• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  *  TCP/IP or UDP/IP networking functions
3  *
4  *  Copyright The Mbed TLS Contributors
5  *  SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
6  *
7  *  This file is provided under the Apache License 2.0, or the
8  *  GNU General Public License v2.0 or later.
9  *
10  *  **********
11  *  Apache License 2.0:
12  *
13  *  Licensed under the Apache License, Version 2.0 (the "License"); you may
14  *  not use this file except in compliance with the License.
15  *  You may obtain a copy of the License at
16  *
17  *  http://www.apache.org/licenses/LICENSE-2.0
18  *
19  *  Unless required by applicable law or agreed to in writing, software
20  *  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
21  *  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
22  *  See the License for the specific language governing permissions and
23  *  limitations under the License.
24  *
25  *  **********
26  *
27  *  **********
28  *  GNU General Public License v2.0 or later:
29  *
30  *  This program is free software; you can redistribute it and/or modify
31  *  it under the terms of the GNU General Public License as published by
32  *  the Free Software Foundation; either version 2 of the License, or
33  *  (at your option) any later version.
34  *
35  *  This program is distributed in the hope that it will be useful,
36  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
37  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
38  *  GNU General Public License for more details.
39  *
40  *  You should have received a copy of the GNU General Public License along
41  *  with this program; if not, write to the Free Software Foundation, Inc.,
42  *  51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
43  *
44  *  **********
45  */
46 
47 /* Enable definition of getaddrinfo() even when compiling with -std=c99. Must
48  * be set before config.h, which pulls in glibc's features.h indirectly.
49  * Harmless on other platforms. */
50 #define _POSIX_C_SOURCE 200112L
51 
52 #if defined(__NetBSD__)
53 #define _XOPEN_SOURCE 600 /* sockaddr_storage */
54 #endif
55 
56 #if !defined(MBEDTLS_CONFIG_FILE)
57 #include "mbedtls/config.h"
58 #else
59 #include MBEDTLS_CONFIG_FILE
60 #endif
61 
62 #if defined(MBEDTLS_NET_C)
63 
64 #if !defined(unix) && !defined(__unix__) && !defined(__unix) && \
65     !defined(__APPLE__) && !defined(_WIN32) && !defined(__QNXNTO__) && \
66     !defined(__HAIKU__)
67 #error "This module only works on Unix and Windows, see MBEDTLS_NET_C in config.h"
68 #endif
69 
70 #if defined(MBEDTLS_PLATFORM_C)
71 #include "mbedtls/platform.h"
72 #else
73 #include <stdlib.h>
74 #endif
75 
76 #include "mbedtls/net_sockets.h"
77 
78 #include <string.h>
79 
80 #if (defined(_WIN32) || defined(_WIN32_WCE)) && !defined(EFIX64) && \
81     !defined(EFI32)
82 
83 #define IS_EINTR( ret ) ( ( ret ) == WSAEINTR )
84 
85 #if !defined(_WIN32_WINNT) || (_WIN32_WINNT < 0x0501)
86 #undef _WIN32_WINNT
87 /* Enables getaddrinfo() & Co */
88 #define _WIN32_WINNT 0x0501
89 #endif
90 
91 #include <ws2tcpip.h>
92 
93 #include <winsock2.h>
94 #include <windows.h>
95 
96 #if defined(_MSC_VER)
97 #if defined(_WIN32_WCE)
98 #pragma comment( lib, "ws2.lib" )
99 #else
100 #pragma comment( lib, "ws2_32.lib" )
101 #endif
102 #endif /* _MSC_VER */
103 
104 #define read(fd,buf,len)        recv( fd, (char*)( buf ), (int)( len ), 0 )
105 #define write(fd,buf,len)       send( fd, (char*)( buf ), (int)( len ), 0 )
106 #define close(fd)               closesocket(fd)
107 
108 static int wsa_init_done = 0;
109 
110 #else /* ( _WIN32 || _WIN32_WCE ) && !EFIX64 && !EFI32 */
111 
112 #include <sys/types.h>
113 #include <sys/socket.h>
114 #include <netinet/in.h>
115 #include <arpa/inet.h>
116 #include <sys/time.h>
117 #include <unistd.h>
118 #include <signal.h>
119 #include <fcntl.h>
120 #include <netdb.h>
121 #include <errno.h>
122 
123 #define IS_EINTR( ret ) ( ( ret ) == EINTR )
124 
125 #endif /* ( _WIN32 || _WIN32_WCE ) && !EFIX64 && !EFI32 */
126 
127 /* Some MS functions want int and MSVC warns if we pass size_t,
128  * but the standard functions use socklen_t, so cast only for MSVC */
129 #if defined(_MSC_VER)
130 #define MSVC_INT_CAST   (int)
131 #else
132 #define MSVC_INT_CAST
133 #endif
134 
135 #include <stdio.h>
136 
137 #include <time.h>
138 
139 #include <stdint.h>
140 
141 /*
142  * Prepare for using the sockets interface
143  */
net_prepare(void)144 static int net_prepare( void )
145 {
146 #if ( defined(_WIN32) || defined(_WIN32_WCE) ) && !defined(EFIX64) && \
147     !defined(EFI32)
148     WSADATA wsaData;
149 
150     if( wsa_init_done == 0 )
151     {
152         if( WSAStartup( MAKEWORD(2,0), &wsaData ) != 0 )
153             return( MBEDTLS_ERR_NET_SOCKET_FAILED );
154 
155         wsa_init_done = 1;
156     }
157 #else
158 #if !defined(EFIX64) && !defined(EFI32)
159     signal( SIGPIPE, SIG_IGN );
160 #endif
161 #endif
162     return( 0 );
163 }
164 
165 /*
166  * Initialize a context
167  */
mbedtls_net_init(mbedtls_net_context * ctx)168 void mbedtls_net_init( mbedtls_net_context *ctx )
169 {
170     ctx->fd = -1;
171 }
172 
173 /*
174  * Initiate a TCP connection with host:port and the given protocol
175  */
mbedtls_net_connect(mbedtls_net_context * ctx,const char * host,const char * port,int proto)176 int mbedtls_net_connect( mbedtls_net_context *ctx, const char *host,
177                          const char *port, int proto )
178 {
179     int ret;
180     struct addrinfo hints, *addr_list, *cur;
181 
182     if( ( ret = net_prepare() ) != 0 )
183         return( ret );
184 
185     /* Do name resolution with both IPv6 and IPv4 */
186     memset( &hints, 0, sizeof( hints ) );
187     hints.ai_family = AF_UNSPEC;
188     hints.ai_socktype = proto == MBEDTLS_NET_PROTO_UDP ? SOCK_DGRAM : SOCK_STREAM;
189     hints.ai_protocol = proto == MBEDTLS_NET_PROTO_UDP ? IPPROTO_UDP : IPPROTO_TCP;
190 
191     if( getaddrinfo( host, port, &hints, &addr_list ) != 0 )
192         return( MBEDTLS_ERR_NET_UNKNOWN_HOST );
193 
194     /* Try the sockaddrs until a connection succeeds */
195     ret = MBEDTLS_ERR_NET_UNKNOWN_HOST;
196     for( cur = addr_list; cur != NULL; cur = cur->ai_next )
197     {
198         ctx->fd = (int) socket( cur->ai_family, cur->ai_socktype,
199                             cur->ai_protocol );
200         if( ctx->fd < 0 )
201         {
202             ret = MBEDTLS_ERR_NET_SOCKET_FAILED;
203             continue;
204         }
205 
206         if( connect( ctx->fd, cur->ai_addr, MSVC_INT_CAST cur->ai_addrlen ) == 0 )
207         {
208             ret = 0;
209             break;
210         }
211 
212         close( ctx->fd );
213         ret = MBEDTLS_ERR_NET_CONNECT_FAILED;
214     }
215 
216     freeaddrinfo( addr_list );
217 
218     return( ret );
219 }
220 
221 /*
222  * Create a listening socket on bind_ip:port
223  */
mbedtls_net_bind(mbedtls_net_context * ctx,const char * bind_ip,const char * port,int proto)224 int mbedtls_net_bind( mbedtls_net_context *ctx, const char *bind_ip, const char *port, int proto )
225 {
226     int n, ret;
227     struct addrinfo hints, *addr_list, *cur;
228 
229     if( ( ret = net_prepare() ) != 0 )
230         return( ret );
231 
232     /* Bind to IPv6 and/or IPv4, but only in the desired protocol */
233     memset( &hints, 0, sizeof( hints ) );
234     hints.ai_family = AF_UNSPEC;
235     hints.ai_socktype = proto == MBEDTLS_NET_PROTO_UDP ? SOCK_DGRAM : SOCK_STREAM;
236     hints.ai_protocol = proto == MBEDTLS_NET_PROTO_UDP ? IPPROTO_UDP : IPPROTO_TCP;
237     if( bind_ip == NULL )
238         hints.ai_flags = AI_PASSIVE;
239 
240     if( getaddrinfo( bind_ip, port, &hints, &addr_list ) != 0 )
241         return( MBEDTLS_ERR_NET_UNKNOWN_HOST );
242 
243     /* Try the sockaddrs until a binding succeeds */
244     ret = MBEDTLS_ERR_NET_UNKNOWN_HOST;
245     for( cur = addr_list; cur != NULL; cur = cur->ai_next )
246     {
247         ctx->fd = (int) socket( cur->ai_family, cur->ai_socktype,
248                             cur->ai_protocol );
249         if( ctx->fd < 0 )
250         {
251             ret = MBEDTLS_ERR_NET_SOCKET_FAILED;
252             continue;
253         }
254 
255         n = 1;
256         if( setsockopt( ctx->fd, SOL_SOCKET, SO_REUSEADDR,
257                         (const char *) &n, sizeof( n ) ) != 0 )
258         {
259             close( ctx->fd );
260             ret = MBEDTLS_ERR_NET_SOCKET_FAILED;
261             continue;
262         }
263 
264         if( bind( ctx->fd, cur->ai_addr, MSVC_INT_CAST cur->ai_addrlen ) != 0 )
265         {
266             close( ctx->fd );
267             ret = MBEDTLS_ERR_NET_BIND_FAILED;
268             continue;
269         }
270 
271         /* Listen only makes sense for TCP */
272         if( proto == MBEDTLS_NET_PROTO_TCP )
273         {
274             if( listen( ctx->fd, MBEDTLS_NET_LISTEN_BACKLOG ) != 0 )
275             {
276                 close( ctx->fd );
277                 ret = MBEDTLS_ERR_NET_LISTEN_FAILED;
278                 continue;
279             }
280         }
281 
282         /* Bind was successful */
283         ret = 0;
284         break;
285     }
286 
287     freeaddrinfo( addr_list );
288 
289     return( ret );
290 
291 }
292 
293 #if ( defined(_WIN32) || defined(_WIN32_WCE) ) && !defined(EFIX64) && \
294     !defined(EFI32)
295 /*
296  * Check if the requested operation would be blocking on a non-blocking socket
297  * and thus 'failed' with a negative return value.
298  */
net_would_block(const mbedtls_net_context * ctx)299 static int net_would_block( const mbedtls_net_context *ctx )
300 {
301     ((void) ctx);
302     return( WSAGetLastError() == WSAEWOULDBLOCK );
303 }
304 #else
305 /*
306  * Check if the requested operation would be blocking on a non-blocking socket
307  * and thus 'failed' with a negative return value.
308  *
309  * Note: on a blocking socket this function always returns 0!
310  */
net_would_block(const mbedtls_net_context * ctx)311 static int net_would_block( const mbedtls_net_context *ctx )
312 {
313     int err = errno;
314 
315     /*
316      * Never return 'WOULD BLOCK' on a blocking socket
317      */
318     if( ( fcntl( ctx->fd, F_GETFL ) & O_NONBLOCK ) != O_NONBLOCK )
319     {
320         errno = err;
321         return( 0 );
322     }
323 
324     switch( errno = err )
325     {
326 #if defined EAGAIN
327         case EAGAIN:
328 #endif
329 #if defined EWOULDBLOCK && EWOULDBLOCK != EAGAIN
330         case EWOULDBLOCK:
331 #endif
332             return( 1 );
333     }
334     return( 0 );
335 }
336 #endif /* ( _WIN32 || _WIN32_WCE ) && !EFIX64 && !EFI32 */
337 
338 /*
339  * Accept a connection from a remote client
340  */
mbedtls_net_accept(mbedtls_net_context * bind_ctx,mbedtls_net_context * client_ctx,void * client_ip,size_t buf_size,size_t * ip_len)341 int mbedtls_net_accept( mbedtls_net_context *bind_ctx,
342                         mbedtls_net_context *client_ctx,
343                         void *client_ip, size_t buf_size, size_t *ip_len )
344 {
345     int ret;
346     int type;
347 
348     struct sockaddr_storage client_addr;
349 
350 #if defined(__socklen_t_defined) || defined(_SOCKLEN_T) || \
351     defined(_SOCKLEN_T_DECLARED) || defined(__DEFINED_socklen_t) || \
352     ( defined(__NetBSD__) && defined(socklen_t) )
353     socklen_t n = (socklen_t) sizeof( client_addr );
354     socklen_t type_len = (socklen_t) sizeof( type );
355 #else
356     int n = (int) sizeof( client_addr );
357     int type_len = (int) sizeof( type );
358 #endif
359 
360     /* Is this a TCP or UDP socket? */
361     if( getsockopt( bind_ctx->fd, SOL_SOCKET, SO_TYPE,
362                     (void *) &type, &type_len ) != 0 ||
363         ( type != SOCK_STREAM && type != SOCK_DGRAM ) )
364     {
365         return( MBEDTLS_ERR_NET_ACCEPT_FAILED );
366     }
367 
368     if( type == SOCK_STREAM )
369     {
370         /* TCP: actual accept() */
371         ret = client_ctx->fd = (int) accept( bind_ctx->fd,
372                                              (struct sockaddr *) &client_addr, &n );
373     }
374     else
375     {
376         /* UDP: wait for a message, but keep it in the queue */
377         char buf[1] = { 0 };
378 
379         ret = (int) recvfrom( bind_ctx->fd, buf, sizeof( buf ), MSG_PEEK,
380                         (struct sockaddr *) &client_addr, &n );
381 
382 #if defined(_WIN32)
383         if( ret == SOCKET_ERROR &&
384             WSAGetLastError() == WSAEMSGSIZE )
385         {
386             /* We know buf is too small, thanks, just peeking here */
387             ret = 0;
388         }
389 #endif
390     }
391 
392     if( ret < 0 )
393     {
394         if( net_would_block( bind_ctx ) != 0 )
395             return( MBEDTLS_ERR_SSL_WANT_READ );
396 
397         return( MBEDTLS_ERR_NET_ACCEPT_FAILED );
398     }
399 
400     /* UDP: hijack the listening socket to communicate with the client,
401      * then bind a new socket to accept new connections */
402     if( type != SOCK_STREAM )
403     {
404         struct sockaddr_storage local_addr;
405         int one = 1;
406 
407         if( connect( bind_ctx->fd, (struct sockaddr *) &client_addr, n ) != 0 )
408             return( MBEDTLS_ERR_NET_ACCEPT_FAILED );
409 
410         client_ctx->fd = bind_ctx->fd;
411         bind_ctx->fd   = -1; /* In case we exit early */
412 
413         n = sizeof( struct sockaddr_storage );
414         if( getsockname( client_ctx->fd,
415                          (struct sockaddr *) &local_addr, &n ) != 0 ||
416             ( bind_ctx->fd = (int) socket( local_addr.ss_family,
417                                            SOCK_DGRAM, IPPROTO_UDP ) ) < 0 ||
418             setsockopt( bind_ctx->fd, SOL_SOCKET, SO_REUSEADDR,
419                         (const char *) &one, sizeof( one ) ) != 0 )
420         {
421             return( MBEDTLS_ERR_NET_SOCKET_FAILED );
422         }
423 
424         if( bind( bind_ctx->fd, (struct sockaddr *) &local_addr, n ) != 0 )
425         {
426             return( MBEDTLS_ERR_NET_BIND_FAILED );
427         }
428     }
429 
430     if( client_ip != NULL )
431     {
432         if( client_addr.ss_family == AF_INET )
433         {
434             struct sockaddr_in *addr4 = (struct sockaddr_in *) &client_addr;
435             *ip_len = sizeof( addr4->sin_addr.s_addr );
436 
437             if( buf_size < *ip_len )
438                 return( MBEDTLS_ERR_NET_BUFFER_TOO_SMALL );
439 
440             memcpy( client_ip, &addr4->sin_addr.s_addr, *ip_len );
441         }
442         else
443         {
444             struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) &client_addr;
445             *ip_len = sizeof( addr6->sin6_addr.s6_addr );
446 
447             if( buf_size < *ip_len )
448                 return( MBEDTLS_ERR_NET_BUFFER_TOO_SMALL );
449 
450             memcpy( client_ip, &addr6->sin6_addr.s6_addr, *ip_len);
451         }
452     }
453 
454     return( 0 );
455 }
456 
457 /*
458  * Set the socket blocking or non-blocking
459  */
mbedtls_net_set_block(mbedtls_net_context * ctx)460 int mbedtls_net_set_block( mbedtls_net_context *ctx )
461 {
462 #if ( defined(_WIN32) || defined(_WIN32_WCE) ) && !defined(EFIX64) && \
463     !defined(EFI32)
464     u_long n = 0;
465     return( ioctlsocket( ctx->fd, FIONBIO, &n ) );
466 #else
467     return( fcntl( ctx->fd, F_SETFL, fcntl( ctx->fd, F_GETFL ) & ~O_NONBLOCK ) );
468 #endif
469 }
470 
mbedtls_net_set_nonblock(mbedtls_net_context * ctx)471 int mbedtls_net_set_nonblock( mbedtls_net_context *ctx )
472 {
473 #if ( defined(_WIN32) || defined(_WIN32_WCE) ) && !defined(EFIX64) && \
474     !defined(EFI32)
475     u_long n = 1;
476     return( ioctlsocket( ctx->fd, FIONBIO, &n ) );
477 #else
478     return( fcntl( ctx->fd, F_SETFL, fcntl( ctx->fd, F_GETFL ) | O_NONBLOCK ) );
479 #endif
480 }
481 
482 /*
483  * Check if data is available on the socket
484  */
485 
mbedtls_net_poll(mbedtls_net_context * ctx,uint32_t rw,uint32_t timeout)486 int mbedtls_net_poll( mbedtls_net_context *ctx, uint32_t rw, uint32_t timeout )
487 {
488     int ret;
489     struct timeval tv;
490 
491     fd_set read_fds;
492     fd_set write_fds;
493 
494     int fd = ctx->fd;
495 
496     if( fd < 0 )
497         return( MBEDTLS_ERR_NET_INVALID_CONTEXT );
498 
499     /* A limitation of select() is that it only works with file descriptors
500      * that are strictly less than FD_SETSIZE. This is a limitation of the
501      * fd_set type. Error out early, because attempting to call FD_SET on a
502      * large file descriptor is a buffer overflow on typical platforms. */
503     if( fd >= FD_SETSIZE )
504         return( MBEDTLS_ERR_NET_POLL_FAILED );
505 
506 #if defined(__has_feature)
507 #if __has_feature(memory_sanitizer)
508     /* Ensure that memory sanitizers consider read_fds and write_fds as
509      * initialized even on platforms such as Glibc/x86_64 where FD_ZERO
510      * is implemented in assembly. */
511     memset( &read_fds, 0, sizeof( read_fds ) );
512     memset( &write_fds, 0, sizeof( write_fds ) );
513 #endif
514 #endif
515 
516     FD_ZERO( &read_fds );
517     if( rw & MBEDTLS_NET_POLL_READ )
518     {
519         rw &= ~MBEDTLS_NET_POLL_READ;
520         FD_SET( fd, &read_fds );
521     }
522 
523     FD_ZERO( &write_fds );
524     if( rw & MBEDTLS_NET_POLL_WRITE )
525     {
526         rw &= ~MBEDTLS_NET_POLL_WRITE;
527         FD_SET( fd, &write_fds );
528     }
529 
530     if( rw != 0 )
531         return( MBEDTLS_ERR_NET_BAD_INPUT_DATA );
532 
533     tv.tv_sec  = timeout / 1000;
534     tv.tv_usec = ( timeout % 1000 ) * 1000;
535 
536     do
537     {
538         ret = select( fd + 1, &read_fds, &write_fds, NULL,
539                       timeout == (uint32_t) -1 ? NULL : &tv );
540     }
541     while( IS_EINTR( ret ) );
542 
543     if( ret < 0 )
544         return( MBEDTLS_ERR_NET_POLL_FAILED );
545 
546     ret = 0;
547     if( FD_ISSET( fd, &read_fds ) )
548         ret |= MBEDTLS_NET_POLL_READ;
549     if( FD_ISSET( fd, &write_fds ) )
550         ret |= MBEDTLS_NET_POLL_WRITE;
551 
552     return( ret );
553 }
554 
555 /*
556  * Portable usleep helper
557  */
mbedtls_net_usleep(unsigned long usec)558 void mbedtls_net_usleep( unsigned long usec )
559 {
560 #if defined(_WIN32)
561     Sleep( ( usec + 999 ) / 1000 );
562 #else
563     struct timeval tv;
564     tv.tv_sec  = usec / 1000000;
565 #if defined(__unix__) || defined(__unix) || \
566     ( defined(__APPLE__) && defined(__MACH__) )
567     tv.tv_usec = (suseconds_t) usec % 1000000;
568 #else
569     tv.tv_usec = usec % 1000000;
570 #endif
571     select( 0, NULL, NULL, NULL, &tv );
572 #endif
573 }
574 
575 /*
576  * Read at most 'len' characters
577  */
mbedtls_net_recv(void * ctx,unsigned char * buf,size_t len)578 int mbedtls_net_recv( void *ctx, unsigned char *buf, size_t len )
579 {
580     int ret;
581     int fd = ((mbedtls_net_context *) ctx)->fd;
582 
583     if( fd < 0 )
584         return( MBEDTLS_ERR_NET_INVALID_CONTEXT );
585 
586     ret = (int) read( fd, buf, len );
587 
588     if( ret < 0 )
589     {
590         if( net_would_block( ctx ) != 0 )
591             return( MBEDTLS_ERR_SSL_WANT_READ );
592 
593 #if ( defined(_WIN32) || defined(_WIN32_WCE) ) && !defined(EFIX64) && \
594     !defined(EFI32)
595         if( WSAGetLastError() == WSAECONNRESET )
596             return( MBEDTLS_ERR_NET_CONN_RESET );
597 #else
598         if( errno == EPIPE || errno == ECONNRESET )
599             return( MBEDTLS_ERR_NET_CONN_RESET );
600 
601         if( errno == EINTR )
602             return( MBEDTLS_ERR_SSL_WANT_READ );
603 #endif
604 
605         return( MBEDTLS_ERR_NET_RECV_FAILED );
606     }
607 
608     return( ret );
609 }
610 
611 /*
612  * Read at most 'len' characters, blocking for at most 'timeout' ms
613  */
mbedtls_net_recv_timeout(void * ctx,unsigned char * buf,size_t len,uint32_t timeout)614 int mbedtls_net_recv_timeout( void *ctx, unsigned char *buf,
615                               size_t len, uint32_t timeout )
616 {
617     int ret;
618     struct timeval tv;
619     fd_set read_fds;
620     int fd = ((mbedtls_net_context *) ctx)->fd;
621 
622     if( fd < 0 )
623         return( MBEDTLS_ERR_NET_INVALID_CONTEXT );
624 
625     /* A limitation of select() is that it only works with file descriptors
626      * that are strictly less than FD_SETSIZE. This is a limitation of the
627      * fd_set type. Error out early, because attempting to call FD_SET on a
628      * large file descriptor is a buffer overflow on typical platforms. */
629     if( fd >= FD_SETSIZE )
630         return( MBEDTLS_ERR_NET_POLL_FAILED );
631 
632     FD_ZERO( &read_fds );
633     FD_SET( fd, &read_fds );
634 
635     tv.tv_sec  = timeout / 1000;
636     tv.tv_usec = ( timeout % 1000 ) * 1000;
637 
638     ret = select( fd + 1, &read_fds, NULL, NULL, timeout == 0 ? NULL : &tv );
639 
640     /* Zero fds ready means we timed out */
641     if( ret == 0 )
642         return( MBEDTLS_ERR_SSL_TIMEOUT );
643 
644     if( ret < 0 )
645     {
646 #if ( defined(_WIN32) || defined(_WIN32_WCE) ) && !defined(EFIX64) && \
647     !defined(EFI32)
648         if( WSAGetLastError() == WSAEINTR )
649             return( MBEDTLS_ERR_SSL_WANT_READ );
650 #else
651         if( errno == EINTR )
652             return( MBEDTLS_ERR_SSL_WANT_READ );
653 #endif
654 
655         return( MBEDTLS_ERR_NET_RECV_FAILED );
656     }
657 
658     /* This call will not block */
659     return( mbedtls_net_recv( ctx, buf, len ) );
660 }
661 
662 /*
663  * Write at most 'len' characters
664  */
mbedtls_net_send(void * ctx,const unsigned char * buf,size_t len)665 int mbedtls_net_send( void *ctx, const unsigned char *buf, size_t len )
666 {
667     int ret;
668     int fd = ((mbedtls_net_context *) ctx)->fd;
669 
670     if( fd < 0 )
671         return( MBEDTLS_ERR_NET_INVALID_CONTEXT );
672 
673     ret = (int) write( fd, buf, len );
674 
675     if( ret < 0 )
676     {
677         if( net_would_block( ctx ) != 0 )
678             return( MBEDTLS_ERR_SSL_WANT_WRITE );
679 
680 #if ( defined(_WIN32) || defined(_WIN32_WCE) ) && !defined(EFIX64) && \
681     !defined(EFI32)
682         if( WSAGetLastError() == WSAECONNRESET )
683             return( MBEDTLS_ERR_NET_CONN_RESET );
684 #else
685         if( errno == EPIPE || errno == ECONNRESET )
686             return( MBEDTLS_ERR_NET_CONN_RESET );
687 
688         if( errno == EINTR )
689             return( MBEDTLS_ERR_SSL_WANT_WRITE );
690 #endif
691 
692         return( MBEDTLS_ERR_NET_SEND_FAILED );
693     }
694 
695     return( ret );
696 }
697 
698 /*
699  * Gracefully close the connection
700  */
mbedtls_net_free(mbedtls_net_context * ctx)701 void mbedtls_net_free( mbedtls_net_context *ctx )
702 {
703     if( ctx->fd == -1 )
704         return;
705 
706     shutdown( ctx->fd, 2 );
707     close( ctx->fd );
708 
709     ctx->fd = -1;
710 }
711 
712 #endif /* MBEDTLS_NET_C */
713