static int _sx_sasl_rio(sx_t s, sx_plugin_t p, sx_buf_t buf) {
sasl_conn_t *sasl;
sx_error_t sxe;
int *x, len;
char *out;
sasl = ((_sx_sasl_data_t) s->plugin_data[p->index])->sasl;
/* if there's no security layer, don't bother */
sasl_getprop(sasl, SASL_SSF, (const void **) &x);
if(*x == 0)
return 1;
_sx_debug(ZONE, "doing sasl decode");
/* decode the input */
if (sasl_decode(sasl, buf->data, buf->len, (const char **) &out, &len)
!= SASL_OK) {
/* Fatal error */
_sx_gen_error(sxe, SX_ERR_STREAM, "Stream error", "sasl_decode failed, closing stream");
_sx_event(s, event_ERROR, (void *) &sxe);
_sx_state(s, state_CLOSING);
return -1;
}
/* replace the buffer */
_sx_buffer_set(buf, out, len, NULL);
_sx_debug(ZONE, "%d bytes decoded from sasl channel", len);
return 1;
}
static int _sx_sasl_rio(sx_t s, sx_plugin_t p, sx_buf_t buf) {
sx_error_t sxe;
int len, ret;
char *out;
Gsasl_session *sd = (Gsasl_session *) s->plugin_data[p->index];
_sx_debug(ZONE, "doing sasl decode");
/* decode the input */
ret = gsasl_decode(sd, buf->data, buf->len, &out, &len);
if (ret != GSASL_OK) {
_sx_debug(ZONE, "gsasl_decode failed (%d): %s", ret, gsasl_strerror (ret));
/* Fatal error */
_sx_gen_error(sxe, SX_ERR_AUTH, "SASL Stream decoding failed", (char*) gsasl_strerror (ret));
_sx_event(s, event_ERROR, (void *) &sxe);
return -1;
}
/* replace the buffer */
_sx_buffer_set(buf, out, len, NULL);
free(out);
_sx_debug(ZONE, "%d bytes decoded from sasl channel", len);
return 1;
}
static int _sx_compress_wio(sx_t s, sx_plugin_t p, sx_buf_t buf) {
_sx_compress_conn_t sc = (_sx_compress_conn_t) s->plugin_data[p->index];
int ret;
sx_error_t sxe;
/* only bothering if they asked for wrappermode */
if(!(s->flags & SX_COMPRESS_WRAPPER) || !s->compressed)
return 1;
_sx_debug(ZONE, "in _sx_compress_wio");
/* move the data into the zlib write buffer */
if(buf->len > 0) {
_sx_debug(ZONE, "loading %d bytes into zlib write buffer", buf->len);
_sx_buffer_alloc_margin(sc->wbuf, 0, buf->len);
memcpy(sc->wbuf->data + sc->wbuf->len, buf->data, buf->len);
sc->wbuf->len += buf->len;
_sx_buffer_clear(buf);
}
/* compress the data */
if(sc->wbuf->len > 0) {
sc->wstrm.avail_in = sc->wbuf->len;
sc->wstrm.next_in = sc->wbuf->data;
/* deflate() on write buffer until there is data to compress */
do {
/* make place for deflated data */
_sx_buffer_alloc_margin(buf, 0, sc->wbuf->len + SX_COMPRESS_CHUNK);
sc->wstrm.avail_out = sc->wbuf->len + SX_COMPRESS_CHUNK;
sc->wstrm.next_out = buf->data + buf->len;
ret = deflate(&(sc->wstrm), Z_SYNC_FLUSH);
assert(ret != Z_STREAM_ERROR);
buf->len += sc->wbuf->len + SX_COMPRESS_CHUNK - sc->wstrm.avail_out;
} while (sc->wstrm.avail_out == 0);
if(ret != Z_OK || sc->wstrm.avail_in != 0) {
/* throw an error */
_sx_gen_error(sxe, SX_ERR_COMPRESS, "compression error", "Error during compression");
_sx_event(s, event_ERROR, (void *) &sxe);
sx_error(s, stream_err_INTERNAL_SERVER_ERROR, "Error during compression");
sx_close(s);
return -2; /* fatal */
}
sc->wbuf->len = sc->wstrm.avail_in;
sc->wbuf->data = sc->wstrm.next_in;
}
_sx_debug(ZONE, "passing %d bytes from zlib write buffer", buf->len);
return 1;
}
static int _sx_sasl_wio(sx_t s, sx_plugin_t p, sx_buf_t buf) {
sasl_conn_t *sasl;
int *x, len, pos, reslen, maxbuf;
char *out, *result;
int sasl_ret;
sx_error_t sxe;
sasl = ((_sx_sasl_data_t) s->plugin_data[p->index])->sasl;
/* if there's no security layer, don't bother */
sasl_getprop(sasl, SASL_SSF, (const void **) &x);
if(*x == 0)
return 1;
_sx_debug(ZONE, "doing sasl encode");
/* can only encode x bytes at a time */
sasl_getprop(sasl, SASL_MAXOUTBUF, (const void **) &x);
maxbuf = *x;
/* encode the output */
pos = 0;
result = NULL; reslen = 0;
while(pos < buf->len) {
if((buf->len - pos) < maxbuf)
maxbuf = buf->len - pos;
sasl_ret = sasl_encode(sasl, &buf->data[pos], maxbuf, (const char **) &out, &len);
if (sasl_ret != SASL_OK) {
_sx_gen_error(sxe, SX_ERR_STREAM, "Stream error", "sasl_encode failed, closing stream");
_sx_event(s, event_ERROR, (void *) &sxe);
_sx_state(s, state_CLOSING);
return 1;
}
result = (char *) realloc(result, sizeof(char) * (reslen + len));
memcpy(&result[reslen], out, len);
reslen += len;
pos += maxbuf;
}
/* replace the buffer */
_sx_buffer_set(buf, result, reslen, result);
_sx_debug(ZONE, "%d bytes encoded for sasl channel", buf->len);
return 1;
}
/** handler for read data */
void _sx_process_read(sx_t s, sx_buf_t buf) {
sx_error_t sxe;
nad_t nad;
char *errstring;
int i;
int ns, elem;
/* Note that buf->len can validly be 0 here, if we got data from
the socket but the plugin didn't return anything to us (e.g. a
SSL packet was split across a tcp segment boundary) */
/* count bytes parsed */
s->pbytes += buf->len;
/* parse it */
if(XML_Parse(s->expat, buf->data, buf->len, 0) == 0) {
/* only report error we haven't already */
if(!s->fail) {
/* parse error */
errstring = (char *) XML_ErrorString(XML_GetErrorCode(s->expat));
_sx_debug(ZONE, "XML parse error: %s, character %d: %.*s",
errstring, XML_GetCurrentByteIndex(s->expat) - s->tbytes, buf->len, buf->data);
_sx_gen_error(sxe, SX_ERR_XML_PARSE, "XML parse error", errstring);
_sx_event(s, event_ERROR, (void *) &sxe);
_sx_error(s, stream_err_XML_NOT_WELL_FORMED, errstring);
_sx_close(s);
_sx_buffer_free(buf);
return;
}
/* !!! is this the right thing to do? we should probably set
* s->fail and let the code further down handle it. */
_sx_buffer_free(buf);
return;
}
/* check if the stanza size limit is exceeded (it wasn't reset by parser) */
if(s->rbytesmax && s->pbytes > s->rbytesmax) {
/* parse error */
_sx_debug(ZONE, "maximum stanza size (%d) exceeded by reading %d bytes", s->rbytesmax, s->pbytes);
errstring = (char *) XML_ErrorString(XML_GetErrorCode(s->expat));
_sx_gen_error(sxe, SX_ERR_XML_PARSE, "stream read error", "Maximum stanza size exceeded");
_sx_event(s, event_ERROR, (void *) &sxe);
_sx_error(s, stream_err_POLICY_VIOLATION, errstring);
_sx_close(s);
_sx_buffer_free(buf);
return;
}
/* count bytes processed */
s->tbytes += buf->len;
/* done with the buffer */
_sx_buffer_free(buf);
/* process completed nads */
if(s->state >= state_STREAM)
while((nad = jqueue_pull(s->rnadq)) != NULL) {
int plugin_error;
#ifdef SX_DEBUG
const char *out; int len;
nad_print(nad, 0, &out, &len);
_sx_debug(ZONE, "completed nad: %.*s", len, out);
#endif
/* check for errors */
if(NAD_ENS(nad, 0) >= 0 && NAD_NURI_L(nad, NAD_ENS(nad, 0)) == strlen(uri_STREAMS) && strncmp(NAD_NURI(nad, NAD_ENS(nad, 0)), uri_STREAMS, strlen(uri_STREAMS)) == 0 && NAD_ENAME_L(nad, 0) == 5 && strncmp(NAD_ENAME(nad, 0), "error", 5) == 0) {
errstring = NULL;
/* get text error description if available - XMPP 4.7.2 */
if((ns = nad_find_scoped_namespace(nad, uri_STREAM_ERR, NULL)) >= 0)
if((elem = nad_find_elem(nad, 0, ns, "text", 1)) >= 0)
if(NAD_CDATA_L(nad, elem) > 0) {
errstring = (char *) malloc(sizeof(char) * (NAD_CDATA_L(nad, elem) + 1));
sprintf(errstring, "%.*s", NAD_CDATA_L(nad, elem), NAD_CDATA(nad, elem));
}
/* if not available, look for legacy error text as in <stream:error>description</stream:error> */
if (errstring == NULL && NAD_CDATA_L(nad, 0) > 0) {
errstring = (char *) malloc(sizeof(char) * (NAD_CDATA_L(nad, 0) + 1));
sprintf(errstring, "%.*s", NAD_CDATA_L(nad, 0), NAD_CDATA(nad, 0));
}
/* if not available, log the whole packet for debugging */
if (errstring == NULL) {
const char *xml;
int xlen;
nad_print(nad, 0, &xml, &xlen);
errstring = (char *) malloc(sizeof(char) * (xlen + 1));
sprintf(errstring, "%.*s", xlen, xml);
}
if(s->state < state_CLOSING) {
_sx_gen_error(sxe, SX_ERR_STREAM, "Stream error", errstring);
_sx_event(s, event_ERROR, (void *) &sxe);
_sx_state(s, state_CLOSING);
}
free(errstring);
nad_free(nad);
break;
}
/* check for close */
if ((s->flags & SX_WEBSOCKET_WRAPPER) && NAD_ENS(nad, 0) >= 0 && NAD_NURI_L(nad, NAD_ENS(nad, 0)) == strlen(uri_XFRAMING) && strncmp(NAD_NURI(nad, NAD_ENS(nad, 0)), uri_XFRAMING, strlen(uri_XFRAMING)) == 0 && NAD_ENAME_L(nad, 0) == 5 && strncmp(NAD_ENAME(nad, 0), "close", 5) == 0) {
_sx_debug(ZONE, "<close/> frame @ depth %d", s->depth);
s->fail = 1;
break;
}
/* run it by the plugins */
if(_sx_chain_nad_read(s, nad) == 0)
return;
/* now let the plugins process the completed nad */
plugin_error = 0;
if(s->env != NULL)
for(i = 0; i < s->env->nplugins; i++)
if(s->env->plugins[i]->process != NULL) {
int plugin_ret;
plugin_ret = (s->env->plugins[i]->process)(s, s->env->plugins[i], nad);
if(plugin_ret == 0) {
plugin_error ++;
break;
}
}
/* hand it to the app */
if ((plugin_error == 0) && (s->state < state_CLOSING))
_sx_event(s, event_PACKET, (void *) nad);
}
/* something went wrong, bail */
if(s->fail) {
_sx_close(s);
return;
}
/* stream was closed */
if(s->depth < 0 && s->state < state_CLOSING) {
/* close the stream if necessary */
if(s->state >= state_STREAM_SENT) {
if (s->flags & SX_WEBSOCKET_WRAPPER)
jqueue_push(s->wbufq, _sx_buffer_new("<close xmlns='" uri_XFRAMING "' />", sizeof(uri_XFRAMING) + 17, NULL, NULL), 0);
else
jqueue_push(s->wbufq, _sx_buffer_new("</stream:stream>", 16, NULL, NULL), 0);
s->want_write = 1;
}
_sx_state(s, state_CLOSING);
return;
}
}
static int _sx_compress_process(sx_t s, sx_plugin_t p, nad_t nad) {
int flags;
char *ns = NULL, *to = NULL, *from = NULL, *version = NULL;
sx_error_t sxe;
/* not interested if we're a server and we never offered it */
if(s->type == type_SERVER && !(s->flags & SX_COMPRESS_OFFER))
return 1;
/* only want compress packets */
if(NAD_ENS(nad, 0) < 0 || NAD_NURI_L(nad, NAD_ENS(nad, 0)) != sizeof(uri_COMPRESS)-1 || strncmp(NAD_NURI(nad, NAD_ENS(nad, 0)), uri_COMPRESS, sizeof(uri_COMPRESS)-1) != 0)
return 1;
/* compress from client */
if(s->type == type_SERVER) {
if(NAD_ENAME_L(nad, 0) == 8 && strncmp(NAD_ENAME(nad, 0), "compress", 8) == 0) {
nad_free(nad);
/* can't go on if we've been here before */
if(s->compressed) {
_sx_debug(ZONE, "compress requested on already compressed channel, dropping packet");
return 0;
}
_sx_debug(ZONE, "compress requested, setting up");
/* go ahead */
jqueue_push(s->wbufq, _sx_buffer_new("<compressed xmlns='" uri_COMPRESS "'/>", sizeof(uri_COMPRESS)-1 + 22, _sx_compress_notify_compress, NULL), 0);
s->want_write = 1;
/* handled the packet */
return 0;
}
}
else if(s->type == type_CLIENT) {
/* kick off the handshake */
if(NAD_ENAME_L(nad, 0) == 7 && strncmp(NAD_ENAME(nad, 0), "compressed", 7) == 0) {
nad_free(nad);
/* save interesting bits */
flags = s->flags;
if(s->ns != NULL) ns = strdup(s->ns);
if(s->req_to != NULL) to = strdup(s->req_to);
if(s->req_from != NULL) from = strdup(s->req_from);
if(s->req_version != NULL) version = strdup(s->req_version);
/* reset state */
_sx_reset(s);
_sx_debug(ZONE, "server ready for compression, starting");
/* second time round */
sx_client_init(s, flags | SX_COMPRESS_WRAPPER, ns, to, from, version);
/* free bits */
if(ns != NULL) free(ns);
if(to != NULL) free(to);
if(from != NULL) free(from);
if(version != NULL) free(version);
return 0;
}
/* busted server */
if(NAD_ENAME_L(nad, 0) == 7 && strncmp(NAD_ENAME(nad, 0), "failure", 7) == 0) {
nad_free(nad);
_sx_debug(ZONE, "server can't handle compression, business as usual");
_sx_gen_error(sxe, SX_ERR_COMPRESS_FAILURE, "compress failure", "Server was unable to establish compression");
_sx_event(s, event_ERROR, (void *) &sxe);
return 0;
}
}
_sx_debug(ZONE, "unknown compress namespace element '%.*s', dropping packet", NAD_ENAME_L(nad, 0), NAD_ENAME(nad, 0));
nad_free(nad);
return 0;
}
static int _sx_compress_rio(sx_t s, sx_plugin_t p, sx_buf_t buf) {
_sx_compress_conn_t sc = (_sx_compress_conn_t) s->plugin_data[p->index];
int ret;
sx_error_t sxe;
/* only bothering if they asked for wrappermode */
if(!(s->flags & SX_COMPRESS_WRAPPER) || !s->compressed)
return 1;
_sx_debug(ZONE, "in _sx_compress_rio");
/* move the data into the zlib read buffer */
if(buf->len > 0) {
_sx_debug(ZONE, "loading %d bytes into zlib read buffer", buf->len);
_sx_buffer_alloc_margin(sc->rbuf, 0, buf->len);
memcpy(sc->rbuf->data + sc->rbuf->len, buf->data, buf->len);
sc->rbuf->len += buf->len;
_sx_buffer_clear(buf);
}
/* decompress the data */
if(sc->rbuf->len > 0) {
sc->rstrm.avail_in = sc->rbuf->len;
sc->rstrm.next_in = sc->rbuf->data;
/* run inflate() on read buffer while able to fill the output buffer */
do {
/* make place for inflated data */
_sx_buffer_alloc_margin(buf, 0, SX_COMPRESS_CHUNK);
sc->rstrm.avail_out = SX_COMPRESS_CHUNK;
sc->rstrm.next_out = buf->data + buf->len;
ret = inflate(&(sc->rstrm), Z_SYNC_FLUSH);
assert(ret != Z_STREAM_ERROR);
switch (ret) {
case Z_NEED_DICT:
case Z_DATA_ERROR:
case Z_MEM_ERROR:
/* throw an error */
_sx_gen_error(sxe, SX_ERR_COMPRESS, "compression error", "Error during decompression");
_sx_event(s, event_ERROR, (void *) &sxe);
sx_error(s, stream_err_INVALID_XML, "Error during decompression");
sx_close(s);
return -2;
}
buf->len += SX_COMPRESS_CHUNK - sc->rstrm.avail_out;
} while (sc->rstrm.avail_out == 0);
sc->rbuf->len = sc->rstrm.avail_in;
sc->rbuf->data = sc->rstrm.next_in;
}
_sx_debug(ZONE, "passing %d bytes from zlib read buffer", buf->len);
/* flag if we want to read */
if(sc->rbuf->len > 0)
s->want_read = 1;
if(buf->len == 0)
return 0;
return 1;
}
