• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4 
5 #ifndef NET_SPDY_SPDY_FRAMER_H_
6 #define NET_SPDY_SPDY_FRAMER_H_
7 
8 #include <list>
9 #include <map>
10 #include <memory>
11 #include <string>
12 #include <utility>
13 #include <vector>
14 
15 #include "base/basictypes.h"
16 #include "base/gtest_prod_util.h"
17 #include "base/memory/scoped_ptr.h"
18 #include "base/strings/string_piece.h"
19 #include "base/sys_byteorder.h"
20 #include "net/base/net_export.h"
21 #include "net/spdy/hpack_decoder.h"
22 #include "net/spdy/hpack_encoder.h"
23 #include "net/spdy/spdy_header_block.h"
24 #include "net/spdy/spdy_protocol.h"
25 
26 // TODO(akalin): Remove support for CREDENTIAL frames.
27 
28 typedef struct z_stream_s z_stream;  // Forward declaration for zlib.
29 
30 namespace net {
31 
32 class HttpProxyClientSocketPoolTest;
33 class HttpNetworkLayer;
34 class HttpNetworkTransactionTest;
35 class SpdyHttpStreamTest;
36 class SpdyNetworkTransactionTest;
37 class SpdyProxyClientSocketTest;
38 class SpdySessionTest;
39 class SpdyStreamTest;
40 class SpdyWebSocketStreamTest;
41 class WebSocketJobTest;
42 
43 class SpdyFramer;
44 class SpdyFrameBuilder;
45 class SpdyFramerTest;
46 
47 namespace test {
48 
49 class TestSpdyVisitor;
50 
51 }  // namespace test
52 
53 // A datastructure for holding a set of headers from a HEADERS, PUSH_PROMISE,
54 // SYN_STREAM, or SYN_REPLY frame.
55 typedef std::map<std::string, std::string> SpdyHeaderBlock;
56 
57 // A datastructure for holding the ID and flag fields for SETTINGS.
58 // Conveniently handles converstion to/from wire format.
59 class NET_EXPORT_PRIVATE SettingsFlagsAndId {
60  public:
61   static SettingsFlagsAndId FromWireFormat(SpdyMajorVersion version,
62                                            uint32 wire);
63 
SettingsFlagsAndId()64   SettingsFlagsAndId() : flags_(0), id_(0) {}
65 
66   // TODO(hkhalil): restrict to enums instead of free-form ints.
67   SettingsFlagsAndId(uint8 flags, uint32 id);
68 
69   uint32 GetWireFormat(SpdyMajorVersion version) const;
70 
id()71   uint32 id() const { return id_; }
flags()72   uint8 flags() const { return flags_; }
73 
74  private:
75   static void ConvertFlagsAndIdForSpdy2(uint32* val);
76 
77   uint8 flags_;
78   uint32 id_;
79 };
80 
81 // SettingsMap has unique (flags, value) pair for given SpdySettingsIds ID.
82 typedef std::pair<SpdySettingsFlags, uint32> SettingsFlagsAndValue;
83 typedef std::map<SpdySettingsIds, SettingsFlagsAndValue> SettingsMap;
84 
85 // Scratch space necessary for processing SETTINGS frames.
86 struct NET_EXPORT_PRIVATE SpdySettingsScratch {
SpdySettingsScratchSpdySettingsScratch87   SpdySettingsScratch() { Reset(); }
88 
ResetSpdySettingsScratch89   void Reset() {
90     setting_buf_len = 0;
91     last_setting_id = -1;
92   }
93 
94   // Buffer contains up to one complete key/value pair.
95   char setting_buf[8];
96 
97   // The amount of the buffer that is filled with valid data.
98   size_t setting_buf_len;
99 
100   // The ID of the last setting that was processed in the current SETTINGS
101   // frame. Used for detecting out-of-order or duplicate keys within a settings
102   // frame. Set to -1 before first key/value pair is processed.
103   int last_setting_id;
104 };
105 
106 // Scratch space necessary for processing ALTSVC frames.
107 struct NET_EXPORT_PRIVATE SpdyAltSvcScratch {
108   SpdyAltSvcScratch();
109   ~SpdyAltSvcScratch();
110 
ResetSpdyAltSvcScratch111   void Reset() {
112     max_age = 0;
113     port = 0;
114     pid_len = 0;
115     host_len = 0;
116     origin_len = 0;
117     pid_buf_len = 0;
118     host_buf_len = 0;
119     origin_buf_len = 0;
120     protocol_id.reset();
121     host.reset();
122     origin.reset();
123   }
124 
125   uint32 max_age;
126   uint16 port;
127   uint8 pid_len;
128   uint8 host_len;
129   size_t origin_len;
130   size_t pid_buf_len;
131   size_t host_buf_len;
132   size_t origin_buf_len;
133   scoped_ptr<char[]> protocol_id;
134   scoped_ptr<char[]> host;
135   scoped_ptr<char[]> origin;
136 };
137 
138 // SpdyFramerVisitorInterface is a set of callbacks for the SpdyFramer.
139 // Implement this interface to receive event callbacks as frames are
140 // decoded from the framer.
141 //
142 // Control frames that contain SPDY header blocks (SYN_STREAM, SYN_REPLY,
143 // HEADER, and PUSH_PROMISE) are processed in fashion that allows the
144 // decompressed header block to be delivered in chunks to the visitor.
145 // The following steps are followed:
146 //   1. OnSynStream, OnSynReply, OnHeaders, or OnPushPromise is called.
147 //   2. Repeated: OnControlFrameHeaderData is called with chunks of the
148 //      decompressed header block. In each call the len parameter is greater
149 //      than zero.
150 //   3. OnControlFrameHeaderData is called with len set to zero, indicating
151 //      that the full header block has been delivered for the control frame.
152 // During step 2 the visitor may return false, indicating that the chunk of
153 // header data could not be handled by the visitor (typically this indicates
154 // resource exhaustion). If this occurs the framer will discontinue
155 // delivering chunks to the visitor, set a SPDY_CONTROL_PAYLOAD_TOO_LARGE
156 // error, and clean up appropriately. Note that this will cause the header
157 // decompressor to lose synchronization with the sender's header compressor,
158 // making the SPDY session unusable for future work. The visitor's OnError
159 // function should deal with this condition by closing the SPDY connection.
160 class NET_EXPORT_PRIVATE SpdyFramerVisitorInterface {
161  public:
~SpdyFramerVisitorInterface()162   virtual ~SpdyFramerVisitorInterface() {}
163 
164   // Called if an error is detected in the SpdyFrame protocol.
165   virtual void OnError(SpdyFramer* framer) = 0;
166 
167   // Called when a data frame header is received. The frame's data
168   // payload will be provided via subsequent calls to
169   // OnStreamFrameData().
170   virtual void OnDataFrameHeader(SpdyStreamId stream_id,
171                                  size_t length,
172                                  bool fin) = 0;
173 
174   // Called when data is received.
175   // |stream_id| The stream receiving data.
176   // |data| A buffer containing the data received.
177   // |len| The length of the data buffer.
178   // When the other side has finished sending data on this stream,
179   // this method will be called with a zero-length buffer.
180   virtual void OnStreamFrameData(SpdyStreamId stream_id,
181                                  const char* data,
182                                  size_t len,
183                                  bool fin) = 0;
184 
185   // Called when a chunk of header data is available. This is called
186   // after OnSynStream, OnSynReply, OnHeaders(), or OnPushPromise.
187   // |stream_id| The stream receiving the header data.
188   // |header_data| A buffer containing the header data chunk received.
189   // |len| The length of the header data buffer. A length of zero indicates
190   //       that the header data block has been completely sent.
191   // When this function returns true the visitor indicates that it accepted
192   // all of the data. Returning false indicates that that an unrecoverable
193   // error has occurred, such as bad header data or resource exhaustion.
194   virtual bool OnControlFrameHeaderData(SpdyStreamId stream_id,
195                                         const char* header_data,
196                                         size_t len) = 0;
197 
198   // Called when a SYN_STREAM frame is received.
199   // Note that header block data is not included. See
200   // OnControlFrameHeaderData().
201   virtual void OnSynStream(SpdyStreamId stream_id,
202                            SpdyStreamId associated_stream_id,
203                            SpdyPriority priority,
204                            bool fin,
205                            bool unidirectional) = 0;
206 
207   // Called when a SYN_REPLY frame is received.
208   // Note that header block data is not included. See
209   // OnControlFrameHeaderData().
210   virtual void OnSynReply(SpdyStreamId stream_id, bool fin) = 0;
211 
212   // Called when a RST_STREAM frame has been parsed.
213   virtual void OnRstStream(SpdyStreamId stream_id,
214                            SpdyRstStreamStatus status) = 0;
215 
216   // Called when a SETTINGS frame is received.
217   // |clear_persisted| True if the respective flag is set on the SETTINGS frame.
OnSettings(bool clear_persisted)218   virtual void OnSettings(bool clear_persisted) {}
219 
220   // Called when a complete setting within a SETTINGS frame has been parsed and
221   // validated.
222   virtual void OnSetting(SpdySettingsIds id, uint8 flags, uint32 value) = 0;
223 
224   // Called when a SETTINGS frame is received with the ACK flag set.
OnSettingsAck()225   virtual void OnSettingsAck() {}
226 
227   // Called before and after parsing SETTINGS id and value tuples.
228   virtual void OnSettingsEnd() = 0;
229 
230   // Called when a PING frame has been parsed.
231   virtual void OnPing(SpdyPingId unique_id, bool is_ack) = 0;
232 
233   // Called when a GOAWAY frame has been parsed.
234   virtual void OnGoAway(SpdyStreamId last_accepted_stream_id,
235                         SpdyGoAwayStatus status) = 0;
236 
237   // Called when a HEADERS frame is received.
238   // Note that header block data is not included. See
239   // OnControlFrameHeaderData().
240   virtual void OnHeaders(SpdyStreamId stream_id, bool fin, bool end) = 0;
241 
242   // Called when a WINDOW_UPDATE frame has been parsed.
243   virtual void OnWindowUpdate(SpdyStreamId stream_id,
244                               uint32 delta_window_size) = 0;
245 
246   // Called when a goaway frame opaque data is available.
247   // |goaway_data| A buffer containing the opaque GOAWAY data chunk received.
248   // |len| The length of the header data buffer. A length of zero indicates
249   //       that the header data block has been completely sent.
250   // When this function returns true the visitor indicates that it accepted
251   // all of the data. Returning false indicates that that an error has
252   // occurred while processing the data. Default implementation returns true.
253   virtual bool OnGoAwayFrameData(const char* goaway_data, size_t len);
254 
255   // Called when rst_stream frame opaque data is available.
256   // |rst_stream_data| A buffer containing the opaque RST_STREAM
257   // data chunk received.
258   // |len| The length of the header data buffer. A length of zero indicates
259   //       that the opaque data has been completely sent.
260   // When this function returns true the visitor indicates that it accepted
261   // all of the data. Returning false indicates that that an error has
262   // occurred while processing the data. Default implementation returns true.
263   virtual bool OnRstStreamFrameData(const char* rst_stream_data, size_t len);
264 
265   // Called when a BLOCKED frame has been parsed.
OnBlocked(SpdyStreamId stream_id)266   virtual void OnBlocked(SpdyStreamId stream_id) {}
267 
268   // Called when a PUSH_PROMISE frame is received.
269   // Note that header block data is not included. See
270   // OnControlFrameHeaderData().
271   virtual void OnPushPromise(SpdyStreamId stream_id,
272                              SpdyStreamId promised_stream_id,
273                              bool end) = 0;
274 
275   // Called when a CONTINUATION frame is received.
276   // Note that header block data is not included. See
277   // OnControlFrameHeaderData().
278   virtual void OnContinuation(SpdyStreamId stream_id, bool end) = 0;
279 
280   // Called when an ALTSVC frame has been parsed.
OnAltSvc(SpdyStreamId stream_id,uint32 max_age,uint16 port,base::StringPiece protocol_id,base::StringPiece host,base::StringPiece origin)281   virtual void OnAltSvc(SpdyStreamId stream_id,
282                         uint32 max_age,
283                         uint16 port,
284                         base::StringPiece protocol_id,
285                         base::StringPiece host,
286                         base::StringPiece origin) {}
287 };
288 
289 // Optionally, and in addition to SpdyFramerVisitorInterface, a class supporting
290 // SpdyFramerDebugVisitorInterface may be used in conjunction with SpdyFramer in
291 // order to extract debug/internal information about the SpdyFramer as it
292 // operates.
293 //
294 // Most SPDY implementations need not bother with this interface at all.
295 class NET_EXPORT_PRIVATE SpdyFramerDebugVisitorInterface {
296  public:
~SpdyFramerDebugVisitorInterface()297   virtual ~SpdyFramerDebugVisitorInterface() {}
298 
299   // Called after compressing a frame with a payload of
300   // a list of name-value pairs.
301   // |payload_len| is the uncompressed payload size.
302   // |frame_len| is the compressed frame size.
OnSendCompressedFrame(SpdyStreamId stream_id,SpdyFrameType type,size_t payload_len,size_t frame_len)303   virtual void OnSendCompressedFrame(SpdyStreamId stream_id,
304                                      SpdyFrameType type,
305                                      size_t payload_len,
306                                      size_t frame_len) {}
307 
308   // Called when a frame containing a compressed payload of
309   // name-value pairs is received.
310   // |frame_len| is the compressed frame size.
OnReceiveCompressedFrame(SpdyStreamId stream_id,SpdyFrameType type,size_t frame_len)311   virtual void OnReceiveCompressedFrame(SpdyStreamId stream_id,
312                                         SpdyFrameType type,
313                                         size_t frame_len) {}
314 };
315 
316 class NET_EXPORT_PRIVATE SpdyFramer {
317  public:
318   // SPDY states.
319   // TODO(mbelshe): Can we move these into the implementation
320   //                and avoid exposing through the header.  (Needed for test)
321   enum SpdyState {
322     SPDY_ERROR,
323     SPDY_RESET,
324     SPDY_AUTO_RESET,
325     SPDY_READING_COMMON_HEADER,
326     SPDY_CONTROL_FRAME_PAYLOAD,
327     SPDY_READ_PADDING_LENGTH,
328     SPDY_CONSUME_PADDING,
329     SPDY_IGNORE_REMAINING_PAYLOAD,
330     SPDY_FORWARD_STREAM_FRAME,
331     SPDY_CONTROL_FRAME_BEFORE_HEADER_BLOCK,
332     SPDY_CONTROL_FRAME_HEADER_BLOCK,
333     SPDY_GOAWAY_FRAME_PAYLOAD,
334     SPDY_RST_STREAM_FRAME_PAYLOAD,
335     SPDY_SETTINGS_FRAME_PAYLOAD,
336     SPDY_ALTSVC_FRAME_PAYLOAD,
337   };
338 
339   // SPDY error codes.
340   enum SpdyError {
341     SPDY_NO_ERROR,
342     SPDY_INVALID_CONTROL_FRAME,        // Control frame is mal-formatted.
343     SPDY_CONTROL_PAYLOAD_TOO_LARGE,    // Control frame payload was too large.
344     SPDY_ZLIB_INIT_FAILURE,            // The Zlib library could not initialize.
345     SPDY_UNSUPPORTED_VERSION,          // Control frame has unsupported version.
346     SPDY_DECOMPRESS_FAILURE,           // There was an error decompressing.
347     SPDY_COMPRESS_FAILURE,             // There was an error compressing.
348     SPDY_GOAWAY_FRAME_CORRUPT,         // GOAWAY frame could not be parsed.
349     SPDY_RST_STREAM_FRAME_CORRUPT,     // RST_STREAM frame could not be parsed.
350     SPDY_INVALID_DATA_FRAME_FLAGS,     // Data frame has invalid flags.
351     SPDY_INVALID_CONTROL_FRAME_FLAGS,  // Control frame has invalid flags.
352     SPDY_UNEXPECTED_FRAME,             // Frame received out of order.
353 
354     LAST_ERROR,  // Must be the last entry in the enum.
355   };
356 
357   // Constant for invalid (or unknown) stream IDs.
358   static const SpdyStreamId kInvalidStream;
359 
360   // The maximum size of header data chunks delivered to the framer visitor
361   // through OnControlFrameHeaderData. (It is exposed here for unit test
362   // purposes.)
363   static const size_t kHeaderDataChunkMaxSize;
364 
365   // Serializes a SpdyHeaderBlock.
366   static void WriteHeaderBlock(SpdyFrameBuilder* frame,
367                                const SpdyMajorVersion spdy_version,
368                                const SpdyHeaderBlock* headers);
369 
370   // Retrieve serialized length of SpdyHeaderBlock.
371   // TODO(hkhalil): Remove, or move to quic code.
372   static size_t GetSerializedLength(
373       const SpdyMajorVersion spdy_version,
374       const SpdyHeaderBlock* headers);
375 
376   // Create a new Framer, provided a SPDY version.
377   explicit SpdyFramer(SpdyMajorVersion version);
378   virtual ~SpdyFramer();
379 
380   // Set callbacks to be called from the framer.  A visitor must be set, or
381   // else the framer will likely crash.  It is acceptable for the visitor
382   // to do nothing.  If this is called multiple times, only the last visitor
383   // will be used.
set_visitor(SpdyFramerVisitorInterface * visitor)384   void set_visitor(SpdyFramerVisitorInterface* visitor) {
385     visitor_ = visitor;
386   }
387 
388   // Set debug callbacks to be called from the framer. The debug visitor is
389   // completely optional and need not be set in order for normal operation.
390   // If this is called multiple times, only the last visitor will be used.
set_debug_visitor(SpdyFramerDebugVisitorInterface * debug_visitor)391   void set_debug_visitor(SpdyFramerDebugVisitorInterface* debug_visitor) {
392     debug_visitor_ = debug_visitor;
393   }
394 
395   // Pass data into the framer for parsing.
396   // Returns the number of bytes consumed. It is safe to pass more bytes in
397   // than may be consumed.
398   size_t ProcessInput(const char* data, size_t len);
399 
400   // Resets the framer state after a frame has been successfully decoded.
401   // TODO(mbelshe): can we make this private?
402   void Reset();
403 
404   // Check the state of the framer.
error_code()405   SpdyError error_code() const { return error_code_; }
state()406   SpdyState state() const { return state_; }
HasError()407   bool HasError() const { return state_ == SPDY_ERROR; }
408 
409   // Given a buffer containing a decompressed header block in SPDY
410   // serialized format, parse out a SpdyHeaderBlock, putting the results
411   // in the given header block.
412   // Returns number of bytes consumed if successfully parsed, 0 otherwise.
413   size_t ParseHeaderBlockInBuffer(const char* header_data,
414                                 size_t header_length,
415                                 SpdyHeaderBlock* block) const;
416 
417   // Serialize a data frame.
418   SpdySerializedFrame* SerializeData(const SpdyDataIR& data) const;
419   // Serializes the data frame header and optionally padding length fields,
420   // excluding actual data payload and padding.
421   SpdySerializedFrame* SerializeDataFrameHeaderWithPaddingLengthField(
422       const SpdyDataIR& data) const;
423 
424   // Serializes a SYN_STREAM frame.
425   SpdySerializedFrame* SerializeSynStream(const SpdySynStreamIR& syn_stream);
426 
427   // Serialize a SYN_REPLY SpdyFrame.
428   SpdySerializedFrame* SerializeSynReply(const SpdySynReplyIR& syn_reply);
429 
430   SpdySerializedFrame* SerializeRstStream(
431       const SpdyRstStreamIR& rst_stream) const;
432 
433   // Serializes a SETTINGS frame. The SETTINGS frame is
434   // used to communicate name/value pairs relevant to the communication channel.
435   SpdySerializedFrame* SerializeSettings(const SpdySettingsIR& settings) const;
436 
437   // Serializes a PING frame. The unique_id is used to
438   // identify the ping request/response.
439   SpdySerializedFrame* SerializePing(const SpdyPingIR& ping) const;
440 
441   // Serializes a GOAWAY frame. The GOAWAY frame is used
442   // prior to the shutting down of the TCP connection, and includes the
443   // stream_id of the last stream the sender of the frame is willing to process
444   // to completion.
445   SpdySerializedFrame* SerializeGoAway(const SpdyGoAwayIR& goaway) const;
446 
447   // Serializes a HEADERS frame. The HEADERS frame is used
448   // for sending additional headers outside of a SYN_STREAM/SYN_REPLY.
449   SpdySerializedFrame* SerializeHeaders(const SpdyHeadersIR& headers);
450 
451   // Serializes a WINDOW_UPDATE frame. The WINDOW_UPDATE
452   // frame is used to implement per stream flow control in SPDY.
453   SpdySerializedFrame* SerializeWindowUpdate(
454       const SpdyWindowUpdateIR& window_update) const;
455 
456   // Serializes a BLOCKED frame. The BLOCKED frame is used to
457   // indicate to the remote endpoint that this endpoint believes itself to be
458   // flow-control blocked but otherwise ready to send data. The BLOCKED frame
459   // is purely advisory and optional.
460   SpdySerializedFrame* SerializeBlocked(const SpdyBlockedIR& blocked) const;
461 
462   // Serializes a PUSH_PROMISE frame. The PUSH_PROMISE frame is used
463   // to inform the client that it will be receiving an additional stream
464   // in response to the original request. The frame includes synthesized
465   // headers to explain the upcoming data.
466   SpdySerializedFrame* SerializePushPromise(
467       const SpdyPushPromiseIR& push_promise);
468 
469   // Serializes a CONTINUATION frame. The CONTINUATION frame is used
470   // to continue a sequence of header block fragments.
471   // TODO(jgraettinger): This implementation is incorrect. The continuation
472   // frame continues a previously-begun HPACK encoding; it doesn't begin a
473   // new one. Figure out whether it makes sense to keep SerializeContinuation().
474   SpdySerializedFrame* SerializeContinuation(
475       const SpdyContinuationIR& continuation);
476 
477   // Serializes an ALTSVC frame. The ALTSVC frame advertises the
478   // availability of an alternative service to the client.
479   SpdySerializedFrame* SerializeAltSvc(const SpdyAltSvcIR& altsvc);
480 
481   // Serialize a frame of unknown type.
482   SpdySerializedFrame* SerializeFrame(const SpdyFrameIR& frame);
483 
484   // NOTES about frame compression.
485   // We want spdy to compress headers across the entire session.  As long as
486   // the session is over TCP, frames are sent serially.  The client & server
487   // can each compress frames in the same order and then compress them in that
488   // order, and the remote can do the reverse.  However, we ultimately want
489   // the creation of frames to be less sensitive to order so that they can be
490   // placed over a UDP based protocol and yet still benefit from some
491   // compression.  We don't know of any good compression protocol which does
492   // not build its state in a serial (stream based) manner....  For now, we're
493   // using zlib anyway.
494 
495   // Compresses a SpdyFrame.
496   // On success, returns a new SpdyFrame with the payload compressed.
497   // Compression state is maintained as part of the SpdyFramer.
498   // Returned frame must be freed with "delete".
499   // On failure, returns NULL.
500   SpdyFrame* CompressFrame(const SpdyFrame& frame);
501 
502   // For ease of testing and experimentation we can tweak compression on/off.
set_enable_compression(bool value)503   void set_enable_compression(bool value) {
504     enable_compression_ = value;
505   }
506 
507   // Used only in log messages.
set_display_protocol(const std::string & protocol)508   void set_display_protocol(const std::string& protocol) {
509     display_protocol_ = protocol;
510   }
511 
512   // Returns the (minimum) size of frames (sans variable-length portions).
513   size_t GetDataFrameMinimumSize() const;
514   size_t GetControlFrameHeaderSize() const;
515   size_t GetSynStreamMinimumSize() const;
516   size_t GetSynReplyMinimumSize() const;
517   size_t GetRstStreamMinimumSize() const;
518   size_t GetSettingsMinimumSize() const;
519   size_t GetPingSize() const;
520   size_t GetGoAwayMinimumSize() const;
521   size_t GetHeadersMinimumSize() const;
522   size_t GetWindowUpdateSize() const;
523   size_t GetBlockedSize() const;
524   size_t GetPushPromiseMinimumSize() const;
525   size_t GetContinuationMinimumSize() const;
526   size_t GetAltSvcMinimumSize() const;
527   size_t GetPrioritySize() const;
528 
529   // Returns the minimum size a frame can be (data or control).
530   size_t GetFrameMinimumSize() const;
531 
532   // Returns the maximum size a frame can be (data or control).
533   size_t GetFrameMaximumSize() const;
534 
535   // Returns the maximum size that a control frame can be.
536   size_t GetControlFrameMaximumSize() const;
537 
538   // Returns the maximum payload size of a DATA frame.
539   size_t GetDataFrameMaximumPayload() const;
540 
541   // Returns the prefix length for the given frame type.
542   size_t GetPrefixLength(SpdyFrameType type) const;
543 
544   // For debugging.
545   static const char* StateToString(int state);
546   static const char* ErrorCodeToString(int error_code);
547   static const char* StatusCodeToString(int status_code);
548   static const char* FrameTypeToString(SpdyFrameType type);
549 
protocol_version()550   SpdyMajorVersion protocol_version() const { return spdy_version_; }
551 
probable_http_response()552   bool probable_http_response() const { return probable_http_response_; }
553 
expect_continuation()554   SpdyStreamId expect_continuation() const { return expect_continuation_; }
555 
GetLowestPriority()556   SpdyPriority GetLowestPriority() const {
557     return spdy_version_ < SPDY3 ? 3 : 7;
558   }
559 
GetHighestPriority()560   SpdyPriority GetHighestPriority() const { return 0; }
561 
562   // Interpolates SpdyPriority values into SPDY4/HTTP2 priority weights,
563   // and vice versa.
564   uint8 MapPriorityToWeight(SpdyPriority priority);
565   SpdyPriority MapWeightToPriority(uint8 weight);
566 
567   // Deliver the given control frame's compressed headers block to the visitor
568   // in decompressed form, in chunks. Returns true if the visitor has
569   // accepted all of the chunks.
570   bool IncrementallyDecompressControlFrameHeaderData(
571       SpdyStreamId stream_id,
572       const char* data,
573       size_t len);
574 
575  protected:
576   // TODO(jgraettinger): Switch to test peer pattern.
577   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest, BasicCompression);
578   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest, ControlFrameSizesAreValidated);
579   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest, HeaderCompression);
580   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest, DecompressUncompressedFrame);
581   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest, ExpandBuffer_HeapSmash);
582   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest, HugeHeaderBlock);
583   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest, UnclosedStreamDataCompressors);
584   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest,
585                            UnclosedStreamDataCompressorsOneByteAtATime);
586   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest,
587                            UncompressLargerThanFrameBufferInitialSize);
588   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest, ReadLargeSettingsFrame);
589   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest,
590                            ReadLargeSettingsFrameInSmallChunks);
591   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest, ControlFrameAtMaxSizeLimit);
592   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest, ControlFrameTooLarge);
593   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest,
594                            TooLargeHeadersFrameUsesContinuation);
595   FRIEND_TEST_ALL_PREFIXES(SpdyFramerTest,
596                            TooLargePushPromiseFrameUsesContinuation);
597   friend class net::HttpNetworkLayer;  // This is temporary for the server.
598   friend class net::HttpNetworkTransactionTest;
599   friend class net::HttpProxyClientSocketPoolTest;
600   friend class net::SpdyHttpStreamTest;
601   friend class net::SpdyNetworkTransactionTest;
602   friend class net::SpdyProxyClientSocketTest;
603   friend class net::SpdySessionTest;
604   friend class net::SpdyStreamTest;
605   friend class net::SpdyWebSocketStreamTest;
606   friend class net::WebSocketJobTest;
607   friend class test::TestSpdyVisitor;
608 
609  private:
610   // Internal breakouts from ProcessInput. Each returns the number of bytes
611   // consumed from the data.
612   size_t ProcessCommonHeader(const char* data, size_t len);
613   size_t ProcessControlFramePayload(const char* data, size_t len);
614   size_t ProcessControlFrameBeforeHeaderBlock(const char* data, size_t len);
615   // HPACK data is re-encoded as SPDY3 and re-entrantly delivered through
616   // |ProcessControlFrameHeaderBlock()|. |is_hpack_header_block| controls
617   // whether data is treated as HPACK- vs SPDY3-encoded.
618   size_t ProcessControlFrameHeaderBlock(const char* data,
619                                         size_t len,
620                                         bool is_hpack_header_block);
621   size_t ProcessFramePaddingLength(const char* data, size_t len);
622   size_t ProcessFramePadding(const char* data, size_t len);
623   size_t ProcessDataFramePayload(const char* data, size_t len);
624   size_t ProcessGoAwayFramePayload(const char* data, size_t len);
625   size_t ProcessRstStreamFramePayload(const char* data, size_t len);
626   size_t ProcessSettingsFramePayload(const char* data, size_t len);
627   size_t ProcessAltSvcFramePayload(const char* data, size_t len);
628   size_t ProcessIgnoredControlFramePayload(/*const char* data,*/ size_t len);
629 
630   // TODO(jgraettinger): To be removed with migration to
631   // SpdyHeadersHandlerInterface.
632   // Serializes the last-processed header block of |hpack_decoder_| as
633   // a SPDY3 format block, and delivers it to the visitor via reentrant
634   // call to ProcessControlFrameHeaderBlock().
635   void DeliverHpackBlockAsSpdy3Block();
636 
637   // Helpers for above internal breakouts from ProcessInput.
638   void ProcessControlFrameHeader(uint16 control_frame_type_field);
639   // Always passed exactly 1 setting's worth of data.
640   bool ProcessSetting(const char* data);
641 
642   // Retrieve serialized length of SpdyHeaderBlock. If compression is enabled, a
643   // maximum estimate is returned.
644   size_t GetSerializedLength(const SpdyHeaderBlock& headers);
645 
646   // Get (and lazily initialize) the ZLib state.
647   z_stream* GetHeaderCompressor();
648   z_stream* GetHeaderDecompressor();
649 
650   // Get (and lazily initialize) the HPACK state.
651   HpackEncoder* GetHpackEncoder();
652   HpackDecoder* GetHpackDecoder();
653 
654   size_t GetNumberRequiredContinuationFrames(size_t size);
655 
656   void WritePayloadWithContinuation(SpdyFrameBuilder* builder,
657                                     const std::string& hpack_encoding,
658                                     SpdyStreamId stream_id,
659                                     SpdyFrameType type);
660 
661  private:
662   // Deliver the given control frame's uncompressed headers block to the
663   // visitor in chunks. Returns true if the visitor has accepted all of the
664   // chunks.
665   bool IncrementallyDeliverControlFrameHeaderData(SpdyStreamId stream_id,
666                                                   const char* data,
667                                                   size_t len);
668 
669   // Utility to copy the given data block to the current frame buffer, up
670   // to the given maximum number of bytes, and update the buffer
671   // data (pointer and length). Returns the number of bytes
672   // read, and:
673   //   *data is advanced the number of bytes read.
674   //   *len is reduced by the number of bytes read.
675   size_t UpdateCurrentFrameBuffer(const char** data, size_t* len,
676                                   size_t max_bytes);
677 
678   void WriteHeaderBlockToZ(const SpdyHeaderBlock* headers,
679                            z_stream* out) const;
680 
681   void SerializeNameValueBlockWithoutCompression(
682       SpdyFrameBuilder* builder,
683       const SpdyNameValueBlock& name_value_block) const;
684 
685   // Compresses automatically according to enable_compression_.
686   void SerializeNameValueBlock(
687       SpdyFrameBuilder* builder,
688       const SpdyFrameWithNameValueBlockIR& frame);
689 
690   // Set the error code and moves the framer into the error state.
691   void set_error(SpdyError error);
692 
693   // The maximum size of the control frames that we support.
694   // This limit is arbitrary. We can enforce it here or at the application
695   // layer. We chose the framing layer, but this can be changed (or removed)
696   // if necessary later down the line.
GetControlFrameBufferMaxSize()697   size_t GetControlFrameBufferMaxSize() const {
698     // The theoretical maximum for SPDY3 and earlier is (2^24 - 1) +
699     // 8, since the length field does not count the size of the
700     // header.
701     if (spdy_version_ == SPDY2) {
702       return 64 * 1024;
703     }
704     if (spdy_version_ == SPDY3) {
705       return 16 * 1024 * 1024;
706     }
707     // Absolute maximum size of HTTP2 frame payload (section 4.2 "Frame size").
708     return (1<<14) - 1;
709   }
710 
711   // The size of the control frame buffer.
712   // Since this is only used for control frame headers, the maximum control
713   // frame header size (SYN_STREAM) is sufficient; all remaining control
714   // frame data is streamed to the visitor.
715   static const size_t kControlFrameBufferSize;
716 
717   SpdyState state_;
718   SpdyState previous_state_;
719   SpdyError error_code_;
720 
721   // Note that for DATA frame, remaining_data_length_ is sum of lengths of
722   // frame header, padding length field (optional), data payload (optional) and
723   // padding payload (optional).
724   size_t remaining_data_length_;
725 
726   // The length (in bytes) of the padding payload to be processed.
727   size_t remaining_padding_payload_length_;
728 
729   // The length (in bytes) of the padding length field to be processed.
730   size_t remaining_padding_length_fields_;
731 
732   // The number of bytes remaining to read from the current control frame's
733   // headers. Note that header data blocks (for control types that have them)
734   // are part of the frame's payload, and not the frame's headers.
735   size_t remaining_control_header_;
736 
737   scoped_ptr<char[]> current_frame_buffer_;
738   // Number of bytes read into the current_frame_buffer_.
739   size_t current_frame_buffer_length_;
740 
741   // The type of the frame currently being read.
742   SpdyFrameType current_frame_type_;
743 
744   // The flags field of the frame currently being read.
745   uint8 current_frame_flags_;
746 
747   // The total length of the frame currently being read, including frame header.
748   uint32 current_frame_length_;
749 
750   // The stream ID field of the frame currently being read, if applicable.
751   SpdyStreamId current_frame_stream_id_;
752 
753   // Scratch space for handling SETTINGS frames.
754   // TODO(hkhalil): Unify memory for this scratch space with
755   // current_frame_buffer_.
756   SpdySettingsScratch settings_scratch_;
757 
758   SpdyAltSvcScratch altsvc_scratch_;
759 
760   bool enable_compression_;  // Controls all compression
761   // SPDY header compressors.
762   scoped_ptr<z_stream> header_compressor_;
763   scoped_ptr<z_stream> header_decompressor_;
764 
765   scoped_ptr<HpackEncoder> hpack_encoder_;
766   scoped_ptr<HpackDecoder> hpack_decoder_;
767 
768   SpdyFramerVisitorInterface* visitor_;
769   SpdyFramerDebugVisitorInterface* debug_visitor_;
770 
771   std::string display_protocol_;
772 
773   // The major SPDY version to be spoken/understood by this framer.
774   const SpdyMajorVersion spdy_version_;
775 
776   // Tracks if we've ever gotten far enough in framing to see a control frame of
777   // type SYN_STREAM or SYN_REPLY.
778   //
779   // If we ever get something which looks like a data frame before we've had a
780   // SYN, we explicitly check to see if it looks like we got an HTTP response
781   // to a SPDY request.  This boolean lets us do that.
782   bool syn_frame_processed_;
783 
784   // If we ever get a data frame before a SYN frame, we check to see if it
785   // starts with HTTP.  If it does, we likely have an HTTP response.   This
786   // isn't guaranteed though: we could have gotten a settings frame and then
787   // corrupt data that just looks like HTTP, but deterministic checking requires
788   // a lot more state.
789   bool probable_http_response_;
790 
791   // Set this to the current stream when we receive a HEADERS, PUSH_PROMISE, or
792   // CONTINUATION frame without the END_HEADERS(0x4) bit set. These frames must
793   // be followed by a CONTINUATION frame, or else we throw a PROTOCOL_ERROR.
794   // A value of 0 indicates that we are not expecting a CONTINUATION frame.
795   SpdyStreamId expect_continuation_;
796 
797   // If a HEADERS frame is followed by a CONTINUATION frame, the FIN/END_STREAM
798   // flag is still carried in the HEADERS frame. If it's set, flip this so that
799   // we know to terminate the stream when the entire header block has been
800   // processed.
801   bool end_stream_when_done_;
802 };
803 
804 }  // namespace net
805 
806 #endif  // NET_SPDY_SPDY_FRAMER_H_
807