("61s" == util::format_duration(61000000000ull));
+}
+
+void test_util_parse_uint() {
+  {
+    auto res = util::parse_uint("0");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(0 == *res);
+  }
+  {
+    auto res = util::parse_uint("1");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(1 == *res);
+  }
+  {
+    auto res = util::parse_uint("18446744073709551615");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(18446744073709551615ull == *res);
+  }
+  {
+    auto res = util::parse_uint("18446744073709551616");
+    CU_ASSERT(!res.has_value());
+  }
+  {
+    auto res = util::parse_uint("a");
+    CU_ASSERT(!res.has_value());
+  }
+  {
+    auto res = util::parse_uint("1a");
+    CU_ASSERT(!res.has_value());
+  }
+}
+
+void test_util_parse_uint_iec() {
+  {
+    auto res = util::parse_uint_iec("0");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(0 == *res);
+  }
+  {
+    auto res = util::parse_uint_iec("1023");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(1023 == *res);
+  }
+  {
+    auto res = util::parse_uint_iec("1K");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(1 << 10 == *res);
+  }
+  {
+    auto res = util::parse_uint_iec("1M");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(1 << 20 == *res);
+  }
+  {
+    auto res = util::parse_uint_iec("1G");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(1 << 30 == *res);
+  }
+  {
+    auto res = util::parse_uint_iec("11G");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT((1ull << 30) * 11 == *res);
+  }
+  {
+    auto res = util::parse_uint_iec("18446744073709551616");
+    CU_ASSERT(!res.has_value());
+  }
+  {
+    auto res = util::parse_uint_iec("1x");
+    CU_ASSERT(!res.has_value());
+  }
+  {
+    auto res = util::parse_uint_iec("1Gx");
+    CU_ASSERT(!res.has_value());
+  }
+}
+
+void test_util_parse_duration() {
+  {
+    auto res = util::parse_duration("0");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(0 == *res);
+  }
+  {
+    auto res = util::parse_duration("1");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(NGTCP2_SECONDS == *res);
+  }
+  {
+    auto res = util::parse_duration("0ns");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(0 == *res);
+  }
+  {
+    auto res = util::parse_duration("1ns");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(1 == *res);
+  }
+  {
+    auto res = util::parse_duration("1us");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(NGTCP2_MICROSECONDS == *res);
+  }
+  {
+    auto res = util::parse_duration("1ms");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(NGTCP2_MILLISECONDS == *res);
+  }
+  {
+    auto res = util::parse_duration("1s");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(NGTCP2_SECONDS == *res);
+  }
+  {
+    auto res = util::parse_duration("1m");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(60 * NGTCP2_SECONDS == *res);
+  }
+  {
+    auto res = util::parse_duration("1h");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(3600 * NGTCP2_SECONDS == *res);
+  }
+  {
+    auto res = util::parse_duration("2h");
+    CU_ASSERT(res.has_value());
+    CU_ASSERT(2 * 3600 * NGTCP2_SECONDS == *res);
+  }
+  {
+    auto res = util::parse_duration("18446744073709551616");
+    CU_ASSERT(!res.has_value());
+  }
+  {
+    auto res = util::parse_duration("1x");
+    CU_ASSERT(!res.has_value());
+  }
+  {
+    auto res = util::parse_duration("1mx");
+    CU_ASSERT(!res.has_value());
+  }
+  {
+    auto res = util::parse_duration("1mxy");
+    CU_ASSERT(!res.has_value());
+  }
+}
+
+void test_util_normalize_path() {
+  CU_ASSERT("/" == util::normalize_path("/"));
+  CU_ASSERT("/" == util::normalize_path("//"));
+  CU_ASSERT("/foo" == util::normalize_path("/foo"));
+  CU_ASSERT("/foo/bar/" == util::normalize_path("/foo/bar/"));
+  CU_ASSERT("/foo/bar/" == util::normalize_path("/foo/abc/../bar/"));
+  CU_ASSERT("/foo/bar/" == util::normalize_path("/../foo/abc/../bar/"));
+  CU_ASSERT("/foo/bar/" ==
+            util::normalize_path("/./foo/././abc///.././bar/./"));
+  CU_ASSERT("/foo/" == util::normalize_path("/foo/."));
+  CU_ASSERT("/foo/bar" == util::normalize_path("/foo/./bar"));
+  CU_ASSERT("/bar" == util::normalize_path("/foo/./../bar"));
+  CU_ASSERT("/bar" == util::normalize_path("/../../bar"));
+}
+
+} // namespace ngtcp2

data/ext/ngtcp2/examples/util_test.h

@@ -0,0 +1,45 @@
+/*
+ * ngtcp2
+ *
+ * Copyright (c) 2018 ngtcp2 contributors
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining
+ * a copy of this software and associated documentation files (the
+ * "Software"), to deal in the Software without restriction, including
+ * without limitation the rights to use, copy, modify, merge, publish,
+ * distribute, sublicense, and/or sell copies of the Software, and to
+ * permit persons to whom the Software is furnished to do so, subject to
+ * the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be
+ * included in all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+ * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+ * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+ * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+ * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+ * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+ */
+#ifndef UTIL_TEST_H
+#define UTIL_TEST_H
+
+#ifdef HAVE_CONFIG_H
+#  include "config.h"
+#endif // HAVE_CONFIG_H
+
+namespace ngtcp2 {
+
+void test_util_format_durationf();
+void test_util_format_uint();
+void test_util_format_uint_iec();
+void test_util_format_duration();
+void test_util_parse_uint();
+void test_util_parse_uint_iec();
+void test_util_parse_duration();
+void test_util_normalize_path();
+
+} // namespace ngtcp2
+
+#endif // UTIL_TEST_H

data/ext/ngtcp2/examples/util_wolfssl.cc

@@ -0,0 +1,130 @@
+/*
+ * ngtcp2
+ *
+ * Copyright (c) 2020 ngtcp2 contributors
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining
+ * a copy of this software and associated documentation files (the
+ * "Software"), to deal in the Software without restriction, including
+ * without limitation the rights to use, copy, modify, merge, publish,
+ * distribute, sublicense, and/or sell copies of the Software, and to
+ * permit persons to whom the Software is furnished to do so, subject to
+ * the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be
+ * included in all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+ * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+ * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+ * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+ * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+ * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+ */
+#include "util.h"
+
+#include <cassert>
+#include <iostream>
+#include <array>
+
+#include <ngtcp2/ngtcp2_crypto.h>
+
+#include <wolfssl/options.h>
+#include <wolfssl/ssl.h>
+#include <wolfssl/openssl/pem.h>
+
+#include "template.h"
+
+namespace ngtcp2 {
+
+namespace util {
+
+int generate_secure_random(uint8_t *data, size_t datalen) {
+  if (wolfSSL_RAND_bytes(data, static_cast<int>(datalen)) != 1) {
+    return -1;
+  }
+
+  return 0;
+}
+
+int generate_secret(uint8_t *secret, size_t secretlen) {
+  std::array<uint8_t, 16> rand;
+  std::array<uint8_t, 32> md;
+
+  assert(md.size() == secretlen);
+
+  if (generate_secure_random(rand.data(), rand.size()) != 0) {
+    return -1;
+  }
+
+  auto ctx = wolfSSL_EVP_MD_CTX_new();
+  if (ctx == nullptr) {
+    return -1;
+  }
+
+  unsigned int mdlen = md.size();
+  if (!wolfSSL_EVP_DigestInit_ex(ctx, EVP_sha256(), nullptr) ||
+      !wolfSSL_EVP_DigestUpdate(ctx, rand.data(), rand.size()) ||
+      !wolfSSL_EVP_DigestFinal_ex(ctx, md.data(), &mdlen)) {
+    wolfSSL_EVP_MD_CTX_free(ctx);
+    return -1;
+  }
+
+  std::copy_n(std::begin(md), secretlen, secret);
+  wolfSSL_EVP_MD_CTX_free(ctx);
+  return 0;
+}
+
+std::optional<std::string> read_token(const std::string_view &filename) {
+  auto f = wolfSSL_BIO_new_file(filename.data(), "r");
+  if (f == nullptr) {
+    std::cerr << "Could not open token file " << filename << std::endl;
+    return {};
+  }
+
+  char *name, *header;
+  unsigned char *data;
+  long datalen;
+  std::string token;
+  if (wolfSSL_PEM_read_bio(f, &name, &header, &data, &datalen) != 1) {
+    std::cerr << "Could not read token file " << filename << std::endl;
+    wolfSSL_BIO_free(f);
+    return {};
+  }
+  wolfSSL_BIO_free(f);
+
+  wolfSSL_OPENSSL_free(name);
+  wolfSSL_OPENSSL_free(header);
+
+  auto res = std::string{data, data + datalen};
+
+  wolfSSL_OPENSSL_free(data);
+
+  return res;
+}
+
+int write_token(const std::string_view &filename, const uint8_t *token,
+                size_t tokenlen) {
+  auto f = wolfSSL_BIO_new_file(filename.data(), "w");
+  if (f == nullptr) {
+    std::cerr << "Could not write token in " << filename << std::endl;
+    return -1;
+  }
+
+  wolfSSL_PEM_write_bio(f, "QUIC TOKEN", "", token, tokenlen);
+  wolfSSL_BIO_free(f);
+
+  return 0;
+}
+
+const char *crypto_default_ciphers() {
+  return "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_"
+         "SHA256:TLS_AES_128_CCM_SHA256";
+}
+
+const char *crypto_default_groups() { return "X25519:P-256:P-384:P-521"; }
+
+} // namespace util
+
+} // namespace ngtcp2

data/ext/ngtcp2/fuzz/corpus/decode_frame/crypto

@@ -0,0 +1 @@
+��������0123456789abcdef1

data/ext/ngtcp2/fuzz/corpus/decode_frame/data_blocked

@@ -0,0 +1 @@
+��������

data/ext/ngtcp2/fuzz/corpus/decode_frame/datagram

@@ -0,0 +1 @@
+00123456789abcdef3

data/ext/ngtcp2/fuzz/corpus/decode_frame/datagram_len

@@ -0,0 +1 @@
+10123456789abcdef3

data/ext/ngtcp2/fuzz/corpus/decode_frame/max_data

@@ -0,0 +1 @@
+��������

data/ext/ngtcp2/fuzz/corpus/decode_frame/new_connection_id

@@ -0,0 +1 @@
+���	@��������������������������������

data/ext/ngtcp2/fuzz/corpus/decode_frame/new_token

@@ -0,0 +1 @@
+0123456789abcdef2

data/ext/ngtcp2/fuzz/corpus/decode_frame/path_challenge

@@ -0,0 +1 @@
+


data/ext/ngtcp2/fuzz/corpus/decode_frame/path_response

@@ -0,0 +1 @@
+


data/ext/ngtcp2/fuzz/corpus/decode_frame/retire_connection_id

@@ -0,0 +1 @@
+���

data/ext/ngtcp2/fuzz/decode_frame.cc

@@ -0,0 +1,25 @@
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#include "ngtcp2_conn.h"
+
+#ifdef __cplusplus
+}
+#endif
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
+  for (; size;) {
+    ngtcp2_max_frame mfr{};
+
+    auto nread = ngtcp2_pkt_decode_frame(&mfr.fr, data, size);
+    if (nread < 0) {
+      return 0;
+    }
+
+    data += nread;
+    size -= nread;
+  }
+
+  return 0;
+}

data/ext/ngtcp2/fuzz/ksl.cc

@@ -0,0 +1,77 @@
+#include <byteswap.h>
+
+#include <cstring>
+#include <memory>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#include "ngtcp2_ksl.h"
+
+#ifdef __cplusplus
+}
+#endif
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
+  using KeyType = uint16_t;
+  using DataType = int64_t;
+  constexpr size_t keylen = sizeof(KeyType);
+
+  auto compar = [](auto *lhs, auto *rhs) -> int {
+    return *static_cast<const KeyType *>(lhs) <
+           *static_cast<const KeyType *>(rhs);
+  };
+
+  ngtcp2_ksl ksl;
+
+  ngtcp2_ksl_init(&ksl, compar, keylen, ngtcp2_mem_default());
+
+  for (; size >= keylen; ++data, --size) {
+    KeyType d;
+
+    memcpy(&d, data, keylen);
+
+    for (size_t i = 0; i < 2; ++i) {
+      auto add = (d & 0x8000) != 0;
+      auto key = static_cast<KeyType>(d & 0x7fff);
+
+      if (add) {
+        auto data = std::make_unique<DataType>(key);
+        auto rv = ngtcp2_ksl_insert(&ksl, nullptr, &key, data.get());
+        if (rv != 0) {
+          continue;
+        }
+
+        data.release();
+        ngtcp2_ksl_lower_bound(&ksl, &key);
+
+        continue;
+      }
+
+      auto it = ngtcp2_ksl_lower_bound(&ksl, &key);
+      if (ngtcp2_ksl_it_end(&it)) {
+        continue;
+      }
+
+      if (*static_cast<KeyType *>(ngtcp2_ksl_it_key(&it)) != key) {
+        continue;
+      }
+
+      delete static_cast<DataType *>(ngtcp2_ksl_it_get(&it));
+
+      ngtcp2_ksl_remove(&ksl, nullptr, &key);
+
+      d = bswap_16(d);
+    }
+  }
+
+  for (auto it = ngtcp2_ksl_begin(&ksl); !ngtcp2_ksl_it_end(&it);
+       ngtcp2_ksl_it_next(&it)) {
+    delete static_cast<DataType *>(ngtcp2_ksl_it_get(&it));
+  }
+
+  ngtcp2_ksl_free(&ksl);
+
+  return 0;
+}

data/ext/ngtcp2/interop/Dockerfile

@@ -0,0 +1,39 @@
+FROM martenseemann/quic-network-simulator-endpoint:latest
+
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+        git gcc clang-12 make binutils autoconf automake autotools-dev libtool \
+        pkg-config libev-dev libjemalloc-dev \
+        libev4 libjemalloc2 ca-certificates mime-support \
+        llvm-12 libasan5 libubsan1 && \
+    git clone --depth 1 -b OpenSSL_1_1_1t+quic https://github.com/quictls/openssl && \
+    cd openssl && ./config --openssldir=/etc/ssl && make -j$(nproc) && make install_sw && cd .. && rm -rf openssl && \
+    git clone --depth 1 https://github.com/ngtcp2/nghttp3 && \
+    cd nghttp3 && autoreconf -i && \
+    ./configure --enable-lib-only \
+        CC=clang-12 \
+        CXX=clang++-12 \
+        LDFLAGS="-fsanitize=address,undefined -fno-sanitize-recover=undefined" \
+        CPPFLAGS="-fsanitize=address,undefined -fno-sanitize-recover=undefined -g3" && \
+    make -j$(nproc) && make install && cd .. && rm -rf nghttp3 && \
+    git clone --depth 1 https://github.com/ngtcp2/ngtcp2 && \
+    cd ngtcp2 && autoreconf -i && \
+    ./configure \
+        CC=clang-12 \
+        CXX=clang++-12 \
+        LDFLAGS="-fsanitize=address,undefined -fno-sanitize-recover=undefined" \
+        CPPFLAGS="-fsanitize=address,undefined -fno-sanitize-recover=undefined -g3" && \
+    make -j$(nproc) && make install && \
+    cp examples/server examples/client examples/h09server examples/h09client /usr/local/bin && \
+    cd .. && \
+    rm -rf ngtcp2 && \
+    rm -rf /usr/local/lib/libssl.so /usr/local/lib/libcrypto.so /usr/local/lib/libssl.a /usr/local/lib/libcrypto.a /usr/local/lib/pkgconfig/*ssl.pc /usr/local/include/openssl/* && \
+    apt-get -y purge git g++ clang-12 make binutils autoconf automake \
+        autotools-dev libtool pkg-config \
+        libev-dev libjemalloc-dev && \
+    apt-get -y autoremove --purge && \
+    rm -rf /var/log/*
+
+COPY run_endpoint.sh .
+RUN chmod +x run_endpoint.sh
+ENTRYPOINT [ "./run_endpoint.sh" ]