data-plane-api

[READ ONLY MIRROR] Envoy REST/proto API definitions and documentation. (grpc依赖)

data-plane-api(CircleCI) bb2dc33477 [api] [fuzz] fix many header related config fuzz bugs (#10093 ) This change includes validations on header names and values that appear in config fields. This prevents setting header keys/values with invalid characters in config fields, which pops up as ASSERT failures when converting to HeaderString values. For reference, the well_known_regex for the header names and values do the following: - HTTP_HEADER_NAME: whitelists alphanums and the whitelisted tokens (`!#$%&'+-.^_\|~``) in https://tools.ietf.org/html/rfc7230#section-3.2 - HTTP_HEADER_VALUE: blacklists control characters except SPC and TAB. Purposely meant to be permissive, and blacklist problems like nulls Changes in `base.proto` Invalid headers to match (from [`HeaderValue`](`88d3556981/api/envoy/api/v2/core/base.proto (L234)`) proto) - `clusterfuzz-testcase-minimized-route_fuzz_test-5635252339343360` Changes in `route_components.proto`: * [domains](`88d3556981/api/envoy/api/v2/route/route_components.proto (L75)`) with invalid control characters in `VirtualHost` config - `clusterfuzz-testcase-minimized-route_fuzz_test-5699465522970624` * Invalid [header_name](`88d3556981/api/envoy/api/v2/route/route_components.proto (L604)`) in hash policy - `clusterfuzz-testcase-minimized-route_fuzz_test-5634743613259776` * Invalid control characters in [upgrade_type](`88d3556981/api/envoy/api/v2/route/route_components.proto (L698)`) header - `clusterfuzz-testcase-minimized-route_fuzz_test-5750746072481792` * `RateLimit` message has a [header_name](`88d3556981/api/envoy/api/v2/route/route_components.proto (L1273)`) field - `clusterfuzz-testcase-minimized-route_fuzz_test-5206842068697088` * Invalid [response_headers_to_add](`88d3556981/api/envoy/api/v2/route/route_components.proto (L113)`) in - `clusterfuzz-testcase-minimized-route_fuzz_test-4592245302362112` * The [cluster_header](`88d3556981/api/envoy/api/v2/route/route_components.proto (L723)`) change came up in a fuzz bug, but after that was fixed, the code ran in to another deeper issue to be fixed. * The [name](`bbdc33e537/api/envoy/config/route/v3/route_components.proto (L1381)`) in `HeaderMatcher` message - `clusterfuzz-testcase-minimized-route_fuzz_test-5635252339343360` Changes in `custom_tag.proto` * `CustomTag` has a [name](`88d3556981/api/envoy/type/tracing/v3/custom_tag.proto (L51)`) - `clusterfuzz-testcase-minimized-route_fuzz_test-5661762636742656` Changes in fuzz tests: * `conn_manager_impl_fuzz_test` that fails on invalid characters in an authority header. this is not a config related change, just handled by replaced the invalid character in the fuzz test. - `clusterfuzz-testcase-minimized-conn_manager_impl_fuzz_test-5714279517126656` * `route_fuzz_test` was cleaned up now that a lot of the processing was moved to config. Fixes: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19923 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16143 (most of) Signed-off-by: Asra Ali <asraa@google.com> Mirrored from https://github.com/envoyproxy/envoy @ 855b2a359a7133fd559ddbd757be4c0963cd8a73		5 years ago
..
auth	docs: fix yaml indentation (#10067 )	5 years ago
cluster	docs: force all API protos to have a title (#9744 )	5 years ago
core	[api] [fuzz] fix many header related config fuzz bugs (#10093 )	5 years ago
endpoint	api: freeze v3 API. (#9694 )	5 years ago
listener	[api] add disabled field in ListenerFilter (#9393 )	5 years ago
ratelimit	api: freeze v3 API. (#9694 )	5 years ago
route	[api] [fuzz] fix many header related config fuzz bugs (#10093 )	5 years ago
BUILD	api/config: use resource type annotations to provide type-to-endpoint. (#9566 )	5 years ago
README.md	Move envoy.api.v2 core protos to envoy.api.v2.core and organize filters (#452 )	7 years ago
cds.proto	api: freeze v3 API. (#9694 )	5 years ago
cluster.proto	api/docs: v3 API reference documentation. (#9719 )	5 years ago
discovery.proto	api: freeze v3 API. (#9694 )	5 years ago
eds.proto	api: freeze v3 API. (#9694 )	5 years ago
endpoint.proto	api: freeze v3 API. (#9694 )	5 years ago
lds.proto	api: freeze v3 API. (#9694 )	5 years ago
listener.proto	listener: first implementation of an Api Listener (#9516 )	5 years ago
rds.proto	api: freeze v3 API. (#9694 )	5 years ago
route.proto	[api] [fuzz] fix many header related config fuzz bugs (#10093 )	5 years ago
scoped_route.proto	api: freeze v3 API. (#9694 )	5 years ago
srds.proto	api: freeze v3 API. (#9694 )	5 years ago

README.md

Protocol buffer definitions for xDS and top-level resource API messages.

Package group //envoy/api/v2:friends enumerates all consumers of the shared API messages. That includes package envoy.api.v2 itself, which contains several xDS definitions. Default visibility for all shared definitions should be set to //envoy/api/v2:friends.

Additionally, packages envoy.api.v2.core and envoy.api.v2.auth are also consumed throughout the subpackages of //envoy/api/v2.