--- sourceforge.net/trunk/rdesktop/rdpdr.c 2004/01/30 14:10:32 592 +++ sourceforge.net/trunk/rdesktop/rdpdr.c 2004/08/24 21:37:25 755 @@ -1,14 +1,46 @@ +/* -*- c-basic-offset: 8 -*- + rdesktop: A Remote Desktop Protocol client. + Copyright (C) Matthew Chapman 1999-2004 + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. +*/ + +/* + Here are some resources, for your IRP hacking pleasure: + + http://cvs.sourceforge.net/viewcvs.py/mingw/w32api/include/ddk/winddk.h?view=markup + + http://win32.mvps.org/ntfs/streams.cpp + + http://www.acc.umu.se/~bosse/ntifs.h + + http://undocumented.ntinternals.net/UserMode/Undocumented%20Functions/NT%20Objects/File/ + + http://us1.samba.org/samba/ftp/specs/smb-nt01.txt + + http://www.osronline.com/ +*/ + #include #include +#include +#include /* opendir, closedir, readdir */ #include +#include #include "rdesktop.h" -#define IRP_MJ_CREATE 0x00 -#define IRP_MJ_CLOSE 0x02 -#define IRP_MJ_READ 0x03 -#define IRP_MJ_WRITE 0x04 -#define IRP_MJ_DEVICE_CONTROL 0x0e - #define IRP_MJ_CREATE 0x00 #define IRP_MJ_CLOSE 0x02 #define IRP_MJ_READ 0x03 @@ -18,15 +50,17 @@ #define IRP_MJ_QUERY_VOLUME_INFORMATION 0x0a #define IRP_MJ_DIRECTORY_CONTROL 0x0c #define IRP_MJ_DEVICE_CONTROL 0x0e +#define IRP_MJ_LOCK_CONTROL 0x11 #define IRP_MN_QUERY_DIRECTORY 0x01 #define IRP_MN_NOTIFY_CHANGE_DIRECTORY 0x02 -extern char hostname[16]; +extern char g_hostname[16]; extern DEVICE_FNS serial_fns; extern DEVICE_FNS printer_fns; extern DEVICE_FNS parallel_fns; extern DEVICE_FNS disk_fns; +extern FILEINFO g_fileinfo[]; static VCHANNEL *rdpdr_channel; @@ -36,6 +70,7 @@ /* Table with information about rdpdr devices */ RDPDR_DEVICE g_rdpdr_device[RDPDR_MAX_DEVICES]; +char *g_rdpdr_clientname = NULL; /* Used to store incoming io request, until they are ready to be completed */ /* using a linked list ensures that they are processed in the right order, */ @@ -49,7 +84,9 @@ DEVICE_FNS *fns; struct async_iorequest *next; /* next element in list */ -} g_iorequest; +}; + +struct async_iorequest *g_iorequest; /* Return device_id for a given handle */ int @@ -76,49 +113,59 @@ } } +static BOOL +rdpdr_handle_ok(int device, int handle) +{ + switch (g_rdpdr_device[device].device_type) + { + case DEVICE_TYPE_PARALLEL: + case DEVICE_TYPE_SERIAL: + case DEVICE_TYPE_PRINTER: + case DEVICE_TYPE_SCARD: + if (g_rdpdr_device[device].handle != handle) + return False; + break; + case DEVICE_TYPE_DISK: + if (g_fileinfo[handle].device_id != device) + return False; + break; + } + return True; +} + /* Add a new io request to the table containing pending io requests so it won't block rdesktop */ -BOOL +static BOOL add_async_iorequest(uint32 device, uint32 file, uint32 id, uint32 major, uint32 length, - DEVICE_FNS * fns, long total_timeout, long interval_timeout, uint8 * buffer) + DEVICE_FNS * fns, uint32 total_timeout, uint32 interval_timeout, uint8 * buffer, + uint32 offset) { struct async_iorequest *iorq; - iorq = &g_iorequest; + if (g_iorequest == NULL) + { + g_iorequest = (struct async_iorequest *) xmalloc(sizeof(struct async_iorequest)); + if (!g_iorequest) + return False; + g_iorequest->fd = 0; + g_iorequest->next = NULL; + } + + iorq = g_iorequest; + while (iorq->fd != 0) { // create new element if needed if (iorq->next == NULL) - iorq->next = - (struct async_iorequest *) xmalloc(sizeof(struct async_iorequest)); - - iorq = iorq->next; - } - - /* first element is special since it doesn't get deleted */ - /* don't want to get io out of order */ - if (g_iorequest.fd == 0) - { - iorq = &g_iorequest; - /* look for first occurrence of fd */ - while (iorq->next != NULL) - { - if (iorq->fd == file) - break; - iorq = iorq->next; - } - /* if same create new link at end of chain instead */ - if (iorq->fd == file) { - while (iorq->next != NULL) - iorq = iorq->next; iorq->next = (struct async_iorequest *) xmalloc(sizeof(struct async_iorequest)); - iorq = iorq->next; + if (!iorq->next) + return False; + iorq->next->fd = 0; + iorq->next->next = NULL; } - else - iorq = &g_iorequest; /* didn't find fs use first entry */ + iorq = iorq->next; } - iorq->device = device; iorq->fd = file; iorq->id = id; @@ -129,10 +176,11 @@ iorq->timeout = total_timeout; iorq->itv_timeout = interval_timeout; iorq->buffer = buffer; + iorq->offset = offset; return True; } -void +static void rdpdr_send_connect(void) { uint8 magic[4] = "rDCC"; @@ -148,12 +196,18 @@ } -void +static void rdpdr_send_name(void) { uint8 magic[4] = "rDNC"; - uint32 hostlen = (strlen(hostname) + 1) * 2; STREAM s; + uint32 hostlen; + + if (NULL == g_rdpdr_clientname) + { + g_rdpdr_clientname = g_hostname; + } + hostlen = (strlen(g_rdpdr_clientname) + 1) * 2; s = channel_init(rdpdr_channel, 16 + hostlen); out_uint8a(s, magic, 4); @@ -161,13 +215,13 @@ out_uint16_le(s, 0x72); out_uint32(s, 0); out_uint32_le(s, hostlen); - rdp_out_unistr(s, hostname, hostlen - 2); + rdp_out_unistr(s, g_rdpdr_clientname, hostlen - 2); s_mark_end(s); channel_send(s, rdpdr_channel); } /* Returns the size of the payload of the announce packet */ -int +static int announcedata_size() { int size, i; @@ -194,7 +248,7 @@ return size; } -void +static void rdpdr_send_available(void) { @@ -212,6 +266,8 @@ { out_uint32_le(s, g_rdpdr_device[i].device_type); out_uint32_le(s, i); /* RDP Device ID */ + /* Is it possible to use share names longer than 8 chars? + /astrand */ out_uint8p(s, g_rdpdr_device[i].name, 8); switch (g_rdpdr_device[i].device_type) @@ -233,7 +289,8 @@ rdp_out_unistr(s, printerinfo->printer, printerlen - 2); out_uint8a(s, printerinfo->blob, bloblen); - xfree(printerinfo->blob); /* Blob is sent twice if reconnecting */ + if (printerinfo->blob) + xfree(printerinfo->blob); /* Blob is sent twice if reconnecting */ break; default: out_uint32(s, 0); @@ -251,7 +308,7 @@ channel_send(s, rdpdr_channel); } -void +static void rdpdr_send_completion(uint32 device, uint32 id, uint32 status, uint32 result, uint8 * buffer, uint32 length) { @@ -329,8 +386,8 @@ case DEVICE_TYPE_DISK: - /*rw_blocking = False; */ fns = &disk_fns; + rw_blocking = False; break; case DEVICE_TYPE_SCARD: @@ -396,9 +453,20 @@ #if WITH_DEBUG_RDP5 DEBUG(("RDPDR IRP Read (length: %d, offset: %d)\n", length, offset)); #endif + if (!rdpdr_handle_ok(device, file)) + { + status = STATUS_INVALID_HANDLE; + break; + } + if (rw_blocking) // Complete read immediately { buffer = (uint8 *) xrealloc((void *) buffer, length); + if (!buffer) + { + status = STATUS_CANCELLED; + break; + } status = fns->read(file, buffer, length, offset, &result); buffer_len = result; break; @@ -406,10 +474,15 @@ // Add request to table pst_buf = (uint8 *) xmalloc(length); + if (!pst_buf) + { + status = STATUS_CANCELLED; + break; + } serial_get_timeout(file, length, &total_timeout, &interval_timeout); if (add_async_iorequest (device, file, id, major, length, fns, total_timeout, interval_timeout, - pst_buf)) + pst_buf, offset)) { status = STATUS_PENDING; break; @@ -433,6 +506,12 @@ #if WITH_DEBUG_RDP5 DEBUG(("RDPDR IRP Write (length: %d)\n", result)); #endif + if (!rdpdr_handle_ok(device, file)) + { + status = STATUS_INVALID_HANDLE; + break; + } + if (rw_blocking) // Complete immediately { status = fns->write(file, s->p, length, offset, &result); @@ -441,10 +520,16 @@ // Add to table pst_buf = (uint8 *) xmalloc(length); + if (!pst_buf) + { + status = STATUS_CANCELLED; + break; + } + in_uint8a(s, pst_buf, length); if (add_async_iorequest - (device, file, id, major, length, fns, 0, 0, pst_buf)) + (device, file, id, major, length, fns, 0, 0, pst_buf, offset)) { status = STATUS_PENDING; break; @@ -564,12 +649,37 @@ in_uint8s(s, 0x14); buffer = (uint8 *) xrealloc((void *) buffer, bytes_out + 0x14); + if (!buffer) + { + status = STATUS_CANCELLED; + break; + } + out.data = out.p = buffer; out.size = sizeof(buffer); status = fns->device_control(file, request, s, &out); result = buffer_len = out.p - out.data; break; + + case IRP_MJ_LOCK_CONTROL: + + if (g_rdpdr_device[device].device_type != DEVICE_TYPE_DISK) + { + status = STATUS_INVALID_HANDLE; + break; + } + + in_uint32_le(s, info_level); + + out.data = out.p = buffer; + out.size = sizeof(buffer); + /* FIXME: Perhaps consider actually *do* + something here :-) */ + status = STATUS_SUCCESS; + result = buffer_len = out.p - out.data; + break; + default: unimpl("IRP major=0x%x minor=0x%x\n", major, minor); break; @@ -579,11 +689,12 @@ { rdpdr_send_completion(device, id, status, result, buffer, buffer_len); } - xfree(buffer); - + if (buffer) + xfree(buffer); + buffer = NULL; } -void +static void rdpdr_send_clientcapabilty(void) { uint8 magic[4] = "rDPC"; @@ -699,10 +810,11 @@ void rdpdr_add_fds(int *n, fd_set * rfds, fd_set * wfds, struct timeval *tv, BOOL * timeout) { - long select_timeout = 0; // Timeout value to be used for select() (in millisecons). + uint32 select_timeout = 0; // Timeout value to be used for select() (in millisecons). struct async_iorequest *iorq; + char c; - iorq = &g_iorequest; + iorq = g_iorequest; while (iorq != NULL) { if (iorq->fd != 0) @@ -710,8 +822,16 @@ switch (iorq->major) { case IRP_MJ_READ: + /* Is this FD valid? FDs will + be invalid when + reconnecting. FIXME: Real + support for reconnects. */ + + if ((read(iorq->fd, &c, 0) != 0) && (errno == EBADF)) + break; FD_SET(iorq->fd, rfds); + *n = MAX(*n, iorq->fd); // Check if io request timeout is smaller than current (but not 0). if (iorq->timeout @@ -725,20 +845,49 @@ tv->tv_usec = (select_timeout % 1000) * 1000; *timeout = True; } + break; case IRP_MJ_WRITE: + /* FD still valid? See above. */ + if ((write(iorq->fd, &c, 0) != 0) && (errno == EBADF)) + break; + FD_SET(iorq->fd, wfds); + *n = MAX(*n, iorq->fd); break; } - *n = MAX(*n, iorq->fd); + } iorq = iorq->next; } } +struct async_iorequest * +rdpdr_remove_iorequest(struct async_iorequest *prev, struct async_iorequest *iorq) +{ + if (!iorq) + return NULL; + + if (iorq->buffer) + xfree(iorq->buffer); + if (prev) + { + prev->next = iorq->next; + xfree(iorq); + iorq = prev->next; + } + else + { + // Even if NULL + g_iorequest = iorq->next; + xfree(iorq); + iorq = NULL; + } + return iorq; +} /* Check if select() returned with one of the rdpdr file descriptors, and complete io if it did */ void @@ -749,6 +898,7 @@ DEVICE_FNS *fns; struct async_iorequest *iorq; struct async_iorequest *prev; + uint32 req_size = 0; if (timed_out) { @@ -756,11 +906,10 @@ return; } - iorq = &g_iorequest; + iorq = g_iorequest; prev = NULL; while (iorq != NULL) { - if (iorq->fd != 0) { switch (iorq->major) @@ -770,31 +919,39 @@ { /* Read the data */ fns = iorq->fns; + + req_size = + (iorq->length - iorq->partial_len) > + 8192 ? 8192 : (iorq->length - + iorq->partial_len); + /* never read larger chunks than 8k - chances are that it will block */ status = fns->read(iorq->fd, iorq->buffer + iorq->partial_len, - iorq->length - iorq->partial_len, - 0, &result); - iorq->partial_len += result; + req_size, iorq->offset, &result); + + if (result > 0) + { + iorq->partial_len += result; + iorq->offset += result; + } #if WITH_DEBUG_RDP5 DEBUG(("RDPDR: %d bytes of data read\n", result)); #endif /* only delete link if all data has been transfered */ - if (iorq->partial_len == iorq->length) + /* or if result was 0 and status success - EOF */ + if ((iorq->partial_len == iorq->length) || + (g_rdpdr_device[iorq->device].device_type == + DEVICE_TYPE_SERIAL) || (result == 0)) { - /* send the data */ - status = STATUS_SUCCESS; +#if WITH_DEBUG_RDP5 + DEBUG(("RDPDR: AIO total %u bytes read of %u\n", iorq->partial_len, iorq->length)); +#endif rdpdr_send_completion(iorq->device, iorq->id, status, - iorq->length, - iorq->buffer, result); - - xfree(iorq->buffer); - iorq->fd = 0; - if (prev != NULL) - { - prev->next = iorq->next; - xfree(iorq); - } + iorq->partial_len, + iorq->buffer, + iorq->partial_len); + iorq = rdpdr_remove_iorequest(prev, iorq); } } break; @@ -803,32 +960,42 @@ { /* Write data. */ fns = iorq->fns; + + req_size = + (iorq->length - iorq->partial_len) > + 8192 ? 8192 : (iorq->length - + iorq->partial_len); + + /* never write larger chunks than 8k - chances are that it will block */ status = fns->write(iorq->fd, iorq->buffer + - iorq->partial_len, - iorq->length - - iorq->partial_len, 0, &result); - iorq->partial_len += result; + iorq->partial_len, req_size, + iorq->offset, &result); + + if (result > 0) + { + iorq->partial_len += result; + iorq->offset += result; + } + #if WITH_DEBUG_RDP5 DEBUG(("RDPDR: %d bytes of data written\n", result)); #endif /* only delete link if all data has been transfered */ - if (iorq->partial_len == iorq->length) + /* or we couldn't write */ + if ((iorq->partial_len == iorq->length) + || (result == 0)) { - /* send a status success */ - status = STATUS_SUCCESS; +#if WITH_DEBUG_RDP5 + DEBUG(("RDPDR: AIO total %u bytes written of %u\n", iorq->partial_len, iorq->length)); +#endif rdpdr_send_completion(iorq->device, iorq->id, status, - iorq->length, "", 1); + iorq->partial_len, + (uint8 *) "", 1); - xfree(iorq->buffer); - iorq->fd = 0; - if (prev != NULL) - { - prev->next = iorq->next; - xfree(iorq); - } + iorq = rdpdr_remove_iorequest(prev, iorq); } } break; @@ -836,7 +1003,8 @@ } prev = iorq; - iorq = iorq->next; + if (iorq) + iorq = iorq->next; } } @@ -849,7 +1017,7 @@ struct async_iorequest *iorq; struct async_iorequest *prev; - iorq = &g_iorequest; + iorq = g_iorequest; prev = NULL; while (iorq != NULL) { @@ -858,14 +1026,10 @@ if ((iorq->fd == fd) && (major == 0 || iorq->major == major)) { result = 0; - rdpdr_send_completion(iorq->device, iorq->id, status, result, "", 1); - xfree(iorq->buffer); - iorq->fd = 0; - if (prev != NULL) - { - prev->next = iorq->next; - xfree(iorq); - } + rdpdr_send_completion(iorq->device, iorq->id, status, result, (uint8 *) "", + 1); + + iorq = rdpdr_remove_iorequest(prev, iorq); return True; }