[WIP] Security work While on holiday

This commit is contained in:
Alex 2026-08-12 22:45:28 +02:00
commit 7f0231e3f1
Signed by: alex
SSH key fingerprint: SHA256:D1+Ub8o0v4K5y1JNivW8IxEOelqLSvPmUzBbDIoZkRQ
109 changed files with 19694 additions and 5210 deletions

View file

@ -2,7 +2,11 @@ use crate::{Policy, TransportSendStream};
use mtp_codec::CommunicationValue;
use mtp_common::CommunicationError;
/// Writes the canonical length-prefixed MTP frame used by every transport.
/// Writes the canonical self-framed MTP value used by every transport.
///
/// `CommunicationValue` already begins with the four-byte body length. The
/// transport writes that representation directly so a frame does not carry a
/// redundant outer length prefix.
pub(crate) async fn write_frame<S: TransportSendStream>(
stream: &mut S,
value: &CommunicationValue,
@ -14,8 +18,70 @@ pub(crate) async fn write_frame<S: TransportSendStream>(
{
return Err(CommunicationError::MessageTooLarge);
}
stream
.write_all(&(bytes.len() as u32).to_be_bytes())
.await?;
stream.write_all(&bytes).await
}
#[cfg(test)]
mod tests {
use super::*;
use async_trait::async_trait;
use mtp_codec::{CommunicationType, DataValue};
use std::pin::Pin;
use std::task::{Context, Poll};
use tokio::io::AsyncWrite;
#[derive(Default)]
struct BufferStream {
bytes: Vec<u8>,
}
impl AsyncWrite for BufferStream {
fn poll_write(
mut self: Pin<&mut Self>,
_cx: &mut Context<'_>,
buf: &[u8],
) -> Poll<std::io::Result<usize>> {
self.bytes.extend_from_slice(buf);
Poll::Ready(Ok(buf.len()))
}
fn poll_flush(self: Pin<&mut Self>, _cx: &mut Context<'_>) -> Poll<std::io::Result<()>> {
Poll::Ready(Ok(()))
}
fn poll_shutdown(self: Pin<&mut Self>, _cx: &mut Context<'_>) -> Poll<std::io::Result<()>> {
Poll::Ready(Ok(()))
}
}
#[async_trait]
impl TransportSendStream for BufferStream {
async fn write_all(&mut self, buf: &[u8]) -> Result<(), CommunicationError> {
self.bytes.extend_from_slice(buf);
Ok(())
}
async fn finish(&mut self) -> Result<(), CommunicationError> {
Ok(())
}
}
#[tokio::test]
async fn framing_preserves_a_generic_payload() {
let payload = DataValue::Array(vec![
DataValue::Str("payload".into()),
DataValue::Bytes(vec![1, 2, 3]),
]);
let frame = CommunicationValue::new(CommunicationType::Pong).with_payload(payload.clone());
let mut stream = BufferStream::default();
write_frame(&mut stream, &frame, &Policy::default())
.await
.unwrap();
let body_len = u32::from_be_bytes(stream.bytes[..4].try_into().unwrap()) as usize;
assert_eq!(body_len, stream.bytes.len() - 4);
let decoded = CommunicationValue::from_bytes(&stream.bytes).unwrap();
assert_eq!(decoded.into_payload(), payload);
}
}