0773bb9303
If sec pointer isn't invalidated after creation it is not possible to check if the upper and lower pointers are valid. This fixes a segfault in the server part if the client disconnects before the authentication was finished.
441 lines
10 KiB
C
441 lines
10 KiB
C
/**
|
|
* FreeRDP: A Remote Desktop Protocol Implementation
|
|
* RDP Server Peer
|
|
*
|
|
* Copyright 2011 Vic Lee
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
#include "config.h"
|
|
#endif
|
|
|
|
#include <winpr/crt.h>
|
|
|
|
#include "certificate.h"
|
|
|
|
#include <freerdp/utils/tcp.h>
|
|
|
|
#include "peer.h"
|
|
|
|
static BOOL freerdp_peer_initialize(freerdp_peer* client)
|
|
{
|
|
client->context->rdp->settings->ServerMode = TRUE;
|
|
client->context->rdp->settings->FrameAcknowledge = 0;
|
|
client->context->rdp->settings->LocalConnection = client->local;
|
|
client->context->rdp->state = CONNECTION_STATE_INITIAL;
|
|
|
|
if (client->context->rdp->settings->RdpKeyFile != NULL)
|
|
{
|
|
client->context->rdp->settings->RdpServerRsaKey =
|
|
key_new(client->context->rdp->settings->RdpKeyFile);
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
static BOOL freerdp_peer_get_fds(freerdp_peer* client, void** rfds, int* rcount)
|
|
{
|
|
rfds[*rcount] = (void*)(long)(client->context->rdp->transport->TcpIn->sockfd);
|
|
(*rcount)++;
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
static BOOL freerdp_peer_check_fds(freerdp_peer* client)
|
|
{
|
|
int status;
|
|
rdpRdp* rdp;
|
|
|
|
rdp = client->context->rdp;
|
|
|
|
status = rdp_check_fds(rdp);
|
|
|
|
if (status < 0)
|
|
return FALSE;
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
static BOOL peer_recv_data_pdu(freerdp_peer* client, wStream* s)
|
|
{
|
|
BYTE type;
|
|
UINT16 length;
|
|
UINT32 share_id;
|
|
BYTE compressed_type;
|
|
UINT16 compressed_len;
|
|
|
|
if (!rdp_read_share_data_header(s, &length, &type, &share_id, &compressed_type, &compressed_len))
|
|
return FALSE;
|
|
|
|
switch (type)
|
|
{
|
|
case DATA_PDU_TYPE_SYNCHRONIZE:
|
|
if (!rdp_recv_client_synchronize_pdu(client->context->rdp, s))
|
|
return FALSE;
|
|
break;
|
|
|
|
case DATA_PDU_TYPE_CONTROL:
|
|
if (!rdp_server_accept_client_control_pdu(client->context->rdp, s))
|
|
return FALSE;
|
|
break;
|
|
|
|
case DATA_PDU_TYPE_INPUT:
|
|
if (!input_recv(client->context->rdp->input, s))
|
|
return FALSE;
|
|
break;
|
|
|
|
case DATA_PDU_TYPE_BITMAP_CACHE_PERSISTENT_LIST:
|
|
/* TODO: notify server bitmap cache data */
|
|
break;
|
|
|
|
case DATA_PDU_TYPE_FONT_LIST:
|
|
|
|
if (!rdp_server_accept_client_font_list_pdu(client->context->rdp, s))
|
|
return FALSE;
|
|
|
|
if (!client->connected)
|
|
{
|
|
/**
|
|
* PostConnect should only be called once and should not be called
|
|
* after a reactivation sequence.
|
|
*/
|
|
|
|
IFCALLRET(client->PostConnect, client->connected, client);
|
|
|
|
if (!client->connected)
|
|
return FALSE;
|
|
}
|
|
|
|
if (!client->activated)
|
|
{
|
|
/* Activate will be called everytime after the client is activated/reactivated. */
|
|
|
|
IFCALLRET(client->Activate, client->activated, client);
|
|
|
|
if (!client->activated)
|
|
return FALSE;
|
|
}
|
|
|
|
break;
|
|
|
|
case DATA_PDU_TYPE_SHUTDOWN_REQUEST:
|
|
mcs_send_disconnect_provider_ultimatum(client->context->rdp->mcs);
|
|
return FALSE;
|
|
|
|
case DATA_PDU_TYPE_FRAME_ACKNOWLEDGE:
|
|
if(Stream_GetRemainingLength(s) < 4)
|
|
return FALSE;
|
|
Stream_Read_UINT32(s, client->ack_frame_id);
|
|
IFCALL(client->update->SurfaceFrameAcknowledge, client->update->context, client->ack_frame_id);
|
|
break;
|
|
|
|
case DATA_PDU_TYPE_REFRESH_RECT:
|
|
if (!update_read_refresh_rect(client->update, s))
|
|
return FALSE;
|
|
break;
|
|
|
|
case DATA_PDU_TYPE_SUPPRESS_OUTPUT:
|
|
if (!update_read_suppress_output(client->update, s))
|
|
return FALSE;
|
|
break;
|
|
|
|
default:
|
|
fprintf(stderr, "Data PDU type %d\n", type);
|
|
break;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
static int peer_recv_tpkt_pdu(freerdp_peer* client, wStream* s)
|
|
{
|
|
rdpRdp* rdp;
|
|
UINT16 length;
|
|
UINT16 pduType;
|
|
UINT16 pduLength;
|
|
UINT16 pduSource;
|
|
UINT16 channelId;
|
|
UINT16 securityFlags;
|
|
|
|
rdp = client->context->rdp;
|
|
|
|
if (!rdp_read_header(rdp, s, &length, &channelId))
|
|
{
|
|
fprintf(stderr, "Incorrect RDP header.\n");
|
|
return -1;
|
|
}
|
|
|
|
if (rdp->settings->DisableEncryption)
|
|
{
|
|
if (!rdp_read_security_header(s, &securityFlags))
|
|
return -1;
|
|
|
|
if (securityFlags & SEC_ENCRYPT)
|
|
{
|
|
if (!rdp_decrypt(rdp, s, length - 4, securityFlags))
|
|
{
|
|
fprintf(stderr, "rdp_decrypt failed\n");
|
|
return -1;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (channelId != MCS_GLOBAL_CHANNEL_ID)
|
|
{
|
|
if(!freerdp_channel_peer_process(client, s, channelId))
|
|
return -1;
|
|
}
|
|
else
|
|
{
|
|
if (!rdp_read_share_control_header(s, &pduLength, &pduType, &pduSource))
|
|
return -1;
|
|
|
|
client->settings->PduSource = pduSource;
|
|
|
|
switch (pduType)
|
|
{
|
|
case PDU_TYPE_DATA:
|
|
if (!peer_recv_data_pdu(client, s))
|
|
return -1;
|
|
break;
|
|
|
|
default:
|
|
fprintf(stderr, "Client sent pduType %d\n", pduType);
|
|
return -1;
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int peer_recv_fastpath_pdu(freerdp_peer* client, wStream* s)
|
|
{
|
|
rdpRdp* rdp;
|
|
UINT16 length;
|
|
rdpFastPath* fastpath;
|
|
|
|
rdp = client->context->rdp;
|
|
fastpath = rdp->fastpath;
|
|
//if (!fastpath_read_header_rdp(fastpath, s, &length))
|
|
// return -1;
|
|
|
|
fastpath_read_header_rdp(fastpath, s, &length);
|
|
|
|
if ((length == 0) || (length > Stream_GetRemainingLength(s)))
|
|
{
|
|
fprintf(stderr, "incorrect FastPath PDU header length %d\n", length);
|
|
return -1;
|
|
}
|
|
|
|
if (fastpath->encryptionFlags & FASTPATH_OUTPUT_ENCRYPTED)
|
|
{
|
|
if (!rdp_decrypt(rdp, s, length, (fastpath->encryptionFlags & FASTPATH_OUTPUT_SECURE_CHECKSUM) ? SEC_SECURE_CHECKSUM : 0))
|
|
return -1;
|
|
}
|
|
|
|
return fastpath_recv_inputs(fastpath, s);
|
|
}
|
|
|
|
static int peer_recv_pdu(freerdp_peer* client, wStream* s)
|
|
{
|
|
if (tpkt_verify_header(s))
|
|
return peer_recv_tpkt_pdu(client, s);
|
|
else
|
|
return peer_recv_fastpath_pdu(client, s);
|
|
}
|
|
|
|
static int peer_recv_callback(rdpTransport* transport, wStream* s, void* extra)
|
|
{
|
|
freerdp_peer* client = (freerdp_peer*) extra;
|
|
rdpRdp* rdp = client->context->rdp;
|
|
|
|
switch (rdp->state)
|
|
{
|
|
case CONNECTION_STATE_INITIAL:
|
|
if (!rdp_server_accept_nego(rdp, s))
|
|
return -1;
|
|
|
|
if (rdp->nego->selected_protocol & PROTOCOL_NLA)
|
|
{
|
|
sspi_CopyAuthIdentity(&client->identity, &(rdp->nego->transport->credssp->identity));
|
|
IFCALLRET(client->Logon, client->authenticated, client, &client->identity, TRUE);
|
|
credssp_free(rdp->nego->transport->credssp);
|
|
rdp->nego->transport->credssp = NULL;
|
|
}
|
|
else
|
|
{
|
|
IFCALLRET(client->Logon, client->authenticated, client, &client->identity, FALSE);
|
|
}
|
|
|
|
break;
|
|
|
|
case CONNECTION_STATE_NEGO:
|
|
if (!rdp_server_accept_mcs_connect_initial(rdp, s))
|
|
return -1;
|
|
break;
|
|
|
|
case CONNECTION_STATE_MCS_CONNECT:
|
|
if (!rdp_server_accept_mcs_erect_domain_request(rdp, s))
|
|
return -1;
|
|
break;
|
|
|
|
case CONNECTION_STATE_MCS_ERECT_DOMAIN:
|
|
if (!rdp_server_accept_mcs_attach_user_request(rdp, s))
|
|
return -1;
|
|
break;
|
|
|
|
case CONNECTION_STATE_MCS_ATTACH_USER:
|
|
if (!rdp_server_accept_mcs_channel_join_request(rdp, s))
|
|
return -1;
|
|
break;
|
|
|
|
case CONNECTION_STATE_MCS_CHANNEL_JOIN:
|
|
if (rdp->settings->DisableEncryption)
|
|
{
|
|
if (!rdp_server_accept_client_keys(rdp, s))
|
|
return -1;
|
|
break;
|
|
}
|
|
rdp->state = CONNECTION_STATE_ESTABLISH_KEYS;
|
|
/* FALLTHROUGH */
|
|
|
|
case CONNECTION_STATE_ESTABLISH_KEYS:
|
|
if (!rdp_server_accept_client_info(rdp, s))
|
|
return -1;
|
|
|
|
IFCALL(client->Capabilities, client);
|
|
|
|
if (!rdp_send_demand_active(rdp))
|
|
return -1;
|
|
break;
|
|
|
|
case CONNECTION_STATE_LICENSE:
|
|
if (!rdp_server_accept_confirm_active(rdp, s))
|
|
{
|
|
/**
|
|
* During reactivation sequence the client might sent some input or channel data
|
|
* before receiving the Deactivate All PDU. We need to process them as usual.
|
|
*/
|
|
Stream_SetPosition(s, 0);
|
|
return peer_recv_pdu(client, s);
|
|
}
|
|
break;
|
|
|
|
case CONNECTION_STATE_ACTIVE:
|
|
if (peer_recv_pdu(client, s) < 0)
|
|
return -1;
|
|
break;
|
|
|
|
default:
|
|
fprintf(stderr, "Invalid state %d\n", rdp->state);
|
|
return -1;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static BOOL freerdp_peer_close(freerdp_peer* client)
|
|
{
|
|
/**
|
|
* [MS-RDPBCGR] 1.3.1.4.2 User-Initiated Disconnection Sequence on Server
|
|
* The server first sends the client a Deactivate All PDU followed by an
|
|
* optional MCS Disconnect Provider Ultimatum PDU.
|
|
*/
|
|
if (!rdp_send_deactivate_all(client->context->rdp))
|
|
return FALSE;
|
|
return mcs_send_disconnect_provider_ultimatum(client->context->rdp->mcs);
|
|
}
|
|
|
|
static void freerdp_peer_disconnect(freerdp_peer* client)
|
|
{
|
|
transport_disconnect(client->context->rdp->transport);
|
|
}
|
|
|
|
static int freerdp_peer_send_channel_data(freerdp_peer* client, int channelId, BYTE* data, int size)
|
|
{
|
|
return rdp_send_channel_data(client->context->rdp, channelId, data, size);
|
|
}
|
|
|
|
void freerdp_peer_context_new(freerdp_peer* client)
|
|
{
|
|
rdpRdp* rdp;
|
|
|
|
rdp = rdp_new(NULL);
|
|
client->input = rdp->input;
|
|
client->update = rdp->update;
|
|
client->settings = rdp->settings;
|
|
|
|
client->context = (rdpContext*) malloc(client->ContextSize);
|
|
ZeroMemory(client->context, client->ContextSize);
|
|
|
|
client->context->rdp = rdp;
|
|
client->context->peer = client;
|
|
client->context->input = client->input;
|
|
client->context->update = client->update;
|
|
client->context->settings = client->settings;
|
|
|
|
client->update->context = client->context;
|
|
client->input->context = client->context;
|
|
|
|
update_register_server_callbacks(client->update);
|
|
|
|
transport_attach(rdp->transport, client->sockfd);
|
|
|
|
rdp->transport->ReceiveCallback = peer_recv_callback;
|
|
rdp->transport->ReceiveExtra = client;
|
|
transport_set_blocking_mode(rdp->transport, FALSE);
|
|
|
|
IFCALL(client->ContextNew, client, client->context);
|
|
}
|
|
|
|
void freerdp_peer_context_free(freerdp_peer* client)
|
|
{
|
|
IFCALL(client->ContextFree, client, client->context);
|
|
}
|
|
|
|
freerdp_peer* freerdp_peer_new(int sockfd)
|
|
{
|
|
freerdp_peer* client;
|
|
|
|
client = (freerdp_peer*) malloc(sizeof(freerdp_peer));
|
|
ZeroMemory(client, sizeof(freerdp_peer));
|
|
|
|
freerdp_tcp_set_no_delay(sockfd, TRUE);
|
|
|
|
if (client != NULL)
|
|
{
|
|
client->sockfd = sockfd;
|
|
client->ContextSize = sizeof(rdpContext);
|
|
client->Initialize = freerdp_peer_initialize;
|
|
client->GetFileDescriptor = freerdp_peer_get_fds;
|
|
client->CheckFileDescriptor = freerdp_peer_check_fds;
|
|
client->Close = freerdp_peer_close;
|
|
client->Disconnect = freerdp_peer_disconnect;
|
|
client->SendChannelData = freerdp_peer_send_channel_data;
|
|
}
|
|
|
|
return client;
|
|
}
|
|
|
|
void freerdp_peer_free(freerdp_peer* client)
|
|
{
|
|
if (client)
|
|
{
|
|
rdp_free(client->context->rdp);
|
|
free(client->context);
|
|
free(client);
|
|
}
|
|
}
|