|  | @@ -1,311 +0,0 @@
 | 
	
		
			
				|  |  | -package protocol
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -import (
 | 
	
		
			
				|  |  | -	"io"
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	"v2ray.com/core/common/buf"
 | 
	
		
			
				|  |  | -	"v2ray.com/core/common/crypto"
 | 
	
		
			
				|  |  | -	"v2ray.com/core/common/errors"
 | 
	
		
			
				|  |  | -	"v2ray.com/core/common/log"
 | 
	
		
			
				|  |  | -	v2net "v2ray.com/core/common/net"
 | 
	
		
			
				|  |  | -	"v2ray.com/core/proxy"
 | 
	
		
			
				|  |  | -)
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -const (
 | 
	
		
			
				|  |  | -	socksVersion  = byte(0x05)
 | 
	
		
			
				|  |  | -	socks4Version = byte(0x04)
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	AuthNotRequired      = byte(0x00)
 | 
	
		
			
				|  |  | -	AuthGssApi           = byte(0x01)
 | 
	
		
			
				|  |  | -	AuthUserPass         = byte(0x02)
 | 
	
		
			
				|  |  | -	AuthNoMatchingMethod = byte(0xFF)
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	Socks4RequestGranted  = byte(90)
 | 
	
		
			
				|  |  | -	Socks4RequestRejected = byte(91)
 | 
	
		
			
				|  |  | -)
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -// Authentication request header of Socks5 protocol
 | 
	
		
			
				|  |  | -type Socks5AuthenticationRequest struct {
 | 
	
		
			
				|  |  | -	version     byte
 | 
	
		
			
				|  |  | -	nMethods    byte
 | 
	
		
			
				|  |  | -	authMethods [256]byte
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func (request *Socks5AuthenticationRequest) HasAuthMethod(method byte) bool {
 | 
	
		
			
				|  |  | -	for i := 0; i < int(request.nMethods); i++ {
 | 
	
		
			
				|  |  | -		if request.authMethods[i] == method {
 | 
	
		
			
				|  |  | -			return true
 | 
	
		
			
				|  |  | -		}
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -	return false
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func ReadAuthentication(reader io.Reader) (auth Socks5AuthenticationRequest, auth4 Socks4AuthenticationRequest, err error) {
 | 
	
		
			
				|  |  | -	buffer := make([]byte, 256)
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	nBytes, err := reader.Read(buffer)
 | 
	
		
			
				|  |  | -	if err != nil {
 | 
	
		
			
				|  |  | -		return
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -	if nBytes < 2 {
 | 
	
		
			
				|  |  | -		err = errors.New("Socks: Insufficient header.")
 | 
	
		
			
				|  |  | -		return
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	if buffer[0] == socks4Version {
 | 
	
		
			
				|  |  | -		auth4.Version = buffer[0]
 | 
	
		
			
				|  |  | -		auth4.Command = buffer[1]
 | 
	
		
			
				|  |  | -		auth4.Port = v2net.PortFromBytes(buffer[2:4])
 | 
	
		
			
				|  |  | -		copy(auth4.IP[:], buffer[4:8])
 | 
	
		
			
				|  |  | -		err = Socks4Downgrade
 | 
	
		
			
				|  |  | -		return
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	auth.version = buffer[0]
 | 
	
		
			
				|  |  | -	if auth.version != socksVersion {
 | 
	
		
			
				|  |  | -		log.Warning("Socks: Unknown protocol version ", auth.version)
 | 
	
		
			
				|  |  | -		err = proxy.ErrInvalidProtocolVersion
 | 
	
		
			
				|  |  | -		return
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	auth.nMethods = buffer[1]
 | 
	
		
			
				|  |  | -	if auth.nMethods <= 0 {
 | 
	
		
			
				|  |  | -		log.Warning("Socks: Zero length of authentication methods")
 | 
	
		
			
				|  |  | -		err = crypto.ErrAuthenticationFailed
 | 
	
		
			
				|  |  | -		return
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	if nBytes-2 != int(auth.nMethods) {
 | 
	
		
			
				|  |  | -		log.Warning("Socks: Unmatching number of auth methods, expecting ", auth.nMethods, ", but got ", nBytes)
 | 
	
		
			
				|  |  | -		err = crypto.ErrAuthenticationFailed
 | 
	
		
			
				|  |  | -		return
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -	copy(auth.authMethods[:], buffer[2:nBytes])
 | 
	
		
			
				|  |  | -	return
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -type Socks5AuthenticationResponse struct {
 | 
	
		
			
				|  |  | -	version    byte
 | 
	
		
			
				|  |  | -	authMethod byte
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func NewAuthenticationResponse(authMethod byte) *Socks5AuthenticationResponse {
 | 
	
		
			
				|  |  | -	return &Socks5AuthenticationResponse{
 | 
	
		
			
				|  |  | -		version:    socksVersion,
 | 
	
		
			
				|  |  | -		authMethod: authMethod,
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func WriteAuthentication(writer io.Writer, r *Socks5AuthenticationResponse) error {
 | 
	
		
			
				|  |  | -	_, err := writer.Write([]byte{r.version, r.authMethod})
 | 
	
		
			
				|  |  | -	return err
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -type Socks5UserPassRequest struct {
 | 
	
		
			
				|  |  | -	version  byte
 | 
	
		
			
				|  |  | -	username string
 | 
	
		
			
				|  |  | -	password string
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func (request Socks5UserPassRequest) Username() string {
 | 
	
		
			
				|  |  | -	return request.username
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func (request Socks5UserPassRequest) Password() string {
 | 
	
		
			
				|  |  | -	return request.password
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func (request Socks5UserPassRequest) AuthDetail() string {
 | 
	
		
			
				|  |  | -	return request.username + ":" + request.password
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func ReadUserPassRequest(reader io.Reader) (request Socks5UserPassRequest, err error) {
 | 
	
		
			
				|  |  | -	buffer := buf.NewLocal(512)
 | 
	
		
			
				|  |  | -	defer buffer.Release()
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	err = buffer.AppendSupplier(buf.ReadFullFrom(reader, 2))
 | 
	
		
			
				|  |  | -	if err != nil {
 | 
	
		
			
				|  |  | -		return
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -	request.version = buffer.Byte(0)
 | 
	
		
			
				|  |  | -	nUsername := int(buffer.Byte(1))
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	buffer.Clear()
 | 
	
		
			
				|  |  | -	err = buffer.AppendSupplier(buf.ReadFullFrom(reader, nUsername))
 | 
	
		
			
				|  |  | -	if err != nil {
 | 
	
		
			
				|  |  | -		return
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -	request.username = buffer.String()
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	err = buffer.AppendSupplier(buf.ReadFullFrom(reader, 1))
 | 
	
		
			
				|  |  | -	if err != nil {
 | 
	
		
			
				|  |  | -		return
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -	nPassword := int(buffer.Byte(0))
 | 
	
		
			
				|  |  | -	err = buffer.AppendSupplier(buf.ReadFullFrom(reader, nPassword))
 | 
	
		
			
				|  |  | -	if err != nil {
 | 
	
		
			
				|  |  | -		return
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -	request.password = buffer.String()
 | 
	
		
			
				|  |  | -	return
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -type Socks5UserPassResponse struct {
 | 
	
		
			
				|  |  | -	version byte
 | 
	
		
			
				|  |  | -	status  byte
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func NewSocks5UserPassResponse(status byte) Socks5UserPassResponse {
 | 
	
		
			
				|  |  | -	return Socks5UserPassResponse{
 | 
	
		
			
				|  |  | -		version: socksVersion,
 | 
	
		
			
				|  |  | -		status:  status,
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func WriteUserPassResponse(writer io.Writer, response Socks5UserPassResponse) error {
 | 
	
		
			
				|  |  | -	_, err := writer.Write([]byte{response.version, response.status})
 | 
	
		
			
				|  |  | -	return err
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -const (
 | 
	
		
			
				|  |  | -	AddrTypeIPv4   = byte(0x01)
 | 
	
		
			
				|  |  | -	AddrTypeIPv6   = byte(0x04)
 | 
	
		
			
				|  |  | -	AddrTypeDomain = byte(0x03)
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	CmdConnect      = byte(0x01)
 | 
	
		
			
				|  |  | -	CmdBind         = byte(0x02)
 | 
	
		
			
				|  |  | -	CmdUdpAssociate = byte(0x03)
 | 
	
		
			
				|  |  | -)
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -type Socks5Request struct {
 | 
	
		
			
				|  |  | -	Version  byte
 | 
	
		
			
				|  |  | -	Command  byte
 | 
	
		
			
				|  |  | -	AddrType byte
 | 
	
		
			
				|  |  | -	IPv4     [4]byte
 | 
	
		
			
				|  |  | -	Domain   string
 | 
	
		
			
				|  |  | -	IPv6     [16]byte
 | 
	
		
			
				|  |  | -	Port     v2net.Port
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func ReadRequest(reader io.Reader) (request *Socks5Request, err error) {
 | 
	
		
			
				|  |  | -	buffer := buf.NewLocal(512)
 | 
	
		
			
				|  |  | -	defer buffer.Release()
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	err = buffer.AppendSupplier(buf.ReadFullFrom(reader, 4))
 | 
	
		
			
				|  |  | -	if err != nil {
 | 
	
		
			
				|  |  | -		return
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	request = &Socks5Request{
 | 
	
		
			
				|  |  | -		Version: buffer.Byte(0),
 | 
	
		
			
				|  |  | -		Command: buffer.Byte(1),
 | 
	
		
			
				|  |  | -		// buffer[2] is a reserved field
 | 
	
		
			
				|  |  | -		AddrType: buffer.Byte(3),
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -	switch request.AddrType {
 | 
	
		
			
				|  |  | -	case AddrTypeIPv4:
 | 
	
		
			
				|  |  | -		_, err = io.ReadFull(reader, request.IPv4[:])
 | 
	
		
			
				|  |  | -		if err != nil {
 | 
	
		
			
				|  |  | -			return
 | 
	
		
			
				|  |  | -		}
 | 
	
		
			
				|  |  | -	case AddrTypeDomain:
 | 
	
		
			
				|  |  | -		buffer.Clear()
 | 
	
		
			
				|  |  | -		err = buffer.AppendSupplier(buf.ReadFullFrom(reader, 1))
 | 
	
		
			
				|  |  | -		if err != nil {
 | 
	
		
			
				|  |  | -			return
 | 
	
		
			
				|  |  | -		}
 | 
	
		
			
				|  |  | -		domainLength := int(buffer.Byte(0))
 | 
	
		
			
				|  |  | -		err = buffer.AppendSupplier(buf.ReadFullFrom(reader, domainLength))
 | 
	
		
			
				|  |  | -		if err != nil {
 | 
	
		
			
				|  |  | -			return
 | 
	
		
			
				|  |  | -		}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -		request.Domain = string(buffer.BytesFrom(-domainLength))
 | 
	
		
			
				|  |  | -	case AddrTypeIPv6:
 | 
	
		
			
				|  |  | -		_, err = io.ReadFull(reader, request.IPv6[:])
 | 
	
		
			
				|  |  | -		if err != nil {
 | 
	
		
			
				|  |  | -			return
 | 
	
		
			
				|  |  | -		}
 | 
	
		
			
				|  |  | -	default:
 | 
	
		
			
				|  |  | -		err = errors.Format("Socks: Unexpected address type %d", request.AddrType)
 | 
	
		
			
				|  |  | -		return
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	err = buffer.AppendSupplier(buf.ReadFullFrom(reader, 2))
 | 
	
		
			
				|  |  | -	if err != nil {
 | 
	
		
			
				|  |  | -		return
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -	request.Port = v2net.PortFromBytes(buffer.BytesFrom(-2))
 | 
	
		
			
				|  |  | -	return
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func (request *Socks5Request) Destination() v2net.Destination {
 | 
	
		
			
				|  |  | -	switch request.AddrType {
 | 
	
		
			
				|  |  | -	case AddrTypeIPv4:
 | 
	
		
			
				|  |  | -		return v2net.TCPDestination(v2net.IPAddress(request.IPv4[:]), request.Port)
 | 
	
		
			
				|  |  | -	case AddrTypeIPv6:
 | 
	
		
			
				|  |  | -		return v2net.TCPDestination(v2net.IPAddress(request.IPv6[:]), request.Port)
 | 
	
		
			
				|  |  | -	case AddrTypeDomain:
 | 
	
		
			
				|  |  | -		return v2net.TCPDestination(v2net.ParseAddress(request.Domain), request.Port)
 | 
	
		
			
				|  |  | -	default:
 | 
	
		
			
				|  |  | -		panic("Unknown address type")
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -const (
 | 
	
		
			
				|  |  | -	ErrorSuccess                 = byte(0x00)
 | 
	
		
			
				|  |  | -	ErrorGeneralFailure          = byte(0x01)
 | 
	
		
			
				|  |  | -	ErrorConnectionNotAllowed    = byte(0x02)
 | 
	
		
			
				|  |  | -	ErrorNetworkUnreachable      = byte(0x03)
 | 
	
		
			
				|  |  | -	ErrorHostUnUnreachable       = byte(0x04)
 | 
	
		
			
				|  |  | -	ErrorConnectionRefused       = byte(0x05)
 | 
	
		
			
				|  |  | -	ErrorTTLExpired              = byte(0x06)
 | 
	
		
			
				|  |  | -	ErrorCommandNotSupported     = byte(0x07)
 | 
	
		
			
				|  |  | -	ErrorAddressTypeNotSupported = byte(0x08)
 | 
	
		
			
				|  |  | -)
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -type Socks5Response struct {
 | 
	
		
			
				|  |  | -	Version  byte
 | 
	
		
			
				|  |  | -	Error    byte
 | 
	
		
			
				|  |  | -	AddrType byte
 | 
	
		
			
				|  |  | -	IPv4     [4]byte
 | 
	
		
			
				|  |  | -	Domain   string
 | 
	
		
			
				|  |  | -	IPv6     [16]byte
 | 
	
		
			
				|  |  | -	Port     v2net.Port
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func NewSocks5Response() *Socks5Response {
 | 
	
		
			
				|  |  | -	return &Socks5Response{
 | 
	
		
			
				|  |  | -		Version: socksVersion,
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func (r *Socks5Response) SetIPv4(ipv4 []byte) {
 | 
	
		
			
				|  |  | -	r.AddrType = AddrTypeIPv4
 | 
	
		
			
				|  |  | -	copy(r.IPv4[:], ipv4)
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func (r *Socks5Response) SetIPv6(ipv6 []byte) {
 | 
	
		
			
				|  |  | -	r.AddrType = AddrTypeIPv6
 | 
	
		
			
				|  |  | -	copy(r.IPv6[:], ipv6)
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func (r *Socks5Response) SetDomain(domain string) {
 | 
	
		
			
				|  |  | -	r.AddrType = AddrTypeDomain
 | 
	
		
			
				|  |  | -	r.Domain = domain
 | 
	
		
			
				|  |  | -}
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -func (r *Socks5Response) Write(writer io.Writer) {
 | 
	
		
			
				|  |  | -	writer.Write([]byte{r.Version, r.Error, 0x00 /* reserved */, r.AddrType})
 | 
	
		
			
				|  |  | -	switch r.AddrType {
 | 
	
		
			
				|  |  | -	case 0x01:
 | 
	
		
			
				|  |  | -		writer.Write(r.IPv4[:])
 | 
	
		
			
				|  |  | -	case 0x03:
 | 
	
		
			
				|  |  | -		writer.Write([]byte{byte(len(r.Domain))})
 | 
	
		
			
				|  |  | -		writer.Write([]byte(r.Domain))
 | 
	
		
			
				|  |  | -	case 0x04:
 | 
	
		
			
				|  |  | -		writer.Write(r.IPv6[:])
 | 
	
		
			
				|  |  | -	}
 | 
	
		
			
				|  |  | -	writer.Write(r.Port.Bytes(nil))
 | 
	
		
			
				|  |  | -}
 |