[ssl] Reading from non-blocking socket wrapped by SSLContext returns an empty bytes object in case if the client stays connected
未關閉
還沒有人認領這個 Issue。
stdlib
topic-SSL
type-bug
- 主要語言
- Python
- 星號
- 77.2k
- 分支
- 35.9k
- PR 合併指標
- PR 指標待擷取
描述
Bug report
Bug description:
I run my client-server application using SSLContext. And during communication I faced with situation when I receive an empty bytes object from the socket on server side. But in Wireshark dump I can see that client is present and sends data. If I add some delay after I receive empty bytes and try read from socket again I get some data. My code properly works on python 3.8 but it fails on 3.12. Also I tested without ssl on 3.12 and it works fine.
# how the socket initiated:
context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
context.load_cert_chain(*ssl_context)
self.socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
self.socket.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
self.socket.bind((host, port))
self.socket.listen(1)
self.socket = context.wrap_socket(self.socket, server_side=True)
# how I accept client:
while not True:
self.socket.settimeout(1)
try:
self.connection, _ = self.socket.accept()
self.connection.settimeout(0.01)
break
except (socket.timeout, ssl.SSLError):
continue
# how I read the data:
def read_data(self):
data = b''
if self.connection is not None:
try:
print(f"start recv at: {datetime.now().isoformat()}")
if data := self.connection.recv(256):
print(f"finish recv at: {datetime.now().isoformat()}")
return data
else:
print(f"no data at: {datetime.now().isoformat()}")
self.connection = None
return b''
except (socket.timeout, OSError):
return data
return data
CPython versions tested on:
3.12
Operating systems tested on:
Linux
貢獻指南
從這裡開始
- 先讀完整個 Issue,再讀專案的貢獻指南。
- 在 Issue 下留言說明你要接手 —— 這能避免兩個人做同樣的事。
- Fork 儲存庫,在一個分支上完成修改。
- 送出 Pull Request,並在描述裡引用這個 Issue 編號。
研究方向
該 payload 未指出任何儲存庫檔案或測試。首先在 Linux 上使用 Python 3.8 和 3.12 重現所提供的 SSLContext 和 socket 序列,然後追蹤 SSL 包裝 socket 的讀取路徑。完成的標準是:在受影響的情境中,已連線用戶端的待處理資料不會被回報為空讀取。
由索引模型根據 Issue 內容生成。
評估
- 技術堆疊
- python
- 領域
- networking, security
- Issue 類型
- 缺陷
- 難度
- 4/5
- 預估耗時
- 3-5 天
- 活躍度
- 停滯
- 描述清晰度
- 基本清楚
- 新手友好度
- 35/100