QUIC - Record reject reasons for CHLO message.

net/quic/crypto/quic_crypto_client_config.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/quic/crypto/quic_crypto_client_config.h"
 
+#include "base/metrics/sparse_histogram.h"
 #include "base/stl_util.h"
 #include "base/strings/string_util.h"
 #include "net/quic/crypto/cert_compressor.h"
 #include "net/quic/crypto/chacha20_poly1305_encrypter.h"
 #include "net/quic/crypto/channel_id.h"
 #include "net/quic/crypto/common_cert_set.h"
 #include "net/quic/crypto/crypto_framer.h"
 #include "net/quic/crypto/crypto_utils.h"
 #include "net/quic/crypto/curve25519_key_exchange.h"
 #include "net/quic/crypto/key_exchange.h"
@@ skipping 568 matching lines @@
       *error_details = "Proof missing";
       return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER;
     }
   }
 
   const uint32* reject_reasons;
   size_t num_reject_reasons;
   COMPILE_ASSERT(sizeof(QuicTag) == sizeof(uint32), header_out_of_sync);
   if (rej.GetTaglist(kRREJ, &reject_reasons,
                      &num_reject_reasons) == QUIC_NO_ERROR) {
-#if defined(DEBUG)
+    uint32 packed_error = 0;
     for (size_t i = 0; i < num_reject_reasons; ++i) {
-      DVLOG(1) << "Reasons for rejection: " << reject_reasons[i];
+      HandshakeFailureReason reason =
+          static_cast<HandshakeFailureReason>(reject_reasons[i]);
+      packed_error |= RejectReasonToPackedError(reason);
     }
-#endif
+    UMA_HISTOGRAM_SPARSE_SLOWLY("Net.QuicClientHelloRejectReasons",
+                                packed_error);
   }
 
   return QUIC_NO_ERROR;
 }
 
+uint32 QuicCryptoClientConfig::RejectReasonToPackedError(
+    HandshakeFailureReason reason) {
+  enum RejectReasonShift {
+    CLIENT_NONCE_SHIFT = 5,
+    SERVER_NONCE_SHIFT = 10,
+    SERVER_CONFIG_SHIFT = 15,
+    SOURCE_ADDRESS_TOKEN_SHIFT = 20,

[Ryan Hamilton, 2014/06/21 03:02:29]

If you were really excited, you could add some compile_asserts that these values
are large enough to include the number of codes in each category.  Probably not
worth it, though.

[ramant (doing other things), 2014/06/23 17:27:35]

Done.

+  };
+
+  if (reason < CLIENT_NONCE_UNKNOWN_FAILURE) {
+    return reason;
+  }
+  if (reason < SERVER_NONCE_INVALID_FAILURE) {
+    return (reason - CLIENT_NONCE_UNKNOWN_FAILURE + 1) << CLIENT_NONCE_SHIFT;
+  }
+  if (reason < SERVER_CONFIG_INCHOATE_HELLO_FAILURE) {
+    return (reason - SERVER_NONCE_INVALID_FAILURE + 1)  << SERVER_NONCE_SHIFT;
+  }
+  if (reason < SOURCE_ADDRESS_TOKEN_INVALID_FAILURE) {
+    return (reason - SERVER_CONFIG_INCHOATE_HELLO_FAILURE + 1) <<
+        SERVER_CONFIG_SHIFT;
+  }
+  return (reason - SOURCE_ADDRESS_TOKEN_INVALID_FAILURE + 1) <<
+      SOURCE_ADDRESS_TOKEN_SHIFT;
+}
+
 QuicErrorCode QuicCryptoClientConfig::ProcessServerHello(
     const CryptoHandshakeMessage& server_hello,
     QuicConnectionId connection_id,
     const QuicVersionVector& negotiated_versions,
     CachedState* cached,
     QuicCryptoNegotiatedParameters* out_params,
     string* error_details) {
   DCHECK(error_details != NULL);
 
   if (server_hello.tag() != kSHLO) {
@@ skipping 141 matching lines @@
     return;
   }
 
   // Update canonical version to point at the "most recent" entry.
   canonical_server_map_[suffix_server_id] = server_id;
 
   server_state->InitializeFrom(*canonical_state);
 }
 
 }  // namespace net