OLD | NEW |
---|---|
1 // Copyright (c) 2015 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2015 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "net/base/ip_address.h" | 5 #include "net/base/ip_address.h" |
6 | 6 |
7 #include <limits.h> | 7 #include <limits.h> |
8 | 8 |
9 #include "base/strings/string_piece.h" | 9 #include "base/strings/string_piece.h" |
10 #include "base/strings/string_split.h" | 10 #include "base/strings/string_split.h" |
11 #include "base/strings/stringprintf.h" | 11 #include "base/strings/stringprintf.h" |
12 #include "net/base/parse_number.h" | 12 #include "net/base/parse_number.h" |
13 #include "url/gurl.h" | 13 #include "url/gurl.h" |
14 #include "url/url_canon_ip.h" | 14 #include "url/url_canon_ip.h" |
15 | 15 |
16 namespace { | 16 namespace { |
17 | 17 |
18 // The prefix for IPv6 mapped IPv4 addresses. | 18 // The prefix for IPv6 mapped IPv4 addresses. |
19 // https://tools.ietf.org/html/rfc4291#section-2.5.5.2 | 19 // https://tools.ietf.org/html/rfc4291#section-2.5.5.2 |
20 const uint8_t kIPv4MappedPrefix[] = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xFF, 0xFF}; | 20 const uint8_t kIPv4MappedPrefix[] = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xFF, 0xFF}; |
21 | 21 |
22 // Note that this function assumes: | 22 // Note that this function assumes: |
23 // * |ip_address| is at least |prefix_length_in_bits| (bits) long; | 23 // * |ip_address| is at least |prefix_length_in_bits| (bits) long; |
24 // * |ip_prefix| is at least |prefix_length_in_bits| (bits) long. | 24 // * |ip_prefix| is at least |prefix_length_in_bits| (bits) long. |
25 bool IPAddressPrefixCheck(const std::vector<uint8_t>& ip_address, | 25 bool IPAddressPrefixCheck(const net::IPAddress::IPAddressBytes& ip_address, |
26 const uint8_t* ip_prefix, | 26 const uint8_t* ip_prefix, |
27 size_t prefix_length_in_bits) { | 27 size_t prefix_length_in_bits) { |
28 // Compare all the bytes that fall entirely within the prefix. | 28 // Compare all the bytes that fall entirely within the prefix. |
29 size_t num_entire_bytes_in_prefix = prefix_length_in_bits / 8; | 29 size_t num_entire_bytes_in_prefix = prefix_length_in_bits / 8; |
30 for (size_t i = 0; i < num_entire_bytes_in_prefix; ++i) { | 30 for (size_t i = 0; i < num_entire_bytes_in_prefix; ++i) { |
31 if (ip_address[i] != ip_prefix[i]) | 31 if (ip_address[i] != ip_prefix[i]) |
32 return false; | 32 return false; |
33 } | 33 } |
34 | 34 |
35 // In case the prefix was not a multiple of 8, there will be 1 byte | 35 // In case the prefix was not a multiple of 8, there will be 1 byte |
36 // which is only partially masked. | 36 // which is only partially masked. |
37 size_t remaining_bits = prefix_length_in_bits % 8; | 37 size_t remaining_bits = prefix_length_in_bits % 8; |
38 if (remaining_bits != 0) { | 38 if (remaining_bits != 0) { |
39 uint8_t mask = 0xFF << (8 - remaining_bits); | 39 uint8_t mask = 0xFF << (8 - remaining_bits); |
40 size_t i = num_entire_bytes_in_prefix; | 40 size_t i = num_entire_bytes_in_prefix; |
41 if ((ip_address[i] & mask) != (ip_prefix[i] & mask)) | 41 if ((ip_address[i] & mask) != (ip_prefix[i] & mask)) |
42 return false; | 42 return false; |
43 } | 43 } |
44 return true; | 44 return true; |
45 } | 45 } |
46 | 46 |
47 // Returns true if |ip_address| matches any of the reserved IPv4 ranges. This | 47 // Returns true if |ip_address| matches any of the reserved IPv4 ranges. This |
48 // method operates on a blacklist of reserved IPv4 ranges. Some ranges are | 48 // method operates on a blacklist of reserved IPv4 ranges. Some ranges are |
49 // consolidated. | 49 // consolidated. |
50 // Sources for info: | 50 // Sources for info: |
51 // www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xhtml | 51 // www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xhtml |
52 // www.iana.org/assignments/iana-ipv4-special-registry/ | 52 // www.iana.org/assignments/iana-ipv4-special-registry/ |
53 // iana-ipv4-special-registry.xhtml | 53 // iana-ipv4-special-registry.xhtml |
54 bool IsReservedIPv4(const std::vector<uint8_t>& ip_address) { | 54 bool IsReservedIPv4(const net::IPAddress::IPAddressBytes& ip_address) { |
55 // Different IP versions have different range reservations. | 55 // Different IP versions have different range reservations. |
56 DCHECK_EQ(net::IPAddress::kIPv4AddressSize, ip_address.size()); | 56 DCHECK_EQ(net::IPAddress::kIPv4AddressSize, ip_address.size()); |
57 struct { | 57 struct { |
58 const uint8_t address[4]; | 58 const uint8_t address[4]; |
59 size_t prefix_length_in_bits; | 59 size_t prefix_length_in_bits; |
60 } static const kReservedIPv4Ranges[] = { | 60 } static const kReservedIPv4Ranges[] = { |
61 {{0, 0, 0, 0}, 8}, {{10, 0, 0, 0}, 8}, {{100, 64, 0, 0}, 10}, | 61 {{0, 0, 0, 0}, 8}, {{10, 0, 0, 0}, 8}, {{100, 64, 0, 0}, 10}, |
62 {{127, 0, 0, 0}, 8}, {{169, 254, 0, 0}, 16}, {{172, 16, 0, 0}, 12}, | 62 {{127, 0, 0, 0}, 8}, {{169, 254, 0, 0}, 16}, {{172, 16, 0, 0}, 12}, |
63 {{192, 0, 2, 0}, 24}, {{192, 88, 99, 0}, 24}, {{192, 168, 0, 0}, 16}, | 63 {{192, 0, 2, 0}, 24}, {{192, 88, 99, 0}, 24}, {{192, 168, 0, 0}, 16}, |
64 {{198, 18, 0, 0}, 15}, {{198, 51, 100, 0}, 24}, {{203, 0, 113, 0}, 24}, | 64 {{198, 18, 0, 0}, 15}, {{198, 51, 100, 0}, 24}, {{203, 0, 113, 0}, 24}, |
65 {{224, 0, 0, 0}, 3}}; | 65 {{224, 0, 0, 0}, 3}}; |
66 | 66 |
67 for (const auto& range : kReservedIPv4Ranges) { | 67 for (const auto& range : kReservedIPv4Ranges) { |
68 if (IPAddressPrefixCheck(ip_address, range.address, | 68 if (IPAddressPrefixCheck(ip_address, range.address, |
69 range.prefix_length_in_bits)) { | 69 range.prefix_length_in_bits)) { |
70 return true; | 70 return true; |
71 } | 71 } |
72 } | 72 } |
73 | 73 |
74 return false; | 74 return false; |
75 } | 75 } |
76 | 76 |
77 // Returns true if |ip_address| matches any of the reserved IPv6 ranges. This | 77 // Returns true if |ip_address| matches any of the reserved IPv6 ranges. This |
78 // method operates on a whitelist of non-reserved IPv6 ranges. All IPv6 | 78 // method operates on a whitelist of non-reserved IPv6 ranges. All IPv6 |
79 // addresses outside these ranges are reserved. | 79 // addresses outside these ranges are reserved. |
80 // Sources for info: | 80 // Sources for info: |
81 // www.iana.org/assignments/ipv6-address-space/ipv6-address-space.xhtml | 81 // www.iana.org/assignments/ipv6-address-space/ipv6-address-space.xhtml |
82 bool IsReservedIPv6(const std::vector<uint8_t>& ip_address) { | 82 bool IsReservedIPv6(const net::IPAddress::IPAddressBytes& ip_address) { |
83 // Different IP versions have different range reservations. | 83 // Different IP versions have different range reservations. |
84 DCHECK_EQ(net::IPAddress::kIPv6AddressSize, ip_address.size()); | 84 DCHECK_EQ(net::IPAddress::kIPv6AddressSize, ip_address.size()); |
85 struct { | 85 struct { |
86 const uint8_t address_prefix[2]; | 86 const uint8_t address_prefix[2]; |
87 size_t prefix_length_in_bits; | 87 size_t prefix_length_in_bits; |
88 } static const kPublicIPv6Ranges[] = { | 88 } static const kPublicIPv6Ranges[] = { |
89 // 2000::/3 -- Global Unicast | 89 // 2000::/3 -- Global Unicast |
90 {{0x20, 0}, 3}, | 90 {{0x20, 0}, 3}, |
91 // ff00::/8 -- Multicast | 91 // ff00::/8 -- Multicast |
92 {{0xff, 0}, 8}, | 92 {{0xff, 0}, 8}, |
93 }; | 93 }; |
94 | 94 |
95 for (const auto& range : kPublicIPv6Ranges) { | 95 for (const auto& range : kPublicIPv6Ranges) { |
96 if (IPAddressPrefixCheck(ip_address, range.address_prefix, | 96 if (IPAddressPrefixCheck(ip_address, range.address_prefix, |
97 range.prefix_length_in_bits)) { | 97 range.prefix_length_in_bits)) { |
98 return false; | 98 return false; |
99 } | 99 } |
100 } | 100 } |
101 | 101 |
102 return true; | 102 return true; |
103 } | 103 } |
104 | 104 |
105 bool ParseIPLiteralToBytes(const base::StringPiece& ip_literal, | 105 bool ParseIPLiteralToBytes(const base::StringPiece& ip_literal, |
106 std::vector<uint8_t>* bytes) { | 106 net::IPAddress::IPAddressBytes* bytes) { |
107 // |ip_literal| could be either an IPv4 or an IPv6 literal. If it contains | 107 // |ip_literal| could be either an IPv4 or an IPv6 literal. If it contains |
108 // a colon however, it must be an IPv6 address. | 108 // a colon however, it must be an IPv6 address. |
109 if (ip_literal.find(':') != base::StringPiece::npos) { | 109 if (ip_literal.find(':') != base::StringPiece::npos) { |
110 // GURL expects IPv6 hostnames to be surrounded with brackets. | 110 // GURL expects IPv6 hostnames to be surrounded with brackets. |
111 std::string host_brackets = "["; | 111 std::string host_brackets = "["; |
112 ip_literal.AppendToString(&host_brackets); | 112 ip_literal.AppendToString(&host_brackets); |
113 host_brackets.push_back(']'); | 113 host_brackets.push_back(']'); |
114 url::Component host_comp(0, host_brackets.size()); | 114 url::Component host_comp(0, host_brackets.size()); |
115 | 115 |
116 // Try parsing the hostname as an IPv6 literal. | 116 // Try parsing the hostname as an IPv6 literal. |
117 bytes->resize(16); // 128 bits. | 117 bytes->resize(16); // 128 bits. |
118 return url::IPv6AddressToNumber(host_brackets.data(), host_comp, | 118 return url::IPv6AddressToNumber(host_brackets.data(), host_comp, |
119 bytes->data()); | 119 bytes->data()); |
120 } | 120 } |
121 | 121 |
122 // Otherwise the string is an IPv4 address. | 122 // Otherwise the string is an IPv4 address. |
123 bytes->resize(4); // 32 bits. | 123 bytes->resize(4); // 32 bits. |
124 url::Component host_comp(0, ip_literal.size()); | 124 url::Component host_comp(0, ip_literal.size()); |
125 int num_components; | 125 int num_components; |
126 url::CanonHostInfo::Family family = url::IPv4AddressToNumber( | 126 url::CanonHostInfo::Family family = url::IPv4AddressToNumber( |
127 ip_literal.data(), host_comp, bytes->data(), &num_components); | 127 ip_literal.data(), host_comp, bytes->data(), &num_components); |
128 return family == url::CanonHostInfo::IPV4; | 128 return family == url::CanonHostInfo::IPV4; |
129 } | 129 } |
130 | 130 |
131 } // namespace | 131 } // namespace |
132 | 132 |
133 namespace net { | 133 namespace net { |
134 | 134 |
135 IPAddress::IPAddressBytes::IPAddressBytes() : size_(0) {} | |
136 | |
137 IPAddress::IPAddressBytes::IPAddressBytes(const uint8_t* data, size_t data_len) | |
138 : size_(data_len) { | |
139 CHECK_GE(16u, data_len); | |
140 memcpy(bytes_.data(), data, data_len); | |
eroman
2017/05/15 22:15:23
If you want to avoid relying on undefined behavior
Ryan Hamilton
2017/05/17 18:26:41
Done.
| |
141 } | |
142 | |
143 net::IPAddress::IPAddressBytes::~IPAddressBytes() {} | |
144 net::IPAddress::IPAddressBytes::IPAddressBytes( | |
145 net::IPAddress::IPAddressBytes const& other) = default; | |
146 | |
147 bool operator<(const IPAddress::IPAddressBytes& lhs, | |
148 const IPAddress::IPAddressBytes& rhs) { | |
149 if (lhs.size_ < rhs.size_) | |
150 return true; | |
151 if (lhs.size_ > rhs.size_) | |
152 return false; | |
153 for (size_t i = 0; i < lhs.size_; ++i) { | |
154 if (lhs.bytes_[i] < rhs.bytes_[i]) | |
155 return true; | |
156 } | |
157 return false; | |
158 } | |
159 | |
160 bool operator>(const IPAddress::IPAddressBytes& lhs, | |
161 const IPAddress::IPAddressBytes& rhs) { | |
162 if (lhs.size_ > rhs.size_) | |
163 return true; | |
164 if (lhs.size_ < rhs.size_) | |
165 return false; | |
166 for (size_t i = 0; i < lhs.size_; ++i) { | |
167 if (lhs.bytes_[i] > rhs.bytes_[i]) | |
168 return true; | |
169 } | |
170 return false; | |
171 } | |
172 | |
173 bool operator==(const IPAddress::IPAddressBytes& lhs, | |
174 const IPAddress::IPAddressBytes& rhs) { | |
175 if (lhs.size_ != rhs.size_) | |
176 return false; | |
177 for (size_t i = 0; i < lhs.size_; ++i) { | |
178 if (lhs.bytes_[i] != rhs.bytes_[i]) | |
179 return false; | |
180 } | |
181 return true; | |
182 } | |
183 | |
184 bool operator!=(const IPAddress::IPAddressBytes& lhs, | |
185 const IPAddress::IPAddressBytes& rhs) { | |
186 return !(lhs == rhs); | |
187 } | |
188 | |
135 IPAddress::IPAddress() {} | 189 IPAddress::IPAddress() {} |
136 | 190 |
137 IPAddress::IPAddress(const std::vector<uint8_t>& address) | 191 IPAddress::IPAddress(const std::vector<uint8_t>& address) |
138 : ip_address_(address) {} | 192 : ip_address_(address.data(), address.size()) {} |
139 | 193 |
140 IPAddress::IPAddress(const IPAddress& other) = default; | 194 IPAddress::IPAddress(const IPAddress& other) = default; |
141 | 195 |
142 IPAddress::IPAddress(const uint8_t* address, size_t address_len) | 196 IPAddress::IPAddress(const uint8_t* address, size_t address_len) |
143 : ip_address_(address, address + address_len) {} | 197 : ip_address_(address, address_len) {} |
144 | 198 |
145 IPAddress::IPAddress(uint8_t b0, uint8_t b1, uint8_t b2, uint8_t b3) { | 199 IPAddress::IPAddress(uint8_t b0, uint8_t b1, uint8_t b2, uint8_t b3) { |
146 ip_address_.reserve(4); | |
147 ip_address_.push_back(b0); | 200 ip_address_.push_back(b0); |
148 ip_address_.push_back(b1); | 201 ip_address_.push_back(b1); |
149 ip_address_.push_back(b2); | 202 ip_address_.push_back(b2); |
150 ip_address_.push_back(b3); | 203 ip_address_.push_back(b3); |
151 } | 204 } |
152 | 205 |
153 IPAddress::IPAddress(uint8_t b0, | 206 IPAddress::IPAddress(uint8_t b0, |
154 uint8_t b1, | 207 uint8_t b1, |
155 uint8_t b2, | 208 uint8_t b2, |
156 uint8_t b3, | 209 uint8_t b3, |
157 uint8_t b4, | 210 uint8_t b4, |
158 uint8_t b5, | 211 uint8_t b5, |
159 uint8_t b6, | 212 uint8_t b6, |
160 uint8_t b7, | 213 uint8_t b7, |
161 uint8_t b8, | 214 uint8_t b8, |
162 uint8_t b9, | 215 uint8_t b9, |
163 uint8_t b10, | 216 uint8_t b10, |
164 uint8_t b11, | 217 uint8_t b11, |
165 uint8_t b12, | 218 uint8_t b12, |
166 uint8_t b13, | 219 uint8_t b13, |
167 uint8_t b14, | 220 uint8_t b14, |
168 uint8_t b15) { | 221 uint8_t b15) { |
169 const uint8_t address[] = {b0, b1, b2, b3, b4, b5, b6, b7, | 222 ip_address_.push_back(b0); |
170 b8, b9, b10, b11, b12, b13, b14, b15}; | 223 ip_address_.push_back(b1); |
171 ip_address_ = std::vector<uint8_t>(std::begin(address), std::end(address)); | 224 ip_address_.push_back(b2); |
225 ip_address_.push_back(b3); | |
226 ip_address_.push_back(b4); | |
227 ip_address_.push_back(b5); | |
228 ip_address_.push_back(b6); | |
229 ip_address_.push_back(b7); | |
230 ip_address_.push_back(b8); | |
231 ip_address_.push_back(b9); | |
232 ip_address_.push_back(b10); | |
233 ip_address_.push_back(b11); | |
234 ip_address_.push_back(b12); | |
235 ip_address_.push_back(b13); | |
236 ip_address_.push_back(b14); | |
237 ip_address_.push_back(b15); | |
172 } | 238 } |
173 | 239 |
174 IPAddress::~IPAddress() {} | 240 IPAddress::~IPAddress() {} |
175 | 241 |
176 bool IPAddress::IsIPv4() const { | 242 bool IPAddress::IsIPv4() const { |
177 return ip_address_.size() == kIPv4AddressSize; | 243 return ip_address_.size() == kIPv4AddressSize; |
178 } | 244 } |
179 | 245 |
180 bool IPAddress::IsIPv6() const { | 246 bool IPAddress::IsIPv6() const { |
181 return ip_address_.size() == kIPv6AddressSize; | 247 return ip_address_.size() == kIPv6AddressSize; |
(...skipping 19 matching lines...) Expand all Loading... | |
201 } | 267 } |
202 | 268 |
203 return !empty(); | 269 return !empty(); |
204 } | 270 } |
205 | 271 |
206 bool IPAddress::IsIPv4MappedIPv6() const { | 272 bool IPAddress::IsIPv4MappedIPv6() const { |
207 return IsIPv6() && IPAddressStartsWith(*this, kIPv4MappedPrefix); | 273 return IsIPv6() && IPAddressStartsWith(*this, kIPv4MappedPrefix); |
208 } | 274 } |
209 | 275 |
210 bool IPAddress::AssignFromIPLiteral(const base::StringPiece& ip_literal) { | 276 bool IPAddress::AssignFromIPLiteral(const base::StringPiece& ip_literal) { |
211 std::vector<uint8_t> number; | 277 IPAddressBytes number; |
212 | 278 |
279 // TODO(rch): change the contract so ip_address_ is cleared on failure, | |
280 // to avoid needing this temporary at all. | |
213 if (!ParseIPLiteralToBytes(ip_literal, &number)) | 281 if (!ParseIPLiteralToBytes(ip_literal, &number)) |
214 return false; | 282 return false; |
215 | 283 |
216 std::swap(number, ip_address_); | 284 ip_address_ = number; |
217 return true; | 285 return true; |
218 } | 286 } |
219 | 287 |
288 std::vector<uint8_t> IPAddress::BytesAsVector() const { | |
289 return std::vector<uint8_t>(ip_address_.begin(), ip_address_.end()); | |
290 } | |
291 | |
220 // static | 292 // static |
221 IPAddress IPAddress::IPv4Localhost() { | 293 IPAddress IPAddress::IPv4Localhost() { |
222 static const uint8_t kLocalhostIPv4[] = {127, 0, 0, 1}; | 294 static const uint8_t kLocalhostIPv4[] = {127, 0, 0, 1}; |
223 return IPAddress(kLocalhostIPv4); | 295 return IPAddress(kLocalhostIPv4); |
224 } | 296 } |
225 | 297 |
226 // static | 298 // static |
227 IPAddress IPAddress::IPv6Localhost() { | 299 IPAddress IPAddress::IPv6Localhost() { |
228 static const uint8_t kLocalhostIPv6[] = {0, 0, 0, 0, 0, 0, 0, 0, | 300 static const uint8_t kLocalhostIPv6[] = {0, 0, 0, 0, 0, 0, 0, 0, |
229 0, 0, 0, 0, 0, 0, 0, 1}; | 301 0, 0, 0, 0, 0, 0, 0, 1}; |
(...skipping 166 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
396 } | 468 } |
397 return a1.size() * CHAR_BIT; | 469 return a1.size() * CHAR_BIT; |
398 } | 470 } |
399 | 471 |
400 unsigned MaskPrefixLength(const IPAddress& mask) { | 472 unsigned MaskPrefixLength(const IPAddress& mask) { |
401 std::vector<uint8_t> all_ones(mask.size(), 0xFF); | 473 std::vector<uint8_t> all_ones(mask.size(), 0xFF); |
402 return CommonPrefixLength(mask, IPAddress(all_ones)); | 474 return CommonPrefixLength(mask, IPAddress(all_ones)); |
403 } | 475 } |
404 | 476 |
405 } // namespace net | 477 } // namespace net |
OLD | NEW |