| OLD | NEW |
| 1 // Copyright 2016 The Chromium Authors. All rights reserved. | 1 // Copyright 2016 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "components/certificate_transparency/mock_log_dns_traffic.h" | 5 #include "components/certificate_transparency/mock_log_dns_traffic.h" |
| 6 | 6 |
| 7 #include <algorithm> | 7 #include <algorithm> |
| 8 #include <numeric> | 8 #include <numeric> |
| 9 #include <vector> | 9 #include <vector> |
| 10 | 10 |
| 11 #include "base/big_endian.h" | 11 #include "base/big_endian.h" |
| 12 #include "base/numerics/safe_conversions.h" | 12 #include "base/numerics/safe_conversions.h" |
| 13 #include "base/strings/string_number_conversions.h" | 13 #include "base/strings/string_number_conversions.h" |
| 14 #include "base/sys_byteorder.h" | 14 #include "base/sys_byteorder.h" |
| 15 #include "base/test/test_timeouts.h" | 15 #include "base/test/test_timeouts.h" |
| 16 #include "net/dns/dns_client.h" | 16 #include "net/dns/dns_client.h" |
| 17 #include "net/dns/dns_protocol.h" | 17 #include "net/dns/dns_protocol.h" |
| 18 #include "net/dns/dns_util.h" | 18 #include "net/dns/dns_util.h" |
| 19 #include "net/socket/socket_test_util.h" | 19 #include "net/socket/socket_test_util.h" |
| 20 #include "testing/gtest/include/gtest/gtest.h" | 20 #include "testing/gtest/include/gtest/gtest.h" |
| 21 | 21 |
| 22 namespace certificate_transparency { | 22 namespace certificate_transparency { |
| 23 | 23 |
| 24 namespace { | 24 namespace { |
| 25 | 25 |
| 26 // This is used for the last mock socket response as a sentinel to prevent |
| 27 // trying to read more data than expected. |
| 28 const net::MockRead kNoMoreData(net::SYNCHRONOUS, net::ERR_UNEXPECTED, 2); |
| 29 |
| 26 // Necessary to expose SetDnsConfig for testing. | 30 // Necessary to expose SetDnsConfig for testing. |
| 27 class DnsChangeNotifier : public net::NetworkChangeNotifier { | 31 class DnsChangeNotifier : public net::NetworkChangeNotifier { |
| 28 public: | 32 public: |
| 29 static void SetInitialDnsConfig(const net::DnsConfig& config) { | 33 static void SetInitialDnsConfig(const net::DnsConfig& config) { |
| 30 net::NetworkChangeNotifier::SetInitialDnsConfig(config); | 34 net::NetworkChangeNotifier::SetInitialDnsConfig(config); |
| 31 } | 35 } |
| 32 | 36 |
| 33 static void SetDnsConfig(const net::DnsConfig& config) { | 37 static void SetDnsConfig(const net::DnsConfig& config) { |
| 34 net::NetworkChangeNotifier::SetDnsConfig(config); | 38 net::NetworkChangeNotifier::SetDnsConfig(config); |
| 35 } | 39 } |
| 36 }; | 40 }; |
| 37 | 41 |
| 38 // Always return min, to simplify testing. | 42 // Always return min, to simplify testing. |
| 39 // This should result in the DNS query ID always being 0. | 43 // This should result in the DNS query ID always being 0. |
| 40 int FakeRandInt(int min, int max) { | 44 int FakeRandInt(int min, int max) { |
| 41 return min; | 45 return min; |
| 42 } | 46 } |
| 43 | 47 |
| 44 std::vector<char> CreateDnsTxtRequest(base::StringPiece qname) { | 48 std::vector<char> CreateDnsTxtRequest(base::StringPiece qname) { |
| 45 std::string encoded_qname; | 49 std::string encoded_qname; |
| 46 EXPECT_TRUE(net::DNSDomainFromDot(qname, &encoded_qname)); | 50 CHECK(net::DNSDomainFromDot(qname, &encoded_qname)); |
| 47 | 51 |
| 48 // DNS query section: | 52 // DNS query section: |
| 49 // N bytes - qname | 53 // N bytes - qname |
| 50 // 2 bytes - record type | 54 // 2 bytes - record type |
| 51 // 2 bytes - record class | 55 // 2 bytes - record class |
| 52 // Total = N + 4 bytes | 56 // Total = N + 4 bytes |
| 53 const size_t query_section_size = encoded_qname.size() + 4; | 57 const size_t query_section_size = encoded_qname.size() + 4; |
| 54 | 58 |
| 55 std::vector<char> request(sizeof(net::dns_protocol::Header) + | 59 std::vector<char> request(sizeof(net::dns_protocol::Header) + |
| 56 query_section_size); | 60 query_section_size); |
| 57 base::BigEndianWriter writer(request.data(), request.size()); | 61 base::BigEndianWriter writer(request.data(), request.size()); |
| 58 | 62 |
| 59 // Header | 63 // Header |
| 60 net::dns_protocol::Header header = {}; | 64 net::dns_protocol::Header header = {}; |
| 61 header.flags = base::HostToNet16(net::dns_protocol::kFlagRD); | 65 header.flags = base::HostToNet16(net::dns_protocol::kFlagRD); |
| 62 header.qdcount = base::HostToNet16(1); | 66 header.qdcount = base::HostToNet16(1); |
| 63 EXPECT_TRUE(writer.WriteBytes(&header, sizeof(header))); | 67 CHECK(writer.WriteBytes(&header, sizeof(header))); |
| 64 // Query section | 68 // Query section |
| 65 EXPECT_TRUE(writer.WriteBytes(encoded_qname.data(), encoded_qname.size())); | 69 CHECK(writer.WriteBytes(encoded_qname.data(), encoded_qname.size())); |
| 66 EXPECT_TRUE(writer.WriteU16(net::dns_protocol::kTypeTXT)); | 70 CHECK(writer.WriteU16(net::dns_protocol::kTypeTXT)); |
| 67 EXPECT_TRUE(writer.WriteU16(net::dns_protocol::kClassIN)); | 71 CHECK(writer.WriteU16(net::dns_protocol::kClassIN)); |
| 68 EXPECT_EQ(0, writer.remaining()); | 72 CHECK_EQ(0, writer.remaining()); |
| 69 | 73 |
| 70 return request; | 74 return request; |
| 71 } | 75 } |
| 72 | 76 |
| 73 std::vector<char> CreateDnsTxtResponse(const std::vector<char>& request, | 77 std::vector<char> CreateDnsTxtResponse(const std::vector<char>& request, |
| 74 base::StringPiece answer) { | 78 base::StringPiece answer) { |
| 75 // DNS answers section: | 79 // DNS answers section: |
| 76 // 2 bytes - qname pointer | 80 // 2 bytes - qname pointer |
| 77 // 2 bytes - record type | 81 // 2 bytes - record type |
| 78 // 2 bytes - record class | 82 // 2 bytes - record class |
| 79 // 4 bytes - time-to-live | 83 // 4 bytes - time-to-live |
| 80 // 2 bytes - size of answer (N) | 84 // 2 bytes - size of answer (N) |
| 81 // N bytes - answer | 85 // N bytes - answer |
| 82 // Total = 12 + N bytes | 86 // Total = 12 + N bytes |
| 83 const size_t answers_section_size = 12 + answer.size(); | 87 const size_t answers_section_size = 12 + answer.size(); |
| 84 constexpr uint32_t ttl = 86400; // seconds | 88 constexpr uint32_t ttl = 86400; // seconds |
| 85 | 89 |
| 86 std::vector<char> response(request.size() + answers_section_size); | 90 std::vector<char> response(request.size() + answers_section_size); |
| 87 std::copy(request.begin(), request.end(), response.begin()); | 91 std::copy(request.begin(), request.end(), response.begin()); |
| 88 // Modify the header | 92 // Modify the header |
| 89 net::dns_protocol::Header* header = | 93 net::dns_protocol::Header* header = |
| 90 reinterpret_cast<net::dns_protocol::Header*>(response.data()); | 94 reinterpret_cast<net::dns_protocol::Header*>(response.data()); |
| 91 header->ancount = base::HostToNet16(1); | 95 header->ancount = base::HostToNet16(1); |
| 92 header->flags |= base::HostToNet16(net::dns_protocol::kFlagResponse); | 96 header->flags |= base::HostToNet16(net::dns_protocol::kFlagResponse); |
| 93 | 97 |
| 94 // Write the answer section | 98 // Write the answer section |
| 95 base::BigEndianWriter writer(response.data() + request.size(), | 99 base::BigEndianWriter writer(response.data() + request.size(), |
| 96 response.size() - request.size()); | 100 response.size() - request.size()); |
| 97 EXPECT_TRUE(writer.WriteU8(0xc0)); // qname is a pointer | 101 CHECK(writer.WriteU8(0xc0)); // qname is a pointer |
| 98 EXPECT_TRUE(writer.WriteU8( | 102 CHECK(writer.WriteU8( |
| 99 sizeof(*header))); // address of qname (start of query section) | 103 sizeof(*header))); // address of qname (start of query section) |
| 100 EXPECT_TRUE(writer.WriteU16(net::dns_protocol::kTypeTXT)); | 104 CHECK(writer.WriteU16(net::dns_protocol::kTypeTXT)); |
| 101 EXPECT_TRUE(writer.WriteU16(net::dns_protocol::kClassIN)); | 105 CHECK(writer.WriteU16(net::dns_protocol::kClassIN)); |
| 102 EXPECT_TRUE(writer.WriteU32(ttl)); | 106 CHECK(writer.WriteU32(ttl)); |
| 103 EXPECT_TRUE(writer.WriteU16(answer.size())); | 107 CHECK(writer.WriteU16(answer.size())); |
| 104 EXPECT_TRUE(writer.WriteBytes(answer.data(), answer.size())); | 108 CHECK(writer.WriteBytes(answer.data(), answer.size())); |
| 105 EXPECT_EQ(0, writer.remaining()); | 109 CHECK_EQ(0, writer.remaining()); |
| 106 | 110 |
| 107 return response; | 111 return response; |
| 108 } | 112 } |
| 109 | 113 |
| 110 std::vector<char> CreateDnsErrorResponse(const std::vector<char>& request, | 114 std::vector<char> CreateDnsErrorResponse(const std::vector<char>& request, |
| 111 uint8_t rcode) { | 115 uint8_t rcode) { |
| 112 std::vector<char> response(request); | 116 std::vector<char> response(request); |
| 113 // Modify the header | 117 // Modify the header |
| 114 net::dns_protocol::Header* header = | 118 net::dns_protocol::Header* header = |
| 115 reinterpret_cast<net::dns_protocol::Header*>(response.data()); | 119 reinterpret_cast<net::dns_protocol::Header*>(response.data()); |
| 116 header->ancount = base::HostToNet16(1); | 120 header->ancount = base::HostToNet16(1); |
| 117 header->flags |= base::HostToNet16(net::dns_protocol::kFlagResponse | rcode); | 121 header->flags |= base::HostToNet16(net::dns_protocol::kFlagResponse | rcode); |
| 118 | 122 |
| 119 return response; | 123 return response; |
| 120 } | 124 } |
| 121 | 125 |
| 122 } // namespace | 126 } // namespace |
| 123 | 127 |
| 124 namespace internal { | 128 // A container for all of the data needed for simulating a socket. |
| 129 // This is useful because Mock{Read,Write}, SequencedSocketData and |
| 130 // MockClientSocketFactory all do not take ownership of or copy their arguments, |
| 131 // so it is necessary to manage the lifetime of those arguments. Wrapping all |
| 132 // of that up in a single class simplifies this. |
| 133 class MockLogDnsTraffic::MockSocketData { |
| 134 public: |
| 135 // A socket that expects one write and one read operation. |
| 136 MockSocketData(const std::vector<char>& write, const std::vector<char>& read) |
| 137 : expected_write_payload_(write), |
| 138 expected_read_payload_(read), |
| 139 expected_write_(net::SYNCHRONOUS, |
| 140 expected_write_payload_.data(), |
| 141 expected_write_payload_.size(), |
| 142 0), |
| 143 expected_reads_{net::MockRead(net::ASYNC, |
| 144 expected_read_payload_.data(), |
| 145 expected_read_payload_.size(), |
| 146 1), |
| 147 kNoMoreData}, |
| 148 socket_data_(expected_reads_, 2, &expected_write_, 1) {} |
| 125 | 149 |
| 126 MockSocketData::MockSocketData(const std::vector<char>& write, | 150 // A socket that expects one write and a read error. |
| 127 const std::vector<char>& read) | 151 MockSocketData(const std::vector<char>& write, net::Error error) |
| 128 : expected_write_payload_(write), | 152 : expected_write_payload_(write), |
| 129 expected_read_payload_(read), | 153 expected_write_(net::SYNCHRONOUS, |
| 130 expected_write_(net::SYNCHRONOUS, | 154 expected_write_payload_.data(), |
| 131 expected_write_payload_.data(), | 155 expected_write_payload_.size(), |
| 132 expected_write_payload_.size(), | 156 0), |
| 133 0), | 157 expected_reads_{net::MockRead(net::ASYNC, error, 1), kNoMoreData}, |
| 134 expected_reads_{net::MockRead(net::ASYNC, | 158 socket_data_(expected_reads_, 2, &expected_write_, 1) {} |
| 135 expected_read_payload_.data(), | |
| 136 expected_read_payload_.size(), | |
| 137 1), | |
| 138 no_more_data_}, | |
| 139 socket_data_(expected_reads_, 2, &expected_write_, 1) {} | |
| 140 | 159 |
| 141 MockSocketData::MockSocketData(const std::vector<char>& write, int net_error) | 160 // A socket that expects one write and no response. |
| 142 : expected_write_payload_(write), | 161 explicit MockSocketData(const std::vector<char>& write) |
| 143 expected_write_(net::SYNCHRONOUS, | 162 : expected_write_payload_(write), |
| 144 expected_write_payload_.data(), | 163 expected_write_(net::SYNCHRONOUS, |
| 145 expected_write_payload_.size(), | 164 expected_write_payload_.data(), |
| 146 0), | 165 expected_write_payload_.size(), |
| 147 expected_reads_{net::MockRead(net::ASYNC, net_error, 1), no_more_data_}, | 166 0), |
| 148 socket_data_(expected_reads_, 2, &expected_write_, 1) {} | 167 expected_reads_{net::MockRead(net::SYNCHRONOUS, net::ERR_IO_PENDING, 1), |
| 168 kNoMoreData}, |
| 169 socket_data_(expected_reads_, 2, &expected_write_, 1) {} |
| 149 | 170 |
| 150 MockSocketData::MockSocketData(const std::vector<char>& write) | 171 ~MockSocketData() {} |
| 151 : expected_write_payload_(write), | |
| 152 expected_write_(net::SYNCHRONOUS, | |
| 153 expected_write_payload_.data(), | |
| 154 expected_write_payload_.size(), | |
| 155 0), | |
| 156 expected_reads_{net::MockRead(net::SYNCHRONOUS, net::ERR_IO_PENDING, 1), | |
| 157 no_more_data_}, | |
| 158 socket_data_(expected_reads_, 2, &expected_write_, 1) {} | |
| 159 | 172 |
| 160 MockSocketData::~MockSocketData() {} | 173 void SetWriteMode(net::IoMode mode) { expected_write_.mode = mode; } |
| 174 void SetReadMode(net::IoMode mode) { expected_reads_[0].mode = mode; } |
| 161 | 175 |
| 162 void MockSocketData::AddToFactory( | 176 void AddToFactory(net::MockClientSocketFactory* socket_factory) { |
| 163 net::MockClientSocketFactory* socket_factory) { | 177 socket_factory->AddSocketDataProvider(&socket_data_); |
| 164 socket_factory->AddSocketDataProvider(&socket_data_); | 178 } |
| 165 } | |
| 166 | 179 |
| 167 const net::MockRead MockSocketData::no_more_data_(net::SYNCHRONOUS, | 180 private: |
| 168 net::ERR_IO_PENDING, | 181 // This class only supports one write and one read, so just need to store one |
| 169 2); | 182 // payload each. |
| 183 const std::vector<char> expected_write_payload_; |
| 184 const std::vector<char> expected_read_payload_; |
| 170 | 185 |
| 171 } // namespace internal | 186 // Encapsulates the data that is expected to be written to a socket. |
| 187 net::MockWrite expected_write_; |
| 172 | 188 |
| 173 using internal::MockSocketData; | 189 // Encapsulates the data/error that should be returned when reading from a |
| 190 // socket. The second "expected" read is a sentinel that causes socket reads |
| 191 // beyond the first to hang until they timeout. This results in better |
| 192 // test failure messages (rather than a CHECK-fail due to a socket read |
| 193 // overrunning the MockRead array) and behaviour more like a real socket when |
| 194 // an unexpected second socket read occurs. |
| 195 net::MockRead expected_reads_[2]; |
| 196 |
| 197 // Holds pointers to |expected_write_| and |expected_reads_|. This is what is |
| 198 // added to net::MockClientSocketFactory to prepare a mock socket. |
| 199 net::SequencedSocketData socket_data_; |
| 200 |
| 201 DISALLOW_COPY_AND_ASSIGN(MockSocketData); |
| 202 }; |
| 174 | 203 |
| 175 MockLogDnsTraffic::MockLogDnsTraffic() : socket_read_mode_(net::ASYNC) {} | 204 MockLogDnsTraffic::MockLogDnsTraffic() : socket_read_mode_(net::ASYNC) {} |
| 176 | 205 |
| 177 MockLogDnsTraffic::~MockLogDnsTraffic() {} | 206 MockLogDnsTraffic::~MockLogDnsTraffic() {} |
| 178 | 207 |
| 179 void MockLogDnsTraffic::ExpectRequestAndErrorResponse(base::StringPiece qname, | 208 void MockLogDnsTraffic::ExpectRequestAndErrorResponse(base::StringPiece qname, |
| 180 uint8_t rcode) { | 209 uint8_t rcode) { |
| 181 std::vector<char> request = CreateDnsTxtRequest(qname); | 210 std::vector<char> request = CreateDnsTxtRequest(qname); |
| 182 EmplaceMockSocketData(CreateDnsTxtRequest(qname), | 211 EmplaceMockSocketData(CreateDnsTxtRequest(qname), |
| 183 CreateDnsErrorResponse(request, rcode)); | 212 CreateDnsErrorResponse(request, rcode)); |
| 184 } | 213 } |
| 185 | 214 |
| 186 void MockLogDnsTraffic::ExpectRequestAndSocketError(base::StringPiece qname, | 215 void MockLogDnsTraffic::ExpectRequestAndSocketError(base::StringPiece qname, |
| 187 int net_error) { | 216 net::Error error) { |
| 188 EmplaceMockSocketData(CreateDnsTxtRequest(qname), net_error); | 217 EmplaceMockSocketData(CreateDnsTxtRequest(qname), error); |
| 189 } | 218 } |
| 190 | 219 |
| 191 void MockLogDnsTraffic::ExpectRequestAndTimeout(base::StringPiece qname) { | 220 void MockLogDnsTraffic::ExpectRequestAndTimeout(base::StringPiece qname) { |
| 192 EmplaceMockSocketData(CreateDnsTxtRequest(qname)); | 221 EmplaceMockSocketData(CreateDnsTxtRequest(qname)); |
| 193 | 222 |
| 194 // Speed up timeout tests. | 223 // Speed up timeout tests. |
| 195 SetDnsTimeout(TestTimeouts::tiny_timeout()); | 224 SetDnsTimeout(TestTimeouts::tiny_timeout()); |
| 196 } | 225 } |
| 197 | 226 |
| 198 void MockLogDnsTraffic::ExpectRequestAndResponse( | 227 void MockLogDnsTraffic::ExpectRequestAndResponse( |
| (...skipping 63 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 262 } | 291 } |
| 263 | 292 |
| 264 void MockLogDnsTraffic::SetDnsTimeout(const base::TimeDelta& timeout) { | 293 void MockLogDnsTraffic::SetDnsTimeout(const base::TimeDelta& timeout) { |
| 265 net::DnsConfig dns_config; | 294 net::DnsConfig dns_config; |
| 266 DnsChangeNotifier::GetDnsConfig(&dns_config); | 295 DnsChangeNotifier::GetDnsConfig(&dns_config); |
| 267 dns_config.timeout = timeout; | 296 dns_config.timeout = timeout; |
| 268 DnsChangeNotifier::SetDnsConfig(dns_config); | 297 DnsChangeNotifier::SetDnsConfig(dns_config); |
| 269 } | 298 } |
| 270 | 299 |
| 271 } // namespace certificate_transparency | 300 } // namespace certificate_transparency |
| OLD | NEW |