Commit cc7357b2ad for openssl.org
commit cc7357b2ad82c157d48525e2813bd600222fe25b
Author: Andrew Dinh <andrewd@openssl.org>
Date: Sat Sep 12 01:06:45 2026 -0400
Move scripts script_70 - script_108 from QUIC multistream test
to QUIC radix tests. Also remove now unused test/quic_multistream_test.c
Assisted-by: Claude:claude-sonnet-5
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
MergeDate: Mon Oct 19 14:13:33 2026
(Merged from https://github.com/openssl/openssl/pull/33103)
diff --git a/.github/workflows/make-test b/.github/workflows/make-test
index 3203fae86c..2e5252b252 100755
--- a/.github/workflows/make-test
+++ b/.github/workflows/make-test
@@ -35,13 +35,11 @@ make test HARNESS_JOBS=${HARNESS_JOBS:-4} LHASH_WORKERS=${LHASH_WORKERS:-16} "$@
RESULT=$?
set -e
-# Move an interesting subset of the test-runs data we want into the artifacts
-# staging directory.
-for test_name in quic_multistream; do
- if [ -d "test-runs/test_${test_name}" ]; then
- mv "test-runs/test_${test_name}" "$OSSL_CI_ARTIFACTS_PATH/"
- fi
-done
+# Move the qlog output from the radix tests into the artifacts staging
+# directory.
+if [ -d "test-runs/test_quic_radix/qlog-output" ]; then
+ mv "test-runs/test_quic_radix/qlog-output" "$OSSL_CI_ARTIFACTS_PATH/quic_radix_qlog"
+fi
# Collect any core dumps together with the matching test binary, so the core is
# usable with gdb without a rebuild. The executable name is the %e field of the
diff --git a/.github/workflows/valgrind-daily.yml b/.github/workflows/valgrind-daily.yml
index 9167256b94..3a7d81fdf9 100644
--- a/.github/workflows/valgrind-daily.yml
+++ b/.github/workflows/valgrind-daily.yml
@@ -81,8 +81,8 @@ jobs:
make -j
- name: Make test
run: |
- # The quic radix and multistream test times out under valgrind in ci
- make TESTS="-test_quic_radix -test_quic_multistream" OSSL_USE_VALGRIND=yes test
+ # The quic radix test times out under valgrind in ci
+ make TESTS="-test_quic_radix" OSSL_USE_VALGRIND=yes test
- name: Check for leaks
run: |
set +e
diff --git a/test/build.info b/test/build.info
index 655f8c25de..1b5ffd46fe 100644
--- a/test/build.info
+++ b/test/build.info
@@ -496,10 +496,6 @@ IF[{- !$disabled{tests} -}]
$QUICTESTHELPERS=helpers/quictestlib.c helpers/noisydgrambio.c helpers/pktsplitbio.c
- SOURCE[quic_multistream_test]=quic_multistream_test.c helpers/ssltestlib.c $QUICTESTHELPERS
- INCLUDE[quic_multistream_test]=../include ../apps/include
- DEPEND[quic_multistream_test]=../libcrypto.a ../libssl.a libtestutil.a
-
SOURCE[quic_radix_test]=radix/quic_radix.c
SOURCE[quic_radix_test]=helpers/ssltestlib.c $QUICTESTHELPERS
INCLUDE[quic_radix_test]=../include ../apps/include
@@ -1510,7 +1506,7 @@ ENDIF
PROGRAMS{noinst}=quic_fc_test quic_stream_test quic_cfq_test quic_txpim_test
PROGRAMS{noinst}=quic_srtm_test quic_lcidm_test quic_rcidm_test
PROGRAMS{noinst}=quic_fifd_test quic_txp_test quic_tserver_test
- PROGRAMS{noinst}=quic_client_test quic_cc_test quic_multistream_test
+ PROGRAMS{noinst}=quic_client_test quic_cc_test
PROGRAMS{noinst}=quic_radix_test
SOURCE[quic_ackm_test]=quic_ackm_test.c cc_dummy.c
diff --git a/test/quic_multistream_test.c b/test/quic_multistream_test.c
deleted file mode 100644
index 87d6defda1..0000000000
--- a/test/quic_multistream_test.c
+++ /dev/null
@@ -1,4308 +0,0 @@
-/*
- * Copyright 2023-2026 The OpenSSL Project Authors. All Rights Reserved.
- *
- * Licensed under the Apache License 2.0 (the "License"). You may not use
- * this file except in compliance with the License. You can obtain a copy
- * in the file LICENSE in the source distribution or at
- * https://www.openssl.org/source/license.html
- */
-#include <openssl/ssl.h>
-#include <openssl/quic.h>
-#include <openssl/bio.h>
-#include <openssl/lhash.h>
-#include <openssl/rand.h>
-#include "internal/quic_tserver.h"
-#include "internal/quic_ssl.h"
-#include "internal/quic_error.h"
-#include "internal/quic_stream_map.h"
-#include "internal/quic_engine.h"
-#include "testutil.h"
-#include "helpers/quictestlib.h"
-#if defined(OPENSSL_THREADS)
-#include "internal/thread_arch.h"
-#endif
-#include "internal/numbers.h" /* UINT64_C */
-
-static const char *certfile, *keyfile;
-
-#if defined(_AIX)
-/*
- * Some versions of AIX define macros for events and revents for use when
- * accessing pollfd structures (see Github issue #24236). That interferes
- * with our use of these names here. We simply undef them.
- */
-#undef revents
-#undef events
-#endif
-
-#if defined(OPENSSL_THREADS)
-struct child_thread_args {
- struct helper *h;
- const struct script_op *script;
- const char *script_name;
- int thread_idx;
-
- CRYPTO_THREAD *t;
- CRYPTO_MUTEX *m;
- int testresult;
- int done;
- int s_checked_out;
-};
-#endif
-
-typedef struct stream_info {
- const char *name;
- SSL *c_stream;
- uint64_t s_stream_id;
-} STREAM_INFO;
-
-DEFINE_LHASH_OF_EX(STREAM_INFO);
-
-struct helper {
- int s_fd;
- BIO *s_net_bio, *s_net_bio_own, *s_qtf_wbio, *s_qtf_wbio_own;
- /* The BIO_ADDR used for BIO_bind() */
- BIO_ADDR *s_net_bio_orig_addr;
- /* The resulting address, which is the one to connect to */
- BIO_ADDR *s_net_bio_addr;
-
- /*
- * When doing a blocking mode test run, s_priv always points to the TSERVER
- * and s is NULL when the main thread should not be touching s_priv.
- */
- QUIC_TSERVER *s, *s_priv;
- LHASH_OF(STREAM_INFO) *s_streams;
-
- int c_fd;
- BIO *c_net_bio, *c_net_bio_own;
- SSL_CTX *c_ctx;
- SSL *c_conn;
- LHASH_OF(STREAM_INFO) *c_streams;
-
-#if defined(OPENSSL_THREADS)
- struct child_thread_args *threads;
- size_t num_threads;
- CRYPTO_MUTEX *misc_m;
- CRYPTO_CONDVAR *misc_cv;
-#endif
-
- OSSL_TIME start_time;
-
- /*
- * This is a duration recording the amount of time we have skipped forwards
- * for testing purposes relative to the real ossl_time_now() clock. We add
- * a quantity of time to this every time we skip some time.
- */
- CRYPTO_RWLOCK *time_lock;
- OSSL_TIME time_slip; /* protected by time_lock */
-
- QTEST_FAULT *qtf;
-
- int init, blocking, check_spin_again;
- int free_order, need_injector;
-
- int (*qtf_packet_plain_cb)(struct helper *h, QUIC_PKT_HDR *hdr,
- unsigned char *buf, size_t buf_len);
- int (*qtf_handshake_cb)(struct helper *h,
- unsigned char *buf, size_t buf_len);
- int (*qtf_datagram_cb)(struct helper *h,
- BIO_MSG *m, size_t stride);
- uint64_t inject_word0, inject_word1;
- uint64_t scratch0, scratch1, fail_count;
-#if defined(OPENSSL_THREADS)
- struct {
- CRYPTO_THREAD *t;
- CRYPTO_MUTEX *m;
- CRYPTO_CONDVAR *c;
- int ready, stop;
- } server_thread;
- int s_checked_out;
-#endif
-};
-
-struct helper_local {
- struct helper *h;
- LHASH_OF(STREAM_INFO) *c_streams;
- int thread_idx;
- const struct script_op *check_op;
- int explicit_event_handling;
-};
-
-struct script_op {
- uint32_t op;
- const void *arg0;
- size_t arg1;
- int (*check_func)(struct helper *h, struct helper_local *hl);
- const char *stream_name;
- uint64_t arg2;
- int (*qtf_packet_plain_cb)(struct helper *h, QUIC_PKT_HDR *hdr,
- unsigned char *buf, size_t buf_len);
- int (*qtf_handshake_cb)(struct helper *h,
- unsigned char *buf, size_t buf_len);
- int (*qtf_datagram_cb)(struct helper *h,
- BIO_MSG *m, size_t stride);
-};
-
-#define OPK_END 0
-#define OPK_CHECK 1
-#define OPK_C_SET_ALPN 2
-#define OPK_C_CONNECT_WAIT 3
-#define OPK_C_WRITE 4
-#define OPK_S_WRITE 5
-#define OPK_C_READ_EXPECT 6
-#define OPK_S_READ_EXPECT 7
-#define OPK_C_EXPECT_FIN 8
-#define OPK_S_EXPECT_FIN 9
-#define OPK_C_CONCLUDE 10
-#define OPK_S_CONCLUDE 11
-#define OPK_C_NEW_STREAM 14
-#define OPK_S_NEW_STREAM 15
-#define OPK_C_ACCEPT_STREAM_WAIT 16
-#define OPK_C_ACCEPT_STREAM_NONE 17
-#define OPK_C_FREE_STREAM 18
-#define OPK_C_SET_DEFAULT_STREAM_MODE 19
-#define OPK_C_SET_INCOMING_STREAM_POLICY 20
-#define OPK_C_SHUTDOWN_WAIT 21
-#define OPK_C_EXPECT_CONN_CLOSE_INFO 22
-#define OPK_S_EXPECT_CONN_CLOSE_INFO 23
-#define OPK_S_BIND_STREAM_ID 24
-#define OPK_C_WAIT_FOR_DATA 25
-#define OPK_C_WRITE_FAIL 26
-#define OPK_S_WRITE_FAIL 27
-#define OPK_C_READ_FAIL 28
-#define OPK_C_STREAM_RESET 29
-#define OPK_S_ACCEPT_STREAM_WAIT 30
-#define OPK_NEW_THREAD 31
-#define OPK_BEGIN_REPEAT 32
-#define OPK_END_REPEAT 33
-#define OPK_S_UNBIND_STREAM_ID 34
-#define OPK_C_READ_FAIL_WAIT 35
-#define OPK_C_CLOSE_SOCKET 36
-#define OPK_C_EXPECT_SSL_ERR 37
-#define OPK_EXPECT_ERR_REASON 38
-#define OPK_EXPECT_ERR_LIB 39
-#define OPK_SLEEP 40
-#define OPK_S_READ_FAIL 41
-#define OPK_S_SET_INJECT_PLAIN 42
-#define OPK_SET_INJECT_WORD 43
-#define OPK_C_INHIBIT_TICK 44
-#define OPK_C_SET_WRITE_BUF_SIZE 45
-#define OPK_S_SET_INJECT_HANDSHAKE 46
-#define OPK_S_NEW_TICKET 47
-#define OPK_C_SKIP_IF_UNBOUND 48
-#define OPK_S_SET_INJECT_DATAGRAM 49
-#define OPK_S_SHUTDOWN 50
-#define OPK_POP_ERR 51
-#define OPK_C_WRITE_EX2 52
-#define OPK_SKIP_IF_BLOCKING 53
-#define OPK_C_STREAM_RESET_FAIL 54
-#define OPK_C_SHUTDOWN 55
-
-#define EXPECT_CONN_CLOSE_APP (1U << 0)
-#define EXPECT_CONN_CLOSE_REMOTE (1U << 1)
-
-/* OPK_C_NEW_STREAM */
-#define ALLOW_FAIL (1U << 16)
-
-#define C_BIDI_ID(ordinal) \
- (((ordinal) << 2) | QUIC_STREAM_INITIATOR_CLIENT | QUIC_STREAM_DIR_BIDI)
-#define S_BIDI_ID(ordinal) \
- (((ordinal) << 2) | QUIC_STREAM_INITIATOR_SERVER | QUIC_STREAM_DIR_BIDI)
-#define C_UNI_ID(ordinal) \
- (((ordinal) << 2) | QUIC_STREAM_INITIATOR_CLIENT | QUIC_STREAM_DIR_UNI)
-#define S_UNI_ID(ordinal) \
- (((ordinal) << 2) | QUIC_STREAM_INITIATOR_SERVER | QUIC_STREAM_DIR_UNI)
-
-#define ANY_ID UINT64_MAX
-
-#define OP_END \
- { OPK_END }
-#define OP_CHECK(func, arg2) \
- { OPK_CHECK, NULL, 0, (func), NULL, (arg2) }
-#define OP_C_SET_ALPN(alpn) \
- { OPK_C_SET_ALPN, (alpn), 0, NULL, NULL }
-#define OP_C_CONNECT_WAIT() \
- { OPK_C_CONNECT_WAIT, NULL, 0, NULL, NULL }
-#define OP_C_CONNECT_WAIT_OR_FAIL() \
- { OPK_C_CONNECT_WAIT, NULL, 1, NULL, NULL }
-#define OP_C_WRITE(stream_name, buf, buf_len) \
- { OPK_C_WRITE, (buf), (buf_len), NULL, #stream_name }
-#define OP_S_WRITE(stream_name, buf, buf_len) \
- { OPK_S_WRITE, (buf), (buf_len), NULL, #stream_name }
-#define OP_C_READ_EXPECT(stream_name, buf, buf_len) \
- { OPK_C_READ_EXPECT, (buf), (buf_len), NULL, #stream_name }
-#define OP_S_READ_EXPECT(stream_name, buf, buf_len) \
- { OPK_S_READ_EXPECT, (buf), (buf_len), NULL, #stream_name }
-#define OP_C_EXPECT_FIN(stream_name) \
- { OPK_C_EXPECT_FIN, NULL, 0, NULL, #stream_name }
-#define OP_S_EXPECT_FIN(stream_name) \
- { OPK_S_EXPECT_FIN, NULL, 0, NULL, #stream_name }
-#define OP_C_CONCLUDE(stream_name) \
- { OPK_C_CONCLUDE, NULL, 0, NULL, #stream_name }
-#define OP_S_CONCLUDE(stream_name) \
- { OPK_S_CONCLUDE, NULL, 0, NULL, #stream_name }
-#define OP_C_NEW_STREAM_BIDI(stream_name, expect_id) \
- { OPK_C_NEW_STREAM, NULL, 0, NULL, #stream_name, (expect_id) }
-#define OP_C_NEW_STREAM_BIDI_EX(stream_name, expect_id, flags) \
- { OPK_C_NEW_STREAM, NULL, (flags), NULL, #stream_name, (expect_id) }
-#define OP_C_NEW_STREAM_UNI(stream_name, expect_id) \
- { OPK_C_NEW_STREAM, NULL, SSL_STREAM_FLAG_UNI, \
- NULL, #stream_name, (expect_id) }
-#define OP_C_NEW_STREAM_UNI_EX(stream_name, expect_id, flags) \
- { OPK_C_NEW_STREAM, NULL, (flags) | SSL_STREAM_FLAG_UNI, \
- NULL, #stream_name, (expect_id) }
-#define OP_S_NEW_STREAM_BIDI(stream_name, expect_id) \
- { OPK_S_NEW_STREAM, NULL, 0, NULL, #stream_name, (expect_id) }
-#define OP_S_NEW_STREAM_UNI(stream_name, expect_id) \
- { OPK_S_NEW_STREAM, NULL, 1, NULL, #stream_name, (expect_id) }
-#define OP_C_ACCEPT_STREAM_WAIT(stream_name) \
- { OPK_C_ACCEPT_STREAM_WAIT, NULL, 0, NULL, #stream_name }
-#define OP_C_ACCEPT_STREAM_NONE() \
- { OPK_C_ACCEPT_STREAM_NONE, NULL, 0, NULL, NULL }
-#define OP_C_FREE_STREAM(stream_name) \
- { OPK_C_FREE_STREAM, NULL, 0, NULL, #stream_name }
-#define OP_C_SET_DEFAULT_STREAM_MODE(mode) \
- { OPK_C_SET_DEFAULT_STREAM_MODE, NULL, (mode), NULL, NULL }
-#define OP_C_SET_INCOMING_STREAM_POLICY(policy) \
- { OPK_C_SET_INCOMING_STREAM_POLICY, NULL, (policy), NULL, NULL }
-#define OP_C_SHUTDOWN(reason, flags) \
- { OPK_C_SHUTDOWN, (reason), (flags), NULL, NULL }
-#define OP_C_SHUTDOWN_WAIT(reason, flags) \
- { OPK_C_SHUTDOWN_WAIT, (reason), (flags), NULL, NULL }
-#define OP_C_EXPECT_CONN_CLOSE_INFO(ec, app, remote) \
- { OPK_C_EXPECT_CONN_CLOSE_INFO, NULL, \
- ((app) ? EXPECT_CONN_CLOSE_APP : 0) | ((remote) ? EXPECT_CONN_CLOSE_REMOTE : 0), \
- NULL, NULL, (ec) }
-#define OP_S_EXPECT_CONN_CLOSE_INFO(ec, app, remote) \
- { OPK_S_EXPECT_CONN_CLOSE_INFO, NULL, \
- ((app) ? EXPECT_CONN_CLOSE_APP : 0) | ((remote) ? EXPECT_CONN_CLOSE_REMOTE : 0), \
- NULL, NULL, (ec) }
-#define OP_S_BIND_STREAM_ID(stream_name, stream_id) \
- { OPK_S_BIND_STREAM_ID, NULL, 0, NULL, #stream_name, (stream_id) }
-#define OP_C_WAIT_FOR_DATA(stream_name) \
- { OPK_C_WAIT_FOR_DATA, NULL, 0, NULL, #stream_name }
-#define OP_C_WRITE_FAIL(stream_name) \
- { OPK_C_WRITE_FAIL, NULL, 0, NULL, #stream_name }
-#define OP_S_WRITE_FAIL(stream_name) \
- { OPK_S_WRITE_FAIL, NULL, 0, NULL, #stream_name }
-#define OP_C_READ_FAIL(stream_name) \
- { OPK_C_READ_FAIL, NULL, 0, NULL, #stream_name }
-#define OP_S_READ_FAIL(stream_name, allow_zero_len) \
- { OPK_S_READ_FAIL, NULL, (allow_zero_len), NULL, #stream_name }
-#define OP_C_STREAM_RESET(stream_name, aec) \
- { OPK_C_STREAM_RESET, NULL, 0, NULL, #stream_name, (aec) }
-#define OP_C_STREAM_RESET_FAIL(stream_name, aec) \
- { OPK_C_STREAM_RESET_FAIL, NULL, 0, NULL, #stream_name, (aec) }
-#define OP_S_ACCEPT_STREAM_WAIT(stream_name) \
- { OPK_S_ACCEPT_STREAM_WAIT, NULL, 0, NULL, #stream_name }
-#define OP_NEW_THREAD(num_threads, script) \
- { OPK_NEW_THREAD, (script), (num_threads), NULL, NULL, 0 }
-#define OP_BEGIN_REPEAT(n) \
- { OPK_BEGIN_REPEAT, NULL, (n) }
-#define OP_END_REPEAT() \
- { OPK_END_REPEAT }
-#define OP_S_UNBIND_STREAM_ID(stream_name) \
- { OPK_S_UNBIND_STREAM_ID, NULL, 0, NULL, #stream_name }
-#define OP_C_READ_FAIL_WAIT(stream_name) \
- { OPK_C_READ_FAIL_WAIT, NULL, 0, NULL, #stream_name }
-#define OP_C_CLOSE_SOCKET() \
- { OPK_C_CLOSE_SOCKET }
-#define OP_C_EXPECT_SSL_ERR(stream_name, err) \
- { OPK_C_EXPECT_SSL_ERR, NULL, (err), NULL, #stream_name }
-#define OP_EXPECT_ERR_REASON(err) \
- { OPK_EXPECT_ERR_REASON, NULL, (err) }
-#define OP_EXPECT_ERR_LIB(lib) \
- { OPK_EXPECT_ERR_LIB, NULL, (lib) }
-#define OP_SLEEP(ms) \
- { OPK_SLEEP, NULL, 0, NULL, NULL, (ms) }
-#define OP_S_SET_INJECT_PLAIN(f) \
- { OPK_S_SET_INJECT_PLAIN, NULL, 0, NULL, NULL, 0, (f) }
-#define OP_SET_INJECT_WORD(w0, w1) \
- { OPK_SET_INJECT_WORD, NULL, (w0), NULL, NULL, (w1), NULL }
-#define OP_C_INHIBIT_TICK(inhibit) \
- { OPK_C_INHIBIT_TICK, NULL, (inhibit), NULL, NULL, 0, NULL }
-#define OP_C_SET_WRITE_BUF_SIZE(stream_name, size) \
- { OPK_C_SET_WRITE_BUF_SIZE, NULL, (size), NULL, #stream_name }
-#define OP_S_SET_INJECT_HANDSHAKE(f) \
- { OPK_S_SET_INJECT_HANDSHAKE, NULL, 0, NULL, NULL, 0, NULL, (f) }
-#define OP_S_NEW_TICKET() \
- { OPK_S_NEW_TICKET }
-#define OP_C_SKIP_IF_UNBOUND(stream_name, n) \
- { OPK_C_SKIP_IF_UNBOUND, NULL, (n), NULL, #stream_name }
-#define OP_S_SET_INJECT_DATAGRAM(f) \
- { OPK_S_SET_INJECT_DATAGRAM, NULL, 0, NULL, NULL, 0, NULL, NULL, (f) }
-#define OP_S_SHUTDOWN(error_code) \
- { OPK_S_SHUTDOWN, NULL, (error_code) }
-#define OP_POP_ERR() \
- { OPK_POP_ERR }
-#define OP_C_WRITE_EX2(stream_name, buf, buf_len, flags) \
- { OPK_C_WRITE_EX2, (buf), (buf_len), NULL, #stream_name, (flags) }
-#define OP_CHECK2(func, arg1, arg2) \
- { OPK_CHECK, NULL, (arg1), (func), NULL, (arg2) }
-#define OP_SKIP_IF_BLOCKING(n) \
- { OPK_SKIP_IF_BLOCKING, NULL, (n), NULL, 0 }
-
-static OSSL_TIME get_time(void *arg)
-{
- struct helper *h = arg;
- OSSL_TIME t;
-
- if (!TEST_true(CRYPTO_THREAD_read_lock(h->time_lock)))
- return ossl_time_zero();
-
- t = ossl_time_add(ossl_time_now(), h->time_slip);
-
- CRYPTO_THREAD_unlock(h->time_lock);
- return t;
-}
-
-static QUIC_TSERVER *s_lock(struct helper *h, struct helper_local *hl);
-static void s_unlock(struct helper *h, struct helper_local *hl);
-
-#define ACQUIRE_S() s_lock(h, hl)
-#define ACQUIRE_S_NOHL() s_lock(h, NULL)
-
-static unsigned long stream_info_hash(const STREAM_INFO *info)
-{
- return OPENSSL_LH_strhash(info->name);
-}
-
-static int stream_info_cmp(const STREAM_INFO *a, const STREAM_INFO *b)
-{
- return strcmp(a->name, b->name);
-}
-
-static void cleanup_stream(STREAM_INFO *info)
-{
- SSL_free(info->c_stream);
- OPENSSL_free(info);
-}
-
-static void helper_cleanup_streams(LHASH_OF(STREAM_INFO) **lh)
-{
- if (*lh == NULL)
- return;
-
- lh_STREAM_INFO_doall(*lh, cleanup_stream);
- lh_STREAM_INFO_free(*lh);
- *lh = NULL;
-}
-
-#if defined(OPENSSL_THREADS)
-static CRYPTO_THREAD_RETVAL run_script_child_thread(void *arg);
-
-static int join_threads(struct child_thread_args *threads, size_t num_threads)
-{
- int ok = 1;
- size_t i;
- CRYPTO_THREAD_RETVAL rv;
-
- for (i = 0; i < num_threads; ++i) {
- if (threads[i].t != NULL) {
- ossl_crypto_thread_native_join(threads[i].t, &rv);
-
- if (!threads[i].testresult)
- /* Do not log failure here, worker will do it. */
- ok = 0;
-
- ossl_crypto_thread_native_clean(threads[i].t);
- threads[i].t = NULL;
- }
-
- ossl_crypto_mutex_free(&threads[i].m);
- }
-
- return ok;
-}
-
-static int join_server_thread(struct helper *h)
-{
- CRYPTO_THREAD_RETVAL rv;
-
- if (h->server_thread.t == NULL)
- return 1;
-
- ossl_crypto_mutex_lock(h->server_thread.m);
- h->server_thread.stop = 1;
- ossl_crypto_condvar_signal(h->server_thread.c);
- ossl_crypto_mutex_unlock(h->server_thread.m);
-
- ossl_crypto_thread_native_join(h->server_thread.t, &rv);
- ossl_crypto_thread_native_clean(h->server_thread.t);
- h->server_thread.t = NULL;
- return 1;
-}
-
-/* Ensure the server-state lock is currently held. Idempotent. */
-static int *s_checked_out_p(struct helper *h, int thread_idx)
-{
- return (thread_idx < 0) ? &h->s_checked_out
- : &h->threads[thread_idx].s_checked_out;
-}
-
-static QUIC_TSERVER *s_lock(struct helper *h, struct helper_local *hl)
-{
- int *p_checked_out = s_checked_out_p(h, hl == NULL ? -1 : hl->thread_idx);
-
- if (h->server_thread.m == NULL || *p_checked_out)
- return h->s;
-
- ossl_crypto_mutex_lock(h->server_thread.m);
- h->s = h->s_priv;
- *p_checked_out = 1;
- return h->s;
-}
-
-/* Ensure the server-state lock is currently not held. Idempotent. */
-static void s_unlock(struct helper *h, struct helper_local *hl)
-{
- int *p_checked_out = s_checked_out_p(h, hl->thread_idx);
-
- if (h->server_thread.m == NULL || !*p_checked_out)
- return;
-
- *p_checked_out = 0;
- h->s = NULL;
- ossl_crypto_mutex_unlock(h->server_thread.m);
-}
-
-static unsigned int server_helper_thread(void *arg)
-{
- struct helper *h = arg;
-
- ossl_crypto_mutex_lock(h->server_thread.m);
-
- for (;;) {
- int ready, stop;
-
- ready = h->server_thread.ready;
- stop = h->server_thread.stop;
-
- if (stop)
- break;
-
- if (!ready) {
- ossl_crypto_condvar_wait(h->server_thread.c, h->server_thread.m);
- continue;
- }
-
- ossl_quic_tserver_tick(h->s_priv);
- ossl_crypto_mutex_unlock(h->server_thread.m);
- /*
- * Give the main thread an opportunity to get the mutex, which is
- * sometimes necessary in some script operations.
- */
- OSSL_sleep(1);
- ossl_crypto_mutex_lock(h->server_thread.m);
- }
-
- ossl_crypto_mutex_unlock(h->server_thread.m);
- return 1;
-}
-
-#else
-
-static QUIC_TSERVER *s_lock(struct helper *h, struct helper_local *hl)
-{
- return h->s;
-}
-
-static void s_unlock(struct helper *h, struct helper_local *hl)
-{
-}
-
-#endif
-
-static void helper_cleanup(struct helper *h)
-{
-#if defined(OPENSSL_THREADS)
- join_threads(h->threads, h->num_threads);
- join_server_thread(h);
- OPENSSL_free(h->threads);
- h->threads = NULL;
- h->num_threads = 0;
-#endif
-
- if (h->free_order == 0) {
- /* order 0: streams, then conn */
- helper_cleanup_streams(&h->c_streams);
-
- SSL_free(h->c_conn);
- h->c_conn = NULL;
- } else {
- /* order 1: conn, then streams */
- SSL_free(h->c_conn);
- h->c_conn = NULL;
-
- helper_cleanup_streams(&h->c_streams);
- }
-
- helper_cleanup_streams(&h->s_streams);
- ossl_quic_tserver_free(h->s_priv);
- h->s_priv = h->s = NULL;
-
- BIO_free(h->s_net_bio_own);
- h->s_net_bio_own = NULL;
-
- BIO_free(h->c_net_bio_own);
- h->c_net_bio_own = NULL;
-
- BIO_free(h->s_qtf_wbio_own);
- h->s_qtf_wbio_own = NULL;
-
- qtest_fault_free(h->qtf);
- h->qtf = NULL;
-
- if (h->s_fd >= 0) {
- BIO_closesocket(h->s_fd);
- h->s_fd = -1;
- }
-
- if (h->c_fd >= 0) {
- BIO_closesocket(h->c_fd);
- h->c_fd = -1;
- }
-
- BIO_ADDR_free(h->s_net_bio_addr);
- h->s_net_bio_addr = NULL;
- BIO_ADDR_free(h->s_net_bio_orig_addr);
- h->s_net_bio_orig_addr = NULL;
-
- SSL_CTX_free(h->c_ctx);
- h->c_ctx = NULL;
-
- CRYPTO_THREAD_lock_free(h->time_lock);
- h->time_lock = NULL;
-
-#if defined(OPENSSL_THREADS)
- ossl_crypto_mutex_free(&h->misc_m);
- ossl_crypto_condvar_free(&h->misc_cv);
- ossl_crypto_mutex_free(&h->server_thread.m);
- ossl_crypto_condvar_free(&h->server_thread.c);
-#endif
-}
-
-static int helper_init(struct helper *h, const char *script_name,
- int free_order, int blocking,
- int need_injector)
-{
- struct in_addr ina = { 0 };
- QUIC_TSERVER_ARGS s_args = { 0 };
- union BIO_sock_info_u info;
- char title[128];
- QTEST_DATA *bdata = NULL;
-
- memset(h, 0, sizeof(*h));
- h->c_fd = -1;
- h->s_fd = -1;
- h->free_order = free_order;
- h->blocking = blocking;
- h->need_injector = need_injector;
- h->time_slip = ossl_time_zero();
-
- bdata = OPENSSL_zalloc(sizeof(QTEST_DATA));
- if (bdata == NULL)
- goto err;
-
- if (!TEST_ptr(h->time_lock = CRYPTO_THREAD_lock_new()))
- goto err;
-
- if (!TEST_ptr(h->s_streams = lh_STREAM_INFO_new(stream_info_hash,
- stream_info_cmp)))
- goto err;
-
- if (!TEST_ptr(h->c_streams = lh_STREAM_INFO_new(stream_info_hash,
- stream_info_cmp)))
- goto err;
-
- ina.s_addr = htonl(0x7f000001UL);
-
- h->s_fd = BIO_socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP, 0);
- if (!TEST_int_ge(h->s_fd, 0))
- goto err;
-
- if (!TEST_true(BIO_socket_nbio(h->s_fd, 1)))
- goto err;
-
- if (!TEST_ptr(h->s_net_bio_orig_addr = BIO_ADDR_new())
- || !TEST_ptr(h->s_net_bio_addr = BIO_ADDR_new()))
- goto err;
-
- if (!TEST_true(BIO_ADDR_rawmake(h->s_net_bio_orig_addr, AF_INET,
- &ina, sizeof(ina), 0)))
- goto err;
-
- if (!TEST_true(BIO_bind(h->s_fd, h->s_net_bio_orig_addr, 0)))
- goto err;
-
- info.addr = h->s_net_bio_addr;
- if (!TEST_true(BIO_sock_info(h->s_fd, BIO_SOCK_INFO_ADDRESS, &info)))
- goto err;
-
- if (!TEST_int_gt(BIO_ADDR_rawport(h->s_net_bio_addr), 0))
- goto err;
-
- if (!TEST_ptr(h->s_net_bio = h->s_net_bio_own = BIO_new_dgram(h->s_fd, 0)))
- goto err;
-
- if (!BIO_up_ref(h->s_net_bio))
- goto err;
-
- if (need_injector) {
- h->s_qtf_wbio = h->s_qtf_wbio_own = BIO_new(qtest_get_bio_method());
- if (!TEST_ptr(h->s_qtf_wbio))
- goto err;
-
- if (!TEST_ptr(BIO_push(h->s_qtf_wbio, h->s_net_bio)))
- goto err;
-
- s_args.net_wbio = h->s_qtf_wbio;
- } else {
- s_args.net_wbio = h->s_net_bio;
- }
-
- s_args.net_rbio = h->s_net_bio;
- s_args.alpn = NULL;
- s_args.now_cb = get_time;
- s_args.now_cb_arg = h;
- s_args.ctx = NULL;
-
- if (!TEST_ptr(h->s_priv = ossl_quic_tserver_new(&s_args, certfile, keyfile)))
- goto err;
-
- if (!blocking)
- h->s = h->s_priv;
-
- if (need_injector) {
- h->qtf = qtest_create_injector(h->s_priv);
- if (!TEST_ptr(h->qtf))
- goto err;
- bdata->fault = h->qtf;
- BIO_set_data(h->s_qtf_wbio, bdata);
- bdata = NULL;
- }
-
- h->s_net_bio_own = NULL;
- h->s_qtf_wbio_own = NULL;
-
- h->c_fd = BIO_socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP, 0);
- if (!TEST_int_ge(h->c_fd, 0))
- goto err;
-
- if (!TEST_true(BIO_socket_nbio(h->c_fd, 1)))
- goto err;
-
- if (!TEST_ptr(h->c_net_bio = h->c_net_bio_own = BIO_new_dgram(h->c_fd, 0)))
- goto err;
-
- if (!TEST_true(BIO_dgram_set_peer(h->c_net_bio, h->s_net_bio_addr)))
- goto err;
-
- if (!TEST_ptr(h->c_ctx = SSL_CTX_new(OSSL_QUIC_client_method())))
- goto err;
-
- /* Set title for qlog purposes. */
- snprintf(title, sizeof(title), "quic_multistream_test: %s", script_name);
- if (!TEST_true(ossl_quic_set_diag_title(h->c_ctx, title)))
- goto err;
-
- if (!TEST_ptr(h->c_conn = SSL_new(h->c_ctx)))
- goto err;
-
- /* Use custom time function for virtual time skip. */
- if (!TEST_true(ossl_quic_set_override_now_cb(h->c_conn, get_time, h)))
- goto err;
-
- /* Takes ownership of our reference to the BIO. */
- SSL_set0_rbio(h->c_conn, h->c_net_bio);
- h->c_net_bio_own = NULL;
-
- if (!TEST_true(BIO_up_ref(h->c_net_bio)))
- goto err;
-
- SSL_set0_wbio(h->c_conn, h->c_net_bio);
-
- if (!TEST_true(SSL_set_blocking_mode(h->c_conn, h->blocking)))
- goto err;
-
-#if defined(OPENSSL_THREADS)
- if (!TEST_ptr(h->misc_m = ossl_crypto_mutex_new()))
- goto err;
- if (!TEST_ptr(h->misc_cv = ossl_crypto_condvar_new()))
- goto err;
-#endif
-
- if (h->blocking) {
-#if defined(OPENSSL_THREADS)
- if (!TEST_ptr(h->server_thread.m = ossl_crypto_mutex_new()))
- goto err;
-
- if (!TEST_ptr(h->server_thread.c = ossl_crypto_condvar_new()))
- goto err;
-
- h->server_thread.t
- = ossl_crypto_thread_native_start(server_helper_thread, h, 1);
- if (!TEST_ptr(h->server_thread.t))
- goto err;
-#else
- TEST_error("cannot support blocking mode without threads");
- goto err;
-#endif
- }
-
- h->start_time = ossl_time_now();
- h->init = 1;
- return 1;
-
-err:
- OPENSSL_free(bdata);
- helper_cleanup(h);
- return 0;
-}
-
-static int helper_local_init(struct helper_local *hl, struct helper *h,
- int thread_idx)
-{
- hl->h = h;
- hl->c_streams = NULL;
- hl->thread_idx = thread_idx;
- hl->explicit_event_handling = 0;
-
- if (!TEST_ptr(h))
- return 0;
-
- if (thread_idx < 0) {
- hl->c_streams = h->c_streams;
- } else {
- if (!TEST_ptr(hl->c_streams = lh_STREAM_INFO_new(stream_info_hash,
- stream_info_cmp)))
- return 0;
- }
-
- return 1;
-}
-
-static void helper_local_cleanup(struct helper_local *hl)
-{
- if (hl->h == NULL)
- return;
-
- if (hl->thread_idx >= 0)
- helper_cleanup_streams(&hl->c_streams);
-
- hl->h = NULL;
-}
-
-static STREAM_INFO *get_stream_info(LHASH_OF(STREAM_INFO) *lh,
- const char *stream_name)
-{
- STREAM_INFO key, *info;
-
- if (!TEST_ptr(stream_name))
- return NULL;
-
- if (!strcmp(stream_name, "DEFAULT"))
- return NULL;
-
- key.name = stream_name;
- info = lh_STREAM_INFO_retrieve(lh, &key);
- if (info == NULL) {
- info = OPENSSL_zalloc(sizeof(*info));
- if (info == NULL)
- return NULL;
-
- info->name = stream_name;
- info->s_stream_id = UINT64_MAX;
- lh_STREAM_INFO_insert(lh, info);
- }
-
- return info;
-}
-
-static int helper_local_set_c_stream(struct helper_local *hl,
- const char *stream_name,
- SSL *c_stream)
-{
- STREAM_INFO *info = get_stream_info(hl->c_streams, stream_name);
-
- if (info == NULL)
- return 0;
-
- info->c_stream = c_stream;
- info->s_stream_id = UINT64_MAX;
- return 1;
-}
-
-static SSL *helper_local_get_c_stream(struct helper_local *hl,
- const char *stream_name)
-{
- STREAM_INFO *info;
-
- if (!strcmp(stream_name, "DEFAULT"))
- return hl->h->c_conn;
-
- info = get_stream_info(hl->c_streams, stream_name);
- if (info == NULL)
- return NULL;
-
- return info->c_stream;
-}
-
-static int
-helper_set_s_stream(struct helper *h, const char *stream_name,
- uint64_t s_stream_id)
-{
- STREAM_INFO *info;
-
- if (!strcmp(stream_name, "DEFAULT"))
- return 0;
-
- info = get_stream_info(h->s_streams, stream_name);
- if (info == NULL)
- return 0;
-
- info->c_stream = NULL;
- info->s_stream_id = s_stream_id;
- return 1;
-}
-
-static uint64_t helper_get_s_stream(struct helper *h, const char *stream_name)
-{
- STREAM_INFO *info;
-
- if (!strcmp(stream_name, "DEFAULT"))
- return UINT64_MAX;
-
- info = get_stream_info(h->s_streams, stream_name);
- if (info == NULL)
- return UINT64_MAX;
-
- return info->s_stream_id;
-}
-
-static int helper_packet_plain_listener(QTEST_FAULT *qtf, QUIC_PKT_HDR *hdr,
- unsigned char *buf, size_t buf_len,
- void *arg)
-{
- struct helper *h = arg;
-
- return h->qtf_packet_plain_cb(h, hdr, buf, buf_len);
-}
-
-static int helper_handshake_listener(QTEST_FAULT *fault,
- unsigned char *buf, size_t buf_len,
- void *arg)
-{
- struct helper *h = arg;
-
- return h->qtf_handshake_cb(h, buf, buf_len);
-}
-
-static int helper_datagram_listener(QTEST_FAULT *fault,
- BIO_MSG *msg, size_t stride,
- void *arg)
-{
- struct helper *h = arg;
-
- return h->qtf_datagram_cb(h, msg, stride);
-}
-
-static int is_want(SSL *s, int ret)
-{
- int ec = SSL_get_error(s, ret);
-
- return ec == SSL_ERROR_WANT_READ || ec == SSL_ERROR_WANT_WRITE;
-}
-
-static int check_consistent_want(SSL *s, int ret)
-{
- int ec = SSL_get_error(s, ret);
- int w = SSL_want(s);
-
- int ok = TEST_true(
- (ec == SSL_ERROR_NONE && w == SSL_NOTHING)
- || (ec == SSL_ERROR_ZERO_RETURN && w == SSL_NOTHING)
- || (ec == SSL_ERROR_SSL && w == SSL_NOTHING)
- || (ec == SSL_ERROR_SYSCALL && w == SSL_NOTHING)
- || (ec == SSL_ERROR_WANT_READ && w == SSL_READING)
- || (ec == SSL_ERROR_WANT_WRITE && w == SSL_WRITING)
- || (ec == SSL_ERROR_WANT_CLIENT_HELLO_CB && w == SSL_CLIENT_HELLO_CB)
- || (ec == SSL_ERROR_WANT_X509_LOOKUP && w == SSL_X509_LOOKUP)
- || (ec == SSL_ERROR_WANT_RETRY_VERIFY && w == SSL_RETRY_VERIFY));
-
- if (!ok)
- TEST_error("got error=%d, want=%d", ec, w);
-
- return ok;
-}
-
-static int run_script_worker(struct helper *h, const struct script_op *script,
- const char *script_name,
- int thread_idx)
-{
- int testresult = 0;
- unsigned char *tmp_buf = NULL;
- int connect_started = 0;
- size_t offset = 0;
- size_t op_idx = 0;
- const struct script_op *op = NULL;
- int no_advance = 0, first = 1;
-#if defined(OPENSSL_THREADS)
- int end_wait_warning = 0;
-#endif
- OSSL_TIME op_start_time = ossl_time_zero(), op_deadline = ossl_time_zero();
- struct helper_local hl_, *hl = &hl_;
-#define REPEAT_SLOTS 8
- size_t repeat_stack_idx[REPEAT_SLOTS], repeat_stack_done[REPEAT_SLOTS];
- size_t repeat_stack_limit[REPEAT_SLOTS];
- size_t repeat_stack_len = 0;
-
- if (!TEST_true(helper_local_init(hl, h, thread_idx)))
- goto out;
-
-#define COMMON_SPIN_AGAIN() \
- { \
- no_advance = 1; \
- continue; \
- }
-#define S_SPIN_AGAIN() \
- { \
- s_lock(h, hl); \
- ossl_quic_tserver_tick(h->s); \
- COMMON_SPIN_AGAIN(); \
- }
-#define C_SPIN_AGAIN() \
- { \
- if (h->blocking) { \
- TEST_error("spin again in blocking mode"); \
- goto out; \
- } \
- COMMON_SPIN_AGAIN(); \
- }
-
- for (;;) {
- SSL *c_tgt = h->c_conn;
- uint64_t s_stream_id = UINT64_MAX;
-
- s_unlock(h, hl);
-
- if (no_advance) {
- no_advance = 0;
- } else {
- if (!first)
- ++op_idx;
-
- first = 0;
- offset = 0;
- op_start_time = ossl_time_now();
- op_deadline = ossl_time_add(op_start_time, ossl_ms2time(180000));
- }
-
- if (!TEST_int_le(ossl_time_compare(ossl_time_now(), op_deadline), 0)) {
- TEST_error("op %zu timed out on thread %d", op_idx + 1, thread_idx);
- goto out;
- }
-
- op = &script[op_idx];
-
- if (op->stream_name != NULL) {
- c_tgt = helper_local_get_c_stream(hl, op->stream_name);
- if (thread_idx < 0)
- s_stream_id = helper_get_s_stream(h, op->stream_name);
- else
- s_stream_id = UINT64_MAX;
- }
-
- if (thread_idx < 0) {
- if (!h->blocking) {
- ossl_quic_tserver_tick(h->s);
- }
-#if defined(OPENSSL_THREADS)
- else if (h->blocking && !h->server_thread.ready) {
- ossl_crypto_mutex_lock(h->server_thread.m);
- h->server_thread.ready = 1;
- ossl_crypto_condvar_signal(h->server_thread.c);
- ossl_crypto_mutex_unlock(h->server_thread.m);
- }
- if (h->blocking)
- assert(h->s == NULL);
-#endif
- }
-
- if (!hl->explicit_event_handling
- && (thread_idx >= 0 || connect_started))
- SSL_handle_events(h->c_conn);
-
- if (thread_idx >= 0) {
- /* Only allow certain opcodes on child threads. */
- switch (op->op) {
- case OPK_END:
- case OPK_CHECK:
- case OPK_C_ACCEPT_STREAM_WAIT:
- case OPK_C_NEW_STREAM:
- case OPK_C_READ_EXPECT:
- case OPK_C_EXPECT_FIN:
- case OPK_C_WRITE:
- case OPK_C_WRITE_EX2:
- case OPK_C_CONCLUDE:
- case OPK_C_FREE_STREAM:
- case OPK_BEGIN_REPEAT:
- case OPK_END_REPEAT:
- case OPK_C_READ_FAIL_WAIT:
- case OPK_C_EXPECT_SSL_ERR:
- case OPK_EXPECT_ERR_REASON:
- case OPK_EXPECT_ERR_LIB:
- case OPK_POP_ERR:
- case OPK_SLEEP:
- break;
-
- default:
- TEST_error("opcode %lu not allowed on child thread",
- (unsigned long)op->op);
- goto out;
- }
- }
-
- switch (op->op) {
- case OPK_END:
- if (!TEST_size_t_eq(repeat_stack_len, 0))
- goto out;
-
-#if defined(OPENSSL_THREADS)
- if (thread_idx < 0) {
- int done;
- size_t i;
-
- for (i = 0; i < h->num_threads; ++i) {
- if (h->threads[i].m == NULL)
- continue;
-
- ossl_crypto_mutex_lock(h->threads[i].m);
- done = h->threads[i].done;
- ossl_crypto_mutex_unlock(h->threads[i].m);
-
- if (!done) {
- if (!end_wait_warning) {
- TEST_info("still waiting for other threads to finish (%zu)", i);
- end_wait_warning = 1;
- }
-
- S_SPIN_AGAIN();
- }
- }
- }
-#endif
-
- TEST_info("script \"%s\" finished on thread %d", script_name, thread_idx);
- testresult = 1;
- goto out;
-
- case OPK_BEGIN_REPEAT:
- if (!TEST_size_t_lt(repeat_stack_len, OSSL_NELEM(repeat_stack_idx)))
- goto out;
-
- if (!TEST_size_t_gt(op->arg1, 0))
- goto out;
-
- repeat_stack_idx[repeat_stack_len] = op_idx + 1;
- repeat_stack_done[repeat_stack_len] = 0;
- repeat_stack_limit[repeat_stack_len] = op->arg1;
- ++repeat_stack_len;
- break;
-
- case OPK_C_SKIP_IF_UNBOUND:
- if (c_tgt != NULL)
- break;
-
- op_idx += op->arg1;
- break;
-
- case OPK_SKIP_IF_BLOCKING:
- if (!h->blocking)
- break;
-
- op_idx += op->arg1;
- break;
-
- case OPK_END_REPEAT:
- if (!TEST_size_t_gt(repeat_stack_len, 0))
- goto out;
-
- if (++repeat_stack_done[repeat_stack_len - 1]
- == repeat_stack_limit[repeat_stack_len - 1]) {
- --repeat_stack_len;
- } else {
- op_idx = repeat_stack_idx[repeat_stack_len - 1];
- no_advance = 1;
- continue;
- }
-
- break;
-
- case OPK_CHECK: {
- int ok;
-
- hl->check_op = op;
- ok = op->check_func(h, hl);
- hl->check_op = NULL;
-
- if (thread_idx < 0 && h->check_spin_again) {
- h->check_spin_again = 0;
- S_SPIN_AGAIN();
- }
-
- if (!TEST_true(ok))
- goto out;
- } break;
-
- case OPK_C_SET_ALPN: {
- const char *alpn = op->arg0;
- size_t alpn_len = strlen(alpn);
-
- if (!TEST_size_t_le(alpn_len, UINT8_MAX)
- || !TEST_ptr(tmp_buf = (unsigned char *)OPENSSL_malloc(alpn_len + 1)))
- goto out;
-
- memcpy(tmp_buf + 1, alpn, alpn_len);
- tmp_buf[0] = (unsigned char)alpn_len;
-
- /* 0 is the success case for SSL_set_alpn_protos(). */
- if (!TEST_false(SSL_set_alpn_protos(h->c_conn, tmp_buf,
- (unsigned int)(alpn_len + 1))))
- goto out;
-
- OPENSSL_free(tmp_buf);
- tmp_buf = NULL;
- } break;
-
- case OPK_C_CONNECT_WAIT: {
- int ret;
-
- connect_started = 1;
-
- ret = SSL_connect(h->c_conn);
- if (!check_consistent_want(c_tgt, ret))
- goto out;
- if (ret != 1) {
- if (!h->blocking && is_want(h->c_conn, ret))
- C_SPIN_AGAIN();
-
- if (op->arg1 == 0 && !TEST_int_eq(ret, 1))
- goto out;
- }
- } break;
-
- case OPK_C_WRITE: {
- size_t bytes_written = 0;
- int r;
-
- if (!TEST_ptr(c_tgt))
- goto out;
-
- r = SSL_write_ex(c_tgt, op->arg0, op->arg1, &bytes_written);
- if (!TEST_true(r)
- || !check_consistent_want(c_tgt, r)
- || !TEST_size_t_eq(bytes_written, op->arg1))
- goto out;
- } break;
-
- case OPK_C_WRITE_EX2: {
- size_t bytes_written = 0;
- int r;
-
- if (!TEST_ptr(c_tgt))
- goto out;
-
- r = SSL_write_ex2(c_tgt, op->arg0, op->arg1, op->arg2,
- &bytes_written);
- if (!TEST_true(r)
- || !check_consistent_want(c_tgt, r)
- || !TEST_size_t_eq(bytes_written, op->arg1))
- goto out;
- } break;
-
- case OPK_S_WRITE: {
- size_t bytes_written = 0;
-
- if (!TEST_uint64_t_ne(s_stream_id, UINT64_MAX))
- goto out;
-
- if (!TEST_true(ossl_quic_tserver_write(ACQUIRE_S(), s_stream_id,
- op->arg0, op->arg1,
- &bytes_written))
- || !TEST_size_t_eq(bytes_written, op->arg1))
- goto out;
- } break;
-
- case OPK_C_CONCLUDE: {
- if (!TEST_true(SSL_stream_conclude(c_tgt, 0)))
- goto out;
- } break;
-
- case OPK_S_CONCLUDE: {
- if (!TEST_uint64_t_ne(s_stream_id, UINT64_MAX))
- goto out;
-
- ossl_quic_tserver_conclude(ACQUIRE_S(), s_stream_id);
- } break;
-
- case OPK_C_WAIT_FOR_DATA: {
- char buf[1];
- size_t bytes_read = 0;
-
- if (!TEST_ptr(c_tgt))
- goto out;
-
- if (!SSL_peek_ex(c_tgt, buf, sizeof(buf), &bytes_read)
- || bytes_read == 0)
- C_SPIN_AGAIN();
- } break;
-
- case OPK_C_READ_EXPECT: {
- size_t bytes_read = 0;
- int r;
-
- if (op->arg1 > 0 && tmp_buf == NULL
- && !TEST_ptr(tmp_buf = OPENSSL_malloc(op->arg1)))
- goto out;
-
- r = SSL_read_ex(c_tgt, tmp_buf + offset, op->arg1 - offset,
- &bytes_read);
- if (!check_consistent_want(c_tgt, r))
- goto out;
-
- if (!r)
- C_SPIN_AGAIN();
-
- if (bytes_read + offset != op->arg1) {
- offset += bytes_read;
- C_SPIN_AGAIN();
- }
-
- if (op->arg1 > 0
- && !TEST_mem_eq(tmp_buf, op->arg1, op->arg0, op->arg1))
- goto out;
-
- OPENSSL_free(tmp_buf);
- tmp_buf = NULL;
- } break;
-
- case OPK_S_READ_EXPECT: {
- size_t bytes_read = 0;
-
- if (!TEST_uint64_t_ne(s_stream_id, UINT64_MAX))
- goto out;
-
- if (op->arg1 > 0 && tmp_buf == NULL
- && !TEST_ptr(tmp_buf = OPENSSL_malloc(op->arg1)))
- goto out;
-
- if (!TEST_true(ossl_quic_tserver_read(ACQUIRE_S(), s_stream_id,
- tmp_buf + offset,
- op->arg1 - offset,
- &bytes_read)))
- goto out;
-
- if (bytes_read + offset != op->arg1) {
- offset += bytes_read;
- S_SPIN_AGAIN();
- }
-
- if (op->arg1 > 0
- && !TEST_mem_eq(tmp_buf, op->arg1, op->arg0, op->arg1))
- goto out;
-
- OPENSSL_free(tmp_buf);
- tmp_buf = NULL;
- } break;
-
- case OPK_C_EXPECT_FIN: {
- char buf[1];
- size_t bytes_read = 0;
- int r;
-
- r = SSL_read_ex(c_tgt, buf, sizeof(buf), &bytes_read);
- if (!check_consistent_want(c_tgt, r)
- || !TEST_false(r)
- || !TEST_size_t_eq(bytes_read, 0))
- goto out;
-
- if (is_want(c_tgt, 0))
- C_SPIN_AGAIN();
-
- if (!TEST_int_eq(SSL_get_error(c_tgt, 0),
- SSL_ERROR_ZERO_RETURN))
- goto out;
-
- if (!TEST_int_eq(SSL_want(c_tgt), SSL_NOTHING))
- goto out;
- } break;
-
- case OPK_S_EXPECT_FIN: {
- if (!TEST_uint64_t_ne(s_stream_id, UINT64_MAX))
- goto out;
-
- if (!ossl_quic_tserver_has_read_ended(ACQUIRE_S(), s_stream_id))
- S_SPIN_AGAIN();
- } break;
-
- case OPK_C_NEW_STREAM: {
- SSL *c_stream;
- uint64_t flags = op->arg1;
- int allow_fail = ((flags & ALLOW_FAIL) != 0);
-
- flags &= ~(uint64_t)ALLOW_FAIL;
-
- if (!TEST_ptr_null(c_tgt))
- goto out; /* don't overwrite existing stream with same name */
-
- if (!TEST_ptr(op->stream_name))
- goto out;
-
- c_stream = SSL_new_stream(h->c_conn, flags);
- if (!allow_fail && !TEST_ptr(c_stream))
- goto out;
-
- if (allow_fail && c_stream == NULL) {
- if (!TEST_size_t_eq(ERR_GET_REASON(ERR_peek_last_error()),
- SSL_R_STREAM_COUNT_LIMITED))
- goto out;
-
- ++h->fail_count;
- break;
- }
-
- if (op->arg2 != UINT64_MAX
- && !TEST_uint64_t_eq(SSL_get_stream_id(c_stream),
- op->arg2))
- goto out;
-
- if (!TEST_true(helper_local_set_c_stream(hl, op->stream_name, c_stream)))
- goto out;
- } break;
-
- case OPK_S_NEW_STREAM: {
- uint64_t stream_id = UINT64_MAX;
-
- if (!TEST_uint64_t_eq(s_stream_id, UINT64_MAX))
- goto out; /* don't overwrite existing stream with same name */
-
- if (!TEST_ptr(op->stream_name))
- goto out;
-
- if (!TEST_true(ossl_quic_tserver_stream_new(ACQUIRE_S(),
- op->arg1 > 0,
- &stream_id)))
- goto out;
-
- if (op->arg2 != UINT64_MAX
- && !TEST_uint64_t_eq(stream_id, op->arg2))
- goto out;
-
- if (!TEST_true(helper_set_s_stream(h, op->stream_name,
- stream_id)))
- goto out;
- } break;
-
- case OPK_C_ACCEPT_STREAM_WAIT: {
- SSL *c_stream;
-
- if (!TEST_ptr_null(c_tgt))
- goto out; /* don't overwrite existing stream with same name */
-
- if (!TEST_ptr(op->stream_name))
- goto out;
-
- if ((c_stream = SSL_accept_stream(h->c_conn, 0)) == NULL)
- C_SPIN_AGAIN();
-
- if (!TEST_true(helper_local_set_c_stream(hl, op->stream_name,
- c_stream)))
- goto out;
- } break;
-
- case OPK_S_ACCEPT_STREAM_WAIT: {
- uint64_t new_stream_id;
-
- if (!TEST_uint64_t_eq(s_stream_id, UINT64_MAX))
- goto out;
-
- if (!TEST_ptr(op->stream_name))
- goto out;
-
- new_stream_id = ossl_quic_tserver_pop_incoming_stream(ACQUIRE_S());
- if (new_stream_id == UINT64_MAX)
- S_SPIN_AGAIN();
-
- if (!TEST_true(helper_set_s_stream(h, op->stream_name, new_stream_id)))
- goto out;
- } break;
-
- case OPK_C_ACCEPT_STREAM_NONE: {
- SSL *c_stream;
-
- if (!TEST_ptr_null(c_stream = SSL_accept_stream(h->c_conn,
- SSL_ACCEPT_STREAM_NO_BLOCK))) {
- SSL_free(c_stream);
- goto out;
- }
- } break;
-
- case OPK_C_FREE_STREAM: {
- if (!TEST_ptr(c_tgt)
- || !TEST_true(!SSL_is_connection(c_tgt)))
- goto out;
-
- if (!TEST_ptr(op->stream_name))
- goto out;
-
- if (!TEST_true(helper_local_set_c_stream(hl, op->stream_name, NULL)))
- goto out;
-
- SSL_free(c_tgt);
- c_tgt = NULL;
- } break;
-
- case OPK_C_SET_DEFAULT_STREAM_MODE: {
- if (!TEST_ptr(c_tgt))
- goto out;
-
- if (!TEST_true(SSL_set_default_stream_mode(c_tgt, (uint32_t)op->arg1)))
- goto out;
- } break;
-
- case OPK_C_SET_INCOMING_STREAM_POLICY: {
- if (!TEST_ptr(c_tgt))
- goto out;
-
- if (!TEST_true(SSL_set_incoming_stream_policy(c_tgt,
- (int)op->arg1, 0)))
- goto out;
- } break;
-
- case OPK_C_SHUTDOWN: {
- int ret;
- QUIC_CHANNEL *ch = ossl_quic_conn_get_channel(h->c_conn);
- SSL_SHUTDOWN_EX_ARGS args = { 0 };
-
- ossl_quic_engine_set_inhibit_tick(ossl_quic_channel_get0_engine(ch), 0);
-
- if (!TEST_ptr(c_tgt))
- goto out;
-
- args.quic_reason = (const char *)op->arg0;
-
- ret = SSL_shutdown_ex(c_tgt, op->arg1, &args, sizeof(args));
- if (!TEST_int_ge(ret, 0))
- goto out;
- } break;
-
- case OPK_C_SHUTDOWN_WAIT: {
- int ret;
- QUIC_CHANNEL *ch = ossl_quic_conn_get_channel(h->c_conn);
- SSL_SHUTDOWN_EX_ARGS args = { 0 };
-
- ossl_quic_engine_set_inhibit_tick(ossl_quic_channel_get0_engine(ch), 0);
-
- if (!TEST_ptr(c_tgt))
- goto out;
-
- args.quic_reason = (const char *)op->arg0;
-
- ret = SSL_shutdown_ex(c_tgt, op->arg1, &args, sizeof(args));
- if (!TEST_int_ge(ret, 0))
- goto out;
-
- if (ret == 0)
- C_SPIN_AGAIN();
- } break;
-
- case OPK_S_SHUTDOWN: {
- ossl_quic_tserver_shutdown(ACQUIRE_S(), op->arg1);
- } break;
-
- case OPK_C_EXPECT_CONN_CLOSE_INFO: {
- SSL_CONN_CLOSE_INFO cc_info = { 0 };
- int expect_app = (op->arg1 & EXPECT_CONN_CLOSE_APP) != 0;
- int expect_remote = (op->arg1 & EXPECT_CONN_CLOSE_REMOTE) != 0;
- uint64_t error_code = op->arg2;
-
- if (!TEST_ptr(c_tgt))
- goto out;
-
- if (h->blocking
- && !TEST_true(SSL_shutdown_ex(c_tgt,
- SSL_SHUTDOWN_FLAG_WAIT_PEER,
- NULL, 0)))
- goto out;
-
- if (!SSL_get_conn_close_info(c_tgt, &cc_info, sizeof(cc_info)))
- C_SPIN_AGAIN();
-
- if (!TEST_int_eq(expect_app,
- (cc_info.flags
- & SSL_CONN_CLOSE_FLAG_TRANSPORT)
- == 0)
- || !TEST_int_eq(expect_remote,
- (cc_info.flags
- & SSL_CONN_CLOSE_FLAG_LOCAL)
- == 0)
- || !TEST_uint64_t_eq(error_code, cc_info.error_code)) {
- TEST_info("Connection close reason: %s", cc_info.reason);
- goto out;
- }
- } break;
-
- case OPK_S_EXPECT_CONN_CLOSE_INFO: {
- const QUIC_TERMINATE_CAUSE *tc;
- int expect_app = (op->arg1 & EXPECT_CONN_CLOSE_APP) != 0;
- int expect_remote = (op->arg1 & EXPECT_CONN_CLOSE_REMOTE) != 0;
- uint64_t error_code = op->arg2;
-
- if (!ossl_quic_tserver_is_term_any(ACQUIRE_S())) {
- ossl_quic_tserver_ping(ACQUIRE_S());
- S_SPIN_AGAIN();
- }
-
- if (!TEST_ptr(tc = ossl_quic_tserver_get_terminate_cause(ACQUIRE_S())))
- goto out;
-
- if (!TEST_uint64_t_eq(error_code, tc->error_code)
- || !TEST_int_eq(expect_app, tc->app)
- || !TEST_int_eq(expect_remote, tc->remote))
- goto out;
- } break;
-
- case OPK_S_BIND_STREAM_ID: {
- if (!TEST_uint64_t_eq(s_stream_id, UINT64_MAX))
- goto out;
-
- if (!TEST_ptr(op->stream_name))
- goto out;
-
- if (!TEST_true(helper_set_s_stream(h, op->stream_name, op->arg2)))
- goto out;
- } break;
-
- case OPK_S_UNBIND_STREAM_ID: {
- if (!TEST_uint64_t_ne(s_stream_id, UINT64_MAX))
- goto out;
-
- if (!TEST_ptr(op->stream_name))
- goto out;
-
- if (!TEST_true(helper_set_s_stream(h, op->stream_name, UINT64_MAX)))
- goto out;
- } break;
-
- case OPK_C_WRITE_FAIL: {
- size_t bytes_written = 0;
- int r;
-
- if (!TEST_ptr(c_tgt))
- goto out;
-
- r = SSL_write_ex(c_tgt, "apple", 5, &bytes_written);
- if (!TEST_false(r)
- || !check_consistent_want(c_tgt, r))
- goto out;
- } break;
-
- case OPK_S_WRITE_FAIL: {
- size_t bytes_written = 0;
-
- if (!TEST_uint64_t_ne(s_stream_id, UINT64_MAX))
- goto out;
-
- if (!TEST_false(ossl_quic_tserver_write(ACQUIRE_S(), s_stream_id,
- (const unsigned char *)"apple", 5,
- &bytes_written)))
- goto out;
- } break;
-
- case OPK_C_READ_FAIL: {
- size_t bytes_read = 0;
- char buf[1];
- int r;
-
- if (!TEST_ptr(c_tgt))
- goto out;
-
- r = SSL_read_ex(c_tgt, buf, sizeof(buf), &bytes_read);
- if (!TEST_false(r))
- goto out;
- if (!check_consistent_want(c_tgt, r))
- goto out;
- } break;
-
- case OPK_C_READ_FAIL_WAIT: {
- size_t bytes_read = 0;
- char buf[1];
- int r;
-
- if (!TEST_ptr(c_tgt))
- goto out;
-
- r = SSL_read_ex(c_tgt, buf, sizeof(buf), &bytes_read);
- if (!TEST_false(r))
- goto out;
- if (!check_consistent_want(c_tgt, r))
- goto out;
-
- if (is_want(c_tgt, 0))
- C_SPIN_AGAIN();
- } break;
-
- case OPK_S_READ_FAIL: {
- int ret;
- size_t bytes_read = 0;
- unsigned char buf[1];
-
- if (!TEST_uint64_t_ne(s_stream_id, UINT64_MAX))
- goto out;
-
- ret = ossl_quic_tserver_read(ACQUIRE_S(), s_stream_id,
- buf, sizeof(buf),
- &bytes_read);
- if (!TEST_true(ret == 0 || (op->arg1 && bytes_read == 0)))
- goto out;
- } break;
-
- case OPK_C_STREAM_RESET:
- case OPK_C_STREAM_RESET_FAIL: {
- SSL_STREAM_RESET_ARGS args = { 0 };
-
- if (!TEST_ptr(c_tgt))
- goto out;
-
- args.quic_error_code = op->arg2;
- if (op->op == OPK_C_STREAM_RESET) {
- if (!TEST_true(SSL_stream_reset(c_tgt, &args, sizeof(args))))
- goto out;
- } else {
- if (!TEST_false(SSL_stream_reset(c_tgt, &args, sizeof(args))))
- goto out;
- }
- } break;
-
- case OPK_NEW_THREAD: {
-#if !defined(OPENSSL_THREADS)
- /*
- * If this test script requires threading and we do not have
- * support for it, skip the rest of it.
- */
- TEST_skip("threading not supported, skipping");
- testresult = 1;
- goto out;
-#else
- size_t i;
-
- if (!TEST_ptr_null(h->threads)) {
- TEST_error("max one NEW_THREAD operation per script");
- goto out;
- }
-
- h->threads = OPENSSL_calloc(op->arg1, sizeof(struct child_thread_args));
- if (!TEST_ptr(h->threads))
- goto out;
-
- h->num_threads = op->arg1;
-
- for (i = 0; i < op->arg1; ++i) {
- h->threads[i].h = h;
- h->threads[i].script = op->arg0;
- h->threads[i].script_name = script_name;
- h->threads[i].thread_idx = (int)i;
-
- h->threads[i].m = ossl_crypto_mutex_new();
- if (!TEST_ptr(h->threads[i].m))
- goto out;
-
- h->threads[i].t
- = ossl_crypto_thread_native_start(run_script_child_thread,
- &h->threads[i], 1);
- if (!TEST_ptr(h->threads[i].t))
- goto out;
- }
-#endif
- } break;
-
- case OPK_C_CLOSE_SOCKET: {
- BIO_closesocket(h->c_fd);
- h->c_fd = -1;
- } break;
-
- case OPK_C_EXPECT_SSL_ERR: {
- if (!TEST_size_t_eq((size_t)SSL_get_error(c_tgt, 0), op->arg1))
- goto out;
- if (!TEST_int_eq(SSL_want(c_tgt), SSL_NOTHING))
- goto out;
- } break;
-
- case OPK_EXPECT_ERR_REASON: {
- if (!TEST_size_t_eq((size_t)ERR_GET_REASON(ERR_peek_last_error()), op->arg1))
- goto out;
- } break;
-
- case OPK_EXPECT_ERR_LIB: {
- if (!TEST_size_t_eq((size_t)ERR_GET_LIB(ERR_peek_last_error()), op->arg1))
- goto out;
- } break;
-
- case OPK_POP_ERR:
- ERR_pop();
- break;
-
- case OPK_SLEEP: {
- OSSL_sleep(op->arg2);
- } break;
-
- case OPK_S_SET_INJECT_PLAIN:
- h->qtf_packet_plain_cb = op->qtf_packet_plain_cb;
-
- if (!TEST_true(qtest_fault_set_packet_plain_listener(h->qtf,
- h->qtf_packet_plain_cb != NULL ? helper_packet_plain_listener : NULL,
- h)))
- goto out;
-
- break;
-
- case OPK_S_SET_INJECT_HANDSHAKE:
- h->qtf_handshake_cb = op->qtf_handshake_cb;
-
- if (!TEST_true(qtest_fault_set_handshake_listener(h->qtf,
- h->qtf_handshake_cb != NULL ? helper_handshake_listener : NULL,
- h)))
- goto out;
-
- break;
-
- case OPK_S_SET_INJECT_DATAGRAM:
- h->qtf_datagram_cb = op->qtf_datagram_cb;
-
- if (!TEST_true(qtest_fault_set_datagram_listener(h->qtf,
- h->qtf_datagram_cb != NULL ? helper_datagram_listener : NULL,
- h)))
- goto out;
-
- break;
-
- case OPK_SET_INJECT_WORD:
- /*
- * Must hold server tick lock - callbacks can be called from other
- * thread when running test in blocking mode (tsan).
- */
- ACQUIRE_S();
- h->inject_word0 = op->arg1;
- h->inject_word1 = op->arg2;
- break;
-
- case OPK_C_INHIBIT_TICK: {
- QUIC_CHANNEL *ch = ossl_quic_conn_get_channel(h->c_conn);
-
- ossl_quic_engine_set_inhibit_tick(ossl_quic_channel_get0_engine(ch),
- (int)op->arg1);
- } break;
-
- case OPK_C_SET_WRITE_BUF_SIZE:
- if (!TEST_ptr(c_tgt))
- goto out;
-
- if (!TEST_true(ossl_quic_set_write_buffer_size(c_tgt, op->arg1)))
- goto out;
-
- break;
-
- case OPK_S_NEW_TICKET:
- if (!TEST_true(ossl_quic_tserver_new_ticket(ACQUIRE_S())))
- goto out;
- break;
-
- default:
- TEST_error("unknown op");
- goto out;
- }
- }
-
-out:
- s_unlock(h, hl); /* idempotent */
- if (!testresult) {
- size_t i;
- const QUIC_TERMINATE_CAUSE *tcause;
- const char *e_str, *f_str;
-
- TEST_error("failed in script \"%s\" at op %zu, thread %d\n",
- script_name, op_idx + 1, thread_idx);
-
- for (i = 0; i < repeat_stack_len; ++i)
- TEST_info("while repeating, iteration %zu of %zu, starting at script op %zu",
- repeat_stack_done[i],
- repeat_stack_limit[i],
- repeat_stack_idx[i]);
-
- ERR_print_errors_fp(stderr);
-
- if (h->c_conn != NULL) {
- SSL_CONN_CLOSE_INFO cc_info = { 0 };
-
- if (SSL_get_conn_close_info(h->c_conn, &cc_info, sizeof(cc_info))) {
- e_str = ossl_quic_err_to_string(cc_info.error_code);
- f_str = ossl_quic_frame_type_to_string(cc_info.frame_type);
-
- if (e_str == NULL)
- e_str = "?";
- if (f_str == NULL)
- f_str = "?";
-
- TEST_info("client side is closed: %llu(%s)/%llu(%s), "
- "%s, %s, reason: \"%s\"",
- (unsigned long long)cc_info.error_code,
- e_str,
- (unsigned long long)cc_info.frame_type,
- f_str,
- (cc_info.flags & SSL_CONN_CLOSE_FLAG_LOCAL) != 0
- ? "local"
- : "remote",
- (cc_info.flags & SSL_CONN_CLOSE_FLAG_TRANSPORT) != 0
- ? "transport"
- : "app",
- cc_info.reason != NULL ? cc_info.reason : "-");
- }
- }
-
- tcause = (h->s != NULL
- ? ossl_quic_tserver_get_terminate_cause(h->s)
- : NULL);
- if (tcause != NULL) {
- e_str = ossl_quic_err_to_string(tcause->error_code);
- f_str = ossl_quic_frame_type_to_string(tcause->frame_type);
-
- if (e_str == NULL)
- e_str = "?";
- if (f_str == NULL)
- f_str = "?";
-
- TEST_info("server side is closed: %llu(%s)/%llu(%s), "
- "%s, %s, reason: \"%s\"",
- (unsigned long long)tcause->error_code,
- e_str,
- (unsigned long long)tcause->frame_type,
- f_str,
- tcause->remote ? "remote" : "local",
- tcause->app ? "app" : "transport",
- tcause->reason != NULL ? tcause->reason : "-");
- }
- }
-
- OPENSSL_free(tmp_buf);
- helper_local_cleanup(hl);
- return testresult;
-}
-
-static int run_script(const struct script_op *script,
- const char *script_name,
- int free_order,
- int blocking)
-{
- int testresult = 0;
- struct helper h;
-
- if (!TEST_true(helper_init(&h, script_name,
- free_order, blocking, 1)))
- goto out;
-
- if (!TEST_true(run_script_worker(&h, script, script_name, -1)))
- goto out;
-
-#if defined(OPENSSL_THREADS)
- if (!TEST_true(join_threads(h.threads, h.num_threads)))
- goto out;
-#endif
-
- testresult = 1;
-out:
- helper_cleanup(&h);
- return testresult;
-}
-
-#if defined(OPENSSL_THREADS)
-static CRYPTO_THREAD_RETVAL run_script_child_thread(void *arg)
-{
- int testresult;
- struct child_thread_args *args = arg;
-
- testresult = run_script_worker(args->h, args->script,
- args->script_name,
- args->thread_idx);
-
- ossl_crypto_mutex_lock(args->m);
- args->testresult = testresult;
- args->done = 1;
- ossl_crypto_mutex_unlock(args->m);
- return 1;
-}
-#endif
-
-/* 1. Simple single-stream test */
-static const struct script_op script_1[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 2. Multi-stream test */
-static const struct script_op script_2[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 3. Default stream detach/reattach test */
-static const struct script_op script_3[] = {
- /*
- * SSL_attach_stream()/SSL_detach_stream() no longer exists,
- * there is no reason to keep their private implementation
- * with test
- */
-
- OP_END
-};
-
-/* 4. Default stream mode test */
-static const struct script_op script_4[] = {
- /*
- * SSL_attach_stream()/SSL_detach_stream() no longer exists,
- * there is no reason to keep their private implementation
- * with test
- */
-
- OP_END
-};
-
-/* 5. Test stream reset functionality */
-static const struct script_op script_5[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 6. Test STOP_SENDING functionality */
-static const struct script_op script_6[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 7. Unidirectional default stream mode test (client sends first) */
-static const struct script_op script_7[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 8. Unidirectional default stream mode test (server sends first) */
-static const struct script_op script_8[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 9. Unidirectional default stream mode test (server sends first on bidi) */
-static const struct script_op script_9[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 10. Shutdown */
-static const struct script_op script_10[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 11. Many threads accepted on the same client connection */
-static const struct script_op script_11[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 12. Many threads initiated on the same client connection */
-static const struct script_op script_12[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 13. Many threads accepted on the same client connection (stress test) */
-static const struct script_op script_13[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 14. Many threads initiating on the same client connection (stress test) */
-static const struct script_op script_14[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 15. Client sending large number of streams, MAX_STREAMS test */
-static const struct script_op script_15[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 16. Server sending large number of streams, MAX_STREAMS test */
-static const struct script_op script_16[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 17. Key update test - unlimited */
-static const struct script_op script_17[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 18. Key update test - RTT-bounded */
-static const struct script_op script_18[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 19. Key update test - artificially triggered */
-static const struct script_op script_19[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 20. Multiple threads accept stream with socket forcibly closed (error test) */
-static const struct script_op script_20[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 21. Fault injection - unknown frame in 1-RTT packet */
-static int script_21_inject_plain(struct helper *h, QUIC_PKT_HDR *hdr,
- unsigned char *buf, size_t len)
-{
- int ok = 0;
- WPACKET wpkt;
- unsigned char frame_buf[21];
- size_t written;
-
- if (h->inject_word0 == 0 || hdr->type != h->inject_word0)
- return 1;
-
- if (!TEST_true(WPACKET_init_static_len(&wpkt, frame_buf,
- sizeof(frame_buf), 0)))
- return 0;
-
- if (!TEST_true(WPACKET_quic_write_vlint(&wpkt, h->inject_word1)))
- goto err;
-
- switch (h->inject_word1) {
- case OSSL_QUIC_FRAME_TYPE_PATH_CHALLENGE:
- case OSSL_QUIC_FRAME_TYPE_PATH_RESPONSE:
- case OSSL_QUIC_FRAME_TYPE_RETIRE_CONN_ID:
- /*
- * These cases to be formatted properly need a single uint64_t
- */
- if (!TEST_true(WPACKET_put_bytes_u64(&wpkt, (uint64_t)0)))
- goto err;
- break;
- case OSSL_QUIC_FRAME_TYPE_MAX_DATA:
- case OSSL_QUIC_FRAME_TYPE_STREAMS_BLOCKED_UNI:
- case OSSL_QUIC_FRAME_TYPE_STREAMS_BLOCKED_BIDI:
- case OSSL_QUIC_FRAME_TYPE_MAX_STREAMS_BIDI:
- case OSSL_QUIC_FRAME_TYPE_MAX_STREAMS_UNI:
- case OSSL_QUIC_FRAME_TYPE_DATA_BLOCKED:
- /*
- * These cases require a single vlint
- */
- if (!TEST_true(WPACKET_quic_write_vlint(&wpkt, (uint64_t)0)))
- goto err;
- break;
- case OSSL_QUIC_FRAME_TYPE_STOP_SENDING:
- case OSSL_QUIC_FRAME_TYPE_MAX_STREAM_DATA:
- case OSSL_QUIC_FRAME_TYPE_STREAM_DATA_BLOCKED:
- /*
- * These cases require 2 variable integers
- */
- if (!TEST_true(WPACKET_quic_write_vlint(&wpkt, (uint64_t)0)))
- goto err;
- if (!TEST_true(WPACKET_quic_write_vlint(&wpkt, (uint64_t)0)))
- goto err;
- break;
- case OSSL_QUIC_FRAME_TYPE_STREAM:
- case OSSL_QUIC_FRAME_TYPE_RESET_STREAM:
- case OSSL_QUIC_FRAME_TYPE_CONN_CLOSE_APP:
- /*
- * These cases require 3 variable integers
- */
- if (!TEST_true(WPACKET_quic_write_vlint(&wpkt, (uint64_t)0)))
- goto err;
- if (!TEST_true(WPACKET_quic_write_vlint(&wpkt, (uint64_t)0)))
- goto err;
- if (!TEST_true(WPACKET_quic_write_vlint(&wpkt, (uint64_t)0)))
- goto err;
- break;
- case OSSL_QUIC_FRAME_TYPE_NEW_TOKEN:
- /*
- * Special case for new token
- */
-
- /* New token length, cannot be zero */
- if (!TEST_true(WPACKET_quic_write_vlint(&wpkt, (uint64_t)1)))
- goto err;
-
- /* 1 bytes of token data, to match the above length */
- if (!TEST_true(WPACKET_put_bytes_u8(&wpkt, (uint8_t)0)))
- goto err;
- break;
- case OSSL_QUIC_FRAME_TYPE_NEW_CONN_ID:
- /*
- * Special case for New Connection ids, has a combination
- * of vlints and fixed width values
- */
-
- /* seq number */
- if (!TEST_true(WPACKET_quic_write_vlint(&wpkt, (uint64_t)0)))
- goto err;
-
- /* retire prior to */
- if (!TEST_true(WPACKET_quic_write_vlint(&wpkt, (uint64_t)0)))
- goto err;
-
- /* Connection id length, arbitrary at 1 bytes */
- if (!TEST_true(WPACKET_put_bytes_u8(&wpkt, (uint8_t)1)))
- goto err;
-
- /* The connection id, to match the above length */
- if (!TEST_true(WPACKET_put_bytes_u8(&wpkt, (uint8_t)0)))
- goto err;
-
- /* 16 bytes total for the SRT */
- if (!TEST_true(WPACKET_memset(&wpkt, 0, 16)))
- goto err;
-
- break;
- }
-
- if (!TEST_true(WPACKET_get_total_written(&wpkt, &written)))
- goto err;
-
- if (!qtest_fault_prepend_frame(h->qtf, frame_buf, written))
- goto err;
-
- ok = 1;
-err:
- if (ok)
- WPACKET_finish(&wpkt);
- else
- WPACKET_cleanup(&wpkt);
- return ok;
-}
-
-static const struct script_op script_21[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 22. Fault injection - non-zero packet header reserved bits */
-static const struct script_op script_22[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 23. Fault injection - empty NEW_TOKEN */
-static const struct script_op script_23[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 24. Fault injection - excess value of MAX_STREAMS_BIDI */
-static const struct script_op script_24[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 25. Fault injection - excess value of MAX_STREAMS_UNI */
-static const struct script_op script_25[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 26. Fault injection - excess value of STREAMS_BLOCKED_BIDI */
-static const struct script_op script_26[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 27. Fault injection - excess value of STREAMS_BLOCKED_UNI */
-static const struct script_op script_27[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 28. Fault injection - received RESET_STREAM for send-only stream */
-static int script_28_inject_plain(struct helper *h, QUIC_PKT_HDR *hdr,
- unsigned char *buf, size_t len)
-{
- int ok = 0;
- WPACKET wpkt;
- unsigned char frame_buf[32];
- size_t written;
-
- if (h->inject_word0 == 0 || hdr->type != QUIC_PKT_TYPE_1RTT)
- return 1;
-
- if (!TEST_true(WPACKET_init_static_len(&wpkt, frame_buf,
- sizeof(frame_buf), 0)))
- return 0;
-
- if (!TEST_true(WPACKET_quic_write_vlint(&wpkt, h->inject_word1))
- || !TEST_true(WPACKET_quic_write_vlint(&wpkt, /* stream ID */
- h->inject_word0 - 1))
- || !TEST_true(WPACKET_quic_write_vlint(&wpkt, 123))
- || (h->inject_word1 == OSSL_QUIC_FRAME_TYPE_RESET_STREAM
- && !TEST_true(WPACKET_quic_write_vlint(&wpkt, 5)))) /* final size */
- goto err;
-
- if (!TEST_true(WPACKET_get_total_written(&wpkt, &written)))
- goto err;
-
- if (!qtest_fault_prepend_frame(h->qtf, frame_buf, written))
- goto err;
-
- ok = 1;
-err:
- if (ok)
- WPACKET_finish(&wpkt);
- else
- WPACKET_cleanup(&wpkt);
- return ok;
-}
-
-static const struct script_op script_28[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 29. Fault injection - received RESET_STREAM for nonexistent send-only stream */
-static const struct script_op script_29[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 30. Fault injection - received STOP_SENDING for receive-only stream */
-static const struct script_op script_30[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 31. Fault injection - received STOP_SENDING for nonexistent receive-only stream */
-static const struct script_op script_31[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 32. Fault injection - STREAM frame for nonexistent stream */
-static const struct script_op script_32[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 33. Fault injection - STREAM frame with illegal offset */
-static const struct script_op script_33[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 34. Fault injection - STREAM frame which exceeds FC */
-static const struct script_op script_34[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 35. Fault injection - MAX_STREAM_DATA for receive-only stream */
-static const struct script_op script_35[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 36. Fault injection - MAX_STREAM_DATA for nonexistent stream */
-static const struct script_op script_36[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 37. Fault injection - STREAM_DATA_BLOCKED for send-only stream */
-static const struct script_op script_37[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 38. Fault injection - STREAM_DATA_BLOCKED for non-existent stream */
-static const struct script_op script_38[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 39. Fault injection - NEW_CONN_ID with zero-len CID */
-static const struct script_op script_39[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 40. Shutdown flush test */
-static const struct script_op script_40[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 41. Fault injection - PATH_CHALLENGE yields PATH_RESPONSE */
-static const struct script_op script_41[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 42. Fault injection - CRYPTO frame with illegal offset */
-static const struct script_op script_42[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 43. Fault injection - CRYPTO frame exceeding FC */
-static const struct script_op script_43[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 44. Fault injection - PADDING */
-static const struct script_op script_44[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 45. PING must generate ACK */
-static const struct script_op script_45[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 46. Fault injection - ACK - malformed initial range */
-static const struct script_op script_46[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 47. Fault injection - ACK - malformed subsequent range */
-static const struct script_op script_47[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 48. Fault injection - ACK - malformed subsequent range */
-static const struct script_op script_48[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 49. Fault injection - ACK - fictional PN */
-static const struct script_op script_49[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 50. Fault injection - ACK - duplicate PN */
-static const struct script_op script_50[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 51. Fault injection - PATH_RESPONSE is ignored */
-static const struct script_op script_51[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 52. Fault injection - ignore BLOCKED frames with bogus values */
-static const struct script_op script_52[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 53. Fault injection - excess CRYPTO buffer size */
-static const struct script_op script_53[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 54. Fault injection - corrupted crypto stream data */
-static const struct script_op script_54[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 55. Fault injection - NEW_CONN_ID with >20 byte CID */
-static const struct script_op script_55[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 56. Fault injection - NEW_CONN_ID with seq no < retire prior to */
-static const struct script_op script_56[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 57. Fault injection - NEW_CONN_ID with lower seq so ignored */
-static const struct script_op script_57[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 58. Fault injection - repeated HANDSHAKE_DONE */
-static const struct script_op script_58[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 59. Fault injection - multi-byte frame encoding */
-static const struct script_op script_59[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 60. Connection close reason truncation */
-static const struct script_op script_60[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 61. Fault injection - RESET_STREAM exceeding stream count FC */
-static const struct script_op script_61[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 62. Fault injection - STOP_SENDING with high ID */
-static const struct script_op script_62[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 63. Fault injection - STREAM frame exceeding stream limit */
-static const struct script_op script_63[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 64. Fault injection - STREAM - zero-length no-FIN is accepted */
-static const struct script_op script_64[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 65. Fault injection - CRYPTO - zero-length is accepted */
-static const struct script_op script_65[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 66. Fault injection - large MAX_STREAM_DATA */
-static const struct script_op script_66[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 67. Fault injection - large MAX_DATA */
-static const struct script_op script_67[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 68. Fault injection - Unexpected TLS messages */
-/* Send a CertificateRequest message post-handshake */
-static const struct script_op script_68[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-/* 69. Send a TLS KeyUpdate message post-handshake */
-static const struct script_op script_69[] = {
- /* test moved to test/radix/quic_tests.c */
- OP_END
-};
-
-static int set_max_early_data(struct helper *h, struct helper_local *hl)
-{
-
- if (!TEST_true(ossl_quic_tserver_set_max_early_data(ACQUIRE_S(),
- (uint32_t)hl->check_op->arg2)))
- return 0;
-
- return 1;
-}
-
-/* 70. Send a TLS NewSessionTicket message with invalid max_early_data */
-static const struct script_op script_70[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_C_NEW_STREAM_BIDI(a, C_BIDI_ID(0)),
- OP_C_WRITE(a, "apple", 5),
- OP_S_BIND_STREAM_ID(a, C_BIDI_ID(0)),
- OP_S_READ_EXPECT(a, "apple", 5),
-
- OP_CHECK(set_max_early_data, 0xfffffffe),
- OP_S_NEW_TICKET(),
- OP_S_WRITE(a, "orange", 6),
-
- OP_C_EXPECT_CONN_CLOSE_INFO(OSSL_QUIC_ERR_PROTOCOL_VIOLATION, 0, 0),
-
- OP_END
-};
-
-/* 71. Send a TLS NewSessionTicket message with valid max_early_data */
-static const struct script_op script_71[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_C_NEW_STREAM_BIDI(a, C_BIDI_ID(0)),
- OP_C_WRITE(a, "apple", 5),
- OP_S_BIND_STREAM_ID(a, C_BIDI_ID(0)),
- OP_S_READ_EXPECT(a, "apple", 5),
-
- OP_CHECK(set_max_early_data, 0xffffffff),
- OP_S_NEW_TICKET(),
- OP_S_WRITE(a, "orange", 6),
- OP_C_READ_EXPECT(a, "orange", 6),
-
- OP_END
-};
-
-/* 72. Test that APL stops handing out streams after limit reached (bidi) */
-static int script_72_check(struct helper *h, struct helper_local *hl)
-{
- if (!TEST_uint64_t_ge(h->fail_count, 50))
- return 0;
-
- return 1;
-}
-
-static const struct script_op script_72[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- /*
- * Request more streams than a server will initially hand out and test that
- * they fail properly.
- */
- OP_BEGIN_REPEAT(200),
-
- OP_C_NEW_STREAM_BIDI_EX(a, ANY_ID, ALLOW_FAIL | SSL_STREAM_FLAG_NO_BLOCK),
- OP_C_SKIP_IF_UNBOUND(a, 2),
- OP_C_WRITE(a, "apple", 5),
- OP_C_FREE_STREAM(a),
-
- OP_END_REPEAT(),
-
- OP_CHECK(script_72_check, 0),
-
- OP_END
-};
-
-/* 73. Test that APL stops handing out streams after limit reached (uni) */
-static const struct script_op script_73[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- /*
- * Request more streams than a server will initially hand out and test that
- * they fail properly.
- */
- OP_BEGIN_REPEAT(200),
-
- OP_C_NEW_STREAM_UNI_EX(a, ANY_ID, ALLOW_FAIL | SSL_STREAM_FLAG_NO_BLOCK),
- OP_C_SKIP_IF_UNBOUND(a, 2),
- OP_C_WRITE(a, "apple", 5),
- OP_C_FREE_STREAM(a),
-
- OP_END_REPEAT(),
-
- OP_CHECK(script_72_check, 0),
-
- OP_END
-};
-
-/* 74. Version negotiation: QUIC_VERSION_1 ignored */
-static int generate_version_neg(WPACKET *wpkt, uint32_t version)
-{
- QUIC_PKT_HDR hdr = { 0 };
-
- hdr.type = QUIC_PKT_TYPE_VERSION_NEG;
- hdr.version = 0;
- hdr.fixed = 1;
- hdr.dst_conn_id.id_len = 0;
- hdr.src_conn_id.id_len = 8;
- memset(hdr.src_conn_id.id, 0x55, 8);
-
- if (!TEST_true(ossl_quic_wire_encode_pkt_hdr(wpkt, 0, &hdr, NULL)))
- return 0;
-
- if (!TEST_true(WPACKET_put_bytes_u32(wpkt, version)))
- return 0;
-
- return 1;
-}
-
-static int server_gen_version_neg(struct helper *h, BIO_MSG *msg, size_t stride)
-{
- int rc = 0, have_wpkt = 0;
- size_t l;
- WPACKET wpkt;
- BUF_MEM *buf = NULL;
- uint32_t version;
-
- switch (h->inject_word0) {
- case 0:
- return 1;
- case 1:
- version = QUIC_VERSION_1;
- break;
- default:
- version = 0x5432abcd;
- break;
- }
-
- if (!TEST_ptr(buf = BUF_MEM_new()))
- goto err;
-
- if (!TEST_true(WPACKET_init(&wpkt, buf)))
- goto err;
-
- have_wpkt = 1;
-
- generate_version_neg(&wpkt, version);
-
- if (!TEST_true(WPACKET_get_total_written(&wpkt, &l)))
- goto err;
-
- if (!TEST_true(qtest_fault_resize_datagram(h->qtf, l)))
- goto err;
-
- memcpy(msg->data, buf->data, l);
- h->inject_word0 = 0;
-
- rc = 1;
-err:
- if (have_wpkt && !WPACKET_finish(&wpkt))
- WPACKET_cleanup(&wpkt);
-
- BUF_MEM_free(buf);
- return rc;
-}
-
-static int do_mutation = 0;
-static QUIC_PKT_HDR *hdr_to_free = NULL;
-
-/*
- * Check packets to transmit, if we have an initial packet
- * Modify the version number to something incorrect
- * so that we trigger a version negotiation
- * Note, this is a use once function, it will only modify the
- * first INITIAL packet it sees, after which it needs to be
- * armed again
- */
-static int script_74_alter_version(const QUIC_PKT_HDR *hdrin,
- const OSSL_QTX_IOVEC *iovecin, size_t numin,
- QUIC_PKT_HDR **hdrout,
- const OSSL_QTX_IOVEC **iovecout,
- size_t *numout,
- void *arg)
-{
- *hdrout = OPENSSL_memdup(hdrin, sizeof(QUIC_PKT_HDR));
- *iovecout = iovecin;
- *numout = numin;
- hdr_to_free = *hdrout;
-
- if (do_mutation == 0)
- return 1;
- do_mutation = 0;
-
- if (hdrin->type == QUIC_PKT_TYPE_INITIAL)
- (*hdrout)->version = 0xdeadbeef;
- return 1;
-}
-
-static void script_74_finish_mutation(void *arg)
-{
- OPENSSL_free(hdr_to_free);
-}
-
-/*
- * Enable the packet mutator for the client channel
- * So that when we send a Initial packet
- * We modify the version to be something invalid
- * to force a version negotiation
- */
-static int script_74_arm_packet_mutator(struct helper *h,
- struct helper_local *hl)
-{
- QUIC_CHANNEL *ch = ossl_quic_conn_get_channel(h->c_conn);
-
- do_mutation = 1;
- if (!ossl_quic_channel_set_mutator(ch, script_74_alter_version,
- script_74_finish_mutation,
- NULL))
- return 0;
- return 1;
-}
-
-static const struct script_op script_74[] = {
- OP_CHECK(script_74_arm_packet_mutator, 0),
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_C_NEW_STREAM_BIDI(a, C_BIDI_ID(0)),
- OP_C_WRITE(a, "apple", 5),
- OP_S_BIND_STREAM_ID(a, C_BIDI_ID(0)),
- OP_S_READ_EXPECT(a, "apple", 5),
-
- OP_END
-};
-
-/* 75. Version negotiation: Unknown version causes connection abort */
-static const struct script_op script_75[] = {
- OP_S_SET_INJECT_DATAGRAM(server_gen_version_neg),
- OP_SET_INJECT_WORD(2, 0),
-
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT_OR_FAIL(),
-
- OP_C_EXPECT_CONN_CLOSE_INFO(OSSL_QUIC_ERR_CONNECTION_REFUSED, 0, 0),
-
- OP_END
-};
-
-/* 76. Test peer-initiated shutdown wait */
-static int script_76_check(struct helper *h, struct helper_local *hl)
-{
- if (!TEST_false(SSL_shutdown_ex(h->c_conn,
- SSL_SHUTDOWN_FLAG_WAIT_PEER
- | SSL_SHUTDOWN_FLAG_NO_BLOCK,
- NULL, 0)))
- return 0;
-
- return 1;
-}
-
-static const struct script_op script_76[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_C_NEW_STREAM_BIDI(a, C_BIDI_ID(0)),
- OP_C_WRITE(a, "apple", 5),
-
- OP_S_BIND_STREAM_ID(a, C_BIDI_ID(0)),
- OP_S_READ_EXPECT(a, "apple", 5),
-
- /* Check a WAIT_PEER call doesn't succeed yet. */
- OP_CHECK(script_76_check, 0),
- OP_S_SHUTDOWN(42),
-
- OP_C_SHUTDOWN_WAIT(NULL, SSL_SHUTDOWN_FLAG_WAIT_PEER),
- OP_C_EXPECT_CONN_CLOSE_INFO(42, 1, 1),
-
- OP_END
-};
-
-/* 77. Ensure default stream popping operates correctly */
-static const struct script_op script_77[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_INCOMING_STREAM_POLICY(SSL_INCOMING_STREAM_POLICY_ACCEPT),
-
- OP_S_NEW_STREAM_BIDI(a, S_BIDI_ID(0)),
- OP_S_WRITE(a, "Strawberry", 10),
-
- OP_C_READ_EXPECT(DEFAULT, "Strawberry", 10),
-
- OP_S_NEW_STREAM_BIDI(b, S_BIDI_ID(1)),
- OP_S_WRITE(b, "xyz", 3),
-
- OP_C_ACCEPT_STREAM_WAIT(b),
- OP_C_READ_EXPECT(b, "xyz", 3),
-
- OP_END
-};
-
-/* 78. Post-connection session ticket handling */
-static size_t new_session_count;
-
-static int on_new_session(SSL *s, SSL_SESSION *sess)
-{
- ++new_session_count;
- return 0; /* do not ref session, we aren't keeping it */
-}
-
-static int setup_session(struct helper *h, struct helper_local *hl)
-{
- SSL_CTX_set_session_cache_mode(h->c_ctx, SSL_SESS_CACHE_BOTH);
- SSL_CTX_sess_set_new_cb(h->c_ctx, on_new_session);
- return 1;
-}
-
-static int trigger_late_session_ticket(struct helper *h, struct helper_local *hl)
-{
- new_session_count = 0;
-
- if (!TEST_true(ossl_quic_tserver_new_ticket(ACQUIRE_S())))
- return 0;
-
- return 1;
-}
-
-static int check_got_session_ticket(struct helper *h, struct helper_local *hl)
-{
- if (!TEST_size_t_gt(new_session_count, 0))
- return 0;
-
- return 1;
-}
-
-static int check_idle_timeout(struct helper *h, struct helper_local *hl);
-
-static const struct script_op script_78[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_CHECK(setup_session, 0),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_C_NEW_STREAM_BIDI(a, C_BIDI_ID(0)),
- OP_C_WRITE(a, "apple", 5),
-
- OP_S_BIND_STREAM_ID(a, C_BIDI_ID(0)),
- OP_S_READ_EXPECT(a, "apple", 5),
-
- OP_S_WRITE(a, "orange", 6),
- OP_C_READ_EXPECT(a, "orange", 6),
-
- OP_CHECK(trigger_late_session_ticket, 0),
-
- OP_S_WRITE(a, "Strawberry", 10),
- OP_C_READ_EXPECT(a, "Strawberry", 10),
-
- OP_CHECK(check_got_session_ticket, 0), OP_CHECK2(check_idle_timeout, SSL_VALUE_CLASS_FEATURE_NEGOTIATED, 30000),
-
- OP_END
-};
-
-/* 79. Optimised FIN test */
-static const struct script_op script_79[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
- OP_C_WRITE_EX2(DEFAULT, "apple", 5, SSL_WRITE_FLAG_CONCLUDE),
- OP_S_BIND_STREAM_ID(a, C_BIDI_ID(0)),
- OP_S_READ_EXPECT(a, "apple", 5),
- OP_S_EXPECT_FIN(a),
- OP_S_WRITE(a, "orange", 6),
- OP_S_CONCLUDE(a),
- OP_C_READ_EXPECT(DEFAULT, "orange", 6),
- OP_C_EXPECT_FIN(DEFAULT),
- OP_END
-};
-
-/* 80. Stateless reset detection test */
-static QUIC_STATELESS_RESET_TOKEN test_reset_token = {
- { 0xde, 0xad, 0xbe, 0xef, 0xde, 0xad, 0xbe, 0xef, 0xde, 0xad, 0xbe, 0xef,
- 0xde, 0xad, 0xbe, 0xef }
-};
-
-/*
- * Generate a packet in the following format:
- * https://www.rfc-editor.org/rfc/rfc9000.html#name-stateless-reset
- * Stateless Reset {
- * Fixed Bits (2): 1
- * Unpredictable bits (38..)
- * Stateless reset token (128)
- * }
- */
-static int script_80_send_stateless_reset(struct helper *h, QUIC_PKT_HDR *hdr,
- unsigned char *buf, size_t len)
-{
- unsigned char databuf[64];
-
- if (h->inject_word1 == 0)
- return 1;
-
- h->inject_word1 = 0;
-
- fprintf(stderr, "Sending stateless reset\n");
-
- RAND_bytes(databuf, 64);
- databuf[0] = 0x40;
- memcpy(&databuf[48], test_reset_token.token,
- sizeof(test_reset_token.token));
-
- if (!TEST_int_eq(SSL_inject_net_dgram(h->c_conn, databuf, sizeof(databuf),
- NULL, h->s_net_bio_addr),
- 1))
- return 0;
-
- return 1;
-}
-
-static int script_80_gen_new_conn_id(struct helper *h, QUIC_PKT_HDR *hdr,
- unsigned char *buf, size_t len)
-{
- int rc = 0;
- size_t l;
- unsigned char frame_buf[64];
- WPACKET wpkt;
- QUIC_CONN_ID new_cid = { 0 };
- OSSL_QUIC_FRAME_NEW_CONN_ID ncid = { 0 };
- QUIC_CHANNEL *ch = ossl_quic_tserver_get_channel(ACQUIRE_S_NOHL());
-
- if (h->inject_word0 == 0)
- return 1;
-
- h->inject_word0 = 0;
-
- fprintf(stderr, "sending new conn id\n");
- if (!TEST_true(WPACKET_init_static_len(&wpkt, frame_buf,
- sizeof(frame_buf), 0)))
- return 0;
-
- ossl_quic_channel_get_diag_local_cid(ch, &new_cid);
-
- ncid.seq_num = 2;
- ncid.retire_prior_to = 2;
- ncid.conn_id = new_cid;
- memcpy(ncid.stateless_reset.token, test_reset_token.token,
- sizeof(test_reset_token.token));
-
- if (!TEST_true(ossl_quic_wire_encode_frame_new_conn_id(&wpkt, &ncid)))
- goto err;
-
- if (!TEST_true(WPACKET_get_total_written(&wpkt, &l)))
- goto err;
-
- if (!qtest_fault_prepend_frame(h->qtf, frame_buf, l))
- goto err;
-
- rc = 1;
-err:
- if (rc)
- WPACKET_finish(&wpkt);
- else
- WPACKET_cleanup(&wpkt);
-
- return rc;
-}
-
-static int script_80_inject_pkt(struct helper *h, QUIC_PKT_HDR *hdr,
- unsigned char *buf, size_t len)
-{
- if (h->inject_word1 == 1)
- return script_80_send_stateless_reset(h, hdr, buf, len);
- else if (h->inject_word0 == 1)
- return script_80_gen_new_conn_id(h, hdr, buf, len);
-
- return 1;
-}
-
-static const struct script_op script_80[] = {
- OP_S_SET_INJECT_PLAIN(script_80_inject_pkt),
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
- OP_C_WRITE(DEFAULT, "apple", 5),
- OP_C_CONCLUDE(DEFAULT),
- OP_S_BIND_STREAM_ID(a, C_BIDI_ID(0)),
- OP_S_READ_EXPECT(a, "apple", 5),
- OP_SET_INJECT_WORD(1, 0),
- OP_S_WRITE(a, "apple", 5),
- OP_C_READ_EXPECT(DEFAULT, "apple", 5),
- OP_SET_INJECT_WORD(0, 1),
- OP_S_WRITE(a, "apple", 5),
- OP_C_EXPECT_CONN_CLOSE_INFO(0, 0, 1),
- OP_END
-};
-
-static int modify_static_tp(struct helper *h, struct helper_local *hl, int ssl_value)
-{
- uint64_t v = 0;
-
- /* Test bad value is rejected. */
- if (!TEST_false(SSL_set_feature_request_uint(h->c_conn,
- ssl_value,
- OSSL_QUIC_VLINT_MAX + 1)))
- return 0;
-
- /* Set value. */
- if (!TEST_true(SSL_set_feature_request_uint(h->c_conn,
- ssl_value,
- hl->check_op->arg2)))
- return 0;
-
- if (!TEST_true(SSL_get_feature_request_uint(h->c_conn,
- ssl_value,
- &v)))
- return 0;
-
- if (!TEST_uint64_t_eq(v, hl->check_op->arg2))
- return 0;
-
- return 1;
-}
-
-static int check_static_tp(struct helper *h, struct helper_local *hl, int ssl_value)
-{
- uint64_t v = 0;
-
- if (!TEST_true(SSL_get_value_uint(h->c_conn, (uint32_t)hl->check_op->arg1,
- ssl_value,
- &v)))
- return 0;
-
- if (!TEST_uint64_t_eq(v, hl->check_op->arg2))
- return 0;
-
- return 1;
-}
-
-static int cannot_change_static_tp(struct helper *h, struct helper_local *hl, int ssl_value)
-{
- uint64_t v = 0;
-
- if (!TEST_true(SSL_get_feature_request_uint(h->c_conn,
- ssl_value,
- &v)))
- return 0;
-
- if (!TEST_uint64_t_eq(v, hl->check_op->arg1))
- return 0;
-
- if (!TEST_false(SSL_set_feature_request_uint(h->c_conn,
- ssl_value,
- hl->check_op->arg2)))
- return 0;
-
- return 1;
-}
-
-static int modify_idle_timeout(struct helper *h, struct helper_local *hl)
-{
- return modify_static_tp(h, hl, SSL_VALUE_QUIC_IDLE_TIMEOUT);
-}
-
-static int check_idle_timeout(struct helper *h, struct helper_local *hl)
-{
- return check_static_tp(h, hl, SSL_VALUE_QUIC_IDLE_TIMEOUT);
-}
-
-static int cannot_change_idle_timeout(struct helper *h, struct helper_local *hl)
-{
- return cannot_change_static_tp(h, hl, SSL_VALUE_QUIC_IDLE_TIMEOUT);
-}
-
-/* 81. Idle timeout configuration */
-static const struct script_op script_81[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_CHECK(modify_idle_timeout, 25000),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_idle_timeout, SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 30000),
- OP_CHECK2(check_idle_timeout, SSL_VALUE_CLASS_FEATURE_NEGOTIATED, 25000),
-
- OP_END
-};
-
-/* 82. Negotiated default idle timeout if not configured */
-static const struct script_op script_82[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_idle_timeout, SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 30000),
- OP_CHECK2(check_idle_timeout, SSL_VALUE_CLASS_FEATURE_NEGOTIATED, 30000),
-
- OP_END
-};
-
-/* 83. No late changes to idle timeout */
-static const struct script_op script_83[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(cannot_change_idle_timeout, 30000, 5000),
- OP_CHECK2(check_idle_timeout, SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 30000),
- OP_CHECK2(check_idle_timeout, SSL_VALUE_CLASS_FEATURE_NEGOTIATED, 30000),
-
- OP_END
-};
-
-/* 84. Test query of available streams */
-static int check_avail_streams(struct helper *h, struct helper_local *hl)
-{
- uint64_t v = 0;
-
- switch (hl->check_op->arg1) {
- case 0:
- if (!TEST_true(SSL_get_quic_stream_bidi_local_avail(h->c_conn, &v)))
- return 0;
- break;
- case 1:
- if (!TEST_true(SSL_get_quic_stream_bidi_remote_avail(h->c_conn, &v)))
- return 0;
- break;
- case 2:
- if (!TEST_true(SSL_get_quic_stream_uni_local_avail(h->c_conn, &v)))
- return 0;
- break;
- case 3:
- if (!TEST_true(SSL_get_quic_stream_uni_remote_avail(h->c_conn, &v)))
- return 0;
- break;
- default:
- return 0;
- }
-
- if (!TEST_uint64_t_eq(v, hl->check_op->arg2))
- return 0;
-
- return 1;
-}
-
-static int set_event_handling_mode_conn(struct helper *h, struct helper_local *hl);
-static int reenable_test_event_handling(struct helper *h, struct helper_local *hl);
-
-static int check_write_buf_stat(struct helper *h, struct helper_local *hl)
-{
- SSL *c_a;
- uint64_t size, used, avail;
-
- if (!TEST_ptr(c_a = helper_local_get_c_stream(hl, "a")))
- return 0;
-
- if (!TEST_true(SSL_get_stream_write_buf_size(c_a, &size))
- || !TEST_true(SSL_get_stream_write_buf_used(c_a, &used))
- || !TEST_true(SSL_get_stream_write_buf_avail(c_a, &avail))
- || !TEST_uint64_t_ge(size, avail)
- || !TEST_uint64_t_ge(size, used)
- || !TEST_uint64_t_eq(avail + used, size))
- return 0;
-
- if (!TEST_uint64_t_eq(used, hl->check_op->arg1))
- return 0;
-
- return 1;
-}
-
-static const struct script_op script_84[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_avail_streams, 0, 100),
- OP_CHECK2(check_avail_streams, 1, 100),
- OP_CHECK2(check_avail_streams, 2, 100),
- OP_CHECK2(check_avail_streams, 3, 100),
-
- OP_C_NEW_STREAM_BIDI(a, C_BIDI_ID(0)),
-
- OP_CHECK2(check_avail_streams, 0, 99),
- OP_CHECK2(check_avail_streams, 1, 100),
- OP_CHECK2(check_avail_streams, 2, 100),
- OP_CHECK2(check_avail_streams, 3, 100),
-
- OP_C_NEW_STREAM_UNI(b, C_UNI_ID(0)),
-
- OP_CHECK2(check_avail_streams, 0, 99),
- OP_CHECK2(check_avail_streams, 1, 100),
- OP_CHECK2(check_avail_streams, 2, 99),
- OP_CHECK2(check_avail_streams, 3, 100),
-
- OP_S_NEW_STREAM_BIDI(c, S_BIDI_ID(0)),
- OP_S_WRITE(c, "x", 1),
-
- OP_C_ACCEPT_STREAM_WAIT(c),
- OP_C_READ_EXPECT(c, "x", 1),
-
- OP_CHECK2(check_avail_streams, 0, 99),
- OP_CHECK2(check_avail_streams, 1, 99),
- OP_CHECK2(check_avail_streams, 2, 99),
- OP_CHECK2(check_avail_streams, 3, 100),
-
- OP_S_NEW_STREAM_UNI(d, S_UNI_ID(0)),
- OP_S_WRITE(d, "x", 1),
-
- OP_C_ACCEPT_STREAM_WAIT(d),
- OP_C_READ_EXPECT(d, "x", 1),
-
- OP_CHECK2(check_avail_streams, 0, 99),
- OP_CHECK2(check_avail_streams, 1, 99),
- OP_CHECK2(check_avail_streams, 2, 99),
- OP_CHECK2(check_avail_streams, 3, 99),
-
- OP_CHECK2(check_write_buf_stat, 0, 0),
- OP_CHECK(set_event_handling_mode_conn, SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT),
- OP_C_WRITE(a, "apple", 5),
- OP_CHECK2(check_write_buf_stat, 5, 0),
-
- OP_CHECK(reenable_test_event_handling, 0),
-
- OP_S_BIND_STREAM_ID(a, C_BIDI_ID(0)),
- OP_S_READ_EXPECT(a, "apple", 5),
- OP_S_WRITE(a, "orange", 6),
- OP_C_READ_EXPECT(a, "orange", 6),
-
- OP_END
-};
-
-/* 85. Test SSL_poll (lite, non-blocking) */
-ossl_unused static int script_85_poll(struct helper *h, struct helper_local *hl)
-{
- int ok = 1, ret, expected_ret = 1;
- static const struct timeval timeout = { 0 };
- size_t result_count, expected_result_count = 0;
- SSL_POLL_ITEM items[5] = { 0 }, *item = items;
- SSL *c_a, *c_b, *c_c, *c_d;
- size_t i;
- uint64_t mode, expected_revents[5] = { 0 };
-
- if (!TEST_ptr(c_a = helper_local_get_c_stream(hl, "a"))
- || !TEST_ptr(c_b = helper_local_get_c_stream(hl, "b"))
- || !TEST_ptr(c_c = helper_local_get_c_stream(hl, "c"))
- || !TEST_ptr(c_d = helper_local_get_c_stream(hl, "d")))
- return 0;
-
- item->desc = SSL_as_poll_descriptor(c_a);
- item->events = UINT64_MAX;
- item->revents = UINT64_MAX;
- ++item;
-
- item->desc = SSL_as_poll_descriptor(c_b);
- item->events = UINT64_MAX;
- item->revents = UINT64_MAX;
- ++item;
-
- item->desc = SSL_as_poll_descriptor(c_c);
- item->events = UINT64_MAX;
- item->revents = UINT64_MAX;
- ++item;
-
- item->desc = SSL_as_poll_descriptor(c_d);
- item->events = UINT64_MAX;
- item->revents = UINT64_MAX;
- ++item;
-
- item->desc = SSL_as_poll_descriptor(h->c_conn);
- item->events = UINT64_MAX;
- item->revents = UINT64_MAX;
- ++item;
-
- result_count = SIZE_MAX;
- ret = SSL_poll(items, OSSL_NELEM(items), sizeof(SSL_POLL_ITEM),
- &timeout, 0,
- &result_count);
-
- mode = hl->check_op->arg2;
- switch (mode) {
- case 0:
- /* No incoming data yet */
- expected_revents[0] = SSL_POLL_EVENT_W;
- expected_revents[1] = SSL_POLL_EVENT_W;
- expected_revents[2] = SSL_POLL_EVENT_W;
- expected_revents[3] = SSL_POLL_EVENT_W;
- expected_revents[4] = SSL_POLL_EVENT_OS;
- expected_result_count = 5;
- break;
- case 1:
- /* Expect more events */
- expected_revents[0] = SSL_POLL_EVENT_W | SSL_POLL_EVENT_R;
- expected_revents[1] = SSL_POLL_EVENT_W | SSL_POLL_EVENT_ER;
- expected_revents[2] = SSL_POLL_EVENT_EW;
- expected_revents[3] = SSL_POLL_EVENT_W;
- expected_revents[4] = SSL_POLL_EVENT_OS | SSL_POLL_EVENT_ISB;
- expected_result_count = 5;
- break;
- default:
- return 0;
- }
-
- if (!TEST_int_eq(ret, expected_ret)
- || !TEST_size_t_eq(result_count, expected_result_count))
- ok = 0;
-
- for (i = 0; i < OSSL_NELEM(items); ++i)
- if (!TEST_uint64_t_eq(items[i].revents, expected_revents[i])) {
- TEST_error("mismatch at index %zu in poll results, mode %d",
- i, (int)mode);
- ok = 0;
- }
-
- return ok;
-}
-
-static const struct script_op script_85[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_C_NEW_STREAM_BIDI(a, C_BIDI_ID(0)),
- OP_C_WRITE(a, "flamingo", 8),
-
- OP_C_NEW_STREAM_BIDI(b, C_BIDI_ID(1)),
- OP_C_WRITE(b, "orange", 6),
-
- OP_C_NEW_STREAM_BIDI(c, C_BIDI_ID(2)),
- OP_C_WRITE(c, "Strawberry", 10),
-
- OP_C_NEW_STREAM_BIDI(d, C_BIDI_ID(3)),
- OP_C_WRITE(d, "sync", 4),
-
- OP_S_BIND_STREAM_ID(a, C_BIDI_ID(0)),
- OP_S_BIND_STREAM_ID(b, C_BIDI_ID(1)),
- OP_S_BIND_STREAM_ID(c, C_BIDI_ID(2)),
- OP_S_BIND_STREAM_ID(d, C_BIDI_ID(3)),
-
- /* Check nothing readable yet. */
- OP_CHECK(script_85_poll, 0),
-
- /* Send something that will make client sockets readable. */
- OP_S_READ_EXPECT(a, "flamingo", 8),
- OP_S_WRITE(a, "herringbone", 11),
-
- /* Send something that will make 'b' reset. */
- OP_S_SET_INJECT_PLAIN(script_28_inject_plain),
- OP_SET_INJECT_WORD(C_BIDI_ID(1) + 1, OSSL_QUIC_FRAME_TYPE_RESET_STREAM),
-
- /* Ensure sync. */
- OP_S_READ_EXPECT(d, "sync", 4),
- OP_S_WRITE(d, "x", 1),
- OP_C_READ_EXPECT(d, "x", 1),
-
- /* Send something that will make 'c' reset. */
- OP_S_SET_INJECT_PLAIN(script_28_inject_plain),
- OP_SET_INJECT_WORD(C_BIDI_ID(2) + 1, OSSL_QUIC_FRAME_TYPE_STOP_SENDING),
-
- OP_S_NEW_STREAM_BIDI(z, S_BIDI_ID(0)),
- OP_S_WRITE(z, "z", 1),
-
- /* Ensure sync. */
- OP_S_WRITE(d, "x", 1),
- OP_C_READ_EXPECT(d, "x", 1),
-
- /* Check a is now readable. */
- OP_CHECK(script_85_poll, 1),
-
- OP_END
-};
-
-#define POLL_FMT "%s%s%s%s%s%s%s%s%s%s%s%s%s"
-#define POLL_PRINTA(_revents_) \
- (_revents_) & SSL_POLL_EVENT_F ? "SSL_POLL_EVENT_F " : "", \
- (_revents_) & SSL_POLL_EVENT_EL ? "SSL_POLL_EVENT_EL " : "", \
- (_revents_) & SSL_POLL_EVENT_EC ? "SSL_POLL_EVENT_EC " : "", \
- (_revents_) & SSL_POLL_EVENT_ECD ? "SSL_POLL_EVENT_ECD " : "", \
- (_revents_) & SSL_POLL_EVENT_ER ? "SSL_POLL_EVENT_ER " : "", \
- (_revents_) & SSL_POLL_EVENT_EW ? "SSL_POLL_EVENT_EW " : "", \
- (_revents_) & SSL_POLL_EVENT_R ? "SSL_POLL_EVENT_R " : "", \
- (_revents_) & SSL_POLL_EVENT_W ? "SSL_POLL_EVENT_W " : "", \
- (_revents_) & SSL_POLL_EVENT_IC ? "SSL_POLL_EVENT_IC " : "", \
- (_revents_) & SSL_POLL_EVENT_ISB ? "SSL_POLL_EVENT_ISB " : "", \
- (_revents_) & SSL_POLL_EVENT_ISU ? "SSL_POLL_EVENT_ISU " : "", \
- (_revents_) & SSL_POLL_EVENT_OSB ? "SSL_POLL_EVENT_OSB " : "", \
- (_revents_) & SSL_POLL_EVENT_OSU ? "SSL_POLL_EVENT_OSU " : ""
-
-/* 88. Test SSL_poll (lite, non-blocking) */
-ossl_unused static int script_88_poll(struct helper *h, struct helper_local *hl)
-{
- int ok = 1, ret, expected_ret = 1;
- static const struct timeval timeout = { 0 };
- size_t result_count, processed;
- SSL_POLL_ITEM items[2] = { 0 }, *item = items;
- SSL *c_a;
- size_t i;
- uint64_t mode, expected_revents[2] = { 0 };
-
- if (!TEST_ptr(c_a = helper_local_get_c_stream(hl, "a")))
- return 0;
-
- item->desc = SSL_as_poll_descriptor(c_a);
- item->events = UINT64_MAX;
- item->revents = UINT64_MAX;
- ++item;
-
- item->desc = SSL_as_poll_descriptor(h->c_conn);
- item->events = UINT64_MAX;
- item->revents = UINT64_MAX;
- ++item;
-
- result_count = SIZE_MAX;
- ret = SSL_poll(items, OSSL_NELEM(items), sizeof(SSL_POLL_ITEM),
- &timeout, 0,
- &result_count);
-
- mode = hl->check_op->arg2;
- switch (mode) {
- case 0:
- /* No incoming data yet */
- expected_revents[0] = SSL_POLL_EVENT_W;
- expected_revents[1] = SSL_POLL_EVENT_OS;
- break;
- case 1:
- /* Expect more events */
- expected_revents[0] = SSL_POLL_EVENT_R;
- expected_revents[1] = SSL_POLL_EVENT_OS;
- break;
- default:
- return 0;
- }
-
- if (!TEST_int_eq(ret, expected_ret))
- ok = 0;
-
- /*
- * Unlike script 85 which always expects all objects
- * get signaled in single call to SSL_poll() we must
- * assume here we can get notification for only one.
- */
- processed = 0;
- for (i = 0; i < OSSL_NELEM(items); ++i) {
- if (items[i].revents == 0)
- continue;
-
- processed++;
- if (!TEST_uint64_t_eq(items[i].revents, expected_revents[i])) {
- TEST_info("wanted: " POLL_FMT " got: " POLL_FMT,
- POLL_PRINTA(expected_revents[i]),
- POLL_PRINTA(items[i].revents));
- TEST_error("mismatch at index %zu in poll results, mode %d",
- i, (int)mode);
- ok = 0;
- }
- }
-
- if (!TEST_size_t_eq(processed, result_count))
- ok = 0;
-
- return ok;
-}
-
-ossl_unused static int script_88_poll_conly(struct helper *h, struct helper_local *hl)
-{
- int ok = 1;
- static const struct timeval timeout = { 0 };
- size_t result_count;
- SSL_POLL_ITEM items[1] = { 0 };
- int done = 0;
- OSSL_TIME t_limit;
-
- result_count = SIZE_MAX;
-
- items[0].desc = SSL_as_poll_descriptor(h->c_conn);
- items[0].events = UINT64_MAX;
- items[0].revents = UINT64_MAX;
-
- t_limit = ossl_time_add(ossl_time_now(),
- ossl_ticks2time(5 * OSSL_TIME_SECOND));
- while (done == 0 && ok == 1) {
- ok = SSL_poll(items, OSSL_NELEM(items), sizeof(SSL_POLL_ITEM),
- &timeout, 0,
- &result_count);
-
- if (!TEST_int_eq(ok, 1))
- continue;
-
- if (result_count == 0)
- OSSL_sleep(10);
-
- TEST_info("received event " POLL_FMT, POLL_PRINTA(items[0].revents));
-
- if ((items[0].revents & SSL_POLL_EVENT_EC) == SSL_POLL_EVENT_EC)
- SSL_shutdown(h->c_conn);
- done = ((items[0].revents & SSL_POLL_EVENT_ECD) == SSL_POLL_EVENT_ECD);
-
- if (ossl_time_compare(ossl_time_now(), t_limit) == 1) {
- TEST_error("shutdown time exceeded 5sec");
- ok = 0;
- }
- }
-
- return ok;
-}
-
-/*
- * verify SSL_poll() signals SSL_POLL_EVENT_EC event
- * to notify client it's time to call SSL_shutdown().
- */
-static const struct script_op script_88[] = {
- OP_SKIP_IF_BLOCKING(16),
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_C_NEW_STREAM_BIDI(a, C_BIDI_ID(0)),
- OP_S_BIND_STREAM_ID(a, C_BIDI_ID(0)),
-
- /* Check nothing readable yet. */
- OP_CHECK(script_88_poll, 0 /* ->arg2 */),
-
- OP_C_WRITE(a, "flamingo", 8),
- OP_C_CONCLUDE(a),
-
- /* Send something that will make client sockets readable. */
- OP_S_READ_EXPECT(a, "flamingo", 8),
- OP_S_WRITE(a, "flamingo", 8),
- OP_S_CONCLUDE(a),
-
- OP_CHECK(script_88_poll, 1 /* ->arg2 */),
-
- OP_C_READ_EXPECT(a, "flamingo", 8),
-
- /*
- * client calls non-blocking SSL_shutdown() and gives
- * server chance to run by calling sleep.
- */
- OP_C_SHUTDOWN(NULL, 0),
- OP_SLEEP(100),
-
- /*
- * Here we call SSL_poll() and handle SSL_POLL_EVENT_EC
- * and SSL_POLL_EVENT_ECD on connection object. Whenever
- * _EC event comes we call SSL_shutdown() to keep connection
- * draining. We keep calling SSL_poll()/SSL_shutdown() until
- * SSL_poll() signals SSL_POLL_EVENT_ECD to let us know connection
- * has dried out and con be closed.
- */
- OP_CHECK(script_88_poll_conly, 0),
-
- OP_END
-};
-/* 86. Event Handling Mode Configuration */
-static int set_event_handling_mode_conn(struct helper *h, struct helper_local *hl)
-{
- hl->explicit_event_handling = 1;
- return SSL_set_event_handling_mode(h->c_conn, hl->check_op->arg2);
-}
-
-static int reenable_test_event_handling(struct helper *h, struct helper_local *hl)
-{
- hl->explicit_event_handling = 0;
- return 1;
-}
-
-static ossl_unused int set_event_handling_mode_stream(struct helper *h, struct helper_local *hl)
-{
- SSL *ssl = helper_local_get_c_stream(hl, "a");
-
- if (!TEST_ptr(ssl))
- return 0;
-
- return SSL_set_event_handling_mode(ssl, hl->check_op->arg2);
-}
-
-static const struct script_op script_86[] = {
- OP_SKIP_IF_BLOCKING(23),
-
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- /* Turn on explicit handling mode. */
- OP_CHECK(set_event_handling_mode_conn, SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT),
-
- /*
- * Create a new stream and write data. This won't get sent
- * to the network net because we are in explicit mode
- * and we haven't called SSL_handle_events().
- */
- OP_C_NEW_STREAM_BIDI(a, C_BIDI_ID(0)),
- OP_C_WRITE(a, "apple", 5),
-
- /* Put connection back into implicit handling mode. */
- OP_CHECK(set_event_handling_mode_conn, SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT),
-
- /* Override at stream level. */
- OP_CHECK(set_event_handling_mode_stream, SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT),
- OP_C_WRITE(a, "orange", 6),
- OP_C_CONCLUDE(a),
-
- /*
- * Confirm the data isn't going to arrive. OP_SLEEP is always undesirable
- * but we have no reasonable way to synchronise on something not arriving
- * given all network traffic is essentially stopped and there are no other
- * signals arriving from the peer which could be used for synchronisation.
- * Slow OSes will pass this anyway (fail-open).
- */
- OP_S_BIND_STREAM_ID(a, C_BIDI_ID(0)),
-
- OP_BEGIN_REPEAT(20),
- OP_S_READ_FAIL(a, 1),
- OP_SLEEP(10),
- OP_END_REPEAT(),
-
- /* Now let the data arrive and confirm it arrives. */
- OP_CHECK(reenable_test_event_handling, 0),
- OP_S_READ_EXPECT(a, "appleorange", 11),
- OP_S_EXPECT_FIN(a),
-
- /* Back into explicit mode. */
- OP_CHECK(set_event_handling_mode_conn,
- SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT),
- OP_S_WRITE(a, "ok", 2),
- OP_C_READ_FAIL(a),
-
- /* Works once event handling is done. */
- OP_CHECK(reenable_test_event_handling, 0),
- OP_C_READ_EXPECT(a, "ok", 2),
-
- OP_END
-};
-
-/* 87. Test stream reset functionality */
-static const struct script_op script_87[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
- OP_C_NEW_STREAM_BIDI(a, C_BIDI_ID(0)),
- OP_C_WRITE(a, "apple", 5),
- OP_C_CONCLUDE(a),
- OP_S_BIND_STREAM_ID(a, C_BIDI_ID(0)),
- OP_S_READ_EXPECT(a, "apple", 5),
- OP_S_EXPECT_FIN(a),
- OP_S_WRITE(a, "orange", 6),
- OP_C_READ_EXPECT(a, "orange", 6),
- OP_S_CONCLUDE(a),
- OP_C_EXPECT_FIN(a),
- OP_SLEEP(1000),
- OP_C_STREAM_RESET_FAIL(a, 42),
- OP_END
-};
-
-static int modify_udp_payload_size_max(struct helper *h, struct helper_local *hl)
-{
- if (!TEST_false(SSL_set_feature_request_uint(h->c_conn,
- SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX,
- QUIC_MIN_INITIAL_DGRAM_LEN - 1)))
- return 0;
-
- if (!TEST_false(SSL_set_feature_request_uint(h->c_conn,
- SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX,
- QUIC_DEFAULT_MAX_UDP_PAYLOAD_SIZE + 1)))
- return 0;
-
- return modify_static_tp(h, hl, SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX);
-}
-
-static int check_udp_payload_size_max(struct helper *h, struct helper_local *hl)
-{
- return check_static_tp(h, hl, SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX);
-}
-
-static int cannot_change_udp_payload_size_max(struct helper *h, struct helper_local *hl)
-{
- return cannot_change_static_tp(h, hl, SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX);
-}
-
-/* 89. Max udp payload size configuration */
-static const struct script_op script_89[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_CHECK(modify_udp_payload_size_max, QUIC_DEFAULT_MAX_UDP_PAYLOAD_SIZE),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_udp_payload_size_max,
- SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_MIN_INITIAL_DGRAM_LEN),
- OP_CHECK2(check_udp_payload_size_max,
- SSL_VALUE_CLASS_FEATURE_REQUEST, QUIC_DEFAULT_MAX_UDP_PAYLOAD_SIZE),
-
- OP_END
-};
-
-/* 90. Negotiated default max udp payload size if not configured */
-static const struct script_op script_90[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_udp_payload_size_max,
- SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_MIN_INITIAL_DGRAM_LEN),
- OP_CHECK2(check_udp_payload_size_max,
- SSL_VALUE_CLASS_FEATURE_REQUEST, QUIC_MIN_INITIAL_DGRAM_LEN),
-
- OP_END
-};
-
-/* 91. No late changes to max udp payload size */
-static const struct script_op script_91[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(cannot_change_udp_payload_size_max, QUIC_MIN_INITIAL_DGRAM_LEN,
- QUIC_DEFAULT_MAX_UDP_PAYLOAD_SIZE),
- OP_CHECK2(check_udp_payload_size_max,
- SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_MIN_INITIAL_DGRAM_LEN),
-
- OP_END
-};
-
-static int modify_window_con(struct helper *h, struct helper_local *hl)
-{
- return modify_static_tp(h, hl, SSL_VALUE_QUIC_WINDOWCON);
-}
-
-static int check_window_con(struct helper *h, struct helper_local *hl)
-{
- return check_static_tp(h, hl, SSL_VALUE_QUIC_WINDOWCON);
-}
-
-static int cannot_change_window_con(struct helper *h, struct helper_local *hl)
-{
- return cannot_change_static_tp(h, hl, SSL_VALUE_QUIC_WINDOWCON);
-}
-
-/* 92. Connection window configuration */
-static const struct script_op script_92[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_CHECK(modify_window_con, 800000),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_window_con, SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 768 * 1024),
- OP_CHECK2(check_window_con, SSL_VALUE_CLASS_FEATURE_REQUEST, 800000),
-
- OP_END
-};
-
-/* 93. Negotiated default connection window if not configured */
-static const struct script_op script_93[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_window_con, SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 768 * 1024),
- OP_CHECK2(check_window_con, SSL_VALUE_CLASS_FEATURE_REQUEST, 768 * 1024),
-
- OP_END
-};
-
-/* 94. No late changes to connection window */
-static const struct script_op script_94[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(cannot_change_window_con, 768 * 1024, 800000),
- OP_CHECK2(check_window_con, SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 768 * 1024),
-
- OP_END
-};
-
-static int modify_window_bidi_stream(struct helper *h, struct helper_local *hl)
-{
- return modify_static_tp(h, hl, SSL_VALUE_QUIC_WINDOWBSTR);
-}
-
-static int check_window_bidi_stream(struct helper *h, struct helper_local *hl)
-{
- return check_static_tp(h, hl, SSL_VALUE_QUIC_WINDOWBSTR);
-}
-
-static int cannot_change_window_bidi_stream(struct helper *h, struct helper_local *hl)
-{
- return cannot_change_static_tp(h, hl, SSL_VALUE_QUIC_WINDOWBSTR);
-}
-
-/* 95. Bidi stream window configuration */
-static const struct script_op script_95[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_CHECK(modify_window_bidi_stream, 600000),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_window_bidi_stream, SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 512 * 1024),
- OP_CHECK2(check_window_bidi_stream, SSL_VALUE_CLASS_FEATURE_REQUEST, 600000),
-
- OP_END
-};
-
-/* 96. Negotiated default bidi stream window if not configured */
-static const struct script_op script_96[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_window_bidi_stream, SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 512 * 1024),
- OP_CHECK2(check_window_bidi_stream, SSL_VALUE_CLASS_FEATURE_REQUEST, 512 * 1024),
-
- OP_END
-};
-
-/* 97. No late changes to bidi stream window */
-static const struct script_op script_97[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(cannot_change_window_bidi_stream, 512 * 1024, 600000),
- OP_CHECK2(check_window_bidi_stream, SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 512 * 1024),
-
- OP_END
-};
-
-static int modify_window_uni_stream(struct helper *h, struct helper_local *hl)
-{
- return modify_static_tp(h, hl, SSL_VALUE_QUIC_WINDOWUSTR);
-}
-
-static int check_window_uni_stream(struct helper *h, struct helper_local *hl)
-{
- return check_static_tp(h, hl, SSL_VALUE_QUIC_WINDOWUSTR);
-}
-
-static int cannot_change_window_uni_stream(struct helper *h, struct helper_local *hl)
-{
- return cannot_change_static_tp(h, hl, SSL_VALUE_QUIC_WINDOWUSTR);
-}
-
-/* 98. Uni stream window configuration */
-static const struct script_op script_98[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_CHECK(modify_window_uni_stream, 600000),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_window_uni_stream, SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 512 * 1024),
- OP_CHECK2(check_window_uni_stream, SSL_VALUE_CLASS_FEATURE_REQUEST, 600000),
-
- OP_END
-};
-
-/* 99. Negotiated default uni stream window if not configured */
-static const struct script_op script_99[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_window_uni_stream, SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 512 * 1024),
- OP_CHECK2(check_window_uni_stream, SSL_VALUE_CLASS_FEATURE_REQUEST, 512 * 1024),
-
- OP_END
-};
-
-/* 100. No late changes to uni stream window */
-static const struct script_op script_100[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(cannot_change_window_uni_stream, 512 * 1024, 600000),
- OP_CHECK2(check_window_uni_stream, SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 512 * 1024),
-
- OP_END
-};
-
-static int
-modify_ack_delay_exponent(struct helper *h, struct helper_local *hl)
-{
- if (!TEST_false(SSL_set_feature_request_uint(h->c_conn,
- SSL_VALUE_QUIC_ACK_DELAY_EXPONENT,
- QUIC_MAX_ACK_DELAY_EXP + 1)))
- return 0;
-
- return modify_static_tp(h, hl, SSL_VALUE_QUIC_ACK_DELAY_EXPONENT);
-}
-
-static int check_ack_delay_exponent(struct helper *h, struct helper_local *hl)
-{
- return check_static_tp(h, hl, SSL_VALUE_QUIC_ACK_DELAY_EXPONENT);
-}
-
-static int cannot_change_ack_delay_exponent(struct helper *h, struct helper_local *hl)
-{
- return cannot_change_static_tp(h, hl, SSL_VALUE_QUIC_ACK_DELAY_EXPONENT);
-}
-
-/* 101. Ack delay exponent configuration */
-static const struct script_op script_101[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_CHECK(modify_ack_delay_exponent, QUIC_DEFAULT_ACK_DELAY_EXP + 1),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_ack_delay_exponent,
- SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_DEFAULT_ACK_DELAY_EXP),
- OP_CHECK2(check_ack_delay_exponent,
- SSL_VALUE_CLASS_FEATURE_REQUEST, QUIC_DEFAULT_ACK_DELAY_EXP + 1),
-
- OP_END
-};
-
-/* 102. Negotiated default ack delay exponent if not configured */
-static const struct script_op script_102[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_ack_delay_exponent,
- SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_DEFAULT_ACK_DELAY_EXP),
- OP_CHECK2(check_ack_delay_exponent,
- SSL_VALUE_CLASS_FEATURE_REQUEST, QUIC_DEFAULT_ACK_DELAY_EXP),
-
- OP_END
-};
-
-/* 103. No late changes to ack delay exponent */
-static const struct script_op script_103[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(cannot_change_ack_delay_exponent, QUIC_DEFAULT_ACK_DELAY_EXP,
- QUIC_DEFAULT_ACK_DELAY_EXP + 1),
- OP_CHECK2(check_ack_delay_exponent,
- SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_DEFAULT_ACK_DELAY_EXP),
-
- OP_END
-};
-
-static int modify_ack_delay_max(struct helper *h, struct helper_local *hl)
-{
- if (!TEST_false(SSL_set_feature_request_uint(h->c_conn,
- SSL_VALUE_QUIC_ACK_DELAY_MAX,
- QUIC_MAX_MAX_ACK_DELAY + 1)))
- return 0;
-
- return modify_static_tp(h, hl, SSL_VALUE_QUIC_ACK_DELAY_MAX);
-}
-
-static int check_ack_delay_max(struct helper *h, struct helper_local *hl)
-{
- return check_static_tp(h, hl, SSL_VALUE_QUIC_ACK_DELAY_MAX);
-}
-
-static int cannot_change_ack_delay_max(struct helper *h, struct helper_local *hl)
-{
- return cannot_change_static_tp(h, hl, SSL_VALUE_QUIC_ACK_DELAY_MAX);
-}
-
-/* 104. Max ack delay configuration */
-static const struct script_op script_104[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_CHECK(modify_ack_delay_max, QUIC_DEFAULT_MAX_ACK_DELAY / 2),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_ack_delay_max,
- SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_DEFAULT_MAX_ACK_DELAY),
- OP_CHECK2(check_ack_delay_max,
- SSL_VALUE_CLASS_FEATURE_REQUEST, QUIC_DEFAULT_MAX_ACK_DELAY / 2),
-
- OP_END
-};
-
-/* 105. Negotiated default max ack delay if not configured */
-static const struct script_op script_105[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(check_ack_delay_max,
- SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_DEFAULT_MAX_ACK_DELAY),
- OP_CHECK2(check_ack_delay_max,
- SSL_VALUE_CLASS_FEATURE_REQUEST, QUIC_DEFAULT_MAX_ACK_DELAY),
-
- OP_END
-};
-
-/* 106. No late changes to max ack delay */
-static const struct script_op script_106[] = {
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT(),
-
- OP_C_SET_DEFAULT_STREAM_MODE(SSL_DEFAULT_STREAM_MODE_NONE),
-
- OP_CHECK2(cannot_change_ack_delay_max, QUIC_DEFAULT_MAX_ACK_DELAY,
- QUIC_DEFAULT_MAX_ACK_DELAY / 2),
- OP_CHECK2(check_ack_delay_max,
- SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_DEFAULT_MAX_ACK_DELAY),
-
- OP_END
-};
-
-static const struct script_op *const scripts[] = {
- script_1,
- script_2,
- script_3,
- script_4,
- script_5,
- script_6,
- script_7,
- script_8,
- script_9,
- script_10,
- script_11,
- script_12,
- script_13,
- script_14,
- script_15,
- script_16,
- script_17,
- script_18,
- script_19,
- script_20,
- script_21,
- script_22,
- script_23,
- script_24,
- script_25,
- script_26,
- script_27,
- script_28,
- script_29,
- script_30,
- script_31,
- script_32,
- script_33,
- script_34,
- script_35,
- script_36,
- script_37,
- script_38,
- script_39,
- script_40,
- script_41,
- script_42,
- script_43,
- script_44,
- script_45,
- script_46,
- script_47,
- script_48,
- script_49,
- script_50,
- script_51,
- script_52,
- script_53,
- script_54,
- script_55,
- script_56,
- script_57,
- script_58,
- script_59,
- script_60,
- script_61,
- script_62,
- script_63,
- script_64,
- script_65,
- script_66,
- script_67,
- script_68,
- script_69,
- script_70,
- script_71,
- script_72,
- script_73,
- script_74,
- script_75,
- script_76,
- script_77,
- script_78,
- script_79,
- script_80,
- script_81,
- script_82,
- script_83,
- script_84,
- script_85,
- script_86,
- script_87,
- script_88,
- script_89,
- script_90,
- script_91,
- script_92,
- script_93,
- script_94,
- script_95,
- script_96,
- script_97,
- script_98,
- script_99,
- script_100,
- script_101,
- script_102,
- script_103,
- script_104,
- script_105,
- script_106,
-};
-
-static int test_script(int idx)
-{
- int script_idx, free_order, blocking;
- char script_name[64];
-
- free_order = idx % 2;
- idx /= 2;
-
- blocking = idx % 2;
- idx /= 2;
-
- script_idx = idx;
-
- if (blocking && free_order)
- return 1; /* don't need to test free_order twice */
-
-#if !defined(OPENSSL_THREADS)
- if (blocking) {
- TEST_skip("cannot test in blocking mode without threads");
- return 1;
- }
-#endif
-
- snprintf(script_name, sizeof(script_name), "script %d", script_idx + 1);
-
- TEST_info("Running script %d (order=%d, blocking=%d)", script_idx + 1,
- free_order, blocking);
-
- return run_script(scripts[script_idx], script_name, free_order, blocking);
-}
-
-/* Dynamically generated tests. */
-static struct script_op dyn_frame_types_script[] = {
- OP_S_SET_INJECT_PLAIN(script_21_inject_plain),
- OP_SET_INJECT_WORD(0, 0), /* dynamic */
-
- OP_C_SET_ALPN("ossltest"),
- OP_C_CONNECT_WAIT_OR_FAIL(),
-
- OP_C_EXPECT_CONN_CLOSE_INFO(OSSL_QUIC_ERR_FRAME_ENCODING_ERROR, 0, 0),
-
- OP_END
-};
-
-struct forbidden_frame_type {
- uint64_t pkt_type, frame_type, expected_err;
-};
-
-static const struct forbidden_frame_type forbidden_frame_types[] = {
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_VLINT_MAX, OSSL_QUIC_ERR_FRAME_ENCODING_ERROR },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_VLINT_MAX, OSSL_QUIC_ERR_FRAME_ENCODING_ERROR },
- { QUIC_PKT_TYPE_1RTT, OSSL_QUIC_VLINT_MAX, OSSL_QUIC_ERR_FRAME_ENCODING_ERROR },
-
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_STREAM, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_RESET_STREAM, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_STOP_SENDING, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_NEW_TOKEN, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_MAX_DATA, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_MAX_STREAM_DATA, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_MAX_STREAMS_BIDI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_MAX_STREAMS_UNI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_DATA_BLOCKED, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_STREAM_DATA_BLOCKED, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_STREAMS_BLOCKED_BIDI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_STREAMS_BLOCKED_UNI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_NEW_CONN_ID, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_RETIRE_CONN_ID, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_PATH_CHALLENGE, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_PATH_RESPONSE, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_CONN_CLOSE_APP, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_HANDSHAKE_DONE, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
-
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_STREAM, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_RESET_STREAM, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_STOP_SENDING, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_NEW_TOKEN, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_MAX_DATA, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_MAX_STREAM_DATA, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_MAX_STREAMS_BIDI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_MAX_STREAMS_UNI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_DATA_BLOCKED, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_STREAM_DATA_BLOCKED, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_STREAMS_BLOCKED_BIDI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_STREAMS_BLOCKED_UNI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_NEW_CONN_ID, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_RETIRE_CONN_ID, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_PATH_CHALLENGE, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_PATH_RESPONSE, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_CONN_CLOSE_APP, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
- { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_HANDSHAKE_DONE, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
-
- /* Client uses a zero-length CID so this is not allowed. */
- { QUIC_PKT_TYPE_1RTT, OSSL_QUIC_FRAME_TYPE_RETIRE_CONN_ID, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
-};
-
-static ossl_unused int test_dyn_frame_types(int idx)
-{
- size_t i;
- char script_name[64];
- struct script_op *s = dyn_frame_types_script;
-
- for (i = 0; i < OSSL_NELEM(dyn_frame_types_script); ++i)
- if (s[i].op == OPK_SET_INJECT_WORD) {
- s[i].arg1 = (size_t)forbidden_frame_types[idx].pkt_type;
- s[i].arg2 = forbidden_frame_types[idx].frame_type;
- } else if (s[i].op == OPK_C_EXPECT_CONN_CLOSE_INFO) {
- s[i].arg2 = forbidden_frame_types[idx].expected_err;
- }
-
- snprintf(script_name, sizeof(script_name),
- "dyn script %d", idx);
-
- return run_script(dyn_frame_types_script, script_name, 0, 0);
-}
-
-OPT_TEST_DECLARE_USAGE("certfile privkeyfile\n")
-
-int setup_tests(void)
-{
-#if defined(_PUT_MODEL_)
- return TEST_skip("QUIC is not supported by this build");
-#endif
-
- if (!test_skip_common_options()) {
- TEST_error("Error parsing test options\n");
- return 0;
- }
-
- if (!TEST_ptr(certfile = test_get_argument(0))
- || !TEST_ptr(keyfile = test_get_argument(1)))
- return 0;
-
- ADD_ALL_TESTS(test_dyn_frame_types, OSSL_NELEM(forbidden_frame_types));
- ADD_ALL_TESTS(test_script, OSSL_NELEM(scripts) * 2 * 2);
- return 1;
-}
diff --git a/test/radix/quic_ops.c b/test/radix/quic_ops.c
index f1e6147842..c16509ea89 100644
--- a/test/radix/quic_ops.c
+++ b/test/radix/quic_ops.c
@@ -382,6 +382,11 @@ DEF_FUNC(hf_accept_conn)
if (conn == NULL)
F_SPIN_AGAIN();
+ if (!TEST_true(SSL_set_blocking_mode(conn, 0))) {
+ SSL_free(conn);
+ goto err;
+ }
+
if (!TEST_true(RADIX_PROCESS_set_ssl(RP(), conn_name, conn))) {
SSL_free(conn);
goto err;
@@ -441,7 +446,7 @@ DEF_FUNC(hf_pop_err)
return 1;
}
-DEF_FUNC(hf_stream_reset)
+static int hf_stream_reset_impl(FUNC_CTX *fctx, int expect_success)
{
int ok = 0;
const char *name;
@@ -451,14 +456,29 @@ DEF_FUNC(hf_stream_reset)
F_POP2(name, args.quic_error_code);
REQUIRE_SSL(ssl);
- if (!TEST_true(SSL_stream_reset(ssl, &args, sizeof(args))))
- goto err;
+ if (expect_success) {
+ if (!TEST_true(SSL_stream_reset(ssl, &args, sizeof(args))))
+ goto err;
+ } else {
+ if (!TEST_false(SSL_stream_reset(ssl, &args, sizeof(args))))
+ goto err;
+ }
ok = 1;
err:
return ok;
}
+DEF_FUNC(hf_stream_reset)
+{
+ return hf_stream_reset_impl(fctx, 1);
+}
+
+DEF_FUNC(hf_stream_reset_fail)
+{
+ return hf_stream_reset_impl(fctx, 0);
+}
+
DEF_FUNC(hf_set_default_stream_mode)
{
int ok = 0;
@@ -476,6 +496,23 @@ err:
return ok;
}
+DEF_FUNC(hf_set_event_handling_mode)
+{
+ int ok = 0;
+ uint64_t mode;
+ SSL *ssl;
+
+ F_POP(mode);
+ REQUIRE_SSL(ssl);
+
+ if (!TEST_true(SSL_set_event_handling_mode(ssl, mode)))
+ goto err;
+
+ ok = 1;
+err:
+ return ok;
+}
+
DEF_FUNC(hf_set_incoming_stream_policy)
{
int ok = 0;
@@ -494,7 +531,7 @@ err:
return ok;
}
-DEF_FUNC(hf_shutdown_wait)
+static int hf_shutdown_impl(FUNC_CTX *fctx, int retry)
{
int ok = 0, ret;
uint64_t flags;
@@ -514,7 +551,7 @@ DEF_FUNC(hf_shutdown_wait)
if (!TEST_int_ge(ret, 0))
goto err;
- if (ret == 0)
+ if (retry && ret == 0)
F_SPIN_AGAIN();
ok = 1;
@@ -522,6 +559,25 @@ err:
return ok;
}
+DEF_FUNC(hf_shutdown_wait)
+{
+ return hf_shutdown_impl(fctx, 1);
+}
+
+/*
+ * Like hf_shutdown_wait, but only calls SSL_shutdown_ex() once rather than
+ * retrying until it reports the shutdown fully complete. Use only when the
+ * script itself is testing an app-managed, poll-driven shutdown sequence
+ * (e.g. a single non-blocking SSL_shutdown_ex() call followed by the script
+ * manually polling and re-driving shutdown) — hf_shutdown_wait's retry loop
+ * would otherwise drive the shutdown to completion here and there, silently
+ * bypassing the very sequence under test.
+ */
+DEF_FUNC(hf_shutdown_once)
+{
+ return hf_shutdown_impl(fctx, 0);
+}
+
DEF_FUNC(hf_conclude)
{
int ok = 0;
@@ -1715,6 +1771,173 @@ err:
return ok;
}
+DEF_FUNC(hf_set_max_early_data)
+{
+ int ok = 0;
+ uint64_t value;
+ SSL *ssl;
+ QUIC_CHANNEL *ch;
+
+ F_POP(value);
+ REQUIRE_SSL(ssl);
+
+ ch = ossl_quic_conn_get_channel(ssl);
+ if (!TEST_true(SSL_set_max_early_data(ossl_quic_channel_get0_tls(ch),
+ (uint32_t)value)))
+ goto err;
+
+ ok = 1;
+err:
+ return ok;
+}
+
+DEF_FUNC(hf_stream_limit_probe)
+{
+ int ok = 0;
+ SSL *conn, *stream;
+ uint64_t flags, count, min_fail, fail_count = 0, i;
+ size_t written;
+
+ F_POP2(count, min_fail);
+ F_POP(flags);
+ REQUIRE_SSL(conn);
+
+ for (i = 0; i < count; ++i) {
+ stream = SSL_new_stream(conn, flags);
+ if (stream == NULL) {
+ if (!TEST_size_t_eq((size_t)ERR_GET_REASON(ERR_peek_last_error()),
+ (size_t)SSL_R_STREAM_COUNT_LIMITED))
+ goto err;
+
+ ++fail_count;
+ continue;
+ }
+
+ if (!TEST_true(SSL_write_ex(stream, "apple", 5, &written))) {
+ SSL_free(stream);
+ goto err;
+ }
+
+ SSL_free(stream);
+ }
+
+ if (!TEST_uint64_t_ge(fail_count, min_fail))
+ goto err;
+
+ ok = 1;
+err:
+ return ok;
+}
+
+DEF_FUNC(hf_check_idle_timeout)
+{
+ int ok = 0;
+ SSL *ssl;
+ uint64_t value_class, expected, v = 0;
+
+ F_POP(expected);
+ F_POP(value_class);
+ REQUIRE_SSL(ssl);
+
+ if (!TEST_true(SSL_get_value_uint(ssl, (uint32_t)value_class,
+ SSL_VALUE_QUIC_IDLE_TIMEOUT, &v))
+ || !TEST_uint64_t_eq(v, expected))
+ goto err;
+
+ ok = 1;
+err:
+ return ok;
+}
+
+DEF_FUNC(hf_modify_value_uint)
+{
+ int ok = 0;
+ SSL *ssl;
+ uint64_t ssl_value, requested, v = 0;
+
+ F_POP(requested);
+ F_POP(ssl_value);
+ REQUIRE_SSL(ssl);
+
+ /* Test bad value is rejected. */
+ if (!TEST_false(SSL_set_feature_request_uint(ssl, (uint32_t)ssl_value,
+ OSSL_QUIC_VLINT_MAX + 1)))
+ goto err;
+
+ /* Set value. */
+ if (!TEST_true(SSL_set_feature_request_uint(ssl, (uint32_t)ssl_value,
+ requested))
+ || !TEST_true(SSL_get_feature_request_uint(ssl, (uint32_t)ssl_value, &v))
+ || !TEST_uint64_t_eq(v, requested))
+ goto err;
+
+ ok = 1;
+err:
+ return ok;
+}
+
+DEF_FUNC(hf_reject_value_uint)
+{
+ int ok = 0;
+ SSL *ssl;
+ uint64_t ssl_value, bad;
+
+ F_POP(bad);
+ F_POP(ssl_value);
+ REQUIRE_SSL(ssl);
+
+ if (!TEST_false(SSL_set_feature_request_uint(ssl, (uint32_t)ssl_value,
+ bad)))
+ goto err;
+
+ ok = 1;
+err:
+ return ok;
+}
+
+DEF_FUNC(hf_check_value_uint)
+{
+ int ok = 0;
+ SSL *ssl;
+ uint64_t ssl_value, value_class, expected, v = 0;
+
+ F_POP(expected);
+ F_POP(value_class);
+ F_POP(ssl_value);
+ REQUIRE_SSL(ssl);
+
+ if (!TEST_true(SSL_get_value_uint(ssl, (uint32_t)value_class,
+ (uint32_t)ssl_value, &v))
+ || !TEST_uint64_t_eq(v, expected))
+ goto err;
+
+ ok = 1;
+err:
+ return ok;
+}
+
+DEF_FUNC(hf_cannot_change_value_uint)
+{
+ int ok = 0;
+ SSL *ssl;
+ uint64_t ssl_value, current, requested, v = 0;
+
+ F_POP(requested);
+ F_POP(current);
+ F_POP(ssl_value);
+ REQUIRE_SSL(ssl);
+
+ if (!TEST_true(SSL_get_feature_request_uint(ssl, (uint32_t)ssl_value, &v))
+ || !TEST_uint64_t_eq(v, current)
+ || !TEST_false(SSL_set_feature_request_uint(ssl, (uint32_t)ssl_value,
+ requested)))
+ goto err;
+
+ ok = 1;
+err:
+ return ok;
+}
+
#define OP_UNBIND(name) \
(OP_PUSH_PZ(#name), \
OP_FUNC(hf_unbind))
@@ -1892,6 +2115,11 @@ err:
OP_PUSH_U64(mode), \
OP_FUNC(hf_set_default_stream_mode))
+#define OP_SET_EVENT_HANDLING_MODE(name, mode) \
+ (OP_SELECT_SSL(0, name), \
+ OP_PUSH_U64(mode), \
+ OP_FUNC(hf_set_event_handling_mode))
+
#define OP_SET_INCOMING_STREAM_POLICY(name, policy, error_code) \
(OP_SELECT_SSL(0, name), \
OP_PUSH_U64(policy), \
@@ -1904,6 +2132,12 @@ err:
OP_PUSH_U64(error_code), \
OP_FUNC(hf_stream_reset))
+#define OP_STREAM_RESET_FAIL(name, error_code) \
+ (OP_SELECT_SSL(0, name), \
+ OP_PUSH_PZ(#name), \
+ OP_PUSH_U64(error_code), \
+ OP_FUNC(hf_stream_reset_fail))
+
#define OP_SHUTDOWN_WAIT(name, flags, error_code, reason) \
(OP_SELECT_SSL(0, name), \
OP_PUSH_U64(flags), \
@@ -1911,6 +2145,13 @@ err:
OP_PUSH_PZ(reason), \
OP_FUNC(hf_shutdown_wait))
+#define OP_SHUTDOWN_ONCE(name, flags, error_code, reason) \
+ (OP_SELECT_SSL(0, name), \
+ OP_PUSH_U64(flags), \
+ OP_PUSH_U64(error_code), \
+ OP_PUSH_PZ(reason), \
+ OP_FUNC(hf_shutdown_once))
+
#define OP_EXPECT_FIN(name) \
(OP_SELECT_SSL(0, name), \
OP_FUNC(hf_expect_fin))
@@ -2067,3 +2308,47 @@ err:
(OP_SELECT_SSL(0, name), \
OP_PUSH_SIZE(size), \
OP_FUNC(hf_set_write_buf_size))
+
+#define OP_SET_MAX_EARLY_DATA(name, value) \
+ (OP_SELECT_SSL(0, name), \
+ OP_PUSH_U64(value), \
+ OP_FUNC(hf_set_max_early_data))
+
+#define OP_STREAM_LIMIT_PROBE(conn_name, flags, count, min_fail) \
+ (OP_SELECT_SSL(0, conn_name), \
+ OP_PUSH_U64(flags), \
+ OP_PUSH_U64(count), \
+ OP_PUSH_U64(min_fail), \
+ OP_FUNC(hf_stream_limit_probe))
+
+#define OP_CHECK_IDLE_TIMEOUT(name, value_class, expected_ms) \
+ (OP_SELECT_SSL(0, name), \
+ OP_PUSH_U64(value_class), \
+ OP_PUSH_U64(expected_ms), \
+ OP_FUNC(hf_check_idle_timeout))
+
+#define OP_MODIFY_VALUE_UINT(name, ssl_value, requested) \
+ (OP_SELECT_SSL(0, name), \
+ OP_PUSH_U64(ssl_value), \
+ OP_PUSH_U64(requested), \
+ OP_FUNC(hf_modify_value_uint))
+
+#define OP_REJECT_VALUE_UINT(name, ssl_value, bad) \
+ (OP_SELECT_SSL(0, name), \
+ OP_PUSH_U64(ssl_value), \
+ OP_PUSH_U64(bad), \
+ OP_FUNC(hf_reject_value_uint))
+
+#define OP_CHECK_VALUE_UINT(name, ssl_value, value_class, expected) \
+ (OP_SELECT_SSL(0, name), \
+ OP_PUSH_U64(ssl_value), \
+ OP_PUSH_U64(value_class), \
+ OP_PUSH_U64(expected), \
+ OP_FUNC(hf_check_value_uint))
+
+#define OP_CANNOT_CHANGE_VALUE_UINT(name, ssl_value, current, requested) \
+ (OP_SELECT_SSL(0, name), \
+ OP_PUSH_U64(ssl_value), \
+ OP_PUSH_U64(current), \
+ OP_PUSH_U64(requested), \
+ OP_FUNC(hf_cannot_change_value_uint))
diff --git a/test/radix/quic_tests.c b/test/radix/quic_tests.c
index c23f299764..5b6a84db38 100644
--- a/test/radix/quic_tests.c
+++ b/test/radix/quic_tests.c
@@ -1039,20 +1039,6 @@ err:
return ok;
}
-/*
- * script_5 - script_106 are place holders for tests we
- * currently keep in test/quic_multistream_test.c.
- * We need to move those here so we can get rid off
- * QUIC T-server mock-up.
- *
- * there should be one PR for each script being moved here,
- * to make reviewer's life easier. Once all scripts will be
- * moved we can find better names for script_5, ..., script_106.
- *
- * The scaffolding here hopes to avoid conflicts in 'scripts'
- * array below when more PRs will be in flight.
- */
-
/* 5. Test stream reset functionality */
DEF_SCRIPT(script_5, "Test stream reset functionality")
{
@@ -1918,6 +1904,108 @@ DEF_SCRIPT(script_21, "Fault injection - unknown frame in 1-RTT packet")
OP_EXPECT_CONN_CLOSE_INFO(C, OSSL_QUIC_ERR_FRAME_ENCODING_ERROR, 0, 0);
}
+struct forbidden_frame_type {
+ uint64_t pkt_type, frame_type, expected_err;
+};
+
+static const struct forbidden_frame_type forbidden_frame_types[] = {
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_VLINT_MAX, OSSL_QUIC_ERR_FRAME_ENCODING_ERROR },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_VLINT_MAX, OSSL_QUIC_ERR_FRAME_ENCODING_ERROR },
+ { QUIC_PKT_TYPE_1RTT, OSSL_QUIC_VLINT_MAX, OSSL_QUIC_ERR_FRAME_ENCODING_ERROR },
+
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_STREAM, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_RESET_STREAM, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_STOP_SENDING, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_NEW_TOKEN, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_MAX_DATA, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_MAX_STREAM_DATA, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_MAX_STREAMS_BIDI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_MAX_STREAMS_UNI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_DATA_BLOCKED, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_STREAM_DATA_BLOCKED, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_STREAMS_BLOCKED_BIDI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_STREAMS_BLOCKED_UNI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_NEW_CONN_ID, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_RETIRE_CONN_ID, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_PATH_CHALLENGE, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_PATH_RESPONSE, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_CONN_CLOSE_APP, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_INITIAL, OSSL_QUIC_FRAME_TYPE_HANDSHAKE_DONE, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_STREAM, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_RESET_STREAM, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_STOP_SENDING, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_NEW_TOKEN, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_MAX_DATA, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_MAX_STREAM_DATA, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_MAX_STREAMS_BIDI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_MAX_STREAMS_UNI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_DATA_BLOCKED, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_STREAM_DATA_BLOCKED, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_STREAMS_BLOCKED_BIDI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_STREAMS_BLOCKED_UNI, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_NEW_CONN_ID, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_RETIRE_CONN_ID, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_PATH_CHALLENGE, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_PATH_RESPONSE, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_CONN_CLOSE_APP, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+ { QUIC_PKT_TYPE_HANDSHAKE, OSSL_QUIC_FRAME_TYPE_HANDSHAKE_DONE, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+
+ /* Client uses a zero-length CID so this is not allowed. */
+ { QUIC_PKT_TYPE_1RTT, OSSL_QUIC_FRAME_TYPE_RETIRE_CONN_ID, OSSL_QUIC_ERR_PROTOCOL_VIOLATION },
+};
+
+static int forbidden_frame_client_hello_cb(SSL *s, int *al, void *arg)
+{
+ radix_fault.ch = ossl_quic_conn_get_channel(s);
+ return ossl_quic_channel_set_mutator(radix_fault.ch, radix_fault_mutate,
+ radix_fault_finish, &radix_fault);
+}
+
+DEF_FUNC(arm_forbidden_frame)
+{
+ int ok = 0;
+ SSL *listener;
+
+ REQUIRE_SSL(listener);
+
+ OPENSSL_free((unsigned char *)radix_fault.io.buf);
+ memset(&radix_fault, 0, sizeof(radix_fault));
+ radix_fault.cb = script_21_inject_plain;
+ F_POP2(radix_fault.word0, radix_fault.word1);
+
+ SSL_CTX_set_client_hello_cb(SSL_get_SSL_CTX(listener),
+ forbidden_frame_client_hello_cb, NULL);
+
+ TEST_info("Packet type %llu, frame type %llu",
+ (unsigned long long)radix_fault.word0,
+ (unsigned long long)radix_fault.word1);
+ ok = 1;
+err:
+ return ok;
+}
+
+DEF_SCRIPT(forbidden_frame_types, "Fault injection - forbidden frame types")
+{
+ size_t i;
+
+ for (i = 0; i < OSSL_NELEM(forbidden_frame_types); ++i) {
+ OP_CLEAR();
+ OP_NEW_SSL_L_LISTEN(L);
+
+ OP_SELECT_SSL(0, L);
+ OP_PUSH_U64(forbidden_frame_types[i].pkt_type);
+ OP_PUSH_U64(forbidden_frame_types[i].frame_type);
+ OP_FUNC(arm_forbidden_frame);
+
+ OP_NEW_SSL_C(C);
+ OP_SET_PEER_ADDR_FROM(C, L);
+ OP_CONNECT_WAIT_OR_FAIL(C);
+
+ OP_EXPECT_CONN_CLOSE_INFO(C, forbidden_frame_types[i].expected_err, 0, 0);
+ }
+}
+
/* 22. Fault injection - non-zero packet header reserved bits */
static int script_22_inject_plain(RADIX_FAULT *fault, QUIC_PKT_HDR *hdr,
unsigned char *buf, size_t len)
@@ -3939,152 +4027,1462 @@ DEF_SCRIPT(script_69, "Send a TLS KeyUpdate message post-handshake")
OP_EXPECT_CONN_CLOSE_INFO(C, OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + SSL_AD_UNEXPECTED_MESSAGE, 0, 0);
}
-DEF_SCRIPT(script_70, "place holder for multistrem script_70")
+DEF_SCRIPT(script_70, "Send a TLS NewSessionTicket message with invalid max_early_data")
{
-}
+ OP_SIMPLE_PAIR_CONN_ND();
+ OP_ACCEPT_CONN_WAIT_ND(L, S, 0);
-DEF_SCRIPT(script_71, "place holder for multistrem script_71")
-{
-}
+ OP_NEW_STREAM(C, Ca, 0);
+ OP_WRITE(Ca, "apple", 5);
+ OP_ACCEPT_STREAM_WAIT(S, Sa, 0);
+ OP_READ_EXPECT(Sa, "apple", 5);
-DEF_SCRIPT(script_72, "place holder for multistrem script_72")
-{
-}
+ OP_SET_MAX_EARLY_DATA(S, 0xfffffffe);
+ OP_ENGINE_TICK_DISABLE(S);
+ OP_NEW_TICKET(S);
+ OP_WRITE(Sa, "orange", 6);
+ OP_ENGINE_TICK_ENABLE(S);
-DEF_SCRIPT(script_73, "place holder for multistrem script_73")
-{
+ OP_EXPECT_CONN_CLOSE_INFO(C, OSSL_QUIC_ERR_PROTOCOL_VIOLATION, 0, 0);
}
-DEF_SCRIPT(script_74, "place holder for multistrem script_74")
+DEF_SCRIPT(script_71, "Send a TLS NewSessionTicket message with valid max_early_data")
{
-}
+ OP_SIMPLE_PAIR_CONN_ND();
+ OP_ACCEPT_CONN_WAIT_ND(L, S, 0);
-DEF_SCRIPT(script_75, "place holder for multistrem script_75")
-{
-}
+ OP_NEW_STREAM(C, Ca, 0);
+ OP_WRITE(Ca, "apple", 5);
+ OP_ACCEPT_STREAM_WAIT(S, Sa, 0);
+ OP_READ_EXPECT(Sa, "apple", 5);
-DEF_SCRIPT(script_76, "place holder for multistrem script_76")
-{
+ OP_SET_MAX_EARLY_DATA(S, 0xffffffff);
+ OP_NEW_TICKET(S);
+ OP_WRITE(Sa, "orange", 6);
+ OP_READ_EXPECT(Ca, "orange", 6);
}
-DEF_SCRIPT(script_77, "place holder for multistrem script_77")
+DEF_SCRIPT(script_72, "Test that APL stops handing out streams after limit reached (bidi)")
{
-}
+ OP_SIMPLE_PAIR_CONN_ND();
+ OP_ACCEPT_CONN_WAIT_ND(L, S, 0);
-DEF_SCRIPT(script_78, "place holder for multistrem script_78")
-{
+ /*
+ * Request more streams than a server will initially hand out and test that
+ * they fail properly.
+ */
+ OP_STREAM_LIMIT_PROBE(C, SSL_STREAM_FLAG_NO_BLOCK, 200, 50);
}
-DEF_SCRIPT(script_79, "place holder for multistrem script_79")
+DEF_SCRIPT(script_73, "Test that APL stops handing out streams after limit reached (uni)")
{
-}
+ OP_SIMPLE_PAIR_CONN_ND();
+ OP_ACCEPT_CONN_WAIT_ND(L, S, 0);
-DEF_SCRIPT(script_80, "place holder for multistrem script_80")
-{
+ /*
+ * Request more streams than a server will initially hand out and test that
+ * they fail properly.
+ */
+ OP_STREAM_LIMIT_PROBE(C, SSL_STREAM_FLAG_UNI | SSL_STREAM_FLAG_NO_BLOCK, 200, 50);
}
-DEF_SCRIPT(script_81, "place holder for multistrem script_81")
-{
-}
+/*
+ * Check packets to transmit, if we have an initial packet
+ * Modify the version number to something incorrect
+ * so that we trigger a version negotiation
+ * Note, this is a use once function, it will only modify the
+ * first INITIAL packet it sees, after which it needs to be
+ * armed again
+ */
+static int do_mutation_74 = 0;
+static QUIC_PKT_HDR *hdr_to_free_74 = NULL;
+
+static int script_74_alter_version(const QUIC_PKT_HDR *hdrin,
+ const OSSL_QTX_IOVEC *iovecin, size_t numin,
+ QUIC_PKT_HDR **hdrout,
+ const OSSL_QTX_IOVEC **iovecout,
+ size_t *numout,
+ void *arg)
+{
+ *hdrout = OPENSSL_memdup(hdrin, sizeof(QUIC_PKT_HDR));
+ *iovecout = iovecin;
+ *numout = numin;
+ hdr_to_free_74 = *hdrout;
+
+ if (do_mutation_74 == 0)
+ return 1;
+ do_mutation_74 = 0;
-DEF_SCRIPT(script_82, "place holder for multistrem script_82")
-{
+ if (hdrin->type == QUIC_PKT_TYPE_INITIAL)
+ (*hdrout)->version = 0xdeadbeef;
+ return 1;
}
-DEF_SCRIPT(script_83, "place holder for multistrem script_83")
+static void script_74_finish_mutation(void *arg)
{
+ OPENSSL_free(hdr_to_free_74);
}
-DEF_SCRIPT(script_84, "place holder for multistrem script_84")
+/*
+ * Enable the packet mutator for the client channel
+ * So that when we send a Initial packet
+ * We modify the version to be something invalid
+ * to force a version negotiation
+ */
+DEF_FUNC(script_74_arm_packet_mutator)
{
-}
+ int ok = 0;
+ SSL *ssl;
+ QUIC_CHANNEL *ch;
-DEF_SCRIPT(script_85, "place holder for multistrem script_85")
-{
-}
+ REQUIRE_SSL(ssl);
+ ch = ossl_quic_conn_get_channel(ssl);
-DEF_SCRIPT(script_86, "place holder for multistrem script_86")
-{
-}
+ do_mutation_74 = 1;
+ if (!TEST_true(ossl_quic_channel_set_mutator(ch, script_74_alter_version,
+ script_74_finish_mutation, NULL)))
+ goto err;
-DEF_SCRIPT(script_87, "place holder for multistrem script_87")
-{
+ ok = 1;
+err:
+ return ok;
}
-DEF_SCRIPT(script_88, "place holder for multistrem script_88")
+DEF_SCRIPT(script_74, "Version negotiation: QUIC_VERSION_1 ignored")
{
-}
+ OP_NEW_SSL_L_LISTEN(L);
+ OP_NEW_SSL_C(C);
+ OP_SET_PEER_ADDR_FROM(C, L);
-DEF_SCRIPT(script_89, "place holder for multistrem script_89")
-{
-}
+ OP_SELECT_SSL(0, C);
+ OP_FUNC(script_74_arm_packet_mutator);
-DEF_SCRIPT(script_90, "place holder for multistrem script_90")
-{
+ OP_CONNECT_WAIT(C);
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_ACCEPT_CONN_WAIT_ND(L, S, 0);
+
+ OP_NEW_STREAM(C, Ca, 0);
+ OP_WRITE(Ca, "apple", 5);
+ OP_ACCEPT_STREAM_WAIT(S, Sa, 0);
+ OP_READ_EXPECT(Sa, "apple", 5);
}
-DEF_SCRIPT(script_91, "place holder for multistrem script_91")
+/*
+ * No channel exists yet for an unaccepted connection, so the usual
+ * RADIX_FAULT channel mutator can't intercept this datagram; filter the
+ * listener's wbio directly instead.
+ */
+#define BIO_TYPE_SCRIPT_75_FILTER (0x80 | BIO_TYPE_FILTER)
+static BIO_METHOD *script_75_filter_meth;
+static uint32_t script_75_word0;
+
+static int script_75_sendmmsg(BIO *b, BIO_MSG *msg, size_t stride,
+ size_t num_msg, uint64_t flags, size_t *msgs_processed)
{
+ BIO *next = BIO_next(b);
+ QUIC_PKT_HDR hdr;
+ WPACKET wpkt;
+ size_t written;
+
+ if (next == NULL)
+ return 0;
+
+ if (script_75_word0 != 0 && num_msg > 0) {
+ memset(&hdr, 0, sizeof(hdr));
+ hdr.type = QUIC_PKT_TYPE_VERSION_NEG;
+ hdr.version = 0;
+ hdr.fixed = 1;
+ hdr.dst_conn_id.id_len = 0;
+ hdr.src_conn_id.id_len = 8;
+ memset(hdr.src_conn_id.id, 0x55, 8);
+
+ if (!TEST_true(WPACKET_init_static_len(&wpkt, msg[0].data,
+ msg[0].data_len, 0)))
+ return 0;
+
+ if (!TEST_true(ossl_quic_wire_encode_pkt_hdr(&wpkt, 0, &hdr, NULL))
+ || !TEST_true(WPACKET_put_bytes_u32(&wpkt,
+ script_75_word0 == 1 ? QUIC_VERSION_1 : 0x5432abcd))
+ || !TEST_true(WPACKET_get_total_written(&wpkt, &written))) {
+ WPACKET_cleanup(&wpkt);
+ return 0;
+ }
+ WPACKET_finish(&wpkt);
+
+ msg[0].data_len = written;
+ script_75_word0 = 0;
+ }
+
+ return BIO_sendmmsg(next, msg, stride, num_msg, flags, msgs_processed);
}
-DEF_SCRIPT(script_92, "place holder for multistrem script_92")
+static long script_75_ctrl(BIO *b, int cmd, long larg, void *parg)
{
+ BIO *next = BIO_next(b);
+
+ if (next == NULL)
+ return -1;
+
+ return BIO_ctrl(next, cmd, larg, parg);
}
-DEF_SCRIPT(script_93, "place holder for multistrem script_93")
+DEF_FUNC(script_75_arm_version_neg)
{
+ int ok = 0;
+ SSL *listener;
+ BIO *filter, *real_wbio;
+
+ REQUIRE_SSL(listener);
+
+ script_75_word0 = 2; /* unknown version */
+
+ if (script_75_filter_meth == NULL) {
+ if (!TEST_ptr(script_75_filter_meth = BIO_meth_new(
+ BIO_TYPE_SCRIPT_75_FILTER, "Version Negotiation Filter")))
+ goto err;
+ if (!TEST_true(BIO_meth_set_sendmmsg(script_75_filter_meth,
+ script_75_sendmmsg))
+ || !TEST_true(BIO_meth_set_ctrl(script_75_filter_meth,
+ script_75_ctrl)))
+ goto err;
+ }
+
+ if (!TEST_ptr(real_wbio = SSL_get_wbio(listener)))
+ goto err;
+ if (!TEST_true(BIO_up_ref(real_wbio)))
+ goto err;
+
+ if (!TEST_ptr(filter = BIO_new(script_75_filter_meth))) {
+ BIO_free(real_wbio);
+ goto err;
+ }
+
+ if (!TEST_ptr(BIO_push(filter, real_wbio))) {
+ BIO_free(real_wbio);
+ BIO_free(filter);
+ goto err;
+ }
+
+ SSL_set0_wbio(listener, filter);
+
+ ok = 1;
+err:
+ return ok;
}
-DEF_SCRIPT(script_94, "place holder for multistrem script_94")
+DEF_SCRIPT(script_75, "Version negotiation: Unknown version causes connection abort")
{
+ OP_NEW_SSL_L_LISTEN(L);
+
+ OP_SELECT_SSL(0, L);
+ OP_FUNC(script_75_arm_version_neg);
+
+ OP_NEW_SSL_C(C);
+ OP_SET_PEER_ADDR_FROM(C, L);
+ OP_CONNECT_WAIT_OR_FAIL(C);
+
+ OP_EXPECT_CONN_CLOSE_INFO(C, OSSL_QUIC_ERR_CONNECTION_REFUSED, 0, 0);
}
-DEF_SCRIPT(script_95, "place holder for multistrem script_95")
+DEF_FUNC(check_peer_shutdown_wait_76)
{
+ int ok = 0;
+ SSL *ssl;
+
+ REQUIRE_SSL(ssl);
+
+ if (!TEST_false(SSL_shutdown_ex(ssl,
+ SSL_SHUTDOWN_FLAG_WAIT_PEER | SSL_SHUTDOWN_FLAG_NO_BLOCK,
+ NULL, 0)))
+ goto err;
+
+ ok = 1;
+err:
+ return ok;
}
-DEF_SCRIPT(script_96, "place holder for multistrem script_96")
+DEF_SCRIPT(script_76, "Test peer-initiated shutdown wait")
{
+ OP_SIMPLE_PAIR_CONN_ND();
+ OP_ACCEPT_CONN_WAIT_ND(L, S, 0);
+
+ OP_NEW_STREAM(C, Ca, 0);
+ OP_WRITE(Ca, "apple", 5);
+
+ OP_ACCEPT_STREAM_WAIT(S, Sa, 0);
+ OP_READ_EXPECT(Sa, "apple", 5);
+
+ /* Check a WAIT_PEER call doesn't succeed yet. */
+ OP_SELECT_SSL(0, C);
+ OP_FUNC(check_peer_shutdown_wait_76);
+
+ OP_SHUTDOWN_WAIT(S, 0, 42, NULL);
+
+ OP_SHUTDOWN_WAIT(C, SSL_SHUTDOWN_FLAG_WAIT_PEER, 0, NULL);
+ OP_EXPECT_CONN_CLOSE_INFO(C, 42, 1, 1);
}
-DEF_SCRIPT(script_97, "place holder for multistrem script_97")
+DEF_SCRIPT(script_77, "Ensure default stream popping operates correctly")
{
+ OP_SIMPLE_PAIR_CONN();
+ OP_ACCEPT_CONN_WAIT(L, S, 0);
+
+ OP_SET_INCOMING_STREAM_POLICY(C, SSL_INCOMING_STREAM_POLICY_ACCEPT, 0);
+
+ OP_NEW_STREAM(S, Sa, 0);
+ OP_WRITE(Sa, "Strawberry", 10);
+
+ OP_READ_EXPECT(C, "Strawberry", 10);
+
+ OP_NEW_STREAM(S, Sb, 0);
+ OP_WRITE(Sb, "xyz", 3);
+
+ OP_ACCEPT_STREAM_WAIT(C, Cb, 0);
+ OP_READ_EXPECT(Cb, "xyz", 3);
}
-DEF_SCRIPT(script_98, "place holder for multistrem script_98")
+static size_t new_session_count_78;
+
+static int on_new_session_78(SSL *s, SSL_SESSION *sess)
{
+ ++new_session_count_78;
+ return 0; /* do not ref session, we aren't keeping it */
}
-DEF_SCRIPT(script_99, "place holder for multistrem script_99")
+DEF_FUNC(setup_session_78)
{
+ int ok = 0;
+ SSL *ssl;
+ SSL_CTX *ctx;
+
+ REQUIRE_SSL(ssl);
+ ctx = SSL_get_SSL_CTX(ssl);
+
+ SSL_CTX_set_session_cache_mode(ctx, SSL_SESS_CACHE_BOTH);
+ SSL_CTX_sess_set_new_cb(ctx, on_new_session_78);
+
+ ok = 1;
+err:
+ return ok;
}
-DEF_SCRIPT(script_100, "place holder for multistrem script_100")
+DEF_FUNC(reset_new_session_count_78)
{
+ new_session_count_78 = 0;
+ return 1;
}
-DEF_SCRIPT(script_101, "place holder for multistrem script_101")
+DEF_FUNC(check_got_session_ticket_78)
{
+ return TEST_size_t_gt(new_session_count_78, 0);
}
-DEF_SCRIPT(script_102, "place holder for multistrem script_102")
+DEF_SCRIPT(script_78, "Post-connection session ticket handling")
{
+ OP_NEW_SSL_L_LISTEN(L);
+ OP_NEW_SSL_C(C);
+ OP_SET_PEER_ADDR_FROM(C, L);
+
+ OP_SELECT_SSL(0, C);
+ OP_FUNC(setup_session_78);
+
+ OP_CONNECT_WAIT(C);
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_ACCEPT_CONN_WAIT_ND(L, S, 0);
+
+ OP_NEW_STREAM(C, Ca, 0);
+ OP_WRITE(Ca, "apple", 5);
+
+ OP_ACCEPT_STREAM_WAIT(S, Sa, 0);
+ OP_READ_EXPECT(Sa, "apple", 5);
+
+ OP_WRITE(Sa, "orange", 6);
+ OP_READ_EXPECT(Ca, "orange", 6);
+
+ OP_FUNC(reset_new_session_count_78);
+ OP_NEW_TICKET(S);
+
+ OP_WRITE(Sa, "Strawberry", 10);
+ OP_READ_EXPECT(Ca, "Strawberry", 10);
+
+ OP_FUNC(check_got_session_ticket_78);
+ OP_CHECK_IDLE_TIMEOUT(C, SSL_VALUE_CLASS_FEATURE_NEGOTIATED, 30000);
}
-DEF_SCRIPT(script_103, "place holder for multistrem script_103")
+DEF_SCRIPT(script_79, "Optimised FIN test")
{
+ OP_SIMPLE_PAIR_CONN();
+ OP_ACCEPT_CONN_WAIT(L, S, 0);
+
+ OP_WRITE_EX2(C, "apple", 5, SSL_WRITE_FLAG_CONCLUDE);
+
+ OP_ACCEPT_STREAM_WAIT(S, Sa, 0);
+ OP_READ_EXPECT(Sa, "apple", 5);
+ OP_EXPECT_FIN(Sa);
+ OP_WRITE(Sa, "orange", 6);
+ OP_CONCLUDE(Sa);
+
+ OP_READ_EXPECT(C, "orange", 6);
+ OP_EXPECT_FIN(C);
}
-DEF_SCRIPT(script_104, "place holder for multistrem script_104")
+/* 80. Stateless reset detection test */
+static QUIC_STATELESS_RESET_TOKEN script_80_reset_token = {
+ { 0xde, 0xad, 0xbe, 0xef, 0xde, 0xad, 0xbe, 0xef, 0xde, 0xad, 0xbe, 0xef,
+ 0xde, 0xad, 0xbe, 0xef }
+};
+
+static SSL *script_80_c_ssl;
+static BIO_ADDR *script_80_s_addr;
+
+DEF_FUNC(setup_stateless_reset_80)
{
+ int ok = 0;
+ SSL *c_ssl, *s_ssl;
+ BIO *s_bio;
+ int s_fd = -1;
+ union BIO_sock_info_u s_info;
+
+ REQUIRE_SSL_2(c_ssl, s_ssl);
+
+ script_80_c_ssl = c_ssl;
+ BIO_ADDR_free(script_80_s_addr);
+
+ if (!TEST_ptr(s_bio = SSL_get_rbio(s_ssl))
+ || !TEST_ptr(script_80_s_addr = BIO_ADDR_new())
+ || !TEST_true(BIO_get_fd(s_bio, &s_fd)) || !TEST_int_ge(s_fd, 0))
+ goto err;
+
+ s_info.addr = script_80_s_addr;
+ if (!TEST_true(BIO_sock_info(s_fd, BIO_SOCK_INFO_ADDRESS, &s_info)))
+ goto err;
+
+ ok = 1;
+err:
+ return ok;
}
-DEF_SCRIPT(script_105, "place holder for multistrem script_105")
+DEF_FUNC(cleanup_stateless_reset_80)
{
+ BIO_ADDR_free(script_80_s_addr);
+ script_80_s_addr = NULL;
+ script_80_c_ssl = NULL;
+ return 1;
}
-DEF_SCRIPT(script_106, "place holder for multistrem script_106")
+/*
+ * Generate a packet in the following format:
+ * https://www.rfc-editor.org/rfc/rfc9000.html#name-stateless-reset
+ * Stateless Reset {
+ * Fixed Bits (2): 1
+ * Unpredictable bits (38..)
+ * Stateless reset token (128)
+ * }
+ */
+static int script_80_send_stateless_reset(RADIX_FAULT *fault, QUIC_PKT_HDR *hdr,
+ unsigned char *buf, size_t len)
{
+ unsigned char databuf[64];
+
+ if (fault->word1 == 0)
+ return 1;
+
+ fault->word1 = 0;
+
+ fprintf(stderr, "Sending stateless reset\n");
+
+ RAND_bytes(databuf, 64);
+ databuf[0] = 0x40;
+ memcpy(&databuf[48], script_80_reset_token.token,
+ sizeof(script_80_reset_token.token));
+
+ if (!TEST_int_eq(SSL_inject_net_dgram(script_80_c_ssl, databuf, sizeof(databuf),
+ NULL, script_80_s_addr),
+ 1))
+ return 0;
+
+ return 1;
+}
+
+static int script_80_gen_new_conn_id(RADIX_FAULT *fault, QUIC_PKT_HDR *hdr,
+ unsigned char *buf, size_t len)
+{
+ int rc = 0;
+ size_t l;
+ unsigned char frame_buf[64];
+ WPACKET wpkt;
+ QUIC_CONN_ID new_cid = { 0 };
+ OSSL_QUIC_FRAME_NEW_CONN_ID ncid = { 0 };
+
+ if (fault->word0 == 0)
+ return 1;
+
+ fault->word0 = 0;
+
+ fprintf(stderr, "sending new conn id\n");
+ if (!TEST_true(WPACKET_init_static_len(&wpkt, frame_buf,
+ sizeof(frame_buf), 0)))
+ return 0;
+
+ ossl_quic_channel_get_diag_local_cid(fault->ch, &new_cid);
+
+ ncid.seq_num = 2;
+ ncid.retire_prior_to = 2;
+ ncid.conn_id = new_cid;
+ memcpy(ncid.stateless_reset.token, script_80_reset_token.token,
+ sizeof(script_80_reset_token.token));
+
+ if (!TEST_true(ossl_quic_wire_encode_frame_new_conn_id(&wpkt, &ncid)))
+ goto err;
+
+ if (!TEST_true(WPACKET_get_total_written(&wpkt, &l)))
+ goto err;
+
+ if (!radix_fault_prepend_frame(fault, frame_buf, l))
+ goto err;
+
+ rc = 1;
+err:
+ if (rc)
+ WPACKET_finish(&wpkt);
+ else
+ WPACKET_cleanup(&wpkt);
+
+ return rc;
+}
+
+static int script_80_inject_pkt(RADIX_FAULT *fault, QUIC_PKT_HDR *hdr,
+ unsigned char *buf, size_t len)
+{
+ if (fault->word1 == 1)
+ return script_80_send_stateless_reset(fault, hdr, buf, len);
+ else if (fault->word0 == 1)
+ return script_80_gen_new_conn_id(fault, hdr, buf, len);
+
+ return 1;
+}
+
+DEF_SCRIPT(script_80, "Stateless reset detection test")
+{
+ OP_SIMPLE_PAIR_CONN();
+ OP_ACCEPT_CONN_WAIT(L, S, 0);
+
+ OP_SELECT_SSL(0, C);
+ OP_SELECT_SSL(1, S);
+ OP_FUNC(setup_stateless_reset_80);
+
+ OP_SET_INJECT_PLAIN(S, script_80_inject_pkt);
+
+ OP_WRITE(C, "apple", 5);
+ OP_CONCLUDE(C);
+ OP_ACCEPT_STREAM_WAIT(S, Sa, 0);
+ OP_READ_EXPECT(Sa, "apple", 5);
+ OP_SET_INJECT_WORD(1, 0);
+ OP_WRITE(Sa, "apple", 5);
+ OP_READ_EXPECT(C, "apple", 5);
+ OP_SET_INJECT_WORD(0, 1);
+ OP_WRITE(Sa, "apple", 5);
+ OP_EXPECT_CONN_CLOSE_INFO(C, 0, 0, 1);
+
+ OP_FUNC(cleanup_stateless_reset_80);
+}
+
+/* 81. Idle timeout configuration */
+DEF_SCRIPT(script_81, "Idle timeout configuration")
+{
+ OP_NEW_SSL_L_LISTEN(L);
+ OP_NEW_SSL_C(C);
+ OP_SET_PEER_ADDR_FROM(C, L);
+
+ OP_MODIFY_VALUE_UINT(C, SSL_VALUE_QUIC_IDLE_TIMEOUT, 25000);
+
+ OP_CONNECT_WAIT(C);
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_IDLE_TIMEOUT,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 30000);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_IDLE_TIMEOUT,
+ SSL_VALUE_CLASS_FEATURE_NEGOTIATED, 25000);
+}
+
+/* 82. Negotiated default idle timeout if not configured */
+DEF_SCRIPT(script_82, "Negotiated default idle timeout if not configured")
+{
+ OP_SIMPLE_PAIR_CONN_ND();
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_IDLE_TIMEOUT,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 30000);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_IDLE_TIMEOUT,
+ SSL_VALUE_CLASS_FEATURE_NEGOTIATED, 30000);
+}
+
+/* 83. No late changes to idle timeout */
+DEF_SCRIPT(script_83, "No late changes to idle timeout")
+{
+ OP_SIMPLE_PAIR_CONN_ND();
+
+ OP_CANNOT_CHANGE_VALUE_UINT(C, SSL_VALUE_QUIC_IDLE_TIMEOUT, 30000, 5000);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_IDLE_TIMEOUT,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 30000);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_IDLE_TIMEOUT,
+ SSL_VALUE_CLASS_FEATURE_NEGOTIATED, 30000);
+}
+
+/* 84. Test query of available streams */
+DEF_FUNC(check_avail_streams_84)
+{
+ int ok = 0;
+ SSL *ssl;
+ uint64_t kind, expected, v = 0;
+
+ F_POP(expected);
+ F_POP(kind);
+ REQUIRE_SSL(ssl);
+
+ switch (kind) {
+ case 0:
+ if (!TEST_true(SSL_get_quic_stream_bidi_local_avail(ssl, &v)))
+ goto err;
+ break;
+ case 1:
+ if (!TEST_true(SSL_get_quic_stream_bidi_remote_avail(ssl, &v)))
+ goto err;
+ break;
+ case 2:
+ if (!TEST_true(SSL_get_quic_stream_uni_local_avail(ssl, &v)))
+ goto err;
+ break;
+ case 3:
+ if (!TEST_true(SSL_get_quic_stream_uni_remote_avail(ssl, &v)))
+ goto err;
+ break;
+ default:
+ goto err;
+ }
+
+ if (!TEST_uint64_t_eq(v, expected))
+ goto err;
+
+ ok = 1;
+err:
+ return ok;
+}
+
+DEF_FUNC(check_write_buf_stat_84)
+{
+ int ok = 0;
+ SSL *ssl;
+ uint64_t used, size, actual_used, avail;
+
+ F_POP(used);
+ REQUIRE_SSL(ssl);
+
+ if (!TEST_true(SSL_get_stream_write_buf_size(ssl, &size))
+ || !TEST_true(SSL_get_stream_write_buf_used(ssl, &actual_used))
+ || !TEST_true(SSL_get_stream_write_buf_avail(ssl, &avail))
+ || !TEST_uint64_t_ge(size, avail)
+ || !TEST_uint64_t_ge(size, actual_used)
+ || !TEST_uint64_t_eq(avail + actual_used, size)
+ || !TEST_uint64_t_eq(actual_used, used))
+ goto err;
+
+ ok = 1;
+err:
+ return ok;
+}
+
+#define CHECK_AVAIL_84(kind, expected) \
+ do { \
+ OP_PUSH_U64(kind); \
+ OP_PUSH_U64(expected); \
+ OP_SELECT_SSL(0, C); \
+ OP_FUNC(check_avail_streams_84); \
+ } while (0)
+
+DEF_SCRIPT(script_84, "Test query of available streams")
+{
+ OP_SIMPLE_PAIR_CONN_ND();
+ OP_ACCEPT_CONN_WAIT_ND(L, S, 0);
+
+ CHECK_AVAIL_84(0, 100);
+ CHECK_AVAIL_84(1, 100);
+ CHECK_AVAIL_84(2, 100);
+ CHECK_AVAIL_84(3, 100);
+
+ OP_NEW_STREAM(C, Ca, 0);
+
+ CHECK_AVAIL_84(0, 99);
+ CHECK_AVAIL_84(1, 100);
+ CHECK_AVAIL_84(2, 100);
+ CHECK_AVAIL_84(3, 100);
+
+ OP_NEW_STREAM(C, Cb, SSL_STREAM_FLAG_UNI);
+
+ CHECK_AVAIL_84(0, 99);
+ CHECK_AVAIL_84(1, 100);
+ CHECK_AVAIL_84(2, 99);
+ CHECK_AVAIL_84(3, 100);
+
+ OP_NEW_STREAM(S, Sc, 0);
+ OP_WRITE(Sc, "x", 1);
+
+ OP_ACCEPT_STREAM_WAIT(C, Cc, 0);
+ OP_READ_EXPECT(Cc, "x", 1);
+
+ CHECK_AVAIL_84(0, 99);
+ CHECK_AVAIL_84(1, 99);
+ CHECK_AVAIL_84(2, 99);
+ CHECK_AVAIL_84(3, 100);
+
+ OP_NEW_STREAM(S, Sd, SSL_STREAM_FLAG_UNI);
+ OP_WRITE(Sd, "x", 1);
+
+ OP_ACCEPT_STREAM_WAIT(C, Cd, 0);
+ OP_READ_EXPECT(Cd, "x", 1);
+
+ CHECK_AVAIL_84(0, 99);
+ CHECK_AVAIL_84(1, 99);
+ CHECK_AVAIL_84(2, 99);
+ CHECK_AVAIL_84(3, 99);
+
+ OP_PUSH_U64(0);
+ OP_SELECT_SSL(0, Ca);
+ OP_FUNC(check_write_buf_stat_84);
+
+ OP_TICK_DISABLE(C);
+ OP_SET_EVENT_HANDLING_MODE(C, SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT);
+ OP_WRITE(Ca, "apple", 5);
+ OP_PUSH_U64(5);
+ OP_SELECT_SSL(0, Ca);
+ OP_FUNC(check_write_buf_stat_84);
+
+ OP_TICK_ENABLE(C);
+
+ OP_ACCEPT_STREAM_WAIT(S, Sa, 0);
+ OP_READ_EXPECT(Sa, "apple", 5);
+ OP_WRITE(Sa, "orange", 6);
+ OP_READ_EXPECT(Ca, "orange", 6);
+}
+
+/* 85. Test SSL_poll (lite, non-blocking) */
+DEF_FUNC(script_85_poll)
+{
+ int ok = 0, ret, expected_ret = 1;
+ static const struct timeval timeout = { 0 };
+ size_t result_count, expected_result_count = 0;
+ SSL_POLL_ITEM items[5] = { 0 }, *item = items;
+ SSL *c_a, *c_b, *c_c, *c_d, *c_conn;
+ size_t i;
+ uint64_t mode;
+ uint64_t expected_revents[5] = { 0 };
+
+ F_POP(mode);
+ REQUIRE_SSL_5(c_a, c_b, c_c, c_d, c_conn);
+
+ item->desc = SSL_as_poll_descriptor(c_a);
+ item->events = UINT64_MAX;
+ item->revents = UINT64_MAX;
+ ++item;
+
+ item->desc = SSL_as_poll_descriptor(c_b);
+ item->events = UINT64_MAX;
+ item->revents = UINT64_MAX;
+ ++item;
+
+ item->desc = SSL_as_poll_descriptor(c_c);
+ item->events = UINT64_MAX;
+ item->revents = UINT64_MAX;
+ ++item;
+
+ item->desc = SSL_as_poll_descriptor(c_d);
+ item->events = UINT64_MAX;
+ item->revents = UINT64_MAX;
+ ++item;
+
+ item->desc = SSL_as_poll_descriptor(c_conn);
+ item->events = UINT64_MAX;
+ item->revents = UINT64_MAX;
+ ++item;
+
+ result_count = SIZE_MAX;
+ ret = SSL_poll(items, OSSL_NELEM(items), sizeof(SSL_POLL_ITEM),
+ &timeout, 0,
+ &result_count);
+
+ switch (mode) {
+ case 0:
+ /* No incoming data yet */
+ expected_revents[0] = SSL_POLL_EVENT_W;
+ expected_revents[1] = SSL_POLL_EVENT_W;
+ expected_revents[2] = SSL_POLL_EVENT_W;
+ expected_revents[3] = SSL_POLL_EVENT_W;
+ expected_revents[4] = SSL_POLL_EVENT_OS;
+ expected_result_count = 5;
+ break;
+ case 1:
+ /* Expect more events */
+ expected_revents[0] = SSL_POLL_EVENT_W | SSL_POLL_EVENT_R;
+ expected_revents[1] = SSL_POLL_EVENT_W | SSL_POLL_EVENT_ER;
+ expected_revents[2] = SSL_POLL_EVENT_EW;
+ expected_revents[3] = SSL_POLL_EVENT_W;
+ expected_revents[4] = SSL_POLL_EVENT_OS | SSL_POLL_EVENT_ISB;
+ expected_result_count = 5;
+ break;
+ default:
+ goto err;
+ }
+
+ ok = 1;
+
+ if (!TEST_int_eq(ret, expected_ret)
+ || !TEST_size_t_eq(result_count, expected_result_count))
+ ok = 0;
+
+ for (i = 0; i < OSSL_NELEM(items); ++i)
+ if (!TEST_uint64_t_eq(items[i].revents, expected_revents[i])) {
+ TEST_error("mismatch at index %zu in poll results, mode %d",
+ i, (int)mode);
+ ok = 0;
+ }
+
+err:
+ return ok;
+}
+
+DEF_SCRIPT(script_85, "Test SSL_poll (lite, non-blocking)")
+{
+ OP_SIMPLE_PAIR_CONN_ND();
+ OP_ACCEPT_CONN_WAIT_ND(L, S, 0);
+
+ OP_NEW_STREAM(C, Ca, 0);
+ OP_WRITE(Ca, "flamingo", 8);
+
+ OP_NEW_STREAM(C, Cb, 0);
+ OP_WRITE(Cb, "orange", 6);
+
+ OP_NEW_STREAM(C, Cc, 0);
+ OP_WRITE(Cc, "Strawberry", 10);
+
+ OP_NEW_STREAM(C, Cd, 0);
+ OP_WRITE(Cd, "sync", 4);
+
+ OP_ACCEPT_STREAM_WAIT(S, Sa, 0);
+ OP_ACCEPT_STREAM_WAIT(S, Sb, 0);
+ OP_ACCEPT_STREAM_WAIT(S, Sc, 0);
+ OP_ACCEPT_STREAM_WAIT(S, Sd, 0);
+
+ /* Check nothing readable yet. */
+ OP_SELECT_SSL(0, Ca);
+ OP_SELECT_SSL(1, Cb);
+ OP_SELECT_SSL(2, Cc);
+ OP_SELECT_SSL(3, Cd);
+ OP_SELECT_SSL(4, C);
+ OP_PUSH_U64(0);
+ OP_FUNC(script_85_poll);
+
+ /* Send something that will make client sockets readable. */
+ OP_READ_EXPECT(Sa, "flamingo", 8);
+ OP_WRITE(Sa, "herringbone", 11);
+
+ /* Send something that will make 'b' reset. */
+ OP_SET_INJECT_PLAIN(S, inject_stream_frame_plain);
+
+ /* Ensure sync. */
+ OP_READ_EXPECT(Sd, "sync", 4);
+
+ OP_ENGINE_TICK_DISABLE(S);
+ OP_SET_INJECT_WORD(C_BIDI_ID(1) + 1, OSSL_QUIC_FRAME_TYPE_RESET_STREAM);
+ OP_WRITE(Sd, "x", 1);
+ OP_ENGINE_TICK_ENABLE(S);
+
+ OP_READ_EXPECT(Cd, "x", 1);
+
+ /* Send something that will make 'c' reset. */
+ OP_SET_INJECT_PLAIN(S, inject_stream_frame_plain);
+
+ OP_ENGINE_TICK_DISABLE(S);
+ OP_SET_INJECT_WORD(C_BIDI_ID(2) + 1, OSSL_QUIC_FRAME_TYPE_STOP_SENDING);
+ OP_NEW_STREAM(S, Sz, 0);
+ OP_WRITE(Sz, "z", 1);
+
+ /* Ensure sync. */
+ OP_WRITE(Sd, "x", 1);
+ OP_ENGINE_TICK_ENABLE(S);
+
+ OP_READ_EXPECT(Cd, "x", 1);
+
+ /* Check a is now readable. */
+ OP_SELECT_SSL(0, Ca);
+ OP_SELECT_SSL(1, Cb);
+ OP_SELECT_SSL(2, Cc);
+ OP_SELECT_SSL(3, Cd);
+ OP_SELECT_SSL(4, C);
+ OP_PUSH_U64(1);
+ OP_FUNC(script_85_poll);
+}
+
+/* 86. Event Handling Mode Configuration */
+DEF_SCRIPT(script_86, "Event Handling Mode Configuration")
+{
+ size_t i;
+
+ OP_SIMPLE_PAIR_CONN_ND();
+ OP_ACCEPT_CONN_WAIT_ND(L, S, 0);
+
+ /* Turn on explicit handling mode. */
+ OP_TICK_DISABLE(C);
+ OP_SET_EVENT_HANDLING_MODE(C, SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT);
+
+ /*
+ * Create a new stream and write data. This won't get sent
+ * to the network net because we are in explicit mode
+ * and we haven't called SSL_handle_events().
+ */
+ OP_NEW_STREAM(C, Ca, 0);
+ OP_WRITE(Ca, "apple", 5);
+
+ /* Put connection back into implicit handling mode. */
+ OP_SET_EVENT_HANDLING_MODE(C, SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT);
+
+ /* Override at stream level. */
+ OP_SET_EVENT_HANDLING_MODE(Ca, SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT);
+ OP_WRITE(Ca, "orange", 6);
+ OP_CONCLUDE(Ca);
+
+ /*
+ * Confirm the data isn't going to arrive. OP_SLEEP is always undesirable
+ * but we have no reasonable way to synchronise on something not arriving
+ * given all network traffic is essentially stopped and there are no other
+ * signals arriving from the peer which could be used for synchronisation.
+ * Slow OSes will pass this anyway (fail-open).
+ */
+ for (i = 0; i < 20; ++i) {
+ OP_ACCEPT_STREAM_NONE(S, 0);
+ OP_SLEEP(10);
+ }
+
+ /* Now let the data arrive and confirm it arrives. */
+ OP_TICK_ENABLE(C);
+ OP_ACCEPT_STREAM_WAIT(S, Sa, 0);
+ OP_READ_EXPECT(Sa, "appleorange", 11);
+ OP_EXPECT_FIN(Sa);
+
+ /* Back into explicit mode. */
+ OP_TICK_DISABLE(C);
+ OP_SET_EVENT_HANDLING_MODE(C, SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT);
+ OP_WRITE(Sa, "ok", 2);
+ OP_READ_FAIL(Ca);
+
+ /* Works once event handling is done. */
+ OP_TICK_ENABLE(C);
+ OP_READ_EXPECT(Ca, "ok", 2);
+}
+
+/* 87. Test stream reset functionality */
+DEF_SCRIPT(script_87, "Test stream reset functionality")
+{
+ OP_SIMPLE_PAIR_CONN();
+ OP_ACCEPT_CONN_WAIT(L, S, 0);
+ OP_NEW_STREAM(C, Ca, 0);
+ OP_WRITE(Ca, "apple", 5);
+ OP_CONCLUDE(Ca);
+ OP_ACCEPT_STREAM_WAIT(S, Sa, 0);
+ OP_READ_EXPECT(Sa, "apple", 5);
+ OP_EXPECT_FIN(Sa);
+ OP_WRITE(Sa, "orange", 6);
+ OP_READ_EXPECT(Ca, "orange", 6);
+ OP_CONCLUDE(Sa);
+ OP_EXPECT_FIN(Ca);
+ OP_SLEEP(1000);
+ OP_STREAM_RESET_FAIL(Ca, 42);
+}
+
+/* 88. Test SSL_poll (lite, non-blocking) */
+#define POLL_FMT "%s%s%s%s%s%s%s%s%s%s%s%s%s"
+#define POLL_PRINTA(_revents_) \
+ (_revents_) & SSL_POLL_EVENT_F ? "SSL_POLL_EVENT_F " : "", \
+ (_revents_) & SSL_POLL_EVENT_EL ? "SSL_POLL_EVENT_EL " : "", \
+ (_revents_) & SSL_POLL_EVENT_EC ? "SSL_POLL_EVENT_EC " : "", \
+ (_revents_) & SSL_POLL_EVENT_ECD ? "SSL_POLL_EVENT_ECD " : "", \
+ (_revents_) & SSL_POLL_EVENT_ER ? "SSL_POLL_EVENT_ER " : "", \
+ (_revents_) & SSL_POLL_EVENT_EW ? "SSL_POLL_EVENT_EW " : "", \
+ (_revents_) & SSL_POLL_EVENT_R ? "SSL_POLL_EVENT_R " : "", \
+ (_revents_) & SSL_POLL_EVENT_W ? "SSL_POLL_EVENT_W " : "", \
+ (_revents_) & SSL_POLL_EVENT_IC ? "SSL_POLL_EVENT_IC " : "", \
+ (_revents_) & SSL_POLL_EVENT_ISB ? "SSL_POLL_EVENT_ISB " : "", \
+ (_revents_) & SSL_POLL_EVENT_ISU ? "SSL_POLL_EVENT_ISU " : "", \
+ (_revents_) & SSL_POLL_EVENT_OSB ? "SSL_POLL_EVENT_OSB " : "", \
+ (_revents_) & SSL_POLL_EVENT_OSU ? "SSL_POLL_EVENT_OSU " : ""
+
+/*
+ * verify SSL_poll() signals SSL_POLL_EVENT_EC event
+ * to notify client it's time to call SSL_shutdown().
+ */
+DEF_FUNC(script_88_poll)
+{
+ int ok = 0, ret, expected_ret = 1;
+ static const struct timeval timeout = { 0 };
+ size_t result_count, processed;
+ SSL_POLL_ITEM items[2] = { 0 }, *item = items;
+ SSL *c_a, *c_conn;
+ size_t i;
+ uint64_t mode;
+ uint64_t expected_revents[2] = { 0 };
+
+ F_POP(mode);
+ REQUIRE_SSL_2(c_a, c_conn);
+
+ item->desc = SSL_as_poll_descriptor(c_a);
+ item->events = UINT64_MAX;
+ item->revents = UINT64_MAX;
+ ++item;
+
+ item->desc = SSL_as_poll_descriptor(c_conn);
+ item->events = UINT64_MAX;
+ item->revents = UINT64_MAX;
+ ++item;
+
+ result_count = SIZE_MAX;
+ ret = SSL_poll(items, OSSL_NELEM(items), sizeof(SSL_POLL_ITEM),
+ &timeout, 0,
+ &result_count);
+
+ switch (mode) {
+ case 0:
+ /* No incoming data yet */
+ expected_revents[0] = SSL_POLL_EVENT_W;
+ expected_revents[1] = SSL_POLL_EVENT_OS;
+ break;
+ case 1:
+ /* Expect more events */
+ expected_revents[0] = SSL_POLL_EVENT_R;
+ expected_revents[1] = SSL_POLL_EVENT_OS;
+ break;
+ default:
+ goto err;
+ }
+
+ ok = 1;
+
+ if (!TEST_int_eq(ret, expected_ret))
+ ok = 0;
+
+ /*
+ * Unlike script 85 which always expects all objects
+ * get signaled in single call to SSL_poll() we must
+ * assume here we can get notification for only one.
+ */
+ processed = 0;
+ for (i = 0; i < OSSL_NELEM(items); ++i) {
+ if (items[i].revents == 0)
+ continue;
+
+ processed++;
+ if (!TEST_uint64_t_eq(items[i].revents, expected_revents[i])) {
+ TEST_info("wanted: " POLL_FMT " got: " POLL_FMT,
+ POLL_PRINTA(expected_revents[i]),
+ POLL_PRINTA(items[i].revents));
+ TEST_error("mismatch at index %zu in poll results, mode %d",
+ i, (int)mode);
+ ok = 0;
+ }
+ }
+
+ if (!TEST_size_t_eq(processed, result_count))
+ ok = 0;
+
+err:
+ return ok;
+}
+
+/*
+ * Unlike the mock (whose T-server is serviced by a dedicated background
+ * thread independent of script stepping), radix has no such thread here: a
+ * connection is only ticked between interpreter ops (do_per_op). So rather
+ * than busy-looping over SSL_poll()/OSSL_sleep() within a single op (which
+ * would starve the peer of any ticks for the whole loop), retry one
+ * SSL_poll()/SSL_shutdown() attempt per invocation via F_SPIN_AGAIN() so the
+ * interpreter ticks every object (including the peer) between attempts, same
+ * as any other spin-driven op.
+ */
+DEF_FUNC(script_88_poll_conly)
+{
+ int ok = 0, ret;
+ static const struct timeval timeout = { 0 };
+ size_t result_count;
+ SSL_POLL_ITEM items[1] = { 0 };
+ SSL *c_conn;
+
+ REQUIRE_SSL(c_conn);
+
+ result_count = SIZE_MAX;
+
+ items[0].desc = SSL_as_poll_descriptor(c_conn);
+ items[0].events = UINT64_MAX;
+ items[0].revents = UINT64_MAX;
+
+ ret = SSL_poll(items, OSSL_NELEM(items), sizeof(SSL_POLL_ITEM),
+ &timeout, 0,
+ &result_count);
+ if (!TEST_int_eq(ret, 1))
+ goto err;
+
+ if ((items[0].revents & SSL_POLL_EVENT_EC) == SSL_POLL_EVENT_EC)
+ SSL_shutdown(c_conn);
+
+ if ((items[0].revents & SSL_POLL_EVENT_ECD) != SSL_POLL_EVENT_ECD)
+ F_SPIN_AGAIN();
+
+ ok = 1;
+err:
+ return ok;
+}
+
+DEF_SCRIPT(script_88, "Test SSL_poll (lite, non-blocking)")
+{
+ OP_SIMPLE_PAIR_CONN_ND();
+ OP_ACCEPT_CONN_WAIT_ND(L, S, 0);
+
+ OP_NEW_STREAM(C, Ca, 0);
+
+ /* Check nothing readable yet. */
+ OP_SELECT_SSL(0, Ca);
+ OP_SELECT_SSL(1, C);
+ OP_PUSH_U64(0);
+ OP_FUNC(script_88_poll);
+
+ OP_WRITE(Ca, "flamingo", 8);
+ OP_CONCLUDE(Ca);
+
+ /* Send something that will make client sockets readable. */
+ OP_ACCEPT_STREAM_WAIT(S, Sa, 0);
+ OP_READ_EXPECT(Sa, "flamingo", 8);
+ OP_WRITE(Sa, "flamingo", 8);
+ OP_CONCLUDE(Sa);
+
+ OP_SELECT_SSL(0, Ca);
+ OP_SELECT_SSL(1, C);
+ OP_PUSH_U64(1);
+ OP_FUNC(script_88_poll);
+
+ OP_READ_EXPECT(Ca, "flamingo", 8);
+
+ /*
+ * client calls non-blocking SSL_shutdown() and gives
+ * server chance to run by calling sleep.
+ */
+ OP_SHUTDOWN_ONCE(C, 0, 0, NULL);
+ OP_SLEEP(100);
+
+ /*
+ * Here we call SSL_poll() and handle SSL_POLL_EVENT_EC
+ * and SSL_POLL_EVENT_ECD on connection object. Whenever
+ * _EC event comes we call SSL_shutdown() to keep connection
+ * draining. We keep calling SSL_poll()/SSL_shutdown() until
+ * SSL_poll() signals SSL_POLL_EVENT_ECD to let us know connection
+ * has dried out and con be closed.
+ */
+ OP_SELECT_SSL(0, C);
+ OP_FUNC(script_88_poll_conly);
+}
+
+/* 89. Max udp payload size configuration */
+DEF_FUNC(check_udp_payload_size_bounds_89)
+{
+ int ok = 0;
+ SSL *ssl;
+
+ REQUIRE_SSL(ssl);
+
+ if (!TEST_false(SSL_set_feature_request_uint(ssl,
+ SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX,
+ QUIC_MIN_INITIAL_DGRAM_LEN - 1))
+ || !TEST_false(SSL_set_feature_request_uint(ssl,
+ SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX,
+ QUIC_DEFAULT_MAX_UDP_PAYLOAD_SIZE + 1)))
+ goto err;
+
+ ok = 1;
+err:
+ return ok;
+}
+
+DEF_SCRIPT(script_89, "Max udp payload size configuration")
+{
+ OP_NEW_SSL_L_LISTEN(L);
+ OP_NEW_SSL_C(C);
+ OP_SET_PEER_ADDR_FROM(C, L);
+
+ OP_SELECT_SSL(0, C);
+ OP_FUNC(check_udp_payload_size_bounds_89);
+ OP_MODIFY_VALUE_UINT(C, SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX,
+ QUIC_DEFAULT_MAX_UDP_PAYLOAD_SIZE);
+
+ OP_CONNECT_WAIT(C);
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_MIN_INITIAL_DGRAM_LEN);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX,
+ SSL_VALUE_CLASS_FEATURE_REQUEST, QUIC_DEFAULT_MAX_UDP_PAYLOAD_SIZE);
+}
+
+/* 90. Negotiated default max udp payload size if not configured */
+DEF_SCRIPT(script_90, "Negotiated default max udp payload size if not configured")
+{
+ OP_SIMPLE_PAIR_CONN();
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_MIN_INITIAL_DGRAM_LEN);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX,
+ SSL_VALUE_CLASS_FEATURE_REQUEST, QUIC_MIN_INITIAL_DGRAM_LEN);
+}
+
+/* 91. No late changes to max udp payload size */
+DEF_SCRIPT(script_91, "No late changes to max udp payload size")
+{
+ OP_SIMPLE_PAIR_CONN();
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CANNOT_CHANGE_VALUE_UINT(C, SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX,
+ QUIC_MIN_INITIAL_DGRAM_LEN, QUIC_DEFAULT_MAX_UDP_PAYLOAD_SIZE);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_UDP_PAYLOAD_SIZE_MAX,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_MIN_INITIAL_DGRAM_LEN);
+}
+
+/* 92. Connection window configuration */
+DEF_SCRIPT(script_92, "Connection window configuration")
+{
+ OP_NEW_SSL_L_LISTEN(L);
+ OP_NEW_SSL_C(C);
+ OP_SET_PEER_ADDR_FROM(C, L);
+
+ OP_MODIFY_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWCON, 800000);
+
+ OP_CONNECT_WAIT(C);
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWCON,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 768 * 1024);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWCON,
+ SSL_VALUE_CLASS_FEATURE_REQUEST, 800000);
+}
+
+/* 93. Negotiated default connection window if not configured */
+DEF_SCRIPT(script_93, "Negotiated default connection window if not configured")
+{
+ OP_SIMPLE_PAIR_CONN();
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWCON,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 768 * 1024);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWCON,
+ SSL_VALUE_CLASS_FEATURE_REQUEST, 768 * 1024);
+}
+
+/* 94. No late changes to connection window */
+DEF_SCRIPT(script_94, "No late changes to connection window")
+{
+ OP_SIMPLE_PAIR_CONN();
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CANNOT_CHANGE_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWCON, 768 * 1024, 800000);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWCON,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 768 * 1024);
+}
+
+/* 95. Bidi stream window configuration */
+DEF_SCRIPT(script_95, "Bidi stream window configuration")
+{
+ OP_NEW_SSL_L_LISTEN(L);
+ OP_NEW_SSL_C(C);
+ OP_SET_PEER_ADDR_FROM(C, L);
+
+ OP_MODIFY_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWBSTR, 600000);
+
+ OP_CONNECT_WAIT(C);
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWBSTR,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 512 * 1024);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWBSTR,
+ SSL_VALUE_CLASS_FEATURE_REQUEST, 600000);
+}
+
+/* 96. Negotiated default bidi stream window if not configured */
+DEF_SCRIPT(script_96, "Negotiated default bidi stream window if not configured")
+{
+ OP_SIMPLE_PAIR_CONN();
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWBSTR,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 512 * 1024);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWBSTR,
+ SSL_VALUE_CLASS_FEATURE_REQUEST, 512 * 1024);
+}
+
+/* 97. No late changes to bidi stream window */
+DEF_SCRIPT(script_97, "No late changes to bidi stream window")
+{
+ OP_SIMPLE_PAIR_CONN();
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CANNOT_CHANGE_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWBSTR, 512 * 1024, 600000);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWBSTR,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 512 * 1024);
+}
+
+/* 98. Uni stream window configuration */
+DEF_SCRIPT(script_98, "Uni stream window configuration")
+{
+ OP_NEW_SSL_L_LISTEN(L);
+ OP_NEW_SSL_C(C);
+ OP_SET_PEER_ADDR_FROM(C, L);
+
+ OP_MODIFY_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWUSTR, 600000);
+
+ OP_CONNECT_WAIT(C);
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWUSTR,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 512 * 1024);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWUSTR,
+ SSL_VALUE_CLASS_FEATURE_REQUEST, 600000);
+}
+
+/* 99. Negotiated default uni stream window if not configured */
+DEF_SCRIPT(script_99, "Negotiated default uni stream window if not configured")
+{
+ OP_SIMPLE_PAIR_CONN();
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWUSTR,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 512 * 1024);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWUSTR,
+ SSL_VALUE_CLASS_FEATURE_REQUEST, 512 * 1024);
+}
+
+/* 100. No late changes to uni stream window */
+DEF_SCRIPT(script_100, "No late changes to uni stream window")
+{
+ OP_SIMPLE_PAIR_CONN();
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CANNOT_CHANGE_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWUSTR, 512 * 1024, 600000);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_WINDOWUSTR,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, 512 * 1024);
+}
+
+/* 101. Ack delay exponent configuration */
+DEF_SCRIPT(script_101, "Ack delay exponent configuration")
+{
+ OP_NEW_SSL_L_LISTEN(L);
+ OP_NEW_SSL_C(C);
+ OP_SET_PEER_ADDR_FROM(C, L);
+
+ OP_REJECT_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_EXPONENT,
+ QUIC_MAX_ACK_DELAY_EXP + 1);
+ OP_MODIFY_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_EXPONENT,
+ QUIC_DEFAULT_ACK_DELAY_EXP + 1);
+
+ OP_CONNECT_WAIT(C);
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_EXPONENT,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_DEFAULT_ACK_DELAY_EXP);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_EXPONENT,
+ SSL_VALUE_CLASS_FEATURE_REQUEST, QUIC_DEFAULT_ACK_DELAY_EXP + 1);
+}
+
+/* 102. Negotiated default ack delay exponent if not configured */
+DEF_SCRIPT(script_102, "Negotiated default ack delay exponent if not configured")
+{
+ OP_SIMPLE_PAIR_CONN();
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_EXPONENT,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_DEFAULT_ACK_DELAY_EXP);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_EXPONENT,
+ SSL_VALUE_CLASS_FEATURE_REQUEST, QUIC_DEFAULT_ACK_DELAY_EXP);
+}
+
+/* 103. No late changes to ack delay exponent */
+DEF_SCRIPT(script_103, "No late changes to ack delay exponent")
+{
+ OP_SIMPLE_PAIR_CONN();
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CANNOT_CHANGE_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_EXPONENT,
+ QUIC_DEFAULT_ACK_DELAY_EXP, QUIC_DEFAULT_ACK_DELAY_EXP + 1);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_EXPONENT,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_DEFAULT_ACK_DELAY_EXP);
+}
+
+/* 104. Max ack delay configuration */
+DEF_SCRIPT(script_104, "Max ack delay configuration")
+{
+ OP_NEW_SSL_L_LISTEN(L);
+ OP_NEW_SSL_C(C);
+ OP_SET_PEER_ADDR_FROM(C, L);
+
+ OP_REJECT_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_MAX,
+ QUIC_MAX_MAX_ACK_DELAY + 1);
+ OP_MODIFY_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_MAX,
+ QUIC_DEFAULT_MAX_ACK_DELAY / 2);
+
+ OP_CONNECT_WAIT(C);
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_MAX,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_DEFAULT_MAX_ACK_DELAY);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_MAX,
+ SSL_VALUE_CLASS_FEATURE_REQUEST, QUIC_DEFAULT_MAX_ACK_DELAY / 2);
+}
+
+/* 105. Negotiated default max ack delay if not configured */
+DEF_SCRIPT(script_105, "Negotiated default max ack delay if not configured")
+{
+ OP_SIMPLE_PAIR_CONN();
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_MAX,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_DEFAULT_MAX_ACK_DELAY);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_MAX,
+ SSL_VALUE_CLASS_FEATURE_REQUEST, QUIC_DEFAULT_MAX_ACK_DELAY);
+}
+
+/* 106. No late changes to max ack delay */
+DEF_SCRIPT(script_106, "No late changes to max ack delay")
+{
+ OP_SIMPLE_PAIR_CONN();
+
+ OP_SET_DEFAULT_STREAM_MODE(C, SSL_DEFAULT_STREAM_MODE_NONE);
+
+ OP_CANNOT_CHANGE_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_MAX,
+ QUIC_DEFAULT_MAX_ACK_DELAY, QUIC_DEFAULT_MAX_ACK_DELAY / 2);
+ OP_CHECK_VALUE_UINT(C, SSL_VALUE_QUIC_ACK_DELAY_MAX,
+ SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, QUIC_DEFAULT_MAX_ACK_DELAY);
}
static int inject_new_cids(RADIX_FAULT *fault, QUIC_PKT_HDR *hdr,
@@ -4278,4 +5676,5 @@ static SCRIPT_INFO *const scripts[] = {
USE(script_105),
USE(script_106),
USE(new_connid),
+ USE(forbidden_frame_types),
};
diff --git a/test/recipes/70-test_quic_multistream.t b/test/recipes/70-test_quic_multistream.t
deleted file mode 100644
index a13693ee71..0000000000
--- a/test/recipes/70-test_quic_multistream.t
+++ /dev/null
@@ -1,50 +0,0 @@
-#! /usr/bin/env perl
-# Copyright 2022-2026 The OpenSSL Project Authors. All Rights Reserved.
-#
-# Licensed under the Apache License 2.0 (the "License"). You may not use
-# this file except in compliance with the License. You can obtain a copy
-# in the file LICENSE in the source distribution or at
-# https://www.openssl.org/source/license.html
-
-use OpenSSL::Test qw/:DEFAULT srctop_file result_dir data_file/;
-use OpenSSL::Test::Utils;
-use File::Temp qw(tempfile);
-use File::Path 2.00 qw(rmtree mkpath);
-
-setup("test_quic_multistream");
-
-plan skip_all => "QUIC protocol is not supported by this OpenSSL build"
- if disabled('quic');
-
-plan tests => 2;
-
-my $qlog_output;
-if (!disabled('qlog')) {
- $qlog_output = result_dir("qlog-output");
- print "# Writing qlog output to $qlog_output\n";
- rmtree($qlog_output, { safe => 1 });
- mkdir($qlog_output);
- $ENV{QLOGDIR} = $qlog_output;
-}
-
-$ENV{OSSL_QFILTER} = "* -quic:unknown_event quic:another_unknown_event";
-
-ok(run(test(["quic_multistream_test",
- srctop_file("test", "certs", "servercert.pem"),
- srctop_file("test", "certs", "serverkey.pem")])));
-
-SKIP: {
- skip "no qlog", 1 if disabled('qlog');
- skip "not running CI tests", 1 unless $ENV{OSSL_RUN_CI_TESTS};
-
- subtest "generate and check qlog output" => sub {
- plan tests => 2;
- ok(run(test(["quic_radix_test",
- srctop_file("test", "certs", "servercert.pem"),
- srctop_file("test", "certs", "serverkey.pem")])),
- "running quic_radix_test to contribute qlog output");
-
- ok(run(cmd([data_file("verify-qlog.py")], exe_shell => "python3")),
- "running qlog verification script");
- };
-}
diff --git a/test/recipes/70-test_quic_radix.t b/test/recipes/70-test_quic_radix.t
index 9250a2b0df..54de6ab1b9 100644
--- a/test/recipes/70-test_quic_radix.t
+++ b/test/recipes/70-test_quic_radix.t
@@ -6,8 +6,9 @@
# in the file LICENSE in the source distribution or at
# https://www.openssl.org/source/license.html
-use OpenSSL::Test qw/:DEFAULT result_file srctop_file/;
+use OpenSSL::Test qw/:DEFAULT result_file result_dir srctop_file data_file/;
use OpenSSL::Test::Utils;
+use File::Path 2.00 qw(rmtree);
sub diagnose_failure {
my ($log, $max_bytes) = @_;
@@ -50,7 +51,7 @@ setup("test_quic_radix");
plan skip_all => "QUIC protocol is not supported by this OpenSSL build"
if disabled('quic');
-plan tests => 1;
+plan tests => 2;
# Keep the test's multi-megabyte diagnostics out of the TAP pipe.
my $redirect = $ENV{HARNESS_ACTIVE} && !$ENV{HARNESS_VERBOSE};
@@ -62,3 +63,26 @@ my $result = run(test(["quic_radix_test",
diagnose_failure($stderr_log, 32 * 1024) if !$result && $redirect;
ok($result, "running QUIC RADIX tests");
+
+SKIP: {
+ skip "no qlog", 1 if disabled('qlog');
+ skip "not running CI tests", 1 unless $ENV{OSSL_RUN_CI_TESTS};
+
+ subtest "generate and check qlog output" => sub {
+ plan tests => 2;
+
+ my $qlog_output = result_dir("qlog-output");
+ rmtree($qlog_output, { safe => 1 });
+ mkdir($qlog_output);
+ local $ENV{QLOGDIR} = $qlog_output;
+ local $ENV{OSSL_QFILTER} = "* -quic:unknown_event quic:another_unknown_event";
+
+ ok(run(test(["quic_radix_test",
+ srctop_file("test", "certs", "servercert.pem"),
+ srctop_file("test", "certs", "serverkey.pem")])),
+ "running quic_radix_test to contribute qlog output");
+
+ ok(run(cmd([data_file("verify-qlog.py")], exe_shell => "python3")),
+ "running qlog verification script");
+ };
+}
diff --git a/test/recipes/70-test_quic_multistream_data/verify-qlog.py b/test/recipes/70-test_quic_radix_data/verify-qlog.py
similarity index 99%
rename from test/recipes/70-test_quic_multistream_data/verify-qlog.py
rename to test/recipes/70-test_quic_radix_data/verify-qlog.py
index d5ccae3891..735eb929d6 100755
--- a/test/recipes/70-test_quic_multistream_data/verify-qlog.py
+++ b/test/recipes/70-test_quic_radix_data/verify-qlog.py
@@ -179,12 +179,12 @@ def run():
"connectivity:connection_closed"
)
- if num_files < 300:
+ if num_files < 150:
raise Unexpected(qlogdir, f"unexpectedly few output files: {num_files}")
for required_event in required_events:
count = event_type_counts.get(required_event, 0)
- if count < 100:
+ if count < 50:
raise Unexpected(qlogdir, f"unexpectedly low count of event '{required_event}': got {count}")
# For each direction, ensure that at least one of the tests we run generated