Changeset 9777

Timestamp:

Dec 15, 2009, 5:34:36 PM (12 years ago)

Author:

charles

Message:

(trunk) update our DHT snapshot

Location:

trunk/third-party/dht

Files:

• CHANGES (modified) (1 diff)
• dht.c (modified) (12 diffs)

trunk/third-party/dht/CHANGES

@@ +1 @@
+15 December 2009: dht-0.13
+
+  * Implemented protection against incorrect addresses in the DHT.
+  * Tweaked neighborhood maintenance to wake up less often.
+
 11 December 2009: dht-0.12
   * Fixed slightly incorrect formatting of DHT messages.

trunk/third-party/dht/dht.c

@@ -225 +225 @@
     0xFF, 0xFF, 0xFF, 0xFF
 };
+static const unsigned char v4prefix[16] = {
+    0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xFF, 0xFF, 0, 0, 0, 0
+};
 
 static int dht_socket = -1;
@@ -296 +299 @@
     for(i = 0; i < buflen; i++)
         fprintf(f, "%02x", buf[i]);
+}
+
+static int
+is_martian(struct sockaddr *sa)
+{
+    switch(sa->sa_family) {
+    case AF_INET: {
+        struct sockaddr_in *sin = (struct sockaddr_in*)sa;
+        const unsigned char *address = (const unsigned char*)&sin->sin_addr;
+        return sin->sin_port == 0 ||
+            (address[0] == 0) ||
+            (address[0] == 127) ||
+            ((address[0] & 0xE0) == 0xE0);
+    }
+    case AF_INET6: {
+        struct sockaddr_in6 *sin6 = (struct sockaddr_in6*)sa;
+        const unsigned char *address = (const unsigned char*)&sin6->sin6_addr;
+        return sin6->sin6_port == 0 ||
+            (address[0] == 0xFF) ||
+            (address[0] == 0xFE && (address[1] & 0xC0) == 0x80) ||
+            (memcmp(address, zeroes, 15) == 0 &&
+             (address[15] == 0 || address[15] == 1)) ||
+            (memcmp(address, v4prefix, 12) == 0);
+    }
+
+    default:
+        return 0;
+    }
 }
 
@@ -619 +650 @@
 
     if(id_cmp(id, myid) == 0)
+        return NULL;
+
+    if(is_martian(sa))
         return NULL;
 
@@ -645 +679 @@
     }
 
-    /* New node.  First, try to get rid of a known-bad node. */
+    /* New node. */
+
+    if(mybucket) {
+        if(sa->sa_family == AF_INET)
+            mybucket_grow_time = now.tv_sec;
+        else
+            mybucket6_grow_time = now.tv_sec;
+    }
+
+    /* First, try to get rid of a known-bad node. */
     n = b->nodes;
     while(n) {
@@ -655 +698 @@
             n->pinged_time = 0;
             n->pinged = 0;
-            if(mybucket) {
-                if(sa->sa_family == AF_INET)
-                    mybucket_grow_time = now.tv_sec;
-                else
-                    mybucket6_grow_time = now.tv_sec;
-            }
             return n;
         }
@@ -706 +743 @@
             debugf("Splitting.\n");
             b = split_bucket(b);
-            if(sa->sa_family == AF_INET)
-                mybucket_grow_time = now.tv_sec;
-            else
-                mybucket6_grow_time = now.tv_sec;
             return new_node(id, sa, salen, confirm);
         }
@@ -734 +767 @@
     b->nodes = n;
     b->count++;
-    if(mybucket) {
-        if(sa->sa_family == AF_INET)
-            mybucket_grow_time = now.tv_sec;
-        else
-            mybucket6_grow_time = now.tv_sec;
-    }
     return n;
 }
@@ -1653 +1680 @@
 
     if(b == NULL)
-        return -1;
+        return 0;
 
     memcpy(id, myid, 20);
@@ -1668 +1695 @@
 
     if(q) {
+        /* Since our node-id is the same in both DHTs, it's probably
+           profitable to query both families. */
         int want = dht_socket >= 0 && dht_socket6 >= 0 ? (WANT4 | WANT6) : -1;
         n = random_node(q);
@@ -1680 +1709 @@
             pinged(n, q);
         }
-    }
-    return 1;
+        return 1;
+    }
+    return 0;
 }
 
@@ -1797 +1827 @@
 
         if(rc < 0 || sourcelen > sizeof(struct sockaddr_storage))
+            goto dontread;
+
+        if(is_martian(source))
             goto dontread;
 
@@ -2646 +2679 @@
     const unsigned char *p;
 
+    /* This code will happily crash if the buffer is not NUL-terminated. */
+    if(buf[buflen] != '\0') {
+        debugf("Eek!  parse_message with unterminated buffer.\n");
+        return -1;
+    }
+
 #define CHECK(ptr, len)                                                 \
     if(((unsigned char*)ptr) + (len) > (buf) + (buflen)) goto overflow;