| // Copyright 2014 The Chromium Authors |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #include "net/server/web_socket_encoder.h" |
| |
| #include <array> |
| #include <limits> |
| #include <string_view> |
| #include <utility> |
| |
| #include "base/check.h" |
| #include "base/containers/extend.h" |
| #include "base/containers/span.h" |
| #include "base/memory/ptr_util.h" |
| #include "base/strings/strcat.h" |
| #include "base/strings/string_number_conversions.h" |
| #include "base/strings/string_view_util.h" |
| #include "net/base/io_buffer.h" |
| #include "net/base/net_export.h" |
| #include "net/websockets/websocket_deflate_parameters.h" |
| #include "net/websockets/websocket_extension.h" |
| #include "net/websockets/websocket_extension_parser.h" |
| #include "net/websockets/websocket_frame.h" |
| |
| namespace net { |
| |
| NET_EXPORT |
| const char WebSocketEncoder::kClientExtensions[] = |
| "permessage-deflate; client_max_window_bits"; |
| |
| namespace { |
| |
| const int kInflaterChunkSize = 16 * 1024; |
| |
| // Constants for hybi-10 frame format. |
| |
| const uint8_t kFinalBit = 0x80; |
| const uint8_t kReserved1Bit = 0x40; |
| const uint8_t kReserved2Bit = 0x20; |
| const uint8_t kReserved3Bit = 0x10; |
| const uint8_t kOpCodeMask = 0xF; |
| const uint8_t kMaskBit = 0x80; |
| const uint8_t kPayloadLengthMask = 0x7F; |
| |
| const size_t kMaxSingleBytePayloadLength = 125; |
| const size_t kTwoBytePayloadLengthField = 126; |
| const size_t kEightBytePayloadLengthField = 127; |
| const size_t kMaskingKeyWidthInBytes = 4; |
| |
| WebSocketParseResult DecodeFrameHybi17(std::string_view frame, |
| bool client_frame, |
| int* bytes_consumed, |
| std::string* output, |
| bool* compressed) { |
| if (frame.size() < 2) { |
| return WebSocketParseResult::FRAME_INCOMPLETE; |
| } |
| |
| uint8_t first_byte = frame[0]; |
| uint8_t second_byte = frame[1]; |
| std::string_view remaining = frame.substr(2); |
| |
| bool final = (first_byte & kFinalBit) != 0; |
| bool reserved1 = (first_byte & kReserved1Bit) != 0; |
| bool reserved2 = (first_byte & kReserved2Bit) != 0; |
| bool reserved3 = (first_byte & kReserved3Bit) != 0; |
| int op_code = first_byte & kOpCodeMask; |
| bool masked = (second_byte & kMaskBit) != 0; |
| *compressed = reserved1; |
| if (reserved2 || reserved3) |
| return WebSocketParseResult::FRAME_ERROR; // Only compression extension is |
| // supported. |
| |
| bool closed = false; |
| switch (op_code) { |
| case WebSocketFrameHeader::OpCodeEnum::kOpCodeClose: |
| closed = true; |
| break; |
| |
| case WebSocketFrameHeader::OpCodeEnum::kOpCodeText: |
| case WebSocketFrameHeader::OpCodeEnum:: |
| kOpCodeContinuation: // Treated in the same as kOpCodeText. |
| case WebSocketFrameHeader::OpCodeEnum::kOpCodePing: |
| case WebSocketFrameHeader::OpCodeEnum::kOpCodePong: |
| break; |
| |
| case WebSocketFrameHeader::OpCodeEnum::kOpCodeBinary: // We don't support |
| // binary frames yet. |
| default: |
| return WebSocketParseResult::FRAME_ERROR; |
| } |
| |
| if (client_frame && !masked) // In Hybi-17 spec client MUST mask its frame. |
| return WebSocketParseResult::FRAME_ERROR; |
| |
| uint64_t payload_length64 = second_byte & kPayloadLengthMask; |
| if (payload_length64 > kMaxSingleBytePayloadLength) { |
| size_t extended_payload_length_size; |
| if (payload_length64 == kTwoBytePayloadLengthField) { |
| extended_payload_length_size = 2; |
| } else { |
| DCHECK(payload_length64 == kEightBytePayloadLengthField); |
| extended_payload_length_size = 8; |
| } |
| if (remaining.size() < extended_payload_length_size) { |
| return WebSocketParseResult::FRAME_INCOMPLETE; |
| } |
| payload_length64 = 0; |
| for (size_t i = 0; i < extended_payload_length_size; ++i) { |
| payload_length64 <<= 8; |
| payload_length64 |= static_cast<uint8_t>(remaining[i]); |
| } |
| remaining.remove_prefix(extended_payload_length_size); |
| } |
| |
| size_t actual_masking_key_length = masked ? kMaskingKeyWidthInBytes : 0; |
| static const uint64_t max_payload_length = 0x7FFFFFFFFFFFFFFFull; |
| static size_t max_length = std::numeric_limits<size_t>::max(); |
| if (payload_length64 > max_payload_length || |
| payload_length64 + actual_masking_key_length > max_length) { |
| // WebSocket frame length too large. |
| return WebSocketParseResult::FRAME_ERROR; |
| } |
| size_t payload_length = static_cast<size_t>(payload_length64); |
| |
| size_t total_length = actual_masking_key_length + payload_length; |
| if (remaining.size() < total_length) { |
| return WebSocketParseResult::FRAME_INCOMPLETE; |
| } |
| |
| if (masked) { |
| output->resize(payload_length); |
| std::string_view masking_key = remaining.substr(0, kMaskingKeyWidthInBytes); |
| std::string_view payload_data = |
| remaining.substr(kMaskingKeyWidthInBytes, payload_length); |
| for (size_t i = 0; i < payload_length; ++i) { // Unmask the payload. |
| (*output)[i] = payload_data[i] ^ masking_key[i % kMaskingKeyWidthInBytes]; |
| } |
| remaining.remove_prefix(total_length); |
| } else { |
| output->assign(remaining.data(), payload_length); |
| remaining.remove_prefix(payload_length); |
| } |
| |
| *bytes_consumed = frame.size() - remaining.size(); |
| |
| if (op_code == WebSocketFrameHeader::OpCodeEnum::kOpCodePing) |
| return WebSocketParseResult::FRAME_PING; |
| |
| if (op_code == WebSocketFrameHeader::OpCodeEnum::kOpCodePong) |
| return WebSocketParseResult::FRAME_PONG; |
| |
| if (closed) |
| return WebSocketParseResult::FRAME_CLOSE; |
| |
| return final ? WebSocketParseResult::FRAME_OK_FINAL |
| : WebSocketParseResult::FRAME_OK_MIDDLE; |
| } |
| |
| void EncodeFrameHybi17(std::string_view message, |
| int masking_key, |
| bool compressed, |
| WebSocketFrameHeader::OpCodeEnum op_code, |
| std::string* output) { |
| std::vector<char> frame; |
| size_t data_length = message.length(); |
| |
| int reserved1 = compressed ? kReserved1Bit : 0; |
| frame.push_back(kFinalBit | op_code | reserved1); |
| char mask_key_bit = masking_key != 0 ? kMaskBit : 0; |
| if (data_length <= kMaxSingleBytePayloadLength) { |
| frame.push_back(static_cast<char>(data_length) | mask_key_bit); |
| } else if (data_length <= 0xFFFF) { |
| frame.push_back(kTwoBytePayloadLengthField | mask_key_bit); |
| frame.push_back((data_length & 0xFF00) >> 8); |
| frame.push_back(data_length & 0xFF); |
| } else { |
| frame.push_back(kEightBytePayloadLengthField | mask_key_bit); |
| std::array<char, 8> extended_payload_length; |
| size_t remaining = data_length; |
| // Fill the length into extended_payload_length in the network byte order. |
| for (int i = 0; i < 8; ++i) { |
| extended_payload_length[7 - i] = remaining & 0xFF; |
| remaining >>= 8; |
| } |
| base::Extend(frame, extended_payload_length); |
| DCHECK(!remaining); |
| } |
| |
| if (masking_key != 0) { |
| std::string_view mask_bytes(reinterpret_cast<const char*>(&masking_key), |
| kMaskingKeyWidthInBytes); |
| base::Extend(frame, mask_bytes); |
| for (size_t i = 0; i < data_length; ++i) { // Mask the payload. |
| frame.push_back(message[i] ^ mask_bytes[i % kMaskingKeyWidthInBytes]); |
| } |
| } else { |
| base::Extend(frame, message); |
| } |
| *output = std::string(frame.data(), frame.size()); |
| } |
| |
| } // anonymous namespace |
| |
| // static |
| std::unique_ptr<WebSocketEncoder> WebSocketEncoder::CreateServer() { |
| return base::WrapUnique(new WebSocketEncoder(FOR_SERVER, nullptr, nullptr)); |
| } |
| |
| // static |
| std::unique_ptr<WebSocketEncoder> WebSocketEncoder::CreateServer( |
| const std::string& extensions, |
| WebSocketDeflateParameters* deflate_parameters) { |
| const std::vector<WebSocketExtension> parsed_extensions = |
| ParseWebSocketExtensions(extensions); |
| if (parsed_extensions.empty()) { |
| // Failed to parse Sec-WebSocket-Extensions header. We MUST fail the |
| // connection. |
| return nullptr; |
| } |
| |
| for (const auto& extension : parsed_extensions) { |
| std::string failure_message; |
| WebSocketDeflateParameters offer; |
| if (!offer.Initialize(extension, &failure_message) || |
| !offer.IsValidAsRequest(&failure_message)) { |
| // We decline unknown / malformed extensions. |
| continue; |
| } |
| |
| WebSocketDeflateParameters response = offer; |
| if (offer.is_client_max_window_bits_specified() && |
| !offer.has_client_max_window_bits_value()) { |
| // We need to choose one value for the response. |
| response.SetClientMaxWindowBits(15); |
| } |
| DCHECK(response.IsValidAsResponse()); |
| DCHECK(offer.IsCompatibleWith(response)); |
| auto deflater = std::make_unique<WebSocketDeflater>( |
| response.server_context_take_over_mode()); |
| auto inflater = std::make_unique<WebSocketInflater>(kInflaterChunkSize, |
| kInflaterChunkSize); |
| if (!deflater->Initialize(response.PermissiveServerMaxWindowBits()) || |
| !inflater->Initialize(response.PermissiveClientMaxWindowBits())) { |
| // For some reason we cannot accept the parameters. |
| continue; |
| } |
| *deflate_parameters = response; |
| return base::WrapUnique(new WebSocketEncoder( |
| FOR_SERVER, std::move(deflater), std::move(inflater))); |
| } |
| |
| // We cannot find an acceptable offer. |
| return base::WrapUnique(new WebSocketEncoder(FOR_SERVER, nullptr, nullptr)); |
| } |
| |
| // static |
| std::unique_ptr<WebSocketEncoder> WebSocketEncoder::CreateClient( |
| const std::string& response_extensions) { |
| // TODO(yhirano): Add a way to return an error. |
| |
| const std::vector<WebSocketExtension> extensions = |
| ParseWebSocketExtensions(response_extensions); |
| if (extensions.empty()) { |
| // Parse error. Note that there are two cases here. |
| // 1) There is no Sec-WebSocket-Extensions header. |
| // 2) There is a malformed Sec-WebSocketExtensions header. |
| // We should return a deflate-disabled encoder for the former case and |
| // fail the connection for the latter case. |
| return base::WrapUnique(new WebSocketEncoder(FOR_CLIENT, nullptr, nullptr)); |
| } |
| if (extensions.size() != 1) { |
| // Only permessage-deflate extension is supported. |
| // TODO (yhirano): Fail the connection. |
| return base::WrapUnique(new WebSocketEncoder(FOR_CLIENT, nullptr, nullptr)); |
| } |
| const auto& extension = extensions[0]; |
| WebSocketDeflateParameters params; |
| std::string failure_message; |
| if (!params.Initialize(extension, &failure_message) || |
| !params.IsValidAsResponse(&failure_message)) { |
| // TODO (yhirano): Fail the connection. |
| return base::WrapUnique(new WebSocketEncoder(FOR_CLIENT, nullptr, nullptr)); |
| } |
| |
| auto deflater = std::make_unique<WebSocketDeflater>( |
| params.client_context_take_over_mode()); |
| auto inflater = std::make_unique<WebSocketInflater>(kInflaterChunkSize, |
| kInflaterChunkSize); |
| if (!deflater->Initialize(params.PermissiveClientMaxWindowBits()) || |
| !inflater->Initialize(params.PermissiveServerMaxWindowBits())) { |
| // TODO (yhirano): Fail the connection. |
| return base::WrapUnique(new WebSocketEncoder(FOR_CLIENT, nullptr, nullptr)); |
| } |
| |
| return base::WrapUnique(new WebSocketEncoder(FOR_CLIENT, std::move(deflater), |
| std::move(inflater))); |
| } |
| |
| WebSocketEncoder::WebSocketEncoder(Type type, |
| std::unique_ptr<WebSocketDeflater> deflater, |
| std::unique_ptr<WebSocketInflater> inflater) |
| : type_(type), |
| deflater_(std::move(deflater)), |
| inflater_(std::move(inflater)) {} |
| |
| WebSocketEncoder::~WebSocketEncoder() = default; |
| |
| WebSocketParseResult WebSocketEncoder::DecodeFrame(std::string_view frame, |
| int* bytes_consumed, |
| std::string* output) { |
| bool compressed; |
| std::string current_output; |
| WebSocketParseResult result = DecodeFrameHybi17( |
| frame, type_ == FOR_SERVER, bytes_consumed, ¤t_output, &compressed); |
| switch (result) { |
| case WebSocketParseResult::FRAME_OK_FINAL: |
| case WebSocketParseResult::FRAME_OK_MIDDLE: { |
| if (continuation_message_frames_.empty()) |
| is_current_message_compressed_ = compressed; |
| continuation_message_frames_.push_back(current_output); |
| |
| if (result == WebSocketParseResult::FRAME_OK_FINAL) { |
| *output = base::StrCat(continuation_message_frames_); |
| continuation_message_frames_.clear(); |
| if (is_current_message_compressed_ && !Inflate(output)) { |
| return WebSocketParseResult::FRAME_ERROR; |
| } |
| } |
| break; |
| } |
| |
| case WebSocketParseResult::FRAME_PING: |
| *output = current_output; |
| break; |
| |
| default: |
| // This function doesn't need special handling for other parse results. |
| break; |
| } |
| |
| return result; |
| } |
| |
| void WebSocketEncoder::EncodeTextFrame(std::string_view frame, |
| int masking_key, |
| std::string* output) { |
| std::string compressed; |
| constexpr auto op_code = WebSocketFrameHeader::OpCodeEnum::kOpCodeText; |
| if (Deflate(frame, &compressed)) |
| EncodeFrameHybi17(compressed, masking_key, true, op_code, output); |
| else |
| EncodeFrameHybi17(frame, masking_key, false, op_code, output); |
| } |
| |
| void WebSocketEncoder::EncodeCloseFrame(std::string_view frame, |
| int masking_key, |
| std::string* output) { |
| constexpr auto op_code = WebSocketFrameHeader::OpCodeEnum::kOpCodeClose; |
| EncodeFrameHybi17(frame, masking_key, false, op_code, output); |
| } |
| |
| void WebSocketEncoder::EncodePongFrame(std::string_view frame, |
| int masking_key, |
| std::string* output) { |
| constexpr auto op_code = WebSocketFrameHeader::OpCodeEnum::kOpCodePong; |
| EncodeFrameHybi17(frame, masking_key, false, op_code, output); |
| } |
| |
| bool WebSocketEncoder::Inflate(std::string* message) { |
| if (!inflater_) |
| return false; |
| if (!inflater_->AddBytes(base::as_byte_span(*message))) { |
| return false; |
| } |
| if (!inflater_->Finish()) |
| return false; |
| |
| std::vector<char> output; |
| while (inflater_->CurrentOutputSize() > 0) { |
| scoped_refptr<IOBufferWithSize> chunk = |
| inflater_->GetOutput(inflater_->CurrentOutputSize()); |
| if (!chunk.get()) |
| return false; |
| base::Extend(output, chunk->span()); |
| } |
| |
| *message = |
| output.size() ? std::string(output.data(), output.size()) : std::string(); |
| return true; |
| } |
| |
| bool WebSocketEncoder::Deflate(std::string_view message, std::string* output) { |
| if (!deflater_) |
| return false; |
| if (!deflater_->AddBytes(base::as_byte_span(message))) { |
| deflater_->Finish(); |
| return false; |
| } |
| if (!deflater_->Finish()) |
| return false; |
| scoped_refptr<IOBufferWithSize> buffer = |
| deflater_->GetOutput(deflater_->CurrentOutputSize()); |
| if (!buffer.get()) |
| return false; |
| *output = std::string(base::as_string_view(buffer->span())); |
| return true; |
| } |
| |
| } // namespace net |