test_tcpsocket_starttls.js

Enable keyboard shortcuts

/* Any copyright is dedicated to the Public Domain.

 * http://creativecommons.org/publicdomain/zero/1.0/ */

"use strict";

/**

 * Tests that data received in plaintext but not yet delivered when

 * upgradeToSecure() is called is discarded, rather than delivered as if it

 * had been received over TLS.

*/

add_task(async function test_plaintext_discarded_on_upgrade() {

  const server = Cc["@mozilla.org/network/server-socket;1"].createInstance(

    Ci.nsIServerSocket

);

  server.init(-1, true, -1);

  const { promise: accepted, resolve: onAccepted } = Promise.withResolvers();

  server.asyncListen({

    onSocketAccepted(serverSocket, transport) {

      onAccepted(transport);

},

    onStopListening() {},

});

  const socket = new TCPSocket("127.0.0.1", server.port);

  const received = [];

  let onData;

  socket.ondata = event => {

    received.push(event.data);

    onData?.();

};

  socket.onerror = () => {};

  await new Promise(resolve => (socket.onopen = resolve));

  const transport = await accepted;

  const output = transport.openOutputStream(

    Ci.nsITransport.OPEN_BLOCKING,

0,

);

  const input = transport

    .openInputStream(0, 0, 0)

    .QueryInterface(Ci.nsIAsyncInputStream);

  const write = data => output.write(data, data.length);

  const { promise: gotReady, resolve: onReady } = Promise.withResolvers();

  onData = onReady;

  write("220 Ready to start TLS\r\n");

  await gotReady;

  onData = null;

  Assert.deepEqual(

    received,

    ["220 Ready to start TLS\r\n"],

    "the plaintext response should be delivered"

);

  socket.suspend();

  write("250 Injected\r\n");

  // Give the injected data time to be buffered by the client socket.

  await new Promise(resolve => do_timeout(500, resolve));

  socket.upgradeToSecure();

  socket.resume();

  socket.send("EHLO test\r\n");

  // The send above starts the TLS handshake. Once the ClientHello reaches the

  // server, any buffered plaintext would have been delivered.

  await new Promise(resolve =>

    input.asyncWait(resolve, 0, 0, Services.tm.mainThread)

);

  const firstByte = Cc["@mozilla.org/binaryinputstream;1"].createInstance(

    Ci.nsIBinaryInputStream

);

  firstByte.setInputStream(input);

  Assert.equal(

    firstByte.read8(),

    0x16,

    "the client should have started a TLS handshake"

);

  await new Promise(resolve => executeSoon(resolve));

  Assert.deepEqual(

    received,

    ["220 Ready to start TLS\r\n"],

    "plaintext received before the upgrade should not be delivered after it"

);

  socket.close();

  transport.close(Cr.NS_OK);

  server.close();

});