/* -*- c-basic-offset: 8 -*- rdesktop: A Remote Desktop Protocol client. Protocol services - Multipoint Communications Service Copyright (C) Matthew Chapman 1999-2008 Copyright 2005-2011 Peter Astrand for Cendio AB Copyright 2018 Henrik Andersson for Cendio AB This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . */ #include "rdesktop.h" uint16 g_mcs_userid; extern VCHANNEL g_channels[]; extern unsigned int g_num_channels; /* Output a DOMAIN_PARAMS structure (ASN.1 BER) */ static void mcs_out_domain_params(STREAM s, int max_channels, int max_users, int max_tokens, int max_pdusize) { ber_out_header(s, MCS_TAG_DOMAIN_PARAMS, 32); ber_out_integer(s, max_channels); ber_out_integer(s, max_users); ber_out_integer(s, max_tokens); ber_out_integer(s, 1); /* num_priorities */ ber_out_integer(s, 0); /* min_throughput */ ber_out_integer(s, 1); /* max_height */ ber_out_integer(s, max_pdusize); ber_out_integer(s, 2); /* ver_protocol */ } /* Parse a DOMAIN_PARAMS structure (ASN.1 BER) */ static void mcs_parse_domain_params(STREAM s) { uint32 length; struct stream packet = *s; ber_parse_header(s, MCS_TAG_DOMAIN_PARAMS, &length); if (!s_check_rem(s, length)) { rdp_protocol_error("consume domain params from stream would overrun", &packet); } in_uint8s(s, length); } /* Send an MCS_CONNECT_INITIAL message (ASN.1 BER) */ static void mcs_send_connect_initial(STREAM mcs_data) { int datalen = s_length(mcs_data); int length = 9 + 3 * 34 + 4 + datalen; STREAM s; logger(Protocol, Debug, "%s()", __func__); s = iso_init(length + 5); ber_out_header(s, MCS_CONNECT_INITIAL, length); ber_out_header(s, BER_TAG_OCTET_STRING, 1); /* calling domain */ out_uint8(s, 1); ber_out_header(s, BER_TAG_OCTET_STRING, 1); /* called domain */ out_uint8(s, 1); ber_out_header(s, BER_TAG_BOOLEAN, 1); out_uint8(s, 0xff); /* upward flag */ mcs_out_domain_params(s, 34, 2, 0, 0xffff); /* target params */ mcs_out_domain_params(s, 1, 1, 1, 0x420); /* min params */ mcs_out_domain_params(s, 0xffff, 0xfc17, 0xffff, 0xffff); /* max params */ ber_out_header(s, BER_TAG_OCTET_STRING, datalen); out_uint8a(s, mcs_data->data, datalen); s_mark_end(s); iso_send(s); s_free(s); } /* Expect a MCS_CONNECT_RESPONSE message (ASN.1 BER) */ static RD_BOOL mcs_recv_connect_response(STREAM mcs_data) { UNUSED(mcs_data); uint8 result; uint32 length; STREAM s; struct stream packet; RD_BOOL is_fastpath; uint8 fastpath_hdr; logger(Protocol, Debug, "%s()", __func__); s = iso_recv(&is_fastpath, &fastpath_hdr); if (s == NULL) return False; packet = *s; ber_parse_header(s, MCS_CONNECT_RESPONSE, &length); ber_parse_header(s, BER_TAG_RESULT, &length); in_uint8(s, result); if (result != 0) { logger(Protocol, Error, "mcs_recv_connect_response(), result=%d", result); return False; } ber_parse_header(s, BER_TAG_INTEGER, &length); in_uint8s(s, length); /* connect id */ if (!s_check_rem(s, length)) { rdp_protocol_error("consume connect id from stream would overrun", &packet); } mcs_parse_domain_params(s); ber_parse_header(s, BER_TAG_OCTET_STRING, &length); sec_process_mcs_data(s); return s_check_end(s); } /* Send an EDrq message (ASN.1 PER) */ static void mcs_send_edrq(void) { STREAM s; logger(Protocol, Debug, "%s()", __func__); s = iso_init(5); out_uint8(s, (MCS_EDRQ << 2)); out_uint16_be(s, 1); /* height */ out_uint16_be(s, 1); /* interval */ s_mark_end(s); iso_send(s); s_free(s); } /* Send an AUrq message (ASN.1 PER) */ static void mcs_send_aurq(void) { STREAM s; logger(Protocol, Debug, "%s()", __func__); s = iso_init(1); out_uint8(s, (MCS_AURQ << 2)); s_mark_end(s); iso_send(s); s_free(s); } /* Expect a AUcf message (ASN.1 PER) */ static RD_BOOL mcs_recv_aucf(uint16 * mcs_userid) { RD_BOOL is_fastpath; uint8 fastpath_hdr; uint8 opcode, result; STREAM s; logger(Protocol, Debug, "%s()", __func__); s = iso_recv(&is_fastpath, &fastpath_hdr); if (s == NULL) return False; in_uint8(s, opcode); if ((opcode >> 2) != MCS_AUCF) { logger(Protocol, Error, "mcs_recv_aucf(), expected opcode AUcf, got %d", opcode); return False; } in_uint8(s, result); if (result != 0) { logger(Protocol, Error, "mcs_recv_aucf(), expected result 0, got %d", result); return False; } if (opcode & 2) in_uint16_be(s, *mcs_userid); return s_check_end(s); } /* Send a CJrq message (ASN.1 PER) */ static void mcs_send_cjrq(uint16 chanid) { STREAM s; logger(Protocol, Debug, "mcs_send_cjrq(), chanid=%d", chanid); s = iso_init(5); out_uint8(s, (MCS_CJRQ << 2)); out_uint16_be(s, g_mcs_userid); out_uint16_be(s, chanid); s_mark_end(s); iso_send(s); s_free(s); } /* Expect a CJcf message (ASN.1 PER) */ static RD_BOOL mcs_recv_cjcf(void) { RD_BOOL is_fastpath; uint8 fastpath_hdr; uint8 opcode, result; STREAM s; logger(Protocol, Debug, "%s()", __func__); s = iso_recv(&is_fastpath, &fastpath_hdr); if (s == NULL) return False; in_uint8(s, opcode); if ((opcode >> 2) != MCS_CJCF) { logger(Protocol, Error, "mcs_recv_cjcf(), expected opcode CJcf, got %d", opcode); return False; } in_uint8(s, result); if (result != 0) { logger(Protocol, Error, "mcs_recv_cjcf(), expected result 0, got %d", result); return False; } in_uint8s(s, 4); /* mcs_userid, req_chanid */ if (opcode & 2) in_uint8s(s, 2); /* join_chanid */ return s_check_end(s); } /* Send MCS Disconnect provider ultimatum PDU */ void mcs_send_dpu(unsigned short reason) { STREAM s, contents; logger(Protocol, Debug, "mcs_send_dpu(), reason=%d", reason); contents = s_alloc(6); ber_out_integer(contents, reason); /* Reason */ ber_out_sequence(contents, NULL); /* SEQUENCE OF NonStandradParameters OPTIONAL */ s_mark_end(contents); s = iso_init(8); ber_out_sequence(s, contents); s_free(contents); s_mark_end(s); iso_send(s); s_free(s); } /* Initialise an MCS transport data packet */ STREAM mcs_init(int length) { STREAM s; s = iso_init(length + 8); s_push_layer(s, mcs_hdr, 8); return s; } /* Send an MCS transport data packet to a specific channel */ void mcs_send_to_channel(STREAM s, uint16 channel) { uint16 length; s_pop_layer(s, mcs_hdr); length = s_remaining(s) - 8; length |= 0x8000; out_uint8(s, (MCS_SDRQ << 2)); out_uint16_be(s, g_mcs_userid); out_uint16_be(s, channel); out_uint8(s, 0x70); /* flags */ out_uint16_be(s, length); iso_send(s); } /* Send an MCS transport data packet to the global channel */ void mcs_send(STREAM s) { mcs_send_to_channel(s, MCS_GLOBAL_CHANNEL); } /* Receive an MCS transport data packet */ STREAM mcs_recv(uint16 * channel, RD_BOOL * is_fastpath, uint8 * fastpath_hdr) { uint8 opcode, appid, length; STREAM s; s = iso_recv(is_fastpath, fastpath_hdr); if (s == NULL) return NULL; if (*is_fastpath == True) return s; in_uint8(s, opcode); appid = opcode >> 2; if (appid != MCS_SDIN) { if (appid != MCS_DPUM) { logger(Protocol, Error, "mcs_recv(), expected data, got %d", opcode); } return NULL; } in_uint8s(s, 2); /* userid */ in_uint16_be(s, *channel); in_uint8s(s, 1); /* flags */ in_uint8(s, length); if (length & 0x80) in_uint8s(s, 1); /* second byte of length */ return s; } RD_BOOL mcs_connect_start(char *server, char *username, char *domain, char *password, RD_BOOL reconnect, uint32 * selected_protocol) { logger(Protocol, Debug, "%s()", __func__); return iso_connect(server, username, domain, password, reconnect, selected_protocol); } RD_BOOL mcs_connect_finalize(STREAM mcs_data) { unsigned int i; logger(Protocol, Debug, "%s()", __func__); mcs_send_connect_initial(mcs_data); if (!mcs_recv_connect_response(mcs_data)) goto error; mcs_send_edrq(); mcs_send_aurq(); if (!mcs_recv_aucf(&g_mcs_userid)) goto error; mcs_send_cjrq(g_mcs_userid + MCS_USERCHANNEL_BASE); if (!mcs_recv_cjcf()) goto error; mcs_send_cjrq(MCS_GLOBAL_CHANNEL); if (!mcs_recv_cjcf()) goto error; for (i = 0; i < g_num_channels; i++) { mcs_send_cjrq(g_channels[i].mcs_id); if (!mcs_recv_cjcf()) goto error; } return True; error: iso_disconnect(); return False; } /* Disconnect from the MCS layer */ void mcs_disconnect(int reason) { mcs_send_dpu(reason); iso_disconnect(); } /* reset the state of the mcs layer */ void mcs_reset_state(void) { g_mcs_userid = 0; iso_reset_state(); }