mirror of
				https://github.com/ossrs/srs.git
				synced 2025-03-09 15:49:59 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			285 lines
		
	
	
	
		
			7.9 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			285 lines
		
	
	
	
		
			7.9 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| /*
 | |
|  * replay_driver.c
 | |
|  *
 | |
|  * A driver for the replay_database implementation
 | |
|  *
 | |
|  * David A. McGrew
 | |
|  * Cisco Systems, Inc.
 | |
|  */
 | |
| 
 | |
| /*
 | |
|  *
 | |
|  * Copyright (c) 2001-2017, Cisco Systems, Inc.
 | |
|  * All rights reserved.
 | |
|  *
 | |
|  * Redistribution and use in source and binary forms, with or without
 | |
|  * modification, are permitted provided that the following conditions
 | |
|  * are met:
 | |
|  *
 | |
|  *   Redistributions of source code must retain the above copyright
 | |
|  *   notice, this list of conditions and the following disclaimer.
 | |
|  *
 | |
|  *   Redistributions in binary form must reproduce the above
 | |
|  *   copyright notice, this list of conditions and the following
 | |
|  *   disclaimer in the documentation and/or other materials provided
 | |
|  *   with the distribution.
 | |
|  *
 | |
|  *   Neither the name of the Cisco Systems, Inc. nor the names of its
 | |
|  *   contributors may be used to endorse or promote products derived
 | |
|  *   from this software without specific prior written permission.
 | |
|  *
 | |
|  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 | |
|  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 | |
|  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
 | |
|  * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
 | |
|  * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
 | |
|  * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
 | |
|  * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 | |
|  * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 | |
|  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 | |
|  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 | |
|  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 | |
|  * OF THE POSSIBILITY OF SUCH DAMAGE.
 | |
|  *
 | |
|  */
 | |
| 
 | |
| #ifdef HAVE_CONFIG_H
 | |
| #include <config.h>
 | |
| #endif
 | |
| 
 | |
| #include <stdio.h>
 | |
| 
 | |
| #include "rdb.h"
 | |
| #include "ut_sim.h"
 | |
| 
 | |
| #include "cipher_priv.h"
 | |
| 
 | |
| /*
 | |
|  * num_trials defines the number of trials that are used in the
 | |
|  * validation functions below
 | |
|  */
 | |
| 
 | |
| unsigned num_trials = 1 << 16;
 | |
| 
 | |
| srtp_err_status_t test_rdb_db(void);
 | |
| 
 | |
| double rdb_check_adds_per_second(void);
 | |
| 
 | |
| int main(void)
 | |
| {
 | |
|     srtp_err_status_t err;
 | |
| 
 | |
|     printf("testing anti-replay database (srtp_rdb_t)...\n");
 | |
|     err = test_rdb_db();
 | |
|     if (err) {
 | |
|         printf("failed\n");
 | |
|         exit(1);
 | |
|     }
 | |
|     printf("done\n");
 | |
| 
 | |
|     printf("rdb_check/rdb_adds per second: %e\n", rdb_check_adds_per_second());
 | |
| 
 | |
|     return 0;
 | |
| }
 | |
| 
 | |
| void print_rdb(srtp_rdb_t *rdb)
 | |
| {
 | |
|     printf("rdb: {%u, %s}\n", rdb->window_start,
 | |
|            v128_bit_string(&rdb->bitmask));
 | |
| }
 | |
| 
 | |
| srtp_err_status_t rdb_check_add(srtp_rdb_t *rdb, uint32_t idx)
 | |
| {
 | |
|     if (srtp_rdb_check(rdb, idx) != srtp_err_status_ok) {
 | |
|         printf("rdb_check failed at index %u\n", idx);
 | |
|         return srtp_err_status_fail;
 | |
|     }
 | |
|     if (srtp_rdb_add_index(rdb, idx) != srtp_err_status_ok) {
 | |
|         printf("rdb_add_index failed at index %u\n", idx);
 | |
|         return srtp_err_status_fail;
 | |
|     }
 | |
| 
 | |
|     return srtp_err_status_ok;
 | |
| }
 | |
| 
 | |
| srtp_err_status_t rdb_check_expect_failure(srtp_rdb_t *rdb, uint32_t idx)
 | |
| {
 | |
|     srtp_err_status_t err;
 | |
| 
 | |
|     err = srtp_rdb_check(rdb, idx);
 | |
|     if ((err != srtp_err_status_replay_old) &&
 | |
|         (err != srtp_err_status_replay_fail)) {
 | |
|         printf("rdb_check failed at index %u (false positive)\n", idx);
 | |
|         return srtp_err_status_fail;
 | |
|     }
 | |
| 
 | |
|     return srtp_err_status_ok;
 | |
| }
 | |
| 
 | |
| srtp_err_status_t rdb_check_add_unordered(srtp_rdb_t *rdb, uint32_t idx)
 | |
| {
 | |
|     srtp_err_status_t rstat;
 | |
| 
 | |
|     /* printf("index: %u\n", idx); */
 | |
|     rstat = srtp_rdb_check(rdb, idx);
 | |
|     if ((rstat != srtp_err_status_ok) &&
 | |
|         (rstat != srtp_err_status_replay_old)) {
 | |
|         printf("rdb_check_add_unordered failed at index %u\n", idx);
 | |
|         return rstat;
 | |
|     }
 | |
|     if (rstat == srtp_err_status_replay_old) {
 | |
|         return srtp_err_status_ok;
 | |
|     }
 | |
|     if (srtp_rdb_add_index(rdb, idx) != srtp_err_status_ok) {
 | |
|         printf("rdb_add_index failed at index %u\n", idx);
 | |
|         return srtp_err_status_fail;
 | |
|     }
 | |
| 
 | |
|     return srtp_err_status_ok;
 | |
| }
 | |
| 
 | |
| srtp_err_status_t test_rdb_db()
 | |
| {
 | |
|     srtp_rdb_t rdb;
 | |
|     uint32_t idx, ircvd;
 | |
|     ut_connection utc;
 | |
|     srtp_err_status_t err;
 | |
| 
 | |
|     if (srtp_rdb_init(&rdb) != srtp_err_status_ok) {
 | |
|         printf("rdb_init failed\n");
 | |
|         return srtp_err_status_init_fail;
 | |
|     }
 | |
| 
 | |
|     /* test sequential insertion */
 | |
|     for (idx = 0; idx < num_trials; idx++) {
 | |
|         err = rdb_check_add(&rdb, idx);
 | |
|         if (err)
 | |
|             return err;
 | |
|     }
 | |
| 
 | |
|     /* test for false positives */
 | |
|     for (idx = 0; idx < num_trials; idx++) {
 | |
|         err = rdb_check_expect_failure(&rdb, idx);
 | |
|         if (err)
 | |
|             return err;
 | |
|     }
 | |
| 
 | |
|     /* re-initialize */
 | |
|     if (srtp_rdb_init(&rdb) != srtp_err_status_ok) {
 | |
|         printf("rdb_init failed\n");
 | |
|         return srtp_err_status_fail;
 | |
|     }
 | |
| 
 | |
|     /* test non-sequential insertion */
 | |
|     ut_init(&utc);
 | |
| 
 | |
|     for (idx = 0; idx < num_trials; idx++) {
 | |
|         ircvd = ut_next_index(&utc);
 | |
|         err = rdb_check_add_unordered(&rdb, ircvd);
 | |
|         if (err)
 | |
|             return err;
 | |
|         err = rdb_check_expect_failure(&rdb, ircvd);
 | |
|         if (err)
 | |
|             return err;
 | |
|     }
 | |
| 
 | |
|     /* re-initialize */
 | |
|     if (srtp_rdb_init(&rdb) != srtp_err_status_ok) {
 | |
|         printf("rdb_init failed\n");
 | |
|         return srtp_err_status_fail;
 | |
|     }
 | |
| 
 | |
|     /* test insertion with large gaps */
 | |
|     for (idx = 0, ircvd = 0; idx < num_trials;
 | |
|          idx++, ircvd += (1 << (srtp_cipher_rand_u32_for_tests() % 10))) {
 | |
|         err = rdb_check_add(&rdb, ircvd);
 | |
|         if (err)
 | |
|             return err;
 | |
|         err = rdb_check_expect_failure(&rdb, ircvd);
 | |
|         if (err)
 | |
|             return err;
 | |
|     }
 | |
| 
 | |
|     /* re-initialize */
 | |
|     if (srtp_rdb_init(&rdb) != srtp_err_status_ok) {
 | |
|         printf("rdb_init failed\n");
 | |
|         return srtp_err_status_fail;
 | |
|     }
 | |
| 
 | |
|     /* test loss of first 513 packets */
 | |
|     for (idx = 0; idx < num_trials; idx++) {
 | |
|         err = rdb_check_add(&rdb, idx + 513);
 | |
|         if (err)
 | |
|             return err;
 | |
|     }
 | |
| 
 | |
|     /* test for false positives */
 | |
|     for (idx = 0; idx < num_trials + 513; idx++) {
 | |
|         err = rdb_check_expect_failure(&rdb, idx);
 | |
|         if (err)
 | |
|             return err;
 | |
|     }
 | |
| 
 | |
|     /* test for key expired */
 | |
|     if (srtp_rdb_init(&rdb) != srtp_err_status_ok) {
 | |
|         printf("rdb_init failed\n");
 | |
|         return srtp_err_status_fail;
 | |
|     }
 | |
|     rdb.window_start = 0x7ffffffe;
 | |
|     if (srtp_rdb_increment(&rdb) != srtp_err_status_ok) {
 | |
|         printf("srtp_rdb_increment of 0x7ffffffe failed\n");
 | |
|         return srtp_err_status_fail;
 | |
|     }
 | |
|     if (srtp_rdb_get_value(&rdb) != 0x7fffffff) {
 | |
|         printf("rdb valiue was not 0x7fffffff\n");
 | |
|         return srtp_err_status_fail;
 | |
|     }
 | |
|     if (srtp_rdb_increment(&rdb) != srtp_err_status_key_expired) {
 | |
|         printf("srtp_rdb_increment of 0x7fffffff did not return "
 | |
|                "srtp_err_status_key_expired\n");
 | |
|         return srtp_err_status_fail;
 | |
|     }
 | |
|     if (srtp_rdb_get_value(&rdb) != 0x7fffffff) {
 | |
|         printf("rdb valiue was not 0x7fffffff\n");
 | |
|         return srtp_err_status_fail;
 | |
|     }
 | |
| 
 | |
|     return srtp_err_status_ok;
 | |
| }
 | |
| 
 | |
| #include <time.h>   /* for clock()  */
 | |
| #include <stdlib.h> /* for random() */
 | |
| 
 | |
| #define REPLAY_NUM_TRIALS 10000000
 | |
| 
 | |
| double rdb_check_adds_per_second(void)
 | |
| {
 | |
|     uint32_t i;
 | |
|     srtp_rdb_t rdb;
 | |
|     clock_t timer;
 | |
|     int failures = 0; /* count number of failures        */
 | |
| 
 | |
|     if (srtp_rdb_init(&rdb) != srtp_err_status_ok) {
 | |
|         printf("rdb_init failed\n");
 | |
|         exit(1);
 | |
|     }
 | |
| 
 | |
|     timer = clock();
 | |
|     for (i = 0; i < REPLAY_NUM_TRIALS; i += 3) {
 | |
|         if (srtp_rdb_check(&rdb, i + 2) != srtp_err_status_ok)
 | |
|             ++failures;
 | |
|         if (srtp_rdb_add_index(&rdb, i + 2) != srtp_err_status_ok)
 | |
|             ++failures;
 | |
|         if (srtp_rdb_check(&rdb, i + 1) != srtp_err_status_ok)
 | |
|             ++failures;
 | |
|         if (srtp_rdb_add_index(&rdb, i + 1) != srtp_err_status_ok)
 | |
|             ++failures;
 | |
|         if (srtp_rdb_check(&rdb, i) != srtp_err_status_ok)
 | |
|             ++failures;
 | |
|         if (srtp_rdb_add_index(&rdb, i) != srtp_err_status_ok)
 | |
|             ++failures;
 | |
|     }
 | |
|     timer = clock() - timer;
 | |
| 
 | |
|     return (double)CLOCKS_PER_SEC * REPLAY_NUM_TRIALS / timer;
 | |
| }
 |