mirror of
https://github.com/esphome/esphome.git
synced 2026-05-30 15:28:34 +08:00
[api] Split Noise handshake state_action_ to reduce stack pressure (#15464)
This commit is contained in:
@@ -244,16 +244,31 @@ APIError APINoiseFrameHelper::try_read_frame_() {
|
|||||||
* If an error occurred, returns that error. Only returns OK if the transport is ready for data
|
* If an error occurred, returns that error. Only returns OK if the transport is ready for data
|
||||||
* traffic.
|
* traffic.
|
||||||
*/
|
*/
|
||||||
|
// Split into per-state methods so the compiler doesn't allocate stack space
|
||||||
|
// for all branches simultaneously. On RP2040 the core0 stack lives in a 4KB
|
||||||
|
// scratch RAM bank; the Noise crypto path (curve25519) needs ~2KB+ of stack,
|
||||||
|
// so every byte saved in the caller matters.
|
||||||
APIError APINoiseFrameHelper::state_action_() {
|
APIError APINoiseFrameHelper::state_action_() {
|
||||||
int err;
|
switch (this->state_) {
|
||||||
APIError aerr;
|
case State::INITIALIZE:
|
||||||
if (state_ == State::INITIALIZE) {
|
HELPER_LOG("Bad state for method: %d", (int) this->state_);
|
||||||
HELPER_LOG("Bad state for method: %d", (int) state_);
|
|
||||||
return APIError::BAD_STATE;
|
return APIError::BAD_STATE;
|
||||||
|
case State::CLIENT_HELLO:
|
||||||
|
return this->state_action_client_hello_();
|
||||||
|
case State::SERVER_HELLO:
|
||||||
|
return this->state_action_server_hello_();
|
||||||
|
case State::HANDSHAKE:
|
||||||
|
return this->state_action_handshake_();
|
||||||
|
case State::CLOSED:
|
||||||
|
case State::FAILED:
|
||||||
|
return APIError::BAD_STATE;
|
||||||
|
default:
|
||||||
|
return APIError::OK;
|
||||||
}
|
}
|
||||||
if (state_ == State::CLIENT_HELLO) {
|
}
|
||||||
|
APIError APINoiseFrameHelper::state_action_client_hello_() {
|
||||||
// waiting for client hello
|
// waiting for client hello
|
||||||
aerr = this->try_read_frame_();
|
APIError aerr = this->try_read_frame_();
|
||||||
if (aerr != APIError::OK) {
|
if (aerr != APIError::OK) {
|
||||||
return handle_handshake_frame_error_(aerr);
|
return handle_handshake_frame_error_(aerr);
|
||||||
}
|
}
|
||||||
@@ -269,8 +284,9 @@ APIError APINoiseFrameHelper::state_action_() {
|
|||||||
}
|
}
|
||||||
|
|
||||||
state_ = State::SERVER_HELLO;
|
state_ = State::SERVER_HELLO;
|
||||||
}
|
return APIError::OK;
|
||||||
if (state_ == State::SERVER_HELLO) {
|
}
|
||||||
|
APIError APINoiseFrameHelper::state_action_server_hello_() {
|
||||||
// send server hello
|
// send server hello
|
||||||
const auto &name = App.get_name();
|
const auto &name = App.get_name();
|
||||||
char mac[MAC_ADDRESS_BUFFER_SIZE];
|
char mac[MAC_ADDRESS_BUFFER_SIZE];
|
||||||
@@ -295,7 +311,7 @@ APIError APINoiseFrameHelper::state_action_() {
|
|||||||
// node mac, terminated by null byte
|
// node mac, terminated by null byte
|
||||||
std::memcpy(msg + mac_offset, mac, MAC_ADDRESS_BUFFER_SIZE);
|
std::memcpy(msg + mac_offset, mac, MAC_ADDRESS_BUFFER_SIZE);
|
||||||
|
|
||||||
aerr = write_frame_(msg, total_size);
|
APIError aerr = write_frame_(msg, total_size);
|
||||||
if (aerr != APIError::OK)
|
if (aerr != APIError::OK)
|
||||||
return aerr;
|
return aerr;
|
||||||
|
|
||||||
@@ -305,70 +321,66 @@ APIError APINoiseFrameHelper::state_action_() {
|
|||||||
return aerr;
|
return aerr;
|
||||||
|
|
||||||
state_ = State::HANDSHAKE;
|
state_ = State::HANDSHAKE;
|
||||||
}
|
return APIError::OK;
|
||||||
if (state_ == State::HANDSHAKE) {
|
}
|
||||||
int action = noise_handshakestate_get_action(handshake_);
|
APIError APINoiseFrameHelper::state_action_handshake_() {
|
||||||
|
int action = noise_handshakestate_get_action(this->handshake_);
|
||||||
if (action == NOISE_ACTION_READ_MESSAGE) {
|
if (action == NOISE_ACTION_READ_MESSAGE) {
|
||||||
// waiting for handshake msg
|
return this->state_action_handshake_read_();
|
||||||
aerr = this->try_read_frame_();
|
} else if (action == NOISE_ACTION_WRITE_MESSAGE) {
|
||||||
|
return this->state_action_handshake_write_();
|
||||||
|
}
|
||||||
|
// bad state for action
|
||||||
|
this->state_ = State::FAILED;
|
||||||
|
HELPER_LOG("Bad action for handshake: %d", action);
|
||||||
|
return APIError::HANDSHAKESTATE_BAD_STATE;
|
||||||
|
}
|
||||||
|
APIError APINoiseFrameHelper::state_action_handshake_read_() {
|
||||||
|
APIError aerr = this->try_read_frame_();
|
||||||
if (aerr != APIError::OK) {
|
if (aerr != APIError::OK) {
|
||||||
return handle_handshake_frame_error_(aerr);
|
return this->handle_handshake_frame_error_(aerr);
|
||||||
}
|
}
|
||||||
|
|
||||||
if (this->rx_buf_.empty()) {
|
if (this->rx_buf_.empty()) {
|
||||||
send_explicit_handshake_reject_(LOG_STR("Empty handshake message"));
|
this->send_explicit_handshake_reject_(LOG_STR("Empty handshake message"));
|
||||||
return APIError::BAD_HANDSHAKE_ERROR_BYTE;
|
return APIError::BAD_HANDSHAKE_ERROR_BYTE;
|
||||||
} else if (this->rx_buf_[0] != 0x00) {
|
} else if (this->rx_buf_[0] != 0x00) {
|
||||||
HELPER_LOG("Bad handshake error byte: %u", this->rx_buf_[0]);
|
HELPER_LOG("Bad handshake error byte: %u", this->rx_buf_[0]);
|
||||||
send_explicit_handshake_reject_(LOG_STR("Bad handshake error byte"));
|
this->send_explicit_handshake_reject_(LOG_STR("Bad handshake error byte"));
|
||||||
return APIError::BAD_HANDSHAKE_ERROR_BYTE;
|
return APIError::BAD_HANDSHAKE_ERROR_BYTE;
|
||||||
}
|
}
|
||||||
|
|
||||||
NoiseBuffer mbuf;
|
NoiseBuffer mbuf;
|
||||||
noise_buffer_init(mbuf);
|
noise_buffer_init(mbuf);
|
||||||
noise_buffer_set_input(mbuf, this->rx_buf_.data() + 1, this->rx_buf_.size() - 1);
|
noise_buffer_set_input(mbuf, this->rx_buf_.data() + 1, this->rx_buf_.size() - 1);
|
||||||
err = noise_handshakestate_read_message(handshake_, &mbuf, nullptr);
|
int err = noise_handshakestate_read_message(this->handshake_, &mbuf, nullptr);
|
||||||
if (err != 0) {
|
if (err != 0) {
|
||||||
// Special handling for MAC failure
|
// Special handling for MAC failure
|
||||||
send_explicit_handshake_reject_(err == NOISE_ERROR_MAC_FAILURE ? LOG_STR("Handshake MAC failure")
|
this->send_explicit_handshake_reject_(err == NOISE_ERROR_MAC_FAILURE ? LOG_STR("Handshake MAC failure")
|
||||||
: LOG_STR("Handshake error"));
|
: LOG_STR("Handshake error"));
|
||||||
return handle_noise_error_(err, LOG_STR("noise_handshakestate_read_message"),
|
return this->handle_noise_error_(err, LOG_STR("noise_handshakestate_read_message"),
|
||||||
APIError::HANDSHAKESTATE_READ_FAILED);
|
APIError::HANDSHAKESTATE_READ_FAILED);
|
||||||
}
|
}
|
||||||
|
|
||||||
aerr = check_handshake_finished_();
|
return this->check_handshake_finished_();
|
||||||
if (aerr != APIError::OK)
|
}
|
||||||
return aerr;
|
APIError APINoiseFrameHelper::state_action_handshake_write_() {
|
||||||
} else if (action == NOISE_ACTION_WRITE_MESSAGE) {
|
|
||||||
uint8_t buffer[65];
|
uint8_t buffer[65];
|
||||||
NoiseBuffer mbuf;
|
NoiseBuffer mbuf;
|
||||||
noise_buffer_init(mbuf);
|
noise_buffer_init(mbuf);
|
||||||
noise_buffer_set_output(mbuf, buffer + 1, sizeof(buffer) - 1);
|
noise_buffer_set_output(mbuf, buffer + 1, sizeof(buffer) - 1);
|
||||||
|
|
||||||
err = noise_handshakestate_write_message(handshake_, &mbuf, nullptr);
|
int err = noise_handshakestate_write_message(this->handshake_, &mbuf, nullptr);
|
||||||
APIError aerr_write = handle_noise_error_(err, LOG_STR("noise_handshakestate_write_message"),
|
APIError aerr = this->handle_noise_error_(err, LOG_STR("noise_handshakestate_write_message"),
|
||||||
APIError::HANDSHAKESTATE_WRITE_FAILED);
|
APIError::HANDSHAKESTATE_WRITE_FAILED);
|
||||||
if (aerr_write != APIError::OK)
|
if (aerr != APIError::OK)
|
||||||
return aerr_write;
|
return aerr;
|
||||||
buffer[0] = 0x00; // success
|
buffer[0] = 0x00; // success
|
||||||
|
|
||||||
aerr = write_frame_(buffer, mbuf.size + 1);
|
aerr = this->write_frame_(buffer, mbuf.size + 1);
|
||||||
if (aerr != APIError::OK)
|
if (aerr != APIError::OK)
|
||||||
return aerr;
|
return aerr;
|
||||||
aerr = check_handshake_finished_();
|
return this->check_handshake_finished_();
|
||||||
if (aerr != APIError::OK)
|
|
||||||
return aerr;
|
|
||||||
} else {
|
|
||||||
// bad state for action
|
|
||||||
state_ = State::FAILED;
|
|
||||||
HELPER_LOG("Bad action for handshake: %d", action);
|
|
||||||
return APIError::HANDSHAKESTATE_BAD_STATE;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if (state_ == State::CLOSED || state_ == State::FAILED) {
|
|
||||||
return APIError::BAD_STATE;
|
|
||||||
}
|
|
||||||
return APIError::OK;
|
|
||||||
}
|
}
|
||||||
void APINoiseFrameHelper::send_explicit_handshake_reject_(const LogString *reason) {
|
void APINoiseFrameHelper::send_explicit_handshake_reject_(const LogString *reason) {
|
||||||
// Max reject message: "Bad handshake packet len" (24) + 1 (failure byte) = 25 bytes
|
// Max reject message: "Bad handshake packet len" (24) + 1 (failure byte) = 25 bytes
|
||||||
|
|||||||
@@ -26,6 +26,11 @@ class APINoiseFrameHelper final : public APIFrameHelper {
|
|||||||
|
|
||||||
protected:
|
protected:
|
||||||
APIError state_action_();
|
APIError state_action_();
|
||||||
|
APIError state_action_client_hello_();
|
||||||
|
APIError state_action_server_hello_();
|
||||||
|
APIError state_action_handshake_();
|
||||||
|
APIError state_action_handshake_read_();
|
||||||
|
APIError state_action_handshake_write_();
|
||||||
APIError try_read_frame_();
|
APIError try_read_frame_();
|
||||||
APIError write_frame_(const uint8_t *data, uint16_t len);
|
APIError write_frame_(const uint8_t *data, uint16_t len);
|
||||||
APIError init_handshake_();
|
APIError init_handshake_();
|
||||||
|
|||||||
Reference in New Issue
Block a user