Coverage Report

Created: 2026-04-09 06:50

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/openssl34/ssl/quic/quic_cfq.c
Line
Count
Source
1
/*
2
 * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
3
 *
4
 * Licensed under the Apache License 2.0 (the "License").  You may not use
5
 * this file except in compliance with the License.  You can obtain a copy
6
 * in the file LICENSE in the source distribution or at
7
 * https://www.openssl.org/source/license.html
8
 */
9
10
#include "internal/quic_cfq.h"
11
#include "internal/numbers.h"
12
13
typedef struct quic_cfq_item_ex_st QUIC_CFQ_ITEM_EX;
14
15
struct quic_cfq_item_ex_st {
16
    QUIC_CFQ_ITEM public;
17
    QUIC_CFQ_ITEM_EX *prev, *next;
18
    unsigned char *encoded;
19
    cfq_free_cb *free_cb;
20
    void *free_cb_arg;
21
    uint64_t frame_type;
22
    size_t encoded_len;
23
    uint32_t priority, pn_space, flags;
24
    int state;
25
};
26
27
uint64_t ossl_quic_cfq_item_get_frame_type(const QUIC_CFQ_ITEM *item)
28
224M
{
29
224M
    QUIC_CFQ_ITEM_EX *ex = (QUIC_CFQ_ITEM_EX *)item;
30
31
224M
    return ex->frame_type;
32
224M
}
33
34
const unsigned char *ossl_quic_cfq_item_get_encoded(const QUIC_CFQ_ITEM *item)
35
217M
{
36
217M
    QUIC_CFQ_ITEM_EX *ex = (QUIC_CFQ_ITEM_EX *)item;
37
38
217M
    return ex->encoded;
39
217M
}
40
41
size_t ossl_quic_cfq_item_get_encoded_len(const QUIC_CFQ_ITEM *item)
42
217M
{
43
217M
    QUIC_CFQ_ITEM_EX *ex = (QUIC_CFQ_ITEM_EX *)item;
44
45
217M
    return ex->encoded_len;
46
217M
}
47
48
int ossl_quic_cfq_item_get_state(const QUIC_CFQ_ITEM *item)
49
0
{
50
0
    QUIC_CFQ_ITEM_EX *ex = (QUIC_CFQ_ITEM_EX *)item;
51
52
0
    return ex->state;
53
0
}
54
55
uint32_t ossl_quic_cfq_item_get_pn_space(const QUIC_CFQ_ITEM *item)
56
0
{
57
0
    QUIC_CFQ_ITEM_EX *ex = (QUIC_CFQ_ITEM_EX *)item;
58
59
0
    return ex->pn_space;
60
0
}
61
62
int ossl_quic_cfq_item_is_unreliable(const QUIC_CFQ_ITEM *item)
63
54.2k
{
64
54.2k
    QUIC_CFQ_ITEM_EX *ex = (QUIC_CFQ_ITEM_EX *)item;
65
66
54.2k
    return (ex->flags & QUIC_CFQ_ITEM_FLAG_UNRELIABLE) != 0;
67
54.2k
}
68
69
typedef struct quic_cfq_item_list_st {
70
    QUIC_CFQ_ITEM_EX *head, *tail;
71
} QUIC_CFQ_ITEM_LIST;
72
73
struct quic_cfq_st {
74
    /*
75
     * Invariant: A CFQ item is always in exactly one of these lists, never more
76
     * or less than one.
77
     *
78
     * Invariant: The list the CFQ item is determined exactly by the state field
79
     * of the item.
80
     */
81
    QUIC_CFQ_ITEM_LIST new_list, tx_list, free_list;
82
};
83
84
static int compare(const QUIC_CFQ_ITEM_EX *a, const QUIC_CFQ_ITEM_EX *b)
85
457k
{
86
457k
    if (a->pn_space < b->pn_space)
87
0
        return -1;
88
457k
    else if (a->pn_space > b->pn_space)
89
0
        return 1;
90
91
457k
    if (a->priority > b->priority)
92
188k
        return -1;
93
269k
    else if (a->priority < b->priority)
94
1.47k
        return 1;
95
96
268k
    return 0;
97
457k
}
98
99
static void list_remove(QUIC_CFQ_ITEM_LIST *l, QUIC_CFQ_ITEM_EX *n)
100
788k
{
101
788k
    if (l->head == n)
102
535k
        l->head = n->next;
103
788k
    if (l->tail == n)
104
411k
        l->tail = n->prev;
105
788k
    if (n->prev != NULL)
106
253k
        n->prev->next = n->next;
107
788k
    if (n->next != NULL)
108
377k
        n->next->prev = n->prev;
109
788k
    n->prev = n->next = NULL;
110
788k
}
111
112
static void list_insert_head(QUIC_CFQ_ITEM_LIST *l, QUIC_CFQ_ITEM_EX *n)
113
181k
{
114
181k
    n->next = l->head;
115
181k
    n->prev = NULL;
116
181k
    l->head = n;
117
181k
    if (n->next != NULL)
118
181k
        n->next->prev = n;
119
181k
    if (l->tail == NULL)
120
0
        l->tail = n;
121
181k
}
122
123
static void list_insert_tail(QUIC_CFQ_ITEM_LIST *l, QUIC_CFQ_ITEM_EX *n)
124
758k
{
125
758k
    n->prev = l->tail;
126
758k
    n->next = NULL;
127
758k
    l->tail = n;
128
758k
    if (n->prev != NULL)
129
494k
        n->prev->next = n;
130
758k
    if (l->head == NULL)
131
263k
        l->head = n;
132
758k
}
133
134
static void list_insert_after(QUIC_CFQ_ITEM_LIST *l,
135
    QUIC_CFQ_ITEM_EX *ref,
136
    QUIC_CFQ_ITEM_EX *n)
137
88.6k
{
138
88.6k
    n->prev = ref;
139
88.6k
    n->next = ref->next;
140
88.6k
    if (ref->next != NULL)
141
88.6k
        ref->next->prev = n;
142
88.6k
    ref->next = n;
143
88.6k
    if (l->tail == ref)
144
0
        l->tail = n;
145
88.6k
}
146
147
static void list_insert_sorted(QUIC_CFQ_ITEM_LIST *l, QUIC_CFQ_ITEM_EX *n,
148
    int (*cmp)(const QUIC_CFQ_ITEM_EX *a,
149
        const QUIC_CFQ_ITEM_EX *b))
150
283k
{
151
283k
    QUIC_CFQ_ITEM_EX *p = l->head, *pprev = NULL;
152
153
283k
    if (p == NULL) {
154
11.1k
        l->head = l->tail = n;
155
11.1k
        n->prev = n->next = NULL;
156
11.1k
        return;
157
11.1k
    }
158
159
460k
    for (; p != NULL && cmp(p, n) < 0; pprev = p, p = p->next)
160
188k
        ;
161
162
271k
    if (p == NULL)
163
2.25k
        list_insert_tail(l, n);
164
269k
    else if (pprev == NULL)
165
181k
        list_insert_head(l, n);
166
88.6k
    else
167
88.6k
        list_insert_after(l, pprev, n);
168
271k
}
169
170
QUIC_CFQ *ossl_quic_cfq_new(void)
171
51.0k
{
172
51.0k
    QUIC_CFQ *cfq = OPENSSL_zalloc(sizeof(*cfq));
173
174
51.0k
    if (cfq == NULL)
175
0
        return NULL;
176
177
51.0k
    return cfq;
178
51.0k
}
179
180
static void clear_item(QUIC_CFQ_ITEM_EX *item)
181
500k
{
182
500k
    if (item->free_cb != NULL) {
183
276k
        item->free_cb(item->encoded, item->encoded_len, item->free_cb_arg);
184
185
276k
        item->free_cb = NULL;
186
276k
        item->encoded = NULL;
187
276k
        item->encoded_len = 0;
188
276k
    }
189
190
500k
    item->state = -1;
191
500k
}
192
193
static void free_list_items(QUIC_CFQ_ITEM_LIST *l)
194
153k
{
195
153k
    QUIC_CFQ_ITEM_EX *p, *pnext;
196
197
404k
    for (p = l->head; p != NULL; p = pnext) {
198
250k
        pnext = p->next;
199
250k
        clear_item(p);
200
250k
        OPENSSL_free(p);
201
250k
    }
202
153k
}
203
204
void ossl_quic_cfq_free(QUIC_CFQ *cfq)
205
51.0k
{
206
51.0k
    if (cfq == NULL)
207
0
        return;
208
209
51.0k
    free_list_items(&cfq->new_list);
210
51.0k
    free_list_items(&cfq->tx_list);
211
51.0k
    free_list_items(&cfq->free_list);
212
51.0k
    OPENSSL_free(cfq);
213
51.0k
}
214
215
static QUIC_CFQ_ITEM_EX *cfq_get_free(QUIC_CFQ *cfq)
216
276k
{
217
276k
    QUIC_CFQ_ITEM_EX *item = cfq->free_list.head;
218
219
276k
    if (item != NULL)
220
25.9k
        return item;
221
222
250k
    item = OPENSSL_zalloc(sizeof(*item));
223
250k
    if (item == NULL)
224
0
        return NULL;
225
226
250k
    item->state = -1;
227
250k
    list_insert_tail(&cfq->free_list, item);
228
250k
    return item;
229
250k
}
230
231
QUIC_CFQ_ITEM *ossl_quic_cfq_add_frame(QUIC_CFQ *cfq,
232
    uint32_t priority,
233
    uint32_t pn_space,
234
    uint64_t frame_type,
235
    uint32_t flags,
236
    const unsigned char *encoded,
237
    size_t encoded_len,
238
    cfq_free_cb *free_cb,
239
    void *free_cb_arg)
240
276k
{
241
276k
    QUIC_CFQ_ITEM_EX *item = cfq_get_free(cfq);
242
243
276k
    if (item == NULL)
244
0
        return NULL;
245
246
276k
    item->priority = priority;
247
276k
    item->frame_type = frame_type;
248
276k
    item->pn_space = pn_space;
249
276k
    item->encoded = (unsigned char *)encoded;
250
276k
    item->encoded_len = encoded_len;
251
276k
    item->free_cb = free_cb;
252
276k
    item->free_cb_arg = free_cb_arg;
253
254
276k
    item->state = QUIC_CFQ_STATE_NEW;
255
276k
    item->flags = flags;
256
276k
    list_remove(&cfq->free_list, item);
257
276k
    list_insert_sorted(&cfq->new_list, item, compare);
258
276k
    return &item->public;
259
276k
}
260
261
void ossl_quic_cfq_mark_tx(QUIC_CFQ *cfq, QUIC_CFQ_ITEM *item)
262
255k
{
263
255k
    QUIC_CFQ_ITEM_EX *ex = (QUIC_CFQ_ITEM_EX *)item;
264
265
255k
    switch (ex->state) {
266
255k
    case QUIC_CFQ_STATE_NEW:
267
255k
        list_remove(&cfq->new_list, ex);
268
255k
        list_insert_tail(&cfq->tx_list, ex);
269
255k
        ex->state = QUIC_CFQ_STATE_TX;
270
255k
        break;
271
0
    case QUIC_CFQ_STATE_TX:
272
0
        break; /* nothing to do */
273
0
    default:
274
0
        assert(0); /* invalid state (e.g. in free state) */
275
0
        break;
276
255k
    }
277
255k
}
278
279
void ossl_quic_cfq_mark_lost(QUIC_CFQ *cfq, QUIC_CFQ_ITEM *item,
280
    uint32_t priority)
281
54.2k
{
282
54.2k
    QUIC_CFQ_ITEM_EX *ex = (QUIC_CFQ_ITEM_EX *)item;
283
284
54.2k
    if (ossl_quic_cfq_item_is_unreliable(item)) {
285
48.1k
        ossl_quic_cfq_release(cfq, item);
286
48.1k
        return;
287
48.1k
    }
288
289
6.06k
    switch (ex->state) {
290
0
    case QUIC_CFQ_STATE_NEW:
291
0
        if (priority != UINT32_MAX && priority != ex->priority) {
292
0
            list_remove(&cfq->new_list, ex);
293
0
            ex->priority = priority;
294
0
            list_insert_sorted(&cfq->new_list, ex, compare);
295
0
        }
296
0
        break; /* nothing to do */
297
6.06k
    case QUIC_CFQ_STATE_TX:
298
6.06k
        if (priority != UINT32_MAX)
299
0
            ex->priority = priority;
300
6.06k
        list_remove(&cfq->tx_list, ex);
301
6.06k
        list_insert_sorted(&cfq->new_list, ex, compare);
302
6.06k
        ex->state = QUIC_CFQ_STATE_NEW;
303
6.06k
        break;
304
0
    default:
305
0
        assert(0); /* invalid state (e.g. in free state) */
306
0
        break;
307
6.06k
    }
308
6.06k
}
309
310
/*
311
 * Releases a CFQ item. The item may be in either state (NEW or TX) prior to the
312
 * call. The QUIC_CFQ_ITEM pointer must not be used following this call.
313
 */
314
void ossl_quic_cfq_release(QUIC_CFQ *cfq, QUIC_CFQ_ITEM *item)
315
249k
{
316
249k
    QUIC_CFQ_ITEM_EX *ex = (QUIC_CFQ_ITEM_EX *)item;
317
318
249k
    switch (ex->state) {
319
0
    case QUIC_CFQ_STATE_NEW:
320
0
        list_remove(&cfq->new_list, ex);
321
0
        list_insert_tail(&cfq->free_list, ex);
322
0
        clear_item(ex);
323
0
        break;
324
249k
    case QUIC_CFQ_STATE_TX:
325
249k
        list_remove(&cfq->tx_list, ex);
326
249k
        list_insert_tail(&cfq->free_list, ex);
327
249k
        clear_item(ex);
328
249k
        break;
329
0
    default:
330
0
        assert(0); /* invalid state (e.g. in free state) */
331
0
        break;
332
249k
    }
333
249k
}
334
335
QUIC_CFQ_ITEM *ossl_quic_cfq_get_priority_head(const QUIC_CFQ *cfq,
336
    uint32_t pn_space)
337
89.0M
{
338
89.0M
    QUIC_CFQ_ITEM_EX *item = cfq->new_list.head;
339
340
168M
    for (; item != NULL && item->pn_space != pn_space; item = item->next)
341
79.7M
        ;
342
343
89.0M
    if (item == NULL)
344
86.6M
        return NULL;
345
346
2.44M
    return &item->public;
347
89.0M
}
348
349
QUIC_CFQ_ITEM *ossl_quic_cfq_item_get_priority_next(const QUIC_CFQ_ITEM *item,
350
    uint32_t pn_space)
351
224M
{
352
224M
    QUIC_CFQ_ITEM_EX *ex = (QUIC_CFQ_ITEM_EX *)item;
353
354
224M
    if (ex == NULL)
355
0
        return NULL;
356
357
224M
    ex = ex->next;
358
359
224M
    for (; ex != NULL && ex->pn_space != pn_space; ex = ex->next)
360
0
        ;
361
362
224M
    if (ex == NULL)
363
2.43M
        return NULL; /* ubsan */
364
365
221M
    return &ex->public;
366
224M
}