void/ZeroTierOne
2
0
Fork 0
mirror of https://github.com/zerotier/ZeroTierOne.git synced 2025-06-16 09:23:45 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

removed a Box without triggering a copy

Browse source
This commit is contained in:
mamoniot 2022-12-14 17:19:12 -05:00
parent 1a9e08bb2b
commit 56b7074ed3
1 changed files with 29 additions and 22 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
zssp/src/zssp.rs
View file

@ -116,7 +116,7 @@ struct SessionMutableState {
remote_session_id: Option<SessionId>, // The other side's 48-bit session ID remote_session_id: Option<SessionId>, // The other side's 48-bit session ID
session_keys: [Option<SessionKey>; KEY_HISTORY_SIZE], // Buffers to store current, next, and last active key session_keys: [Option<SessionKey>; KEY_HISTORY_SIZE], // Buffers to store current, next, and last active key
cur_session_key_idx: usize, // Pointer used for keys[] circular buffer cur_session_key_idx: usize, // Pointer used for keys[] circular buffer
offer: Option<Box<EphemeralOffer>>, // Most recent ephemeral offer sent to remote offer: Option<EphemeralOffer>, // Most recent ephemeral offer sent to remote
last_remote_offer: i64, // Time of most recent ephemeral offer (ms) last_remote_offer: i64, // Time of most recent ephemeral offer (ms)
} }
@ -243,7 +243,8 @@ impl<Layer: ApplicationLayer> Session<Layer> {
let bob_s_public_blob_hash = SHA384::hash(bob_s_public_blob); let bob_s_public_blob_hash = SHA384::hash(bob_s_public_blob);
let header_check_cipher = let header_check_cipher =
Aes::new(kbkdf512(noise_ss.as_bytes(), KBKDF_KEY_USAGE_LABEL_HEADER_CHECK).first_n::<HEADER_CHECK_AES_KEY_SIZE>()); Aes::new(kbkdf512(noise_ss.as_bytes(), KBKDF_KEY_USAGE_LABEL_HEADER_CHECK).first_n::<HEADER_CHECK_AES_KEY_SIZE>());
if let Ok(offer) = send_ephemeral_offer( let mut offer = None;
if send_ephemeral_offer(
&mut send, &mut send,
send_counter.next(), send_counter.next(),
local_session_id, local_session_id,
@ -257,7 +258,8 @@ impl<Layer: ApplicationLayer> Session<Layer> {
None, None,
mtu, mtu,
current_time, current_time,
) { &mut offer
).is_ok() {
return Ok(Self { return Ok(Self {
id: local_session_id, id: local_session_id,
user_data, user_data,
@ -269,7 +271,7 @@ impl<Layer: ApplicationLayer> Session<Layer> {
remote_session_id: None, remote_session_id: None,
session_keys: [None, None, None], session_keys: [None, None, None],
cur_session_key_idx: 0, cur_session_key_idx: 0,
offer: Some(offer), offer,
last_remote_offer: i64::MIN, last_remote_offer: i64::MIN,
}), }),
remote_s_public_blob_hash: bob_s_public_blob_hash, remote_s_public_blob_hash: bob_s_public_blob_hash,
@ -415,7 +417,8 @@ impl<Layer: ApplicationLayer> Session<Layer> {
.map_or(true, |o| (current_time - o.creation_time) > Layer::REKEY_RATE_LIMIT_MS .map_or(true, |o| (current_time - o.creation_time) > Layer::REKEY_RATE_LIMIT_MS
) { ) {
if let Some(remote_s_public) = P384PublicKey::from_bytes(&self.remote_s_public_raw) { if let Some(remote_s_public) = P384PublicKey::from_bytes(&self.remote_s_public_raw) {
if let Ok(offer) = send_ephemeral_offer( let mut offer = None;
if send_ephemeral_offer(
&mut send, &mut send,
self.send_counter.next(), self.send_counter.next(),
self.id, self.id,
@ -433,9 +436,10 @@ impl<Layer: ApplicationLayer> Session<Layer> {
}, },
mtu, mtu,
current_time, current_time,
) { &mut offer
).is_ok() {
drop(state); drop(state);
let _ = self.state.write().unwrap().offer.replace(offer); let _ = self.state.write().unwrap().offer.replace(offer.unwrap());
} }
} }
} }
@ -1154,7 +1158,8 @@ fn send_ephemeral_offer<SendFunction: FnMut(&mut [u8])>(
header_check_cipher: Option<&Aes>, // None to use one based on the recipient's public key for initial contact header_check_cipher: Option<&Aes>, // None to use one based on the recipient's public key for initial contact
mtu: usize, mtu: usize,
current_time: i64, current_time: i64,
) -> Result<Box<EphemeralOffer>, Error> { ret_ephemeral_offer: &mut Option<EphemeralOffer>
) -> Result<(), Error> {
// Generate a NIST P-384 pair. // Generate a NIST P-384 pair.
let alice_e_keypair = P384KeyPair::generate(); let alice_e_keypair = P384KeyPair::generate();
@ -1265,7 +1270,7 @@ fn send_ephemeral_offer<SendFunction: FnMut(&mut [u8])>(
); );
} }
Ok(Box::new(EphemeralOffer { *ret_ephemeral_offer = Some(EphemeralOffer {
id, id,
creation_time: current_time, creation_time: current_time,
ratchet_count, ratchet_count,
@ -1273,7 +1278,9 @@ fn send_ephemeral_offer<SendFunction: FnMut(&mut [u8])>(
ss_key, ss_key,
alice_e_keypair, alice_e_keypair,
alice_hk_keypair, alice_hk_keypair,
})) });
Ok(())
} }
/// Populate all but the header check code in the first 16 bytes of a packet or fragment. /// Populate all but the header check code in the first 16 bytes of a packet or fragment.