Coverage Report

Created: 2024-09-08 06:16

/src/FreeRDP/libfreerdp/common/assistance.c
Line
Count
Source (jump to first uncovered line)
1
/**
2
 * FreeRDP: A Remote Desktop Protocol Implementation
3
 * Remote Assistance
4
 *
5
 * Copyright 2014 Marc-Andre Moreau <marcandre.moreau@gmail.com>
6
 *
7
 * Licensed under the Apache License, Version 2.0 (the "License");
8
 * you may not use this file except in compliance with the License.
9
 * You may obtain a copy of the License at
10
 *
11
 *     http://www.apache.org/licenses/LICENSE-2.0
12
 *
13
 * Unless required by applicable law or agreed to in writing, software
14
 * distributed under the License is distributed on an "AS IS" BASIS,
15
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16
 * See the License for the specific language governing permissions and
17
 * limitations under the License.
18
 */
19
20
#include <freerdp/config.h>
21
22
#include <errno.h>
23
24
#include <winpr/wtypes.h>
25
#include <winpr/collections.h>
26
#include <winpr/string.h>
27
#include <winpr/crt.h>
28
#include <winpr/crypto.h>
29
#include <winpr/print.h>
30
#include <winpr/windows.h>
31
#include <winpr/ssl.h>
32
#include <winpr/file.h>
33
34
#include <freerdp/log.h>
35
#include <freerdp/client/file.h>
36
#include <freerdp/client/cmdline.h>
37
38
#include <freerdp/assistance.h>
39
40
#include "../core/settings.h"
41
42
#define TAG FREERDP_TAG("common")
43
44
struct rdp_assistance_file
45
{
46
  UINT32 Type;
47
48
  char* Username;
49
  char* LHTicket;
50
  char* RCTicket;
51
  char* PassStub;
52
  UINT32 DtStart;
53
  UINT32 DtLength;
54
  BOOL LowSpeed;
55
  BOOL RCTicketEncrypted;
56
57
  char* ConnectionString1;
58
  char* ConnectionString2;
59
60
  BYTE* EncryptedPassStub;
61
  size_t EncryptedPassStubLength;
62
63
  BYTE* EncryptedLHTicket;
64
  size_t EncryptedLHTicketLength;
65
66
  wArrayList* MachineAddresses;
67
  wArrayList* MachinePorts;
68
  wArrayList* MachineUris;
69
70
  char* RASessionId;
71
  char* RASpecificParams;
72
  char* RASpecificParams2;
73
74
  char* filename;
75
  char* password;
76
};
77
78
static const char* strrstr(const char* haystack, size_t len, const char* needle)
79
0
{
80
0
  if (*needle == '\0')
81
0
    return haystack;
82
83
0
  char* result = NULL;
84
0
  for (;;)
85
0
  {
86
0
    char* p = strstr(haystack, needle);
87
0
    if (p == NULL)
88
0
      break;
89
0
    if (p > haystack + len)
90
0
      return NULL;
91
92
0
    result = p;
93
0
    haystack = p + 1;
94
0
  }
95
96
0
  return result;
97
0
}
98
99
static BOOL update_option(char** opt, const char* val, size_t len)
100
0
{
101
0
  WINPR_ASSERT(opt);
102
0
  free(*opt);
103
0
  *opt = NULL;
104
105
0
  if (!val && (len != 0))
106
0
    return FALSE;
107
0
  else if (!val && (len == 0))
108
0
    return TRUE;
109
0
  *opt = strndup(val, len);
110
0
  return *opt != NULL;
111
0
}
112
113
static BOOL update_name(rdpAssistanceFile* file, const char* name)
114
0
{
115
0
  WINPR_ASSERT(file);
116
117
0
  if (!name)
118
0
  {
119
0
    WLog_ERR(TAG, "ASSISTANCE file %s invalid name", name);
120
0
    return FALSE;
121
0
  }
122
123
0
  free(file->filename);
124
0
  file->filename = _strdup(name);
125
0
  return file->filename != NULL;
126
0
}
127
128
static BOOL update_password(rdpAssistanceFile* file, const char* password)
129
0
{
130
0
  WINPR_ASSERT(file);
131
0
  free(file->password);
132
0
  file->password = NULL;
133
0
  if (!password)
134
0
    return TRUE;
135
0
  file->password = _strdup(password);
136
0
  return file->password != NULL;
137
0
}
138
139
static BOOL update_connectionstring2_nocopy(rdpAssistanceFile* file, char* str)
140
0
{
141
0
  WINPR_ASSERT(file);
142
0
  free(file->ConnectionString2);
143
0
  file->ConnectionString2 = NULL;
144
0
  if (!str)
145
0
    return TRUE;
146
0
  file->ConnectionString2 = str;
147
0
  return file->ConnectionString2 != NULL;
148
0
}
149
150
static BOOL update_connectionstring2(rdpAssistanceFile* file, const char* str, size_t len)
151
0
{
152
0
  char* strc = NULL;
153
0
  if (!str && (len != 0))
154
0
    return FALSE;
155
156
0
  if (str && (len > 0))
157
0
  {
158
0
    strc = strndup(str, len);
159
0
    if (!strc)
160
0
      return FALSE;
161
0
  }
162
0
  return update_connectionstring2_nocopy(file, strc);
163
0
}
164
165
static BOOL update_connectionstring2_wchar(rdpAssistanceFile* file, const WCHAR* str, size_t len)
166
0
{
167
0
  char* strc = NULL;
168
169
0
  if (!str && (len != 0))
170
0
    return FALSE;
171
172
0
  if (str && (len > 0))
173
0
  {
174
0
    strc = ConvertWCharNToUtf8Alloc(str, len, NULL);
175
0
    if (!strc)
176
0
      return FALSE;
177
0
  }
178
0
  return update_connectionstring2_nocopy(file, strc);
179
0
}
180
181
/**
182
 * Password encryption in establishing a remote assistance session of type 1:
183
 * http://blogs.msdn.com/b/openspecification/archive/2011/10/31/password-encryption-in-establishing-a-remote-assistance-session-of-type-1.aspx
184
 *
185
 * Creation of PassStub for the Remote Assistance Ticket:
186
 * http://social.msdn.microsoft.com/Forums/en-US/6316c3f4-ea09-4343-a4a1-9cca46d70d28/creation-of-passstub-for-the-remote-assistance-ticket?forum=os_windowsprotocols
187
 */
188
189
/**
190
 * CryptDeriveKey Function:
191
 * http://msdn.microsoft.com/en-us/library/windows/desktop/aa379916/
192
 *
193
 * Let n be the required derived key length, in bytes.
194
 * The derived key is the first n bytes of the hash value after the hash computation
195
 * has been completed by CryptDeriveKey. If the hash is not a member of the SHA-2
196
 * family and the required key is for either 3DES or AES, the key is derived as follows:
197
 *
198
 * Form a 64-byte buffer by repeating the constant 0x36 64 times.
199
 * Let k be the length of the hash value that is represented by the input parameter hBaseData.
200
 * Set the first k bytes of the buffer to the result of an XOR operation of the first k bytes
201
 * of the buffer with the hash value that is represented by the input parameter hBaseData.
202
 *
203
 * Form a 64-byte buffer by repeating the constant 0x5C 64 times.
204
 * Set the first k bytes of the buffer to the result of an XOR operation of the first k bytes
205
 * of the buffer with the hash value that is represented by the input parameter hBaseData.
206
 *
207
 * Hash the result of step 1 by using the same hash algorithm as that used to compute the hash
208
 * value that is represented by the hBaseData parameter.
209
 *
210
 * Hash the result of step 2 by using the same hash algorithm as that used to compute the hash
211
 * value that is represented by the hBaseData parameter.
212
 *
213
 * Concatenate the result of step 3 with the result of step 4.
214
 * Use the first n bytes of the result of step 5 as the derived key.
215
 */
216
217
static BOOL freerdp_assistance_crypt_derive_key_sha1(const BYTE* hash, size_t hashLength, BYTE* key,
218
                                                     size_t keyLength)
219
0
{
220
0
  BOOL rc = FALSE;
221
0
  BYTE pad1[64] = { 0 };
222
0
  BYTE pad2[64] = { 0 };
223
224
0
  memset(pad1, 0x36, sizeof(pad1));
225
0
  memset(pad2, 0x5C, sizeof(pad2));
226
227
0
  for (size_t i = 0; i < hashLength; i++)
228
0
  {
229
0
    pad1[i] ^= hash[i];
230
0
    pad2[i] ^= hash[i];
231
0
  }
232
233
0
  BYTE* buffer = (BYTE*)calloc(hashLength, 2);
234
235
0
  if (!buffer)
236
0
    goto fail;
237
238
0
  if (!winpr_Digest(WINPR_MD_SHA1, pad1, 64, buffer, hashLength))
239
0
    goto fail;
240
241
0
  if (!winpr_Digest(WINPR_MD_SHA1, pad2, 64, &buffer[hashLength], hashLength))
242
0
    goto fail;
243
244
0
  CopyMemory(key, buffer, keyLength);
245
0
  rc = TRUE;
246
0
fail:
247
0
  free(buffer);
248
0
  return rc;
249
0
}
250
251
static BOOL append_address_to_list(wArrayList* MachineAddresses, const char* str, size_t len)
252
0
{
253
0
  char* copy = NULL;
254
0
  if (len > 0)
255
0
    copy = strndup(str, len);
256
0
  if (!copy)
257
0
    return FALSE;
258
259
0
  const BOOL rc = ArrayList_Append(MachineAddresses, copy);
260
0
  if (!rc)
261
0
    free(copy);
262
  // NOLINTNEXTLINE(clang-analyzer-unix.Malloc): ArrayList_Append takes ownership of copy
263
0
  return rc;
264
0
}
265
266
static BOOL append_address(rdpAssistanceFile* file, const char* host, const char* port)
267
0
{
268
0
  WINPR_ASSERT(file);
269
270
0
  errno = 0;
271
0
  unsigned long p = strtoul(port, NULL, 0);
272
273
0
  if ((errno != 0) || (p == 0) || (p > UINT16_MAX))
274
0
  {
275
0
    WLog_ERR(TAG, "Failed to parse ASSISTANCE file: ConnectionString2 invalid port value %s",
276
0
             port);
277
0
    return FALSE;
278
0
  }
279
280
0
  if (!append_address_to_list(file->MachineAddresses, host, host ? strlen(host) : 0))
281
0
    return FALSE;
282
0
  return ArrayList_Append(file->MachinePorts, (void*)(uintptr_t)p);
283
0
}
284
285
static BOOL freerdp_assistance_parse_address_list(rdpAssistanceFile* file, char* list)
286
0
{
287
0
  WINPR_ASSERT(file);
288
289
0
  WLog_DBG(TAG, "freerdp_assistance_parse_address_list list=%s", list);
290
291
0
  BOOL rc = FALSE;
292
293
0
  if (!list)
294
0
    return FALSE;
295
296
0
  char* strp = list;
297
0
  char* s = ";";
298
299
  // get the first token
300
0
  char* token = strtok(strp, s);
301
302
  // walk through other tokens
303
0
  while (token != NULL)
304
0
  {
305
0
    char* port = strchr(token, ':');
306
0
    if (!port)
307
0
      goto out;
308
0
    *port = '\0';
309
0
    port++;
310
311
0
    if (!append_address(file, token, port))
312
0
      goto out;
313
314
0
    token = strtok(NULL, s);
315
0
  }
316
0
  rc = TRUE;
317
0
out:
318
0
  return rc;
319
0
}
320
321
static BOOL freerdp_assistance_parse_connection_string1(rdpAssistanceFile* file)
322
0
{
323
0
  char* tokens[8] = { 0 };
324
0
  BOOL rc = FALSE;
325
326
0
  WINPR_ASSERT(file);
327
328
0
  if (!file->RCTicket)
329
0
    return FALSE;
330
331
  /**
332
   * <ProtocolVersion>,<protocolType>,<machineAddressList>,<assistantAccountPwd>,
333
   * <RASessionID>,<RASessionName>,<RASessionPwd>,<protocolSpecificParms>
334
   */
335
0
  char* str = _strdup(file->RCTicket);
336
337
0
  if (!str)
338
0
    goto error;
339
340
0
  const size_t length = strlen(str);
341
342
0
  int count = 1;
343
0
  for (size_t i = 0; i < length; i++)
344
0
  {
345
0
    if (str[i] == ',')
346
0
      count++;
347
0
  }
348
349
0
  if (count != 8)
350
0
    goto error;
351
352
0
  count = 0;
353
0
  tokens[count++] = str;
354
355
0
  for (size_t i = 0; i < length; i++)
356
0
  {
357
0
    if (str[i] == ',')
358
0
    {
359
0
      str[i] = '\0';
360
0
      tokens[count++] = &str[i + 1];
361
0
    }
362
0
  }
363
364
0
  if (strcmp(tokens[0], "65538") != 0)
365
0
    goto error;
366
367
0
  if (strcmp(tokens[1], "1") != 0)
368
0
    goto error;
369
370
0
  if (strcmp(tokens[3], "*") != 0)
371
0
    goto error;
372
373
0
  if (strcmp(tokens[5], "*") != 0)
374
0
    goto error;
375
376
0
  if (strcmp(tokens[6], "*") != 0)
377
0
    goto error;
378
379
0
  file->RASessionId = _strdup(tokens[4]);
380
381
0
  if (!file->RASessionId)
382
0
    goto error;
383
384
0
  file->RASpecificParams = _strdup(tokens[7]);
385
386
0
  if (!file->RASpecificParams)
387
0
    goto error;
388
389
0
  if (!freerdp_assistance_parse_address_list(file, tokens[2]))
390
0
    goto error;
391
392
0
  rc = TRUE;
393
0
error:
394
0
  free(str);
395
0
  return rc;
396
0
}
397
398
/**
399
 * Decrypted Connection String 2:
400
 *
401
 * <E>
402
 * <A KH="BNRjdu97DyczQSRuMRrDWoue+HA="
403
 * ID="+ULZ6ifjoCa6cGPMLQiGHRPwkg6VyJqGwxMnO6GcelwUh9a6/FBq3It5ADSndmLL"/> <C> <T ID="1" SID="0"> <L
404
 * P="49228" N="fe80::1032:53d9:5a01:909b%3"/> <L P="49229" N="fe80::3d8f:9b2d:6b4e:6aa%6"/> <L
405
 * P="49230" N="192.168.1.200"/> <L P="49231" N="169.254.6.170"/>
406
 * </T>
407
 * </C>
408
 * </E>
409
 */
410
411
static BOOL freerdp_assistance_parse_attr(const char** opt, size_t* plength, const char* key,
412
                                          const char* tag)
413
0
{
414
0
  WINPR_ASSERT(opt);
415
0
  WINPR_ASSERT(plength);
416
0
  WINPR_ASSERT(key);
417
418
0
  *opt = NULL;
419
0
  *plength = 0;
420
0
  if (!tag)
421
0
    return FALSE;
422
423
0
  char bkey[128] = { 0 };
424
0
  const int rc = _snprintf(bkey, sizeof(bkey), "%s=\"", key);
425
0
  WINPR_ASSERT(rc > 0);
426
0
  WINPR_ASSERT((size_t)rc < sizeof(bkey));
427
428
0
  char* p = strstr(tag, bkey);
429
0
  if (!p)
430
0
    return TRUE;
431
432
0
  p += strlen(bkey);
433
0
  char* q = strchr(p, '"');
434
435
0
  if (!q)
436
0
  {
437
0
    WLog_ERR(TAG, "Failed to parse ASSISTANCE file: ConnectionString2 invalid field '%s=%s'",
438
0
             key, p);
439
0
    return FALSE;
440
0
  }
441
442
0
  if (p > q)
443
0
  {
444
0
    WLog_ERR(TAG,
445
0
             "Failed to parse ASSISTANCE file: ConnectionString2 invalid field "
446
0
             "order for '%s'",
447
0
             key);
448
0
    return FALSE;
449
0
  }
450
0
  const size_t length = q - p;
451
0
  *opt = p;
452
0
  *plength = length;
453
454
0
  return TRUE;
455
0
}
456
457
static BOOL freerdp_assistance_parse_attr_str(char** opt, const char* key, const char* tag)
458
0
{
459
0
  const char* copt = NULL;
460
0
  size_t size = 0;
461
0
  if (!freerdp_assistance_parse_attr(&copt, &size, key, tag))
462
0
    return FALSE;
463
0
  return update_option(opt, copt, size);
464
0
}
465
466
static BOOL freerdp_assistance_parse_attr_bool(BOOL* opt, const char* key, const char* tag)
467
0
{
468
0
  const char* copt = NULL;
469
0
  size_t size = 0;
470
471
0
  WINPR_ASSERT(opt);
472
0
  *opt = FALSE;
473
474
0
  if (!freerdp_assistance_parse_attr(&copt, &size, key, tag))
475
0
    return FALSE;
476
0
  if (size != 1)
477
0
    return TRUE;
478
479
0
  *opt = (copt[0] == '1');
480
0
  return TRUE;
481
0
}
482
483
static BOOL freerdp_assistance_parse_attr_uint32(UINT32* opt, const char* key, const char* tag)
484
0
{
485
0
  const char* copt = NULL;
486
0
  size_t size = 0;
487
488
0
  WINPR_ASSERT(opt);
489
0
  *opt = 0;
490
491
0
  if (!freerdp_assistance_parse_attr(&copt, &size, key, tag))
492
0
    return FALSE;
493
494
0
  char buffer[64] = { 0 };
495
0
  if (size >= sizeof(buffer))
496
0
  {
497
0
    WLog_WARN(TAG, "Invalid UINT32 string '%s' [%" PRIuz "]", copt, size);
498
0
    return FALSE;
499
0
  }
500
501
0
  strncpy(buffer, copt, size);
502
0
  errno = 0;
503
0
  unsigned long val = strtoul(buffer, NULL, 0);
504
505
0
  if ((errno != 0) || (val > UINT32_MAX))
506
0
  {
507
0
    WLog_ERR(TAG, "Failed to parse ASSISTANCE file: Invalid value %s", buffer);
508
0
    return FALSE;
509
0
  }
510
511
0
  *opt = val;
512
513
0
  return TRUE;
514
0
}
515
516
static char* freerdp_assistance_contains_element(char* input, size_t ilen, const char* key,
517
                                                 size_t* plen, char** pdata, size_t* pdlen)
518
0
{
519
0
  WINPR_ASSERT(input);
520
0
  WINPR_ASSERT(key);
521
0
  WINPR_ASSERT(plen);
522
523
0
  char bkey[128] = { 0 };
524
0
  const int rc = _snprintf(bkey, sizeof(bkey), "<%s", key);
525
0
  WINPR_ASSERT(rc > 0);
526
0
  WINPR_ASSERT((size_t)rc < sizeof(bkey));
527
528
0
  char* tag = strstr(input, bkey);
529
0
  if (!tag || (tag > input + ilen))
530
0
    return NULL;
531
532
0
  char* data = tag + strnlen(bkey, sizeof(bkey));
533
534
  /* Ensure there is a valid delimiter following our token */
535
0
  switch (data[0])
536
0
  {
537
0
    case '>':
538
0
    case '/':
539
0
    case ' ':
540
0
    case '\t':
541
0
      break;
542
0
    default:
543
0
      WLog_ERR(TAG,
544
0
               "Failed to parse ASSISTANCE file: ConnectionString2 missing delimiter after "
545
0
               "field %s",
546
0
               bkey);
547
0
      return NULL;
548
0
  }
549
550
0
  char* start = strstr(tag, ">");
551
552
0
  if (!start || (start > input + ilen))
553
0
  {
554
0
    WLog_ERR(TAG, "Failed to parse ASSISTANCE file: ConnectionString2 missing field %s", bkey);
555
0
    return NULL;
556
0
  }
557
558
0
  const char* end = start;
559
0
  const char* dend = start - 1;
560
0
  if (*dend != '/')
561
0
  {
562
0
    char ekey[128] = { 0 };
563
0
    const int erc = _snprintf(ekey, sizeof(ekey), "</%s>", key);
564
0
    WINPR_ASSERT(erc > 0);
565
0
    WINPR_ASSERT((size_t)erc < sizeof(ekey));
566
0
    const size_t offset = start - tag;
567
0
    dend = end = strrstr(start, ilen - offset, ekey);
568
0
    if (end)
569
0
      end += strnlen(ekey, sizeof(ekey));
570
0
  }
571
572
0
  if (!end)
573
0
  {
574
0
    WLog_ERR(TAG,
575
0
             "Failed to parse ASSISTANCE file: ConnectionString2 missing end tag for field %s",
576
0
             key);
577
0
    return NULL;
578
0
  }
579
0
  if (plen)
580
0
    *plen = end - tag;
581
582
0
  if (pdata)
583
0
    *pdata = data;
584
0
  if (pdlen)
585
0
    *pdlen = dend - data;
586
0
  return tag;
587
0
}
588
589
/**! \brief this function returns a XML element identified by \b key
590
 * The input string will be manipulated, so that the element found is '\0' terminated.
591
 *
592
 * This function can not find multiple elements on the same level as the input string is changed!
593
 */
594
static BOOL freerdp_assistance_consume_input_and_get_element(char* input, const char* key,
595
                                                             char** element, size_t* elen)
596
0
{
597
0
  WINPR_ASSERT(input);
598
0
  WINPR_ASSERT(key);
599
0
  WINPR_ASSERT(element);
600
0
  WINPR_ASSERT(elen);
601
602
0
  size_t len = 0;
603
0
  size_t dlen = 0;
604
0
  char* data = NULL;
605
0
  char* tag = freerdp_assistance_contains_element(input, strlen(input), key, &len, &data, &dlen);
606
0
  if (!tag)
607
0
    return FALSE;
608
609
0
  char* end = data + dlen;
610
0
  *tag = '\0';
611
0
  *end = '\0';
612
0
  *element = data;
613
0
  *elen = dlen + 1;
614
0
  return TRUE;
615
0
}
616
617
static BOOL freerdp_assistance_get_element(char* input, size_t ilen, const char* key,
618
                                           char** element, size_t* elen)
619
0
{
620
0
  WINPR_ASSERT(input);
621
0
  WINPR_ASSERT(key);
622
0
  WINPR_ASSERT(element);
623
0
  WINPR_ASSERT(elen);
624
625
0
  size_t len = 0;
626
0
  size_t dlen = 0;
627
0
  char* data = NULL;
628
0
  char* tag = freerdp_assistance_contains_element(input, ilen, key, &len, &data, &dlen);
629
0
  if (!tag)
630
0
    return FALSE;
631
632
0
  if (tag + len > input + ilen)
633
0
    return FALSE;
634
635
0
  char* end = tag + len;
636
0
  *element = data;
637
0
  *elen = end - data + 1;
638
0
  return TRUE;
639
0
}
640
641
static BOOL freerdp_assistance_parse_all_elements_of(rdpAssistanceFile* file, char* data,
642
                                                     size_t len, const char* key,
643
                                                     BOOL (*fkt)(rdpAssistanceFile* file,
644
                                                                 char* data, size_t len))
645
0
{
646
0
  char* val = NULL;
647
0
  size_t vlen = 0;
648
649
0
  while (freerdp_assistance_get_element(data, len, key, &val, &vlen))
650
0
  {
651
0
    data = val + vlen;
652
0
    len = strnlen(data, len);
653
0
    if (vlen > 0)
654
0
    {
655
0
      val[vlen - 1] = '\0';
656
657
0
      if (!fkt(file, val, vlen))
658
0
        return FALSE;
659
0
    }
660
0
  }
661
662
0
  return TRUE;
663
0
}
664
665
static BOOL freerdp_assistance_parse_all_elements_of_l(rdpAssistanceFile* file, char* data,
666
                                                       size_t len)
667
0
{
668
0
  UINT32 p = 0;
669
0
  const char* n = NULL;
670
0
  const char* u = NULL;
671
0
  size_t nlen = 0;
672
0
  size_t ulen = 0;
673
0
  if (!freerdp_assistance_parse_attr_uint32(&p, "P", data))
674
0
    return FALSE;
675
0
  if (!freerdp_assistance_parse_attr(&n, &nlen, "N", data))
676
0
    return FALSE;
677
0
  if (!freerdp_assistance_parse_attr(&u, &ulen, "U", data))
678
0
    return FALSE;
679
680
0
  if (n && (nlen > 0))
681
0
  {
682
0
    if (!append_address_to_list(file->MachineAddresses, n, nlen))
683
0
      return FALSE;
684
0
    if (!ArrayList_Append(file->MachinePorts, (void*)(uintptr_t)p))
685
0
      return FALSE;
686
0
  }
687
0
  if (u && (ulen > 0))
688
0
  {
689
0
    if (!append_address_to_list(file->MachineAddresses, u, ulen))
690
0
      return FALSE;
691
0
    if (!ArrayList_Append(file->MachinePorts, (void*)(uintptr_t)p))
692
0
      return FALSE;
693
0
  }
694
0
  return TRUE;
695
0
}
696
697
static BOOL freerdp_assistance_parse_all_elements_of_t(rdpAssistanceFile* file, char* data,
698
                                                       size_t len)
699
0
{
700
0
  UINT32 id = 0;
701
0
  UINT32 sid = 0;
702
0
  if (!freerdp_assistance_parse_attr_uint32(&id, "ID", data))
703
0
    return FALSE;
704
0
  if (!freerdp_assistance_parse_attr_uint32(&sid, "SID", data))
705
0
    return FALSE;
706
0
  WLog_DBG(TAG, "transport id=%" PRIu32 ", sid=%" PRIu32, id, sid);
707
0
  return freerdp_assistance_parse_all_elements_of(file, data, len, "L",
708
0
                                                  freerdp_assistance_parse_all_elements_of_l);
709
0
}
710
711
static BOOL freerdp_assistance_parse_all_elements_of_c(rdpAssistanceFile* file, char* data,
712
                                                       size_t len)
713
0
{
714
0
  return freerdp_assistance_parse_all_elements_of(file, data, len, "T",
715
0
                                                  freerdp_assistance_parse_all_elements_of_t);
716
0
}
717
718
static BOOL freerdp_assistance_parse_find_elements_of_c(rdpAssistanceFile* file, char* data,
719
                                                        size_t len)
720
0
{
721
0
  return freerdp_assistance_parse_all_elements_of(file, data, len, "C",
722
0
                                                  freerdp_assistance_parse_all_elements_of_c);
723
0
}
724
725
static BOOL freerdp_assistance_parse_connection_string2(rdpAssistanceFile* file)
726
0
{
727
0
  BOOL rc = FALSE;
728
729
0
  WINPR_ASSERT(file);
730
731
0
  if (!file->ConnectionString2)
732
0
    return FALSE;
733
734
0
  char* str = _strdup(file->ConnectionString2);
735
0
  if (!str)
736
0
    goto out_fail;
737
738
0
  char* e = NULL;
739
0
  size_t elen = 0;
740
0
  if (!freerdp_assistance_consume_input_and_get_element(str, "E", &e, &elen))
741
0
    goto out_fail;
742
743
0
  if (!e || (elen == 0))
744
0
    goto out_fail;
745
746
0
  char* a = NULL;
747
0
  size_t alen = 0;
748
0
  if (!freerdp_assistance_get_element(e, elen, "A", &a, &alen))
749
0
    goto out_fail;
750
751
0
  if (!a || (alen == 0))
752
0
    goto out_fail;
753
754
0
  if (!freerdp_assistance_parse_find_elements_of_c(file, e, elen))
755
0
    goto out_fail;
756
757
  /* '\0' terminate the detected XML elements so
758
   * the parser can continue with terminated strings
759
   */
760
0
  a[alen] = '\0';
761
0
  if (!freerdp_assistance_parse_attr_str(&file->RASpecificParams, "KH", a))
762
0
    goto out_fail;
763
764
0
  if (!freerdp_assistance_parse_attr_str(&file->RASpecificParams2, "KH2", a))
765
0
    goto out_fail;
766
767
0
  if (!freerdp_assistance_parse_attr_str(&file->RASessionId, "ID", a))
768
0
    goto out_fail;
769
770
0
  rc = TRUE;
771
0
out_fail:
772
0
  free(str);
773
0
  return rc;
774
0
}
775
776
char* freerdp_assistance_construct_expert_blob(const char* name, const char* pass)
777
0
{
778
0
  size_t size = 0;
779
0
  size_t nameLength = 0;
780
0
  size_t passLength = 0;
781
0
  char* ExpertBlob = NULL;
782
783
0
  if (!name || !pass)
784
0
    return NULL;
785
786
0
  nameLength = strlen(name) + strlen("NAME=");
787
0
  passLength = strlen(pass) + strlen("PASS=");
788
0
  size = nameLength + passLength + 64;
789
0
  ExpertBlob = (char*)calloc(1, size);
790
791
0
  if (!ExpertBlob)
792
0
    return NULL;
793
794
0
  (void)sprintf_s(ExpertBlob, size, "%" PRIdz ";NAME=%s%" PRIdz ";PASS=%s", nameLength, name,
795
0
                  passLength, pass);
796
0
  return ExpertBlob;
797
0
}
798
799
char* freerdp_assistance_generate_pass_stub(DWORD flags)
800
0
{
801
0
  UINT32 nums[14];
802
0
  char* passStub = NULL;
803
0
  char set1[64] = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789*_";
804
0
  char set2[12] = "!@#$&^*()-+=";
805
0
  char set3[10] = "0123456789";
806
0
  char set4[26] = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
807
0
  char set5[26] = "abcdefghijklmnopqrstuvwxyz";
808
0
  passStub = (char*)malloc(15);
809
810
0
  if (!passStub)
811
0
    return NULL;
812
813
  /**
814
   * PassStub generation:
815
   *
816
   * Characters 0 and 5-13 are from the set A-Z a-z 0-9 * _
817
   * Character 1 is from the set !@#$&^*()-+=
818
   * Character 2 is from the set 0-9
819
   * Character 3 is from the set A-Z
820
   * Character 4 is from the set a-z
821
   *
822
   * Example: WB^6HsrIaFmEpi
823
   */
824
0
  winpr_RAND(nums, sizeof(nums));
825
0
  passStub[0] = set1[nums[0] % sizeof(set1)];   /* character 0 */
826
0
  passStub[1] = set2[nums[1] % sizeof(set2)];   /* character 1 */
827
0
  passStub[2] = set3[nums[2] % sizeof(set3)];   /* character 2 */
828
0
  passStub[3] = set4[nums[3] % sizeof(set4)];   /* character 3 */
829
0
  passStub[4] = set5[nums[4] % sizeof(set5)];   /* character 4 */
830
0
  passStub[5] = set1[nums[5] % sizeof(set1)];   /* character 5 */
831
0
  passStub[6] = set1[nums[6] % sizeof(set1)];   /* character 6 */
832
0
  passStub[7] = set1[nums[7] % sizeof(set1)];   /* character 7 */
833
0
  passStub[8] = set1[nums[8] % sizeof(set1)];   /* character 8 */
834
0
  passStub[9] = set1[nums[9] % sizeof(set1)];   /* character 9 */
835
0
  passStub[10] = set1[nums[10] % sizeof(set1)]; /* character 10 */
836
0
  passStub[11] = set1[nums[11] % sizeof(set1)]; /* character 11 */
837
0
  passStub[12] = set1[nums[12] % sizeof(set1)]; /* character 12 */
838
0
  passStub[13] = set1[nums[13] % sizeof(set1)]; /* character 13 */
839
0
  passStub[14] = '\0';
840
0
  return passStub;
841
0
}
842
843
BYTE* freerdp_assistance_encrypt_pass_stub(const char* password, const char* passStub,
844
                                           size_t* pEncryptedSize)
845
0
{
846
0
  BOOL rc = 0;
847
0
  size_t cbPasswordW = 0;
848
0
  size_t cbPassStubW = 0;
849
0
  size_t EncryptedSize = 0;
850
0
  BYTE PasswordHash[WINPR_MD5_DIGEST_LENGTH];
851
0
  WINPR_CIPHER_CTX* rc4Ctx = NULL;
852
0
  BYTE* pbIn = NULL;
853
0
  BYTE* pbOut = NULL;
854
0
  size_t cbOut = 0;
855
0
  size_t cbIn = 0;
856
0
  size_t cbFinal = 0;
857
0
  WCHAR* PasswordW = ConvertUtf8ToWCharAlloc(password, &cbPasswordW);
858
0
  WCHAR* PassStubW = ConvertUtf8ToWCharAlloc(passStub, &cbPassStubW);
859
860
0
  if (!PasswordW || !PassStubW)
861
0
    goto fail;
862
863
0
  cbPasswordW = (cbPasswordW) * sizeof(WCHAR);
864
0
  cbPassStubW = (cbPassStubW) * sizeof(WCHAR);
865
0
  if (!winpr_Digest(WINPR_MD_MD5, (BYTE*)PasswordW, cbPasswordW, (BYTE*)PasswordHash,
866
0
                    sizeof(PasswordHash)))
867
0
    goto fail;
868
869
0
  EncryptedSize = cbPassStubW + 4;
870
0
  pbIn = (BYTE*)calloc(1, EncryptedSize);
871
0
  pbOut = (BYTE*)calloc(1, EncryptedSize);
872
873
0
  if (!pbIn || !pbOut)
874
0
    goto fail;
875
876
0
  *((UINT32*)pbIn) = (UINT32)cbPassStubW;
877
0
  CopyMemory(&pbIn[4], PassStubW, cbPassStubW);
878
0
  rc4Ctx = winpr_Cipher_New(WINPR_CIPHER_ARC4_128, WINPR_ENCRYPT, PasswordHash, NULL);
879
880
0
  if (!rc4Ctx)
881
0
  {
882
0
    WLog_ERR(TAG, "winpr_Cipher_New failure");
883
0
    goto fail;
884
0
  }
885
886
0
  cbOut = cbFinal = 0;
887
0
  cbIn = EncryptedSize;
888
0
  rc = winpr_Cipher_Update(rc4Ctx, pbIn, cbIn, pbOut, &cbOut);
889
890
0
  if (!rc)
891
0
  {
892
0
    WLog_ERR(TAG, "winpr_Cipher_Update failure");
893
0
    goto fail;
894
0
  }
895
896
0
  if (!winpr_Cipher_Final(rc4Ctx, pbOut + cbOut, &cbFinal))
897
0
  {
898
0
    WLog_ERR(TAG, "winpr_Cipher_Final failure");
899
0
    goto fail;
900
0
  }
901
902
0
  winpr_Cipher_Free(rc4Ctx);
903
0
  free(pbIn);
904
0
  free(PasswordW);
905
0
  free(PassStubW);
906
0
  *pEncryptedSize = EncryptedSize;
907
0
  return pbOut;
908
0
fail:
909
0
  winpr_Cipher_Free(rc4Ctx);
910
0
  free(PasswordW);
911
0
  free(PassStubW);
912
0
  free(pbIn);
913
0
  free(pbOut);
914
0
  return NULL;
915
0
}
916
917
static BOOL freerdp_assistance_decrypt2(rdpAssistanceFile* file)
918
0
{
919
0
  BOOL rc = FALSE;
920
0
  int status = 0;
921
0
  size_t cbPasswordW = 0;
922
0
  size_t cchOutW = 0;
923
0
  WINPR_CIPHER_CTX* aesDec = NULL;
924
0
  WCHAR* PasswordW = NULL;
925
0
  BYTE* pbIn = NULL;
926
0
  BYTE* pbOut = NULL;
927
0
  size_t cbOut = 0;
928
0
  size_t cbIn = 0;
929
0
  size_t cbFinal = 0;
930
0
  BYTE DerivedKey[WINPR_AES_BLOCK_SIZE] = { 0 };
931
0
  BYTE InitializationVector[WINPR_AES_BLOCK_SIZE] = { 0 };
932
0
  BYTE PasswordHash[WINPR_SHA1_DIGEST_LENGTH] = { 0 };
933
934
0
  WINPR_ASSERT(file);
935
936
0
  if (!file->password)
937
0
    return FALSE;
938
939
0
  PasswordW = ConvertUtf8ToWCharAlloc(file->password, &cbPasswordW);
940
0
  if (!PasswordW)
941
0
  {
942
0
    WLog_ERR(TAG, "Failed to parse ASSISTANCE file: Conversion from UCS2 to UTF8 failed");
943
0
    return FALSE;
944
0
  }
945
946
0
  cbPasswordW = (cbPasswordW) * sizeof(WCHAR);
947
948
0
  if (!winpr_Digest(WINPR_MD_SHA1, (BYTE*)PasswordW, cbPasswordW, PasswordHash,
949
0
                    sizeof(PasswordHash)))
950
0
    goto fail;
951
952
0
  if (!freerdp_assistance_crypt_derive_key_sha1(PasswordHash, sizeof(PasswordHash), DerivedKey,
953
0
                                                sizeof(DerivedKey)))
954
0
    goto fail;
955
956
0
  aesDec =
957
0
      winpr_Cipher_New(WINPR_CIPHER_AES_128_CBC, WINPR_DECRYPT, DerivedKey, InitializationVector);
958
959
0
  if (!aesDec)
960
0
    goto fail;
961
962
0
  cbOut = cbFinal = 0;
963
0
  cbIn = file->EncryptedLHTicketLength;
964
0
  pbIn = file->EncryptedLHTicket;
965
0
  pbOut = (BYTE*)calloc(1, cbIn + WINPR_AES_BLOCK_SIZE + 2);
966
967
0
  if (!pbOut)
968
0
    goto fail;
969
970
0
  if (!winpr_Cipher_Update(aesDec, pbIn, cbIn, pbOut, &cbOut))
971
0
    goto fail;
972
973
0
  if (!winpr_Cipher_Final(aesDec, pbOut + cbOut, &cbFinal))
974
0
  {
975
0
    WLog_ERR(TAG, "winpr_Cipher_Final failure");
976
0
    goto fail;
977
0
  }
978
979
0
  cbOut += cbFinal;
980
0
  cbFinal = 0;
981
982
0
  union
983
0
  {
984
0
    const WCHAR* wc;
985
0
    const BYTE* b;
986
0
  } cnv;
987
988
0
  cnv.b = pbOut;
989
0
  cchOutW = cbOut / sizeof(WCHAR);
990
991
0
  if (!update_connectionstring2_wchar(file, cnv.wc, cchOutW))
992
0
  {
993
0
    WLog_ERR(TAG, "Failed to parse ASSISTANCE file: Conversion from UCS2 to UTF8 failed");
994
0
    goto fail;
995
0
  }
996
997
0
  if (!freerdp_assistance_parse_connection_string2(file))
998
0
    goto fail;
999
1000
0
  rc = TRUE;
1001
0
fail:
1002
0
  winpr_Cipher_Free(aesDec);
1003
0
  free(PasswordW);
1004
0
  free(pbOut);
1005
0
  WLog_DBG(TAG, "freerdp_assistance_parse_connection_string2: %d", status);
1006
0
  return rc;
1007
0
}
1008
1009
BYTE* freerdp_assistance_hex_string_to_bin(const void* raw, size_t* size)
1010
259
{
1011
259
  BYTE* buffer = NULL;
1012
259
  if (!raw || !size)
1013
0
    return NULL;
1014
259
  *size = 0;
1015
259
  const size_t length = strlen(raw);
1016
259
  buffer = calloc(length, sizeof(BYTE));
1017
259
  if (!buffer)
1018
0
    return NULL;
1019
259
  const size_t rc = winpr_HexStringToBinBuffer(raw, length, buffer, length);
1020
259
  if (rc == 0)
1021
1
  {
1022
1
    free(buffer);
1023
1
    return NULL;
1024
1
  }
1025
258
  *size = rc;
1026
258
  return buffer;
1027
259
}
1028
1029
char* freerdp_assistance_bin_to_hex_string(const void* raw, size_t size)
1030
0
{
1031
0
  return winpr_BinToHexString(raw, size, FALSE);
1032
0
}
1033
1034
static int freerdp_assistance_parse_uploadinfo(rdpAssistanceFile* file, char* uploadinfo,
1035
                                               size_t uploadinfosize)
1036
0
{
1037
0
  const char escalated[9] = "Escalated";
1038
0
  const size_t esclen = sizeof(escalated);
1039
0
  const char* typestr = NULL;
1040
0
  size_t typelen = 0;
1041
1042
0
  if (!uploadinfo || (uploadinfosize == 0))
1043
0
    return -1;
1044
1045
0
  if (strnlen(uploadinfo, uploadinfosize) == uploadinfosize)
1046
0
  {
1047
0
    WLog_WARN(TAG, "UPLOADINFOR string is not '\0' terminated");
1048
0
    return -1;
1049
0
  }
1050
1051
0
  if (!freerdp_assistance_parse_attr(&typestr, &typelen, "TYPE", uploadinfo))
1052
0
    return -1;
1053
1054
0
  if ((typelen != esclen) || (strncmp(typestr, escalated, esclen) != 0))
1055
0
  {
1056
0
    WLog_ERR(TAG,
1057
0
             "Failed to parse ASSISTANCE file: Missing or invalid UPLOADINFO TYPE '%s' [%" PRIuz
1058
0
             "]",
1059
0
             typestr, typelen);
1060
0
    return -1;
1061
0
  }
1062
1063
0
  char* uploaddata = NULL;
1064
0
  size_t uploaddatasize = 0;
1065
0
  if (!freerdp_assistance_consume_input_and_get_element(uploadinfo, "UPLOADDATA", &uploaddata,
1066
0
                                                        &uploaddatasize))
1067
0
    return -1;
1068
1069
  /* Parse USERNAME */
1070
0
  if (!freerdp_assistance_parse_attr_str(&file->Username, "USERNAME", uploaddata))
1071
0
    return -1;
1072
1073
  /* Parse LHTICKET */
1074
0
  if (!freerdp_assistance_parse_attr_str(&file->LHTicket, "LHTICKET", uploaddata))
1075
0
    return -1;
1076
1077
  /* Parse RCTICKET */
1078
0
  if (!freerdp_assistance_parse_attr_str(&file->RCTicket, "RCTICKET", uploaddata))
1079
0
    return -1;
1080
1081
  /* Parse RCTICKETENCRYPTED */
1082
0
  if (!freerdp_assistance_parse_attr_bool(&file->RCTicketEncrypted, "RCTICKETENCRYPTED",
1083
0
                                          uploaddata))
1084
0
    return -1;
1085
1086
  /* Parse PassStub */
1087
0
  if (!freerdp_assistance_parse_attr_str(&file->PassStub, "PassStub", uploaddata))
1088
0
    return -1;
1089
1090
0
  if (file->PassStub)
1091
0
  {
1092
0
    const char* amp = "&amp;";
1093
0
    char* passtub = strstr(file->PassStub, amp);
1094
0
    while (passtub)
1095
0
    {
1096
0
      const char* end = passtub + 5;
1097
0
      const size_t len = strlen(end);
1098
0
      memmove(&passtub[1], end, len + 1);
1099
0
      passtub = strstr(passtub, amp);
1100
0
    }
1101
0
  }
1102
1103
  /* Parse DtStart */
1104
0
  if (!freerdp_assistance_parse_attr_uint32(&file->DtStart, "DtStart", uploaddata))
1105
0
    return -1;
1106
1107
  /* Parse DtLength */
1108
0
  if (!freerdp_assistance_parse_attr_uint32(&file->DtLength, "DtLength", uploaddata))
1109
0
    return -1;
1110
1111
  /* Parse L (LowSpeed) */
1112
0
  if (!freerdp_assistance_parse_attr_bool(&file->LowSpeed, "L", uploaddata))
1113
0
    return -1;
1114
1115
0
  file->Type = (file->LHTicket) ? 2 : 1;
1116
0
  int status = 0;
1117
1118
0
  switch (file->Type)
1119
0
  {
1120
0
    case 2:
1121
0
    {
1122
0
      file->EncryptedLHTicket = freerdp_assistance_hex_string_to_bin(
1123
0
          file->LHTicket, &file->EncryptedLHTicketLength);
1124
1125
0
      if (!freerdp_assistance_decrypt2(file))
1126
0
        status = -1;
1127
0
    }
1128
0
    break;
1129
1130
0
    case 1:
1131
0
    {
1132
0
      if (!freerdp_assistance_parse_connection_string1(file))
1133
0
        status = -1;
1134
0
    }
1135
0
    break;
1136
1137
0
    default:
1138
0
      return -1;
1139
0
  }
1140
1141
0
  if (status < 0)
1142
0
  {
1143
0
    WLog_ERR(TAG, "freerdp_assistance_parse_connection_string1 failure: %d", status);
1144
0
    return -1;
1145
0
  }
1146
1147
0
  file->EncryptedPassStub = freerdp_assistance_encrypt_pass_stub(file->password, file->PassStub,
1148
0
                                                                 &file->EncryptedPassStubLength);
1149
1150
0
  if (!file->EncryptedPassStub)
1151
0
    return -1;
1152
1153
0
  return 1;
1154
0
}
1155
1156
static int freerdp_assistance_parse_file_buffer_int(rdpAssistanceFile* file, char* buffer,
1157
                                                    size_t size, const char* password)
1158
0
{
1159
0
  WINPR_ASSERT(file);
1160
0
  WINPR_ASSERT(buffer);
1161
0
  WINPR_ASSERT(size > 0);
1162
1163
0
  if (!update_password(file, password))
1164
0
    return -1;
1165
1166
0
  char* uploadinfo = NULL;
1167
0
  size_t uploadinfosize = 0;
1168
0
  if (freerdp_assistance_consume_input_and_get_element(buffer, "UPLOADINFO", &uploadinfo,
1169
0
                                                       &uploadinfosize))
1170
0
    return freerdp_assistance_parse_uploadinfo(file, uploadinfo, uploadinfosize);
1171
1172
0
  size_t elen = 0;
1173
0
  const char* estr = freerdp_assistance_contains_element(buffer, size, "E", &elen, NULL, NULL);
1174
0
  if (!estr || (elen == 0))
1175
0
  {
1176
0
    WLog_ERR(TAG, "Failed to parse ASSISTANCE file: Neither UPLOADINFO nor <E> found");
1177
0
    return -1;
1178
0
  }
1179
0
  if (!update_connectionstring2(file, estr, elen))
1180
0
    return -1;
1181
1182
0
  if (!freerdp_assistance_parse_connection_string2(file))
1183
0
    return -1;
1184
1185
0
  return 1;
1186
0
}
1187
1188
int freerdp_assistance_parse_file_buffer(rdpAssistanceFile* file, const char* cbuffer, size_t size,
1189
                                         const char* password)
1190
0
{
1191
0
  WINPR_ASSERT(file);
1192
0
  if (!password)
1193
0
  {
1194
0
    WLog_WARN(TAG, "empty password supplied");
1195
0
  }
1196
1197
0
  if (!cbuffer || (size == 0))
1198
0
  {
1199
0
    WLog_WARN(TAG, "no data supplied [%p, %" PRIuz "]", cbuffer, size);
1200
0
    return -1;
1201
0
  }
1202
1203
0
  char* abuffer = strndup(cbuffer, size);
1204
0
  const size_t len = strnlen(cbuffer, size);
1205
0
  if (len == size)
1206
0
    WLog_WARN(TAG, "Input data not '\0' terminated");
1207
1208
0
  if (!abuffer)
1209
0
    return -1;
1210
1211
0
  const int rc = freerdp_assistance_parse_file_buffer_int(file, abuffer, len + 1, password);
1212
0
  free(abuffer);
1213
0
  return rc;
1214
0
}
1215
1216
int freerdp_assistance_parse_file(rdpAssistanceFile* file, const char* name, const char* password)
1217
0
{
1218
0
  int status = 0;
1219
0
  BYTE* buffer = NULL;
1220
0
  FILE* fp = NULL;
1221
0
  size_t readSize = 0;
1222
0
  union
1223
0
  {
1224
0
    INT64 i64;
1225
0
    size_t s;
1226
0
  } fileSize;
1227
1228
0
  if (!update_name(file, name))
1229
0
    return -1;
1230
1231
0
  fp = winpr_fopen(name, "r");
1232
1233
0
  if (!fp)
1234
0
  {
1235
0
    WLog_ERR(TAG, "Failed to open ASSISTANCE file %s ", name);
1236
0
    return -1;
1237
0
  }
1238
1239
0
  _fseeki64(fp, 0, SEEK_END);
1240
0
  fileSize.i64 = _ftelli64(fp);
1241
0
  _fseeki64(fp, 0, SEEK_SET);
1242
1243
0
  if (fileSize.i64 < 1)
1244
0
  {
1245
0
    WLog_ERR(TAG, "Failed to read ASSISTANCE file %s ", name);
1246
0
    (void)fclose(fp);
1247
0
    return -1;
1248
0
  }
1249
1250
0
  buffer = (BYTE*)malloc(fileSize.s + 2);
1251
1252
0
  if (!buffer)
1253
0
  {
1254
0
    (void)fclose(fp);
1255
0
    return -1;
1256
0
  }
1257
1258
0
  readSize = fread(buffer, fileSize.s, 1, fp);
1259
1260
0
  if (!readSize)
1261
0
  {
1262
0
    if (!ferror(fp))
1263
0
      readSize = fileSize.s;
1264
0
  }
1265
1266
0
  (void)fclose(fp);
1267
1268
0
  if (readSize < 1)
1269
0
  {
1270
0
    WLog_ERR(TAG, "Failed to read ASSISTANCE file %s ", name);
1271
0
    free(buffer);
1272
0
    buffer = NULL;
1273
0
    return -1;
1274
0
  }
1275
1276
0
  buffer[fileSize.s] = '\0';
1277
0
  buffer[fileSize.s + 1] = '\0';
1278
0
  status = freerdp_assistance_parse_file_buffer(file, (char*)buffer, fileSize.s, password);
1279
0
  free(buffer);
1280
0
  return status;
1281
0
}
1282
1283
BOOL freerdp_assistance_populate_settings_from_assistance_file(rdpAssistanceFile* file,
1284
                                                               rdpSettings* settings)
1285
0
{
1286
0
  if (!freerdp_settings_set_bool(settings, FreeRDP_RemoteAssistanceMode, TRUE))
1287
0
    return FALSE;
1288
1289
0
  if (!file->RASessionId || !file->MachineAddresses)
1290
0
    return FALSE;
1291
1292
0
  if (!freerdp_settings_set_string(settings, FreeRDP_RemoteAssistanceSessionId,
1293
0
                                   file->RASessionId))
1294
0
    return FALSE;
1295
1296
0
  if (file->RCTicket)
1297
0
  {
1298
0
    if (!freerdp_settings_set_string(settings, FreeRDP_RemoteAssistanceRCTicket,
1299
0
                                     file->RCTicket))
1300
0
      return FALSE;
1301
0
  }
1302
0
  else
1303
0
  {
1304
0
    if (!freerdp_settings_set_string(settings, FreeRDP_RemoteAssistanceRCTicket,
1305
0
                                     file->ConnectionString2))
1306
0
      return FALSE;
1307
0
  }
1308
1309
0
  if (file->PassStub)
1310
0
  {
1311
0
    if (!freerdp_settings_set_string(settings, FreeRDP_RemoteAssistancePassStub,
1312
0
                                     file->PassStub))
1313
0
      return FALSE;
1314
0
  }
1315
1316
0
  if (ArrayList_Count(file->MachineAddresses) < 1)
1317
0
    return FALSE;
1318
1319
0
  const char* addr = ArrayList_GetItem(file->MachineAddresses, 0);
1320
0
  if (!freerdp_settings_set_string(settings, FreeRDP_ServerHostname, addr))
1321
0
    return FALSE;
1322
1323
0
  if (!freerdp_settings_set_string(settings, FreeRDP_AssistanceFile, file->filename))
1324
0
    return FALSE;
1325
1326
0
  if (!freerdp_settings_set_string(settings, FreeRDP_RemoteAssistancePassword, file->password))
1327
0
    return FALSE;
1328
1329
0
  if (file->Username)
1330
0
  {
1331
0
    if (!freerdp_settings_set_string(settings, FreeRDP_Username, file->Username))
1332
0
      return FALSE;
1333
0
  }
1334
1335
0
  if (!freerdp_settings_set_bool(settings, FreeRDP_RemoteAssistanceMode, TRUE))
1336
0
    return FALSE;
1337
1338
0
  const size_t ports = ArrayList_Count(file->MachinePorts);
1339
0
  const size_t addresses = ArrayList_Count(file->MachineAddresses);
1340
0
  if (ports < 1)
1341
0
    return FALSE;
1342
0
  if (ports != addresses)
1343
0
    return FALSE;
1344
1345
0
  union
1346
0
  {
1347
0
    UINT32 port;
1348
0
    void* data;
1349
0
  } cnv;
1350
0
  cnv.data = ArrayList_GetItem(file->MachinePorts, 0);
1351
0
  if (!freerdp_settings_set_uint32(settings, FreeRDP_ServerPort, cnv.port))
1352
0
    return FALSE;
1353
1354
0
  if (!freerdp_target_net_adresses_reset(settings, ports))
1355
0
    return FALSE;
1356
1357
0
  for (size_t x = 0; x < ports; x++)
1358
0
  {
1359
0
    cnv.data = ArrayList_GetItem(file->MachinePorts, x);
1360
0
    if (!freerdp_settings_set_pointer_array(settings, FreeRDP_TargetNetPorts, x, &cnv.port))
1361
0
      return FALSE;
1362
0
  }
1363
0
  for (size_t i = 0; i < addresses; i++)
1364
0
  {
1365
0
    const char* maddr = ArrayList_GetItem(file->MachineAddresses, i);
1366
0
    if (!freerdp_settings_set_pointer_array(settings, FreeRDP_TargetNetAddresses, i, maddr))
1367
0
      return FALSE;
1368
0
  }
1369
1370
0
  return TRUE;
1371
0
}
1372
1373
static BOOL setup_string(wArrayList* list)
1374
0
{
1375
0
  WINPR_ASSERT(list);
1376
1377
0
  wObject* obj = ArrayList_Object(list);
1378
0
  if (!obj)
1379
0
    return FALSE;
1380
0
  obj->fnObjectFree = free;
1381
  // obj->fnObjectNew = wwinpr_ObjectStringClone;
1382
0
  return TRUE;
1383
0
}
1384
1385
rdpAssistanceFile* freerdp_assistance_file_new(void)
1386
0
{
1387
0
  winpr_InitializeSSL(WINPR_SSL_INIT_DEFAULT);
1388
0
  rdpAssistanceFile* file = calloc(1, sizeof(rdpAssistanceFile));
1389
0
  if (!file)
1390
0
    return NULL;
1391
1392
0
  file->MachineAddresses = ArrayList_New(FALSE);
1393
0
  file->MachinePorts = ArrayList_New(FALSE);
1394
0
  file->MachineUris = ArrayList_New(FALSE);
1395
1396
0
  if (!file->MachineAddresses || !file->MachinePorts || !file->MachineUris)
1397
0
    goto fail;
1398
1399
0
  if (!setup_string(file->MachineAddresses) || !setup_string(file->MachineUris))
1400
0
    goto fail;
1401
1402
0
  return file;
1403
1404
0
fail:
1405
0
  WINPR_PRAGMA_DIAG_PUSH
1406
0
  WINPR_PRAGMA_DIAG_IGNORED_MISMATCHED_DEALLOC
1407
0
  freerdp_assistance_file_free(file);
1408
0
  WINPR_PRAGMA_DIAG_POP
1409
0
  return NULL;
1410
0
}
1411
1412
void freerdp_assistance_file_free(rdpAssistanceFile* file)
1413
0
{
1414
0
  if (!file)
1415
0
    return;
1416
1417
0
  update_password(file, NULL);
1418
0
  update_connectionstring2(file, NULL, 0);
1419
0
  free(file->filename);
1420
0
  free(file->Username);
1421
0
  free(file->LHTicket);
1422
0
  free(file->RCTicket);
1423
0
  free(file->PassStub);
1424
0
  free(file->ConnectionString1);
1425
0
  free(file->EncryptedLHTicket);
1426
0
  free(file->RASessionId);
1427
0
  free(file->RASpecificParams);
1428
0
  free(file->RASpecificParams2);
1429
0
  free(file->EncryptedPassStub);
1430
1431
0
  ArrayList_Free(file->MachineAddresses);
1432
0
  ArrayList_Free(file->MachinePorts);
1433
0
  ArrayList_Free(file->MachineUris);
1434
0
  free(file);
1435
0
}
1436
1437
void freerdp_assistance_print_file(rdpAssistanceFile* file, wLog* log, DWORD level)
1438
0
{
1439
0
  WINPR_ASSERT(file);
1440
1441
0
  WLog_Print(log, level, "Username: %s", file->Username);
1442
0
  WLog_Print(log, level, "LHTicket: %s", file->LHTicket);
1443
0
  WLog_Print(log, level, "RCTicket: %s", file->RCTicket);
1444
0
  WLog_Print(log, level, "RCTicketEncrypted: %" PRId32, file->RCTicketEncrypted);
1445
0
  WLog_Print(log, level, "PassStub: %s", file->PassStub);
1446
0
  WLog_Print(log, level, "DtStart: %" PRIu32, file->DtStart);
1447
0
  WLog_Print(log, level, "DtLength: %" PRIu32, file->DtLength);
1448
0
  WLog_Print(log, level, "LowSpeed: %" PRId32, file->LowSpeed);
1449
0
  WLog_Print(log, level, "RASessionId: %s", file->RASessionId);
1450
0
  WLog_Print(log, level, "RASpecificParams: %s", file->RASpecificParams);
1451
0
  WLog_Print(log, level, "RASpecificParams2: %s", file->RASpecificParams2);
1452
1453
0
  for (size_t x = 0; x < ArrayList_Count(file->MachineAddresses); x++)
1454
0
  {
1455
0
    UINT32 port = 0;
1456
0
    const char* uri = NULL;
1457
0
    const char* addr = ArrayList_GetItem(file->MachineAddresses, x);
1458
0
    if (x < ArrayList_Count(file->MachinePorts))
1459
0
    {
1460
0
      union
1461
0
      {
1462
0
        UINT32 port;
1463
0
        void* data;
1464
0
      } cnv;
1465
0
      cnv.data = ArrayList_GetItem(file->MachinePorts, x);
1466
0
      port = cnv.port;
1467
0
    }
1468
0
    if (x < ArrayList_Count(file->MachineUris))
1469
0
      uri = ArrayList_GetItem(file->MachineUris, x);
1470
1471
0
    WLog_Print(log, level, "MachineAddress [%" PRIdz ": %s", x, addr);
1472
0
    WLog_Print(log, level, "MachinePort    [%" PRIdz ": %" PRIu32, x, port);
1473
0
    WLog_Print(log, level, "MachineURI     [%" PRIdz ": %s", x, uri);
1474
0
  }
1475
0
}
1476
1477
BOOL freerdp_assistance_get_encrypted_pass_stub(rdpAssistanceFile* file, const char** pwd,
1478
                                                size_t* size)
1479
0
{
1480
0
  if (!file || !pwd || !size)
1481
0
    return FALSE;
1482
1483
0
  *pwd = (const char*)file->EncryptedPassStub;
1484
0
  *size = file->EncryptedPassStubLength;
1485
0
  return TRUE;
1486
0
}
1487
1488
int freerdp_assistance_set_connection_string2(rdpAssistanceFile* file, const char* string,
1489
                                              const char* password)
1490
0
{
1491
0
  if (!file || !string || !password)
1492
0
    return -1;
1493
1494
0
  char* str = _strdup(string);
1495
0
  if (!str)
1496
0
    return -1;
1497
1498
0
  if (!update_connectionstring2_nocopy(file, str))
1499
0
    return -1;
1500
0
  if (!update_password(file, password))
1501
0
    return -1;
1502
0
  return freerdp_assistance_parse_connection_string2(file);
1503
0
}