| 1 | /**************************************************************************** |
| 2 | ** |
| 3 | ** Copyright (C) 2016 Kurt Pattyn <pattyn.kurt@gmail.com>. |
| 4 | ** Contact: https://www.qt.io/licensing/ |
| 5 | ** |
| 6 | ** This file is part of the QtWebSockets module of the Qt Toolkit. |
| 7 | ** |
| 8 | ** $QT_BEGIN_LICENSE:LGPL$ |
| 9 | ** Commercial License Usage |
| 10 | ** Licensees holding valid commercial Qt licenses may use this file in |
| 11 | ** accordance with the commercial license agreement provided with the |
| 12 | ** Software or, alternatively, in accordance with the terms contained in |
| 13 | ** a written agreement between you and The Qt Company. For licensing terms |
| 14 | ** and conditions see https://www.qt.io/terms-conditions. For further |
| 15 | ** information use the contact form at https://www.qt.io/contact-us. |
| 16 | ** |
| 17 | ** GNU Lesser General Public License Usage |
| 18 | ** Alternatively, this file may be used under the terms of the GNU Lesser |
| 19 | ** General Public License version 3 as published by the Free Software |
| 20 | ** Foundation and appearing in the file LICENSE.LGPL3 included in the |
| 21 | ** packaging of this file. Please review the following information to |
| 22 | ** ensure the GNU Lesser General Public License version 3 requirements |
| 23 | ** will be met: https://www.gnu.org/licenses/lgpl-3.0.html. |
| 24 | ** |
| 25 | ** GNU General Public License Usage |
| 26 | ** Alternatively, this file may be used under the terms of the GNU |
| 27 | ** General Public License version 2.0 or (at your option) the GNU General |
| 28 | ** Public license version 3 or any later version approved by the KDE Free |
| 29 | ** Qt Foundation. The licenses are as published by the Free Software |
| 30 | ** Foundation and appearing in the file LICENSE.GPL2 and LICENSE.GPL3 |
| 31 | ** included in the packaging of this file. Please review the following |
| 32 | ** information to ensure the GNU General Public License requirements will |
| 33 | ** be met: https://www.gnu.org/licenses/gpl-2.0.html and |
| 34 | ** https://www.gnu.org/licenses/gpl-3.0.html. |
| 35 | ** |
| 36 | ** $QT_END_LICENSE$ |
| 37 | ** |
| 38 | ****************************************************************************/ |
| 39 | /*! |
| 40 | \class QWebSocketDataProcessor |
| 41 | The class QWebSocketDataProcessor is responsible for reading, validating and |
| 42 | interpreting data from a WebSocket. |
| 43 | It reads data from a QIODevice, validates it against \l{RFC 6455}, and parses it into |
| 44 | frames (data, control). |
| 45 | It emits signals that correspond to the type of the frame: textFrameReceived(), |
| 46 | binaryFrameReceived(), textMessageReceived(), binaryMessageReceived(), pingReceived(), |
| 47 | pongReceived() and closeReceived(). |
| 48 | Whenever an error is detected, the errorEncountered() signal is emitted. |
| 49 | QWebSocketDataProcessor also checks if a frame is allowed in a sequence of frames |
| 50 | (e.g. a continuation frame cannot follow a final frame). |
| 51 | This class is an internal class used by QWebSocketInternal for data processing and validation. |
| 52 | |
| 53 | \sa Frame() |
| 54 | |
| 55 | \internal |
| 56 | */ |
| 57 | #include "qwebsocketdataprocessor_p.h" |
| 58 | #include "qwebsocketprotocol.h" |
| 59 | #include "qwebsocketprotocol_p.h" |
| 60 | #include "qwebsocketframe_p.h" |
| 61 | |
| 62 | #include <QtCore/QtEndian> |
| 63 | #include <QtCore/QTextCodec> |
| 64 | #include <QtCore/QTextDecoder> |
| 65 | #include <QtCore/QDebug> |
| 66 | |
| 67 | #include <limits.h> |
| 68 | |
| 69 | QT_BEGIN_NAMESPACE |
| 70 | |
| 71 | /*! |
| 72 | \internal |
| 73 | */ |
| 74 | QWebSocketDataProcessor::QWebSocketDataProcessor(QObject *parent) : |
| 75 | QObject(parent), |
| 76 | m_processingState(PS_READ_HEADER), |
| 77 | m_isFinalFrame(false), |
| 78 | m_isFragmented(false), |
| 79 | m_opCode(QWebSocketProtocol::OpCodeClose), |
| 80 | m_isControlFrame(false), |
| 81 | m_hasMask(false), |
| 82 | m_mask(0), |
| 83 | m_binaryMessage(), |
| 84 | m_textMessage(), |
| 85 | m_payloadLength(0), |
| 86 | m_pConverterState(nullptr), |
| 87 | m_pTextCodec(QTextCodec::codecForName(name: "UTF-8" )), |
| 88 | m_waitTimer(new QTimer(this)) |
| 89 | { |
| 90 | clear(); |
| 91 | // initialize the internal timeout timer |
| 92 | m_waitTimer->setInterval(5000); |
| 93 | m_waitTimer->setSingleShot(true); |
| 94 | m_waitTimer->callOnTimeout(args: this, args: &QWebSocketDataProcessor::timeout); |
| 95 | } |
| 96 | |
| 97 | /*! |
| 98 | \internal |
| 99 | */ |
| 100 | QWebSocketDataProcessor::~QWebSocketDataProcessor() |
| 101 | { |
| 102 | clear(); |
| 103 | if (m_pConverterState) { |
| 104 | delete m_pConverterState; |
| 105 | m_pConverterState = nullptr; |
| 106 | } |
| 107 | } |
| 108 | |
| 109 | void QWebSocketDataProcessor::setMaxAllowedFrameSize(quint64 maxAllowedFrameSize) |
| 110 | { |
| 111 | frame.setMaxAllowedFrameSize(maxAllowedFrameSize); |
| 112 | } |
| 113 | |
| 114 | quint64 QWebSocketDataProcessor::maxAllowedFrameSize() const |
| 115 | { |
| 116 | return frame.maxAllowedFrameSize(); |
| 117 | } |
| 118 | |
| 119 | /*! |
| 120 | \internal |
| 121 | */ |
| 122 | void QWebSocketDataProcessor::setMaxAllowedMessageSize(quint64 maxAllowedMessageSize) |
| 123 | { |
| 124 | if (maxAllowedMessageSize <= maxMessageSize()) |
| 125 | m_maxAllowedMessageSize = maxAllowedMessageSize; |
| 126 | } |
| 127 | |
| 128 | /*! |
| 129 | \internal |
| 130 | */ |
| 131 | quint64 QWebSocketDataProcessor::maxAllowedMessageSize() const |
| 132 | { |
| 133 | return m_maxAllowedMessageSize; |
| 134 | } |
| 135 | |
| 136 | /*! |
| 137 | \internal |
| 138 | */ |
| 139 | quint64 QWebSocketDataProcessor::maxMessageSize() |
| 140 | { |
| 141 | return MAX_MESSAGE_SIZE_IN_BYTES; //COV_NF_LINE |
| 142 | } |
| 143 | |
| 144 | /*! |
| 145 | \internal |
| 146 | */ |
| 147 | quint64 QWebSocketDataProcessor::maxFrameSize() |
| 148 | { |
| 149 | return QWebSocketFrame::maxFrameSize(); |
| 150 | } |
| 151 | |
| 152 | /*! |
| 153 | \internal |
| 154 | |
| 155 | Returns \c true if a complete websocket frame has been processed; |
| 156 | otherwise returns \c false. |
| 157 | */ |
| 158 | bool QWebSocketDataProcessor::process(QIODevice *pIoDevice) |
| 159 | { |
| 160 | bool isDone = false; |
| 161 | |
| 162 | while (!isDone) { |
| 163 | frame.readFrame(pIoDevice); |
| 164 | if (!frame.isDone()) { |
| 165 | // waiting for more data available |
| 166 | QObject::connect(sender: pIoDevice, signal: &QIODevice::readyRead, |
| 167 | receiver: m_waitTimer, slot: &QTimer::stop, type: Qt::UniqueConnection); |
| 168 | m_waitTimer->start(); |
| 169 | return false; |
| 170 | } else if (Q_LIKELY(frame.isValid())) { |
| 171 | if (frame.isControlFrame()) { |
| 172 | isDone = processControlFrame(frame); |
| 173 | } else { |
| 174 | //we have a dataframe; opcode can be OC_CONTINUE, OC_TEXT or OC_BINARY |
| 175 | if (Q_UNLIKELY(!m_isFragmented && frame.isContinuationFrame())) { |
| 176 | clear(); |
| 177 | Q_EMIT errorEncountered(code: QWebSocketProtocol::CloseCodeProtocolError, |
| 178 | description: tr(s: "Received Continuation frame, while there is " \ |
| 179 | "nothing to continue." )); |
| 180 | return true; |
| 181 | } |
| 182 | if (Q_UNLIKELY(m_isFragmented && frame.isDataFrame() && |
| 183 | !frame.isContinuationFrame())) { |
| 184 | clear(); |
| 185 | Q_EMIT errorEncountered(code: QWebSocketProtocol::CloseCodeProtocolError, |
| 186 | description: tr(s: "All data frames after the initial data frame " \ |
| 187 | "must have opcode 0 (continuation)." )); |
| 188 | return true; |
| 189 | } |
| 190 | if (!frame.isContinuationFrame()) { |
| 191 | m_opCode = frame.opCode(); |
| 192 | m_isFragmented = !frame.isFinalFrame(); |
| 193 | } |
| 194 | quint64 messageLength = m_opCode == QWebSocketProtocol::OpCodeText |
| 195 | ? quint64(m_textMessage.length()) |
| 196 | : quint64(m_binaryMessage.length()); |
| 197 | if (Q_UNLIKELY((messageLength + quint64(frame.payload().length())) > |
| 198 | maxAllowedMessageSize())) { |
| 199 | clear(); |
| 200 | Q_EMIT errorEncountered(code: QWebSocketProtocol::CloseCodeTooMuchData, |
| 201 | description: tr(s: "Received message is too big." )); |
| 202 | return true; |
| 203 | } |
| 204 | |
| 205 | bool isFinalFrame = frame.isFinalFrame(); |
| 206 | if (m_opCode == QWebSocketProtocol::OpCodeText) { |
| 207 | QString frameTxt = m_pTextCodec->toUnicode(in: frame.payload().constData(), |
| 208 | length: frame.payload().size(), |
| 209 | state: m_pConverterState); |
| 210 | bool failed = (m_pConverterState->invalidChars != 0) |
| 211 | || (frame.isFinalFrame() && (m_pConverterState->remainingChars != 0)); |
| 212 | if (Q_UNLIKELY(failed)) { |
| 213 | clear(); |
| 214 | Q_EMIT errorEncountered(code: QWebSocketProtocol::CloseCodeWrongDatatype, |
| 215 | description: tr(s: "Invalid UTF-8 code encountered." )); |
| 216 | return true; |
| 217 | } else { |
| 218 | m_textMessage.append(s: frameTxt); |
| 219 | frame.clear(); |
| 220 | Q_EMIT textFrameReceived(frame: frameTxt, lastFrame: isFinalFrame); |
| 221 | } |
| 222 | } else { |
| 223 | m_binaryMessage.append(a: frame.payload()); |
| 224 | QByteArray payload = frame.payload(); |
| 225 | frame.clear(); |
| 226 | Q_EMIT binaryFrameReceived(frame: payload, lastFrame: isFinalFrame); |
| 227 | } |
| 228 | |
| 229 | if (isFinalFrame) { |
| 230 | isDone = true; |
| 231 | if (m_opCode == QWebSocketProtocol::OpCodeText) { |
| 232 | const QString textMessage(m_textMessage); |
| 233 | clear(); |
| 234 | Q_EMIT textMessageReceived(message: textMessage); |
| 235 | } else { |
| 236 | const QByteArray binaryMessage(m_binaryMessage); |
| 237 | clear(); |
| 238 | Q_EMIT binaryMessageReceived(message: binaryMessage); |
| 239 | } |
| 240 | } |
| 241 | } |
| 242 | } else { |
| 243 | Q_EMIT errorEncountered(code: frame.closeCode(), description: frame.closeReason()); |
| 244 | clear(); |
| 245 | isDone = true; |
| 246 | } |
| 247 | frame.clear(); |
| 248 | } |
| 249 | return true; |
| 250 | } |
| 251 | |
| 252 | /*! |
| 253 | \internal |
| 254 | */ |
| 255 | void QWebSocketDataProcessor::clear() |
| 256 | { |
| 257 | m_processingState = PS_READ_HEADER; |
| 258 | m_isFinalFrame = false; |
| 259 | m_isFragmented = false; |
| 260 | m_opCode = QWebSocketProtocol::OpCodeClose; |
| 261 | m_hasMask = false; |
| 262 | m_mask = 0; |
| 263 | m_binaryMessage.clear(); |
| 264 | m_textMessage.clear(); |
| 265 | m_payloadLength = 0; |
| 266 | frame.clear(); |
| 267 | if (m_pConverterState) { |
| 268 | if ((m_pConverterState->remainingChars != 0) || (m_pConverterState->invalidChars != 0)) { |
| 269 | delete m_pConverterState; |
| 270 | m_pConverterState = nullptr; |
| 271 | } |
| 272 | } |
| 273 | if (!m_pConverterState) |
| 274 | m_pConverterState = new QTextCodec::ConverterState(QTextCodec::ConvertInvalidToNull | |
| 275 | QTextCodec::IgnoreHeader); |
| 276 | } |
| 277 | |
| 278 | /*! |
| 279 | \internal |
| 280 | */ |
| 281 | bool QWebSocketDataProcessor::processControlFrame(const QWebSocketFrame &frame) |
| 282 | { |
| 283 | bool mustStopProcessing = true; //control frames never expect additional frames to be processed |
| 284 | switch (frame.opCode()) { |
| 285 | case QWebSocketProtocol::OpCodePing: |
| 286 | Q_EMIT pingReceived(data: frame.payload()); |
| 287 | break; |
| 288 | |
| 289 | case QWebSocketProtocol::OpCodePong: |
| 290 | Q_EMIT pongReceived(data: frame.payload()); |
| 291 | break; |
| 292 | |
| 293 | case QWebSocketProtocol::OpCodeClose: |
| 294 | { |
| 295 | quint16 closeCode = QWebSocketProtocol::CloseCodeNormal; |
| 296 | QString closeReason; |
| 297 | QByteArray payload = frame.payload(); |
| 298 | if (Q_UNLIKELY(payload.size() == 1)) { |
| 299 | //size is either 0 (no close code and no reason) |
| 300 | //or >= 2 (at least a close code of 2 bytes) |
| 301 | closeCode = QWebSocketProtocol::CloseCodeProtocolError; |
| 302 | closeReason = tr(s: "Payload of close frame is too small." ); |
| 303 | } else if (Q_LIKELY(payload.size() > 1)) { |
| 304 | //close frame can have a close code and reason |
| 305 | closeCode = qFromBigEndian<quint16>(src: reinterpret_cast<const uchar *>(payload.constData())); |
| 306 | if (Q_UNLIKELY(!QWebSocketProtocol::isCloseCodeValid(closeCode))) { |
| 307 | closeCode = QWebSocketProtocol::CloseCodeProtocolError; |
| 308 | closeReason = tr(s: "Invalid close code %1 detected." ).arg(a: closeCode); |
| 309 | } else { |
| 310 | if (payload.size() > 2) { |
| 311 | QTextCodec *tc = QTextCodec::codecForName(QByteArrayLiteral("UTF-8" )); |
| 312 | QTextCodec::ConverterState state(QTextCodec::ConvertInvalidToNull); |
| 313 | closeReason = tc->toUnicode(in: payload.constData() + 2, length: payload.size() - 2, state: &state); |
| 314 | const bool failed = (state.invalidChars != 0) || (state.remainingChars != 0); |
| 315 | if (Q_UNLIKELY(failed)) { |
| 316 | closeCode = QWebSocketProtocol::CloseCodeWrongDatatype; |
| 317 | closeReason = tr(s: "Invalid UTF-8 code encountered." ); |
| 318 | } |
| 319 | } |
| 320 | } |
| 321 | } |
| 322 | Q_EMIT closeReceived(closeCode: static_cast<QWebSocketProtocol::CloseCode>(closeCode), closeReason); |
| 323 | break; |
| 324 | } |
| 325 | |
| 326 | case QWebSocketProtocol::OpCodeContinue: |
| 327 | case QWebSocketProtocol::OpCodeBinary: |
| 328 | case QWebSocketProtocol::OpCodeText: |
| 329 | case QWebSocketProtocol::OpCodeReserved3: |
| 330 | case QWebSocketProtocol::OpCodeReserved4: |
| 331 | case QWebSocketProtocol::OpCodeReserved5: |
| 332 | case QWebSocketProtocol::OpCodeReserved6: |
| 333 | case QWebSocketProtocol::OpCodeReserved7: |
| 334 | case QWebSocketProtocol::OpCodeReservedC: |
| 335 | case QWebSocketProtocol::OpCodeReservedB: |
| 336 | case QWebSocketProtocol::OpCodeReservedD: |
| 337 | case QWebSocketProtocol::OpCodeReservedE: |
| 338 | case QWebSocketProtocol::OpCodeReservedF: |
| 339 | //do nothing |
| 340 | //case statements added to make C++ compiler happy |
| 341 | break; |
| 342 | |
| 343 | default: |
| 344 | Q_EMIT errorEncountered(code: QWebSocketProtocol::CloseCodeProtocolError, |
| 345 | description: tr(s: "Invalid opcode detected: %1" ).arg(a: int(frame.opCode()))); |
| 346 | //do nothing |
| 347 | break; |
| 348 | } |
| 349 | return mustStopProcessing; |
| 350 | } |
| 351 | |
| 352 | /*! |
| 353 | \internal |
| 354 | */ |
| 355 | void QWebSocketDataProcessor::timeout() |
| 356 | { |
| 357 | clear(); |
| 358 | Q_EMIT errorEncountered(code: QWebSocketProtocol::CloseCodeGoingAway, |
| 359 | description: tr(s: "Timeout when reading data from socket." )); |
| 360 | } |
| 361 | |
| 362 | QT_END_NAMESPACE |
| 363 | |