tests/tests/net/jni/NativeMultinetworkJni.cpp - platform/cts - Git at Google

 /*
  * Copyright (C) 2019 The Android Open Source Project
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
  *
  *      http://www.apache.org/licenses/LICENSE-2.0
  *
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */


 #define LOG_TAG "MultinetworkApiTest"

 #include <arpa/inet.h>
 #include <arpa/nameser.h>
 #include <errno.h>
 #include <inttypes.h>
 #include <jni.h>
 #include <netdb.h>
 #include <poll.h> /* poll */
 #include <resolv.h>
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
 #include <sys/socket.h>
 #include <sys/time.h>

 #include <string>

 #include <android/log.h>
 #include <android/multinetwork.h>
 #include <nativehelper/JNIHelp.h>

 #define LOGD(fmt, ...) \
         __android_log_print(ANDROID_LOG_DEBUG, LOG_TAG, fmt, ##__VA_ARGS__)

 #define EXPECT_GE(env, actual, expected, msg)                        \
     do {                                                             \
         if (actual < expected) {                                     \
             jniThrowExceptionFmt(env, "java/lang/AssertionError",    \
                     "%s:%d: %s EXPECT_GE: expected %d, got %d",      \
                     __FILE__, __LINE__, msg, expected, actual);      \
         }                                                            \
     } while (0)

 #define EXPECT_GT(env, actual, expected, msg)                        \
     do {                                                             \
         if (actual <= expected) {                                    \
             jniThrowExceptionFmt(env, "java/lang/AssertionError",    \
                     "%s:%d: %s EXPECT_GT: expected %d, got %d",      \
                     __FILE__, __LINE__, msg, expected, actual);      \
         }                                                            \
     } while (0)

 #define EXPECT_EQ(env, expected, actual, msg)                        \
     do {                                                             \
         if (actual != expected) {                                    \
             jniThrowExceptionFmt(env, "java/lang/AssertionError",    \
                     "%s:%d: %s EXPECT_EQ: expected %d, got %d",      \
                     __FILE__, __LINE__, msg, expected, actual);      \
         }                                                            \
     } while (0)

 static const int MAXPACKET = 8 * 1024;
 static const int TIMEOUT_MS = 15000;
 static const char kHostname[] = "connectivitycheck.android.com";
 static const char kNxDomainName[] = "test1-nx.metric.gstatic.com";
 static const char kGoogleName[] = "www.google.com";

 int makeQuery(const char* name, int qtype, uint8_t* buf, size_t buflen) {
     return res_mkquery(ns_o_query, name, ns_c_in, qtype, NULL, 0, NULL, buf, buflen);
 }

 int getAsyncResponse(JNIEnv* env, int fd, int timeoutMs, int* rcode, uint8_t* buf, size_t bufLen) {
     struct pollfd wait_fd = { .fd = fd, .events = POLLIN };

     poll(&wait_fd, 1, timeoutMs);
     if (wait_fd.revents & POLLIN) {
         int n = android_res_nresult(fd, rcode, buf, bufLen);
         // Verify that android_res_nresult() closed the fd
         char dummy;
         EXPECT_EQ(env, -1, read(fd, &dummy, sizeof(dummy)), "res_nresult check for closing fd");
         EXPECT_EQ(env, EBADF, errno, "res_nresult check for errno");
         return n;
     }

     return -ETIMEDOUT;
 }

 int extractIpAddressAnswers(uint8_t* buf, size_t bufLen, int family) {
     ns_msg handle;
     if (ns_initparse((const uint8_t*) buf, bufLen, &handle) < 0) {
         return -errno;
     }
     const int ancount = ns_msg_count(handle, ns_s_an);
     // Answer count = 0 is valid(e.g. response of query with root)
     if (!ancount) {
         return 0;
     }
     ns_rr rr;
     bool hasValidAns = false;
     for (int i = 0; i < ancount; i++) {
         if (ns_parserr(&handle, ns_s_an, i, &rr) < 0) {
             // If there is no valid answer, test will fail.
             continue;
         }
         const uint8_t* rdata = ns_rr_rdata(rr);
         char buffer[INET6_ADDRSTRLEN];
         if (inet_ntop(family, (const char*) rdata, buffer, sizeof(buffer)) == NULL) {
             return -errno;
         }
         hasValidAns = true;
     }
     return hasValidAns ? 0 : -EBADMSG;
 }

 int expectAnswersValid(JNIEnv* env, int fd, int family, int expectedRcode) {
     int rcode = -1;
     uint8_t buf[MAXPACKET] = {};
     int res = getAsyncResponse(env, fd, TIMEOUT_MS, &rcode, buf, MAXPACKET);
     if (res < 0) {
         return res;
     }

     EXPECT_EQ(env, expectedRcode, rcode, "rcode is not expected");

     if (expectedRcode == ns_r_noerror && res > 0) {
         return extractIpAddressAnswers(buf, res, family);
     }
     return 0;
 }

 int expectAnswersNotValid(JNIEnv* env, int fd, int expectedErrno) {
     int rcode = -1;
     uint8_t buf[MAXPACKET] = {};
     int res = getAsyncResponse(env, fd, TIMEOUT_MS, &rcode, buf, MAXPACKET);
     if (res != expectedErrno) {
         LOGD("res:%d, expectedErrno = %d", res, expectedErrno);
         return (res > 0) ? -EREMOTEIO : res;
     }
     return 0;
 }

 extern "C"
 JNIEXPORT void Java_android_net_cts_MultinetworkApiTest_runResNqueryCheck(
         JNIEnv* env, jclass, jlong nethandle) {
     net_handle_t handle = (net_handle_t) nethandle;

     // V4
     int fd = android_res_nquery(handle, kHostname, ns_c_in, ns_t_a, 0);
     EXPECT_GE(env, fd, 0, "v4 res_nquery");
     EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET, ns_r_noerror),
             "v4 res_nquery check answers");

     // V6
     fd = android_res_nquery(handle, kHostname, ns_c_in, ns_t_aaaa, 0);
     EXPECT_GE(env, fd, 0, "v6 res_nquery");
     EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET, ns_r_noerror),
             "v6 res_nquery check answers");
 }

 extern "C"
 JNIEXPORT void Java_android_net_cts_MultinetworkApiTest_runResNsendCheck(
         JNIEnv* env, jclass, jlong nethandle) {
     net_handle_t handle = (net_handle_t) nethandle;
     // V4
     uint8_t buf1[MAXPACKET] = {};

     int len1 = makeQuery(kGoogleName, ns_t_a, buf1, sizeof(buf1));
     EXPECT_GT(env, len1, 0, "v4 res_mkquery 1st");

     uint8_t buf2[MAXPACKET] = {};
     int len2 = makeQuery(kHostname, ns_t_a, buf2, sizeof(buf2));
     EXPECT_GT(env, len2, 0, "v4 res_mkquery 2nd");

     int fd1 = android_res_nsend(handle, buf1, len1, 0);
     EXPECT_GE(env, fd1, 0, "v4 res_nsend 1st");
     int fd2 = android_res_nsend(handle, buf2, len2, 0);
     EXPECT_GE(env, fd2, 0, "v4 res_nsend 2nd");

     EXPECT_EQ(env, 0, expectAnswersValid(env, fd2, AF_INET, ns_r_noerror),
             "v4 res_nsend 2nd check answers");
     EXPECT_EQ(env, 0, expectAnswersValid(env, fd1, AF_INET, ns_r_noerror),
             "v4 res_nsend 1st check answers");

     // V6
     memset(buf1, 0, sizeof(buf1));
     memset(buf2, 0, sizeof(buf2));
     len1 = makeQuery(kGoogleName, ns_t_aaaa, buf1, sizeof(buf1));
     EXPECT_GT(env, len1, 0, "v6 res_mkquery 1st");
     len2 = makeQuery(kHostname, ns_t_aaaa, buf2, sizeof(buf2));
     EXPECT_GT(env, len2, 0, "v6 res_mkquery 2nd");

     fd1 = android_res_nsend(handle, buf1, len1, 0);
     EXPECT_GE(env, fd1, 0, "v6 res_nsend 1st");
     fd2 = android_res_nsend(handle, buf2, len2, 0);
     EXPECT_GE(env, fd2, 0, "v6 res_nsend 2nd");

     EXPECT_EQ(env, 0, expectAnswersValid(env, fd2, AF_INET6, ns_r_noerror),
             "v6 res_nsend 2nd check answers");
     EXPECT_EQ(env, 0, expectAnswersValid(env, fd1, AF_INET6, ns_r_noerror),
             "v6 res_nsend 1st check answers");
 }

 extern "C"
 JNIEXPORT void Java_android_net_cts_MultinetworkApiTest_runResNnxDomainCheck(
         JNIEnv* env, jclass, jlong nethandle) {
     net_handle_t handle = (net_handle_t) nethandle;

     // res_nquery V4 NXDOMAIN
     int fd = android_res_nquery(handle, kNxDomainName, ns_c_in, ns_t_a, 0);
     EXPECT_GE(env, fd, 0, "v4 res_nquery NXDOMAIN");
     EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET, ns_r_nxdomain),
             "v4 res_nquery NXDOMAIN check answers");

     // res_nquery V6 NXDOMAIN
     fd = android_res_nquery(handle, kNxDomainName, ns_c_in, ns_t_aaaa, 0);
     EXPECT_GE(env, fd, 0, "v6 res_nquery NXDOMAIN");
     EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET6, ns_r_nxdomain),
             "v6 res_nquery NXDOMAIN check answers");

     uint8_t buf[MAXPACKET] = {};
     // res_nsend V4 NXDOMAIN
     int len = makeQuery(kNxDomainName, ns_t_a, buf, sizeof(buf));
     EXPECT_GT(env, len, 0, "v4 res_mkquery NXDOMAIN");
     fd = android_res_nsend(handle, buf, len, 0);
     EXPECT_GE(env, fd, 0, "v4 res_nsend NXDOMAIN");
     EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET, ns_r_nxdomain),
             "v4 res_nsend NXDOMAIN check answers");

     // res_nsend V6 NXDOMAIN
     memset(buf, 0, sizeof(buf));
     len = makeQuery(kNxDomainName, ns_t_aaaa, buf, sizeof(buf));
     EXPECT_GT(env, len, 0, "v6 res_mkquery NXDOMAIN");
     fd = android_res_nsend(handle, buf, len, 0);
     EXPECT_GE(env, fd, 0, "v6 res_nsend NXDOMAIN");
     EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET6, ns_r_nxdomain),
             "v6 res_nsend NXDOMAIN check answers");
 }


 extern "C"
 JNIEXPORT void Java_android_net_cts_MultinetworkApiTest_runResNcancelCheck(
         JNIEnv* env, jclass, jlong nethandle) {
     net_handle_t handle = (net_handle_t) nethandle;

     int fd = android_res_nquery(handle, kGoogleName, ns_c_in, ns_t_a, 0);
     errno = 0;
     android_res_cancel(fd);
     int err = errno;
     EXPECT_EQ(env, 0, err, "res_cancel");
     // DO NOT call cancel or result with the same fd more than once,
     // otherwise it will hit fdsan double-close fd.
 }

 extern "C"
 JNIEXPORT void Java_android_net_cts_MultinetworkApiTest_runResNapiMalformedCheck(
         JNIEnv* env, jclass, jlong nethandle) {
     net_handle_t handle = (net_handle_t) nethandle;

     // It is the equivalent of "dig . a", Query with an empty name.
     int fd = android_res_nquery(handle, "", ns_c_in, ns_t_a, 0);
     EXPECT_GE(env, fd, 0, "res_nquery root");
     EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET, ns_r_noerror),
             "res_nquery root check answers");

     // Label limit 63
     std::string exceedingLabelQuery = "www." + std::string(70, 'g') + ".com";
     // Name limit 255
     std::string exceedingDomainQuery = "www." + std::string(255, 'g') + ".com";

     fd = android_res_nquery(handle, exceedingLabelQuery.c_str(), ns_c_in, ns_t_a, 0);
     EXPECT_EQ(env, -EMSGSIZE, fd, "res_nquery exceedingLabelQuery");
     fd = android_res_nquery(handle, exceedingDomainQuery.c_str(), ns_c_in, ns_t_aaaa, 0);
     EXPECT_EQ(env, -EMSGSIZE, fd, "res_nquery exceedingDomainQuery");

     uint8_t buf[10] = {};
     // empty BLOB
     fd = android_res_nsend(handle, buf, 10, 0);
     EXPECT_GE(env, fd, 0, "res_nsend empty BLOB");
     EXPECT_EQ(env, 0, expectAnswersNotValid(env, fd, -EINVAL),
             "res_nsend empty BLOB check answers");

     uint8_t largeBuf[2 * MAXPACKET] = {};
     // A buffer larger than 8KB
     fd = android_res_nsend(handle, largeBuf, sizeof(largeBuf), 0);
     EXPECT_EQ(env, -EMSGSIZE, fd, "res_nsend buffer larger than 8KB");

     // 5000 bytes filled with 0. This returns EMSGSIZE because FrameworkListener limits the size of
     // commands to 4096 bytes.
     fd = android_res_nsend(handle, largeBuf, 5000, 0);
     EXPECT_EQ(env, -EMSGSIZE, fd, "res_nsend 5000 bytes filled with 0");

     // 500 bytes filled with 0
     fd = android_res_nsend(handle, largeBuf, 500, 0);
     EXPECT_GE(env, fd, 0, "res_nsend 500 bytes filled with 0");
     EXPECT_EQ(env, 0, expectAnswersNotValid(env, fd, -EINVAL),
             "res_nsend 500 bytes filled with 0 check answers");

     // 5000 bytes filled with 0xFF
     uint8_t ffBuf[5001] = {};
     memset(ffBuf, 0xFF, sizeof(ffBuf));
     ffBuf[5000] = '\0';
     fd = android_res_nsend(handle, ffBuf, sizeof(ffBuf), 0);
     EXPECT_EQ(env, -EMSGSIZE, fd, "res_nsend 5000 bytes filled with 0xFF");

     // 500 bytes filled with 0xFF
     ffBuf[500] = '\0';
     fd = android_res_nsend(handle, ffBuf, 501, 0);
     EXPECT_GE(env, fd, 0, "res_nsend 500 bytes filled with 0xFF");
     EXPECT_EQ(env, 0, expectAnswersNotValid(env, fd, -EINVAL),
             "res_nsend 500 bytes filled with 0xFF check answers");
 }

 extern "C"
 JNIEXPORT jint Java_android_net_cts_MultinetworkApiTest_runGetaddrinfoCheck(
         JNIEnv*, jclass, jlong nethandle) {
     net_handle_t handle = (net_handle_t) nethandle;
     struct addrinfo *res = NULL;

     errno = 0;
     int rval = android_getaddrinfofornetwork(handle, kHostname, NULL, NULL, &res);
     const int saved_errno = errno;
     freeaddrinfo(res);

     LOGD("android_getaddrinfofornetwork(%" PRIu64 ", %s) returned rval=%d errno=%d",
           handle, kHostname, rval, saved_errno);
     return rval == 0 ? 0 : -saved_errno;
 }

 extern "C"
 JNIEXPORT jint Java_android_net_cts_MultinetworkApiTest_runSetprocnetwork(
         JNIEnv*, jclass, jlong nethandle) {
     net_handle_t handle = (net_handle_t) nethandle;

     errno = 0;
     int rval = android_setprocnetwork(handle);
     const int saved_errno = errno;
     LOGD("android_setprocnetwork(%" PRIu64 ") returned rval=%d errno=%d",
           handle, rval, saved_errno);
     return rval == 0 ? 0 : -saved_errno;
 }

 extern "C"
 JNIEXPORT jint Java_android_net_cts_MultinetworkApiTest_runSetsocknetwork(
         JNIEnv*, jclass, jlong nethandle) {
     net_handle_t handle = (net_handle_t) nethandle;

     errno = 0;
     int fd = socket(AF_INET6, SOCK_DGRAM, IPPROTO_UDP);
     if (fd < 0) {
         LOGD("socket() failed, errno=%d", errno);
         return -errno;
     }

     errno = 0;
     int rval = android_setsocknetwork(handle, fd);
     const int saved_errno = errno;
     LOGD("android_setprocnetwork(%" PRIu64 ", %d) returned rval=%d errno=%d",
           handle, fd, rval, saved_errno);
     close(fd);
     return rval == 0 ? 0 : -saved_errno;
 }

 // Use sizeof("x") - 1 because we need a compile-time constant, and strlen("x")
 // isn't guaranteed to fold to a constant.
 static const int kSockaddrStrLen = INET6_ADDRSTRLEN + sizeof("[]:65535") - 1;

 void sockaddr_ntop(const struct sockaddr *sa, socklen_t salen, char *dst, const size_t size) {
     char addrstr[INET6_ADDRSTRLEN];
     char portstr[sizeof("65535")];
     char buf[kSockaddrStrLen+1];

     int ret = getnameinfo(sa, salen,
                           addrstr, sizeof(addrstr),
                           portstr, sizeof(portstr),
                           NI_NUMERICHOST | NI_NUMERICSERV);
     if (ret == 0) {
         snprintf(buf, sizeof(buf),
                  (sa->sa_family == AF_INET6) ? "[%s]:%s" : "%s:%s",
                  addrstr, portstr);
     } else {
         sprintf(buf, "???");
     }

     strlcpy(dst, buf, size);
 }

 extern "C"
 JNIEXPORT jint Java_android_net_cts_MultinetworkApiTest_runDatagramCheck(
         JNIEnv*, jclass, jlong nethandle) {
     const struct addrinfo kHints = {
         .ai_flags = AI_ADDRCONFIG,
         .ai_family = AF_UNSPEC,
         .ai_socktype = SOCK_DGRAM,
         .ai_protocol = IPPROTO_UDP,
     };
     struct addrinfo *res = NULL;
     net_handle_t handle = (net_handle_t) nethandle;

     static const char kPort[] = "443";
     int rval = android_getaddrinfofornetwork(handle, kHostname, kPort, &kHints, &res);
     if (rval != 0) {
         LOGD("android_getaddrinfofornetwork(%llu, %s) returned rval=%d errno=%d",
               handle, kHostname, rval, errno);
         freeaddrinfo(res);
         return -errno;
     }

     // Rely upon getaddrinfo sorting the best destination to the front.
     int fd = socket(res->ai_family, res->ai_socktype, res->ai_protocol);
     if (fd < 0) {
         LOGD("socket(%d, %d, %d) failed, errno=%d",
               res->ai_family, res->ai_socktype, res->ai_protocol, errno);
         freeaddrinfo(res);
         return -errno;
     }

     rval = android_setsocknetwork(handle, fd);
     LOGD("android_setprocnetwork(%llu, %d) returned rval=%d errno=%d",
           handle, fd, rval, errno);
     if (rval != 0) {
         close(fd);
         freeaddrinfo(res);
         return -errno;
     }

     char addrstr[kSockaddrStrLen+1];
     sockaddr_ntop(res->ai_addr, res->ai_addrlen, addrstr, sizeof(addrstr));
     LOGD("Attempting connect() to %s ...", addrstr);

     rval = connect(fd, res->ai_addr, res->ai_addrlen);
     if (rval != 0) {
         close(fd);
         freeaddrinfo(res);
         return -errno;
     }
     freeaddrinfo(res);

     struct sockaddr_storage src_addr;
     socklen_t src_addrlen = sizeof(src_addr);
     if (getsockname(fd, (struct sockaddr *)&src_addr, &src_addrlen) != 0) {
         close(fd);
         return -errno;
     }
     sockaddr_ntop((const struct sockaddr *)&src_addr, sizeof(src_addr), addrstr, sizeof(addrstr));
     LOGD("... from %s", addrstr);

     // Don't let reads or writes block indefinitely.
     const struct timeval timeo = { 2, 0 };  // 2 seconds
     setsockopt(fd, SOL_SOCKET, SO_RCVTIMEO, &timeo, sizeof(timeo));
     setsockopt(fd, SOL_SOCKET, SO_SNDTIMEO, &timeo, sizeof(timeo));

     // For reference see:
     //     https://datatracker.ietf.org/doc/html/draft-ietf-quic-invariants
     uint8_t quic_packet[1200] = {
         0xc0,                    // long header
         0xaa, 0xda, 0xca, 0xca,  // reserved-space version number
         0x08,                    // destination connection ID length
         0, 0, 0, 0, 0, 0, 0, 0,  // 64bit connection ID
         0x00,                    // source connection ID length
     };

     arc4random_buf(quic_packet + 6, 8);  // random connection ID

     uint8_t response[1500];
     ssize_t sent, rcvd;
     static const int MAX_RETRIES = 5;
     int i, errnum = 0;

     for (i = 0; i < MAX_RETRIES; i++) {
         sent = send(fd, quic_packet, sizeof(quic_packet), 0);
         if (sent < (ssize_t)sizeof(quic_packet)) {
             errnum = errno;
             LOGD("send(QUIC packet) returned sent=%zd, errno=%d", sent, errnum);
             close(fd);
             return -errnum;
         }

         rcvd = recv(fd, response, sizeof(response), 0);
         if (rcvd > 0) {
             break;
         } else {
             errnum = errno;
             LOGD("[%d/%d] recv(QUIC response) returned rcvd=%zd, errno=%d",
                   i + 1, MAX_RETRIES, rcvd, errnum);
         }
     }
     if (rcvd < 15) {
         LOGD("QUIC UDP %s: sent=%zd but rcvd=%zd, errno=%d", kPort, sent, rcvd, errnum);
         if (rcvd <= 0) {
             LOGD("Does this network block UDP port %s?", kPort);
         }
         close(fd);
         return -EPROTO;
     }

     int conn_id_cmp = memcmp(quic_packet + 6, response + 7, 8);
     if (conn_id_cmp != 0) {
         LOGD("sent and received connection IDs do not match");
         close(fd);
         return -EPROTO;
     }

     // TODO: Replace this quick 'n' dirty test with proper QUIC-capable code.

     close(fd);
     return 0;
 }
	/*
	* Copyright (C) 2019 The Android Open Source Project
	*
	* Licensed under the Apache License, Version 2.0 (the "License");
	* you may not use this file except in compliance with the License.
	* You may obtain a copy of the License at
	*
	* http://www.apache.org/licenses/LICENSE-2.0
	*
	* Unless required by applicable law or agreed to in writing, software
	* distributed under the License is distributed on an "AS IS" BASIS,
	* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	* See the License for the specific language governing permissions and
	* limitations under the License.
	*/


	#define LOG_TAG "MultinetworkApiTest"

	#include <arpa/inet.h>
	#include <arpa/nameser.h>
	#include <errno.h>
	#include <inttypes.h>
	#include <jni.h>
	#include <netdb.h>
	#include <poll.h> /* poll */
	#include <resolv.h>
	#include <stdio.h>
	#include <stdlib.h>
	#include <string.h>
	#include <sys/socket.h>
	#include <sys/time.h>

	#include <string>

	#include <android/log.h>
	#include <android/multinetwork.h>
	#include <nativehelper/JNIHelp.h>

	#define LOGD(fmt, ...) \
	__android_log_print(ANDROID_LOG_DEBUG, LOG_TAG, fmt, ##__VA_ARGS__)

	#define EXPECT_GE(env, actual, expected, msg) \
	do { \
	if (actual < expected) { \
	jniThrowExceptionFmt(env, "java/lang/AssertionError", \
	"%s:%d: %s EXPECT_GE: expected %d, got %d", \
	__FILE__, __LINE__, msg, expected, actual); \
	} \
	} while (0)

	#define EXPECT_GT(env, actual, expected, msg) \
	do { \
	if (actual <= expected) { \
	jniThrowExceptionFmt(env, "java/lang/AssertionError", \
	"%s:%d: %s EXPECT_GT: expected %d, got %d", \
	__FILE__, __LINE__, msg, expected, actual); \
	} \
	} while (0)

	#define EXPECT_EQ(env, expected, actual, msg) \
	do { \
	if (actual != expected) { \
	jniThrowExceptionFmt(env, "java/lang/AssertionError", \
	"%s:%d: %s EXPECT_EQ: expected %d, got %d", \
	__FILE__, __LINE__, msg, expected, actual); \
	} \
	} while (0)

	static const int MAXPACKET = 8 * 1024;
	static const int TIMEOUT_MS = 15000;
	static const char kHostname[] = "connectivitycheck.android.com";
	static const char kNxDomainName[] = "test1-nx.metric.gstatic.com";
	static const char kGoogleName[] = "www.google.com";

	int makeQuery(const char* name, int qtype, uint8_t* buf, size_t buflen) {
	return res_mkquery(ns_o_query, name, ns_c_in, qtype, NULL, 0, NULL, buf, buflen);
	}

	int getAsyncResponse(JNIEnv* env, int fd, int timeoutMs, int* rcode, uint8_t* buf, size_t bufLen) {
	struct pollfd wait_fd = { .fd = fd, .events = POLLIN };

	poll(&wait_fd, 1, timeoutMs);
	if (wait_fd.revents & POLLIN) {
	int n = android_res_nresult(fd, rcode, buf, bufLen);
	// Verify that android_res_nresult() closed the fd
	char dummy;
	EXPECT_EQ(env, -1, read(fd, &dummy, sizeof(dummy)), "res_nresult check for closing fd");
	EXPECT_EQ(env, EBADF, errno, "res_nresult check for errno");
	return n;
	}

	return -ETIMEDOUT;
	}

	int extractIpAddressAnswers(uint8_t* buf, size_t bufLen, int family) {
	ns_msg handle;
	if (ns_initparse((const uint8_t*) buf, bufLen, &handle) < 0) {
	return -errno;
	}
	const int ancount = ns_msg_count(handle, ns_s_an);
	// Answer count = 0 is valid(e.g. response of query with root)
	if (!ancount) {
	return 0;
	}
	ns_rr rr;
	bool hasValidAns = false;
	for (int i = 0; i < ancount; i++) {
	if (ns_parserr(&handle, ns_s_an, i, &rr) < 0) {
	// If there is no valid answer, test will fail.
	continue;
	}
	const uint8_t* rdata = ns_rr_rdata(rr);
	char buffer[INET6_ADDRSTRLEN];
	if (inet_ntop(family, (const char*) rdata, buffer, sizeof(buffer)) == NULL) {
	return -errno;
	}
	hasValidAns = true;
	}
	return hasValidAns ? 0 : -EBADMSG;
	}

	int expectAnswersValid(JNIEnv* env, int fd, int family, int expectedRcode) {
	int rcode = -1;
	uint8_t buf[MAXPACKET] = {};
	int res = getAsyncResponse(env, fd, TIMEOUT_MS, &rcode, buf, MAXPACKET);
	if (res < 0) {
	return res;
	}

	EXPECT_EQ(env, expectedRcode, rcode, "rcode is not expected");

	if (expectedRcode == ns_r_noerror && res > 0) {
	return extractIpAddressAnswers(buf, res, family);
	}
	return 0;
	}

	int expectAnswersNotValid(JNIEnv* env, int fd, int expectedErrno) {
	int rcode = -1;
	uint8_t buf[MAXPACKET] = {};
	int res = getAsyncResponse(env, fd, TIMEOUT_MS, &rcode, buf, MAXPACKET);
	if (res != expectedErrno) {
	LOGD("res:%d, expectedErrno = %d", res, expectedErrno);
	return (res > 0) ? -EREMOTEIO : res;
	}
	return 0;
	}

	extern "C"
	JNIEXPORT void Java_android_net_cts_MultinetworkApiTest_runResNqueryCheck(
	JNIEnv* env, jclass, jlong nethandle) {
	net_handle_t handle = (net_handle_t) nethandle;

	// V4
	int fd = android_res_nquery(handle, kHostname, ns_c_in, ns_t_a, 0);
	EXPECT_GE(env, fd, 0, "v4 res_nquery");
	EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET, ns_r_noerror),
	"v4 res_nquery check answers");

	// V6
	fd = android_res_nquery(handle, kHostname, ns_c_in, ns_t_aaaa, 0);
	EXPECT_GE(env, fd, 0, "v6 res_nquery");
	EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET, ns_r_noerror),
	"v6 res_nquery check answers");
	}

	extern "C"
	JNIEXPORT void Java_android_net_cts_MultinetworkApiTest_runResNsendCheck(
	JNIEnv* env, jclass, jlong nethandle) {
	net_handle_t handle = (net_handle_t) nethandle;
	// V4
	uint8_t buf1[MAXPACKET] = {};

	int len1 = makeQuery(kGoogleName, ns_t_a, buf1, sizeof(buf1));
	EXPECT_GT(env, len1, 0, "v4 res_mkquery 1st");

	uint8_t buf2[MAXPACKET] = {};
	int len2 = makeQuery(kHostname, ns_t_a, buf2, sizeof(buf2));
	EXPECT_GT(env, len2, 0, "v4 res_mkquery 2nd");

	int fd1 = android_res_nsend(handle, buf1, len1, 0);
	EXPECT_GE(env, fd1, 0, "v4 res_nsend 1st");
	int fd2 = android_res_nsend(handle, buf2, len2, 0);
	EXPECT_GE(env, fd2, 0, "v4 res_nsend 2nd");

	EXPECT_EQ(env, 0, expectAnswersValid(env, fd2, AF_INET, ns_r_noerror),
	"v4 res_nsend 2nd check answers");
	EXPECT_EQ(env, 0, expectAnswersValid(env, fd1, AF_INET, ns_r_noerror),
	"v4 res_nsend 1st check answers");

	// V6
	memset(buf1, 0, sizeof(buf1));
	memset(buf2, 0, sizeof(buf2));
	len1 = makeQuery(kGoogleName, ns_t_aaaa, buf1, sizeof(buf1));
	EXPECT_GT(env, len1, 0, "v6 res_mkquery 1st");
	len2 = makeQuery(kHostname, ns_t_aaaa, buf2, sizeof(buf2));
	EXPECT_GT(env, len2, 0, "v6 res_mkquery 2nd");

	fd1 = android_res_nsend(handle, buf1, len1, 0);
	EXPECT_GE(env, fd1, 0, "v6 res_nsend 1st");
	fd2 = android_res_nsend(handle, buf2, len2, 0);
	EXPECT_GE(env, fd2, 0, "v6 res_nsend 2nd");

	EXPECT_EQ(env, 0, expectAnswersValid(env, fd2, AF_INET6, ns_r_noerror),
	"v6 res_nsend 2nd check answers");
	EXPECT_EQ(env, 0, expectAnswersValid(env, fd1, AF_INET6, ns_r_noerror),
	"v6 res_nsend 1st check answers");
	}

	extern "C"
	JNIEXPORT void Java_android_net_cts_MultinetworkApiTest_runResNnxDomainCheck(
	JNIEnv* env, jclass, jlong nethandle) {
	net_handle_t handle = (net_handle_t) nethandle;

	// res_nquery V4 NXDOMAIN
	int fd = android_res_nquery(handle, kNxDomainName, ns_c_in, ns_t_a, 0);
	EXPECT_GE(env, fd, 0, "v4 res_nquery NXDOMAIN");
	EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET, ns_r_nxdomain),
	"v4 res_nquery NXDOMAIN check answers");

	// res_nquery V6 NXDOMAIN
	fd = android_res_nquery(handle, kNxDomainName, ns_c_in, ns_t_aaaa, 0);
	EXPECT_GE(env, fd, 0, "v6 res_nquery NXDOMAIN");
	EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET6, ns_r_nxdomain),
	"v6 res_nquery NXDOMAIN check answers");

	uint8_t buf[MAXPACKET] = {};
	// res_nsend V4 NXDOMAIN
	int len = makeQuery(kNxDomainName, ns_t_a, buf, sizeof(buf));
	EXPECT_GT(env, len, 0, "v4 res_mkquery NXDOMAIN");
	fd = android_res_nsend(handle, buf, len, 0);
	EXPECT_GE(env, fd, 0, "v4 res_nsend NXDOMAIN");
	EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET, ns_r_nxdomain),
	"v4 res_nsend NXDOMAIN check answers");

	// res_nsend V6 NXDOMAIN
	memset(buf, 0, sizeof(buf));
	len = makeQuery(kNxDomainName, ns_t_aaaa, buf, sizeof(buf));
	EXPECT_GT(env, len, 0, "v6 res_mkquery NXDOMAIN");
	fd = android_res_nsend(handle, buf, len, 0);
	EXPECT_GE(env, fd, 0, "v6 res_nsend NXDOMAIN");
	EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET6, ns_r_nxdomain),
	"v6 res_nsend NXDOMAIN check answers");
	}


	extern "C"
	JNIEXPORT void Java_android_net_cts_MultinetworkApiTest_runResNcancelCheck(
	JNIEnv* env, jclass, jlong nethandle) {
	net_handle_t handle = (net_handle_t) nethandle;

	int fd = android_res_nquery(handle, kGoogleName, ns_c_in, ns_t_a, 0);
	errno = 0;
	android_res_cancel(fd);
	int err = errno;
	EXPECT_EQ(env, 0, err, "res_cancel");
	// DO NOT call cancel or result with the same fd more than once,
	// otherwise it will hit fdsan double-close fd.
	}

	extern "C"
	JNIEXPORT void Java_android_net_cts_MultinetworkApiTest_runResNapiMalformedCheck(
	JNIEnv* env, jclass, jlong nethandle) {
	net_handle_t handle = (net_handle_t) nethandle;

	// It is the equivalent of "dig . a", Query with an empty name.
	int fd = android_res_nquery(handle, "", ns_c_in, ns_t_a, 0);
	EXPECT_GE(env, fd, 0, "res_nquery root");
	EXPECT_EQ(env, 0, expectAnswersValid(env, fd, AF_INET, ns_r_noerror),
	"res_nquery root check answers");

	// Label limit 63
	std::string exceedingLabelQuery = "www." + std::string(70, 'g') + ".com";
	// Name limit 255
	std::string exceedingDomainQuery = "www." + std::string(255, 'g') + ".com";

	fd = android_res_nquery(handle, exceedingLabelQuery.c_str(), ns_c_in, ns_t_a, 0);
	EXPECT_EQ(env, -EMSGSIZE, fd, "res_nquery exceedingLabelQuery");
	fd = android_res_nquery(handle, exceedingDomainQuery.c_str(), ns_c_in, ns_t_aaaa, 0);
	EXPECT_EQ(env, -EMSGSIZE, fd, "res_nquery exceedingDomainQuery");

	uint8_t buf[10] = {};
	// empty BLOB
	fd = android_res_nsend(handle, buf, 10, 0);
	EXPECT_GE(env, fd, 0, "res_nsend empty BLOB");
	EXPECT_EQ(env, 0, expectAnswersNotValid(env, fd, -EINVAL),
	"res_nsend empty BLOB check answers");

	uint8_t largeBuf[2 * MAXPACKET] = {};
	// A buffer larger than 8KB
	fd = android_res_nsend(handle, largeBuf, sizeof(largeBuf), 0);
	EXPECT_EQ(env, -EMSGSIZE, fd, "res_nsend buffer larger than 8KB");

	// 5000 bytes filled with 0. This returns EMSGSIZE because FrameworkListener limits the size of
	// commands to 4096 bytes.
	fd = android_res_nsend(handle, largeBuf, 5000, 0);
	EXPECT_EQ(env, -EMSGSIZE, fd, "res_nsend 5000 bytes filled with 0");

	// 500 bytes filled with 0
	fd = android_res_nsend(handle, largeBuf, 500, 0);
	EXPECT_GE(env, fd, 0, "res_nsend 500 bytes filled with 0");
	EXPECT_EQ(env, 0, expectAnswersNotValid(env, fd, -EINVAL),
	"res_nsend 500 bytes filled with 0 check answers");

	// 5000 bytes filled with 0xFF
	uint8_t ffBuf[5001] = {};
	memset(ffBuf, 0xFF, sizeof(ffBuf));
	ffBuf[5000] = '\0';
	fd = android_res_nsend(handle, ffBuf, sizeof(ffBuf), 0);
	EXPECT_EQ(env, -EMSGSIZE, fd, "res_nsend 5000 bytes filled with 0xFF");

	// 500 bytes filled with 0xFF
	ffBuf[500] = '\0';
	fd = android_res_nsend(handle, ffBuf, 501, 0);
	EXPECT_GE(env, fd, 0, "res_nsend 500 bytes filled with 0xFF");
	EXPECT_EQ(env, 0, expectAnswersNotValid(env, fd, -EINVAL),
	"res_nsend 500 bytes filled with 0xFF check answers");
	}

	extern "C"
	JNIEXPORT jint Java_android_net_cts_MultinetworkApiTest_runGetaddrinfoCheck(
	JNIEnv*, jclass, jlong nethandle) {
	net_handle_t handle = (net_handle_t) nethandle;
	struct addrinfo *res = NULL;

	errno = 0;
	int rval = android_getaddrinfofornetwork(handle, kHostname, NULL, NULL, &res);
	const int saved_errno = errno;
	freeaddrinfo(res);

	LOGD("android_getaddrinfofornetwork(%" PRIu64 ", %s) returned rval=%d errno=%d",
	handle, kHostname, rval, saved_errno);
	return rval == 0 ? 0 : -saved_errno;
	}

	extern "C"
	JNIEXPORT jint Java_android_net_cts_MultinetworkApiTest_runSetprocnetwork(
	JNIEnv*, jclass, jlong nethandle) {
	net_handle_t handle = (net_handle_t) nethandle;

	errno = 0;
	int rval = android_setprocnetwork(handle);
	const int saved_errno = errno;
	LOGD("android_setprocnetwork(%" PRIu64 ") returned rval=%d errno=%d",
	handle, rval, saved_errno);
	return rval == 0 ? 0 : -saved_errno;
	}

	extern "C"
	JNIEXPORT jint Java_android_net_cts_MultinetworkApiTest_runSetsocknetwork(
	JNIEnv*, jclass, jlong nethandle) {
	net_handle_t handle = (net_handle_t) nethandle;

	errno = 0;
	int fd = socket(AF_INET6, SOCK_DGRAM, IPPROTO_UDP);
	if (fd < 0) {
	LOGD("socket() failed, errno=%d", errno);
	return -errno;
	}

	errno = 0;
	int rval = android_setsocknetwork(handle, fd);
	const int saved_errno = errno;
	LOGD("android_setprocnetwork(%" PRIu64 ", %d) returned rval=%d errno=%d",
	handle, fd, rval, saved_errno);
	close(fd);
	return rval == 0 ? 0 : -saved_errno;
	}

	// Use sizeof("x") - 1 because we need a compile-time constant, and strlen("x")
	// isn't guaranteed to fold to a constant.
	static const int kSockaddrStrLen = INET6_ADDRSTRLEN + sizeof("[]:65535") - 1;

	void sockaddr_ntop(const struct sockaddr sa, socklen_t salen, char dst, const size_t size) {
	char addrstr[INET6_ADDRSTRLEN];
	char portstr[sizeof("65535")];
	char buf[kSockaddrStrLen+1];

	int ret = getnameinfo(sa, salen,
	addrstr, sizeof(addrstr),
	portstr, sizeof(portstr),
	NI_NUMERICHOST \| NI_NUMERICSERV);
	if (ret == 0) {
	snprintf(buf, sizeof(buf),
	(sa->sa_family == AF_INET6) ? "[%s]:%s" : "%s:%s",
	addrstr, portstr);
	} else {
	sprintf(buf, "???");
	}

	strlcpy(dst, buf, size);
	}

	extern "C"
	JNIEXPORT jint Java_android_net_cts_MultinetworkApiTest_runDatagramCheck(
	JNIEnv*, jclass, jlong nethandle) {
	const struct addrinfo kHints = {
	.ai_flags = AI_ADDRCONFIG,
	.ai_family = AF_UNSPEC,
	.ai_socktype = SOCK_DGRAM,
	.ai_protocol = IPPROTO_UDP,
	};
	struct addrinfo *res = NULL;
	net_handle_t handle = (net_handle_t) nethandle;

	static const char kPort[] = "443";
	int rval = android_getaddrinfofornetwork(handle, kHostname, kPort, &kHints, &res);
	if (rval != 0) {
	LOGD("android_getaddrinfofornetwork(%llu, %s) returned rval=%d errno=%d",
	handle, kHostname, rval, errno);
	freeaddrinfo(res);
	return -errno;
	}

	// Rely upon getaddrinfo sorting the best destination to the front.
	int fd = socket(res->ai_family, res->ai_socktype, res->ai_protocol);
	if (fd < 0) {
	LOGD("socket(%d, %d, %d) failed, errno=%d",
	res->ai_family, res->ai_socktype, res->ai_protocol, errno);
	freeaddrinfo(res);
	return -errno;
	}

	rval = android_setsocknetwork(handle, fd);
	LOGD("android_setprocnetwork(%llu, %d) returned rval=%d errno=%d",
	handle, fd, rval, errno);
	if (rval != 0) {
	close(fd);
	freeaddrinfo(res);
	return -errno;
	}

	char addrstr[kSockaddrStrLen+1];
	sockaddr_ntop(res->ai_addr, res->ai_addrlen, addrstr, sizeof(addrstr));
	LOGD("Attempting connect() to %s ...", addrstr);

	rval = connect(fd, res->ai_addr, res->ai_addrlen);
	if (rval != 0) {
	close(fd);
	freeaddrinfo(res);
	return -errno;
	}
	freeaddrinfo(res);

	struct sockaddr_storage src_addr;
	socklen_t src_addrlen = sizeof(src_addr);
	if (getsockname(fd, (struct sockaddr *)&src_addr, &src_addrlen) != 0) {
	close(fd);
	return -errno;
	}
	sockaddr_ntop((const struct sockaddr *)&src_addr, sizeof(src_addr), addrstr, sizeof(addrstr));
	LOGD("... from %s", addrstr);

	// Don't let reads or writes block indefinitely.
	const struct timeval timeo = { 2, 0 }; // 2 seconds
	setsockopt(fd, SOL_SOCKET, SO_RCVTIMEO, &timeo, sizeof(timeo));
	setsockopt(fd, SOL_SOCKET, SO_SNDTIMEO, &timeo, sizeof(timeo));

	// For reference see:
	// https://datatracker.ietf.org/doc/html/draft-ietf-quic-invariants
	uint8_t quic_packet[1200] = {
	0xc0, // long header
	0xaa, 0xda, 0xca, 0xca, // reserved-space version number
	0x08, // destination connection ID length
	0, 0, 0, 0, 0, 0, 0, 0, // 64bit connection ID
	0x00, // source connection ID length
	};

	arc4random_buf(quic_packet + 6, 8); // random connection ID

	uint8_t response[1500];
	ssize_t sent, rcvd;
	static const int MAX_RETRIES = 5;
	int i, errnum = 0;

	for (i = 0; i < MAX_RETRIES; i++) {
	sent = send(fd, quic_packet, sizeof(quic_packet), 0);
	if (sent < (ssize_t)sizeof(quic_packet)) {
	errnum = errno;
	LOGD("send(QUIC packet) returned sent=%zd, errno=%d", sent, errnum);
	close(fd);
	return -errnum;
	}

	rcvd = recv(fd, response, sizeof(response), 0);
	if (rcvd > 0) {
	break;
	} else {
	errnum = errno;
	LOGD("[%d/%d] recv(QUIC response) returned rcvd=%zd, errno=%d",
	i + 1, MAX_RETRIES, rcvd, errnum);
	}
	}
	if (rcvd < 15) {
	LOGD("QUIC UDP %s: sent=%zd but rcvd=%zd, errno=%d", kPort, sent, rcvd, errnum);
	if (rcvd <= 0) {
	LOGD("Does this network block UDP port %s?", kPort);
	}
	close(fd);
	return -EPROTO;
	}

	int conn_id_cmp = memcmp(quic_packet + 6, response + 7, 8);
	if (conn_id_cmp != 0) {
	LOGD("sent and received connection IDs do not match");
	close(fd);
	return -EPROTO;
	}

	// TODO: Replace this quick 'n' dirty test with proper QUIC-capable code.

	close(fd);
	return 0;
	}