Coverage Report

Created: 2026-07-16 07:14

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/FreeRDP/libfreerdp/core/peer.c
Line
Count
Source
1
/**
2
 * FreeRDP: A Remote Desktop Protocol Implementation
3
 * RDP Server Peer
4
 *
5
 * Copyright 2011 Vic Lee
6
 * Copyright 2014 DI (FH) Martin Haimberger <martin.haimberger@thincast.com>
7
 * Copyright 2023 Armin Novak <anovak@thincast.com>
8
 * Copyright 2023 Thincast Technologies GmbH
9
 *
10
 * Licensed under the Apache License, Version 2.0 (the "License");
11
 * you may not use this file except in compliance with the License.
12
 * You may obtain a copy of the License at
13
 *
14
 *     http://www.apache.org/licenses/LICENSE-2.0
15
 *
16
 * Unless required by applicable law or agreed to in writing, software
17
 * distributed under the License is distributed on an "AS IS" BASIS,
18
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
19
 * See the License for the specific language governing permissions and
20
 * limitations under the License.
21
 */
22
23
#include <freerdp/config.h>
24
25
#include "settings.h"
26
27
#include <winpr/assert.h>
28
#include <winpr/cast.h>
29
#include <winpr/crt.h>
30
#include <winpr/winsock.h>
31
32
#include "info.h"
33
#include "display.h"
34
35
#include <freerdp/log.h>
36
#include <freerdp/streamdump.h>
37
#include <freerdp/redirection.h>
38
#include <freerdp/crypto/certificate.h>
39
40
#include "rdp.h"
41
#include "peer.h"
42
#include "multitransport.h"
43
44
7.91k
#define TAG FREERDP_TAG("core.peer")
45
46
static state_run_t peer_recv_pdu(freerdp_peer* client, wStream* s);
47
48
static HANDLE freerdp_peer_virtual_channel_open(freerdp_peer* client, const char* name,
49
                                                UINT32 flags)
50
0
{
51
0
  WINPR_ASSERT(client);
52
0
  WINPR_ASSERT(client->context);
53
0
  WINPR_ASSERT(client->context->rdp);
54
0
  WINPR_ASSERT(name);
55
0
  rdpMcs* mcs = client->context->rdp->mcs;
56
0
  WINPR_ASSERT(mcs);
57
58
0
  if (flags & WTS_CHANNEL_OPTION_DYNAMIC)
59
0
    return nullptr; /* not yet supported */
60
61
0
  const size_t length = strnlen(name, 9);
62
63
0
  if (length > 8)
64
0
    return nullptr; /* SVC maximum name length is 8 */
65
66
0
  BOOL joined = FALSE;
67
0
  UINT32 index = 0;
68
0
  rdpMcsChannel* mcsChannel = nullptr;
69
0
  for (; index < mcs->channelCount; index++)
70
0
  {
71
0
    mcsChannel = &(mcs->channels[index]);
72
73
0
    if (!mcsChannel->joined)
74
0
      continue;
75
76
0
    if (_strnicmp(name, mcsChannel->Name, length) == 0)
77
0
    {
78
0
      joined = TRUE;
79
0
      break;
80
0
    }
81
0
  }
82
83
0
  if (!joined)
84
0
    return nullptr; /* channel is not joined */
85
86
0
  rdpPeerChannel* peerChannel = (rdpPeerChannel*)mcsChannel->handle;
87
88
0
  if (peerChannel)
89
0
  {
90
    /* channel is already open */
91
0
    return (HANDLE)peerChannel;
92
0
  }
93
94
0
  WINPR_ASSERT(index <= UINT16_MAX);
95
0
  peerChannel =
96
0
      server_channel_common_new(client, (UINT16)index, mcsChannel->ChannelId, 128, nullptr, name);
97
98
0
  if (peerChannel)
99
0
  {
100
0
    peerChannel->channelFlags = flags;
101
0
    peerChannel->mcsChannel = mcsChannel;
102
0
    mcsChannel->handle = (void*)peerChannel;
103
0
  }
104
105
0
  return (HANDLE)peerChannel;
106
0
}
107
108
static BOOL freerdp_peer_virtual_channel_close(WINPR_ATTR_UNUSED freerdp_peer* client,
109
                                               HANDLE hChannel)
110
0
{
111
0
  rdpMcsChannel* mcsChannel = nullptr;
112
0
  rdpPeerChannel* peerChannel = nullptr;
113
114
0
  WINPR_ASSERT(client);
115
116
0
  if (!hChannel)
117
0
    return FALSE;
118
119
0
  peerChannel = (rdpPeerChannel*)hChannel;
120
0
  mcsChannel = peerChannel->mcsChannel;
121
0
  WINPR_ASSERT(mcsChannel);
122
0
  mcsChannel->handle = nullptr;
123
0
  server_channel_common_free(peerChannel);
124
0
  return TRUE;
125
0
}
126
127
static int freerdp_peer_virtual_channel_write(freerdp_peer* client, HANDLE hChannel,
128
                                              const BYTE* buffer, UINT32 length)
129
0
{
130
0
  wStream* s = nullptr;
131
0
  UINT32 flags = 0;
132
0
  UINT32 chunkSize = 0;
133
0
  UINT32 maxChunkSize = 0;
134
0
  UINT32 totalLength = 0;
135
0
  rdpPeerChannel* peerChannel = nullptr;
136
0
  rdpMcsChannel* mcsChannel = nullptr;
137
0
  rdpRdp* rdp = nullptr;
138
139
0
  WINPR_ASSERT(client);
140
0
  WINPR_ASSERT(client->context);
141
142
0
  rdp = client->context->rdp;
143
0
  WINPR_ASSERT(rdp);
144
0
  WINPR_ASSERT(rdp->settings);
145
146
0
  if (!hChannel)
147
0
    return -1;
148
149
0
  peerChannel = (rdpPeerChannel*)hChannel;
150
0
  mcsChannel = peerChannel->mcsChannel;
151
0
  WINPR_ASSERT(peerChannel);
152
0
  WINPR_ASSERT(mcsChannel);
153
0
  if (peerChannel->channelFlags & WTS_CHANNEL_OPTION_DYNAMIC)
154
0
    return -1; /* not yet supported */
155
156
0
  maxChunkSize = rdp->settings->VCChunkSize;
157
0
  totalLength = length;
158
0
  flags = CHANNEL_FLAG_FIRST;
159
160
0
  while (length > 0)
161
0
  {
162
0
    UINT16 sec_flags = 0;
163
0
    s = rdp_send_stream_init(rdp, &sec_flags);
164
165
0
    if (!s)
166
0
      return -1;
167
168
0
    if (length > maxChunkSize)
169
0
    {
170
0
      chunkSize = rdp->settings->VCChunkSize;
171
0
    }
172
0
    else
173
0
    {
174
0
      chunkSize = length;
175
0
      flags |= CHANNEL_FLAG_LAST;
176
0
    }
177
178
0
    if (mcsChannel->options & CHANNEL_OPTION_SHOW_PROTOCOL)
179
0
      flags |= CHANNEL_FLAG_SHOW_PROTOCOL;
180
181
0
    Stream_Write_UINT32(s, totalLength);
182
0
    Stream_Write_UINT32(s, flags);
183
184
0
    if (!Stream_EnsureRemainingCapacity(s, chunkSize))
185
0
    {
186
0
      Stream_Release(s);
187
0
      return -1;
188
0
    }
189
190
0
    Stream_Write(s, buffer, chunkSize);
191
192
0
    WINPR_ASSERT(peerChannel->channelId <= UINT16_MAX);
193
0
    if (!rdp_send(rdp, s, (UINT16)peerChannel->channelId, sec_flags))
194
0
      return -1;
195
196
0
    buffer += chunkSize;
197
0
    length -= chunkSize;
198
0
    flags = 0;
199
0
  }
200
201
0
  return 1;
202
0
}
203
204
static void* freerdp_peer_virtual_channel_get_data(WINPR_ATTR_UNUSED freerdp_peer* client,
205
                                                   HANDLE hChannel)
206
0
{
207
0
  rdpPeerChannel* peerChannel = (rdpPeerChannel*)hChannel;
208
209
0
  WINPR_ASSERT(client);
210
0
  if (!hChannel)
211
0
    return nullptr;
212
213
0
  return peerChannel->extra;
214
0
}
215
216
static int freerdp_peer_virtual_channel_set_data(WINPR_ATTR_UNUSED freerdp_peer* client,
217
                                                 HANDLE hChannel, void* data)
218
0
{
219
0
  rdpPeerChannel* peerChannel = (rdpPeerChannel*)hChannel;
220
221
0
  WINPR_ASSERT(client);
222
0
  if (!hChannel)
223
0
    return -1;
224
225
0
  peerChannel->extra = data;
226
0
  return 1;
227
0
}
228
229
static BOOL freerdp_peer_set_state(freerdp_peer* client, CONNECTION_STATE state)
230
0
{
231
0
  WINPR_ASSERT(client);
232
0
  WINPR_ASSERT(client->context);
233
0
  return rdp_server_transition_to_state(client->context->rdp, state);
234
0
}
235
236
static BOOL freerdp_peer_initialize(freerdp_peer* client)
237
0
{
238
0
  rdpRdp* rdp = nullptr;
239
0
  rdpSettings* settings = nullptr;
240
241
0
  WINPR_ASSERT(client);
242
0
  WINPR_ASSERT(client->context);
243
244
0
  rdp = client->context->rdp;
245
0
  WINPR_ASSERT(rdp);
246
247
0
  settings = rdp->settings;
248
0
  WINPR_ASSERT(settings);
249
250
0
  settings->ServerMode = TRUE;
251
0
  settings->FrameAcknowledge = 0;
252
0
  settings->LocalConnection = client->local;
253
254
0
  const rdpCertificate* cert =
255
0
      freerdp_settings_get_pointer(settings, FreeRDP_RdpServerCertificate);
256
0
  if (!cert)
257
0
  {
258
0
    WLog_ERR(TAG, "Missing server certificate, can not continue.");
259
0
    return FALSE;
260
0
  }
261
262
0
  if (freerdp_settings_get_bool(settings, FreeRDP_RdpSecurity))
263
0
  {
264
265
0
    if (!freerdp_certificate_is_rdp_security_compatible(cert))
266
0
    {
267
0
      if (!freerdp_settings_set_bool(settings, FreeRDP_RdpSecurity, FALSE))
268
0
        return FALSE;
269
0
      if (!freerdp_settings_set_bool(settings, FreeRDP_UseRdpSecurityLayer, FALSE))
270
0
        return FALSE;
271
0
    }
272
0
  }
273
274
0
  nego_set_RCG_supported(rdp->nego, settings->RemoteCredentialGuard);
275
0
  nego_set_restricted_admin_mode_supported(rdp->nego, settings->RestrictedAdminModeSupported);
276
277
0
  return (rdp_server_transition_to_state(rdp, CONNECTION_STATE_INITIAL));
278
0
}
279
280
#if defined(WITH_FREERDP_DEPRECATED)
281
static BOOL freerdp_peer_get_fds(freerdp_peer* client, void** rfds, int* rcount)
282
{
283
  rdpTransport* transport = nullptr;
284
  WINPR_ASSERT(client);
285
  WINPR_ASSERT(client->context);
286
  WINPR_ASSERT(client->context->rdp);
287
288
  transport = client->context->rdp->transport;
289
  WINPR_ASSERT(transport);
290
  transport_get_fds(transport, rfds, rcount);
291
  return TRUE;
292
}
293
#endif
294
295
static HANDLE freerdp_peer_get_event_handle(freerdp_peer* client)
296
0
{
297
0
  HANDLE hEvent = nullptr;
298
0
  rdpTransport* transport = nullptr;
299
0
  WINPR_ASSERT(client);
300
0
  WINPR_ASSERT(client->context);
301
0
  WINPR_ASSERT(client->context->rdp);
302
303
0
  transport = client->context->rdp->transport;
304
0
  hEvent = transport_get_front_bio(transport);
305
0
  return hEvent;
306
0
}
307
308
static DWORD freerdp_peer_get_event_handles(freerdp_peer* client, HANDLE* events, DWORD count)
309
0
{
310
0
  WINPR_ASSERT(client);
311
0
  WINPR_ASSERT(client->context);
312
0
  WINPR_ASSERT(client->context->rdp);
313
0
  return transport_get_event_handles(client->context->rdp->transport, events, count);
314
0
}
315
316
static BOOL freerdp_peer_check_fds(freerdp_peer* peer)
317
0
{
318
0
  int status = 0;
319
0
  rdpRdp* rdp = nullptr;
320
321
0
  WINPR_ASSERT(peer);
322
0
  WINPR_ASSERT(peer->context);
323
324
0
  rdp = peer->context->rdp;
325
0
  status = rdp_check_fds(rdp);
326
327
0
  return (status >= 0);
328
0
}
329
330
static state_run_t peer_recv_data_pdu(freerdp_peer* client, wStream* s,
331
                                      WINPR_ATTR_UNUSED UINT16 totalLength)
332
0
{
333
0
  BYTE type = 0;
334
0
  UINT16 length = 0;
335
0
  UINT32 share_id = 0;
336
0
  BYTE compressed_type = 0;
337
0
  UINT16 compressed_len = 0;
338
0
  rdpUpdate* update = nullptr;
339
340
0
  WINPR_ASSERT(s);
341
0
  WINPR_ASSERT(client);
342
0
  WINPR_ASSERT(client->context);
343
0
  rdpRdp* rdp = client->context->rdp;
344
0
  WINPR_ASSERT(rdp);
345
0
  WINPR_ASSERT(rdp->mcs);
346
347
0
  update = client->context->update;
348
0
  WINPR_ASSERT(update);
349
350
0
  if (!rdp_read_share_data_header(rdp, s, &length, &type, &share_id, &compressed_type,
351
0
                                  &compressed_len))
352
0
    return STATE_RUN_FAILED;
353
354
#ifdef WITH_DEBUG_RDP
355
  WLog_Print(rdp->log, WLOG_DEBUG, "recv %s Data PDU (0x%02" PRIX8 "), length: %" PRIu16 "",
356
             data_pdu_type_to_string(type), type, length);
357
#endif
358
359
0
  switch (type)
360
0
  {
361
0
    case DATA_PDU_TYPE_SYNCHRONIZE:
362
0
      if (!rdp_recv_client_synchronize_pdu(rdp, s))
363
0
        return STATE_RUN_FAILED;
364
365
0
      break;
366
367
0
    case DATA_PDU_TYPE_CONTROL:
368
0
      if (!rdp_server_accept_client_control_pdu(rdp, s))
369
0
        return STATE_RUN_FAILED;
370
371
0
      break;
372
373
0
    case DATA_PDU_TYPE_INPUT:
374
0
      if (!input_recv(rdp->input, s))
375
0
        return STATE_RUN_FAILED;
376
377
0
      break;
378
379
0
    case DATA_PDU_TYPE_BITMAP_CACHE_PERSISTENT_LIST:
380
0
      if (!rdp_server_accept_client_persistent_key_list_pdu(rdp, s))
381
0
        return STATE_RUN_FAILED;
382
0
      break;
383
384
0
    case DATA_PDU_TYPE_FONT_LIST:
385
0
      if (!rdp_server_accept_client_font_list_pdu(rdp, s))
386
0
        return STATE_RUN_FAILED;
387
388
0
      return STATE_RUN_CONTINUE; // State changed, trigger rerun
389
390
0
    case DATA_PDU_TYPE_SHUTDOWN_REQUEST:
391
0
      mcs_send_disconnect_provider_ultimatum(rdp->mcs,
392
0
                                             Disconnect_Ultimatum_provider_initiated);
393
0
      WLog_WARN(TAG, "disconnect provider ultimatum sent to peer, closing connection");
394
0
      return STATE_RUN_QUIT_SESSION;
395
396
0
    case DATA_PDU_TYPE_FRAME_ACKNOWLEDGE:
397
0
      if (!Stream_CheckAndLogRequiredLength(TAG, s, 4))
398
0
        return STATE_RUN_FAILED;
399
400
0
      Stream_Read_UINT32(s, client->ack_frame_id);
401
0
      if (update->SurfaceFrameAcknowledge)
402
0
      {
403
0
        if (!update->SurfaceFrameAcknowledge(update->context, client->ack_frame_id))
404
0
          return STATE_RUN_FAILED;
405
0
      }
406
0
      break;
407
408
0
    case DATA_PDU_TYPE_REFRESH_RECT:
409
0
      if (!update_read_refresh_rect(update, s))
410
0
        return STATE_RUN_FAILED;
411
412
0
      break;
413
414
0
    case DATA_PDU_TYPE_SUPPRESS_OUTPUT:
415
0
      if (!update_read_suppress_output(update, s))
416
0
        return STATE_RUN_FAILED;
417
418
0
      break;
419
420
0
    default:
421
0
      WLog_ERR(TAG, "Data PDU type %" PRIu8 "", type);
422
0
      break;
423
0
  }
424
425
0
  return STATE_RUN_SUCCESS;
426
0
}
427
428
static state_run_t peer_recv_tpkt_pdu(freerdp_peer* client, wStream* s)
429
0
{
430
0
  state_run_t rc = STATE_RUN_SUCCESS;
431
0
  UINT16 length = 0;
432
0
  UINT16 pduType = 0;
433
0
  UINT16 pduSource = 0;
434
0
  UINT16 channelId = 0;
435
0
  UINT16 securityFlags = 0;
436
437
0
  WINPR_ASSERT(s);
438
0
  WINPR_ASSERT(client);
439
0
  WINPR_ASSERT(client->context);
440
441
0
  rdpRdp* rdp = client->context->rdp;
442
0
  WINPR_ASSERT(rdp);
443
0
  WINPR_ASSERT(rdp->mcs);
444
445
0
  rdpSettings* settings = client->context->settings;
446
0
  WINPR_ASSERT(settings);
447
448
0
  if (!rdp_read_header(rdp, s, &length, &channelId))
449
0
    return STATE_RUN_FAILED;
450
451
0
  rdp->inPackets++;
452
0
  if (freerdp_shall_disconnect_context(rdp->context))
453
0
    return STATE_RUN_SUCCESS;
454
455
0
  if (rdp_get_state(rdp) <= CONNECTION_STATE_LICENSING)
456
0
  {
457
0
    return rdp_handle_message_channel(rdp, s, channelId, length);
458
0
  }
459
460
0
  if (!rdp_handle_optional_rdp_decryption(rdp, s, &length, &securityFlags))
461
0
    return STATE_RUN_FAILED;
462
463
0
  if (channelId == MCS_GLOBAL_CHANNEL_ID)
464
0
  {
465
0
    char buffer[256] = WINPR_C_ARRAY_INIT;
466
0
    UINT16 pduLength = 0;
467
0
    UINT16 remain = 0;
468
0
    if (!rdp_read_share_control_header(rdp, s, &pduLength, &remain, &pduType, &pduSource))
469
0
      return STATE_RUN_FAILED;
470
471
0
    settings->PduSource = pduSource;
472
473
0
    WLog_DBG(TAG, "Received %s", pdu_type_to_str(pduType, buffer, sizeof(buffer)));
474
0
    switch (pduType)
475
0
    {
476
0
      case PDU_TYPE_DATA:
477
0
        rc = peer_recv_data_pdu(client, s, pduLength);
478
0
        break;
479
480
0
      case PDU_TYPE_CONFIRM_ACTIVE:
481
0
        if (!rdp_server_accept_confirm_active(rdp, s, pduLength))
482
0
          return STATE_RUN_FAILED;
483
484
0
        break;
485
486
0
      case PDU_TYPE_FLOW_RESPONSE:
487
0
      case PDU_TYPE_FLOW_STOP:
488
0
      case PDU_TYPE_FLOW_TEST:
489
0
        if (!Stream_SafeSeek(s, remain))
490
0
        {
491
0
          WLog_WARN(TAG, "Short PDU, need %" PRIu16 " bytes, got %" PRIuz, remain,
492
0
                    Stream_GetRemainingLength(s));
493
0
          return STATE_RUN_FAILED;
494
0
        }
495
0
        break;
496
497
0
      default:
498
0
        WLog_ERR(TAG, "Client sent unknown pduType %" PRIu16 "", pduType);
499
0
        return STATE_RUN_FAILED;
500
0
    }
501
0
  }
502
0
  else if ((rdp->mcs->messageChannelId > 0) && (channelId == rdp->mcs->messageChannelId))
503
0
  {
504
0
    if (!settings->UseRdpSecurityLayer)
505
0
    {
506
0
      if (!rdp_read_security_header(rdp, s, &securityFlags, nullptr))
507
0
        return STATE_RUN_FAILED;
508
0
    }
509
510
0
    return rdp_recv_message_channel_pdu(rdp, s, securityFlags);
511
0
  }
512
0
  else
513
0
  {
514
0
    if (!freerdp_channel_peer_process(client, s, channelId))
515
0
      return STATE_RUN_FAILED;
516
0
  }
517
0
  if (!tpkt_ensure_stream_consumed(rdp->log, s, length))
518
0
    return STATE_RUN_FAILED;
519
520
0
  return rc;
521
0
}
522
523
static state_run_t peer_recv_handle_auto_detect(freerdp_peer* client, wStream* s)
524
0
{
525
0
  state_run_t ret = STATE_RUN_FAILED;
526
0
  rdpRdp* rdp = nullptr;
527
528
0
  WINPR_ASSERT(client);
529
0
  WINPR_ASSERT(s);
530
0
  WINPR_ASSERT(client->context);
531
532
0
  rdp = client->context->rdp;
533
0
  WINPR_ASSERT(rdp);
534
535
0
  const rdpSettings* settings = client->context->settings;
536
0
  WINPR_ASSERT(settings);
537
538
0
  if (freerdp_settings_get_bool(settings, FreeRDP_NetworkAutoDetect))
539
0
  {
540
0
    switch (rdp_get_state(rdp))
541
0
    {
542
0
      case CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_REQUEST:
543
0
        autodetect_on_connect_time_auto_detect_begin(rdp->autodetect);
544
0
        switch (autodetect_get_state(rdp->autodetect))
545
0
        {
546
0
          case FREERDP_AUTODETECT_STATE_REQUEST:
547
0
            ret = STATE_RUN_SUCCESS;
548
0
            if (!rdp_server_transition_to_state(
549
0
                    rdp, CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_RESPONSE))
550
0
              return STATE_RUN_FAILED;
551
0
            break;
552
0
          case FREERDP_AUTODETECT_STATE_COMPLETE:
553
0
            ret = STATE_RUN_CONTINUE; /* Rerun in next state */
554
0
            if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_LICENSING))
555
0
              return STATE_RUN_FAILED;
556
0
            break;
557
0
          default:
558
0
            break;
559
0
        }
560
0
        break;
561
0
      case CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_RESPONSE:
562
0
        ret = peer_recv_pdu(client, s);
563
0
        if (state_run_success(ret))
564
0
        {
565
0
          autodetect_on_connect_time_auto_detect_progress(rdp->autodetect);
566
0
          switch (autodetect_get_state(rdp->autodetect))
567
0
          {
568
0
            case FREERDP_AUTODETECT_STATE_REQUEST:
569
0
              ret = STATE_RUN_SUCCESS;
570
0
              break;
571
0
            case FREERDP_AUTODETECT_STATE_COMPLETE:
572
0
              ret = STATE_RUN_CONTINUE; /* Rerun in next state */
573
0
              if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_LICENSING))
574
0
                return STATE_RUN_FAILED;
575
0
              break;
576
0
            default:
577
0
              break;
578
0
          }
579
0
        }
580
0
        break;
581
0
      default:
582
0
        WINPR_ASSERT(FALSE);
583
0
        break;
584
0
    }
585
0
  }
586
0
  else
587
0
  {
588
0
    if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_LICENSING))
589
0
      return STATE_RUN_FAILED;
590
591
0
    ret = STATE_RUN_CONTINUE; /* Rerun in next state */
592
0
  }
593
594
0
  return ret;
595
0
}
596
597
static state_run_t peer_recv_handle_licensing(freerdp_peer* client, wStream* s)
598
0
{
599
0
  state_run_t ret = STATE_RUN_FAILED;
600
0
  rdpRdp* rdp = nullptr;
601
0
  rdpSettings* settings = nullptr;
602
603
0
  WINPR_ASSERT(client);
604
0
  WINPR_ASSERT(s);
605
0
  WINPR_ASSERT(client->context);
606
607
0
  rdp = client->context->rdp;
608
0
  WINPR_ASSERT(rdp);
609
610
0
  settings = rdp->settings;
611
0
  WINPR_ASSERT(settings);
612
613
0
  switch (license_get_state(rdp->license))
614
0
  {
615
0
    case LICENSE_STATE_INITIAL:
616
0
    {
617
0
      const BOOL required =
618
0
          freerdp_settings_get_bool(settings, FreeRDP_ServerLicenseRequired);
619
620
0
      if (required)
621
0
      {
622
0
        if (!license_server_configure(rdp->license))
623
0
          ret = STATE_RUN_FAILED;
624
0
        else if (!license_server_send_request(rdp->license))
625
0
          ret = STATE_RUN_FAILED;
626
0
        else
627
0
          ret = STATE_RUN_SUCCESS;
628
0
      }
629
0
      else
630
0
      {
631
0
        if (license_send_valid_client_error_packet(rdp))
632
0
          ret = STATE_RUN_CONTINUE; /* Rerun in next state, might be capabilities */
633
0
      }
634
0
    }
635
0
    break;
636
0
    case LICENSE_STATE_COMPLETED:
637
0
      ret = STATE_RUN_CONTINUE; /* Licensing completed, continue in next state */
638
0
      break;
639
0
    case LICENSE_STATE_ABORTED:
640
0
      ret = STATE_RUN_FAILED;
641
0
      break;
642
0
    default:
643
0
      ret = peer_recv_pdu(client, s);
644
0
      break;
645
0
  }
646
647
0
  return ret;
648
0
}
649
650
static state_run_t peer_recv_fastpath_pdu(freerdp_peer* client, wStream* s)
651
0
{
652
0
  rdpRdp* rdp = nullptr;
653
0
  UINT16 length = 0;
654
0
  BOOL rc = 0;
655
0
  rdpFastPath* fastpath = nullptr;
656
657
0
  WINPR_ASSERT(s);
658
0
  WINPR_ASSERT(client);
659
0
  WINPR_ASSERT(client->context);
660
661
0
  rdp = client->context->rdp;
662
0
  WINPR_ASSERT(rdp);
663
664
0
  fastpath = rdp->fastpath;
665
0
  WINPR_ASSERT(fastpath);
666
667
0
  rc = fastpath_read_header_rdp(fastpath, s, &length);
668
669
0
  if (!rc || (length == 0))
670
0
  {
671
0
    WLog_ERR(TAG, "incorrect FastPath PDU header length %" PRIu16 "", length);
672
0
    return STATE_RUN_FAILED;
673
0
  }
674
0
  if (!Stream_CheckAndLogRequiredLength(TAG, s, length))
675
0
    return STATE_RUN_FAILED;
676
677
0
  if (!fastpath_decrypt(fastpath, s, &length))
678
0
    return STATE_RUN_FAILED;
679
680
0
  rdp->inPackets++;
681
682
0
  return fastpath_recv_inputs(fastpath, s);
683
0
}
684
685
state_run_t peer_recv_pdu(freerdp_peer* client, wStream* s)
686
0
{
687
0
  int rc = tpkt_verify_header(s);
688
689
0
  if (rc > 0)
690
0
    return peer_recv_tpkt_pdu(client, s);
691
0
  else if (rc == 0)
692
0
    return peer_recv_fastpath_pdu(client, s);
693
0
  else
694
0
    return STATE_RUN_FAILED;
695
0
}
696
697
static state_run_t peer_unexpected_client_message(rdpRdp* rdp, UINT32 flag)
698
0
{
699
0
  char buffer[1024] = WINPR_C_ARRAY_INIT;
700
0
  WLog_WARN(TAG, "Unexpected client message in state %s, missing flag %s",
701
0
            rdp_get_state_string(rdp), rdp_finalize_flags_to_str(flag, buffer, sizeof(buffer)));
702
0
  return STATE_RUN_SUCCESS; /* we ignore this as per spec input PDU are already allowed */
703
0
}
704
705
state_run_t rdp_peer_handle_state_demand_active(freerdp_peer* client)
706
0
{
707
0
  state_run_t ret = STATE_RUN_FAILED;
708
709
0
  WINPR_ASSERT(client);
710
0
  WINPR_ASSERT(client->context);
711
712
0
  rdpRdp* rdp = client->context->rdp;
713
0
  WINPR_ASSERT(rdp);
714
715
0
  if (client->Capabilities && !client->Capabilities(client))
716
0
  {
717
0
    WLog_ERR(TAG, "[%s] freerdp_peer::Capabilities() callback failed",
718
0
             rdp_get_state_string(rdp));
719
0
  }
720
0
  else if (!rdp_send_demand_active(rdp))
721
0
  {
722
0
    WLog_ERR(TAG, "[%s] rdp_send_demand_active() fail", rdp_get_state_string(rdp));
723
0
  }
724
0
  else
725
0
  {
726
0
    if (!rdp_server_transition_to_state(rdp,
727
0
                                        CONNECTION_STATE_CAPABILITIES_EXCHANGE_MONITOR_LAYOUT))
728
0
      return STATE_RUN_FAILED;
729
0
    ret = STATE_RUN_CONTINUE;
730
0
  }
731
0
  return ret;
732
0
}
733
734
/** \brief Handle server peer state ACTIVE:
735
 *  On initial run (not connected, not activated) do not read data
736
 *
737
 *  \return -1 in case of an error, 0 if no data needs to be processed, 1 to let
738
 *  the state machine run again and 2 if peer_recv_pdu must be called.
739
 */
740
static state_run_t rdp_peer_handle_state_active(freerdp_peer* client)
741
0
{
742
0
  state_run_t ret = STATE_RUN_FAILED;
743
744
0
  WINPR_ASSERT(client);
745
0
  WINPR_ASSERT(client->context);
746
747
0
  if (!client->connected)
748
0
  {
749
    /**
750
     * PostConnect should only be called once and should not
751
     * be called after a reactivation sequence.
752
     */
753
0
    IFCALLRET(client->PostConnect, client->connected, client);
754
0
  }
755
0
  if (!client->connected)
756
0
  {
757
0
    WLog_ERR(TAG, "PostConnect for peer %p failed", WINPR_CXX_COMPAT_CAST(const void*, client));
758
0
    ret = STATE_RUN_FAILED;
759
0
  }
760
0
  else if (!client->activated)
761
0
  {
762
0
    BOOL activated = TRUE;
763
764
    /*  Set client->activated TRUE before calling the Activate callback.
765
     *  the Activate callback might reset the client->activated flag even if it returns success
766
     * (e.g. deactivate/reactivate sequence) */
767
0
    client->activated = TRUE;
768
0
    IFCALLRET(client->Activate, activated, client);
769
770
0
    if (!activated)
771
0
    {
772
0
      WLog_ERR(TAG, "Activate for peer %p failed",
773
0
               WINPR_CXX_COMPAT_CAST(const void*, client));
774
0
      ret = STATE_RUN_FAILED;
775
0
    }
776
0
    else
777
0
      ret = STATE_RUN_SUCCESS;
778
0
  }
779
0
  else
780
0
    ret = STATE_RUN_ACTIVE;
781
0
  return ret;
782
0
}
783
784
static state_run_t peer_recv_callback_internal(WINPR_ATTR_UNUSED rdpTransport* transport,
785
                                               wStream* s, void* extra)
786
0
{
787
0
  freerdp_peer* client = (freerdp_peer*)extra;
788
0
  state_run_t ret = STATE_RUN_FAILED;
789
790
0
  WINPR_ASSERT(transport);
791
0
  WINPR_ASSERT(client);
792
0
  WINPR_ASSERT(client->context);
793
794
0
  rdpRdp* rdp = client->context->rdp;
795
0
  WINPR_ASSERT(rdp);
796
797
0
  rdpSettings* settings = client->context->settings;
798
0
  WINPR_ASSERT(settings);
799
800
0
  if (client->ReachedState)
801
0
  {
802
0
    if (!client->ReachedState(client, rdp_get_state(rdp)))
803
0
      return STATE_RUN_FAILED;
804
0
  }
805
0
  switch (rdp_get_state(rdp))
806
0
  {
807
0
    case CONNECTION_STATE_INITIAL:
808
0
      if (!freerdp_settings_enforce_consistency(settings))
809
0
        ret = STATE_RUN_FAILED;
810
0
      else if (rdp_server_transition_to_state(rdp, CONNECTION_STATE_NEGO))
811
0
        ret = STATE_RUN_CONTINUE;
812
0
      break;
813
814
0
    case CONNECTION_STATE_NEGO:
815
0
      if (!rdp_server_accept_nego(rdp, s))
816
0
      {
817
0
        WLog_ERR(TAG, "%s - rdp_server_accept_nego() fail", rdp_get_state_string(rdp));
818
0
      }
819
0
      else
820
0
      {
821
0
        const UINT32 SelectedProtocol = nego_get_selected_protocol(rdp->nego);
822
823
0
        settings->RdstlsSecurity = (SelectedProtocol & PROTOCOL_RDSTLS) != 0;
824
0
        settings->NlaSecurity = (SelectedProtocol & PROTOCOL_HYBRID) != 0;
825
0
        settings->TlsSecurity = (SelectedProtocol & PROTOCOL_SSL) != 0;
826
0
        settings->RdpSecurity = (SelectedProtocol == PROTOCOL_RDP) != 0;
827
828
0
        client->authenticated = FALSE;
829
0
        if (SelectedProtocol & PROTOCOL_HYBRID)
830
0
        {
831
0
          SEC_WINNT_AUTH_IDENTITY_INFO* identity =
832
0
              (SEC_WINNT_AUTH_IDENTITY_INFO*)nego_get_identity(rdp->nego);
833
0
          if (sspi_CopyAuthIdentity(&client->identity, identity) >= 0)
834
0
          {
835
0
            client->authenticated =
836
0
                IFCALLRESULT(TRUE, client->Logon, client, &client->identity, TRUE);
837
0
          }
838
0
          nego_free_nla(rdp->nego);
839
0
        }
840
0
        else
841
0
        {
842
0
          client->authenticated =
843
0
              IFCALLRESULT(TRUE, client->Logon, client, &client->identity, FALSE);
844
0
        }
845
0
        if (!client->authenticated)
846
0
          ret = STATE_RUN_FAILED;
847
0
        else
848
0
        {
849
0
          if (rdp_server_transition_to_state(rdp, CONNECTION_STATE_MCS_CREATE_REQUEST))
850
0
            ret = STATE_RUN_SUCCESS;
851
0
        }
852
0
      }
853
0
      break;
854
855
0
    case CONNECTION_STATE_NLA:
856
0
      WINPR_ASSERT(FALSE); // TODO
857
0
      break;
858
859
0
    case CONNECTION_STATE_MCS_CREATE_REQUEST:
860
0
      if (!rdp_server_accept_mcs_connect_initial(rdp, s))
861
0
      {
862
0
        WLog_ERR(TAG,
863
0
                 "%s - "
864
0
                 "rdp_server_accept_mcs_connect_initial() fail",
865
0
                 rdp_get_state_string(rdp));
866
0
      }
867
0
      else
868
0
        ret = STATE_RUN_SUCCESS;
869
870
0
      break;
871
872
0
    case CONNECTION_STATE_MCS_ERECT_DOMAIN:
873
0
      if (!rdp_server_accept_mcs_erect_domain_request(rdp, s))
874
0
      {
875
0
        WLog_ERR(TAG,
876
0
                 "%s - "
877
0
                 "rdp_server_accept_mcs_erect_domain_request() fail",
878
0
                 rdp_get_state_string(rdp));
879
0
      }
880
0
      else
881
0
        ret = STATE_RUN_SUCCESS;
882
883
0
      break;
884
885
0
    case CONNECTION_STATE_MCS_ATTACH_USER:
886
0
      if (!rdp_server_accept_mcs_attach_user_request(rdp, s))
887
0
      {
888
0
        WLog_ERR(TAG,
889
0
                 "%s - "
890
0
                 "rdp_server_accept_mcs_attach_user_request() fail",
891
0
                 rdp_get_state_string(rdp));
892
0
      }
893
0
      else
894
0
        ret = STATE_RUN_SUCCESS;
895
896
0
      break;
897
898
0
    case CONNECTION_STATE_MCS_CHANNEL_JOIN_REQUEST:
899
0
      if (!rdp_server_accept_mcs_channel_join_request(rdp, s))
900
0
      {
901
0
        WLog_ERR(TAG,
902
0
                 "%s - "
903
0
                 "rdp_server_accept_mcs_channel_join_request() fail",
904
0
                 rdp_get_state_string(rdp));
905
0
      }
906
0
      else
907
0
        ret = STATE_RUN_SUCCESS;
908
0
      break;
909
910
0
    case CONNECTION_STATE_RDP_SECURITY_COMMENCEMENT:
911
0
      ret = STATE_RUN_SUCCESS;
912
913
0
      if (!rdp_server_establish_keys(rdp, s))
914
0
      {
915
0
        WLog_ERR(TAG,
916
0
                 "%s - "
917
0
                 "rdp_server_establish_keys() fail",
918
0
                 rdp_get_state_string(rdp));
919
0
        ret = STATE_RUN_FAILED;
920
0
      }
921
922
0
      if (state_run_success(ret))
923
0
      {
924
0
        if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_SECURE_SETTINGS_EXCHANGE))
925
0
          ret = STATE_RUN_FAILED;
926
0
        else if (Stream_GetRemainingLength(s) > 0)
927
0
          ret = STATE_RUN_CONTINUE; /* Rerun function */
928
0
      }
929
0
      break;
930
931
0
    case CONNECTION_STATE_SECURE_SETTINGS_EXCHANGE:
932
0
      if (rdp_recv_client_info(rdp, s))
933
0
      {
934
0
        if (rdp_server_transition_to_state(
935
0
                rdp, CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_REQUEST))
936
0
          ret = STATE_RUN_CONTINUE;
937
0
      }
938
0
      break;
939
940
0
    case CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_REQUEST:
941
0
    case CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_RESPONSE:
942
0
      ret = peer_recv_handle_auto_detect(client, s);
943
0
      break;
944
945
0
    case CONNECTION_STATE_LICENSING:
946
0
      ret = peer_recv_handle_licensing(client, s);
947
0
      if (ret == STATE_RUN_CONTINUE)
948
0
      {
949
0
        if (!rdp_server_transition_to_state(
950
0
                rdp, CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_REQUEST))
951
0
          ret = STATE_RUN_FAILED;
952
0
      }
953
0
      break;
954
955
0
    case CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_REQUEST:
956
0
      if (settings->SupportMultitransport &&
957
0
          ((settings->MultitransportFlags & INITIATE_REQUEST_PROTOCOL_UDPFECR) != 0))
958
0
      {
959
        /* only UDP reliable for now, nobody does lossy UDP (MS-RDPUDP only) these days */
960
0
        ret = multitransport_server_request(rdp->multitransport,
961
0
                                            INITIATE_REQUEST_PROTOCOL_UDPFECR);
962
0
        switch (ret)
963
0
        {
964
0
          case STATE_RUN_SUCCESS:
965
0
            if (!rdp_server_transition_to_state(
966
0
                    rdp, CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_RESPONSE))
967
0
              ret = STATE_RUN_FAILED;
968
0
            break;
969
0
          case STATE_RUN_CONTINUE:
970
            /* mismatch on the supported kind of UDP transports */
971
0
            if (!rdp_server_transition_to_state(
972
0
                    rdp, CONNECTION_STATE_CAPABILITIES_EXCHANGE_DEMAND_ACTIVE))
973
0
              ret = STATE_RUN_FAILED;
974
0
            break;
975
0
          default:
976
0
            break;
977
0
        }
978
0
      }
979
0
      else
980
0
      {
981
0
        if (rdp_server_transition_to_state(
982
0
                rdp, CONNECTION_STATE_CAPABILITIES_EXCHANGE_DEMAND_ACTIVE))
983
0
          ret = STATE_RUN_CONTINUE; /* Rerun, initialize next state */
984
0
      }
985
0
      break;
986
0
    case CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_RESPONSE:
987
0
      ret = peer_recv_pdu(client, s);
988
0
      break;
989
990
0
    case CONNECTION_STATE_CAPABILITIES_EXCHANGE_DEMAND_ACTIVE:
991
0
      ret = rdp_peer_handle_state_demand_active(client);
992
0
      break;
993
994
0
    case CONNECTION_STATE_CAPABILITIES_EXCHANGE_MONITOR_LAYOUT:
995
0
      if (freerdp_settings_get_bool(settings, FreeRDP_SupportMonitorLayoutPdu))
996
0
      {
997
0
        MONITOR_DEF* monitors = nullptr;
998
999
0
        if (client->AdjustMonitorsLayout)
1000
0
        {
1001
0
          if (!client->AdjustMonitorsLayout(client))
1002
0
            return STATE_RUN_FAILED;
1003
0
        }
1004
1005
        /* client supports the monitorLayout PDU, let's send him the monitors if any */
1006
0
        ret = STATE_RUN_SUCCESS;
1007
0
        if (freerdp_settings_get_uint32(settings, FreeRDP_MonitorCount) == 0)
1008
0
        {
1009
0
          const UINT32 w = freerdp_settings_get_uint32(settings, FreeRDP_DesktopWidth);
1010
0
          const UINT32 h = freerdp_settings_get_uint32(settings, FreeRDP_DesktopHeight);
1011
0
          const rdpMonitor primary = { .x = 0,
1012
0
                                     .y = 0,
1013
0
                                     .width = WINPR_ASSERTING_INT_CAST(int32_t, w),
1014
0
                                     .height = WINPR_ASSERTING_INT_CAST(int32_t, h),
1015
0
                                     .is_primary = TRUE,
1016
0
                                     .orig_screen = 0,
1017
0
                                     .attributes = { .physicalWidth = w,
1018
0
                                                     .physicalHeight = h,
1019
0
                                                     .orientation =
1020
0
                                                         ORIENTATION_LANDSCAPE,
1021
0
                                                     .desktopScaleFactor = 100,
1022
0
                                                     .deviceScaleFactor = 100 } };
1023
0
          if (!freerdp_settings_set_pointer_array(settings, FreeRDP_MonitorDefArray, 0,
1024
0
                                                  &primary))
1025
0
            ret = STATE_RUN_FAILED;
1026
0
          else if (!freerdp_settings_set_uint32(settings, FreeRDP_MonitorCount, 1))
1027
0
            ret = STATE_RUN_FAILED;
1028
0
        }
1029
0
        if (state_run_failed(ret))
1030
0
        {
1031
0
        }
1032
0
        else if (!display_convert_rdp_monitor_to_monitor_def(
1033
0
                     settings->MonitorCount, settings->MonitorDefArray, &monitors))
1034
0
        {
1035
0
          ret = STATE_RUN_FAILED;
1036
0
        }
1037
0
        else if (!freerdp_display_send_monitor_layout(rdp->context, settings->MonitorCount,
1038
0
                                                      monitors))
1039
0
        {
1040
0
          ret = STATE_RUN_FAILED;
1041
0
        }
1042
0
        else
1043
0
          ret = STATE_RUN_SUCCESS;
1044
0
        free(monitors);
1045
1046
0
        const size_t len = Stream_GetRemainingLength(s);
1047
0
        if (!state_run_failed(ret) && (len > 0))
1048
0
          ret = STATE_RUN_CONTINUE;
1049
0
      }
1050
0
      else
1051
0
      {
1052
0
        const size_t len = Stream_GetRemainingLength(s);
1053
0
        if (len > 0)
1054
0
          ret = STATE_RUN_CONTINUE;
1055
0
        else
1056
0
          ret = STATE_RUN_SUCCESS;
1057
0
      }
1058
0
      if (state_run_success(ret))
1059
0
      {
1060
0
        if (!rdp_server_transition_to_state(
1061
0
                rdp, CONNECTION_STATE_CAPABILITIES_EXCHANGE_CONFIRM_ACTIVE))
1062
0
          ret = STATE_RUN_FAILED;
1063
0
      }
1064
0
      break;
1065
1066
0
    case CONNECTION_STATE_CAPABILITIES_EXCHANGE_CONFIRM_ACTIVE:
1067
      /**
1068
       * During reactivation sequence the client might sent some input or channel data
1069
       * before receiving the Deactivate All PDU. We need to process them as usual.
1070
       */
1071
0
      ret = peer_recv_pdu(client, s);
1072
0
      break;
1073
1074
0
    case CONNECTION_STATE_FINALIZATION_SYNC:
1075
0
      ret = peer_recv_pdu(client, s);
1076
0
      if (rdp_finalize_is_flag_set(rdp, FINALIZE_CS_SYNCHRONIZE_PDU))
1077
0
      {
1078
0
        if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_FINALIZATION_COOPERATE))
1079
0
          ret = STATE_RUN_FAILED;
1080
0
      }
1081
0
      else
1082
0
        ret = peer_unexpected_client_message(rdp, FINALIZE_CS_SYNCHRONIZE_PDU);
1083
0
      break;
1084
0
    case CONNECTION_STATE_FINALIZATION_COOPERATE:
1085
0
      ret = peer_recv_pdu(client, s);
1086
0
      if (rdp_finalize_is_flag_set(rdp, FINALIZE_CS_CONTROL_COOPERATE_PDU))
1087
0
      {
1088
0
        if (!rdp_server_transition_to_state(rdp,
1089
0
                                            CONNECTION_STATE_FINALIZATION_REQUEST_CONTROL))
1090
0
          ret = STATE_RUN_FAILED;
1091
0
      }
1092
0
      else
1093
0
        ret = peer_unexpected_client_message(rdp, FINALIZE_CS_CONTROL_COOPERATE_PDU);
1094
0
      break;
1095
0
    case CONNECTION_STATE_FINALIZATION_REQUEST_CONTROL:
1096
0
      ret = peer_recv_pdu(client, s);
1097
0
      if (rdp_finalize_is_flag_set(rdp, FINALIZE_CS_CONTROL_REQUEST_PDU))
1098
0
      {
1099
0
        if (!rdp_send_server_control_granted_pdu(rdp))
1100
0
          ret = STATE_RUN_FAILED;
1101
0
        else if (!rdp_server_transition_to_state(
1102
0
                     rdp, CONNECTION_STATE_FINALIZATION_PERSISTENT_KEY_LIST))
1103
0
          ret = STATE_RUN_FAILED;
1104
0
      }
1105
0
      else
1106
0
        ret = peer_unexpected_client_message(rdp, FINALIZE_CS_CONTROL_REQUEST_PDU);
1107
0
      break;
1108
0
    case CONNECTION_STATE_FINALIZATION_PERSISTENT_KEY_LIST:
1109
0
      if (freerdp_settings_get_bool(settings, FreeRDP_BitmapCachePersistEnabled) &&
1110
0
          !rdp_finalize_is_flag_set(rdp, FINALIZE_DEACTIVATE_REACTIVATE))
1111
0
      {
1112
0
        ret = peer_recv_pdu(client, s);
1113
1114
0
        if (rdp_finalize_is_flag_set(rdp, FINALIZE_CS_PERSISTENT_KEY_LIST_PDU))
1115
0
        {
1116
0
          if (!rdp_server_transition_to_state(rdp,
1117
0
                                              CONNECTION_STATE_FINALIZATION_FONT_LIST))
1118
0
            ret = STATE_RUN_FAILED;
1119
0
        }
1120
0
        else
1121
0
          ret = peer_unexpected_client_message(rdp,
1122
0
                                               CONNECTION_STATE_FINALIZATION_FONT_LIST);
1123
0
      }
1124
0
      else
1125
0
      {
1126
0
        if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_FINALIZATION_FONT_LIST))
1127
0
          ret = STATE_RUN_FAILED;
1128
0
        else
1129
0
          ret = STATE_RUN_CONTINUE;
1130
0
      }
1131
0
      break;
1132
0
    case CONNECTION_STATE_FINALIZATION_FONT_LIST:
1133
0
      ret = peer_recv_pdu(client, s);
1134
0
      if (state_run_success(ret))
1135
0
      {
1136
0
        if (rdp_finalize_is_flag_set(rdp, FINALIZE_CS_FONT_LIST_PDU))
1137
0
        {
1138
0
          if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_ACTIVE))
1139
0
            ret = STATE_RUN_FAILED;
1140
0
          else
1141
0
          {
1142
0
            update_reset_state(rdp->update);
1143
0
            ret = STATE_RUN_CONTINUE;
1144
0
          }
1145
0
        }
1146
0
        else
1147
0
          ret = peer_unexpected_client_message(rdp, FINALIZE_CS_FONT_LIST_PDU);
1148
0
      }
1149
0
      break;
1150
1151
0
    case CONNECTION_STATE_ACTIVE:
1152
0
      ret = rdp_peer_handle_state_active(client);
1153
0
      if (ret >= STATE_RUN_ACTIVE)
1154
0
        ret = peer_recv_pdu(client, s);
1155
0
      break;
1156
1157
      /* States that must not happen in server state machine */
1158
0
    case CONNECTION_STATE_FINALIZATION_CLIENT_SYNC:
1159
0
    case CONNECTION_STATE_FINALIZATION_CLIENT_COOPERATE:
1160
0
    case CONNECTION_STATE_FINALIZATION_CLIENT_GRANTED_CONTROL:
1161
0
    case CONNECTION_STATE_FINALIZATION_CLIENT_FONT_MAP:
1162
0
    default:
1163
0
      WLog_ERR(TAG, "%s state %" PRId32, rdp_get_state_string(rdp),
1164
0
               WINPR_CXX_COMPAT_CAST(int32_t, rdp_get_state(rdp)));
1165
0
      break;
1166
0
  }
1167
1168
0
  return ret;
1169
0
}
1170
1171
static state_run_t peer_recv_callback(rdpTransport* transport, wStream* s, void* extra)
1172
0
{
1173
0
  char buffer[64] = WINPR_C_ARRAY_INIT;
1174
0
  state_run_t rc = STATE_RUN_FAILED;
1175
0
  const size_t start = Stream_GetPosition(s);
1176
0
  const rdpContext* context = transport_get_context(transport);
1177
0
  DWORD level = WLOG_TRACE;
1178
0
  static wLog* log = nullptr;
1179
0
  if (!log)
1180
0
    log = WLog_Get(TAG);
1181
1182
0
  WINPR_ASSERT(context);
1183
0
  do
1184
0
  {
1185
0
    const rdpRdp* rdp = context->rdp;
1186
0
    const char* old = rdp_get_state_string(rdp);
1187
1188
0
    if (rc == STATE_RUN_TRY_AGAIN)
1189
0
    {
1190
0
      if (!Stream_SetPosition(s, start))
1191
0
        return STATE_RUN_FAILED;
1192
0
    }
1193
0
    rc = peer_recv_callback_internal(transport, s, extra);
1194
1195
0
    const size_t len = Stream_GetRemainingLength(s);
1196
0
    if ((len > 0) && !state_run_continue(rc))
1197
0
      level = WLOG_WARN;
1198
0
    WLog_Print(log, level,
1199
0
               "(server)[%s -> %s] current return %s [%" PRIuz " bytes not processed]", old,
1200
0
               rdp_get_state_string(rdp), state_run_result_string(rc, buffer, sizeof(buffer)),
1201
0
               len);
1202
0
  } while (state_run_continue(rc));
1203
1204
0
  return rc;
1205
0
}
1206
1207
static BOOL freerdp_peer_close(freerdp_peer* client)
1208
0
{
1209
0
  UINT32 SelectedProtocol = 0;
1210
0
  rdpContext* context = nullptr;
1211
1212
0
  WINPR_ASSERT(client);
1213
1214
0
  context = client->context;
1215
0
  WINPR_ASSERT(context);
1216
0
  WINPR_ASSERT(context->settings);
1217
0
  WINPR_ASSERT(context->rdp);
1218
1219
  /** if negotiation has failed, we're not MCS connected. So don't
1220
   *  send anything else, or some mstsc will consider that as an error
1221
   */
1222
0
  SelectedProtocol = nego_get_selected_protocol(context->rdp->nego);
1223
1224
0
  if (SelectedProtocol & PROTOCOL_FAILED_NEGO)
1225
0
    return TRUE;
1226
1227
  /**
1228
   * [MS-RDPBCGR] 1.3.1.4.2 User-Initiated Disconnection Sequence on Server
1229
   * The server first sends the client a Deactivate All PDU followed by an
1230
   * optional MCS Disconnect Provider Ultimatum PDU.
1231
   */
1232
0
  if (!rdp_send_deactivate_all(context->rdp))
1233
0
    return FALSE;
1234
1235
0
  if (freerdp_settings_get_bool(context->settings, FreeRDP_SupportErrorInfoPdu))
1236
0
  {
1237
0
    if (!rdp_send_error_info(context->rdp))
1238
0
      return FALSE;
1239
0
  }
1240
1241
0
  return mcs_send_disconnect_provider_ultimatum(context->rdp->mcs,
1242
0
                                                Disconnect_Ultimatum_provider_initiated);
1243
0
}
1244
1245
static void freerdp_peer_disconnect(freerdp_peer* client)
1246
0
{
1247
0
  rdpTransport* transport = nullptr;
1248
0
  WINPR_ASSERT(client);
1249
1250
0
  transport = freerdp_get_transport(client->context);
1251
0
  transport_disconnect(transport);
1252
0
}
1253
1254
static BOOL freerdp_peer_send_channel_data(freerdp_peer* client, UINT16 channelId, const BYTE* data,
1255
                                           size_t size)
1256
0
{
1257
0
  WINPR_ASSERT(client);
1258
0
  WINPR_ASSERT(client->context);
1259
0
  WINPR_ASSERT(client->context->rdp);
1260
0
  return rdp_send_channel_data(client->context->rdp, channelId, data, size);
1261
0
}
1262
1263
static BOOL freerdp_peer_send_server_redirection_pdu(freerdp_peer* peer,
1264
                                                     const rdpRedirection* redirection)
1265
0
{
1266
0
  BOOL rc = FALSE;
1267
0
  WINPR_ASSERT(peer);
1268
0
  WINPR_ASSERT(peer->context);
1269
1270
0
  UINT16 sec_flags = 0;
1271
0
  wStream* s = rdp_send_stream_pdu_init(peer->context->rdp, &sec_flags);
1272
0
  if (!s)
1273
0
    return FALSE;
1274
0
  if (!rdp_write_enhanced_security_redirection_packet(s, redirection))
1275
0
    goto fail;
1276
0
  if (!rdp_send_pdu(peer->context->rdp, s, PDU_TYPE_SERVER_REDIRECTION, 0, sec_flags))
1277
0
    goto fail;
1278
0
  rc = rdp_reset_runtime_settings(peer->context->rdp);
1279
0
fail:
1280
0
  Stream_Release(s);
1281
0
  return rc;
1282
0
}
1283
1284
static BOOL freerdp_peer_send_channel_packet(freerdp_peer* client, UINT16 channelId,
1285
                                             size_t totalSize, UINT32 flags, const BYTE* data,
1286
                                             size_t chunkSize)
1287
0
{
1288
0
  WINPR_ASSERT(client);
1289
0
  WINPR_ASSERT(client->context);
1290
0
  WINPR_ASSERT(client->context->rdp);
1291
0
  return rdp_channel_send_packet(client->context->rdp, channelId, totalSize, flags, data,
1292
0
                                 chunkSize);
1293
0
}
1294
1295
static BOOL freerdp_peer_is_write_blocked(freerdp_peer* peer)
1296
0
{
1297
0
  rdpTransport* transport = nullptr;
1298
0
  WINPR_ASSERT(peer);
1299
0
  WINPR_ASSERT(peer->context);
1300
0
  WINPR_ASSERT(peer->context->rdp);
1301
0
  WINPR_ASSERT(peer->context->rdp->transport);
1302
0
  transport = peer->context->rdp->transport;
1303
0
  return transport_is_write_blocked(transport);
1304
0
}
1305
1306
static int freerdp_peer_drain_output_buffer(freerdp_peer* peer)
1307
0
{
1308
0
  rdpTransport* transport = nullptr;
1309
0
  WINPR_ASSERT(peer);
1310
0
  WINPR_ASSERT(peer->context);
1311
0
  WINPR_ASSERT(peer->context->rdp);
1312
0
  WINPR_ASSERT(peer->context->rdp->transport);
1313
0
  transport = peer->context->rdp->transport;
1314
0
  return transport_drain_output_buffer(transport);
1315
0
}
1316
1317
static BOOL freerdp_peer_has_more_to_read(freerdp_peer* peer)
1318
0
{
1319
0
  WINPR_ASSERT(peer);
1320
0
  WINPR_ASSERT(peer->context);
1321
0
  WINPR_ASSERT(peer->context->rdp);
1322
0
  return transport_have_more_bytes_to_read(peer->context->rdp->transport);
1323
0
}
1324
1325
static LicenseCallbackResult freerdp_peer_nolicense(freerdp_peer* peer,
1326
                                                    WINPR_ATTR_UNUSED wStream* s)
1327
0
{
1328
0
  rdpRdp* rdp = nullptr;
1329
1330
0
  WINPR_ASSERT(peer);
1331
0
  WINPR_ASSERT(peer->context);
1332
1333
0
  rdp = peer->context->rdp;
1334
1335
0
  if (!license_send_valid_client_error_packet(rdp))
1336
0
  {
1337
0
    WLog_ERR(TAG, "freerdp_peer_nolicense: license_send_valid_client_error_packet() failed");
1338
0
    return LICENSE_CB_ABORT;
1339
0
  }
1340
1341
0
  return LICENSE_CB_COMPLETED;
1342
0
}
1343
1344
BOOL freerdp_peer_context_new(freerdp_peer* client)
1345
7.91k
{
1346
7.91k
  return freerdp_peer_context_new_ex(client, nullptr);
1347
7.91k
}
1348
1349
void freerdp_peer_context_free(freerdp_peer* client)
1350
7.91k
{
1351
7.91k
  if (!client)
1352
0
    return;
1353
1354
7.91k
  IFCALL(client->ContextFree, client, client->context);
1355
1356
7.91k
  if (client->context)
1357
7.91k
  {
1358
7.91k
    rdpContext* ctx = client->context;
1359
1360
7.91k
    (void)CloseHandle(ctx->channelErrorEvent);
1361
7.91k
    ctx->channelErrorEvent = nullptr;
1362
7.91k
    free(ctx->errorDescription);
1363
7.91k
    ctx->errorDescription = nullptr;
1364
7.91k
    rdp_free(ctx->rdp);
1365
7.91k
    ctx->rdp = nullptr;
1366
7.91k
    metrics_free(ctx->metrics);
1367
7.91k
    ctx->metrics = nullptr;
1368
7.91k
    stream_dump_free(ctx->dump);
1369
7.91k
    ctx->dump = nullptr;
1370
7.91k
    free(ctx);
1371
7.91k
  }
1372
7.91k
  client->context = nullptr;
1373
7.91k
}
1374
1375
static const char* os_major_type_to_string(UINT16 osMajorType)
1376
0
{
1377
0
  switch (osMajorType)
1378
0
  {
1379
0
    case OSMAJORTYPE_UNSPECIFIED:
1380
0
      return "Unspecified platform";
1381
0
    case OSMAJORTYPE_WINDOWS:
1382
0
      return "Windows platform";
1383
0
    case OSMAJORTYPE_OS2:
1384
0
      return "OS/2 platform";
1385
0
    case OSMAJORTYPE_MACINTOSH:
1386
0
      return "Macintosh platform";
1387
0
    case OSMAJORTYPE_UNIX:
1388
0
      return "UNIX platform";
1389
0
    case OSMAJORTYPE_IOS:
1390
0
      return "iOS platform";
1391
0
    case OSMAJORTYPE_OSX:
1392
0
      return "OS X platform";
1393
0
    case OSMAJORTYPE_ANDROID:
1394
0
      return "Android platform";
1395
0
    case OSMAJORTYPE_CHROME_OS:
1396
0
      return "Chrome OS platform";
1397
0
    default:
1398
0
      break;
1399
0
  }
1400
1401
0
  return "Unknown platform";
1402
0
}
1403
1404
const char* freerdp_peer_os_major_type_string(freerdp_peer* client)
1405
0
{
1406
0
  WINPR_ASSERT(client);
1407
1408
0
  rdpContext* context = client->context;
1409
0
  WINPR_ASSERT(context);
1410
0
  WINPR_ASSERT(context->settings);
1411
1412
0
  const UINT32 osMajorType = freerdp_settings_get_uint32(context->settings, FreeRDP_OsMajorType);
1413
0
  WINPR_ASSERT(osMajorType <= UINT16_MAX);
1414
0
  return os_major_type_to_string((UINT16)osMajorType);
1415
0
}
1416
1417
static const char* os_minor_type_to_string(UINT16 osMinorType)
1418
0
{
1419
0
  switch (osMinorType)
1420
0
  {
1421
0
    case OSMINORTYPE_UNSPECIFIED:
1422
0
      return "Unspecified version";
1423
0
    case OSMINORTYPE_WINDOWS_31X:
1424
0
      return "Windows 3.1x";
1425
0
    case OSMINORTYPE_WINDOWS_95:
1426
0
      return "Windows 95";
1427
0
    case OSMINORTYPE_WINDOWS_NT:
1428
0
      return "Windows NT";
1429
0
    case OSMINORTYPE_OS2_V21:
1430
0
      return "OS/2 2.1";
1431
0
    case OSMINORTYPE_POWER_PC:
1432
0
      return "PowerPC";
1433
0
    case OSMINORTYPE_MACINTOSH:
1434
0
      return "Macintosh";
1435
0
    case OSMINORTYPE_NATIVE_XSERVER:
1436
0
      return "Native X Server";
1437
0
    case OSMINORTYPE_PSEUDO_XSERVER:
1438
0
      return "Pseudo X Server";
1439
0
    case OSMINORTYPE_WINDOWS_RT:
1440
0
      return "Windows RT";
1441
0
    default:
1442
0
      break;
1443
0
  }
1444
1445
0
  return "Unknown version";
1446
0
}
1447
1448
const char* freerdp_peer_os_minor_type_string(freerdp_peer* client)
1449
0
{
1450
0
  WINPR_ASSERT(client);
1451
1452
0
  rdpContext* context = client->context;
1453
0
  WINPR_ASSERT(context);
1454
0
  WINPR_ASSERT(context->settings);
1455
1456
0
  const UINT32 osMinorType = freerdp_settings_get_uint32(context->settings, FreeRDP_OsMinorType);
1457
0
  WINPR_ASSERT(osMinorType <= UINT16_MAX);
1458
0
  return os_minor_type_to_string((UINT16)osMinorType);
1459
0
}
1460
1461
freerdp_peer* freerdp_peer_new(int sockfd)
1462
0
{
1463
0
  freerdp_peer* client = (freerdp_peer*)calloc(1, sizeof(freerdp_peer));
1464
1465
0
  if (!client)
1466
0
    return nullptr;
1467
1468
0
  if (sockfd >= 0)
1469
0
  {
1470
0
    (void)freerdp_tcp_set_nodelay(WLog_Get(TAG), WLOG_DEBUG, sockfd);
1471
0
  }
1472
1473
0
  client->sockfd = sockfd;
1474
0
  client->ContextSize = sizeof(rdpContext);
1475
0
  client->Initialize = freerdp_peer_initialize;
1476
#if defined(WITH_FREERDP_DEPRECATED)
1477
  client->GetFileDescriptor = freerdp_peer_get_fds;
1478
#endif
1479
0
  client->GetEventHandle = freerdp_peer_get_event_handle;
1480
0
  client->GetEventHandles = freerdp_peer_get_event_handles;
1481
0
  client->CheckFileDescriptor = freerdp_peer_check_fds;
1482
0
  client->Close = freerdp_peer_close;
1483
0
  client->Disconnect = freerdp_peer_disconnect;
1484
0
  client->SendChannelData = freerdp_peer_send_channel_data;
1485
0
  client->SendChannelPacket = freerdp_peer_send_channel_packet;
1486
0
  client->SendServerRedirection = freerdp_peer_send_server_redirection_pdu;
1487
0
  client->IsWriteBlocked = freerdp_peer_is_write_blocked;
1488
0
  client->DrainOutputBuffer = freerdp_peer_drain_output_buffer;
1489
0
  client->HasMoreToRead = freerdp_peer_has_more_to_read;
1490
0
  client->VirtualChannelOpen = freerdp_peer_virtual_channel_open;
1491
0
  client->VirtualChannelClose = freerdp_peer_virtual_channel_close;
1492
0
  client->VirtualChannelWrite = freerdp_peer_virtual_channel_write;
1493
0
  client->VirtualChannelRead = nullptr; /* must be defined by server application */
1494
0
  client->VirtualChannelGetData = freerdp_peer_virtual_channel_get_data;
1495
0
  client->VirtualChannelSetData = freerdp_peer_virtual_channel_set_data;
1496
0
  client->SetState = freerdp_peer_set_state;
1497
1498
0
  return client;
1499
0
}
1500
1501
void freerdp_peer_free(freerdp_peer* client)
1502
0
{
1503
0
  if (!client)
1504
0
    return;
1505
1506
0
  sspi_FreeAuthIdentity(&client->identity);
1507
0
  if (client->sockfd >= 0)
1508
0
    closesocket((SOCKET)client->sockfd);
1509
0
  free(client);
1510
0
}
1511
1512
static BOOL freerdp_peer_transport_setup(freerdp_peer* client)
1513
7.91k
{
1514
7.91k
  rdpRdp* rdp = nullptr;
1515
1516
7.91k
  WINPR_ASSERT(client);
1517
7.91k
  WINPR_ASSERT(client->context);
1518
1519
7.91k
  rdp = client->context->rdp;
1520
7.91k
  WINPR_ASSERT(rdp);
1521
1522
7.91k
  if (!transport_attach(rdp->transport, client->sockfd))
1523
0
    return FALSE;
1524
7.91k
  client->sockfd = -1;
1525
1526
7.91k
  if (!transport_set_recv_callbacks(rdp->transport, peer_recv_callback, client))
1527
0
    return FALSE;
1528
1529
7.91k
  if (!transport_set_blocking_mode(rdp->transport, FALSE))
1530
0
    return FALSE;
1531
1532
7.91k
  return TRUE;
1533
7.91k
}
1534
1535
BOOL freerdp_peer_context_new_ex(freerdp_peer* client, const rdpSettings* settings)
1536
7.91k
{
1537
7.91k
  rdpRdp* rdp = nullptr;
1538
7.91k
  rdpContext* context = nullptr;
1539
7.91k
  BOOL ret = TRUE;
1540
1541
7.91k
  if (!client)
1542
0
    return FALSE;
1543
1544
7.91k
  WINPR_ASSERT(client->ContextSize >= sizeof(rdpContext));
1545
7.91k
  if (!(context = (rdpContext*)calloc(1, client->ContextSize)))
1546
0
    goto fail;
1547
1548
7.91k
  client->context = context;
1549
7.91k
  context->peer = client;
1550
7.91k
  context->ServerMode = TRUE;
1551
7.91k
  context->log = WLog_Get(TAG);
1552
7.91k
  if (!context->log)
1553
0
    goto fail;
1554
1555
7.91k
  if (settings)
1556
0
  {
1557
0
    context->settings = freerdp_settings_clone(settings);
1558
0
    if (!context->settings)
1559
0
      goto fail;
1560
0
  }
1561
1562
7.91k
  context->dump = stream_dump_new();
1563
7.91k
  if (!context->dump)
1564
0
    goto fail;
1565
7.91k
  if (!(context->metrics = metrics_new(context)))
1566
0
    goto fail;
1567
1568
7.91k
  if (!(rdp = rdp_new(context)))
1569
0
    goto fail;
1570
1571
7.91k
  rdp_log_build_warnings(rdp);
1572
1573
#if defined(WITH_FREERDP_DEPRECATED)
1574
  client->update = rdp->update;
1575
  client->settings = rdp->settings;
1576
  client->autodetect = rdp->autodetect;
1577
#endif
1578
7.91k
  context->rdp = rdp;
1579
7.91k
  context->input = rdp->input;
1580
7.91k
  context->update = rdp->update;
1581
7.91k
  context->settings = rdp->settings;
1582
7.91k
  context->autodetect = rdp->autodetect;
1583
7.91k
  update_register_server_callbacks(rdp->update);
1584
7.91k
  autodetect_register_server_callbacks(rdp->autodetect);
1585
1586
7.91k
  if (!(context->channelErrorEvent = CreateEvent(nullptr, TRUE, FALSE, nullptr)))
1587
0
  {
1588
0
    WLog_ERR(TAG, "CreateEvent failed!");
1589
0
    goto fail;
1590
0
  }
1591
1592
7.91k
  if (!(context->errorDescription = calloc(1, 500)))
1593
0
  {
1594
0
    WLog_ERR(TAG, "calloc failed!");
1595
0
    goto fail;
1596
0
  }
1597
1598
7.91k
  if (!freerdp_peer_transport_setup(client))
1599
0
    goto fail;
1600
1601
7.91k
  client->IsWriteBlocked = freerdp_peer_is_write_blocked;
1602
7.91k
  client->DrainOutputBuffer = freerdp_peer_drain_output_buffer;
1603
7.91k
  client->HasMoreToRead = freerdp_peer_has_more_to_read;
1604
7.91k
  client->LicenseCallback = freerdp_peer_nolicense;
1605
7.91k
  IFCALLRET(client->ContextNew, ret, client, client->context);
1606
1607
7.91k
  if (!ret)
1608
0
    goto fail;
1609
7.91k
  return TRUE;
1610
1611
0
fail:
1612
0
  WLog_ERR(TAG, "ContextNew callback failed");
1613
0
  freerdp_peer_context_free(client);
1614
0
  return FALSE;
1615
7.91k
}