blob: 569dc3587c2dced9a105e2347e04fa0f4031567d [file] [log] [blame]
// Copyright 2014 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "net/server/web_socket_encoder.h"
#include <array>
#include <limits>
#include <string_view>
#include <utility>
#include "base/check.h"
#include "base/containers/extend.h"
#include "base/containers/span.h"
#include "base/memory/ptr_util.h"
#include "base/strings/strcat.h"
#include "base/strings/string_number_conversions.h"
#include "base/strings/string_view_util.h"
#include "net/base/io_buffer.h"
#include "net/base/net_export.h"
#include "net/websockets/websocket_deflate_parameters.h"
#include "net/websockets/websocket_extension.h"
#include "net/websockets/websocket_extension_parser.h"
#include "net/websockets/websocket_frame.h"
namespace net {
NET_EXPORT
const char WebSocketEncoder::kClientExtensions[] =
"permessage-deflate; client_max_window_bits";
namespace {
const int kInflaterChunkSize = 16 * 1024;
// Constants for hybi-10 frame format.
const uint8_t kFinalBit = 0x80;
const uint8_t kReserved1Bit = 0x40;
const uint8_t kReserved2Bit = 0x20;
const uint8_t kReserved3Bit = 0x10;
const uint8_t kOpCodeMask = 0xF;
const uint8_t kMaskBit = 0x80;
const uint8_t kPayloadLengthMask = 0x7F;
const size_t kMaxSingleBytePayloadLength = 125;
const size_t kTwoBytePayloadLengthField = 126;
const size_t kEightBytePayloadLengthField = 127;
const size_t kMaskingKeyWidthInBytes = 4;
WebSocketParseResult DecodeFrameHybi17(std::string_view frame,
bool client_frame,
int* bytes_consumed,
std::string* output,
bool* compressed) {
if (frame.size() < 2) {
return WebSocketParseResult::FRAME_INCOMPLETE;
}
uint8_t first_byte = frame[0];
uint8_t second_byte = frame[1];
std::string_view remaining = frame.substr(2);
bool final = (first_byte & kFinalBit) != 0;
bool reserved1 = (first_byte & kReserved1Bit) != 0;
bool reserved2 = (first_byte & kReserved2Bit) != 0;
bool reserved3 = (first_byte & kReserved3Bit) != 0;
int op_code = first_byte & kOpCodeMask;
bool masked = (second_byte & kMaskBit) != 0;
*compressed = reserved1;
if (reserved2 || reserved3)
return WebSocketParseResult::FRAME_ERROR; // Only compression extension is
// supported.
bool closed = false;
switch (op_code) {
case WebSocketFrameHeader::OpCodeEnum::kOpCodeClose:
closed = true;
break;
case WebSocketFrameHeader::OpCodeEnum::kOpCodeText:
case WebSocketFrameHeader::OpCodeEnum::
kOpCodeContinuation: // Treated in the same as kOpCodeText.
case WebSocketFrameHeader::OpCodeEnum::kOpCodePing:
case WebSocketFrameHeader::OpCodeEnum::kOpCodePong:
break;
case WebSocketFrameHeader::OpCodeEnum::kOpCodeBinary: // We don't support
// binary frames yet.
default:
return WebSocketParseResult::FRAME_ERROR;
}
if (client_frame && !masked) // In Hybi-17 spec client MUST mask its frame.
return WebSocketParseResult::FRAME_ERROR;
uint64_t payload_length64 = second_byte & kPayloadLengthMask;
if (payload_length64 > kMaxSingleBytePayloadLength) {
size_t extended_payload_length_size;
if (payload_length64 == kTwoBytePayloadLengthField) {
extended_payload_length_size = 2;
} else {
DCHECK(payload_length64 == kEightBytePayloadLengthField);
extended_payload_length_size = 8;
}
if (remaining.size() < extended_payload_length_size) {
return WebSocketParseResult::FRAME_INCOMPLETE;
}
payload_length64 = 0;
for (size_t i = 0; i < extended_payload_length_size; ++i) {
payload_length64 <<= 8;
payload_length64 |= static_cast<uint8_t>(remaining[i]);
}
remaining.remove_prefix(extended_payload_length_size);
}
size_t actual_masking_key_length = masked ? kMaskingKeyWidthInBytes : 0;
static const uint64_t max_payload_length = 0x7FFFFFFFFFFFFFFFull;
static size_t max_length = std::numeric_limits<size_t>::max();
if (payload_length64 > max_payload_length ||
payload_length64 + actual_masking_key_length > max_length) {
// WebSocket frame length too large.
return WebSocketParseResult::FRAME_ERROR;
}
size_t payload_length = static_cast<size_t>(payload_length64);
size_t total_length = actual_masking_key_length + payload_length;
if (remaining.size() < total_length) {
return WebSocketParseResult::FRAME_INCOMPLETE;
}
if (masked) {
output->resize(payload_length);
std::string_view masking_key = remaining.substr(0, kMaskingKeyWidthInBytes);
std::string_view payload_data =
remaining.substr(kMaskingKeyWidthInBytes, payload_length);
for (size_t i = 0; i < payload_length; ++i) { // Unmask the payload.
(*output)[i] = payload_data[i] ^ masking_key[i % kMaskingKeyWidthInBytes];
}
remaining.remove_prefix(total_length);
} else {
output->assign(remaining.data(), payload_length);
remaining.remove_prefix(payload_length);
}
*bytes_consumed = frame.size() - remaining.size();
if (op_code == WebSocketFrameHeader::OpCodeEnum::kOpCodePing)
return WebSocketParseResult::FRAME_PING;
if (op_code == WebSocketFrameHeader::OpCodeEnum::kOpCodePong)
return WebSocketParseResult::FRAME_PONG;
if (closed)
return WebSocketParseResult::FRAME_CLOSE;
return final ? WebSocketParseResult::FRAME_OK_FINAL
: WebSocketParseResult::FRAME_OK_MIDDLE;
}
void EncodeFrameHybi17(std::string_view message,
int masking_key,
bool compressed,
WebSocketFrameHeader::OpCodeEnum op_code,
std::string* output) {
std::vector<char> frame;
size_t data_length = message.length();
int reserved1 = compressed ? kReserved1Bit : 0;
frame.push_back(kFinalBit | op_code | reserved1);
char mask_key_bit = masking_key != 0 ? kMaskBit : 0;
if (data_length <= kMaxSingleBytePayloadLength) {
frame.push_back(static_cast<char>(data_length) | mask_key_bit);
} else if (data_length <= 0xFFFF) {
frame.push_back(kTwoBytePayloadLengthField | mask_key_bit);
frame.push_back((data_length & 0xFF00) >> 8);
frame.push_back(data_length & 0xFF);
} else {
frame.push_back(kEightBytePayloadLengthField | mask_key_bit);
std::array<char, 8> extended_payload_length;
size_t remaining = data_length;
// Fill the length into extended_payload_length in the network byte order.
for (int i = 0; i < 8; ++i) {
extended_payload_length[7 - i] = remaining & 0xFF;
remaining >>= 8;
}
base::Extend(frame, extended_payload_length);
DCHECK(!remaining);
}
if (masking_key != 0) {
std::string_view mask_bytes(reinterpret_cast<const char*>(&masking_key),
kMaskingKeyWidthInBytes);
base::Extend(frame, mask_bytes);
for (size_t i = 0; i < data_length; ++i) { // Mask the payload.
frame.push_back(message[i] ^ mask_bytes[i % kMaskingKeyWidthInBytes]);
}
} else {
base::Extend(frame, message);
}
*output = std::string(frame.data(), frame.size());
}
} // anonymous namespace
// static
std::unique_ptr<WebSocketEncoder> WebSocketEncoder::CreateServer() {
return base::WrapUnique(new WebSocketEncoder(FOR_SERVER, nullptr, nullptr));
}
// static
std::unique_ptr<WebSocketEncoder> WebSocketEncoder::CreateServer(
const std::string& extensions,
WebSocketDeflateParameters* deflate_parameters) {
const std::vector<WebSocketExtension> parsed_extensions =
ParseWebSocketExtensions(extensions);
if (parsed_extensions.empty()) {
// Failed to parse Sec-WebSocket-Extensions header. We MUST fail the
// connection.
return nullptr;
}
for (const auto& extension : parsed_extensions) {
std::string failure_message;
WebSocketDeflateParameters offer;
if (!offer.Initialize(extension, &failure_message) ||
!offer.IsValidAsRequest(&failure_message)) {
// We decline unknown / malformed extensions.
continue;
}
WebSocketDeflateParameters response = offer;
if (offer.is_client_max_window_bits_specified() &&
!offer.has_client_max_window_bits_value()) {
// We need to choose one value for the response.
response.SetClientMaxWindowBits(15);
}
DCHECK(response.IsValidAsResponse());
DCHECK(offer.IsCompatibleWith(response));
auto deflater = std::make_unique<WebSocketDeflater>(
response.server_context_take_over_mode());
auto inflater = std::make_unique<WebSocketInflater>(kInflaterChunkSize,
kInflaterChunkSize);
if (!deflater->Initialize(response.PermissiveServerMaxWindowBits()) ||
!inflater->Initialize(response.PermissiveClientMaxWindowBits())) {
// For some reason we cannot accept the parameters.
continue;
}
*deflate_parameters = response;
return base::WrapUnique(new WebSocketEncoder(
FOR_SERVER, std::move(deflater), std::move(inflater)));
}
// We cannot find an acceptable offer.
return base::WrapUnique(new WebSocketEncoder(FOR_SERVER, nullptr, nullptr));
}
// static
std::unique_ptr<WebSocketEncoder> WebSocketEncoder::CreateClient(
const std::string& response_extensions) {
// TODO(yhirano): Add a way to return an error.
const std::vector<WebSocketExtension> extensions =
ParseWebSocketExtensions(response_extensions);
if (extensions.empty()) {
// Parse error. Note that there are two cases here.
// 1) There is no Sec-WebSocket-Extensions header.
// 2) There is a malformed Sec-WebSocketExtensions header.
// We should return a deflate-disabled encoder for the former case and
// fail the connection for the latter case.
return base::WrapUnique(new WebSocketEncoder(FOR_CLIENT, nullptr, nullptr));
}
if (extensions.size() != 1) {
// Only permessage-deflate extension is supported.
// TODO (yhirano): Fail the connection.
return base::WrapUnique(new WebSocketEncoder(FOR_CLIENT, nullptr, nullptr));
}
const auto& extension = extensions[0];
WebSocketDeflateParameters params;
std::string failure_message;
if (!params.Initialize(extension, &failure_message) ||
!params.IsValidAsResponse(&failure_message)) {
// TODO (yhirano): Fail the connection.
return base::WrapUnique(new WebSocketEncoder(FOR_CLIENT, nullptr, nullptr));
}
auto deflater = std::make_unique<WebSocketDeflater>(
params.client_context_take_over_mode());
auto inflater = std::make_unique<WebSocketInflater>(kInflaterChunkSize,
kInflaterChunkSize);
if (!deflater->Initialize(params.PermissiveClientMaxWindowBits()) ||
!inflater->Initialize(params.PermissiveServerMaxWindowBits())) {
// TODO (yhirano): Fail the connection.
return base::WrapUnique(new WebSocketEncoder(FOR_CLIENT, nullptr, nullptr));
}
return base::WrapUnique(new WebSocketEncoder(FOR_CLIENT, std::move(deflater),
std::move(inflater)));
}
WebSocketEncoder::WebSocketEncoder(Type type,
std::unique_ptr<WebSocketDeflater> deflater,
std::unique_ptr<WebSocketInflater> inflater)
: type_(type),
deflater_(std::move(deflater)),
inflater_(std::move(inflater)) {}
WebSocketEncoder::~WebSocketEncoder() = default;
WebSocketParseResult WebSocketEncoder::DecodeFrame(std::string_view frame,
int* bytes_consumed,
std::string* output) {
bool compressed;
std::string current_output;
WebSocketParseResult result = DecodeFrameHybi17(
frame, type_ == FOR_SERVER, bytes_consumed, &current_output, &compressed);
switch (result) {
case WebSocketParseResult::FRAME_OK_FINAL:
case WebSocketParseResult::FRAME_OK_MIDDLE: {
if (continuation_message_frames_.empty())
is_current_message_compressed_ = compressed;
continuation_message_frames_.push_back(current_output);
if (result == WebSocketParseResult::FRAME_OK_FINAL) {
*output = base::StrCat(continuation_message_frames_);
continuation_message_frames_.clear();
if (is_current_message_compressed_ && !Inflate(output)) {
return WebSocketParseResult::FRAME_ERROR;
}
}
break;
}
case WebSocketParseResult::FRAME_PING:
*output = current_output;
break;
default:
// This function doesn't need special handling for other parse results.
break;
}
return result;
}
void WebSocketEncoder::EncodeTextFrame(std::string_view frame,
int masking_key,
std::string* output) {
std::string compressed;
constexpr auto op_code = WebSocketFrameHeader::OpCodeEnum::kOpCodeText;
if (Deflate(frame, &compressed))
EncodeFrameHybi17(compressed, masking_key, true, op_code, output);
else
EncodeFrameHybi17(frame, masking_key, false, op_code, output);
}
void WebSocketEncoder::EncodeCloseFrame(std::string_view frame,
int masking_key,
std::string* output) {
constexpr auto op_code = WebSocketFrameHeader::OpCodeEnum::kOpCodeClose;
EncodeFrameHybi17(frame, masking_key, false, op_code, output);
}
void WebSocketEncoder::EncodePongFrame(std::string_view frame,
int masking_key,
std::string* output) {
constexpr auto op_code = WebSocketFrameHeader::OpCodeEnum::kOpCodePong;
EncodeFrameHybi17(frame, masking_key, false, op_code, output);
}
bool WebSocketEncoder::Inflate(std::string* message) {
if (!inflater_)
return false;
if (!inflater_->AddBytes(base::as_byte_span(*message))) {
return false;
}
if (!inflater_->Finish())
return false;
std::vector<char> output;
while (inflater_->CurrentOutputSize() > 0) {
scoped_refptr<IOBufferWithSize> chunk =
inflater_->GetOutput(inflater_->CurrentOutputSize());
if (!chunk.get())
return false;
base::Extend(output, chunk->span());
}
*message =
output.size() ? std::string(output.data(), output.size()) : std::string();
return true;
}
bool WebSocketEncoder::Deflate(std::string_view message, std::string* output) {
if (!deflater_)
return false;
if (!deflater_->AddBytes(base::as_byte_span(message))) {
deflater_->Finish();
return false;
}
if (!deflater_->Finish())
return false;
scoped_refptr<IOBufferWithSize> buffer =
deflater_->GetOutput(deflater_->CurrentOutputSize());
if (!buffer.get())
return false;
*output = std::string(base::as_string_view(buffer->span()));
return true;
}
} // namespace net