U
vfV @ s d Z ddlZddlZddlZddlZddlZddlZddlmZ ddl m
Z
ddl m Z m
Z
mZmZmZmZmZ ddlmZ ddlmZmZ ddlmZ d d
ZG d d d eZ d
d Z G dd dZ dS )z
Packet handling
N)HMAC)util)
linefeed_byte
cr_byte_value MSG_NAMESDEBUG xffffffff zero_bytebyte_ord)u) SSHExceptionProxyCommandFailure)Messagec C s t | || S N)r digest)keymessageZ digest_class r @/opt/alt/python38/lib/python3.8/site-packages/paramiko/packet.py compute_hmac. s r c @ s e Zd ZdZdS )NeedRekeyExceptionz1
Exception indicating a rekey is needed.
N)__name__
__module__ __qualname____doc__r r r r r 2 s r c C s. d }t | jtkr*t| jdkr*| jd }|S Nr )typeargstuplelen)eargr r r first_arg: s
r" c @ s2 e Zd ZdZeddZeddZeddZeddZdd Z e
dd Z dd Z d
d Z
d d
ZdBddZdCddZdd Zdd Zdd Zdd Zdd Zd d Zd d Zd!d" Zd#d$ Zd%d& Zd'd( Zd)d* Z d+d, Z dDd-d.Z d/d0 Z d1d2 Z d3d4 Z!d5d6 Z"d7d8 Z#d9d: Z$d;d< Z%d=d> Z&d?d@ Z'dAS )E
Packetizerz9
Implementation of the base SSH packet protocol.
c C s || _ d | _d| _d| _d| _d| _t | _d| _d| _ d| _
d| _ d| _ d| _
d| _d| _d| _d| _d| _d | _d | _d| _d | _d | _t | _t | _d | _d | _d| _ d| _ d| _ d| _ t ! | _"d| _#t$$ | _%d | _&d | _'d| _(d| _)d S )NFr )*_Packetizer__socket_Packetizer__logger_Packetizer__closed_Packetizer__dump_packets_Packetizer__need_rekey_Packetizer__init_countbytes_Packetizer__remainder_initial_kex_done_Packetizer__sent_bytes_Packetizer__sent_packets_Packetizer__received_bytes _Packetizer__received_packets$_Packetizer__received_bytes_overflow&_Packetizer__received_packets_overflow_Packetizer__block_size_out_Packetizer__block_size_in_Packetizer__mac_size_out_Packetizer__mac_size_in _Packetizer__block_engine_out _Packetizer__block_engine_in_Packetizer__sdctr_out_Packetizer__mac_engine_out_Packetizer__mac_engine_in_Packetizer__mac_key_out_Packetizer__mac_key_in _Packetizer__compress_engine_out _Packetizer__compress_engine_in _Packetizer__sequence_number_out _Packetizer__sequence_number_in_Packetizer__etm_out_Packetizer__etm_in threadingRLock_Packetizer__write_lock _Packetizer__keepalive_intervaltime_Packetizer__keepalive_last _Packetizer__keepalive_callback_Packetizer__timer _Packetizer__handshake_complete_Packetizer__timer_expired)selfsocketr r r __init__Q sL
zPacketizer.__init__c C s | j S r )r) rQ r r r closed s zPacketizer.closedc C s
d| _ d S r )rC rT r r r reset_seqno_out s zPacketizer.reset_seqno_outc C s
d| _ d S r )rD rT r r r reset_seqno_in s zPacketizer.reset_seqno_inc C s
|| _ dS )z?
Set the Python log object to use for logging.
N)r( )rQ logr r r set_log s zPacketizer.set_logFc C s^ || _ || _|| _|| _|| _|| _d| _d| _|| _| j dO _ | j dkrZd| _ d| _
dS )zd
Switch outbound data cipher.
:param etm: Set encrypt-then-mac from OpenSSH
r FN) r: r< r6 r= r8 r? r0 r1 rE r, r+ )rQ block_engine
block_size
mac_enginemac_sizemac_keyZsdctretmr r r set_outbound_cipher s
z Packetizer.set_outbound_cipherc C sd || _ || _|| _|| _|| _d| _d| _d| _d| _|| _ | j
dO _
| j
dkr`d| _
d| _ dS )zc
Switch inbound data cipher.
:param etm: Set encrypt-then-mac from OpenSSH
r r$ r[ FN) r; r7 r> r9 r@ r2 r3 r4 r5 rF r, r+ )rQ r\ r] r^ r_ r` ra r r r set_inbound_cipher s
z Packetizer.set_inbound_cipherc C s
|| _ d S r )rA rQ Z
compressorr r r set_outbound_compressor s z"Packetizer.set_outbound_compressorc C s
|| _ d S r )rB rd r r r set_inbound_compressor s z!Packetizer.set_inbound_compressorc C s d| _ | j d S NT)r) r' closerT r r r rh s zPacketizer.closec C s
|| _ d S r r* )rQ hexdumpr r r set_hexdump s zPacketizer.set_hexdumpc C s | j S r ri rT r r r get_hexdump s zPacketizer.get_hexdumpc C s | j S r )r9 rT r r r get_mac_size_in s zPacketizer.get_mac_size_inc C s | j S r )r8 rT r r r get_mac_size_out s zPacketizer.get_mac_size_outc C s | j S )z
Returns ``True`` if a new set of keys needs to be negotiated. This
will be triggered during a packet read or write, so it should be
checked after every read or write, or at least after every few.
r+ rT r r r
need_rekey s zPacketizer.need_rekeyc C s || _ || _t | _dS )z
Turn on/off the callback keepalive. If ``interval`` seconds pass with
no data read from or written to the socket, the callback will be
executed and the timer will be reset.
N)rJ rM rK rL )rQ intervalcallbackr r r
set_keepalive s zPacketizer.set_keepalivec C s
d| _ d S rg )rP rT r r r
read_timer s zPacketizer.read_timerc C s( | j s$tt|| j| _ | j dS )z
Tells `Packetizer` that the handshake process started.
Starts a book keeping timer that can signal a timeout in the
handshake process.
:param float timeout: amount of seconds to wait before timing out
N)rN rG Timerfloatrt start)rQ timeoutr r r start_handshake s zPacketizer.start_handshakec C s | j s
dS | jrdS | jS )aR
Checks if the handshake has timed out.
If `start_handshake` wasn't called before the call to this function,
the return value will always be `False`. If the handshake completed
before a timeout was reached, the return value will be `False`
:return: handshake time out status, as a `bool`
F)rN rO rP rT r r r handshake_timed_out s
z Packetizer.handshake_timed_outc C s | j r | j d| _d| _dS )zF
Tells `Packetizer` that the handshake has completed.
FTN)rN cancelrP rO rT r r r complete_handshake s
z Packetizer.complete_handshakec
C s8 t }t| jdkr>| jd| }| j|d | _|t|8 }|dkr4d}| rZt z6| j|}t|dkrzt ||7 }|t|8 }W nd tjk
r d}Y nL tj k
r } z,t
|}|t j krd}n| j
rt n W 5 d}~X Y nX |r>| j
rt |r*t|dkr*| jr*t | q>|S )a&
Read as close to N bytes as possible, blocking as long as necessary.
:param int n: number of bytes to read
:return: the data read, as a `str`
:raises:
``EOFError`` -- if the socket was closed before all the bytes could
be read
r NFT)r- r r. rz EOFErrorr' recvrR rx errorr" errnoEAGAINr) r+ r _check_keepalive)rQ n check_rekeyoutZ got_timeoutxr r! r r r read_all s>
zPacketizer.read_allc
C s t | _d}t|dkrd}z| j|}W n tjk
rJ d}Y nj tjk
r } z t|}|t j
krtd}nd}W 5 d }~X Y n, t k
r Y n t k
r d}Y nX |rd}| j
rd}n |dkr|dkrd}|d7 }|dk rt |t|krq||d }qd S )Nr FT
rZ )rK rL r r' sendrR rx r r" r r r
Exceptionr) r} )rQ r Z#iteration_with_zero_as_return_valueZ retry_writer r r! r r r write_allN s<
zPacketizer.write_allc C sr | j }t|kr || |7 }q|t}||d d | _ |d| }t|dkrj|d tkrj|dd }t|S )z
Read a line from the socket. We assume no data is pending after the
line, so it's okay to attempt large reads.
rZ Nr r )r. r
_read_timeoutindexr r r )rQ rx bufr r r r readlinev s
zPacketizer.readlinec C s | }t|d }|tkr&t| }n
d|}t|}| j z| jdk rZ| |}| |}| j
r| t d|| | t t
|d | jdk r| jr|dd | j|dd }q| j|}n|}| jdk r td| j}|| jr|n| }|t| j|| jd| j 7 }| jd t@ } | dkrH| jsHtd | | _| | | j t|7 _ | j d7 _ | j | j kp| j | j k}
|
r| j!sd
} | t | | j | j d| _"d| _#| $ W 5 | j X dS ) zR
Write a block of data using the current cipher, as an SSH block.
r ${:x}Nz Write packet <{}>, length {}zOUT: >IrZ /Sequence number rolled over during initial kex!z(Rekeying (hit {} packets, {} bytes sent))%Zasbytesr
r formatr rI acquirereleaserA
_build_packetr* _logr r
format_binaryr: rE updatestructpackrC r r? r= r8 r r/ r r r0 r1
REKEY_PACKETS REKEY_BYTESr+ r4 r5 _trigger_rekey) rQ datacmdcmd_nameZorig_lenpacketr packedpayloadnext_seqZ
sent_too_muchmsgr r r send_message sp
zPacketizer.send_messagec C s | j | jdd}| jrtd|dd d }|| j d }|dd | j |dd }| j | jdd}td| j|| }t| j || j
d| j }t ||st
d |}| jdk r| j|}| jr| tt |d
| jr|}ntd|dd d }|dd }|t| | j dkr,t
d | || j t| } | d|t| }| |t| d }
| jdk r| j|}|| }| jr| tt |d
| jdkr| js|
d| j }td| j|| }t| j || j
d| j }t ||st
d t|d } |d || } | jrF| td
|| | jdk r\| | } t| d d }
| j|
_| jd t@ }|dkr| jst
d|| _|| j d }| j |7 _ | j d 7 _ | j r| j |7 _ | j d 7 _ | j | j!ks | j | j"krbt
dnL| j | j#ks2| j | j$krbd}| t|| j | j d| _ d| _ | % t| d }|t&krt&| }n
d|}| jr| td|t| ||
fS )z
Only one thread should ever be in this function (no other locking is
done).
:raises: `.SSHException` -- if the packet is mangled
:raises: `.NeedRekeyException` -- if the transport should rekey
T)r r Nr r Fz>IIzMismatched MACzIN: zInvalid packet blockingrZ z"Got payload ({} bytes, {} padding)r z+Remote transport is ignoring rekey requestsz,Rekeying (hit {} packets, {} bytes received)r zRead packet <{}>, length {})'r r7 rF r unpackr9 r rD r r@ r> r Zconstant_time_bytes_eqr r; r r* r r r r r
r rB r Zseqnor r/ r2 r3 r+ r4 r5 REKEY_PACKETS_OVERFLOW_MAXREKEY_BYTES_OVERFLOW_MAXr r r r )rQ headerZ packet_size remainingr macZ mac_payloadZmy_macleftoverr Z post_packetpaddingr r r Zraw_packet_sizeerrr r r r r read_message s
zPacketizer.read_messagec C sH | j d krd S tt|tr6|D ]}| j || q n| j || d S r )r(
issubclassr listrX )rQ levelr mr r r r N s
zPacketizer._logc C s@ | j r| jr| jrd S t }|| j| j kr<| || _d S r )rJ r: r+ rK rL rM )rQ nowr r r r W s zPacketizer._check_keepalivec C st t }z&| jd}t|dkr(t W qpW n tjk
rD Y nX | jrRt t }|| |krt q|S )N r )rK r' r~ r r} rR rx r) )rQ rx rw r r r r r r d s
zPacketizer._read_timeoutc C s~ | j }| jrdnd}d| t|| | }tdt|| d |}||7 }| js^| jd krl|t| 7 }n|t |7 }|S )Nr r& r[ z>IBrZ )
r6 rE r r r r< r: r osurandom)rQ r ZbsizeZaddlenr r r r r r u s zPacketizer._build_packetc C s
d| _ d S rg ro rT r r r r s zPacketizer._trigger_rekeyN)FF)F)F)(r r r r powr r r r rS propertyrU rV rW rY rb rc re rf rh rk rl rm rn rp rs rt ry rz r| r r r r r r r r r r r r r r r# A sP
1
%
0(B
r# ) r r r rR r rG rK hmacr Zparamikor Zparamiko.commonr r r r r r r
Z
paramiko.utilr Zparamiko.ssh_exceptionr r
Zparamiko.messager r r r r" r# r r r r s $