trunk/rdesktop/scard.c

/************************************/
/* Smart Card support for RDesktop. */
/* Copyright (C) by Alexi Volkov    */
/* e-mail:  alexi@myrealbox.com     */
/* ICQ:     264679502               */
/************************************/

#include <stdio.h>
#include "rdesktop.h"
#include <unistd.h>
#include <fcntl.h>
#include <strings.h>
#include <sys/types.h>
#include <time.h>
#ifndef MAKE_PROTO
#include <pcsclite.h>
#include <winscard.h>
#include "scard.h"

/* variable segment */

#define SCARD_MAX_MEM 102400
#define SCARD_AUTOALLOCATE -1
#define OUT_STREAM_SIZE 4096
#define STREAM_COUNT 8

static struct stream out[STREAM_COUNT];
static int cur_stream_id = 0;
static pthread_mutex_t *tcp_sendcontrol_mutex = NULL;

static uint32 curDevice = 0, curId = 0, curBytesOut = 0;
static PSCNameMapRec nameMapList = NULL;
static int nameMapCount = 0;

static pthread_t queueHandler;
static pthread_mutex_t queueAccess;
static pthread_mutex_t queueEmpty;
static pthread_mutex_t hcardAccess;
/* static pthread_mutex_t sendControl; */

static PMEM_HANDLE threadListHandle = NULL;
static PThreadListElement threadList = NULL;


static PSCThreadData queueFirst = NULL, queueLast = NULL;
static int threadCount = 0;

static PSCHCardRec hcardFirst = NULL;

static void *queue_handler_function(void *data);

/* code segment */

#endif /* MAKE_PROTO */
void
scardSetInfo(uint32 device, uint32 id, uint32 bytes_out)
{
        curDevice = device;
        curId = id;
        curBytesOut = bytes_out;
}

#ifndef MAKE_PROTO

static NTSTATUS
scard_create(uint32 device_id, uint32 accessmask, uint32 sharemode, uint32 create_disposition,
             uint32 flags_and_attributes, char *filename, NTHANDLE * phandle)
{
        return STATUS_SUCCESS;
}

static NTSTATUS
scard_close(NTHANDLE handle)
{
        return STATUS_SUCCESS;
}

static NTSTATUS
scard_read(NTHANDLE handle, uint8 * data, uint32 length, uint32 offset, uint32 * result)
{
        return STATUS_SUCCESS;
}

static NTSTATUS
scard_write(NTHANDLE handle, uint8 * data, uint32 length, uint32 offset, uint32 * result)
{
        return STATUS_SUCCESS;
}
#endif /* MAKE_PROTO */

/* Enumeration of devices from rdesktop.c        */
/* returns numer of units found and initialized. */
/* optarg looks like ':"ReaderName=ReaderAlias"' */
/* when it arrives to this function.             */

int
scard_enum_devices(uint32 * id, char *optarg)
{
        char *name = optarg + 1;
        char *alias;
        int count = 0;
        PSCNameMapRec tmpMap;

        MYPCSC_DWORD rv;
        SCARDCONTEXT hContext;

        /* code segment  */
        rv = SCardEstablishContext(SCARD_SCOPE_SYSTEM, NULL, NULL, &hContext);
        if (rv != SCARD_S_SUCCESS)
        {
                printf("[SMART CARD: PCSC service not available]\n");
                return 0;
        }
        else
                rv = SCardReleaseContext(hContext);

        count = 0;

        if (0 != pthread_mutex_init(&queueAccess, NULL))
        {
                printf("[SMART CARD: Can't initialize queue access mutex]\n");
                return 0;
        }

        if (0 != pthread_mutex_init(&queueEmpty, NULL))
        {
                printf("[SMART CARD: Can't initialize queue control mutex]\n");
                return 0;
        }

        if (0 != pthread_mutex_init(&hcardAccess, NULL))
        {
                printf("[SMART CARD: Can't initialize hcard list access mutex]\n");
                return 0;
        }

#if 0
        if (0 != pthread_mutex_init(&sendControl, NULL))
        {
                printf("[SMART CARD: Can't initialize send control mutex]\n");
                return 0;
        }
#endif


        if (0 !=
            pthread_create(&queueHandler, NULL, (void *(*)(void *)) queue_handler_function, NULL))
        {
                printf("[SMART CARD: Can't create queue handling Thread]\n");
                return 0;
        }

        strncpy(g_rdpdr_device[*id].name, "SCARD\0\0\0", 8);
        toupper_str(g_rdpdr_device[*id].name);
        g_rdpdr_device[*id].local_path = "/dev/scard";
        g_rdpdr_device[*id].pdevice_data = NULL;
        g_rdpdr_device[*id].handle = 0;
        g_rdpdr_device[*id].device_type = DEVICE_TYPE_SCARD;
        count++;
        (*id)++;

        if (*optarg == ':')
        {
                while ((optarg = next_arg(name, ',')) && *id < RDPDR_MAX_DEVICES)
                {
                        int len;
                        char *vendor = NULL;
                        alias = next_arg(name, '=');
                        vendor = next_arg(alias, ';');

                        if (strlen(name) > 0)
                        {
                                if (!strlen(alias))
                                {
                                        alias = name;
                                        vendor = "\0";
                                }

                                printf("Static/aliased Device:\n");
                                printf("  Lin name: [%s]\n", name);
                                printf("  Win name: [%s]\n", alias);
                                printf("  Vendor  : [%s]\n", vendor);
                                nameMapCount++;

                                if (nameMapList == NULL)
                                        nameMapList = xmalloc(nameMapCount * sizeof(TSCNameMapRec));
                                else
                                        nameMapList =
                                                xrealloc(nameMapList,
                                                         nameMapCount * sizeof(TSCNameMapRec));

                                tmpMap = nameMapList + nameMapCount - 1;

                                len = strlen(alias);
                                strncpy(tmpMap->alias, alias, (len > 127) ? (127) : (len));
                                len = strlen(name);
                                strncpy(tmpMap->name, name, (len > 127) ? (127) : (len));

                                if (vendor)
                                {
                                        len = strlen(vendor);
                                        if (len > 0)
                                        {
                                                memset(tmpMap->vendor, 0, 128);
                                                strncpy(tmpMap->vendor, vendor,
                                                        (len > 127) ? (127) : (len));
                                        }
                                        else
                                                tmpMap->vendor[0] = '\0';
                                }
                                else
                                        tmpMap->vendor[0] = '\0';
                        }
                        name = optarg;
                }
        }


        printf("******************************************************\n");
        printf("* Smart Card support for RDesktop is initialized.    *\n");
        printf("* Copyright (C) by Alexi Volkov, alexi@myrealbox.com *\n");
        printf("******************************************************\n");

        return count;
}

#ifndef MAKE_PROTO
/* ---------------------------------- */

/* These two functions depend heavily on the actual implementation of the smart
 * card handle in PC/SC Lite 1.3.1. Here are the salient bits:
 *
 * From winscard.c:331, in SCardConnect:
 *         *phCard = RFCreateReaderHandle(rContext);
 *
 * RFCreateReaderHandle (readerfactory.c:1161) creates a random short (16-bit
 * integer) and makes sure it's unique. Then it adds it to
 * rContext->dwIdentity.
 *
 * From readerfactory.c:173, in RFAddReader:
 *         (sReadersContexts[dwContext])->dwIdentity =
 *               (dwContext + 1) << (sizeof(DWORD) / 2) * 8;
 *
 * dwContext must be less than PCSCLITE_MAX_READERS_CONTEXTS, which is defined
 * to be 16 in the 1.3.1 release. 
 *
 * The use of "(sizeof(DWORD) / 2) * 8" is what makes conversion necessary in
 * order to use 64-bit card handles when talking to PC/SC Lite, and 32-bit card
 * handles when talking with the server, without losing any data: a card handle
 * made by a 32-bit PC/SC Lite looks like 0x00014d32, where the 4d32 is the
 * random 16 bits, 01 is the reader context index + 1, and it's left-shifted by 
 * 16 bits (sizeof(DWORD) == 4, divided by 2 is 2, times 8 is 16.) But a 64-bit
 * PC/SC Lite makes a card handle that looks like 0x0000000100004d32. The
 * reader context index+1 is left-shifted 32 bits because sizeof(DWORD) is 8,
 * not 4. This means the handle won't fit in 32 bits. (The multiplication by 8
 * is because sizeofs are in bytes, but saying how many places to left-shift is
 * speaking in bits.)
 *
 * So then. Maximum value of dwContext+1 is 17; we'll say this fits in a byte
 * to be loose and have plenty of room. This is then left-shifted by
 * sizeof(DWORD) / 2 * 8 - which in this file is sizeof(MYPCSC_DWORD) / 2 * 8.
 *
 * At any rate, if we take the handle as passed from PC/SC Lite, right-shift by
 * sizeof(MYPCSC_DWORD) / 2, left-shift by sizeof(SERVER_DWORD) / 2, and add
 * the lower two bytes of the value (the random number), we can fit all the
 * information into 32 bits without losing any. Of course, any time we want to
 * hand that back to PC/SC Lite, we'll have to expand it again. (And if
 * sizeof(MYPCSC_DWORD) == sizeof(SERVER_DWORD), we're essentially doing
 * nothing, which will not break anything.)
 *
 *
 * - jared.jennings@eglin.af.mil, 2 Aug 2006
 */


static MYPCSC_SCARDHANDLE
scHandleToMyPCSC(SERVER_SCARDHANDLE server)
{
        return (((MYPCSC_SCARDHANDLE) server >> (sizeof(SERVER_DWORD) * 8 / 2) & 0xffff)
                << (sizeof(MYPCSC_DWORD) * 8 / 2)) + (server & 0xffff);
}

static SERVER_SCARDHANDLE
scHandleToServer(MYPCSC_SCARDHANDLE mypcsc)
{
        return ((mypcsc >> (sizeof(MYPCSC_DWORD) * 8 / 2) & 0xffff)
                << (sizeof(SERVER_DWORD) * 8 / 2)) + (mypcsc & 0xffff);
}

/* ---------------------------------- */

static void *
SC_xmalloc(PMEM_HANDLE * memHandle, unsigned int size)
{
        PMEM_HANDLE handle = NULL;
        if (size > 0 && memHandle)
        {
                handle = xmalloc(size + sizeof(MEM_HANDLE));
                if (handle)
                {
                        handle->prevHandle = NULL;
                        handle->nextHandle = NULL;
                        handle->dataSize = size;
                        if (*memHandle)
                        {
                                handle->prevHandle = *memHandle;
                                (*memHandle)->nextHandle = handle;
                        }
                        *memHandle = handle;
                        return handle + 1;
                }
                else
                        return NULL;
        }
        else
                return NULL;
}

static void
SC_xfree(PMEM_HANDLE * handle, void *memptr)
{
        if (memptr != NULL)
        {
                PMEM_HANDLE lcHandle = (PMEM_HANDLE) memptr - 1;
                if (lcHandle->dataSize > 0)
                {
                        memset(memptr, 0, lcHandle->dataSize);
                        if (lcHandle->nextHandle)
                                lcHandle->nextHandle->prevHandle = lcHandle->prevHandle;
                        if (lcHandle->prevHandle)
                                lcHandle->prevHandle->nextHandle = lcHandle->nextHandle;
                        if (*handle == lcHandle)
                        {
                                if (lcHandle->prevHandle)
                                        *handle = lcHandle->prevHandle;
                                else
                                        *handle = lcHandle->nextHandle;
                        }
                        xfree(lcHandle);
                }
        }
}

static void
SC_xfreeallmemory(PMEM_HANDLE * handle)
{
        if (handle && (*handle))
        {
                if ((*handle)->prevHandle)
                {
                        (*handle)->prevHandle->nextHandle = NULL;
                        SC_xfreeallmemory(&((*handle)->prevHandle));
                }
                if ((*handle)->nextHandle)
                {
                        (*handle)->nextHandle->prevHandle = NULL;
                        SC_xfreeallmemory(&((*handle)->nextHandle));
                }
                memset(*handle, 0, (*handle)->dataSize + sizeof(MEM_HANDLE));
                xfree(*handle);
                *handle = NULL;
        }
}

/* ---------------------------------- */

static char *
getName(char *alias)
{
        int i;
        PSCNameMapRec tmpMap;
        for (i = 0, tmpMap = nameMapList; i < nameMapCount; i++, tmpMap++)
        {
                if (strcmp(tmpMap->alias, alias) == 0)
                        return tmpMap->name;
        }
        return alias;
}

static char *
getVendor(char *name)
{
        int i;
        PSCNameMapRec tmpMap;
        for (i = 0, tmpMap = nameMapList; i < nameMapCount; i++, tmpMap++)
        {
                if (strcmp(tmpMap->name, name) == 0)
                        return tmpMap->vendor;
        }
        return NULL;
}


static char *
getAlias(char *name)
{
        int i;
        PSCNameMapRec tmpMap;
        for (i = 0, tmpMap = nameMapList; i < nameMapCount; i++, tmpMap++)
        {
                if (strcmp(tmpMap->name, name) == 0)
                        return tmpMap->alias;
        }
        return name;
}

static int
hasAlias(char *name)
{
        int i;
        PSCNameMapRec tmpMap;
        for (i = 0, tmpMap = nameMapList; i < nameMapCount; i++, tmpMap++)
        {
                if (strcmp(tmpMap->name, name) == 0)
                        return 1;
        }
        return 0;
}

static void
inRepos(STREAM in, unsigned int read)
{
        SERVER_DWORD add = 4 - read % 4;
        if (add < 4 && add > 0)
        {
                in_uint8s(in, add);
        }
}

static void
outRepos(STREAM out, unsigned int written)
{
        SERVER_DWORD add = (4 - written % 4) % 4;
        if (add > 0)
        {
                out_uint8s(out, add);
        }
}


static void
outBufferStartWithLimit(STREAM out, int length, int highLimit)
{
        int header = (length < 0) ? (0) : ((length > highLimit) ? (highLimit) : (length));
        out_uint32_le(out, header);
        out_uint32_le(out, 0x00000001); /* Magic DWORD - any non zero */
}


static void
outBufferStart(STREAM out, int length)
{
        outBufferStartWithLimit(out, length, 0x7FFFFFFF);
}

static void
outBufferFinishWithLimit(STREAM out, char *buffer, unsigned int length, unsigned int highLimit)
{
        int header = (length < 0) ? (0) : ((length > highLimit) ? (highLimit) : (length));
        out_uint32_le(out, header);

        if (length <= 0)
        {
                out_uint32_le(out, 0x00000000);
        }
        else
        {
                if (header < length)
                        length = header;
                out_uint8p(out, buffer, length);
                outRepos(out, length);
        }
}

static void
outBufferFinish(STREAM out, char *buffer, unsigned int length)
{
        outBufferFinishWithLimit(out, buffer, length, 0x7FFFFFFF);
}

static void
outForceAllignment(STREAM out, unsigned int seed)
{
        SERVER_DWORD add = (seed - (out->p - out->data) % seed) % seed;
        if (add > 0)
        {
                out_uint8s(out, add);
        }
}

static unsigned int
inString(PMEM_HANDLE * handle, STREAM in, char **destination, SERVER_DWORD dataLength, BOOL wide)
{
        unsigned int Result = (wide) ? (2 * dataLength) : (dataLength);
        PMEM_HANDLE lcHandle = NULL;
        char *buffer = SC_xmalloc(&lcHandle, Result + 2);
        char *reader;

        /* code segment */

        if (wide)
        {
                int i;
                in_uint8a(in, buffer, 2 * dataLength);
                for (i = 0; i < dataLength; i++)
                        if ((buffer[2 * i] < 0) || (buffer[2 * i + 1] != 0))
                                buffer[i] = '?';
                        else
                                buffer[i] = buffer[2 * i];
        }
        else
        {
                in_uint8a(in, buffer, dataLength);
        }

        buffer[dataLength] = '\0';
        reader = getName(buffer);
        *destination = SC_xmalloc(handle, strlen(reader) + 1);
        strcpy(*destination, reader);

        SC_xfreeallmemory(&lcHandle);
        return Result;
}

static unsigned int
outString(STREAM out, char *source, BOOL wide)
{
        PMEM_HANDLE lcHandle = NULL;
        char *reader = getAlias(source);
        unsigned int dataLength = strlen(reader) + 1;
        unsigned int Result = (wide) ? (2 * dataLength) : (dataLength);

        /* code segment */

        if (wide)
        {
                int i;
                char *buffer = SC_xmalloc(&lcHandle, Result);

                for (i = 0; i < dataLength; i++)
                {
                        if (source[i] < 0)
                                buffer[2 * i] = '?';
                        else
                                buffer[2 * i] = reader[i];
                        buffer[2 * i + 1] = '\0';
                }
                out_uint8p(out, buffer, 2 * dataLength);
        }
        else
        {
                out_uint8p(out, reader, dataLength);
        }

        SC_xfreeallmemory(&lcHandle);
        return Result;
}

static void
inReaderName(PMEM_HANDLE * handle, STREAM in, char **destination, BOOL wide)
{
        SERVER_DWORD dataLength;
        in->p += 0x08;
        in_uint32_le(in, dataLength);
        inRepos(in, inString(handle, in, destination, dataLength, wide));
}

static void
inSkipLinked(STREAM in)
{
        SERVER_DWORD len;
        in_uint32_le(in, len);
        if (len > 0)
        {
                in_uint8s(in, len);
                inRepos(in, len);
        }
}

/* ---------------------------------- */
/*  Smart Card processing functions:  */
/* ---------------------------------- */

static MYPCSC_DWORD
SC_returnCode(MYPCSC_DWORD rc, PMEM_HANDLE * handle, STREAM in, STREAM out)
{
        SC_xfreeallmemory(handle);
        out_uint8s(out, 256);
        return rc;
}

static MYPCSC_DWORD
SC_returnNoMemoryError(PMEM_HANDLE * handle, STREAM in, STREAM out)
{
        return SC_returnCode(SCARD_E_NO_MEMORY, handle, in, out);
}

static MYPCSC_DWORD
TS_SCardEstablishContext(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        MYPCSC_SCARDCONTEXT hContext;
        /* code segment  */

#ifdef WITH_SCARD_DEBUG
        printf("Establishing PC/SC Context... \n");
#endif
        rv = SCardEstablishContext(SCARD_SCOPE_SYSTEM, NULL, NULL, &hContext);
#ifdef WITH_SCARD_DEBUG
        if (rv)
                printf("<--ERROR SCardEstablishContext Code=0x%.8x]-->\n", (unsigned int) rv);
        else
                printf("<--SUCCESS SCardEstablishContext-->\n");
#endif

        out_uint32_le(out, 0x00000004);
        out_uint32_le(out, (SERVER_DWORD) hContext);    /* must not be 0 (Seems to be pointer), don't know what is this (I use hContext as value) */
        /* i hope it's not a pointer because i just downcasted it - jlj */
        out_uint32_le(out, 0x00000004);
        out_uint32_le(out, (SERVER_DWORD) hContext);
        return rv;
}

static MYPCSC_DWORD
TS_SCardReleaseContext(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hContext;

        in->p += 0x1C;
        in_uint32_le(in, hContext);
#ifdef WITH_SCARD_DEBUG
        printf("[CONTEXT 0x%.8x]\n", (unsigned int) hContext);
        printf("Releasing context... \n");
#endif
        rv = SCardReleaseContext((MYPCSC_SCARDCONTEXT) hContext);
#ifdef WITH_SCARD_DEBUG
        if (rv)
                printf("<--ERROR SCardReleaseContext Code=0x%.8x-->\n", (unsigned int) rv);
        else
                printf("<--SUCCESS SCardReleaseContext-->\n");
#endif
        return rv;
}

static MYPCSC_DWORD
TS_SCardIsValidContext(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hContext;
        char *readers;
        DWORD readerCount = 1024;
        PMEM_HANDLE lcHandle = NULL;

        in->p += 0x1C;
        in_uint32_le(in, hContext);
#ifdef WITH_SCARD_DEBUG
        printf("[CONTEXT 0x%.8x]\n", (unsigned int) hContext);
        printf("Checking... \n");
#endif
        /* There is no realization of SCardIsValidContext in PC/SC Lite so we call SCardListReaders */

        readers = SC_xmalloc(&lcHandle, 1024);
        if (!readers)
                return SC_returnNoMemoryError(&lcHandle, in, out);

        rv = SCardListReaders((MYPCSC_SCARDCONTEXT) hContext, NULL, readers, &readerCount);
        if (rv)
        {
#ifdef WITH_SCARD_DEBUG
                printf("<--ERROR SCardListReaders (no SCardIsValidContext) Code=0x%.8x-->\n",
                       (unsigned int) rv);
#endif
                rv = SCARD_E_INVALID_HANDLE;
        }
#ifdef WITH_SCARD_DEBUG
        else
                printf("<--SUCCESS SCardListReaders (no SCardIsValidContext)-->\n");
#endif
        outForceAllignment(out, 8);
        SC_xfreeallmemory(&lcHandle);
        return rv;
}


static MYPCSC_DWORD
TS_SCardListReaders(STREAM in, STREAM out, BOOL wide)
{
#define readerArraySize 1024
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hContext;
        SERVER_DWORD dataLength;
        MYPCSC_DWORD cchReaders = readerArraySize;
        unsigned char *plen1, *plen2, *pend;
        char *readers, *cur;
        PMEM_HANDLE lcHandle = NULL;

        in->p += 0x2C;
        in_uint32_le(in, hContext);
#ifdef WITH_SCARD_DEBUG
        printf("[CONTEXT 0x%.8x]\n", (unsigned int) hContext);
#endif
        plen1 = out->p;
        out_uint32_le(out, 0x00000000); /* Temp value for data length as 0x0 */
        out_uint32_le(out, 0x01760650);
        plen2 = out->p;
        out_uint32_le(out, 0x00000000); /* Temp value for data length as 0x0 */

        dataLength = 0;
        readers = SC_xmalloc(&lcHandle, readerArraySize);
        if (!readers)
                return SC_returnNoMemoryError(&lcHandle, in, out);


        readers[0] = '\0';
        readers[1] = '\0';
        rv = SCardListReaders((MYPCSC_SCARDCONTEXT) hContext, NULL, readers, &cchReaders);
        cur = readers;
        if (!rv)
        {
                int i;
                PSCNameMapRec tmpMap;
#ifdef WITH_SCARD_DEBUG
                printf("[CALL RESULT of SCardListReaders 0x%.8x]\n", (unsigned int) rv);
                hexdump((void *) readers, cchReaders);
#endif
                for (i = 0, tmpMap = nameMapList; i < nameMapCount; i++, tmpMap++)
                {
                        dataLength += outString(out, tmpMap->alias, wide);
                }

                int lenSC = strlen(cur);
                if (lenSC == 0)
                        dataLength += outString(out, "\0", wide);
                else
                        while (lenSC > 0)
                        {
                                if (!hasAlias(cur))
                                        dataLength += outString(out, cur, wide);
                                cur = (void *) ((unsigned char *) cur + lenSC + 1);
                                lenSC = strlen(cur);
                        }
        }

        dataLength += outString(out, "\0", wide);
        outRepos(out, dataLength);

        pend = out->p;
        out->p = plen1;
        out_uint32_le(out, dataLength);
        out->p = plen2;
        out_uint32_le(out, dataLength);
        out->p = pend;

        outForceAllignment(out, 8);
        SC_xfreeallmemory(&lcHandle);
        return rv;
}


static MYPCSC_DWORD
TS_SCardConnect(STREAM in, STREAM out, BOOL wide)
{
        MYPCSC_DWORD rv;
        SCARDCONTEXT hContext;
        char *szReader;
        SERVER_DWORD dwShareMode;
        SERVER_DWORD dwPreferredProtocol;
        MYPCSC_SCARDHANDLE myHCard;
        SERVER_SCARDHANDLE hCard;

        MYPCSC_DWORD dwActiveProtocol;
        PMEM_HANDLE lcHandle = NULL;

        in->p += 0x1C;
        in_uint32_le(in, dwShareMode);
        in_uint32_le(in, dwPreferredProtocol);
#ifdef WITH_SCARD_DEBUG
        printf("[SHARE %8x]\n", (unsigned int) dwShareMode);
        printf("[PROTO %8x]\n", (unsigned int) dwPreferredProtocol);
#endif
        inReaderName(&lcHandle, in, &szReader, wide);
#ifdef WITH_SCARD_DEBUG
        printf("[CONNECT TO READER \"%s\"\n", (szReader != NULL) ? (szReader) : ("NULL"));
#endif
        in->p += 0x04;
        in_uint32_le(in, hContext);
#ifdef WITH_SCARD_DEBUG
        printf("[CONTEXT 0x%.8x]\n", (unsigned int) hContext);
#endif
        rv = SCardConnect(hContext, szReader, (MYPCSC_DWORD) dwShareMode,
                          (MYPCSC_DWORD) dwPreferredProtocol, &myHCard, &dwActiveProtocol);
        hCard = scHandleToServer(myHCard);
#ifdef WITH_SCARD_DEBUG
        printf("[RECEIVED HCARD 0x%016lx]\n", myHCard);
        printf("[MANGLED  HCARD 0x%08x]\n", hCard);
#endif
        if (rv != SCARD_S_SUCCESS)
        {
#ifdef WITH_SCARD_DEBUG
                printf("<--ERROR SCardConnect Code=0x%.8x-->\n", (unsigned int) rv);
#endif
        }
        else
        {
                char *szVendor = getVendor(szReader);
#ifdef WITH_SCARD_DEBUG
                printf("<--SUCCESS ScardConnect-->\n");
#endif
                if (szVendor && (strlen(szVendor) > 0))
                {
#ifdef WITH_SCARD_DEBUG
                        printf("Set Attribute ATTR_VENDOR_NAME\n");
#endif
                        pthread_mutex_lock(&hcardAccess);
                        PSCHCardRec hcard = xmalloc(sizeof(TSCHCardRec));
                        if (hcard)
                        {
                                hcard->hCard = hCard;
                                hcard->vendor = szVendor;
                                hcard->next = NULL;
                                hcard->prev = NULL;

                                if (hcardFirst)
                                {
                                        hcardFirst->prev = hcard;
                                        hcard->next = hcardFirst;
                                }
                                hcardFirst = hcard;
                        }
                        pthread_mutex_unlock(&hcardAccess);
                }
        }

        out_uint32_le(out, 0x00000000);
        out_uint32_le(out, 0x00000000);
        out_uint32_le(out, 0x00000004);
        out_uint32_le(out, 0x016Cff34);
        /* if the active protocol > 4 billion, this is trouble. odds are low */
        out_uint32_le(out, (SERVER_DWORD) dwActiveProtocol);
        out_uint32_le(out, 0x00000004);
        out_uint32_le(out, hCard);

        outForceAllignment(out, 8);
        SC_xfreeallmemory(&lcHandle);
        return rv;
}

static MYPCSC_DWORD
TS_SCardReconnect(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        SCARDCONTEXT hContext;
        SERVER_SCARDHANDLE hCard;
        MYPCSC_SCARDHANDLE myHCard;
        SERVER_DWORD dwShareMode;
        SERVER_DWORD dwPreferredProtocol;
        SERVER_DWORD dwInitialization;
        MYPCSC_DWORD dwActiveProtocol;

        in->p += 0x20;
        in_uint32_le(in, dwShareMode);
        in_uint32_le(in, dwPreferredProtocol);
        in_uint32_le(in, dwInitialization);
        in->p += 0x04;
        in_uint32_le(in, hContext);
        in->p += 0x04;
        in_uint32_le(in, hCard);
        myHCard = scHandleToMyPCSC(hCard);
#ifdef WITH_SCARD_DEBUG
        printf("[SHARE = 0x%.8x]\n", (unsigned int) dwShareMode);
        printf("[PROTO = 0x%.8x]\n", (unsigned int) dwPreferredProtocol);
        printf("[INIT  = 0x%.8x]\n", (unsigned int) dwInitialization);
        printf("[hContext = 0x%.8x]\n", (unsigned int) hContext);
        printf("[hCard = 0x%.8x]\n", (unsigned int) hCard);
        printf("[myHCard = 0x%016lx]\n", myHCard);
#endif
        rv = SCardReconnect(myHCard, (MYPCSC_DWORD) dwShareMode, (MYPCSC_DWORD) dwPreferredProtocol,
                            (MYPCSC_DWORD) dwInitialization, &dwActiveProtocol);
#ifdef WITH_SCARD_DEBUG
        if (rv != SCARD_S_SUCCESS)
                printf("<--ERROR SCardReconnect Code=0x%.8x-->\n", (unsigned int) rv);
        else
                printf("<--SUCCESS SCardReconnect-->\n");
#endif

        outForceAllignment(out, 8);
        out_uint32_le(out, (SERVER_DWORD) dwActiveProtocol);
        return rv;
}

static MYPCSC_DWORD
TS_SCardDisconnect(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hContext;
        SERVER_SCARDHANDLE hCard;
        MYPCSC_SCARDHANDLE myHCard;
        SERVER_DWORD dwDisposition;

        in->p += 0x20;
        in_uint32_le(in, dwDisposition);
        in->p += 0x04;
        in_uint32_le(in, hContext);
        in->p += 0x04;
        in_uint32_le(in, hCard);

#ifdef WITH_SCARD_DEBUG
        printf("[hContext = 0x%.8x]\n", (unsigned int) hContext);
        printf("[hCard = 0x%.8x]\n", (unsigned int) hCard);
        printf("[dwDisposition = 0x%.8x]\n", (unsigned int) dwDisposition);
#endif

        pthread_mutex_lock(&hcardAccess);
        PSCHCardRec hcard = hcardFirst;
        while (hcard)
        {
                if (hcard->hCard == hCard)
                {
                        if (hcard->prev)
                                hcard->prev->next = hcard->next;
                        if (hcard->next)
                                hcard->next->prev = hcard->prev;
                        if (hcardFirst == hcard)
                                hcardFirst = hcard->next;
                        xfree(hcard);
                        break;
                }
                hcard = hcard->next;
        }
        pthread_mutex_unlock(&hcardAccess);

        myHCard = scHandleToMyPCSC(hCard);
        rv = SCardDisconnect(myHCard, (MYPCSC_DWORD) dwDisposition);

#ifdef WITH_SCARD_DEBUG
        if (rv != SCARD_S_SUCCESS)
                printf("<--ERROR SCardDisconnect Code=0x%.8x-->\n", (unsigned int) rv);
        else
                printf("<--SUCCESS SCardDisconnect-->\n");
#endif
        outForceAllignment(out, 8);
        return rv;
}

static int
needStatusRecheck(MYPCSC_DWORD rv, MYPCSC_LPSCARD_READERSTATE_A rsArray, SERVER_DWORD dwCount)
{
        int i, recall = 0;
        if (rv == SCARD_S_SUCCESS)
        {
                MYPCSC_LPSCARD_READERSTATE_A cur;
                for (i = 0, cur = rsArray; i < dwCount; i++, cur++)
                {
                        if (cur->dwEventState & SCARD_STATE_UNKNOWN)
                        {
                                cur->dwCurrentState = cur->dwEventState;
                                recall++;
                        }
                }
        }
        return recall;
}

static BOOL
mappedStatus(MYPCSC_DWORD code)
{
        code >>= 16;
        code &= 0x0000FFFF;
        return (code % 2);
}

static MYPCSC_DWORD
incStatus(MYPCSC_DWORD code, BOOL mapped)
{
        if (mapped || (code & SCARD_STATE_CHANGED))
        {
                MYPCSC_DWORD count = (code >> 16) & 0x0000FFFF;
                count++;
                if (mapped && !(count % 2))
                        count++;
                return (code & 0x0000FFFF) | (count << 16);
        }
        else
                return code;
}

static void
copyReaderState_MyPCSCToServer(MYPCSC_LPSCARD_READERSTATE_A src, SERVER_LPSCARD_READERSTATE_A dst,
                               MYPCSC_DWORD readerCount)
{
        MYPCSC_LPSCARD_READERSTATE_A srcIter;
        SERVER_LPSCARD_READERSTATE_A dstIter;
        MYPCSC_DWORD i;

        for (i = 0, srcIter = src, dstIter = dst; i < readerCount; i++, srcIter++, dstIter++)
        {
                dstIter->szReader = srcIter->szReader;
                dstIter->pvUserData = srcIter->pvUserData;
                dstIter->dwCurrentState = srcIter->dwCurrentState;
                dstIter->dwEventState = srcIter->dwEventState;
                dstIter->cbAtr = srcIter->cbAtr;
                memcpy(dstIter->rgbAtr, srcIter->rgbAtr, MAX_ATR_SIZE * sizeof(unsigned char));
        }
}

static void
copyReaderState_ServerToMyPCSC(SERVER_LPSCARD_READERSTATE_A src, MYPCSC_LPSCARD_READERSTATE_A dst,
                               SERVER_DWORD readerCount)
{
        SERVER_LPSCARD_READERSTATE_A srcIter;
        MYPCSC_LPSCARD_READERSTATE_A dstIter;
        SERVER_DWORD i;

        for (i = 0, srcIter = src, dstIter = dst; i < readerCount; i++, srcIter++, dstIter++)
        {
                dstIter->szReader = srcIter->szReader;
                dstIter->pvUserData = srcIter->pvUserData;
                dstIter->dwCurrentState = srcIter->dwCurrentState;
                dstIter->dwEventState = srcIter->dwEventState;
                dstIter->cbAtr = srcIter->cbAtr;
                memcpy(dstIter->rgbAtr, srcIter->rgbAtr, MAX_ATR_SIZE * sizeof(unsigned char));
        }
}


static MYPCSC_DWORD
TS_SCardGetStatusChange(STREAM in, STREAM out, BOOL wide)
{
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hContext;
        SERVER_DWORD dwTimeout;
        SERVER_DWORD dwCount;
        SERVER_LPSCARD_READERSTATE_A rsArray, cur;
        SERVER_DWORD *stateArray = NULL, *curState;
        MYPCSC_LPSCARD_READERSTATE_A myRsArray;
        long i;
        PMEM_HANDLE lcHandle = NULL;
#if 0
        BOOL mapped = False;
#endif

        in->p += 0x18;
        in_uint32_le(in, dwTimeout);
        in_uint32_le(in, dwCount);
        in->p += 0x08;
        in_uint32_le(in, hContext);
        in->p += 0x04;
#ifdef WITH_SCARD_DEBUG
        printf("[CONTEXT 0x%.8x]\n", (unsigned int) hContext);
        printf("[dwTimeout 0x%.8x]\n", (unsigned int) dwTimeout);
        printf("[COUNT %d]\n", (unsigned int) dwCount);
        printf("[TYPE SIZE %d]\n", (unsigned int) sizeof(SERVER_SCARD_READERSTATE_A));
#endif
        if (dwCount > 0)
        {
                rsArray = SC_xmalloc(&lcHandle, dwCount * sizeof(SERVER_SCARD_READERSTATE_A));
                if (!rsArray)
                        return SC_returnNoMemoryError(&lcHandle, in, out);
                memset(rsArray, 0, dwCount * sizeof(SERVER_SCARD_READERSTATE_A));
                stateArray = SC_xmalloc(&lcHandle, dwCount * sizeof(MYPCSC_DWORD));
                if (!stateArray)
                        return SC_returnNoMemoryError(&lcHandle, in, out);
                /* skip two pointers at beginning of struct */
                for (i = 0, cur = (SERVER_LPSCARD_READERSTATE_A) ((unsigned char **) rsArray + 2);
                     i < dwCount; i++, cur++)
                {
                        in->p += 0x04;
                        in_uint8a(in, cur, SERVER_SCARDSTATESIZE);
                }
#ifdef WITH_SCARD_DEBUG
                printf("[READERS DUMP 1]------------------\n");
                hexdump((void *) rsArray, dwCount * sizeof(SERVER_SCARD_READERSTATE_A));
#endif


                for (i = 0, cur = rsArray, curState = stateArray;
                     i < dwCount; i++, cur++, curState++)
                {
                        SERVER_DWORD dataLength;

                        /* reset Current state hign bytes; */
                        *curState = cur->dwCurrentState;
                        cur->dwCurrentState &= 0x0000FFFF;
                        cur->dwEventState &= 0x0000FFFF;

#if 0
                        if (cur->dwCurrentState == (SCARD_STATE_CHANGED | SCARD_STATE_PRESENT))
                        {
                                cur->dwCurrentState = 0x00000000;
                                mapped = True;
                        }

                        if (mappedStatus(*curState))
                        {
                                cur->dwCurrentState &= ~SCARD_STATE_INUSE;
                                cur->dwEventState &= ~SCARD_STATE_INUSE;

                                if (cur->dwCurrentState & SCARD_STATE_EMPTY)
                                {
                                        cur->dwCurrentState &= ~SCARD_STATE_EMPTY;
                                        cur->dwCurrentState |= SCARD_STATE_UNKNOWN;
                                }
                        }
#endif

                        in->p += 0x08;
                        in_uint32_le(in, dataLength);
#ifdef WITH_SCARD_DEBUG
                        printf("[%d] Data Length %d]\n", (unsigned int) i, dataLength);
#endif
                        inRepos(in,
                                inString(&lcHandle, in, (char **) &(cur->szReader), dataLength,
                                         wide));

                        if (strcmp(cur->szReader, "\\\\?PnP?\\Notification") == 0)
                                cur->dwCurrentState |= SCARD_STATE_IGNORE;
                }
#ifdef WITH_SCARD_DEBUG
                printf("[READERS DUMP 2]------------------\n");
                hexdump((void *) rsArray, dwCount * sizeof(SERVER_SCARD_READERSTATE_A));
#endif
        }
        else
        {
                rsArray = NULL;
                stateArray = NULL;
        }

#ifdef WITH_SCARD_DEBUG
        printf("\nCalling SCardGetStatusChange...\n");
#endif


        myRsArray = SC_xmalloc(&lcHandle, dwCount * sizeof(MYPCSC_SCARD_READERSTATE_A));
        if (!rsArray)
                return SC_returnNoMemoryError(&lcHandle, in, out);
        memset(myRsArray, 0, dwCount * sizeof(SERVER_SCARD_READERSTATE_A));
        copyReaderState_ServerToMyPCSC(rsArray, myRsArray, (SERVER_DWORD) dwCount);
#ifdef WITH_SCARD_DEBUG
        printf("[TRANSLATION OF READERS]--------------------\n");
        hexdump((void *) myRsArray, dwCount * sizeof(MYPCSC_SCARD_READERSTATE_A));
#endif

        rv = SCardGetStatusChange((MYPCSC_SCARDCONTEXT) hContext, (MYPCSC_DWORD) dwTimeout,
                                  myRsArray, (MYPCSC_DWORD) dwCount);
        copyReaderState_MyPCSCToServer(myRsArray, rsArray, (MYPCSC_DWORD) dwCount);

#ifdef WITH_SCARD_DEBUG
        if (rv != SCARD_S_SUCCESS)
                printf("<--ERROR SCardGetStatusChange Code=0x%.8x-->\n", (unsigned int) rv);
        else
                printf("<--SUCCESS SCardGetStatusChange-->\n");

        if (dwCount > 0)
        {
                printf("[READERS DUMP]------------------\n");
                hexdump((void *) rsArray, dwCount * sizeof(SERVER_SCARD_READERSTATE_A));
        }
#endif

        out_uint32_le(out, dwCount);
        out_uint32_le(out, 0x00084dd8);
        out_uint32_le(out, dwCount);

        for (i = 0, cur = rsArray, curState = stateArray; i < dwCount; i++, cur++, curState++)
        {

                cur->dwCurrentState = (*curState);
                cur->dwEventState |= (*curState) & 0xFFFF0000;

#if 0
                if (mapped && (cur->dwCurrentState & SCARD_STATE_PRESENT)
                    && (cur->dwCurrentState & SCARD_STATE_CHANGED)
                    && (cur->dwEventState & SCARD_STATE_PRESENT)
                    && (cur->dwEventState & SCARD_STATE_CHANGED))
                {
                        cur->dwEventState |= SCARD_STATE_INUSE;
                }
                else if (cur->dwEventState & SCARD_STATE_UNKNOWN)
                {
                        cur->dwEventState &= ~SCARD_STATE_UNKNOWN;
                        cur->dwEventState |= SCARD_STATE_EMPTY;
                        mapped = True;
                }
                else if ((!mapped) && (cur->dwEventState & SCARD_STATE_INUSE))
                {
                        mapped = True;
                        cur->dwEventState &= ~SCARD_STATE_INUSE;
                }

                cur->dwEventState = incStatus(cur->dwEventState, mapped);
#endif
                cur->dwEventState = incStatus(cur->dwEventState, False);

                out_uint8p(out, (void *) ((unsigned char **) cur + 2),
                           sizeof(SERVER_SCARD_READERSTATE_A) - 2 * sizeof(unsigned char *));
        }
        outForceAllignment(out, 8);
        SC_xfreeallmemory(&lcHandle);
        return rv;
}

static MYPCSC_DWORD
TS_SCardCancel(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hContext;

        in->p += 0x1C;
        in_uint32_le(in, hContext);
#ifdef WITH_SCARD_DEBUG
        printf("[CONTEXT 0x%.8x]\n", (unsigned int) hContext);
        printf("Canceling... \n");
#endif
        rv = SCardCancel((MYPCSC_SCARDCONTEXT) hContext);
#ifdef WITH_SCARD_DEBUG
        if (rv != SCARD_S_SUCCESS)
                printf("<--ERROR SCardCancel Code=0x%.8x-->\n", (unsigned int) rv);
        else
                printf("<--SUCCESS SCardCancel-->\n");
#endif
        outForceAllignment(out, 8);
        return rv;
}

static MYPCSC_DWORD
TS_SCardLocateCardsByATR(STREAM in, STREAM out, BOOL wide)
{
        int i, j, k;
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hContext;
        /* The SCARD_ATRMASK_L struct doesn't contain any longs or DWORDs -
           no need to split into SERVER_ and MYPCSC_ */
        LPSCARD_ATRMASK_L pAtrMasks, cur;
        SERVER_DWORD atrMaskCount = 0;
        SERVER_DWORD readerCount = 0;
        SERVER_LPSCARD_READERSTATE_A rsArray, ResArray, rsCur;
        MYPCSC_LPSCARD_READERSTATE_A myRsArray;
        PMEM_HANDLE lcHandle = NULL;

        in->p += 0x2C;
        in_uint32_le(in, hContext);
#ifdef WITH_SCARD_DEBUG
        printf("[CONTEXT 0x%.8x]\n", (unsigned int) hContext);
#endif
        in_uint32_le(in, atrMaskCount);
        pAtrMasks = SC_xmalloc(&lcHandle, atrMaskCount * sizeof(SCARD_ATRMASK_L));
        if (!pAtrMasks)
                return SC_returnNoMemoryError(&lcHandle, in, out);
        in_uint8a(in, pAtrMasks, atrMaskCount * sizeof(SCARD_ATRMASK_L));

        in_uint32_le(in, readerCount);
        rsArray = SC_xmalloc(&lcHandle, readerCount * sizeof(SCARD_READERSTATE_A));
        if (!rsArray)
                return SC_returnNoMemoryError(&lcHandle, in, out);
        memset(rsArray, 0, readerCount * sizeof(SCARD_READERSTATE_A));

        for (i = 0, rsCur = (SERVER_LPSCARD_READERSTATE_A) ((unsigned char **) rsArray + 2);
             i < readerCount; i++, rsCur++)
        {
                in_uint8s(in, 4);
                in_uint8a(in, rsCur, SERVER_SCARDSTATESIZE);
        }

        ResArray = SC_xmalloc(&lcHandle, readerCount * sizeof(SERVER_SCARD_READERSTATE_A));
        if (!ResArray)
                return SC_returnNoMemoryError(&lcHandle, in, out);
        memcpy(ResArray, rsArray, readerCount * sizeof(SERVER_SCARD_READERSTATE_A));

        for (i = 0, rsCur = rsArray; i < readerCount; i++, rsCur++)
        {
                inReaderName(&lcHandle, in, (char **) &rsCur->szReader, wide);
#ifdef WITH_SCARD_DEBUG
                printf("[CHECK READER %s]\n", (rsCur->szReader) ? (rsCur->szReader) : ("NULL"));
#endif
        }

#ifdef WITH_SCARD_DEBUG
        printf("[CALL subfunction \"SCardGetStatusChange\"]\n");
#endif
        /* FIXME segfault here. */
        myRsArray = SC_xmalloc(&lcHandle, readerCount * sizeof(MYPCSC_SCARD_READERSTATE_A));
        if (!myRsArray)
                return SC_returnNoMemoryError(&lcHandle, in, out);
        rv = SCardGetStatusChange((MYPCSC_SCARDCONTEXT) hContext, 0x00000001, myRsArray,
                                  readerCount);
        copyReaderState_MyPCSCToServer(myRsArray, rsArray, readerCount);
        if (rv != SCARD_S_SUCCESS)
        {
#ifdef WITH_SCARD_DEBUG
                printf("<--ERROR SCardGetStatusChange (no SCardLocateCardsByATR) Code=0x%.8x-->\n",
                       (unsigned int) rv);
#endif
        }
        else
        {
#ifdef WITH_SCARD_DEBUG
                printf("<--SUCCESS SCardGetStatusChange (no SCardLocateCardsByATR)-->\n");
#endif
                cur = pAtrMasks;
                for (i = 0, cur = pAtrMasks; i < atrMaskCount; i++, cur++)
                {
                        for (j = 0, rsCur = rsArray; j < readerCount; j++, rsCur++)
                        {
                                BOOL equal = 1;
                                for (k = 0; k < cur->cbAtr; k++)
                                {
                                        /*  This line check if them equal */
                                        if (cur->rgbAtr[k] != rsCur->rgbAtr[k])
                                                /*  Next Line was make to search with mask (some strange behavours with applications which use eToken SmartCards) */
                                                /*  if((cur->rgbAtr[k]&cur->rgbMask[k])!=(rsCur->rgbAtr[k]&cur->rgbMask[k])){ */
                                        {
                                                equal = 0;
                                                break;
                                        }
                                }
                                if (equal)
                                {
#ifdef WITH_SCARD_DEBUG
                                        printf("[FOUND]\n");
#endif
                                        rsCur->dwEventState |= 0x00000040;      /* SCARD_STATE_ATRMATCH 0x00000040 */
                                        memcpy(ResArray + j, rsCur, sizeof(SCARD_READERSTATE_A));
                                }
                        }
                }
        }

        out_uint32_le(out, readerCount);
        out_uint32_le(out, 0x00084dd8);
        out_uint32_le(out, readerCount);

        for (i = 0, rsCur = rsArray; i < readerCount; i++, rsCur++)
        {
                out_uint8p(out, (void *) ((unsigned char **) rsCur + 2),
                           sizeof(SCARD_READERSTATE_A) - 2 * sizeof(unsigned char *));
        }

        outForceAllignment(out, 8);
        SC_xfreeallmemory(&lcHandle);
        return rv;
}

static DWORD
TS_SCardBeginTransaction(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hCard;
        MYPCSC_SCARDCONTEXT myHCard;

        in->p += 0x30;
        in_uint32_le(in, hCard);
        myHCard = scHandleToMyPCSC(hCard);
#ifdef WITH_SCARD_DEBUG
        printf("[hCard = 0x%.8x]\n", (unsigned int) hCard);
        printf("[myHCard = 0x%016lx]\n", myHCard);
#endif
        rv = SCardBeginTransaction(myHCard);
#ifdef WITH_SCARD_DEBUG
        if (rv != SCARD_S_SUCCESS)
                printf("<--ERROR SCardBeginTransaction Code=0x%.8x-->\n", (unsigned int) rv);
        else
                printf("<--SUCCESS SCardBeginTransaction-->\n");
#endif
        outForceAllignment(out, 8);
        return rv;
}

static DWORD
TS_SCardEndTransaction(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hCard;
        MYPCSC_SCARDCONTEXT myHCard;
        SERVER_DWORD dwDisposition = 0;

        in->p += 0x20;
        in_uint32_le(in, dwDisposition);
        in->p += 0x0C;
        in_uint32_le(in, hCard);
        myHCard = scHandleToMyPCSC(hCard);
#ifdef WITH_SCARD_DEBUG
        printf("[hCard = 0x%.8x]\n", (unsigned int) hCard);
        printf("[myHCard = 0x%016lx]\n", myHCard);
        printf("[dwDisposition = 0x%.8x]\n", (unsigned int) dwDisposition);
#endif
        rv = SCardEndTransaction(myHCard, (MYPCSC_DWORD) dwDisposition);
#ifdef WITH_SCARD_DEBUG
        if (rv != SCARD_S_SUCCESS)
                printf("<--ERROR SCardEndTransaction Code=0x%.8x-->\n", (unsigned int) rv);
        else
                printf("<--SUCCESS SCardEndTransaction-->\n");
#endif
        outForceAllignment(out, 8);
        return rv;
}


static void
copyIORequest_MyPCSCToServer(MYPCSC_LPSCARD_IO_REQUEST src, SERVER_LPSCARD_IO_REQUEST dst)
{
        unsigned char *srcBytes, *dstBytes;
        size_t bytesToCopy = src->cbPciLength - sizeof(MYPCSC_SCARD_IO_REQUEST);
        srcBytes = ((unsigned char *) src + sizeof(MYPCSC_SCARD_IO_REQUEST));
        dstBytes = ((unsigned char *) dst + sizeof(SERVER_SCARD_IO_REQUEST));
        dst->dwProtocol = src->dwProtocol;
        dst->cbPciLength = src->cbPciLength
                - sizeof(MYPCSC_SCARD_IO_REQUEST) + sizeof(SERVER_SCARD_IO_REQUEST);
        memcpy(dstBytes, srcBytes, bytesToCopy);
}

static void
copyIORequest_ServerToMyPCSC(SERVER_LPSCARD_IO_REQUEST src, MYPCSC_LPSCARD_IO_REQUEST dst)
{
        unsigned char *srcBytes, *dstBytes;
        size_t bytesToCopy = src->cbPciLength - sizeof(SERVER_SCARD_IO_REQUEST);
        srcBytes = ((unsigned char *) src + sizeof(SERVER_SCARD_IO_REQUEST));
        dstBytes = ((unsigned char *) dst + sizeof(MYPCSC_SCARD_IO_REQUEST));
        dst->dwProtocol = src->dwProtocol;
        dst->cbPciLength = src->cbPciLength
                - sizeof(SERVER_SCARD_IO_REQUEST) + sizeof(MYPCSC_SCARD_IO_REQUEST);
        memcpy(dstBytes, srcBytes, bytesToCopy);
}


static DWORD
TS_SCardTransmit(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        SERVER_DWORD map[7], linkedLen;
        void *tmp;
        SERVER_SCARDCONTEXT hCard;
        MYPCSC_SCARDCONTEXT myHCard;
        SERVER_LPSCARD_IO_REQUEST pioSendPci, pioRecvPci;
        MYPCSC_LPSCARD_IO_REQUEST myPioSendPci, myPioRecvPci;
        unsigned char *sendBuf = NULL, *recvBuf = NULL;
        SERVER_DWORD cbSendLength, cbRecvLength;
        MYPCSC_DWORD myCbRecvLength;
        PMEM_HANDLE lcHandle = NULL;

        in->p += 0x14;
        in_uint32_le(in, map[0]);
        in->p += 0x04;
        in_uint32_le(in, map[1]);
        pioSendPci = SC_xmalloc(&lcHandle, sizeof(SERVER_SCARD_IO_REQUEST));
        if (!pioSendPci)
                return SC_returnNoMemoryError(&lcHandle, in, out);
        in_uint8a(in, pioSendPci, sizeof(SERVER_SCARD_IO_REQUEST));
        in_uint32_le(in, map[2]);
        in_uint32_le(in, cbSendLength);
        in_uint32_le(in, map[3]);
        in_uint32_le(in, map[4]);
        in_uint32_le(in, map[5]);
        in_uint32_le(in, cbRecvLength);
        if (map[0] & INPUT_LINKED)
                inSkipLinked(in);

        in->p += 0x04;
        in_uint32_le(in, hCard);
        myHCard = scHandleToMyPCSC(hCard);

        if (map[2] & INPUT_LINKED)
        {
                in_uint32_le(in, linkedLen);
                pioSendPci->cbPciLength = linkedLen + sizeof(SERVER_SCARD_IO_REQUEST);
                tmp = SC_xmalloc(&lcHandle, pioSendPci->cbPciLength);
                if (!tmp)
                        return SC_returnNoMemoryError(&lcHandle, in, out);
                in_uint8a(in, (void *) ((unsigned char *) tmp + sizeof(SERVER_SCARD_IO_REQUEST)),
                          linkedLen);
                memcpy(tmp, pioSendPci, sizeof(SERVER_SCARD_IO_REQUEST));
                SC_xfree(&lcHandle, pioSendPci);
                pioSendPci = tmp;
                tmp = NULL;
        }
        else
                pioSendPci->cbPciLength = sizeof(SERVER_SCARD_IO_REQUEST);

        if (map[3] & INPUT_LINKED)
        {
                in_uint32_le(in, linkedLen);
                sendBuf = SC_xmalloc(&lcHandle, linkedLen);
                if (!sendBuf)
                        return SC_returnNoMemoryError(&lcHandle, in, out);
                in_uint8a(in, sendBuf, linkedLen);
                inRepos(in, linkedLen);
        }
        else
                sendBuf = NULL;

        if (cbRecvLength)
        {
                /* FIXME: handle responses with length > 448 bytes */
                if (cbRecvLength > 448)
                {
#ifdef WITH_SCARD_DEBUG
                        printf("[RECV LEN %d -> %d]\n", (unsigned int) cbRecvLength, 400);
#endif
                        cbRecvLength = 448;
                }


                recvBuf = SC_xmalloc(&lcHandle, cbRecvLength);
                if (!recvBuf)
                        return SC_returnNoMemoryError(&lcHandle, in, out);
        }

        if (map[4] & INPUT_LINKED)
        {
                pioRecvPci = SC_xmalloc(&lcHandle, sizeof(SERVER_SCARD_IO_REQUEST));
                if (!pioRecvPci)
                        return SC_returnNoMemoryError(&lcHandle, in, out);
                in_uint8a(in, pioRecvPci, sizeof(SERVER_SCARD_IO_REQUEST));
                in_uint32_le(in, map[6]);
                if (map[6] & INPUT_LINKED)
                {
                        in_uint32_le(in, linkedLen);
                        pioRecvPci->cbPciLength = linkedLen + sizeof(SERVER_SCARD_IO_REQUEST);
                        tmp = SC_xmalloc(&lcHandle, pioRecvPci->cbPciLength);
                        if (!tmp)
                                return SC_returnNoMemoryError(&lcHandle, in, out);
                        in_uint8a(in,
                                  (void *) ((unsigned char *) tmp +
                                            sizeof(SERVER_SCARD_IO_REQUEST)), linkedLen);
                        memcpy(tmp, pioRecvPci, sizeof(SERVER_SCARD_IO_REQUEST));
                        SC_xfree(&lcHandle, pioRecvPci);
                        pioRecvPci = tmp;
                        tmp = NULL;
                }
                else
                        pioRecvPci->cbPciLength = sizeof(SERVER_SCARD_IO_REQUEST);
        }
        else
                pioRecvPci = NULL;

#ifdef WITH_SCARD_DEBUG
        printf("++++++++++\n");
        printf("[SEND LEN = %d]\n", (unsigned int) cbSendLength);
        printf("[RECV LEN = %d]\n", (unsigned int) cbRecvLength);
        printf("[hCard = 0x%.8x]\n", (unsigned int) hCard);
        printf("[myHCard = 0x%016lx]\n", myHCard);
        printf("[pioSendPci]\n");
        if (pioSendPci == NULL)
                printf("NULL\n");
        else
                hexdump((void *) pioSendPci, pioSendPci->cbPciLength);
        printf("[pioRecvPci]\n");
        if (pioRecvPci == NULL)
                printf("NULL\n");
        else
                hexdump((void *) pioRecvPci, pioRecvPci->cbPciLength);
        printf("[sendBuf]\n");
        hexdump(sendBuf, cbSendLength);
        printf("++++++++++\n");
#endif

        myCbRecvLength = cbRecvLength;
        myPioSendPci = SC_xmalloc(&lcHandle,
                                  sizeof(MYPCSC_SCARD_IO_REQUEST)
                                  + pioSendPci->cbPciLength - sizeof(SERVER_SCARD_IO_REQUEST));
        if (!myPioSendPci)
                return SC_returnNoMemoryError(&lcHandle, in, out);
        copyIORequest_ServerToMyPCSC(pioSendPci, myPioSendPci);
        /* always a send, not always a recv */
        if (pioRecvPci)
        {
                myPioRecvPci = SC_xmalloc(&lcHandle,
                                          sizeof(MYPCSC_SCARD_IO_REQUEST)
                                          + pioRecvPci->cbPciLength
                                          - sizeof(SERVER_SCARD_IO_REQUEST));
                if (!myPioRecvPci)
                        return SC_returnNoMemoryError(&lcHandle, in, out);
                copyIORequest_ServerToMyPCSC(pioRecvPci, myPioRecvPci);
        }
        else
        {
                myPioRecvPci = NULL;
        }
        rv = SCardTransmit(myHCard, myPioSendPci, sendBuf, (MYPCSC_DWORD) cbSendLength,
                           myPioRecvPci, recvBuf, &myCbRecvLength);
        cbRecvLength = myCbRecvLength;
        if (pioRecvPci)
        {
                copyIORequest_MyPCSCToServer(myPioRecvPci, pioRecvPci);
        }

        if (rv != SCARD_S_SUCCESS)
        {
#ifdef WITH_SCARD_DEBUG
                printf("<--ERROR SCardTransmit Code=0x%.8x-->\n", (unsigned int) rv);
#endif
        }
        else
        {
#ifdef WITH_SCARD_DEBUG
                printf("<--SUCCESS SCardTransmit-->\n");
                printf("RESULT %d\n", (unsigned int) cbRecvLength);
                hexdump(recvBuf, cbRecvLength);
                if (myPioRecvPci)
                {
                        printf("--- myPioRecvPci ---\n");
                        hexdump((void *) myPioRecvPci, myPioRecvPci->cbPciLength);
                }
                printf("------------------\n");
#endif
#if 0
                if ((pioRecvPci != NULL) && (pioRecvPci->cbPciLength > 0))
                {
                        out_uint32_le(out, (DWORD) pioRecvPci); /* if not NULL, this 4 bytes indicates that pioRecvPci is present */
                }
                else
#endif
                        out_uint32_le(out, 0);  /* pioRecvPci 0x00; */

                outBufferStart(out, cbRecvLength);      /* start of recvBuf output */

#if 0
                if ((pioRecvPci) && (pioRecvPci->cbPciLength > 0))
                {
                        out_uint32_le(out, pioRecvPci->dwProtocol);
                        int len = pioRecvPci->cbPciLength - sizeof(pioRecvPci);
                        outBufferStartWithLimit(out, len, 12);
                        outBufferFinishWithLimit(out,
                                                 (char *) ((DWORD) pioRecvPci + sizeof(pioRecvPci)),
                                                 len, 12);
                }
#endif

                outBufferFinish(out, (char *) recvBuf, cbRecvLength);
        }
        outForceAllignment(out, 8);
        SC_xfreeallmemory(&lcHandle);
        return rv;
}

static MYPCSC_DWORD
TS_SCardStatus(STREAM in, STREAM out, BOOL wide)
{
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hCard;
        MYPCSC_SCARDCONTEXT myHCard;
        SERVER_DWORD dwState = 0, dwProtocol = 0, dwReaderLen, dwAtrLen;
        MYPCSC_DWORD state, protocol, readerLen, atrLen;
        SERVER_DWORD dataLength;
        PMEM_HANDLE lcHandle = NULL;
        char *readerName;
        unsigned char *atr;

        in->p += 0x24;
        in_uint32_le(in, dwReaderLen);
        in_uint32_le(in, dwAtrLen);
        in->p += 0x0C;
        in_uint32_le(in, hCard);
        in->p += 0x04;
        myHCard = scHandleToMyPCSC(hCard);
#ifdef WITH_SCARD_DEBUG
        printf("[hCard 0x%.8x]\n", (unsigned int) hCard);
        printf("[myHCard 0x%016lx]\n", myHCard);
        printf("[dwReaderLen %d]\n", (unsigned int) dwReaderLen);
        printf("[dwAtrLen %d]\n", (unsigned int) dwAtrLen);
#endif

        if (dwReaderLen <= 0 || dwReaderLen == SCARD_AUTOALLOCATE || dwReaderLen > SCARD_MAX_MEM)
                dwReaderLen = SCARD_MAX_MEM;
        if (dwAtrLen <= 0 || dwAtrLen == SCARD_AUTOALLOCATE || dwAtrLen > SCARD_MAX_MEM)
                dwAtrLen = SCARD_MAX_MEM;

        readerName = SC_xmalloc(&lcHandle, dwReaderLen + 2);
        if (!readerName)
                return SC_returnNoMemoryError(&lcHandle, in, out);

        atr = SC_xmalloc(&lcHandle, dwAtrLen + 1);
        if (!atr)
                return SC_returnNoMemoryError(&lcHandle, in, out);

        state = dwState;
        protocol = dwProtocol;
        readerLen = dwReaderLen;
        atrLen = dwAtrLen;
        rv = SCardStatus(myHCard, readerName, &readerLen, &state, &protocol, atr, &atrLen);
        dwAtrLen = atrLen;
        dwReaderLen = readerLen;
        dwProtocol = protocol;
        dwState = state;


        if (rv != SCARD_S_SUCCESS)
        {
#ifdef WITH_SCARD_DEBUG
                printf("<--ERROR SCardStatus Code=0x%.8x-->\n", (unsigned int) rv);
#endif
                return SC_returnCode(rv, &lcHandle, in, out);
        }
        else
        {
#ifdef WITH_SCARD_DEBUG
                printf("<--SUCCESS SCardStatus-->\n");
                printf("[dwState 0x%.8x]\n", (unsigned int) dwState);
                printf("[dwProtocol 0x%.8x]\n", (unsigned int) dwProtocol);
                printf("[Reader Name]\n");
                hexdump((unsigned char *) readerName, dwReaderLen);
                printf("[Atr]\n");
                hexdump(atr, dwAtrLen);
#endif
                if (dwState & (SCARD_SPECIFIC | SCARD_NEGOTIABLE))
                        dwState = 0x00000006;
                else
#if 0
                if (dwState & SCARD_SPECIFIC)
                        dwState = 0x00000006;
                else if (dwState & SCARD_NEGOTIABLE)
                        dwState = 0x00000005;
                else
#endif
                if (dwState & SCARD_POWERED)
                        dwState = 0x00000004;
                else if (dwState & SCARD_SWALLOWED)
                        dwState = 0x00000003;
                else if (dwState & SCARD_PRESENT)
                        dwState = 0x00000002;
                else if (dwState & SCARD_ABSENT)
                        dwState = 0x00000001;
                else
                        dwState = 0x00000000;

                void *p_len1 = out->p;
                out_uint32_le(out, dwReaderLen);
                out_uint32_le(out, 0x00020000);
                out_uint32_le(out, dwState);
                out_uint32_le(out, dwProtocol);
                out_uint8p(out, atr, dwAtrLen);
                if (dwAtrLen < 32)
                {
                        out_uint8s(out, 32 - dwAtrLen);
                }
                out_uint32_le(out, dwAtrLen);

                void *p_len2 = out->p;
                out_uint32_le(out, dwReaderLen);
                dataLength = outString(out, readerName, wide);
                dataLength += outString(out, "\0", wide);
                outRepos(out, dataLength);
                void *psave = out->p;
                out->p = p_len1;
                out_uint32_le(out, dataLength);
                out->p = p_len2;
                out_uint32_le(out, dataLength);
                out->p = psave;
        }
        outForceAllignment(out, 8);
        SC_xfreeallmemory(&lcHandle);
        return rv;
}

static MYPCSC_DWORD
TS_SCardState(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hCard;
        MYPCSC_SCARDCONTEXT myHCard;
        SERVER_DWORD dwState = 0, dwProtocol = 0, dwReaderLen, dwAtrLen;
        MYPCSC_DWORD state, protocol, readerLen, atrLen;
        PMEM_HANDLE lcHandle = NULL;
        char *readerName;
        unsigned char *atr;

        in->p += 0x24;
        in_uint32_le(in, dwAtrLen);
        in->p += 0x0C;
        in_uint32_le(in, hCard);
        in->p += 0x04;
        myHCard = scHandleToMyPCSC(hCard);
#ifdef WITH_SCARD_DEBUG
        printf("[hCard 0x%.8x]\n", (unsigned int) hCard);
        printf("[myHCard 0x%.8x]\n", (unsigned int) myHCard);
        printf("[dwAtrLen %d]\n", (unsigned int) dwAtrLen);
#endif


        dwReaderLen = SCARD_MAX_MEM;
        if (dwAtrLen <= 0 || dwAtrLen == SCARD_AUTOALLOCATE || dwAtrLen > SCARD_MAX_MEM)
                dwAtrLen = SCARD_MAX_MEM;

        readerName = SC_xmalloc(&lcHandle, dwReaderLen + 2);
        if (!readerName)
                return SC_returnNoMemoryError(&lcHandle, in, out);

        atr = SC_xmalloc(&lcHandle, dwAtrLen + 1);
        if (!atr)
                return SC_returnNoMemoryError(&lcHandle, in, out);

        state = dwState;
        protocol = dwProtocol;
        readerLen = dwReaderLen;
        atrLen = dwAtrLen;
        rv = SCardStatus(myHCard, readerName, &readerLen, &state, &protocol, atr, &atrLen);
        dwAtrLen = atrLen;
        dwReaderLen = readerLen;
        dwProtocol = protocol;
        dwState = state;

        if (rv != SCARD_S_SUCCESS)
        {
#ifdef WITH_SCARD_DEBUG
                printf("<--ERROR SCardStatus (no ScardState) Code=0x%.8x-->\n", (unsigned int) rv);
#endif
                return SC_returnCode(rv, &lcHandle, in, out);
        }
        else
        {
#ifdef WITH_SCARD_DEBUG
                printf("<--SUCCESS SCardStatus (no ScardState)-->\n");
                printf("[dwState 0x%.8x]\n", (unsigned int) dwState);
                printf("[dwProtocol 0x%.8x]\n", (unsigned int) dwProtocol);
                printf("[Atr]\n");
                hexdump(atr, dwAtrLen);
#endif
                if (dwState & (SCARD_SPECIFIC | SCARD_NEGOTIABLE))
                        dwState = 0x00000006;
                else
#if 0
                if (dwState & SCARD_SPECIFIC)
                        dwState = 0x00000006;
                else if (dwState & SCARD_NEGOTIABLE)
                        dwState = 0x00000005;
                else
#endif
                if (dwState & SCARD_POWERED)
                        dwState = 0x00000004;
                else if (dwState & SCARD_SWALLOWED)
                        dwState = 0x00000003;
                else if (dwState & SCARD_PRESENT)
                        dwState = 0x00000002;
                else if (dwState & SCARD_ABSENT)
                        dwState = 0x00000001;
                else
                        dwState = 0x00000000;

                out_uint32_le(out, dwState);
                out_uint32_le(out, dwProtocol);
                out_uint32_le(out, dwAtrLen);
                out_uint32_le(out, 0x00000001);
                out_uint32_le(out, dwAtrLen);
                out_uint8p(out, atr, dwAtrLen);
                outRepos(out, dwAtrLen);
        }
        outForceAllignment(out, 8);
        SC_xfreeallmemory(&lcHandle);
        return rv;
}


#ifndef WITH_PCSC120

static MYPCSC_DWORD
TS_SCardListReaderGroups(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hContext;
        SERVER_DWORD dwGroups;
        MYPCSC_DWORD groups;
        char *szGroups;
        PMEM_HANDLE lcHandle = NULL;

        in->p += 0x20;
        in_uint32_le(in, dwGroups);
        in->p += 0x04;
        in_uint32_le(in, hContext);

        if (dwGroups <= 0 || dwGroups == SCARD_AUTOALLOCATE || dwGroups > SCARD_MAX_MEM)
                dwGroups = SCARD_MAX_MEM;

        szGroups = SC_xmalloc(&lcHandle, dwGroups);
        if (!szGroups)
                return SC_returnNoMemoryError(&lcHandle, in, out);

        groups = dwGroups;
        rv = SCardListReaderGroups((MYPCSC_SCARDCONTEXT) hContext, szGroups, &groups);
        dwGroups = groups;

        if (rv)
#ifdef WITH_SCARD_DEBUG
        {
                printf("<--ERROR SCardListReaderGroups Code=0x%.8x-->\n", (unsigned int) rv);
#endif
                return SC_returnCode(rv, &lcHandle, in, out);
#ifdef WITH_SCARD_DEBUG
        }
        else
        {
                printf("<--SUCCESS SCardListReaderGroups-->\n");
        }
#endif


        out_uint32_le(out, dwGroups);
        out_uint32_le(out, 0x00200000);
        out_uint32_le(out, dwGroups);
        out_uint8a(out, szGroups, dwGroups);
        outRepos(out, dwGroups);
        out_uint32_le(out, 0x00000000);

        outForceAllignment(out, 8);
        SC_xfreeallmemory(&lcHandle);
        return rv;
}

static MYPCSC_DWORD
TS_SCardGetAttrib(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hCard;
        MYPCSC_SCARDCONTEXT myHCard;
        SERVER_DWORD dwAttrId, dwAttrLen;
        MYPCSC_DWORD attrLen;
        unsigned char *pbAttr;
        PMEM_HANDLE lcHandle = NULL;

        in->p += 0x20;
        in_uint32_le(in, dwAttrId);
        in->p += 0x04;
        in_uint32_le(in, dwAttrLen);
        in->p += 0x0C;
        in_uint32_le(in, hCard);
        myHCard = scHandleToMyPCSC(hCard);

        dwAttrId = dwAttrId & 0x0000FFFF;

#ifdef WITH_SCARD_DEBUG
        printf("[hCard = 0x%.8x]\n", (unsigned int) hCard);
        printf("[myHCard 0x%.8x]\n", (unsigned int) myHCard);
        printf("[dwAttrId = 0x%.8x]\n", (unsigned int) dwAttrId);
        printf("[dwAttrLen = 0x%.8x]\n", (unsigned int) dwAttrLen);
#endif

        if (dwAttrLen > MAX_BUFFER_SIZE)
                dwAttrLen = MAX_BUFFER_SIZE;


        if (dwAttrLen > SCARD_AUTOALLOCATE)
                pbAttr = NULL;
        else if ((dwAttrLen < 0) || (dwAttrLen > SCARD_MAX_MEM))
        {
                dwAttrLen = SCARD_AUTOALLOCATE;
                pbAttr = NULL;
        }
        else
        {
                pbAttr = SC_xmalloc(&lcHandle, dwAttrLen);
                if (!pbAttr)
                        return SC_returnNoMemoryError(&lcHandle, in, out);
        }

        attrLen = dwAttrLen;
        rv = SCardGetAttrib(myHCard, (MYPCSC_DWORD) dwAttrId, pbAttr, &attrLen);
        dwAttrLen = attrLen;

        if (dwAttrId == 0x00000100 && rv != SCARD_S_SUCCESS)
        {
#ifdef WITH_SCARD_DEBUG
                printf("Get Attribute ATTR_VENDOR_NAME\n");
#endif
                pthread_mutex_lock(&hcardAccess);
                PSCHCardRec hcard = hcardFirst;
                while (hcard)
                {
                        if (hcard->hCard == hCard)
                        {
                                dwAttrLen = strlen(hcard->vendor);
                                memcpy(pbAttr, hcard->vendor, dwAttrLen);
                                rv = SCARD_S_SUCCESS;
                                break;
                        }
                        hcard = hcard->next;
                }
                pthread_mutex_unlock(&hcardAccess);
#ifdef WITH_SCARD_DEBUG
                printf("[0x%.8x]\n", (unsigned int) rv);
#endif
        }

        if (rv != SCARD_S_SUCCESS)
        {
#ifdef WITH_SCARD_DEBUG
                printf("<--ERROR SCardGetAttrib Code=0x%.8x-->\n", (unsigned int) rv);
#endif
                return SC_returnCode(rv, &lcHandle, in, out);
        }
        else
        {
#ifdef WITH_SCARD_DEBUG
                printf("<--SUCCESS SCardGetAttrib-->\n");
                printf("[LENGTH %d]\n", (unsigned int) dwAttrLen);
                printf("+++++++++++++++++++++\n");
                hexdump(pbAttr, dwAttrLen);
                printf("+++++++++++++++++++++\n");
#endif
                out_uint32_le(out, dwAttrLen);
                out_uint32_le(out, 0x00000200);
                out_uint32_le(out, dwAttrLen);
                if (!pbAttr)
                {
                        out_uint8s(out, dwAttrLen);
                }
                else
                {
                        out_uint8p(out, pbAttr, dwAttrLen);
                }
                outRepos(out, dwAttrLen);
                out_uint32_le(out, 0x00000000);
        }
        outForceAllignment(out, 8);
        return rv;
}

static MYPCSC_DWORD
TS_SCardSetAttrib(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hCard;
        MYPCSC_SCARDCONTEXT myHCard;
        SERVER_DWORD dwAttrId;
        SERVER_DWORD dwAttrLen;
        unsigned char *pbAttr;
        PMEM_HANDLE lcHandle = NULL;

        in->p += 0x20;
        in_uint32_le(in, dwAttrId);
        in->p += 0x04;
        in_uint32_le(in, dwAttrLen);
        in->p += 0x0C;
        in_uint32_le(in, hCard);
        myHCard = scHandleToMyPCSC(hCard);

        dwAttrId = dwAttrId & 0x0000FFFF;

#ifdef WITH_SCARD_DEBUG
        printf("[hCard = 0x%.8x]\n", (unsigned int) hCard);
        printf("[myHCard 0x%.8x]\n", (unsigned int) myHCard);
        printf("[dwAttrId = 0x%.8x]\n", (unsigned int) dwAttrId);
        printf("[dwAttrLen = 0x%.8x]\n", (unsigned int) dwAttrLen);
#endif

        if (dwAttrLen > MAX_BUFFER_SIZE)
                dwAttrLen = MAX_BUFFER_SIZE;

        pbAttr = SC_xmalloc(&lcHandle, dwAttrLen);
        if (!pbAttr)
                return SC_returnNoMemoryError(&lcHandle, in, out);

        in_uint8a(in, pbAttr, dwAttrLen);
        rv = SCardSetAttrib(myHCard, (MYPCSC_DWORD) dwAttrId, pbAttr, (MYPCSC_DWORD) dwAttrLen);

#ifdef WITH_SCARD_DEBUG
        if (rv)
                printf("<--ERROR SCardSetAttrib Code=0x%.8x-->\n", (unsigned int) rv);
        else
                printf("<--SUCCESS SCardSetAttrib-->\n");
#endif
        out_uint32_le(out, 0x00000000);
        out_uint32_le(out, 0x00000200);
        out_uint32_le(out, 0x00000000);
        out_uint32_le(out, 0x00000000);
        outForceAllignment(out, 8);
        SC_xfreeallmemory(&lcHandle);
        return rv;
}

#endif

static MYPCSC_DWORD
TS_SCardControl(STREAM in, STREAM out)
{
        MYPCSC_DWORD rv;
        SERVER_SCARDCONTEXT hContext;
        SERVER_SCARDHANDLE hCard;
        MYPCSC_SCARDHANDLE myHCard;
        SERVER_DWORD map[3];
        SERVER_DWORD dwControlCode;
        char *pInBuffer, *pOutBuffer;
        SERVER_DWORD nInBufferSize, nOutBufferSize, nOutBufferRealSize, nBytesReturned;
        MYPCSC_DWORD sc_nBytesReturned;
        PMEM_HANDLE lcHandle = NULL;

        pInBuffer = NULL;
        pOutBuffer = NULL;

        in->p += 0x14;
        in_uint32_le(in, map[0]);
        in->p += 0x04;
        in_uint32_le(in, map[1]);
        in_uint32_le(in, dwControlCode);
        in_uint32_le(in, nInBufferSize);
        in_uint32_le(in, map[2]);
        in->p += 0x04;
        in_uint32_le(in, nOutBufferSize);
        in->p += 0x04;
        in_uint32_le(in, hContext);
        in->p += 0x04;
        in_uint32_le(in, hCard);
        if (map[2] & INPUT_LINKED)
        {
                /* read real input size */
                in_uint32_le(in, nInBufferSize);
                pInBuffer = SC_xmalloc(&lcHandle, nInBufferSize);
                if (!pInBuffer)
                        return SC_returnNoMemoryError(&lcHandle, in, out);
                in_uint8a(in, pInBuffer, nInBufferSize);
        }

#if 0
        if (nOutBufferSize > 0)
        {
                nOutBufferRealSize = nOutBufferSize;
        }
        else
#endif
                nOutBufferRealSize = 1024;

        nBytesReturned = nOutBufferRealSize;

        nBytesReturned = nOutBufferRealSize;
        pOutBuffer = SC_xmalloc(&lcHandle, nOutBufferRealSize);
        if (!pOutBuffer)
                return SC_returnNoMemoryError(&lcHandle, in, out);

#ifdef WITH_SCARD_DEBUG
        printf("[hContext = 0x%.8x]\n", (unsigned int) hContext);
        printf("[hCard = 0x%.8x]\n", (unsigned int) hCard);
        printf("[dwControlCode = 0x%.8x]\n", (unsigned int) dwControlCode);
        printf("[nInBufferSize  = %d]\n", (unsigned int) nInBufferSize);
        printf("[nOutBufferSize  = %d]\n", (unsigned int) nOutBufferSize);
        if (nInBufferSize > 0)
        {
                printf("[In buffer]\n");
                hexdump((unsigned char *) pInBuffer, nInBufferSize);
        }
        printf("---> Calling SCardControl\n");
#endif

#ifdef WITH_PCSC120
        sc_nBytesReturned = nBytesReturned;
        myHCard = scHandleToMyPCSC(hCard);
        rv = SCardControl(myHCard, pInBuffer, (MYPCSC_DWORD) nInBufferSize, pOutBuffer,
                          &sc_nBytesReturned);
        nBytesReturned = sc_nBytesReturned;
#else
        sc_nBytesReturned = nBytesReturned;
        myHCard = scHandleToMyPCSC(hCard);
        rv = SCardControl(myHCard, (MYPCSC_DWORD) dwControlCode, pInBuffer,
                          (MYPCSC_DWORD) nInBufferSize, pOutBuffer,
                          (MYPCSC_DWORD) nOutBufferRealSize, &sc_nBytesReturned);
        nBytesReturned = sc_nBytesReturned;
#endif

#ifdef WITH_SCARD_DEBUG
        if (rv != SCARD_S_SUCCESS)
                printf("<--ERROR SCardControl Code=0x%.8x-->\n", (unsigned int) rv);
        else
        {
                printf("<--SUCCESS SCardControl-->\n");
                printf("[LENGTH %d]\n", (unsigned int) nBytesReturned);
                printf("+++++++++++++++++++++\n");
                hexdump((unsigned char *) pOutBuffer, nBytesReturned);
                printf("+++++++++++++++++++++\n");
        }
#endif

        out_uint32_le(out, nBytesReturned);
        out_uint32_le(out, 0x00000004);
        out_uint32_le(out, nBytesReturned);
        if (nBytesReturned > 0)
        {
                out_uint8p(out, pOutBuffer, nBytesReturned);
                outRepos(out, nBytesReturned);
        }

        outForceAllignment(out, 8);
        SC_xfreeallmemory(&lcHandle);
        return rv;
}

static MYPCSC_DWORD
TS_SCardAccessStartedEvent(STREAM in, STREAM out)
{
        out_uint8s(out, 8);
        return SCARD_S_SUCCESS;
}


static NTSTATUS
scard_device_control(NTHANDLE handle, uint32 request, STREAM in, STREAM out)
{
        SERVER_DWORD Result = 0x00000000;
        unsigned char *psize, *pend, *pStatusCode;
        SERVER_DWORD addToEnd = 0;

#ifdef WITH_SCARD_DEBUG
        unsigned char *pbeg = out->p;
        printf("--------------------------------\n");
        printf("[NTHANDLE %08X]\n", handle);
        printf("[REQUEST %08X]\n", request);
        printf("[INPUT DUMP]--------------------\n");
        hexdump(in->p, in->end - in->p);
#endif
        /* Processing request */

        out_uint32_le(out, 0x00081001); /* Header lines */
        out_uint32_le(out, 0xCCCCCCCC);
        psize = out->p;
        out_uint32_le(out, 0x00000000); /* Size of data portion */
        out_uint32_le(out, 0x00000000); /* Zero bytes (may be usefull) */
        pStatusCode = out->p;
        out_uint32_le(out, 0x00000000); /* Status Code */

        switch (request)
        {
                        /* SCardEstablishContext */
                case SC_ESTABLISH_CONTEXT:
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardEstablishContext--->\n");
#endif
                                Result = (SERVER_DWORD) TS_SCardEstablishContext(in, out);
                                break;
                        }
                        /* SCardReleaseContext */
                case SC_RELEASE_CONTEXT:
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardReleaseContext--->\n");
#endif
                                Result = (SERVER_DWORD) TS_SCardReleaseContext(in, out);
                                break;
                        }
                        /* SCardIsValidContext */
                case SC_IS_VALID_CONTEXT:
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardIsValidContext--->\n");
#endif
                                Result = (SERVER_DWORD) TS_SCardIsValidContext(in, out);
                                break;
                        }
                        /* SCardListReaders */
                case SC_LIST_READERS:   /* SCardListReadersA */
                case SC_LIST_READERS + 4:       /* SCardListReadersW */
                        {
                                BOOL wide = request != SC_LIST_READERS;
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardListReaders---> (%s)\n",
                                       (wide) ? ("WIDE") : ("ASCII"));
#endif
                                Result = (SERVER_DWORD) TS_SCardListReaders(in, out, wide);
                                break;
                        }
                        /* ScardConnect */
                case SC_CONNECT:        /* ScardConnectA */
                case SC_CONNECT + 4:    /* SCardConnectW */
                        {
                                BOOL wide = request != SC_CONNECT;
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardConnect---> (%s)\n",
                                       (wide) ? ("WIDE") : ("ASCII"));
#endif
                                Result = (SERVER_DWORD) TS_SCardConnect(in, out, wide);
                                break;
                        }
                        /* ScardReconnect */
                case SC_RECONNECT:
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardReconnect--->\n");
#endif
                                Result = (SERVER_DWORD) TS_SCardReconnect(in, out);
                                break;
                        }
                        /* ScardDisconnect */
                case SC_DISCONNECT:
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardDisconnect--->\n");
#endif
                                Result = (SERVER_DWORD) TS_SCardDisconnect(in, out);
                                break;
                        }
                        /* ScardGetStatusChange */
                case SC_GET_STATUS_CHANGE:      /* SCardGetStatusChangeA */
                case SC_GET_STATUS_CHANGE + 4:  /* SCardGetStatusChangeW */
                        {
                                BOOL wide = request != SC_GET_STATUS_CHANGE;
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardGetStatusChange---> (%s)\n",
                                       (wide) ? ("WIDE") : ("ASCII"));
#endif
                                Result = (SERVER_DWORD) TS_SCardGetStatusChange(in, out, wide);
                                break;
                        }
                        /* SCardCancel */
                case SC_CANCEL:
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardCancel--->\n");
#endif
                                Result = (SERVER_DWORD) TS_SCardCancel(in, out);
                                break;
                        }
                        /* SCardLocateCardsByATR */
                case SC_LOCATE_CARDS_BY_ATR:    /* SCardLocateCardsByATRA */
                case SC_LOCATE_CARDS_BY_ATR + 4:        /* SCardLocateCardsByATRW */
                        {
                                BOOL wide = request != SC_LOCATE_CARDS_BY_ATR;
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardLocateCardsByATR---> (%s)\n",
                                       (wide) ? ("WIDE") : ("ASCII"));
#endif
                                Result = (SERVER_DWORD) TS_SCardLocateCardsByATR(in, out, wide);
                                break;
                        }
                        /* SCardBeginTransaction */
                case SC_BEGIN_TRANSACTION:
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardBeginTransaction--->\n");
#endif
                                Result = (SERVER_DWORD) TS_SCardBeginTransaction(in, out);
                                break;
                        }
                        /* SCardBeginTransaction */
                case SC_END_TRANSACTION:
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardEndTransaction--->\n");
#endif
                                Result = (SERVER_DWORD) TS_SCardEndTransaction(in, out);
                                break;
                        }
                        /* ScardTransmit */
                case SC_TRANSMIT:
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardTransmit--->\n");
#endif
                                Result = (SERVER_DWORD) TS_SCardTransmit(in, out);
                                break;
                        }
                        /* SCardControl */
                case SC_CONTROL:
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardControl--->\n");
#endif
                                Result = (SERVER_DWORD) TS_SCardControl(in, out);
                                break;
                        }
                        /* SCardGetAttrib */
#ifndef WITH_PCSC120
                case SC_GETATTRIB:
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardGetAttrib--->\n");
#endif
                                Result = (SERVER_DWORD) TS_SCardGetAttrib(in, out);
                                break;
                        }
#endif
                case SC_ACCESS_STARTED_EVENT:
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardAccessStartedEvent-->\n");
#endif
                                Result = (SERVER_DWORD) TS_SCardAccessStartedEvent(in, out);
                                break;
                        }
                case SC_STATUS: /* SCardStatusA */
                case SC_STATUS + 4:     /* SCardStatusW */
                        {
                                BOOL wide = request != SC_STATUS;
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardStatus---> (%s)\n", (wide) ? ("WIDE") : ("ASCII"));
#endif
                                Result = (SERVER_DWORD) TS_SCardStatus(in, out, wide);
                                break;
                        }
                case SC_STATE:  /* SCardState */
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---SCardState--->");
#endif
                                Result = (SERVER_DWORD) TS_SCardState(in, out);
                                break;
                        }
                default:
                        {
#ifdef WITH_SCARD_DEBUG
                                printf("<---UNSUPPORTED-FUNC--->\n");
#endif
                                Result = 0x80100014;
                                out_uint8s(out, 256);
                                break;
                        }
        }

#if 0
        out_uint32_le(out, 0x00000000);
#endif
        /* Setting modified variables */
        pend = out->p;
        /* setting data size */
        out->p = psize;
        out_uint32_le(out, pend - psize - 16);
        /* setting status code */
        out->p = pStatusCode;
        out_uint32_le(out, Result);
        /* finish */
        out->p = pend;

        addToEnd = (pend - pStatusCode) % 16;
        if (addToEnd < 16 && addToEnd > 0)
        {
                out_uint8s(out, addToEnd);
        }

#ifdef WITH_SCARD_DEBUG
        printf("[OUTPUT DUMP]-------------------\n");
        hexdump(pbeg, (size_t) (out->p) - (size_t) pbeg);
        printf("--------------------------------\n");
#endif
        return STATUS_SUCCESS;
}

/* Thread functions */

static STREAM
duplicateStream(PMEM_HANDLE * handle, STREAM s, uint32 buffer_size, BOOL isInputStream)
{
        STREAM d = SC_xmalloc(handle, sizeof(struct stream));
        if (d != NULL)
        {
                if (isInputStream)
                        d->size = (size_t) (s->end) - (size_t) (s->data);
                else if (buffer_size < s->size)
                        d->size = s->size;
                else
                        d->size = buffer_size;

                d->data = SC_xmalloc(handle, d->size);

                d->end = (void *) ((size_t) (d->data) + (size_t) (s->end) - (size_t) (s->data));
                d->p = (void *) ((size_t) (d->data) + (size_t) (s->p) - (size_t) (s->data));
                d->iso_hdr =
                        (void *) ((size_t) (d->data) + (size_t) (s->iso_hdr) - (size_t) (s->data));
                d->mcs_hdr =
                        (void *) ((size_t) (d->data) + (size_t) (s->mcs_hdr) - (size_t) (s->data));
                d->sec_hdr =
                        (void *) ((size_t) (d->data) + (size_t) (s->sec_hdr) - (size_t) (s->data));
                d->sec_hdr =
                        (void *) ((size_t) (d->data) + (size_t) (s->sec_hdr) - (size_t) (s->data));
                d->rdp_hdr =
                        (void *) ((size_t) (d->data) + (size_t) (s->rdp_hdr) - (size_t) (s->data));
                d->channel_hdr =
                        (void *) ((size_t) (d->data) + (size_t) (s->channel_hdr) -
                                  (size_t) (s->data));
                if (isInputStream)
                        memcpy(d->data, s->data, (size_t) (s->end) - (size_t) (s->data));
                else
                        memcpy(d->data, s->data, (size_t) (s->p) - (size_t) (s->data));
        }
        return d;
}

static void
freeStream(PMEM_HANDLE * handle, STREAM s)
{
        if (s != NULL)
        {
                if (s->data != NULL)
                        SC_xfree(handle, s->data);
                SC_xfree(handle, s);
        }
}

static PSCThreadData
SC_addToQueue(NTHANDLE handle, uint32 request, STREAM in, STREAM out)
{
        PMEM_HANDLE lcHandle = NULL;
        PSCThreadData data = SC_xmalloc(&lcHandle, sizeof(TSCThreadData));

        if (!data)
                return NULL;
        else
        {
                data->memHandle = lcHandle;
                data->device = curDevice;
                data->id = curId;
                data->handle = handle;
                data->request = request;
                data->in = duplicateStream(&(data->memHandle), in, 0, SC_TRUE);
                if (data->in == NULL)
                {
                        SC_xfreeallmemory(&(data->memHandle));
                        return NULL;
                }
                data->out =
                        duplicateStream(&(data->memHandle), out, OUT_STREAM_SIZE + curBytesOut,
                                        SC_FALSE);
                if (data->out == NULL)
                {
                        SC_xfreeallmemory(&(data->memHandle));
                        return NULL;
                }
                data->next = NULL;

                pthread_mutex_lock(&queueAccess);

                if (queueLast)
                        queueLast->next = data;
                queueLast = data;
                if (!queueFirst)
                        queueFirst = data;

                pthread_mutex_unlock(&queueEmpty);
                pthread_mutex_unlock(&queueAccess);
        }
        return data;
}

static void
SC_destroyThreadData(PSCThreadData data)
{
        if (data)
        {
                PMEM_HANDLE handle = data->memHandle;
                SC_xfreeallmemory(&handle);
        }
}

static PSCThreadData
SC_getNextInQueue()
{
        PSCThreadData Result = NULL;
        pthread_mutex_lock(&queueAccess);
        if (queueFirst != NULL)
        {
                Result = queueFirst;
                queueFirst = queueFirst->next;
                if (!queueFirst)
                {
                        queueLast = NULL;
                        pthread_mutex_trylock(&queueEmpty);
                }
                Result->next = NULL;
        }
        pthread_mutex_unlock(&queueAccess);
        return Result;
}

static void
SC_deviceControl(PSCThreadData data)
{
        size_t buffer_len = 0;
        scard_device_control(data->handle, data->request, data->in, data->out);
        buffer_len = (size_t) data->out->p - (size_t) data->out->data;
#if 0
        pthread_mutex_lock(&sendControl);
#endif
        rdpdr_send_completion(data->device, data->id, 0, buffer_len, data->out->data, buffer_len);
#if 0
        pthread_mutex_unlock(&sendControl);
#endif
        SC_destroyThreadData(data);
}


static void *
thread_function(PThreadListElement listElement)
{
#ifdef WITH_SCARD_DEBUG
        long sTime = 0;
#endif
        if ((listElement != NULL) && (listElement->data != NULL))
        {
                while (1)
                {
#ifdef WITH_SCARD_DEBUG
                        sTime = time(NULL);
#endif
                        pthread_mutex_lock(&listElement->nodata);
                        SC_deviceControl(listElement->data);
                        listElement->data = NULL;
#ifdef WITH_SCARD_DEBUG
                        printf("[HANDLING TIME %d]\n", (int) (time(NULL) - sTime));
#endif
                        pthread_mutex_unlock(&listElement->busy);
                }
        }
        pthread_exit(NULL);
        return NULL;
}

static void
SC_handleRequest(PSCThreadData data)
{
        int Result = 0;
        PThreadListElement cur = threadList, last = threadList;

#ifdef WITH_SCARD_DEBUG
        printf("[THREAD COUNT %d]\n", threadCount);
#endif

        while (cur)
        {
                if (0 == pthread_mutex_trylock(&cur->busy))
                {
                        cur->data = data;
                        pthread_mutex_unlock(&cur->nodata);
                        return;
                }
                else
                {
                        last = cur;
                        cur = cur->next;
                }
        }

        cur = SC_xmalloc(&threadListHandle, sizeof(TThreadListElement));
        if (!cur)
                return;

        threadCount++;

        cur->next = NULL;
        pthread_mutex_init(&cur->busy, NULL);
        pthread_mutex_init(&cur->nodata, NULL);
        pthread_mutex_trylock(&cur->busy);
        cur->data = data;
        pthread_mutex_unlock(&cur->nodata);

        Result = pthread_create(&cur->thread, NULL, (void *(*)(void *)) thread_function, cur);
        if (0 != Result)
        {
                printf("[THREAD CREATE ERROR 0x%.8x]\n", Result);
                SC_xfree(&threadListHandle, cur);
                SC_destroyThreadData(data);
                data = NULL;
        }
        else if (last)
                last->next = cur;
        else
                threadList = cur;
}

static void *
queue_handler_function(void *data)
{
        PSCThreadData cur_data = NULL;
        while (1)
        {
                cur_data = SC_getNextInQueue();
                if (cur_data != NULL)
                {
                        switch (cur_data->request)
                        {
                                case SC_ESTABLISH_CONTEXT:
                                case SC_RELEASE_CONTEXT:
                                        {
                                                SC_deviceControl(cur_data);
                                                break;
                                        }
                                default:
                                        {
                                                SC_handleRequest(cur_data);
                                                break;
                                        }
                        }
                        cur_data = NULL;
                }
                else
                        pthread_mutex_lock(&queueEmpty);
        }
        return NULL;
}

static NTSTATUS
thread_wrapper(NTHANDLE handle, uint32 request, STREAM in, STREAM out)
{
        if (SC_addToQueue(handle, request, in, out))
                return STATUS_PENDING | 0xC0000000;
        else
                return STATUS_NO_SUCH_FILE;
}

DEVICE_FNS scard_fns = {
        scard_create,
        scard_close,
        scard_read,
        scard_write,
        thread_wrapper
};
#endif /* MAKE_PROTO */

void
scard_tcp_lock(void)
{
        if (!tcp_sendcontrol_mutex)
        {
                tcp_sendcontrol_mutex = (pthread_mutex_t *) malloc(sizeof(pthread_mutex_t));
                pthread_mutex_init(tcp_sendcontrol_mutex, NULL);
        }

        pthread_mutex_lock(tcp_sendcontrol_mutex);
}

void
scard_tcp_unlock(void)
{
        pthread_mutex_unlock(tcp_sendcontrol_mutex);
}

STREAM
scard_tcp_init(void)
{
        STREAM result = NULL;

        result = &out[cur_stream_id];
        cur_stream_id = (cur_stream_id + 1) % STREAM_COUNT;

        return result;
}

void
scard_tcp_connect(void)
{
        int i;

        for (i = 0; i < STREAM_COUNT; i++)
        {
                out[i].size = 4096;
                out[i].data = (uint8 *) xmalloc(out[i].size);
        }
}

void
scard_tcp_reset_state(void)
{
        int i;
        struct stream *p;

        for (i = 0, p = out; i < STREAM_COUNT; i++, p++)
        {
                if (p->data != NULL)
                        xfree(p->data);
                p->p = NULL;
                p->end = NULL;
                p->data = NULL;
                p->size = 0;
                p->iso_hdr = NULL;
                p->mcs_hdr = NULL;
                p->sec_hdr = NULL;
                p->rdp_hdr = NULL;
                p->channel_hdr = NULL;
        }
}