Coverage Report

Created: 2026-02-26 06:54

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/FreeRDP/channels/drdynvc/client/drdynvc_main.c
Line
Count
Source
1
/**
2
 * FreeRDP: A Remote Desktop Protocol Implementation
3
 * Dynamic Virtual Channel
4
 *
5
 * Copyright 2010-2011 Vic Lee
6
 * Copyright 2015 Thincast Technologies GmbH
7
 * Copyright 2015 DI (FH) Martin Haimberger <martin.haimberger@thincast.com>
8
 *
9
 * Licensed under the Apache License, Version 2.0 (the "License");
10
 * you may not use this file except in compliance with the License.
11
 * You may obtain a copy of the License at
12
 *
13
 *     http://www.apache.org/licenses/LICENSE-2.0
14
 *
15
 * Unless required by applicable law or agreed to in writing, software
16
 * distributed under the License is distributed on an "AS IS" BASIS,
17
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
18
 * See the License for the specific language governing permissions and
19
 * limitations under the License.
20
 */
21
22
#include <freerdp/config.h>
23
24
#include <winpr/crt.h>
25
#include <winpr/cast.h>
26
#include <winpr/stream.h>
27
#include <winpr/interlocked.h>
28
29
#include <freerdp/freerdp.h>
30
#include <freerdp/channels/drdynvc.h>
31
#include <freerdp/utils/drdynvc.h>
32
#include <freerdp/codec/zgfx.h>
33
34
#include "drdynvc_main.h"
35
36
0
#define TAG CHANNELS_TAG("drdynvc.client")
37
38
static const char* channel_state2str(DVC_CHANNEL_STATE state)
39
0
{
40
0
  switch (state)
41
0
  {
42
0
    case DVC_CHANNEL_INIT:
43
0
      return "DVC_CHANNEL_INIT";
44
0
    case DVC_CHANNEL_RUNNING:
45
0
      return "DVC_CHANNEL_RUNNING";
46
0
    case DVC_CHANNEL_CLOSED:
47
0
      return "DVC_CHANNEL_CLOSED";
48
0
    default:
49
0
      return "DVC_CHANNEL_UNKNOWN";
50
0
  }
51
0
}
52
53
static void dvcman_channel_free(DVCMAN_CHANNEL* channel);
54
static UINT dvcman_channel_close(DVCMAN_CHANNEL* channel, BOOL perRequest, BOOL fromHashTableFn);
55
static void dvcman_free(drdynvcPlugin* drdynvc, IWTSVirtualChannelManager* pChannelMgr);
56
static UINT drdynvc_write_data(drdynvcPlugin* drdynvc, UINT32 ChannelId, const BYTE* data,
57
                               UINT32 dataSize, BOOL* close);
58
static UINT drdynvc_send(drdynvcPlugin* drdynvc, wStream* s);
59
60
static void dvcman_wtslistener_free(DVCMAN_LISTENER* listener)
61
0
{
62
0
  if (listener)
63
0
    free(listener->channel_name);
64
0
  free(listener);
65
0
}
66
67
/**
68
 * Function description
69
 *
70
 * @return 0 on success, otherwise a Win32 error code
71
 */
72
static UINT dvcman_get_configuration(IWTSListener* pListener, void** ppPropertyBag)
73
0
{
74
0
  WINPR_ASSERT(ppPropertyBag);
75
0
  WINPR_UNUSED(pListener);
76
0
  *ppPropertyBag = NULL;
77
0
  return ERROR_INTERNAL_ERROR;
78
0
}
79
80
/**
81
 * Function description
82
 *
83
 * @return 0 on success, otherwise a Win32 error code
84
 */
85
static UINT dvcman_create_listener(IWTSVirtualChannelManager* pChannelMgr,
86
                                   const char* pszChannelName, ULONG ulFlags,
87
                                   IWTSListenerCallback* pListenerCallback,
88
                                   IWTSListener** ppListener)
89
0
{
90
0
  DVCMAN* dvcman = (DVCMAN*)pChannelMgr;
91
0
  DVCMAN_LISTENER* listener = NULL;
92
93
0
  WINPR_ASSERT(dvcman);
94
0
  WLog_DBG(TAG, "create_listener: %" PRIuz ".%s.", HashTable_Count(dvcman->listeners) + 1,
95
0
           pszChannelName);
96
0
  listener = (DVCMAN_LISTENER*)calloc(1, sizeof(DVCMAN_LISTENER));
97
98
0
  if (!listener)
99
0
  {
100
0
    WLog_ERR(TAG, "calloc failed!");
101
0
    return CHANNEL_RC_NO_MEMORY;
102
0
  }
103
104
0
  listener->iface.GetConfiguration = dvcman_get_configuration;
105
0
  listener->iface.pInterface = NULL;
106
0
  listener->dvcman = dvcman;
107
0
  listener->channel_name = _strdup(pszChannelName);
108
109
0
  if (!listener->channel_name)
110
0
  {
111
0
    WLog_ERR(TAG, "_strdup failed!");
112
0
    dvcman_wtslistener_free(listener);
113
0
    return CHANNEL_RC_NO_MEMORY;
114
0
  }
115
116
0
  listener->flags = ulFlags;
117
0
  listener->listener_callback = pListenerCallback;
118
119
0
  if (ppListener)
120
0
    *ppListener = (IWTSListener*)listener;
121
122
0
  if (!HashTable_Insert(dvcman->listeners, listener->channel_name, listener))
123
0
  {
124
0
    dvcman_wtslistener_free(listener);
125
0
    return ERROR_INTERNAL_ERROR;
126
0
  }
127
128
  // NOLINTNEXTLINE(clang-analyzer-unix.Malloc): HashTable_Insert takes ownership of listener
129
0
  return CHANNEL_RC_OK;
130
0
}
131
132
static UINT dvcman_destroy_listener(IWTSVirtualChannelManager* pChannelMgr, IWTSListener* pListener)
133
0
{
134
0
  DVCMAN_LISTENER* listener = (DVCMAN_LISTENER*)pListener;
135
136
0
  WINPR_UNUSED(pChannelMgr);
137
138
0
  if (listener)
139
0
  {
140
0
    DVCMAN* dvcman = listener->dvcman;
141
0
    if (dvcman)
142
0
      HashTable_Remove(dvcman->listeners, listener->channel_name);
143
0
  }
144
145
0
  return CHANNEL_RC_OK;
146
0
}
147
148
/**
149
 * Function description
150
 *
151
 * @return 0 on success, otherwise a Win32 error code
152
 */
153
static UINT dvcman_register_plugin(IDRDYNVC_ENTRY_POINTS* pEntryPoints, const char* name,
154
                                   IWTSPlugin* pPlugin)
155
0
{
156
0
  WINPR_ASSERT(pEntryPoints);
157
0
  DVCMAN* dvcman = ((DVCMAN_ENTRY_POINTS*)pEntryPoints)->dvcman;
158
159
0
  WINPR_ASSERT(dvcman);
160
0
  if (!ArrayList_Append(dvcman->plugin_names, name))
161
0
    return ERROR_INTERNAL_ERROR;
162
0
  if (!ArrayList_Append(dvcman->plugins, pPlugin))
163
0
    return ERROR_INTERNAL_ERROR;
164
165
0
  WLog_DBG(TAG, "register_plugin: num_plugins %" PRIuz, ArrayList_Count(dvcman->plugins));
166
0
  return CHANNEL_RC_OK;
167
0
}
168
169
static IWTSPlugin* dvcman_get_plugin(IDRDYNVC_ENTRY_POINTS* pEntryPoints, const char* name)
170
0
{
171
0
  IWTSPlugin* plugin = NULL;
172
0
  size_t nc = 0;
173
0
  size_t pc = 0;
174
0
  WINPR_ASSERT(pEntryPoints);
175
0
  DVCMAN* dvcman = ((DVCMAN_ENTRY_POINTS*)pEntryPoints)->dvcman;
176
0
  if (!dvcman || !pEntryPoints || !name)
177
0
    return NULL;
178
179
0
  nc = ArrayList_Count(dvcman->plugin_names);
180
0
  pc = ArrayList_Count(dvcman->plugins);
181
0
  if (nc != pc)
182
0
    return NULL;
183
184
0
  ArrayList_Lock(dvcman->plugin_names);
185
0
  ArrayList_Lock(dvcman->plugins);
186
0
  for (size_t i = 0; i < pc; i++)
187
0
  {
188
0
    const char* cur = ArrayList_GetItem(dvcman->plugin_names, i);
189
0
    if (strcmp(cur, name) == 0)
190
0
    {
191
0
      plugin = ArrayList_GetItem(dvcman->plugins, i);
192
0
      break;
193
0
    }
194
0
  }
195
0
  ArrayList_Unlock(dvcman->plugin_names);
196
0
  ArrayList_Unlock(dvcman->plugins);
197
0
  return plugin;
198
0
}
199
200
static const ADDIN_ARGV* dvcman_get_plugin_data(IDRDYNVC_ENTRY_POINTS* pEntryPoints)
201
0
{
202
0
  WINPR_ASSERT(pEntryPoints);
203
0
  return ((DVCMAN_ENTRY_POINTS*)pEntryPoints)->args;
204
0
}
205
206
static rdpContext* dvcman_get_rdp_context(IDRDYNVC_ENTRY_POINTS* pEntryPoints)
207
0
{
208
0
  DVCMAN_ENTRY_POINTS* entry = (DVCMAN_ENTRY_POINTS*)pEntryPoints;
209
0
  WINPR_ASSERT(entry);
210
0
  return entry->context;
211
0
}
212
213
static rdpSettings* dvcman_get_rdp_settings(IDRDYNVC_ENTRY_POINTS* pEntryPoints)
214
0
{
215
0
  rdpContext* context = dvcman_get_rdp_context(pEntryPoints);
216
0
  WINPR_ASSERT(context);
217
218
0
  return context->settings;
219
0
}
220
221
static UINT32 dvcman_get_channel_id(IWTSVirtualChannel* channel)
222
0
{
223
0
  DVCMAN_CHANNEL* dvc = (DVCMAN_CHANNEL*)channel;
224
0
  WINPR_ASSERT(dvc);
225
0
  return dvc->channel_id;
226
0
}
227
228
static const char* dvcman_get_channel_name(IWTSVirtualChannel* channel)
229
0
{
230
0
  DVCMAN_CHANNEL* dvc = (DVCMAN_CHANNEL*)channel;
231
0
  WINPR_ASSERT(dvc);
232
0
  return dvc->channel_name;
233
0
}
234
235
static DVCMAN_CHANNEL* dvcman_get_channel_by_id(IWTSVirtualChannelManager* pChannelMgr,
236
                                                UINT32 ChannelId, BOOL doRef)
237
0
{
238
0
  DVCMAN* dvcman = (DVCMAN*)pChannelMgr;
239
0
  DVCMAN_CHANNEL* dvcChannel = NULL;
240
241
0
  WINPR_ASSERT(dvcman);
242
0
  HashTable_Lock(dvcman->channelsById);
243
0
  dvcChannel = HashTable_GetItemValue(dvcman->channelsById, &ChannelId);
244
0
  if (dvcChannel)
245
0
  {
246
0
    if (doRef)
247
0
      InterlockedIncrement(&dvcChannel->refCounter);
248
0
  }
249
250
0
  HashTable_Unlock(dvcman->channelsById);
251
0
  return dvcChannel;
252
0
}
253
254
static IWTSVirtualChannel* dvcman_find_channel_by_id(IWTSVirtualChannelManager* pChannelMgr,
255
                                                     UINT32 ChannelId)
256
0
{
257
0
  DVCMAN_CHANNEL* channel = dvcman_get_channel_by_id(pChannelMgr, ChannelId, FALSE);
258
0
  if (!channel)
259
0
    return NULL;
260
261
0
  return &channel->iface;
262
0
}
263
264
static void dvcman_plugin_terminate(void* plugin)
265
0
{
266
0
  IWTSPlugin* pPlugin = plugin;
267
268
0
  WINPR_ASSERT(pPlugin);
269
0
  UINT error = IFCALLRESULT(CHANNEL_RC_OK, pPlugin->Terminated, pPlugin);
270
0
  if (error != CHANNEL_RC_OK)
271
0
    WLog_ERR(TAG, "Terminated failed with error %" PRIu32 "!", error);
272
0
}
273
274
static void wts_listener_free(void* arg)
275
0
{
276
0
  DVCMAN_LISTENER* listener = (DVCMAN_LISTENER*)arg;
277
0
  dvcman_wtslistener_free(listener);
278
0
}
279
280
static BOOL channelIdMatch(const void* k1, const void* k2)
281
0
{
282
0
  WINPR_ASSERT(k1);
283
0
  WINPR_ASSERT(k2);
284
0
  return *((const UINT32*)k1) == *((const UINT32*)k2);
285
0
}
286
287
static UINT32 channelIdHash(const void* id)
288
0
{
289
0
  WINPR_ASSERT(id);
290
0
  return *((const UINT32*)id);
291
0
}
292
293
static void channelByIdCleanerFn(void* value)
294
0
{
295
0
  DVCMAN_CHANNEL* channel = (DVCMAN_CHANNEL*)value;
296
0
  if (channel)
297
0
  {
298
0
    dvcman_channel_close(channel, FALSE, TRUE);
299
0
    dvcman_channel_free(channel);
300
0
  }
301
0
}
302
303
static IWTSVirtualChannelManager* dvcman_new(drdynvcPlugin* plugin)
304
0
{
305
0
  wObject* obj = NULL;
306
0
  DVCMAN* dvcman = (DVCMAN*)calloc(1, sizeof(DVCMAN));
307
308
0
  if (!dvcman)
309
0
    return NULL;
310
311
0
  dvcman->iface.CreateListener = dvcman_create_listener;
312
0
  dvcman->iface.DestroyListener = dvcman_destroy_listener;
313
0
  dvcman->iface.FindChannelById = dvcman_find_channel_by_id;
314
0
  dvcman->iface.GetChannelId = dvcman_get_channel_id;
315
0
  dvcman->iface.GetChannelName = dvcman_get_channel_name;
316
0
  dvcman->drdynvc = plugin;
317
0
  dvcman->channelsById = HashTable_New(TRUE);
318
319
0
  if (!dvcman->channelsById)
320
0
    goto fail;
321
322
0
  HashTable_SetHashFunction(dvcman->channelsById, channelIdHash);
323
0
  obj = HashTable_KeyObject(dvcman->channelsById);
324
0
  WINPR_ASSERT(obj);
325
0
  obj->fnObjectEquals = channelIdMatch;
326
327
0
  obj = HashTable_ValueObject(dvcman->channelsById);
328
0
  WINPR_ASSERT(obj);
329
0
  obj->fnObjectFree = channelByIdCleanerFn;
330
331
0
  dvcman->pool = StreamPool_New(TRUE, 10);
332
0
  if (!dvcman->pool)
333
0
    goto fail;
334
335
0
  dvcman->listeners = HashTable_New(TRUE);
336
0
  if (!dvcman->listeners)
337
0
    goto fail;
338
0
  HashTable_SetHashFunction(dvcman->listeners, HashTable_StringHash);
339
340
0
  obj = HashTable_KeyObject(dvcman->listeners);
341
0
  obj->fnObjectEquals = HashTable_StringCompare;
342
343
0
  obj = HashTable_ValueObject(dvcman->listeners);
344
0
  obj->fnObjectFree = wts_listener_free;
345
346
0
  dvcman->plugin_names = ArrayList_New(TRUE);
347
0
  if (!dvcman->plugin_names)
348
0
    goto fail;
349
0
  obj = ArrayList_Object(dvcman->plugin_names);
350
0
  obj->fnObjectNew = winpr_ObjectStringClone;
351
0
  obj->fnObjectFree = winpr_ObjectStringFree;
352
353
0
  dvcman->plugins = ArrayList_New(TRUE);
354
0
  if (!dvcman->plugins)
355
0
    goto fail;
356
0
  obj = ArrayList_Object(dvcman->plugins);
357
0
  obj->fnObjectFree = dvcman_plugin_terminate;
358
0
  return &dvcman->iface;
359
0
fail:
360
0
  dvcman_free(plugin, &dvcman->iface);
361
0
  return NULL;
362
0
}
363
364
/**
365
 * Function description
366
 *
367
 * @return 0 on success, otherwise a Win32 error code
368
 */
369
static UINT dvcman_load_addin(drdynvcPlugin* drdynvc, IWTSVirtualChannelManager* pChannelMgr,
370
                              const ADDIN_ARGV* args, rdpContext* context)
371
0
{
372
0
  WINPR_ASSERT(drdynvc);
373
0
  WINPR_ASSERT(pChannelMgr);
374
0
  WINPR_ASSERT(args);
375
0
  WINPR_ASSERT(context);
376
377
0
  WLog_Print(drdynvc->log, WLOG_INFO, "Loading Dynamic Virtual Channel %s", args->argv[0]);
378
379
0
  PVIRTUALCHANNELENTRY pvce =
380
0
      freerdp_load_channel_addin_entry(args->argv[0], NULL, NULL, FREERDP_ADDIN_CHANNEL_DYNAMIC);
381
0
  PDVC_PLUGIN_ENTRY pDVCPluginEntry = WINPR_FUNC_PTR_CAST(pvce, PDVC_PLUGIN_ENTRY);
382
383
0
  if (pDVCPluginEntry)
384
0
  {
385
0
    DVCMAN_ENTRY_POINTS entryPoints = WINPR_C_ARRAY_INIT;
386
387
0
    entryPoints.iface.RegisterPlugin = dvcman_register_plugin;
388
0
    entryPoints.iface.GetPlugin = dvcman_get_plugin;
389
0
    entryPoints.iface.GetPluginData = dvcman_get_plugin_data;
390
0
    entryPoints.iface.GetRdpSettings = dvcman_get_rdp_settings;
391
0
    entryPoints.iface.GetRdpContext = dvcman_get_rdp_context;
392
0
    entryPoints.dvcman = (DVCMAN*)pChannelMgr;
393
0
    entryPoints.args = args;
394
0
    entryPoints.context = context;
395
0
    return pDVCPluginEntry(&entryPoints.iface);
396
0
  }
397
398
0
  return ERROR_INVALID_FUNCTION;
399
0
}
400
401
static void dvcman_channel_free(DVCMAN_CHANNEL* channel)
402
0
{
403
0
  if (!channel)
404
0
    return;
405
406
0
  if (channel->dvc_data)
407
0
    Stream_Release(channel->dvc_data);
408
409
0
  zgfx_context_free(channel->decompressor);
410
0
  DeleteCriticalSection(&(channel->lock));
411
0
  free(channel->channel_name);
412
0
  free(channel);
413
0
}
414
415
static void dvcman_channel_unref(DVCMAN_CHANNEL* channel)
416
0
{
417
0
  WINPR_ASSERT(channel);
418
0
  if (InterlockedDecrement(&channel->refCounter))
419
0
    return;
420
421
0
  DVCMAN* dvcman = channel->dvcman;
422
0
  if (dvcman)
423
0
    HashTable_Remove(dvcman->channelsById, &channel->channel_id);
424
0
}
425
426
static UINT dvcchannel_send_close(DVCMAN_CHANNEL* channel)
427
0
{
428
0
  WINPR_ASSERT(channel);
429
0
  DVCMAN* dvcman = channel->dvcman;
430
0
  drdynvcPlugin* drdynvc = dvcman->drdynvc;
431
0
  wStream* s = StreamPool_Take(dvcman->pool, 5);
432
433
0
  if (!s)
434
0
  {
435
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "StreamPool_Take failed!");
436
0
    return CHANNEL_RC_NO_MEMORY;
437
0
  }
438
439
0
  Stream_Write_UINT8(s, (CLOSE_REQUEST_PDU << 4) | 0x02);
440
0
  Stream_Write_UINT32(s, channel->channel_id);
441
0
  return drdynvc_send(drdynvc, s);
442
0
}
443
444
static void check_open_close_receive(DVCMAN_CHANNEL* channel)
445
0
{
446
0
  WINPR_ASSERT(channel);
447
448
0
  IWTSVirtualChannelCallback* cb = channel->channel_callback;
449
0
  const char* name = channel->channel_name;
450
0
  const UINT32 id = channel->channel_id;
451
452
0
  WINPR_ASSERT(cb);
453
0
  if (!cb->OnOpen || !cb->OnClose || !cb->OnDataReceived)
454
0
    WLog_VRB(TAG, "{%s:%" PRIu32 "} OnOpen=%p, OnClose=%p, OnDataReceived=%p", name, id,
455
0
             WINPR_CXX_COMPAT_CAST(const void*, cb->OnOpen),
456
0
             WINPR_CXX_COMPAT_CAST(const void*, cb->OnClose),
457
0
             WINPR_CXX_COMPAT_CAST(const void*, cb->OnDataReceived));
458
0
}
459
460
static UINT dvcman_call_on_receive(DVCMAN_CHANNEL* channel, wStream* data)
461
0
{
462
0
  WINPR_ASSERT(channel);
463
0
  WINPR_ASSERT(data);
464
465
0
  IWTSVirtualChannelCallback* cb = channel->channel_callback;
466
0
  WINPR_ASSERT(cb);
467
468
0
  check_open_close_receive(channel);
469
0
  WINPR_ASSERT(cb->OnDataReceived);
470
0
  return cb->OnDataReceived(cb, data);
471
0
}
472
473
static UINT dvcman_channel_close(DVCMAN_CHANNEL* channel, BOOL perRequest, BOOL fromHashTableFn)
474
0
{
475
0
  UINT error = CHANNEL_RC_OK;
476
0
  DrdynvcClientContext* context = NULL;
477
478
0
  WINPR_ASSERT(channel);
479
0
  switch (channel->state)
480
0
  {
481
0
    case DVC_CHANNEL_INIT:
482
0
      break;
483
0
    case DVC_CHANNEL_RUNNING:
484
0
      if (channel->dvcman)
485
0
      {
486
0
        drdynvcPlugin* drdynvc = channel->dvcman->drdynvc;
487
0
        WINPR_ASSERT(drdynvc);
488
0
        context = drdynvc->context;
489
0
        if (perRequest)
490
0
          WLog_Print(drdynvc->log, WLOG_DEBUG, "sending close confirm for '%s'",
491
0
                     channel->channel_name);
492
493
0
        error = dvcchannel_send_close(channel);
494
0
        if (error != CHANNEL_RC_OK)
495
0
        {
496
0
          if (perRequest)
497
0
            WLog_Print(drdynvc->log, WLOG_DEBUG,
498
0
                       "error when sending closeRequest for '%s'",
499
0
                       channel->channel_name);
500
0
          else
501
0
            WLog_Print(drdynvc->log, WLOG_DEBUG,
502
0
                       "error when sending close confirm for '%s'",
503
0
                       channel->channel_name);
504
0
        }
505
0
        WLog_Print(drdynvc->log, WLOG_DEBUG, "listener %s destroyed channel %" PRIu32 "",
506
0
                   channel->channel_name, channel->channel_id);
507
0
      }
508
509
0
      channel->state = DVC_CHANNEL_CLOSED;
510
511
0
      {
512
0
        check_open_close_receive(channel);
513
514
0
        IWTSVirtualChannelCallback* cb = channel->channel_callback;
515
0
        channel->channel_callback = NULL;
516
0
        if (cb)
517
0
          error = IFCALLRESULT(CHANNEL_RC_OK, cb->OnClose, cb);
518
0
      }
519
520
0
      if (channel->dvcman && channel->dvcman->drdynvc)
521
0
      {
522
0
        if (context)
523
0
        {
524
0
          IFCALLRET(context->OnChannelDisconnected, error, context, channel->channel_name,
525
0
                    channel->pInterface);
526
0
        }
527
0
      }
528
529
0
      if (!fromHashTableFn)
530
0
        dvcman_channel_unref(channel);
531
0
      break;
532
0
    case DVC_CHANNEL_CLOSED:
533
0
      break;
534
0
    default:
535
0
      break;
536
0
  }
537
538
0
  return error;
539
0
}
540
541
static DVCMAN_CHANNEL* dvcman_channel_new(WINPR_ATTR_UNUSED drdynvcPlugin* drdynvc,
542
                                          IWTSVirtualChannelManager* pChannelMgr, UINT32 ChannelId,
543
                                          const char* ChannelName)
544
0
{
545
0
  DVCMAN_CHANNEL* channel = NULL;
546
547
0
  WINPR_ASSERT(drdynvc);
548
0
  WINPR_ASSERT(pChannelMgr);
549
0
  channel = (DVCMAN_CHANNEL*)calloc(1, sizeof(DVCMAN_CHANNEL));
550
551
0
  if (!channel)
552
0
    return NULL;
553
554
0
  channel->dvcman = (DVCMAN*)pChannelMgr;
555
0
  channel->channel_id = ChannelId;
556
0
  channel->refCounter = 1;
557
0
  channel->state = DVC_CHANNEL_INIT;
558
0
  channel->channel_name = _strdup(ChannelName);
559
0
  if (!channel->channel_name)
560
0
    goto fail;
561
562
0
  channel->decompressor = zgfx_context_new(FALSE);
563
0
  if (!channel->decompressor)
564
0
    goto fail;
565
566
0
  if (!InitializeCriticalSectionEx(&(channel->lock), 0, 0))
567
0
    goto fail;
568
569
0
  return channel;
570
0
fail:
571
0
  dvcman_channel_free(channel);
572
0
  return NULL;
573
0
}
574
575
static void dvcman_clear(drdynvcPlugin* drdynvc, IWTSVirtualChannelManager* pChannelMgr)
576
0
{
577
0
  DVCMAN* dvcman = (DVCMAN*)pChannelMgr;
578
579
0
  WINPR_ASSERT(dvcman);
580
0
  WINPR_UNUSED(drdynvc);
581
582
0
  HashTable_Clear(dvcman->channelsById);
583
0
  ArrayList_Clear(dvcman->plugins);
584
0
  ArrayList_Clear(dvcman->plugin_names);
585
0
  HashTable_Clear(dvcman->listeners);
586
0
}
587
static void dvcman_free(drdynvcPlugin* drdynvc, IWTSVirtualChannelManager* pChannelMgr)
588
0
{
589
0
  DVCMAN* dvcman = (DVCMAN*)pChannelMgr;
590
591
0
  WINPR_ASSERT(dvcman);
592
0
  WINPR_UNUSED(drdynvc);
593
594
0
  HashTable_Free(dvcman->channelsById);
595
0
  ArrayList_Free(dvcman->plugins);
596
0
  ArrayList_Free(dvcman->plugin_names);
597
0
  HashTable_Free(dvcman->listeners);
598
599
0
  StreamPool_Free(dvcman->pool);
600
0
  free(dvcman);
601
0
}
602
603
/**
604
 * Function description
605
 *
606
 * @return 0 on success, otherwise a Win32 error code
607
 */
608
static UINT dvcman_init(drdynvcPlugin* drdynvc, IWTSVirtualChannelManager* pChannelMgr)
609
0
{
610
0
  DVCMAN* dvcman = (DVCMAN*)pChannelMgr;
611
0
  UINT error = CHANNEL_RC_OK;
612
613
0
  WINPR_ASSERT(dvcman);
614
0
  ArrayList_Lock(dvcman->plugins);
615
0
  for (size_t i = 0; i < ArrayList_Count(dvcman->plugins); i++)
616
0
  {
617
0
    IWTSPlugin* pPlugin = ArrayList_GetItem(dvcman->plugins, i);
618
619
0
    error = IFCALLRESULT(CHANNEL_RC_OK, pPlugin->Initialize, pPlugin, pChannelMgr);
620
0
    if (error != CHANNEL_RC_OK)
621
0
    {
622
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "Initialize failed with error %" PRIu32 "!",
623
0
                 error);
624
0
      goto fail;
625
0
    }
626
0
  }
627
628
0
fail:
629
0
  ArrayList_Unlock(dvcman->plugins);
630
0
  return error;
631
0
}
632
633
/**
634
 * Function description
635
 *
636
 * @return 0 on success, otherwise a Win32 error code
637
 */
638
static UINT dvcman_write_channel(IWTSVirtualChannel* pChannel, ULONG cbSize, const BYTE* pBuffer,
639
                                 void* pReserved)
640
0
{
641
0
  BOOL close = FALSE;
642
0
  UINT status = 0;
643
0
  DVCMAN_CHANNEL* channel = (DVCMAN_CHANNEL*)pChannel;
644
645
0
  WINPR_UNUSED(pReserved);
646
0
  if (!channel || !channel->dvcman)
647
0
    return CHANNEL_RC_BAD_CHANNEL;
648
649
0
  EnterCriticalSection(&(channel->lock));
650
0
  status =
651
0
      drdynvc_write_data(channel->dvcman->drdynvc, channel->channel_id, pBuffer, cbSize, &close);
652
0
  LeaveCriticalSection(&(channel->lock));
653
  /* Close delayed, it removes the channel struct */
654
0
  if (close)
655
0
    dvcman_channel_close(channel, FALSE, FALSE);
656
657
0
  return status;
658
0
}
659
660
/**
661
 * Function description
662
 *
663
 * @return 0 on success, otherwise a Win32 error code
664
 */
665
static UINT dvcman_close_channel_iface(IWTSVirtualChannel* pChannel)
666
0
{
667
0
  DVCMAN_CHANNEL* channel = (DVCMAN_CHANNEL*)pChannel;
668
669
0
  if (!channel)
670
0
    return CHANNEL_RC_BAD_CHANNEL;
671
672
0
  WLog_DBG(TAG, "close_channel_iface: id=%" PRIu32 "", channel->channel_id);
673
0
  return dvcman_channel_close(channel, FALSE, FALSE);
674
0
}
675
676
/**
677
 * Function description
678
 *
679
 * @return 0 on success, otherwise a Win32 error code
680
 */
681
static DVCMAN_CHANNEL* dvcman_create_channel(drdynvcPlugin* drdynvc,
682
                                             IWTSVirtualChannelManager* pChannelMgr,
683
                                             UINT32 ChannelId, const char* ChannelName, UINT* res)
684
0
{
685
0
  BOOL bAccept = 0;
686
0
  DVCMAN_CHANNEL* channel = NULL;
687
0
  DrdynvcClientContext* context = NULL;
688
0
  DVCMAN* dvcman = (DVCMAN*)pChannelMgr;
689
0
  DVCMAN_LISTENER* listener = NULL;
690
0
  IWTSVirtualChannelCallback* pCallback = NULL;
691
692
0
  WINPR_ASSERT(dvcman);
693
0
  WINPR_ASSERT(res);
694
695
0
  HashTable_Lock(dvcman->listeners);
696
0
  listener = (DVCMAN_LISTENER*)HashTable_GetItemValue(dvcman->listeners, ChannelName);
697
0
  if (!listener)
698
0
  {
699
0
    *res = ERROR_NOT_FOUND;
700
0
    goto out;
701
0
  }
702
703
0
  channel = dvcman_get_channel_by_id(pChannelMgr, ChannelId, FALSE);
704
0
  if (channel)
705
0
  {
706
0
    switch (channel->state)
707
0
    {
708
0
      case DVC_CHANNEL_RUNNING:
709
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
710
0
                   "Protocol error: Duplicated ChannelId %" PRIu32 " (%s)!", ChannelId,
711
0
                   ChannelName);
712
0
        *res = CHANNEL_RC_ALREADY_OPEN;
713
0
        goto out;
714
715
0
      case DVC_CHANNEL_CLOSED:
716
0
      case DVC_CHANNEL_INIT:
717
0
      default:
718
0
      {
719
0
        WLog_Print(drdynvc->log, WLOG_ERROR, "not expecting a createChannel from state %s",
720
0
                   channel_state2str(channel->state));
721
0
        *res = CHANNEL_RC_INITIALIZATION_ERROR;
722
0
        goto out;
723
0
      }
724
0
    }
725
0
  }
726
0
  else
727
0
  {
728
0
    if (!(channel = dvcman_channel_new(drdynvc, pChannelMgr, ChannelId, ChannelName)))
729
0
    {
730
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "dvcman_channel_new failed!");
731
0
      *res = CHANNEL_RC_NO_MEMORY;
732
0
      goto out;
733
0
    }
734
0
  }
735
736
0
  if (!HashTable_Insert(dvcman->channelsById, &channel->channel_id, channel))
737
0
  {
738
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "unable to register channel in our channel list");
739
0
    *res = ERROR_INTERNAL_ERROR;
740
0
    dvcman_channel_free(channel);
741
0
    channel = NULL;
742
0
    goto out;
743
0
  }
744
745
0
  channel->iface.Write = dvcman_write_channel;
746
0
  channel->iface.Close = dvcman_close_channel_iface;
747
0
  bAccept = TRUE;
748
749
0
  *res = listener->listener_callback->OnNewChannelConnection(
750
0
      listener->listener_callback, &channel->iface, NULL, &bAccept, &pCallback);
751
752
0
  if (*res != CHANNEL_RC_OK)
753
0
  {
754
0
    WLog_Print(drdynvc->log, WLOG_ERROR,
755
0
               "OnNewChannelConnection failed with error %" PRIu32 "!", *res);
756
0
    *res = ERROR_INTERNAL_ERROR;
757
0
    dvcman_channel_unref(channel);
758
0
    goto out;
759
0
  }
760
761
0
  if (!bAccept)
762
0
  {
763
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "OnNewChannelConnection returned with bAccept FALSE!");
764
0
    *res = ERROR_INTERNAL_ERROR;
765
0
    dvcman_channel_unref(channel);
766
0
    channel = NULL;
767
0
    goto out;
768
0
  }
769
770
0
  WLog_Print(drdynvc->log, WLOG_DEBUG, "listener %s created new channel %" PRIu32 "",
771
0
             listener->channel_name, channel->channel_id);
772
0
  channel->state = DVC_CHANNEL_RUNNING;
773
0
  channel->channel_callback = pCallback;
774
0
  channel->pInterface = listener->iface.pInterface;
775
0
  context = dvcman->drdynvc->context;
776
777
0
  IFCALLRET(context->OnChannelConnected, *res, context, ChannelName, listener->iface.pInterface);
778
0
  if (*res != CHANNEL_RC_OK)
779
0
  {
780
0
    WLog_Print(drdynvc->log, WLOG_ERROR,
781
0
               "context.OnChannelConnected failed with error %" PRIu32 "", *res);
782
0
  }
783
784
0
out:
785
0
  HashTable_Unlock(dvcman->listeners);
786
787
0
  return channel;
788
0
}
789
790
/**
791
 * Function description
792
 *
793
 * @return 0 on success, otherwise a Win32 error code
794
 */
795
static UINT dvcman_open_channel(drdynvcPlugin* drdynvc, DVCMAN_CHANNEL* channel)
796
0
{
797
0
  UINT error = CHANNEL_RC_OK;
798
799
0
  WINPR_ASSERT(drdynvc);
800
0
  WINPR_ASSERT(channel);
801
0
  if (channel->state == DVC_CHANNEL_RUNNING)
802
0
  {
803
0
    IWTSVirtualChannelCallback* pCallback = channel->channel_callback;
804
805
0
    if (pCallback->OnOpen)
806
0
    {
807
0
      check_open_close_receive(channel);
808
0
      error = pCallback->OnOpen(pCallback);
809
0
      if (error)
810
0
      {
811
0
        WLog_Print(drdynvc->log, WLOG_ERROR, "OnOpen failed with error %" PRIu32 "!",
812
0
                   error);
813
0
        goto out;
814
0
      }
815
0
    }
816
817
0
    WLog_Print(drdynvc->log, WLOG_DEBUG, "open_channel: ChannelId %" PRIu32 "",
818
0
               channel->channel_id);
819
0
  }
820
821
0
out:
822
0
  return error;
823
0
}
824
825
/**
826
 * Function description
827
 *
828
 * @return 0 on success, otherwise a Win32 error code
829
 */
830
static UINT dvcman_receive_channel_data_first(DVCMAN_CHANNEL* channel, UINT32 length)
831
0
{
832
0
  WINPR_ASSERT(channel);
833
0
  WINPR_ASSERT(channel->dvcman);
834
0
  if (channel->dvc_data)
835
0
    Stream_Release(channel->dvc_data);
836
837
0
  channel->dvc_data = StreamPool_Take(channel->dvcman->pool, length);
838
839
0
  if (!channel->dvc_data)
840
0
  {
841
0
    drdynvcPlugin* drdynvc = channel->dvcman->drdynvc;
842
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "StreamPool_Take failed!");
843
0
    return CHANNEL_RC_NO_MEMORY;
844
0
  }
845
846
0
  channel->dvc_data_length = length;
847
0
  return CHANNEL_RC_OK;
848
0
}
849
850
/**
851
 * Function description
852
 *
853
 * @return 0 on success, otherwise a Win32 error code
854
 */
855
static UINT dvcman_receive_channel_data(DVCMAN_CHANNEL* channel, wStream* data,
856
                                        WINPR_ATTR_UNUSED UINT32 ThreadingFlags)
857
0
{
858
0
  UINT status = CHANNEL_RC_OK;
859
0
  size_t dataSize = Stream_GetRemainingLength(data);
860
861
0
  WINPR_ASSERT(channel);
862
0
  WINPR_ASSERT(channel->dvcman);
863
0
  if (channel->dvc_data)
864
0
  {
865
0
    drdynvcPlugin* drdynvc = channel->dvcman->drdynvc;
866
867
    /* Fragmented data */
868
0
    if (Stream_GetPosition(channel->dvc_data) + dataSize > channel->dvc_data_length)
869
0
    {
870
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "data exceeding declared length!");
871
0
      Stream_Release(channel->dvc_data);
872
0
      channel->dvc_data = NULL;
873
0
      status = ERROR_INVALID_DATA;
874
0
      goto out;
875
0
    }
876
877
0
    Stream_Copy(data, channel->dvc_data, dataSize);
878
879
0
    if (Stream_GetPosition(channel->dvc_data) >= channel->dvc_data_length)
880
0
    {
881
0
      Stream_SealLength(channel->dvc_data);
882
0
      Stream_SetPosition(channel->dvc_data, 0);
883
884
0
      status = dvcman_call_on_receive(channel, channel->dvc_data);
885
0
      Stream_Release(channel->dvc_data);
886
0
      channel->dvc_data = NULL;
887
0
    }
888
0
  }
889
0
  else
890
0
    status = dvcman_call_on_receive(channel, data);
891
892
0
out:
893
0
  return status;
894
0
}
895
896
static UINT8 drdynvc_write_variable_uint(wStream* s, UINT32 val)
897
0
{
898
0
  UINT8 cb = 0;
899
900
0
  if (val <= 0xFF)
901
0
  {
902
0
    cb = 0;
903
0
    Stream_Write_UINT8(s, (UINT8)val);
904
0
  }
905
0
  else if (val <= 0xFFFF)
906
0
  {
907
0
    cb = 1;
908
0
    Stream_Write_UINT16(s, (UINT16)val);
909
0
  }
910
0
  else
911
0
  {
912
0
    cb = 2;
913
0
    Stream_Write_UINT32(s, val);
914
0
  }
915
916
0
  return cb;
917
0
}
918
919
/**
920
 * Function description
921
 *
922
 * @return 0 on success, otherwise a Win32 error code
923
 */
924
static UINT drdynvc_send(drdynvcPlugin* drdynvc, wStream* s)
925
0
{
926
0
  UINT status = 0;
927
928
0
  if (!drdynvc)
929
0
    status = CHANNEL_RC_BAD_CHANNEL_HANDLE;
930
0
  else
931
0
  {
932
0
    WINPR_ASSERT(drdynvc->channelEntryPoints.pVirtualChannelWriteEx);
933
0
    status = drdynvc->channelEntryPoints.pVirtualChannelWriteEx(
934
0
        drdynvc->InitHandle, drdynvc->OpenHandle, Stream_Buffer(s),
935
0
        (UINT32)Stream_GetPosition(s), s);
936
0
  }
937
938
0
  switch (status)
939
0
  {
940
0
    case CHANNEL_RC_OK:
941
0
      return CHANNEL_RC_OK;
942
943
0
    case CHANNEL_RC_NOT_CONNECTED:
944
0
      Stream_Release(s);
945
0
      return CHANNEL_RC_OK;
946
947
0
    case CHANNEL_RC_BAD_CHANNEL_HANDLE:
948
0
      Stream_Release(s);
949
0
      WLog_ERR(TAG, "VirtualChannelWriteEx failed with CHANNEL_RC_BAD_CHANNEL_HANDLE");
950
0
      return status;
951
952
0
    default:
953
0
      Stream_Release(s);
954
0
      WLog_Print(drdynvc->log, WLOG_ERROR,
955
0
                 "VirtualChannelWriteEx failed with %s [%08" PRIX32 "]",
956
0
                 WTSErrorToString(status), status);
957
0
      return status;
958
0
  }
959
0
}
960
961
/**
962
 * Function description
963
 *
964
 * @return 0 on success, otherwise a Win32 error code
965
 */
966
static UINT drdynvc_write_data(drdynvcPlugin* drdynvc, UINT32 ChannelId, const BYTE* data,
967
                               UINT32 dataSize, BOOL* close)
968
0
{
969
0
  wStream* data_out = NULL;
970
0
  size_t pos = 0;
971
0
  UINT8 cbChId = 0;
972
0
  UINT8 cbLen = 0;
973
0
  UINT status = CHANNEL_RC_BAD_INIT_HANDLE;
974
0
  DVCMAN* dvcman = NULL;
975
976
0
  if (!drdynvc)
977
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
978
979
0
  dvcman = (DVCMAN*)drdynvc->channel_mgr;
980
0
  WINPR_ASSERT(dvcman);
981
982
0
  WLog_Print(drdynvc->log, WLOG_TRACE, "write_data: ChannelId=%" PRIu32 " size=%" PRIu32 "",
983
0
             ChannelId, dataSize);
984
0
  data_out = StreamPool_Take(dvcman->pool, CHANNEL_CHUNK_LENGTH);
985
986
0
  if (!data_out)
987
0
  {
988
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "StreamPool_Take failed!");
989
0
    return CHANNEL_RC_NO_MEMORY;
990
0
  }
991
992
0
  Stream_SetPosition(data_out, 1);
993
0
  cbChId = drdynvc_write_variable_uint(data_out, ChannelId);
994
0
  pos = Stream_GetPosition(data_out);
995
996
0
  if (dataSize == 0)
997
0
  {
998
    /* TODO: shall treat that case with write(0) that do a close */
999
0
    *close = TRUE;
1000
0
    Stream_Release(data_out);
1001
0
  }
1002
0
  else if (dataSize <= CHANNEL_CHUNK_LENGTH - pos)
1003
0
  {
1004
0
    Stream_SetPosition(data_out, 0);
1005
0
    Stream_Write_UINT8(data_out, (DATA_PDU << 4) | cbChId);
1006
0
    Stream_SetPosition(data_out, pos);
1007
0
    Stream_Write(data_out, data, dataSize);
1008
0
    status = drdynvc_send(drdynvc, data_out);
1009
0
  }
1010
0
  else
1011
0
  {
1012
    /* Fragment the data */
1013
0
    cbLen = drdynvc_write_variable_uint(data_out, dataSize);
1014
0
    pos = Stream_GetPosition(data_out);
1015
0
    Stream_SetPosition(data_out, 0);
1016
1017
0
    const INT32 pdu = (DATA_FIRST_PDU << 4) | cbChId | (cbLen << 2);
1018
0
    Stream_Write_UINT8(data_out, WINPR_ASSERTING_INT_CAST(UINT8, pdu));
1019
0
    Stream_SetPosition(data_out, pos);
1020
1021
0
    {
1022
0
      WINPR_ASSERT(pos <= CHANNEL_CHUNK_LENGTH);
1023
0
      const uint32_t chunkLength =
1024
0
          CHANNEL_CHUNK_LENGTH - WINPR_ASSERTING_INT_CAST(uint32_t, pos);
1025
0
      Stream_Write(data_out, data, chunkLength);
1026
1027
0
      data += chunkLength;
1028
0
      dataSize -= chunkLength;
1029
0
    }
1030
0
    status = drdynvc_send(drdynvc, data_out);
1031
1032
0
    while (status == CHANNEL_RC_OK && dataSize > 0)
1033
0
    {
1034
0
      data_out = StreamPool_Take(dvcman->pool, CHANNEL_CHUNK_LENGTH);
1035
1036
0
      if (!data_out)
1037
0
      {
1038
0
        WLog_Print(drdynvc->log, WLOG_ERROR, "StreamPool_Take failed!");
1039
0
        return CHANNEL_RC_NO_MEMORY;
1040
0
      }
1041
1042
0
      Stream_SetPosition(data_out, 1);
1043
0
      cbChId = drdynvc_write_variable_uint(data_out, ChannelId);
1044
0
      pos = Stream_GetPosition(data_out);
1045
0
      Stream_SetPosition(data_out, 0);
1046
0
      Stream_Write_UINT8(data_out, (DATA_PDU << 4) | cbChId);
1047
0
      Stream_SetPosition(data_out, pos);
1048
1049
0
      uint32_t chunkLength = dataSize;
1050
1051
0
      WINPR_ASSERT(pos <= CHANNEL_CHUNK_LENGTH);
1052
0
      if (chunkLength > CHANNEL_CHUNK_LENGTH - pos)
1053
0
        chunkLength = CHANNEL_CHUNK_LENGTH - WINPR_ASSERTING_INT_CAST(uint32_t, pos);
1054
1055
0
      Stream_Write(data_out, data, chunkLength);
1056
0
      data += chunkLength;
1057
0
      dataSize -= chunkLength;
1058
0
      status = drdynvc_send(drdynvc, data_out);
1059
0
    }
1060
0
  }
1061
1062
0
  if (status != CHANNEL_RC_OK)
1063
0
  {
1064
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "VirtualChannelWriteEx failed with %s [%08" PRIX32 "]",
1065
0
               WTSErrorToString(status), status);
1066
0
    return status;
1067
0
  }
1068
1069
0
  return CHANNEL_RC_OK;
1070
0
}
1071
1072
/**
1073
 * Function description
1074
 *
1075
 * @return 0 on success, otherwise a Win32 error code
1076
 */
1077
static UINT drdynvc_send_capability_response(drdynvcPlugin* drdynvc)
1078
0
{
1079
0
  UINT status = 0;
1080
0
  wStream* s = NULL;
1081
0
  DVCMAN* dvcman = NULL;
1082
1083
0
  if (!drdynvc)
1084
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1085
1086
0
  dvcman = (DVCMAN*)drdynvc->channel_mgr;
1087
0
  WINPR_ASSERT(dvcman);
1088
1089
0
  WLog_Print(drdynvc->log, WLOG_TRACE, "capability_response");
1090
0
  s = StreamPool_Take(dvcman->pool, 4);
1091
1092
0
  if (!s)
1093
0
  {
1094
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "Stream_Ndrdynvc_write_variable_uintew failed!");
1095
0
    return CHANNEL_RC_NO_MEMORY;
1096
0
  }
1097
1098
0
  Stream_Write_UINT16(s, 0x0050); /* Cmd+Sp+cbChId+Pad. Note: MSTSC sends 0x005c */
1099
0
  Stream_Write_UINT16(s, drdynvc->version);
1100
0
  status = drdynvc_send(drdynvc, s);
1101
1102
0
  if (status != CHANNEL_RC_OK)
1103
0
  {
1104
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "VirtualChannelWriteEx failed with %s [%08" PRIX32 "]",
1105
0
               WTSErrorToString(status), status);
1106
0
  }
1107
1108
0
  return status;
1109
0
}
1110
1111
/**
1112
 * Function description
1113
 *
1114
 * @return 0 on success, otherwise a Win32 error code
1115
 */
1116
static UINT drdynvc_process_capability_request(drdynvcPlugin* drdynvc, int Sp, int cbChId,
1117
                                               wStream* s)
1118
0
{
1119
0
  UINT status = 0;
1120
1121
0
  if (!drdynvc)
1122
0
    return CHANNEL_RC_BAD_INIT_HANDLE;
1123
1124
0
  if (!Stream_CheckAndLogRequiredLength(TAG, s, 3))
1125
0
    return ERROR_INVALID_DATA;
1126
1127
0
  WLog_Print(drdynvc->log, WLOG_TRACE, "capability_request Sp=%d cbChId=%d", Sp, cbChId);
1128
0
  Stream_Seek(s, 1); /* pad */
1129
0
  Stream_Read_UINT16(s, drdynvc->version);
1130
1131
  /* RDP8 servers offer version 3, though Microsoft forgot to document it
1132
   * in their early documents.  It behaves the same as version 2.
1133
   */
1134
0
  if ((drdynvc->version == 2) || (drdynvc->version == 3))
1135
0
  {
1136
0
    if (!Stream_CheckAndLogRequiredLength(TAG, s, 8))
1137
0
      return ERROR_INVALID_DATA;
1138
1139
0
    Stream_Read_UINT16(s, drdynvc->PriorityCharge0);
1140
0
    Stream_Read_UINT16(s, drdynvc->PriorityCharge1);
1141
0
    Stream_Read_UINT16(s, drdynvc->PriorityCharge2);
1142
0
    Stream_Read_UINT16(s, drdynvc->PriorityCharge3);
1143
0
  }
1144
1145
0
  status = drdynvc_send_capability_response(drdynvc);
1146
0
  drdynvc->state = DRDYNVC_STATE_READY;
1147
0
  return status;
1148
0
}
1149
1150
static UINT32 drdynvc_cblen_to_bytes(int cbLen)
1151
0
{
1152
0
  switch (cbLen)
1153
0
  {
1154
0
    case 0:
1155
0
      return 1;
1156
1157
0
    case 1:
1158
0
      return 2;
1159
1160
0
    default:
1161
0
      return 4;
1162
0
  }
1163
0
}
1164
1165
static UINT32 drdynvc_read_variable_uint(wStream* s, int cbLen)
1166
0
{
1167
0
  UINT32 val = 0;
1168
1169
0
  switch (cbLen)
1170
0
  {
1171
0
    case 0:
1172
0
      Stream_Read_UINT8(s, val);
1173
0
      break;
1174
1175
0
    case 1:
1176
0
      Stream_Read_UINT16(s, val);
1177
0
      break;
1178
1179
0
    default:
1180
0
      Stream_Read_UINT32(s, val);
1181
0
      break;
1182
0
  }
1183
1184
0
  return val;
1185
0
}
1186
1187
/**
1188
 * Function description
1189
 *
1190
 * @return 0 on success, otherwise a Win32 error code
1191
 */
1192
static UINT drdynvc_process_create_request(drdynvcPlugin* drdynvc, UINT8 Sp, UINT8 cbChId,
1193
                                           wStream* s)
1194
0
{
1195
0
  UINT status = 0;
1196
0
  wStream* data_out = NULL;
1197
0
  UINT channel_status = 0;
1198
0
  DVCMAN* dvcman = NULL;
1199
0
  DVCMAN_CHANNEL* channel = NULL;
1200
0
  INT32 retStatus = 0;
1201
1202
0
  WINPR_UNUSED(Sp);
1203
0
  if (!drdynvc)
1204
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1205
1206
0
  dvcman = (DVCMAN*)drdynvc->channel_mgr;
1207
0
  WINPR_ASSERT(dvcman);
1208
1209
0
  if (drdynvc->state == DRDYNVC_STATE_CAPABILITIES)
1210
0
  {
1211
    /**
1212
     * For some reason the server does not always send the
1213
     * capabilities pdu as it should. When this happens,
1214
     * send a capabilities response.
1215
     */
1216
0
    drdynvc->version = 3;
1217
1218
0
    if ((status = drdynvc_send_capability_response(drdynvc)))
1219
0
    {
1220
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "drdynvc_send_capability_response failed!");
1221
0
      return status;
1222
0
    }
1223
1224
0
    drdynvc->state = DRDYNVC_STATE_READY;
1225
0
  }
1226
1227
0
  if (!Stream_CheckAndLogRequiredLength(TAG, s, drdynvc_cblen_to_bytes(cbChId)))
1228
0
    return ERROR_INVALID_DATA;
1229
1230
0
  const UINT32 ChannelId = drdynvc_read_variable_uint(s, cbChId);
1231
0
  const size_t pos = Stream_GetPosition(s);
1232
0
  const char* name = Stream_ConstPointer(s);
1233
0
  const size_t length = Stream_GetRemainingLength(s);
1234
1235
0
  if (strnlen(name, length) >= length)
1236
0
    return ERROR_INVALID_DATA;
1237
1238
0
  WLog_Print(drdynvc->log, WLOG_DEBUG,
1239
0
             "process_create_request: ChannelId=%" PRIu32 " ChannelName=%s", ChannelId, name);
1240
1241
0
  data_out = StreamPool_Take(dvcman->pool, pos + 4);
1242
0
  if (!data_out)
1243
0
  {
1244
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "StreamPool_Take failed!");
1245
0
    return CHANNEL_RC_NO_MEMORY;
1246
0
  }
1247
1248
0
  Stream_Write_UINT8(data_out, (CREATE_REQUEST_PDU << 4) | cbChId);
1249
0
  Stream_SetPosition(s, 1);
1250
0
  Stream_Copy(s, data_out, pos - 1);
1251
1252
0
  channel =
1253
0
      dvcman_create_channel(drdynvc, drdynvc->channel_mgr, ChannelId, name, &channel_status);
1254
0
  switch (channel_status)
1255
0
  {
1256
0
    case CHANNEL_RC_OK:
1257
0
      WLog_Print(drdynvc->log, WLOG_DEBUG, "channel created");
1258
0
      retStatus = 0;
1259
0
      break;
1260
0
    case CHANNEL_RC_NO_MEMORY:
1261
0
      WLog_Print(drdynvc->log, WLOG_DEBUG, "not enough memory for channel creation");
1262
0
      retStatus = STATUS_NO_MEMORY;
1263
0
      break;
1264
0
    case ERROR_NOT_FOUND:
1265
0
      WLog_Print(drdynvc->log, WLOG_DEBUG, "no listener for '%s'", name);
1266
0
      retStatus = STATUS_NOT_FOUND; /* same code used by mstsc, STATUS_UNSUCCESSFUL */
1267
0
      break;
1268
0
    default:
1269
0
      WLog_Print(drdynvc->log, WLOG_DEBUG, "channel creation error");
1270
0
      retStatus = STATUS_UNSUCCESSFUL; /* same code used by mstsc, STATUS_UNSUCCESSFUL */
1271
0
      break;
1272
0
  }
1273
0
  Stream_Write_INT32(data_out, retStatus);
1274
1275
0
  status = drdynvc_send(drdynvc, data_out);
1276
0
  if (status != CHANNEL_RC_OK)
1277
0
  {
1278
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "VirtualChannelWriteEx failed with %s [%08" PRIX32 "]",
1279
0
               WTSErrorToString(status), status);
1280
0
    dvcman_channel_unref(channel);
1281
0
    return status;
1282
0
  }
1283
1284
0
  if (channel_status == CHANNEL_RC_OK)
1285
0
  {
1286
0
    if ((status = dvcman_open_channel(drdynvc, channel)))
1287
0
    {
1288
0
      WLog_Print(drdynvc->log, WLOG_ERROR,
1289
0
                 "dvcman_open_channel failed with error %" PRIu32 "!", status);
1290
0
      return status;
1291
0
    }
1292
0
  }
1293
1294
0
  return status;
1295
0
}
1296
1297
/**
1298
 * Function description
1299
 *
1300
 * @return 0 on success, otherwise a Win32 error code
1301
 */
1302
static UINT drdynvc_process_data_first(drdynvcPlugin* drdynvc, int Sp, int cbChId, wStream* s,
1303
                                       BOOL compressed, UINT32 ThreadingFlags)
1304
0
{
1305
0
  WINPR_ASSERT(drdynvc);
1306
0
  if (!Stream_CheckAndLogRequiredLength(
1307
0
          TAG, s, drdynvc_cblen_to_bytes(cbChId) + drdynvc_cblen_to_bytes(Sp)))
1308
0
    return ERROR_INVALID_DATA;
1309
1310
0
  UINT32 ChannelId = drdynvc_read_variable_uint(s, cbChId);
1311
0
  UINT32 Length = drdynvc_read_variable_uint(s, Sp);
1312
0
  WLog_Print(drdynvc->log, WLOG_TRACE,
1313
0
             "process_data_first: Sp=%d cbChId=%d, ChannelId=%" PRIu32 " Length=%" PRIu32 "", Sp,
1314
0
             cbChId, ChannelId, Length);
1315
1316
0
  DVCMAN_CHANNEL* channel = dvcman_get_channel_by_id(drdynvc->channel_mgr, ChannelId, TRUE);
1317
0
  if (!channel)
1318
0
  {
1319
    /**
1320
     * Windows Server 2012 R2 can send some messages over
1321
     * Microsoft::Windows::RDS::Geometry::v08.01 even if the dynamic virtual channel wasn't
1322
     * registered on our side. Ignoring it works.
1323
     */
1324
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "ChannelId %" PRIu32 " not found!", ChannelId);
1325
0
    return CHANNEL_RC_OK;
1326
0
  }
1327
1328
0
  UINT status = CHANNEL_RC_OK;
1329
0
  BOOL shouldFree = FALSE;
1330
0
  if (channel->state != DVC_CHANNEL_RUNNING)
1331
0
    goto out;
1332
1333
0
  if (compressed)
1334
0
  {
1335
0
    BYTE* data = NULL;
1336
0
    UINT32 dataSize = 0;
1337
0
    if (zgfx_decompress(channel->decompressor, Stream_Pointer(s),
1338
0
                        WINPR_ASSERTING_INT_CAST(UINT32, Stream_GetRemainingLength(s)), &data,
1339
0
                        &dataSize, 0) < 0)
1340
0
    {
1341
0
      status = ERROR_INVALID_DATA;
1342
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "error de-compressing first packet");
1343
0
      goto out;
1344
0
    }
1345
1346
0
    s = Stream_New(data, dataSize);
1347
0
    if (!s)
1348
0
    {
1349
0
      status = CHANNEL_RC_NO_MEMORY;
1350
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "error allocating new Stream(len=%" PRIu32 ")",
1351
0
                 dataSize);
1352
0
      free(data);
1353
0
      goto out;
1354
0
    }
1355
0
    shouldFree = TRUE;
1356
0
  }
1357
1358
0
  status = dvcman_receive_channel_data_first(channel, Length);
1359
1360
0
  if (status == CHANNEL_RC_OK)
1361
0
    status = dvcman_receive_channel_data(channel, s, ThreadingFlags);
1362
1363
0
  if (status != CHANNEL_RC_OK)
1364
0
    status = dvcman_channel_close(channel, FALSE, FALSE);
1365
1366
0
out:
1367
0
  if (shouldFree)
1368
0
    Stream_Free(s, TRUE);
1369
0
  dvcman_channel_unref(channel);
1370
0
  return status;
1371
0
}
1372
1373
/**
1374
 * Function description
1375
 *
1376
 * @return 0 on success, otherwise a Win32 error code
1377
 */
1378
static UINT drdynvc_process_data(drdynvcPlugin* drdynvc, int Sp, int cbChId, wStream* s,
1379
                                 BOOL compressed, UINT32 ThreadingFlags)
1380
0
{
1381
0
  WINPR_ASSERT(drdynvc);
1382
0
  if (!Stream_CheckAndLogRequiredLength(TAG, s, drdynvc_cblen_to_bytes(cbChId)))
1383
0
    return ERROR_INVALID_DATA;
1384
1385
0
  UINT32 ChannelId = drdynvc_read_variable_uint(s, cbChId);
1386
0
  WLog_Print(drdynvc->log, WLOG_TRACE, "process_data: Sp=%d cbChId=%d, ChannelId=%" PRIu32 "", Sp,
1387
0
             cbChId, ChannelId);
1388
1389
0
  DVCMAN_CHANNEL* channel = dvcman_get_channel_by_id(drdynvc->channel_mgr, ChannelId, TRUE);
1390
0
  if (!channel)
1391
0
  {
1392
    /**
1393
     * Windows Server 2012 R2 can send some messages over
1394
     * Microsoft::Windows::RDS::Geometry::v08.01 even if the dynamic virtual channel wasn't
1395
     * registered on our side. Ignoring it works.
1396
     */
1397
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "ChannelId %" PRIu32 " not found!", ChannelId);
1398
0
    return CHANNEL_RC_OK;
1399
0
  }
1400
1401
0
  BOOL shouldFree = FALSE;
1402
0
  UINT status = CHANNEL_RC_OK;
1403
0
  if (channel->state != DVC_CHANNEL_RUNNING)
1404
0
    goto out;
1405
1406
0
  if (compressed)
1407
0
  {
1408
0
    BYTE* data = NULL;
1409
0
    UINT32 dataSize = 0;
1410
1411
0
    if (zgfx_decompress(channel->decompressor, Stream_Pointer(s),
1412
0
                        WINPR_ASSERTING_INT_CAST(UINT32, Stream_GetRemainingLength(s)), &data,
1413
0
                        &dataSize, 0) < 0)
1414
0
    {
1415
0
      status = ERROR_INVALID_DATA;
1416
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "error de-compressing data packet");
1417
0
      goto out;
1418
0
    }
1419
1420
0
    s = Stream_New(data, dataSize);
1421
0
    if (!s)
1422
0
    {
1423
0
      status = CHANNEL_RC_NO_MEMORY;
1424
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "error allocating new Stream(len=%" PRIu32 ")",
1425
0
                 dataSize);
1426
0
      free(data);
1427
0
      goto out;
1428
0
    }
1429
0
    shouldFree = TRUE;
1430
0
  }
1431
1432
0
  status = dvcman_receive_channel_data(channel, s, ThreadingFlags);
1433
0
  if (status != CHANNEL_RC_OK)
1434
0
    status = dvcman_channel_close(channel, FALSE, FALSE);
1435
1436
0
out:
1437
0
  if (shouldFree)
1438
0
    Stream_Free(s, TRUE);
1439
0
  dvcman_channel_unref(channel);
1440
0
  return status;
1441
0
}
1442
1443
/**
1444
 * Function description
1445
 *
1446
 * @return 0 on success, otherwise a Win32 error code
1447
 */
1448
static UINT drdynvc_process_close_request(drdynvcPlugin* drdynvc, int Sp, int cbChId, wStream* s)
1449
0
{
1450
0
  UINT32 ChannelId = 0;
1451
0
  DVCMAN_CHANNEL* channel = NULL;
1452
1453
0
  WINPR_ASSERT(drdynvc);
1454
0
  if (!Stream_CheckAndLogRequiredLength(TAG, s, drdynvc_cblen_to_bytes(cbChId)))
1455
0
    return ERROR_INVALID_DATA;
1456
1457
0
  ChannelId = drdynvc_read_variable_uint(s, cbChId);
1458
0
  WLog_Print(drdynvc->log, WLOG_DEBUG,
1459
0
             "process_close_request: Sp=%d cbChId=%d, ChannelId=%" PRIu32 "", Sp, cbChId,
1460
0
             ChannelId);
1461
1462
0
  channel = dvcman_get_channel_by_id(drdynvc->channel_mgr, ChannelId, TRUE);
1463
0
  if (!channel)
1464
0
  {
1465
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "dvcman_close_request channel %" PRIu32 " not present",
1466
0
               ChannelId);
1467
0
    return CHANNEL_RC_OK;
1468
0
  }
1469
1470
0
  dvcman_channel_close(channel, TRUE, FALSE);
1471
0
  dvcman_channel_unref(channel);
1472
0
  return CHANNEL_RC_OK;
1473
0
}
1474
1475
/**
1476
 * Function description
1477
 *
1478
 * @return 0 on success, otherwise a Win32 error code
1479
 */
1480
static UINT drdynvc_order_recv(drdynvcPlugin* drdynvc, wStream* s, UINT32 ThreadingFlags)
1481
0
{
1482
0
  WINPR_ASSERT(drdynvc);
1483
0
  if (!Stream_CheckAndLogRequiredLength(TAG, s, 1))
1484
0
    return ERROR_INVALID_DATA;
1485
1486
0
  UINT8 value = Stream_Get_UINT8(s);
1487
0
  const UINT8 Cmd = (value & 0xf0) >> 4;
1488
0
  const UINT8 Sp = (value & 0x0c) >> 2;
1489
0
  const UINT8 cbChId = (value & 0x03) >> 0;
1490
0
  WLog_Print(drdynvc->log, WLOG_TRACE, "order_recv: Cmd=%s, Sp=%" PRIu8 " cbChId=%" PRIu8,
1491
0
             drdynvc_get_packet_type(Cmd), Sp, cbChId);
1492
1493
0
  switch (Cmd)
1494
0
  {
1495
0
    case CAPABILITY_REQUEST_PDU:
1496
0
      return drdynvc_process_capability_request(drdynvc, Sp, cbChId, s);
1497
1498
0
    case CREATE_REQUEST_PDU:
1499
0
      return drdynvc_process_create_request(drdynvc, Sp, cbChId, s);
1500
1501
0
    case DATA_FIRST_PDU:
1502
0
    case DATA_FIRST_COMPRESSED_PDU:
1503
0
      return drdynvc_process_data_first(drdynvc, Sp, cbChId, s,
1504
0
                                        (Cmd == DATA_FIRST_COMPRESSED_PDU), ThreadingFlags);
1505
1506
0
    case DATA_PDU:
1507
0
    case DATA_COMPRESSED_PDU:
1508
0
      return drdynvc_process_data(drdynvc, Sp, cbChId, s, (Cmd == DATA_COMPRESSED_PDU),
1509
0
                                  ThreadingFlags);
1510
1511
0
    case CLOSE_REQUEST_PDU:
1512
0
      return drdynvc_process_close_request(drdynvc, Sp, cbChId, s);
1513
1514
0
    case SOFT_SYNC_RESPONSE_PDU:
1515
0
      WLog_Print(drdynvc->log, WLOG_ERROR,
1516
0
                 "not expecting a SOFT_SYNC_RESPONSE_PDU as a client");
1517
0
      return ERROR_INTERNAL_ERROR;
1518
1519
0
    default:
1520
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "unknown drdynvc cmd 0x%x", Cmd);
1521
0
      return ERROR_INTERNAL_ERROR;
1522
0
  }
1523
0
}
1524
1525
/**
1526
 * Function description
1527
 *
1528
 * @return 0 on success, otherwise a Win32 error code
1529
 */
1530
static UINT drdynvc_virtual_channel_event_data_received(drdynvcPlugin* drdynvc, void* pData,
1531
                                                        UINT32 dataLength, UINT32 totalLength,
1532
                                                        UINT32 dataFlags)
1533
0
{
1534
0
  wStream* data_in = NULL;
1535
1536
0
  WINPR_ASSERT(drdynvc);
1537
0
  if ((dataFlags & CHANNEL_FLAG_SUSPEND) || (dataFlags & CHANNEL_FLAG_RESUME))
1538
0
  {
1539
0
    return CHANNEL_RC_OK;
1540
0
  }
1541
1542
0
  if (dataFlags & CHANNEL_FLAG_FIRST)
1543
0
  {
1544
0
    DVCMAN* mgr = (DVCMAN*)drdynvc->channel_mgr;
1545
0
    if (drdynvc->data_in)
1546
0
      Stream_Release(drdynvc->data_in);
1547
1548
0
    drdynvc->data_in = StreamPool_Take(mgr->pool, totalLength);
1549
0
  }
1550
1551
0
  if (!(data_in = drdynvc->data_in))
1552
0
  {
1553
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "StreamPool_Take failed!");
1554
0
    return CHANNEL_RC_NO_MEMORY;
1555
0
  }
1556
1557
0
  if (!Stream_EnsureRemainingCapacity(data_in, dataLength))
1558
0
  {
1559
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "Stream_EnsureRemainingCapacity failed!");
1560
0
    Stream_Release(drdynvc->data_in);
1561
0
    drdynvc->data_in = NULL;
1562
0
    return ERROR_INTERNAL_ERROR;
1563
0
  }
1564
1565
0
  Stream_Write(data_in, pData, dataLength);
1566
1567
0
  if (dataFlags & CHANNEL_FLAG_LAST)
1568
0
  {
1569
0
    const size_t cap = Stream_Capacity(data_in);
1570
0
    const size_t pos = Stream_GetPosition(data_in);
1571
0
    if (cap < pos)
1572
0
    {
1573
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "drdynvc_plugin_process_received: read error");
1574
0
      return ERROR_INVALID_DATA;
1575
0
    }
1576
1577
0
    drdynvc->data_in = NULL;
1578
0
    Stream_SealLength(data_in);
1579
0
    Stream_SetPosition(data_in, 0);
1580
1581
0
    if (drdynvc->async)
1582
0
    {
1583
0
      if (!MessageQueue_Post(drdynvc->queue, NULL, 0, (void*)data_in, NULL))
1584
0
      {
1585
0
        WLog_Print(drdynvc->log, WLOG_ERROR, "MessageQueue_Post failed!");
1586
0
        return ERROR_INTERNAL_ERROR;
1587
0
      }
1588
0
    }
1589
0
    else
1590
0
    {
1591
0
      UINT error = drdynvc_order_recv(drdynvc, data_in, TRUE);
1592
0
      Stream_Release(data_in);
1593
1594
0
      if (error)
1595
0
      {
1596
0
        WLog_Print(drdynvc->log, WLOG_WARN,
1597
0
                   "drdynvc_order_recv failed with error %" PRIu32 "!", error);
1598
0
        return error;
1599
0
      }
1600
0
    }
1601
0
  }
1602
1603
0
  return CHANNEL_RC_OK;
1604
0
}
1605
1606
static void VCAPITYPE drdynvc_virtual_channel_open_event_ex(LPVOID lpUserParam, DWORD openHandle,
1607
                                                            UINT event, LPVOID pData,
1608
                                                            UINT32 dataLength, UINT32 totalLength,
1609
                                                            UINT32 dataFlags)
1610
0
{
1611
0
  UINT error = CHANNEL_RC_OK;
1612
0
  drdynvcPlugin* drdynvc = (drdynvcPlugin*)lpUserParam;
1613
1614
0
  WINPR_ASSERT(drdynvc);
1615
0
  switch (event)
1616
0
  {
1617
0
    case CHANNEL_EVENT_DATA_RECEIVED:
1618
0
      if (!drdynvc || (drdynvc->OpenHandle != openHandle))
1619
0
      {
1620
0
        WLog_ERR(TAG, "drdynvc_virtual_channel_open_event: error no match");
1621
0
        return;
1622
0
      }
1623
0
      if ((error = drdynvc_virtual_channel_event_data_received(drdynvc, pData, dataLength,
1624
0
                                                               totalLength, dataFlags)))
1625
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
1626
0
                   "drdynvc_virtual_channel_event_data_received failed with error %" PRIu32
1627
0
                   "",
1628
0
                   error);
1629
1630
0
      break;
1631
1632
0
    case CHANNEL_EVENT_WRITE_CANCELLED:
1633
0
    case CHANNEL_EVENT_WRITE_COMPLETE:
1634
0
    {
1635
0
      wStream* s = (wStream*)pData;
1636
0
      Stream_Release(s);
1637
0
    }
1638
0
    break;
1639
1640
0
    case CHANNEL_EVENT_USER:
1641
0
      break;
1642
0
    default:
1643
0
      break;
1644
0
  }
1645
1646
0
  if (error && drdynvc && drdynvc->rdpcontext)
1647
0
    setChannelError(drdynvc->rdpcontext, error,
1648
0
                    "drdynvc_virtual_channel_open_event reported an error");
1649
0
}
1650
1651
static DWORD WINAPI drdynvc_virtual_channel_client_thread(LPVOID arg)
1652
0
{
1653
  /* TODO: rewrite this */
1654
0
  wStream* data = NULL;
1655
0
  wMessage message = WINPR_C_ARRAY_INIT;
1656
0
  UINT error = CHANNEL_RC_OK;
1657
0
  drdynvcPlugin* drdynvc = (drdynvcPlugin*)arg;
1658
1659
0
  if (!drdynvc)
1660
0
  {
1661
0
    ExitThread((DWORD)CHANNEL_RC_BAD_CHANNEL_HANDLE);
1662
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1663
0
  }
1664
1665
0
  while (1)
1666
0
  {
1667
0
    if (!MessageQueue_Wait(drdynvc->queue))
1668
0
    {
1669
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "MessageQueue_Wait failed!");
1670
0
      error = ERROR_INTERNAL_ERROR;
1671
0
      break;
1672
0
    }
1673
1674
0
    if (!MessageQueue_Peek(drdynvc->queue, &message, TRUE))
1675
0
    {
1676
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "MessageQueue_Peek failed!");
1677
0
      error = ERROR_INTERNAL_ERROR;
1678
0
      break;
1679
0
    }
1680
1681
0
    if (message.id == WMQ_QUIT)
1682
0
      break;
1683
1684
0
    if (message.id == 0)
1685
0
    {
1686
0
      UINT32 ThreadingFlags = TRUE;
1687
0
      data = (wStream*)message.wParam;
1688
1689
0
      if ((error = drdynvc_order_recv(drdynvc, data, ThreadingFlags)))
1690
0
      {
1691
0
        WLog_Print(drdynvc->log, WLOG_WARN,
1692
0
                   "drdynvc_order_recv failed with error %" PRIu32 "!", error);
1693
0
      }
1694
1695
0
      Stream_Release(data);
1696
0
    }
1697
0
  }
1698
1699
0
  {
1700
    /* Disconnect remaining dynamic channels that the server did not.
1701
     * This is required to properly shut down channels by calling the appropriate
1702
     * event handlers. */
1703
0
    DVCMAN* drdynvcMgr = (DVCMAN*)drdynvc->channel_mgr;
1704
1705
0
    HashTable_Clear(drdynvcMgr->channelsById);
1706
0
  }
1707
1708
0
  if (error && drdynvc->rdpcontext)
1709
0
    setChannelError(drdynvc->rdpcontext, error,
1710
0
                    "drdynvc_virtual_channel_client_thread reported an error");
1711
1712
0
  ExitThread((DWORD)error);
1713
0
  return error;
1714
0
}
1715
1716
static void drdynvc_queue_object_free(void* obj)
1717
0
{
1718
0
  wStream* s = NULL;
1719
0
  wMessage* msg = (wMessage*)obj;
1720
1721
0
  if (!msg || (msg->id != 0))
1722
0
    return;
1723
1724
0
  s = (wStream*)msg->wParam;
1725
1726
0
  if (s)
1727
0
    Stream_Release(s);
1728
0
}
1729
1730
static UINT drdynvc_virtual_channel_event_initialized(drdynvcPlugin* drdynvc, LPVOID pData,
1731
                                                      UINT32 dataLength)
1732
0
{
1733
0
  wObject* obj = NULL;
1734
0
  WINPR_UNUSED(pData);
1735
0
  WINPR_UNUSED(dataLength);
1736
1737
0
  if (!drdynvc)
1738
0
    goto error;
1739
1740
0
  drdynvc->queue = MessageQueue_New(NULL);
1741
1742
0
  if (!drdynvc->queue)
1743
0
  {
1744
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "MessageQueue_New failed!");
1745
0
    goto error;
1746
0
  }
1747
1748
0
  obj = MessageQueue_Object(drdynvc->queue);
1749
0
  obj->fnObjectFree = drdynvc_queue_object_free;
1750
0
  drdynvc->channel_mgr = dvcman_new(drdynvc);
1751
1752
0
  if (!drdynvc->channel_mgr)
1753
0
  {
1754
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "dvcman_new failed!");
1755
0
    goto error;
1756
0
  }
1757
1758
0
  return CHANNEL_RC_OK;
1759
0
error:
1760
0
  return ERROR_INTERNAL_ERROR;
1761
0
}
1762
1763
/**
1764
 * Function description
1765
 *
1766
 * @return 0 on success, otherwise a Win32 error code
1767
 */
1768
static UINT drdynvc_virtual_channel_event_connected(drdynvcPlugin* drdynvc, LPVOID pData,
1769
                                                    UINT32 dataLength)
1770
0
{
1771
0
  UINT error = 0;
1772
0
  UINT32 status = 0;
1773
0
  rdpSettings* settings = NULL;
1774
1775
0
  WINPR_ASSERT(drdynvc);
1776
0
  WINPR_UNUSED(pData);
1777
0
  WINPR_UNUSED(dataLength);
1778
1779
0
  if (!drdynvc)
1780
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1781
1782
0
  WINPR_ASSERT(drdynvc->channelEntryPoints.pVirtualChannelOpenEx);
1783
0
  status = drdynvc->channelEntryPoints.pVirtualChannelOpenEx(
1784
0
      drdynvc->InitHandle, &drdynvc->OpenHandle, drdynvc->channelDef.name,
1785
0
      drdynvc_virtual_channel_open_event_ex);
1786
1787
0
  if (status != CHANNEL_RC_OK)
1788
0
  {
1789
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "pVirtualChannelOpen failed with %s [%08" PRIX32 "]",
1790
0
               WTSErrorToString(status), status);
1791
0
    return status;
1792
0
  }
1793
1794
0
  WINPR_ASSERT(drdynvc->rdpcontext);
1795
0
  settings = drdynvc->rdpcontext->settings;
1796
0
  WINPR_ASSERT(settings);
1797
1798
0
  for (UINT32 index = 0;
1799
0
       index < freerdp_settings_get_uint32(settings, FreeRDP_DynamicChannelCount); index++)
1800
0
  {
1801
0
    const ADDIN_ARGV* args =
1802
0
        freerdp_settings_get_pointer_array(settings, FreeRDP_DynamicChannelArray, index);
1803
0
    error = dvcman_load_addin(drdynvc, drdynvc->channel_mgr, args, drdynvc->rdpcontext);
1804
1805
0
    if (CHANNEL_RC_OK != error)
1806
0
      goto error;
1807
0
  }
1808
1809
0
  if ((error = dvcman_init(drdynvc, drdynvc->channel_mgr)))
1810
0
  {
1811
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "dvcman_init failed with error %" PRIu32 "!", error);
1812
0
    goto error;
1813
0
  }
1814
1815
0
  drdynvc->state = DRDYNVC_STATE_CAPABILITIES;
1816
1817
0
  if (drdynvc->async)
1818
0
  {
1819
0
    if (!(drdynvc->thread = CreateThread(NULL, 0, drdynvc_virtual_channel_client_thread,
1820
0
                                         (void*)drdynvc, 0, NULL)))
1821
0
    {
1822
0
      error = ERROR_INTERNAL_ERROR;
1823
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "CreateThread failed!");
1824
0
      goto error;
1825
0
    }
1826
1827
0
    if (!SetThreadPriority(drdynvc->thread, THREAD_PRIORITY_HIGHEST))
1828
0
      WLog_Print(drdynvc->log, WLOG_WARN, "SetThreadPriority failed, ignoring.");
1829
0
  }
1830
1831
0
error:
1832
0
  return error;
1833
0
}
1834
1835
/**
1836
 * Function description
1837
 *
1838
 * @return 0 on success, otherwise a Win32 error code
1839
 */
1840
static UINT drdynvc_virtual_channel_event_disconnected(drdynvcPlugin* drdynvc)
1841
0
{
1842
0
  UINT status = 0;
1843
1844
0
  if (!drdynvc)
1845
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1846
1847
0
  if (drdynvc->OpenHandle == 0)
1848
0
    return CHANNEL_RC_OK;
1849
1850
0
  if (drdynvc->queue)
1851
0
  {
1852
0
    if (!MessageQueue_PostQuit(drdynvc->queue, 0))
1853
0
    {
1854
0
      status = GetLastError();
1855
0
      WLog_Print(drdynvc->log, WLOG_ERROR,
1856
0
                 "MessageQueue_PostQuit failed with error %" PRIu32 "", status);
1857
0
      return status;
1858
0
    }
1859
0
  }
1860
1861
0
  if (drdynvc->thread)
1862
0
  {
1863
0
    if (WaitForSingleObject(drdynvc->thread, INFINITE) != WAIT_OBJECT_0)
1864
0
    {
1865
0
      status = GetLastError();
1866
0
      WLog_Print(drdynvc->log, WLOG_ERROR,
1867
0
                 "WaitForSingleObject failed with error %" PRIu32 "", status);
1868
0
      return status;
1869
0
    }
1870
1871
0
    (void)CloseHandle(drdynvc->thread);
1872
0
    drdynvc->thread = NULL;
1873
0
  }
1874
0
  else
1875
0
  {
1876
0
    {
1877
      /* Disconnect remaining dynamic channels that the server did not.
1878
       * This is required to properly shut down channels by calling the appropriate
1879
       * event handlers. */
1880
0
      DVCMAN* drdynvcMgr = (DVCMAN*)drdynvc->channel_mgr;
1881
1882
0
      HashTable_Clear(drdynvcMgr->channelsById);
1883
0
    }
1884
0
  }
1885
1886
0
  WINPR_ASSERT(drdynvc->channelEntryPoints.pVirtualChannelCloseEx);
1887
0
  status = drdynvc->channelEntryPoints.pVirtualChannelCloseEx(drdynvc->InitHandle,
1888
0
                                                              drdynvc->OpenHandle);
1889
1890
0
  if (status != CHANNEL_RC_OK)
1891
0
  {
1892
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "pVirtualChannelClose failed with %s [%08" PRIX32 "]",
1893
0
               WTSErrorToString(status), status);
1894
0
  }
1895
1896
0
  dvcman_clear(drdynvc, drdynvc->channel_mgr);
1897
0
  if (drdynvc->queue)
1898
0
    MessageQueue_Clear(drdynvc->queue);
1899
0
  drdynvc->OpenHandle = 0;
1900
1901
0
  if (drdynvc->data_in)
1902
0
  {
1903
0
    Stream_Release(drdynvc->data_in);
1904
0
    drdynvc->data_in = NULL;
1905
0
  }
1906
1907
0
  return status;
1908
0
}
1909
1910
/**
1911
 * Function description
1912
 *
1913
 * @return 0 on success, otherwise a Win32 error code
1914
 */
1915
static UINT drdynvc_virtual_channel_event_terminated(drdynvcPlugin* drdynvc)
1916
0
{
1917
0
  if (!drdynvc)
1918
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1919
1920
0
  MessageQueue_Free(drdynvc->queue);
1921
0
  drdynvc->queue = NULL;
1922
1923
0
  if (drdynvc->channel_mgr)
1924
0
  {
1925
0
    dvcman_free(drdynvc, drdynvc->channel_mgr);
1926
0
    drdynvc->channel_mgr = NULL;
1927
0
  }
1928
0
  drdynvc->InitHandle = 0;
1929
0
  free(drdynvc->context);
1930
0
  free(drdynvc);
1931
0
  return CHANNEL_RC_OK;
1932
0
}
1933
1934
static UINT drdynvc_virtual_channel_event_attached(drdynvcPlugin* drdynvc)
1935
0
{
1936
0
  UINT error = CHANNEL_RC_OK;
1937
0
  DVCMAN* dvcman = NULL;
1938
1939
0
  if (!drdynvc)
1940
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1941
1942
0
  dvcman = (DVCMAN*)drdynvc->channel_mgr;
1943
1944
0
  if (!dvcman)
1945
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1946
1947
0
  ArrayList_Lock(dvcman->plugins);
1948
0
  for (size_t i = 0; i < ArrayList_Count(dvcman->plugins); i++)
1949
0
  {
1950
0
    IWTSPlugin* pPlugin = ArrayList_GetItem(dvcman->plugins, i);
1951
1952
0
    error = IFCALLRESULT(CHANNEL_RC_OK, pPlugin->Attached, pPlugin);
1953
0
    if (error != CHANNEL_RC_OK)
1954
0
    {
1955
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "Attach failed with error %" PRIu32 "!", error);
1956
0
      goto fail;
1957
0
    }
1958
0
  }
1959
1960
0
fail:
1961
0
  ArrayList_Unlock(dvcman->plugins);
1962
0
  return error;
1963
0
}
1964
1965
static UINT drdynvc_virtual_channel_event_detached(drdynvcPlugin* drdynvc)
1966
0
{
1967
0
  UINT error = CHANNEL_RC_OK;
1968
0
  DVCMAN* dvcman = NULL;
1969
1970
0
  if (!drdynvc)
1971
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1972
1973
0
  dvcman = (DVCMAN*)drdynvc->channel_mgr;
1974
1975
0
  if (!dvcman)
1976
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1977
1978
0
  ArrayList_Lock(dvcman->plugins);
1979
0
  for (size_t i = 0; i < ArrayList_Count(dvcman->plugins); i++)
1980
0
  {
1981
0
    IWTSPlugin* pPlugin = ArrayList_GetItem(dvcman->plugins, i);
1982
1983
0
    error = IFCALLRESULT(CHANNEL_RC_OK, pPlugin->Detached, pPlugin);
1984
0
    if (error != CHANNEL_RC_OK)
1985
0
    {
1986
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "Detach failed with error %" PRIu32 "!", error);
1987
0
      goto fail;
1988
0
    }
1989
0
  }
1990
1991
0
fail:
1992
0
  ArrayList_Unlock(dvcman->plugins);
1993
1994
0
  return error;
1995
0
}
1996
1997
static VOID VCAPITYPE drdynvc_virtual_channel_init_event_ex(LPVOID lpUserParam, LPVOID pInitHandle,
1998
                                                            UINT event, LPVOID pData,
1999
                                                            UINT dataLength)
2000
0
{
2001
0
  UINT error = CHANNEL_RC_OK;
2002
0
  drdynvcPlugin* drdynvc = (drdynvcPlugin*)lpUserParam;
2003
2004
0
  if (!drdynvc || (drdynvc->InitHandle != pInitHandle))
2005
0
  {
2006
0
    WLog_ERR(TAG, "drdynvc_virtual_channel_init_event: error no match");
2007
0
    return;
2008
0
  }
2009
2010
0
  switch (event)
2011
0
  {
2012
0
    case CHANNEL_EVENT_INITIALIZED:
2013
0
      error = drdynvc_virtual_channel_event_initialized(drdynvc, pData, dataLength);
2014
0
      break;
2015
0
    case CHANNEL_EVENT_CONNECTED:
2016
0
      if ((error = drdynvc_virtual_channel_event_connected(drdynvc, pData, dataLength)))
2017
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
2018
0
                   "drdynvc_virtual_channel_event_connected failed with error %" PRIu32 "",
2019
0
                   error);
2020
2021
0
      break;
2022
2023
0
    case CHANNEL_EVENT_DISCONNECTED:
2024
0
      if ((error = drdynvc_virtual_channel_event_disconnected(drdynvc)))
2025
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
2026
0
                   "drdynvc_virtual_channel_event_disconnected failed with error %" PRIu32
2027
0
                   "",
2028
0
                   error);
2029
2030
0
      break;
2031
2032
0
    case CHANNEL_EVENT_TERMINATED:
2033
0
      if ((error = drdynvc_virtual_channel_event_terminated(drdynvc)))
2034
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
2035
0
                   "drdynvc_virtual_channel_event_terminated failed with error %" PRIu32 "",
2036
0
                   error);
2037
2038
0
      break;
2039
2040
0
    case CHANNEL_EVENT_ATTACHED:
2041
0
      if ((error = drdynvc_virtual_channel_event_attached(drdynvc)))
2042
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
2043
0
                   "drdynvc_virtual_channel_event_attached failed with error %" PRIu32 "",
2044
0
                   error);
2045
2046
0
      break;
2047
2048
0
    case CHANNEL_EVENT_DETACHED:
2049
0
      if ((error = drdynvc_virtual_channel_event_detached(drdynvc)))
2050
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
2051
0
                   "drdynvc_virtual_channel_event_detached failed with error %" PRIu32 "",
2052
0
                   error);
2053
2054
0
      break;
2055
2056
0
    default:
2057
0
      break;
2058
0
  }
2059
2060
0
  if (error && drdynvc->rdpcontext)
2061
0
    setChannelError(drdynvc->rdpcontext, error,
2062
0
                    "drdynvc_virtual_channel_init_event_ex reported an error");
2063
0
}
2064
2065
/**
2066
 * Channel Client Interface
2067
 */
2068
2069
static int drdynvc_get_version(DrdynvcClientContext* context)
2070
0
{
2071
0
  WINPR_ASSERT(context);
2072
0
  drdynvcPlugin* drdynvc = (drdynvcPlugin*)context->handle;
2073
0
  WINPR_ASSERT(drdynvc);
2074
0
  return drdynvc->version;
2075
0
}
2076
2077
/* drdynvc is always built-in */
2078
#define VirtualChannelEntryEx drdynvc_VirtualChannelEntryEx
2079
2080
FREERDP_ENTRY_POINT(BOOL VCAPITYPE VirtualChannelEntryEx(PCHANNEL_ENTRY_POINTS_EX pEntryPoints,
2081
                                                         PVOID pInitHandle))
2082
0
{
2083
0
  UINT rc = 0;
2084
0
  drdynvcPlugin* drdynvc = NULL;
2085
0
  DrdynvcClientContext* context = NULL;
2086
0
  CHANNEL_ENTRY_POINTS_FREERDP_EX* pEntryPointsEx = NULL;
2087
0
  drdynvc = (drdynvcPlugin*)calloc(1, sizeof(drdynvcPlugin));
2088
2089
0
  WINPR_ASSERT(pEntryPoints);
2090
0
  if (!drdynvc)
2091
0
  {
2092
0
    WLog_ERR(TAG, "calloc failed!");
2093
0
    return FALSE;
2094
0
  }
2095
2096
0
  drdynvc->channelDef.options =
2097
0
      CHANNEL_OPTION_INITIALIZED | CHANNEL_OPTION_ENCRYPT_RDP | CHANNEL_OPTION_COMPRESS_RDP;
2098
0
  (void)sprintf_s(drdynvc->channelDef.name, ARRAYSIZE(drdynvc->channelDef.name),
2099
0
                  DRDYNVC_SVC_CHANNEL_NAME);
2100
0
  drdynvc->state = DRDYNVC_STATE_INITIAL;
2101
0
  pEntryPointsEx = (CHANNEL_ENTRY_POINTS_FREERDP_EX*)pEntryPoints;
2102
2103
0
  if ((pEntryPointsEx->cbSize >= sizeof(CHANNEL_ENTRY_POINTS_FREERDP_EX)) &&
2104
0
      (pEntryPointsEx->MagicNumber == FREERDP_CHANNEL_MAGIC_NUMBER))
2105
0
  {
2106
0
    context = (DrdynvcClientContext*)calloc(1, sizeof(DrdynvcClientContext));
2107
2108
0
    if (!context)
2109
0
    {
2110
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "calloc failed!");
2111
0
      free(drdynvc);
2112
0
      return FALSE;
2113
0
    }
2114
2115
0
    context->handle = (void*)drdynvc;
2116
0
    context->custom = NULL;
2117
0
    drdynvc->context = context;
2118
0
    context->GetVersion = drdynvc_get_version;
2119
0
    drdynvc->rdpcontext = pEntryPointsEx->context;
2120
0
    if (!freerdp_settings_get_bool(drdynvc->rdpcontext->settings,
2121
0
                                   FreeRDP_TransportDumpReplay) &&
2122
0
        !freerdp_settings_get_bool(drdynvc->rdpcontext->settings,
2123
0
                                   FreeRDP_SynchronousDynamicChannels))
2124
0
      drdynvc->async = TRUE;
2125
0
  }
2126
2127
0
  drdynvc->log = WLog_Get(TAG);
2128
0
  WLog_Print(drdynvc->log, WLOG_DEBUG, "VirtualChannelEntryEx");
2129
0
  CopyMemory(&(drdynvc->channelEntryPoints), pEntryPoints,
2130
0
             sizeof(CHANNEL_ENTRY_POINTS_FREERDP_EX));
2131
0
  drdynvc->InitHandle = pInitHandle;
2132
2133
0
  WINPR_ASSERT(drdynvc->channelEntryPoints.pVirtualChannelInitEx);
2134
0
  rc = drdynvc->channelEntryPoints.pVirtualChannelInitEx(
2135
0
      drdynvc, context, pInitHandle, &drdynvc->channelDef, 1, VIRTUAL_CHANNEL_VERSION_WIN2000,
2136
0
      drdynvc_virtual_channel_init_event_ex);
2137
2138
0
  if (CHANNEL_RC_OK != rc)
2139
0
  {
2140
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "pVirtualChannelInit failed with %s [%08" PRIX32 "]",
2141
0
               WTSErrorToString(rc), rc);
2142
0
    free(drdynvc->context);
2143
0
    free(drdynvc);
2144
0
    return FALSE;
2145
0
  }
2146
2147
0
  drdynvc->channelEntryPoints.pInterface = context;
2148
0
  return TRUE;
2149
0
}