21#include <freerdp/config.h>
26#include <winpr/string.h>
27#include <winpr/synch.h>
28#include <winpr/assert.h>
29#include <winpr/cast.h>
30#include <winpr/json.h>
38#include "redirection.h"
40#include <freerdp/codec/bulk.h>
41#include <freerdp/crypto/per.h>
42#include <freerdp/log.h>
43#include <freerdp/buildflags.h>
45#define RDP_TAG FREERDP_TAG("core.rdp")
55static const char* DATA_PDU_TYPE_STRINGS[80] = {
97 "Set Keyboard Indicators",
99 "Bitmap Cache Persistent List",
100 "Bitmap Cache Error",
101 "Set Keyboard IME Status",
102 "Offscreen Cache Error",
104 "Draw Nine Grid Error",
123#define rdp_check_monitor_layout_pdu_state(rdp, expected) \
124 rdp_check_monitor_layout_pdu_state_(rdp, expected, __FILE__, __func__, __LINE__)
126static BOOL rdp_check_monitor_layout_pdu_state_(
const rdpRdp* rdp, BOOL expected,
const char* file,
127 const char* fkt,
size_t line)
130 if (expected != rdp->monitor_layout_pdu)
132 const DWORD log_level = WLOG_ERROR;
133 if (WLog_IsLevelActive(rdp->log, log_level))
135 WLog_PrintTextMessage(rdp->log, log_level, line, file, fkt,
136 "Expected rdp->monitor_layout_pdu == %s",
137 expected ?
"TRUE" :
"FALSE");
144#define rdp_set_monitor_layout_pdu_state(rdp, expected) \
145 rdp_set_monitor_layout_pdu_state_(rdp, expected, __FILE__, __func__, __LINE__)
146static BOOL rdp_set_monitor_layout_pdu_state_(rdpRdp* rdp, BOOL value,
const char* file,
147 const char* fkt,
size_t line)
151 if (value && (value == rdp->monitor_layout_pdu))
153 const DWORD log_level = WLOG_WARN;
154 if (WLog_IsLevelActive(rdp->log, log_level))
156 WLog_PrintTextMessage(rdp->log, log_level, line, file, fkt,
157 "rdp->monitor_layout_pdu == TRUE, expected FALSE");
161 rdp->monitor_layout_pdu = value;
165const char* data_pdu_type_to_string(UINT8 type)
167 if (type >= ARRAYSIZE(DATA_PDU_TYPE_STRINGS))
169 return DATA_PDU_TYPE_STRINGS[type];
172static BOOL rdp_read_flow_control_pdu(rdpRdp* rdp,
wStream* s, UINT16* type, UINT16* channel_id);
173static BOOL rdp_write_share_control_header(rdpRdp* rdp,
wStream* s,
size_t length, UINT16 type,
175static BOOL rdp_write_share_data_header(rdpRdp* rdp,
wStream* s,
size_t length, BYTE type,
188BOOL rdp_read_security_header(rdpRdp* rdp,
wStream* s, UINT16* flags, UINT16* length)
190 char buffer[256] = { 0 };
196 if ((length && (*length < 4)))
198 WLog_Print(rdp->log, WLOG_WARN,
199 "invalid security header length, have %" PRIu16
", must be >= 4", *length);
202 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 4))
205 *flags = Stream_Get_UINT16(s);
206 const uint16_t flagsHi = Stream_Get_UINT16(s);
207 if ((*flags & SEC_FLAGSHI_VALID) != 0)
209 WLog_Print(rdp->log, WLOG_WARN,
210 "[MS-RDPBCGR] 2.2.8.1.1.2.1 Basic (TS_SECURITY_HEADER) SEC_FLAGSHI_VALID field "
211 "set: flagsHi=0x%04" PRIx16,
214 WLog_Print(rdp->log, WLOG_TRACE,
"%s",
215 rdp_security_flag_string(*flags, buffer,
sizeof(buffer)));
231BOOL rdp_write_security_header(rdpRdp* rdp,
wStream* s, UINT16 flags)
233 char buffer[256] = { 0 };
237 if (!Stream_CheckAndLogRequiredCapacityWLog(rdp->log, (s), 4))
240 WLog_Print(rdp->log, WLOG_TRACE,
"%s", rdp_security_flag_string(flags, buffer,
sizeof(buffer)));
242 WINPR_ASSERT((flags & SEC_FLAGSHI_VALID) == 0);
243 Stream_Write_UINT16(s, flags);
244 Stream_Write_UINT16(s, 0);
248BOOL rdp_read_share_control_header(rdpRdp* rdp,
wStream* s, UINT16* tpktLength,
249 UINT16* remainingLength, UINT16* type, UINT16* channel_id)
257 WINPR_ASSERT(channel_id);
259 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 2))
263 Stream_Read_UINT16(s, len);
269 if (!rdp_read_flow_control_pdu(rdp, s, type, channel_id))
275 *remainingLength = 0;
277 char buffer[128] = { 0 };
278 WLog_Print(rdp->log, WLOG_DEBUG,
279 "[Flow control PDU] type=%s, tpktLength=%" PRIu16
", remainingLength=%" PRIu16,
280 pdu_type_to_str(*type, buffer,
sizeof(buffer)), tpktLength ? *tpktLength : 0u,
281 remainingLength ? *remainingLength : 0u);
287 WLog_Print(rdp->log, WLOG_ERROR,
288 "Invalid share control header, length is %" PRIu16
", must be >4", len);
295 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 2))
298 Stream_Read_UINT16(s, tmp);
301 size_t remLen = len - 4;
304 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 2))
307 Stream_Read_UINT16(s, *channel_id);
313 char buffer[128] = { 0 };
314 WLog_Print(rdp->log, WLOG_DEBUG,
"type=%s, tpktLength=%" PRIu16
", remainingLength=%" PRIuz,
315 pdu_type_to_str(*type, buffer,
sizeof(buffer)), len, remLen);
318 WINPR_ASSERT(remLen <= UINT16_MAX);
319 *remainingLength = (UINT16)remLen;
321 return Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, remLen);
324BOOL rdp_write_share_control_header(rdpRdp* rdp,
wStream* s,
size_t length, UINT16 type,
329 if (length > UINT16_MAX)
332 if (length < RDP_PACKET_HEADER_MAX_LENGTH)
334 if (!Stream_CheckAndLogRequiredCapacityWLog(rdp->log, (s), 6))
336 length -= RDP_PACKET_HEADER_MAX_LENGTH;
338 Stream_Write_UINT16(s, WINPR_ASSERTING_INT_CAST(uint16_t, length));
339 Stream_Write_UINT16(s, WINPR_ASSERTING_INT_CAST(uint16_t, type | 0x10));
340 Stream_Write_UINT16(s, WINPR_ASSERTING_INT_CAST(uint16_t, channel_id));
344BOOL rdp_read_share_data_header(rdpRdp* rdp,
wStream* s, UINT16* length, BYTE* type,
345 UINT32* shareId, BYTE* compressedType, UINT16* compressedLength)
350 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 12))
354 Stream_Read_UINT32(s, *shareId);
355 Stream_Seek_UINT8(s);
356 Stream_Seek_UINT8(s);
357 Stream_Read_UINT16(s, *length);
358 Stream_Read_UINT8(s, *type);
359 Stream_Read_UINT8(s, *compressedType);
360 Stream_Read_UINT16(s, *compressedLength);
364BOOL rdp_write_share_data_header(rdpRdp* rdp,
wStream* s,
size_t length, BYTE type, UINT32 share_id)
366 const size_t headerLen = RDP_PACKET_HEADER_MAX_LENGTH + RDP_SHARE_CONTROL_HEADER_LENGTH +
367 RDP_SHARE_DATA_HEADER_LENGTH;
371 if (length > UINT16_MAX)
374 if (length < headerLen)
377 if (!Stream_CheckAndLogRequiredCapacityWLog(rdp->log, (s), 12))
381 Stream_Write_UINT32(s, share_id);
382 Stream_Write_UINT8(s, 0);
383 Stream_Write_UINT8(s, STREAM_LOW);
385 s, WINPR_ASSERTING_INT_CAST(uint16_t, length));
386 Stream_Write_UINT8(s, type);
387 Stream_Write_UINT8(s, 0);
388 Stream_Write_UINT16(s, 0);
392static BOOL rdp_security_stream_init(rdpRdp* rdp,
wStream* s, BOOL sec_header, UINT16* sec_flags)
396 WINPR_ASSERT(sec_flags);
400 if (!Stream_SafeSeek(s, 12))
403 if (rdp->settings->EncryptionMethods == ENCRYPTION_METHOD_FIPS)
405 if (!Stream_SafeSeek(s, 4))
409 *sec_flags |= SEC_ENCRYPT;
411 if (rdp->do_secure_checksum)
412 *sec_flags |= SEC_SECURE_CHECKSUM;
414 else if (*sec_flags != 0 || sec_header)
416 if (!Stream_SafeSeek(s, 4))
423wStream* rdp_send_stream_init(rdpRdp* rdp, UINT16* sec_flags)
428 WINPR_ASSERT(rdp->transport);
430 s = transport_send_stream_init(rdp->transport, 4096);
435 if (!Stream_SafeSeek(s, RDP_PACKET_HEADER_MAX_LENGTH))
438 if (!rdp_security_stream_init(rdp, s, FALSE, sec_flags))
447wStream* rdp_send_stream_pdu_init(rdpRdp* rdp, UINT16* sec_flags)
449 wStream* s = rdp_send_stream_init(rdp, sec_flags);
454 if (!Stream_SafeSeek(s, RDP_SHARE_CONTROL_HEADER_LENGTH))
463wStream* rdp_data_pdu_init(rdpRdp* rdp, UINT16* sec_flags)
465 wStream* s = rdp_send_stream_pdu_init(rdp, sec_flags);
470 if (!Stream_SafeSeek(s, RDP_SHARE_DATA_HEADER_LENGTH))
479BOOL rdp_set_error_info(rdpRdp* rdp, UINT32 errorInfo)
483 rdp->errorInfo = errorInfo;
485 if (rdp->errorInfo != ERRINFO_SUCCESS)
487 rdpContext* context = rdp->context;
488 WINPR_ASSERT(context);
490 rdp_print_errinfo(rdp->errorInfo);
494 freerdp_set_last_error_log(context, MAKE_FREERDP_ERROR(
ERRINFO, errorInfo));
498 ErrorInfoEventArgs e = { 0 };
499 EventArgsInit(&e,
"freerdp");
500 e.code = rdp->errorInfo;
501 PubSub_OnErrorInfo(context->pubSub, context, &e);
505 WLog_Print(rdp->log, WLOG_ERROR,
"missing context=%p", (
void*)context);
509 freerdp_set_last_error_log(rdp->context, FREERDP_ERROR_SUCCESS);
515wStream* rdp_message_channel_pdu_init(rdpRdp* rdp, UINT16* sec_flags)
521 s = transport_send_stream_init(rdp->transport, 4096);
526 if (!Stream_SafeSeek(s, RDP_PACKET_HEADER_MAX_LENGTH))
529 if (!rdp_security_stream_init(rdp, s, TRUE, sec_flags))
548BOOL rdp_read_header(rdpRdp* rdp,
wStream* s, UINT16* length, UINT16* channelId)
553 UINT16 initiator = 0;
556 WINPR_ASSERT(rdp->settings);
558 DomainMCSPDU MCSPDU = (rdp->settings->ServerMode) ? DomainMCSPDU_SendDataRequest
559 : DomainMCSPDU_SendDataIndication;
562 if (!tpkt_read_header(s, length))
565 if (!tpdu_read_header(s, &code, &li, *length))
568 if (code != X224_TPDU_DATA)
570 if (code == X224_TPDU_DISCONNECT_REQUEST)
572 WLog_Print(rdp->log, WLOG_WARN,
"Received X224_TPDU_DISCONNECT_REQUEST, terminating");
573 utils_abort_connect(rdp);
577 WLog_Print(rdp->log, WLOG_WARN,
578 "Unexpected X224 TPDU type %s [%08" PRIx32
"] instead of %s",
579 tpdu_type_to_string(code), code, tpdu_type_to_string(X224_TPDU_DATA));
583 if (!per_read_choice(s, &choice))
586 const DomainMCSPDU domainMCSPDU = (DomainMCSPDU)(choice >> 2);
588 if (domainMCSPDU != MCSPDU)
590 if (domainMCSPDU != DomainMCSPDU_DisconnectProviderUltimatum)
592 WLog_Print(rdp->log, WLOG_WARN,
"Received %s instead of %s",
593 mcs_domain_pdu_string(domainMCSPDU), mcs_domain_pdu_string(MCSPDU));
598 MCSPDU = domainMCSPDU;
602 WLog_Print(rdp->log, WLOG_WARN,
"TPDU invalid length, got %" PRIu16
", expected at least 8",
607 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, *length - 8))
610 if (MCSPDU == DomainMCSPDU_DisconnectProviderUltimatum)
613 TerminateEventArgs e = { 0 };
615 if (!mcs_recv_disconnect_provider_ultimatum(rdp->mcs, s, &reason))
618 rdpContext* context = rdp->context;
619 WINPR_ASSERT(context);
620 context->disconnectUltimatum = reason;
622 if (rdp->errorInfo == ERRINFO_SUCCESS)
629 UINT32 errorInfo = ERRINFO_RPC_INITIATED_DISCONNECT;
630 if (reason == Disconnect_Ultimatum_provider_initiated)
631 errorInfo = ERRINFO_RPC_INITIATED_DISCONNECT;
632 else if (reason == Disconnect_Ultimatum_user_requested)
633 errorInfo = ERRINFO_LOGOFF_BY_USER;
635 rdp_set_error_info(rdp, errorInfo);
638 WLog_Print(rdp->log, WLOG_DEBUG,
"DisconnectProviderUltimatum: reason: %d", reason);
639 utils_abort_connect(rdp);
640 EventArgsInit(&e,
"freerdp");
642 PubSub_OnTerminate(rdp->pubSub, context, &e);
646 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 5))
649 if (!per_read_integer16(s, &initiator, MCS_BASE_CHANNEL_ID))
652 if (!per_read_integer16(s, channelId, 0))
655 const uint8_t dataPriority = Stream_Get_UINT8(s);
656 WLog_Print(rdp->log, WLOG_TRACE,
"dataPriority=%" PRIu8, dataPriority);
658 if (!per_read_length(s, length))
661 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, *length))
677BOOL rdp_write_header(rdpRdp* rdp,
wStream* s,
size_t length, UINT16 channelId, UINT16 sec_flags)
680 WINPR_ASSERT(rdp->settings);
682 WINPR_ASSERT(length >= RDP_PACKET_HEADER_MAX_LENGTH);
683 if (length > UINT16_MAX)
686 DomainMCSPDU MCSPDU = (rdp->settings->ServerMode) ? DomainMCSPDU_SendDataIndication
687 : DomainMCSPDU_SendDataRequest;
689 if ((sec_flags & SEC_ENCRYPT) && (rdp->settings->EncryptionMethods == ENCRYPTION_METHOD_FIPS))
691 const UINT16 body_length = (UINT16)length - RDP_PACKET_HEADER_MAX_LENGTH;
692 const UINT16 pad = 8 - (body_length % 8);
698 if (!mcs_write_domain_mcspdu_header(s, MCSPDU, (UINT16)length, 0))
700 if (!per_write_integer16(s, rdp->mcs->userId, MCS_BASE_CHANNEL_ID))
702 if (!per_write_integer16(s, channelId, 0))
704 if (!Stream_EnsureRemainingCapacity(s, 3))
706 Stream_Write_UINT8(s, 0x70);
713 length = (length - RDP_PACKET_HEADER_MAX_LENGTH) | 0x8000;
714 Stream_Write_UINT16_BE(
715 s, WINPR_ASSERTING_INT_CAST(uint16_t, length));
719static BOOL rdp_security_stream_out(rdpRdp* rdp,
wStream* s,
size_t length, UINT16 sec_flags,
724 if (length > UINT16_MAX)
731 WINPR_ASSERT(sec_flags <= UINT16_MAX);
732 if (!rdp_write_security_header(rdp, s, sec_flags))
735 if (sec_flags & SEC_ENCRYPT)
737 if (rdp->settings->EncryptionMethods == ENCRYPTION_METHOD_FIPS)
739 BYTE* data = Stream_PointerAs(s, BYTE) + 12;
740 const size_t size = WINPR_ASSERTING_INT_CAST(
size_t, (data - Stream_Buffer(s)));
746 Stream_Write_UINT16(s, 0x10);
747 Stream_Write_UINT8(s, 0x1);
749 *pad = 8 - (length % 8);
755 memset(data + length, 0, *pad);
757 Stream_Write_UINT8(s, WINPR_ASSERTING_INT_CAST(uint8_t, *pad));
759 if (!Stream_CheckAndLogRequiredCapacityWLog(rdp->log, s, 8))
761 if (!security_hmac_signature(data, length, Stream_Pointer(s), 8, rdp))
765 if (!security_fips_encrypt(data, length + *pad, rdp))
770 const BYTE* data = Stream_PointerAs(s,
const BYTE) + 8;
771 const size_t diff = Stream_GetPosition(s) + 8ULL;
776 if (!Stream_CheckAndLogRequiredCapacityWLog(rdp->log, s, 8))
778 if (sec_flags & SEC_SECURE_CHECKSUM)
779 status = security_salted_mac_signature(rdp, data, (UINT32)length, TRUE,
780 Stream_Pointer(s), 8);
782 status = security_mac_signature(rdp, data, (UINT32)length,
783 Stream_PointerAs(s, BYTE), 8);
790 if (!security_encrypt(Stream_Pointer(s), length, rdp))
799static UINT32 rdp_get_sec_bytes(rdpRdp* rdp, UINT16 sec_flags)
801 UINT32 sec_bytes = 0;
803 if (sec_flags & SEC_ENCRYPT)
807 if (rdp->settings->EncryptionMethods == ENCRYPTION_METHOD_FIPS)
810 else if (sec_flags != 0)
829BOOL rdp_send(rdpRdp* rdp,
wStream* s, UINT16 channel_id, UINT16 sec_flags)
833 BOOL should_unlock = FALSE;
841 if (sec_flags & SEC_ENCRYPT)
843 if (!security_lock(rdp))
845 should_unlock = TRUE;
849 size_t length = Stream_GetPosition(s);
850 Stream_SetPosition(s, 0);
851 if (!rdp_write_header(rdp, s, length, channel_id, sec_flags))
854 if (!rdp_security_stream_out(rdp, s, length, sec_flags, &pad))
858 Stream_SetPosition(s, length);
859 Stream_SealLength(s);
862 if (transport_write(rdp->transport, s) < 0)
867 if (should_unlock && !security_unlock(rdp))
873BOOL rdp_send_pdu(rdpRdp* rdp,
wStream* s, UINT16 type, UINT16 channel_id, UINT16 sec_flags)
876 UINT32 sec_bytes = 0;
879 BOOL should_unlock = FALSE;
887 if (sec_flags & SEC_ENCRYPT)
889 if (!security_lock(rdp))
891 should_unlock = TRUE;
895 size_t length = Stream_GetPosition(s);
896 Stream_SetPosition(s, 0);
897 if (!rdp_write_header(rdp, s, length, MCS_GLOBAL_CHANNEL_ID, sec_flags))
899 sec_bytes = rdp_get_sec_bytes(rdp, sec_flags);
900 sec_hold = Stream_GetPosition(s);
901 Stream_Seek(s, sec_bytes);
902 if (!rdp_write_share_control_header(rdp, s, length - sec_bytes, type, channel_id))
904 Stream_SetPosition(s, sec_hold);
906 if (!rdp_security_stream_out(rdp, s, length, sec_flags, &pad))
910 Stream_SetPosition(s, length);
911 Stream_SealLength(s);
914 if (transport_write(rdp->transport, s) < 0)
919 if (should_unlock && !security_unlock(rdp))
924BOOL rdp_send_data_pdu(rdpRdp* rdp,
wStream* s, BYTE type, UINT16 channel_id, UINT16 sec_flags)
927 UINT32 sec_bytes = 0;
930 BOOL should_unlock = FALSE;
938 if (sec_flags & SEC_ENCRYPT)
940 if (!security_lock(rdp))
942 should_unlock = TRUE;
946 size_t length = Stream_GetPosition(s);
947 Stream_SetPosition(s, 0);
948 if (!rdp_write_header(rdp, s, length, MCS_GLOBAL_CHANNEL_ID, sec_flags))
950 sec_bytes = rdp_get_sec_bytes(rdp, sec_flags);
951 sec_hold = Stream_GetPosition(s);
952 Stream_Seek(s, sec_bytes);
953 if (!rdp_write_share_control_header(rdp, s, length - sec_bytes, PDU_TYPE_DATA, channel_id))
955 if (!rdp_write_share_data_header(rdp, s, length - sec_bytes, type, rdp->settings->ShareId))
957 Stream_SetPosition(s, sec_hold);
959 if (!rdp_security_stream_out(rdp, s, length, sec_flags, &pad))
963 Stream_SetPosition(s, length);
964 Stream_SealLength(s);
966 WLog_Print(rdp->log, WLOG_DEBUG,
967 "sending data (type=0x%x size=%" PRIuz
" channelId=%" PRIu16
")", type,
968 Stream_Length(s), channel_id);
971 if (transport_write(rdp->transport, s) < 0)
976 if (should_unlock && !security_unlock(rdp))
982BOOL rdp_send_message_channel_pdu(rdpRdp* rdp,
wStream* s, UINT16 sec_flags)
986 BOOL should_unlock = FALSE;
991 if (sec_flags & SEC_ENCRYPT)
993 if (!security_lock(rdp))
995 should_unlock = TRUE;
999 size_t length = Stream_GetPosition(s);
1000 Stream_SetPosition(s, 0);
1001 if (!rdp_write_header(rdp, s, length, rdp->mcs->messageChannelId, sec_flags))
1004 if (!rdp_security_stream_out(rdp, s, length, sec_flags, &pad))
1008 Stream_SetPosition(s, length);
1010 Stream_SealLength(s);
1012 if (transport_write(rdp->transport, s) < 0)
1017 if (should_unlock && !security_unlock(rdp))
1023static BOOL rdp_recv_server_shutdown_denied_pdu(WINPR_ATTR_UNUSED rdpRdp* rdp,
1029static BOOL rdp_recv_server_set_keyboard_indicators_pdu(rdpRdp* rdp,
wStream* s)
1034 rdpContext* context = rdp->context;
1035 WINPR_ASSERT(context);
1036 WINPR_ASSERT(context->update);
1038 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 4))
1041 const uint16_t unitId = Stream_Get_UINT16(s);
1044 WLog_Print(rdp->log, WLOG_WARN,
1045 "[MS-RDPBCGR] 2.2.8.2.1.1 Set Keyboard Indicators PDU Data "
1046 "(TS_SET_KEYBOARD_INDICATORS_PDU)::unitId should be 0, is %" PRIu16,
1049 const UINT16 ledFlags = Stream_Get_UINT16(s);
1050 return IFCALLRESULT(TRUE, context->update->SetKeyboardIndicators, context, ledFlags);
1053static BOOL rdp_recv_server_set_keyboard_ime_status_pdu(rdpRdp* rdp,
wStream* s)
1055 if (!rdp || !rdp->input)
1058 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 10))
1061 const uint16_t unitId = Stream_Get_UINT16(s);
1064 WLog_Print(rdp->log, WLOG_WARN,
1065 "[MS-RDPBCGR] 2.2.8.2.2.1 Set Keyboard IME Status PDU Data "
1066 "(TS_SET_KEYBOARD_IME_STATUS_PDU)::unitId should be 0, is %" PRIu16,
1069 const uint32_t imeState = Stream_Get_UINT32(s);
1070 const uint32_t imeConvMode = Stream_Get_UINT32(s);
1071 return IFCALLRESULT(TRUE, rdp->update->SetKeyboardImeStatus, rdp->context, unitId, imeState,
1075static BOOL rdp_recv_set_error_info_data_pdu(rdpRdp* rdp,
wStream* s)
1077 UINT32 errorInfo = 0;
1079 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 4))
1082 Stream_Read_UINT32(s, errorInfo);
1083 return rdp_set_error_info(rdp, errorInfo);
1086static BOOL rdp_recv_server_auto_reconnect_status_pdu(rdpRdp* rdp,
wStream* s)
1088 UINT32 arcStatus = 0;
1090 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 4))
1093 Stream_Read_UINT32(s, arcStatus);
1094 WLog_Print(rdp->log, WLOG_WARN,
"AutoReconnectStatus: 0x%08" PRIX32
"", arcStatus);
1098static BOOL rdp_recv_server_status_info_pdu(rdpRdp* rdp,
wStream* s)
1100 UINT32 statusCode = 0;
1102 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 4))
1105 Stream_Read_UINT32(s, statusCode);
1107 if (rdp->update->ServerStatusInfo)
1108 return rdp->update->ServerStatusInfo(rdp->context, statusCode);
1113static BOOL rdp_recv_monitor_layout_pdu(rdpRdp* rdp,
wStream* s)
1115 UINT32 monitorCount = 0;
1120 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 4))
1123 Stream_Read_UINT32(s, monitorCount);
1125 if (!Stream_CheckAndLogRequiredLengthOfSizeWLog(rdp->log, s, monitorCount, 20ull))
1130 if (!monitorDefArray)
1133 for (UINT32 index = 0; index < monitorCount; index++)
1136 Stream_Read_INT32(s, monitor->left);
1137 Stream_Read_INT32(s, monitor->top);
1138 Stream_Read_INT32(s, monitor->right);
1139 Stream_Read_INT32(s, monitor->bottom);
1140 Stream_Read_UINT32(s, monitor->flags);
1143 IFCALLRET(rdp->update->RemoteMonitors, ret, rdp->context, monitorCount, monitorDefArray);
1144 free(monitorDefArray);
1147 return rdp_set_monitor_layout_pdu_state(rdp, TRUE);
1150state_run_t rdp_recv_data_pdu(rdpRdp* rdp,
wStream* s)
1156 BYTE compressedType = 0;
1157 UINT16 compressedLength = 0;
1160 if (!rdp_read_share_data_header(rdp, s, &length, &type, &shareId, &compressedType,
1163 WLog_Print(rdp->log, WLOG_ERROR,
"rdp_read_share_data_header() failed");
1164 return STATE_RUN_FAILED;
1169 if (compressedType & PACKET_COMPRESSED)
1171 if (compressedLength < 18)
1173 WLog_Print(rdp->log, WLOG_ERROR,
1174 "bulk_decompress: not enough bytes for compressedLength %" PRIu16
"",
1176 return STATE_RUN_FAILED;
1180 const BYTE* pDstData = NULL;
1181 UINT16 SrcSize = compressedLength - 18;
1183 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, SrcSize))
1185 WLog_Print(rdp->log, WLOG_ERROR,
1186 "bulk_decompress: not enough bytes for compressedLength %" PRIu16
"",
1188 return STATE_RUN_FAILED;
1191 if (bulk_decompress(rdp->bulk, Stream_ConstPointer(s), SrcSize, &pDstData, &DstSize,
1194 cs = transport_take_from_pool(rdp->transport, DstSize);
1197 WLog_Print(rdp->log, WLOG_ERROR,
"Couldn't take stream from pool");
1198 return STATE_RUN_FAILED;
1201 Stream_SetPosition(cs, 0);
1202 Stream_Write(cs, pDstData, DstSize);
1203 Stream_SealLength(cs);
1204 Stream_SetPosition(cs, 0);
1208 WLog_Print(rdp->log, WLOG_ERROR,
"bulk_decompress() failed");
1209 return STATE_RUN_FAILED;
1212 Stream_Seek(s, SrcSize);
1215 WLog_Print(rdp->log, WLOG_DEBUG,
"recv %s Data PDU (0x%02" PRIX8
"), length: %" PRIu16
"",
1216 data_pdu_type_to_string(type), type, length);
1220 case DATA_PDU_TYPE_UPDATE:
1221 if (!update_recv(rdp->update, cs))
1223 WLog_Print(rdp->log, WLOG_ERROR,
"DATA_PDU_TYPE_UPDATE - update_recv() failed");
1229 case DATA_PDU_TYPE_CONTROL:
1230 if (!rdp_recv_server_control_pdu(rdp, cs))
1232 WLog_Print(rdp->log, WLOG_ERROR,
1233 "DATA_PDU_TYPE_CONTROL - rdp_recv_server_control_pdu() failed");
1239 case DATA_PDU_TYPE_POINTER:
1240 if (!update_recv_pointer(rdp->update, cs))
1242 WLog_Print(rdp->log, WLOG_ERROR,
1243 "DATA_PDU_TYPE_POINTER - update_recv_pointer() failed");
1249 case DATA_PDU_TYPE_SYNCHRONIZE:
1250 if (!rdp_recv_server_synchronize_pdu(rdp, cs))
1252 WLog_Print(rdp->log, WLOG_ERROR,
1253 "DATA_PDU_TYPE_SYNCHRONIZE - rdp_recv_synchronize_pdu() failed");
1259 case DATA_PDU_TYPE_PLAY_SOUND:
1260 if (!update_recv_play_sound(rdp->update, cs))
1262 WLog_Print(rdp->log, WLOG_ERROR,
1263 "DATA_PDU_TYPE_PLAY_SOUND - update_recv_play_sound() failed");
1269 case DATA_PDU_TYPE_SHUTDOWN_DENIED:
1270 if (!rdp_recv_server_shutdown_denied_pdu(rdp, cs))
1273 rdp->log, WLOG_ERROR,
1274 "DATA_PDU_TYPE_SHUTDOWN_DENIED - rdp_recv_server_shutdown_denied_pdu() failed");
1280 case DATA_PDU_TYPE_SAVE_SESSION_INFO:
1281 if (!rdp_recv_save_session_info(rdp, cs))
1283 WLog_Print(rdp->log, WLOG_ERROR,
1284 "DATA_PDU_TYPE_SAVE_SESSION_INFO - rdp_recv_save_session_info() failed");
1290 case DATA_PDU_TYPE_FONT_MAP:
1291 if (!rdp_recv_font_map_pdu(rdp, cs))
1293 WLog_Print(rdp->log, WLOG_ERROR,
1294 "DATA_PDU_TYPE_FONT_MAP - rdp_recv_font_map_pdu() failed");
1300 case DATA_PDU_TYPE_SET_KEYBOARD_INDICATORS:
1301 if (!rdp_recv_server_set_keyboard_indicators_pdu(rdp, cs))
1303 WLog_Print(rdp->log, WLOG_ERROR,
1304 "DATA_PDU_TYPE_SET_KEYBOARD_INDICATORS - "
1305 "rdp_recv_server_set_keyboard_indicators_pdu() failed");
1311 case DATA_PDU_TYPE_SET_KEYBOARD_IME_STATUS:
1312 if (!rdp_recv_server_set_keyboard_ime_status_pdu(rdp, cs))
1314 WLog_Print(rdp->log, WLOG_ERROR,
1315 "DATA_PDU_TYPE_SET_KEYBOARD_IME_STATUS - "
1316 "rdp_recv_server_set_keyboard_ime_status_pdu() failed");
1322 case DATA_PDU_TYPE_SET_ERROR_INFO:
1323 if (!rdp_recv_set_error_info_data_pdu(rdp, cs))
1326 rdp->log, WLOG_ERROR,
1327 "DATA_PDU_TYPE_SET_ERROR_INFO - rdp_recv_set_error_info_data_pdu() failed");
1333 case DATA_PDU_TYPE_ARC_STATUS:
1334 if (!rdp_recv_server_auto_reconnect_status_pdu(rdp, cs))
1336 WLog_Print(rdp->log, WLOG_ERROR,
1337 "DATA_PDU_TYPE_ARC_STATUS - "
1338 "rdp_recv_server_auto_reconnect_status_pdu() failed");
1344 case DATA_PDU_TYPE_STATUS_INFO:
1345 if (!rdp_recv_server_status_info_pdu(rdp, cs))
1347 WLog_Print(rdp->log, WLOG_ERROR,
1348 "DATA_PDU_TYPE_STATUS_INFO - rdp_recv_server_status_info_pdu() failed");
1354 case DATA_PDU_TYPE_MONITOR_LAYOUT:
1355 if (!rdp_recv_monitor_layout_pdu(rdp, cs))
1357 WLog_Print(rdp->log, WLOG_ERROR,
1358 "DATA_PDU_TYPE_MONITOR_LAYOUT - rdp_recv_monitor_layout_pdu() failed");
1365 WLog_Print(rdp->log, WLOG_WARN,
1366 "[UNHANDLED] %s Data PDU (0x%02" PRIX8
"), length: %" PRIu16
"",
1367 data_pdu_type_to_string(type), type, length);
1374 return STATE_RUN_SUCCESS;
1380 return STATE_RUN_FAILED;
1383state_run_t rdp_recv_message_channel_pdu(rdpRdp* rdp,
wStream* s, UINT16 securityFlags)
1388 if (securityFlags & SEC_AUTODETECT_REQ)
1391 return autodetect_recv_request_packet(rdp->autodetect, RDP_TRANSPORT_TCP, s);
1394 if (securityFlags & SEC_AUTODETECT_RSP)
1397 return autodetect_recv_response_packet(rdp->autodetect, RDP_TRANSPORT_TCP, s);
1400 if (securityFlags & SEC_HEARTBEAT)
1403 return rdp_recv_heartbeat_packet(rdp, s);
1406 if (securityFlags & SEC_TRANSPORT_REQ)
1408 return multitransport_recv_request(rdp->multitransport, s);
1411 if (securityFlags & SEC_TRANSPORT_RSP)
1413 return multitransport_recv_response(rdp->multitransport, s);
1416 if (securityFlags & SEC_LICENSE_PKT)
1418 return license_recv(rdp->license, s);
1421 if (securityFlags & SEC_LICENSE_ENCRYPT_CS)
1423 return license_recv(rdp->license, s);
1426 if (securityFlags & SEC_LICENSE_ENCRYPT_SC)
1428 return license_recv(rdp->license, s);
1431 return STATE_RUN_SUCCESS;
1434state_run_t rdp_recv_out_of_sequence_pdu(rdpRdp* rdp,
wStream* s, UINT16 pduType, UINT16 length)
1436 state_run_t rc = STATE_RUN_FAILED;
1442 rc = rdp_recv_data_pdu(rdp, s);
1444 case PDU_TYPE_SERVER_REDIRECTION:
1445 rc = rdp_recv_enhanced_security_redirection_packet(rdp, s);
1447 case PDU_TYPE_FLOW_RESPONSE:
1448 case PDU_TYPE_FLOW_STOP:
1449 case PDU_TYPE_FLOW_TEST:
1450 rc = STATE_RUN_SUCCESS;
1454 char buffer1[256] = { 0 };
1455 char buffer2[256] = { 0 };
1457 WLog_Print(rdp->log, WLOG_ERROR,
"expected %s, got %s",
1458 pdu_type_to_str(PDU_TYPE_DEMAND_ACTIVE, buffer1,
sizeof(buffer1)),
1459 pdu_type_to_str(pduType, buffer2,
sizeof(buffer2)));
1460 rc = STATE_RUN_FAILED;
1465 if (!tpkt_ensure_stream_consumed(rdp->log, s, length))
1466 return STATE_RUN_FAILED;
1470BOOL rdp_read_flow_control_pdu(rdpRdp* rdp,
wStream* s, UINT16* type, UINT16* channel_id)
1484 WINPR_ASSERT(channel_id);
1486 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 6))
1488 Stream_Read_UINT8(s, pduType);
1490 Stream_Seek_UINT8(s);
1491 Stream_Seek_UINT8(s);
1492 Stream_Seek_UINT8(s);
1493 Stream_Read_UINT16(s, *channel_id);
1508BOOL rdp_decrypt(rdpRdp* rdp,
wStream* s, UINT16* pLength, UINT16 securityFlags)
1511 BYTE cmac[8] = { 0 };
1512 BYTE wmac[8] = { 0 };
1513 BOOL status = FALSE;
1516 WINPR_ASSERT(rdp->settings);
1518 WINPR_ASSERT(pLength);
1520 if (!security_lock(rdp))
1523 INT32 length = *pLength;
1524 if (rdp->settings->EncryptionMethods == ENCRYPTION_METHOD_NONE)
1527 if (rdp->settings->EncryptionMethods == ENCRYPTION_METHOD_FIPS)
1529 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, 12))
1533 Stream_Read_UINT16(s, len);
1535 WLog_Print(rdp->log, WLOG_WARN,
"ENCRYPTION_METHOD_FIPS length %" PRIu16
" != 0x10",
1539 Stream_Read_UINT8(s, version);
1541 WLog_Print(rdp->log, WLOG_WARN,
"ENCRYPTION_METHOD_FIPS version %" PRIu16
" != 1",
1545 Stream_Read_UINT8(s, pad);
1546 const BYTE* sig = Stream_ConstPointer(s);
1549 const INT32 padLength = length - pad;
1551 if ((length <= 0) || (padLength <= 0) || (padLength > UINT16_MAX))
1553 WLog_Print(rdp->log, WLOG_ERROR,
"FATAL: invalid pad length %" PRId32, padLength);
1557 if (!security_fips_decrypt(Stream_Pointer(s), (
size_t)length, rdp))
1560 if (!security_fips_check_signature(Stream_ConstPointer(s), (
size_t)padLength, sig, 8, rdp))
1563 Stream_SetLength(s, Stream_Length(s) - pad);
1564 *pLength = (UINT16)padLength;
1568 if (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s,
sizeof(wmac)))
1571 Stream_Read(s, wmac,
sizeof(wmac));
1572 length -=
sizeof(wmac);
1576 WLog_Print(rdp->log, WLOG_ERROR,
"FATAL: invalid length field");
1580 if (!security_decrypt(Stream_PointerAs(s, BYTE), (
size_t)length, rdp))
1583 if (securityFlags & SEC_SECURE_CHECKSUM)
1584 status = security_salted_mac_signature(rdp, Stream_ConstPointer(s), (UINT32)length,
1585 FALSE, cmac,
sizeof(cmac));
1587 status = security_mac_signature(rdp, Stream_ConstPointer(s), (UINT32)length, cmac,
1593 if (memcmp(wmac, cmac,
sizeof(wmac)) != 0)
1595 WLog_Print(rdp->log, WLOG_ERROR,
"WARNING: invalid packet signature");
1606 *pLength = (UINT16)length;
1610 if (!security_unlock(rdp))
1615const char* pdu_type_to_str(UINT16 pduType,
char* buffer,
size_t length)
1617 const char* str = NULL;
1620 case PDU_TYPE_DEMAND_ACTIVE:
1621 str =
"PDU_TYPE_DEMAND_ACTIVE";
1623 case PDU_TYPE_CONFIRM_ACTIVE:
1624 str =
"PDU_TYPE_CONFIRM_ACTIVE";
1626 case PDU_TYPE_DEACTIVATE_ALL:
1627 str =
"PDU_TYPE_DEACTIVATE_ALL";
1630 str =
"PDU_TYPE_DATA";
1632 case PDU_TYPE_SERVER_REDIRECTION:
1633 str =
"PDU_TYPE_SERVER_REDIRECTION";
1635 case PDU_TYPE_FLOW_TEST:
1636 str =
"PDU_TYPE_FLOW_TEST";
1638 case PDU_TYPE_FLOW_RESPONSE:
1639 str =
"PDU_TYPE_FLOW_RESPONSE";
1641 case PDU_TYPE_FLOW_STOP:
1642 str =
"PDU_TYPE_FLOW_STOP";
1645 str =
"PDU_TYPE_UNKNOWN";
1649 winpr_str_append(str, buffer, length,
"");
1651 char msg[32] = { 0 };
1652 (void)_snprintf(msg,
sizeof(msg),
"[0x%08" PRIx32
"]", pduType);
1653 winpr_str_append(msg, buffer, length,
"");
1664static state_run_t rdp_recv_tpkt_pdu(rdpRdp* rdp,
wStream* s)
1666 state_run_t rc = STATE_RUN_SUCCESS;
1669 UINT16 pduSource = 0;
1670 UINT16 channelId = 0;
1671 UINT16 securityFlags = 0;
1674 WINPR_ASSERT(rdp->context);
1677 freerdp* instance = rdp->context->instance;
1678 WINPR_ASSERT(instance);
1680 if (!rdp_read_header(rdp, s, &length, &channelId))
1681 return STATE_RUN_FAILED;
1683 if (freerdp_shall_disconnect_context(rdp->context))
1684 return STATE_RUN_SUCCESS;
1686 if (rdp->autodetect->bandwidthMeasureStarted)
1688 rdp->autodetect->bandwidthMeasureByteCount += length;
1691 if (rdp->mcs->messageChannelId && (channelId == rdp->mcs->messageChannelId))
1694 return rdp_handle_message_channel(rdp, s, channelId, length);
1697 if (rdp->settings->UseRdpSecurityLayer)
1699 if (!rdp_read_security_header(rdp, s, &securityFlags, &length))
1700 return STATE_RUN_FAILED;
1702 if (securityFlags & (SEC_ENCRYPT | SEC_REDIRECTION_PKT))
1704 if (!rdp_decrypt(rdp, s, &length, securityFlags))
1705 return STATE_RUN_FAILED;
1708 if (securityFlags & SEC_REDIRECTION_PKT)
1714 Stream_Rewind(s, 2);
1717 rc = rdp_recv_enhanced_security_redirection_packet(rdp, s);
1722 if (channelId == MCS_GLOBAL_CHANNEL_ID)
1724 while (Stream_GetRemainingLength(s) > 3)
1731 if (!rdp_read_share_control_header(rdp, s, NULL, &remain, &pduType, &pduSource))
1732 return STATE_RUN_FAILED;
1734 sub = Stream_StaticInit(&subbuffer, Stream_Pointer(s), remain);
1735 if (!Stream_SafeSeek(s, remain))
1736 return STATE_RUN_FAILED;
1738 rdp->settings->PduSource = pduSource;
1744 rc = rdp_recv_data_pdu(rdp, sub);
1745 if (state_run_failed(rc))
1749 case PDU_TYPE_DEACTIVATE_ALL:
1750 if (!rdp_recv_deactivate_all(rdp, sub))
1752 WLog_Print(rdp->log, WLOG_ERROR,
1753 "rdp_recv_tpkt_pdu: rdp_recv_deactivate_all() fail");
1754 return STATE_RUN_FAILED;
1759 case PDU_TYPE_SERVER_REDIRECTION:
1760 return rdp_recv_enhanced_security_redirection_packet(rdp, sub);
1762 case PDU_TYPE_FLOW_RESPONSE:
1763 case PDU_TYPE_FLOW_STOP:
1764 case PDU_TYPE_FLOW_TEST:
1765 WLog_Print(rdp->log, WLOG_DEBUG,
"flow message 0x%04" PRIX16
"", pduType);
1767 if (!Stream_SafeSeek(sub, remain))
1768 return STATE_RUN_FAILED;
1773 char buffer[256] = { 0 };
1774 WLog_Print(rdp->log, WLOG_ERROR,
"incorrect PDU type: %s",
1775 pdu_type_to_str(pduType, buffer,
sizeof(buffer)));
1780 diff = Stream_GetRemainingLength(sub);
1783 char buffer[256] = { 0 };
1784 WLog_Print(rdp->log, WLOG_WARN,
1785 "pduType %s not properly parsed, %" PRIuz
1786 " bytes remaining unhandled. Skipping.",
1787 pdu_type_to_str(pduType, buffer,
sizeof(buffer)), diff);
1795 if (!freerdp_channel_process(instance, s, channelId, length))
1796 return STATE_RUN_FAILED;
1800 if (!tpkt_ensure_stream_consumed(rdp->log, s, length))
1801 return STATE_RUN_FAILED;
1805static state_run_t rdp_recv_fastpath_pdu(rdpRdp* rdp,
wStream* s)
1810 rdpFastPath* fastpath = rdp->fastpath;
1812 if (!fastpath_read_header_rdp(fastpath, s, &length))
1814 WLog_Print(rdp->log, WLOG_ERROR,
"rdp_recv_fastpath_pdu: fastpath_read_header_rdp() fail");
1815 return STATE_RUN_FAILED;
1818 if ((length == 0) || (!Stream_CheckAndLogRequiredLengthWLog(rdp->log, s, length)))
1820 WLog_Print(rdp->log, WLOG_ERROR,
"incorrect FastPath PDU header length %" PRIu16
"",
1822 return STATE_RUN_FAILED;
1825 if (rdp->autodetect->bandwidthMeasureStarted)
1827 rdp->autodetect->bandwidthMeasureByteCount += length;
1830 if (!fastpath_decrypt(fastpath, s, &length))
1831 return STATE_RUN_FAILED;
1833 return fastpath_recv_updates(rdp->fastpath, s);
1836static state_run_t rdp_recv_pdu(rdpRdp* rdp,
wStream* s)
1838 const int rc = tpkt_verify_header(s);
1840 return rdp_recv_tpkt_pdu(rdp, s);
1842 return rdp_recv_fastpath_pdu(rdp, s);
1844 return STATE_RUN_FAILED;
1847static state_run_t rdp_handle_sc_flags(rdpRdp* rdp,
wStream* s, UINT32 flag,
1848 CONNECTION_STATE nextState)
1850 const UINT32 mask = FINALIZE_SC_SYNCHRONIZE_PDU | FINALIZE_SC_CONTROL_COOPERATE_PDU |
1851 FINALIZE_SC_CONTROL_GRANTED_PDU | FINALIZE_SC_FONT_MAP_PDU;
1853 state_run_t status = rdp_recv_pdu(rdp, s);
1854 if (state_run_success(status))
1856 const UINT32 flags = rdp->finalize_sc_pdus & mask;
1857 if ((flags & flag) == flag)
1859 if (!rdp_client_transition_to_state(rdp, nextState))
1860 status = STATE_RUN_FAILED;
1862 status = STATE_RUN_SUCCESS;
1866 char flag_buffer[256] = { 0 };
1867 char mask_buffer[256] = { 0 };
1868 WLog_Print(rdp->log, WLOG_WARN,
1869 "[%s] unexpected server message, expected flag %s [have %s]",
1870 rdp_get_state_string(rdp),
1871 rdp_finalize_flags_to_str(flag, flag_buffer,
sizeof(flag_buffer)),
1872 rdp_finalize_flags_to_str(flags, mask_buffer,
sizeof(mask_buffer)));
1878static state_run_t rdp_client_exchange_monitor_layout(rdpRdp* rdp,
wStream* s)
1882 if (!rdp_check_monitor_layout_pdu_state(rdp, FALSE))
1883 return STATE_RUN_FAILED;
1888 const UINT32 old = rdp->finalize_sc_pdus;
1889 state_run_t status = rdp_recv_pdu(rdp, s);
1890 const UINT32 now = rdp->finalize_sc_pdus;
1891 const BOOL changed = (old != now) || rdp->monitor_layout_pdu;
1894 if (state_run_success(status) && changed)
1896 if (!rdp->monitor_layout_pdu)
1898 if (!rdp_finalize_is_flag_set(rdp, FINALIZE_SC_SYNCHRONIZE_PDU))
1899 return STATE_RUN_FAILED;
1902 status = rdp_client_connect_finalize(rdp);
1903 if (state_run_success(status) && !rdp->monitor_layout_pdu)
1904 status = STATE_RUN_TRY_AGAIN;
1909static state_run_t rdp_recv_callback_int(WINPR_ATTR_UNUSED rdpTransport* transport,
wStream* s,
1912 state_run_t status = STATE_RUN_SUCCESS;
1913 rdpRdp* rdp = (rdpRdp*)extra;
1915 WINPR_ASSERT(transport);
1919 switch (rdp_get_state(rdp))
1921 case CONNECTION_STATE_NEGO:
1922 if (!rdp_client_transition_to_state(rdp, CONNECTION_STATE_MCS_CREATE_REQUEST))
1923 status = STATE_RUN_FAILED;
1925 status = STATE_RUN_CONTINUE;
1927 case CONNECTION_STATE_NLA:
1928 if (nla_get_state(rdp->nla) < NLA_STATE_AUTH_INFO)
1930 if (nla_recv_pdu(rdp->nla, s) < 1)
1932 WLog_Print(rdp->log, WLOG_ERROR,
"%s - nla_recv_pdu() fail",
1933 rdp_get_state_string(rdp));
1934 status = STATE_RUN_FAILED;
1937 else if (nla_get_state(rdp->nla) == NLA_STATE_POST_NEGO)
1939 nego_recv(rdp->transport, s, (
void*)rdp->nego);
1941 if (!nego_update_settings_from_state(rdp->nego, rdp->settings))
1942 return STATE_RUN_FAILED;
1944 if (nego_get_state(rdp->nego) != NEGO_STATE_FINAL)
1946 WLog_Print(rdp->log, WLOG_ERROR,
"%s - nego_recv() fail",
1947 rdp_get_state_string(rdp));
1948 status = STATE_RUN_FAILED;
1950 else if (!nla_set_state(rdp->nla, NLA_STATE_FINAL))
1951 status = STATE_RUN_FAILED;
1954 if (state_run_success(status))
1956 if (nla_get_state(rdp->nla) == NLA_STATE_AUTH_INFO)
1958 transport_set_nla_mode(rdp->transport, FALSE);
1960 if (rdp->settings->VmConnectMode)
1962 if (!nego_set_state(rdp->nego, NEGO_STATE_NLA))
1963 status = STATE_RUN_FAILED;
1964 else if (!nego_set_requested_protocols(rdp->nego,
1965 PROTOCOL_HYBRID | PROTOCOL_SSL))
1966 status = STATE_RUN_FAILED;
1967 else if (!nego_send_negotiation_request(rdp->nego))
1968 status = STATE_RUN_FAILED;
1969 else if (!nla_set_state(rdp->nla, NLA_STATE_POST_NEGO))
1970 status = STATE_RUN_FAILED;
1974 if (!nla_set_state(rdp->nla, NLA_STATE_FINAL))
1975 status = STATE_RUN_FAILED;
1979 if (state_run_success(status))
1982 if (nla_get_state(rdp->nla) == NLA_STATE_FINAL)
1984 if (!rdp_client_transition_to_state(rdp, CONNECTION_STATE_MCS_CREATE_REQUEST))
1985 status = STATE_RUN_FAILED;
1987 status = STATE_RUN_CONTINUE;
1992 case CONNECTION_STATE_AAD:
1993 if (aad_recv(rdp->aad, s) < 1)
1995 WLog_Print(rdp->log, WLOG_ERROR,
"%s - aad_recv() fail", rdp_get_state_string(rdp));
1996 status = STATE_RUN_FAILED;
1998 if (state_run_success(status))
2000 if (aad_get_state(rdp->aad) == AAD_STATE_FINAL)
2002 transport_set_aad_mode(rdp->transport, FALSE);
2003 if (!rdp_client_transition_to_state(rdp, CONNECTION_STATE_MCS_CREATE_REQUEST))
2004 status = STATE_RUN_FAILED;
2006 status = STATE_RUN_CONTINUE;
2011 case CONNECTION_STATE_MCS_CREATE_REQUEST:
2012 if (!mcs_client_begin(rdp->mcs))
2014 WLog_Print(rdp->log, WLOG_ERROR,
"%s - mcs_client_begin() fail",
2015 rdp_get_state_string(rdp));
2016 status = STATE_RUN_FAILED;
2018 else if (!rdp_client_transition_to_state(rdp, CONNECTION_STATE_MCS_CREATE_RESPONSE))
2019 status = STATE_RUN_FAILED;
2020 else if (Stream_GetRemainingLength(s) > 0)
2021 status = STATE_RUN_CONTINUE;
2024 case CONNECTION_STATE_MCS_CREATE_RESPONSE:
2025 if (!mcs_recv_connect_response(rdp->mcs, s))
2027 WLog_Print(rdp->log, WLOG_ERROR,
"mcs_recv_connect_response failure");
2028 status = STATE_RUN_FAILED;
2032 if (!rdp_client_transition_to_state(rdp, CONNECTION_STATE_MCS_ERECT_DOMAIN))
2033 status = STATE_RUN_FAILED;
2034 else if (!mcs_send_erect_domain_request(rdp->mcs))
2036 WLog_Print(rdp->log, WLOG_ERROR,
"mcs_send_erect_domain_request failure");
2037 status = STATE_RUN_FAILED;
2039 else if (!rdp_client_transition_to_state(rdp, CONNECTION_STATE_MCS_ATTACH_USER))
2040 status = STATE_RUN_FAILED;
2041 else if (!mcs_send_attach_user_request(rdp->mcs))
2043 WLog_Print(rdp->log, WLOG_ERROR,
"mcs_send_attach_user_request failure");
2044 status = STATE_RUN_FAILED;
2046 else if (!rdp_client_transition_to_state(rdp,
2047 CONNECTION_STATE_MCS_ATTACH_USER_CONFIRM))
2048 status = STATE_RUN_FAILED;
2052 case CONNECTION_STATE_MCS_ATTACH_USER_CONFIRM:
2053 if (!mcs_recv_attach_user_confirm(rdp->mcs, s))
2055 WLog_Print(rdp->log, WLOG_ERROR,
"mcs_recv_attach_user_confirm failure");
2056 status = STATE_RUN_FAILED;
2060 if (!rdp_client_transition_to_state(rdp, CONNECTION_STATE_MCS_CHANNEL_JOIN_REQUEST))
2061 status = STATE_RUN_FAILED;
2062 else if (!mcs_send_channel_join_request(rdp->mcs, rdp->mcs->userId))
2064 WLog_Print(rdp->log, WLOG_ERROR,
"mcs_send_channel_join_request failure");
2065 status = STATE_RUN_FAILED;
2067 else if (!rdp_client_transition_to_state(
2068 rdp, CONNECTION_STATE_MCS_CHANNEL_JOIN_RESPONSE))
2069 status = STATE_RUN_FAILED;
2074 if (!rdp_client_skip_mcs_channel_join(rdp))
2075 status = STATE_RUN_FAILED;
2079 case CONNECTION_STATE_MCS_CHANNEL_JOIN_RESPONSE:
2080 if (!rdp_client_connect_mcs_channel_join_confirm(rdp, s))
2082 WLog_Print(rdp->log, WLOG_ERROR,
2084 "rdp_client_connect_mcs_channel_join_confirm() fail",
2085 rdp_get_state_string(rdp));
2086 status = STATE_RUN_FAILED;
2091 case CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_REQUEST:
2092 if (!rdp_client_connect_auto_detect(rdp, s, WLOG_DEBUG))
2094 if (!rdp_client_transition_to_state(rdp, CONNECTION_STATE_LICENSING))
2095 status = STATE_RUN_FAILED;
2097 status = STATE_RUN_TRY_AGAIN;
2101 case CONNECTION_STATE_LICENSING:
2102 status = rdp_client_connect_license(rdp, s);
2104 if (state_run_failed(status))
2106 char buffer[64] = { 0 };
2107 WLog_Print(rdp->log, WLOG_DEBUG,
"%s - rdp_client_connect_license() - %s",
2108 rdp_get_state_string(rdp),
2109 state_run_result_string(status, buffer, ARRAYSIZE(buffer)));
2114 case CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_REQUEST:
2115 if (!rdp_client_connect_auto_detect(rdp, s, WLOG_DEBUG))
2117 (void)rdp_client_transition_to_state(
2118 rdp, CONNECTION_STATE_CAPABILITIES_EXCHANGE_DEMAND_ACTIVE);
2119 status = STATE_RUN_TRY_AGAIN;
2123 case CONNECTION_STATE_CAPABILITIES_EXCHANGE_DEMAND_ACTIVE:
2124 status = rdp_client_connect_demand_active(rdp, s);
2126 if (state_run_failed(status))
2128 char buffer[64] = { 0 };
2129 WLog_Print(rdp->log, WLOG_DEBUG,
2131 "rdp_client_connect_demand_active() - %s",
2132 rdp_get_state_string(rdp),
2133 state_run_result_string(status, buffer, ARRAYSIZE(buffer)));
2135 else if (status == STATE_RUN_ACTIVE)
2137 if (!rdp_client_transition_to_state(
2138 rdp, CONNECTION_STATE_CAPABILITIES_EXCHANGE_CONFIRM_ACTIVE))
2139 status = STATE_RUN_FAILED;
2141 status = STATE_RUN_CONTINUE;
2145 case CONNECTION_STATE_CAPABILITIES_EXCHANGE_MONITOR_LAYOUT:
2146 status = rdp_client_exchange_monitor_layout(rdp, s);
2149 case CONNECTION_STATE_CAPABILITIES_EXCHANGE_CONFIRM_ACTIVE:
2150 status = rdp_client_connect_confirm_active(rdp, s);
2153 case CONNECTION_STATE_FINALIZATION_CLIENT_SYNC:
2154 status = rdp_handle_sc_flags(rdp, s, FINALIZE_SC_SYNCHRONIZE_PDU,
2155 CONNECTION_STATE_FINALIZATION_CLIENT_COOPERATE);
2157 case CONNECTION_STATE_FINALIZATION_CLIENT_COOPERATE:
2158 status = rdp_handle_sc_flags(rdp, s, FINALIZE_SC_CONTROL_COOPERATE_PDU,
2159 CONNECTION_STATE_FINALIZATION_CLIENT_GRANTED_CONTROL);
2161 case CONNECTION_STATE_FINALIZATION_CLIENT_GRANTED_CONTROL:
2162 status = rdp_handle_sc_flags(rdp, s, FINALIZE_SC_CONTROL_GRANTED_PDU,
2163 CONNECTION_STATE_FINALIZATION_CLIENT_FONT_MAP);
2165 case CONNECTION_STATE_FINALIZATION_CLIENT_FONT_MAP:
2166 status = rdp_handle_sc_flags(rdp, s, FINALIZE_SC_FONT_MAP_PDU, CONNECTION_STATE_ACTIVE);
2169 case CONNECTION_STATE_ACTIVE:
2170 status = rdp_recv_pdu(rdp, s);
2172 if (state_run_failed(status))
2174 char buffer[64] = { 0 };
2175 WLog_Print(rdp->log, WLOG_DEBUG,
"%s - rdp_recv_pdu() - %s",
2176 rdp_get_state_string(rdp),
2177 state_run_result_string(status, buffer, ARRAYSIZE(buffer)));
2182 WLog_Print(rdp->log, WLOG_ERROR,
"%s state %u", rdp_get_state_string(rdp),
2183 rdp_get_state(rdp));
2184 status = STATE_RUN_FAILED;
2188 if (state_run_failed(status))
2190 char buffer[64] = { 0 };
2191 WLog_Print(rdp->log, WLOG_ERROR,
"%s status %s", rdp_get_state_string(rdp),
2192 state_run_result_string(status, buffer, ARRAYSIZE(buffer)));
2197state_run_t rdp_recv_callback(rdpTransport* transport,
wStream* s,
void* extra)
2199 char buffer[64] = { 0 };
2200 state_run_t rc = STATE_RUN_FAILED;
2201 const size_t start = Stream_GetPosition(s);
2202 const rdpContext* context = transport_get_context(transport);
2204 WINPR_ASSERT(context);
2207 const rdpRdp* rdp = context->rdp;
2210 if (rc == STATE_RUN_TRY_AGAIN)
2211 Stream_SetPosition(s, start);
2213 const char* old = rdp_get_state_string(rdp);
2214 const size_t orem = Stream_GetRemainingLength(s);
2215 rc = rdp_recv_callback_int(transport, s, extra);
2217 const char* now = rdp_get_state_string(rdp);
2218 const size_t rem = Stream_GetRemainingLength(s);
2220 WLog_Print(rdp->log, WLOG_TRACE,
2221 "(client)[%s -> %s] current return %s [feeding %" PRIuz
" bytes, %" PRIuz
2222 " bytes not processed]",
2223 old, now, state_run_result_string(rc, buffer,
sizeof(buffer)), orem, rem);
2224 }
while ((rc == STATE_RUN_TRY_AGAIN) || (rc == STATE_RUN_CONTINUE));
2228BOOL rdp_send_channel_data(rdpRdp* rdp, UINT16 channelId,
const BYTE* data,
size_t size)
2230 return freerdp_channel_send(rdp, channelId, data, size);
2233BOOL rdp_channel_send_packet(rdpRdp* rdp, UINT16 channelId,
size_t totalSize, UINT32 flags,
2234 const BYTE* data,
size_t chunkSize)
2236 return freerdp_channel_send_packet(rdp, channelId, totalSize, flags, data, chunkSize);
2239BOOL rdp_send_error_info(rdpRdp* rdp)
2241 UINT16 sec_flags = 0;
2245 if (rdp->errorInfo == ERRINFO_SUCCESS)
2248 s = rdp_data_pdu_init(rdp, &sec_flags);
2253 Stream_Write_UINT32(s, rdp->errorInfo);
2254 status = rdp_send_data_pdu(rdp, s, DATA_PDU_TYPE_SET_ERROR_INFO, 0, sec_flags);
2258int rdp_check_fds(rdpRdp* rdp)
2262 rdpTransport* transport = NULL;
2265 transport = rdp->transport;
2267 tsg = transport_get_tsg(transport);
2270 if (!tsg_check_event_handles(tsg))
2272 WLog_Print(rdp->log, WLOG_ERROR,
"rdp_check_fds: tsg_check_event_handles()");
2276 if (tsg_get_state(tsg) != TSG_STATE_PIPE_CREATED)
2280 status = transport_check_fds(transport);
2284 if (!rdp_client_redirect(rdp))
2289 WLog_Print(rdp->log, WLOG_DEBUG,
"transport_check_fds() - %i", status);
2291 status = freerdp_timer_poll(rdp->timer);
2296BOOL freerdp_get_stats(
const rdpRdp* rdp, UINT64* inBytes, UINT64* outBytes, UINT64* inPackets,
2303 *inBytes = rdp->inBytes;
2305 *outBytes = rdp->outBytes;
2307 *inPackets = rdp->inPackets;
2309 *outPackets = rdp->outPackets;
2314static bool rdp_new_common(rdpRdp* rdp)
2319 rdp->transport = transport_new(rdp->context);
2320 if (!rdp->transport)
2325 if (!transport_set_io_callbacks(rdp->transport, rdp->io))
2329 rdp->aad = aad_new(rdp->context);
2333 rdp->nego = nego_new(rdp->transport);
2337 rdp->mcs = mcs_new(rdp->context);
2341 rdp->license = license_new(rdp);
2345 rdp->fastpath = fastpath_new(rdp);
2359rdpRdp* rdp_new(rdpContext* context)
2362 rdpRdp* rdp = (rdpRdp*)calloc(1,
sizeof(rdpRdp));
2367 rdp->log = WLog_Get(RDP_TAG);
2368 WINPR_ASSERT(rdp->log);
2370 (void)_snprintf(rdp->log_context,
sizeof(rdp->log_context),
"%p", (
void*)context);
2371 WLog_SetContext(rdp->log, NULL, rdp->log_context);
2373 InitializeCriticalSection(&rdp->critical);
2374 rdp->context = context;
2375 WINPR_ASSERT(rdp->context);
2377 if (context->ServerMode)
2380 if (!context->settings)
2388 rdp->settings = context->settings;
2391 if (!rdp_set_backup_settings(rdp))
2394 rdp->settings->instance = context->instance;
2396 context->settings = rdp->settings;
2397 if (context->instance)
2398 context->settings->instance = context->instance;
2399 else if (context->peer)
2401 rdp->settings->instance = context->peer;
2403#if defined(WITH_FREERDP_DEPRECATED)
2404 context->peer->settings = rdp->settings;
2408 if (!rdp_new_common(rdp))
2412 const rdpTransportIo* io = transport_get_io_callbacks(rdp->transport);
2415 rdp->io = calloc(1,
sizeof(rdpTransportIo));
2421 rdp->input = input_new(rdp);
2426 rdp->update = update_new(rdp);
2431 rdp->redirection = redirection_new();
2433 if (!rdp->redirection)
2436 rdp->autodetect = autodetect_new(rdp->context);
2438 if (!rdp->autodetect)
2441 rdp->heartbeat = heartbeat_new();
2443 if (!rdp->heartbeat)
2446 rdp->multitransport = multitransport_new(rdp, INITIATE_REQUEST_PROTOCOL_UDPFECL |
2447 INITIATE_REQUEST_PROTOCOL_UDPFECR);
2449 if (!rdp->multitransport)
2452 rdp->bulk = bulk_new(context);
2457 rdp->pubSub = PubSub_New(TRUE);
2461 rdp->abortEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
2462 if (!rdp->abortEvent)
2465 rdp->timer = freerdp_timer_new(rdp);
2472 WINPR_PRAGMA_DIAG_PUSH
2473 WINPR_PRAGMA_DIAG_IGNORED_MISMATCHED_DEALLOC
2475 WINPR_PRAGMA_DIAG_POP
2479static void rdp_reset_free(rdpRdp* rdp)
2483 (void)security_lock(rdp);
2484 rdp_free_rc4_decrypt_keys(rdp);
2485 rdp_free_rc4_encrypt_keys(rdp);
2487 winpr_Cipher_Free(rdp->fips_encrypt);
2488 winpr_Cipher_Free(rdp->fips_decrypt);
2489 rdp->fips_encrypt = NULL;
2490 rdp->fips_decrypt = NULL;
2491 (void)security_unlock(rdp);
2495 nego_free(rdp->nego);
2496 license_free(rdp->license);
2497 transport_free(rdp->transport);
2498 fastpath_free(rdp->fastpath);
2503 rdp->license = NULL;
2504 rdp->transport = NULL;
2505 rdp->fastpath = NULL;
2508BOOL rdp_reset(rdpRdp* rdp)
2514 rdpSettings* settings = rdp->settings;
2515 WINPR_ASSERT(settings);
2517 bulk_reset(rdp->bulk);
2519 rdp_reset_free(rdp);
2533 rc = rdp_new_common(rdp);
2537 if (!transport_set_layer(rdp->transport, TRANSPORT_LAYER_TCP))
2541 rc = rdp_finalize_reset_flags(rdp, TRUE);
2552void rdp_free(rdpRdp* rdp)
2556 freerdp_timer_free(rdp->timer);
2557 rdp_reset_free(rdp);
2563 input_free(rdp->input);
2564 update_free(rdp->update);
2566 redirection_free(rdp->redirection);
2567 autodetect_free(rdp->autodetect);
2568 heartbeat_free(rdp->heartbeat);
2569 multitransport_free(rdp->multitransport);
2570 bulk_free(rdp->bulk);
2572 PubSub_Free(rdp->pubSub);
2573 if (rdp->abortEvent)
2574 (void)CloseHandle(rdp->abortEvent);
2577 DeleteCriticalSection(&rdp->critical);
2582BOOL rdp_io_callback_set_event(rdpRdp* rdp, BOOL set)
2586 return transport_io_callback_set_event(rdp->transport, set);
2589const rdpTransportIo* rdp_get_io_callbacks(rdpRdp* rdp)
2596BOOL rdp_set_io_callbacks(rdpRdp* rdp,
const rdpTransportIo* io_callbacks)
2604 rdp->io = malloc(
sizeof(rdpTransportIo));
2607 *rdp->io = *io_callbacks;
2608 return transport_set_io_callbacks(rdp->transport, rdp->io);
2613BOOL rdp_set_io_callback_context(rdpRdp* rdp,
void* usercontext)
2616 rdp->ioContext = usercontext;
2620void* rdp_get_io_callback_context(rdpRdp* rdp)
2623 return rdp->ioContext;
2626const char* rdp_finalize_flags_to_str(UINT32 flags,
char* buffer,
size_t size)
2628 char number[32] = { 0 };
2630 (uint32_t)~(FINALIZE_SC_SYNCHRONIZE_PDU | FINALIZE_SC_CONTROL_COOPERATE_PDU |
2631 FINALIZE_SC_CONTROL_GRANTED_PDU | FINALIZE_SC_FONT_MAP_PDU |
2632 FINALIZE_CS_SYNCHRONIZE_PDU | FINALIZE_CS_CONTROL_COOPERATE_PDU |
2633 FINALIZE_CS_CONTROL_REQUEST_PDU | FINALIZE_CS_PERSISTENT_KEY_LIST_PDU |
2634 FINALIZE_CS_FONT_LIST_PDU | FINALIZE_DEACTIVATE_REACTIVATE);
2636 if (flags & FINALIZE_SC_SYNCHRONIZE_PDU)
2637 winpr_str_append(
"FINALIZE_SC_SYNCHRONIZE_PDU", buffer, size,
"|");
2638 if (flags & FINALIZE_SC_CONTROL_COOPERATE_PDU)
2639 winpr_str_append(
"FINALIZE_SC_CONTROL_COOPERATE_PDU", buffer, size,
"|");
2640 if (flags & FINALIZE_SC_CONTROL_GRANTED_PDU)
2641 winpr_str_append(
"FINALIZE_SC_CONTROL_GRANTED_PDU", buffer, size,
"|");
2642 if (flags & FINALIZE_SC_FONT_MAP_PDU)
2643 winpr_str_append(
"FINALIZE_SC_FONT_MAP_PDU", buffer, size,
"|");
2644 if (flags & FINALIZE_CS_SYNCHRONIZE_PDU)
2645 winpr_str_append(
"FINALIZE_CS_SYNCHRONIZE_PDU", buffer, size,
"|");
2646 if (flags & FINALIZE_CS_CONTROL_COOPERATE_PDU)
2647 winpr_str_append(
"FINALIZE_CS_CONTROL_COOPERATE_PDU", buffer, size,
"|");
2648 if (flags & FINALIZE_CS_CONTROL_REQUEST_PDU)
2649 winpr_str_append(
"FINALIZE_CS_CONTROL_REQUEST_PDU", buffer, size,
"|");
2650 if (flags & FINALIZE_CS_PERSISTENT_KEY_LIST_PDU)
2651 winpr_str_append(
"FINALIZE_CS_PERSISTENT_KEY_LIST_PDU", buffer, size,
"|");
2652 if (flags & FINALIZE_CS_FONT_LIST_PDU)
2653 winpr_str_append(
"FINALIZE_CS_FONT_LIST_PDU", buffer, size,
"|");
2654 if (flags & FINALIZE_DEACTIVATE_REACTIVATE)
2655 winpr_str_append(
"FINALIZE_DEACTIVATE_REACTIVATE", buffer, size,
"|");
2657 winpr_str_append(
"UNKNOWN_FLAG", buffer, size,
"|");
2659 winpr_str_append(
"NO_FLAG_SET", buffer, size,
"|");
2660 (void)_snprintf(number,
sizeof(number),
" [0x%08" PRIx32
"]", flags);
2661 winpr_str_append(number, buffer, size,
"");
2665BOOL rdp_finalize_reset_flags(rdpRdp* rdp, BOOL clearAll)
2668 WLog_Print(rdp->log, WLOG_DEBUG,
"[%s] reset finalize_sc_pdus", rdp_get_state_string(rdp));
2670 rdp->finalize_sc_pdus = 0;
2672 rdp->finalize_sc_pdus &= FINALIZE_DEACTIVATE_REACTIVATE;
2674 return rdp_set_monitor_layout_pdu_state(rdp, FALSE);
2677BOOL rdp_finalize_set_flag(rdpRdp* rdp, UINT32 flag)
2679 char buffer[1024] = { 0 };
2683 WLog_Print(rdp->log, WLOG_DEBUG,
"[%s] received flag %s", rdp_get_state_string(rdp),
2684 rdp_finalize_flags_to_str(flag, buffer,
sizeof(buffer)));
2685 rdp->finalize_sc_pdus |= flag;
2689BOOL rdp_finalize_is_flag_set(rdpRdp* rdp, UINT32 flag)
2692 return (rdp->finalize_sc_pdus & flag) == flag;
2695BOOL rdp_reset_rc4_encrypt_keys(rdpRdp* rdp)
2698 rdp_free_rc4_encrypt_keys(rdp);
2699 rdp->rc4_encrypt_key = winpr_RC4_New(rdp->encrypt_key, rdp->rc4_key_len);
2701 rdp->encrypt_use_count = 0;
2702 return rdp->rc4_encrypt_key != NULL;
2705void rdp_free_rc4_encrypt_keys(rdpRdp* rdp)
2708 winpr_RC4_Free(rdp->rc4_encrypt_key);
2709 rdp->rc4_encrypt_key = NULL;
2712void rdp_free_rc4_decrypt_keys(rdpRdp* rdp)
2715 winpr_RC4_Free(rdp->rc4_decrypt_key);
2716 rdp->rc4_decrypt_key = NULL;
2719BOOL rdp_reset_rc4_decrypt_keys(rdpRdp* rdp)
2722 rdp_free_rc4_decrypt_keys(rdp);
2723 rdp->rc4_decrypt_key = winpr_RC4_New(rdp->decrypt_key, rdp->rc4_key_len);
2725 rdp->decrypt_use_count = 0;
2726 return rdp->rc4_decrypt_key != NULL;
2729const char* rdp_security_flag_string(UINT32 securityFlags,
char* buffer,
size_t size)
2731 if (securityFlags & SEC_EXCHANGE_PKT)
2732 winpr_str_append(
"SEC_EXCHANGE_PKT", buffer, size,
"|");
2733 if (securityFlags & SEC_TRANSPORT_REQ)
2734 winpr_str_append(
"SEC_TRANSPORT_REQ", buffer, size,
"|");
2735 if (securityFlags & SEC_TRANSPORT_RSP)
2736 winpr_str_append(
"SEC_TRANSPORT_RSP", buffer, size,
"|");
2737 if (securityFlags & SEC_ENCRYPT)
2738 winpr_str_append(
"SEC_ENCRYPT", buffer, size,
"|");
2739 if (securityFlags & SEC_RESET_SEQNO)
2740 winpr_str_append(
"SEC_RESET_SEQNO", buffer, size,
"|");
2741 if (securityFlags & SEC_IGNORE_SEQNO)
2742 winpr_str_append(
"SEC_IGNORE_SEQNO", buffer, size,
"|");
2743 if (securityFlags & SEC_INFO_PKT)
2744 winpr_str_append(
"SEC_INFO_PKT", buffer, size,
"|");
2745 if (securityFlags & SEC_LICENSE_PKT)
2746 winpr_str_append(
"SEC_LICENSE_PKT", buffer, size,
"|");
2747 if (securityFlags & SEC_LICENSE_ENCRYPT_CS)
2748 winpr_str_append(
"SEC_LICENSE_ENCRYPT_CS", buffer, size,
"|");
2749 if (securityFlags & SEC_LICENSE_ENCRYPT_SC)
2750 winpr_str_append(
"SEC_LICENSE_ENCRYPT_SC", buffer, size,
"|");
2751 if (securityFlags & SEC_REDIRECTION_PKT)
2752 winpr_str_append(
"SEC_REDIRECTION_PKT", buffer, size,
"|");
2753 if (securityFlags & SEC_SECURE_CHECKSUM)
2754 winpr_str_append(
"SEC_SECURE_CHECKSUM", buffer, size,
"|");
2755 if (securityFlags & SEC_AUTODETECT_REQ)
2756 winpr_str_append(
"SEC_AUTODETECT_REQ", buffer, size,
"|");
2757 if (securityFlags & SEC_AUTODETECT_RSP)
2758 winpr_str_append(
"SEC_AUTODETECT_RSP", buffer, size,
"|");
2759 if (securityFlags & SEC_HEARTBEAT)
2760 winpr_str_append(
"SEC_HEARTBEAT", buffer, size,
"|");
2761 if (securityFlags & SEC_FLAGSHI_VALID)
2762 winpr_str_append(
"SEC_FLAGSHI_VALID", buffer, size,
"|");
2764 char msg[32] = { 0 };
2766 (void)_snprintf(msg,
sizeof(msg),
"[0x%08" PRIx32
"]", securityFlags);
2767 winpr_str_append(msg, buffer, size,
"");
2772static BOOL rdp_reset_remote_settings(rdpRdp* rdp)
2774 UINT32 flags = FREERDP_SETTINGS_REMOTE_MODE;
2781 return rdp->remoteSettings != NULL;
2784BOOL rdp_set_backup_settings(rdpRdp* rdp)
2789 if (!rdp->originalSettings)
2791 return rdp_reset_remote_settings(rdp);
2794BOOL rdp_reset_runtime_settings(rdpRdp* rdp)
2797 WINPR_ASSERT(rdp->context);
2804 return rdp_reset_remote_settings(rdp);
2807static BOOL starts_with(
const char* tok,
const char* val)
2809 const size_t len = strlen(val);
2810 if (strncmp(tok, val, len) != 0)
2812 if (tok[len] !=
'=')
2817static BOOL option_equals(
const char* what,
const char* val)
2819 return _stricmp(what, val) == 0;
2822static BOOL parse_on_off_option(
const char* value)
2824 WINPR_ASSERT(value);
2825 const char* sep = strchr(value,
'=');
2828 if (option_equals(
"on", &sep[1]))
2830 if (option_equals(
"true", &sep[1]))
2832 if (option_equals(
"off", &sep[1]))
2834 if (option_equals(
"false", &sep[1]))
2838 long val = strtol(value, NULL, 0);
2840 return val == 0 ? FALSE : TRUE;
2847static BOOL option_is_runtime_checks(WINPR_ATTR_UNUSED wLog* log,
const char* tok)
2849 const char* experimental[] = { STR(WITH_VERBOSE_WINPR_ASSERT) };
2850 for (
size_t x = 0; x < ARRAYSIZE(experimental); x++)
2852 const char* opt = experimental[x];
2853 if (starts_with(tok, opt))
2855 return parse_on_off_option(tok);
2861static BOOL option_is_experimental(WINPR_ATTR_UNUSED wLog* log,
const char* tok)
2863 const char* experimental[] = { STR(WITH_DSP_EXPERIMENTAL), STR(WITH_VAAPI) };
2864 for (
size_t x = 0; x < ARRAYSIZE(experimental); x++)
2866 const char* opt = experimental[x];
2867 if (starts_with(tok, opt))
2869 return parse_on_off_option(tok);
2875static BOOL option_is_debug(wLog* log,
const char* tok)
2878 const char* debug[] = { STR(WITH_DEBUG_ALL),
2879 STR(WITH_DEBUG_CERTIFICATE),
2880 STR(WITH_DEBUG_CAPABILITIES),
2881 STR(WITH_DEBUG_CHANNELS),
2882 STR(WITH_DEBUG_CLIPRDR),
2883 STR(WITH_DEBUG_CODECS),
2884 STR(WITH_DEBUG_RDPGFX),
2885 STR(WITH_DEBUG_DVC),
2886 STR(WITH_DEBUG_TSMF),
2887 STR(WITH_DEBUG_KBD),
2888 STR(WITH_DEBUG_LICENSE),
2889 STR(WITH_DEBUG_NEGO),
2890 STR(WITH_DEBUG_NLA),
2891 STR(WITH_DEBUG_TSG),
2892 STR(WITH_DEBUG_RAIL),
2893 STR(WITH_DEBUG_RDP),
2894 STR(WITH_DEBUG_RDPEI),
2895 STR(WITH_DEBUG_REDIR),
2896 STR(WITH_DEBUG_RDPDR),
2897 STR(WITH_DEBUG_RFX),
2898 STR(WITH_DEBUG_SCARD),
2899 STR(WITH_DEBUG_SND),
2900 STR(WITH_DEBUG_SVC),
2901 STR(WITH_DEBUG_TRANSPORT),
2902 STR(WITH_DEBUG_TIMEZONE),
2903 STR(WITH_DEBUG_WND),
2904 STR(WITH_DEBUG_X11_CLIPRDR),
2905 STR(WITH_DEBUG_X11_LOCAL_MOVESIZE),
2906 STR(WITH_DEBUG_X11),
2908 STR(WITH_DEBUG_RINGBUFFER),
2909 STR(WITH_DEBUG_SYMBOLS),
2910 STR(WITH_DEBUG_EVENTS),
2911 STR(WITH_DEBUG_MUTEX),
2912 STR(WITH_DEBUG_NTLM),
2913 STR(WITH_DEBUG_SDL_EVENTS),
2914 STR(WITH_DEBUG_SDL_KBD_EVENTS),
2915 STR(WITH_DEBUG_THREADS),
2916 STR(WITH_DEBUG_URBDRC) };
2918 for (
size_t x = 0; x < ARRAYSIZE(debug); x++)
2920 const char* opt = debug[x];
2921 if (starts_with(tok, opt))
2922 return parse_on_off_option(tok);
2925 if (starts_with(tok,
"WITH_DEBUG"))
2927 WLog_Print(log, WLOG_WARN,
"[BUG] Unmapped Debug-Build option '%s'.", tok);
2928 return parse_on_off_option(tok);
2934static void log_build_warn(rdpRdp* rdp,
const char* what,
const char* msg,
2935 BOOL (*cmp)(wLog* log,
const char* tok))
2938 WINPR_PRAGMA_DIAG_PUSH
2939 WINPR_PRAGMA_DIAG_IGNORED_OVERLENGTH_STRINGS
2941 size_t len =
sizeof(FREERDP_BUILD_CONFIG);
2942 char* list = calloc(len,
sizeof(
char));
2943 char* config = _strdup(FREERDP_BUILD_CONFIG);
2944 WINPR_PRAGMA_DIAG_POP
2948 char* saveptr = NULL;
2949 char* tok = strtok_s(config,
" ", &saveptr);
2952 if (cmp(rdp->log, tok))
2953 winpr_str_append(tok, list, len,
" ");
2955 tok = strtok_s(NULL,
" ", &saveptr);
2962 if (strlen(list) > 0)
2964 WLog_Print(rdp->log, WLOG_WARN,
"*************************************************");
2965 WLog_Print(rdp->log, WLOG_WARN,
"This build is using [%s] build options:", what);
2967 char* saveptr = NULL;
2968 char* tok = strtok_s(list,
" ", &saveptr);
2971 WLog_Print(rdp->log, WLOG_WARN,
"* '%s'", tok);
2972 tok = strtok_s(NULL,
" ", &saveptr);
2974 WLog_Print(rdp->log, WLOG_WARN,
"*");
2975 WLog_Print(rdp->log, WLOG_WARN,
"[%s] build options %s", what, msg);
2976 WLog_Print(rdp->log, WLOG_WARN,
"*************************************************");
2982#define print_first_line(log, firstLine, what) \
2983 print_first_line_int((log), (firstLine), (what), __FILE__, __func__, __LINE__)
2984static void print_first_line_int(wLog* log, log_line_t* firstLine,
const char* what,
2985 const char* file,
const char* fkt,
size_t line)
2987 WINPR_ASSERT(firstLine);
2988 if (!firstLine->fkt)
2990 const DWORD level = WLOG_WARN;
2991 if (WLog_IsLevelActive(log, level))
2993 WLog_PrintTextMessage(log, level, line, file, fkt,
2994 "*************************************************");
2995 WLog_PrintTextMessage(log, level, line, file, fkt,
2996 "[SSL] {%s} build or configuration missing:", what);
2998 firstLine->line = line;
2999 firstLine->file = file;
3000 firstLine->fkt = fkt;
3001 firstLine->level = level;
3005static void print_last_line(wLog* log,
const log_line_t* firstLine)
3007 WINPR_ASSERT(firstLine);
3010 if (WLog_IsLevelActive(log, firstLine->level))
3011 WLog_PrintTextMessage(log, firstLine->level, firstLine->line, firstLine->file,
3013 "*************************************************");
3017static void log_build_warn_cipher(rdpRdp* rdp, log_line_t* firstLine, WINPR_CIPHER_TYPE md,
3020 BOOL haveCipher = FALSE;
3022 char key[WINPR_CIPHER_MAX_KEY_LENGTH] = { 0 };
3023 char iv[WINPR_CIPHER_MAX_IV_LENGTH] = { 0 };
3027 if (md == WINPR_CIPHER_ARC4_128)
3029 WINPR_RC4_CTX* enc = winpr_RC4_New(key,
sizeof(key));
3030 haveCipher = enc != NULL;
3031 winpr_RC4_Free(enc);
3035 WINPR_CIPHER_CTX* enc =
3036 winpr_Cipher_NewEx(md, WINPR_ENCRYPT, key,
sizeof(key), iv,
sizeof(iv));
3037 WINPR_CIPHER_CTX* dec =
3038 winpr_Cipher_NewEx(md, WINPR_DECRYPT, key,
sizeof(key), iv,
sizeof(iv));
3042 winpr_Cipher_Free(enc);
3043 winpr_Cipher_Free(dec);
3048 print_first_line(rdp->log, firstLine,
"Cipher");
3049 WLog_Print(rdp->log, WLOG_WARN,
"* %s: %s", winpr_cipher_type_to_string(md), what);
3053static void log_build_warn_hmac(rdpRdp* rdp, log_line_t* firstLine, WINPR_MD_TYPE md,
3056 BOOL haveHmacX = FALSE;
3057 WINPR_HMAC_CTX* hmac = winpr_HMAC_New();
3063 char key[WINPR_CIPHER_MAX_KEY_LENGTH] = { 0 };
3064 haveHmacX = winpr_HMAC_Init(hmac, md, key,
sizeof(key));
3066 winpr_HMAC_Free(hmac);
3070 print_first_line(rdp->log, firstLine,
"HMAC");
3071 WLog_Print(rdp->log, WLOG_WARN,
" * %s: %s", winpr_md_type_to_string(md), what);
3075static void log_build_warn_hash(rdpRdp* rdp, log_line_t* firstLine, WINPR_MD_TYPE md,
3078 BOOL haveDigestX = FALSE;
3080 WINPR_DIGEST_CTX* digest = winpr_Digest_New();
3082 haveDigestX = winpr_Digest_Init(digest, md);
3083 winpr_Digest_Free(digest);
3087 print_first_line(rdp->log, firstLine,
"Digest");
3088 WLog_Print(rdp->log, WLOG_WARN,
" * %s: %s", winpr_md_type_to_string(md), what);
3092static void log_build_warn_ssl(rdpRdp* rdp)
3096 log_line_t firstHashLine = { 0 };
3097 log_build_warn_hash(rdp, &firstHashLine, WINPR_MD_MD4,
"NTLM support not available");
3098 log_build_warn_hash(rdp, &firstHashLine, WINPR_MD_MD5,
3099 "NTLM, assistance files with encrypted passwords, autoreconnect cookies, "
3100 "licensing and RDP security will not work");
3101 log_build_warn_hash(rdp, &firstHashLine, WINPR_MD_SHA1,
3102 "assistance files with encrypted passwords, Kerberos, Smartcard Logon, RDP "
3103 "security support not available");
3104 log_build_warn_hash(
3105 rdp, &firstHashLine, WINPR_MD_SHA256,
3106 "file clipboard, AAD gateway, NLA security and certificates might not work");
3107 print_last_line(rdp->log, &firstHashLine);
3109 log_line_t firstHmacLine = { 0 };
3110 log_build_warn_hmac(rdp, &firstHmacLine, WINPR_MD_MD5,
"Autoreconnect cookie not supported");
3111 log_build_warn_hmac(rdp, &firstHmacLine, WINPR_MD_SHA1,
"RDP security not supported");
3112 print_last_line(rdp->log, &firstHmacLine);
3114 log_line_t firstCipherLine = { 0 };
3115 log_build_warn_cipher(rdp, &firstCipherLine, WINPR_CIPHER_ARC4_128,
3116 "assistance files with encrypted passwords, NTLM, RDP licensing and RDP "
3117 "security will not work");
3118 log_build_warn_cipher(rdp, &firstCipherLine, WINPR_CIPHER_DES_EDE3_CBC,
3119 "RDP security FIPS mode will not work");
3120 log_build_warn_cipher(
3121 rdp, &firstCipherLine, WINPR_CIPHER_AES_128_CBC,
3122 "assistance file encrypted LHTicket will not work and ARM gateway might not");
3123 log_build_warn_cipher(rdp, &firstCipherLine, WINPR_CIPHER_AES_192_CBC,
3124 "ARM gateway might not work");
3125 log_build_warn_cipher(rdp, &firstCipherLine, WINPR_CIPHER_AES_256_CBC,
3126 "ARM gateway might not work");
3127 print_last_line(rdp->log, &firstCipherLine);
3130void rdp_log_build_warnings(rdpRdp* rdp)
3132 static unsigned count = 0;
3141 log_build_warn(rdp,
"experimental",
"might crash the application", option_is_experimental);
3142 log_build_warn(rdp,
"debug",
"might leak sensitive information (credentials, ...)",
3144 log_build_warn(rdp,
"runtime-check",
"might slow down the application",
3145 option_is_runtime_checks);
3146 log_build_warn_ssl(rdp);
3149size_t rdp_get_event_handles(rdpRdp* rdp, HANDLE* handles, uint32_t count)
3151 size_t nCount = transport_get_event_handles(rdp->transport, handles, count);
3156 if (count < nCount + 2UL)
3159 handles[nCount++] = utils_get_abort_event(rdp);
3160 handles[nCount++] = freerdp_timer_get_event(rdp->timer);
WINPR_API void WINPR_JSON_Delete(WINPR_JSON *item)
Delete a WinPR JSON wrapper object.
FREERDP_API BOOL freerdp_settings_set_string(rdpSettings *settings, FreeRDP_Settings_Keys_String id, const char *param)
Sets a string settings value. The param is copied.
FREERDP_API BOOL freerdp_settings_get_bool(const rdpSettings *settings, FreeRDP_Settings_Keys_Bool id)
Returns a boolean settings value.
FREERDP_API rdpSettings * freerdp_settings_new(DWORD flags)
creates a new setting struct
FREERDP_API rdpSettings * freerdp_settings_clone(const rdpSettings *settings)
Creates a deep copy of settings.
FREERDP_API BOOL freerdp_settings_set_pointer_len(rdpSettings *settings, FreeRDP_Settings_Keys_Pointer id, const void *data, size_t len)
Set a pointer to value data.
FREERDP_API void freerdp_settings_free(rdpSettings *settings)
Free a settings struct with all data in it.
#define FREERDP_SETTINGS_SERVER_MODE