Содержимое пина, зафиксированного в go.mod sing-box-lx, одним коммитом без истории. Полная история SagerNet/gvisor — 1.45 ГБ и клонируется в каждой CI-джобе; наша дельта — одна вставка в одну функцию, история для неё не нужна. Module path github.com/sagernet/gvisor сохранён намеренно: на него опирается replace-директива суперпроекта. Патч поверх — отдельным коммитом, чтобы дельта читалась одним git show и переносилась на новый пин копированием. SPECS/TASKS/048-GVISOR_HANDSHAKE_NIL_CRASH
321 lines
7.7 KiB
Go
321 lines
7.7 KiB
Go
// Copyright 2018 The gVisor Authors.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
// Package channel provides the implementation of channel-based data-link layer
|
|
// endpoints. Such endpoints allow injection of inbound packets and store
|
|
// outbound packets in a channel.
|
|
package channel
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/sagernet/gvisor/pkg/tcpip"
|
|
"github.com/sagernet/gvisor/pkg/tcpip/header"
|
|
"github.com/sagernet/gvisor/pkg/tcpip/stack"
|
|
)
|
|
|
|
// Notification is the interface for receiving notification from the packet
|
|
// queue.
|
|
type Notification interface {
|
|
// WriteNotify will be called when a write happens to the queue.
|
|
WriteNotify()
|
|
}
|
|
|
|
// NotificationHandle is an opaque handle to the registered notification target.
|
|
// It can be used to unregister the notification when no longer interested.
|
|
//
|
|
// +stateify savable
|
|
type NotificationHandle struct {
|
|
n Notification
|
|
}
|
|
|
|
type queue struct {
|
|
// c is the outbound packet channel.
|
|
c chan *stack.PacketBuffer
|
|
mu queueRWMutex
|
|
// +checklocks:mu
|
|
notify []*NotificationHandle
|
|
// +checklocks:mu
|
|
closed bool
|
|
}
|
|
|
|
func (q *queue) Close() {
|
|
q.mu.Lock()
|
|
defer q.mu.Unlock()
|
|
if !q.closed {
|
|
close(q.c)
|
|
}
|
|
q.closed = true
|
|
}
|
|
|
|
func (q *queue) Read() *stack.PacketBuffer {
|
|
select {
|
|
case p := <-q.c:
|
|
return p
|
|
default:
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func (q *queue) ReadContext(ctx context.Context) *stack.PacketBuffer {
|
|
select {
|
|
case pkt := <-q.c:
|
|
return pkt
|
|
case <-ctx.Done():
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func (q *queue) Write(pkt *stack.PacketBuffer) tcpip.Error {
|
|
// q holds the PacketBuffer.
|
|
q.mu.RLock()
|
|
if q.closed {
|
|
q.mu.RUnlock()
|
|
return &tcpip.ErrClosedForSend{}
|
|
}
|
|
|
|
wrote := false
|
|
p := pkt.Clone()
|
|
select {
|
|
case q.c <- p:
|
|
wrote = true
|
|
default:
|
|
p.DecRef()
|
|
}
|
|
notify := q.notify
|
|
q.mu.RUnlock()
|
|
|
|
if wrote {
|
|
// Send notification outside of lock.
|
|
for _, h := range notify {
|
|
h.n.WriteNotify()
|
|
}
|
|
return nil
|
|
}
|
|
return &tcpip.ErrNoBufferSpace{}
|
|
}
|
|
|
|
func (q *queue) Num() int {
|
|
return len(q.c)
|
|
}
|
|
|
|
func (q *queue) AddNotify(notify Notification) *NotificationHandle {
|
|
q.mu.Lock()
|
|
defer q.mu.Unlock()
|
|
h := &NotificationHandle{n: notify}
|
|
q.notify = append(q.notify, h)
|
|
return h
|
|
}
|
|
|
|
func (q *queue) RemoveNotify(handle *NotificationHandle) {
|
|
q.mu.Lock()
|
|
defer q.mu.Unlock()
|
|
// Make a copy, since we reads the array outside of lock when notifying.
|
|
notify := make([]*NotificationHandle, 0, len(q.notify))
|
|
for _, h := range q.notify {
|
|
if h != handle {
|
|
notify = append(notify, h)
|
|
}
|
|
}
|
|
q.notify = notify
|
|
}
|
|
|
|
var (
|
|
_ stack.LinkEndpoint = (*Endpoint)(nil)
|
|
_ stack.GSOEndpoint = (*Endpoint)(nil)
|
|
)
|
|
|
|
// Endpoint is link layer endpoint that stores outbound packets in a channel
|
|
// and allows injection of inbound packets.
|
|
//
|
|
// +stateify savable
|
|
type Endpoint struct {
|
|
LinkEPCapabilities stack.LinkEndpointCapabilities
|
|
SupportedGSOKind stack.SupportedGSO
|
|
|
|
mu endpointRWMutex `state:"nosave"`
|
|
// +checklocks:mu
|
|
dispatcher stack.NetworkDispatcher
|
|
// +checklocks:mu
|
|
linkAddr tcpip.LinkAddress
|
|
// +checklocks:mu
|
|
mtu uint32
|
|
|
|
// Outbound packet queue.
|
|
q *queue
|
|
}
|
|
|
|
// New creates a new channel endpoint.
|
|
func New(size int, mtu uint32, linkAddr tcpip.LinkAddress) *Endpoint {
|
|
return &Endpoint{
|
|
q: &queue{
|
|
c: make(chan *stack.PacketBuffer, size),
|
|
},
|
|
mtu: mtu,
|
|
linkAddr: linkAddr,
|
|
}
|
|
}
|
|
|
|
// Close closes e. Further packet injections will return an error, and all pending
|
|
// packets are discarded. Close may be called concurrently with WritePackets.
|
|
func (e *Endpoint) Close() {
|
|
e.q.Close()
|
|
e.Drain()
|
|
}
|
|
|
|
// Read does non-blocking read one packet from the outbound packet queue.
|
|
func (e *Endpoint) Read() *stack.PacketBuffer {
|
|
return e.q.Read()
|
|
}
|
|
|
|
// ReadContext does blocking read for one packet from the outbound packet queue.
|
|
// It can be cancelled by ctx, and in this case, it returns nil.
|
|
func (e *Endpoint) ReadContext(ctx context.Context) *stack.PacketBuffer {
|
|
return e.q.ReadContext(ctx)
|
|
}
|
|
|
|
// Drain removes all outbound packets from the channel and counts them.
|
|
func (e *Endpoint) Drain() int {
|
|
c := 0
|
|
for pkt := e.Read(); pkt != nil; pkt = e.Read() {
|
|
pkt.DecRef()
|
|
c++
|
|
}
|
|
return c
|
|
}
|
|
|
|
// NumQueued returns the number of packet queued for outbound.
|
|
func (e *Endpoint) NumQueued() int {
|
|
return e.q.Num()
|
|
}
|
|
|
|
// InjectInbound injects an inbound packet. If the endpoint is not attached, the
|
|
// packet is not delivered.
|
|
func (e *Endpoint) InjectInbound(protocol tcpip.NetworkProtocolNumber, pkt *stack.PacketBuffer) {
|
|
e.mu.RLock()
|
|
d := e.dispatcher
|
|
e.mu.RUnlock()
|
|
if d != nil {
|
|
d.DeliverNetworkPacket(protocol, pkt)
|
|
}
|
|
}
|
|
|
|
// Attach saves the stack network-layer dispatcher for use later when packets
|
|
// are injected.
|
|
func (e *Endpoint) Attach(dispatcher stack.NetworkDispatcher) {
|
|
e.mu.Lock()
|
|
defer e.mu.Unlock()
|
|
e.dispatcher = dispatcher
|
|
}
|
|
|
|
// IsAttached implements stack.LinkEndpoint.IsAttached.
|
|
func (e *Endpoint) IsAttached() bool {
|
|
e.mu.RLock()
|
|
defer e.mu.RUnlock()
|
|
return e.dispatcher != nil
|
|
}
|
|
|
|
// MTU implements stack.LinkEndpoint.MTU.
|
|
func (e *Endpoint) MTU() uint32 {
|
|
e.mu.RLock()
|
|
defer e.mu.RUnlock()
|
|
return e.mtu
|
|
}
|
|
|
|
// SetMTU implements stack.LinkEndpoint.SetMTU.
|
|
func (e *Endpoint) SetMTU(mtu uint32) {
|
|
e.mu.Lock()
|
|
defer e.mu.Unlock()
|
|
e.mtu = mtu
|
|
}
|
|
|
|
// Capabilities implements stack.LinkEndpoint.Capabilities.
|
|
func (e *Endpoint) Capabilities() stack.LinkEndpointCapabilities {
|
|
return e.LinkEPCapabilities
|
|
}
|
|
|
|
// GSOMaxSize implements stack.GSOEndpoint.
|
|
func (*Endpoint) GSOMaxSize() uint32 {
|
|
return 1 << 15
|
|
}
|
|
|
|
// SupportedGSO implements stack.GSOEndpoint.
|
|
func (e *Endpoint) SupportedGSO() stack.SupportedGSO {
|
|
return e.SupportedGSOKind
|
|
}
|
|
|
|
// MaxHeaderLength returns the maximum size of the link layer header. Given it
|
|
// doesn't have a header, it just returns 0.
|
|
func (*Endpoint) MaxHeaderLength() uint16 {
|
|
return 0
|
|
}
|
|
|
|
// LinkAddress returns the link address of this endpoint.
|
|
func (e *Endpoint) LinkAddress() tcpip.LinkAddress {
|
|
e.mu.RLock()
|
|
defer e.mu.RUnlock()
|
|
return e.linkAddr
|
|
}
|
|
|
|
// SetLinkAddress implements stack.LinkEndpoint.SetLinkAddress.
|
|
func (e *Endpoint) SetLinkAddress(addr tcpip.LinkAddress) {
|
|
e.mu.Lock()
|
|
defer e.mu.Unlock()
|
|
e.linkAddr = addr
|
|
}
|
|
|
|
// WritePackets stores outbound packets into the channel.
|
|
// Multiple concurrent calls are permitted.
|
|
func (e *Endpoint) WritePackets(pkts stack.PacketBufferList) (int, tcpip.Error) {
|
|
n := 0
|
|
for _, pkt := range pkts.AsSlice() {
|
|
if err := e.q.Write(pkt); err != nil {
|
|
if _, ok := err.(*tcpip.ErrNoBufferSpace); !ok && n == 0 {
|
|
return 0, err
|
|
}
|
|
break
|
|
}
|
|
n++
|
|
}
|
|
|
|
return n, nil
|
|
}
|
|
|
|
// Wait implements stack.LinkEndpoint.Wait.
|
|
func (*Endpoint) Wait() {}
|
|
|
|
// AddNotify adds a notification target for receiving event about outgoing
|
|
// packets.
|
|
func (e *Endpoint) AddNotify(notify Notification) *NotificationHandle {
|
|
return e.q.AddNotify(notify)
|
|
}
|
|
|
|
// RemoveNotify removes handle from the list of notification targets.
|
|
func (e *Endpoint) RemoveNotify(handle *NotificationHandle) {
|
|
e.q.RemoveNotify(handle)
|
|
}
|
|
|
|
// ARPHardwareType implements stack.LinkEndpoint.ARPHardwareType.
|
|
func (*Endpoint) ARPHardwareType() header.ARPHardwareType {
|
|
return header.ARPHardwareNone
|
|
}
|
|
|
|
// AddHeader implements stack.LinkEndpoint.AddHeader.
|
|
func (*Endpoint) AddHeader(*stack.PacketBuffer) {}
|
|
|
|
// ParseHeader implements stack.LinkEndpoint.ParseHeader.
|
|
func (*Endpoint) ParseHeader(*stack.PacketBuffer) bool { return true }
|
|
|
|
// SetOnCloseAction implements stack.LinkEndpoint.
|
|
func (*Endpoint) SetOnCloseAction(func()) {}
|