| OLD | NEW |
| 1 // Copyright 2016 The Chromium Authors. All rights reserved. | 1 // Copyright 2016 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "components/certificate_transparency/mock_log_dns_traffic.h" | 5 #include "components/certificate_transparency/mock_log_dns_traffic.h" |
| 6 | 6 |
| 7 #include <algorithm> | 7 #include <algorithm> |
| 8 #include <numeric> | 8 #include <numeric> |
| 9 #include <vector> | 9 #include <vector> |
| 10 | 10 |
| 11 #include "base/big_endian.h" | 11 #include "base/big_endian.h" |
| 12 #include "base/numerics/safe_conversions.h" | 12 #include "base/numerics/safe_conversions.h" |
| 13 #include "base/strings/string_number_conversions.h" | 13 #include "base/strings/string_number_conversions.h" |
| 14 #include "base/sys_byteorder.h" | 14 #include "base/sys_byteorder.h" |
| 15 #include "base/test/test_timeouts.h" | 15 #include "base/test/test_timeouts.h" |
| 16 #include "net/dns/dns_client.h" | 16 #include "net/dns/dns_client.h" |
| 17 #include "net/dns/dns_protocol.h" | 17 #include "net/dns/dns_protocol.h" |
| 18 #include "net/dns/dns_util.h" | 18 #include "net/dns/dns_util.h" |
| 19 #include "net/socket/socket_test_util.h" | 19 #include "net/socket/socket_test_util.h" |
| 20 #include "testing/gtest/include/gtest/gtest.h" | 20 #include "testing/gtest/include/gtest/gtest.h" |
| 21 | 21 |
| 22 namespace certificate_transparency { | 22 namespace certificate_transparency { |
| 23 | 23 |
| 24 namespace { | 24 namespace { |
| 25 | 25 |
| 26 // This is used for the last mock socket response as a sentinel to prevent | |
| 27 // trying to read more data than expected. | |
| 28 const net::MockRead kNoMoreData(net::SYNCHRONOUS, net::ERR_UNEXPECTED, 2); | |
| 29 | |
| 30 // Necessary to expose SetDnsConfig for testing. | 26 // Necessary to expose SetDnsConfig for testing. |
| 31 class DnsChangeNotifier : public net::NetworkChangeNotifier { | 27 class DnsChangeNotifier : public net::NetworkChangeNotifier { |
| 32 public: | 28 public: |
| 33 static void SetInitialDnsConfig(const net::DnsConfig& config) { | 29 static void SetInitialDnsConfig(const net::DnsConfig& config) { |
| 34 net::NetworkChangeNotifier::SetInitialDnsConfig(config); | 30 net::NetworkChangeNotifier::SetInitialDnsConfig(config); |
| 35 } | 31 } |
| 36 | 32 |
| 37 static void SetDnsConfig(const net::DnsConfig& config) { | 33 static void SetDnsConfig(const net::DnsConfig& config) { |
| 38 net::NetworkChangeNotifier::SetDnsConfig(config); | 34 net::NetworkChangeNotifier::SetDnsConfig(config); |
| 39 } | 35 } |
| 40 }; | 36 }; |
| 41 | 37 |
| 42 // Always return min, to simplify testing. | 38 // Always return min, to simplify testing. |
| 43 // This should result in the DNS query ID always being 0. | 39 // This should result in the DNS query ID always being 0. |
| 44 int FakeRandInt(int min, int max) { | 40 int FakeRandInt(int min, int max) { |
| 45 return min; | 41 return min; |
| 46 } | 42 } |
| 47 | 43 |
| 48 std::vector<char> CreateDnsTxtRequest(base::StringPiece qname) { | 44 std::vector<char> CreateDnsTxtRequest(base::StringPiece qname) { |
| 49 std::string encoded_qname; | 45 std::string encoded_qname; |
| 50 DCHECK(net::DNSDomainFromDot(qname, &encoded_qname)); | 46 EXPECT_TRUE(net::DNSDomainFromDot(qname, &encoded_qname)); |
| 51 | 47 |
| 52 // DNS query section: | 48 // DNS query section: |
| 53 // N bytes - qname | 49 // N bytes - qname |
| 54 // 2 bytes - record type | 50 // 2 bytes - record type |
| 55 // 2 bytes - record class | 51 // 2 bytes - record class |
| 56 // Total = N + 4 bytes | 52 // Total = N + 4 bytes |
| 57 const size_t query_section_size = encoded_qname.size() + 4; | 53 const size_t query_section_size = encoded_qname.size() + 4; |
| 58 | 54 |
| 59 std::vector<char> request(sizeof(net::dns_protocol::Header) + | 55 std::vector<char> request(sizeof(net::dns_protocol::Header) + |
| 60 query_section_size); | 56 query_section_size); |
| 61 base::BigEndianWriter writer(request.data(), request.size()); | 57 base::BigEndianWriter writer(request.data(), request.size()); |
| 62 | 58 |
| 63 // Header | 59 // Header |
| 64 net::dns_protocol::Header header = {}; | 60 net::dns_protocol::Header header = {}; |
| 65 header.flags = base::HostToNet16(net::dns_protocol::kFlagRD); | 61 header.flags = base::HostToNet16(net::dns_protocol::kFlagRD); |
| 66 header.qdcount = base::HostToNet16(1); | 62 header.qdcount = base::HostToNet16(1); |
| 67 DCHECK(writer.WriteBytes(&header, sizeof(header))); | 63 EXPECT_TRUE(writer.WriteBytes(&header, sizeof(header))); |
| 68 // Query section | 64 // Query section |
| 69 DCHECK(writer.WriteBytes(encoded_qname.data(), encoded_qname.size())); | 65 EXPECT_TRUE(writer.WriteBytes(encoded_qname.data(), encoded_qname.size())); |
| 70 DCHECK(writer.WriteU16(net::dns_protocol::kTypeTXT)); | 66 EXPECT_TRUE(writer.WriteU16(net::dns_protocol::kTypeTXT)); |
| 71 DCHECK(writer.WriteU16(net::dns_protocol::kClassIN)); | 67 EXPECT_TRUE(writer.WriteU16(net::dns_protocol::kClassIN)); |
| 72 DCHECK_EQ(0, writer.remaining()); | 68 EXPECT_EQ(0, writer.remaining()); |
| 73 | 69 |
| 74 return request; | 70 return request; |
| 75 } | 71 } |
| 76 | 72 |
| 77 std::vector<char> CreateDnsTxtResponse(const std::vector<char>& request, | 73 std::vector<char> CreateDnsTxtResponse(const std::vector<char>& request, |
| 78 base::StringPiece answer) { | 74 base::StringPiece answer) { |
| 79 // DNS answers section: | 75 // DNS answers section: |
| 80 // 2 bytes - qname pointer | 76 // 2 bytes - qname pointer |
| 81 // 2 bytes - record type | 77 // 2 bytes - record type |
| 82 // 2 bytes - record class | 78 // 2 bytes - record class |
| 83 // 4 bytes - time-to-live | 79 // 4 bytes - time-to-live |
| 84 // 2 bytes - size of answer (N) | 80 // 2 bytes - size of answer (N) |
| 85 // N bytes - answer | 81 // N bytes - answer |
| 86 // Total = 12 + N bytes | 82 // Total = 12 + N bytes |
| 87 const size_t answers_section_size = 12 + answer.size(); | 83 const size_t answers_section_size = 12 + answer.size(); |
| 88 constexpr uint32_t ttl = 86400; // seconds | 84 constexpr uint32_t ttl = 86400; // seconds |
| 89 | 85 |
| 90 std::vector<char> response(request.size() + answers_section_size); | 86 std::vector<char> response(request.size() + answers_section_size); |
| 91 std::copy(request.begin(), request.end(), response.begin()); | 87 std::copy(request.begin(), request.end(), response.begin()); |
| 92 // Modify the header | 88 // Modify the header |
| 93 net::dns_protocol::Header* header = | 89 net::dns_protocol::Header* header = |
| 94 reinterpret_cast<net::dns_protocol::Header*>(response.data()); | 90 reinterpret_cast<net::dns_protocol::Header*>(response.data()); |
| 95 header->ancount = base::HostToNet16(1); | 91 header->ancount = base::HostToNet16(1); |
| 96 header->flags |= base::HostToNet16(net::dns_protocol::kFlagResponse); | 92 header->flags |= base::HostToNet16(net::dns_protocol::kFlagResponse); |
| 97 | 93 |
| 98 // Write the answer section | 94 // Write the answer section |
| 99 base::BigEndianWriter writer(response.data() + request.size(), | 95 base::BigEndianWriter writer(response.data() + request.size(), |
| 100 response.size() - request.size()); | 96 response.size() - request.size()); |
| 101 DCHECK(writer.WriteU8(0xc0)); // qname is a pointer | 97 EXPECT_TRUE(writer.WriteU8(0xc0)); // qname is a pointer |
| 102 DCHECK(writer.WriteU8( | 98 EXPECT_TRUE(writer.WriteU8( |
| 103 sizeof(*header))); // address of qname (start of query section) | 99 sizeof(*header))); // address of qname (start of query section) |
| 104 DCHECK(writer.WriteU16(net::dns_protocol::kTypeTXT)); | 100 EXPECT_TRUE(writer.WriteU16(net::dns_protocol::kTypeTXT)); |
| 105 DCHECK(writer.WriteU16(net::dns_protocol::kClassIN)); | 101 EXPECT_TRUE(writer.WriteU16(net::dns_protocol::kClassIN)); |
| 106 DCHECK(writer.WriteU32(ttl)); | 102 EXPECT_TRUE(writer.WriteU32(ttl)); |
| 107 DCHECK(writer.WriteU16(answer.size())); | 103 EXPECT_TRUE(writer.WriteU16(answer.size())); |
| 108 DCHECK(writer.WriteBytes(answer.data(), answer.size())); | 104 EXPECT_TRUE(writer.WriteBytes(answer.data(), answer.size())); |
| 109 DCHECK_EQ(0, writer.remaining()); | 105 EXPECT_EQ(0, writer.remaining()); |
| 110 | 106 |
| 111 return response; | 107 return response; |
| 112 } | 108 } |
| 113 | 109 |
| 114 std::vector<char> CreateDnsErrorResponse(const std::vector<char>& request, | 110 std::vector<char> CreateDnsErrorResponse(const std::vector<char>& request, |
| 115 uint8_t rcode) { | 111 uint8_t rcode) { |
| 116 std::vector<char> response(request); | 112 std::vector<char> response(request); |
| 117 // Modify the header | 113 // Modify the header |
| 118 net::dns_protocol::Header* header = | 114 net::dns_protocol::Header* header = |
| 119 reinterpret_cast<net::dns_protocol::Header*>(response.data()); | 115 reinterpret_cast<net::dns_protocol::Header*>(response.data()); |
| 120 header->ancount = base::HostToNet16(1); | 116 header->ancount = base::HostToNet16(1); |
| 121 header->flags |= base::HostToNet16(net::dns_protocol::kFlagResponse | rcode); | 117 header->flags |= base::HostToNet16(net::dns_protocol::kFlagResponse | rcode); |
| 122 | 118 |
| 123 return response; | 119 return response; |
| 124 } | 120 } |
| 125 | 121 |
| 126 } // namespace | 122 } // namespace |
| 127 | 123 |
| 128 // A container for all of the data needed for simulating a socket. | 124 namespace internal { |
| 129 // This is useful because Mock{Read,Write}, SequencedSocketData and | |
| 130 // MockClientSocketFactory all do not take ownership of or copy their arguments, | |
| 131 // so it is necessary to manage the lifetime of those arguments. Wrapping all | |
| 132 // of that up in a single class simplifies this. | |
| 133 class MockLogDnsTraffic::MockSocketData { | |
| 134 public: | |
| 135 // A socket that expects one write and one read operation. | |
| 136 MockSocketData(const std::vector<char>& write, const std::vector<char>& read) | |
| 137 : expected_write_payload_(write), | |
| 138 expected_read_payload_(read), | |
| 139 expected_write_(net::SYNCHRONOUS, | |
| 140 expected_write_payload_.data(), | |
| 141 expected_write_payload_.size(), | |
| 142 0), | |
| 143 expected_reads_{net::MockRead(net::ASYNC, | |
| 144 expected_read_payload_.data(), | |
| 145 expected_read_payload_.size(), | |
| 146 1), | |
| 147 kNoMoreData}, | |
| 148 socket_data_(expected_reads_, 2, &expected_write_, 1) {} | |
| 149 | 125 |
| 150 // A socket that expects one write and a read error. | 126 MockSocketData::MockSocketData(const std::vector<char>& write, |
| 151 MockSocketData(const std::vector<char>& write, net::Error error) | 127 const std::vector<char>& read) |
| 152 : expected_write_payload_(write), | 128 : expected_write_payload_(write), |
| 153 expected_write_(net::SYNCHRONOUS, | 129 expected_read_payload_(read), |
| 154 expected_write_payload_.data(), | 130 expected_write_(net::SYNCHRONOUS, |
| 155 expected_write_payload_.size(), | 131 expected_write_payload_.data(), |
| 156 0), | 132 expected_write_payload_.size(), |
| 157 expected_reads_{net::MockRead(net::ASYNC, error, 1), kNoMoreData}, | 133 0), |
| 158 socket_data_(expected_reads_, 2, &expected_write_, 1) {} | 134 expected_reads_{net::MockRead(net::ASYNC, |
| 135 expected_read_payload_.data(), |
| 136 expected_read_payload_.size(), |
| 137 1), |
| 138 no_more_data_}, |
| 139 socket_data_(expected_reads_, 2, &expected_write_, 1) {} |
| 159 | 140 |
| 160 // A socket that expects one write and no response. | 141 MockSocketData::MockSocketData(const std::vector<char>& write, int net_error) |
| 161 explicit MockSocketData(const std::vector<char>& write) | 142 : expected_write_payload_(write), |
| 162 : expected_write_payload_(write), | 143 expected_write_(net::SYNCHRONOUS, |
| 163 expected_write_(net::SYNCHRONOUS, | 144 expected_write_payload_.data(), |
| 164 expected_write_payload_.data(), | 145 expected_write_payload_.size(), |
| 165 expected_write_payload_.size(), | 146 0), |
| 166 0), | 147 expected_reads_{net::MockRead(net::ASYNC, net_error, 1), no_more_data_}, |
| 167 expected_reads_{net::MockRead(net::SYNCHRONOUS, net::ERR_IO_PENDING, 1), | 148 socket_data_(expected_reads_, 2, &expected_write_, 1) {} |
| 168 kNoMoreData}, | |
| 169 socket_data_(expected_reads_, 2, &expected_write_, 1) {} | |
| 170 | 149 |
| 171 ~MockSocketData() {} | 150 MockSocketData::MockSocketData(const std::vector<char>& write) |
| 151 : expected_write_payload_(write), |
| 152 expected_write_(net::SYNCHRONOUS, |
| 153 expected_write_payload_.data(), |
| 154 expected_write_payload_.size(), |
| 155 0), |
| 156 expected_reads_{net::MockRead(net::SYNCHRONOUS, net::ERR_IO_PENDING, 1), |
| 157 no_more_data_}, |
| 158 socket_data_(expected_reads_, 2, &expected_write_, 1) {} |
| 172 | 159 |
| 173 void SetWriteMode(net::IoMode mode) { expected_write_.mode = mode; } | 160 MockSocketData::~MockSocketData() {} |
| 174 void SetReadMode(net::IoMode mode) { expected_reads_[0].mode = mode; } | |
| 175 | 161 |
| 176 void AddToFactory(net::MockClientSocketFactory* socket_factory) { | 162 void MockSocketData::AddToFactory( |
| 177 socket_factory->AddSocketDataProvider(&socket_data_); | 163 net::MockClientSocketFactory* socket_factory) { |
| 178 } | 164 socket_factory->AddSocketDataProvider(&socket_data_); |
| 165 } |
| 179 | 166 |
| 180 private: | 167 const net::MockRead MockSocketData::no_more_data_(net::SYNCHRONOUS, |
| 181 // This class only supports one write and one read, so just need to store one | 168 net::ERR_IO_PENDING, |
| 182 // payload each. | 169 2); |
| 183 const std::vector<char> expected_write_payload_; | |
| 184 const std::vector<char> expected_read_payload_; | |
| 185 | 170 |
| 186 // Encapsulates the data that is expected to be written to a socket. | 171 } // namespace internal |
| 187 net::MockWrite expected_write_; | |
| 188 | 172 |
| 189 // Encapsulates the data/error that should be returned when reading from a | 173 using internal::MockSocketData; |
| 190 // socket. The second "expected" read is a sentinel that causes socket reads | |
| 191 // beyond the first to hang until they timeout. This results in better | |
| 192 // test failure messages (rather than a CHECK-fail due to a socket read | |
| 193 // overrunning the MockRead array) and behaviour more like a real socket when | |
| 194 // an unexpected second socket read occurs. | |
| 195 net::MockRead expected_reads_[2]; | |
| 196 | |
| 197 // Holds pointers to |expected_write_| and |expected_reads_|. This is what is | |
| 198 // added to net::MockClientSocketFactory to prepare a mock socket. | |
| 199 net::SequencedSocketData socket_data_; | |
| 200 | |
| 201 DISALLOW_COPY_AND_ASSIGN(MockSocketData); | |
| 202 }; | |
| 203 | 174 |
| 204 MockLogDnsTraffic::MockLogDnsTraffic() : socket_read_mode_(net::ASYNC) {} | 175 MockLogDnsTraffic::MockLogDnsTraffic() : socket_read_mode_(net::ASYNC) {} |
| 205 | 176 |
| 206 MockLogDnsTraffic::~MockLogDnsTraffic() {} | 177 MockLogDnsTraffic::~MockLogDnsTraffic() {} |
| 207 | 178 |
| 208 void MockLogDnsTraffic::ExpectRequestAndErrorResponse(base::StringPiece qname, | 179 void MockLogDnsTraffic::ExpectRequestAndErrorResponse(base::StringPiece qname, |
| 209 uint8_t rcode) { | 180 uint8_t rcode) { |
| 210 std::vector<char> request = CreateDnsTxtRequest(qname); | 181 std::vector<char> request = CreateDnsTxtRequest(qname); |
| 211 EmplaceMockSocketData(CreateDnsTxtRequest(qname), | 182 EmplaceMockSocketData(CreateDnsTxtRequest(qname), |
| 212 CreateDnsErrorResponse(request, rcode)); | 183 CreateDnsErrorResponse(request, rcode)); |
| 213 } | 184 } |
| 214 | 185 |
| 215 void MockLogDnsTraffic::ExpectRequestAndSocketError(base::StringPiece qname, | 186 void MockLogDnsTraffic::ExpectRequestAndSocketError(base::StringPiece qname, |
| 216 net::Error error) { | 187 int net_error) { |
| 217 EmplaceMockSocketData(CreateDnsTxtRequest(qname), error); | 188 EmplaceMockSocketData(CreateDnsTxtRequest(qname), net_error); |
| 218 } | 189 } |
| 219 | 190 |
| 220 void MockLogDnsTraffic::ExpectRequestAndTimeout(base::StringPiece qname) { | 191 void MockLogDnsTraffic::ExpectRequestAndTimeout(base::StringPiece qname) { |
| 221 EmplaceMockSocketData(CreateDnsTxtRequest(qname)); | 192 EmplaceMockSocketData(CreateDnsTxtRequest(qname)); |
| 222 | 193 |
| 223 // Speed up timeout tests. | 194 // Speed up timeout tests. |
| 224 SetDnsTimeout(TestTimeouts::tiny_timeout()); | 195 SetDnsTimeout(TestTimeouts::tiny_timeout()); |
| 225 } | 196 } |
| 226 | 197 |
| 227 void MockLogDnsTraffic::ExpectRequestAndResponse( | 198 void MockLogDnsTraffic::ExpectRequestAndResponse( |
| (...skipping 63 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 291 } | 262 } |
| 292 | 263 |
| 293 void MockLogDnsTraffic::SetDnsTimeout(const base::TimeDelta& timeout) { | 264 void MockLogDnsTraffic::SetDnsTimeout(const base::TimeDelta& timeout) { |
| 294 net::DnsConfig dns_config; | 265 net::DnsConfig dns_config; |
| 295 DnsChangeNotifier::GetDnsConfig(&dns_config); | 266 DnsChangeNotifier::GetDnsConfig(&dns_config); |
| 296 dns_config.timeout = timeout; | 267 dns_config.timeout = timeout; |
| 297 DnsChangeNotifier::SetDnsConfig(dns_config); | 268 DnsChangeNotifier::SetDnsConfig(dns_config); |
| 298 } | 269 } |
| 299 | 270 |
| 300 } // namespace certificate_transparency | 271 } // namespace certificate_transparency |
| OLD | NEW |