GCOV - Varnish Cache


/*-
 * Copyright (c) 2008-2016 Varnish Software AS
 * All rights reserved.
 *
 * Author: Guillaume Quintard <guillaume.quintard@gmail.com>
 *
 * SPDX-License-Identifier: BSD-2-Clause
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#include "config.h"

#include <sys/socket.h>

#include <math.h>
#include <poll.h>
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <string.h>
#include <netinet/in.h>

#include "vtc.h"
#include "vtc_http.h"

#include "vfil.h"
#include "hpack.h"
#include "vend.h"

#define ERR_MAX         13
#define BUF_SIZE        (1024*2048)

static const char *const h2_errs[] = {
#define H2_ERROR(n,v,sc,g,r,t) [v] = #n,
#include <tbl/h2_error.h>
        NULL
};

static const char *const h2_types[] = {
#define H2_FRAME(l,u,t,f,...) [t] = #u,
#include <tbl/h2_frames.h>
        NULL
};

static const char * const h2_settings[] = {
        [0] = "unknown",
#define H2_SETTING(U,l,v,...) [v] = #U,
#include <tbl/h2_settings.h>
        NULL
};

enum h2_settings_e {
#define H2_SETTING(U,l,v,...) SETTINGS_##U = v,
#include <tbl/h2_settings.h>
        SETTINGS_MAX
};


enum h2_type_e {
#define H2_FRAME(l,u,t,f,...) TYPE_##u = t,
#include <tbl/h2_frames.h>
        TYPE_MAX
};

//lint -save -e849      Same enum value
enum {
        ACK = 0x1,
        END_STREAM = 0x1,
        PADDED = 0x8,
        END_HEADERS = 0x4,
        PRIORITY = 0x20,
};
//lint -restore

struct stream {
        unsigned                magic;
#define STREAM_MAGIC            0x63f1fac2
        uint32_t                id;
        struct vtclog           *vl;
        char                    *spec;
        char                    *name;
        VTAILQ_ENTRY(stream)    list;
        unsigned                running;
        pthread_cond_t          cond;
        struct frame            *frame;
        pthread_t               tp;
        struct http             *hp;
        int64_t                 win_self;
        int64_t                 win_peer;
        int                     wf;

        VTAILQ_HEAD(, frame)   fq;

        char                    *body;
        long                    bodylen;
        struct hpk_hdr          req[MAX_HDR];
        struct hpk_hdr          resp[MAX_HDR];

        int                     dependency;
        int                     weight;
};

static void
clean_headers(struct hpk_hdr *h)
{
        unsigned n = MAX_HDR;

        while (h->t && n > 0) {
                if (h->key.len)
                        free(h->key.ptr);
                free(h->value.ptr);
                memset(h, 0, sizeof(*h));
                h++;
                n--;
        }
}

#define ONLY_H2_CLIENT(hp, av)                                          \
        do {                                                            \
                if (hp->sfd != NULL)                                    \
                        vtc_fatal(s->vl,                                \
                            "\"%s\" only possible in client", av[0]);   \
        } while (0)

#define ONLY_H2_SERVER(hp, av)                                          \
        do {                                                            \
                if (hp->sfd == NULL)                                    \
                        vtc_fatal(s->vl,                                \
                            "\"%s\" only possible in server", av[0]);   \
        } while (0)

static void
http_write(const struct http *hp, int lvl,
    const char *buf, int s, const char *pfx)
{
        ssize_t l;

        CHECK_OBJ_NOTNULL(hp, HTTP_MAGIC);
        AN(buf);
        AN(pfx);

        vtc_dump(hp->vl, lvl, pfx, buf, s);
        l = write(*hp->sess->fd, buf, s);
        if (l != s)
                vtc_log(hp->vl, hp->fatal, "Write failed: (%zd vs %d) %s",
                    l, s, strerror(errno));
}

static int
get_bytes(const struct http *hp, char *buf, size_t n)
{
        int i;
        struct pollfd pfd[1];

        CHECK_OBJ_NOTNULL(hp, HTTP_MAGIC);
        AN(buf);

        while (n > 0) {
                pfd[0].fd = *hp->sess->fd;
                pfd[0].events = POLLIN;
                pfd[0].revents = 0;
                i = poll(pfd, 1, (int)(hp->timeout * 1000));
                if (i < 0 && errno == EINTR)
                        continue;
                if (i == 0)
                        vtc_log(hp->vl, 3,
                            "HTTP2 rx timeout (fd:%d %.3fs)",
                            *hp->sess->fd, hp->timeout);
                if (i < 0)
                        vtc_log(hp->vl, 3,
                            "HTTP2 rx failed (fd:%d poll: %s)",
                            *hp->sess->fd, strerror(errno));
                if (i <= 0)
                        return (i);
                i = read(*hp->sess->fd, buf, n);
                if (!(pfd[0].revents & POLLIN))
                        vtc_log(hp->vl, 4,
                            "HTTP2 rx poll (fd:%d revents: %x n=%zu, i=%d)",
                            *hp->sess->fd, pfd[0].revents, n, i);
                if (i == 0)
                        vtc_log(hp->vl, 3,
                            "HTTP2 rx EOF (fd:%d read: %s)",
                            *hp->sess->fd, strerror(errno));
                if (i < 0)
                        vtc_log(hp->vl, 3,
                            "HTTP2 rx failed (fd:%d read: %s)",
                            *hp->sess->fd, strerror(errno));
                if (i <= 0)
                        return (i);
                n -= i;
        }
        return (1);

}

VTAILQ_HEAD(fq_head, frame);

struct frame {
        unsigned        magic;
#define FRAME_MAGIC     0x5dd3ec4
        uint32_t        size;
        uint32_t        stid;
        uint8_t         type;
        uint8_t         flags;
        char            *data;

        VTAILQ_ENTRY(frame)    list;

        union {
                struct {
                        uint32_t stream;
                        uint8_t  exclusive;
                        uint8_t  weight;
                }               prio;
                uint32_t        rst_err;
                double settings[SETTINGS_MAX+1];
                struct {
                        char data[9];
                        int ack;
                }               ping;
                struct {
                        uint32_t err;
                        uint32_t stream;
                        char     *debug;
                }               goaway;
                uint32_t        winup_size;
                uint32_t        promised;
                uint8_t         padded;
        } md;
};

static void
readFrameHeader(struct frame *f, const char *buf)
{
        CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
        AN(buf);

        f->size  = (unsigned char)buf[0] << 16;
        f->size += (unsigned char)buf[1] << 8;
        f->size += (unsigned char)buf[2];

        f->type = (unsigned char)buf[3];

        f->flags = (unsigned char)buf[4];

        f->stid  = vbe32dec(buf+5);
}

static void
writeFrameHeader(char *buf, const struct frame *f)
{
        CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
        AN(buf);
        buf[0] = (f->size >> 16) & 0xff;
        buf[1] = (f->size >>  8) & 0xff;
        buf[2] = (f->size      ) & 0xff;

        buf[3] = f->type;

        buf[4] = f->flags;

        vbe32enc(buf + 5, f->stid);
}

#define INIT_FRAME(f, ty, sz, id, fl) \
do { \
        f.magic = FRAME_MAGIC; \
        f.type = TYPE_ ## ty; \
        f.size = sz; \
        f.stid = id; \
        f.flags = fl; \
        f.data = NULL; \
} while(0)

static void
replace_frame(struct frame **fp, struct frame *new)
{
        struct frame *old;

        AN(fp);
        CHECK_OBJ_ORNULL(new, FRAME_MAGIC);

        old = *fp;
        *fp = new;
        if (old == NULL)
                return;

        CHECK_OBJ(old, FRAME_MAGIC);
        if (old->type == TYPE_GOAWAY)
                free(old->md.goaway.debug);
        free(old->data);
        FREE_OBJ(old);
}

static void
clean_frame(struct frame **fp)
{

        replace_frame(fp, NULL);
}

static void
write_frame(struct stream *sp, const struct frame *f, const unsigned lock)
{
        struct http *hp;
        ssize_t l;
        char hdr[9];

        CHECK_OBJ_NOTNULL(sp, STREAM_MAGIC);
        hp = sp->hp;
        CHECK_OBJ_NOTNULL(hp, HTTP_MAGIC);
        CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);

        writeFrameHeader(hdr, f);

        vtc_log(sp->vl, 3,
            "tx: stream: %d, type: %s (%d), flags: 0x%02x, size: %d",
            f->stid,
            f->type < TYPE_MAX ? h2_types[f->type] : "?",
            f->type, f->flags, f->size);

        if (f->type == TYPE_DATA) {
                sp->win_peer -= f->size;
                hp->h2_win_peer->size -= f->size;
        }

        if (lock)
                PTOK(pthread_mutex_lock(&hp->mtx));
        l = write(*hp->sess->fd, hdr, sizeof(hdr));
        if (l != sizeof(hdr))
                vtc_log(sp->vl, hp->fatal, "Write failed: (%zd vs %zd) %s",
                    l, sizeof(hdr), strerror(errno));

        if (f->size) {
                AN(f->data);
                l = write(*hp->sess->fd, f->data, f->size);
                if (l != f->size)
                        vtc_log(sp->vl, hp->fatal,
                                        "Write failed: (%zd vs %d) %s",
                                        l, f->size, strerror(errno));
        }
        if (lock)
                PTOK(pthread_mutex_unlock(&hp->mtx));
}

static void
exclusive_stream_dependency(const struct stream *s)
{
        struct stream *target;
        struct http *hp = s->hp;

        if (s->id == 0)
                return;

        VTAILQ_FOREACH(target, &hp->streams, list) {
                if (target->id != s->id && target->dependency == s->dependency)
                        target->dependency = s->id;
        }
}

static void
explain_flags(uint8_t flags, uint8_t type, struct vtclog *vl)
{
        if (flags & ACK && (type == TYPE_PING || type == TYPE_SETTINGS)) {
                vtc_log(vl, 3, "flag: ACK");
        } else if (flags & END_STREAM && (type == TYPE_HEADERS ||
            type == TYPE_PUSH_PROMISE || type == TYPE_DATA)) {
                vtc_log(vl, 3, "flag: END_STREAM");
        } else if (flags & END_HEADERS && (type == TYPE_HEADERS ||
            type == TYPE_PUSH_PROMISE || type == TYPE_CONTINUATION)) {
                vtc_log(vl, 3, "flag: END_TYPE_HEADERS");
        } else if (flags & PRIORITY && (type == TYPE_HEADERS ||
            type == TYPE_PUSH_PROMISE)) {
                vtc_log(vl, 3, "flag: END_PRIORITY");
        } else if (flags & PADDED && (type == TYPE_DATA || type ==
            TYPE_HEADERS || type == TYPE_PUSH_PROMISE)) {
                vtc_log(vl, 3, "flag: PADDED");
        } else if (flags)
                vtc_log(vl, 3, "UNKNOWN FLAG(S): 0x%02x", flags);
}

static void
parse_data(struct stream *s, struct frame *f)
{
        struct http *hp;
        uint32_t size = f->size;
        char *data = f->data;

        CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
        CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);
        CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);;

        if (f->flags & PADDED) {
                f->md.padded = *((uint8_t *)data);
                if (f->md.padded >= size) {
                        vtc_log(s->vl, hp->fatal,
                                        "invalid padding: %d reported,"
                                        "but size is only %d",
                                        f->md.padded, size);
                        size = 0;
                        f->md.padded = 0;
                }
                data++;
                size -= f->md.padded + 1;
                vtc_log(s->vl, 4, "padding: %3d", f->md.padded);
        }

        if (s->id)
                s->win_self -= size;

        s->hp->h2_win_self->size -= size;

        if (!size) {
                AZ(data);
                vtc_log(s->vl, 4, "s%u - no data", s->id);
                return;
        }

        s->body = realloc(s->body, s->bodylen + size + 1L);
        AN(s->body);
        memcpy(s->body + s->bodylen, data, size);
        s->bodylen += size;
        s->body[s->bodylen] = '\0';
}

static void
decode_hdr(struct http *hp, struct hpk_hdr *h, const struct vsb *vsb)
{
        struct hpk_iter *iter;
        enum hpk_result r = hpk_err;
        int n;

        CHECK_OBJ_NOTNULL(vsb, VSB_MAGIC);
        CAST_OBJ_NOTNULL(hp, hp, HTTP_MAGIC);;

        if (VSB_len(vsb) == 0)
                return;

        iter = HPK_NewIter(hp->decctx, VSB_data(vsb), VSB_len(vsb));

        n = 0;
        while (n < MAX_HDR && h[n].t)
                n++;
        while (n < MAX_HDR) {
                r = HPK_DecHdr(iter, h + n);
                if (r == hpk_err )
                        break;
                vtc_log(hp->vl, 4, "header[%2d]: %s: %s",
                    n, h[n].key.ptr, h[n].value.ptr);
                n++;
                if (r == hpk_done)
                        break;
        }

        if (r != hpk_done) {
                vtc_log(hp->vl, hp->fatal ? 4 : 0,
                    "Header decoding failed (%d) %d", r, hp->fatal);
        } else if (n == MAX_HDR) {
                vtc_log(hp->vl, hp->fatal,
                    "Max number of headers reached (%d)", MAX_HDR);
        }

        HPK_FreeIter(iter);
}

static void
parse_hdr(struct stream *s, struct frame *f, struct vsb *vsb)
{
        int shift = 0;
        int exclusive = 0;
        uint32_t size = f->size;
        char *data = f->data;
        struct http *hp;
        uint32_t n;

        CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
        CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);
        CHECK_OBJ_NOTNULL(vsb, VSB_MAGIC);
        CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);;

        if (f->flags & PADDED && f->type != TYPE_CONTINUATION) {
                f->md.padded = *((uint8_t *)data);
                if (f->md.padded >= size) {
                        vtc_log(s->vl, hp->fatal,
                                        "invalid padding: %d reported,"
                                        "but size is only %d",
                                        f->md.padded, size);
                        size = 0;
                        f->md.padded = 0;
                }
                shift += 1;
                size -= f->md.padded;
                vtc_log(s->vl, 4, "padding: %3d", f->md.padded);
        }

        if (f->type == TYPE_HEADERS && f->flags & PRIORITY){
                shift += 5;
                n = vbe32dec(f->data);
                s->dependency = n & ~(1U << 31);
                exclusive = n >> 31;

                s->weight = f->data[4];
                if (exclusive)
                        exclusive_stream_dependency(s);

                vtc_log(s->vl, 4, "stream->dependency: %u", s->dependency);
                vtc_log(s->vl, 4, "stream->weight: %u", s->weight);
        } else if (f->type == TYPE_PUSH_PROMISE){
                shift += 4;
                n = vbe32dec(f->data);
                f->md.promised = n & ~(1U << 31);
        }

        AZ(VSB_bcat(vsb, data + shift, size - shift));
}

static void
parse_prio(struct stream *s, struct frame *f)
{
        struct http *hp;
        char *buf;
        uint32_t n;

        CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
        CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);
        CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);;

        if (f->size != 5)
                vtc_fatal(s->vl, "Size should be 5, but isn't (%d)", f->size);

        buf = f->data;
        AN(buf);

        n = vbe32dec(f->data);
        f->md.prio.stream = n & ~(1U << 31);

        s->dependency = f->md.prio.stream;
        if (n >> 31){
                f->md.prio.exclusive = 1;
                exclusive_stream_dependency(s);
        }

        buf += 4;
        f->md.prio.weight = *buf;
        s->weight = f->md.prio.weight;

        vtc_log(s->vl, 3, "prio->stream: %u", f->md.prio.stream);
        vtc_log(s->vl, 3, "prio->weight: %u", f->md.prio.weight);
}

static void
parse_rst(const struct stream *s, struct frame *f)
{
        struct http *hp;
        uint32_t err;
        const char *buf;
        CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
        CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);
        CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);;

        if (f->size != 4)
                vtc_fatal(s->vl, "Size should be 4, but isn't (%d)", f->size);

        err = vbe32dec(f->data);
        f->md.rst_err = err;

        vtc_log(s->vl, 2, "ouch");
        if (err <= ERR_MAX)
                buf = h2_errs[err];
        else
                buf = "unknown";
        vtc_log(s->vl, 4, "rst->err: %s (%d)", buf, err);

}

static void
parse_settings(const struct stream *s, struct frame *f)
{
        struct http *hp;
        int v;
        unsigned u, t;
        const char *buf;
        enum hpk_result r;
        CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
        CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);
        CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);;

        if (f->size % 6)
                vtc_fatal(s->vl,
                    "Size should be a multiple of 6, but isn't (%d)", f->size);

        if (s->id != 0)
                vtc_fatal(s->vl,
                    "Setting frames should only be on stream 0, but received on stream: %d", s->id);

        for (u = 0; u <= SETTINGS_MAX; u++)
                f->md.settings[u] = NAN;

        for (u = 0; u < f->size;) {
                t = vbe16dec(f->data + u);
                u += 2;
                v = vbe32dec(f->data + u);
                if (t <= SETTINGS_MAX) {
                        buf = h2_settings[t];
                        f->md.settings[t] = v;
                } else
                        buf = "unknown";
                u += 4;

                if (t == SETTINGS_HEADER_TABLE_SIZE) {
                        r = HPK_ResizeTbl(s->hp->encctx, v);
                        assert(r == hpk_done);
                }

                vtc_log(s->vl, 4, "settings->%s (%u): %d", buf, t, v);
        }

}

static void
parse_ping(const struct stream *s, struct frame *f)
{
        struct http *hp;
        CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
        CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);
        CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);;
        if (f->size != 8)
                vtc_fatal(s->vl, "Size should be 8, but isn't (%d)", f->size);
        f->md.ping.ack = f->flags & ACK;
        memcpy(f->md.ping.data, f->data, 8);
        f->md.ping.data[8] = '\0';

        vtc_log(s->vl, 4, "ping->data: %s", f->md.ping.data);

}

static void
parse_goaway(const struct stream *s, struct frame *f)
{
        struct http *hp;
        const char *err_buf;
        uint32_t err, stid;
        CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
        CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);
        CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);;

        if (f->size < 8)
                vtc_fatal(s->vl,
                    "Size should be at least 8, but isn't (%d)", f->size);
        if (f->data[0] & (1<<7))
                vtc_fatal(s->vl,
                    "First bit of data is reserved and should be 0");

        stid = vbe32dec(f->data);
        err = vbe32dec(f->data + 4);
        f->md.goaway.err = err;
        f->md.goaway.stream = stid;

        if (err <= ERR_MAX)
                err_buf = h2_errs[err];
        else
                err_buf = "unknown";

        if (f->size > 8) {
                f->md.goaway.debug = malloc((f->size - 8) + 1L);
                AN(f->md.goaway.debug);
                f->md.goaway.debug[f->size - 8] = '\0';

                memcpy(f->md.goaway.debug, f->data + 8, f->size - 8);
        }

        vtc_log(s->vl, 3, "goaway->laststream: %d", stid);
        vtc_log(s->vl, 3, "goaway->err: %s (%d)", err_buf, err);
        if (f->md.goaway.debug)
                vtc_log(s->vl, 3, "goaway->debug: %s", f->md.goaway.debug);
}

static void
parse_winup(const struct stream *s, struct frame *f)
{
        struct http *hp;
        uint32_t size;
        CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
        CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);
        CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);;

        if (f->size != 4)
                vtc_fatal(s->vl, "Size should be 4, but isn't (%d)", f->size);
        if (f->data[0] & (1<<7))
                vtc_log(s->vl, s->hp->fatal,
                    "First bit of data is reserved and should be 0");

        size = vbe32dec(f->data);
        f->md.winup_size = size;

        vtc_log(s->vl, 3, "winup->size: %d", size);
}

/* read a frame and queue it in the relevant stream, wait if not present yet.
 */
static void *
receive_frame(void *priv)
{
        struct http *hp;
        char hdr[9];
        struct frame *f;
        struct stream *s;
        int expect_cont = 0;
        struct vsb *vsb = NULL;
        struct hpk_hdr *hdrs = NULL;

        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);

        PTOK(pthread_mutex_lock(&hp->mtx));
        while (hp->h2) {
                /*no wanted frames? */
                assert(hp->wf >= 0);
                if (hp->wf == 0) {
                        PTOK(pthread_cond_wait(&hp->cond, &hp->mtx));
                        continue;
                }
                PTOK(pthread_mutex_unlock(&hp->mtx));

                if (get_bytes(hp, hdr, sizeof hdr) <= 0) {
                        PTOK(pthread_mutex_lock(&hp->mtx));
                        VTAILQ_FOREACH(s, &hp->streams, list)
                                PTOK(pthread_cond_signal(&s->cond));
                        PTOK(pthread_mutex_unlock(&hp->mtx));
                        vtc_log(hp->vl, hp->fatal,
                            "could not get frame header");
                        return (NULL);
                }
                ALLOC_OBJ(f, FRAME_MAGIC);
                AN(f);
                readFrameHeader(f, hdr);

                vtc_log(hp->vl, 3, "rx: stream: %d, type: %s (%d), "
                                "flags: 0x%02x, size: %d",
                                f->stid,
                                f->type < TYPE_MAX ? h2_types[f->type] : "?",
                                f->type, f->flags, f->size);
                explain_flags(f->flags, f->type, hp->vl);

                if (f->size) {
                        f->data = malloc(f->size + 1L);
                        AN(f->data);
                        f->data[f->size] = '\0';
                        if (get_bytes(hp, f->data, f->size) <= 0) {
                                PTOK(pthread_mutex_lock(&hp->mtx));
                                VTAILQ_FOREACH(s, &hp->streams, list)
                                        PTOK(pthread_cond_signal(&s->cond));
                                clean_frame(&f);
                                PTOK(pthread_mutex_unlock(&hp->mtx));
                                vtc_log(hp->vl, hp->fatal,
                                    "could not get frame body");
                                return (NULL);
                        }
                }

                /* is the corresponding stream waiting? */
                PTOK(pthread_mutex_lock(&hp->mtx));
                s = NULL;
                while (!s) {
                        VTAILQ_FOREACH(s, &hp->streams, list)
                                if (s->id == f->stid)
                                        break;
                        if (!s)
                                PTOK(pthread_cond_wait(&hp->cond, &hp->mtx));
                        if (!hp->h2) {
                                clean_frame(&f);
                                PTOK(pthread_mutex_unlock(&hp->mtx));
                                return (NULL);
                        }
                }
                PTOK(pthread_mutex_unlock(&hp->mtx));

                AN(s);
                if (expect_cont &&
                    (f->type != TYPE_CONTINUATION || expect_cont != s->id))
                        vtc_fatal(s->vl, "Expected CONTINUATION frame for "
                            "stream %u", expect_cont);

                /* parse the frame according to it type, and fill the metadata */
                switch (f->type) {
                        case TYPE_DATA:
                                parse_data(s, f);
                                break;
                        case TYPE_PUSH_PROMISE:
                                hdrs = s->req;
                                /*FALLTHROUGH*/
                        case TYPE_HEADERS:
                                if (!hdrs) {
                                        if (hp->sfd)
                                                hdrs = s->req;
                                        else
                                                hdrs = s->resp;
                                }
                                clean_headers(hdrs);
                                hdrs[0].t = hpk_unset;
                                AZ(vsb);
                                vsb = VSB_new_auto();
                                /*FALLTHROUGH*/
                        case TYPE_CONTINUATION:
                                AN(hdrs);
                                expect_cont = s->id;
                                parse_hdr(s, f, vsb);
                                if (f->flags & END_HEADERS) {
                                        expect_cont = 0;
                                        AZ(VSB_finish(vsb));
                                        decode_hdr(hp, hdrs, vsb);
                                        VSB_destroy(&vsb);
                                        hdrs = NULL;
                                }
                                break;
                        case TYPE_PRIORITY:
                                parse_prio(s, f);
                                break;
                        case TYPE_RST_STREAM:
                                parse_rst(s, f);
                                break;
                        case TYPE_SETTINGS:
                                parse_settings(s, f);
                                break;
                        case TYPE_PING:
                                parse_ping(s, f);
                                break;
                        case TYPE_GOAWAY:
                                parse_goaway(s, f);
                                break;
                        case TYPE_WINDOW_UPDATE:
                                parse_winup(s, f);
                                break;
                        default:
                                WRONG("wrong frame type");
                }

                PTOK(pthread_mutex_lock(&hp->mtx));
                VTAILQ_INSERT_HEAD(&s->fq, f, list);
                if (s->wf) {
                        assert(hp->wf > 0);
                        hp->wf--;
                        s->wf = 0;
                        PTOK(pthread_cond_signal(&s->cond));
                }
                continue;
        }
        PTOK(pthread_mutex_unlock(&hp->mtx));
        if (vsb != NULL)
                VSB_destroy(&vsb);
        return (NULL);
}

#define STRTOU32(n, ss, p, v, c)                                        \
        do {                                                            \
                n = strtoul(ss, &p, 0);                                 \
                if (*p != '\0')                                         \
                        vtc_fatal(v, "%s takes an integer as argument " \
                                "(found %s)", c, ss);                   \
        } while (0)

#define STRTOU32_CHECK(n, sp, p, v, c, l)                               \
do {                                                                    \
        sp++;                                                           \
        AN(*sp);                                                        \
        STRTOU32(n, *sp, p, v, c);                                      \
        if (l && n >= (1U << l))                                        \
                vtc_fatal(v,                                            \
                    c " must be a %d-bits integer (found %s)", l, *sp); \
} while (0)

#define CHECK_LAST_FRAME(TYPE) \
        if (!f || f->type != TYPE_ ## TYPE) {                              \
                vtc_fatal(s->vl, "Last frame was not of type " #TYPE); \
        }

#define RETURN_SETTINGS(idx) \
do { \
        if (isnan(f->md.settings[idx])) { \
                return (NULL); \
        } \
        snprintf(buf, 20, "%.0f", f->md.settings[idx]); \
        return (buf); \
} while (0)

#define RETURN_BUFFED(val) \
do { \
        snprintf(buf, 20, "%ld", (long)val); \
        return (buf); \
} while (0)

static char *
find_header(const struct hpk_hdr *h, const char *k)
{
        AN(k);

        int kl = strlen(k);
        while (h->t) {
                if (kl == h->key.len  && !strncasecmp(h->key.ptr, k, kl))
                        return (h->value.ptr);
                h++;
        }
        return (NULL);
}
/* SECTION: stream.spec.zexpect expect
 *
 * expect in stream works as it does in client or server, except that the
 * elements compared will be different.
 *
 * Most of these elements will be frame specific, meaning that the last frame
 * received on that stream must of the correct type.
 *
 * Here the list of keywords you can look at.
 */
static const char *
cmd_var_resolve(const struct stream *s, const char *spec, char *buf)
{
        uint32_t idx;
        int n;
        const struct hpk_hdr *h;
        struct hpk_ctx *ctx;
        struct frame *f = s->frame;

        CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);
        CHECK_OBJ_NOTNULL(s->hp, HTTP_MAGIC);
        AN(spec);
        AN(buf);

        n = 0;
        /* SECTION: stream.spec.zexpect.ping PING specific
         *
         * ping.data
         *      The 8-bytes string of the PING frame payload.
         * ping.ack (PING)
         *      "true" if the ACK flag was set, "false" otherwise.
         */
        if (!strcmp(spec, "ping.data")) {
                CHECK_LAST_FRAME(PING);
                return (f->md.ping.data);
        }
        if (!strcmp(spec, "ping.ack")) {
                CHECK_LAST_FRAME(PING);
                snprintf(buf, 20, (f->flags & ACK) ? "true" : "false");
                return (buf);
        }
        /* SECTION: stream.spec.zexpect.winup WINDOW_UPDATE specific
         *
         * winup.size
         *      The size of the upgrade given by the WINDOW_UPDATE frame.
         */
        if (!strcmp(spec, "winup.size")) {
                CHECK_LAST_FRAME(WINDOW_UPDATE);
                RETURN_BUFFED(f->md.winup_size);
        }
        /* SECTION: stream.spec.zexpect.prio PRIORITY specific
         *
         * prio.stream
         *      The stream ID announced.
         *
         * prio.exclusive
         *      "true" if the priority is exclusive, else "false".
         *
         * prio.weight
         *      The dependency weight.
         */
        if (!strcmp(spec, "prio.stream")) {
                CHECK_LAST_FRAME(PRIORITY);
                RETURN_BUFFED(f->md.prio.stream);
        }
        if (!strcmp(spec, "prio.exclusive")) {
                CHECK_LAST_FRAME(PRIORITY);
                snprintf(buf, 20, f->md.prio.exclusive ? "true" : "false");
                return (buf);
        }
        if (!strcmp(spec, "prio.weight")) {
                CHECK_LAST_FRAME(PRIORITY);
                RETURN_BUFFED(f->md.prio.weight);
        }
        /* SECTION: stream.spec.zexpect.rst RESET_STREAM specific
         *
         * rst.err
         *      The error code (as integer) of the RESET_STREAM frame.
         */
        if (!strcmp(spec, "rst.err")) {
                CHECK_LAST_FRAME(RST_STREAM);
                RETURN_BUFFED(f->md.rst_err);
        }
        /* SECTION: stream.spec.zexpect.settings SETTINGS specific
         *
         * settings.ack
         *      "true" if the ACK flag was set, else "false".
         *
         * settings.push
         *      "true" if the push settings was set to yes, "false" if set to
         *      no, and <undef> if not present.
         *
         * settings.hdrtbl
         *      Value of HEADER_TABLE_SIZE if set, <undef> otherwise.
         *
         * settings.maxstreams
         *      Value of MAX_CONCURRENT_STREAMS if set, <undef> otherwise.
         *
         * settings.winsize
         *      Value of INITIAL_WINDOW_SIZE if set, <undef> otherwise.
         *
         * setting.framesize
         *      Value of MAX_FRAME_SIZE if set, <undef> otherwise.
         *
         * settings.hdrsize
         *      Value of MAX_HEADER_LIST_SIZE if set, <undef> otherwise.
         */
        if (!strncmp(spec, "settings.", 9)) {
                CHECK_LAST_FRAME(SETTINGS);
                spec += 9;
                if (!strcmp(spec, "ack")) {
                        snprintf(buf, 20, (f->flags & ACK) ? "true" : "false");
                        return (buf);
                }
                if (!strcmp(spec, "push")) {
                        if (isnan(f->md.settings[SETTINGS_ENABLE_PUSH]))
                                return (NULL);
                        else if (f->md.settings[SETTINGS_ENABLE_PUSH] == 1)
                                snprintf(buf, 20, "true");
                        else
                                snprintf(buf, 20, "false");
                        return (buf);
                }
                if (!strcmp(spec, "hdrtbl"))     { RETURN_SETTINGS(1); }
                if (!strcmp(spec, "maxstreams")) { RETURN_SETTINGS(3); }
                if (!strcmp(spec, "winsize"))    { RETURN_SETTINGS(4); }
                if (!strcmp(spec, "framesize"))  { RETURN_SETTINGS(5); }
                if (!strcmp(spec, "hdrsize"))    { RETURN_SETTINGS(6); }
        }
        /* SECTION: stream.spec.zexpect.push PUSH_PROMISE specific
         *
         * push.id
         *      The id of the promised stream.
         */
        if (!strcmp(spec, "push.id")) {
                CHECK_LAST_FRAME(PUSH_PROMISE);
                RETURN_BUFFED(f->md.promised);
        }
        /* SECTION: stream.spec.zexpect.goaway GOAWAY specific
         *
         * goaway.err
         *      The error code (as integer) of the GOAWAY frame.
         *
         * goaway.laststream
         *      Last-Stream-ID
         *
         * goaway.debug
         *      Debug data, if any.
         */
        if (!strncmp(spec, "goaway.", 7)) {
                spec += 7;
                CHECK_LAST_FRAME(GOAWAY);

                if (!strcmp(spec, "err"))
                        RETURN_BUFFED(f->md.goaway.err);
                else if (!strcmp(spec, "laststream"))
                        RETURN_BUFFED(f->md.goaway.stream);
                else if (!strcmp(spec, "debug"))
                        return (f->md.goaway.debug);
        }
        /* SECTION: stream.spec.zexpect.zframe Generic frame
         *
         * frame.data
         *      Payload of the last frame
         *
         * frame.type
         *      Type of the frame, as integer.
         *
         * frame.size
         *      Size of the frame.
         *
         * frame.stream
         *      Stream of the frame (correspond to the one you are executing
         *      this from, obviously).
         *
         * frame.padding (for DATA, HEADERS, PUSH_PROMISE frames)
         *      Number of padded bytes.
         */
        if (!strncmp(spec, "frame.", 6)) {
                spec += 6;
                if (!f)
                        vtc_fatal(s->vl, "No frame received yet.");
                if (!strcmp(spec, "data"))   { return (f->data); }
                else if (!strcmp(spec, "type"))   { RETURN_BUFFED(f->type); }
                else if (!strcmp(spec, "size"))   { RETURN_BUFFED(f->size); }
                else if (!strcmp(spec, "stream")) { RETURN_BUFFED(f->stid); }
                else if (!strcmp(spec, "padding")) {
                        if (f->type != TYPE_DATA &&
                                        f->type != TYPE_HEADERS &&
                                        f->type != TYPE_PUSH_PROMISE)
                                vtc_fatal(s->vl,
                                                "Last frame was not of type "
                                                "DATA, HEADERS or PUSH");
                        RETURN_BUFFED(f->md.padded);
                }
        }
        /* SECTION: stream.spec.zexpect.zstream Stream
         *
         * stream.window
         *      The current local window size of the stream, or, if on stream 0,
         *      of the connection.
         *
         * stream.peer_window
         *      The current peer window size of the stream, or, if on stream 0,
         *      of the connection.
         *
         * stream.weight
         *      Weight of the stream
         *
         * stream.dependency
         *      Id of the stream this one depends on.
         */
        if (!strcmp(spec, "stream.window")) {
                snprintf(buf, 20, "%jd",
                    (intmax_t)(s->id ? s->win_self : s->hp->h2_win_self->size));
                return (buf);
        }
        if (!strcmp(spec, "stream.peer_window")) {
                snprintf(buf, 20, "%jd",
                    (intmax_t)(s->id ? s->win_peer : s->hp->h2_win_peer->size));
                return (buf);
        }
        if (!strcmp(spec, "stream.weight")) {
                if (s->id) {
                        snprintf(buf, 20, "%d", s->weight);
                        return (buf);
                } else
                        return (NULL);
        }
        if (!strcmp(spec, "stream.dependency")) {
                if (s->id) {
                        snprintf(buf, 20, "%d", s->dependency);
                        return (buf);
                } else
                        return (NULL);
        }
        /* SECTION: stream.spec.zexpect.ztable Index tables
         *
         * tbl.dec.size / tbl.enc.size
         *      Size (bytes) of the decoding/encoding table.
         *
         * tbl.dec.size / tbl.enc.maxsize
         *      Maximum size (bytes) of the decoding/encoding table.
         *
         * tbl.dec.length / tbl.enc.length
         *      Number of headers in decoding/encoding table.
         *
         * tbl.dec[INT].key / tbl.enc[INT].key
         *      Name of the header at index INT of the decoding/encoding
         *      table.
         *
         * tbl.dec[INT].value / tbl.enc[INT].value
         *      Value of the header at index INT of the decoding/encoding
         *      table.
         */
        if (!strncmp(spec, "tbl.dec", 7) || !strncmp(spec, "tbl.enc", 7)) {
                if (spec[4] == 'd')
                        ctx = s->hp->decctx;
                else
                        ctx = s->hp->encctx;
                spec += 7;

                if (1 == sscanf(spec, "[%u].key%n", &idx, &n) &&
                                spec[n] == '\0') {
                        h = HPK_GetHdr(ctx, idx + 61);
                        return (h ? h->key.ptr : NULL);
                }
                else if (1 == sscanf(spec, "[%u].value%n", &idx, &n) &&
                                spec[n] == '\0') {
                        h = HPK_GetHdr(ctx, idx + 61);
                        return (h ? h->value.ptr : NULL);
                }
                else if (!strcmp(spec, ".size"))
                        RETURN_BUFFED(HPK_GetTblSize(ctx));
                else if (!strcmp(spec, ".maxsize"))
                        RETURN_BUFFED(HPK_GetTblMaxSize(ctx));
                else if (!strcmp(spec, ".length"))
                        RETURN_BUFFED(HPK_GetTblLength(ctx));
        }
        /* SECTION: stream.spec.zexpect.zre Request and response
         *
         * Note: it's possible to inspect a request or response while it is
         * still being construct (in-between two frames for example).
         *
         * req.bodylen / resp.bodylen
         *      Length in bytes of the request/response so far.
         *
         * req.body / resp.body
         *      Body of the request/response so far.
         *
         * req.http.STRING / resp.http.STRING
         *      Value of the header STRING in the request/response.
         *
         * req.status / resp.status
         *      :status pseudo-header's value.
         *
         * req.url / resp.url
         *      :path pseudo-header's value.
         *
         * req.method / resp.method
         *      :method pseudo-header's value.
         *
         * req.authority / resp.authority
         *      :method pseudo-header's value.
         *
         * req.scheme / resp.scheme
         *      :method pseudo-header's value.
         */
        if (!strncmp(spec, "req.", 4) || !strncmp(spec, "resp.", 5)) {
                if (spec[2] == 'q') {
                        h = s->req;
                        spec += 4;
                } else {
                        h = s->resp;
                        spec += 5;
                }
                if (!strcmp(spec, "body"))
                        return (s->body);
                else if (!strcmp(spec, "bodylen"))
                        RETURN_BUFFED(s->bodylen);
                else if (!strcmp(spec, "status"))
                        return (find_header(h, ":status"));
                else if (!strcmp(spec, "url"))
                        return (find_header(h, ":path"));
                else if (!strcmp(spec, "method"))
                        return (find_header(h, ":method"));
                else if (!strcmp(spec, "authority"))
                        return (find_header(h, ":authority"));
                else if (!strcmp(spec, "scheme"))
                        return (find_header(h, ":scheme"));
                else if (!strncmp(spec, "http.", 5))
                        return (find_header(h, spec + 5));
                else
                        return (NULL);
        }
#define H2_ERROR(U,v,sc,g,r,t) \
        if (!strcmp(spec, #U)) { return (#v); }
#include "tbl/h2_error.h"
        return (spec);
}

/* SECTION: stream.spec.frame_sendhex sendhex
 *
 * Push bytes directly on the wire. sendhex takes exactly one argument: a string
 * describing the bytes, in hex notation, with possible whitespaces between
 * them. Here's an example::
 *
 *      sendhex "00 00 08 00 0900       8d"
 */
static void
cmd_sendhex(CMD_ARGS)
{
        struct http *hp;
        struct stream *s;
        struct vsb *vsb;

        (void)vl;
        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);
        CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);
        AN(av[1]);
        AZ(av[2]);
        vsb = vtc_hex_to_bin(hp->vl, av[1]);
        assert(VSB_len(vsb) >= 0);
        vtc_hexdump(hp->vl, 4, "sendhex", VSB_data(vsb), VSB_len(vsb));
        PTOK(pthread_mutex_lock(&hp->mtx));
        http_write(hp, 4, VSB_data(vsb), VSB_len(vsb), "sendhex");
        PTOK(pthread_mutex_unlock(&hp->mtx));
        VSB_destroy(&vsb);
}

#define ENC(hdr, k, v)                                  \
{                                                       \
        AN(k);                                          \
        hdr.key.ptr = TRUST_ME(k);                      \
        hdr.key.len = strlen(k);                        \
        AN(v);                                          \
        hdr.value.ptr = TRUST_ME(v);                    \
        hdr.value.len = strlen(v);                      \
        assert(HPK_EncHdr(iter, &hdr) != hpk_err);      \
}

#define STR_ENC(av, field, str)                                                \
{                                                                              \
        av++;                                                                  \
             if (AV_IS("plain")) { hdr.field.huff = 0; }                       \
        else if (AV_IS("huf"))   { hdr.field.huff = 1; }                       \
        else                                                                   \
                vtc_fatal(vl, str " arg can be huf or plain (got: %s)", *av); \
        av++;                                                                  \
        AN(*av);                                                               \
        hdr.field.ptr = *av;                                                   \
        hdr.field.len = strlen(*av);                                           \
}


/* SECTION: stream.spec.data_0 txreq, txresp, txcont, txpush
 *
 * These four commands are about sending headers. txreq and txresp
 * will send HEADER frames; txcont will send CONTINUATION frames; txpush
 * PUSH frames.
 * The only difference between txreq and txresp are the default headers
 * set by each of them.
 *
 * \-noadd
 *      Do not add default headers. Useful to avoid duplicates when sending
 *      default headers using ``-hdr``, ``-idxHdr`` and ``-litIdxHdr``.
 *
 * \-status INT (txresp)
 *      Set the :status pseudo-header.
 *
 * \-url STRING (txreq, txpush)
 *      Set the :path pseudo-header.
 *
 * \-method STRING (txreq, txpush)
 *      Set the :method pseudo-header.
 *
 * \-req STRING (txreq, txpush)
 *      Alias for -method.
 *
 * \-scheme STRING (txreq, txpush)
 *      Set the :scheme pseudo-header.
 *
 * \-hdr STRING1 STRING2
 *      Insert a header, STRING1 being the name, and STRING2 the value.
 *
 * \-idxHdr INT
 *      Insert an indexed header, using INT as index.
 *
 * \-litIdxHdr inc|not|never INT huf|plain STRING
 *      Insert an literal, indexed header. The first argument specify if the
 *      header should be added to the table, shouldn't, or mustn't be
 *      compressed if/when retransmitted.
 *
 *      INT is the index of the header name to use.
 *
 *      The third argument informs about the Huffman encoding: yes (huf) or
 *      no (plain).
 *
 *      The last term is the literal value of the header.
 *
 * \-litHdr inc|not|never huf|plain STRING1 huf|plain STRING2
 *      Insert a literal header, with the same first argument as
 *      ``-litIdxHdr``.
 *
 *      The second and third terms tell what the name of the header is and if
 *      it should be Huffman-encoded, while the last two do the same
 *      regarding the value.
 *
 * \-body STRING (txreq, txresp)
 *      Specify a body, effectively putting STRING into a DATA frame after
 *      the HEADER frame is sent.
 *
 * \-bodyfrom FILE (txreq, txresp)
 *      Same as ``-body`` but content is read from FILE.
 *
 * \-bodylen INT (txreq, txresp)
 *      Do the same thing as ``-body`` but generate a string of INT length
 *      for you.
 *
 * \-gzipbody STRING (txreq, txresp)
 *      Gzip STRING and send it as body.
 *
 * \-gziplen NUMBER (txreq, txresp)
 *      Combine -bodylen and -gzipbody: generate a string of length NUMBER,
 *      gzip it and send as body.
 *
 * \-nostrend (txreq, txresp)
 *      Don't set the END_STREAM flag automatically, making the peer expect
 *      a body after the headers.
 *
 * \-nohdrend
 *      Don't set the END_HEADERS flag automatically, making the peer expect
 *      more HEADER frames.
 *
 * \-dep INT (txreq, txresp)
 *      Tell the peer that this content depends on the stream with the INT
 *      id.
 *
 * \-ex (txreq, txresp)
 *      Make the dependency exclusive (``-dep`` is still needed).
 *
 * \-weight (txreq, txresp)
 *      Set the weight for the dependency.
 *
 * \-promised INT (txpush)
 *      The id of the promised stream.
 *
 * \-pad STRING / -padlen INT (txreq, txresp, txpush)
 *      Add string as padding to the frame, either the one you provided with
 *      \-pad, or one that is generated for you, of length INT is -padlen
 *      case.
 */

#define cmd_txreq       cmd_tx11obj
#define cmd_txresp      cmd_tx11obj
#define cmd_txpush      cmd_tx11obj
#define cmd_txcont      cmd_tx11obj

static void
cmd_tx11obj(CMD_ARGS)
{
        struct stream *s;
        int i;
        int status_done = 1;
        int method_done = 1;
        int path_done = 1;
        int scheme_done = 1;
        long bodylen = 0;
        ssize_t len;
        uint32_t stid = 0, pstid;
        uint32_t weight = 16;
        uint32_t exclusive = 0;
        char *buf;
        struct hpk_iter *iter;
        struct frame f;
        char *body = NULL, *pad = NULL;
        /*XXX: do we need a better api? yes we do */
        struct hpk_hdr hdr;
        char *cmd_str = *av;
        char *p;

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);
        INIT_FRAME(f, CONTINUATION, 0, s->id, END_HEADERS);
        buf = malloc(BUF_SIZE);
        AN(buf);

        if (!strcmp(cmd_str, "txreq")) {
                ONLY_H2_CLIENT(s->hp, av);
                f.type = TYPE_HEADERS;
                f.flags |= END_STREAM;
                method_done = 0;
                path_done = 0;
                scheme_done = 0;
        } else if (!strcmp(cmd_str, "txresp")) {
                ONLY_H2_SERVER(s->hp, av);
                f.type = TYPE_HEADERS;
                f.flags |= END_STREAM;
                status_done = 0;
        } else if (!strcmp(cmd_str, "txpush")) {
                ONLY_H2_SERVER(s->hp, av);
                f.type = TYPE_PUSH_PROMISE;
                method_done = 0;
                path_done = 0;
                scheme_done = 0;
        }

        if (f.type == TYPE_PUSH_PROMISE) {
                *buf = 0;
                iter = HPK_NewIter(s->hp->encctx, buf + 4, BUF_SIZE - 4);
        } else
                iter = HPK_NewIter(s->hp->encctx, buf, BUF_SIZE);

#define AV_IS(str) !strcmp(*av, str)
#define CMD_IS(str) !strcmp(cmd_str, str)
        while (*++av) {
                memset(&hdr, 0, sizeof(hdr));
                hdr.t = hpk_not;
                if (AV_IS("-noadd")) {
                        path_done = 1;
                        status_done = 1;
                        method_done = 1;
                        scheme_done = 1;
                }
                else if (AV_IS("-status") && CMD_IS("txresp")) {
                        ENC(hdr, ":status", av[1]);
                        av++;
                        status_done = 1;
                }
                else if (AV_IS("-url") &&
                                (CMD_IS("txreq") || CMD_IS("txpush"))) {
                        ENC(hdr, ":path", av[1]);
                        av++;
                        path_done = 1;
                }
                else if ((AV_IS("-method") || AV_IS("-req")) &&
                                (CMD_IS("txreq") || CMD_IS("txpush"))) {
                        ENC(hdr, ":method", av[1]);
                        av++;
                        method_done = 1;
                }
                else if (AV_IS("-scheme") &&
                                (CMD_IS("txreq") || CMD_IS("txpush"))) {
                        ENC(hdr, ":scheme", av[1]);
                        av++;
                        scheme_done = 1;
                }
                else if (AV_IS("-hdr")) {
                        if (av[2] == NULL)
                                vtc_fatal(vl, "-hdr takes two arguments in http2");
                        ENC(hdr, av[1], av[2]);
                        av += 2;
                }
                else if (AV_IS("-idxHdr")) {
                        hdr.t = hpk_idx;
                        STRTOU32_CHECK(hdr.i, av, p, vl, "-idxHdr", 0);
                        assert(HPK_EncHdr(iter, &hdr) != hpk_err);
                }
                else if (AV_IS("-litIdxHdr")) {
                        av++;
                        if      (AV_IS("inc"))   { hdr.t = hpk_inc;   }
                        else if (AV_IS("not"))   { hdr.t = hpk_not;   }
                        else if (AV_IS("never")) { hdr.t = hpk_never; }
                        else
                                vtc_fatal(vl, "first -litidxHdr arg can be "
                                    "inc, not, never (got: %s)", *av);

                        STRTOU32_CHECK(hdr.i, av, p, vl,
                            "second -litidxHdr arg", 0);

                        hdr.key.ptr = NULL;
                        hdr.key.len = 0;
                        STR_ENC(av, value,   "third -litHdr");
                        assert(HPK_EncHdr(iter, &hdr) != hpk_err);
                }
                else if (AV_IS("-litHdr")) {
                        av++;
                        if      (AV_IS("inc"))   { hdr.t = hpk_inc;   }
                        else if (AV_IS("not"))   { hdr.t = hpk_not;   }
                        else if (AV_IS("never")) { hdr.t = hpk_never; }
                        else
                                vtc_fatal(vl, "first -litHdr arg can be inc, "
                                    "not, never (got: %s)", *av);

                        STR_ENC(av, key,   "second -litHdr");
                        STR_ENC(av, value, "fourth -litHdr");
                        assert(HPK_EncHdr(iter, &hdr) != hpk_err);
                }
                else if (AV_IS("-nostrend")) {
                        f.flags &= ~END_STREAM;
                }
                else if (AV_IS("-nohdrend")) {
                        f.flags &= ~END_HEADERS;
                }
                else if (AV_IS("-promised") && CMD_IS("txpush")) {
                        STRTOU32_CHECK(pstid, av, p, vl, "-promised", 31);
                        vbe32enc(buf, pstid);
                }
                else if (AV_IS("-pad") && !CMD_IS("txcont")) {
                        AZ(pad);
                        av++;
                        AN(*av);
                        pad = strdup(*av);
                }
                else if (AV_IS("-padlen") && !CMD_IS("txcont")) {
                        AZ(pad);
                        av++;
                        pad = synth_body(*av, 0);
                }
                else if (CMD_IS("txreq") || CMD_IS("txresp")) {
                        if (AV_IS("-body")) {
                                AZ(body);
                                REPLACE(body, av[1]);
                                AN(body);
                                bodylen = strlen(body);
                                f.flags &= ~END_STREAM;
                                av++;
                        }
                        else if (AV_IS("-bodyfrom")) {
                                AZ(body);
                                body = VFIL_readfile(NULL, av[1], &len);
                                AN(body);
                                assert(len < INT_MAX);
                                bodylen = len;
                                f.flags &= ~END_STREAM;
                                av++;
                        }
                        else if (AV_IS("-bodylen")) {
                                AZ(body);
                                body = synth_body(av[1], 0);
                                bodylen = strlen(body);
                                f.flags &= ~END_STREAM;
                                av++;
                        }
                        else if (!strncmp(*av, "-gzip", 5)) {
                                i = vtc_gzip_cmd(s->hp, av, &body, &bodylen);
                                if (i == 0)
                                        break;
                                av++;
                                if (i > 1) {
                                        ENC(hdr, ":content-encoding", "gzip");
                                        f.flags &= ~END_STREAM;
                                }
                        }
                        else if (AV_IS("-dep")) {
                                STRTOU32_CHECK(stid, av, p, vl, "-dep", 0);
                                f.flags |= PRIORITY;
                        }
                        else if (AV_IS("-ex")) {
                                exclusive = 1U << 31;
                                f.flags |= PRIORITY;
                        }
                        else if (AV_IS("-weight")) {
                                STRTOU32_CHECK(weight, av, p, vl, "-weight", 8);
                                f.flags |= PRIORITY;
                        } else
                                break;
                } else
                        break;
        }
#undef CMD_IS
#undef AV_IS
        if (*av != NULL)
                vtc_fatal(vl, "Unknown %s spec: %s\n", cmd_str, *av);

        memset(&hdr, 0, sizeof(hdr));
        hdr.t = hpk_not;

        if (!status_done) { ENC(hdr, ":status", "200"); }
        if (!path_done)   { ENC(hdr, ":path",   "/"); }
        if (!method_done) { ENC(hdr, ":method", "GET"); }
        if (!scheme_done) { ENC(hdr, ":scheme", "http"); }

        f.size = gethpk_iterLen(iter);
        if (f.flags & PRIORITY) {
                s->weight = weight & 0xff;
                s->dependency = stid;

                assert(f.size + 5 < BUF_SIZE);
                memmove(buf + 5, buf, f.size);
                vbe32enc(buf, (stid | exclusive));
                buf[4] = s->weight;
                f.size += 5;

                vtc_log(vl, 4, "stream->dependency: %u", s->dependency);
                vtc_log(vl, 4, "stream->weight: %u", s->weight);
                if (exclusive)
                        exclusive_stream_dependency(s);
        }
        if (pad) {
                if (strlen(pad) > 255)
                        vtc_fatal(vl, "Padding is limited to 255 bytes");
                f.flags |= PADDED;
                assert(f.size + strlen(pad) < BUF_SIZE);
                memmove(buf + 1, buf, f.size);
                buf[0] = strlen(pad);
                f.size += 1;
                memcpy(buf + f.size, pad, strlen(pad));
                f.size += strlen(pad);
                free(pad);
        }
        if (f.type == TYPE_PUSH_PROMISE)
                f.size += 4;
        f.data = buf;
        HPK_FreeIter(iter);
        write_frame(s, &f, 1);
        free(buf);

        if (!body)
                return;

        INIT_FRAME(f, DATA, bodylen, s->id, END_STREAM);
        f.data = body;

        write_frame(s, &f, 1);
        free(body);
}

/* SECTION: stream.spec.data_1 txdata
 *
 * By default, data frames are empty. The receiving end will know the whole body
 * has been delivered thanks to the END_STREAM flag set in the last DATA frame,
 * and txdata automatically set it.
 *
 * \-data STRING
 *      Data to be embedded into the frame.
 *
 * \-datalen INT
 *      Generate and INT-bytes long string to be sent in the frame.
 *
 * \-pad STRING / -padlen INT
 *      Add string as padding to the frame, either the one you provided with
 *      \-pad, or one that is generated for you, of length INT is -padlen
 *      case.
 *
 * \-nostrend
 *      Don't set the END_STREAM flag, allowing to send more data on this
 *      stream.
 */
static void
cmd_txdata(CMD_ARGS)
{
        struct stream *s;
        char *pad = NULL;
        struct frame f;
        char *body = NULL;
        char *data = NULL;

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);

        INIT_FRAME(f, DATA, 0, s->id, END_STREAM);

        while (*++av) {
                if (!strcmp(*av, "-data")) {
                        AZ(body);
                        av++;
                        body = strdup(*av);
                } else if (!strcmp(*av, "-datalen")) {
                        AZ(body);
                        av++;
                        body = synth_body(*av, 0);
                } else if (!strcmp(*av, "-pad")) {
                        AZ(pad);
                        av++;
                        AN(*av);
                        pad = strdup(*av);
                } else if (!strcmp(*av, "-padlen")) {
                        AZ(pad);
                        av++;
                        pad = synth_body(*av, 0);
                } else if (!strcmp(*av, "-nostrend"))
                        f.flags &= ~END_STREAM;
                else
                        break;
        }
        if (*av != NULL)
                vtc_fatal(vl, "Unknown txdata spec: %s\n", *av);

        if (!body)
                body = strdup("");

        if (pad) {
                f.flags |= PADDED;
                if (strlen(pad) > 255)
                        vtc_fatal(vl, "Padding is limited to 255 bytes");
                data = malloc( 1 + strlen(body) + strlen(pad));
                AN(data);
                *((uint8_t *)data) = strlen(pad);
                f.size = 1;
                memcpy(data + f.size, body, strlen(body));
                f.size += strlen(body);
                memcpy(data + f.size, pad, strlen(pad));
                f.size += strlen(pad);
                f.data = data;
        } else {
                f.size = strlen(body);
                f.data = body;
        }
        write_frame(s, &f, 1);
        free(body);
        free(pad);
        free(data);
}

/* SECTION: stream.spec.reset_txrst txrst
 *
 * Send a RST_STREAM frame. By default, txrst will send a 0 error code
 * (NO_ERROR).
 *
 * \-err STRING|INT
 *      Sets the error code to be sent. The argument can be an integer or a
 *      string describing the error, such as NO_ERROR, or CANCEL (see
 *      rfc7540#11.4 for more strings).
 */
static void
cmd_txrst(CMD_ARGS)
{
        struct stream *s;
        char *p;
        uint32_t err = 0;
        struct frame f;

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);

        INIT_FRAME(f, RST_STREAM, 4, s->id, 0);

        while (*++av) {
                if (!strcmp(*av, "-err")) {
                        ++av;
                        for (err = 0; h2_errs[err]; err++) {
                                if (!strcmp(h2_errs[err], *av))
                                        break;
                        }

                        if (h2_errs[err])
                                continue;

                        STRTOU32(err, *av, p, vl, "-err");
                } else
                        break;
        }
        if (*av != NULL)
                vtc_fatal(vl, "Unknown txrst spec: %s\n", *av);

        err = htonl(err);
        f.data = (void *)&err;
        write_frame(s, &f, 1);
}

/* SECTION: stream.spec.prio_txprio txprio
 *
 * Send a PRIORITY frame
 *
 * \-stream INT
 *      indicate the id of the stream the sender stream depends on.
 *
 * \-ex
 *      the dependency should be made exclusive (only this streams depends on
 *      the parent stream).
 *
 * \-weight INT
 *      an 8-bits integer is used to balance priority between streams
 *      depending on the same streams.
 */
static void
cmd_txprio(CMD_ARGS)
{
        struct stream *s;
        char *p;
        uint32_t stid = 0;
        struct frame f;
        uint32_t weight = 0;
        uint32_t exclusive = 0;
        uint8_t buf[5];

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);

        INIT_FRAME(f, PRIORITY, 5, s->id, 0);
        f.data = (void *)buf;

        while (*++av) {
                if (!strcmp(*av, "-stream")) {
                        STRTOU32_CHECK(stid, av, p, vl, "-stream", 0);
                } else if (!strcmp(*av, "-ex")) {
                        exclusive = 1U << 31;
                } else if (!strcmp(*av, "-weight")) {
                        STRTOU32_CHECK(weight, av, p, vl, "-weight", 8);
                } else
                        break;
        }
        if (*av != NULL)
                vtc_fatal(vl, "Unknown txprio spec: %s\n", *av);
        s->weight = weight & 0xff;
        s->dependency = stid;

        if (exclusive)
                exclusive_stream_dependency(s);

        vbe32enc(buf, (stid | exclusive));
        buf[4] = s->weight;
        write_frame(s, &f, 1);
}

#define PUT_KV(av, vl, name, val, code) \
        do {\
                STRTOU32_CHECK(val, av, p, vl, #name, 0);       \
                vbe16enc(cursor, code);                         \
                cursor += sizeof(uint16_t);                     \
                vbe32enc(cursor, val);                          \
                cursor += sizeof(uint32_t);                     \
                f.size += 6;                                    \
        } while(0)

/* SECTION: stream.spec.settings_txsettings txsettings
 *
 * SETTINGS frames must be acknowledge, arguments are as follow (most of them
 * are from  rfc7540#6.5.2):
 *
 * \-hdrtbl INT
 *      headers table size
 *
 * \-push BOOL
 *      whether push frames are accepted or not
 *
 * \-maxstreams INT
 *      maximum concurrent streams allowed
 *
 * \-winsize INT
 *      sender's initial window size
 *
 * \-framesize INT
 *      largest frame size authorized
 *
 * \-hdrsize INT
 *      maximum size of the header list authorized
 *
 * \-0xHH[HH] INT
 *      tx arbitraty settings with tag xx
 *
 * \-ack
 *      set the ack bit
 */
static void
cmd_txsettings(CMD_ARGS)
{
        struct stream *s, *s2;
        struct http *hp;
        char *p, *e;
        unsigned long u;
        uint32_t val = 0;
        struct frame f;
        //TODO dynamic alloc
        char buf[512];
        char *cursor = buf;

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);
        CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);

        memset(buf, 0, 512);
        INIT_FRAME(f, SETTINGS, 0, s->id, 0);
        f.data = buf;

        PTOK(pthread_mutex_lock(&hp->mtx));
        while (*++av) {
                if (!strcmp(*av, "-push")) {
                        ++av;
                        vbe16enc(cursor, 0x2);
                        cursor += sizeof(uint16_t);
                        if (!strcmp(*av, "false"))
                                vbe32enc(cursor, 0);
                        else if (!strcmp(*av, "true"))
                                vbe32enc(cursor, 1);
                        else
                                vtc_fatal(vl, "Push parameter is either "
                                    "\"true\" or \"false\", not %s", *av);
                        cursor += sizeof(uint32_t);
                        f.size += 6;
                }
                else if (!strcmp(*av, "-hdrtbl")) {
                        PUT_KV(av, vl, hdrtbl, val, 0x1);
                        assert(HPK_ResizeTbl(s->hp->decctx, val) != hpk_err);
                }
                else if (!strcmp(*av, "-maxstreams"))
                        PUT_KV(av, vl, maxstreams, val, 0x3);
                else if (!strcmp(*av, "-winsize"))      {
                        PUT_KV(av, vl, winsize, val, 0x4);
                        VTAILQ_FOREACH(s2, &hp->streams, list)
                                s2->win_self += (val - hp->h2_win_self->init);
                        hp->h2_win_self->init = val;
                }
                else if (!strcmp(*av, "-framesize"))
                        PUT_KV(av, vl, framesize, val, 0x5);
                else if (!strcmp(*av, "-hdrsize"))
                        PUT_KV(av, vl, hdrsize, val, 0x6);
                else if (!strncmp(*av, "-0x", 3)) {
                        p = *av + 3;
                        errno = 0;
                        u = strtoul(p, &e, 16);
                        if (*p == '\0' || *e != '\0' || u > 0xffff || errno != 0)
                                vtc_fatal(vl, "Invalid settings tag %s", p);
                        assert(u <= 0xffff);
                        PUT_KV(av, vl, hdrtbl, val, (uint16_t)u);
                }
                else if (!strcmp(*av, "-ack"))
                        f.flags |= 1;
                else
                        break;
        }
        if (*av != NULL)
                vtc_fatal(vl, "Unknown txsettings spec: %s\n", *av);

        AN(s->hp);
        write_frame(s, &f, 0);
        PTOK(pthread_mutex_unlock(&hp->mtx));
}

/* SECTION: stream.spec.ping_txping txping
 *
 * Send PING frame.
 *
 * \-data STRING
 *      specify the payload of the frame, with STRING being an 8-char string.
 *
 * \-ack
 *      set the ACK flag.
 */
static void
cmd_txping(CMD_ARGS)
{
        struct stream *s;
        struct frame f;
        char buf[8];

        memset(buf, 0, 8);
        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);
        INIT_FRAME(f, PING, 8, s->id, 0);

        while (*++av) {
                if (!strcmp(*av, "-data")) {
                        av++;
                        if (f.data)
                                vtc_fatal(vl, "this frame already has data");
                        if (strlen(*av) != 8)
                                vtc_fatal(vl, "data must be a 8-char string, found  (%s)", *av);
                        f.data = *av;
                } else if (!strcmp(*av, "-ack"))
                        f.flags |= 1;
                else
                        break;
        }
        if (*av != NULL)
                vtc_fatal(vl, "Unknown txping spec: %s\n", *av);
        if (!f.data)
                f.data = buf;
        write_frame(s, &f, 1);
}

/*
 * SECTION: stream.spec.goaway_txgoaway txgoaway
 *
 * Possible options include:
 *
 * \-err STRING|INT
 *      set the error code to explain the termination. The second argument
 *      can be a integer or the string version of the error code as found
 *      in rfc7540#7.
 *
 * \-laststream INT
 *      the id of the "highest-numbered stream identifier for which the
 *      sender of the GOAWAY frame might have taken some action on or might
 *      yet take action on".
 *
 * \-debug
 *      specify the debug data, if any to append to the frame.
 */
static void
cmd_txgoaway(CMD_ARGS)
{
        struct stream *s;
        char *p;
        uint32_t err = 0;
        uint32_t ls = 0;
        struct frame f;

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);

        INIT_FRAME(f, GOAWAY, 8, s->id, 0);

        while (*++av) {
                if (!strcmp(*av, "-err")) {
                        ++av;
                        for (err = 0; h2_errs[err]; err++)
                                if (!strcmp(h2_errs[err], *av))
                                        break;

                        if (h2_errs[err])
                                continue;

                        STRTOU32(err, *av, p, vl, "-err");
                } else if (!strcmp(*av, "-laststream")) {
                        STRTOU32_CHECK(ls, av, p, vl, "-laststream", 31);
                } else if (!strcmp(*av, "-debug")) {
                        ++av;
                        if (f.data)
                                vtc_fatal(vl, "this frame already has debug data");
                        f.size = 8 + strlen(*av);
                        f.data = malloc(f.size);
                        AN(f.data);
                        memcpy(f.data + 8, *av, f.size - 8);
                } else
                        break;
        }
        if (*av != NULL)
                vtc_fatal(vl, "Unknown txgoaway spec: %s\n", *av);

        if (!f.data) {
                f.data = malloc(8);
                AN(f.data);
        }
        vbe32enc(f.data, ls);
        vbe32enc(f.data + 4, err);
        write_frame(s, &f, 1);
        free(f.data);
}

/* SECTION: stream.spec.winup_txwinup txwinup
 *
 * Transmit a WINDOW_UPDATE frame, increasing the amount of credit of the
 * connection (from stream 0) or of the stream (any other stream).
 *
 * \-size INT
 *      give INT credits to the peer.
 */
static void
cmd_txwinup(CMD_ARGS)
{
        struct http *hp;
        struct stream *s;
        char *p;
        struct frame f;
        char buf[8];
        uint32_t size = 0;

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);
        CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);
        memset(buf, 0, 8);

        AN(av[1]);
        AN(av[2]);

        INIT_FRAME(f, WINDOW_UPDATE, 4, s->id, 0);
        f.data = buf;

        while (*++av)
                if (!strcmp(*av, "-size")) {
                        STRTOU32_CHECK(size, av, p, vl, "-size", 0);
                } else
                        break;
        if (*av != NULL)
                vtc_fatal(vl, "Unknown txwinup spec: %s\n", *av);

        PTOK(pthread_mutex_lock(&hp->mtx));
        if (s->id == 0)
                hp->h2_win_self->size += size;
        s->win_self += size;
        PTOK(pthread_mutex_unlock(&hp->mtx));

        size = htonl(size);
        f.data = (void *)&size;
        write_frame(s, &f, 1);
}

static struct frame *
rxstuff(struct stream *s)
{
        struct frame *f;

        CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);

        PTOK(pthread_mutex_lock(&s->hp->mtx));
        if (VTAILQ_EMPTY(&s->fq)) {
                assert(s->hp->wf >= 0);
                s->hp->wf++;
                s->wf = 1;
                PTOK(pthread_cond_signal(&s->hp->cond));
                PTOK(pthread_cond_wait(&s->cond, &s->hp->mtx));
        }
        if (VTAILQ_EMPTY(&s->fq)) {
                PTOK(pthread_mutex_unlock(&s->hp->mtx));
                return (NULL);
        }
        clean_frame(&s->frame);
        f = VTAILQ_LAST(&s->fq, fq_head);
        CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
        VTAILQ_REMOVE(&s->fq, f, list);
        PTOK(pthread_mutex_unlock(&s->hp->mtx));
        return (f);
}

#define CHKFRAME(rt, wt, rcv, func) \
        do { \
        if (rt != wt) \
                vtc_fatal(vl, "Frame #%d for %s was of type %s (%d) " \
                    "instead of %s (%d)", \
                    rcv, func, \
                    rt < TYPE_MAX ? h2_types[rt] : "?", rt, \
                    wt < TYPE_MAX ? h2_types[wt] : "?", wt); \
        } while (0);

/* SECTION: stream.spec.data_11 rxhdrs
 *
 * ``rxhdrs`` will expect one HEADER frame, then, depending on the arguments,
 * zero or more CONTINUATION frame.
 *
 * \-all
 *      Keep waiting for CONTINUATION frames until END_HEADERS flag is seen.
 *
 * \-some INT
 *      Retrieve INT - 1 CONTINUATION frames after the HEADER frame.
 *
 */
static void
cmd_rxhdrs(CMD_ARGS)
{
        struct stream *s;
        struct frame *f = NULL;
        char *p;
        int loop = 0;
        unsigned long int times = 1;
        unsigned rcv = 0;
        enum h2_type_e expect = TYPE_HEADERS;

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);

        while (*++av) {
                if (!strcmp(*av, "-some")) {
                        STRTOU32_CHECK(times, av, p, vl, "-some", 0);
                        if (!times)
                                vtc_fatal(vl, "-some argument must be more"
                                               "than 0 (found \"%s\")\n", *av);
                } else if (!strcmp(*av, "-all"))
                        loop = 1;
                else
                        break;
        }
        if (*av != NULL)
                vtc_fatal(vl, "Unknown rxhdrs spec: %s\n", *av);

        do {
                replace_frame(&f, rxstuff(s));
                if (f == NULL)
                        break;
                rcv++;
                CHKFRAME(f->type, expect, rcv, "rxhdrs");
                expect = TYPE_CONTINUATION;
        } while (rcv < times || (loop && !(f->flags & END_HEADERS)));
        replace_frame(&s->frame, f);
}

static void
cmd_rxcont(CMD_ARGS)
{
        struct stream *s;
        struct frame *f = NULL;
        char *p;
        int loop = 0;
        unsigned long int times = 1;
        unsigned rcv = 0;

        (void)av;
        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);

        while (*++av)
                if (!strcmp(*av, "-some")) {
                        STRTOU32(times, *av, p, vl, "-some");
                        if (!times)
                                vtc_fatal(vl, "-some argument must be more"
                                               "than 0 (found \"%s\")\n", *av);
                } else if (!strcmp(*av, "-all"))
                        loop = 1;
                else
                        break;
        if (*av != NULL)
                vtc_fatal(vl, "Unknown rxcont spec: %s\n", *av);

        do {
                replace_frame(&f, rxstuff(s));
                if (f == NULL)
                        break;
                rcv++;
                CHKFRAME(f->type, TYPE_CONTINUATION, rcv, "rxcont");
        } while (rcv < times || (loop && !(f->flags & END_HEADERS)));
        replace_frame(&s->frame, f);
}


/* SECTION: stream.spec.data_13 rxdata
 *
 * Receiving data is done using the ``rxdata`` keywords and will retrieve one
 * DATA frame, if you wish to receive more, you can use these two convenience
 * arguments:
 *
 * \-all
 *      keep waiting for DATA frame until one sets the END_STREAM flag
 *
 * \-some INT
 *      retrieve INT DATA frames.
 *
 */
static void
cmd_rxdata(CMD_ARGS)
{
        struct stream *s;
        struct frame *f = NULL;
        char *p;
        int loop = 0;
        unsigned long int times = 1;
        unsigned rcv = 0;

        (void)av;
        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);

        while (*++av)
                if (!strcmp(*av, "-some")) {
                        av++;
                        STRTOU32(times, *av, p, vl, "-some");
                        if (!times)
                                vtc_fatal(vl, "-some argument must be more"
                                               "than 0 (found \"%s\")\n", *av);
                } else if (!strcmp(*av, "-all"))
                        loop = 1;
                else
                        break;
        if (*av != NULL)
                vtc_fatal(vl, "Unknown rxdata spec: %s\n", *av);

        do {
                replace_frame(&f, rxstuff(s));
                if (f == NULL)
                        break;
                rcv++;
                CHKFRAME(f->type, TYPE_DATA, rcv, "rxhdata");
        } while (rcv < times || (loop && !(f->flags & END_STREAM)));
        replace_frame(&s->frame, f);
}

/* SECTION: stream.spec.data_10 rxreq, rxresp
 *
 * These are two convenience functions to receive headers and body of an
 * incoming request or response. The only difference is that rxreq can only be
 * by a server, and rxresp by a client.
 *
 */

#define cmd_rxreq       cmd_rxmsg
#define cmd_rxresp      cmd_rxmsg

static void
cmd_rxmsg(CMD_ARGS)
{
        struct stream *s;
        struct frame *f = NULL;
        int end_stream;
        int rcv = 0;

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);

        if (!strcmp(av[0], "rxreq"))
                ONLY_H2_SERVER(s->hp, av);
        else
                ONLY_H2_CLIENT(s->hp, av);

        do {
                replace_frame(&f, rxstuff(s));
                CHECK_OBJ_ORNULL(f, FRAME_MAGIC);
                if (f == NULL)
                        return;
        } while (f->type == TYPE_WINDOW_UPDATE);

        rcv++;
        CHKFRAME(f->type, TYPE_HEADERS, rcv, *av);

        end_stream = f->flags & END_STREAM;

        while (!(f->flags & END_HEADERS)) {
                replace_frame(&f, rxstuff(s));
                CHECK_OBJ_ORNULL(f, FRAME_MAGIC);
                if (f == NULL)
                        return;
                rcv++;
                CHKFRAME(f->type, TYPE_CONTINUATION, rcv, *av);
        }

        while (!end_stream) {
                replace_frame(&f, rxstuff(s));
                CHECK_OBJ_ORNULL(f, FRAME_MAGIC);
                if (f == NULL)
                        break;
                rcv++;
                CHKFRAME(f->type, TYPE_DATA, rcv, *av);
                end_stream = f->flags & END_STREAM;
        }
        replace_frame(&s->frame, f);
}

/* SECTION: stream.spec.data_12 rxpush
 *
 * This works like ``rxhdrs``, expecting a PUSH frame and then zero or more
 * CONTINUATION frames.
 *
 * \-all
 *      Keep waiting for CONTINUATION frames until END_HEADERS flag is seen.
 *
 * \-some INT
 *      Retrieve INT - 1 CONTINUATION frames after the PUSH frame.
 *
 */
static void
cmd_rxpush(CMD_ARGS)
{
        struct stream *s;
        struct frame *f = NULL;
        char *p;
        int loop = 0;
        unsigned long int times = 1;
        unsigned rcv = 0;
        enum h2_type_e expect = TYPE_PUSH_PROMISE;

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);

        while (*++av) {
                if (!strcmp(*av, "-some")) {
                        STRTOU32_CHECK(times, av, p, vl, "-some", 0);
                        if (!times)
                                vtc_fatal(vl, "-some argument must be more"
                                               "than 0 (found \"%s\")\n", *av);
                } else if (!strcmp(*av, "-all")) {
                        loop = 1;
                } else
                        break;
        }
        if (*av != NULL)
                vtc_fatal(vl, "Unknown rxpush spec: %s\n", *av);

        do {
                f = rxstuff(s);
                if (!f)
                        return;
                rcv++;
                CHKFRAME(f->type, expect, rcv, "rxpush");
                expect = TYPE_CONTINUATION;
        } while (rcv < times || (loop && !(f->flags & END_HEADERS)));
        s->frame = f;
}

/* SECTION: stream.spec.winup_rxwinup rxwinup
 *
 * Receive a WINDOW_UPDATE frame.
 */
static void
cmd_rxwinup(CMD_ARGS)
{
        struct stream *s;
        struct frame *f;

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);
        s->frame = rxstuff(s);
        CAST_OBJ_NOTNULL(f, s->frame, FRAME_MAGIC);
        CHKFRAME(f->type, TYPE_WINDOW_UPDATE, 0, *av);
        if (s->id == 0)
                s->hp->h2_win_peer->size += s->frame->md.winup_size;
        s->win_peer += s->frame->md.winup_size;
}

/* SECTION: stream.spec.settings_rxsettings rxsettings
 *
 * Receive a SETTINGS frame.
 */
static void
cmd_rxsettings(CMD_ARGS)
{
        struct stream *s, *s2;
        uint32_t val = 0;
        struct http *hp;
        struct frame *f;

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);
        CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);
        s->frame = rxstuff(s);
        CAST_OBJ_NOTNULL(f, s->frame, FRAME_MAGIC);
        CHKFRAME(f->type, TYPE_SETTINGS, 0, *av);
        if (! isnan(f->md.settings[SETTINGS_INITIAL_WINDOW_SIZE])) {
                val = (uint32_t)f->md.settings[SETTINGS_INITIAL_WINDOW_SIZE];
                VTAILQ_FOREACH(s2, &hp->streams, list)
                        s2->win_peer += (val - hp->h2_win_peer->init);
                hp->h2_win_peer->init = val;
        }
}
/* SECTION: stream.spec.prio_rxprio rxprio
 *
 * Receive a PRIORITY frame.
 */
static void
cmd_rxprio (CMD_ARGS)
{
        struct stream *s;
        (void)av;
        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);
        if (s->hp->no_rfc7540_priorities) {
                vtc_log(vl, 4, "skipping rxprio: no_rfc7540_priorities is set");
                return;
        }
        s->frame = rxstuff(s);
        if (s->frame != NULL && s->frame->type != TYPE_PRIORITY) {
                vtc_fatal(vl,
                    "Wrong frame type %s (%d) wanted %s",
                    s->frame->type < TYPE_MAX ?
                    h2_types[s->frame->type] : "?",
                    s->frame->type, "PRIORITY");
        }
}

#define RXFUNC(lctype, upctype) \
        static void \
        cmd_rx ## lctype(CMD_ARGS) \
        { \
                struct stream *s; \
                (void)av; \
                CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC); \
                s->frame = rxstuff(s); \
                if (s->frame != NULL && s->frame->type != TYPE_ ## upctype) { \
                        vtc_fatal(vl, \
                            "Wrong frame type %s (%d) wanted %s", \
                            s->frame->type < TYPE_MAX ? \
                            h2_types[s->frame->type] : "?", \
                            s->frame->type, #upctype); \
                } \
        }

/* SECTION: stream.spec.reset_rxrst rxrst
 *
 * Receive a RST_STREAM frame.
 */
RXFUNC(rst,     RST_STREAM)

/* SECTION: stream.spec.ping_rxping rxping
 *
 * Receive a PING frame.
 */
RXFUNC(ping,    PING)

/* SECTION: stream.spec.goaway_rxgoaway rxgoaway
 *
 * Receive a GOAWAY frame.
 */
RXFUNC(goaway,  GOAWAY)

/* SECTION: stream.spec.frame_rxframe
 *
 * Receive a frame, any frame.
 */
static void
cmd_rxframe(CMD_ARGS)
{
        struct stream *s;

        (void)vl;
        (void)av;
        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);
        if (rxstuff(s) == NULL)
                vtc_fatal(s->vl, "No frame received");
}

static void
cmd_expect(CMD_ARGS)
{
        struct http *hp;
        struct stream *s;
        const char *lhs;
        char *cmp;
        const char *rhs;
        char buf[20];

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);
        hp = s->hp;
        CHECK_OBJ_NOTNULL(hp, HTTP_MAGIC);

        AZ(strcmp(av[0], "expect"));
        av++;

        AN(av[0]);
        AN(av[1]);
        AN(av[2]);
        AZ(av[3]);
        PTOK(pthread_mutex_lock(&hp->mtx));
        lhs = cmd_var_resolve(s, av[0], buf);
        cmp = av[1];
        rhs = cmd_var_resolve(s, av[2], buf);
        vtc_expect(vl, av[0], lhs, cmp, av[2], rhs);
        PTOK(pthread_mutex_unlock(&hp->mtx));
}

/* SECTION: stream.spec.gunzip gunzip
 *
 * Same as the ``gunzip`` command for HTTP/1.
 */
static void
cmd_gunzip(CMD_ARGS)
{
        struct http *hp;
        struct stream *s;

        (void)av;
        (void)vl;

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);
        hp = s->hp;
        CHECK_OBJ_NOTNULL(hp, HTTP_MAGIC);

        vtc_gunzip(hp, s->body, &s->bodylen);
}

/* SECTION: stream.spec.write_body
 *
 * write_body STRING
 *      Same as the ``write_body`` command for HTTP/1.
 */
static void
cmd_write_body(CMD_ARGS)
{
        struct stream *s;

        (void)vl;
        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);
        AN(av[0]);
        AN(av[1]);
        AZ(av[2]);
        AZ(strcmp(av[0], "write_body"));
        if (VFIL_writefile(NULL, av[1], s->body, s->bodylen) != 0)
                vtc_fatal(s->vl, "failed to write body: %s (%d)",
                    strerror(errno), errno);
}

/* SECTION: stream.spec Specification
 *
 * The specification of a stream follows the exact same rules as one for a
 * client or a server.
 */
static const struct cmds stream_cmds[] = {
#define CMD_STREAM(n) { CMDS_MAGIC, #n, cmd_##n },
        /* spec */
        CMD_STREAM(expect)
        CMD_STREAM(gunzip)
        CMD_STREAM(rxcont)
        CMD_STREAM(rxdata)
        CMD_STREAM(rxframe)
        CMD_STREAM(rxgoaway)
        CMD_STREAM(rxhdrs)
        CMD_STREAM(rxping)
        CMD_STREAM(rxprio)
        CMD_STREAM(rxpush)
        CMD_STREAM(rxreq)
        CMD_STREAM(rxresp)
        CMD_STREAM(rxrst)
        CMD_STREAM(rxsettings)
        CMD_STREAM(rxwinup)
        CMD_STREAM(sendhex)
        CMD_STREAM(txcont)
        CMD_STREAM(txdata)
        CMD_STREAM(txgoaway)
        CMD_STREAM(txping)
        CMD_STREAM(txprio)
        CMD_STREAM(txpush)
        CMD_STREAM(txreq)
        CMD_STREAM(txresp)
        CMD_STREAM(txrst)
        CMD_STREAM(txsettings)
        CMD_STREAM(txwinup)
        CMD_STREAM(write_body)
        { CMDS_MAGIC, NULL, NULL }
#undef CMD_STREAM
};

static void *
stream_thread(void *priv)
{
        struct stream *s;

        CAST_OBJ_NOTNULL(s, priv, STREAM_MAGIC);
        parse_string(s->vl, s, s->spec);
        vtc_log(s->vl, 2, "Ending stream %u", s->id);
        return (NULL);
}
/**********************************************************************
 * Allocate and initialize a stream
 */

static struct stream *
stream_new(const char *name, struct http *h)
{
        char *p, buf[20];
        struct stream *s;

        if (!strcmp("next", name)) {
                if (h->last_stream > 0)
                        bprintf(buf, "%d", h->last_stream + 2);
                else
                        bprintf(buf, "%d", 1);
                name = buf;
        }

        ALLOC_OBJ(s, STREAM_MAGIC);
        AN(s);
        PTOK(pthread_cond_init(&s->cond, NULL));
        REPLACE(s->name, name);
        AN(s->name);
        VTAILQ_INIT(&s->fq);
        s->win_self = h->h2_win_self->init;
        s->win_peer = h->h2_win_peer->init;
        s->vl = vtc_logopen("%s.%s", h->sess->name, name);
        vtc_log_set_cmd(s->vl, stream_cmds);

        s->weight = 16;
        s->dependency = 0;

        STRTOU32(s->id, name, p, s->vl, "stream");
        if (s->id & (1U << 31))
                vtc_fatal(s->vl, "Stream id must be a 31-bits integer "
                    "(found %s)", name);

        CHECK_OBJ_NOTNULL(h, HTTP_MAGIC);
        s->hp = h;
        h->last_stream = s->id;

        //bprintf(s->connect, "%s", "${v1_sock}");
        PTOK(pthread_mutex_lock(&h->mtx));
        VTAILQ_INSERT_HEAD(&h->streams, s, list);
        PTOK(pthread_mutex_unlock(&h->mtx));
        return (s);
}

/**********************************************************************
 * Clean up stream
 */

static void
stream_delete(struct stream *s)
{
        struct frame *f, *f2;

        CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);

        VTAILQ_FOREACH_SAFE(f, &s->fq, list, f2) {
                VTAILQ_REMOVE(&s->fq, f, list);
                clean_frame(&f);
        }
        vtc_logclose(s->vl);
        clean_headers(s->req);
        clean_headers(s->resp);
        AZ(s->frame);
        free(s->body);
        free(s->spec);
        free(s->name);
        FREE_OBJ(s);
}

/**********************************************************************
 * Start the stream thread
 */

static void
stream_start(struct stream *s)
{
        CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);
        vtc_log(s->hp->vl, 2, "Starting stream %s (%p)", s->name, s);
        PTOK(pthread_create(&s->tp, NULL, stream_thread, s));
        s->running = 1;
}

/**********************************************************************
 * Wait for stream thread to stop
 */
static void
stream_wait(struct stream *s)
{
        void *res;
        struct frame *f, *f2;

        CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);
        vtc_log(s->hp->vl, 2, "Waiting for stream %u", s->id);
        PTOK(pthread_join(s->tp, &res));
        if (res != NULL)
                vtc_fatal(s->hp->vl, "Stream %u returned \"%s\"", s->id,
                    (char *)res);

        VTAILQ_FOREACH_SAFE(f, &s->fq, list, f2) {
                VTAILQ_REMOVE(&s->fq, f, list);
                clean_frame(&f);
        }
        clean_frame(&s->frame);
        s->tp = 0;
        s->running = 0;
}

/**********************************************************************
 * Run the stream thread
 */

static void
stream_run(struct stream *s)
{
        stream_start(s);
        stream_wait(s);
}



/* SECTION: client-server.spec.stream
 *
 * stream
 *      HTTP/2 introduces the concept of streams, and these come with
 *      their own specification, and as it's quite big, have been moved
 *      to their own chapter.
 *
 * SECTION: stream stream
 *
 * (note: this section is at the top-level for easier navigation, but
 * it's part of the client/server specification)
 *
 * Streams map roughly to a request in HTTP/2, a request is sent on
 * stream N, the response too, then the stream is discarded. The main
 * exception is the first stream, 0, that serves as coordinator.
 *
 * Stream syntax follow the client/server one::
 *
 *      stream ID [SPEC] [ACTION]
 *
 * ID is the HTTP/2 stream number, while SPEC describes what will be
 * done in that stream. If ID has the value ``next``, the actual stream
 * number is computed based on the last one.
 *
 * Note that, when parsing a stream action, if the entity isn't operating
 * in HTTP/2 mode, these spec is ran before::
 *
 *      txpri/rxpri # client/server
 *      stream 0 {
 *          txsettings
 *          rxsettings
 *          txsettings -ack
 *          rxsettings
 *          expect settings.ack == true
 *      } -run
 *
 * And HTTP/2 mode is then activated before parsing the specification.
 *
 * SECTION: stream.actions Actions
 *
 * \-start
 *      Run the specification in a thread, giving back control immediately.
 *
 * \-wait
 *      Wait for the started thread to finish running the spec.
 *
 * \-run
 *      equivalent to calling ``-start`` then ``-wait``.
 */

void
cmd_stream(CMD_ARGS)
{
        struct stream *s;
        struct http *h;

        (void)vl;
        CAST_OBJ_NOTNULL(h, priv, HTTP_MAGIC);

        AZ(strcmp(av[0], "stream"));
        av++;

        VTAILQ_FOREACH(s, &h->streams, list)
                if (!strcmp(s->name, av[0]))
                        break;
        if (s == NULL)
                s = stream_new(av[0], h);
        av++;

        for (; *av != NULL; av++) {
                if (vtc_error)
                        break;

                if (!strcmp(*av, "-wait")) {
                        stream_wait(s);
                        continue;
                }

                /* Don't muck about with a running client */
                if (s->running)
                        stream_wait(s);

                if (!strcmp(*av, "-start")) {
                        stream_start(s);
                        continue;
                }
                if (!strcmp(*av, "-run")) {
                        stream_run(s);
                        continue;
                }
                if (**av == '-')
                        vtc_fatal(vl, "Unknown stream argument: %s", *av);
                REPLACE(s->spec, *av);
        }
}

void
b64_settings(struct http *hp, const char *s)
{
        uint16_t i;
        uint64_t v, vv;
        const char *buf;
        int shift;

        while (*s) {
                v = 0;
                for (shift = 42; shift >= 0; shift -= 6) {
                        if (*s >= 'A' && *s <= 'Z')
                                vv = (*s - 'A');
                        else if (*s >= 'a' && *s <= 'z')
                                vv = (*s - 'a') + 26;
                        else if (*s >= '0' && *s <= '9')
                                vv = (*s - '0') + 52;
                        else if (*s == '-')
                                vv = 62;
                        else if (*s == '_')
                                vv = 63;
                        else
                                vtc_fatal(hp->vl,
                                    "Bad \"HTTP2-Settings\" header");
                        v |= vv << shift;
                        s++;
                }
                i = v >> 32;
                v &= 0xffff;

                if (i <= SETTINGS_MAX)
                        buf = h2_settings[i];
                else
                        buf = "unknown";

                if (i == SETTINGS_NO_RFC7540_PRIORITIES) {
                        hp->no_rfc7540_priorities = v;
                }
                if (i == SETTINGS_HEADER_TABLE_SIZE) {
                        enum hpk_result hrs;
                        if (hp->sfd) {
                                AN(hp->encctx);
                                hrs = HPK_ResizeTbl(hp->encctx, v);
                        } else {
                                AN(hp->decctx);
                                hrs = HPK_ResizeTbl(hp->decctx, v);
                        }
                        if (hrs != hpk_done)
                                vtc_fatal(hp->vl, "HPK resize failed %d\n", hrs);
                }

                vtc_log(hp->vl, 4, "Upgrade: %s (%d): %ju",
                    buf, i, (intmax_t)v);
        }
}

void
start_h2(struct http *hp)
{
        CHECK_OBJ_NOTNULL(hp, HTTP_MAGIC);
        PTOK(pthread_mutex_init(&hp->mtx, NULL));
        PTOK(pthread_cond_init(&hp->cond, NULL));
        VTAILQ_INIT(&hp->streams);
        hp->h2_win_self->init = 0xffff;
        hp->h2_win_self->size = 0xffff;
        hp->h2_win_peer->init = 0xffff;
        hp->h2_win_peer->size = 0xffff;
        hp->h2 = 1;

        hp->decctx = HPK_NewCtx(4096);
        hp->encctx = HPK_NewCtx(4096);
        PTOK(pthread_create(&hp->tp, NULL, receive_frame, hp));
}

void
stop_h2(struct http *hp)
{
        struct stream *s, *s2;

        CHECK_OBJ_NOTNULL(hp, HTTP_MAGIC);
        VTAILQ_FOREACH_SAFE(s, &hp->streams, list, s2) {
                if (s->running)
                        stream_wait(s);
                PTOK(pthread_mutex_lock(&hp->mtx));
                VTAILQ_REMOVE(&hp->streams, s, list);
                PTOK(pthread_mutex_unlock(&hp->mtx));
                stream_delete(s);
        }

        PTOK(pthread_mutex_lock(&hp->mtx));
        hp->h2 = 0;
        PTOK(pthread_cond_signal(&hp->cond));
        PTOK(pthread_mutex_unlock(&hp->mtx));
        PTOK(pthread_join(hp->tp, NULL));

        HPK_FreeCtx(hp->decctx);
        HPK_FreeCtx(hp->encctx);

        PTOK(pthread_mutex_destroy(&hp->mtx));
        PTOK(pthread_cond_destroy(&hp->cond));
}

		vinyl-cache/bin/vinyltest/vtest2/src/vtc_http2.c
0		/*-
1		* Copyright (c) 2008-2016 Varnish Software AS
2		* All rights reserved.
3		*
4		* Author: Guillaume Quintard <guillaume.quintard@gmail.com>
5		*
6		* SPDX-License-Identifier: BSD-2-Clause
7		*
8		* Redistribution and use in source and binary forms, with or without
9		* modification, are permitted provided that the following conditions
10		* are met:
11		* 1. Redistributions of source code must retain the above copyright
12		* notice, this list of conditions and the following disclaimer.
13		* 2. Redistributions in binary form must reproduce the above copyright
14		* notice, this list of conditions and the following disclaimer in the
15		* documentation and/or other materials provided with the distribution.
16		*
17		* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
18		* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19		* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20		* ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
21		* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22		* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23		* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24		* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25		* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26		* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27		* SUCH DAMAGE.
28		*/
29
30		#include "config.h"
31
32		#include <sys/socket.h>
33
34		#include <math.h>
35		#include <poll.h>
36		#include <stdio.h>
37	16220	#include <stdlib.h>
38		#include <unistd.h>
39		#include <string.h>
40		#include <netinet/in.h>
41
42		#include "vtc.h"
43		#include "vtc_http.h"
44
45		#include "vfil.h"
46	16073	#include "hpack.h"
47		#include "vend.h"
48
49		#define ERR_MAX 13
50		#define BUF_SIZE (1024*2048)
51
52		static const char *const h2_errs[] = {
53		#define H2_ERROR(n,v,sc,g,r,t) [v] = #n,
54		#include <tbl/h2_error.h>
55	15170	NULL
56		};
57
58		static const char *const h2_types[] = {
59		#define H2_FRAME(l,u,t,f,...) [t] = #u,
60		#include <tbl/h2_frames.h>
61		NULL
62		};
63
64	15149	static const char * const h2_settings[] = {
65		[0] = "unknown",
66		#define H2_SETTING(U,l,v,...) [v] = #U,
67		#include <tbl/h2_settings.h>
68		NULL
69		};
70
71		enum h2_settings_e {
72		#define H2_SETTING(U,l,v,...) SETTINGS_##U = v,
73	15086	#include <tbl/h2_settings.h>
74		SETTINGS_MAX
75		};
76
77
78		enum h2_type_e {
79		#define H2_FRAME(l,u,t,f,...) TYPE_##u = t,
80		#include <tbl/h2_frames.h>
81		TYPE_MAX
82	15086	};
83
84		//lint -save -e849 Same enum value
85		enum {
86		ACK = 0x1,
87		END_STREAM = 0x1,
88		PADDED = 0x8,
89		END_HEADERS = 0x4,
90		PRIORITY = 0x20,
91	15044	};
92		//lint -restore
93
94		struct stream {
95		unsigned magic;
96		#define STREAM_MAGIC 0x63f1fac2
97		uint32_t id;
98		struct vtclog *vl;
99		char *spec;
100	14960	char *name;
101		VTAILQ_ENTRY(stream) list;
102		unsigned running;
103		pthread_cond_t cond;
104		struct frame *frame;
105		pthread_t tp;
106		struct http *hp;
107		int64_t win_self;
108		int64_t win_peer;
109	14918	int wf;
110
111		VTAILQ_HEAD(, frame) fq;
112
113		char *body;
114		long bodylen;
115		struct hpk_hdr req[MAX_HDR];
116		struct hpk_hdr resp[MAX_HDR];
117
118	14855	int dependency;
119		int weight;
120		};
121
122		static void
123	25452	clean_headers(struct hpk_hdr *h)
124		{
125	25452	unsigned n = MAX_HDR;
126
127	64541	while (h->t && n > 0) {
128	24297	if (h->key.len)
129	24255	free(h->key.ptr);
130	24297	free(h->value.ptr);
131	24297	memset(h, 0, sizeof(*h));
132	24297	h++;
133	24297	n--;
134		}
135	25452	}
136	14792
137		#define ONLY_H2_CLIENT(hp, av) \
138		do { \
139		if (hp->sfd != NULL) \
140		vtc_fatal(s->vl, \
141		"\"%s\" only possible in client", av[0]); \
142		} while (0)
143
144		#define ONLY_H2_SERVER(hp, av) \
145	14645	do { \
146		if (hp->sfd == NULL) \
147		vtc_fatal(s->vl, \
148		"\"%s\" only possible in server", av[0]); \
149		} while (0)
150
151		static void
152	1197	http_write(const struct http *hp, int lvl,
153		const char buf, int s, const char pfx)
154	14645	{
155		ssize_t l;
156
157	1197	CHECK_OBJ_NOTNULL(hp, HTTP_MAGIC);
158	1197	AN(buf);
159	1197	AN(pfx);
160
161	1197	vtc_dump(hp->vl, lvl, pfx, buf, s);
162	1197	l = write(*hp->sess->fd, buf, s);
163	1197	if (l != s)
164	0	vtc_log(hp->vl, hp->fatal, "Write failed: (%zd vs %d) %s",
165	0	l, s, strerror(errno));
166	1197	}
167
168		static int
169	36269	get_bytes(const struct http hp, char buf, size_t n)
170		{
171		int i;
172		struct pollfd pfd[1];
173
174	36269	CHECK_OBJ_NOTNULL(hp, HTTP_MAGIC);
175	36269	AN(buf);
176
177	72538	while (n > 0) {
178	36269	pfd[0].fd = *hp->sess->fd;
179	36269	pfd[0].events = POLLIN;
180	36269	pfd[0].revents = 0;
181	36269	i = poll(pfd, 1, (int)(hp->timeout * 1000));
182	36269	if (i < 0 && errno == EINTR)
183	0	continue;
184	36269	if (i == 0)
185	0	vtc_log(hp->vl, 3,
186		"HTTP2 rx timeout (fd:%d %.3fs)",
187	0	*hp->sess->fd, hp->timeout);
188	36269	if (i < 0)
189	0	vtc_log(hp->vl, 3,
190		"HTTP2 rx failed (fd:%d poll: %s)",
191	0	*hp->sess->fd, strerror(errno));
192	36269	if (i <= 0)
193	0	return (i);
194	36269	i = read(*hp->sess->fd, buf, n);
195	36269	if (!(pfd[0].revents & POLLIN))
196	0	vtc_log(hp->vl, 4,
197		"HTTP2 rx poll (fd:%d revents: %x n=%zu, i=%d)",
198	0	*hp->sess->fd, pfd[0].revents, n, i);
199	36269	if (i == 0)
200	0	vtc_log(hp->vl, 3,
201		"HTTP2 rx EOF (fd:%d read: %s)",
202	0	*hp->sess->fd, strerror(errno));
203	36269	if (i < 0)
204	0	vtc_log(hp->vl, 3,
205		"HTTP2 rx failed (fd:%d read: %s)",
206	0	*hp->sess->fd, strerror(errno));
207	36269	if (i <= 0)
208	0	return (i);
209	36269	n -= i;
210		}
211	36269	return (1);
212
213	36269	}
214
215		VTAILQ_HEAD(fq_head, frame);
216
217		struct frame {
218		unsigned magic;
219		#define FRAME_MAGIC 0x5dd3ec4
220		uint32_t size;
221		uint32_t stid;
222		uint8_t type;
223		uint8_t flags;
224		char *data;
225
226		VTAILQ_ENTRY(frame) list;
227
228		union {
229		struct {
230		uint32_t stream;
231		uint8_t exclusive;
232		uint8_t weight;
233		} prio;
234		uint32_t rst_err;
235		double settings[SETTINGS_MAX+1];
236		struct {
237		char data[9];
238		int ack;
239		} ping;
240		struct {
241		uint32_t err;
242		uint32_t stream;
243		char *debug;
244		} goaway;
245		uint32_t winup_size;
246		uint32_t promised;
247		uint8_t padded;
248		} md;
249		};
250
251		static void
252	21193	readFrameHeader(struct frame f, const char buf)
253		{
254	21193	CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
255	21193	AN(buf);
256
257	21193	f->size = (unsigned char)buf[0] << 16;
258	21193	f->size += (unsigned char)buf[1] << 8;
259	21193	f->size += (unsigned char)buf[2];
260
261	21193	f->type = (unsigned char)buf[3];
262
263	21193	f->flags = (unsigned char)buf[4];
264
265	21193	f->stid = vbe32dec(buf+5);
266	21193	}
267
268		static void
269	44625	writeFrameHeader(char buf, const struct frame f)
270		{
271	44625	CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
272	44625	AN(buf);
273	44625	buf[0] = (f->size >> 16) & 0xff;
274	44625	buf[1] = (f->size >> 8) & 0xff;
275	44625	buf[2] = (f->size ) & 0xff;
276
277	44625	buf[3] = f->type;
278
279	44625	buf[4] = f->flags;
280
281	44625	vbe32enc(buf + 5, f->stid);
282	44625	}
283
284		#define INIT_FRAME(f, ty, sz, id, fl) \
285		do { \
286		f.magic = FRAME_MAGIC; \
287		f.type = TYPE_ ## ty; \
288		f.size = sz; \
289		f.stid = id; \
290		f.flags = fl; \
291		f.data = NULL; \
292		} while(0)
293
294		static void
295	46861	replace_frame(struct frame *fp, struct frame new)
296		{
297		struct frame *old;
298
299	46861	AN(fp);
300	46861	CHECK_OBJ_ORNULL(new, FRAME_MAGIC);
301
302	46861	old = *fp;
303	46861	*fp = new;
304	46861	if (old == NULL)
305	25662	return;
306
307	21199	CHECK_OBJ(old, FRAME_MAGIC);
308	21199	if (old->type == TYPE_GOAWAY)
309	861	free(old->md.goaway.debug);
310	21199	free(old->data);
311	21199	FREE_OBJ(old);
312	46861	}
313
314		static void
315	33598	clean_frame(struct frame **fp)
316		{
317
318	33598	replace_frame(fp, NULL);
319	33598	}
320
321		static void
322	44625	write_frame(struct stream sp, const struct frame f, const unsigned lock)
323		{
324		struct http *hp;
325		ssize_t l;
326		char hdr[9];
327
328	44625	CHECK_OBJ_NOTNULL(sp, STREAM_MAGIC);
329	44625	hp = sp->hp;
330	44625	CHECK_OBJ_NOTNULL(hp, HTTP_MAGIC);
331	44625	CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
332
333	44625	writeFrameHeader(hdr, f);
334
335	89250	vtc_log(sp->vl, 3,
336		"tx: stream: %d, type: %s (%d), flags: 0x%02x, size: %d",
337	44625	f->stid,
338	44625	f->type < TYPE_MAX ? h2_types[f->type] : "?",
339	44625	f->type, f->flags, f->size);
340
341	44625	if (f->type == TYPE_DATA) {
342	7077	sp->win_peer -= f->size;
343	7077	hp->h2_win_peer->size -= f->size;
344	7077	}
345
346	44625	if (lock)
347	35889	PTOK(pthread_mutex_lock(&hp->mtx));
348	44625	l = write(*hp->sess->fd, hdr, sizeof(hdr));
349	44625	if (l != sizeof(hdr))
350	41450	vtc_log(sp->vl, hp->fatal, "Write failed: (%zd vs %zd) %s",
351	20725	l, sizeof(hdr), strerror(errno));
352
353	44625	if (f->size) {
354	36078	AN(f->data);
355	36078	l = write(*hp->sess->fd, f->data, f->size);
356	36078	if (l != f->size)
357	41450	vtc_log(sp->vl, hp->fatal,
358		"Write failed: (%zd vs %d) %s",
359	20725	l, f->size, strerror(errno));
360	36078	}
361	44625	if (lock)
362	35889	PTOK(pthread_mutex_unlock(&hp->mtx));
363	44625	}
364
365		static void
366	126	exclusive_stream_dependency(const struct stream *s)
367		{
368		struct stream *target;
369	126	struct http *hp = s->hp;
370
371	126	if (s->id == 0)
372	0	return;
373
374	588	VTAILQ_FOREACH(target, &hp->streams, list) {
375	462	if (target->id != s->id && target->dependency == s->dependency)
376	168	target->dependency = s->id;
377	462	}
378	126	}
379
380		static void
381	21210	explain_flags(uint8_t flags, uint8_t type, struct vtclog *vl)
382		{
383	21210	if (flags & ACK && (type == TYPE_PING \|\| type == TYPE_SETTINGS)) {
384	4494	vtc_log(vl, 3, "flag: ACK");
385	22260	} else if (flags & END_STREAM && (type == TYPE_HEADERS \|\|
386	1050	type == TYPE_PUSH_PROMISE \|\| type == TYPE_DATA)) {
387	4116	vtc_log(vl, 3, "flag: END_STREAM");
388	16842	} else if (flags & END_HEADERS && (type == TYPE_HEADERS \|\|
389	147	type == TYPE_PUSH_PROMISE \|\| type == TYPE_CONTINUATION)) {
390	1239	vtc_log(vl, 3, "flag: END_TYPE_HEADERS");
391	12600	} else if (flags & PRIORITY && (type == TYPE_HEADERS \|\|
392	0	type == TYPE_PUSH_PROMISE)) {
393	0	vtc_log(vl, 3, "flag: END_PRIORITY");
394	11361	} else if (flags & PADDED && (type == TYPE_DATA \|\| type ==
395	0	TYPE_HEADERS \|\| type == TYPE_PUSH_PROMISE)) {
396	21	vtc_log(vl, 3, "flag: PADDED");
397	11361	} else if (flags)
398	0	vtc_log(vl, 3, "UNKNOWN FLAG(S): 0x%02x", flags);
399	21210	}
400
401		static void
402	4158	parse_data(struct stream s, struct frame f)
403		{
404		struct http *hp;
405	4158	uint32_t size = f->size;
406	4158	char *data = f->data;
407
408	4158	CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
409	4158	CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);
410	4158	CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);;
411
412	4158	if (f->flags & PADDED) {
413	84	f->md.padded = ((uint8_t )data);
414	84	if (f->md.padded >= size) {
415	0	vtc_log(s->vl, hp->fatal,
416		"invalid padding: %d reported,"
417		"but size is only %d",
418	0	f->md.padded, size);
419	0	size = 0;
420	0	f->md.padded = 0;
421	0	}
422	84	data++;
423	84	size -= f->md.padded + 1;
424	84	vtc_log(s->vl, 4, "padding: %3d", f->md.padded);
425	84	}
426
427	4158	if (s->id)
428	4116	s->win_self -= size;
429
430	4158	s->hp->h2_win_self->size -= size;
431
432	4158	if (!size) {
433	609	AZ(data);
434	609	vtc_log(s->vl, 4, "s%u - no data", s->id);
435	609	return;
436		}
437
438	3549	s->body = realloc(s->body, s->bodylen + size + 1L);
439	3549	AN(s->body);
440	3549	memcpy(s->body + s->bodylen, data, size);
441	3549	s->bodylen += size;
442	3549	s->body[s->bodylen] = '\0';
443	4158	}
444
445		static void
446	4200	decode_hdr(struct http hp, struct hpk_hdr h, const struct vsb *vsb)
447		{
448		struct hpk_iter *iter;
449	4200	enum hpk_result r = hpk_err;
450		int n;
451
452	4200	CHECK_OBJ_NOTNULL(vsb, VSB_MAGIC);
453	4200	CAST_OBJ_NOTNULL(hp, hp, HTTP_MAGIC);;
454
455	4200	if (VSB_len(vsb) == 0)
456	0	return;
457
458	4200	iter = HPK_NewIter(hp->decctx, VSB_data(vsb), VSB_len(vsb));
459
460	4200	n = 0;
461	4200	while (n < MAX_HDR && h[n].t)
462	0	n++;
463	24297	while (n < MAX_HDR) {
464	24297	r = HPK_DecHdr(iter, h + n);
465	24297	if (r == hpk_err )
466	42	break;
467	48510	vtc_log(hp->vl, 4, "header[%2d]: %s: %s",
468	24255	n, h[n].key.ptr, h[n].value.ptr);
469	24255	n++;
470	24255	if (r == hpk_done)
471	4158	break;
472		}
473
474	4200	if (r != hpk_done) {
475	84	vtc_log(hp->vl, hp->fatal ? 4 : 0,
476	42	"Header decoding failed (%d) %d", r, hp->fatal);
477	4200	} else if (n == MAX_HDR) {
478	0	vtc_log(hp->vl, hp->fatal,
479		"Max number of headers reached (%d)", MAX_HDR);
480	0	}
481
482	4200	HPK_FreeIter(iter);
483	4200	}
484
485		static void
486	4494	parse_hdr(struct stream s, struct frame f, struct vsb *vsb)
487		{
488	4494	int shift = 0;
489	4494	int exclusive = 0;
490	4494	uint32_t size = f->size;
491	4494	char *data = f->data;
492		struct http *hp;
493		uint32_t n;
494
495	4494	CHECK_OBJ_NOTNULL(f, FRAME_MAGIC);
496	4494	CHECK_OBJ_NOTNULL(s, STREAM_MAGIC);
497	4494	CHECK_OBJ_NOTNULL(vsb, VSB_MAGIC);
498	4494	CAST_OBJ_NOTNULL(hp, s->hp, HTTP_MAGIC);;
499