blob: 68a5440692294bbe30f5d0e27cb85ca159b36229 [file]
// Copyright 2012 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "net/socket/udp_socket_posix.h"
#include "build/build_config.h"
#if BUILDFLAG(IS_APPLE)
// This must be defined before including <netinet/in.h>
// to use IPV6_DONTFRAG, one of the IPv6 Sockets option introduced by RFC 3542
#define __APPLE_USE_RFC_3542
#endif // BUILDFLAG(IS_APPLE)
#include <errno.h>
#include <fcntl.h>
#include <net/if.h>
#include <netdb.h>
#include <netinet/in.h>
#include <stdint.h>
#include <sys/ioctl.h>
#include <sys/socket.h>
#include <algorithm>
#include <array>
#include <memory>
#include <vector>
#include "base/debug/alias.h"
#include "base/debug/crash_logging.h"
#include "base/debug/dump_without_crashing.h"
#include "base/files/file_util.h"
#include "base/functional/bind.h"
#include "base/functional/callback.h"
#include "base/functional/callback_helpers.h"
#include "base/logging.h"
#include "base/metrics/histogram_functions.h"
#include "base/notimplemented.h"
#include "base/posix/eintr_wrapper.h"
#include "base/rand_util.h"
#include "base/task/current_thread.h"
#include "base/task/thread_pool.h"
#include "base/trace_event/trace_event.h"
#include "net/base/cronet_buildflags.h"
#include "net/base/features.h"
#include "net/base/io_buffer.h"
#include "net/base/ip_address.h"
#include "net/base/ip_address_util.h"
#include "net/base/ip_endpoint.h"
#include "net/base/net_errors.h"
#include "net/base/network_activity_monitor.h"
#include "net/base/network_interfaces.h"
#include "net/base/sockaddr_storage.h"
#include "net/base/trace_constants.h"
#include "net/log/net_log.h"
#include "net/log/net_log_event_type.h"
#include "net/log/net_log_source.h"
#include "net/log/net_log_source_type.h"
#include "net/socket/extra_socket_defines.h"
#include "net/socket/socket_descriptor.h"
#include "net/socket/socket_options.h"
#include "net/socket/socket_tag.h"
#include "net/socket/udp_net_log_parameters.h"
#include "net/traffic_annotation/network_traffic_annotation.h"
#if BUILDFLAG(IS_ANDROID)
#include "base/native_library.h"
#include "net/android/network_library.h"
#endif // BUILDFLAG(IS_ANDROID)
#if BUILDFLAG(IS_APPLE)
#include "net/base/apple/guarded_fd.h"
#include "net/socket/socket_apple.h"
#endif // BUILDFLAG(IS_APPLE)
#if BUILDFLAG(IS_MAC)
#include <ifaddrs.h>
#include "base/files/scoped_file.h"
#include "base/mac/mac_util.h"
#endif // BUILDFLAG(IS_MAC)
namespace net {
namespace {
constexpr int kBindRetries = 10;
constexpr int kPortStart = 1024;
constexpr int kPortEnd = 65535;
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_ANDROID)
// Maximum number of UDP packets that can be read at a time from recvmmsg.
constexpr size_t kMaxMmsgMessages = 128;
#endif
int GetSocketFDHash(int fd) {
return fd ^ 1595649551;
}
#if BUILDFLAG(IS_MAC)
// macOS: Resolves interface index for SSM operations (both IPv4 and IPv6).
// Returns the interface index for routing to `destination_address`, or 0 if
// not found. Uses a temporary UDP socket with connect() to determine the
// outgoing interface via the kernel's routing table.
uint32_t GetInterfaceForDestination(const IPAddress& destination_address) {
int family = destination_address.IsIPv4() ? AF_INET : AF_INET6;
base::ScopedFD sock(socket(family, SOCK_DGRAM, 0));
if (!sock.is_valid()) {
return 0;
}
// Connect to destination to determine the outgoing interface.
// This doesn't send any traffic - it just sets up the routing.
SockaddrStorage storage;
if (!IPEndPoint(destination_address, 1)
.ToSockAddr(storage.addr(), &storage.addr_len) ||
connect(sock.get(), storage.addr(), storage.addr_len) != 0) {
return 0;
}
SockaddrStorage local_storage;
if (getsockname(sock.get(), local_storage.addr(), &local_storage.addr_len) !=
0) {
return 0;
}
IPEndPoint local_endpoint;
if (!local_endpoint.FromSockAddr(local_storage.addr(),
local_storage.addr_len)) {
return 0;
}
// Get network interfaces list and find the one matching local address.
NetworkInterfaceList interfaces;
if (!GetNetworkList(&interfaces, INCLUDE_HOST_SCOPE_VIRTUAL_INTERFACES)) {
return 0;
}
for (const auto& iface : interfaces) {
if (iface.address == local_endpoint.address()) {
return iface.interface_index;
}
}
return 0;
}
#endif // BUILDFLAG(IS_MAC)
#if !BUILDFLAG(IS_ANDROID) && !BUILDFLAG(IS_IOS) && !BUILDFLAG(IS_FUCHSIA)
// Helper for IPv4 SSM. Sets sin_len on macOS, no-op on Linux.
group_source_req CreateIPv4SourceGroupRequest(const IPAddress& group_address,
const IPAddress& source_address,
uint32_t interface_index) {
group_source_req mreq = {};
mreq.gsr_interface = interface_index;
sockaddr_in* group = reinterpret_cast<sockaddr_in*>(&mreq.gsr_group);
group->sin_family = AF_INET;
#if BUILDFLAG(IS_MAC)
group->sin_len = sizeof(sockaddr_in);
#endif
group->sin_addr = ToInAddr(group_address);
sockaddr_in* source = reinterpret_cast<sockaddr_in*>(&mreq.gsr_source);
source->sin_family = AF_INET;
#if BUILDFLAG(IS_MAC)
source->sin_len = sizeof(sockaddr_in);
#endif
source->sin_addr = ToInAddr(source_address);
return mreq;
}
// Helper to populate a group_source_req struct for IPv6 SSM operations.
group_source_req CreateIPv6SourceGroupRequest(const IPAddress& group_address,
const IPAddress& source_address,
uint32_t interface_index) {
group_source_req mreq = {};
mreq.gsr_interface = interface_index;
sockaddr_in6* group = reinterpret_cast<sockaddr_in6*>(&mreq.gsr_group);
group->sin6_family = AF_INET6;
#if BUILDFLAG(IS_MAC)
group->sin6_len = sizeof(sockaddr_in6);
#endif
group->sin6_addr = ToIn6Addr(group_address);
sockaddr_in6* source = reinterpret_cast<sockaddr_in6*>(&mreq.gsr_source);
source->sin6_family = AF_INET6;
#if BUILDFLAG(IS_MAC)
source->sin6_len = sizeof(sockaddr_in6);
#endif
source->sin6_addr = ToIn6Addr(source_address);
return mreq;
}
// Creates a group_source_req for either IPv4 or IPv6 based on the address type.
group_source_req CreateSourceGroupRequest(const IPAddress& group_address,
const IPAddress& source_address,
uint32_t interface_index) {
if (group_address.IsIPv4()) {
return CreateIPv4SourceGroupRequest(group_address, source_address,
interface_index);
}
return CreateIPv6SourceGroupRequest(group_address, source_address,
interface_index);
}
#endif // !BUILDFLAG(IS_ANDROID) && !BUILDFLAG(IS_IOS) && !BUILDFLAG(IS_FUCHSIA)
} // namespace
UDPSocketPosix::UDPSocketPosix(DatagramSocket::BindType bind_type,
net::NetLog* net_log,
const net::NetLogSource& source)
: socket_(kInvalidSocket),
bind_type_(bind_type),
read_socket_watcher_(FROM_HERE),
write_socket_watcher_(FROM_HERE),
read_watcher_(this),
write_watcher_(this),
net_log_(NetLogWithSource::Make(net_log, NetLogSourceType::UDP_SOCKET)),
bound_network_(handles::kInvalidNetworkHandle) {
net_log_.BeginEventReferencingSource(NetLogEventType::SOCKET_ALIVE, source);
}
UDPSocketPosix::UDPSocketPosix(DatagramSocket::BindType bind_type,
NetLogWithSource source_net_log)
: socket_(kInvalidSocket),
bind_type_(bind_type),
read_socket_watcher_(FROM_HERE),
write_socket_watcher_(FROM_HERE),
read_watcher_(this),
write_watcher_(this),
net_log_(source_net_log),
bound_network_(handles::kInvalidNetworkHandle) {
net_log_.BeginEventReferencingSource(NetLogEventType::SOCKET_ALIVE,
net_log_.source());
}
UDPSocketPosix::~UDPSocketPosix() {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
Close();
net_log_.EndEvent(NetLogEventType::SOCKET_ALIVE);
}
int UDPSocketPosix::Open(AddressFamily address_family) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
DCHECK_EQ(socket_, kInvalidSocket);
auto owned_socket_count = TryAcquireGlobalUDPSocketCount();
if (owned_socket_count.empty())
return ERR_INSUFFICIENT_RESOURCES;
owned_socket_count_ = std::move(owned_socket_count);
addr_family_ = ConvertAddressFamily(address_family);
socket_ = CreatePlatformSocket(addr_family_, SOCK_DGRAM, 0);
if (socket_ == kInvalidSocket) {
owned_socket_count_.Reset();
return MapSystemError(errno);
}
return ConfigureOpenedSocket();
}
int UDPSocketPosix::AdoptOpenedSocket(AddressFamily address_family,
int socket) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
DCHECK_EQ(socket_, kInvalidSocket);
auto owned_socket_count = TryAcquireGlobalUDPSocketCount();
if (owned_socket_count.empty()) {
return ERR_INSUFFICIENT_RESOURCES;
}
owned_socket_count_ = std::move(owned_socket_count);
socket_ = socket;
addr_family_ = ConvertAddressFamily(address_family);
return ConfigureOpenedSocket();
}
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_ANDROID)
namespace {
SetSocketOptionGroResult GetSetSocketOptionGroResult(int setsockopt_rv,
int saved_errno) {
if (setsockopt_rv == 0) {
return SetSocketOptionGroResult::kSuccess;
}
if (saved_errno == ENOPROTOOPT || saved_errno == EOPNOTSUPP ||
saved_errno == ENOPKG) {
return SetSocketOptionGroResult::kUnsupportedKernel;
}
return SetSocketOptionGroResult::kOtherError;
}
void RecordSetSocketOptionGroResult(SetSocketOptionGroResult option_result) {
if (base::ShouldRecordSubsampledMetric(0.01)) {
base::UmaHistogramEnumeration("Net.UDPSocketPosix.SetSocketOptionGroResult",
option_result);
}
}
void RecordGroPacketsRead(size_t packet_count) {
if (base::ShouldRecordSubsampledMetric(0.01)) {
base::UmaHistogramCounts100("Net.UDPSocketPosix.GroPacketsRead",
base::checked_cast<int>(packet_count));
}
}
} // namespace
#endif
void UDPSocketPosix::ConfigureGroSocketOption() {
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_ANDROID)
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
CHECK_NE(socket_, kInvalidSocket);
CHECK_EQ(gro_status_, GroStatus::kUnconfigured);
int on = 1;
int rv = setsockopt(socket_, SOL_UDP, UDP_GRO, &on, sizeof(on));
SetSocketOptionGroResult option_result =
GetSetSocketOptionGroResult(rv, errno);
RecordSetSocketOptionGroResult(option_result);
gro_status_ = option_result == SetSocketOptionGroResult::kSuccess
? GroStatus::kEnabled
: GroStatus::kDisabled;
#else
gro_status_ = GroStatus::kDisabled;
#endif
}
int UDPSocketPosix::ConfigureOpenedSocket() {
#if BUILDFLAG(IS_APPLE) && !BUILDFLAG(CRONET_BUILD) && !BUILDFLAG(IS_IOS_TVOS)
// https://crbug.com/41271555: Guard against a file descriptor being closed
// out from underneath the socket. The change_fdguard_np() and related APIs
// are undocumented, except for comments in the Darwin kernel source code:
// http://fxr.watson.org/fxr/source/bsd/kern/kern_guarded.c?v=xnu-8792;im=10#L451
guardid_t guardid = reinterpret_cast<guardid_t>(this);
PCHECK(change_fdguard_np(socket_, nullptr, 0, &guardid,
GUARD_CLOSE | GUARD_DUP, nullptr) == 0);
#endif // BUILDFLAG(IS_APPLE) && !BUILDFLAG(CRONET_BUILD)
socket_hash_ = GetSocketFDHash(socket_);
if (!base::SetNonBlocking(socket_)) {
const int err = MapSystemError(errno);
Close();
return err;
}
if (tag_ != SocketTag())
tag_.Apply(socket_);
return OK;
}
void UDPSocketPosix::Close() {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
owned_socket_count_.Reset();
if (socket_ == kInvalidSocket)
return;
// Zero out any pending read/write callback state.
read_buf_.reset();
read_buf_len_ = 0;
read_multiple_maximum_packet_size_ = 0;
read_callback_.Reset();
read_multiple_callback_.Reset();
recv_from_address_ = nullptr;
write_buf_.reset();
write_buf_len_ = 0;
write_callback_.Reset();
send_to_address_.reset();
bool ok = read_socket_watcher_.StopWatchingFileDescriptor();
DCHECK(ok);
ok = write_socket_watcher_.StopWatchingFileDescriptor();
DCHECK(ok);
// Verify that |socket_| hasn't been corrupted. Needed to debug
// https://crbug.com/41426706.
CHECK_EQ(socket_hash_, GetSocketFDHash(socket_));
TRACE_EVENT("base", perfetto::StaticString{"CloseSocketUDP"});
#if BUILDFLAG(IS_APPLE) && !BUILDFLAG(CRONET_BUILD) && !BUILDFLAG(IS_IOS_TVOS)
// Attempt to clear errors on the socket so that they are not returned by
// close(). This seems to be effective at clearing some, but not all,
// EPROTOTYPE errors. See https://crbug.com/40732798.
int value = 0;
socklen_t value_len = sizeof(value);
HANDLE_EINTR(getsockopt(socket_, SOL_SOCKET, SO_ERROR, &value, &value_len));
// https://crbug.com/41271555: Guard against a file descriptor being closed
// out from underneath the socket.
guardid_t guardid = reinterpret_cast<guardid_t>(this);
// See the comment in ConfigureOpenedSocket(), above, for information about
// guarded_close_np().
if (IGNORE_EINTR(guarded_close_np(socket_, &guardid)) != 0) {
// There is a bug in the Mac OS kernel that it can return an ENOTCONN or
// EPROTOTYPE error. In this case we don't know whether the file descriptor
// is still allocated or not. We cannot safely close the file descriptor
// because it may have been reused by another thread in the meantime. We may
// leak file handles here and cause a crash indirectly later. See
// https://crbug.com/40732798.
// Temporary workaround to investigate EINVAL return values.
// TODO(https://crbug.com/437414746): Remove this or update it once we have
// information.
if (errno == EINVAL) {
int fdflags = 0;
// This call should be a successful no-op. If it fails, we know the state
// of the filehandle is not what we're expecting.
const int retval = HANDLE_EINTR(
change_fdguard_np(socket_, &guardid, GUARD_CLOSE | GUARD_DUP,
&guardid, GUARD_CLOSE | GUARD_DUP, &fdflags));
// We have seen the case
// retval == -1
// errno == EBADF
// fdflags == 0
// many times and we don't need any more dumps for it. Only gather dumps
// for novel cases.
if (retval != -1 || errno != EBADF || fdflags != 0) {
SCOPED_CRASH_KEY_NUMBER("UdpSocketPosix", "change_fdguard_retval",
retval);
SCOPED_CRASH_KEY_NUMBER("UdpSocketPosix", "change_fdguard_errno",
errno);
SCOPED_CRASH_KEY_NUMBER("UdpSocketPosix", "change_fdguard_fdflags",
fdflags);
base::debug::DumpWithoutCrashing();
}
} else if (errno != ENOTCONN && errno != EPROTOTYPE) {
PLOG(FATAL) << "Unexpected errno from guarded_close_np";
}
}
#else
PCHECK(IGNORE_EINTR(close(socket_)) == 0);
#endif // BUILDFLAG(IS_APPLE) && !BUILDFLAG(CRONET_BUILD)
socket_ = kInvalidSocket;
addr_family_ = 0;
is_connected_ = false;
tag_ = SocketTag();
}
int UDPSocketPosix::GetPeerAddress(IPEndPoint* address) const {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
DCHECK(address);
if (!is_connected())
return ERR_SOCKET_NOT_CONNECTED;
if (!remote_address_.get()) {
SockaddrStorage storage;
if (getpeername(socket_, storage.addr(), &storage.addr_len)) {
return MapSystemError(errno);
}
auto endpoint = std::make_unique<IPEndPoint>();
if (!endpoint->FromSockAddr(storage.addr(), storage.addr_len)) {
return ERR_ADDRESS_INVALID;
}
remote_address_ = std::move(endpoint);
}
*address = *remote_address_;
return OK;
}
int UDPSocketPosix::GetLocalAddress(IPEndPoint* address) const {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
DCHECK(address);
if (!is_connected())
return ERR_SOCKET_NOT_CONNECTED;
if (!local_address_.get()) {
SockaddrStorage storage;
if (getsockname(socket_, storage.addr(), &storage.addr_len)) {
return MapSystemError(errno);
}
auto endpoint = std::make_unique<IPEndPoint>();
if (!endpoint->FromSockAddr(storage.addr(), storage.addr_len)) {
return ERR_ADDRESS_INVALID;
}
local_address_ = std::move(endpoint);
net_log_.AddEvent(NetLogEventType::UDP_LOCAL_ADDRESS, [&] {
return CreateNetLogUDPConnectParams(*local_address_, bound_network_);
});
}
*address = *local_address_;
return OK;
}
int UDPSocketPosix::Read(IOBuffer* buf,
int buf_len,
CompletionOnceCallback callback) {
// It is dangerous to call Read() when GRO is enabled because it can return
// multiple packets in a single superpacket and the caller/parser will never
// expect that.
CHECK(gro_status_ != GroStatus::kEnabled);
return RecvFrom(buf, buf_len, nullptr, std::move(callback));
}
base::expected<DatagramsMetadata, Error> UDPSocketPosix::ReadMultiple(
IOBuffer* buffer,
size_t buf_len,
size_t maximum_packet_size,
base::OnceCallback<void(base::expected<DatagramsMetadata, Error>)>
callback) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
// Protects initial synchronous invocations across all POSIX platforms before
// branching into either InternalReadMultiple() or the RecvFrom() fallback.
// Prevents crashes when resuming reading on a socket closed asynchronously
// during a yield window (see https://crbug.com/533224376).
if (socket_ == kInvalidSocket) {
return base::unexpected(ERR_INVALID_HANDLE);
}
// Concurrent reads are not supported.
CHECK(read_multiple_callback_.is_null());
CHECK(read_callback_.is_null());
CHECK(!recv_from_address_);
CHECK(!callback.is_null()); // Synchronous operation not supported
CHECK_GT(buf_len, 0u);
CHECK_GT(maximum_packet_size, 0u);
CHECK_GE(buf_len, maximum_packet_size);
// Unconditionally require callers of ReadMultiple() to provide a buffer of
// at least 64KB (kMinimumReadMultipleBufferSize) to prevent packet truncation
// when reading coalesced superpackets (e.g. UDP GRO).
CHECK_GE(buf_len, kMinimumReadMultipleBufferSize);
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_ANDROID)
if (gro_status_ == GroStatus::kUnconfigured) {
if (base::FeatureList::IsEnabled(features::kEnableUdpGro)) {
ConfigureGroSocketOption();
} else {
gro_status_ = GroStatus::kDisabled;
}
}
base::expected<DatagramsMetadata, Error> nread =
InternalReadMultiple(buffer, buf_len, maximum_packet_size);
if (nread.has_value() || nread.error() != ERR_IO_PENDING) {
return nread;
}
if (!base::CurrentIOThread::Get()->WatchFileDescriptor(
socket_, true, base::MessagePumpForIO::WATCH_READ,
&read_socket_watcher_, &read_watcher_)) {
PLOG(ERROR) << "WatchFileDescriptor failed on read";
int result = MapSystemError(errno);
LogRead(result, nullptr, 0, nullptr);
return base::unexpected(static_cast<Error>(result));
}
read_buf_ = buffer;
read_buf_len_ = base::checked_cast<int>(buf_len);
read_multiple_maximum_packet_size_ = maximum_packet_size;
read_multiple_callback_ = std::move(callback);
return base::unexpected(ERR_IO_PENDING);
#else
int rv =
RecvFrom(buffer, base::checked_cast<int>(maximum_packet_size), nullptr,
base::BindOnce(&UDPSocketPosix::OnFallbackReadComplete,
base::Unretained(this), std::move(callback)));
if (rv < 0) {
return base::unexpected(static_cast<Error>(rv));
}
return DatagramsMetadata{DatagramMetadata{
.offset = 0,
.length = static_cast<size_t>(rv),
.tos = last_tos_,
}};
#endif
}
int UDPSocketPosix::RecvFrom(IOBuffer* buf,
int buf_len,
IPEndPoint* address,
CompletionOnceCallback callback) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
DCHECK_NE(kInvalidSocket, socket_);
CHECK(read_callback_.is_null());
CHECK(read_multiple_callback_.is_null());
// It is dangerous to call RecvFrom() when GRO is enabled because it can
// return multiple packets in a single superpacket and the caller/parser will
// never expect that.
CHECK(gro_status_ != GroStatus::kEnabled);
DCHECK(!recv_from_address_);
DCHECK(!callback.is_null()); // Synchronous operation not supported
DCHECK_GT(buf_len, 0);
int nread = InternalRecvFrom(buf, buf_len, address);
if (nread != ERR_IO_PENDING)
return nread;
if (!base::CurrentIOThread::Get()->WatchFileDescriptor(
socket_, true, base::MessagePumpForIO::WATCH_READ,
&read_socket_watcher_, &read_watcher_)) {
PLOG(ERROR) << "WatchFileDescriptor failed on read";
int result = MapSystemError(errno);
LogRead(result, nullptr, 0, nullptr);
return result;
}
read_buf_ = buf;
read_buf_len_ = buf_len;
recv_from_address_ = address;
read_callback_ = std::move(callback);
return ERR_IO_PENDING;
}
int UDPSocketPosix::Write(
IOBuffer* buf,
int buf_len,
CompletionOnceCallback callback,
const NetworkTrafficAnnotationTag& traffic_annotation) {
return SendToOrWrite(buf, buf_len, nullptr, std::move(callback));
}
int UDPSocketPosix::SendTo(IOBuffer* buf,
int buf_len,
const IPEndPoint& address,
CompletionOnceCallback callback) {
return SendToOrWrite(buf, buf_len, &address, std::move(callback));
}
int UDPSocketPosix::SendToOrWrite(IOBuffer* buf,
int buf_len,
const IPEndPoint* address,
CompletionOnceCallback callback) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
DCHECK_NE(kInvalidSocket, socket_);
CHECK(write_callback_.is_null());
DCHECK(!callback.is_null()); // Synchronous operation not supported
DCHECK_GT(buf_len, 0);
if (int result = InternalSendTo(buf, buf_len, address);
result != ERR_IO_PENDING) {
return result;
}
if (!base::CurrentIOThread::Get()->WatchFileDescriptor(
socket_, true, base::MessagePumpForIO::WATCH_WRITE,
&write_socket_watcher_, &write_watcher_)) {
DVPLOG(1) << "WatchFileDescriptor failed on write";
int result = MapSystemError(errno);
LogWrite(result, nullptr, nullptr);
return result;
}
write_buf_ = buf;
write_buf_len_ = buf_len;
DCHECK(!send_to_address_.get());
if (address) {
send_to_address_ = std::make_unique<IPEndPoint>(*address);
}
write_callback_ = std::move(callback);
return ERR_IO_PENDING;
}
int UDPSocketPosix::Connect(const IPEndPoint& address) {
DCHECK_NE(socket_, kInvalidSocket);
net_log_.BeginEvent(NetLogEventType::UDP_CONNECT, [&] {
return CreateNetLogUDPConnectParams(address, bound_network_);
});
int rv = SetMulticastOptions();
if (rv != OK)
return rv;
rv = InternalConnect(address);
net_log_.EndEventWithNetErrorCode(NetLogEventType::UDP_CONNECT, rv);
is_connected_ = (rv == OK);
if (rv != OK)
tag_ = SocketTag();
return rv;
}
int UDPSocketPosix::InternalConnect(const IPEndPoint& address) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
DCHECK(!is_connected());
DCHECK(!remote_address_.get());
int rv = 0;
if (bind_type_ == DatagramSocket::RANDOM_BIND) {
// Construct IPAddress of appropriate size (IPv4 or IPv6) of 0s,
// representing INADDR_ANY or in6addr_any.
size_t addr_size = address.GetSockAddrFamily() == AF_INET
? IPAddress::kIPv4AddressSize
: IPAddress::kIPv6AddressSize;
rv = RandomBind(IPAddress::AllZeros(addr_size));
}
// else connect() does the DatagramSocket::DEFAULT_BIND
if (rv < 0) {
return rv;
}
SockaddrStorage storage;
if (!address.ToSockAddr(storage.addr(), &storage.addr_len)) {
return ERR_ADDRESS_INVALID;
}
rv = HANDLE_EINTR(connect(socket_, storage.addr(), storage.addr_len));
if (rv < 0)
return MapSystemError(errno);
remote_address_ = std::make_unique<IPEndPoint>(address);
return rv;
}
int UDPSocketPosix::Bind(const IPEndPoint& address) {
DCHECK_NE(socket_, kInvalidSocket);
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
DCHECK(!is_connected());
int rv = SetMulticastOptions();
if (rv < 0)
return rv;
rv = DoBind(address);
if (rv < 0)
return rv;
is_connected_ = true;
local_address_.reset();
return rv;
}
int UDPSocketPosix::BindToNetwork(handles::NetworkHandle network) {
DCHECK_NE(socket_, kInvalidSocket);
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
DCHECK(!is_connected());
#if BUILDFLAG(IS_ANDROID)
int rv = net::android::BindToNetwork(socket_, network);
if (rv == OK)
bound_network_ = network;
return rv;
#else
NOTIMPLEMENTED();
return ERR_NOT_IMPLEMENTED;
#endif
}
int UDPSocketPosix::SetReceiveBufferSize(int32_t size) {
DCHECK_NE(socket_, kInvalidSocket);
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
return SetSocketReceiveBufferSize(socket_, size);
}
int UDPSocketPosix::SetSendBufferSize(int32_t size) {
DCHECK_NE(socket_, kInvalidSocket);
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
return SetSocketSendBufferSize(socket_, size);
}
int UDPSocketPosix::SetDoNotFragment() {
DCHECK_NE(socket_, kInvalidSocket);
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
#if !defined(IP_PMTUDISC_DO) && !BUILDFLAG(IS_MAC)
return ERR_NOT_IMPLEMENTED;
#elif BUILDFLAG(IS_MAC)
int val = 1;
if (addr_family_ == AF_INET6) {
int rv =
setsockopt(socket_, IPPROTO_IPV6, IPV6_DONTFRAG, &val, sizeof(val));
// IP_DONTFRAG is not supported on v4mapped addresses.
return rv == 0 ? OK : MapSystemError(errno);
}
int rv = setsockopt(socket_, IPPROTO_IP, IP_DONTFRAG, &val, sizeof(val));
return rv == 0 ? OK : MapSystemError(errno);
#else
if (addr_family_ == AF_INET6) {
int val = IPV6_PMTUDISC_DO;
if (setsockopt(socket_, IPPROTO_IPV6, IPV6_MTU_DISCOVER, &val,
sizeof(val)) != 0) {
return MapSystemError(errno);
}
int v6_only = false;
socklen_t v6_only_len = sizeof(v6_only);
if (getsockopt(socket_, IPPROTO_IPV6, IPV6_V6ONLY, &v6_only,
&v6_only_len) != 0) {
return MapSystemError(errno);
}
if (v6_only)
return OK;
}
int val = IP_PMTUDISC_DO;
int rv = setsockopt(socket_, IPPROTO_IP, IP_MTU_DISCOVER, &val, sizeof(val));
return rv == 0 ? OK : MapSystemError(errno);
#endif
}
int UDPSocketPosix::SetRecvTos() {
DCHECK_NE(socket_, kInvalidSocket);
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
uint32_t ecn = 1;
if (addr_family_ == AF_INET6) {
if (setsockopt(socket_, IPPROTO_IPV6, IPV6_RECVTCLASS, &ecn, sizeof(ecn)) !=
0) {
return MapSystemError(errno);
}
#if BUILDFLAG(IS_APPLE)
// Linux requires dual-stack sockets to have the sockopt set on both levels.
// Apple does not, and in fact returns an error if it is.
return OK;
#else
int v6_only = false;
socklen_t v6_only_len = sizeof(v6_only);
if (getsockopt(socket_, IPPROTO_IPV6, IPV6_V6ONLY, &v6_only,
&v6_only_len) != 0) {
return MapSystemError(errno);
}
if (v6_only) {
return OK;
}
#endif // BUILDFLAG(IS_APPLE)
}
int rv = setsockopt(socket_, IPPROTO_IP, IP_RECVTOS, &ecn, sizeof(ecn));
return rv == 0 ? OK : MapSystemError(errno);
}
void UDPSocketPosix::SetMsgConfirm(bool confirm) {
#if !BUILDFLAG(IS_APPLE)
if (confirm) {
sendto_flags_ |= MSG_CONFIRM;
} else {
sendto_flags_ &= ~MSG_CONFIRM;
}
#endif // !BUILDFLAG(IS_APPLE)
}
int UDPSocketPosix::AllowAddressReuse() {
DCHECK_NE(socket_, kInvalidSocket);
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
DCHECK(!is_connected());
return SetReuseAddr(socket_, true);
}
int UDPSocketPosix::SetBroadcast(bool broadcast) {
DCHECK_NE(socket_, kInvalidSocket);
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
int value = broadcast ? 1 : 0;
int rv;
#if BUILDFLAG(IS_APPLE)
// SO_REUSEPORT on OSX permits multiple processes to each receive
// UDP multicast or broadcast datagrams destined for the bound
// port.
// This is only being set on OSX because its behavior is platform dependent
// and we are playing it safe by only setting it on platforms where things
// break.
rv = setsockopt(socket_, SOL_SOCKET, SO_REUSEPORT, &value, sizeof(value));
if (rv != 0)
return MapSystemError(errno);
#endif // BUILDFLAG(IS_APPLE)
rv = setsockopt(socket_, SOL_SOCKET, SO_BROADCAST, &value, sizeof(value));
return rv == 0 ? OK : MapSystemError(errno);
}
int UDPSocketPosix::AllowAddressSharingForMulticast() {
DCHECK_NE(socket_, kInvalidSocket);
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
DCHECK(!is_connected());
int rv = AllowAddressReuse();
if (rv != OK)
return rv;
#ifdef SO_REUSEPORT
// Attempt to set SO_REUSEPORT if available. On some platforms, this is
// necessary to allow the address to be fully shared between separate sockets.
// On platforms where the option does not exist, SO_REUSEADDR should be
// sufficient to share multicast packets if such sharing is at all possible.
int value = 1;
rv = setsockopt(socket_, SOL_SOCKET, SO_REUSEPORT, &value, sizeof(value));
// Ignore errors that the option does not exist.
if (rv != 0 && errno != ENOPROTOOPT)
return MapSystemError(errno);
#endif // SO_REUSEPORT
return OK;
}
void UDPSocketPosix::ReadWatcher::OnFileCanReadWithoutBlocking(int) {
TRACE_EVENT(NetTracingCategory(),
"UDPSocketPosix::ReadWatcher::OnFileCanReadWithoutBlocking");
if (!socket_->read_callback_.is_null()) {
socket_->DidCompleteRead();
} else if (!socket_->read_multiple_callback_.is_null()) {
socket_->DidCompleteMultipleRead();
}
}
void UDPSocketPosix::WriteWatcher::OnFileCanWriteWithoutBlocking(int) {
if (!socket_->write_callback_.is_null())
socket_->DidCompleteWrite();
}
void UDPSocketPosix::DoReadCallback(int rv) {
DCHECK_NE(rv, ERR_IO_PENDING);
DCHECK(!read_callback_.is_null());
// Since Run() may result in Read() being called,
// clear |read_callback_| up front.
std::move(read_callback_).Run(rv);
}
void UDPSocketPosix::DoReadMultipleCallback(
base::expected<DatagramsMetadata, Error> rv) {
CHECK(rv.has_value() || rv.error() != ERR_IO_PENDING);
CHECK(!read_multiple_callback_.is_null());
// Since Run() may result in Read() being called,
// clear |read_multiple_callback_| up front.
std::move(read_multiple_callback_).Run(std::move(rv));
}
void UDPSocketPosix::OnFallbackReadComplete(
base::OnceCallback<void(base::expected<DatagramsMetadata, Error>)> callback,
int rv) {
if (rv < 0) {
std::move(callback).Run(base::unexpected(static_cast<Error>(rv)));
return;
}
std::move(callback).Run(DatagramsMetadata{DatagramMetadata{
.offset = 0,
.length = static_cast<size_t>(rv),
.tos = last_tos_,
}});
}
void UDPSocketPosix::DoWriteCallback(int rv) {
DCHECK_NE(rv, ERR_IO_PENDING);
DCHECK(!write_callback_.is_null());
// Since Run() may result in Write() being called,
// clear |write_callback_| up front.
std::move(write_callback_).Run(rv);
}
void UDPSocketPosix::DidCompleteRead() {
int result =
InternalRecvFrom(read_buf_.get(), read_buf_len_, recv_from_address_);
if (result != ERR_IO_PENDING) {
read_buf_.reset();
read_buf_len_ = 0;
recv_from_address_ = nullptr;
bool ok = read_socket_watcher_.StopWatchingFileDescriptor();
DCHECK(ok);
DoReadCallback(result);
}
}
void UDPSocketPosix::DidCompleteMultipleRead() {
CHECK(!read_multiple_callback_.is_null());
base::expected<DatagramsMetadata, Error> result = InternalReadMultiple(
read_buf_.get(), read_buf_len_, read_multiple_maximum_packet_size_);
if (result.has_value() || result.error() != ERR_IO_PENDING) {
read_buf_.reset();
read_buf_len_ = 0;
read_multiple_maximum_packet_size_ = 0;
bool ok = read_socket_watcher_.StopWatchingFileDescriptor();
CHECK(ok);
DoReadMultipleCallback(std::move(result));
}
}
void UDPSocketPosix::LogRead(int result,
const char* bytes,
socklen_t addr_len,
const sockaddr* addr) {
IPEndPoint address;
bool have_valid_address = false;
if (result >= 0 && net_log_.IsCapturing()) {
DCHECK(addr_len > 0);
DCHECK(addr);
have_valid_address = address.FromSockAddr(addr, addr_len);
}
LogRead(result, bytes, have_valid_address ? &address : nullptr);
}
void UDPSocketPosix::LogRead(int result,
const char* bytes,
const IPEndPoint* address) {
if (result < 0) {
net_log_.AddEventWithNetErrorCode(NetLogEventType::UDP_RECEIVE_ERROR,
result);
return;
}
if (net_log_.IsCapturing()) {
NetLogUDPDataTransfer(net_log_, NetLogEventType::UDP_BYTES_RECEIVED, result,
bytes, address);
}
activity_monitor::IncrementBytesReceived(result);
}
void UDPSocketPosix::DidCompleteWrite() {
int result =
InternalSendTo(write_buf_.get(), write_buf_len_, send_to_address_.get());
if (result != ERR_IO_PENDING) {
write_buf_.reset();
write_buf_len_ = 0;
send_to_address_.reset();
write_socket_watcher_.StopWatchingFileDescriptor();
DoWriteCallback(result);
}
}
void UDPSocketPosix::LogWrite(int result,
const char* bytes,
const IPEndPoint* address) {
if (result < 0) {
net_log_.AddEventWithNetErrorCode(NetLogEventType::UDP_SEND_ERROR, result);
return;
}
if (net_log_.IsCapturing()) {
NetLogUDPDataTransfer(net_log_, NetLogEventType::UDP_BYTES_SENT, result,
bytes, address);
}
}
// TODO(crbug.com/40285166): Because InternalRecvFromConnectedSocket() uses
// recvfrom() instead of recvmsg(), it cannot report received ECN marks for
// QUIC ACK-ECN frames. It might be time to deprecate
// experimental_recv_optimization_enabled_ if that experiment has run its
// course.
int UDPSocketPosix::InternalRecvFrom(IOBuffer* buf,
int buf_len,
IPEndPoint* address) {
// If the socket is connected and the remote address is known
// use the more efficient method that uses read() instead of recvmsg().
if (experimental_recv_optimization_enabled_ && is_connected_ &&
remote_address_) {
return InternalRecvFromConnectedSocket(buf, buf_len, address);
}
return InternalRecvFromNonConnectedSocket(buf, buf_len, address);
}
base::expected<UDPSocketPosix::RecvmsgResult, Error> UDPSocketPosix::DoRecvmsg(
IOBuffer* buf,
size_t buf_len,
bool populate_remote_address) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
RecvmsgResult res;
struct iovec iov = {
.iov_base = buf->data(),
.iov_len = buf_len,
};
// control_buffer needs to be big enough to accommodate the maximum
// conceivable number of CMSGs. Other (proprietary) Google QUIC code uses
// 512 Bytes, reused here.
constexpr size_t kControlBufferSize = 512;
alignas(struct cmsghdr) char control_buffer[kControlBufferSize];
struct msghdr msg = {
.msg_name = populate_remote_address ? res.storage.addr() : nullptr,
.msg_namelen = populate_remote_address ? res.storage.addr_len : 0,
.msg_iov = &iov,
.msg_iovlen = 1,
.msg_control = control_buffer,
.msg_controllen = kControlBufferSize,
};
ssize_t bytes_read = HANDLE_EINTR(recvmsg(socket_, &msg, 0));
if (bytes_read < 0) {
return base::unexpected(static_cast<Error>(MapSystemError(errno)));
}
res.bytes_read = static_cast<size_t>(bytes_read);
res.msg_flags = msg.msg_flags;
if (populate_remote_address) {
res.storage.addr_len = msg.msg_namelen;
}
FillResultFromMessageHeader(&msg, &res);
return res;
}
void UDPSocketPosix::FillResultFromMessageHeader(struct msghdr* msg,
RecvmsgResult* result) {
if (msg->msg_controllen == 0) {
return;
}
for (struct cmsghdr* cmsg = CMSG_FIRSTHDR(msg);
cmsg != nullptr &&
(!result->tos.has_value() ||
(gro_status_ == GroStatus::kEnabled && !result->gso_size.has_value()));
// SAFETY: CMSG_NXTHDR is a system macro that safely iterates over
// control messages using the boundaries defined in msghdr.
cmsg = UNSAFE_BUFFERS(CMSG_NXTHDR(msg, cmsg))) {
#if BUILDFLAG(IS_APPLE)
constexpr int kTosType = IP_RECVTOS;
#else
constexpr int kTosType = IP_TOS;
#endif
if (cmsg->cmsg_level == IPPROTO_IP && cmsg->cmsg_type == kTosType &&
cmsg->cmsg_len >= CMSG_LEN(sizeof(uint8_t)) &&
!result->tos.has_value()) {
uint8_t tos_val = 0;
// SAFETY: CMSG_DATA returns a pointer to the control message payload.
// For IP_TOS, the kernel writes the payload as a uint8_t (1 byte).
auto cmsg_data_as_span = UNSAFE_BUFFERS(base::span(
reinterpret_cast<const uint8_t*>(CMSG_DATA(cmsg)), sizeof(uint8_t)));
base::byte_span_from_ref(tos_val).copy_from(cmsg_data_as_span);
result->tos = tos_val;
} else if (cmsg->cmsg_level == IPPROTO_IPV6 &&
cmsg->cmsg_type == IPV6_TCLASS &&
cmsg->cmsg_len >= CMSG_LEN(sizeof(int)) &&
!result->tos.has_value()) {
int tclass_val = 0;
// SAFETY: CMSG_DATA returns a pointer to the control message payload.
// For IPV6_TCLASS, the kernel writes the payload as an 'int' (usually 4
// bytes). We must read sizeof(int) bytes to correctly handle big-endian
// architectures (where the value would be in the last byte of the int)
// and avoid alignment issues.
auto cmsg_data_as_span = UNSAFE_BUFFERS(base::span(
reinterpret_cast<const uint8_t*>(CMSG_DATA(cmsg)), sizeof(int)));
base::byte_span_from_ref(tclass_val).copy_from(cmsg_data_as_span);
result->tos = static_cast<uint8_t>(tclass_val);
}
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_ANDROID)
else if (gro_status_ == GroStatus::kEnabled &&
cmsg->cmsg_level == SOL_UDP && cmsg->cmsg_type == UDP_GRO &&
cmsg->cmsg_len >= CMSG_LEN(sizeof(int)) &&
!result->gso_size.has_value()) {
int gso_val = 0;
// SAFETY: CMSG_DATA returns a pointer to the control message payload.
// For UDP_GRO, the kernel writes the payload as an 'int' (usually 4
// bytes). We verified in the condition above that cmsg->cmsg_len >=
// CMSG_LEN(sizeof(int)), so reading sizeof(int) bytes is guaranteed to
// be in bounds and correctly handles big-endian architectures.
auto cmsg_data_as_span = UNSAFE_BUFFERS(base::span(
reinterpret_cast<const uint8_t*>(CMSG_DATA(cmsg)), sizeof(int)));
base::byte_span_from_ref(gso_val).copy_from(cmsg_data_as_span);
result->gso_size = static_cast<size_t>(gso_val);
}
#endif
}
}
base::expected<DatagramsMetadata, Error> UDPSocketPosix::InternalReadMultiple(
IOBuffer* buffer,
size_t buf_len,
size_t maximum_packet_size) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
// Protects asynchronous IO completions (DidCompleteMultipleRead) when the
// message pump wakes up on Linux/Android/ChromeOS, as that path calls
// InternalReadMultiple() directly and bypasses ReadMultiple(). Prevents
// crashes if the socket is closed asynchronously while an IO completion task
// is queued (see https://crbug.com/533224376).
if (socket_ == kInvalidSocket) {
return base::unexpected(ERR_SOCKET_NOT_CONNECTED);
}
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_ANDROID)
if (gro_status_ == GroStatus::kEnabled) {
return InternalReadMultipleWithGro(buffer, buf_len, maximum_packet_size);
}
return InternalRecvMmsg(buffer, buf_len / maximum_packet_size,
maximum_packet_size);
#else
NOTREACHED();
#endif
}
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_ANDROID)
base::expected<DatagramsMetadata, Error> UDPSocketPosix::InternalRecvMmsg(
IOBuffer* buffer,
size_t num_messages,
size_t maximum_packet_size) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
CHECK_GE(buffer->span().size(), num_messages * maximum_packet_size);
size_t messages_to_read =
static_cast<size_t>(std::min(num_messages, kMaxMmsgMessages));
// We only expect to receive TOS/ECN control messages, which fit in a
// uint8_t (for IPv4 IP_TOS) or an int (for IPv6 IPV6_TCLASS). We allocate
// space for an 'int' (the larger of the two) to support both families.
// The kernel only populates control messages for options explicitly enabled
// via setsockopt (in this case, SetRecvTos() enables
// IP_RECVTOS/IPV6_RECVTCLASS). Therefore, a buffer size of
// CMSG_SPACE(sizeof(int)) per message is sufficient. If we opt-in to more
// control messages in the future (e.g., IP_PKTINFO or IP_RECVTTL), this
// buffer size must be expanded.
constexpr size_t kControlBufferSize = CMSG_SPACE(sizeof(int));
alignas(CMSG_ALIGN(sizeof(int)))
std::array<char, kMaxMmsgMessages * kControlBufferSize>
control_buffers;
std::array<struct mmsghdr, kMaxMmsgMessages> mmsg = {};
std::array<struct iovec, kMaxMmsgMessages> mmsg_iov = {};
const auto buffer_span = buffer->span();
for (size_t i = 0; i < messages_to_read; ++i) {
struct iovec& iov = mmsg_iov[i];
iov.iov_base = &buffer_span[i * maximum_packet_size];
iov.iov_len = maximum_packet_size;
struct msghdr& msg_hdr = mmsg[i].msg_hdr;
msg_hdr.msg_iov = &iov;
msg_hdr.msg_iovlen = 1;
msg_hdr.msg_control = &control_buffers[i * kControlBufferSize];
msg_hdr.msg_controllen = kControlBufferSize;
}
int messages_read = HANDLE_EINTR(
recvmmsg(socket_, mmsg.data(), messages_to_read, 0, nullptr));
if (messages_read < 0) {
int result = MapSystemError(errno);
if (result != ERR_IO_PENDING) {
LogRead(result, nullptr, 0, nullptr);
}
return base::unexpected(static_cast<Error>(result));
}
auto result = ProcessRecvMmsgResults(
base::span(mmsg).first(static_cast<size_t>(messages_read)),
maximum_packet_size);
if (!result.has_value()) {
LogRead(result.error(), nullptr, 0, nullptr);
return result;
}
for (const auto& datagram : result.value()) {
LogRead(static_cast<int>(datagram.length),
reinterpret_cast<const char*>(
buffer->span().subspan(datagram.offset).data()),
remote_address_.get());
}
return result;
}
base::expected<DatagramsMetadata, Error> UDPSocketPosix::ProcessRecvMmsgResults(
base::span<struct mmsghdr> mmsg,
size_t maximum_packet_size) {
DatagramsMetadata datagrams;
datagrams.reserve(mmsg.size());
for (size_t i = 0; i < mmsg.size(); ++i) {
if (mmsg[i].msg_hdr.msg_flags & MSG_TRUNC) {
return base::unexpected(ERR_MSG_TOO_BIG);
}
if (mmsg[i].msg_hdr.msg_flags & MSG_CTRUNC) {
return base::unexpected(ERR_CONTROL_MSG_TOO_BIG);
}
size_t msg_len = mmsg[i].msg_len;
uint8_t msg_tos = 0;
if (msg_len > 0) {
RecvmsgResult temp_res;
FillResultFromMessageHeader(&mmsg[i].msg_hdr, &temp_res);
msg_tos = temp_res.tos.value_or(0);
}
datagrams.push_back(DatagramMetadata{
.offset = i * maximum_packet_size, .length = msg_len, .tos = msg_tos});
}
return datagrams;
}
base::expected<DatagramsMetadata, Error>
UDPSocketPosix::InternalReadMultipleWithGro(IOBuffer* buffer,
size_t buf_len,
size_t maximum_packet_size) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
CHECK_GE(buffer->span().size(), buf_len);
auto recv_result = DoRecvmsg(buffer, buf_len,
/*populate_remote_address=*/false);
if (!recv_result.has_value()) {
Error error = recv_result.error();
if (error != ERR_IO_PENDING) {
LogRead(static_cast<int>(error), nullptr, 0, nullptr);
}
return base::unexpected(error);
}
const RecvmsgResult& res = recv_result.value();
auto result = ProcessGroResult(res, maximum_packet_size);
if (!result.has_value()) {
LogRead(static_cast<int>(result.error()), nullptr, 0, nullptr);
return result;
}
for (const auto& datagram : result.value()) {
LogRead(static_cast<int>(datagram.length),
reinterpret_cast<const char*>(
buffer->span().subspan(datagram.offset).data()),
remote_address_.get());
}
return result;
}
base::expected<DatagramsMetadata, Error> UDPSocketPosix::ProcessGroResult(
const RecvmsgResult& res,
size_t maximum_packet_size) {
DatagramsMetadata datagrams;
if (res.msg_flags & MSG_TRUNC) {
return base::unexpected(ERR_MSG_TOO_BIG);
}
if (res.msg_flags & MSG_CTRUNC) {
return base::unexpected(ERR_CONTROL_MSG_TOO_BIG);
}
// Fast-path for empty reads and single un-coalesced datagrams. If no GRO
// coalescing occurred, the kernel typically does not attach a UDP_GRO cmsg.
// We also check for gso_size == 0 defensively in case the kernel ever
// attaches a zero-sized segment control message.
if (res.bytes_read == 0 || res.gso_size.value_or(0) == 0) {
if (res.bytes_read > maximum_packet_size) {
return base::unexpected(ERR_MSG_TOO_BIG);
}
datagrams.push_back(DatagramMetadata{
.offset = 0, .length = res.bytes_read, .tos = res.tos.value_or(0)});
RecordGroPacketsRead(1);
return datagrams;
}
const size_t gso_size = *res.gso_size;
if (gso_size > maximum_packet_size) {
return base::unexpected(ERR_MSG_TOO_BIG);
}
size_t remaining = res.bytes_read;
size_t offset = 0;
while (remaining > 0) {
// When UDP GRO is active, the Linux kernel coalesces datagrams with the
// same payload length (gso_size) into a single superpacket. However, the
// final packet in the coalesced train is allowed to be smaller than
// gso_size (e.g., the final segment of a transfer). Therefore, bytes_read
// is not guaranteed to be divisible by gso_size, and std::min is required
// to handle the smaller final chunk.
size_t chunk_len = std::min(remaining, gso_size);
datagrams.push_back(DatagramMetadata{
.offset = offset, .length = chunk_len, .tos = res.tos.value_or(0)});
offset += chunk_len;
remaining -= chunk_len;
}
RecordGroPacketsRead(datagrams.size());
return datagrams;
}
#endif
int UDPSocketPosix::InternalRecvFromConnectedSocket(IOBuffer* buf,
int buf_len,
IPEndPoint* address) {
DCHECK(is_connected_);
DCHECK(remote_address_);
int result;
int bytes_transferred = HANDLE_EINTR(read(socket_, buf->data(), buf_len));
if (bytes_transferred < 0) {
result = MapSystemError(errno);
if (result == ERR_IO_PENDING) {
return result;
}
} else if (bytes_transferred == buf_len) {
// NB: recv(..., MSG_TRUNC) would be a more reliable way to do this on
// Linux, but isn't supported by POSIX.
result = ERR_MSG_TOO_BIG;
} else {
result = bytes_transferred;
if (address) {
*address = *remote_address_.get();
}
}
LogRead(result, buf->data(), remote_address_.get());
return result;
}
int UDPSocketPosix::InternalRecvFromNonConnectedSocket(IOBuffer* buf,
int buf_len,
IPEndPoint* address) {
auto recv_result = DoRecvmsg(buf, static_cast<size_t>(buf_len),
/*populate_remote_address=*/true);
int result;
if (!recv_result.has_value()) {
result = static_cast<int>(recv_result.error());
if (result != ERR_IO_PENDING) {
LogRead(result, buf->data(), 0, nullptr);
}
return result;
}
const RecvmsgResult& res = recv_result.value();
if (res.msg_flags & MSG_CTRUNC) {
result = ERR_UNEXPECTED;
} else if (res.msg_flags & MSG_TRUNC) {
// NB: recvfrom(..., MSG_TRUNC, ...) would be a simpler way to do this on
// Linux, but isn't supported by POSIX.
result = ERR_MSG_TOO_BIG;
} else if (address &&
!address->FromSockAddr(res.storage.addr(), res.storage.addr_len)) {
result = ERR_ADDRESS_INVALID;
} else {
result = static_cast<int>(res.bytes_read);
}
last_tos_ = 0;
if (result >= 0) {
last_tos_ = res.tos.value_or(0);
}
LogRead(result, buf->data(), res.storage.addr_len, res.storage.addr());
return result;
}
int UDPSocketPosix::InternalSendTo(IOBuffer* buf,
int buf_len,
const IPEndPoint* address) {
SockaddrStorage storage;
struct sockaddr* addr = storage.addr();
if (!address) {
addr = nullptr;
storage.addr_len = 0;
} else {
if (!address->ToSockAddr(storage.addr(), &storage.addr_len)) {
int result = ERR_ADDRESS_INVALID;
LogWrite(result, nullptr, nullptr);
return result;
}
}
#if !defined(WORK_AROUND_CRBUG_40064248)
ssize_t result = HANDLE_EINTR(sendto(socket_, buf->data(), buf_len,
sendto_flags_, addr, storage.addr_len));
#else // !WORK_AROUND_CRBUG_40064248
ssize_t result = HANDLE_EINTR(SendtoAndDetectBogusReturnValue(
socket_, buf->data(), buf_len, sendto_flags_, addr, storage.addr_len));
if (result == kSendBogusReturnValueDetected) {
// https://crbug.com/40064248 is known to occur as a result of certain
// network configuration changes.
result = ERR_NETWORK_CHANGED;
} else
#endif // !WORK_AROUND_CRBUG_40064248
if (result < 0) {
// Save errno to prevent it from being clobbered by subsequent calls (e.g.,
// android::GetNetworkBlockedReason()).
int os_error = errno;
result = MapSystemError(os_error);
#if BUILDFLAG(IS_ANDROID)
// Android local network permission errors are surfaced as either EPERM or
// EACCESS when reading/writing to an UDP socket
// (https://developer.android.com/privacy-and-security/local-network-permission).
// Note that these errors are not unique to LNP. So, before returning the
// LNP-specific ERR_LOCAL_NETWORK_PERMISSION_MISSING, we must check whether
// LNP was really the cause.
if ((os_error == EPERM || os_error == EACCES) &&
android::GetNetworkBlockedReason(socket_) ==
android::NetworkBlockedReason::kLnp) {
result = ERR_LOCAL_NETWORK_PERMISSION_MISSING;
}
#endif
} else {
CHECK_LE(result, buf_len);
}
if (result != ERR_IO_PENDING) {
LogWrite(result, buf->data(), address);
}
return result;
}
int UDPSocketPosix::SetMulticastOptions() {
if (!(socket_options_ & SOCKET_OPTION_MULTICAST_LOOP)) {
int rv;
if (addr_family_ == AF_INET) {
u_char loop = 0;
rv = setsockopt(socket_, IPPROTO_IP, IP_MULTICAST_LOOP,
&loop, sizeof(loop));
} else {
u_int loop = 0;
rv = setsockopt(socket_, IPPROTO_IPV6, IPV6_MULTICAST_LOOP,
&loop, sizeof(loop));
}
if (rv < 0)
return MapSystemError(errno);
}
if (multicast_time_to_live_ != IP_DEFAULT_MULTICAST_TTL) {
int rv;
if (addr_family_ == AF_INET) {
u_char ttl = multicast_time_to_live_;
rv = setsockopt(socket_, IPPROTO_IP, IP_MULTICAST_TTL,
&ttl, sizeof(ttl));
} else {
// Signed integer. -1 to use route default.
int ttl = multicast_time_to_live_;
rv = setsockopt(socket_, IPPROTO_IPV6, IPV6_MULTICAST_HOPS,
&ttl, sizeof(ttl));
}
if (rv < 0)
return MapSystemError(errno);
}
if (multicast_interface_ != 0) {
switch (addr_family_) {
case AF_INET: {
ip_mreqn mreq = {};
mreq.imr_ifindex = multicast_interface_;
mreq.imr_address.s_addr = htonl(INADDR_ANY);
int rv = setsockopt(socket_, IPPROTO_IP, IP_MULTICAST_IF,
reinterpret_cast<const char*>(&mreq), sizeof(mreq));
if (rv)
return MapSystemError(errno);
break;
}
case AF_INET6: {
uint32_t interface_index = multicast_interface_;
int rv = setsockopt(socket_, IPPROTO_IPV6, IPV6_MULTICAST_IF,
reinterpret_cast<const char*>(&interface_index),
sizeof(interface_index));
if (rv)
return MapSystemError(errno);
break;
}
default:
NOTREACHED() << "Invalid address family";
}
}
return OK;
}
int UDPSocketPosix::DoBind(const IPEndPoint& address) {
SockaddrStorage storage;
if (!address.ToSockAddr(storage.addr(), &storage.addr_len)) {
return ERR_ADDRESS_INVALID;
}
int rv = bind(socket_, storage.addr(), storage.addr_len);
if (rv == 0)
return OK;
int last_error = errno;
#if BUILDFLAG(IS_CHROMEOS)
if (last_error == EINVAL)
return ERR_ADDRESS_IN_USE;
#elif BUILDFLAG(IS_APPLE)
if (last_error == EADDRNOTAVAIL)
return ERR_ADDRESS_IN_USE;
#endif
return MapSystemError(last_error);
}
int UDPSocketPosix::RandomBind(const IPAddress& address) {
DCHECK_EQ(bind_type_, DatagramSocket::RANDOM_BIND);
for (int i = 0; i < kBindRetries; ++i) {
int rv = DoBind(
IPEndPoint(address, base::RandIntInclusive(kPortStart, kPortEnd)));
if (rv != ERR_ADDRESS_IN_USE)
return rv;
}
return DoBind(IPEndPoint(address, 0));
}
int UDPSocketPosix::JoinGroup(const IPAddress& group_address) const {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
if (!is_connected())
return ERR_SOCKET_NOT_CONNECTED;
switch (group_address.size()) {
case IPAddress::kIPv4AddressSize: {
if (addr_family_ != AF_INET)
return ERR_ADDRESS_INVALID;
ip_mreqn mreq = {};
mreq.imr_ifindex = multicast_interface_;
mreq.imr_address.s_addr = htonl(INADDR_ANY);
mreq.imr_multiaddr = ToInAddr(group_address);
int rv = setsockopt(socket_, IPPROTO_IP, IP_ADD_MEMBERSHIP,
&mreq, sizeof(mreq));
if (rv < 0)
return MapSystemError(errno);
return OK;
}
case IPAddress::kIPv6AddressSize: {
if (addr_family_ != AF_INET6)
return ERR_ADDRESS_INVALID;
ipv6_mreq mreq;
mreq.ipv6mr_interface = multicast_interface_;
mreq.ipv6mr_multiaddr = ToIn6Addr(group_address);
int rv = setsockopt(socket_, IPPROTO_IPV6, IPV6_JOIN_GROUP,
&mreq, sizeof(mreq));
if (rv < 0)
return MapSystemError(errno);
return OK;
}
default:
NOTREACHED() << "Invalid address family";
}
}
int UDPSocketPosix::LeaveGroup(const IPAddress& group_address) const {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
if (!is_connected())
return ERR_SOCKET_NOT_CONNECTED;
switch (group_address.size()) {
case IPAddress::kIPv4AddressSize: {
if (addr_family_ != AF_INET)
return ERR_ADDRESS_INVALID;
ip_mreqn mreq = {};
mreq.imr_ifindex = multicast_interface_;
mreq.imr_address.s_addr = INADDR_ANY;
mreq.imr_multiaddr = ToInAddr(group_address);
int rv = setsockopt(socket_, IPPROTO_IP, IP_DROP_MEMBERSHIP,
&mreq, sizeof(mreq));
if (rv < 0)
return MapSystemError(errno);
return OK;
}
case IPAddress::kIPv6AddressSize: {
if (addr_family_ != AF_INET6)
return ERR_ADDRESS_INVALID;
ipv6_mreq mreq;
#if BUILDFLAG(IS_FUCHSIA)
mreq.ipv6mr_interface = multicast_interface_;
#else // BUILDFLAG(IS_FUCHSIA)
mreq.ipv6mr_interface = 0; // 0 indicates default multicast interface.
#endif // !BUILDFLAG(IS_FUCHSIA)
mreq.ipv6mr_multiaddr = ToIn6Addr(group_address);
int rv = setsockopt(socket_, IPPROTO_IPV6, IPV6_LEAVE_GROUP,
&mreq, sizeof(mreq));
if (rv < 0)
return MapSystemError(errno);
return OK;
}
default:
NOTREACHED() << "Invalid address family";
}
}
int UDPSocketPosix::SetSourceGroupMembership(const IPAddress& group_address,
const IPAddress& source_address,
int option) const {
#if BUILDFLAG(IS_ANDROID) || BUILDFLAG(IS_IOS) || BUILDFLAG(IS_FUCHSIA)
return ERR_NOT_IMPLEMENTED;
#else
uint32_t interface_index = multicast_interface_;
#if BUILDFLAG(IS_MAC)
// macOS currently requires explicit interface index for IGMPv3/MLDv2.
// Try to determine the interface; if it fails, pass 0 and let the kernel
// handle it (in case macOS adds automatic interface selection in the future).
if (interface_index == 0) {
interface_index = GetInterfaceForDestination(source_address);
}
#endif
int expected_family = group_address.IsIPv4() ? AF_INET : AF_INET6;
if (addr_family_ != expected_family) {
return ERR_ADDRESS_INVALID;
}
group_source_req mreq =
CreateSourceGroupRequest(group_address, source_address, interface_index);
int proto = group_address.IsIPv4() ? IPPROTO_IP : IPPROTO_IPV6;
int rv = setsockopt(socket_, proto, option, &mreq, sizeof(mreq));
return rv < 0 ? MapSystemError(errno) : OK;
#endif
}
int UDPSocketPosix::JoinSourceGroup(const IPAddress& group_address,
const IPAddress& source_address) const {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
if (!is_connected()) {
return ERR_SOCKET_NOT_CONNECTED;
}
// Validate that both addresses are the same IP version.
if (group_address.size() != source_address.size()) {
return ERR_INVALID_ARGUMENT;
}
return SetSourceGroupMembership(group_address, source_address,
MCAST_JOIN_SOURCE_GROUP);
}
int UDPSocketPosix::LeaveSourceGroup(const IPAddress& group_address,
const IPAddress& source_address) const {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
if (!is_connected()) {
return ERR_SOCKET_NOT_CONNECTED;
}
// Validate that both addresses are the same IP version.
if (group_address.size() != source_address.size()) {
return ERR_INVALID_ARGUMENT;
}
return SetSourceGroupMembership(group_address, source_address,
MCAST_LEAVE_SOURCE_GROUP);
}
int UDPSocketPosix::SetMulticastInterface(uint32_t interface_index) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
if (is_connected())
return ERR_SOCKET_IS_CONNECTED;
multicast_interface_ = interface_index;
return OK;
}
int UDPSocketPosix::SetMulticastTimeToLive(int time_to_live) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
if (is_connected())
return ERR_SOCKET_IS_CONNECTED;
if (time_to_live < 0 || time_to_live > 255)
return ERR_INVALID_ARGUMENT;
multicast_time_to_live_ = time_to_live;
return OK;
}
int UDPSocketPosix::SetMulticastLoopbackMode(bool loopback) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
if (is_connected())
return ERR_SOCKET_IS_CONNECTED;
if (loopback)
socket_options_ |= SOCKET_OPTION_MULTICAST_LOOP;
else
socket_options_ &= ~SOCKET_OPTION_MULTICAST_LOOP;
return OK;
}
int UDPSocketPosix::SetDiffServCodePoint(DiffServCodePoint dscp) {
return SetTos(dscp, ECN_NO_CHANGE);
}
int UDPSocketPosix::SetTos(DiffServCodePoint dscp, EcnCodePoint ecn) {
if (dscp == DSCP_NO_CHANGE && ecn == ECN_NO_CHANGE) {
return OK;
}
int dscp_and_ecn = (dscp << 2) | ecn;
socklen_t size = sizeof(dscp_and_ecn);
if (dscp == DSCP_NO_CHANGE || ecn == ECN_NO_CHANGE) {
int rv;
if (addr_family_ == AF_INET) {
rv = getsockopt(socket_, IPPROTO_IP, IP_TOS, &dscp_and_ecn, &size);
} else {
rv = getsockopt(socket_, IPPROTO_IPV6, IPV6_TCLASS, &dscp_and_ecn, &size);
}
if (rv < 0) {
return MapSystemError(errno);
}
if (dscp == DSCP_NO_CHANGE) {
dscp_and_ecn &= ~ECN_LAST;
dscp_and_ecn |= ecn;
} else {
dscp_and_ecn &= ECN_LAST;
dscp_and_ecn |= (dscp << 2);
}
}
// Set the IPv4 option in all cases to support dual-stack sockets.
int rv = setsockopt(socket_, IPPROTO_IP, IP_TOS, &dscp_and_ecn,
sizeof(dscp_and_ecn));
if (addr_family_ == AF_INET6) {
// In the IPv6 case, the previous socksetopt may fail because of a lack of
// dual-stack support. Therefore ignore the previous return value.
rv = setsockopt(socket_, IPPROTO_IPV6, IPV6_TCLASS,
&dscp_and_ecn, sizeof(dscp_and_ecn));
}
if (rv < 0)
return MapSystemError(errno);
return OK;
}
int UDPSocketPosix::SetIPv6Only(bool ipv6_only) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
if (is_connected()) {
return ERR_SOCKET_IS_CONNECTED;
}
return net::SetIPv6Only(socket_, ipv6_only);
}
void UDPSocketPosix::DetachFromThread() {
DETACH_FROM_THREAD(thread_checker_);
}
void UDPSocketPosix::ApplySocketTag(const SocketTag& tag) {
DCHECK_CALLED_ON_VALID_THREAD(thread_checker_);
if (socket_ != kInvalidSocket && tag != tag_) {
tag.Apply(socket_);
}
tag_ = tag;
}
int UDPSocketPosix::SetIOSNetworkServiceType(int ios_network_service_type) {
if (ios_network_service_type == 0) {
return OK;
}
#if BUILDFLAG(IS_IOS)
if (setsockopt(socket_, SOL_SOCKET, SO_NET_SERVICE_TYPE,
&ios_network_service_type, sizeof(ios_network_service_type))) {
return MapSystemError(errno);
}
#endif // BUILDFLAG(IS_IOS)
return OK;
}
void UDPSocketPosix::RegisterQuicConnectionClosePayload(
base::span<uint8_t> payload) {
#if BUILDFLAG(IS_ANDROID)
net::android::RegisterQuicConnectionClosePayload(socket_, payload);
#endif // BUILDFLAG(IS_ANDROID)
}
void UDPSocketPosix::UnregisterQuicConnectionClosePayload() {
#if BUILDFLAG(IS_ANDROID)
net::android::UnregisterQuicConnectionClosePayload(socket_);
#endif // BUILDFLAG(IS_ANDROID)
}
} // namespace net