Some checks failed
Server CI / Postgres (shard 0) (push) Has been skipped
Server CI / Postgres (shard 3) (push) Has been skipped
BuildEnv Docker Image / build-image (push) Failing after 4s
BuildEnv Docker Image / build-image-fips (push) Failing after 4s
Migration Review & Release Notes / Generate migration review & release notes (push) Failing after 3s
Server CI / Build Environment (push) Failing after 3s
Server CI / Postgres (shard 1) (push) Has been skipped
Tools CI / check-style (mattermost-govet) (push) Failing after 4s
Server CI / Postgres (shard 2) (push) Has been skipped
Tools CI / check-style (mmgotool) (push) Failing after 3s
Server CI / Elasticsearch v8 Compatibility (push) Has been skipped
Server CI / OpenSearch v2 Compatibility (push) Has been skipped
Server CI / Postgres FIPS (shard 0) (push) Has been skipped
Tools CI / Test (mattermost-govet) (push) Failing after 3s
Server CI / Postgres FIPS (shard 1) (push) Has been skipped
Server CI / Postgres FIPS (shard 2) (push) Has been skipped
Tools CI / Test (mmgotool) (push) Failing after 3s
Server CI / Postgres FIPS (shard 3) (push) Has been skipped
Server CI / Run mmctl tests (push) Has been skipped
Server CI / Run mmctl tests (FIPS) (push) Has been skipped
Server CI / Merge Postgres Test Results (push) Has been skipped
Server CI / Merge Postgres FIPS Test Results (push) Has been skipped
Server CI / Check backport migrations (push) Has been skipped
Server CI / Check generated files (push) Has been skipped
Server CI / check-style (push) Has been skipped
Server CI / Vet API (push) Has been skipped
Server CI / Build mattermost server app (push) Has been skipped
Server CI / Server CI Complete (push) Failing after 2s
Server CI / Server CI Artifacts (push) Has been skipped
Server CI / Sentry Upload (push) Has been skipped
Server CI / Server CI Report (push) Failing after 5m1s
Server CI Nightly Race / Race Detector (push) Has been skipped
CodeQL / Analyze (go) (push) Has been cancelled
CodeQL / Analyze (javascript) (push) Has been cancelled
Webapp CI Cache Warm / Warm Webapp node_modules Cache (push) Has been cancelled
E2E CI Cache Warm / Warm E2E npm Registry Cache (push) Has been cancelled
API / build (push) Has been cancelled
Web App CI / check-types (push) Has been cancelled
Web App CI / check-lint (push) Has been cancelled
Web App CI / check-i18n (push) Has been cancelled
Web App CI / check-external-links (push) Has been cancelled
Web App CI / test (platform) (push) Has been cancelled
Web App CI / test (mattermost-redux) (push) Has been cancelled
Web App CI / test (channels shard 1/4) (push) Has been cancelled
Web App CI / test (channels shard 2/4) (push) Has been cancelled
Web App CI / test (channels shard 3/4) (push) Has been cancelled
Web App CI / test (channels shard 4/4) (push) Has been cancelled
Web App CI / upload-coverage (push) Has been cancelled
Web App CI / build (push) Has been cancelled
YAML Lint / yamllint (push) Has been cancelled
Push mirrored docker images / cd/Push mirrored docker images (push) Has been cancelled
docs-cd / Build and deploy docs (push) Has been cancelled
Docs CI / build (push) Has been cancelled
E2E Cache Warm: Cypress deps / Warm Cypress deps cache (push) Has been cancelled
Scorecards supply-chain security / Scorecard analysis (push) Has been cancelled
Server CI Weekly / Postgres FIPS (push) Has been skipped
Server CI Weekly / Run mmctl tests (FIPS) (push) Has been skipped
Server CI Weekly / Postgres with binary parameters (push) Has been skipped
Server CI Weekly / Build Environment (push) Failing after 1s
Server CI Cache Warm / Warm Go Module and Build Cache (push) Failing after 2s
Server CI Nightly Race / Build Environment (push) Failing after 1s
206 lines
4.3 KiB
Go
206 lines
4.3 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package plugin
|
|
|
|
import (
|
|
"bufio"
|
|
"errors"
|
|
"net"
|
|
"net/http"
|
|
"net/rpc"
|
|
"time"
|
|
)
|
|
|
|
const (
|
|
hijackedConnReadBufSize = 4096
|
|
)
|
|
|
|
var (
|
|
ErrNotHijacked = errors.New("response is not hijacked")
|
|
ErrAlreadyHijacked = errors.New("response was already hijacked")
|
|
ErrCannotHijack = errors.New("response cannot be hijacked")
|
|
)
|
|
|
|
func (w *httpResponseWriterRPCServer) HjConnRWRead(b []byte, reply *[]byte) error {
|
|
if w.hjr == nil {
|
|
return ErrNotHijacked
|
|
}
|
|
data := make([]byte, len(b))
|
|
n, err := w.hjr.bufrw.Read(data)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
*reply = data[:n]
|
|
return nil
|
|
}
|
|
|
|
func (w *httpResponseWriterRPCServer) HjConnRWWrite(b []byte, reply *int) error {
|
|
if w.hjr == nil {
|
|
return ErrNotHijacked
|
|
}
|
|
n, err := w.hjr.bufrw.Write(b)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
*reply = n
|
|
return nil
|
|
}
|
|
|
|
func (w *httpResponseWriterRPCServer) HjConnRead(size int, reply *[]byte) error {
|
|
if w.hjr == nil {
|
|
return ErrNotHijacked
|
|
}
|
|
if len(w.hjr.readBuf) < size {
|
|
w.hjr.readBuf = make([]byte, size)
|
|
}
|
|
n, err := w.hjr.conn.Read(w.hjr.readBuf[:size])
|
|
if err != nil {
|
|
return err
|
|
}
|
|
*reply = w.hjr.readBuf[:n]
|
|
return nil
|
|
}
|
|
|
|
func (w *httpResponseWriterRPCServer) HjConnWrite(b []byte, reply *int) error {
|
|
if w.hjr == nil {
|
|
return ErrNotHijacked
|
|
}
|
|
n, err := w.hjr.conn.Write(b)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
*reply = n
|
|
return nil
|
|
}
|
|
|
|
func (w *httpResponseWriterRPCServer) HjConnClose(args struct{}, reply *struct{}) error {
|
|
if w.hjr == nil {
|
|
return ErrNotHijacked
|
|
}
|
|
return w.hjr.conn.Close()
|
|
}
|
|
|
|
func (w *httpResponseWriterRPCServer) HjConnSetDeadline(t time.Time, reply *struct{}) error {
|
|
if w.hjr == nil {
|
|
return ErrNotHijacked
|
|
}
|
|
return w.hjr.conn.SetDeadline(t)
|
|
}
|
|
|
|
func (w *httpResponseWriterRPCServer) HjConnSetReadDeadline(t time.Time, reply *struct{}) error {
|
|
if w.hjr == nil {
|
|
return ErrNotHijacked
|
|
}
|
|
return w.hjr.conn.SetReadDeadline(t)
|
|
}
|
|
|
|
func (w *httpResponseWriterRPCServer) HjConnSetWriteDeadline(t time.Time, reply *struct{}) error {
|
|
if w.hjr == nil {
|
|
return ErrNotHijacked
|
|
}
|
|
return w.hjr.conn.SetWriteDeadline(t)
|
|
}
|
|
|
|
func (w *httpResponseWriterRPCServer) HijackResponse(args struct{}, reply *struct{}) error {
|
|
if w.hjr != nil {
|
|
return ErrAlreadyHijacked
|
|
}
|
|
hj, ok := w.w.(http.Hijacker)
|
|
if !ok {
|
|
return ErrCannotHijack
|
|
}
|
|
conn, bufrw, err := hj.Hijack()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
w.hjr = &hijackedResponse{
|
|
conn: conn,
|
|
bufrw: bufrw,
|
|
readBuf: make([]byte, hijackedConnReadBufSize),
|
|
}
|
|
return nil
|
|
}
|
|
|
|
type hijackedConn struct {
|
|
client *rpc.Client
|
|
}
|
|
|
|
type hijackedConnRW struct {
|
|
client *rpc.Client
|
|
}
|
|
|
|
func (w *hijackedConnRW) Read(b []byte) (int, error) {
|
|
var data []byte
|
|
if err := w.client.Call("Plugin.HjConnRWRead", b, &data); err != nil {
|
|
return 0, err
|
|
}
|
|
copy(b, data)
|
|
return len(data), nil
|
|
}
|
|
|
|
func (w *hijackedConnRW) Write(b []byte) (int, error) {
|
|
var n int
|
|
if err := w.client.Call("Plugin.HjConnRWWrite", b, &n); err != nil {
|
|
return 0, err
|
|
}
|
|
return n, nil
|
|
}
|
|
|
|
func (w *hijackedConn) Read(b []byte) (int, error) {
|
|
var data []byte
|
|
if err := w.client.Call("Plugin.HjConnRead", len(b), &data); err != nil {
|
|
return 0, err
|
|
}
|
|
copy(b, data)
|
|
return len(data), nil
|
|
}
|
|
|
|
func (w *hijackedConn) Write(b []byte) (int, error) {
|
|
var n int
|
|
if err := w.client.Call("Plugin.HjConnWrite", b, &n); err != nil {
|
|
return 0, err
|
|
}
|
|
return n, nil
|
|
}
|
|
|
|
func (w *hijackedConn) Close() error {
|
|
return w.client.Call("Plugin.HjConnClose", struct{}{}, nil)
|
|
}
|
|
|
|
func (w *hijackedConn) LocalAddr() net.Addr {
|
|
return nil
|
|
}
|
|
|
|
func (w *hijackedConn) RemoteAddr() net.Addr {
|
|
return nil
|
|
}
|
|
|
|
func (w *hijackedConn) SetDeadline(t time.Time) error {
|
|
return w.client.Call("Plugin.HjConnSetDeadline", t, nil)
|
|
}
|
|
|
|
func (w *hijackedConn) SetReadDeadline(t time.Time) error {
|
|
return w.client.Call("Plugin.HjConnSetReadDeadline", t, nil)
|
|
}
|
|
|
|
func (w *hijackedConn) SetWriteDeadline(t time.Time) error {
|
|
return w.client.Call("Plugin.HjConnSetWriteDeadline", t, nil)
|
|
}
|
|
|
|
func (w *httpResponseWriterRPCClient) Hijack() (net.Conn, *bufio.ReadWriter, error) {
|
|
c := &hijackedConn{
|
|
client: w.client,
|
|
}
|
|
rw := &hijackedConnRW{
|
|
client: w.client,
|
|
}
|
|
|
|
if err := w.client.Call("Plugin.HijackResponse", struct{}{}, nil); err != nil {
|
|
return nil, nil, err
|
|
}
|
|
|
|
return c, bufio.NewReadWriter(bufio.NewReader(rw), bufio.NewWriter(rw)), nil
|
|
}
|