mirror of
https://github.com/espressif/esp-idf.git
synced 2025-08-12 21:37:16 +00:00
5928a87aa7
Problem: 1. In low-memory scenarios, the dynamic buffer feature can fail due to memory fragmentation. 2. It requires a contiguous 16KB heap chunk, but continuous allocation and deallocation of the RX buffer can lead to fragmentation. 3. If another component allocates memory between these operations, it can break up the available 16KB block, causing allocation failure. Solution: 1. Introduce configurable strategy for using dynamic buffers in TLS connections. 2. For example, convert RX buffers to static after the TLS handshake. 3. Allow users to select the strategy via a new field in the esp_http_client_cfg_t structure. 4. The strategy can be controlled independently for each TLS session.
105 lines
2.5 KiB
C
105 lines
2.5 KiB
C
/*
|
|
* SPDX-FileCopyrightText: 2020-2025 Espressif Systems (Shanghai) CO LTD
|
|
*
|
|
* SPDX-License-Identifier: Apache-2.0
|
|
*/
|
|
#ifndef _DYNAMIC_IMPL_H_
|
|
#define _DYNAMIC_IMPL_H_
|
|
|
|
#include <stddef.h>
|
|
#include <string.h>
|
|
#include <stdbool.h>
|
|
|
|
/* TODO: Remove this once the appropriate solution is found
|
|
*
|
|
* ssl_misc.h header uses private elements from
|
|
* mbedtls, which become undefined if the following flag
|
|
* is not defined
|
|
*/
|
|
#define MBEDTLS_ALLOW_PRIVATE_ACCESS
|
|
|
|
// located at mbedtls/library/ssl_misc.h
|
|
#include "ssl_misc.h"
|
|
|
|
#include "mbedtls/ssl.h"
|
|
#include "mbedtls/platform.h"
|
|
#include "esp_log.h"
|
|
#include "sdkconfig.h"
|
|
|
|
#include "mbedtls/esp_mbedtls_dynamic.h"
|
|
|
|
#define TRACE_CHECK(_fn, _state) \
|
|
({ \
|
|
ESP_LOGV(TAG, "%d " _state " to do \"%s\"", __LINE__, # _fn); \
|
|
})
|
|
|
|
#define CHECK_OK(_fn) \
|
|
({ \
|
|
int _ret; \
|
|
\
|
|
TRACE_CHECK(_fn, "state"); \
|
|
\
|
|
if ((_ret = _fn) != 0) { \
|
|
ESP_LOGV(TAG, "\"%s\" result is %d", # _fn, -_ret); \
|
|
TRACE_CHECK(_fn, "fail"); \
|
|
return _ret; \
|
|
} \
|
|
\
|
|
TRACE_CHECK(_fn, "end"); \
|
|
\
|
|
})
|
|
|
|
typedef enum {
|
|
ESP_MBEDTLS_SSL_BUF_CACHED = 0,
|
|
ESP_MBEDTLS_SSL_BUF_NO_CACHED,
|
|
ESP_MBEDTLS_SSL_BUF_STATIC,
|
|
} esp_mbedtls_ssl_buf_states;
|
|
|
|
struct esp_mbedtls_ssl_buf {
|
|
esp_mbedtls_ssl_buf_states state;
|
|
unsigned int len;
|
|
unsigned char buf[];
|
|
};
|
|
|
|
#define SSL_BUF_HEAD_OFFSET_SIZE ((int)offsetof(struct esp_mbedtls_ssl_buf, buf))
|
|
|
|
void esp_mbedtls_free_buf(unsigned char *buf);
|
|
|
|
int esp_mbedtls_setup_tx_buffer(mbedtls_ssl_context *ssl);
|
|
|
|
void esp_mbedtls_setup_rx_buffer(mbedtls_ssl_context *ssl);
|
|
|
|
int esp_mbedtls_reset_add_tx_buffer(mbedtls_ssl_context *ssl);
|
|
|
|
int esp_mbedtls_reset_add_rx_buffer(mbedtls_ssl_context *ssl);
|
|
|
|
int esp_mbedtls_reset_free_tx_buffer(mbedtls_ssl_context *ssl);
|
|
|
|
void esp_mbedtls_reset_free_rx_buffer(mbedtls_ssl_context *ssl);
|
|
|
|
int esp_mbedtls_add_tx_buffer(mbedtls_ssl_context *ssl, size_t buffer_len);
|
|
|
|
int esp_mbedtls_add_rx_buffer(mbedtls_ssl_context *ssl);
|
|
|
|
int esp_mbedtls_free_tx_buffer(mbedtls_ssl_context *ssl);
|
|
|
|
int esp_mbedtls_free_rx_buffer(mbedtls_ssl_context *ssl);
|
|
|
|
size_t esp_mbedtls_get_crt_size(mbedtls_x509_crt *cert, size_t *num);
|
|
|
|
#ifdef CONFIG_MBEDTLS_DYNAMIC_FREE_CONFIG_DATA
|
|
void esp_mbedtls_free_dhm(mbedtls_ssl_context *ssl);
|
|
|
|
void esp_mbedtls_free_keycert(mbedtls_ssl_context *ssl);
|
|
|
|
void esp_mbedtls_free_keycert_cert(mbedtls_ssl_context *ssl);
|
|
|
|
void esp_mbedtls_free_keycert_key(mbedtls_ssl_context *ssl);
|
|
#endif
|
|
|
|
#ifdef CONFIG_MBEDTLS_DYNAMIC_FREE_CA_CERT
|
|
void esp_mbedtls_free_cacert(mbedtls_ssl_context *ssl);
|
|
#endif
|
|
|
|
#endif /* _DYNAMIC_IMPL_H_ */
|