2014-05-12 04:51:06 +00:00
|
|
|
/*
|
|
|
|
* Copyright (c) 2014, Yawning Angel <yawning at torproject dot org>
|
|
|
|
* All rights reserved.
|
|
|
|
*
|
|
|
|
* Redistribution and use in source and binary forms, with or without
|
|
|
|
* modification, are permitted provided that the following conditions are met:
|
|
|
|
*
|
|
|
|
* * Redistributions of source code must retain the above copyright notice,
|
|
|
|
* this list of conditions and the following disclaimer.
|
|
|
|
*
|
|
|
|
* * Redistributions in binary form must reproduce the above copyright notice,
|
|
|
|
* this list of conditions and the following disclaimer in the documentation
|
|
|
|
* and/or other materials provided with the distribution.
|
|
|
|
*
|
|
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
|
|
|
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
|
|
|
|
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
|
|
|
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
|
|
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
|
|
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
|
|
|
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
|
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
|
|
|
* POSSIBILITY OF SUCH DAMAGE.
|
|
|
|
*/
|
|
|
|
|
|
|
|
package obfs4
|
|
|
|
|
|
|
|
import (
|
|
|
|
"encoding/binary"
|
|
|
|
"fmt"
|
2014-05-14 06:27:41 +00:00
|
|
|
"io"
|
2014-05-14 05:48:43 +00:00
|
|
|
"syscall"
|
2014-05-12 04:51:06 +00:00
|
|
|
|
|
|
|
"github.com/yawning/obfs4/framing"
|
|
|
|
)
|
|
|
|
|
|
|
|
const (
|
2014-05-15 20:21:46 +00:00
|
|
|
packetOverhead = 2 + 1
|
|
|
|
maxPacketPayloadLength = framing.MaximumFramePayloadLength - packetOverhead
|
|
|
|
maxPacketPaddingLength = maxPacketPayloadLength
|
|
|
|
seedPacketPayloadLength = DrbgSeedLength
|
2014-05-14 05:48:43 +00:00
|
|
|
|
|
|
|
consumeReadSize = framing.MaximumSegmentLength * 16
|
2014-05-12 04:51:06 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
const (
|
|
|
|
packetTypePayload = iota
|
|
|
|
packetTypePrngSeed
|
|
|
|
)
|
|
|
|
|
|
|
|
// InvalidPacketLengthError is the error returned when decodePacket detects a
|
|
|
|
// invalid packet length/
|
|
|
|
type InvalidPacketLengthError int
|
|
|
|
|
|
|
|
func (e InvalidPacketLengthError) Error() string {
|
|
|
|
return fmt.Sprintf("packet: Invalid packet length: %d", int(e))
|
|
|
|
}
|
|
|
|
|
2014-05-12 04:55:52 +00:00
|
|
|
// InvalidPayloadLengthError is the error returned when decodePacket rejects the
|
2014-05-12 04:51:06 +00:00
|
|
|
// payload length.
|
|
|
|
type InvalidPayloadLengthError int
|
|
|
|
|
|
|
|
func (e InvalidPayloadLengthError) Error() string {
|
|
|
|
return fmt.Sprintf("packet: Invalid payload length: %d", int(e))
|
|
|
|
}
|
|
|
|
|
|
|
|
var zeroPadBytes [maxPacketPaddingLength]byte
|
|
|
|
|
2014-05-14 08:06:27 +00:00
|
|
|
func (c *Obfs4Conn) producePacket(w io.Writer, pktType uint8, data []byte, padLen uint16) (err error) {
|
2014-05-14 07:07:11 +00:00
|
|
|
var pkt [framing.MaximumFramePayloadLength]byte
|
2014-05-12 04:51:06 +00:00
|
|
|
|
2014-05-14 08:06:27 +00:00
|
|
|
if !c.CanReadWrite() {
|
|
|
|
return syscall.EINVAL
|
|
|
|
}
|
|
|
|
|
2014-05-12 04:51:06 +00:00
|
|
|
if len(data)+int(padLen) > maxPacketPayloadLength {
|
2014-05-12 23:04:39 +00:00
|
|
|
panic(fmt.Sprintf("BUG: makePacket() len(data) + padLen > maxPacketPayloadLength: %d + %d > %d",
|
|
|
|
len(data), padLen, maxPacketPayloadLength))
|
2014-05-12 04:51:06 +00:00
|
|
|
}
|
|
|
|
|
2014-05-14 08:06:27 +00:00
|
|
|
defer func() {
|
|
|
|
if err != nil {
|
|
|
|
c.setBroken()
|
|
|
|
}
|
|
|
|
}()
|
|
|
|
|
2014-05-12 04:51:06 +00:00
|
|
|
// Packets are:
|
|
|
|
// uint8_t type packetTypePayload (0x00)
|
|
|
|
// uint16_t length Length of the payload (Big Endian).
|
|
|
|
// uint8_t[] payload Data payload.
|
|
|
|
// uint8_t[] padding Padding.
|
|
|
|
pkt[0] = pktType
|
|
|
|
binary.BigEndian.PutUint16(pkt[1:], uint16(len(data)))
|
2014-05-13 02:31:37 +00:00
|
|
|
if len(data) > 0 {
|
|
|
|
copy(pkt[3:], data[:])
|
|
|
|
}
|
2014-05-12 04:51:06 +00:00
|
|
|
copy(pkt[3+len(data):], zeroPadBytes[:padLen])
|
|
|
|
|
2014-05-14 07:07:11 +00:00
|
|
|
pktLen := packetOverhead + len(data) + int(padLen)
|
2014-05-13 02:31:37 +00:00
|
|
|
|
|
|
|
// Encode the packet in an AEAD frame.
|
2014-05-14 09:58:53 +00:00
|
|
|
var frame [framing.MaximumSegmentLength]byte
|
|
|
|
frameLen := 0
|
|
|
|
frameLen, err = c.encoder.Encode(frame[:], pkt[:pktLen])
|
2014-05-14 07:07:11 +00:00
|
|
|
if err != nil {
|
|
|
|
// All encoder errors are fatal.
|
2014-05-14 08:06:27 +00:00
|
|
|
return
|
2014-05-14 07:07:11 +00:00
|
|
|
}
|
2014-05-14 08:06:27 +00:00
|
|
|
var wrLen int
|
2014-05-14 09:58:53 +00:00
|
|
|
wrLen, err = w.Write(frame[:frameLen])
|
2014-05-14 07:07:11 +00:00
|
|
|
if err != nil {
|
2014-05-14 08:06:27 +00:00
|
|
|
return
|
2014-05-14 09:58:53 +00:00
|
|
|
} else if wrLen < frameLen {
|
2014-05-14 08:06:27 +00:00
|
|
|
err = io.ErrShortWrite
|
|
|
|
return
|
2014-05-14 07:07:11 +00:00
|
|
|
}
|
|
|
|
|
2014-05-14 08:06:27 +00:00
|
|
|
return
|
2014-05-13 02:31:37 +00:00
|
|
|
}
|
|
|
|
|
2014-05-14 06:27:41 +00:00
|
|
|
func (c *Obfs4Conn) consumeFramedPackets(w io.Writer) (n int, err error) {
|
2014-05-14 08:06:27 +00:00
|
|
|
if !c.CanReadWrite() {
|
2014-05-14 06:27:41 +00:00
|
|
|
return n, syscall.EINVAL
|
2014-05-12 04:51:06 +00:00
|
|
|
}
|
|
|
|
|
2014-05-14 05:48:43 +00:00
|
|
|
var buf [consumeReadSize]byte
|
2014-05-15 00:52:53 +00:00
|
|
|
rdLen, rdErr := c.conn.Read(buf[:])
|
2014-05-14 06:27:41 +00:00
|
|
|
c.receiveBuffer.Write(buf[:rdLen])
|
2014-05-14 09:58:53 +00:00
|
|
|
var decoded [framing.MaximumFramePayloadLength]byte
|
2014-05-14 05:48:43 +00:00
|
|
|
for c.receiveBuffer.Len() > 0 {
|
|
|
|
// Decrypt an AEAD frame.
|
2014-05-14 09:58:53 +00:00
|
|
|
decLen := 0
|
|
|
|
decLen, err = c.decoder.Decode(decoded[:], &c.receiveBuffer)
|
2014-05-14 05:48:43 +00:00
|
|
|
if err == framing.ErrAgain {
|
2014-05-15 00:52:53 +00:00
|
|
|
break
|
2014-05-14 05:48:43 +00:00
|
|
|
} else if err != nil {
|
|
|
|
break
|
2014-05-14 09:58:53 +00:00
|
|
|
} else if decLen < packetOverhead {
|
|
|
|
err = InvalidPacketLengthError(decLen)
|
2014-05-14 05:48:43 +00:00
|
|
|
break
|
|
|
|
}
|
2014-05-12 04:51:06 +00:00
|
|
|
|
2014-05-14 05:48:43 +00:00
|
|
|
// Decode the packet.
|
2014-05-14 09:58:53 +00:00
|
|
|
pkt := decoded[0:decLen]
|
2014-05-14 05:48:43 +00:00
|
|
|
pktType := pkt[0]
|
|
|
|
payloadLen := binary.BigEndian.Uint16(pkt[1:])
|
|
|
|
if int(payloadLen) > len(pkt)-packetOverhead {
|
|
|
|
err = InvalidPayloadLengthError(int(payloadLen))
|
|
|
|
break
|
2014-05-13 02:31:37 +00:00
|
|
|
}
|
2014-05-14 05:48:43 +00:00
|
|
|
payload := pkt[3 : 3+payloadLen]
|
|
|
|
|
|
|
|
switch pktType {
|
|
|
|
case packetTypePayload:
|
|
|
|
if payloadLen > 0 {
|
2014-05-14 06:27:41 +00:00
|
|
|
if w != nil {
|
|
|
|
// c.WriteTo() skips buffering in c.receiveDecodedBuffer
|
2014-05-14 08:06:27 +00:00
|
|
|
var wrLen int
|
|
|
|
wrLen, err = w.Write(payload)
|
2014-05-14 06:27:41 +00:00
|
|
|
n += wrLen
|
2014-05-14 07:07:11 +00:00
|
|
|
if err != nil {
|
2014-05-14 06:27:41 +00:00
|
|
|
break
|
2014-05-14 07:07:11 +00:00
|
|
|
} else if wrLen < int(payloadLen) {
|
|
|
|
err = io.ErrShortWrite
|
2014-05-14 06:27:41 +00:00
|
|
|
break
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
// c.Read() stashes decoded payload in receiveDecodedBuffer
|
|
|
|
c.receiveDecodedBuffer.Write(payload)
|
|
|
|
n += int(payloadLen)
|
|
|
|
}
|
2014-05-14 05:48:43 +00:00
|
|
|
}
|
|
|
|
case packetTypePrngSeed:
|
|
|
|
// Only regenerate the distribution if we are the client.
|
2014-05-15 20:21:46 +00:00
|
|
|
if len(payload) == seedPacketPayloadLength && !c.isServer {
|
2014-05-15 19:08:03 +00:00
|
|
|
var seed *DrbgSeed
|
2014-05-15 20:21:46 +00:00
|
|
|
seed, err = DrbgSeedFromBytes(payload)
|
2014-05-15 18:33:24 +00:00
|
|
|
if err != nil {
|
|
|
|
break
|
|
|
|
}
|
|
|
|
c.lenProbDist.reset(seed)
|
2014-05-14 05:48:43 +00:00
|
|
|
}
|
|
|
|
default:
|
|
|
|
// Ignore unrecognised packet types.
|
2014-05-13 02:31:37 +00:00
|
|
|
}
|
2014-05-12 04:51:06 +00:00
|
|
|
}
|
|
|
|
|
2014-05-15 00:52:53 +00:00
|
|
|
// Read errors and non-framing.ErrAgain errors are all fatal.
|
|
|
|
if (err != nil && err != framing.ErrAgain) || rdErr != nil {
|
|
|
|
// Propagate read errors correctly.
|
|
|
|
if err == nil && rdErr != nil {
|
|
|
|
err = rdErr
|
|
|
|
}
|
2014-05-14 08:06:27 +00:00
|
|
|
c.setBroken()
|
2014-05-14 05:48:43 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
return
|
2014-05-12 04:51:06 +00:00
|
|
|
}
|
2014-05-13 09:56:25 +00:00
|
|
|
|
|
|
|
/* vim :set ts=4 sw=4 sts=4 noet : */
|