| OLD | NEW |
| 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "net/quic/core/crypto/crypto_utils.h" | 5 #include "net/quic/core/crypto/crypto_utils.h" |
| 6 | 6 |
| 7 #include <memory> | 7 #include <memory> |
| 8 | 8 |
| 9 #include "crypto/hkdf.h" | 9 #include "crypto/hkdf.h" |
| 10 #include "net/quic/core/crypto/crypto_handshake.h" | 10 #include "net/quic/core/crypto/crypto_handshake.h" |
| (...skipping 170 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 181 const CryptoHandshakeMessage& server_hello, | 181 const CryptoHandshakeMessage& server_hello, |
| 182 const QuicVersionVector& negotiated_versions, | 182 const QuicVersionVector& negotiated_versions, |
| 183 string* error_details) { | 183 string* error_details) { |
| 184 DCHECK(error_details != nullptr); | 184 DCHECK(error_details != nullptr); |
| 185 | 185 |
| 186 if (server_hello.tag() != kSHLO) { | 186 if (server_hello.tag() != kSHLO) { |
| 187 *error_details = "Bad tag"; | 187 *error_details = "Bad tag"; |
| 188 return QUIC_INVALID_CRYPTO_MESSAGE_TYPE; | 188 return QUIC_INVALID_CRYPTO_MESSAGE_TYPE; |
| 189 } | 189 } |
| 190 | 190 |
| 191 const QuicTag* supported_version_tags; | 191 QuicTagVector supported_version_tags; |
| 192 size_t num_supported_versions; | 192 if (server_hello.GetTaglist(kVER, &supported_version_tags) != QUIC_NO_ERROR) { |
| 193 | |
| 194 if (server_hello.GetTaglist(kVER, &supported_version_tags, | |
| 195 &num_supported_versions) != QUIC_NO_ERROR) { | |
| 196 *error_details = "server hello missing version list"; | 193 *error_details = "server hello missing version list"; |
| 197 return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; | 194 return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; |
| 198 } | 195 } |
| 199 if (!negotiated_versions.empty()) { | 196 if (!negotiated_versions.empty()) { |
| 200 bool mismatch = num_supported_versions != negotiated_versions.size(); | 197 bool mismatch = supported_version_tags.size() != negotiated_versions.size(); |
| 201 for (size_t i = 0; i < num_supported_versions && !mismatch; ++i) { | 198 for (size_t i = 0; i < supported_version_tags.size() && !mismatch; ++i) { |
| 202 mismatch = QuicTagToQuicVersion(supported_version_tags[i]) != | 199 mismatch = QuicTagToQuicVersion(supported_version_tags[i]) != |
| 203 negotiated_versions[i]; | 200 negotiated_versions[i]; |
| 204 } | 201 } |
| 205 // The server sent a list of supported versions, and the connection | 202 // The server sent a list of supported versions, and the connection |
| 206 // reports that there was a version negotiation during the handshake. | 203 // reports that there was a version negotiation during the handshake. |
| 207 // Ensure that these two lists are identical. | 204 // Ensure that these two lists are identical. |
| 208 if (mismatch) { | 205 if (mismatch) { |
| 209 *error_details = "Downgrade attack detected"; | 206 *error_details = "Downgrade attack detected"; |
| 210 return QUIC_VERSION_NEGOTIATION_MISMATCH; | 207 return QUIC_VERSION_NEGOTIATION_MISMATCH; |
| 211 } | 208 } |
| (...skipping 83 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 295 string* output, | 292 string* output, |
| 296 Perspective perspective) { | 293 Perspective perspective) { |
| 297 const QuicData& serialized = message.GetSerialized(perspective); | 294 const QuicData& serialized = message.GetSerialized(perspective); |
| 298 uint8_t digest[SHA256_DIGEST_LENGTH]; | 295 uint8_t digest[SHA256_DIGEST_LENGTH]; |
| 299 SHA256(reinterpret_cast<const uint8_t*>(serialized.data()), | 296 SHA256(reinterpret_cast<const uint8_t*>(serialized.data()), |
| 300 serialized.length(), digest); | 297 serialized.length(), digest); |
| 301 output->assign(reinterpret_cast<const char*>(digest), sizeof(digest)); | 298 output->assign(reinterpret_cast<const char*>(digest), sizeof(digest)); |
| 302 } | 299 } |
| 303 | 300 |
| 304 } // namespace net | 301 } // namespace net |
| OLD | NEW |