Coverage Report

Created: 2026-05-11 07:01

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/FreeRDP/channels/drdynvc/client/drdynvc_main.c
Line
Count
Source
1
/**
2
 * FreeRDP: A Remote Desktop Protocol Implementation
3
 * Dynamic Virtual Channel
4
 *
5
 * Copyright 2010-2011 Vic Lee
6
 * Copyright 2015 Thincast Technologies GmbH
7
 * Copyright 2015 DI (FH) Martin Haimberger <martin.haimberger@thincast.com>
8
 *
9
 * Licensed under the Apache License, Version 2.0 (the "License");
10
 * you may not use this file except in compliance with the License.
11
 * You may obtain a copy of the License at
12
 *
13
 *     http://www.apache.org/licenses/LICENSE-2.0
14
 *
15
 * Unless required by applicable law or agreed to in writing, software
16
 * distributed under the License is distributed on an "AS IS" BASIS,
17
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
18
 * See the License for the specific language governing permissions and
19
 * limitations under the License.
20
 */
21
22
#include <freerdp/config.h>
23
24
#include <winpr/crt.h>
25
#include <winpr/cast.h>
26
#include <winpr/stream.h>
27
#include <winpr/interlocked.h>
28
29
#include <freerdp/freerdp.h>
30
#include <freerdp/channels/drdynvc.h>
31
#include <freerdp/utils/drdynvc.h>
32
#include <freerdp/codec/zgfx.h>
33
34
#include "drdynvc_main.h"
35
36
0
#define TAG CHANNELS_TAG("drdynvc.client")
37
38
static const char* channel_state2str(DVC_CHANNEL_STATE state)
39
0
{
40
0
  switch (state)
41
0
  {
42
0
    case DVC_CHANNEL_INIT:
43
0
      return "DVC_CHANNEL_INIT";
44
0
    case DVC_CHANNEL_RUNNING:
45
0
      return "DVC_CHANNEL_RUNNING";
46
0
    case DVC_CHANNEL_CLOSED:
47
0
      return "DVC_CHANNEL_CLOSED";
48
0
    default:
49
0
      return "DVC_CHANNEL_UNKNOWN";
50
0
  }
51
0
}
52
53
static void dvcman_channel_free(DVCMAN_CHANNEL* channel);
54
static UINT dvcman_channel_close(DVCMAN_CHANNEL* channel, BOOL perRequest, BOOL fromHashTableFn);
55
static void dvcman_free(drdynvcPlugin* drdynvc, IWTSVirtualChannelManager* pChannelMgr);
56
static UINT drdynvc_write_data(drdynvcPlugin* drdynvc, UINT32 ChannelId, const BYTE* data,
57
                               UINT32 dataSize, BOOL* close);
58
static UINT drdynvc_send(drdynvcPlugin* drdynvc, wStream* s);
59
60
static void dvcman_wtslistener_free(DVCMAN_LISTENER* listener)
61
0
{
62
0
  if (listener)
63
0
    free(listener->channel_name);
64
0
  free(listener);
65
0
}
66
67
/**
68
 * Function description
69
 *
70
 * @return 0 on success, otherwise a Win32 error code
71
 */
72
static UINT dvcman_get_configuration(IWTSListener* pListener, void** ppPropertyBag)
73
0
{
74
0
  WINPR_ASSERT(ppPropertyBag);
75
0
  WINPR_UNUSED(pListener);
76
0
  *ppPropertyBag = nullptr;
77
0
  return ERROR_INTERNAL_ERROR;
78
0
}
79
80
/**
81
 * Function description
82
 *
83
 * @return 0 on success, otherwise a Win32 error code
84
 */
85
static UINT dvcman_create_listener(IWTSVirtualChannelManager* pChannelMgr,
86
                                   const char* pszChannelName, ULONG ulFlags,
87
                                   IWTSListenerCallback* pListenerCallback,
88
                                   IWTSListener** ppListener)
89
0
{
90
0
  DVCMAN* dvcman = (DVCMAN*)pChannelMgr;
91
0
  DVCMAN_LISTENER* listener = nullptr;
92
93
0
  WINPR_ASSERT(dvcman);
94
0
  WLog_DBG(TAG, "create_listener: %" PRIuz ".%s.", HashTable_Count(dvcman->listeners) + 1,
95
0
           pszChannelName);
96
0
  listener = (DVCMAN_LISTENER*)calloc(1, sizeof(DVCMAN_LISTENER));
97
98
0
  if (!listener)
99
0
  {
100
0
    WLog_ERR(TAG, "calloc failed!");
101
0
    return CHANNEL_RC_NO_MEMORY;
102
0
  }
103
104
0
  listener->iface.GetConfiguration = dvcman_get_configuration;
105
0
  listener->iface.pInterface = nullptr;
106
0
  listener->dvcman = dvcman;
107
0
  listener->channel_name = _strdup(pszChannelName);
108
109
0
  if (!listener->channel_name)
110
0
  {
111
0
    WLog_ERR(TAG, "_strdup failed!");
112
0
    dvcman_wtslistener_free(listener);
113
0
    return CHANNEL_RC_NO_MEMORY;
114
0
  }
115
116
0
  listener->flags = ulFlags;
117
0
  listener->listener_callback = pListenerCallback;
118
119
0
  if (ppListener)
120
0
    *ppListener = (IWTSListener*)listener;
121
122
0
  if (!HashTable_Insert(dvcman->listeners, listener->channel_name, listener))
123
0
  {
124
0
    dvcman_wtslistener_free(listener);
125
0
    return ERROR_INTERNAL_ERROR;
126
0
  }
127
128
  // NOLINTNEXTLINE(clang-analyzer-unix.Malloc): HashTable_Insert takes ownership of listener
129
0
  return CHANNEL_RC_OK;
130
0
}
131
132
static UINT dvcman_destroy_listener(IWTSVirtualChannelManager* pChannelMgr, IWTSListener* pListener)
133
0
{
134
0
  DVCMAN_LISTENER* listener = (DVCMAN_LISTENER*)pListener;
135
136
0
  WINPR_UNUSED(pChannelMgr);
137
138
0
  if (listener)
139
0
  {
140
0
    DVCMAN* dvcman = listener->dvcman;
141
0
    if (dvcman)
142
0
      HashTable_Remove(dvcman->listeners, listener->channel_name);
143
0
  }
144
145
0
  return CHANNEL_RC_OK;
146
0
}
147
148
/**
149
 * Function description
150
 *
151
 * @return 0 on success, otherwise a Win32 error code
152
 */
153
static UINT dvcman_register_plugin(IDRDYNVC_ENTRY_POINTS* pEntryPoints, const char* name,
154
                                   IWTSPlugin* pPlugin)
155
0
{
156
0
  WINPR_ASSERT(pEntryPoints);
157
0
  DVCMAN* dvcman = ((DVCMAN_ENTRY_POINTS*)pEntryPoints)->dvcman;
158
159
0
  WINPR_ASSERT(dvcman);
160
0
  if (!ArrayList_Append(dvcman->plugin_names, name))
161
0
    return ERROR_INTERNAL_ERROR;
162
0
  if (!ArrayList_Append(dvcman->plugins, pPlugin))
163
0
    return ERROR_INTERNAL_ERROR;
164
165
0
  WLog_DBG(TAG, "register_plugin: num_plugins %" PRIuz, ArrayList_Count(dvcman->plugins));
166
0
  return CHANNEL_RC_OK;
167
0
}
168
169
static IWTSPlugin* dvcman_get_plugin(IDRDYNVC_ENTRY_POINTS* pEntryPoints, const char* name)
170
0
{
171
0
  IWTSPlugin* plugin = nullptr;
172
0
  size_t nc = 0;
173
0
  size_t pc = 0;
174
0
  WINPR_ASSERT(pEntryPoints);
175
0
  DVCMAN* dvcman = ((DVCMAN_ENTRY_POINTS*)pEntryPoints)->dvcman;
176
0
  if (!dvcman || !pEntryPoints || !name)
177
0
    return nullptr;
178
179
0
  nc = ArrayList_Count(dvcman->plugin_names);
180
0
  pc = ArrayList_Count(dvcman->plugins);
181
0
  if (nc != pc)
182
0
    return nullptr;
183
184
0
  ArrayList_Lock(dvcman->plugin_names);
185
0
  ArrayList_Lock(dvcman->plugins);
186
0
  for (size_t i = 0; i < pc; i++)
187
0
  {
188
0
    const char* cur = ArrayList_GetItem(dvcman->plugin_names, i);
189
0
    if (strcmp(cur, name) == 0)
190
0
    {
191
0
      plugin = ArrayList_GetItem(dvcman->plugins, i);
192
0
      break;
193
0
    }
194
0
  }
195
0
  ArrayList_Unlock(dvcman->plugin_names);
196
0
  ArrayList_Unlock(dvcman->plugins);
197
0
  return plugin;
198
0
}
199
200
static const ADDIN_ARGV* dvcman_get_plugin_data(IDRDYNVC_ENTRY_POINTS* pEntryPoints)
201
0
{
202
0
  WINPR_ASSERT(pEntryPoints);
203
0
  return ((DVCMAN_ENTRY_POINTS*)pEntryPoints)->args;
204
0
}
205
206
static rdpContext* dvcman_get_rdp_context(IDRDYNVC_ENTRY_POINTS* pEntryPoints)
207
0
{
208
0
  DVCMAN_ENTRY_POINTS* entry = (DVCMAN_ENTRY_POINTS*)pEntryPoints;
209
0
  WINPR_ASSERT(entry);
210
0
  return entry->context;
211
0
}
212
213
static rdpSettings* dvcman_get_rdp_settings(IDRDYNVC_ENTRY_POINTS* pEntryPoints)
214
0
{
215
0
  rdpContext* context = dvcman_get_rdp_context(pEntryPoints);
216
0
  WINPR_ASSERT(context);
217
218
0
  return context->settings;
219
0
}
220
221
static UINT32 dvcman_get_channel_id(IWTSVirtualChannel* channel)
222
0
{
223
0
  DVCMAN_CHANNEL* dvc = (DVCMAN_CHANNEL*)channel;
224
0
  WINPR_ASSERT(dvc);
225
0
  return dvc->channel_id;
226
0
}
227
228
static const char* dvcman_get_channel_name(IWTSVirtualChannel* channel)
229
0
{
230
0
  DVCMAN_CHANNEL* dvc = (DVCMAN_CHANNEL*)channel;
231
0
  WINPR_ASSERT(dvc);
232
0
  return dvc->channel_name;
233
0
}
234
235
static DVCMAN_CHANNEL* dvcman_get_channel_by_id(IWTSVirtualChannelManager* pChannelMgr,
236
                                                UINT32 ChannelId, BOOL doRef)
237
0
{
238
0
  DVCMAN* dvcman = (DVCMAN*)pChannelMgr;
239
0
  DVCMAN_CHANNEL* dvcChannel = nullptr;
240
241
0
  WINPR_ASSERT(dvcman);
242
0
  HashTable_Lock(dvcman->channelsById);
243
0
  dvcChannel = HashTable_GetItemValue(dvcman->channelsById, &ChannelId);
244
0
  if (dvcChannel)
245
0
  {
246
0
    if (doRef)
247
0
      InterlockedIncrement(&dvcChannel->refCounter);
248
0
  }
249
250
0
  HashTable_Unlock(dvcman->channelsById);
251
0
  return dvcChannel;
252
0
}
253
254
static IWTSVirtualChannel* dvcman_find_channel_by_id(IWTSVirtualChannelManager* pChannelMgr,
255
                                                     UINT32 ChannelId)
256
0
{
257
0
  DVCMAN_CHANNEL* channel = dvcman_get_channel_by_id(pChannelMgr, ChannelId, FALSE);
258
0
  if (!channel)
259
0
    return nullptr;
260
261
0
  return &channel->iface;
262
0
}
263
264
static void dvcman_plugin_terminate(void* plugin)
265
0
{
266
0
  IWTSPlugin* pPlugin = plugin;
267
268
0
  WINPR_ASSERT(pPlugin);
269
0
  UINT error = IFCALLRESULT(CHANNEL_RC_OK, pPlugin->Terminated, pPlugin);
270
0
  if (error != CHANNEL_RC_OK)
271
0
    WLog_ERR(TAG, "Terminated failed with error %" PRIu32 "!", error);
272
0
}
273
274
static void wts_listener_free(void* arg)
275
0
{
276
0
  DVCMAN_LISTENER* listener = (DVCMAN_LISTENER*)arg;
277
0
  dvcman_wtslistener_free(listener);
278
0
}
279
280
static BOOL channelIdMatch(const void* k1, const void* k2)
281
0
{
282
0
  WINPR_ASSERT(k1);
283
0
  WINPR_ASSERT(k2);
284
0
  return *((const UINT32*)k1) == *((const UINT32*)k2);
285
0
}
286
287
static UINT32 channelIdHash(const void* id)
288
0
{
289
0
  WINPR_ASSERT(id);
290
0
  return *((const UINT32*)id);
291
0
}
292
293
static void channelByIdCleanerFn(void* value)
294
0
{
295
0
  DVCMAN_CHANNEL* channel = (DVCMAN_CHANNEL*)value;
296
0
  if (channel)
297
0
  {
298
0
    dvcman_channel_close(channel, FALSE, TRUE);
299
0
    dvcman_channel_free(channel);
300
0
  }
301
0
}
302
303
static IWTSVirtualChannelManager* dvcman_new(drdynvcPlugin* plugin)
304
0
{
305
0
  wObject* obj = nullptr;
306
0
  DVCMAN* dvcman = (DVCMAN*)calloc(1, sizeof(DVCMAN));
307
308
0
  if (!dvcman)
309
0
    return nullptr;
310
311
0
  dvcman->iface.CreateListener = dvcman_create_listener;
312
0
  dvcman->iface.DestroyListener = dvcman_destroy_listener;
313
0
  dvcman->iface.FindChannelById = dvcman_find_channel_by_id;
314
0
  dvcman->iface.GetChannelId = dvcman_get_channel_id;
315
0
  dvcman->iface.GetChannelName = dvcman_get_channel_name;
316
0
  dvcman->drdynvc = plugin;
317
0
  dvcman->channelsById = HashTable_New(TRUE);
318
319
0
  if (!dvcman->channelsById)
320
0
    goto fail;
321
322
0
  if (!HashTable_SetHashFunction(dvcman->channelsById, channelIdHash))
323
0
    goto fail;
324
325
0
  obj = HashTable_KeyObject(dvcman->channelsById);
326
0
  WINPR_ASSERT(obj);
327
0
  obj->fnObjectEquals = channelIdMatch;
328
329
0
  obj = HashTable_ValueObject(dvcman->channelsById);
330
0
  WINPR_ASSERT(obj);
331
0
  obj->fnObjectFree = channelByIdCleanerFn;
332
333
0
  dvcman->pool = StreamPool_New(TRUE, 10);
334
0
  if (!dvcman->pool)
335
0
    goto fail;
336
337
0
  dvcman->listeners = HashTable_New(TRUE);
338
0
  if (!dvcman->listeners)
339
0
    goto fail;
340
341
0
  if (!HashTable_SetHashFunction(dvcman->listeners, HashTable_StringHash))
342
0
    goto fail;
343
344
0
  obj = HashTable_KeyObject(dvcman->listeners);
345
0
  obj->fnObjectEquals = HashTable_StringCompare;
346
347
0
  obj = HashTable_ValueObject(dvcman->listeners);
348
0
  obj->fnObjectFree = wts_listener_free;
349
350
0
  dvcman->plugin_names = ArrayList_New(TRUE);
351
0
  if (!dvcman->plugin_names)
352
0
    goto fail;
353
0
  obj = ArrayList_Object(dvcman->plugin_names);
354
0
  obj->fnObjectNew = winpr_ObjectStringClone;
355
0
  obj->fnObjectFree = winpr_ObjectStringFree;
356
357
0
  dvcman->plugins = ArrayList_New(TRUE);
358
0
  if (!dvcman->plugins)
359
0
    goto fail;
360
0
  obj = ArrayList_Object(dvcman->plugins);
361
0
  obj->fnObjectFree = dvcman_plugin_terminate;
362
0
  return &dvcman->iface;
363
0
fail:
364
0
  dvcman_free(plugin, &dvcman->iface);
365
0
  return nullptr;
366
0
}
367
368
/**
369
 * Function description
370
 *
371
 * @return 0 on success, otherwise a Win32 error code
372
 */
373
static UINT dvcman_load_addin(drdynvcPlugin* drdynvc, IWTSVirtualChannelManager* pChannelMgr,
374
                              const ADDIN_ARGV* args, rdpContext* context)
375
0
{
376
0
  WINPR_ASSERT(drdynvc);
377
0
  WINPR_ASSERT(pChannelMgr);
378
0
  WINPR_ASSERT(args);
379
0
  WINPR_ASSERT(context);
380
381
0
  WLog_Print(drdynvc->log, WLOG_INFO, "Loading Dynamic Virtual Channel %s", args->argv[0]);
382
383
0
  PVIRTUALCHANNELENTRY pvce = freerdp_load_channel_addin_entry(args->argv[0], nullptr, nullptr,
384
0
                                                               FREERDP_ADDIN_CHANNEL_DYNAMIC);
385
0
  PDVC_PLUGIN_ENTRY pDVCPluginEntry = WINPR_FUNC_PTR_CAST(pvce, PDVC_PLUGIN_ENTRY);
386
387
0
  if (pDVCPluginEntry)
388
0
  {
389
0
    DVCMAN_ENTRY_POINTS entryPoints = WINPR_C_ARRAY_INIT;
390
391
0
    entryPoints.iface.RegisterPlugin = dvcman_register_plugin;
392
0
    entryPoints.iface.GetPlugin = dvcman_get_plugin;
393
0
    entryPoints.iface.GetPluginData = dvcman_get_plugin_data;
394
0
    entryPoints.iface.GetRdpSettings = dvcman_get_rdp_settings;
395
0
    entryPoints.iface.GetRdpContext = dvcman_get_rdp_context;
396
0
    entryPoints.dvcman = (DVCMAN*)pChannelMgr;
397
0
    entryPoints.args = args;
398
0
    entryPoints.context = context;
399
0
    return pDVCPluginEntry(&entryPoints.iface);
400
0
  }
401
402
0
  return ERROR_INVALID_FUNCTION;
403
0
}
404
405
static void dvcman_channel_free(DVCMAN_CHANNEL* channel)
406
0
{
407
0
  if (!channel)
408
0
    return;
409
410
0
  if (channel->dvcman)
411
0
  {
412
0
    drdynvcPlugin* plugin = channel->dvcman->drdynvc;
413
0
    if (plugin)
414
0
    {
415
0
      rdpContext* context = plugin->rdpcontext;
416
0
      if (context)
417
0
      {
418
0
        ChannelTerminatedEventArgs e = WINPR_C_ARRAY_INIT;
419
0
        EventArgsInit(&e, "freerdp");
420
0
        e.name = channel->channel_name;
421
0
        e.pInterface = channel->pInterface;
422
423
0
        const int rc = PubSub_OnChannelTerminated(context->pubSub, context, &e);
424
0
        if (rc < 0)
425
0
          WLog_WARN(TAG, "PubSub_OnChannelTerminated(%s) failed", channel->channel_name);
426
0
      }
427
0
    }
428
0
  }
429
430
0
  if (channel->dvc_data)
431
0
    Stream_Release(channel->dvc_data);
432
433
0
  zgfx_context_free(channel->decompressor);
434
0
  DeleteCriticalSection(&(channel->lock));
435
0
  free(channel->channel_name);
436
0
  free(channel);
437
0
}
438
439
static void dvcman_channel_unref(DVCMAN_CHANNEL* channel)
440
0
{
441
0
  WINPR_ASSERT(channel);
442
0
  if (InterlockedDecrement(&channel->refCounter))
443
0
    return;
444
445
0
  DVCMAN* dvcman = channel->dvcman;
446
0
  if (dvcman)
447
0
    HashTable_Remove(dvcman->channelsById, &channel->channel_id);
448
0
}
449
450
static UINT dvcchannel_send_close(DVCMAN_CHANNEL* channel)
451
0
{
452
0
  WINPR_ASSERT(channel);
453
0
  DVCMAN* dvcman = channel->dvcman;
454
0
  drdynvcPlugin* drdynvc = dvcman->drdynvc;
455
0
  wStream* s = StreamPool_Take(dvcman->pool, 5);
456
457
0
  if (!s)
458
0
  {
459
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "StreamPool_Take failed!");
460
0
    return CHANNEL_RC_NO_MEMORY;
461
0
  }
462
463
0
  Stream_Write_UINT8(s, (CLOSE_REQUEST_PDU << 4) | 0x02);
464
0
  Stream_Write_UINT32(s, channel->channel_id);
465
0
  return drdynvc_send(drdynvc, s);
466
0
}
467
468
static void check_open_close_receive(DVCMAN_CHANNEL* channel)
469
0
{
470
0
  WINPR_ASSERT(channel);
471
472
0
  IWTSVirtualChannelCallback* cb = channel->channel_callback;
473
0
  const char* name = channel->channel_name;
474
0
  const UINT32 id = channel->channel_id;
475
476
0
  WINPR_ASSERT(cb);
477
0
  if (!cb->OnOpen || !cb->OnClose || !cb->OnDataReceived)
478
0
    WLog_VRB(TAG, "{%s:%" PRIu32 "} OnOpen=%p, OnClose=%p, OnDataReceived=%p", name, id,
479
0
             WINPR_FUNC_PTR_CAST(cb->OnOpen, const void*),
480
0
             WINPR_FUNC_PTR_CAST(cb->OnClose, const void*),
481
0
             WINPR_FUNC_PTR_CAST(cb->OnDataReceived, const void*));
482
0
}
483
484
static UINT dvcman_call_on_receive(DVCMAN_CHANNEL* channel, wStream* data)
485
0
{
486
0
  WINPR_ASSERT(channel);
487
0
  WINPR_ASSERT(data);
488
489
0
  IWTSVirtualChannelCallback* cb = channel->channel_callback;
490
0
  WINPR_ASSERT(cb);
491
492
0
  check_open_close_receive(channel);
493
0
  WINPR_ASSERT(cb->OnDataReceived);
494
0
  return cb->OnDataReceived(cb, data);
495
0
}
496
497
static UINT dvcman_channel_close(DVCMAN_CHANNEL* channel, BOOL perRequest, BOOL fromHashTableFn)
498
0
{
499
0
  UINT error = CHANNEL_RC_OK;
500
0
  DrdynvcClientContext* context = nullptr;
501
502
0
  WINPR_ASSERT(channel);
503
0
  switch (channel->state)
504
0
  {
505
0
    case DVC_CHANNEL_INIT:
506
0
      break;
507
0
    case DVC_CHANNEL_RUNNING:
508
0
      if (channel->dvcman)
509
0
      {
510
0
        drdynvcPlugin* drdynvc = channel->dvcman->drdynvc;
511
0
        WINPR_ASSERT(drdynvc);
512
0
        context = drdynvc->context;
513
0
        if (perRequest)
514
0
          WLog_Print(drdynvc->log, WLOG_DEBUG, "sending close confirm for '%s'",
515
0
                     channel->channel_name);
516
517
0
        error = dvcchannel_send_close(channel);
518
0
        if (error != CHANNEL_RC_OK)
519
0
        {
520
0
          if (perRequest)
521
0
            WLog_Print(drdynvc->log, WLOG_DEBUG,
522
0
                       "error when sending closeRequest for '%s'",
523
0
                       channel->channel_name);
524
0
          else
525
0
            WLog_Print(drdynvc->log, WLOG_DEBUG,
526
0
                       "error when sending close confirm for '%s'",
527
0
                       channel->channel_name);
528
0
        }
529
0
        WLog_Print(drdynvc->log, WLOG_DEBUG, "listener %s destroyed channel %" PRIu32 "",
530
0
                   channel->channel_name, channel->channel_id);
531
0
      }
532
533
0
      channel->state = DVC_CHANNEL_CLOSED;
534
535
0
      {
536
0
        check_open_close_receive(channel);
537
538
0
        IWTSVirtualChannelCallback* cb = channel->channel_callback;
539
0
        channel->channel_callback = nullptr;
540
0
        if (cb)
541
0
          error = IFCALLRESULT(CHANNEL_RC_OK, cb->OnClose, cb);
542
0
      }
543
544
0
      if (channel->dvcman && channel->dvcman->drdynvc)
545
0
      {
546
0
        if (context)
547
0
        {
548
0
          IFCALLRET(context->OnChannelDisconnected, error, context, channel->channel_name,
549
0
                    channel->pInterface);
550
0
        }
551
0
      }
552
553
0
      if (!fromHashTableFn)
554
0
        dvcman_channel_unref(channel);
555
0
      break;
556
0
    case DVC_CHANNEL_CLOSED:
557
0
      break;
558
0
    default:
559
0
      break;
560
0
  }
561
562
0
  return error;
563
0
}
564
565
static DVCMAN_CHANNEL* dvcman_channel_new(drdynvcPlugin* drdynvc,
566
                                          IWTSVirtualChannelManager* pChannelMgr, UINT32 ChannelId,
567
                                          const char* ChannelName)
568
0
{
569
0
  WINPR_ASSERT(drdynvc);
570
0
  WINPR_ASSERT(pChannelMgr);
571
0
  DVCMAN_CHANNEL* channel = (DVCMAN_CHANNEL*)calloc(1, sizeof(DVCMAN_CHANNEL));
572
573
0
  if (!channel)
574
0
    return nullptr;
575
576
0
  channel->dvcman = (DVCMAN*)pChannelMgr;
577
0
  channel->channel_id = ChannelId;
578
0
  channel->refCounter = 1;
579
0
  channel->state = DVC_CHANNEL_INIT;
580
0
  channel->channel_name = _strdup(ChannelName);
581
0
  if (!channel->channel_name)
582
0
    goto fail;
583
584
0
  channel->decompressor = zgfx_context_new(FALSE);
585
0
  if (!channel->decompressor)
586
0
    goto fail;
587
588
0
  if (!InitializeCriticalSectionEx(&(channel->lock), 0, 0))
589
0
    goto fail;
590
591
0
  if (drdynvc)
592
0
  {
593
0
    rdpContext* context = drdynvc->rdpcontext;
594
0
    if (context)
595
0
    {
596
0
      ChannelInitializedEventArgs e = WINPR_C_ARRAY_INIT;
597
0
      EventArgsInit(&e, "freerdp");
598
0
      e.name = channel->channel_name;
599
0
      e.pInterface = channel->pInterface;
600
601
0
      const int rc = PubSub_OnChannelInitialized(context->pubSub, context, &e);
602
0
      if (rc < 0)
603
0
        WLog_WARN(TAG, "PubSub_OnChannelInitialized(%s) failed", channel->channel_name);
604
0
    }
605
0
  }
606
607
0
  return channel;
608
0
fail:
609
0
  dvcman_channel_free(channel);
610
0
  return nullptr;
611
0
}
612
613
static void dvcman_clear(drdynvcPlugin* drdynvc, IWTSVirtualChannelManager* pChannelMgr)
614
0
{
615
0
  DVCMAN* dvcman = (DVCMAN*)pChannelMgr;
616
617
0
  WINPR_ASSERT(dvcman);
618
0
  WINPR_UNUSED(drdynvc);
619
620
0
  HashTable_Clear(dvcman->channelsById);
621
0
  ArrayList_Clear(dvcman->plugins);
622
0
  ArrayList_Clear(dvcman->plugin_names);
623
0
  HashTable_Clear(dvcman->listeners);
624
0
}
625
static void dvcman_free(drdynvcPlugin* drdynvc, IWTSVirtualChannelManager* pChannelMgr)
626
0
{
627
0
  DVCMAN* dvcman = (DVCMAN*)pChannelMgr;
628
629
0
  WINPR_ASSERT(dvcman);
630
0
  WINPR_UNUSED(drdynvc);
631
632
0
  HashTable_Free(dvcman->channelsById);
633
0
  ArrayList_Free(dvcman->plugins);
634
0
  ArrayList_Free(dvcman->plugin_names);
635
0
  HashTable_Free(dvcman->listeners);
636
637
0
  StreamPool_Free(dvcman->pool);
638
0
  free(dvcman);
639
0
}
640
641
/**
642
 * Function description
643
 *
644
 * @return 0 on success, otherwise a Win32 error code
645
 */
646
static UINT dvcman_init(drdynvcPlugin* drdynvc, IWTSVirtualChannelManager* pChannelMgr)
647
0
{
648
0
  DVCMAN* dvcman = (DVCMAN*)pChannelMgr;
649
0
  UINT error = CHANNEL_RC_OK;
650
651
0
  WINPR_ASSERT(dvcman);
652
0
  ArrayList_Lock(dvcman->plugins);
653
0
  for (size_t i = 0; i < ArrayList_Count(dvcman->plugins); i++)
654
0
  {
655
0
    IWTSPlugin* pPlugin = ArrayList_GetItem(dvcman->plugins, i);
656
657
0
    error = IFCALLRESULT(CHANNEL_RC_OK, pPlugin->Initialize, pPlugin, pChannelMgr);
658
0
    if (error != CHANNEL_RC_OK)
659
0
    {
660
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "Initialize failed with error %" PRIu32 "!",
661
0
                 error);
662
0
      goto fail;
663
0
    }
664
0
  }
665
666
0
fail:
667
0
  ArrayList_Unlock(dvcman->plugins);
668
0
  return error;
669
0
}
670
671
/**
672
 * Function description
673
 *
674
 * @return 0 on success, otherwise a Win32 error code
675
 */
676
static UINT dvcman_write_channel(IWTSVirtualChannel* pChannel, ULONG cbSize, const BYTE* pBuffer,
677
                                 void* pReserved)
678
0
{
679
0
  BOOL close = FALSE;
680
0
  UINT status = 0;
681
0
  DVCMAN_CHANNEL* channel = (DVCMAN_CHANNEL*)pChannel;
682
683
0
  WINPR_UNUSED(pReserved);
684
0
  if (!channel || !channel->dvcman)
685
0
    return CHANNEL_RC_BAD_CHANNEL;
686
687
0
  EnterCriticalSection(&(channel->lock));
688
0
  status =
689
0
      drdynvc_write_data(channel->dvcman->drdynvc, channel->channel_id, pBuffer, cbSize, &close);
690
0
  LeaveCriticalSection(&(channel->lock));
691
  /* Close delayed, it removes the channel struct */
692
0
  if (close)
693
0
    dvcman_channel_close(channel, FALSE, FALSE);
694
695
0
  return status;
696
0
}
697
698
/**
699
 * Function description
700
 *
701
 * @return 0 on success, otherwise a Win32 error code
702
 */
703
static UINT dvcman_close_channel_iface(IWTSVirtualChannel* pChannel)
704
0
{
705
0
  DVCMAN_CHANNEL* channel = (DVCMAN_CHANNEL*)pChannel;
706
707
0
  if (!channel)
708
0
    return CHANNEL_RC_BAD_CHANNEL;
709
710
0
  WLog_DBG(TAG, "close_channel_iface: id=%" PRIu32 "", channel->channel_id);
711
0
  return dvcman_channel_close(channel, FALSE, FALSE);
712
0
}
713
714
/**
715
 * Function description
716
 *
717
 * @return 0 on success, otherwise a Win32 error code
718
 */
719
static DVCMAN_CHANNEL* dvcman_create_channel(drdynvcPlugin* drdynvc,
720
                                             IWTSVirtualChannelManager* pChannelMgr,
721
                                             UINT32 ChannelId, const char* ChannelName, UINT* res)
722
0
{
723
0
  BOOL bAccept = 0;
724
0
  DVCMAN_CHANNEL* channel = nullptr;
725
0
  DrdynvcClientContext* context = nullptr;
726
0
  DVCMAN* dvcman = (DVCMAN*)pChannelMgr;
727
0
  DVCMAN_LISTENER* listener = nullptr;
728
0
  IWTSVirtualChannelCallback* pCallback = nullptr;
729
730
0
  WINPR_ASSERT(dvcman);
731
0
  WINPR_ASSERT(res);
732
733
0
  HashTable_Lock(dvcman->listeners);
734
0
  listener = (DVCMAN_LISTENER*)HashTable_GetItemValue(dvcman->listeners, ChannelName);
735
0
  if (!listener)
736
0
  {
737
0
    *res = ERROR_NOT_FOUND;
738
0
    goto out;
739
0
  }
740
741
0
  channel = dvcman_get_channel_by_id(pChannelMgr, ChannelId, FALSE);
742
0
  if (channel)
743
0
  {
744
0
    switch (channel->state)
745
0
    {
746
0
      case DVC_CHANNEL_RUNNING:
747
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
748
0
                   "Protocol error: Duplicated ChannelId %" PRIu32 " (%s)!", ChannelId,
749
0
                   ChannelName);
750
0
        *res = CHANNEL_RC_ALREADY_OPEN;
751
0
        goto out;
752
753
0
      case DVC_CHANNEL_CLOSED:
754
0
      case DVC_CHANNEL_INIT:
755
0
      default:
756
0
      {
757
0
        WLog_Print(drdynvc->log, WLOG_ERROR, "not expecting a createChannel from state %s",
758
0
                   channel_state2str(channel->state));
759
0
        *res = CHANNEL_RC_INITIALIZATION_ERROR;
760
0
        goto out;
761
0
      }
762
0
    }
763
0
  }
764
0
  else
765
0
  {
766
0
    if (!(channel = dvcman_channel_new(drdynvc, pChannelMgr, ChannelId, ChannelName)))
767
0
    {
768
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "dvcman_channel_new failed!");
769
0
      *res = CHANNEL_RC_NO_MEMORY;
770
0
      goto out;
771
0
    }
772
0
  }
773
774
0
  if (!HashTable_Insert(dvcman->channelsById, &channel->channel_id, channel))
775
0
  {
776
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "unable to register channel in our channel list");
777
0
    *res = ERROR_INTERNAL_ERROR;
778
0
    dvcman_channel_free(channel);
779
0
    channel = nullptr;
780
0
    goto out;
781
0
  }
782
783
0
  channel->iface.Write = dvcman_write_channel;
784
0
  channel->iface.Close = dvcman_close_channel_iface;
785
0
  bAccept = TRUE;
786
787
0
  *res = listener->listener_callback->OnNewChannelConnection(
788
0
      listener->listener_callback, &channel->iface, nullptr, &bAccept, &pCallback);
789
790
0
  if (*res != CHANNEL_RC_OK)
791
0
  {
792
0
    WLog_Print(drdynvc->log, WLOG_ERROR,
793
0
               "OnNewChannelConnection failed with error %" PRIu32 "!", *res);
794
0
    *res = ERROR_INTERNAL_ERROR;
795
0
    dvcman_channel_unref(channel);
796
0
    goto out;
797
0
  }
798
799
0
  if (!bAccept)
800
0
  {
801
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "OnNewChannelConnection returned with bAccept FALSE!");
802
0
    *res = ERROR_INTERNAL_ERROR;
803
0
    dvcman_channel_unref(channel);
804
0
    channel = nullptr;
805
0
    goto out;
806
0
  }
807
808
0
  WLog_Print(drdynvc->log, WLOG_DEBUG, "listener %s created new channel %" PRIu32 "",
809
0
             listener->channel_name, channel->channel_id);
810
0
  channel->state = DVC_CHANNEL_RUNNING;
811
0
  channel->channel_callback = pCallback;
812
0
  channel->pInterface = listener->iface.pInterface;
813
0
  context = dvcman->drdynvc->context;
814
815
0
  IFCALLRET(context->OnChannelConnected, *res, context, ChannelName, listener->iface.pInterface);
816
0
  if (*res != CHANNEL_RC_OK)
817
0
  {
818
0
    WLog_Print(drdynvc->log, WLOG_ERROR,
819
0
               "context.OnChannelConnected failed with error %" PRIu32 "", *res);
820
0
  }
821
822
0
out:
823
0
  HashTable_Unlock(dvcman->listeners);
824
825
0
  return channel;
826
0
}
827
828
/**
829
 * Function description
830
 *
831
 * @return 0 on success, otherwise a Win32 error code
832
 */
833
static UINT dvcman_open_channel(drdynvcPlugin* drdynvc, DVCMAN_CHANNEL* channel)
834
0
{
835
0
  UINT error = CHANNEL_RC_OK;
836
837
0
  WINPR_ASSERT(drdynvc);
838
0
  WINPR_ASSERT(channel);
839
0
  if (channel->state == DVC_CHANNEL_RUNNING)
840
0
  {
841
0
    IWTSVirtualChannelCallback* pCallback = channel->channel_callback;
842
843
0
    if (pCallback->OnOpen)
844
0
    {
845
0
      check_open_close_receive(channel);
846
0
      error = pCallback->OnOpen(pCallback);
847
0
      if (error)
848
0
      {
849
0
        WLog_Print(drdynvc->log, WLOG_ERROR, "OnOpen failed with error %" PRIu32 "!",
850
0
                   error);
851
0
        goto out;
852
0
      }
853
0
    }
854
855
0
    WLog_Print(drdynvc->log, WLOG_DEBUG, "open_channel: ChannelId %" PRIu32 "",
856
0
               channel->channel_id);
857
0
  }
858
859
0
out:
860
0
  return error;
861
0
}
862
863
/**
864
 * Function description
865
 *
866
 * @return 0 on success, otherwise a Win32 error code
867
 */
868
static UINT dvcman_receive_channel_data_first(DVCMAN_CHANNEL* channel, UINT32 length)
869
0
{
870
0
  WINPR_ASSERT(channel);
871
0
  WINPR_ASSERT(channel->dvcman);
872
0
  if (channel->dvc_data)
873
0
    Stream_Release(channel->dvc_data);
874
875
0
  channel->dvc_data = StreamPool_Take(channel->dvcman->pool, length);
876
877
0
  if (!channel->dvc_data)
878
0
  {
879
0
    drdynvcPlugin* drdynvc = channel->dvcman->drdynvc;
880
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "StreamPool_Take failed!");
881
0
    return CHANNEL_RC_NO_MEMORY;
882
0
  }
883
884
0
  channel->dvc_data_length = length;
885
0
  return CHANNEL_RC_OK;
886
0
}
887
888
/**
889
 * Function description
890
 *
891
 * @return 0 on success, otherwise a Win32 error code
892
 */
893
static UINT dvcman_receive_channel_data(DVCMAN_CHANNEL* channel, wStream* data,
894
                                        WINPR_ATTR_UNUSED UINT32 ThreadingFlags)
895
0
{
896
0
  UINT status = CHANNEL_RC_OK;
897
0
  size_t dataSize = Stream_GetRemainingLength(data);
898
899
0
  WINPR_ASSERT(channel);
900
0
  WINPR_ASSERT(channel->dvcman);
901
0
  if (channel->dvc_data)
902
0
  {
903
0
    drdynvcPlugin* drdynvc = channel->dvcman->drdynvc;
904
905
    /* Fragmented data */
906
0
    if (Stream_GetPosition(channel->dvc_data) + dataSize > channel->dvc_data_length)
907
0
    {
908
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "data exceeding declared length!");
909
0
      Stream_Release(channel->dvc_data);
910
0
      channel->dvc_data = nullptr;
911
0
      status = ERROR_INVALID_DATA;
912
0
      goto out;
913
0
    }
914
915
0
    Stream_Copy(data, channel->dvc_data, dataSize);
916
917
0
    if (Stream_GetPosition(channel->dvc_data) >= channel->dvc_data_length)
918
0
    {
919
0
      Stream_SealLength(channel->dvc_data);
920
0
      Stream_ResetPosition(channel->dvc_data);
921
922
0
      status = dvcman_call_on_receive(channel, channel->dvc_data);
923
0
      Stream_Release(channel->dvc_data);
924
0
      channel->dvc_data = nullptr;
925
0
    }
926
0
  }
927
0
  else
928
0
    status = dvcman_call_on_receive(channel, data);
929
930
0
out:
931
0
  return status;
932
0
}
933
934
static UINT8 drdynvc_write_variable_uint(wStream* s, UINT32 val)
935
0
{
936
0
  UINT8 cb = 0;
937
938
0
  if (val <= 0xFF)
939
0
  {
940
0
    cb = 0;
941
0
    Stream_Write_UINT8(s, (UINT8)val);
942
0
  }
943
0
  else if (val <= 0xFFFF)
944
0
  {
945
0
    cb = 1;
946
0
    Stream_Write_UINT16(s, (UINT16)val);
947
0
  }
948
0
  else
949
0
  {
950
0
    cb = 2;
951
0
    Stream_Write_UINT32(s, val);
952
0
  }
953
954
0
  return cb;
955
0
}
956
957
/**
958
 * Function description
959
 *
960
 * @return 0 on success, otherwise a Win32 error code
961
 */
962
static UINT drdynvc_send(drdynvcPlugin* drdynvc, wStream* s)
963
0
{
964
0
  UINT status = 0;
965
966
0
  if (!drdynvc)
967
0
    status = CHANNEL_RC_BAD_CHANNEL_HANDLE;
968
0
  else
969
0
  {
970
0
    WINPR_ASSERT(drdynvc->channelEntryPoints.pVirtualChannelWriteEx);
971
0
    status = drdynvc->channelEntryPoints.pVirtualChannelWriteEx(
972
0
        drdynvc->InitHandle, drdynvc->OpenHandle, Stream_Buffer(s),
973
0
        (UINT32)Stream_GetPosition(s), s);
974
0
  }
975
976
0
  switch (status)
977
0
  {
978
0
    case CHANNEL_RC_OK:
979
0
      return CHANNEL_RC_OK;
980
981
0
    case CHANNEL_RC_NOT_CONNECTED:
982
0
      Stream_Release(s);
983
0
      return CHANNEL_RC_OK;
984
985
0
    case CHANNEL_RC_BAD_CHANNEL_HANDLE:
986
0
      Stream_Release(s);
987
0
      WLog_ERR(TAG, "VirtualChannelWriteEx failed with CHANNEL_RC_BAD_CHANNEL_HANDLE");
988
0
      return status;
989
990
0
    default:
991
0
      Stream_Release(s);
992
0
      WLog_Print(drdynvc->log, WLOG_ERROR,
993
0
                 "VirtualChannelWriteEx failed with %s [%08" PRIX32 "]",
994
0
                 WTSErrorToString(status), status);
995
0
      return status;
996
0
  }
997
0
}
998
999
/**
1000
 * Function description
1001
 *
1002
 * @return 0 on success, otherwise a Win32 error code
1003
 */
1004
static UINT drdynvc_write_data(drdynvcPlugin* drdynvc, UINT32 ChannelId, const BYTE* data,
1005
                               UINT32 dataSize, BOOL* close)
1006
0
{
1007
0
  size_t pos = 0;
1008
0
  UINT8 cbChId = 0;
1009
0
  UINT8 cbLen = 0;
1010
0
  UINT status = CHANNEL_RC_BAD_INIT_HANDLE;
1011
0
  DVCMAN* dvcman = nullptr;
1012
1013
0
  if (!drdynvc)
1014
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1015
1016
0
  dvcman = (DVCMAN*)drdynvc->channel_mgr;
1017
0
  WINPR_ASSERT(dvcman);
1018
1019
0
  WLog_Print(drdynvc->log, WLOG_TRACE, "write_data: ChannelId=%" PRIu32 " size=%" PRIu32 "",
1020
0
             ChannelId, dataSize);
1021
0
  wStream* data_out = StreamPool_Take(dvcman->pool, CHANNEL_CHUNK_LENGTH);
1022
1023
0
  if (!data_out)
1024
0
  {
1025
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "StreamPool_Take failed!");
1026
0
    return CHANNEL_RC_NO_MEMORY;
1027
0
  }
1028
1029
0
  if (!Stream_SetPosition(data_out, 1))
1030
0
  {
1031
0
    Stream_Release(data_out);
1032
0
    return ERROR_INVALID_DATA;
1033
0
  }
1034
0
  cbChId = drdynvc_write_variable_uint(data_out, ChannelId);
1035
0
  pos = Stream_GetPosition(data_out);
1036
1037
0
  if (dataSize == 0)
1038
0
  {
1039
    /* TODO: shall treat that case with write(0) that do a close */
1040
0
    *close = TRUE;
1041
0
    Stream_Release(data_out);
1042
0
  }
1043
0
  else if (dataSize <= CHANNEL_CHUNK_LENGTH - pos)
1044
0
  {
1045
0
    Stream_ResetPosition(data_out);
1046
0
    Stream_Write_UINT8(data_out, (DATA_PDU << 4) | cbChId);
1047
0
    if (!Stream_SetPosition(data_out, pos))
1048
0
    {
1049
0
      Stream_Release(data_out);
1050
0
      return ERROR_INVALID_DATA;
1051
0
    }
1052
0
    Stream_Write(data_out, data, dataSize);
1053
0
    status = drdynvc_send(drdynvc, data_out);
1054
0
  }
1055
0
  else
1056
0
  {
1057
    /* Fragment the data */
1058
0
    cbLen = drdynvc_write_variable_uint(data_out, dataSize);
1059
0
    pos = Stream_GetPosition(data_out);
1060
0
    Stream_ResetPosition(data_out);
1061
1062
0
    const INT32 pdu = (DATA_FIRST_PDU << 4) | cbChId | (cbLen << 2);
1063
0
    Stream_Write_UINT8(data_out, WINPR_ASSERTING_INT_CAST(UINT8, pdu));
1064
0
    if (!Stream_SetPosition(data_out, pos))
1065
0
    {
1066
0
      Stream_Release(data_out);
1067
0
      return ERROR_INVALID_DATA;
1068
0
    }
1069
1070
0
    {
1071
0
      WINPR_ASSERT(pos <= CHANNEL_CHUNK_LENGTH);
1072
0
      const uint32_t chunkLength =
1073
0
          CHANNEL_CHUNK_LENGTH - WINPR_ASSERTING_INT_CAST(uint32_t, pos);
1074
0
      Stream_Write(data_out, data, chunkLength);
1075
1076
0
      data += chunkLength;
1077
0
      dataSize -= chunkLength;
1078
0
    }
1079
0
    status = drdynvc_send(drdynvc, data_out);
1080
1081
0
    while (status == CHANNEL_RC_OK && dataSize > 0)
1082
0
    {
1083
0
      data_out = StreamPool_Take(dvcman->pool, CHANNEL_CHUNK_LENGTH);
1084
1085
0
      if (!data_out)
1086
0
      {
1087
0
        WLog_Print(drdynvc->log, WLOG_ERROR, "StreamPool_Take failed!");
1088
0
        return CHANNEL_RC_NO_MEMORY;
1089
0
      }
1090
1091
0
      if (!Stream_SetPosition(data_out, 1))
1092
0
      {
1093
0
        Stream_Release(data_out);
1094
0
        return ERROR_INVALID_DATA;
1095
0
      }
1096
1097
0
      cbChId = drdynvc_write_variable_uint(data_out, ChannelId);
1098
0
      pos = Stream_GetPosition(data_out);
1099
0
      Stream_ResetPosition(data_out);
1100
0
      Stream_Write_UINT8(data_out, (DATA_PDU << 4) | cbChId);
1101
0
      if (!Stream_SetPosition(data_out, pos))
1102
0
      {
1103
0
        Stream_Release(data_out);
1104
0
        return ERROR_INVALID_DATA;
1105
0
      }
1106
1107
0
      uint32_t chunkLength = dataSize;
1108
1109
0
      WINPR_ASSERT(pos <= CHANNEL_CHUNK_LENGTH);
1110
0
      if (chunkLength > CHANNEL_CHUNK_LENGTH - pos)
1111
0
        chunkLength = CHANNEL_CHUNK_LENGTH - WINPR_ASSERTING_INT_CAST(uint32_t, pos);
1112
1113
0
      Stream_Write(data_out, data, chunkLength);
1114
0
      data += chunkLength;
1115
0
      dataSize -= chunkLength;
1116
0
      status = drdynvc_send(drdynvc, data_out);
1117
0
    }
1118
0
  }
1119
1120
0
  if (status != CHANNEL_RC_OK)
1121
0
  {
1122
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "VirtualChannelWriteEx failed with %s [%08" PRIX32 "]",
1123
0
               WTSErrorToString(status), status);
1124
0
    return status;
1125
0
  }
1126
1127
0
  return CHANNEL_RC_OK;
1128
0
}
1129
1130
/**
1131
 * Function description
1132
 *
1133
 * @return 0 on success, otherwise a Win32 error code
1134
 */
1135
static UINT drdynvc_send_capability_response(drdynvcPlugin* drdynvc)
1136
0
{
1137
0
  UINT status = 0;
1138
0
  wStream* s = nullptr;
1139
0
  DVCMAN* dvcman = nullptr;
1140
1141
0
  if (!drdynvc)
1142
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1143
1144
0
  dvcman = (DVCMAN*)drdynvc->channel_mgr;
1145
0
  WINPR_ASSERT(dvcman);
1146
1147
0
  WLog_Print(drdynvc->log, WLOG_TRACE, "capability_response");
1148
0
  s = StreamPool_Take(dvcman->pool, 4);
1149
1150
0
  if (!s)
1151
0
  {
1152
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "Stream_Ndrdynvc_write_variable_uintew failed!");
1153
0
    return CHANNEL_RC_NO_MEMORY;
1154
0
  }
1155
1156
0
  Stream_Write_UINT16(s, 0x0050); /* Cmd+Sp+cbChId+Pad. Note: MSTSC sends 0x005c */
1157
0
  Stream_Write_UINT16(s, drdynvc->version);
1158
0
  status = drdynvc_send(drdynvc, s);
1159
1160
0
  if (status != CHANNEL_RC_OK)
1161
0
  {
1162
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "VirtualChannelWriteEx failed with %s [%08" PRIX32 "]",
1163
0
               WTSErrorToString(status), status);
1164
0
  }
1165
1166
0
  return status;
1167
0
}
1168
1169
/**
1170
 * Function description
1171
 *
1172
 * @return 0 on success, otherwise a Win32 error code
1173
 */
1174
static UINT drdynvc_process_capability_request(drdynvcPlugin* drdynvc, int Sp, int cbChId,
1175
                                               wStream* s)
1176
0
{
1177
0
  UINT status = 0;
1178
1179
0
  if (!drdynvc)
1180
0
    return CHANNEL_RC_BAD_INIT_HANDLE;
1181
1182
0
  if (!Stream_CheckAndLogRequiredLength(TAG, s, 3))
1183
0
    return ERROR_INVALID_DATA;
1184
1185
0
  WLog_Print(drdynvc->log, WLOG_TRACE, "capability_request Sp=%d cbChId=%d", Sp, cbChId);
1186
0
  Stream_Seek(s, 1); /* pad */
1187
0
  Stream_Read_UINT16(s, drdynvc->version);
1188
1189
  /* RDP8 servers offer version 3, though Microsoft forgot to document it
1190
   * in their early documents.  It behaves the same as version 2.
1191
   */
1192
0
  if ((drdynvc->version == 2) || (drdynvc->version == 3))
1193
0
  {
1194
0
    if (!Stream_CheckAndLogRequiredLength(TAG, s, 8))
1195
0
      return ERROR_INVALID_DATA;
1196
1197
0
    Stream_Read_UINT16(s, drdynvc->PriorityCharge0);
1198
0
    Stream_Read_UINT16(s, drdynvc->PriorityCharge1);
1199
0
    Stream_Read_UINT16(s, drdynvc->PriorityCharge2);
1200
0
    Stream_Read_UINT16(s, drdynvc->PriorityCharge3);
1201
0
  }
1202
1203
0
  status = drdynvc_send_capability_response(drdynvc);
1204
0
  drdynvc->state = DRDYNVC_STATE_READY;
1205
0
  return status;
1206
0
}
1207
1208
static UINT32 drdynvc_cblen_to_bytes(int cbLen)
1209
0
{
1210
0
  switch (cbLen)
1211
0
  {
1212
0
    case 0:
1213
0
      return 1;
1214
1215
0
    case 1:
1216
0
      return 2;
1217
1218
0
    default:
1219
0
      return 4;
1220
0
  }
1221
0
}
1222
1223
static UINT32 drdynvc_read_variable_uint(wStream* s, int cbLen)
1224
0
{
1225
0
  UINT32 val = 0;
1226
1227
0
  switch (cbLen)
1228
0
  {
1229
0
    case 0:
1230
0
      Stream_Read_UINT8(s, val);
1231
0
      break;
1232
1233
0
    case 1:
1234
0
      Stream_Read_UINT16(s, val);
1235
0
      break;
1236
1237
0
    default:
1238
0
      Stream_Read_UINT32(s, val);
1239
0
      break;
1240
0
  }
1241
1242
0
  return val;
1243
0
}
1244
1245
/**
1246
 * Function description
1247
 *
1248
 * @return 0 on success, otherwise a Win32 error code
1249
 */
1250
static UINT drdynvc_process_create_request(drdynvcPlugin* drdynvc, UINT8 Sp, UINT8 cbChId,
1251
                                           wStream* s)
1252
0
{
1253
0
  UINT status = 0;
1254
0
  wStream* data_out = nullptr;
1255
0
  UINT channel_status = 0;
1256
0
  DVCMAN* dvcman = nullptr;
1257
0
  DVCMAN_CHANNEL* channel = nullptr;
1258
0
  INT32 retStatus = 0;
1259
1260
0
  WINPR_UNUSED(Sp);
1261
0
  if (!drdynvc)
1262
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1263
1264
0
  dvcman = (DVCMAN*)drdynvc->channel_mgr;
1265
0
  WINPR_ASSERT(dvcman);
1266
1267
0
  if (drdynvc->state == DRDYNVC_STATE_CAPABILITIES)
1268
0
  {
1269
    /**
1270
     * For some reason the server does not always send the
1271
     * capabilities pdu as it should. When this happens,
1272
     * send a capabilities response.
1273
     */
1274
0
    drdynvc->version = 3;
1275
1276
0
    if ((status = drdynvc_send_capability_response(drdynvc)))
1277
0
    {
1278
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "drdynvc_send_capability_response failed!");
1279
0
      return status;
1280
0
    }
1281
1282
0
    drdynvc->state = DRDYNVC_STATE_READY;
1283
0
  }
1284
1285
0
  if (!Stream_CheckAndLogRequiredLength(TAG, s, drdynvc_cblen_to_bytes(cbChId)))
1286
0
    return ERROR_INVALID_DATA;
1287
1288
0
  const UINT32 ChannelId = drdynvc_read_variable_uint(s, cbChId);
1289
0
  const size_t pos = Stream_GetPosition(s);
1290
0
  const char* name = Stream_ConstPointer(s);
1291
0
  const size_t length = Stream_GetRemainingLength(s);
1292
1293
0
  if (strnlen(name, length) >= length)
1294
0
    return ERROR_INVALID_DATA;
1295
1296
0
  WLog_Print(drdynvc->log, WLOG_DEBUG,
1297
0
             "process_create_request: ChannelId=%" PRIu32 " ChannelName=%s", ChannelId, name);
1298
1299
0
  data_out = StreamPool_Take(dvcman->pool, pos + 4);
1300
0
  if (!data_out)
1301
0
  {
1302
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "StreamPool_Take failed!");
1303
0
    return CHANNEL_RC_NO_MEMORY;
1304
0
  }
1305
1306
0
  Stream_Write_UINT8(data_out, (CREATE_REQUEST_PDU << 4) | cbChId);
1307
0
  if (!Stream_SetPosition(s, 1))
1308
0
    return ERROR_INVALID_DATA;
1309
0
  Stream_Copy(s, data_out, pos - 1);
1310
1311
0
  channel =
1312
0
      dvcman_create_channel(drdynvc, drdynvc->channel_mgr, ChannelId, name, &channel_status);
1313
0
  switch (channel_status)
1314
0
  {
1315
0
    case CHANNEL_RC_OK:
1316
0
      WLog_Print(drdynvc->log, WLOG_DEBUG, "channel created");
1317
0
      retStatus = 0;
1318
0
      break;
1319
0
    case CHANNEL_RC_NO_MEMORY:
1320
0
      WLog_Print(drdynvc->log, WLOG_DEBUG, "not enough memory for channel creation");
1321
0
      retStatus = STATUS_NO_MEMORY;
1322
0
      break;
1323
0
    case ERROR_NOT_FOUND:
1324
0
      WLog_Print(drdynvc->log, WLOG_DEBUG, "no listener for '%s'", name);
1325
0
      retStatus = STATUS_NOT_FOUND; /* same code used by mstsc, STATUS_UNSUCCESSFUL */
1326
0
      break;
1327
0
    default:
1328
0
      WLog_Print(drdynvc->log, WLOG_DEBUG, "channel creation error");
1329
0
      retStatus = STATUS_UNSUCCESSFUL; /* same code used by mstsc, STATUS_UNSUCCESSFUL */
1330
0
      break;
1331
0
  }
1332
0
  Stream_Write_INT32(data_out, retStatus);
1333
1334
0
  status = drdynvc_send(drdynvc, data_out);
1335
0
  if (status != CHANNEL_RC_OK)
1336
0
  {
1337
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "VirtualChannelWriteEx failed with %s [%08" PRIX32 "]",
1338
0
               WTSErrorToString(status), status);
1339
0
    dvcman_channel_unref(channel);
1340
0
    return status;
1341
0
  }
1342
1343
0
  if (channel_status == CHANNEL_RC_OK)
1344
0
  {
1345
0
    if ((status = dvcman_open_channel(drdynvc, channel)))
1346
0
    {
1347
0
      WLog_Print(drdynvc->log, WLOG_ERROR,
1348
0
                 "dvcman_open_channel failed with error %" PRIu32 "!", status);
1349
0
      return status;
1350
0
    }
1351
0
  }
1352
1353
0
  return status;
1354
0
}
1355
1356
/**
1357
 * Function description
1358
 *
1359
 * @return 0 on success, otherwise a Win32 error code
1360
 */
1361
static UINT drdynvc_process_data_first(drdynvcPlugin* drdynvc, int Sp, int cbChId, wStream* s,
1362
                                       BOOL compressed, UINT32 ThreadingFlags)
1363
0
{
1364
0
  WINPR_ASSERT(drdynvc);
1365
0
  if (!Stream_CheckAndLogRequiredLength(
1366
0
          TAG, s, drdynvc_cblen_to_bytes(cbChId) + drdynvc_cblen_to_bytes(Sp)))
1367
0
    return ERROR_INVALID_DATA;
1368
1369
0
  UINT32 ChannelId = drdynvc_read_variable_uint(s, cbChId);
1370
0
  UINT32 Length = drdynvc_read_variable_uint(s, Sp);
1371
0
  WLog_Print(drdynvc->log, WLOG_TRACE,
1372
0
             "process_data_first: Sp=%d cbChId=%d, ChannelId=%" PRIu32 " Length=%" PRIu32 "", Sp,
1373
0
             cbChId, ChannelId, Length);
1374
1375
0
  DVCMAN_CHANNEL* channel = dvcman_get_channel_by_id(drdynvc->channel_mgr, ChannelId, TRUE);
1376
0
  if (!channel)
1377
0
  {
1378
    /**
1379
     * Windows Server 2012 R2 can send some messages over
1380
     * Microsoft::Windows::RDS::Geometry::v08.01 even if the dynamic virtual channel wasn't
1381
     * registered on our side. Ignoring it works.
1382
     */
1383
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "ChannelId %" PRIu32 " not found!", ChannelId);
1384
0
    return CHANNEL_RC_OK;
1385
0
  }
1386
1387
0
  UINT status = CHANNEL_RC_OK;
1388
0
  BOOL shouldFree = FALSE;
1389
0
  if (channel->state != DVC_CHANNEL_RUNNING)
1390
0
    goto out;
1391
1392
0
  if (compressed)
1393
0
  {
1394
0
    BYTE* data = nullptr;
1395
0
    UINT32 dataSize = 0;
1396
0
    if (zgfx_decompress(channel->decompressor, Stream_Pointer(s),
1397
0
                        WINPR_ASSERTING_INT_CAST(UINT32, Stream_GetRemainingLength(s)), &data,
1398
0
                        &dataSize, 0) < 0)
1399
0
    {
1400
0
      status = ERROR_INVALID_DATA;
1401
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "error de-compressing first packet");
1402
0
      goto out;
1403
0
    }
1404
1405
0
    s = Stream_New(data, dataSize);
1406
0
    if (!s)
1407
0
    {
1408
0
      status = CHANNEL_RC_NO_MEMORY;
1409
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "error allocating new Stream(len=%" PRIu32 ")",
1410
0
                 dataSize);
1411
0
      free(data);
1412
0
      goto out;
1413
0
    }
1414
0
    shouldFree = TRUE;
1415
0
  }
1416
1417
0
  status = dvcman_receive_channel_data_first(channel, Length);
1418
1419
0
  if (status == CHANNEL_RC_OK)
1420
0
    status = dvcman_receive_channel_data(channel, s, ThreadingFlags);
1421
1422
0
  if (status != CHANNEL_RC_OK)
1423
0
    status = dvcman_channel_close(channel, FALSE, FALSE);
1424
1425
0
out:
1426
0
  if (shouldFree)
1427
0
    Stream_Free(s, TRUE);
1428
0
  dvcman_channel_unref(channel);
1429
0
  return status;
1430
0
}
1431
1432
/**
1433
 * Function description
1434
 *
1435
 * @return 0 on success, otherwise a Win32 error code
1436
 */
1437
static UINT drdynvc_process_data(drdynvcPlugin* drdynvc, int Sp, int cbChId, wStream* s,
1438
                                 BOOL compressed, UINT32 ThreadingFlags)
1439
0
{
1440
0
  WINPR_ASSERT(drdynvc);
1441
0
  if (!Stream_CheckAndLogRequiredLength(TAG, s, drdynvc_cblen_to_bytes(cbChId)))
1442
0
    return ERROR_INVALID_DATA;
1443
1444
0
  UINT32 ChannelId = drdynvc_read_variable_uint(s, cbChId);
1445
0
  WLog_Print(drdynvc->log, WLOG_TRACE, "process_data: Sp=%d cbChId=%d, ChannelId=%" PRIu32 "", Sp,
1446
0
             cbChId, ChannelId);
1447
1448
0
  DVCMAN_CHANNEL* channel = dvcman_get_channel_by_id(drdynvc->channel_mgr, ChannelId, TRUE);
1449
0
  if (!channel)
1450
0
  {
1451
    /**
1452
     * Windows Server 2012 R2 can send some messages over
1453
     * Microsoft::Windows::RDS::Geometry::v08.01 even if the dynamic virtual channel wasn't
1454
     * registered on our side. Ignoring it works.
1455
     */
1456
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "ChannelId %" PRIu32 " not found!", ChannelId);
1457
0
    return CHANNEL_RC_OK;
1458
0
  }
1459
1460
0
  BOOL shouldFree = FALSE;
1461
0
  UINT status = CHANNEL_RC_OK;
1462
0
  if (channel->state != DVC_CHANNEL_RUNNING)
1463
0
    goto out;
1464
1465
0
  if (compressed)
1466
0
  {
1467
0
    BYTE* data = nullptr;
1468
0
    UINT32 dataSize = 0;
1469
1470
0
    if (zgfx_decompress(channel->decompressor, Stream_Pointer(s),
1471
0
                        WINPR_ASSERTING_INT_CAST(UINT32, Stream_GetRemainingLength(s)), &data,
1472
0
                        &dataSize, 0) < 0)
1473
0
    {
1474
0
      status = ERROR_INVALID_DATA;
1475
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "error de-compressing data packet");
1476
0
      goto out;
1477
0
    }
1478
1479
0
    s = Stream_New(data, dataSize);
1480
0
    if (!s)
1481
0
    {
1482
0
      status = CHANNEL_RC_NO_MEMORY;
1483
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "error allocating new Stream(len=%" PRIu32 ")",
1484
0
                 dataSize);
1485
0
      free(data);
1486
0
      goto out;
1487
0
    }
1488
0
    shouldFree = TRUE;
1489
0
  }
1490
1491
0
  status = dvcman_receive_channel_data(channel, s, ThreadingFlags);
1492
0
  if (status != CHANNEL_RC_OK)
1493
0
    status = dvcman_channel_close(channel, FALSE, FALSE);
1494
1495
0
out:
1496
0
  if (shouldFree)
1497
0
    Stream_Free(s, TRUE);
1498
0
  dvcman_channel_unref(channel);
1499
0
  return status;
1500
0
}
1501
1502
/**
1503
 * Function description
1504
 *
1505
 * @return 0 on success, otherwise a Win32 error code
1506
 */
1507
static UINT drdynvc_process_close_request(drdynvcPlugin* drdynvc, int Sp, int cbChId, wStream* s)
1508
0
{
1509
0
  UINT32 ChannelId = 0;
1510
0
  DVCMAN_CHANNEL* channel = nullptr;
1511
1512
0
  WINPR_ASSERT(drdynvc);
1513
0
  if (!Stream_CheckAndLogRequiredLength(TAG, s, drdynvc_cblen_to_bytes(cbChId)))
1514
0
    return ERROR_INVALID_DATA;
1515
1516
0
  ChannelId = drdynvc_read_variable_uint(s, cbChId);
1517
0
  WLog_Print(drdynvc->log, WLOG_DEBUG,
1518
0
             "process_close_request: Sp=%d cbChId=%d, ChannelId=%" PRIu32 "", Sp, cbChId,
1519
0
             ChannelId);
1520
1521
0
  channel = dvcman_get_channel_by_id(drdynvc->channel_mgr, ChannelId, TRUE);
1522
0
  if (!channel)
1523
0
  {
1524
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "dvcman_close_request channel %" PRIu32 " not present",
1525
0
               ChannelId);
1526
0
    return CHANNEL_RC_OK;
1527
0
  }
1528
1529
0
  dvcman_channel_close(channel, TRUE, FALSE);
1530
0
  dvcman_channel_unref(channel);
1531
0
  return CHANNEL_RC_OK;
1532
0
}
1533
1534
/**
1535
 * Function description
1536
 *
1537
 * @return 0 on success, otherwise a Win32 error code
1538
 */
1539
static UINT drdynvc_order_recv(drdynvcPlugin* drdynvc, wStream* s, UINT32 ThreadingFlags)
1540
0
{
1541
0
  WINPR_ASSERT(drdynvc);
1542
0
  if (!Stream_CheckAndLogRequiredLength(TAG, s, 1))
1543
0
    return ERROR_INVALID_DATA;
1544
1545
0
  UINT8 value = Stream_Get_UINT8(s);
1546
0
  const UINT8 Cmd = (value & 0xf0) >> 4;
1547
0
  const UINT8 Sp = (value & 0x0c) >> 2;
1548
0
  const UINT8 cbChId = (value & 0x03) >> 0;
1549
0
  WLog_Print(drdynvc->log, WLOG_TRACE, "order_recv: Cmd=%s, Sp=%" PRIu8 " cbChId=%" PRIu8,
1550
0
             drdynvc_get_packet_type(Cmd), Sp, cbChId);
1551
1552
0
  switch (Cmd)
1553
0
  {
1554
0
    case CAPABILITY_REQUEST_PDU:
1555
0
      return drdynvc_process_capability_request(drdynvc, Sp, cbChId, s);
1556
1557
0
    case CREATE_REQUEST_PDU:
1558
0
      return drdynvc_process_create_request(drdynvc, Sp, cbChId, s);
1559
1560
0
    case DATA_FIRST_PDU:
1561
0
    case DATA_FIRST_COMPRESSED_PDU:
1562
0
      return drdynvc_process_data_first(drdynvc, Sp, cbChId, s,
1563
0
                                        (Cmd == DATA_FIRST_COMPRESSED_PDU), ThreadingFlags);
1564
1565
0
    case DATA_PDU:
1566
0
    case DATA_COMPRESSED_PDU:
1567
0
      return drdynvc_process_data(drdynvc, Sp, cbChId, s, (Cmd == DATA_COMPRESSED_PDU),
1568
0
                                  ThreadingFlags);
1569
1570
0
    case CLOSE_REQUEST_PDU:
1571
0
      return drdynvc_process_close_request(drdynvc, Sp, cbChId, s);
1572
1573
0
    case SOFT_SYNC_RESPONSE_PDU:
1574
0
      WLog_Print(drdynvc->log, WLOG_ERROR,
1575
0
                 "not expecting a SOFT_SYNC_RESPONSE_PDU as a client");
1576
0
      return ERROR_INTERNAL_ERROR;
1577
1578
0
    default:
1579
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "unknown drdynvc cmd 0x%x", Cmd);
1580
0
      return ERROR_INTERNAL_ERROR;
1581
0
  }
1582
0
}
1583
1584
/**
1585
 * Function description
1586
 *
1587
 * @return 0 on success, otherwise a Win32 error code
1588
 */
1589
static UINT drdynvc_virtual_channel_event_data_received(drdynvcPlugin* drdynvc, void* pData,
1590
                                                        UINT32 dataLength, UINT32 totalLength,
1591
                                                        UINT32 dataFlags)
1592
0
{
1593
0
  wStream* data_in = nullptr;
1594
1595
0
  WINPR_ASSERT(drdynvc);
1596
0
  if ((dataFlags & CHANNEL_FLAG_SUSPEND) || (dataFlags & CHANNEL_FLAG_RESUME))
1597
0
  {
1598
0
    return CHANNEL_RC_OK;
1599
0
  }
1600
1601
0
  if (dataFlags & CHANNEL_FLAG_FIRST)
1602
0
  {
1603
0
    DVCMAN* mgr = (DVCMAN*)drdynvc->channel_mgr;
1604
0
    if (drdynvc->data_in)
1605
0
      Stream_Release(drdynvc->data_in);
1606
1607
0
    drdynvc->data_in = StreamPool_Take(mgr->pool, totalLength);
1608
0
  }
1609
1610
0
  if (!(data_in = drdynvc->data_in))
1611
0
  {
1612
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "StreamPool_Take failed!");
1613
0
    return CHANNEL_RC_NO_MEMORY;
1614
0
  }
1615
1616
0
  if (!Stream_EnsureRemainingCapacity(data_in, dataLength))
1617
0
  {
1618
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "Stream_EnsureRemainingCapacity failed!");
1619
0
    Stream_Release(drdynvc->data_in);
1620
0
    drdynvc->data_in = nullptr;
1621
0
    return ERROR_INTERNAL_ERROR;
1622
0
  }
1623
1624
0
  Stream_Write(data_in, pData, dataLength);
1625
1626
0
  if (dataFlags & CHANNEL_FLAG_LAST)
1627
0
  {
1628
0
    const size_t cap = Stream_Capacity(data_in);
1629
0
    const size_t pos = Stream_GetPosition(data_in);
1630
0
    if (cap < pos)
1631
0
    {
1632
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "drdynvc_plugin_process_received: read error");
1633
0
      return ERROR_INVALID_DATA;
1634
0
    }
1635
1636
0
    drdynvc->data_in = nullptr;
1637
0
    Stream_SealLength(data_in);
1638
0
    Stream_ResetPosition(data_in);
1639
1640
0
    if (drdynvc->async)
1641
0
    {
1642
0
      if (!MessageQueue_Post(drdynvc->queue, nullptr, 0, (void*)data_in, nullptr))
1643
0
      {
1644
0
        WLog_Print(drdynvc->log, WLOG_ERROR, "MessageQueue_Post failed!");
1645
0
        return ERROR_INTERNAL_ERROR;
1646
0
      }
1647
0
    }
1648
0
    else
1649
0
    {
1650
0
      UINT error = drdynvc_order_recv(drdynvc, data_in, TRUE);
1651
0
      Stream_Release(data_in);
1652
1653
0
      if (error)
1654
0
      {
1655
0
        WLog_Print(drdynvc->log, WLOG_WARN,
1656
0
                   "drdynvc_order_recv failed with error %" PRIu32 "!", error);
1657
0
        return error;
1658
0
      }
1659
0
    }
1660
0
  }
1661
1662
0
  return CHANNEL_RC_OK;
1663
0
}
1664
1665
static void VCAPITYPE drdynvc_virtual_channel_open_event_ex(LPVOID lpUserParam, DWORD openHandle,
1666
                                                            UINT event, LPVOID pData,
1667
                                                            UINT32 dataLength, UINT32 totalLength,
1668
                                                            UINT32 dataFlags)
1669
0
{
1670
0
  UINT error = CHANNEL_RC_OK;
1671
0
  drdynvcPlugin* drdynvc = (drdynvcPlugin*)lpUserParam;
1672
1673
0
  WINPR_ASSERT(drdynvc);
1674
0
  switch (event)
1675
0
  {
1676
0
    case CHANNEL_EVENT_DATA_RECEIVED:
1677
0
      if (!drdynvc || (drdynvc->OpenHandle != openHandle))
1678
0
      {
1679
0
        WLog_ERR(TAG, "drdynvc_virtual_channel_open_event: error no match");
1680
0
        return;
1681
0
      }
1682
0
      if ((error = drdynvc_virtual_channel_event_data_received(drdynvc, pData, dataLength,
1683
0
                                                               totalLength, dataFlags)))
1684
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
1685
0
                   "drdynvc_virtual_channel_event_data_received failed with error %" PRIu32
1686
0
                   "",
1687
0
                   error);
1688
1689
0
      break;
1690
1691
0
    case CHANNEL_EVENT_WRITE_CANCELLED:
1692
0
    case CHANNEL_EVENT_WRITE_COMPLETE:
1693
0
    {
1694
0
      wStream* s = (wStream*)pData;
1695
0
      Stream_Release(s);
1696
0
    }
1697
0
    break;
1698
1699
0
    case CHANNEL_EVENT_USER:
1700
0
      break;
1701
0
    default:
1702
0
      break;
1703
0
  }
1704
1705
0
  if (error && drdynvc && drdynvc->rdpcontext)
1706
0
    setChannelError(drdynvc->rdpcontext, error,
1707
0
                    "drdynvc_virtual_channel_open_event reported an error");
1708
0
}
1709
1710
static DWORD WINAPI drdynvc_virtual_channel_client_thread(LPVOID arg)
1711
0
{
1712
  /* TODO: rewrite this */
1713
0
  wStream* data = nullptr;
1714
0
  wMessage message = WINPR_C_ARRAY_INIT;
1715
0
  UINT error = CHANNEL_RC_OK;
1716
0
  drdynvcPlugin* drdynvc = (drdynvcPlugin*)arg;
1717
1718
0
  if (!drdynvc)
1719
0
  {
1720
0
    ExitThread((DWORD)CHANNEL_RC_BAD_CHANNEL_HANDLE);
1721
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1722
0
  }
1723
1724
0
  while (1)
1725
0
  {
1726
0
    if (!MessageQueue_Wait(drdynvc->queue))
1727
0
    {
1728
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "MessageQueue_Wait failed!");
1729
0
      error = ERROR_INTERNAL_ERROR;
1730
0
      break;
1731
0
    }
1732
1733
0
    if (!MessageQueue_Peek(drdynvc->queue, &message, TRUE))
1734
0
    {
1735
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "MessageQueue_Peek failed!");
1736
0
      error = ERROR_INTERNAL_ERROR;
1737
0
      break;
1738
0
    }
1739
1740
0
    if (message.id == WMQ_QUIT)
1741
0
      break;
1742
1743
0
    if (message.id == 0)
1744
0
    {
1745
0
      UINT32 ThreadingFlags = TRUE;
1746
0
      data = (wStream*)message.wParam;
1747
1748
0
      if ((error = drdynvc_order_recv(drdynvc, data, ThreadingFlags)))
1749
0
      {
1750
0
        WLog_Print(drdynvc->log, WLOG_WARN,
1751
0
                   "drdynvc_order_recv failed with error %" PRIu32 "!", error);
1752
0
      }
1753
1754
0
      Stream_Release(data);
1755
0
    }
1756
0
  }
1757
1758
0
  {
1759
    /* Disconnect remaining dynamic channels that the server did not.
1760
     * This is required to properly shut down channels by calling the appropriate
1761
     * event handlers. */
1762
0
    DVCMAN* drdynvcMgr = (DVCMAN*)drdynvc->channel_mgr;
1763
1764
0
    HashTable_Clear(drdynvcMgr->channelsById);
1765
0
  }
1766
1767
0
  if (error && drdynvc->rdpcontext)
1768
0
    setChannelError(drdynvc->rdpcontext, error,
1769
0
                    "drdynvc_virtual_channel_client_thread reported an error");
1770
1771
0
  ExitThread((DWORD)error);
1772
0
  return error;
1773
0
}
1774
1775
static void drdynvc_queue_object_free(void* obj)
1776
0
{
1777
0
  wStream* s = nullptr;
1778
0
  wMessage* msg = (wMessage*)obj;
1779
1780
0
  if (!msg || (msg->id != 0))
1781
0
    return;
1782
1783
0
  s = (wStream*)msg->wParam;
1784
1785
0
  if (s)
1786
0
    Stream_Release(s);
1787
0
}
1788
1789
static UINT drdynvc_virtual_channel_event_initialized(drdynvcPlugin* drdynvc, LPVOID pData,
1790
                                                      UINT32 dataLength)
1791
0
{
1792
0
  wObject* obj = nullptr;
1793
0
  WINPR_UNUSED(pData);
1794
0
  WINPR_UNUSED(dataLength);
1795
1796
0
  if (!drdynvc)
1797
0
    goto error;
1798
1799
0
  drdynvc->queue = MessageQueue_New(nullptr);
1800
1801
0
  if (!drdynvc->queue)
1802
0
  {
1803
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "MessageQueue_New failed!");
1804
0
    goto error;
1805
0
  }
1806
1807
0
  obj = MessageQueue_Object(drdynvc->queue);
1808
0
  obj->fnObjectFree = drdynvc_queue_object_free;
1809
0
  drdynvc->channel_mgr = dvcman_new(drdynvc);
1810
1811
0
  if (!drdynvc->channel_mgr)
1812
0
  {
1813
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "dvcman_new failed!");
1814
0
    goto error;
1815
0
  }
1816
1817
0
  return CHANNEL_RC_OK;
1818
0
error:
1819
0
  return ERROR_INTERNAL_ERROR;
1820
0
}
1821
1822
/**
1823
 * Function description
1824
 *
1825
 * @return 0 on success, otherwise a Win32 error code
1826
 */
1827
static UINT drdynvc_virtual_channel_event_connected(drdynvcPlugin* drdynvc, LPVOID pData,
1828
                                                    UINT32 dataLength)
1829
0
{
1830
0
  UINT error = 0;
1831
0
  UINT32 status = 0;
1832
0
  rdpSettings* settings = nullptr;
1833
1834
0
  WINPR_ASSERT(drdynvc);
1835
0
  WINPR_UNUSED(pData);
1836
0
  WINPR_UNUSED(dataLength);
1837
1838
0
  if (!drdynvc)
1839
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1840
1841
0
  WINPR_ASSERT(drdynvc->channelEntryPoints.pVirtualChannelOpenEx);
1842
0
  status = drdynvc->channelEntryPoints.pVirtualChannelOpenEx(
1843
0
      drdynvc->InitHandle, &drdynvc->OpenHandle, drdynvc->channelDef.name,
1844
0
      drdynvc_virtual_channel_open_event_ex);
1845
1846
0
  if (status != CHANNEL_RC_OK)
1847
0
  {
1848
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "pVirtualChannelOpen failed with %s [%08" PRIX32 "]",
1849
0
               WTSErrorToString(status), status);
1850
0
    return status;
1851
0
  }
1852
1853
0
  WINPR_ASSERT(drdynvc->rdpcontext);
1854
0
  settings = drdynvc->rdpcontext->settings;
1855
0
  WINPR_ASSERT(settings);
1856
1857
0
  for (UINT32 index = 0;
1858
0
       index < freerdp_settings_get_uint32(settings, FreeRDP_DynamicChannelCount); index++)
1859
0
  {
1860
0
    const ADDIN_ARGV* args =
1861
0
        freerdp_settings_get_pointer_array(settings, FreeRDP_DynamicChannelArray, index);
1862
0
    error = dvcman_load_addin(drdynvc, drdynvc->channel_mgr, args, drdynvc->rdpcontext);
1863
1864
0
    if (CHANNEL_RC_OK != error)
1865
0
      goto error;
1866
0
  }
1867
1868
0
  if ((error = dvcman_init(drdynvc, drdynvc->channel_mgr)))
1869
0
  {
1870
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "dvcman_init failed with error %" PRIu32 "!", error);
1871
0
    goto error;
1872
0
  }
1873
1874
0
  drdynvc->state = DRDYNVC_STATE_CAPABILITIES;
1875
1876
0
  if (drdynvc->async)
1877
0
  {
1878
0
    if (!(drdynvc->thread = CreateThread(nullptr, 0, drdynvc_virtual_channel_client_thread,
1879
0
                                         (void*)drdynvc, 0, nullptr)))
1880
0
    {
1881
0
      error = ERROR_INTERNAL_ERROR;
1882
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "CreateThread failed!");
1883
0
      goto error;
1884
0
    }
1885
1886
0
    if (!SetThreadPriority(drdynvc->thread, THREAD_PRIORITY_HIGHEST))
1887
0
      WLog_Print(drdynvc->log, WLOG_WARN, "SetThreadPriority failed, ignoring.");
1888
0
  }
1889
1890
0
error:
1891
0
  return error;
1892
0
}
1893
1894
/**
1895
 * Function description
1896
 *
1897
 * @return 0 on success, otherwise a Win32 error code
1898
 */
1899
static UINT drdynvc_virtual_channel_event_disconnected(drdynvcPlugin* drdynvc)
1900
0
{
1901
0
  UINT status = 0;
1902
1903
0
  if (!drdynvc)
1904
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1905
1906
0
  if (drdynvc->OpenHandle == 0)
1907
0
    return CHANNEL_RC_OK;
1908
1909
0
  if (drdynvc->queue)
1910
0
  {
1911
0
    if (!MessageQueue_PostQuit(drdynvc->queue, 0))
1912
0
    {
1913
0
      status = GetLastError();
1914
0
      WLog_Print(drdynvc->log, WLOG_ERROR,
1915
0
                 "MessageQueue_PostQuit failed with error %" PRIu32 "", status);
1916
0
      return status;
1917
0
    }
1918
0
  }
1919
1920
0
  if (drdynvc->thread)
1921
0
  {
1922
0
    if (WaitForSingleObject(drdynvc->thread, INFINITE) != WAIT_OBJECT_0)
1923
0
    {
1924
0
      status = GetLastError();
1925
0
      WLog_Print(drdynvc->log, WLOG_ERROR,
1926
0
                 "WaitForSingleObject failed with error %" PRIu32 "", status);
1927
0
      return status;
1928
0
    }
1929
1930
0
    (void)CloseHandle(drdynvc->thread);
1931
0
    drdynvc->thread = nullptr;
1932
0
  }
1933
0
  else
1934
0
  {
1935
0
    {
1936
      /* Disconnect remaining dynamic channels that the server did not.
1937
       * This is required to properly shut down channels by calling the appropriate
1938
       * event handlers. */
1939
0
      DVCMAN* drdynvcMgr = (DVCMAN*)drdynvc->channel_mgr;
1940
1941
0
      HashTable_Clear(drdynvcMgr->channelsById);
1942
0
    }
1943
0
  }
1944
1945
0
  WINPR_ASSERT(drdynvc->channelEntryPoints.pVirtualChannelCloseEx);
1946
0
  status = drdynvc->channelEntryPoints.pVirtualChannelCloseEx(drdynvc->InitHandle,
1947
0
                                                              drdynvc->OpenHandle);
1948
1949
0
  if (status != CHANNEL_RC_OK)
1950
0
  {
1951
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "pVirtualChannelClose failed with %s [%08" PRIX32 "]",
1952
0
               WTSErrorToString(status), status);
1953
0
  }
1954
1955
0
  dvcman_clear(drdynvc, drdynvc->channel_mgr);
1956
0
  if (drdynvc->queue)
1957
0
    MessageQueue_Clear(drdynvc->queue);
1958
0
  drdynvc->OpenHandle = 0;
1959
1960
0
  if (drdynvc->data_in)
1961
0
  {
1962
0
    Stream_Release(drdynvc->data_in);
1963
0
    drdynvc->data_in = nullptr;
1964
0
  }
1965
1966
0
  return status;
1967
0
}
1968
1969
/**
1970
 * Function description
1971
 *
1972
 * @return 0 on success, otherwise a Win32 error code
1973
 */
1974
static UINT drdynvc_virtual_channel_event_terminated(drdynvcPlugin* drdynvc)
1975
0
{
1976
0
  if (!drdynvc)
1977
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
1978
1979
0
  MessageQueue_Free(drdynvc->queue);
1980
0
  drdynvc->queue = nullptr;
1981
1982
0
  if (drdynvc->channel_mgr)
1983
0
  {
1984
0
    dvcman_free(drdynvc, drdynvc->channel_mgr);
1985
0
    drdynvc->channel_mgr = nullptr;
1986
0
  }
1987
0
  drdynvc->InitHandle = nullptr;
1988
0
  free(drdynvc->context);
1989
0
  free(drdynvc);
1990
0
  return CHANNEL_RC_OK;
1991
0
}
1992
1993
static UINT drdynvc_virtual_channel_event_attached(drdynvcPlugin* drdynvc)
1994
0
{
1995
0
  UINT error = CHANNEL_RC_OK;
1996
0
  DVCMAN* dvcman = nullptr;
1997
1998
0
  if (!drdynvc)
1999
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
2000
2001
0
  dvcman = (DVCMAN*)drdynvc->channel_mgr;
2002
2003
0
  if (!dvcman)
2004
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
2005
2006
0
  ArrayList_Lock(dvcman->plugins);
2007
0
  for (size_t i = 0; i < ArrayList_Count(dvcman->plugins); i++)
2008
0
  {
2009
0
    IWTSPlugin* pPlugin = ArrayList_GetItem(dvcman->plugins, i);
2010
2011
0
    error = IFCALLRESULT(CHANNEL_RC_OK, pPlugin->Attached, pPlugin);
2012
0
    if (error != CHANNEL_RC_OK)
2013
0
    {
2014
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "Attach failed with error %" PRIu32 "!", error);
2015
0
      goto fail;
2016
0
    }
2017
0
  }
2018
2019
0
fail:
2020
0
  ArrayList_Unlock(dvcman->plugins);
2021
0
  return error;
2022
0
}
2023
2024
static UINT drdynvc_virtual_channel_event_detached(drdynvcPlugin* drdynvc)
2025
0
{
2026
0
  UINT error = CHANNEL_RC_OK;
2027
0
  DVCMAN* dvcman = nullptr;
2028
2029
0
  if (!drdynvc)
2030
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
2031
2032
0
  dvcman = (DVCMAN*)drdynvc->channel_mgr;
2033
2034
0
  if (!dvcman)
2035
0
    return CHANNEL_RC_BAD_CHANNEL_HANDLE;
2036
2037
0
  ArrayList_Lock(dvcman->plugins);
2038
0
  for (size_t i = 0; i < ArrayList_Count(dvcman->plugins); i++)
2039
0
  {
2040
0
    IWTSPlugin* pPlugin = ArrayList_GetItem(dvcman->plugins, i);
2041
2042
0
    error = IFCALLRESULT(CHANNEL_RC_OK, pPlugin->Detached, pPlugin);
2043
0
    if (error != CHANNEL_RC_OK)
2044
0
    {
2045
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "Detach failed with error %" PRIu32 "!", error);
2046
0
      goto fail;
2047
0
    }
2048
0
  }
2049
2050
0
fail:
2051
0
  ArrayList_Unlock(dvcman->plugins);
2052
2053
0
  return error;
2054
0
}
2055
2056
static VOID VCAPITYPE drdynvc_virtual_channel_init_event_ex(LPVOID lpUserParam, LPVOID pInitHandle,
2057
                                                            UINT event, LPVOID pData,
2058
                                                            UINT dataLength)
2059
0
{
2060
0
  UINT error = CHANNEL_RC_OK;
2061
0
  drdynvcPlugin* drdynvc = (drdynvcPlugin*)lpUserParam;
2062
2063
0
  if (!drdynvc || (drdynvc->InitHandle != pInitHandle))
2064
0
  {
2065
0
    WLog_ERR(TAG, "drdynvc_virtual_channel_init_event: error no match");
2066
0
    return;
2067
0
  }
2068
2069
0
  switch (event)
2070
0
  {
2071
0
    case CHANNEL_EVENT_INITIALIZED:
2072
0
      error = drdynvc_virtual_channel_event_initialized(drdynvc, pData, dataLength);
2073
0
      break;
2074
0
    case CHANNEL_EVENT_CONNECTED:
2075
0
      if ((error = drdynvc_virtual_channel_event_connected(drdynvc, pData, dataLength)))
2076
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
2077
0
                   "drdynvc_virtual_channel_event_connected failed with error %" PRIu32 "",
2078
0
                   error);
2079
2080
0
      break;
2081
2082
0
    case CHANNEL_EVENT_DISCONNECTED:
2083
0
      if ((error = drdynvc_virtual_channel_event_disconnected(drdynvc)))
2084
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
2085
0
                   "drdynvc_virtual_channel_event_disconnected failed with error %" PRIu32
2086
0
                   "",
2087
0
                   error);
2088
2089
0
      break;
2090
2091
0
    case CHANNEL_EVENT_TERMINATED:
2092
0
      if ((error = drdynvc_virtual_channel_event_terminated(drdynvc)))
2093
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
2094
0
                   "drdynvc_virtual_channel_event_terminated failed with error %" PRIu32 "",
2095
0
                   error);
2096
2097
0
      break;
2098
2099
0
    case CHANNEL_EVENT_ATTACHED:
2100
0
      if ((error = drdynvc_virtual_channel_event_attached(drdynvc)))
2101
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
2102
0
                   "drdynvc_virtual_channel_event_attached failed with error %" PRIu32 "",
2103
0
                   error);
2104
2105
0
      break;
2106
2107
0
    case CHANNEL_EVENT_DETACHED:
2108
0
      if ((error = drdynvc_virtual_channel_event_detached(drdynvc)))
2109
0
        WLog_Print(drdynvc->log, WLOG_ERROR,
2110
0
                   "drdynvc_virtual_channel_event_detached failed with error %" PRIu32 "",
2111
0
                   error);
2112
2113
0
      break;
2114
2115
0
    default:
2116
0
      break;
2117
0
  }
2118
2119
0
  if (error && drdynvc->rdpcontext)
2120
0
    setChannelError(drdynvc->rdpcontext, error,
2121
0
                    "drdynvc_virtual_channel_init_event_ex reported an error");
2122
0
}
2123
2124
/**
2125
 * Channel Client Interface
2126
 */
2127
2128
static int drdynvc_get_version(DrdynvcClientContext* context)
2129
0
{
2130
0
  WINPR_ASSERT(context);
2131
0
  drdynvcPlugin* drdynvc = (drdynvcPlugin*)context->handle;
2132
0
  WINPR_ASSERT(drdynvc);
2133
0
  return drdynvc->version;
2134
0
}
2135
2136
/* drdynvc is always built-in */
2137
#define VirtualChannelEntryEx drdynvc_VirtualChannelEntryEx
2138
2139
FREERDP_ENTRY_POINT(BOOL VCAPITYPE VirtualChannelEntryEx(PCHANNEL_ENTRY_POINTS_EX pEntryPoints,
2140
                                                         PVOID pInitHandle))
2141
0
{
2142
0
  UINT rc = 0;
2143
0
  drdynvcPlugin* drdynvc = nullptr;
2144
0
  DrdynvcClientContext* context = nullptr;
2145
0
  CHANNEL_ENTRY_POINTS_FREERDP_EX* pEntryPointsEx = nullptr;
2146
0
  drdynvc = (drdynvcPlugin*)calloc(1, sizeof(drdynvcPlugin));
2147
2148
0
  WINPR_ASSERT(pEntryPoints);
2149
0
  if (!drdynvc)
2150
0
  {
2151
0
    WLog_ERR(TAG, "calloc failed!");
2152
0
    return FALSE;
2153
0
  }
2154
2155
0
  drdynvc->channelDef.options =
2156
0
      CHANNEL_OPTION_INITIALIZED | CHANNEL_OPTION_ENCRYPT_RDP | CHANNEL_OPTION_COMPRESS_RDP;
2157
0
  (void)sprintf_s(drdynvc->channelDef.name, ARRAYSIZE(drdynvc->channelDef.name),
2158
0
                  DRDYNVC_SVC_CHANNEL_NAME);
2159
0
  drdynvc->state = DRDYNVC_STATE_INITIAL;
2160
0
  pEntryPointsEx = (CHANNEL_ENTRY_POINTS_FREERDP_EX*)pEntryPoints;
2161
2162
0
  if ((pEntryPointsEx->cbSize >= sizeof(CHANNEL_ENTRY_POINTS_FREERDP_EX)) &&
2163
0
      (pEntryPointsEx->MagicNumber == FREERDP_CHANNEL_MAGIC_NUMBER))
2164
0
  {
2165
0
    context = (DrdynvcClientContext*)calloc(1, sizeof(DrdynvcClientContext));
2166
2167
0
    if (!context)
2168
0
    {
2169
0
      WLog_Print(drdynvc->log, WLOG_ERROR, "calloc failed!");
2170
0
      free(drdynvc);
2171
0
      return FALSE;
2172
0
    }
2173
2174
0
    context->handle = (void*)drdynvc;
2175
0
    context->custom = nullptr;
2176
0
    drdynvc->context = context;
2177
0
    context->GetVersion = drdynvc_get_version;
2178
0
    drdynvc->rdpcontext = pEntryPointsEx->context;
2179
0
    if (!freerdp_settings_get_bool(drdynvc->rdpcontext->settings,
2180
0
                                   FreeRDP_TransportDumpReplay) &&
2181
0
        !freerdp_settings_get_bool(drdynvc->rdpcontext->settings,
2182
0
                                   FreeRDP_SynchronousDynamicChannels))
2183
0
      drdynvc->async = TRUE;
2184
0
  }
2185
2186
0
  drdynvc->log = WLog_Get(TAG);
2187
0
  WLog_Print(drdynvc->log, WLOG_DEBUG, "VirtualChannelEntryEx");
2188
0
  CopyMemory(&(drdynvc->channelEntryPoints), pEntryPoints,
2189
0
             sizeof(CHANNEL_ENTRY_POINTS_FREERDP_EX));
2190
0
  drdynvc->InitHandle = pInitHandle;
2191
2192
0
  WINPR_ASSERT(drdynvc->channelEntryPoints.pVirtualChannelInitEx);
2193
0
  rc = drdynvc->channelEntryPoints.pVirtualChannelInitEx(
2194
0
      drdynvc, context, pInitHandle, &drdynvc->channelDef, 1, VIRTUAL_CHANNEL_VERSION_WIN2000,
2195
0
      drdynvc_virtual_channel_init_event_ex);
2196
2197
0
  if (CHANNEL_RC_OK != rc)
2198
0
  {
2199
0
    WLog_Print(drdynvc->log, WLOG_ERROR, "pVirtualChannelInit failed with %s [%08" PRIX32 "]",
2200
0
               WTSErrorToString(rc), rc);
2201
0
    free(drdynvc->context);
2202
0
    free(drdynvc);
2203
0
    return FALSE;
2204
0
  }
2205
2206
0
  drdynvc->channelEntryPoints.pInterface = context;
2207
0
  return TRUE;
2208
0
}