/* * Dynamic db (proposal, transforms, attributes) handling. * Author: JuanJo Ciarlante * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU General Public License as published by the * Free Software Foundation; either version 2 of the License, or (at your * option) any later version. See . * * This program is distributed in the hope that it will be useful, but * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License * for more details. */ /* * The strategy is to have (full contained) struct db_prop in db_context * pointing to ONE dynamically sizable transform vector (trans0). * Each transform stores attrib. in ONE dyn. sizable attribute vector (attrs0) * in a "serialized" way (attributes storage is used in linear sequence for * subsequent transforms). * * Resizing for both trans0 and attrs0 is supported: * - For trans0: quite simple, just allocate and copy trans. vector content * also update trans_cur (by offset) * - For attrs0: after allocating and copying attrs, I must rewrite each * trans->attrs present in trans0; to achieve this, calculate * attrs pointer offset (new minus old) and iterate over * each transform "adding" this difference. * also update attrs_cur (by offset) * * db_context structure: * +---------------------+ * | prop | * | .protoid | * | .trans | --+ * | .trans_cnt | | * +---------------------+ <-+ * | trans0 | ----> { trans#1 | ... | trans#i | ... } * +---------------------+ ^ * | trans_cur | ----------------------' current transf. * +---------------------+ * | attrs0 | ----> { attr#1 | ... | attr#j | ... } * +---------------------+ ^ * | attrs_cur | ---------------------' current attr. * +---------------------+ * | max_trans,max_attrs | max_trans/attrs: number of elem. of each vector * +---------------------+ * * See testing examples at end for interface usage. */ #include #include #include #include #include #include #include "sysdep.h" #include "constants.h" #include "defs.h" #include "state.h" #include "packet.h" #include "spdb.h" #include "db_ops.h" #include "log.h" #include "whack.h" #include #ifdef NOT_YET /* * Allocator cache: * Because of the single-threaded nature of pluto/spdb.c, * many heap allocations are made with very short lifetimes. * Just caching last object (currently it will select the * largest) will avoid this allocation mas^Wperturbations * */ struct db_ops_alloc_cache { void *ptr; int size; }; #endif #ifndef NO_DB_OPS_STATS /* * stats: do accounting for allocations displayed in db_ops_show_status() */ struct db_ops_stats { int st_curr_cnt; /* current number of allocations */ int st_total_cnt; /* total allocations so far */ size_t st_maxsz; /* max. size requested */ }; #define DB_OPS_ZERO { 0, 0, 0 }; #define DB_OPS_STATS_DESC "{curr_cnt, total_cnt, maxsz}" #define DB_OPS_STATS_STR(name) name "={%d,%d,%d} " #define DB_OPS_STATS_F(st) (st).st_curr_cnt, (st).st_total_cnt, \ (int)(st).st_maxsz static struct db_ops_stats db_context_st = DB_OPS_ZERO; static struct db_ops_stats db_trans_st = DB_OPS_ZERO; static struct db_ops_stats db_attrs_st = DB_OPS_ZERO; static __inline__ void * alloc_bytes_st(size_t size, const char *str, struct db_ops_stats *st) { void *ptr = alloc_bytes(size, str); st->st_curr_cnt++; st->st_total_cnt++; if (size > st->st_maxsz) st->st_maxsz = size; return ptr; } #define ALLOC_BYTES_ST(z, s, st) alloc_bytes_st(z, s, &st); #define PFREE_ST(p, st) do { st.st_curr_cnt--; pfree(p); } while (0); #else /* NO_DB_OPS_STATS */ #define ALLOC_BYTES_ST(z, s, n) alloc_bytes(z, s); #define PFREE_ST(p, n) pfree(p); #endif /* NO_DB_OPS_STATS */ /* * Initialize db object * * max_trans and max_attrs can be 0, will be dynamically expanded * as a result of "add" operations */ static void db_prop_init(struct db_context *ctx, u_int8_t protoid, int max_trans, int max_attrs) { ctx->trans0 = NULL; ctx->attrs0 = NULL; if (max_trans > 0) { /* quite silly if not */ ctx->trans0 = ALLOC_BYTES_ST( sizeof(struct db_trans) * max_trans, "db_context->trans", db_trans_st); } if (max_attrs > 0) { /* quite silly if not */ ctx->attrs0 = ALLOC_BYTES_ST( sizeof(struct db_attr) * max_attrs, "db_context->attrs", db_attrs_st); } ctx->max_trans = max_trans; ctx->max_attrs = max_attrs; ctx->trans_cur = ctx->trans0; ctx->attrs_cur = ctx->attrs0; ctx->prop.protoid = protoid; ctx->prop.trans = ctx->trans0; ctx->prop.trans_cnt = 0; } /* Expand storage for transforms by number delta_trans */ static void db_trans_expand(struct db_context *ctx, int delta_trans) { int max_trans = ctx->max_trans + delta_trans; struct db_trans *const old_trans = ctx->trans0; struct db_trans *const new_trans = ALLOC_BYTES_ST( sizeof(struct db_trans) * max_trans, "db_context->trans (expand)", db_trans_st); memcpy(new_trans, old_trans, ctx->max_trans * sizeof(struct db_trans)); /* update trans0 (obviously) */ ctx->trans0 = ctx->prop.trans = new_trans; /* update trans_cur (by offset) */ ctx->trans_cur = ctx->trans_cur - old_trans + new_trans; /* update elem count */ ctx->max_trans = max_trans; if (old_trans != NULL) PFREE_ST(old_trans, db_trans_st); } /* * Expand storage for attributes by delta_attrs number AND * adjust pointers into trans->attr */ static void db_attrs_expand(struct db_context *ctx, int delta_attrs) { unsigned int ti; int max_attrs = ctx->max_attrs + delta_attrs; struct db_attr *const old_attrs = ctx->attrs0; struct db_attr *const new_attrs = ALLOC_BYTES_ST( sizeof(struct db_attr) * max_attrs, "db_context->attrs (expand)", db_attrs_st); memcpy(new_attrs, old_attrs, ctx->max_attrs * sizeof(struct db_attr)); /* * Relocate pointers into ctx->attrs. * Note: C addition is NOT associative (due to scaling) */ ctx->attrs0 = ctx->attrs0 - old_attrs + new_attrs; ctx->attrs_cur = ctx->attrs_cur - old_attrs + new_attrs; for (ti = 0; ti < ctx->prop.trans_cnt; ti++) ctx->prop.trans[ti].attrs = ctx->prop.trans[ti].attrs - old_attrs + new_attrs; /* update elem count */ ctx->max_attrs = max_attrs; if (old_attrs != NULL) PFREE_ST(old_attrs, db_attrs_st); } /* Allocate a new db object */ struct db_context *db_prop_new(u_int8_t protoid, int max_trans, int max_attrs) { struct db_context *ctx = ALLOC_BYTES_ST( sizeof(struct db_context), "db_context", db_context_st); db_prop_init(ctx, protoid, max_trans, max_attrs); return ctx; } /* Free a db object */ void db_destroy(struct db_context *ctx) { if (ctx->trans0 != NULL) PFREE_ST(ctx->trans0, db_trans_st); if (ctx->attrs0 != NULL) PFREE_ST(ctx->attrs0, db_attrs_st); PFREE_ST(ctx, db_context_st); } /* Start a new transform, expand trans0 is needed */ void db_trans_add(struct db_context *ctx, u_int8_t transid) { passert(ctx->trans_cur != NULL); /* skip incrementing current trans pointer the 1st time*/ if (ctx->trans_cur->attr_cnt != 0) ctx->trans_cur++; /* * Strategy: if more space is needed, expand by * /2 + 1 * * This happens to produce a "reasonable" sequence * after few allocations, eg.: * 0,1,2,4,8,13,20,31,47 */ if ((ctx->trans_cur - ctx->trans0) >= ctx->max_trans) { db_trans_expand(ctx, ctx->max_trans / 2 + 1); } ctx->trans_cur->transid = transid; ctx->trans_cur->attrs = ctx->attrs_cur; ctx->trans_cur->attr_cnt = 0; ctx->prop.trans_cnt++; } /* Add attr copy to current transform, expanding attrs0 if needed */ static void db_attr_add(struct db_context *ctx, const struct db_attr *a) { /* * Strategy: if more space is needed, expand by * /2 + 1 */ if ((ctx->attrs_cur - ctx->attrs0) >= ctx->max_attrs) { db_attrs_expand(ctx, ctx->max_attrs / 2 + 1); } *ctx->attrs_cur++ = *a; ctx->trans_cur->attr_cnt++; } /* * Add attr copy (by value) to current transform, * expanding attrs0 if needed, just calls db_attr_add(). */ void db_attr_add_values(struct db_context *ctx, enum ikev1_oakley_attr type, u_int16_t val) { struct db_attr attr; /* ??? is this always an Oakley (IKEv1 Phase 1) attribute? */ attr.type.oakley = type; attr.val = val; db_attr_add(ctx, &attr); } #ifndef NO_DB_OPS_STATS void db_ops_show_status(void) { whack_log(RC_COMMENT, "stats db_ops: " DB_OPS_STATS_DESC " :" DB_OPS_STATS_STR("context") DB_OPS_STATS_STR("trans") DB_OPS_STATS_STR("attrs"), DB_OPS_STATS_F(db_context_st), DB_OPS_STATS_F(db_trans_st), DB_OPS_STATS_F(db_attrs_st)); } #endif /* NO_DB_OPS_STATS */ /* * From here to end is just testing stuff .... */ #if defined(TEST) static void db_prop_print(struct db_prop *p) { struct db_trans *t; struct db_attr *a; unsigned ti, ai; enum_names *n, *n_at, *n_av; DBG_log("protoid=\"%s\"\n", enum_name(&protocol_names, p->protoid)); for (ti = 0, t = p->trans; ti < p->trans_cnt; ti++, t++) { switch ( p->protoid) { case PROTO_ISAKMP: n = &isakmp_transformid_names; break; case PROTO_IPSEC_ESP: n = &esp_transformid_names; break; case PROTO_IPSEC_AH: n = &ah_transformid_names; break; default: continue; } DBG_log(" transid=\"%s\"\n", enum_name(n, t->transid)); for (ai = 0, a = t->attrs; ai < t->attr_cnt; ai++, a++) { int i; switch ( p->protoid) { case PROTO_ISAKMP: n_at = &oakley_attr_names; i = a->type.oakley | ISAKMP_ATTR_AF_TV; n_av = oakley_attr_val_descs[ i & ISAKMP_ATTR_RTYPE_MASK]; break; case PROTO_IPSEC_AH: case PROTO_IPSEC_ESP: n_at = &ipsec_attr_names; i = a->type.oakley | ISAKMP_ATTR_AF_TV; n_av = ipsec_attr_val_descs[ i & ISAKMP_ATTR_RTYPE_MASK]; break; default: continue; } DBG_log(" type=\"%s\" value=\"%s\"\n", enum_name(n_at, i), enum_name(n_av, a->val)); } } } void db_print(struct db_context *ctx) { DBG_log("trans_cur diff=%td, attrs_cur diff=%td\n", ctx->trans_cur - ctx->trans0, ctx->attrs_cur - ctx->attrs0); db_prop_print(&ctx->prop); } int main(void) { struct db_context *ctx = db_prop_new(PROTO_ISAKMP, 0, 0); db_trans_add(ctx, KEY_IKE); db_attr_add_values(ctx, OAKLEY_ENCRYPTION_ALGORITHM, OAKLEY_3DES_CBC); db_attr_add_values(ctx, OAKLEY_HASH_ALGORITHM, OAKLEY_MD5); db_attr_add_values(ctx, OAKLEY_AUTHENTICATION_METHOD, OAKLEY_RSA_SIG); db_attr_add_values(ctx, OAKLEY_GROUP_DESCRIPTION, OAKLEY_GROUP_MODP1024); db_trans_add(ctx, KEY_IKE); db_attr_add_values(ctx, OAKLEY_ENCRYPTION_ALGORITHM, OAKLEY_AES_CBC); db_attr_add_values(ctx, OAKLEY_HASH_ALGORITHM, OAKLEY_MD5); db_attr_add_values(ctx, OAKLEY_AUTHENTICATION_METHOD, OAKLEY_PRESHARED_KEY); db_attr_add_values(ctx, OAKLEY_GROUP_DESCRIPTION, OAKLEY_GROUP_MODP1536); db_trans_add(ctx, ESP_3DES); db_attr_add_values(ctx, AUTH_ALGORITHM, AUTH_ALGORITHM_HMAC_SHA1); db_print(ctx); db_destroy(ctx); return 0; } #endif /* #if defined(TEST) */