OpenCoverage

d1_lib.c

Absolute File Name:/home/opencoverage/opencoverage/guest-scripts/libressl/src/ssl/d1_lib.c
Source codeSwitch to Preprocessed file
LineSourceCount
1/* $OpenBSD: d1_lib.c,v 1.42 2017/04/10 17:27:33 jsing Exp $ */-
2/*-
3 * DTLS implementation written by Nagendra Modadugu-
4 * (nagendra@cs.stanford.edu) for the OpenSSL project 2005.-
5 */-
6/* ====================================================================-
7 * Copyright (c) 1999-2005 The OpenSSL Project. All rights reserved.-
8 *-
9 * Redistribution and use in source and binary forms, with or without-
10 * modification, are permitted provided that the following conditions-
11 * are met:-
12 *-
13 * 1. Redistributions of source code must retain the above copyright-
14 * notice, this list of conditions and the following disclaimer.-
15 *-
16 * 2. Redistributions in binary form must reproduce the above copyright-
17 * notice, this list of conditions and the following disclaimer in-
18 * the documentation and/or other materials provided with the-
19 * distribution.-
20 *-
21 * 3. All advertising materials mentioning features or use of this-
22 * software must display the following acknowledgment:-
23 * "This product includes software developed by the OpenSSL Project-
24 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"-
25 *-
26 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to-
27 * endorse or promote products derived from this software without-
28 * prior written permission. For written permission, please contact-
29 * openssl-core@OpenSSL.org.-
30 *-
31 * 5. Products derived from this software may not be called "OpenSSL"-
32 * nor may "OpenSSL" appear in their names without prior written-
33 * permission of the OpenSSL Project.-
34 *-
35 * 6. Redistributions of any form whatsoever must retain the following-
36 * acknowledgment:-
37 * "This product includes software developed by the OpenSSL Project-
38 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"-
39 *-
40 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY-
41 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE-
42 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR-
43 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR-
44 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,-
45 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT-
46 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;-
47 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)-
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,-
49 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)-
50 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED-
51 * OF THE POSSIBILITY OF SUCH DAMAGE.-
52 * ====================================================================-
53 *-
54 * This product includes cryptographic software written by Eric Young-
55 * (eay@cryptsoft.com). This product includes software written by Tim-
56 * Hudson (tjh@cryptsoft.com).-
57 *-
58 */-
59-
60#include <sys/types.h>-
61#include <sys/socket.h>-
62#include <sys/time.h>-
63-
64#include <netinet/in.h>-
65-
66#include <stdio.h>-
67-
68#include <openssl/objects.h>-
69-
70#include "pqueue.h"-
71#include "ssl_locl.h"-
72-
73static int dtls1_listen(SSL *s, struct sockaddr *client);-
74-
75SSL3_ENC_METHOD DTLSv1_enc_data = {-
76 .enc = dtls1_enc,-
77 .enc_flags = SSL_ENC_FLAG_EXPLICIT_IV,-
78};-
79-
80long-
81dtls1_default_timeout(void)-
82{-
83 /* 2 hours, the 24 hours mentioned in the DTLSv1 spec-
84 * is way too long for http, the cache would over fill */-
85 return (60*60*2);
executed 33 times by 5 tests: return (60*60*2);
Executed by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
33
86}-
87-
88int-
89dtls1_new(SSL *s)-
90{-
91 DTLS1_STATE *d1;-
92-
93 if (!ssl3_new(s))
!ssl3_new(s)Description
TRUEnever evaluated
FALSEevaluated 33 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
0-33
94 return (0);
never executed: return (0);
0
95 if ((d1 = calloc(1, sizeof(*d1))) == NULL) {
(d1 = calloc(1...== ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 33 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
0-33
96 ssl3_free(s);-
97 return (0);
never executed: return (0);
0
98 }-
99 if ((d1->internal = calloc(1, sizeof(*d1->internal))) == NULL) {
(d1->internal ...== ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 33 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
0-33
100 free(d1);-
101 ssl3_free(s);-
102 return (0);
never executed: return (0);
0
103 }-
104-
105 /* d1->handshake_epoch=0; */-
106-
107 d1->internal->unprocessed_rcds.q = pqueue_new();-
108 d1->internal->processed_rcds.q = pqueue_new();-
109 d1->internal->buffered_messages = pqueue_new();-
110 d1->sent_messages = pqueue_new();-
111 d1->internal->buffered_app_data.q = pqueue_new();-
112-
113 if (s->server) {
s->serverDescription
TRUEnever evaluated
FALSEevaluated 33 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
0-33
114 d1->internal->cookie_len = sizeof(D1I(s)->cookie);-
115 }
never executed: end of block
0
116-
117 if (!d1->internal->unprocessed_rcds.q || !d1->internal->processed_rcds.q ||
!d1->internal-...ocessed_rcds.qDescription
TRUEnever evaluated
FALSEevaluated 33 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
!d1->internal-...ocessed_rcds.qDescription
TRUEnever evaluated
FALSEevaluated 33 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
0-33
118 !d1->internal->buffered_messages || !d1->sent_messages ||
!d1->internal-...fered_messagesDescription
TRUEnever evaluated
FALSEevaluated 33 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
!d1->sent_messagesDescription
TRUEnever evaluated
FALSEevaluated 33 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
0-33
119 !d1->internal->buffered_app_data.q) {
!d1->internal-...red_app_data.qDescription
TRUEnever evaluated
FALSEevaluated 33 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
0-33
120 pqueue_free(d1->internal->unprocessed_rcds.q);-
121 pqueue_free(d1->internal->processed_rcds.q);-
122 pqueue_free(d1->internal->buffered_messages);-
123 pqueue_free(d1->sent_messages);-
124 pqueue_free(d1->internal->buffered_app_data.q);-
125 free(d1);-
126 ssl3_free(s);-
127 return (0);
never executed: return (0);
0
128 }-
129-
130 s->d1 = d1;-
131 s->method->internal->ssl_clear(s);-
132 return (1);
executed 33 times by 5 tests: return (1);
Executed by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
33
133}-
134-
135static void-
136dtls1_clear_queues(SSL *s)-
137{-
138 pitem *item = NULL;-
139 hm_fragment *frag = NULL;-
140 DTLS1_RECORD_DATA *rdata;-
141-
142 while ((item = pqueue_pop(D1I(s)->unprocessed_rcds.q)) != NULL) {
(item = pqueue...!= ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 121 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
0-121
143 rdata = (DTLS1_RECORD_DATA *) item->data;-
144 free(rdata->rbuf.buf);-
145 free(item->data);-
146 pitem_free(item);-
147 }
never executed: end of block
0
148-
149 while ((item = pqueue_pop(D1I(s)->processed_rcds.q)) != NULL) {
(item = pqueue...!= ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 121 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
0-121
150 rdata = (DTLS1_RECORD_DATA *) item->data;-
151 free(rdata->rbuf.buf);-
152 free(item->data);-
153 pitem_free(item);-
154 }
never executed: end of block
0
155-
156 while ((item = pqueue_pop(D1I(s)->buffered_messages)) != NULL) {
(item = pqueue...!= ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 121 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
0-121
157 frag = (hm_fragment *)item->data;-
158 free(frag->fragment);-
159 free(frag);-
160 pitem_free(item);-
161 }
never executed: end of block
0
162-
163 while ((item = pqueue_pop(s->d1->sent_messages)) != NULL) {
(item = pqueue...!= ((void *)0)Description
TRUEevaluated 34 times by 2 tests
Evaluated by:
  • clienttest
  • ssltest
FALSEevaluated 121 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
34-121
164 frag = (hm_fragment *)item->data;-
165 free(frag->fragment);-
166 free(frag);-
167 pitem_free(item);-
168 }
executed 34 times by 2 tests: end of block
Executed by:
  • clienttest
  • ssltest
34
169-
170 while ((item = pqueue_pop(D1I(s)->buffered_app_data.q)) != NULL) {
(item = pqueue...!= ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 121 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
0-121
171 rdata = (DTLS1_RECORD_DATA *) item->data;-
172 free(rdata->rbuf.buf);-
173 free(item->data);-
174 pitem_free(item);-
175 }
never executed: end of block
0
176}
executed 121 times by 5 tests: end of block
Executed by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
121
177-
178void-
179dtls1_free(SSL *s)-
180{-
181 if (s == NULL)
s == ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 32 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
0-32
182 return;
never executed: return;
0
183-
184 ssl3_free(s);-
185-
186 dtls1_clear_queues(s);-
187-
188 pqueue_free(D1I(s)->unprocessed_rcds.q);-
189 pqueue_free(D1I(s)->processed_rcds.q);-
190 pqueue_free(D1I(s)->buffered_messages);-
191 pqueue_free(s->d1->sent_messages);-
192 pqueue_free(D1I(s)->buffered_app_data.q);-
193-
194 freezero(s->d1->internal, sizeof(*s->d1->internal));-
195 freezero(s->d1, sizeof(*s->d1));-
196-
197 s->d1 = NULL;-
198}
executed 32 times by 5 tests: end of block
Executed by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
32
199-
200void-
201dtls1_clear(SSL *s)-
202{-
203 struct dtls1_state_internal_st *internal;-
204 pqueue unprocessed_rcds;-
205 pqueue processed_rcds;-
206 pqueue buffered_messages;-
207 pqueue sent_messages;-
208 pqueue buffered_app_data;-
209 unsigned int mtu;-
210-
211 if (s->d1) {
s->d1Description
TRUEevaluated 89 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
FALSEevaluated 33 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
33-89
212 unprocessed_rcds = D1I(s)->unprocessed_rcds.q;-
213 processed_rcds = D1I(s)->processed_rcds.q;-
214 buffered_messages = D1I(s)->buffered_messages;-
215 sent_messages = s->d1->sent_messages;-
216 buffered_app_data = D1I(s)->buffered_app_data.q;-
217 mtu = D1I(s)->mtu;-
218-
219 dtls1_clear_queues(s);-
220-
221 memset(s->d1->internal, 0, sizeof(*s->d1->internal));-
222 internal = s->d1->internal;-
223 memset(s->d1, 0, sizeof(*s->d1));-
224 s->d1->internal = internal;-
225-
226 if (s->server) {
s->serverDescription
TRUEevaluated 40 times by 3 tests
Evaluated by:
  • cipherstest
  • ssl_versions
  • ssltest
FALSEevaluated 49 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
40-49
227 D1I(s)->cookie_len = sizeof(D1I(s)->cookie);-
228 }
executed 40 times by 3 tests: end of block
Executed by:
  • cipherstest
  • ssl_versions
  • ssltest
40
229-
230 if (SSL_get_options(s) & SSL_OP_NO_QUERY_MTU) {
SSL_ctrl((s),3... & 0x00001000LDescription
TRUEnever evaluated
FALSEevaluated 89 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
0-89
231 D1I(s)->mtu = mtu;-
232 }
never executed: end of block
0
233-
234 D1I(s)->unprocessed_rcds.q = unprocessed_rcds;-
235 D1I(s)->processed_rcds.q = processed_rcds;-
236 D1I(s)->buffered_messages = buffered_messages;-
237 s->d1->sent_messages = sent_messages;-
238 D1I(s)->buffered_app_data.q = buffered_app_data;-
239 }
executed 89 times by 5 tests: end of block
Executed by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
89
240-
241 ssl3_clear(s);-
242-
243 s->version = DTLS1_VERSION;-
244}
executed 122 times by 5 tests: end of block
Executed by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
122
245-
246long-
247dtls1_ctrl(SSL *s, int cmd, long larg, void *parg)-
248{-
249 int ret = 0;-
250-
251 switch (cmd) {-
252 case DTLS_CTRL_GET_TIMEOUT:
never executed: case 73:
0
253 if (dtls1_get_timeout(s, (struct timeval*) parg) != NULL) {
dtls1_get_time...!= ((void *)0)Description
TRUEnever evaluated
FALSEnever evaluated
0
254 ret = 1;-
255 }
never executed: end of block
0
256 break;
never executed: break;
0
257 case DTLS_CTRL_HANDLE_TIMEOUT:
never executed: case 74:
0
258 ret = dtls1_handle_timeout(s);-
259 break;
never executed: break;
0
260 case DTLS_CTRL_LISTEN:
never executed: case 75:
0
261 ret = dtls1_listen(s, parg);-
262 break;
never executed: break;
0
263-
264 default:
never executed: default:
0
265 ret = ssl3_ctrl(s, cmd, larg, parg);-
266 break;
never executed: break;
0
267 }-
268 return (ret);
never executed: return (ret);
0
269}-
270-
271/*-
272 * As it's impossible to use stream ciphers in "datagram" mode, this-
273 * simple filter is designed to disengage them in DTLS. Unfortunately-
274 * there is no universal way to identify stream SSL_CIPHER, so we have-
275 * to explicitly list their SSL_* codes. Currently RC4 is the only one-
276 * available, but if new ones emerge, they will have to be added...-
277 */-
278const SSL_CIPHER *-
279dtls1_get_cipher(unsigned int u)-
280{-
281 const SSL_CIPHER *ciph = ssl3_get_cipher(u);-
282-
283 if (ciph != NULL) {
ciph != ((void *)0)Description
TRUEevaluated 3243 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
FALSEnever evaluated
0-3243
284 if (ciph->algorithm_enc == SSL_RC4)
ciph->algorith...== 0x00000004LDescription
TRUEevaluated 282 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
FALSEevaluated 2961 times by 5 tests
Evaluated by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
282-2961
285 return NULL;
executed 282 times by 5 tests: return ((void *)0) ;
Executed by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
282
286 }
executed 2961 times by 5 tests: end of block
Executed by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
2961
287-
288 return ciph;
executed 2961 times by 5 tests: return ciph;
Executed by:
  • cipherstest
  • clienttest
  • ssl_versions
  • ssltest
  • tlsexttest
2961
289}-
290-
291void-
292dtls1_start_timer(SSL *s)-
293{-
294-
295 /* If timer is not set, initialize duration with 1 second */-
296 if (s->d1->next_timeout.tv_sec == 0 && s->d1->next_timeout.tv_usec == 0) {
s->d1->next_ti...ut.tv_sec == 0Description
TRUEevaluated 34 times by 2 tests
Evaluated by:
  • clienttest
  • ssltest
FALSEevaluated 54 times by 1 test
Evaluated by:
  • ssltest
s->d1->next_ti...t.tv_usec == 0Description
TRUEevaluated 34 times by 2 tests
Evaluated by:
  • clienttest
  • ssltest
FALSEnever evaluated
0-54
297 s->d1->timeout_duration = 1;-
298 }
executed 34 times by 2 tests: end of block
Executed by:
  • clienttest
  • ssltest
34
299-
300 /* Set timeout to current time */-
301 gettimeofday(&(s->d1->next_timeout), NULL);-
302-
303 /* Add duration to current time */-
304 s->d1->next_timeout.tv_sec += s->d1->timeout_duration;-
305 BIO_ctrl(SSL_get_rbio(s), BIO_CTRL_DGRAM_SET_NEXT_TIMEOUT, 0,-
306 &s->d1->next_timeout);-
307}
executed 88 times by 2 tests: end of block
Executed by:
  • clienttest
  • ssltest
88
308-
309struct timeval*-
310dtls1_get_timeout(SSL *s, struct timeval* timeleft)-
311{-
312 struct timeval timenow;-
313-
314 /* If no timeout is set, just return NULL */-
315 if (s->d1->next_timeout.tv_sec == 0 && s->d1->next_timeout.tv_usec == 0) {
s->d1->next_ti...ut.tv_sec == 0Description
TRUEevaluated 91 times by 1 test
Evaluated by:
  • ssltest
FALSEevaluated 250 times by 2 tests
Evaluated by:
  • clienttest
  • ssltest
s->d1->next_ti...t.tv_usec == 0Description
TRUEevaluated 91 times by 1 test
Evaluated by:
  • ssltest
FALSEnever evaluated
0-250
316 return NULL;
executed 91 times by 1 test: return ((void *)0) ;
Executed by:
  • ssltest
91
317 }-
318-
319 /* Get current time */-
320 gettimeofday(&timenow, NULL);-
321-
322 /* If timer already expired, set remaining time to 0 */-
323 if (s->d1->next_timeout.tv_sec < timenow.tv_sec ||
s->d1->next_ti...timenow.tv_secDescription
TRUEnever evaluated
FALSEevaluated 250 times by 2 tests
Evaluated by:
  • clienttest
  • ssltest
0-250
324 (s->d1->next_timeout.tv_sec == timenow.tv_sec &&
s->d1->next_ti...timenow.tv_secDescription
TRUEnever evaluated
FALSEevaluated 250 times by 2 tests
Evaluated by:
  • clienttest
  • ssltest
0-250
325 s->d1->next_timeout.tv_usec <= timenow.tv_usec)) {
s->d1->next_ti...imenow.tv_usecDescription
TRUEnever evaluated
FALSEnever evaluated
0
326 memset(timeleft, 0, sizeof(struct timeval));-
327 return timeleft;
never executed: return timeleft;
0
328 }-
329-
330 /* Calculate time left until timer expires */-
331 memcpy(timeleft, &(s->d1->next_timeout), sizeof(struct timeval));-
332 timeleft->tv_sec -= timenow.tv_sec;-
333 timeleft->tv_usec -= timenow.tv_usec;-
334 if (timeleft->tv_usec < 0) {
timeleft->tv_usec < 0Description
TRUEevaluated 250 times by 2 tests
Evaluated by:
  • clienttest
  • ssltest
FALSEnever evaluated
0-250
335 timeleft->tv_sec--;-
336 timeleft->tv_usec += 1000000;-
337 }
executed 250 times by 2 tests: end of block
Executed by:
  • clienttest
  • ssltest
250
338-
339 /* If remaining time is less than 15 ms, set it to 0-
340 * to prevent issues because of small devergences with-
341 * socket timeouts.-
342 */-
343 if (timeleft->tv_sec == 0 && timeleft->tv_usec < 15000) {
timeleft->tv_sec == 0Description
TRUEevaluated 250 times by 2 tests
Evaluated by:
  • clienttest
  • ssltest
FALSEnever evaluated
timeleft->tv_usec < 15000Description
TRUEnever evaluated
FALSEevaluated 250 times by 2 tests
Evaluated by:
  • clienttest
  • ssltest
0-250
344 memset(timeleft, 0, sizeof(struct timeval));-
345 }
never executed: end of block
0
346-
347-
348 return timeleft;
executed 250 times by 2 tests: return timeleft;
Executed by:
  • clienttest
  • ssltest
250
349}-
350-
351int-
352dtls1_is_timer_expired(SSL *s)-
353{-
354 struct timeval timeleft;-
355-
356 /* Get time left until timeout, return false if no timer running */-
357 if (dtls1_get_timeout(s, &timeleft) == NULL) {
dtls1_get_time...== ((void *)0)Description
TRUEevaluated 91 times by 1 test
Evaluated by:
  • ssltest
FALSEevaluated 250 times by 2 tests
Evaluated by:
  • clienttest
  • ssltest
91-250
358 return 0;
executed 91 times by 1 test: return 0;
Executed by:
  • ssltest
91
359 }-
360-
361 /* Return false if timer is not expired yet */-
362 if (timeleft.tv_sec > 0 || timeleft.tv_usec > 0) {
timeleft.tv_sec > 0Description
TRUEnever evaluated
FALSEevaluated 250 times by 2 tests
Evaluated by:
  • clienttest
  • ssltest
timeleft.tv_usec > 0Description
TRUEevaluated 250 times by 2 tests
Evaluated by:
  • clienttest
  • ssltest
FALSEnever evaluated
0-250
363 return 0;
executed 250 times by 2 tests: return 0;
Executed by:
  • clienttest
  • ssltest
250
364 }-
365-
366 /* Timer expired, so return true */-
367 return 1;
never executed: return 1;
0
368}-
369-
370void-
371dtls1_double_timeout(SSL *s)-
372{-
373 s->d1->timeout_duration *= 2;-
374 if (s->d1->timeout_duration > 60)
s->d1->timeout_duration > 60Description
TRUEnever evaluated
FALSEnever evaluated
0
375 s->d1->timeout_duration = 60;
never executed: s->d1->timeout_duration = 60;
0
376 dtls1_start_timer(s);-
377}
never executed: end of block
0
378-
379void-
380dtls1_stop_timer(SSL *s)-
381{-
382 /* Reset everything */-
383 memset(&(D1I(s)->timeout), 0, sizeof(struct dtls1_timeout_st));-
384 memset(&(s->d1->next_timeout), 0, sizeof(struct timeval));-
385 s->d1->timeout_duration = 1;-
386 BIO_ctrl(SSL_get_rbio(s), BIO_CTRL_DGRAM_SET_NEXT_TIMEOUT, 0,-
387 &(s->d1->next_timeout));-
388 /* Clear retransmission buffer */-
389 dtls1_clear_record_buffer(s);-
390}
executed 55 times by 1 test: end of block
Executed by:
  • ssltest
55
391-
392int-
393dtls1_check_timeout_num(SSL *s)-
394{-
395 D1I(s)->timeout.num_alerts++;-
396-
397 /* Reduce MTU after 2 unsuccessful retransmissions */-
398 if (D1I(s)->timeout.num_alerts > 2) {
(s->d1->intern...num_alerts > 2Description
TRUEnever evaluated
FALSEnever evaluated
0
399 D1I(s)->mtu = BIO_ctrl(SSL_get_wbio(s),-
400 BIO_CTRL_DGRAM_GET_FALLBACK_MTU, 0, NULL);-
401-
402 }
never executed: end of block
0
403-
404 if (D1I(s)->timeout.num_alerts > DTLS1_TMO_ALERT_COUNT) {
(s->d1->intern...um_alerts > 12Description
TRUEnever evaluated
FALSEnever evaluated
0
405 /* fail the connection, enough alerts have been sent */-
406 SSLerror(s, SSL_R_READ_TIMEOUT_EXPIRED);-
407 return -1;
never executed: return -1;
0
408 }-
409-
410 return 0;
never executed: return 0;
0
411}-
412-
413int-
414dtls1_handle_timeout(SSL *s)-
415{-
416 /* if no timer is expired, don't do anything */-
417 if (!dtls1_is_timer_expired(s)) {
!dtls1_is_timer_expired(s)Description
TRUEevaluated 296 times by 2 tests
Evaluated by:
  • clienttest
  • ssltest
FALSEnever evaluated
0-296
418 return 0;
executed 296 times by 2 tests: return 0;
Executed by:
  • clienttest
  • ssltest
296
419 }-
420-
421 dtls1_double_timeout(s);-
422-
423 if (dtls1_check_timeout_num(s) < 0)
dtls1_check_timeout_num(s) < 0Description
TRUEnever evaluated
FALSEnever evaluated
0
424 return -1;
never executed: return -1;
0
425-
426 D1I(s)->timeout.read_timeouts++;-
427 if (D1I(s)->timeout.read_timeouts > DTLS1_TMO_READ_COUNT) {
(s->d1->intern...d_timeouts > 2Description
TRUEnever evaluated
FALSEnever evaluated
0
428 D1I(s)->timeout.read_timeouts = 1;-
429 }
never executed: end of block
0
430-
431 dtls1_start_timer(s);-
432 return dtls1_retransmit_buffered_messages(s);
never executed: return dtls1_retransmit_buffered_messages(s);
0
433}-
434-
435int-
436dtls1_listen(SSL *s, struct sockaddr *client)-
437{-
438 int ret;-
439-
440 /* Ensure there is no state left over from a previous invocation */-
441 SSL_clear(s);-
442-
443 SSL_set_options(s, SSL_OP_COOKIE_EXCHANGE);-
444 D1I(s)->listen = 1;-
445-
446 ret = SSL_accept(s);-
447 if (ret <= 0)
ret <= 0Description
TRUEnever evaluated
FALSEnever evaluated
0
448 return ret;
never executed: return ret;
0
449-
450 (void)BIO_dgram_get_peer(SSL_get_rbio(s), client);-
451 return 1;
never executed: return 1;
0
452}-
453-
454void-
455dtls1_build_sequence_number(unsigned char *dst, unsigned char *seq,-
456 unsigned short epoch)-
457{-
458 unsigned char dtlsseq[SSL3_SEQUENCE_SIZE];-
459 unsigned char *p;-
460-
461 p = dtlsseq;-
462 s2n(epoch, p);-
463 memcpy(p, &seq[2], SSL3_SEQUENCE_SIZE - 2);-
464 memcpy(dst, dtlsseq, SSL3_SEQUENCE_SIZE);-
465}
executed 110 times by 1 test: end of block
Executed by:
  • ssltest
110
Source codeSwitch to Preprocessed file
Generated by Squish Coco 4.2.2