1 /*
2 * Copyright 1995-2022 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10 #include <stdio.h>
11 #include <errno.h>
12 #include "bio_local.h"
13 #include "internal/bio_tfo.h"
14 #include "internal/cryptlib.h"
15 #include "internal/ktls.h"
16
17 #ifndef OPENSSL_NO_SOCK
18
19 # include <openssl/bio.h>
20
21 # ifdef WATT32
22 /* Watt-32 uses same names */
23 # undef sock_write
24 # undef sock_read
25 # undef sock_puts
26 # define sock_write SockWrite
27 # define sock_read SockRead
28 # define sock_puts SockPuts
29 # endif
30
31 struct bss_sock_st {
32 BIO_ADDR tfo_peer;
33 int tfo_first;
34 #ifndef OPENSSL_NO_KTLS
35 unsigned char ktls_record_type;
36 #endif
37 };
38
39 static int sock_write(BIO *h, const char *buf, int num);
40 static int sock_read(BIO *h, char *buf, int size);
41 static int sock_puts(BIO *h, const char *str);
42 static long sock_ctrl(BIO *h, int cmd, long arg1, void *arg2);
43 static int sock_new(BIO *h);
44 static int sock_free(BIO *data);
45 int BIO_sock_should_retry(int s);
46
47 static const BIO_METHOD methods_sockp = {
48 BIO_TYPE_SOCKET,
49 "socket",
50 bwrite_conv,
51 sock_write,
52 bread_conv,
53 sock_read,
54 sock_puts,
55 NULL, /* sock_gets, */
56 sock_ctrl,
57 sock_new,
58 sock_free,
59 NULL, /* sock_callback_ctrl */
60 };
61
BIO_s_socket(void)62 const BIO_METHOD *BIO_s_socket(void)
63 {
64 return &methods_sockp;
65 }
66
BIO_new_socket(int fd,int close_flag)67 BIO *BIO_new_socket(int fd, int close_flag)
68 {
69 BIO *ret;
70
71 ret = BIO_new(BIO_s_socket());
72 if (ret == NULL)
73 return NULL;
74 BIO_set_fd(ret, fd, close_flag);
75 # ifndef OPENSSL_NO_KTLS
76 {
77 /*
78 * The new socket is created successfully regardless of ktls_enable.
79 * ktls_enable doesn't change any functionality of the socket, except
80 * changing the setsockopt to enable the processing of ktls_start.
81 * Thus, it is not a problem to call it for non-TLS sockets.
82 */
83 ktls_enable(fd);
84 }
85 # endif
86 return ret;
87 }
88
sock_new(BIO * bi)89 static int sock_new(BIO *bi)
90 {
91 bi->init = 0;
92 bi->num = 0;
93 bi->flags = 0;
94 bi->ptr = OPENSSL_zalloc(sizeof(struct bss_sock_st));
95 if (bi->ptr == NULL)
96 return 0;
97 return 1;
98 }
99
sock_free(BIO * a)100 static int sock_free(BIO *a)
101 {
102 if (a == NULL)
103 return 0;
104 if (a->shutdown) {
105 if (a->init) {
106 BIO_closesocket(a->num);
107 }
108 a->init = 0;
109 a->flags = 0;
110 }
111 OPENSSL_free(a->ptr);
112 a->ptr = NULL;
113 return 1;
114 }
115
sock_read(BIO * b,char * out,int outl)116 static int sock_read(BIO *b, char *out, int outl)
117 {
118 int ret = 0;
119
120 if (out != NULL) {
121 clear_socket_error();
122 # ifndef OPENSSL_NO_KTLS
123 if (BIO_get_ktls_recv(b))
124 ret = ktls_read_record(b->num, out, outl);
125 else
126 # endif
127 ret = readsocket(b->num, out, outl);
128 BIO_clear_retry_flags(b);
129 if (ret <= 0) {
130 if (BIO_sock_should_retry(ret))
131 BIO_set_retry_read(b);
132 else if (ret == 0)
133 b->flags |= BIO_FLAGS_IN_EOF;
134 }
135 }
136 return ret;
137 }
138
sock_write(BIO * b,const char * in,int inl)139 static int sock_write(BIO *b, const char *in, int inl)
140 {
141 int ret = 0;
142 # if !defined(OPENSSL_NO_KTLS) || defined(OSSL_TFO_SENDTO)
143 struct bss_sock_st *data = (struct bss_sock_st *)b->ptr;
144 # endif
145
146 clear_socket_error();
147 # ifndef OPENSSL_NO_KTLS
148 if (BIO_should_ktls_ctrl_msg_flag(b)) {
149 unsigned char record_type = data->ktls_record_type;
150 ret = ktls_send_ctrl_message(b->num, record_type, in, inl);
151 if (ret >= 0) {
152 ret = inl;
153 BIO_clear_ktls_ctrl_msg_flag(b);
154 }
155 } else
156 # endif
157 # if defined(OSSL_TFO_SENDTO)
158 if (data->tfo_first) {
159 struct bss_sock_st *data = (struct bss_sock_st *)b->ptr;
160 socklen_t peerlen = BIO_ADDR_sockaddr_size(&data->tfo_peer);
161
162 ret = sendto(b->num, in, inl, OSSL_TFO_SENDTO,
163 BIO_ADDR_sockaddr(&data->tfo_peer), peerlen);
164 data->tfo_first = 0;
165 } else
166 # endif
167 ret = writesocket(b->num, in, inl);
168 BIO_clear_retry_flags(b);
169 if (ret <= 0) {
170 if (BIO_sock_should_retry(ret))
171 BIO_set_retry_write(b);
172 }
173 return ret;
174 }
175
sock_ctrl(BIO * b,int cmd,long num,void * ptr)176 static long sock_ctrl(BIO *b, int cmd, long num, void *ptr)
177 {
178 long ret = 1;
179 int *ip;
180 struct bss_sock_st *data = (struct bss_sock_st *)b->ptr;
181 # ifndef OPENSSL_NO_KTLS
182 ktls_crypto_info_t *crypto_info;
183 # endif
184
185 switch (cmd) {
186 case BIO_C_SET_FD:
187 /* minimal sock_free() */
188 if (b->shutdown) {
189 if (b->init)
190 BIO_closesocket(b->num);
191 b->flags = 0;
192 }
193 b->num = *((int *)ptr);
194 b->shutdown = (int)num;
195 b->init = 1;
196 data->tfo_first = 0;
197 memset(&data->tfo_peer, 0, sizeof(data->tfo_peer));
198 break;
199 case BIO_C_GET_FD:
200 if (b->init) {
201 ip = (int *)ptr;
202 if (ip != NULL)
203 *ip = b->num;
204 ret = b->num;
205 } else
206 ret = -1;
207 break;
208 case BIO_CTRL_GET_CLOSE:
209 ret = b->shutdown;
210 break;
211 case BIO_CTRL_SET_CLOSE:
212 b->shutdown = (int)num;
213 break;
214 case BIO_CTRL_DUP:
215 case BIO_CTRL_FLUSH:
216 ret = 1;
217 break;
218 # ifndef OPENSSL_NO_KTLS
219 case BIO_CTRL_SET_KTLS:
220 crypto_info = (ktls_crypto_info_t *)ptr;
221 ret = ktls_start(b->num, crypto_info, num);
222 if (ret)
223 BIO_set_ktls_flag(b, num);
224 break;
225 case BIO_CTRL_GET_KTLS_SEND:
226 return BIO_should_ktls_flag(b, 1) != 0;
227 case BIO_CTRL_GET_KTLS_RECV:
228 return BIO_should_ktls_flag(b, 0) != 0;
229 case BIO_CTRL_SET_KTLS_TX_SEND_CTRL_MSG:
230 BIO_set_ktls_ctrl_msg_flag(b);
231 data->ktls_record_type = (unsigned char)num;
232 ret = 0;
233 break;
234 case BIO_CTRL_CLEAR_KTLS_TX_CTRL_MSG:
235 BIO_clear_ktls_ctrl_msg_flag(b);
236 ret = 0;
237 break;
238 # endif
239 case BIO_CTRL_EOF:
240 ret = (b->flags & BIO_FLAGS_IN_EOF) != 0;
241 break;
242 case BIO_C_GET_CONNECT:
243 if (ptr != NULL && num == 2) {
244 const char **pptr = (const char **)ptr;
245
246 *pptr = (const char *)&data->tfo_peer;
247 } else {
248 ret = 0;
249 }
250 break;
251 case BIO_C_SET_CONNECT:
252 if (ptr != NULL && num == 2) {
253 ret = BIO_ADDR_make(&data->tfo_peer,
254 BIO_ADDR_sockaddr((const BIO_ADDR *)ptr));
255 if (ret)
256 data->tfo_first = 1;
257 } else {
258 ret = 0;
259 }
260 break;
261 default:
262 ret = 0;
263 break;
264 }
265 return ret;
266 }
267
sock_puts(BIO * bp,const char * str)268 static int sock_puts(BIO *bp, const char *str)
269 {
270 int n, ret;
271
272 n = strlen(str);
273 ret = sock_write(bp, str, n);
274 return ret;
275 }
276
BIO_sock_should_retry(int i)277 int BIO_sock_should_retry(int i)
278 {
279 int err;
280
281 if ((i == 0) || (i == -1)) {
282 err = get_last_socket_error();
283
284 return BIO_sock_non_fatal_error(err);
285 }
286 return 0;
287 }
288
BIO_sock_non_fatal_error(int err)289 int BIO_sock_non_fatal_error(int err)
290 {
291 switch (err) {
292 # if defined(OPENSSL_SYS_WINDOWS)
293 # if defined(WSAEWOULDBLOCK)
294 case WSAEWOULDBLOCK:
295 # endif
296 # endif
297
298 # ifdef EWOULDBLOCK
299 # ifdef WSAEWOULDBLOCK
300 # if WSAEWOULDBLOCK != EWOULDBLOCK
301 case EWOULDBLOCK:
302 # endif
303 # else
304 case EWOULDBLOCK:
305 # endif
306 # endif
307
308 # if defined(ENOTCONN)
309 case ENOTCONN:
310 # endif
311
312 # ifdef EINTR
313 case EINTR:
314 # endif
315
316 # ifdef EAGAIN
317 # if EWOULDBLOCK != EAGAIN
318 case EAGAIN:
319 # endif
320 # endif
321
322 # ifdef EPROTO
323 case EPROTO:
324 # endif
325
326 # ifdef EINPROGRESS
327 case EINPROGRESS:
328 # endif
329
330 # ifdef EALREADY
331 case EALREADY:
332 # endif
333 return 1;
334 default:
335 break;
336 }
337 return 0;
338 }
339
340 #endif /* #ifndef OPENSSL_NO_SOCK */
341