fix: inconsistent error handling (#56)

* fix: inconsistent error handling

* fixing a few more returns

* remov reduntant returns

* feat: dont sleep in readLoop
This commit is contained in:
Dmitriy Ryajov 2019-12-13 09:25:07 -06:00 committed by GitHub
parent e0aae6d8ac
commit b6b0cdea98
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 48 additions and 28 deletions

View File

@ -65,6 +65,7 @@ method handle*(m: Mplex) {.async, gcsafe.} =
trace "waiting for data" trace "waiting for data"
let msg = await m.connection.readMsg() let msg = await m.connection.readMsg()
if msg.isNone: if msg.isNone:
trace "connection EOF"
# TODO: allow poll with timeout to avoid using `sleepAsync` # TODO: allow poll with timeout to avoid using `sleepAsync`
await sleepAsync(1.millis) await sleepAsync(1.millis)
continue continue

View File

@ -68,6 +68,8 @@ type
writerCoder: SecureCipher writerCoder: SecureCipher
readerCoder: SecureCipher readerCoder: SecureCipher
SecioError* = object of CatchableError
proc init(mac: var SecureMac, hash: string, key: openarray[byte]) = proc init(mac: var SecureMac, hash: string, key: openarray[byte]) =
if hash == "SHA256": if hash == "SHA256":
mac = SecureMac(kind: SecureMacType.Sha256) mac = SecureMac(kind: SecureMacType.Sha256)
@ -313,16 +315,16 @@ proc handshake*(s: Secio, conn: Connection): Future[SecureConnection] {.async.}
if len(answer) == 0: if len(answer) == 0:
trace "Proposal exchange failed", conn = conn trace "Proposal exchange failed", conn = conn
return raise newException(SecioError, "Proposal exchange failed")
if not decodeProposal(answer, remoteNonce, remoteBytesPubkey, remoteExchanges, if not decodeProposal(answer, remoteNonce, remoteBytesPubkey, remoteExchanges,
remoteCiphers, remoteHashes): remoteCiphers, remoteHashes):
trace "Remote proposal decoding failed", conn = conn trace "Remote proposal decoding failed", conn = conn
return raise newException(SecioError, "Remote proposal decoding failed")
if not remotePubkey.init(remoteBytesPubkey): if not remotePubkey.init(remoteBytesPubkey):
trace "Remote public key incorrect or corrupted", pubkey = remoteBytesPubkey trace "Remote public key incorrect or corrupted", pubkey = remoteBytesPubkey
return raise newException(SecioError, "Remote public key incorrect or corrupted")
remotePeerId = PeerID.init(remotePubkey) remotePeerId = PeerID.init(remotePubkey)
@ -340,7 +342,7 @@ proc handshake*(s: Secio, conn: Connection): Future[SecureConnection] {.async.}
let hash = selectBest(order, SecioHashes, remoteHashes) let hash = selectBest(order, SecioHashes, remoteHashes)
if len(scheme) == 0 or len(cipher) == 0 or len(hash) == 0: if len(scheme) == 0 or len(cipher) == 0 or len(hash) == 0:
trace "No algorithms in common", peer = remotePeerId trace "No algorithms in common", peer = remotePeerId
return raise newException(SecioError, "No algorithms in common")
trace "Encryption scheme selected", scheme = scheme, cipher = cipher, trace "Encryption scheme selected", scheme = scheme, cipher = cipher,
hash = hash hash = hash
@ -352,41 +354,40 @@ proc handshake*(s: Secio, conn: Connection): Future[SecureConnection] {.async.}
var signature = s.localPrivateKey.sign(localCorpus) var signature = s.localPrivateKey.sign(localCorpus)
var localExchange = createExchange(epubkey, signature.getBytes()) var localExchange = createExchange(epubkey, signature.getBytes())
var remoteExchange = await transactMessage(conn, localExchange) var remoteExchange = await transactMessage(conn, localExchange)
if len(remoteExchange) == 0: if len(remoteExchange) == 0:
trace "Corpus exchange failed", conn = conn trace "Corpus exchange failed", conn = conn
return raise newException(SecioError, "Corpus exchange failed")
if not decodeExchange(remoteExchange, remoteEBytesPubkey, remoteEBytesSig): if not decodeExchange(remoteExchange, remoteEBytesPubkey, remoteEBytesSig):
trace "Remote exchange decoding failed", conn = conn trace "Remote exchange decoding failed", conn = conn
return raise newException(SecioError, "Remote exchange decoding failed")
if not remoteESignature.init(remoteEBytesSig): if not remoteESignature.init(remoteEBytesSig):
trace "Remote signature incorrect or corrupted", trace "Remote signature incorrect or corrupted",
signature = toHex(remoteEBytesSig) signature = toHex(remoteEBytesSig)
return raise newException(SecioError, "Remote signature incorrect or corrupted")
var remoteCorpus = answer & request[4..^1] & remoteEBytesPubkey var remoteCorpus = answer & request[4..^1] & remoteEBytesPubkey
if not remoteESignature.verify(remoteCorpus, remotePubkey): if not remoteESignature.verify(remoteCorpus, remotePubkey):
trace "Signature verification failed", scheme = remotePubkey.scheme, trace "Signature verification failed", scheme = remotePubkey.scheme,
signature = remoteESignature, pubkey = remotePubkey, signature = remoteESignature, pubkey = remotePubkey,
corpus = remoteCorpus corpus = remoteCorpus
return raise newException(SecioError, "Signature verification failed")
trace "Signature verified", scheme = remotePubkey.scheme trace "Signature verified", scheme = remotePubkey.scheme
if not remoteEPubkey.eckey.initRaw(remoteEBytesPubkey): if not remoteEPubkey.eckey.initRaw(remoteEBytesPubkey):
trace "Remote ephemeral public key incorrect or corrupted", trace "Remote ephemeral public key incorrect or corrupted",
pubkey = toHex(remoteEBytesPubkey) pubkey = toHex(remoteEBytesPubkey)
return raise newException(SecioError, "Remote ephemeral public key incorrect or corrupted")
var secret = getSecret(remoteEPubkey, ekeypair.seckey) var secret = getSecret(remoteEPubkey, ekeypair.seckey)
if len(secret) == 0: if len(secret) == 0:
trace "Shared secret could not be created", trace "Shared secret could not be created",
pubkeyScheme = remoteEPubkey.scheme, pubkeyScheme = remoteEPubkey.scheme,
seckeyScheme = ekeypair.seckey.scheme seckeyScheme = ekeypair.seckey.scheme
return raise newException(SecioError, "Shared secret could not be created")
trace "Shared secret calculated", secret = toHex(secret) trace "Shared secret calculated", secret = toHex(secret)
@ -416,15 +417,16 @@ proc readLoop(sconn: SecureConnection, stream: BufferStream) {.async.} =
try: try:
while not sconn.closed: while not sconn.closed:
let msg = await sconn.readMessage() let msg = await sconn.readMessage()
if msg.len > 0: if msg.len == 0:
await stream.pushTo(msg) trace "stream EOF"
return
# tight loop, give a chance for other await stream.pushTo(msg)
# stuff to run as well
await sleepAsync(1.millis)
except CatchableError as exc: except CatchableError as exc:
trace "exception occured", exc = exc.msg trace "exception occured", exc = exc.msg
finally: finally:
if not sconn.closed:
await sconn.close()
trace "ending secio readLoop", isclosed = sconn.closed() trace "ending secio readLoop", isclosed = sconn.closed()
proc handleConn(s: Secio, conn: Connection): Future[Connection] {.async, gcsafe.} = proc handleConn(s: Secio, conn: Connection): Future[Connection] {.async, gcsafe.} =
@ -436,26 +438,34 @@ proc handleConn(s: Secio, conn: Connection): Future[Connection] {.async, gcsafe.
var stream = newBufferStream(writeHandler) var stream = newBufferStream(writeHandler)
asyncCheck readLoop(sconn, stream) asyncCheck readLoop(sconn, stream)
var secured = newConnection(stream) var secured = newConnection(stream)
secured.peerInfo = PeerInfo.init(sconn.peerInfo.publicKey.get())
result = secured
secured.closeEvent.wait() secured.closeEvent.wait()
.addCallback do (udata: pointer): .addCallback do (udata: pointer):
trace "wrapped connection closed, closing upstream" trace "wrapped connection closed, closing upstream"
if not isNil(sconn) and not sconn.closed: if not isNil(sconn) and not sconn.closed:
asyncCheck sconn.close() asyncCheck sconn.close()
secured.peerInfo = PeerInfo.init(sconn.peerInfo.publicKey.get())
result = secured
method init(s: Secio) {.gcsafe.} = method init(s: Secio) {.gcsafe.} =
proc handle(conn: Connection, proto: string) {.async, gcsafe.} = proc handle(conn: Connection, proto: string) {.async, gcsafe.} =
trace "handling connection" trace "handling connection"
try:
discard await s.handleConn(conn) discard await s.handleConn(conn)
trace "connection secured" trace "connection secured"
except CatchableError as exc:
trace "securing connection failed", msg = exc.msg
await conn.close()
s.codec = SecioCodec s.codec = SecioCodec
s.handler = handle s.handler = handle
method secure*(s: Secio, conn: Connection): Future[Connection] {.gcsafe.} = method secure*(s: Secio, conn: Connection): Future[Connection] {.async, gcsafe.} =
result = s.handleConn(conn) try:
result = await s.handleConn(conn)
except CatchableError as exc:
trace "securing connection failed", msg = exc.msg
await conn.close()
proc newSecio*(localPrivateKey: PrivateKey): Secio = proc newSecio*(localPrivateKey: PrivateKey): Secio =
new result new result

View File

@ -140,6 +140,7 @@ proc cleanupConn(s: Switch, conn: Connection) {.async, gcsafe.} =
s.muxed.del(id) s.muxed.del(id)
if id in s.connections: if id in s.connections:
if not s.connections[id].closed:
await s.connections[id].close() await s.connections[id].close()
s.connections.del(id) s.connections.del(id)
@ -166,6 +167,9 @@ proc upgradeOutgoing(s: Switch, conn: Connection): Future[Connection] {.async, g
return return
result = await s.secure(result) # secure the connection result = await s.secure(result) # secure the connection
if isNil(result):
return
await s.mux(result) # mux it if possible await s.mux(result) # mux it if possible
s.connections[conn.peerInfo.id] = result s.connections[conn.peerInfo.id] = result
@ -212,7 +216,11 @@ proc dial*(s: Switch,
# make sure to assign the peer to the connection # make sure to assign the peer to the connection
result.peerInfo = peer result.peerInfo = peer
result = await s.upgradeOutgoing(result) result = await s.upgradeOutgoing(result)
result.closeEvent.wait().addCallback do (udata: pointer): if isNil(result):
continue
result.closeEvent.wait()
.addCallback do (udata: pointer):
asyncCheck s.cleanupConn(result) asyncCheck s.cleanupConn(result)
break break
else: else:
@ -252,7 +260,9 @@ proc start*(s: Switch): Future[seq[Future[void]]] {.async, gcsafe.} =
except CatchableError as exc: except CatchableError as exc:
trace "exception occured", exc = exc.msg trace "exception occured", exc = exc.msg
finally: finally:
if not isNil(conn) and not conn.closed:
await conn.close() await conn.close()
await s.cleanupConn(conn) await s.cleanupConn(conn)
var startFuts: seq[Future[void]] var startFuts: seq[Future[void]]
@ -346,4 +356,3 @@ proc newSwitch*(peerInfo: PeerInfo,
if pubSub.isSome: if pubSub.isSome:
result.pubSub = pubSub result.pubSub = pubSub
result.mount(pubSub.get()) result.mount(pubSub.get())