merge *-inline.h files with their main header
PATCH 1/2 merge *-inline.h files with their main header
*-inline.h files are not very useful anymore.
In the attempt of cleaning up the code some more,
merge them into their main header files.
No functional change is part of this patch.
---
patch has been verified with travis-ci
src/openvpn/Makefile.am | 8 +- src/openvpn/forward-inline.h | 341 ------------------------------------ src/openvpn/forward.c | 5 +- src/openvpn/forward.h | 319 ++++++++++++++++++++++++++++++++- src/openvpn/init.c | 4 +- src/openvpn/mtcp.c | 2 +- src/openvpn/mudp.c | 2 +- src/openvpn/multi.c | 4 +- src/openvpn/occ-inline.h | 95 ---------- src/openvpn/occ.c | 4 +- src/openvpn/occ.h | 61 +++++++ src/openvpn/openvpn.c | 2 - src/openvpn/openvpn.vcxproj | 4 - src/openvpn/openvpn.vcxproj.filters | 12 -- src/openvpn/pf-inline.h | 63 ------- src/openvpn/pf.c | 24 ++- src/openvpn/pf.h | 15 ++ src/openvpn/ping-inline.h | 64 ------- src/openvpn/ping.c | 1 - src/openvpn/ping.h | 37 ++++ 20 files changed, 465 insertions(+), 602 deletions(-) delete mode 100644 src/openvpn/forward-inline.h delete mode 100644 src/openvpn/occ-inline.h delete mode 100644 src/openvpn/pf-inline.h delete mode 100644 src/openvpn/ping-inline.h
src/openvpn/Makefile.am +4 -4
@@ -55,7 +55,7 @@ openvpn_SOURCES = \ error.c error.h \ event.c event.h \ fdmisc.c fdmisc.h \ - forward.c forward.h forward-inline.h \ + forward.c forward.h \ fragment.c fragment.h \ gremlin.c gremlin.h \ helper.c helper.h \
@@ -80,7 +80,7 @@ openvpn_SOURCES = \ mudp.c mudp.h \ multi.c multi.h \ ntlm.c ntlm.h \ - occ.c occ.h occ-inline.h \ + occ.c occ.h \ openssl_compat.h \ pkcs11.c pkcs11.h pkcs11_backend.h \ pkcs11_openssl.c \
@@ -90,8 +90,8 @@ openvpn_SOURCES = \ otime.c otime.h \ packet_id.c packet_id.h \ perf.c perf.h \ - pf.c pf.h pf-inline.h \ - ping.c ping.h ping-inline.h \ + pf.c pf.h \ + ping.c ping.h \ plugin.c plugin.h \ pool.c pool.h \ proto.c proto.h \
src/openvpn/forward-inline.h deleted +0 -341
341 lines not on this page · raw message
src/openvpn/forward.c +2 -3
@@ -35,6 +35,8 @@#include "gremlin.h" #include "mss.h" #include "event.h" +#include "occ.h" +#include "ping.h" #include "ps.h" #include "dhcp.h" #include "common.h"
@@ -42,9 +44,6 @@#include "memdbg.h" -#include "forward-inline.h" -#include "occ-inline.h" -#include "ping-inline.h" #include "mstats.h" counter_type link_read_bytes_global;/* GLOBAL */
src/openvpn/forward.h +316 -3
335 lines not on this page · raw message
src/openvpn/init.c +2 -2
@@ -41,6 +41,7 @@#include "otime.h" #include "pool.h" #include "gremlin.h" +#include "occ.h" #include "pkcs11.h" #include "ps.h" #include "lladdr.h"
@@ -48,11 +49,10 @@#include "mstats.h" #include "ssl_verify.h" #include "tls_crypt.h" -#include "forward-inline.h" +#include "forward.h" #include "memdbg.h" -#include "occ-inline.h" static struct context *static_context;/* GLOBAL */
src/openvpn/mtcp.c +1 -1
@@ -32,7 +32,7 @@#if P2MP_SERVER #include "multi.h" -#include "forward-inline.h" +#include "forward.h" #include "memdbg.h"
src/openvpn/mudp.c +1 -1
@@ -33,7 +33,7 @@#include "multi.h" #include <inttypes.h> -#include "forward-inline.h" +#include "forward.h" #include "memdbg.h"
src/openvpn/multi.c +2 -2
@@ -36,10 +36,12 @@#if P2MP_SERVER +#include "forward.h" #include "multi.h" #include "push.h" #include "misc.h" #include "otime.h" +#include "pf.h" #include "gremlin.h" #include "mstats.h" #include "ssl_verify.h"
@@ -47,8 +49,6 @@#include "memdbg.h" -#include "forward-inline.h" -#include "pf-inline.h" /*#define MULTI_DEBUG_EVENT_LOOP*/
src/openvpn/occ-inline.h deleted +0 -95
95 lines not on this page · raw message
src/openvpn/occ.c +1 -3
@@ -32,11 +32,9 @@#ifdef ENABLE_OCC #include "occ.h" - +#include "forward.h" #include "memdbg.h" -#include "forward-inline.h" -#include "occ-inline.h" /* * This random string identifies an OpenVPN
src/openvpn/occ.h +61 -0
66 lines not on this page · raw message
src/openvpn/openvpn.c +0 -2
@@ -37,8 +37,6 @@#include "memdbg.h" -#include "forward-inline.h" -#define P2P_CHECK_SIG () EVENT_LOOP_CHECK_SIGNAL(c, process_signal_p2p, c); static bool
src/openvpn/openvpn.vcxproj +0 -4
@@ -193,7 +193,6 @@ <ClInclude Include="error.h" /> <ClInclude Include="event.h" /> <ClInclude Include="fdmisc.h" /> - <ClInclude Include="forward-inline.h" /> <ClInclude Include="forward.h" /> <ClInclude Include="fragment.h" /> <ClInclude Include="gremlin.h" />
@@ -217,16 +216,13 @@ <ClInclude Include="mudp.h" /> <ClInclude Include="multi.h" /> <ClInclude Include="ntlm.h" /> - <ClInclude Include="occ-inline.h" /> <ClInclude Include="occ.h" /> <ClInclude Include="openvpn.h" /> <ClInclude Include="options.h" /> <ClInclude Include="otime.h" /> <ClInclude Include="packet_id.h" /> <ClInclude Include="perf.h" /> - <ClInclude Include="pf-inline.h" /> <ClInclude Include="pf.h" /> - <ClInclude Include="ping-inline.h" /> <ClInclude Include="ping.h" /> <ClInclude Include="pkcs11.h" /> <ClInclude Include="pkcs11_backend.h" />
src/openvpn/openvpn.vcxproj.filters +0 -12
@@ -284,9 +284,6 @@ <ClInclude Include="fdmisc.h"> <Filter>Header Files</Filter> </ClInclude> - <ClInclude Include="forward-inline.h"> - <Filter>Header Files</Filter> - </ClInclude> <ClInclude Include="forward.h"> <Filter>Header Files</Filter> </ClInclude>
@@ -356,9 +353,6 @@ <ClInclude Include="ntlm.h"> <Filter>Header Files</Filter> </ClInclude> - <ClInclude Include="occ-inline.h"> - <Filter>Header Files</Filter> - </ClInclude> <ClInclude Include="occ.h"> <Filter>Header Files</Filter> </ClInclude>
@@ -377,15 +371,9 @@ <ClInclude Include="perf.h"> <Filter>Header Files</Filter> </ClInclude> - <ClInclude Include="pf-inline.h"> - <Filter>Header Files</Filter> - </ClInclude> <ClInclude Include="pf.h"> <Filter>Header Files</Filter> </ClInclude> - <ClInclude Include="ping-inline.h"> - <Filter>Header Files</Filter> - </ClInclude> <ClInclude Include="ping.h"> <Filter>Header Files</Filter> </ClInclude>
src/openvpn/pf-inline.h deleted +0 -63
63 lines not on this page · raw message
src/openvpn/pf.c +23 -1
@@ -35,9 +35,9 @@#include "init.h" #include "memdbg.h" +#include "pf.h" #include "ssl_verify.h" -#include "pf-inline.h" static void pf_destroy (struct pf_set *pfs)
@@ -496,6 +496,14 @@ pf_cn_test(struct pf_set *pfs, const struct tls_multi *tm, const int type, constreturn false; } +bool +pf_c2c_test (const struct context *src,const struct context *dest, +const char *prefix) +{ +return (!src->c2.pf.enabled ||pf_cn_test (src->c2.pf.pfs, dest->c2.tls_multi,PCT_DEST , prefix)) + && (!dest->c2.pf.enabled ||pf_cn_test (dest->c2.pf.pfs, src->c2.tls_multi,PCT_SRC , prefix)); +} +bool pf_addr_test_dowork (const struct context *src,const struct mroute_addr *dest,const char *prefix) {
@@ -538,6 +546,20 @@ pf_addr_test_dowork(const struct context *src, const struct mroute_addr *dest, c } } +bool +pf_addr_test (const struct context *src,const struct mroute_addr *dest, +const char *prefix) +{ +if (src->c2.pf.enabled) + { +return pf_addr_test_dowork (src, dest, prefix); + } +else + { +return true; + } +} +#ifdef PLUGIN_PF void pf_check_reload (struct context *c)
src/openvpn/pf.h +15 -0
@@ -31,6 +31,9 @@#define PF_MAX_LINE_LEN 256 +#define PCT_SRC 1 +#define PCT_DEST 2 +struct context ;struct ipv4_subnet {
@@ -101,4 +104,16 @@ void pf_context_print(const struct pf_context *pfc, const char *prefix, const in#endif +bool pf_c2c_test (const struct context *src,const struct context *dest, +const char *prefix); + +bool pf_addr_test (const struct context *src,const struct mroute_addr *dest, +const char *prefix); + +static inline bool +pf_kill_test (const struct pf_set *pfs) +{ +return pfs->kill; +} +#endif /* if defined(ENABLE_PF) && !defined(OPENVPN_PF_H) */
src/openvpn/ping-inline.h deleted +0 -64
64 lines not on this page · raw message
src/openvpn/ping.c +0 -1
@@ -33,7 +33,6 @@#include "memdbg.h" -#include "ping-inline.h" /* * This random string identifies an OpenVPN ping packet.
src/openvpn/ping.h +37 -0
@@ -43,4 +43,41 @@ is_ping_msg(const struct buffer *buf) return buf_string_match(buf, ping_string, PING_STRING_SIZE); } +/* +* Should we exit or restart due to ping (or other authenticated packet) +* not received in n seconds? +*/ +static inline void +check_ping_restart (struct context *c) +{ +void check_ping_restart_dowork (struct context *c); + +if (c->options.ping_rec_timeout + &&event_timeout_trigger (&c->c2.ping_rec_interval, + &c->c2.timeval, + (!c->options.ping_timer_remote + ||link_socket_actual_defined (&c->c1.link_socket_addr.actual)) + ?ETT_DEFAULT :15 )) + { +check_ping_restart_dowork (c); + } +} + +/* +* Should we ping the remote? +*/ +static inline void +check_ping_send (struct context *c) +{ +void check_ping_send_dowork (struct context *c); + +if (c->options.ping_send_timeout + &&event_timeout_trigger (&c->c2.ping_send_interval, + &c->c2.timeval, + !TO_LINK_DEF (c) ?ETT_DEFAULT :1 )) + { +check_ping_send_dowork (c); + } +} +#endif
Signature · 1 line
2.14.1
PATCH v3 2/2 ensure function declarations are compiled with their definitions
From: Antonio Quartulli <[email protected]...>
Function prototypes should be included when compiling their definitions so that it is clear to compilers and static analyzers that they are not static.
This means that several declarations have to be moved to the related header files which in turn have to be included by the source files implementing them.
Generally speaking this also improves the coding style and makes this code more consistent with the rest that already follows this rule.
---
v2: rebased on top of latest master to avoid conflicts
v3: rebased on top of "merge *-inline.h files with their main header"
patch has been verified with travis-ci
src/openvpn/crypto.h | 8 ++++++++ src/openvpn/error.c | 3 +-- src/openvpn/forward.h | 35 +++++++++++++++++++++++++++++++++++ src/openvpn/fragment.c | 1 + src/openvpn/gremlin.c | 1 + src/openvpn/init.h | 2 ++ src/openvpn/lladdr.c | 1 + src/openvpn/manage.h | 10 +++++----- src/openvpn/mbuf.h | 4 ++-- src/openvpn/misc.h | 8 -------- src/openvpn/mroute.h | 20 ++++++++++---------- src/openvpn/multi.h | 7 +++---- src/openvpn/occ.h | 19 +++++++++++++------ src/openvpn/pf.h | 15 +++++++++++++++ src/openvpn/ping.h | 4 ++++ src/openvpn/plugin.h | 2 ++ src/openvpn/socket.h | 13 +++++++------ 17 files changed, 110 insertions(+), 43 deletions(-)
src/openvpn/crypto.h +8 -0
@@ -459,6 +459,9 @@ void prng_bytes(uint8_t *output, int len);void prng_uninit (void ); +/* an analogue to the random() function, but use prng_bytes */ +long int get_random (void ); +void test_crypto (struct crypto_options *co,struct frame *f);
@@ -514,5 +517,10 @@ key_ctx_bi_defined(const struct key_ctx_bi *key) } +#else + +/* use plain random is no crypto support is compiled */ +#define get_random random +#endif /* ENABLE_CRYPTO */ #endif /* CRYPTO_H */
src/openvpn/error.c +1 -2
@@ -31,6 +31,7 @@#include "error.h" #include "buffer.h" +#include "init.h" #include "misc.h" #include "win32.h" #include "socket.h"
@@ -734,8 +735,6 @@ openvpn_exit(const int status) {if (!forked) { -void tun_abort (); -#ifdef ENABLE_PLUGIN void plugin_abort (void );
src/openvpn/forward.h +35 -0
@@ -63,6 +63,41 @@#define IOW_READ (IOW_READ_TUN|IOW_READ_LINK) +extern counter_type link_read_bytes_global; + +extern counter_type link_write_bytes_global; + +#ifdef ENABLE_CRYPTO +void check_tls_dowork (struct context *c); + +void check_tls_errors_co (struct context *c); + +void check_tls_errors_nco (struct context *c); +#endif /* ENABLE_CRYPTO */ + +#if P2MP +void check_incoming_control_channel_dowork (struct context *c); + +void check_scheduled_exit_dowork (struct context *c); + +void check_push_request_dowork (struct context *c); +#endif /* P2MP */ + +#ifdef ENABLE_FRAGMENT +void check_fragment_dowork (struct context *c); +#endif /* ENABLE_FRAGMENT */ + +void check_connection_established_dowork (struct context *c); + +void check_add_routes_dowork (struct context *c); + +void check_inactivity_timeout_dowork (struct context *c); + +void check_server_poll_timeout_dowork (struct context *c); + +void check_status_file_dowork (struct context *c); + +void io_wait_dowork (struct context *c,const unsigned int flags);void pre_select (struct context *c);
src/openvpn/fragment.c +1 -0
@@ -31,6 +31,7 @@#ifdef ENABLE_FRAGMENT +#include "crypto.h" #include "misc.h" #include "fragment.h" #include "integer.h"
src/openvpn/gremlin.c +1 -0
@@ -38,6 +38,7 @@#include "error.h" #include "common.h" +#include "crypto.h" #include "misc.h" #include "otime.h" #include "gremlin.h"
src/openvpn/init.h +2 -0
@@ -140,4 +140,6 @@ void open_plugins(struct context *c, const bool import_options, int init_point);#endif +void tun_abort (void ); +#endif /* ifndef INIT_H */
src/openvpn/lladdr.c +1 -0
@@ -11,6 +11,7 @@#include "syshead.h" #include "error.h" #include "misc.h" +#include "lladdr.h" int set_lladdr(const char *ifname, const char *lladdr,
src/openvpn/manage.h +5 -5
@@ -583,17 +583,17 @@ management_bytes_in(struct management *man, const int size)#ifdef MANAGEMENT_DEF_AUTH +void man_bytecount_output_server (struct management *man, +const counter_type *bytes_in_total, +const counter_type *bytes_out_total, +struct man_def_auth_context *mdac); +static inline void management_bytes_server (struct management *man,const counter_type *bytes_in_total,const counter_type *bytes_out_total,struct man_def_auth_context *mdac) { -void man_bytecount_output_server (struct management *man, -const counter_type *bytes_in_total, -const counter_type *bytes_out_total, -struct man_def_auth_context *mdac); -if (man->connection.bytecount_update_seconds >0 && now >= mdac->bytecount_last_update + man->connection.bytecount_update_seconds && (mdac->flags & (DAF_CONNECTION_ESTABLISHED |DAF_CONNECTION_CLOSED )) ==DAF_CONNECTION_ESTABLISHED )
src/openvpn/mbuf.h +2 -2
@@ -96,11 +96,11 @@ mbuf_maximum_queued(const struct mbuf_set *ms)return (int ) ms->max_queued; } +struct multi_instance *mbuf_peek_dowork (struct mbuf_set *ms); +static inline struct multi_instance *mbuf_peek (struct mbuf_set *ms) { -struct multi_instance *mbuf_peek_dowork (struct mbuf_set *ms); -if (mbuf_defined (ms)) {return mbuf_peek_dowork (ms);
src/openvpn/misc.h +0 -8
@@ -142,14 +142,6 @@ const char **make_arg_array(const char *first, const char *parms, struct gc_arenconst char **make_extended_arg_array (char **p,struct gc_arena *gc); -/* an analogue to the random() function, but use OpenSSL functions if available */ -#ifdef ENABLE_CRYPTO -long int get_random (void ); - -#else -#define get_random random -#endif -/* return true if filename can be opened for read */ bool test_file (const char *filename);
src/openvpn/mroute.h +10 -10
@@ -169,6 +169,16 @@ void mroute_helper_add_iroute46(struct mroute_helper *mh, int netbits);void mroute_helper_del_iroute46 (struct mroute_helper *mh,int netbits); +unsigned int mroute_extract_addr_ip (struct mroute_addr *src, +struct mroute_addr *dest, +const struct buffer *buf); + +unsigned int mroute_extract_addr_ether (struct mroute_addr *src, +struct mroute_addr *dest, +struct mroute_addr *esrc, +struct mroute_addr *edest, +const struct buffer *buf); +/* * Given a raw packet in buf, return the src and dest * addresses of the packet.
@@ -181,16 +191,6 @@ mroute_extract_addr_from_packet(struct mroute_addr *src,const struct buffer *buf, int tunnel_type) { - unsigned int mroute_extract_addr_ip(struct mroute_addr *src, -struct mroute_addr *dest, -const struct buffer *buf); - -unsigned int mroute_extract_addr_ether (struct mroute_addr *src, -struct mroute_addr *dest, -struct mroute_addr *esrc, -struct mroute_addr *edest, -const struct buffer *buf); - unsigned int ret = 0;verify_align_4 (buf);if (tunnel_type ==DEV_TYPE_TUN )
src/openvpn/multi.h +3 -4
@@ -536,11 +536,12 @@ clear_prefix(void)*/ #define MULTI_CACHE_ROUTE_TTL 60 +void multi_reap_process_dowork (const struct multi_context *m); +void multi_process_per_second_timers_dowork (struct multi_context *m); +static inline void multi_reap_process (const struct multi_context *m) { -void multi_reap_process_dowork (const struct multi_context *m); -if (m->reaper->last_call != now) {multi_reap_process_dowork (m);
@@ -552,8 +553,6 @@ multi_process_per_second_timers(struct multi_context *m) {if (m->per_second_trigger != now) { -void multi_process_per_second_timers_dowork (struct multi_context *m); -multi_process_per_second_timers_dowork (m); m->per_second_trigger = now; }
src/openvpn/occ.h +13 -6
@@ -90,6 +90,19 @@ is_occ_msg(const struct buffer *buf)void process_received_occ_msg (struct context *c); +<<<<<<< HEAD +======= +void check_send_occ_req_dowork(struct context *c); + +void check_send_occ_load_test_dowork (struct context *c); + +void check_send_occ_msg_dowork (struct context *c); + +/* +* Inline functions +*/ + +>>>>>>> 5222207d... ensure function declarations are compiled with their definitionsstatic inline int occ_reset_op (void ) {
@@ -102,8 +115,6 @@ occ_reset_op(void) static inline void check_send_occ_req(struct context *c) { - void check_send_occ_req_dowork(struct context *c); - if (event_timeout_defined(&c->c2.occ_interval) && event_timeout_trigger(&c->c2.occ_interval, &c->c2.timeval,
@@ -119,8 +130,6 @@ check_send_occ_req(struct context *c) static inline void check_send_occ_load_test(struct context *c) { - void check_send_occ_load_test_dowork(struct context *c); - if (event_timeout_defined(&c->c2.occ_mtu_load_test_interval) && event_timeout_trigger(&c->c2.occ_mtu_load_test_interval, &c->c2.timeval,
@@ -136,8 +145,6 @@ check_send_occ_load_test(struct context *c)static inline void check_send_occ_msg (struct context *c) { -void check_send_occ_msg_dowork (struct context *c); -if (c->c2.occ_op >=0 ) {if (!TO_LINK_DEF (c))
src/openvpn/pf.h +15 -0
@@ -104,6 +104,21 @@ void pf_context_print(const struct pf_context *pfc, const char *prefix, const in#endif +<<<<<<< HEAD +======= +bool pf_cn_test(struct pf_set *pfs, const struct tls_multi *tm, const int type, + const char *prefix); + +bool pf_addr_test_dowork (const struct context *src, +const struct mroute_addr *dest,const char *prefix); + +/* +* Inline functions +*/ + +#define PCT_SRC 1 +#define PCT_DEST 2 +>>>>>>> 5222207d... ensure function declarations are compiled with their definitionsbool pf_c2c_test (const struct context *src,const struct context *dest,const char *prefix);
src/openvpn/ping.h +4 -0
@@ -43,6 +43,10 @@ is_ping_msg(const struct buffer *buf)return buf_string_match (buf, ping_string,PING_STRING_SIZE ); } +void check_ping_restart_dowork (struct context *c); + +void check_ping_send_dowork (struct context *c); +/* * Should we exit or restart due to ping (or other authenticated packet) * not received in n seconds?
src/openvpn/plugin.h +2 -0
@@ -215,4 +215,6 @@ plugin_call(const struct plugin_list *pl, ); } +void plugin_abort (void ); +#endif /* OPENVPN_PLUGIN_H */
src/openvpn/socket.h +7 -6
@@ -1009,11 +1009,11 @@ void stream_buf_close(struct stream_buf *sb);bool stream_buf_added (struct stream_buf *sb,int length_added); +bool stream_buf_read_setup_dowork (struct link_socket *sock); +static inline bool stream_buf_read_setup (struct link_socket *sock) { -bool stream_buf_read_setup_dowork (struct link_socket *sock); -if (link_socket_connection_oriented (sock)) {return stream_buf_read_setup_dowork (sock);
@@ -1118,16 +1118,17 @@ link_socket_write_win32(struct link_socket *sock,#else /* ifdef _WIN32 */ +size_t link_socket_write_udp_posix_sendmsg (struct link_socket *sock, +struct buffer *buf, +struct link_socket_actual *to); + +static inline size_t link_socket_write_udp_posix (struct link_socket *sock,struct buffer *buf,struct link_socket_actual *to) {#if ENABLE_IP_PKTINFO -size_t link_socket_write_udp_posix_sendmsg (struct link_socket *sock, -struct buffer *buf, -struct link_socket_actual *to); -if (proto_is_udp (sock->info.proto) && (sock->sockflags &SF_USE_IP_PKTINFO ) &&addr_defined_ipi (to)) {
Signature · 1 line
2.14.1
Hi,
Quoted 1,265 lines · Antonio Quartulli
*-inline.h files are not very useful anymore.
In the attempt of cleaning up the code some more,
merge them into their main header files.No functional change is part of this patch.
Signed-off-by Antonio Quartulli <[email protected]...>---
patch has been verified with travis-ci
src/openvpn/Makefile.am | 8 +- src/openvpn/forward-inline.h | 341 ------------------------------------ src/openvpn/forward.c | 5 +- src/openvpn/forward.h | 319 ++++++++++++++++++++++++++++++++- src/openvpn/init.c | 4 +- src/openvpn/mtcp.c | 2 +- src/openvpn/mudp.c | 2 +- src/openvpn/multi.c | 4 +- src/openvpn/occ-inline.h | 95 ---------- src/openvpn/occ.c | 4 +- src/openvpn/occ.h | 61 +++++++ src/openvpn/openvpn.c | 2 - src/openvpn/openvpn.vcxproj | 4 - src/openvpn/openvpn.vcxproj.filters | 12 -- src/openvpn/pf-inline.h | 63 ------- src/openvpn/pf.c | 24 ++- src/openvpn/pf.h | 15 ++ src/openvpn/ping-inline.h | 64 ------- src/openvpn/ping.c | 1 - src/openvpn/ping.h | 37 ++++ 20 files changed, 465 insertions(+), 602 deletions(-) delete mode 100644 src/openvpn/forward-inline.h delete mode 100644 src/openvpn/occ-inline.h delete mode 100644 src/openvpn/pf-inline.h delete mode 100644 src/openvpn/ping-inline.hsrc/openvpn/Makefile.am +4
-4@@ -55,7 +55,7 @@ openvpn_SOURCES = \ error.c error.h \ event.c event.h \ fdmisc.c fdmisc.h \ - forward.c forward.h forward-inline.h \ + forward.c forward.h \ fragment.c fragment.h \ gremlin.c gremlin.h \ helper.c helper.h \@@ -80,7 +80,7 @@ openvpn_SOURCES = \ mudp.c mudp.h \ multi.c multi.h \ ntlm.c ntlm.h \ - occ.c occ.h occ-inline.h \ + occ.c occ.h \ openssl_compat.h \ pkcs11.c pkcs11.h pkcs11_backend.h \ pkcs11_openssl.c \@@ -90,8 +90,8 @@ openvpn_SOURCES = \ otime.c otime.h \ packet_id.c packet_id.h \ perf.c perf.h \ - pf.c pf.h pf-inline.h \ - ping.c ping.h ping-inline.h \ + pf.c pf.h \ + ping.c ping.h \ plugin.c plugin.h \ pool.c pool.h \ proto.c proto.h \src/openvpn/forward-inline.h deleted +0
-341@@ -1,341 +0,0 @@ -/* -* OpenVPN -- An application to securely tunnel IP networks -* over a single TCP/UDP port, with support for SSL/TLS-based -* session authentication and key exchange, -* packet encryption, packet authentication, and -* packet compression. -* -* Copyright (C) 2002-2017 OpenVPN Technologies, Inc. <[email protected]...> -* -* This program is free software; you can redistribute it and/or modify -* it under the terms of the GNU General Public License version 2 -* as published by the Free Software Foundation. -* -* This program is distributed in the hope that it will be useful, -* but WITHOUT ANY WARRANTY; without even the implied warranty of -* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -* GNU General Public License for more details. -* -* You should have received a copy of the GNU General Public License along -* with this program; if not, write to the Free Software Foundation, Inc., -* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. -*/ - -#ifndef FORWARD_INLINE_H -#define FORWARD_INLINE_H - -/* -* Inline functions -*/ - -/* -* Does TLS session need service? -*/ -static inline void -check_tls (struct context *c) -{ -#if defined(ENABLE_CRYPTO ) -void check_tls_dowork (struct context *c); - -if (c->c2.tls_multi) - { -check_tls_dowork (c); - } -#endif -} - -/* -* TLS errors are fatal in TCP mode. -* Also check for --tls-exit trigger. -*/ -static inline void -check_tls_errors (struct context *c) -{ -#if defined(ENABLE_CRYPTO ) -void check_tls_errors_co (struct context *c); - -void check_tls_errors_nco (struct context *c); - -if (c->c2.tls_multi && c->c2.tls_exit_signal) - { -if (link_socket_connection_oriented (c->c2.link_socket)) - { -if (c->c2.tls_multi->n_soft_errors) - { -check_tls_errors_co (c); - } - } -else - { -if (c->c2.tls_multi->n_hard_errors) - { -check_tls_errors_nco (c); - } - } - } -#endif /* if defined(ENABLE_CRYPTO) */ -} - -/* -* Check for possible incoming configuration -* messages on the control channel. -*/ -static inline void -check_incoming_control_channel (struct context *c) -{ -#if P2MP -void check_incoming_control_channel_dowork (struct context *c); - -if (tls_test_payload_len (c->c2.tls_multi) >0 ) - { -check_incoming_control_channel_dowork (c); - } -#endif -} - -/* -* Options like --up-delay need to be triggered by this function which -* checks for connection establishment. -*/ -static inline void -check_connection_established (struct context *c) -{ -void check_connection_established_dowork (struct context *c); - -if (event_timeout_defined (&c->c2.wait_for_connect)) - { -check_connection_established_dowork (c); - } -} - -/* -* Should we add routes? -*/ -static inline void -check_add_routes (struct context *c) -{ -void check_add_routes_dowork (struct context *c); - -if (event_timeout_trigger (&c->c2.route_wakeup, &c->c2.timeval,ETT_DEFAULT )) - { -check_add_routes_dowork (c); - } -} - -/* -* Should we exit due to inactivity timeout? -*/ -static inline void -check_inactivity_timeout (struct context *c) -{ -void check_inactivity_timeout_dowork (struct context *c); - -if (c->options.inactivity_timeout - &&event_timeout_trigger (&c->c2.inactivity_interval, &c->c2.timeval,ETT_DEFAULT )) - { -check_inactivity_timeout_dowork (c); - } -} - -#if P2MP - -static inline void -check_server_poll_timeout (struct context *c) -{ -void check_server_poll_timeout_dowork (struct context *c); - -if (c->options.ce.connect_timeout - &&event_timeout_trigger (&c->c2.server_poll_interval, &c->c2.timeval,ETT_DEFAULT )) - { -check_server_poll_timeout_dowork (c); - } -} - -/* -* Scheduled exit? -*/ -static inline void -check_scheduled_exit (struct context *c) -{ -void check_scheduled_exit_dowork (struct context *c); - -if (event_timeout_defined (&c->c2.scheduled_exit)) - { -if (event_timeout_trigger (&c->c2.scheduled_exit, &c->c2.timeval,ETT_DEFAULT )) - { -check_scheduled_exit_dowork (c); - } - } -} -#endif /* if P2MP */ - -/* -* Should we write timer-triggered status file. -*/ -static inline void -check_status_file (struct context *c) -{ -void check_status_file_dowork (struct context *c); - -if (c->c1.status_output) - { -if (status_trigger_tv (c->c1.status_output, &c->c2.timeval)) - { -check_status_file_dowork (c); - } - } -} - -#ifdef ENABLE_FRAGMENT -/* -* Should we deliver a datagram fragment to remote? -*/ -static inline void -check_fragment (struct context *c) -{ -void check_fragment_dowork (struct context *c); - -if (c->c2.fragment) - { -check_fragment_dowork (c); - } -} -#endif - -#if P2MP - -/* -* see if we should send a push_request in response to --pull -*/ -static inline void -check_push_request (struct context *c) -{ -void check_push_request_dowork (struct context *c); - -if (event_timeout_trigger (&c->c2.push_request_interval, &c->c2.timeval,ETT_DEFAULT )) - { -check_push_request_dowork (c); - } -} - -#endif - -#ifdef ENABLE_CRYPTO -/* -* Should we persist our anti-replay packet ID state to disk? -*/ -static inline void -check_packet_id_persist_flush (struct context *c) -{ -if (packet_id_persist_enabled (&c->c1.pid_persist) - &&event_timeout_trigger (&c->c2.packet_id_persist_interval, &c->c2.timeval,ETT_DEFAULT )) - { -packet_id_persist_save (&c->c1.pid_persist); - } -} -#endif - -/* -* Set our wakeup to 0 seconds, so we will be rescheduled -* immediately. -*/ -static inline void -context_immediate_reschedule (struct context *c) -{ - c->c2.timeval.tv_sec =0 ;/* ZERO-TIMEOUT */ - c->c2.timeval.tv_usec =0 ; -} - -static inline void -context_reschedule_sec (struct context *c,int sec) -{ -if (sec <0 ) - { - sec =0 ; - } -if (sec < c->c2.timeval.tv_sec) - { - c->c2.timeval.tv_sec = sec; - c->c2.timeval.tv_usec =0 ; - } -} - -static inline struct link_socket_info * -get_link_socket_info (struct context *c) -{ -if (c->c2.link_socket_info) - { -return c->c2.link_socket_info; - } -else - { -return &c->c2.link_socket->info; - } -} - -static inline void -register_activity (struct context *c,const int size) -{ -if (c->options.inactivity_timeout) - { - c->c2.inactivity_bytes += size; -if (c->c2.inactivity_bytes >= c->options.inactivity_minimum_bytes) - { - c->c2.inactivity_bytes =0 ; -event_timeout_reset (&c->c2.inactivity_interval); - } - } -} - -/* -* Return the io_wait() flags appropriate for -* a point-to-point tunnel. -*/ -static inline unsigned int -p2p_iow_flags (const struct context *c) -{ -unsigned int flags = (IOW_SHAPER |IOW_CHECK_RESIDUAL |IOW_FRAG |IOW_READ |IOW_WAIT_SIGNAL ); -if (c->c2.to_link.len >0 ) - { - flags |=IOW_TO_LINK ; - } -if (c->c2.to_tun.len >0 ) - { - flags |=IOW_TO_TUN ; - } -return flags; -} - -/* -* This is the core I/O wait function, used for all I/O waits except -* for TCP in server mode. -*/ -static inline void -io_wait (struct context *c,const unsigned int flags) -{ -void io_wait_dowork (struct context *c,const unsigned int flags); - -if (c->c2.fast_io && (flags & (IOW_TO_TUN |IOW_TO_LINK |IOW_MBUF ))) - { -/* fast path -- only for TUN/TAP/UDP writes */ -unsigned int ret =0 ; -if (flags &IOW_TO_TUN ) - { - ret |=TUN_WRITE ; - } -if (flags & (IOW_TO_LINK |IOW_MBUF )) - { - ret |=SOCKET_WRITE ; - } - c->c2.event_set_status = ret; - } -else - { -/* slow path */ -io_wait_dowork (c, flags); - } -} - -#define CONNECTION_ESTABLISHED (c) (get_link_socket_info(c)->connection_established) - -#endif /* EVENT_INLINE_H */ src/openvpn/forward.c +2
-3@@ -35,6 +35,8 @@#include "gremlin.h" #include "mss.h" #include "event.h" +#include "occ.h" +#include "ping.h" #include "ps.h" #include "dhcp.h" #include "common.h" @@ -42,9 +44,6 @@#include "memdbg.h" -#include "forward-inline.h" -#include "occ-inline.h" -#include "ping-inline.h" #include "mstats.h" counter_type link_read_bytes_global;/* GLOBAL */ src/openvpn/forward.h +316
-3@@ -31,9 +31,8 @@#ifndef FORWARD_H #define FORWARD_H -#include "openvpn.h" -#include "occ.h" -#include "ping.h" +/* the following macros must be defined before including any other header +* file */ #define TUN_OUT (c) (BLEN(&(c)->c2.to_tun) > 0)#define LINK_OUT (c) (BLEN(&(c)->c2.to_link) > 0)@@ -47,6 +46,10 @@#define TO_LINK_DEF (c) (LINK_OUT(c) || TO_LINK_FRAG(c)) +#include "openvpn.h" +#include "occ.h" +#include "ping.h" +#define IOW_TO_TUN (1<<0)#define IOW_TO_LINK (1<<1)#define IOW_READ_TUN (1<<2)@@ -262,4 +265,314 @@ void schedule_exit(struct context *c, const int n_seconds, const int signal);#endif +/* +* Does TLS session need service? +*/ +static inline void +check_tls (struct context *c) +{ +#if defined(ENABLE_CRYPTO ) +void check_tls_dowork (struct context *c); + +if (c->c2.tls_multi) + { +check_tls_dowork (c); + } +#endif +} + +/* +* TLS errors are fatal in TCP mode. +* Also check for --tls-exit trigger. +*/ +static inline void +check_tls_errors (struct context *c) +{ +#if defined(ENABLE_CRYPTO ) +void check_tls_errors_co (struct context *c); + +void check_tls_errors_nco (struct context *c); + +if (c->c2.tls_multi && c->c2.tls_exit_signal) + { +if (link_socket_connection_oriented (c->c2.link_socket)) + { +if (c->c2.tls_multi->n_soft_errors) + { +check_tls_errors_co (c); + } + } +else + { +if (c->c2.tls_multi->n_hard_errors) + { +check_tls_errors_nco (c); + } + } + } +#endif /* if defined(ENABLE_CRYPTO) */ +} + +/* +* Check for possible incoming configuration +* messages on the control channel. +*/ +static inline void +check_incoming_control_channel (struct context *c) +{ +#if P2MP +void check_incoming_control_channel_dowork (struct context *c); + +if (tls_test_payload_len (c->c2.tls_multi) >0 ) + { +check_incoming_control_channel_dowork (c); + } +#endif +} + +/* +* Options like --up-delay need to be triggered by this function which +* checks for connection establishment. +*/ +static inline void +check_connection_established (struct context *c) +{ +void check_connection_established_dowork (struct context *c); + +if (event_timeout_defined (&c->c2.wait_for_connect)) + { +check_connection_established_dowork (c); + } +} + +/* +* Should we add routes? +*/ +static inline void +check_add_routes (struct context *c) +{ +void check_add_routes_dowork (struct context *c); + +if (event_timeout_trigger (&c->c2.route_wakeup, &c->c2.timeval,ETT_DEFAULT )) + { +check_add_routes_dowork (c); + } +} + +/* +* Should we exit due to inactivity timeout? +*/ +static inline void +check_inactivity_timeout (struct context *c) +{ +void check_inactivity_timeout_dowork (struct context *c); + +if (c->options.inactivity_timeout + &&event_timeout_trigger (&c->c2.inactivity_interval, &c->c2.timeval,ETT_DEFAULT )) + { +check_inactivity_timeout_dowork (c); + } +} + +#if P2MP + +static inline void +check_server_poll_timeout (struct context *c) +{ +void check_server_poll_timeout_dowork (struct context *c); + +if (c->options.ce.connect_timeout + &&event_timeout_trigger (&c->c2.server_poll_interval, &c->c2.timeval,ETT_DEFAULT )) + { +check_server_poll_timeout_dowork (c); + } +} + +/* +* Scheduled exit? +*/ +static inline void +check_scheduled_exit (struct context *c) +{ +void check_scheduled_exit_dowork (struct context *c); + +if (event_timeout_defined (&c->c2.scheduled_exit)) + { +if (event_timeout_trigger (&c->c2.scheduled_exit, &c->c2.timeval,ETT_DEFAULT )) + { +check_scheduled_exit_dowork (c); + } + } +} +#endif /* if P2MP */ + +/* +* Should we write timer-triggered status file. +*/ +static inline void +check_status_file (struct context *c) +{ +void check_status_file_dowork (struct context *c); + +if (c->c1.status_output) + { +if (status_trigger_tv (c->c1.status_output, &c->c2.timeval)) + { +check_status_file_dowork (c); + } + } +} + +#ifdef ENABLE_FRAGMENT +/* +* Should we deliver a datagram fragment to remote? +*/ +static inline void +check_fragment (struct context *c) +{ +void check_fragment_dowork (struct context *c); + +if (c->c2.fragment) + { +check_fragment_dowork (c); + } +} +#endif + +#if P2MP + +/* +* see if we should send a push_request in response to --pull +*/ +static inline void +check_push_request (struct context *c) +{ +void check_push_request_dowork (struct context *c); + +if (event_timeout_trigger (&c->c2.push_request_interval, &c->c2.timeval,ETT_DEFAULT )) + { +check_push_request_dowork (c); + } +} + +#endif + +#ifdef ENABLE_CRYPTO +/* +* Should we persist our anti-replay packet ID state to disk? +*/ +static inline void +check_packet_id_persist_flush (struct context *c) +{ +if (packet_id_persist_enabled (&c->c1.pid_persist) + &&event_timeout_trigger (&c->c2.packet_id_persist_interval, &c->c2.timeval,ETT_DEFAULT )) + { +packet_id_persist_save (&c->c1.pid_persist); + } +} +#endif + +/* +* Set our wakeup to 0 seconds, so we will be rescheduled +* immediately. +*/ +static inline void +context_immediate_reschedule (struct context *c) +{ + c->c2.timeval.tv_sec =0 ;/* ZERO-TIMEOUT */ + c->c2.timeval.tv_usec =0 ; +} + +static inline void +context_reschedule_sec (struct context *c,int sec) +{ +if (sec <0 ) + { + sec =0 ; + } +if (sec < c->c2.timeval.tv_sec) + { + c->c2.timeval.tv_sec = sec; + c->c2.timeval.tv_usec =0 ; + } +} + +static inline struct link_socket_info * +get_link_socket_info (struct context *c) +{ +if (c->c2.link_socket_info) + { +return c->c2.link_socket_info; + } +else + { +return &c->c2.link_socket->info; + } +} + +static inline void +register_activity (struct context *c,const int size) +{ +if (c->options.inactivity_timeout) + { + c->c2.inactivity_bytes += size; +if (c->c2.inactivity_bytes >= c->options.inactivity_minimum_bytes) + { + c->c2.inactivity_bytes =0 ; +event_timeout_reset (&c->c2.inactivity_interval); + } + } +} + +/* +* Return the io_wait() flags appropriate for +* a point-to-point tunnel. +*/ +static inline unsigned int +p2p_iow_flags (const struct context *c) +{ +unsigned int flags = (IOW_SHAPER |IOW_CHECK_RESIDUAL |IOW_FRAG |IOW_READ |IOW_WAIT_SIGNAL ); +if (c->c2.to_link.len >0 ) + { + flags |=IOW_TO_LINK ; + } +if (c->c2.to_tun.len >0 ) + { + flags |=IOW_TO_TUN ; + } +return flags; +} + +/* +* This is the core I/O wait function, used for all I/O waits except +* for TCP in server mode. +*/ +static inline void +io_wait (struct context *c,const unsigned int flags) +{ +void io_wait_dowork (struct context *c,const unsigned int flags); + +if (c->c2.fast_io && (flags & (IOW_TO_TUN |IOW_TO_LINK |IOW_MBUF ))) + { +/* fast path -- only for TUN/TAP/UDP writes */ +unsigned int ret =0 ; +if (flags &IOW_TO_TUN ) + { + ret |=TUN_WRITE ; + } +if (flags & (IOW_TO_LINK |IOW_MBUF )) + { + ret |=SOCKET_WRITE ; + } + c->c2.event_set_status = ret; + } +else + { +/* slow path */ +io_wait_dowork (c, flags); + } +} + +#define CONNECTION_ESTABLISHED (c) (get_link_socket_info(c)->connection_established) +#endif /* FORWARD_H */ src/openvpn/init.c +2
-2@@ -41,6 +41,7 @@#include "otime.h" #include "pool.h" #include "gremlin.h" +#include "occ.h" #include "pkcs11.h" #include "ps.h" #include "lladdr.h" @@ -48,11 +49,10 @@#include "mstats.h" #include "ssl_verify.h" #include "tls_crypt.h" -#include "forward-inline.h" +#include "forward.h" #include "memdbg.h" -#include "occ-inline.h" static struct context *static_context;/* GLOBAL */ src/openvpn/mtcp.c +1
-1@@ -32,7 +32,7 @@#if P2MP_SERVER #include "multi.h" -#include "forward-inline.h" +#include "forward.h" #include "memdbg.h" src/openvpn/mudp.c +1
-1@@ -33,7 +33,7 @@#include "multi.h" #include <inttypes.h> -#include "forward-inline.h" +#include "forward.h" #include "memdbg.h" src/openvpn/multi.c +2
-2@@ -36,10 +36,12 @@#if P2MP_SERVER +#include "forward.h" #include "multi.h" #include "push.h" #include "misc.h" #include "otime.h" +#include "pf.h" #include "gremlin.h" #include "mstats.h" #include "ssl_verify.h" @@ -47,8 +49,6 @@#include "memdbg.h" -#include "forward-inline.h" -#include "pf-inline.h" /*#define MULTI_DEBUG_EVENT_LOOP*/ src/openvpn/occ-inline.h deleted +0
-95@@ -1,95 +0,0 @@ -/* -* OpenVPN -- An application to securely tunnel IP networks -* over a single TCP/UDP port, with support for SSL/TLS-based -* session authentication and key exchange, -* packet encryption, packet authentication, and -* packet compression. -* -* Copyright (C) 2002-2017 OpenVPN Technologies, Inc. <[email protected]...> -* -* This program is free software; you can redistribute it and/or modify -* it under the terms of the GNU General Public License version 2 -* as published by the Free Software Foundation. -* -* This program is distributed in the hope that it will be useful, -* but WITHOUT ANY WARRANTY; without even the implied warranty of -* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -* GNU General Public License for more details. -* -* You should have received a copy of the GNU General Public License along -* with this program; if not, write to the Free Software Foundation, Inc., -* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. -*/ - -#ifndef OCC_INLINE_H -#define OCC_INLINE_H - -#ifdef ENABLE_OCC - -/* -* Inline functions -*/ - -static inline int -occ_reset_op (void ) -{ -return -1 ; -} - -/* -* Should we send an OCC_REQUEST message? -*/ -static inline void -check_send_occ_req (struct context *c) -{ -void check_send_occ_req_dowork (struct context *c); - -if (event_timeout_defined (&c->c2.occ_interval) - &&event_timeout_trigger (&c->c2.occ_interval, - &c->c2.timeval, - (!TO_LINK_DEF (c) && c->c2.occ_op <0 ) ?ETT_DEFAULT :0 )) - { -check_send_occ_req_dowork (c); - } -} - -/* -* Should we send an MTU load test? -*/ -static inline void -check_send_occ_load_test (struct context *c) -{ -void check_send_occ_load_test_dowork (struct context *c); - -if (event_timeout_defined (&c->c2.occ_mtu_load_test_interval) - &&event_timeout_trigger (&c->c2.occ_mtu_load_test_interval, - &c->c2.timeval, - (!TO_LINK_DEF (c) && c->c2.occ_op <0 ) ?ETT_DEFAULT :0 )) - { -check_send_occ_load_test_dowork (c); - } -} - -/* -* Should we send an OCC message? -*/ -static inline void -check_send_occ_msg (struct context *c) -{ -void check_send_occ_msg_dowork (struct context *c); - -if (c->c2.occ_op >=0 ) - { -if (!TO_LINK_DEF (c)) - { -check_send_occ_msg_dowork (c); - } -else - { -tv_clear (&c->c2.timeval);/* ZERO-TIMEOUT */ - } - } -} - -#endif /* ifdef ENABLE_OCC */ -#endif /* ifndef OCC_INLINE_H */ src/openvpn/occ.c +1
-3@@ -32,11 +32,9 @@#ifdef ENABLE_OCC #include "occ.h" - +#include "forward.h" #include "memdbg.h" -#include "forward-inline.h" -#include "occ-inline.h" /* * This random string identifies an OpenVPN src/openvpn/occ.h +61
-0@@ -90,5 +90,66 @@ is_occ_msg(const struct buffer *buf)void process_received_occ_msg (struct context *c); +static inline int +occ_reset_op (void ) +{ +return -1 ; +} + +/* +* Should we send an OCC_REQUEST message? +*/ +static inline void +check_send_occ_req (struct context *c) +{ +void check_send_occ_req_dowork (struct context *c); + +if (event_timeout_defined (&c->c2.occ_interval) + &&event_timeout_trigger (&c->c2.occ_interval, + &c->c2.timeval, + (!TO_LINK_DEF (c) && c->c2.occ_op <0 ) ?ETT_DEFAULT :0 )) + { +check_send_occ_req_dowork (c); + } +} + +/* +* Should we send an MTU load test? +*/ +static inline void +check_send_occ_load_test (struct context *c) +{ +void check_send_occ_load_test_dowork (struct context *c); + +if (event_timeout_defined (&c->c2.occ_mtu_load_test_interval) + &&event_timeout_trigger (&c->c2.occ_mtu_load_test_interval, + &c->c2.timeval, + (!TO_LINK_DEF (c) && c->c2.occ_op <0 ) ?ETT_DEFAULT :0 )) + { +check_send_occ_load_test_dowork (c); + } +} + +/* +* Should we send an OCC message? +*/ +static inline void +check_send_occ_msg (struct context *c) +{ +void check_send_occ_msg_dowork (struct context *c); + +if (c->c2.occ_op >=0 ) + { +if (!TO_LINK_DEF (c)) + { +check_send_occ_msg_dowork (c); + } +else + { +tv_clear (&c->c2.timeval);/* ZERO-TIMEOUT */ + } + } +} +#endif /* ifdef ENABLE_OCC */ #endif /* ifndef OCC_H */ src/openvpn/openvpn.c +0
-2@@ -37,8 +37,6 @@#include "memdbg.h" -#include "forward-inline.h" -#define P2P_CHECK_SIG () EVENT_LOOP_CHECK_SIGNAL(c, process_signal_p2p, c); static boolsrc/openvpn/openvpn.vcxproj +0
-4@@ -193,7 +193,6 @@ <ClInclude Include="error.h" /> <ClInclude Include="event.h" /> <ClInclude Include="fdmisc.h" /> - <ClInclude Include="forward-inline.h" /> <ClInclude Include="forward.h" /> <ClInclude Include="fragment.h" /> <ClInclude Include="gremlin.h" />@@ -217,16 +216,13 @@ <ClInclude Include="mudp.h" /> <ClInclude Include="multi.h" /> <ClInclude Include="ntlm.h" /> - <ClInclude Include="occ-inline.h" /> <ClInclude Include="occ.h" /> <ClInclude Include="openvpn.h" /> <ClInclude Include="options.h" /> <ClInclude Include="otime.h" /> <ClInclude Include="packet_id.h" /> <ClInclude Include="perf.h" /> - <ClInclude Include="pf-inline.h" /> <ClInclude Include="pf.h" /> - <ClInclude Include="ping-inline.h" /> <ClInclude Include="ping.h" /> <ClInclude Include="pkcs11.h" /> <ClInclude Include="pkcs11_backend.h" />src/openvpn/openvpn.vcxproj.filters +0
-12@@ -284,9 +284,6 @@ <ClInclude Include="fdmisc.h"> <Filter>Header Files</Filter> </ClInclude> - <ClInclude Include="forward-inline.h"> - <Filter>Header Files</Filter> - </ClInclude> <ClInclude Include="forward.h"> <Filter>Header Files</Filter> </ClInclude>@@ -356,9 +353,6 @@ <ClInclude Include="ntlm.h"> <Filter>Header Files</Filter> </ClInclude> - <ClInclude Include="occ-inline.h"> - <Filter>Header Files</Filter> - </ClInclude> <ClInclude Include="occ.h"> <Filter>Header Files</Filter> </ClInclude>@@ -377,15 +371,9 @@ <ClInclude Include="perf.h"> <Filter>Header Files</Filter> </ClInclude> - <ClInclude Include="pf-inline.h"> - <Filter>Header Files</Filter> - </ClInclude> <ClInclude Include="pf.h"> <Filter>Header Files</Filter> </ClInclude> - <ClInclude Include="ping-inline.h"> - <Filter>Header Files</Filter> - </ClInclude> <ClInclude Include="ping.h"> <Filter>Header Files</Filter> </ClInclude>src/openvpn/pf-inline.h deleted +0
-63@@ -1,63 +0,0 @@ -/* -* OpenVPN -- An application to securely tunnel IP networks -* over a single TCP/UDP port, with support for SSL/TLS-based -* session authentication and key exchange, -* packet encryption, packet authentication, and -* packet compression. -* -* Copyright (C) 2002-2017 OpenVPN Technologies, Inc. <[email protected]...> -* -* This program is free software; you can redistribute it and/or modify -* it under the terms of the GNU General Public License version 2 -* as published by the Free Software Foundation. -* -* This program is distributed in the hope that it will be useful, -* but WITHOUT ANY WARRANTY; without even the implied warranty of -* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -* GNU General Public License for more details. -* -* You should have received a copy of the GNU General Public License along -* with this program; if not, write to the Free Software Foundation, Inc., -* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. -*/ - -#if defined(ENABLE_PF ) && !defined(PF_INLINE_H ) -#define PF_INLINE_H - -/* -* Inline functions -*/ - -#define PCT_SRC 1 -#define PCT_DEST 2 -static inline bool -pf_c2c_test (const struct context *src,const struct context *dest,const char *prefix) -{ -bool pf_cn_test (struct pf_set *pfs,const struct tls_multi *tm,const int type,const char *prefix); - -return (!src->c2.pf.enabled ||pf_cn_test (src->c2.pf.pfs, dest->c2.tls_multi,PCT_DEST , prefix)) - && (!dest->c2.pf.enabled ||pf_cn_test (dest->c2.pf.pfs, src->c2.tls_multi,PCT_SRC , prefix)); -} - -static inline bool -pf_addr_test (const struct context *src,const struct mroute_addr *dest,const char *prefix) -{ -bool pf_addr_test_dowork (const struct context *src,const struct mroute_addr *dest,const char *prefix); - -if (src->c2.pf.enabled) - { -return pf_addr_test_dowork (src, dest, prefix); - } -else - { -return true; - } -} - -static inline bool -pf_kill_test (const struct pf_set *pfs) -{ -return pfs->kill; -} - -#endif /* if defined(ENABLE_PF) && !defined(PF_INLINE_H) */ src/openvpn/pf.c +23
-1@@ -35,9 +35,9 @@#include "init.h" #include "memdbg.h" +#include "pf.h" #include "ssl_verify.h" -#include "pf-inline.h" static void pf_destroy (struct pf_set *pfs)@@ -496,6 +496,14 @@ pf_cn_test(struct pf_set *pfs, const struct tls_multi *tm, const int type, constreturn false; } +bool +pf_c2c_test (const struct context *src,const struct context *dest, +const char *prefix) +{ +return (!src->c2.pf.enabled ||pf_cn_test (src->c2.pf.pfs, dest->c2.tls_multi,PCT_DEST , prefix)) + && (!dest->c2.pf.enabled ||pf_cn_test (dest->c2.pf.pfs, src->c2.tls_multi,PCT_SRC , prefix)); +} +bool pf_addr_test_dowork (const struct context *src,const struct mroute_addr *dest,const char *prefix) {@@ -538,6 +546,20 @@ pf_addr_test_dowork(const struct context *src, const struct mroute_addr *dest, c } } +bool +pf_addr_test (const struct context *src,const struct mroute_addr *dest, +const char *prefix) +{ +if (src->c2.pf.enabled) + { +return pf_addr_test_dowork (src, dest, prefix); + } +else + { +return true; + } +} +#ifdef PLUGIN_PF void pf_check_reload (struct context *c)src/openvpn/pf.h +3
-0@@ -31,6 +31,9 @@#define PF_MAX_LINE_LEN 256 +#define PCT_SRC 1 +#define PCT_DEST 2 +struct context ;struct ipv4_subnet {
src/openvpn/pf.h void pf_context_print(const struct pf_context *pfc, const char *prefix, const in · line 111
Quoted 8 lines
src/openvpn/pf.h +5
-0@@ -101,4 +104,16 @@ void pf_context_print(const struct pf_context *pfc, const char *prefix, const in#endif +bool pf_c2c_test (const struct context *src,const struct context *dest, +const char *prefix); + +bool pf_addr_test (const struct context *src,const struct mroute_addr *dest, +const char *prefix);
Why are these no longer inline? They seem to be simple wrappers to prevent a function call is pf is not enabled.
Quoted 126 lines
src/openvpn/pf.h +6
-0+static inline bool +pf_kill_test (const struct pf_set *pfs) +{ +return pfs->kill; +} +#endif /* if defined(ENABLE_PF) && !defined(OPENVPN_PF_H) */ src/openvpn/ping-inline.h deleted +0
-64@@ -1,64 +0,0 @@ -/* -* OpenVPN -- An application to securely tunnel IP networks -* over a single TCP/UDP port, with support for SSL/TLS-based -* session authentication and key exchange, -* packet encryption, packet authentication, and -* packet compression. -* -* Copyright (C) 2002-2017 OpenVPN Technologies, Inc. <[email protected]...> -* -* This program is free software; you can redistribute it and/or modify -* it under the terms of the GNU General Public License version 2 -* as published by the Free Software Foundation. -* -* This program is distributed in the hope that it will be useful, -* but WITHOUT ANY WARRANTY; without even the implied warranty of -* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -* GNU General Public License for more details. -* -* You should have received a copy of the GNU General Public License along -* with this program; if not, write to the Free Software Foundation, Inc., -* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. -*/ - -#ifndef PING_INLINE_H -#define PING_INLINE_H - -/* -* Should we exit or restart due to ping (or other authenticated packet) -* not received in n seconds? -*/ -static inline void -check_ping_restart (struct context *c) -{ -void check_ping_restart_dowork (struct context *c); - -if (c->options.ping_rec_timeout - &&event_timeout_trigger (&c->c2.ping_rec_interval, - &c->c2.timeval, - (!c->options.ping_timer_remote - ||link_socket_actual_defined (&c->c1.link_socket_addr.actual)) - ?ETT_DEFAULT :15 )) - { -check_ping_restart_dowork (c); - } -} - -/* -* Should we ping the remote? -*/ -static inline void -check_ping_send (struct context *c) -{ -void check_ping_send_dowork (struct context *c); - -if (c->options.ping_send_timeout - &&event_timeout_trigger (&c->c2.ping_send_interval, - &c->c2.timeval, - !TO_LINK_DEF (c) ?ETT_DEFAULT :1 )) - { -check_ping_send_dowork (c); - } -} - -#endif /* ifndef PING_INLINE_H */ src/openvpn/ping.c +0
-1@@ -33,7 +33,6 @@#include "memdbg.h" -#include "ping-inline.h" /* * This random string identifies an OpenVPN ping packet. src/openvpn/ping.h +28
-0@@ -43,4 +43,41 @@ is_ping_msg(const struct buffer *buf)return buf_string_match (buf, ping_string,PING_STRING_SIZE ); } +/* +* Should we exit or restart due to ping (or other authenticated packet) +* not received in n seconds? +*/ +static inline void +check_ping_restart (struct context *c) +{ +void check_ping_restart_dowork (struct context *c); + +if (c->options.ping_rec_timeout + &&event_timeout_trigger (&c->c2.ping_rec_interval, + &c->c2.timeval, + (!c->options.ping_timer_remote + ||link_socket_actual_defined (&c->c1.link_socket_addr.actual)) + ?ETT_DEFAULT :15 )) + { +check_ping_restart_dowork (c); + } +} + +/* +* Should we ping the remote? +*/ +static inline void +check_ping_send (struct context *c) +{ +void check_ping_send_dowork (struct context *c); +
src/openvpn/ping.h is_ping_msg(const struct buffer *buf) · line 83
Quoted 10 lines
src/openvpn/ping.h +9
-0+if (c->options.ping_send_timeout + &&event_timeout_trigger (&c->c2.ping_send_interval, + &c->c2.timeval, + !TO_LINK_DEF (c) ?ETT_DEFAULT :1 )) + { +check_ping_send_dowork (c); + } +} +#endif
Otherwise this patch looks good.
-Steffan
Hi,
On 17/09/17 20:00, Steffan Karger wrote:
[CUT]
Quoted 4 lines
Quoted 4 lines
(quoted diff) +0
-0@@ -101,4 +104,16 @@ void pf_context_print(const struct pf_context *pfc, const char *prefix, const in #endif
Quoted 9 lines
src/openvpn/pf.h void pf_context_print(const struct pf_context *pfc, const char *prefix, const in · line 111
Quoted 5 lines
src/openvpn/pf.h +5
-0+bool pf_c2c_test (const struct context *src,const struct context *dest, +const char *prefix); + +bool pf_addr_test (const struct context *src,const struct mroute_addr *dest, +const char *prefix);Why are these no longer inline? They seem to be simple wrappers to prevent a function call is pf is not enabled.
Oh, I needed sometime, but then I understood what you mean :)
You are saying that by keeping this function inline, we have a slight performance gain because we won't invoke pf_cn_test() when pf is disabled. And such decision can be made inline.
I agree. I will send a v2 of this patch.
Quoted 3 lines
Quoted 1 line
Otherwise this patch looks good.
Thanks for reviewing!
Cheers,
Signature · 1 line
Antonio Quartulli
Quoted 20 lines · Antonio Quartulli
Hi,
On 17/09/17 20:00, Steffan Karger wrote:
[CUT]
Quoted 4 lines
Quoted 4 lines
(quoted diff) +0
-0@@ -101,4 +104,16 @@ void pf_context_print(const struct pf_context *pfc, const char *prefix, const in #endifQuoted 9 lines
src/openvpn/pf.h void pf_context_print(const struct pf_context *pfc, const char *prefix, const in · line 111
Quoted 5 lines
src/openvpn/pf.h +5
-0+bool pf_c2c_test (const struct context *src,const struct context *dest, +const char *prefix); + +bool pf_addr_test (const struct context *src,const struct mroute_addr *dest, +const char *prefix);Why are these no longer inline? They seem to be simple wrappers to prevent a function call is pf is not enabled.
Quoted 5 lines
Oh, I needed sometime, but then I understood what you mean :)
You are saying that by keeping this function inline, we have a slight performance gain because we won't invoke
pf_cn_test()when pf is disabled. And such decision can be made inline.
Now I recall why I changed that.
pf_c2c_test is dereferencing an object of type "struct context" for which we have no definition available at that point.
A fix could be to include openvpn.h in pf.h, but then we get other weird problems due to circular inclusions. Having pf-inline.h was, of course, much easier because you could place its inclusion at the most convenient place and the problem was solved.
I'll try to restructure the functions a bit so that we don't lose the gain given by the inline attribute, but we don't need to dereference the context as well.
Cheers,
Quoted 28 lines
I agree. I will send a v2 of this patch.
Quoted 3 lines
Quoted 1 line
Otherwise this patch looks good.
Thanks for reviewing!
Cheers,
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
Signature · 1 line
Antonio Quartulli
Re: [Openvpn-devel] [PATCHv3 2/2] ensure function declarations are compiled with their definitions
In reply to Antonio QuartulliHello,
The patch contains conflict markers.
Quoted 13 lines · Antonio Quartulli
[snip]
src/openvpn/occ.h +3
-0@@ -90,6 +90,19 @@ is_occ_msg(const struct buffer *buf)void process_received_occ_msg (struct context *c); +<<<<<<< HEAD +======= +void check_send_occ_req_dowork(struct context *c);
src/openvpn/occ.h is_occ_msg(const struct buffer *buf) · line 105
Quoted 10 lines
src/openvpn/occ.h +10
-0+ +void check_send_occ_load_test_dowork (struct context *c); + +void check_send_occ_msg_dowork (struct context *c); + +/* +* Inline functions +*/ + +>>>>>>> 5222207d... ensure function declarations are compiled with their definitions
Here.
Quoted 15 lines
[snip]
src/openvpn/pf.h +5
-0@@ -104,6 +104,21 @@ void pf_context_print(const struct pf_context *pfc, const char *prefix, const in#endif +<<<<<<< HEAD +======= +bool pf_cn_test(struct pf_set *pfs, const struct tls_multi *tm, const int type, + const char *prefix); +
src/openvpn/pf.h void pf_context_print(const struct pf_context *pfc, const char *prefix, const in · line 121
Quoted 10 lines
src/openvpn/pf.h +10
-0+bool pf_addr_test_dowork (const struct context *src, +const struct mroute_addr *dest,const char *prefix); + +/* +* Inline functions +*/ + +#define PCT_SRC 1 +#define PCT_DEST 2 +>>>>>>> 5222207d... ensure function declarations are compiled with their definitions
And here.
Regards
Simon
Signature · 3 lines
+ privacy is necessary + using gnupg http://gnupg.org + public key id: 0x92FEFDB7E44C32F9
Re: [Openvpn-devel] [PATCHv3 2/2] ensure function declarations are compiled with their definitions
Hi,
thanks for noticing this. I think something went wrong during my last rebase. After working on this branch this morning I also got complaints from travis-ci, but I hadn't noticed that before.
will fix and resend both patches.
Cheers,
Quoted 62 lines · Simon Ruderich
Hello,
The patch contains conflict markers.
Quoted 13 lines · Antonio Quartulli
[snip]
src/openvpn/occ.h +3
-0@@ -90,6 +90,19 @@ is_occ_msg(const struct buffer *buf)void process_received_occ_msg (struct context *c); +<<<<<<< HEAD +======= +void check_send_occ_req_dowork(struct context *c);src/openvpn/occ.h is_occ_msg(const struct buffer *buf) · line 105
Quoted 10 lines
src/openvpn/occ.h +10
-0+ +void check_send_occ_load_test_dowork (struct context *c); + +void check_send_occ_msg_dowork (struct context *c); + +/* +* Inline functions +*/ + +>>>>>>> 5222207d... ensure function declarations are compiled with their definitionsHere.
Quoted 15 lines
[snip]
src/openvpn/pf.h +5
-0@@ -104,6 +104,21 @@ void pf_context_print(const struct pf_context *pfc, const char *prefix, const in#endif +<<<<<<< HEAD +======= +bool pf_cn_test(struct pf_set *pfs, const struct tls_multi *tm, const int type, + const char *prefix); +src/openvpn/pf.h void pf_context_print(const struct pf_context *pfc, const char *prefix, const in · line 121
Quoted 10 lines
src/openvpn/pf.h +10
-0+bool pf_addr_test_dowork (const struct context *src, +const struct mroute_addr *dest,const char *prefix); + +/* +* Inline functions +*/ + +#define PCT_SRC 1 +#define PCT_DEST 2 +>>>>>>> 5222207d... ensure function declarations are compiled with their definitionsAnd here.
Regards
Simon
Signature · 1 line
Antonio Quartulli