/src/FreeRDP/client/common/cmdline.c

Source
/**
 * FreeRDP: A Remote Desktop Protocol Implementation
 * FreeRDP Client Command-Line Interface
 *
 * Copyright 2012 Marc-Andre Moreau <marcandre.moreau@gmail.com>
 * Copyright 2014 Norbert Federa <norbert.federa@thincast.com>
 * Copyright 2016 Armin Novak <armin.novak@gmail.com>
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#include <freerdp/config.h>
#include <freerdp/utils/helpers.h>

#include <ctype.h>
#include <errno.h>

#include <winpr/assert.h>
#include <winpr/string.h>
#include <winpr/crt.h>
#include <winpr/wlog.h>
#include <winpr/path.h>
#include <winpr/ncrypt.h>
#include <winpr/environment.h>
#include <winpr/timezone.h>

#include <freerdp/freerdp.h>
#include <freerdp/addin.h>
#include <freerdp/settings.h>
#include <freerdp/client.h>
#include <freerdp/client/channels.h>
#include <freerdp/channels/drdynvc.h>
#include <freerdp/channels/cliprdr.h>
#include <freerdp/channels/encomsp.h>
#include <freerdp/channels/rdpear.h>
#include <freerdp/channels/rdpewa.h>
#include <freerdp/channels/rdp2tcp.h>
#include <freerdp/channels/remdesk.h>
#include <freerdp/channels/rdpsnd.h>
#include <freerdp/channels/disp.h>
#include <freerdp/crypto/crypto.h>
#include <freerdp/locale/keyboard.h>
#include <freerdp/utils/passphrase.h>
#include <freerdp/utils/proxy_utils.h>
#include <freerdp/utils/string.h>
#include <freerdp/channels/urbdrc.h>
#include <freerdp/channels/rdpdr.h>
#include <freerdp/locale/locale.h>

#include <freerdp/utils/warnings.h>

#if defined(CHANNEL_AINPUT_CLIENT)
#include <freerdp/channels/ainput.h>
#endif

#include <freerdp/channels/audin.h>
#include <freerdp/channels/echo.h>

#include <freerdp/client/cmdline.h>
#include <freerdp/version.h>
#include <freerdp/client/utils/smartcard_cli.h>

#include <openssl/tls1.h>
#include "cmdline.h"

#include <freerdp/log.h>
#define TAG CLIENT_TAG("common.cmdline")

static const char str_force[] = "force";

static const char* credential_args[] = { "p",         "smartcard-logon",
#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
                                       "gp",        "gat",
#endif
                                       "pth",       "reconnect-cookie",
                                       "assistance" };

static const char* option_starts_with(const char* what, const char* val);
static BOOL option_ends_with(const char* str, const char* ext);
static BOOL option_equals(const char* what, const char* val);

static BOOL freerdp_client_print_codepages(const char* arg)
{
  size_t count = 0;
  DWORD column = 2;
  const char* filter = nullptr;
  RDP_CODEPAGE* pages = nullptr;

  if (arg)
  {
    filter = strchr(arg, ',');
    if (!filter)
      filter = arg;
    else
      filter++;
  }
  pages = freerdp_keyboard_get_matching_codepages(column, filter, &count);
  if (!pages)
    return TRUE;

  printf("%-10s %-8s %-60s %-36s %-48s\n", "<id>", "<locale>", "<win langid>", "<language>",
         "<country>");
  for (size_t x = 0; x < count; x++)
  {
    const RDP_CODEPAGE* page = &pages[x];
    char buffer[2048] = WINPR_C_ARRAY_INIT;

    if (strnlen(page->subLanguageSymbol, ARRAYSIZE(page->subLanguageSymbol)) > 0)
      (void)_snprintf(buffer, sizeof(buffer), "[%s|%s]", page->primaryLanguageSymbol,
                      page->subLanguageSymbol);
    else
      (void)_snprintf(buffer, sizeof(buffer), "[%s]", page->primaryLanguageSymbol);
    printf("id=0x%04" PRIx16 ": [%-6s] %-60s %-36s %-48s\n", page->id, page->locale, buffer,
           page->primaryLanguage, page->subLanguage);
  }
  freerdp_codepages_free(pages);
  return TRUE;
}

static BOOL freerdp_path_valid(const char* path, BOOL* special)
{
  const char DynamicDrives[] = "DynamicDrives";
  BOOL isPath = FALSE;
  BOOL isSpecial = 0;
  if (!path)
    return FALSE;

  isSpecial = (option_equals("*", path) || option_equals(DynamicDrives, path) ||
               option_equals("%", path));
  if (!isSpecial)
    isPath = winpr_PathFileExists(path);

  if (special)
    *special = isSpecial;

  return isSpecial || isPath;
}

static BOOL freerdp_sanitize_drive_name(char* name, const char* invalid, const char* replacement)
{
  if (!name || !invalid || !replacement)
    return FALSE;
  if (strlen(invalid) != strlen(replacement))
    return FALSE;

  while (*invalid != '\0')
  {
    const char what = *invalid++;
    const char with = *replacement++;

    char* cur = name;
    while ((cur = strchr(cur, what)) != nullptr)
      *cur = with;
  }
  return TRUE;
}

static char* name_from_path(const char* path)
{
  const char* name = "nullptr";
  if (path)
  {
    if (option_equals("%", path))
      name = "home";
    else if (option_equals("*", path))
      name = "hotplug-all";
    else if (option_equals("DynamicDrives", path))
      name = "hotplug";
    else
      name = path;
  }
  return _strdup(name);
}

static BOOL freerdp_client_add_drive(rdpSettings* settings, const char* path, const char* name)
{
  char* dname = nullptr;
  RDPDR_DEVICE* device = nullptr;

  if (name)
  {
    BOOL skip = FALSE;
    if (path)
    {
      switch (path[0])
      {
        case '*':
        case '%':
          skip = TRUE;
          break;
        default:
          break;
      }
    }
    /* Path was entered as secondary argument, swap */
    if (!skip && winpr_PathFileExists(name))
    {
      if (!winpr_PathFileExists(path) || (!PathIsRelativeA(name) && PathIsRelativeA(path)))
      {
        const char* tmp = path;
        path = name;
        name = tmp;
      }
    }
  }

  if (name)
    dname = _strdup(name);
  else /* We need a name to send to the server. */
    dname = name_from_path(path);

  if (freerdp_sanitize_drive_name(dname, "\\/", "__"))
  {
    const char* args[] = { dname, path };
    device = freerdp_device_new(RDPDR_DTYP_FILESYSTEM, ARRAYSIZE(args), args);
  }
  free(dname);
  if (!device)
    goto fail;

  if (!path)
    goto fail;

  {
    BOOL isSpecial = FALSE;
    BOOL isPath = freerdp_path_valid(path, &isSpecial);

    if (!isPath && !isSpecial)
    {
      WLog_WARN(TAG, "Invalid drive to redirect: '%s' does not exist, skipping.", path);
      freerdp_device_free(device);
    }
    else if (!freerdp_device_collection_add(settings, device))
      goto fail;
  }

  return TRUE;

fail:
  freerdp_device_free(device);
  return FALSE;
}

static BOOL value_to_int(const char* value, LONGLONG* result, LONGLONG min, LONGLONG max)
{
  long long rc = 0;

  if (!value || !result)
    return FALSE;

  errno = 0;
  rc = _strtoi64(value, nullptr, 0);

  if (errno != 0)
    return FALSE;

  if ((rc < min) || (rc > max))
    return FALSE;

  *result = rc;
  return TRUE;
}

static BOOL value_to_uint(const char* value, ULONGLONG* result, ULONGLONG min, ULONGLONG max)
{
  unsigned long long rc = 0;

  if (!value || !result)
    return FALSE;

  errno = 0;
  rc = _strtoui64(value, nullptr, 0);

  if (errno != 0)
    return FALSE;

  if ((rc < min) || (rc > max))
    return FALSE;

  *result = rc;
  return TRUE;
}

BOOL freerdp_client_print_version(void)
{
  printf("This is FreeRDP version %s (%s)\n", FREERDP_VERSION_FULL, FREERDP_GIT_REVISION);
  return TRUE;
}

BOOL freerdp_client_print_version_ex(int argc, char** argv)
{
  WINPR_ASSERT(argc >= 0);
  WINPR_ASSERT(argv || (argc == 0));
  const char* name = (argc > 0) ? argv[0] : "argc < 1";
  printf("This is FreeRDP version [%s] %s (%s)\n", name, FREERDP_VERSION_FULL,
         FREERDP_GIT_REVISION);
  return TRUE;
}

BOOL freerdp_client_print_buildconfig(void)
{
  printf("%s", freerdp_get_build_config());
  return TRUE;
}

BOOL freerdp_client_print_buildconfig_ex(int argc, char** argv)
{
  WINPR_ASSERT(argc >= 0);
  WINPR_ASSERT(argv || (argc == 0));
  const char* name = (argc > 0) ? argv[0] : "argc < 1";
  printf("[%s] %s", name, freerdp_get_build_config());
  return TRUE;
}

static void freerdp_client_print_scancodes(void)
{
  printf("RDP scancodes and their name for use with /kbd:remap\n");

  for (UINT32 x = 0; x < UINT16_MAX; x++)
  {
    const char* name = freerdp_keyboard_scancode_name(x);
    if (name)
      printf("0x%04" PRIx32 "  --> %s\n", x, name);
  }
}

static BOOL is_delimiter(char c, const char* delimiters)
{
  char d = 0;
  while ((d = *delimiters++) != '\0')
  {
    if (c == d)
      return TRUE;
  }
  return FALSE;
}

static const char* get_last(const char* start, size_t len, const char* delimiters)
{
  const char* last = nullptr;
  for (size_t x = 0; x < len; x++)
  {
    char c = start[x];
    if (is_delimiter(c, delimiters))
      last = &start[x];
  }
  return last;
}

static SSIZE_T next_delimiter(const char* text, size_t len, size_t max, const char* delimiters)
{
  if (len < max)
    return -1;

  const char* last = get_last(text, max, delimiters);
  if (!last)
    return -1;

  return (SSIZE_T)(last - text);
}

static SSIZE_T forced_newline_at(const char* text, size_t len, size_t limit,
                                 const char* force_newline)
{
  char d = 0;
  while ((d = *force_newline++) != '\0')
  {
    const char* tok = strchr(text, d);
    if (tok)
    {
      const size_t offset = WINPR_ASSERTING_INT_CAST(size_t, tok - text);
      if ((offset > len) || (offset > limit))
        continue;
      return (SSIZE_T)(offset);
    }
  }
  return -1;
}

static BOOL print_align(size_t start_offset, size_t* current)
{
  WINPR_ASSERT(current);
  if (*current < start_offset)
  {
    const int rc = printf("%*c", (int)(start_offset - *current), ' ');
    if (rc < 0)
      return FALSE;
    *current += (size_t)rc;
  }
  return TRUE;
}

static char* print_token(char* text, size_t start_offset, size_t* current, size_t limit,
                         const char* delimiters, const char* force_newline)
{
  int rc = 0;
  const size_t tlen = strnlen(text, limit);
  size_t len = tlen;
  const SSIZE_T force_at = forced_newline_at(text, len, limit - *current, force_newline);
  BOOL isForce = (force_at >= 0);

  if (isForce)
    len = MIN(len, (size_t)force_at);

  if (!print_align(start_offset, current))
    return nullptr;

  const SSIZE_T delim = next_delimiter(text, len, limit - *current, delimiters);
  const BOOL isDelim = delim > 0;
  if (isDelim)
  {
    len = MIN(len, (size_t)delim + 1);
  }

  rc = printf("%.*s", (int)len, text);
  if (rc < 0)
    return nullptr;

  if (isForce || isDelim)
  {
    printf("\n");
    *current = 0;

    const size_t offset = len + ((isForce && (force_at == 0)) ? 1 : 0);
    return &text[offset];
  }

  *current += (size_t)rc;

  if (tlen == (size_t)rc)
    return nullptr;
  return &text[(size_t)rc];
}

static size_t print_optionals(const char* text, size_t start_offset, size_t current)
{
  const size_t limit = 80;
  char* str = _strdup(text);
  char* cur = str;

  do
  {
    cur = print_token(cur, start_offset + 1, &current, limit, "[], ", "\r\n");
  } while (cur != nullptr);

  free(str);
  return current;
}

static size_t print_description(const char* text, size_t start_offset, size_t current)
{
  const size_t limit = 80;
  char* str = _strdup(text);
  char* cur = str;

  while (cur != nullptr)
    cur = print_token(cur, start_offset, &current, limit, " ", "\r\n");

  free(str);
  const int rc = printf("\n");
  if (rc >= 0)
  {
    const size_t src = WINPR_ASSERTING_INT_CAST(size_t, rc);
    WINPR_ASSERT(SIZE_MAX - src > current);
    current += src;
  }
  return current;
}

static int cmp_cmdline_args(const void* pva, const void* pvb)
{
  const COMMAND_LINE_ARGUMENT_A* a = (const COMMAND_LINE_ARGUMENT_A*)pva;
  const COMMAND_LINE_ARGUMENT_A* b = (const COMMAND_LINE_ARGUMENT_A*)pvb;

  if (!a->Name && !b->Name)
    return 0;
  if (!a->Name)
    return 1;
  if (!b->Name)
    return -1;
  return strcmp(a->Name, b->Name);
}

static void freerdp_client_print_command_line_args(COMMAND_LINE_ARGUMENT_A* parg, size_t count)
{
  if (!parg)
    return;

  qsort(parg, count, sizeof(COMMAND_LINE_ARGUMENT_A), cmp_cmdline_args);

  const COMMAND_LINE_ARGUMENT_A* arg = parg;
  do
  {
    int rc = 0;
    size_t pos = 0;
    const size_t description_offset = 30 + 8;

    if (arg->Flags & (COMMAND_LINE_VALUE_BOOL | COMMAND_LINE_VALUE_FLAG))
    {
      if ((arg->Flags & (uint32_t)~COMMAND_LINE_VALUE_BOOL) == 0)
        rc = printf("    %s%s", arg->Default ? "-" : "+", arg->Name);
      else if ((arg->Flags & COMMAND_LINE_VALUE_OPTIONAL) != 0)
        rc = printf("    [%s|/]%s", arg->Default ? "-" : "+", arg->Name);
      else
      {
        rc = printf("    %s%s", arg->Default ? "-" : "+", arg->Name);
      }
    }
    else
      rc = printf("    /%s", arg->Name);

    if (rc < 0)
      return;
    pos += (size_t)rc;

    if ((arg->Flags & COMMAND_LINE_VALUE_REQUIRED) ||
        (arg->Flags & COMMAND_LINE_VALUE_OPTIONAL))
    {
      if (arg->Format)
      {
        if (arg->Flags & COMMAND_LINE_VALUE_OPTIONAL)
        {
          rc = printf("[:");
          if (rc < 0)
            return;
          pos += (size_t)rc;
          pos = print_optionals(arg->Format, pos, pos);
          rc = printf("]");
          if (rc < 0)
            return;
          pos += (size_t)rc;
        }
        else
        {
          rc = printf(":");
          if (rc < 0)
            return;
          pos += (size_t)rc;
          pos = print_optionals(arg->Format, pos, pos);
        }

        if (pos > description_offset)
        {
          printf("\n");
          pos = 0;
        }
      }
    }

    rc = printf("%*c", (int)(description_offset - pos), ' ');
    if (rc < 0)
      return;
    pos += (size_t)rc;

    if (arg->Flags & COMMAND_LINE_VALUE_BOOL)
    {
      rc = printf("%s ", arg->Default ? "Disable" : "Enable");
      if (rc < 0)
        return;
      pos += (size_t)rc;
    }

    print_description(arg->Text, description_offset, pos);
  } while ((arg = CommandLineFindNextArgumentA(arg)) != nullptr);
}

BOOL freerdp_client_print_command_line_help(int argc, char** argv)
{
  return freerdp_client_print_command_line_help_ex(argc, argv, nullptr);
}

static COMMAND_LINE_ARGUMENT_A* create_merged_args(const COMMAND_LINE_ARGUMENT_A* custom,
                                                   SSIZE_T count, size_t* pcount)
{
  WINPR_ASSERT(pcount);
  if (count < 0)
  {
    const COMMAND_LINE_ARGUMENT_A* cur = custom;
    count = 0;
    while (cur && cur->Name)
    {
      count++;
      cur++;
    }
  }

  COMMAND_LINE_ARGUMENT_A* largs =
      calloc((size_t)count + ARRAYSIZE(global_cmd_args), sizeof(COMMAND_LINE_ARGUMENT_A));
  *pcount = 0;
  if (!largs)
    return nullptr;

  size_t lcount = 0;
  const COMMAND_LINE_ARGUMENT_A* cur = custom;
  while (cur && cur->Name)
  {
    largs[lcount++] = *cur++;
  }

  cur = global_cmd_args;
  while (cur && cur->Name)
  {
    largs[lcount++] = *cur++;
  }
  *pcount = lcount;
  return largs;
}

static void freerdp_client_print_command_line_usage(int argc, char** argv)
{
  WINPR_ASSERT(argv || (argc < 1));

  const char* name = freerdp_getApplicationDetailsString();
  if (argc > 0)
    name = argv[0];
  printf("\n");
  printf("%s - A Free Remote Desktop Protocol Implementation\n", name);
  printf("To show full command line help type\n");
  printf("%s /?\n", name);
  printf("\n");
}

BOOL freerdp_client_print_command_line_help_ex(int argc, char** argv,
                                               const COMMAND_LINE_ARGUMENT_A* custom)
{
  const char* name = freerdp_getApplicationDetailsString();

  /* allocate a merged copy of implementation defined and default arguments */
  size_t lcount = 0;
  COMMAND_LINE_ARGUMENT_A* largs = create_merged_args(custom, -1, &lcount);
  if (!largs)
    return FALSE;

  if (argc > 0)
    name = argv[0];

  printf("\n");
  printf("%s - A Free Remote Desktop Protocol Implementation\n", name);
  printf("See www.freerdp.com for more information\n");
  printf("\n");
  printf("Usage: %s [file] [options] [/v:<server>[:port]]\n", argv[0]);
  printf("\n");
  printf("Syntax:\n");
  printf("    /flag (enables flag)\n");
  printf("    /option:<value> (specifies option with value)\n");
  printf("    +toggle -toggle (enables or disables toggle, where '/' is a synonym of '+')\n");
  printf("\n");

  freerdp_client_print_command_line_args(largs, lcount);
  free(largs);

  printf("\n");
  printf("Examples:\n");
  printf("    %s connection.rdp /p:Pwd123! /f\n", name);
  printf("    %s /u:CONTOSO\\JohnDoe /p:Pwd123! /v:rdp.contoso.com\n", name);
  printf("    %s /u:JohnDoe /p:Pwd123! /w:1366 /h:768 /v:192.168.1.100:4489\n", name);
  printf("    %s /u:JohnDoe /p:Pwd123! /vmconnect:C824F53E-95D2-46C6-9A18-23A5BB403532 "
         "/v:192.168.1.100\n",
         name);
  printf("    %s /u:\\AzureAD\\user@corp.example /p:pwd /v:host\n", name);
  printf("Use a generic pipe as transport:");
  printf("    %s /v:/path/to/pipe\n", name);
  printf("Use a external socket:");
  printf("    %s /v:|:1234\n", name);
  printf("\n");
  printf("Connect to a system with TLS security and open the greeter:");
  printf("NOTE: Needs a server configured to not require NLA or it will fail!");
  printf("\n");
  printf("    %s /sec:tls /p /v:rdp.contoso.com\n", name);
  printf("\n");
  printf("Disable clipboard redirection: -clipboard\n");
  printf("\n");
  printf("Drive Redirection: /drive:home,/home/user\n");
  printf("Smartcard Redirection: /smartcard:<device>\n");
  printf("Smartcard logon with Kerberos authentication: /smartcard-logon /sec:nla\n");

#if defined(CHANNEL_SERIAL_CLIENT)
  printf("Serial Port Redirection: /serial:<name>,<device>,[SerCx2|SerCx|Serial],[permissive]\n");
  printf("Serial Port Redirection: /serial:COM1,/dev/ttyS0\n");
#endif
#if defined(CHANNEL_PARALLEL_CLIENT)
  printf("Parallel Port Redirection: /parallel:<name>,<device>\n");
#endif
  printf("Printer Redirection: /printer:<device>,<driver>,[default]\n");
  printf("TCP redirection: /rdp2tcp:/usr/bin/rdp2tcp\n");
  printf("\n");
  printf("Audio Output Redirection: /sound:sys:oss,dev:1,format:1\n");
  printf("Audio Output Redirection: /sound:sys:alsa\n");
  printf("Audio Input Redirection: /microphone:sys:oss,dev:1,format:1\n");
  printf("Audio Input Redirection: /microphone:sys:alsa\n");
  printf("\n");
  printf("Multimedia Redirection: /video\n");
#ifdef CHANNEL_URBDRC_CLIENT
  printf("USB Device Redirection: /usb:id:054c:0268#4669:6e6b,addr:04:0c\n");
#endif
  printf("\n");
  printf("For Gateways, the https_proxy environment variable is respected:\n");
#ifdef _WIN32
  printf("    set HTTPS_PROXY=http://proxy.contoso.com:3128/\n");
#else
  printf("    export https_proxy=http://proxy.contoso.com:3128/\n");
#endif
  printf("    %s /gateway:g:rdp.contoso.com ...\n", name);
  printf("\n");
  printf("More documentation is coming, in the meantime consult source files\n");
  printf("\n");
  return TRUE;
}

static BOOL option_is_rdp_file(const char* option)
{
  WINPR_ASSERT(option);

  if (option_ends_with(option, ".rdp"))
    return TRUE;
  if (option_ends_with(option, ".rdpw"))
    return TRUE;
  return FALSE;
}

static BOOL option_is_incident_file(const char* option)
{
  WINPR_ASSERT(option);

  return (option_ends_with(option, ".msrcIncident"));
}

static int freerdp_client_command_line_pre_filter(void* context, int index, int argc, LPSTR* argv)
{
  if (index == 1)
  {
    size_t length = 0;
    rdpSettings* settings = nullptr;

    if (argc <= index)
      return -1;

    length = strlen(argv[index]);

    if (length > 4)
    {
      if (option_is_rdp_file(argv[index]))
      {
        settings = (rdpSettings*)context;

        if (!freerdp_settings_set_string(settings, FreeRDP_ConnectionFile, argv[index]))
          return COMMAND_LINE_ERROR_MEMORY;

        return 1;
      }
    }

    if (length > 13)
    {
      if (option_is_incident_file(argv[index]))
      {
        settings = (rdpSettings*)context;

        if (!freerdp_settings_set_string(settings, FreeRDP_AssistanceFile, argv[index]))
          return COMMAND_LINE_ERROR_MEMORY;

        return 1;
      }
    }
  }

  return 0;
}

BOOL freerdp_client_add_device_channel(rdpSettings* settings, size_t count,
                                       const char* const* params)
{
  WINPR_ASSERT(settings);
  if (count == 0)
    return FALSE;
  WINPR_ASSERT(params);
  WINPR_ASSERT(count > 0);

  if (option_equals(params[0], "drive"))
  {
    BOOL rc = 0;
    if (count < 2)
      return FALSE;

    if (!freerdp_settings_set_bool(settings, FreeRDP_DeviceRedirection, TRUE))
      return FALSE;
    if (count < 3)
      rc = freerdp_client_add_drive(settings, params[1], nullptr);
    else
      rc = freerdp_client_add_drive(settings, params[2], params[1]);

    return rc;
  }
  else if (option_equals(params[0], "printer"))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_RedirectPrinters, TRUE))
      return FALSE;
    if (!freerdp_settings_set_bool(settings, FreeRDP_DeviceRedirection, TRUE))
      return FALSE;

    RDPDR_DEVICE* printer = freerdp_device_new(RDPDR_DTYP_PRINT, count - 1, &params[1]);
    if (!printer)
      return FALSE;

    if (!freerdp_device_collection_add(settings, printer))
    {
      freerdp_device_free(printer);
      return FALSE;
    }

    return TRUE;
  }
  else if (option_equals(params[0], "smartcard"))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_RedirectSmartCards, TRUE))
      return FALSE;
    if (!freerdp_settings_set_bool(settings, FreeRDP_DeviceRedirection, TRUE))
      return FALSE;

    RDPDR_DEVICE* smartcard = freerdp_device_new(RDPDR_DTYP_SMARTCARD, count - 1, &params[1]);
    if (!smartcard)
      return FALSE;

    if (!freerdp_device_collection_add(settings, smartcard))
    {
      freerdp_device_free(smartcard);
      return FALSE;
    }

    return TRUE;
  }
#if defined(CHANNEL_SERIAL_CLIENT)
  else if (option_equals(params[0], "serial"))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_RedirectSerialPorts, TRUE))
      return FALSE;
    if (!freerdp_settings_set_bool(settings, FreeRDP_DeviceRedirection, TRUE))
      return FALSE;

    RDPDR_DEVICE* serial = freerdp_device_new(RDPDR_DTYP_SERIAL, count - 1, &params[1]);
    if (!serial)
      return FALSE;

    if (!freerdp_device_collection_add(settings, serial))
    {
      freerdp_device_free(serial);
      return FALSE;
    }

    return TRUE;
  }
#endif
  else if (option_equals(params[0], "parallel"))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_RedirectParallelPorts, TRUE))
      return FALSE;
    if (!freerdp_settings_set_bool(settings, FreeRDP_DeviceRedirection, TRUE))
      return FALSE;

    RDPDR_DEVICE* parallel = freerdp_device_new(RDPDR_DTYP_PARALLEL, count - 1, &params[1]);

    if (!parallel)
      return FALSE;

    if (!freerdp_device_collection_add(settings, parallel))
    {
      freerdp_device_free(parallel);
      return FALSE;
    }

    return TRUE;
  }

  return FALSE;
}

BOOL freerdp_client_del_static_channel(rdpSettings* settings, const char* name)
{
  return freerdp_static_channel_collection_del(settings, name);
}

BOOL freerdp_client_add_static_channel(rdpSettings* settings, size_t count,
                                       const char* const* params)
{
  if (count == 0)
    return FALSE;

  if (!settings || !params || !params[0] || (count > INT_MAX))
    return FALSE;

  if (freerdp_static_channel_collection_find(settings, params[0]))
    return TRUE;

  ADDIN_ARGV* _args = freerdp_addin_argv_new(count, params);
  if (!_args)
    return FALSE;

  if (!freerdp_static_channel_collection_add(settings, _args))
    goto fail;

  return TRUE;
fail:
  freerdp_addin_argv_free(_args);
  return FALSE;
}

BOOL freerdp_client_del_dynamic_channel(rdpSettings* settings, const char* name)
{
  return freerdp_dynamic_channel_collection_del(settings, name);
}

BOOL freerdp_client_add_dynamic_channel(rdpSettings* settings, size_t count,
                                        const char* const* params)
{
  if (count == 0)
    return FALSE;
  if (!settings || !params || !params[0] || (count > INT_MAX))
    return FALSE;

  if (freerdp_dynamic_channel_collection_find(settings, params[0]))
    return TRUE;

  ADDIN_ARGV* _args = freerdp_addin_argv_new(count, params);
  if (!_args)
    return FALSE;

  if (!freerdp_dynamic_channel_collection_add(settings, _args))
    goto fail;

  return TRUE;

fail:
  freerdp_addin_argv_free(_args);
  return FALSE;
}

static BOOL read_pem_file(rdpSettings* settings, FreeRDP_Settings_Keys_String id,
                          const char* b64OrFile)
{
  const size_t blen = strlen(b64OrFile);
  char* pem = nullptr;
  size_t plen = 0;
  crypto_base64url_decode(b64OrFile, blen, (BYTE**)&pem, &plen);
  if (!pem)
  {
    pem = crypto_read_pem(b64OrFile, &plen);
    if (!pem || (plen == 0))
    {
      free(pem);
      return FALSE;
    }
  }

  BOOL rc = freerdp_settings_set_string_len(settings, id, pem, plen);
  free(pem);
  return rc;
}

/** @brief suboption type */
typedef enum
{
  CMDLINE_SUBOPTION_STRING,
  CMDLINE_SUBOPTION_FILE,
} CmdLineSubOptionType;

typedef BOOL (*CmdLineSubOptionCb)(const char* value, rdpSettings* settings);
typedef struct
{
  const char* optname;
  FreeRDP_Settings_Keys_String id;
  CmdLineSubOptionType opttype;
  WINPR_ATTR_NODISCARD CmdLineSubOptionCb cb;
} CmdLineSubOptions;

static BOOL parseSubOptions(rdpSettings* settings, const CmdLineSubOptions* opts, size_t count,
                            const char* arg)
{
  BOOL found = FALSE;

  for (size_t xx = 0; xx < count; xx++)
  {
    const CmdLineSubOptions* opt = &opts[xx];

    if (option_starts_with(opt->optname, arg))
    {
      const size_t optlen = strlen(opt->optname);
      const char* val = &arg[optlen];
      BOOL status = 0;

      switch (opt->opttype)
      {
        case CMDLINE_SUBOPTION_STRING:
          status = freerdp_settings_set_string(settings, opt->id, val);
          break;
        case CMDLINE_SUBOPTION_FILE:
          status = read_pem_file(settings, opt->id, val);
          break;
        default:
          WLog_ERR(TAG, "invalid subOption type");
          return FALSE;
      }

      if (!status)
        return FALSE;

      if (opt->cb && !opt->cb(val, settings))
        return FALSE;

      found = TRUE;
      break;
    }
  }

  if (!found)
    WLog_ERR(TAG, "option %s not handled", arg);

  return found;
}

#define fail_at(arg, rc) fail_at_((arg), (rc), __FILE__, __func__, __LINE__)
static int fail_at_(const COMMAND_LINE_ARGUMENT_A* arg, int rc, const char* file, const char* fkt,
                    size_t line)
{
  if (rc == 0)
    return rc;

  const DWORD level = WLOG_ERROR;
  wLog* log = WLog_Get(TAG);
  if (WLog_IsLevelActive(log, level))
  {
    const char* val = arg->Value;
    if ((arg->Flags & COMMAND_LINE_VALUE_FLAG) != 0)
      val = arg->Value == nullptr ? "Disable" : "Enable";
    if ((arg->Flags & COMMAND_LINE_VALUE_BOOL) != 0)
      val = arg->Value == nullptr ? "Disable" : "Enable";

    WLog_PrintTextMessage(log, level, line, file, fkt,
                          "Command line parsing failed at '%s' value '%s' [%d]", arg->Name, val,
                          rc);
  }
  return rc;
}

static int freerdp_client_command_line_post_filter_int(void* context, COMMAND_LINE_ARGUMENT_A* arg)
{
  rdpSettings* settings = (rdpSettings*)context;
  int status = CHANNEL_RC_OK;
  BOOL enable = (arg->Value != nullptr);

  CommandLineSwitchStart(arg) CommandLineSwitchCase(arg, "a")
  {
    size_t count = 0;
    char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);

    if (!freerdp_client_add_device_channel(settings, count, (const char* const*)ptr))
      status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    if (!freerdp_settings_set_bool(settings, FreeRDP_DeviceRedirection, TRUE))
      status = COMMAND_LINE_ERROR;

    CommandLineParserFree(ptr);
    if (status)
      return fail_at(arg, status);
  }
  CommandLineSwitchCase(arg, "kerberos")
  {
    size_t count = 0;

    char** ptr = CommandLineParseCommaSeparatedValuesEx("kerberos", arg->Value, &count);
    if (ptr)
    {
      const CmdLineSubOptions opts[] = {
        { "kdc-url:", FreeRDP_KerberosKdcUrl, CMDLINE_SUBOPTION_STRING, nullptr },
        { "start-time:", FreeRDP_KerberosStartTime, CMDLINE_SUBOPTION_STRING, nullptr },
        { "lifetime:", FreeRDP_KerberosLifeTime, CMDLINE_SUBOPTION_STRING, nullptr },
        { "renewable-lifetime:", FreeRDP_KerberosRenewableLifeTime,
          CMDLINE_SUBOPTION_STRING, nullptr },
        { "cache:", FreeRDP_KerberosCache, CMDLINE_SUBOPTION_STRING, nullptr },
        { "armor:", FreeRDP_KerberosArmor, CMDLINE_SUBOPTION_STRING, nullptr },
        { "pkinit-anchors:", FreeRDP_PkinitAnchors, CMDLINE_SUBOPTION_STRING, nullptr },
        { "pkcs11-module:", FreeRDP_Pkcs11Module, CMDLINE_SUBOPTION_STRING, nullptr }
      };

      for (size_t x = 1; x < count; x++)
      {
        const char* cur = ptr[x];
        if (!parseSubOptions(settings, opts, ARRAYSIZE(opts), cur))
        {
          CommandLineParserFree(ptr);
          return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
        }
      }
    }
    CommandLineParserFree(ptr);
  }

  CommandLineSwitchCase(arg, "vc")
  {
    size_t count = 0;
    char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);
    if (!freerdp_client_add_static_channel(settings, count, (const char* const*)ptr))
      status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    CommandLineParserFree(ptr);
    if (status)
      return fail_at(arg, status);
  }
  CommandLineSwitchCase(arg, "dvc")
  {
    size_t count = 0;
    char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);
    if (!freerdp_client_add_dynamic_channel(settings, count, (const char* const*)ptr))
      status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    CommandLineParserFree(ptr);
    if (status)
      return fail_at(arg, status);
  }
  CommandLineSwitchCase(arg, "drive")
  {
    size_t count = 0;
    char** ptr = CommandLineParseCommaSeparatedValuesEx(arg->Name, arg->Value, &count);
    if (!freerdp_client_add_device_channel(settings, count, (const char* const*)ptr))
      status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    CommandLineParserFree(ptr);
    if (status)
      return fail_at(arg, status);
  }
#if defined(CHANNEL_SERIAL_CLIENT)
  CommandLineSwitchCase(arg, "serial")
  {
    size_t count = 0;
    char** ptr = CommandLineParseCommaSeparatedValuesEx(arg->Name, arg->Value, &count);
    if (!freerdp_client_add_device_channel(settings, count, (const char* const*)ptr))
      status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    CommandLineParserFree(ptr);
    if (status)
      return fail_at(arg, status);
  }
#endif
#if defined(CHANNEL_PARALLEL_CLIENT)
  CommandLineSwitchCase(arg, "parallel")
  {
    size_t count = 0;
    char** ptr = CommandLineParseCommaSeparatedValuesEx(arg->Name, arg->Value, &count);
    if (!freerdp_client_add_device_channel(settings, count, (const char* const*)ptr))
      status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    CommandLineParserFree(ptr);
    if (status)
      return fail_at(arg, status);
  }
#endif
  CommandLineSwitchCase(arg, "smartcard")
  {
    size_t count = 0;
    char** ptr = CommandLineParseCommaSeparatedValuesEx(arg->Name, arg->Value, &count);
    if (!freerdp_client_add_device_channel(settings, count, (const char* const*)ptr))
      status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    CommandLineParserFree(ptr);
    if (status)
      return fail_at(arg, status);
  }
  CommandLineSwitchCase(arg, "printer")
  {
    size_t count = 0;
    char** ptr = CommandLineParseCommaSeparatedValuesEx(arg->Name, arg->Value, &count);
    if (!freerdp_client_add_device_channel(settings, count, (const char* const*)ptr))
      status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    CommandLineParserFree(ptr);
    if (status)
      return fail_at(arg, status);
  }
  CommandLineSwitchCase(arg, "usb")
  {
    size_t count = 0;
    char** ptr =
        CommandLineParseCommaSeparatedValuesEx(URBDRC_CHANNEL_NAME, arg->Value, &count);
    if (!freerdp_client_add_dynamic_channel(settings, count, (const char* const*)ptr))
      status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    CommandLineParserFree(ptr);
    if (status)
      return fail_at(arg, status);
  }
  CommandLineSwitchCase(arg, "multitouch")
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_MultiTouchInput, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "gestures")
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_MultiTouchGestures, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "echo")
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_SupportEchoChannel, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "ssh-agent")
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_SupportSSHAgentChannel, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "disp")
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_SupportDisplayControl, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "geometry")
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_SupportGeometryTracking, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "video")
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_SupportGeometryTracking,
                                   enable)) /* this requires geometry tracking */
      return fail_at(arg, COMMAND_LINE_ERROR);
    if (!freerdp_settings_set_bool(settings, FreeRDP_SupportVideoOptimized, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "sound")
  {
    size_t count = 0;
    char** ptr =
        CommandLineParseCommaSeparatedValuesEx(RDPSND_CHANNEL_NAME, arg->Value, &count);
    if (!freerdp_client_add_static_channel(settings, count, (const char* const*)ptr))
      status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    if (!freerdp_client_add_dynamic_channel(settings, count, (const char* const*)ptr))
      status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

    CommandLineParserFree(ptr);
    if (status)
      return fail_at(arg, status);
  }
  CommandLineSwitchCase(arg, "microphone")
  {
    size_t count = 0;
    char** ptr = CommandLineParseCommaSeparatedValuesEx(AUDIN_CHANNEL_NAME, arg->Value, &count);
    if (!freerdp_client_add_dynamic_channel(settings, count, (const char* const*)ptr))
      status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    CommandLineParserFree(ptr);
    if (status)
      return fail_at(arg, status);
  }
#if defined(CHANNEL_TSMF_CLIENT)
  CommandLineSwitchCase(arg, "multimedia")
  {
    size_t count = 0;
    char** ptr = CommandLineParseCommaSeparatedValuesEx("tsmf", arg->Value, &count);
    if (!freerdp_client_add_dynamic_channel(settings, count, (const char* const*)ptr))
      status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    CommandLineParserFree(ptr);
    if (status)
      return fail_at(arg, status);
  }
#endif
  CommandLineSwitchCase(arg, "heartbeat")
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_SupportHeartbeatPdu, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "multitransport")
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_SupportMultitransport, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);

    UINT32 flags = 0;
    if (freerdp_settings_get_bool(settings, FreeRDP_SupportMultitransport))
      flags =
          (TRANSPORT_TYPE_UDP_FECR | TRANSPORT_TYPE_UDP_FECL | TRANSPORT_TYPE_UDP_PREFERRED);

    if (!freerdp_settings_set_uint32(settings, FreeRDP_MultitransportFlags, flags))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchEnd(arg)

      return status;
}

static int freerdp_client_command_line_post_filter(void* context, COMMAND_LINE_ARGUMENT_A* arg)
{
  int status = freerdp_client_command_line_post_filter_int(context, arg);
  return status == CHANNEL_RC_OK ? 1 : -1;
}

static BOOL freerdp_parse_username_ptr(const char* username, const char** user, size_t* userlen,
                                       const char** domain, size_t* domainlen)
{
  WINPR_ASSERT(user);
  WINPR_ASSERT(userlen);
  WINPR_ASSERT(domain);
  WINPR_ASSERT(domainlen);

  if (!username)
    return FALSE;

  const char* p = strchr(username, '\\');

  *user = nullptr;
  *userlen = 0;

  *domain = nullptr;
  *domainlen = 0;

  if (p)
  {
    const size_t length = (size_t)(p - username);
    *user = &p[1];
    *userlen = strlen(*user);

    *domain = username;
    *domainlen = length;
  }
  else
  {
    /* Do not break up the name for '@'; both credSSP and the
     * ClientInfo PDU expect 'user@corp.net' to be transmitted
     * as username 'user@corp.net', domain empty (not nullptr!).
     */
    *user = username;
    *userlen = strlen(username);
  }

  return TRUE;
}

static BOOL freerdp_parse_username_settings(const char* username, rdpSettings* settings,
                                            FreeRDP_Settings_Keys_String userID,
                                            FreeRDP_Settings_Keys_String domainID)
{
  const char* user = nullptr;
  const char* domain = nullptr;
  size_t userlen = 0;
  size_t domainlen = 0;

  const BOOL rc = freerdp_parse_username_ptr(username, &user, &userlen, &domain, &domainlen);
  if (!rc)
    return FALSE;
  if (!freerdp_settings_set_string_len(settings, userID, user, userlen))
    return FALSE;
  return freerdp_settings_set_string_len(settings, domainID, domain, domainlen);
}

BOOL freerdp_parse_username(const char* username, char** puser, char** pdomain)
{
  const char* user = nullptr;
  const char* domain = nullptr;
  size_t userlen = 0;
  size_t domainlen = 0;

  *puser = nullptr;
  *pdomain = nullptr;

  const BOOL rc = freerdp_parse_username_ptr(username, &user, &userlen, &domain, &domainlen);
  if (!rc)
    return FALSE;

  if (userlen > 0)
  {
    *puser = strndup(user, userlen);
    if (!*puser)
      return FALSE;
  }

  if (domainlen > 0)
  {
    *pdomain = strndup(domain, domainlen);
    if (!*pdomain)
    {
      free(*puser);
      *puser = nullptr;
      return FALSE;
    }
  }

  return TRUE;
}

BOOL freerdp_parse_hostname(const char* hostname, char** host, int* port)
{
  char* p = nullptr;
  p = strrchr(hostname, ':');

  if (p)
  {
    size_t length = (size_t)(p - hostname);
    LONGLONG val = 0;

    if (!value_to_int(p + 1, &val, 1, UINT16_MAX))
      return FALSE;

    *host = (char*)calloc(length + 1UL, sizeof(char));

    if (!(*host))
      return FALSE;

    CopyMemory(*host, hostname, length);
    (*host)[length] = '\0';
    *port = (UINT16)val;
  }
  else
  {
    *host = _strdup(hostname);

    if (!(*host))
      return FALSE;

    *port = -1;
  }

  return TRUE;
}

static BOOL freerdp_apply_connection_type(rdpSettings* settings, UINT32 type)
{
  struct network_settings
  {
    FreeRDP_Settings_Keys_Bool id;
    BOOL value[7];
  };
  const struct network_settings config[] = {
    { FreeRDP_DisableWallpaper, { TRUE, TRUE, TRUE, TRUE, FALSE, FALSE, FALSE } },
    { FreeRDP_AllowFontSmoothing, { FALSE, FALSE, FALSE, FALSE, TRUE, TRUE, TRUE } },
    { FreeRDP_AllowDesktopComposition, { FALSE, FALSE, TRUE, TRUE, TRUE, TRUE, TRUE } },
    { FreeRDP_DisableFullWindowDrag, { TRUE, TRUE, TRUE, TRUE, FALSE, FALSE, FALSE } },
    { FreeRDP_DisableMenuAnims, { TRUE, TRUE, TRUE, TRUE, FALSE, FALSE, FALSE } },
    { FreeRDP_DisableThemes, { TRUE, FALSE, FALSE, FALSE, FALSE, FALSE, FALSE } }
  };

  switch (type)
  {
    case CONNECTION_TYPE_INVALID:
      return TRUE;

    case CONNECTION_TYPE_MODEM:
    case CONNECTION_TYPE_BROADBAND_LOW:
    case CONNECTION_TYPE_BROADBAND_HIGH:
    case CONNECTION_TYPE_SATELLITE:
    case CONNECTION_TYPE_WAN:
    case CONNECTION_TYPE_LAN:
    case CONNECTION_TYPE_AUTODETECT:
      break;
    default:
      WLog_WARN(TAG, "Unknown ConnectionType %" PRIu32 ", aborting", type);
      return FALSE;
  }

  for (size_t x = 0; x < ARRAYSIZE(config); x++)
  {
    const struct network_settings* cur = &config[x];
    if (!freerdp_settings_set_bool(settings, cur->id, cur->value[type - 1]))
      return FALSE;
  }
  return TRUE;
}

BOOL freerdp_set_connection_type(rdpSettings* settings, UINT32 type)
{

  if (!freerdp_settings_set_uint32(settings, FreeRDP_ConnectionType, type))
    return FALSE;

  switch (type)
  {
    case CONNECTION_TYPE_INVALID:
    case CONNECTION_TYPE_MODEM:
    case CONNECTION_TYPE_BROADBAND_LOW:
    case CONNECTION_TYPE_SATELLITE:
    case CONNECTION_TYPE_BROADBAND_HIGH:
    case CONNECTION_TYPE_WAN:
    case CONNECTION_TYPE_LAN:
      if (!freerdp_apply_connection_type(settings, type))
        return FALSE;
      break;
    case CONNECTION_TYPE_AUTODETECT:
      if (!freerdp_apply_connection_type(settings, type))
        return FALSE;
      /* Automatically activate GFX and RFX codec support */
#ifdef WITH_GFX_H264
      if (!freerdp_settings_set_bool(settings, FreeRDP_GfxAVC444v2, TRUE) ||
          !freerdp_settings_set_bool(settings, FreeRDP_GfxAVC444, TRUE) ||
          !freerdp_settings_set_bool(settings, FreeRDP_GfxH264, TRUE))
        return FALSE;
#endif
      if (!freerdp_settings_set_bool(settings, FreeRDP_RemoteFxCodec, TRUE) ||
          !freerdp_settings_set_bool(settings, FreeRDP_SupportGraphicsPipeline, TRUE))
        return FALSE;
      break;
    default:
      WLog_WARN(TAG, "Unknown ConnectionType %" PRIu32 ", aborting", type);
      return FALSE;
  }

  return TRUE;
}

static UINT32 freerdp_get_keyboard_layout_for_type(const char* name, WINPR_ATTR_UNUSED DWORD type)
{
  UINT32 res = 0;
  size_t count = 0;
  RDP_KEYBOARD_LAYOUT* layouts =
      freerdp_keyboard_get_layouts(RDP_KEYBOARD_LAYOUT_TYPE_STANDARD, &count);

  if (!layouts || (count == 0))
    goto fail;

  for (size_t x = 0; x < count; x++)
  {
    const RDP_KEYBOARD_LAYOUT* layout = &layouts[x];
    if (option_equals(layout->name, name))
    {
      res = layout->code;
      break;
    }
  }

fail:
  freerdp_keyboard_layouts_free(layouts, count);
  return res;
}

static UINT32 freerdp_map_keyboard_layout_name_to_id(const char* name)
{
  const UINT32 variants[] = { RDP_KEYBOARD_LAYOUT_TYPE_STANDARD, RDP_KEYBOARD_LAYOUT_TYPE_VARIANT,
                            RDP_KEYBOARD_LAYOUT_TYPE_IME };

  for (size_t x = 0; x < ARRAYSIZE(variants); x++)
  {
    UINT32 rc = freerdp_get_keyboard_layout_for_type(name, variants[x]);
    if (rc > 0)
      return rc;
  }

  return 0;
}

static int freerdp_detect_command_line_pre_filter(void* context, int index, int argc, LPSTR* argv)
{
  size_t length = 0;
  WINPR_UNUSED(context);

  if (index == 1)
  {
    if (argc < index)
      return -1;

    length = strlen(argv[index]);

    if (length > 4)
    {
      if (option_is_rdp_file(argv[index]))
      {
        return 1;
      }
    }

    if (length > 13)
    {
      if (option_is_incident_file(argv[index]))
      {
        return 1;
      }
    }
  }

  return 0;
}

static int freerdp_detect_windows_style_command_line_syntax(int argc, char** argv, size_t* count,
                                                            BOOL ignoreUnknown)
{
  int status = 0;
  DWORD flags = 0;
  int detect_status = 0;
  const COMMAND_LINE_ARGUMENT_A* arg = nullptr;
  COMMAND_LINE_ARGUMENT_A largs[ARRAYSIZE(global_cmd_args)];
  memcpy(largs, global_cmd_args, sizeof(global_cmd_args));

  flags = COMMAND_LINE_SEPARATOR_COLON | COMMAND_LINE_SILENCE_PARSER;
  flags |= COMMAND_LINE_SIGIL_SLASH | COMMAND_LINE_SIGIL_PLUS_MINUS;

  if (ignoreUnknown)
  {
    flags |= COMMAND_LINE_IGN_UNKNOWN_KEYWORD;
  }

  *count = 0;
  detect_status = 0;
  CommandLineClearArgumentsA(largs);
  status = CommandLineParseArgumentsA(argc, argv, largs, flags, nullptr,
                                      freerdp_detect_command_line_pre_filter, nullptr);

  if (status < 0)
    return status;

  arg = largs;

  do
  {
    if (!(arg->Flags & COMMAND_LINE_ARGUMENT_PRESENT))
      continue;

    (*count)++;
  } while ((arg = CommandLineFindNextArgumentA(arg)) != nullptr);

  return detect_status;
}

static int freerdp_detect_posix_style_command_line_syntax(int argc, char** argv, size_t* count,
                                                          BOOL ignoreUnknown)
{
  int status = 0;
  DWORD flags = 0;
  int detect_status = 0;
  const COMMAND_LINE_ARGUMENT_A* arg = nullptr;
  COMMAND_LINE_ARGUMENT_A largs[ARRAYSIZE(global_cmd_args)];
  memcpy(largs, global_cmd_args, sizeof(global_cmd_args));

  flags = COMMAND_LINE_SEPARATOR_SPACE | COMMAND_LINE_SILENCE_PARSER;
  flags |= COMMAND_LINE_SIGIL_DASH | COMMAND_LINE_SIGIL_DOUBLE_DASH;
  flags |= COMMAND_LINE_SIGIL_ENABLE_DISABLE;

  if (ignoreUnknown)
  {
    flags |= COMMAND_LINE_IGN_UNKNOWN_KEYWORD;
  }

  *count = 0;
  detect_status = 0;
  CommandLineClearArgumentsA(largs);
  status = CommandLineParseArgumentsA(argc, argv, largs, flags, nullptr,
                                      freerdp_detect_command_line_pre_filter, nullptr);

  if (status < 0)
    return status;

  arg = largs;

  do
  {
    if (!(arg->Flags & COMMAND_LINE_ARGUMENT_PRESENT))
      continue;

    (*count)++;
  } while ((arg = CommandLineFindNextArgumentA(arg)) != nullptr);

  return detect_status;
}

static BOOL freerdp_client_detect_command_line(int argc, char** argv, DWORD* flags)
{
  size_t posix_cli_count = 0;
  size_t windows_cli_count = 0;
  const BOOL ignoreUnknown = TRUE;
  const int windows_cli_status = freerdp_detect_windows_style_command_line_syntax(
      argc, argv, &windows_cli_count, ignoreUnknown);
  const int posix_cli_status =
      freerdp_detect_posix_style_command_line_syntax(argc, argv, &posix_cli_count, ignoreUnknown);

  /* Default is POSIX syntax */
  *flags = COMMAND_LINE_SEPARATOR_SPACE;
  *flags |= COMMAND_LINE_SIGIL_DASH | COMMAND_LINE_SIGIL_DOUBLE_DASH;
  *flags |= COMMAND_LINE_SIGIL_ENABLE_DISABLE;

  if (posix_cli_status <= COMMAND_LINE_STATUS_PRINT)
    return FALSE;

  /* Check, if this may be windows style syntax... */
  if ((windows_cli_count && (windows_cli_count >= posix_cli_count)) ||
      (windows_cli_status <= COMMAND_LINE_STATUS_PRINT))
  {
    windows_cli_count = 1;
    *flags = COMMAND_LINE_SEPARATOR_COLON;
    *flags |= COMMAND_LINE_SIGIL_SLASH | COMMAND_LINE_SIGIL_PLUS_MINUS;
  }

  WLog_DBG(TAG, "windows: %d/%" PRIuz " posix: %d/%" PRIuz "", windows_cli_status,
           windows_cli_count, posix_cli_status, posix_cli_count);
  if ((posix_cli_count == 0) && (windows_cli_count == 0))
  {
    if ((posix_cli_status == COMMAND_LINE_ERROR) && (windows_cli_status == COMMAND_LINE_ERROR))
      return TRUE;
  }
  return FALSE;
}

int freerdp_client_settings_command_line_status_print(rdpSettings* settings, int status, int argc,
                                                      char** argv)
{
  return freerdp_client_settings_command_line_status_print_ex(settings, status, argc, argv,
                                                              nullptr);
}

static void freerdp_client_print_keyboard_type_list(const char* msg, DWORD type)
{
  size_t count = 0;
  RDP_KEYBOARD_LAYOUT* layouts = nullptr;
  layouts = freerdp_keyboard_get_layouts(type, &count);

  printf("\n%s\n", msg);

  for (size_t x = 0; x < count; x++)
  {
    const RDP_KEYBOARD_LAYOUT* layout = &layouts[x];
    printf("0x%08" PRIX32 "\t%s\n", layout->code, layout->name);
  }

  freerdp_keyboard_layouts_free(layouts, count);
}

static void freerdp_client_print_keyboard_list(void)
{
  freerdp_client_print_keyboard_type_list("Keyboard Layouts", RDP_KEYBOARD_LAYOUT_TYPE_STANDARD);
  freerdp_client_print_keyboard_type_list("Keyboard Layout Variants",
                                          RDP_KEYBOARD_LAYOUT_TYPE_VARIANT);
  freerdp_client_print_keyboard_type_list("Keyboard Layout Variants",
                                          RDP_KEYBOARD_LAYOUT_TYPE_IME);
}

static void freerdp_client_print_timezone_list(void)
{
  DWORD index = 0;
  DYNAMIC_TIME_ZONE_INFORMATION info = WINPR_C_ARRAY_INIT;
  while (EnumDynamicTimeZoneInformation(index++, &info) != ERROR_NO_MORE_ITEMS)
  {
    char TimeZoneKeyName[ARRAYSIZE(info.TimeZoneKeyName) + 1] = WINPR_C_ARRAY_INIT;

    (void)ConvertWCharNToUtf8(info.TimeZoneKeyName, ARRAYSIZE(info.TimeZoneKeyName),
                              TimeZoneKeyName, ARRAYSIZE(TimeZoneKeyName));
    printf("%" PRIu32 ": '%s'\n", index, TimeZoneKeyName);
  }
}

static void freerdp_client_print_tune_list(const rdpSettings* settings)
{
  SSIZE_T type = 0;

  for (SSIZE_T x = 0; x < FreeRDP_Settings_StableAPI_MAX; x++)
  {
    const char* name = freerdp_settings_get_name_for_key(x);
    type = freerdp_settings_get_type_for_key(x);

    // NOLINTBEGIN(clang-analyzer-optin.core.EnumCastOutOfRange)
    switch (type)
    {
      case RDP_SETTINGS_TYPE_BOOL:
        printf("%" PRIdz "\t%50s\tBOOL\t%s\n", x, name,
               freerdp_settings_get_bool(settings, (FreeRDP_Settings_Keys_Bool)x)
                   ? "TRUE"
                   : "FALSE");
        break;
      case RDP_SETTINGS_TYPE_UINT16:
        printf("%" PRIdz "\t%50s\tUINT16\t%" PRIu16 "\n", x, name,
               freerdp_settings_get_uint16(settings, (FreeRDP_Settings_Keys_UInt16)x));
        break;
      case RDP_SETTINGS_TYPE_INT16:
        printf("%" PRIdz "\t%50s\tINT16\t%" PRId16 "\n", x, name,
               freerdp_settings_get_int16(settings, (FreeRDP_Settings_Keys_Int16)x));
        break;
      case RDP_SETTINGS_TYPE_UINT32:
        printf("%" PRIdz "\t%50s\tUINT32\t%" PRIu32 "\n", x, name,
               freerdp_settings_get_uint32(settings, (FreeRDP_Settings_Keys_UInt32)x));
        break;
      case RDP_SETTINGS_TYPE_INT32:
        printf("%" PRIdz "\t%50s\tINT32\t%" PRId32 "\n", x, name,
               freerdp_settings_get_int32(settings, (FreeRDP_Settings_Keys_Int32)x));
        break;
      case RDP_SETTINGS_TYPE_UINT64:
        printf("%" PRIdz "\t%50s\tUINT64\t%" PRIu64 "\n", x, name,
               freerdp_settings_get_uint64(settings, (FreeRDP_Settings_Keys_UInt64)x));
        break;
      case RDP_SETTINGS_TYPE_INT64:
        printf("%" PRIdz "\t%50s\tINT64\t%" PRId64 "\n", x, name,
               freerdp_settings_get_int64(settings, (FreeRDP_Settings_Keys_Int64)x));
        break;
      case RDP_SETTINGS_TYPE_STRING:
        printf("%" PRIdz "\t%50s\tSTRING\t%s"
               "\n",
               x, name,
               freerdp_settings_get_string(settings, (FreeRDP_Settings_Keys_String)x));
        break;
      case RDP_SETTINGS_TYPE_POINTER:
        printf("%" PRIdz "\t%50s\tPOINTER\t%p"
               "\n",
               x, name,
               freerdp_settings_get_pointer(settings, (FreeRDP_Settings_Keys_Pointer)x));
        break;
      default:
        break;
    }
    // NOLINTEND(clang-analyzer-optin.core.EnumCastOutOfRange)
  }
}

static int evaluate_result(int argc, char* argv[], int rc, rdpSettings* settings,
                           const COMMAND_LINE_ARGUMENT_A* largs)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(largs);

  if (rc != COMMAND_LINE_STATUS_PRINT)
  {
    freerdp_client_print_command_line_usage(argc, argv);
    return rc;
  }

  const COMMAND_LINE_ARGUMENT_A* arg = CommandLineFindArgumentA(largs, "list");
  WINPR_ASSERT(arg);

  if (arg->Flags & COMMAND_LINE_ARGUMENT_PRESENT)
  {
    if (option_equals("timezones", arg->Value))
      freerdp_client_print_timezone_list();
    else if (option_equals("tune", arg->Value))
      freerdp_client_print_tune_list(settings);
    else if (option_equals("kbd", arg->Value))
      freerdp_client_print_keyboard_list();
    else if (option_starts_with("kbd-lang", arg->Value))
    {
      const char* val = nullptr;
      if (option_starts_with("kbd-lang:", arg->Value))
        val = &arg->Value[9];
      else if (!option_equals("kbd-lang", arg->Value))
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

      if (val && strchr(val, ','))
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
      freerdp_client_print_codepages(val);
    }
    else if (option_equals("kbd-scancode", arg->Value))
      freerdp_client_print_scancodes();
    else if (option_equals("monitor", arg->Value))
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_ListMonitors, TRUE))
        return COMMAND_LINE_ERROR;
    }
    else if (option_starts_with("smartcard", arg->Value))
    {
      BOOL opts = FALSE;
      if (option_starts_with("smartcard:", arg->Value))
        opts = TRUE;
      else if (!option_equals("smartcard", arg->Value))
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

      if (opts)
      {
        const char* sub = strchr(arg->Value, ':') + 1;
        const CmdLineSubOptions options[] = {
          { "pkinit-anchors:", FreeRDP_PkinitAnchors, CMDLINE_SUBOPTION_STRING, nullptr },
          { "pkcs11-module:", FreeRDP_Pkcs11Module, CMDLINE_SUBOPTION_STRING, nullptr }
        };

        size_t count = 0;

        char** ptr = CommandLineParseCommaSeparatedValuesEx("smartcard", sub, &count);
        if (!ptr)
          return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
        if (count < 2)
        {
          CommandLineParserFree(ptr);
          return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
        }

        for (size_t x = 1; x < count; x++)
        {
          const char* cur = ptr[x];
          if (!parseSubOptions(settings, options, ARRAYSIZE(options), cur))
          {
            CommandLineParserFree(ptr);
            return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
          }
        }

        CommandLineParserFree(ptr);
      }

      freerdp_smartcard_list(settings);
    }
    else
    {
      freerdp_client_print_command_line_usage(argc, argv);
      return COMMAND_LINE_ERROR;
    }
  }
#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
  arg = CommandLineFindArgumentA(largs, "tune-list");
  WINPR_ASSERT(arg);

  if (arg->Flags & COMMAND_LINE_ARGUMENT_PRESENT)
  {
    WLog_WARN(TAG, "Option /tune-list is deprecated, use /list:tune instead");
    freerdp_client_print_tune_list(settings);
  }

  arg = CommandLineFindArgumentA(largs, "kbd-lang-list");
  WINPR_ASSERT(arg);

  if (arg->Flags & COMMAND_LINE_ARGUMENT_PRESENT)
  {
    WLog_WARN(TAG, "Option /kbd-lang-list is deprecated, use /list:kbd-lang instead");
    freerdp_client_print_codepages(arg->Value);
  }

  arg = CommandLineFindArgumentA(largs, "kbd-list");
  WINPR_ASSERT(arg);

  if (arg->Flags & COMMAND_LINE_VALUE_PRESENT)
  {
    WLog_WARN(TAG, "Option /kbd-list is deprecated, use /list:kbd instead");
    freerdp_client_print_keyboard_list();
  }

  arg = CommandLineFindArgumentA(largs, "monitor-list");
  WINPR_ASSERT(arg);

  if (arg->Flags & COMMAND_LINE_VALUE_PRESENT)
  {
    WLog_WARN(TAG, "Option /monitor-list is deprecated, use /list:monitor instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_ListMonitors, TRUE))
      return COMMAND_LINE_ERROR;
  }

  arg = CommandLineFindArgumentA(largs, "smartcard-list");
  WINPR_ASSERT(arg);

  if (arg->Flags & COMMAND_LINE_VALUE_PRESENT)
  {
    WLog_WARN(TAG, "Option /smartcard-list is deprecated, use /list:smartcard instead");
    freerdp_smartcard_list(settings);
  }

  arg = CommandLineFindArgumentA(largs, "kbd-scancode-list");
  WINPR_ASSERT(arg);

  if (arg->Flags & COMMAND_LINE_VALUE_PRESENT)
  {
    WLog_WARN(TAG, "Option /kbd-scancode-list is deprecated, use /list:kbd-scancode instead");
    freerdp_client_print_scancodes();
    return COMMAND_LINE_STATUS_PRINT;
  }
#endif
      return COMMAND_LINE_STATUS_PRINT;
}

int freerdp_client_settings_command_line_status_print_ex(rdpSettings* settings, int status,
                                                         int argc, char** argv,
                                                         const COMMAND_LINE_ARGUMENT_A* custom)
{
  if (status == COMMAND_LINE_STATUS_PRINT_VERSION)
  {
    freerdp_client_print_version();
    goto out;
  }

  if (status == COMMAND_LINE_STATUS_PRINT_BUILDCONFIG)
  {
    freerdp_client_print_version_ex(argc, argv);
    freerdp_client_print_buildconfig_ex(argc, argv);
    goto out;
  }
  else if (status == COMMAND_LINE_STATUS_PRINT)
  {
    DWORD flags = 0;
    freerdp_client_detect_command_line(argc, argv, &flags);

    size_t customcount = 0;
    {
      const COMMAND_LINE_ARGUMENT_A* cur = custom;
      while (cur && cur->Name)
      {
        customcount++;
        cur++;
      }
    }
    size_t globalcount = 0;
    {
      const COMMAND_LINE_ARGUMENT_A* cur = global_cmd_args;
      while (cur && cur->Name)
      {
        globalcount++;
        cur++;
      }
    }

    COMMAND_LINE_ARGUMENT_A* largs =
        calloc(1ull + customcount + globalcount, sizeof(COMMAND_LINE_ARGUMENT_A));
    if (!largs)
      goto out;
    memcpy(largs, global_cmd_args, globalcount * sizeof(COMMAND_LINE_ARGUMENT_A));
    if (custom)
      memcpy(&largs[globalcount], custom, customcount * sizeof(COMMAND_LINE_ARGUMENT_A));

    const int rc =
        CommandLineParseArgumentsA(argc, argv, largs, flags, nullptr, nullptr, nullptr);
    status = evaluate_result(argc, argv, rc, settings, largs);
    free(largs);
    goto out;
  }
  else if (status == COMMAND_LINE_STATUS_PRINT_HELP)
  {
    freerdp_client_print_command_line_help_ex(argc, argv, custom);
    goto out;
  }
  else if (status < 0)
  {
    freerdp_client_print_command_line_usage(argc, argv);
    goto out;
  }

out:
  if (status <= COMMAND_LINE_STATUS_PRINT && status >= COMMAND_LINE_STATUS_PRINT_LAST)
    return 0;
  return status;
}

/**
 * parses a string value with the format <v1>x<v2>
 *
 * @param input input string
 * @param v1 pointer to output v1
 * @param v2 pointer to output v2
 * @return if the parsing was successful
 */
static BOOL parseSizeValue(const char* input, unsigned long* v1, unsigned long* v2)
{
  const char* xcharpos = nullptr;
  char* endPtr = nullptr;
  unsigned long v = 0;
  errno = 0;
  v = strtoul(input, &endPtr, 10);

  if ((v == 0 || v == ULONG_MAX) && (errno != 0))
    return FALSE;

  if (v1)
    *v1 = v;

  xcharpos = strchr(input, 'x');

  if (!xcharpos || xcharpos != endPtr)
    return FALSE;

  errno = 0;
  v = strtoul(xcharpos + 1, &endPtr, 10);

  if ((v == 0 || v == ULONG_MAX) && (errno != 0))
    return FALSE;

  if (*endPtr != '\0')
    return FALSE;

  if (v2)
    *v2 = v;

  return TRUE;
}

static BOOL prepare_default_settings(rdpSettings* settings, COMMAND_LINE_ARGUMENT_A* args,
                                     BOOL rdp_file)
{
  const char* arguments[] = { "network", "gfx", "rfx", "bpp" };
  WINPR_ASSERT(settings);
  WINPR_ASSERT(args);

  if (rdp_file)
    return FALSE;

  for (size_t x = 0; x < ARRAYSIZE(arguments); x++)
  {
    const char* arg = arguments[x];
    const COMMAND_LINE_ARGUMENT_A* p = CommandLineFindArgumentA(args, arg);
    if (p && (p->Flags & COMMAND_LINE_ARGUMENT_PRESENT))
      return FALSE;
  }

  return freerdp_set_connection_type(settings, CONNECTION_TYPE_AUTODETECT);
}

static BOOL setSmartcardEmulation(WINPR_ATTR_UNUSED const char* value, rdpSettings* settings)
{
  return freerdp_settings_set_bool(settings, FreeRDP_SmartcardEmulation, TRUE);
}

const char* option_starts_with(const char* what, const char* val)
{
  WINPR_ASSERT(what);
  WINPR_ASSERT(val);
  const size_t wlen = strlen(what);

  if (_strnicmp(what, val, wlen) != 0)
    return nullptr;
  return &val[wlen];
}

BOOL option_ends_with(const char* str, const char* ext)
{
  WINPR_ASSERT(str);
  WINPR_ASSERT(ext);
  const size_t strLen = strlen(str);
  const size_t extLen = strlen(ext);

  if (strLen < extLen)
    return FALSE;

  return _strnicmp(&str[strLen - extLen], ext, extLen) == 0;
}

BOOL option_equals(const char* what, const char* val)
{
  WINPR_ASSERT(what);
  WINPR_ASSERT(val);
  return _stricmp(what, val) == 0;
}

typedef enum
{
  PARSE_ON,
  PARSE_OFF,
  PARSE_NONE,
  PARSE_FAIL
} PARSE_ON_OFF_RESULT;

static PARSE_ON_OFF_RESULT parse_on_off_option(const char* value)
{
  WINPR_ASSERT(value);
  const char* sep = strchr(value, ':');
  if (!sep)
    return PARSE_NONE;
  if (option_equals("on", &sep[1]))
    return PARSE_ON;
  if (option_equals("off", &sep[1]))
    return PARSE_OFF;
  return PARSE_FAIL;
}

WINPR_ATTR_NODISCARD
static PARSE_ON_OFF_RESULT parse_on_off_argument(const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(arg);

  if (arg->Value == BoolValueTrue)
    return PARSE_ON;
  if (arg->Value == BoolValueFalse)
    return PARSE_OFF;
  if (option_equals("on", arg->Value))
    return PARSE_ON;
  if (option_equals("off", arg->Value))
    return PARSE_OFF;
  return PARSE_NONE;
}

typedef enum
{
  CLIP_DIR_PARSE_ALL,
  CLIP_DIR_PARSE_OFF,
  CLIP_DIR_PARSE_LOCAL,
  CLIP_DIR_PARSE_REMOTE,
  CLIP_DIR_PARSE_FAIL
} PARSE_CLIP_DIR_RESULT;

static PARSE_CLIP_DIR_RESULT parse_clip_direciton_to_option(const char* value)
{
  WINPR_ASSERT(value);
  const char* sep = strchr(value, ':');
  if (!sep)
    return CLIP_DIR_PARSE_FAIL;
  if (option_equals("all", &sep[1]))
    return CLIP_DIR_PARSE_ALL;
  if (option_equals("off", &sep[1]))
    return CLIP_DIR_PARSE_OFF;
  if (option_equals("local", &sep[1]))
    return CLIP_DIR_PARSE_LOCAL;
  if (option_equals("remote", &sep[1]))
    return CLIP_DIR_PARSE_REMOTE;
  return CLIP_DIR_PARSE_FAIL;
}

static int parse_tls_ciphers(rdpSettings* settings, const char* Value)
{
  const char* ciphers = nullptr;
  if (!Value)
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

  if (option_equals(Value, "netmon"))
  {
    ciphers = "ALL:!ECDH:!ADH:!DHE";
  }
  else if (option_equals(Value, "ma"))
  {
    ciphers = "AES128-SHA";
  }
  else
  {
    ciphers = Value;
  }

  if (!freerdp_settings_set_string(settings, FreeRDP_AllowedTlsCiphers, ciphers))
    return COMMAND_LINE_ERROR_MEMORY;
  return 0;
}

static int parse_tls_seclevel(rdpSettings* settings, const char* Value)
{
  LONGLONG val = 0;

  if (!value_to_int(Value, &val, 0, 5))
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

  if (!freerdp_settings_set_uint32(settings, FreeRDP_TlsSecLevel, (UINT32)val))
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  return 0;
}

static int parse_tls_secrets_file(rdpSettings* settings, const char* Value)
{
  if (!Value)
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

  if (!freerdp_settings_set_string(settings, FreeRDP_TlsSecretsFile, Value))
    return COMMAND_LINE_ERROR_MEMORY;
  return 0;
}

static int parse_tls_enforce(rdpSettings* settings, const char* Value)
{
  UINT16 version = TLS1_2_VERSION;

  if (Value)
  {
    struct map_t
    {
      const char* name;
      UINT16 version;
    };
    const struct map_t map[] = { { "1.0", TLS1_VERSION },
                               { "1.1", TLS1_1_VERSION },
                               { "1.2", TLS1_2_VERSION }
#if defined(TLS1_3_VERSION)
                               ,
                               { "1.3", TLS1_3_VERSION }
#endif
    };

    const struct map_t* found = nullptr;
    for (size_t x = 0; x < ARRAYSIZE(map); x++)
    {
      const struct map_t* cur = &map[x];
      if (option_equals(cur->name, Value))
      {
        found = cur;
        break;
      }
    }

    if (found)
      version = found->version;
    else
    {
      errno = 0;
      const long v = strtol(Value, nullptr, 0);

      if ((v < -1) || ((v == LONG_MAX) && (errno != 0)) || (v > UINT16_MAX))
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
      else
        version = WINPR_ASSERTING_INT_CAST(UINT16, v);
    }
  }

  if (!(freerdp_settings_set_uint16(settings, FreeRDP_TLSMinVersion, version) &&
        freerdp_settings_set_uint16(settings, FreeRDP_TLSMaxVersion, version)))
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  return 0;
}

static int parse_tls_cipher_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  int rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  CommandLineSwitchStart(arg) CommandLineSwitchCase(arg, "tls")
  {
    if (option_starts_with("ciphers:", arg->Value))
      rc = fail_at(arg, parse_tls_ciphers(settings, &arg->Value[8]));
    else if (option_starts_with("seclevel:", arg->Value))
      rc = fail_at(arg, parse_tls_seclevel(settings, &arg->Value[9]));
    else if (option_starts_with("secrets-file:", arg->Value))
      rc = fail_at(arg, parse_tls_secrets_file(settings, &arg->Value[13]));
    else if (option_starts_with("enforce:", arg->Value))
      rc = fail_at(arg, parse_tls_enforce(settings, &arg->Value[8]));
  }

#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
  CommandLineSwitchCase(arg, "tls-ciphers")
  {
    WLog_WARN(TAG, "Option /tls-ciphers is deprecated, use /tls:ciphers instead");
    rc = fail_at(arg, parse_tls_ciphers(settings, arg->Value));
  }
  CommandLineSwitchCase(arg, "tls-seclevel")
  {
    WLog_WARN(TAG, "Option /tls-seclevel is deprecated, use /tls:seclevel instead");
    rc = fail_at(arg, parse_tls_seclevel(settings, arg->Value));
  }
  CommandLineSwitchCase(arg, "tls-secrets-file")
  {
    WLog_WARN(TAG, "Option /tls-secrets-file is deprecated, use /tls:secrets-file instead");
    rc = fail_at(arg, parse_tls_secrets_file(settings, arg->Value));
  }
  CommandLineSwitchCase(arg, "enforce-tlsv1_2")
  {
    WLog_WARN(TAG, "Option /enforce-tlsv1_2 is deprecated, use /tls:enforce:1.2 instead");
    rc = fail_at(arg, parse_tls_enforce(settings, "1.2"));
  }
#endif
  CommandLineSwitchDefault(arg)
  {
  }
  CommandLineSwitchEnd(arg)

      return rc;
}

static int parse_tls_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  size_t count = 0;
  char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);
  for (size_t x = 0; x < count; x++)
  {
    COMMAND_LINE_ARGUMENT_A larg = *arg;
    larg.Value = ptr[x];

    int rc = parse_tls_cipher_options(settings, &larg);
    if (rc != 0)
    {
      CommandLineParserFree(ptr);
      return rc;
    }
  }
  CommandLineParserFree(ptr);
  return 0;
}

static int parse_gfx_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  if (!freerdp_settings_set_bool(settings, FreeRDP_SupportGraphicsPipeline, TRUE))
    return COMMAND_LINE_ERROR;

  if (arg->Value)
  {
    int rc = CHANNEL_RC_OK;
    size_t count = 0;
    char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);
    if (!ptr || (count == 0))
      rc = COMMAND_LINE_ERROR;
    else
    {
      BOOL GfxH264 = FALSE;
      BOOL GfxAVC444 = FALSE;
      BOOL RemoteFxCodec = FALSE;
      BOOL GfxProgressive = FALSE;
      BOOL codecSelected = FALSE;

      for (size_t x = 0; x < count; x++)
      {
        const char* val = ptr[x];
#ifdef WITH_GFX_H264
        if (option_starts_with("AVC444", val))
        {
          const PARSE_ON_OFF_RESULT bval = parse_on_off_option(val);
          if (bval == PARSE_FAIL)
            rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
          else
            GfxAVC444 = bval != PARSE_OFF;
          codecSelected = TRUE;
        }
        else if (option_starts_with("AVC420", val))
        {
          const PARSE_ON_OFF_RESULT bval = parse_on_off_option(val);
          if (bval == PARSE_FAIL)
            rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
          else
            GfxH264 = bval != PARSE_OFF;
          codecSelected = TRUE;
        }
        else
#endif
            if (option_starts_with("RFX", val))
        {
          const PARSE_ON_OFF_RESULT bval = parse_on_off_option(val);
          if (bval == PARSE_FAIL)
            rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
          else
            RemoteFxCodec = bval != PARSE_OFF;
          codecSelected = TRUE;
        }
        else if (option_starts_with("progressive", val))
        {
          const PARSE_ON_OFF_RESULT bval = parse_on_off_option(val);
          if (bval == PARSE_FAIL)
            rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
          else
            GfxProgressive = bval != PARSE_OFF;
          codecSelected = TRUE;
        }
        else if (option_starts_with("mask:", val))
        {
          ULONGLONG v = 0;
          const char* uv = &val[5];
          if (!value_to_uint(uv, &v, 0, UINT32_MAX))
            rc = COMMAND_LINE_ERROR;
          else
          {
            if (!freerdp_settings_set_uint32(settings, FreeRDP_GfxCapsFilter,
                                             (UINT32)v))
              rc = COMMAND_LINE_ERROR;
          }
        }
        else if (option_starts_with("small-cache", val))
        {
          const PARSE_ON_OFF_RESULT bval = parse_on_off_option(val);
          if (bval == PARSE_FAIL)
            rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
          else if (!freerdp_settings_set_bool(settings, FreeRDP_GfxSmallCache,
                                              bval != PARSE_OFF))
            rc = COMMAND_LINE_ERROR;
        }
        else if (option_starts_with("thin-client", val))
        {
          const PARSE_ON_OFF_RESULT bval = parse_on_off_option(val);
          if (bval == PARSE_FAIL)
            rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
          else if (!freerdp_settings_set_bool(settings, FreeRDP_GfxThinClient,
                                              bval != PARSE_OFF))
            rc = COMMAND_LINE_ERROR;
          if ((rc == CHANNEL_RC_OK) && (bval > 0))
          {
            if (!freerdp_settings_set_bool(settings, FreeRDP_GfxSmallCache,
                                           bval != PARSE_OFF))
              rc = COMMAND_LINE_ERROR;
          }
        }
        else if (option_starts_with("frame-ack", val))
        {
          const PARSE_ON_OFF_RESULT bval = parse_on_off_option(val);
          if (bval == PARSE_FAIL)
            rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
          else if (!freerdp_settings_set_bool(settings, FreeRDP_GfxSuspendFrameAck,
                                              bval == PARSE_OFF))
            rc = COMMAND_LINE_ERROR;
        }
#if defined(WITH_GFX_AV1)
        else if (option_starts_with("AV1", val))
        {
          uint32_t profile = 1;
          BOOL enabled = FALSE;
          const PARSE_ON_OFF_RESULT bval = parse_on_off_option(val);
          if (bval == PARSE_FAIL)
          {
            if (_stricmp("av1:i420", val) == 0)
            {
              enabled = TRUE;
              profile = 0;
            }
            else if (_stricmp("av1:i444", val) == 0)
            {
              enabled = TRUE;
              profile = 1;
            }
            else
              rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
          }
          else
            enabled = bval == PARSE_ON;

          if (enabled || (bval != PARSE_FAIL))
          {
            if (!freerdp_settings_set_bool(settings, FreeRDP_GfxCodecAV1, enabled))
              rc = COMMAND_LINE_ERROR;
            else if (!freerdp_settings_set_uint32(settings, FreeRDP_GfxCodecAV1Profile,
                                                  profile))
              rc = COMMAND_LINE_ERROR;
          }
        }
#endif
        else
          rc = COMMAND_LINE_ERROR;
      }

      if ((rc == CHANNEL_RC_OK) && codecSelected)
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_GfxAVC444, GfxAVC444))
          rc = COMMAND_LINE_ERROR;
        if (!freerdp_settings_set_bool(settings, FreeRDP_GfxAVC444v2, GfxAVC444))
          rc = COMMAND_LINE_ERROR;
        if (!freerdp_settings_set_bool(settings, FreeRDP_GfxH264, GfxH264))
          rc = COMMAND_LINE_ERROR;
        if (!freerdp_settings_set_bool(settings, FreeRDP_RemoteFxCodec, RemoteFxCodec))
          rc = COMMAND_LINE_ERROR;
        if (!freerdp_settings_set_bool(settings, FreeRDP_GfxProgressive, GfxProgressive))
          rc = COMMAND_LINE_ERROR;
      }
    }
    CommandLineParserFree(ptr);
    if (rc != CHANNEL_RC_OK)
      return rc;
  }
  return CHANNEL_RC_OK;
}

static int parse_kbd_layout(rdpSettings* settings, const char* value)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(value);

  int rc = 0;
  LONGLONG ival = 0;
  const BOOL isInt = value_to_int(value, &ival, 1, UINT32_MAX);
  if (!isInt)
  {
    ival = freerdp_map_keyboard_layout_name_to_id(value);

    if (ival == 0)
    {
      WLog_ERR(TAG, "Could not identify keyboard layout: %s", value);
      WLog_ERR(TAG, "Use /list:kbd to list available layouts");
      rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    }
  }

  if (rc == 0)
  {
    if (!freerdp_settings_set_uint32(settings, FreeRDP_KeyboardLayout, (UINT32)ival))
      rc = COMMAND_LINE_ERROR;
  }
  return rc;
}

#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
static int parse_codec_cache_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  if (!arg->Value)
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  if (!freerdp_settings_set_bool(settings, FreeRDP_BitmapCacheV3Enabled, TRUE))
    return COMMAND_LINE_ERROR;

  if (option_equals(arg->Value, "rfx"))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_RemoteFxCodec, TRUE))
      return COMMAND_LINE_ERROR;
  }
  else if (option_equals(arg->Value, "nsc"))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_NSCodec, TRUE))
      return COMMAND_LINE_ERROR;
  }

#if defined(WITH_JPEG)
  else if (option_equals(arg->Value, "jpeg"))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_JpegCodec, TRUE))
      return COMMAND_LINE_ERROR;

    if (freerdp_settings_get_uint32(settings, FreeRDP_JpegQuality) == 0)
    {
      if (!freerdp_settings_set_uint32(settings, FreeRDP_JpegQuality, 75))
        return COMMAND_LINE_ERROR;
    }
  }

#endif
  return 0;
}
#endif

static BOOL check_kbd_remap_valid(const char* token)
{
  UINT32 key = 0;
  UINT32 value = 0;

  WINPR_ASSERT(token);
  /* The remapping is only allowed for scancodes, so maximum is 999=999 */
  if (strlen(token) > 10)
    return FALSE;

  if (!freerdp_extract_key_value(token, &key, &value))
  {
    WLog_WARN(TAG, "/kbd:remap invalid entry '%s'", token);
    return FALSE;
  }
  return TRUE;
}

static int parse_host_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  if (!arg->Value)
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  if (!freerdp_settings_set_string(settings, FreeRDP_ServerHostname, nullptr))
    return COMMAND_LINE_ERROR_MEMORY;
  char* p = strchr(arg->Value, '[');

  /* ipv4 */
  if (!p)
  {
    const char scheme[] = "://";
    const char* val = strstr(arg->Value, scheme);
    if (val)
      val += strnlen(scheme, sizeof(scheme));
    else
      val = arg->Value;
    p = strchr(val, ':');

    if (p)
    {
      LONGLONG lval = 0;
      size_t length = 0;

      if (!value_to_int(&p[1], &lval, 1, UINT16_MAX))
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

      length = (size_t)(p - arg->Value);
      if (!freerdp_settings_set_uint32(settings, FreeRDP_ServerPort, (UINT16)lval))
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
      if (!freerdp_settings_set_string_len(settings, FreeRDP_ServerHostname, arg->Value,
                                           length))
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    }
    else
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_ServerHostname, arg->Value))
        return COMMAND_LINE_ERROR_MEMORY;
    }
  }
  else /* ipv6 */
  {
    size_t length = 0;
    char* p2 = strchr(arg->Value, ']');

    /* not a valid [] ipv6 addr found */
    if (!p2)
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

    length = (size_t)(p2 - p);
    if (!freerdp_settings_set_string_len(settings, FreeRDP_ServerHostname, p + 1, length - 1))
      return COMMAND_LINE_ERROR_MEMORY;

    if (*(p2 + 1) == ':')
    {
      LONGLONG val = 0;

      if (!value_to_int(&p2[2], &val, 0, UINT16_MAX))
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

      if (!freerdp_settings_set_uint32(settings, FreeRDP_ServerPort, (UINT16)val))
        return COMMAND_LINE_ERROR;
    }

    printf("hostname %s port %" PRIu32 "\n",
           freerdp_settings_get_string(settings, FreeRDP_ServerHostname),
           freerdp_settings_get_uint32(settings, FreeRDP_ServerPort));
  }
  return 0;
}

static int parse_redirect_prefer_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  size_t count = 0;
  char* cur = arg->Value;
  if (!arg->Value)
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

  UINT32 value = 0;
  do
  {
    UINT32 mask = 0;
    char* next = strchr(cur, ',');

    if (next)
    {
      *next = '\0';
      next++;
    }

    if (option_equals("fqdn", cur))
      mask = 0x06U;
    else if (option_equals("ip", cur))
      mask = 0x05U;
    else if (option_equals("netbios", cur))
      mask = 0x03U;
    else
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

    cur = next;
    mask = (mask & 0x07);
    value |= mask << (count * 3);
    count++;
  } while (cur != nullptr);

  if (count > 3)
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

  if (!freerdp_settings_set_uint32(settings, FreeRDP_RedirectionPreferType, value))
    return COMMAND_LINE_ERROR;

  return 0;
}

static int parse_prevent_session_lock_options(rdpSettings* settings,
                                              const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  if (!freerdp_settings_set_uint32(settings, FreeRDP_FakeMouseMotionInterval, 180))
    return COMMAND_LINE_ERROR_MEMORY;

  if (arg->Flags & COMMAND_LINE_VALUE_PRESENT)
  {
    LONGLONG val = 0;

    if (!value_to_int(arg->Value, &val, 1, UINT32_MAX))
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

    if (!freerdp_settings_set_uint32(settings, FreeRDP_FakeMouseMotionInterval, (UINT32)val))
      return COMMAND_LINE_ERROR_MEMORY;
  }

  return 0;
}

static int parse_vmconnect_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  if (!freerdp_settings_set_bool(settings, FreeRDP_VmConnectMode, TRUE))
    return COMMAND_LINE_ERROR;

  UINT32 port = freerdp_settings_get_uint32(settings, FreeRDP_ServerPort);
  if (port == 3389)
    port = 2179;

  if (!freerdp_settings_set_uint32(settings, FreeRDP_ServerPort, port))
    return COMMAND_LINE_ERROR;
  if (!freerdp_settings_set_bool(settings, FreeRDP_NegotiateSecurityLayer, FALSE))
    return COMMAND_LINE_ERROR;

  if (arg->Flags & COMMAND_LINE_VALUE_PRESENT)
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_SendPreconnectionPdu, TRUE))
      return COMMAND_LINE_ERROR;

    if (!freerdp_settings_set_string(settings, FreeRDP_PreconnectionBlob, arg->Value))
      return COMMAND_LINE_ERROR_MEMORY;
  }
  return 0;
}

static int parse_size_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  int status = 0;
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  if (!arg->Value)
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  char* p = strchr(arg->Value, 'x');

  if (p)
  {
    unsigned long w = 0;
    unsigned long h = 0;

    if (!parseSizeValue(arg->Value, &w, &h) || (w > UINT16_MAX) || (h > UINT16_MAX))
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

    if (!freerdp_settings_set_uint32(settings, FreeRDP_DesktopWidth, (UINT32)w))
      return COMMAND_LINE_ERROR;
    if (!freerdp_settings_set_uint32(settings, FreeRDP_DesktopHeight, (UINT32)h))
      return COMMAND_LINE_ERROR;
  }
  else
  {
    char* str = _strdup(arg->Value);
    if (!str)
      return COMMAND_LINE_ERROR_MEMORY;

    p = strchr(str, '%');

    if (p)
    {
      BOOL partial = FALSE;

      status = COMMAND_LINE_ERROR;
      if (strchr(p, 'w'))
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_PercentScreenUseWidth, TRUE))
          goto fail;
        partial = TRUE;
      }

      if (strchr(p, 'h'))
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_PercentScreenUseHeight, TRUE))
          goto fail;
        partial = TRUE;
      }

      if (!partial)
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_PercentScreenUseWidth, TRUE))
          goto fail;
        if (!freerdp_settings_set_bool(settings, FreeRDP_PercentScreenUseHeight, TRUE))
          goto fail;
      }

      *p = '\0';
      {
        LONGLONG val = 0;

        if (!value_to_int(str, &val, 0, 100))
        {
          status = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
          goto fail;
        }

        if (!freerdp_settings_set_uint32(settings, FreeRDP_PercentScreen, (UINT32)val))
          goto fail;
      }

      status = 0;
    }

  fail:
    free(str);
  }

  return status;
}

static int parse_monitors_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  if (arg->Flags & COMMAND_LINE_VALUE_PRESENT)
  {
    size_t count = 0;
    UINT32* MonitorIds = nullptr;
    char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);

    if (!ptr)
      return COMMAND_LINE_ERROR_MEMORY;

    if (count > 16)
      count = 16;

    if (!freerdp_settings_set_pointer_len(settings, FreeRDP_MonitorIds, nullptr, count))
    {
      CommandLineParserFree(ptr);
      return COMMAND_LINE_ERROR;
    }

    MonitorIds = freerdp_settings_get_pointer_array_writable(settings, FreeRDP_MonitorIds, 0);
    for (UINT32 i = 0; i < count; i++)
    {
      LONGLONG val = 0;

      if (!value_to_int(ptr[i], &val, 0, UINT16_MAX))
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

      MonitorIds[i] = (UINT32)val;
    }

    CommandLineParserFree(ptr);
  }

  return 0;
}

static int parse_dynamic_resolution_options(rdpSettings* settings,
                                            const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  const BOOL val = arg->Value != nullptr;

  if (val && freerdp_settings_get_bool(settings, FreeRDP_SmartSizing))
  {
    WLog_ERR(TAG, "Smart sizing and dynamic resolution are mutually exclusive options");
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  }

  if (!freerdp_settings_set_bool(settings, FreeRDP_SupportDisplayControl, val))
    return COMMAND_LINE_ERROR;
  if (!freerdp_settings_set_bool(settings, FreeRDP_DynamicResolutionUpdate, val))
    return COMMAND_LINE_ERROR;

  return 0;
}

static int parse_smart_sizing_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  BOOL val = TRUE;
  const char* size = nullptr;

  switch (parse_on_off_argument(arg))
  {
    case PARSE_ON:
      break;
    case PARSE_OFF:
      val = FALSE;
      break;
    case PARSE_NONE:
      size = arg->Value;
      break;
    case PARSE_FAIL:
    default:
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  }

  if (val && freerdp_settings_get_bool(settings, FreeRDP_DynamicResolutionUpdate))
  {
    WLog_ERR(TAG, "Smart sizing and dynamic resolution are mutually exclusive options");
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  }

  if (!freerdp_settings_set_bool(settings, FreeRDP_SmartSizing, val))
    return COMMAND_LINE_ERROR;

  if (size)
  {
    unsigned long w = 0;
    unsigned long h = 0;

    if (!parseSizeValue(size, &w, &h) || (w > UINT16_MAX) || (h > UINT16_MAX))
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

    if (!freerdp_settings_set_uint32(settings, FreeRDP_SmartSizingWidth, (UINT32)w))
      return COMMAND_LINE_ERROR;
    if (!freerdp_settings_set_uint32(settings, FreeRDP_SmartSizingHeight, (UINT32)h))
      return COMMAND_LINE_ERROR;
  }
  return 0;
}

static int parse_bpp_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  LONGLONG val = 0;

  if (!value_to_int(arg->Value, &val, 0, UINT32_MAX))
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

  switch (val)
  {
    case 32:
    case 24:
    case 16:
    case 15:
    case 8:
      if (!freerdp_settings_set_uint32(settings, FreeRDP_ColorDepth, (UINT32)val))
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
      break;

    default:
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  }
  return 0;
}

static int parse_kbd_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  int rc = CHANNEL_RC_OK;
  size_t count = 0;
  char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);
  if (!ptr || (count == 0))
    rc = COMMAND_LINE_ERROR;
  else
  {
    for (size_t x = 0; x < count; x++)
    {
      const char* val = ptr[x];

      if (option_starts_with("remap:", val))
      {
        /* Append this new occurrence to the already existing list */
        char* now = _strdup(&val[6]);
        const char* old =
            freerdp_settings_get_string(settings, FreeRDP_KeyboardRemappingList);

        /* Basic sanity test. Entries must be like <key>=<value>, e.g. 1=2 */
        if (!check_kbd_remap_valid(now))
          rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
        else if (old)
        {
          const size_t olen = strlen(old);
          const size_t alen = strlen(now);
          const size_t tlen = olen + alen + 2;
          char* tmp = calloc(tlen, sizeof(char));
          if (!tmp)
            rc = COMMAND_LINE_ERROR_MEMORY;
          else
            (void)_snprintf(tmp, tlen, "%s,%s", old, now);
          free(now);
          now = tmp;
        }

        if (rc == 0)
        {
          if (!freerdp_settings_set_string(settings, FreeRDP_KeyboardRemappingList, now))
            rc = COMMAND_LINE_ERROR;
        }
        free(now);
      }
      else if (option_starts_with("layout:", val))
      {
        rc = parse_kbd_layout(settings, &val[7]);
      }
      else if (option_starts_with("lang:", val))
      {
        LONGLONG ival = 0;
        const BOOL isInt = value_to_int(&val[5], &ival, 1, UINT32_MAX);
        if (!isInt)
          ival = freerdp_get_locale_id_from_string(&val[5]);

        if (ival <= 0)
          rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
        else if (!freerdp_settings_set_uint32(settings, FreeRDP_KeyboardCodePage,
                                              (UINT32)ival))
          rc = COMMAND_LINE_ERROR;
      }
      else if (option_starts_with("type:", val))
      {
        LONGLONG ival = 0;
        const BOOL isInt = value_to_int(&val[5], &ival, 1, UINT32_MAX);
        if (!isInt)
          rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
        else if (!freerdp_settings_set_uint32(settings, FreeRDP_KeyboardType, (UINT32)ival))
          rc = COMMAND_LINE_ERROR;
      }
      else if (option_starts_with("subtype:", val))
      {
        LONGLONG ival = 0;
        const BOOL isInt = value_to_int(&val[8], &ival, 1, UINT32_MAX);
        if (!isInt)
          rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
        else if (!freerdp_settings_set_uint32(settings, FreeRDP_KeyboardSubType,
                                              (UINT32)ival))
          rc = COMMAND_LINE_ERROR;
      }
      else if (option_starts_with("fn-key:", val))
      {
        LONGLONG ival = 0;
        const BOOL isInt = value_to_int(&val[7], &ival, 1, UINT32_MAX);
        if (!isInt)
          rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
        else if (!freerdp_settings_set_uint32(settings, FreeRDP_KeyboardFunctionKey,
                                              (UINT32)ival))
          rc = COMMAND_LINE_ERROR;
      }
      else if (option_starts_with("unicode", val))
      {
        const PARSE_ON_OFF_RESULT bval = parse_on_off_option(val);
        if (bval == PARSE_FAIL)
          rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
        else if (!freerdp_settings_set_bool(settings, FreeRDP_UnicodeInput,
                                            bval != PARSE_OFF))
          rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
      }
      else if (option_starts_with("pipe:", val))
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_UnicodeInput, TRUE))
          rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
        else if (!freerdp_settings_set_string(settings, FreeRDP_KeyboardPipeName, &val[5]))
          rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
      }
#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
      else if (count == 1)
      {
        /* Legacy, allow /kbd:<value> for setting keyboard layout */
        rc = parse_kbd_layout(settings, val);
      }
#endif
      else
        rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

      if (rc != 0)
        break;
    }
  }
  CommandLineParserFree(ptr);
  return rc;
}

static int parse_proxy_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  /* initial value */
  if (!freerdp_settings_set_uint32(settings, FreeRDP_ProxyType, PROXY_TYPE_HTTP))
    return COMMAND_LINE_ERROR_MEMORY;

  if (arg->Flags & COMMAND_LINE_VALUE_PRESENT)
  {
    const char* cur = arg->Value;

    if (!cur)
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    /* value is [scheme://][user:password@]hostname:port */
    if (!proxy_parse_uri(settings, cur))
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  }
  else
  {
    WLog_ERR(TAG, "Option http-proxy needs argument.");
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  }
  return 0;
}

static int parse_dump_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  BOOL failed = FALSE;
  size_t count = 0;
  char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);
  if (!ptr)
    failed = TRUE;
  else
  {
    BOOL modernsyntax = FALSE;
    BOOL oldsyntax = FALSE;
    for (size_t x = 0; (x < count) && !failed; x++)
    {
      const char* carg = ptr[x];
      if (option_starts_with("file:", carg))
      {
        const char* val = &carg[5];
        if (oldsyntax)
          failed = TRUE;
        else if (!freerdp_settings_set_string(settings, FreeRDP_TransportDumpFile, val))
          failed = TRUE;
        modernsyntax = TRUE;
      }
      else if (option_equals("replay", carg))
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_TransportDump, FALSE))
          failed = TRUE;
        else if (!freerdp_settings_set_bool(settings, FreeRDP_TransportDumpReplay, TRUE))
          failed = TRUE;
      }
      else if (option_equals("record", carg))
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_TransportDump, TRUE))
          failed = TRUE;
        else if (!freerdp_settings_set_bool(settings, FreeRDP_TransportDumpReplay, FALSE))
          failed = TRUE;
      }
      else if (option_equals("nodelay", carg))
      {
        if (oldsyntax)
          failed = TRUE;
        else if (!freerdp_settings_set_bool(settings, FreeRDP_TransportDumpReplayNodelay,
                                            TRUE))
          failed = TRUE;
        modernsyntax = TRUE;
      }
      else
      {
        /* compat:
         * support syntax record,<filename> and replay,<filename>
         */
        if (modernsyntax)
          failed = TRUE;
        else if (!freerdp_settings_set_string(settings, FreeRDP_TransportDumpFile, carg))
          failed = TRUE;
        oldsyntax = TRUE;
      }
    }

    if (oldsyntax && (count != 2))
      failed = TRUE;
  }
  CommandLineParserFree(ptr);
  if (failed)
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  return 0;
}

static int parse_clipboard_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  if (arg->Value == BoolValueTrue || arg->Value == BoolValueFalse)
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_RedirectClipboard,
                                   (arg->Value == BoolValueTrue)))
      return COMMAND_LINE_ERROR;
  }
  else
  {
    int rc = 0;
    size_t count = 0;
    char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);
    for (size_t x = 0; (x < count) && (rc == 0); x++)
    {
      const char* usesel = "use-selection:";

      const char* cur = ptr[x];
      if (option_starts_with(usesel, cur))
      {
        const char* val = &cur[strlen(usesel)];
        if (!freerdp_settings_set_string(settings, FreeRDP_ClipboardUseSelection, val))
          rc = COMMAND_LINE_ERROR_MEMORY;
        if (!freerdp_settings_set_bool(settings, FreeRDP_RedirectClipboard, TRUE))
          return COMMAND_LINE_ERROR;
      }
      else if (option_starts_with("direction-to", cur))
      {
        const UINT32 mask =
            freerdp_settings_get_uint32(settings, FreeRDP_ClipboardFeatureMask) &
            (uint32_t)~(CLIPRDR_FLAG_LOCAL_TO_REMOTE | CLIPRDR_FLAG_REMOTE_TO_LOCAL);
        const PARSE_CLIP_DIR_RESULT bval = parse_clip_direciton_to_option(cur);
        UINT32 bflags = 0;
        switch (bval)
        {
          case CLIP_DIR_PARSE_ALL:
            bflags |= CLIPRDR_FLAG_LOCAL_TO_REMOTE | CLIPRDR_FLAG_REMOTE_TO_LOCAL;
            break;
          case CLIP_DIR_PARSE_LOCAL:
            bflags |= CLIPRDR_FLAG_REMOTE_TO_LOCAL;
            break;
          case CLIP_DIR_PARSE_REMOTE:
            bflags |= CLIPRDR_FLAG_LOCAL_TO_REMOTE;
            break;
          case CLIP_DIR_PARSE_OFF:
            break;
          case CLIP_DIR_PARSE_FAIL:
          default:
            rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
            break;
        }

        if (!freerdp_settings_set_uint32(settings, FreeRDP_ClipboardFeatureMask,
                                         mask | bflags))
          rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
      }
      else if (option_starts_with("files-to", cur))
      {
        const UINT32 mask =
            freerdp_settings_get_uint32(settings, FreeRDP_ClipboardFeatureMask) &
            (uint32_t)~(CLIPRDR_FLAG_LOCAL_TO_REMOTE_FILES |
                        CLIPRDR_FLAG_REMOTE_TO_LOCAL_FILES);
        const PARSE_CLIP_DIR_RESULT bval = parse_clip_direciton_to_option(cur);
        UINT32 bflags = 0;
        switch (bval)
        {
          case CLIP_DIR_PARSE_ALL:
            bflags |=
                CLIPRDR_FLAG_LOCAL_TO_REMOTE_FILES | CLIPRDR_FLAG_REMOTE_TO_LOCAL_FILES;
            break;
          case CLIP_DIR_PARSE_LOCAL:
            bflags |= CLIPRDR_FLAG_REMOTE_TO_LOCAL_FILES;
            break;
          case CLIP_DIR_PARSE_REMOTE:
            bflags |= CLIPRDR_FLAG_LOCAL_TO_REMOTE_FILES;
            break;
          case CLIP_DIR_PARSE_OFF:
            break;
          case CLIP_DIR_PARSE_FAIL:
          default:
            rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
            break;
        }

        if (!freerdp_settings_set_uint32(settings, FreeRDP_ClipboardFeatureMask,
                                         mask | bflags))
          rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
      }
      else
        rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    }
    CommandLineParserFree(ptr);

    if (rc)
      return rc;
  }
  return 0;
}

static int parse_audio_mode_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  LONGLONG val = 0;
  if (!arg->Value)
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

  if (strcmp(arg->Value, "none") == 0)
    val = AUDIO_MODE_NONE;
  else if (strcmp(arg->Value, "redirect") == 0)
    val = AUDIO_MODE_REDIRECT;
  else if (strcmp(arg->Value, "server") == 0)
    val = AUDIO_MODE_PLAY_ON_SERVER;
  else if (!value_to_int(arg->Value, &val, 0, UINT32_MAX))
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

  switch (val)
  {
    case AUDIO_MODE_REDIRECT:
      if (!freerdp_settings_set_bool(settings, FreeRDP_AudioPlayback, TRUE))
        return COMMAND_LINE_ERROR;
      break;

    case AUDIO_MODE_PLAY_ON_SERVER:
      if (!freerdp_settings_set_bool(settings, FreeRDP_RemoteConsoleAudio, TRUE))
        return COMMAND_LINE_ERROR;
      break;

    case AUDIO_MODE_NONE:
      if (!freerdp_settings_set_bool(settings, FreeRDP_AudioPlayback, FALSE))
        return COMMAND_LINE_ERROR;
      if (!freerdp_settings_set_bool(settings, FreeRDP_RemoteConsoleAudio, FALSE))
        return COMMAND_LINE_ERROR;
      break;

    default:
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  }
  return 0;
}

static int parse_network_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  UINT32 type = CONNECTION_TYPE_INVALID;

  if (option_equals(arg->Value, "invalid"))
    type = CONNECTION_TYPE_INVALID;
  else if (option_equals(arg->Value, "modem"))
    type = CONNECTION_TYPE_MODEM;
  else if (option_equals(arg->Value, "broadband"))
    type = CONNECTION_TYPE_BROADBAND_HIGH;
  else if (option_equals(arg->Value, "broadband-low"))
    type = CONNECTION_TYPE_BROADBAND_LOW;
  else if (option_equals(arg->Value, "broadband-high"))
    type = CONNECTION_TYPE_BROADBAND_HIGH;
  else if (option_equals(arg->Value, "wan"))
    type = CONNECTION_TYPE_WAN;
  else if (option_equals(arg->Value, "lan"))
    type = CONNECTION_TYPE_LAN;
  else if ((option_equals(arg->Value, "autodetect")) || (option_equals(arg->Value, "auto")) ||
           (option_equals(arg->Value, "detect")))
  {
    type = CONNECTION_TYPE_AUTODETECT;
  }
  else
  {
    LONGLONG val = 0;

    if (!value_to_int(arg->Value, &val, 0, 7))
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

    type = (UINT32)val;
  }

  if (!freerdp_set_connection_type(settings, type))
    return COMMAND_LINE_ERROR;
  return 0;
}

static int parse_sec_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  size_t count = 0;
  char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);
  if (count == 0)
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

  FreeRDP_Settings_Keys_Bool singleOptionWithoutOnOff = FreeRDP_BOOL_UNUSED;
  for (size_t x = 0; x < count; x++)
  {
    const char* cur = ptr[x];
    const PARSE_ON_OFF_RESULT bval = parse_on_off_option(cur);
    if (bval == PARSE_FAIL)
    {
      CommandLineParserFree(ptr);
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    }

    const BOOL val = bval != PARSE_OFF;
    FreeRDP_Settings_Keys_Bool id = FreeRDP_BOOL_UNUSED;
    if (option_starts_with("rdp", cur)) /* Standard RDP */
    {
      id = FreeRDP_RdpSecurity;
      if (!freerdp_settings_set_bool(settings, FreeRDP_UseRdpSecurityLayer, val))
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    }
    else if (option_starts_with("tls", cur)) /* TLS */
      id = FreeRDP_TlsSecurity;
    else if (option_starts_with("nla", cur)) /* NLA */
      id = FreeRDP_NlaSecurity;
    else if (option_starts_with("ext", cur)) /* NLA Extended */
      id = FreeRDP_ExtSecurity;
    else if (option_equals("aad", cur)) /* RDSAAD */
      id = FreeRDP_AadSecurity;
    else
    {
      WLog_ERR(TAG, "unknown protocol security: %s", arg->Value);
      CommandLineParserFree(ptr);
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    }

    if ((bval == PARSE_NONE) && (count == 1))
      singleOptionWithoutOnOff = id;
    if (!freerdp_settings_set_bool(settings, id, val))
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  }

  if (singleOptionWithoutOnOff != FreeRDP_BOOL_UNUSED)
  {
    const FreeRDP_Settings_Keys_Bool options[] = { FreeRDP_AadSecurity,
                                                 FreeRDP_UseRdpSecurityLayer,
                                                 FreeRDP_RdpSecurity, FreeRDP_NlaSecurity,
                                                 FreeRDP_TlsSecurity };

    for (size_t i = 0; i < ARRAYSIZE(options); i++)
    {
      if (!freerdp_settings_set_bool(settings, options[i], FALSE))
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    }

    if (!freerdp_settings_set_bool(settings, singleOptionWithoutOnOff, TRUE))
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    if (singleOptionWithoutOnOff == FreeRDP_RdpSecurity)
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_UseRdpSecurityLayer, TRUE))
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    }
  }
  CommandLineParserFree(ptr);
  return 0;
}

static int parse_encryption_methods_options(rdpSettings* settings,
                                            const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  if (arg->Flags & COMMAND_LINE_VALUE_PRESENT)
  {
    size_t count = 0;
    char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);

    UINT32 EncryptionMethods = 0;
    for (UINT32 i = 0; i < count; i++)
    {
      if (option_equals(ptr[i], "40"))
        EncryptionMethods |= ENCRYPTION_METHOD_40BIT;
      else if (option_equals(ptr[i], "56"))
        EncryptionMethods |= ENCRYPTION_METHOD_56BIT;
      else if (option_equals(ptr[i], "128"))
        EncryptionMethods |= ENCRYPTION_METHOD_128BIT;
      else if (option_equals(ptr[i], "FIPS"))
        EncryptionMethods |= ENCRYPTION_METHOD_FIPS;
      else
        WLog_ERR(TAG, "unknown encryption method '%s'", ptr[i]);
    }

    if (!freerdp_settings_set_uint32(settings, FreeRDP_EncryptionMethods, EncryptionMethods))
      return COMMAND_LINE_ERROR;
    CommandLineParserFree(ptr);
  }
  return 0;
}

static int parse_cert_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  int rc = 0;
  size_t count = 0;
  char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);
  for (size_t x = 0; (x < count) && (rc == 0); x++)
  {
    const char deny[] = "deny";
    const char ignore[] = "ignore";
    const char tofu[] = "tofu";
    const char name[] = "name:";
    const char fingerprints[] = "fingerprint:";

    const char* cur = ptr[x];
    if (option_equals(deny, cur))
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_AutoDenyCertificate, TRUE))
        return COMMAND_LINE_ERROR;
    }
    else if (option_equals(ignore, cur))
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_IgnoreCertificate, TRUE))
        return COMMAND_LINE_ERROR;
    }
    else if (option_equals(tofu, cur))
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_AutoAcceptCertificate, TRUE))
        return COMMAND_LINE_ERROR;
    }
    else if (option_starts_with(name, cur))
    {
      const char* val = &cur[strnlen(name, sizeof(name))];
      if (!freerdp_settings_set_string(settings, FreeRDP_CertificateName, val))
        rc = COMMAND_LINE_ERROR_MEMORY;
    }
    else if (option_starts_with(fingerprints, cur))
    {
      const char* val = &cur[strnlen(fingerprints, sizeof(fingerprints))];
      if (!freerdp_settings_append_string(settings, FreeRDP_CertificateAcceptedFingerprints,
                                          ",", val))
        rc = COMMAND_LINE_ERROR_MEMORY;
    }
    else
      rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  }
  CommandLineParserFree(ptr);

  return rc;
}

static int parse_mouse_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  size_t count = 0;
  char** ptr = CommandLineParseCommaSeparatedValuesEx("mouse", arg->Value, &count);
  int rc = 0;
  if (ptr)
  {
    for (size_t x = 1; x < count; x++)
    {
      const char* cur = ptr[x];

      const PARSE_ON_OFF_RESULT bval = parse_on_off_option(cur);
      if (bval == PARSE_FAIL)
        rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
      else
      {
        const BOOL val = bval != PARSE_OFF;

        if (option_starts_with("relative", cur))
        {
          if (!freerdp_settings_set_bool(settings, FreeRDP_MouseUseRelativeMove, val))
            rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
        }
        else if (option_starts_with("grab", cur))
        {
          if (!freerdp_settings_set_bool(settings, FreeRDP_GrabMouse, val))
            rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
        }
      }

      if (rc != 0)
        break;
    }
  }
  CommandLineParserFree(ptr);

  return rc;
}

static int parse_floatbar_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  /* Defaults are enabled, visible, sticky, fullscreen */
  UINT32 Floatbar = 0x0017;

  if (arg->Value)
  {
    char* start = arg->Value;

    do
    {
      char* cur = start;
      start = strchr(start, ',');

      if (start)
      {
        *start = '\0';
        start = start + 1;
      }

      /* sticky:[on|off] */
      if (option_starts_with("sticky:", cur))
      {
        Floatbar &= ~0x02u;

        const PARSE_ON_OFF_RESULT bval = parse_on_off_option(cur);
        switch (bval)
        {
          case PARSE_ON:
          case PARSE_NONE:
            Floatbar |= 0x02u;
            break;
          case PARSE_OFF:
            Floatbar &= ~0x02u;
            break;
          case PARSE_FAIL:
          default:
            return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
        }
      }
      /* default:[visible|hidden] */
      else if (option_starts_with("default:", cur))
      {
        const char* val = cur + 8;
        Floatbar &= ~0x04u;

        if (option_equals("visible", val))
          Floatbar |= 0x04u;
        else if (option_equals("hidden", val))
          Floatbar &= ~0x04u;
        else
          return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
      }
      /* show:[always|fullscreen|window] */
      else if (option_starts_with("show:", cur))
      {
        const char* val = cur + 5;
        Floatbar &= ~0x30u;

        if (option_equals("always", val))
          Floatbar |= 0x30u;
        else if (option_equals("fullscreen", val))
          Floatbar |= 0x10u;
        else if (option_equals("window", val))
          Floatbar |= 0x20u;
        else
          return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
      }
      else
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
    } while (start);
  }
  if (!freerdp_settings_set_uint32(settings, FreeRDP_Floatbar, Floatbar))
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  return 0;
}

static int parse_reconnect_cookie_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  BYTE* base64 = nullptr;
  size_t length = 0;
  if (!arg->Value)
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

  crypto_base64_decode((const char*)(arg->Value), strlen(arg->Value), &base64, &length);

  if ((base64 != nullptr) && (length == sizeof(ARC_SC_PRIVATE_PACKET)))
  {
    if (!freerdp_settings_set_pointer_len(settings, FreeRDP_ServerAutoReconnectCookie, base64,
                                          1))
      return COMMAND_LINE_ERROR;
  }
  else
  {
    WLog_ERR(TAG, "reconnect-cookie:  invalid base64 '%s'", arg->Value);
  }

  free(base64);
  return 0;
}

static BOOL set_monitor_override(rdpSettings* settings, uint64_t flag)
{
  const FreeRDP_Settings_Keys_UInt64 key = FreeRDP_MonitorOverrideFlags;
  uint64_t mask = freerdp_settings_get_uint64(settings, key);
  mask |= flag;
  return freerdp_settings_set_uint64(settings, key, mask);
}

static int parse_scale_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  LONGLONG val = 0;

  if (!value_to_int(arg->Value, &val, 100, 180))
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

  switch (val)
  {
    case 100:
    case 140:
    case 180:
      if (!freerdp_settings_set_uint32(settings, FreeRDP_DesktopScaleFactor, (UINT32)val))
        return COMMAND_LINE_ERROR;
      if (!freerdp_settings_set_uint32(settings, FreeRDP_DeviceScaleFactor, (UINT32)val))
        return COMMAND_LINE_ERROR;
      if (!set_monitor_override(settings, FREERDP_MONITOR_OVERRIDE_DESKTOP_SCALE |
                                              FREERDP_MONITOR_OVERRIDE_DEVICE_SCALE))
        return fail_at(arg, COMMAND_LINE_ERROR);
      break;

    default:
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  }
  return 0;
}

static int parse_scale_device_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  LONGLONG val = 0;

  if (!value_to_int(arg->Value, &val, 100, 180))
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

  switch (val)
  {
    case 100:
    case 140:
    case 180:
      if (!freerdp_settings_set_uint32(settings, FreeRDP_DeviceScaleFactor, (UINT32)val))
        return COMMAND_LINE_ERROR;
      if (!set_monitor_override(settings, FREERDP_MONITOR_OVERRIDE_DEVICE_SCALE))
        return fail_at(arg, COMMAND_LINE_ERROR);
      break;

    default:
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  }
  return 0;
}

static int parse_smartcard_logon_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  size_t count = 0;

  if (!freerdp_settings_set_bool(settings, FreeRDP_SmartcardLogon, TRUE))
    return COMMAND_LINE_ERROR;

  char** ptr = CommandLineParseCommaSeparatedValuesEx("smartcard-logon", arg->Value, &count);
  if (ptr)
  {
    const CmdLineSubOptions opts[] = {
      { "cert:", FreeRDP_SmartcardCertificate, CMDLINE_SUBOPTION_FILE,
        setSmartcardEmulation },
      { "key:", FreeRDP_SmartcardPrivateKey, CMDLINE_SUBOPTION_FILE, setSmartcardEmulation },
      { "pin:", FreeRDP_Password, CMDLINE_SUBOPTION_STRING, nullptr },
      { "csp:", FreeRDP_CspName, CMDLINE_SUBOPTION_STRING, nullptr },
      { "reader:", FreeRDP_ReaderName, CMDLINE_SUBOPTION_STRING, nullptr },
      { "card:", FreeRDP_CardName, CMDLINE_SUBOPTION_STRING, nullptr },
      { "container:", FreeRDP_ContainerName, CMDLINE_SUBOPTION_STRING, nullptr }
    };

    for (size_t x = 1; x < count; x++)
    {
      const char* cur = ptr[x];
      if (!parseSubOptions(settings, opts, ARRAYSIZE(opts), cur))
      {
        CommandLineParserFree(ptr);
        return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
      }
    }
  }
  CommandLineParserFree(ptr);
  return 0;
}

static int parse_tune_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  size_t count = 0;
  char** ptr = CommandLineParseCommaSeparatedValuesEx("tune", arg->Value, &count);
  if (!ptr)
    return COMMAND_LINE_ERROR;
  for (size_t x = 1; x < count; x++)
  {
    const char* cur = ptr[x];
    char* sep = strchr(cur, ':');
    if (!sep)
    {
      CommandLineParserFree(ptr);
      return COMMAND_LINE_ERROR;
    }
    *sep++ = '\0';
    if (!freerdp_settings_set_value_for_name(settings, cur, sep))
    {
      CommandLineParserFree(ptr);
      return COMMAND_LINE_ERROR;
    }
  }

  CommandLineParserFree(ptr);
  return 0;
}

static int parse_app_option_program(rdpSettings* settings, const char* cmd)
{
  const FreeRDP_Settings_Keys_Bool ids[] = { FreeRDP_RemoteApplicationMode,
                                           FreeRDP_RemoteAppLanguageBarSupported,
                                           FreeRDP_Workarea, FreeRDP_DisableWallpaper,
                                           FreeRDP_DisableFullWindowDrag };

  if (!freerdp_settings_set_string(settings, FreeRDP_RemoteApplicationProgram, cmd))
    return COMMAND_LINE_ERROR_MEMORY;

  for (size_t y = 0; y < ARRAYSIZE(ids); y++)
  {
    if (!freerdp_settings_set_bool(settings, ids[y], TRUE))
      return COMMAND_LINE_ERROR;
  }
  return CHANNEL_RC_OK;
}

static int parse_aad_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  int rc = CHANNEL_RC_OK;
  size_t count = 0;
  char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);
  if (!ptr || (count == 0))
    rc = COMMAND_LINE_ERROR;
  else
  {
    struct app_map
    {
      const char* name;
      SSIZE_T id;
      int (*fkt)(rdpSettings* settings, const char* value);
    };
    const struct app_map amap[] = {
      { "tenantid:", FreeRDP_GatewayAvdAadtenantid, nullptr },
      { "ad:", FreeRDP_GatewayAzureActiveDirectory, nullptr },
      { "avd-access:", FreeRDP_GatewayAvdAccessAadFormat, nullptr },
      { "avd-token:", FreeRDP_GatewayAvdAccessTokenFormat, nullptr },
      { "avd-scope:", FreeRDP_GatewayAvdScope, nullptr }

    };
    for (size_t x = 0; x < count; x++)
    {
      BOOL handled = FALSE;
      const char* val = ptr[x];

      if (option_starts_with("use-tenantid", val))
      {
        PARSE_ON_OFF_RESULT bval = parse_on_off_option(val);
        if (bval == PARSE_FAIL)
        {
          rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
          break;
        }
        else
        {
          if (!freerdp_settings_set_bool(settings, FreeRDP_GatewayAvdUseTenantid,
                                         bval != PARSE_OFF))
          {
            rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
            break;
          }
        }
        continue;
      }
      for (size_t y = 0; y < ARRAYSIZE(amap); y++)
      {
        const struct app_map* cur = &amap[y];
        if (option_starts_with(cur->name, val))
        {
          const char* xval = &val[strlen(cur->name)];
          if (cur->fkt)
            rc = cur->fkt(settings, xval);
          else
          {
            const char* name = freerdp_settings_get_name_for_key(cur->id);
            if (!freerdp_settings_set_value_for_name(settings, name, xval))
              rc = COMMAND_LINE_ERROR_MEMORY;
          }

          handled = TRUE;
          break;
        }
      }

      if (!handled)
        rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

      if (rc != 0)
        break;
    }
  }

  CommandLineParserFree(ptr);
  return rc;
}

static int parse_app_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  int rc = CHANNEL_RC_OK;
  size_t count = 0;
  char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);
  if (!ptr || (count == 0))
    rc = COMMAND_LINE_ERROR;
  else
  {
    struct app_map
    {
      const char* name;
      SSIZE_T id;
      int (*fkt)(rdpSettings* settings, const char* value);
    };
    const struct app_map amap[] = {
      { "program:", FreeRDP_RemoteApplicationProgram, parse_app_option_program },
      { "workdir:", FreeRDP_RemoteApplicationWorkingDir, nullptr },
      { "name:", FreeRDP_RemoteApplicationName, nullptr },
      { "icon:", FreeRDP_RemoteApplicationIcon, nullptr },
      { "cmd:", FreeRDP_RemoteApplicationCmdLine, nullptr },
      { "file:", FreeRDP_RemoteApplicationFile, nullptr },
      { "guid:", FreeRDP_RemoteApplicationGuid, nullptr },
      { "hidef:", FreeRDP_HiDefRemoteApp, nullptr }
    };
    for (size_t x = 0; x < count; x++)
    {
      BOOL handled = FALSE;
      const char* val = ptr[x];

      for (size_t y = 0; y < ARRAYSIZE(amap); y++)
      {
        const struct app_map* cur = &amap[y];
        if (option_starts_with(cur->name, val))
        {
          const char* xval = &val[strlen(cur->name)];
          if (cur->fkt)
            rc = cur->fkt(settings, xval);
          else
          {
            const char* name = freerdp_settings_get_name_for_key(cur->id);
            if (!freerdp_settings_set_value_for_name(settings, name, xval))
              rc = COMMAND_LINE_ERROR_MEMORY;
          }

          handled = TRUE;
          break;
        }
      }

#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
      if (!handled && (count == 1))
      {
        /* Legacy path, allow /app:command and /app:||command syntax */
        rc = parse_app_option_program(settings, val);
      }
      else
#endif
          if (!handled)
        rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

      if (rc != 0)
        break;
    }
  }

  CommandLineParserFree(ptr);
  return rc;
}

static int parse_cache_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  int rc = CHANNEL_RC_OK;
  size_t count = 0;
  char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);
  if (!ptr || (count == 0))
    return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;

  for (size_t x = 0; x < count; x++)
  {
    const char* val = ptr[x];

    if (option_starts_with("codec:", val))
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_BitmapCacheV3Enabled, TRUE))
        rc = COMMAND_LINE_ERROR;
      else if (option_equals(arg->Value, "rfx"))
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_RemoteFxCodec, TRUE))
          rc = COMMAND_LINE_ERROR;
      }
      else if (option_equals(arg->Value, "nsc"))
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_NSCodec, TRUE))
          rc = COMMAND_LINE_ERROR;
      }

#if defined(WITH_JPEG)
      else if (option_equals(arg->Value, "jpeg"))
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_JpegCodec, TRUE))
          rc = COMMAND_LINE_ERROR;

        if (freerdp_settings_get_uint32(settings, FreeRDP_JpegQuality) == 0)
        {
          if (!freerdp_settings_set_uint32(settings, FreeRDP_JpegQuality, 75))
            return COMMAND_LINE_ERROR;
        }
      }

#endif
    }
    else if (option_starts_with("persist-file:", val))
    {

      if (!freerdp_settings_set_string(settings, FreeRDP_BitmapCachePersistFile, &val[13]))
        rc = COMMAND_LINE_ERROR_MEMORY;
      else if (!freerdp_settings_set_bool(settings, FreeRDP_BitmapCachePersistEnabled, TRUE))
        rc = COMMAND_LINE_ERROR;
    }
    else
    {
      const PARSE_ON_OFF_RESULT bval = parse_on_off_option(val);
      if (bval == PARSE_FAIL)
        rc = COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
      else
      {
        if (option_starts_with("bitmap", val))
        {
          if (!freerdp_settings_set_bool(settings, FreeRDP_BitmapCacheEnabled,
                                         bval != PARSE_OFF))
            rc = COMMAND_LINE_ERROR;
        }
        else if (option_starts_with("glyph", val))
        {
          if (!freerdp_settings_set_uint32(settings, FreeRDP_GlyphSupportLevel,
                                           bval != PARSE_OFF ? GLYPH_SUPPORT_FULL
                                                             : GLYPH_SUPPORT_NONE))
            rc = COMMAND_LINE_ERROR;
        }
        else if (option_starts_with("persist", val))
        {
          if (!freerdp_settings_set_bool(settings, FreeRDP_BitmapCachePersistEnabled,
                                         bval != PARSE_OFF))
            rc = COMMAND_LINE_ERROR;
        }
        else if (option_starts_with("offscreen", val))
        {
          if (!freerdp_settings_set_uint32(settings, FreeRDP_OffscreenSupportLevel,
                                           bval != PARSE_OFF))
            rc = COMMAND_LINE_ERROR;
        }
      }
    }
  }

  CommandLineParserFree(ptr);
  return rc;
}

static BOOL parse_gateway_host_option(rdpSettings* settings, const char* host)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(host);

  char* name = nullptr;
  int port = -1;
  if (!freerdp_parse_hostname(host, &name, &port))
    return FALSE;
  const BOOL rc = freerdp_settings_set_string(settings, FreeRDP_GatewayHostname, name);
  free(name);
  if (!rc)
    return FALSE;
  if (port != -1)
  {
    if (!freerdp_settings_set_uint32(settings, FreeRDP_GatewayPort, (UINT32)port))
      return FALSE;
  }
  if (!freerdp_settings_set_bool(settings, FreeRDP_GatewayUseSameCredentials, TRUE))
    return FALSE;
  if (!freerdp_set_gateway_usage_method(settings, TSC_PROXY_MODE_DIRECT))
    return FALSE;

  return TRUE;
}

static BOOL parse_gateway_cred_option(rdpSettings* settings, const char* value,
                                      FreeRDP_Settings_Keys_String what)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(value);

  switch (what)
  {
    case FreeRDP_GatewayUsername:
      if (!freerdp_parse_username_settings(value, settings, FreeRDP_GatewayUsername,
                                           FreeRDP_GatewayDomain))
        return FALSE;
      break;
    default:
      if (!freerdp_settings_set_string(settings, what, value))
        return FALSE;
      break;
  }

  return freerdp_settings_set_bool(settings, FreeRDP_GatewayUseSameCredentials, FALSE);
}

static BOOL parse_gateway_type_option(rdpSettings* settings, const char* value)
{
  BOOL rc = FALSE;

  WINPR_ASSERT(settings);
  WINPR_ASSERT(value);

  if (option_equals(value, "rpc"))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_GatewayRpcTransport, TRUE) ||
        !freerdp_settings_set_bool(settings, FreeRDP_GatewayHttpTransport, FALSE) ||
        !freerdp_settings_set_bool(settings, FreeRDP_GatewayHttpUseWebsockets, FALSE) ||
        !freerdp_settings_set_bool(settings, FreeRDP_GatewayArmTransport, FALSE))
      return FALSE;
    rc = TRUE;
  }
  else
  {
    if (option_equals(value, "http"))
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_GatewayRpcTransport, FALSE) ||
          !freerdp_settings_set_bool(settings, FreeRDP_GatewayHttpTransport, TRUE) ||
          !freerdp_settings_set_bool(settings, FreeRDP_GatewayArmTransport, FALSE))
        return FALSE;
      rc = TRUE;
    }
    else if (option_equals(value, "auto"))
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_GatewayRpcTransport, TRUE) ||
          !freerdp_settings_set_bool(settings, FreeRDP_GatewayHttpTransport, TRUE) ||
          !freerdp_settings_set_bool(settings, FreeRDP_GatewayArmTransport, FALSE))
        return FALSE;
      rc = TRUE;
    }
    else if (option_equals(value, "arm"))
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_GatewayRpcTransport, FALSE) ||
          !freerdp_settings_set_bool(settings, FreeRDP_GatewayHttpTransport, FALSE) ||
          !freerdp_settings_set_bool(settings, FreeRDP_GatewayHttpUseWebsockets, FALSE) ||
          !freerdp_settings_set_bool(settings, FreeRDP_GatewayArmTransport, TRUE))
        return FALSE;
      rc = TRUE;
    }
  }
  return rc;
}

static BOOL parse_gateway_usage_option(rdpSettings* settings, const char* value)
{
  UINT32 type = 0;

  WINPR_ASSERT(settings);
  WINPR_ASSERT(value);

  if (option_equals(value, "none"))
    type = TSC_PROXY_MODE_NONE_DIRECT;
  else if (option_equals(value, "direct"))
    type = TSC_PROXY_MODE_DIRECT;
  else if (option_equals(value, "detect"))
    type = TSC_PROXY_MODE_DETECT;
  else if (option_equals(value, "default"))
    type = TSC_PROXY_MODE_DEFAULT;
  else
  {
    LONGLONG val = 0;

    if (!value_to_int(value, &val, TSC_PROXY_MODE_NONE_DIRECT, TSC_PROXY_MODE_NONE_DETECT))
      return FALSE;
    type = WINPR_ASSERTING_INT_CAST(UINT32, val);
  }

  return freerdp_set_gateway_usage_method(settings, type);
}

static char* unescape(const char* str)
{
  char* copy = _strdup(str);
  if (!copy)
    return nullptr;

  bool escaped = false;
  char* dst = copy;
  while (*str != '\0')
  {
    char cur = *str++;

    switch (cur)
    {
      case '\\':
        if (!escaped)
        {
          escaped = true;
          continue;
        }
        // fallthrough
        WINPR_FALLTHROUGH
      default:
        *dst++ = cur;
        escaped = false;
        break;
    }
  }

  *dst = '\0';

  return copy;
}

static BOOL parse_gateway_options(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  char* argval = nullptr;
  BOOL rc = FALSE;

  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  size_t count = 0;
  char** ptr = CommandLineParseCommaSeparatedValues(arg->Value, &count);
  if (count == 0)
    return TRUE;
  WINPR_ASSERT(ptr);

  if (!freerdp_settings_set_bool(settings, FreeRDP_GatewayEnabled, TRUE))
    goto fail;

  {
    BOOL allowHttpOpts = FALSE;
    for (size_t x = 0; x < count; x++)
    {
      BOOL validOption = FALSE;
      free(argval);
      argval = unescape(ptr[x]);
      if (!argval)
        goto fail;

      const char* gw = option_starts_with("g:", argval);
      if (gw)
      {
        if (!parse_gateway_host_option(settings, gw))
          goto fail;
        validOption = TRUE;
        allowHttpOpts = FALSE;
      }

      const char* gu = option_starts_with("u:", argval);
      if (gu)
      {
        if (!parse_gateway_cred_option(settings, gu, FreeRDP_GatewayUsername))
          goto fail;
        validOption = TRUE;
        allowHttpOpts = FALSE;
      }

      const char* gd = option_starts_with("d:", argval);
      if (gd)
      {
        if (!parse_gateway_cred_option(settings, gd, FreeRDP_GatewayDomain))
          goto fail;
        validOption = TRUE;
        allowHttpOpts = FALSE;
      }

      const char* gp = option_starts_with("p:", argval);
      if (gp)
      {
        if (!parse_gateway_cred_option(settings, gp, FreeRDP_GatewayPassword))
          goto fail;
        validOption = TRUE;
        allowHttpOpts = FALSE;
      }

      const char* gt = option_starts_with("type:", argval);
      if (gt)
      {
        if (!parse_gateway_type_option(settings, gt))
          goto fail;
        validOption = TRUE;
        allowHttpOpts = freerdp_settings_get_bool(settings, FreeRDP_GatewayHttpTransport);
      }

      const char* gat = option_starts_with("access-token:", argval);
      if (gat)
      {
        if (!freerdp_settings_set_string(settings, FreeRDP_GatewayAccessToken, gat))
          goto fail;
        validOption = TRUE;
        allowHttpOpts = FALSE;
      }

      const char* bearer = option_starts_with("bearer:", argval);
      if (bearer)
      {
        if (!freerdp_settings_set_string(settings, FreeRDP_GatewayHttpExtAuthBearer,
                                         bearer))
          goto fail;
        validOption = TRUE;
        allowHttpOpts = FALSE;
      }

      const char* gwurl = option_starts_with("url:", argval);
      if (gwurl)
      {
        if (!freerdp_settings_set_string(settings, FreeRDP_GatewayUrl, gwurl))
          goto fail;
        if (!freerdp_set_gateway_usage_method(settings, TSC_PROXY_MODE_DIRECT))
          goto fail;
        validOption = TRUE;
        allowHttpOpts = FALSE;
      }

      const char* um = option_starts_with("usage-method:", argval);
      if (um)
      {
        if (!parse_gateway_usage_option(settings, um))
          goto fail;
        validOption = TRUE;
        allowHttpOpts = FALSE;
      }

      const char* to = option_starts_with("timeout:", argval);
      if (to)
      {
        LONGLONG val = 0;
        if (!value_to_int(to, &val, 1, 600000))
          goto fail;
        if (!freerdp_settings_set_uint32(settings, FreeRDP_GatewayResponseTimeout,
                                         (UINT32)val))
          goto fail;
        validOption = TRUE;
        allowHttpOpts = FALSE;
      }

      if (allowHttpOpts)
      {
        if (option_equals(argval, "no-websockets"))
        {
          if (!freerdp_settings_set_bool(settings, FreeRDP_GatewayHttpUseWebsockets,
                                         FALSE))
            goto fail;
          validOption = TRUE;
        }
        else if (option_equals(argval, "extauth-sspi-ntlm"))
        {
          if (!freerdp_settings_set_bool(settings, FreeRDP_GatewayHttpExtAuthSspiNtlm,
                                         TRUE))
            goto fail;
          validOption = TRUE;
        }
      }

      if (!validOption)
        goto fail;
    }
  }

  rc = TRUE;
fail:
  free(argval);
  CommandLineParserFree(ptr);
  return rc;
}

static void fill_credential_string(COMMAND_LINE_ARGUMENT_A* args, const char* value)
{
  WINPR_ASSERT(args);
  WINPR_ASSERT(value);

  const COMMAND_LINE_ARGUMENT_A* arg = CommandLineFindArgumentA(args, value);
  if (!arg)
    return;

  if (arg->Flags & COMMAND_LINE_VALUE_PRESENT)
    FillMemory(arg->Value, strlen(arg->Value), '*');
}

static void fill_credential_strings(COMMAND_LINE_ARGUMENT_A* args)
{
  for (size_t x = 0; x < ARRAYSIZE(credential_args); x++)
  {
    const char* cred = credential_args[x];
    fill_credential_string(args, cred);
  }

  const COMMAND_LINE_ARGUMENT_A* arg = CommandLineFindArgumentA(args, "gateway");
  if (arg && ((arg->Flags & COMMAND_LINE_ARGUMENT_PRESENT) != 0))
  {
    const char* gwcreds[] = { "p:", "access-token:" };
    char* saveptr = nullptr;
    char* tok = strtok_s(arg->Value, ",", &saveptr);
    while (tok)
    {
      for (size_t x = 0; x < ARRAYSIZE(gwcreds); x++)
      {
        const char* opt = gwcreds[x];
        if (option_starts_with(opt, tok))
        {
          char* val = &tok[strlen(opt)];
          FillMemory(val, strlen(val), '*');
        }
      }
      tok = strtok_s(nullptr, ",", &saveptr);
    }
  }
}

static int parse_command_line_option_uint32(rdpSettings* settings,
                                            const COMMAND_LINE_ARGUMENT_A* arg,
                                            FreeRDP_Settings_Keys_UInt32 key, LONGLONG min,
                                            LONGLONG max)
{
  LONGLONG val = 0;

  if (!value_to_int(arg->Value, &val, min, max))
    return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);

  if (!freerdp_settings_set_uint32(settings, key, (UINT32)val))
    return fail_at(arg, COMMAND_LINE_ERROR);
  return 0;
}

#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
static int parse_deprecated_command_line(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg)
{
  int status = 0;

  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  BOOL enable = arg->Value ? TRUE : FALSE;
  CommandLineSwitchStart(arg) CommandLineSwitchCase(arg, "gfx-thin-client")
  {
    WLog_WARN(TAG, "/gfx-thin-client is deprecated, use /gfx:thin-client[:on|off] instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_GfxThinClient, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);

    if (freerdp_settings_get_bool(settings, FreeRDP_GfxThinClient))
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_GfxSmallCache, TRUE))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }

    if (!freerdp_settings_set_bool(settings, FreeRDP_SupportGraphicsPipeline, TRUE))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "gfx-small-cache")
  {
    WLog_WARN(TAG, "/gfx-small-cache is deprecated, use /gfx:small-cache[:on|off] instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_GfxSmallCache, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);

    if (enable)
      if (!freerdp_settings_set_bool(settings, FreeRDP_SupportGraphicsPipeline, TRUE))
        return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "gfx-progressive")
  {
    WLog_WARN(TAG, "/gfx-progressive is deprecated, use /gfx:progressive[:on|off] instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_GfxProgressive, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
    if (!freerdp_settings_set_bool(settings, FreeRDP_GfxThinClient, !enable))
      return fail_at(arg, COMMAND_LINE_ERROR);

    if (enable)
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_SupportGraphicsPipeline, TRUE))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
  }
#ifdef WITH_GFX_H264
  CommandLineSwitchCase(arg, "gfx-h264")
  {
    WLog_WARN(TAG, "/gfx-h264 is deprecated, use /gfx:avc420 instead");
    int rc = parse_gfx_options(settings, arg);
    if (rc != 0)
      return fail_at(arg, rc);
  }
#endif
  CommandLineSwitchCase(arg, "app-workdir")
  {
    WLog_WARN(TAG,
              "/app-workdir:<directory> is deprecated, use /app:workdir:<directory> instead");
    if (!freerdp_settings_set_string(settings, FreeRDP_RemoteApplicationWorkingDir, arg->Value))
      return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
  }
  CommandLineSwitchCase(arg, "app-name")
  {
    WLog_WARN(TAG, "/app-name:<directory> is deprecated, use /app:name:<name> instead");
    if (!freerdp_settings_set_string(settings, FreeRDP_RemoteApplicationName, arg->Value))
      return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
  }
  CommandLineSwitchCase(arg, "app-icon")
  {
    WLog_WARN(TAG, "/app-icon:<filename> is deprecated, use /app:icon:<filename> instead");
    if (!freerdp_settings_set_string(settings, FreeRDP_RemoteApplicationIcon, arg->Value))
      return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
  }
  CommandLineSwitchCase(arg, "app-cmd")
  {
    WLog_WARN(TAG, "/app-cmd:<command> is deprecated, use /app:cmd:<command> instead");
    if (!freerdp_settings_set_string(settings, FreeRDP_RemoteApplicationCmdLine, arg->Value))
      return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
  }
  CommandLineSwitchCase(arg, "app-file")
  {
    WLog_WARN(TAG, "/app-file:<filename> is deprecated, use /app:file:<filename> instead");
    if (!freerdp_settings_set_string(settings, FreeRDP_RemoteApplicationFile, arg->Value))
      return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
  }
  CommandLineSwitchCase(arg, "app-guid")
  {
    WLog_WARN(TAG, "/app-guid:<guid> is deprecated, use /app:guid:<guid> instead");
    if (!freerdp_settings_set_string(settings, FreeRDP_RemoteApplicationGuid, arg->Value))
      return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
  }
  CommandLineSwitchCase(arg, "g")
  {
    if (!parse_gateway_host_option(settings, arg->Value))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "gu")
  {
    if (!parse_gateway_cred_option(settings, arg->Value, FreeRDP_GatewayUsername))
      return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
  }
  CommandLineSwitchCase(arg, "gd")
  {
    if (!parse_gateway_cred_option(settings, arg->Value, FreeRDP_GatewayDomain))
      return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
  }
  CommandLineSwitchCase(arg, "gp")
  {
    if (!parse_gateway_cred_option(settings, arg->Value, FreeRDP_GatewayPassword))
      return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
  }
  CommandLineSwitchCase(arg, "gt")
  {
    if (!parse_gateway_type_option(settings, arg->Value))
      return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
  }
  CommandLineSwitchCase(arg, "gat")
  {
    if (!freerdp_settings_set_string(settings, FreeRDP_GatewayAccessToken, arg->Value))
      return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
  }
  CommandLineSwitchCase(arg, "gateway-usage-method")
  {
    if (!parse_gateway_usage_option(settings, arg->Value))
      return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
  }
  CommandLineSwitchCase(arg, "kbd-remap")
  {
    WLog_WARN(TAG, "/kbd-remap:<key>=<value>,<key2>=<value2> is deprecated, use "
                   "/kbd:remap:<key>=<value>,remap:<key2>=<value2>,... instead");
    if (!freerdp_settings_set_string(settings, FreeRDP_KeyboardRemappingList, arg->Value))
      return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
  }
  CommandLineSwitchCase(arg, "kbd-lang")
  {
    LONGLONG val = 0;

    WLog_WARN(TAG, "/kbd-lang:<value> is deprecated, use /kbd:lang:<value> instead");
    if (!value_to_int(arg->Value, &val, 1, UINT32_MAX))
    {
      WLog_ERR(TAG, "Could not identify keyboard active language %s", arg->Value);
      WLog_ERR(TAG, "Use /list:kbd-lang to list available layouts");
      return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
    }

    if (!freerdp_settings_set_uint32(settings, FreeRDP_KeyboardCodePage, (UINT32)val))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "kbd-type")
  {
    WLog_WARN(TAG, "/kbd-type:<value> is deprecated, use /kbd:type:<value> instead");
    const int rc =
        parse_command_line_option_uint32(settings, arg, FreeRDP_KeyboardType, 0, UINT32_MAX);
    if (rc != 0)
      return fail_at(arg, rc);
  }
  CommandLineSwitchCase(arg, "kbd-unicode")
  {
    WLog_WARN(TAG, "/kbd-unicode is deprecated, use /kbd:unicode[:on|off] instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_UnicodeInput, enable))
      return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
  }
  CommandLineSwitchCase(arg, "kbd-subtype")
  {
    WLog_WARN(TAG, "/kbd-subtype:<value> is deprecated, use /kbd:subtype:<value> instead");
    const int rc =
        parse_command_line_option_uint32(settings, arg, FreeRDP_KeyboardSubType, 0, UINT32_MAX);
    if (rc != 0)
      return fail_at(arg, rc);
  }
  CommandLineSwitchCase(arg, "kbd-fn-key")
  {
    WLog_WARN(TAG, "/kbd-fn-key:<value> is deprecated, use /kbd:fn-key:<value> instead");
    const int rc = parse_command_line_option_uint32(settings, arg, FreeRDP_KeyboardFunctionKey,
                                                    0, UINT32_MAX);
    if (rc != 0)
      return fail_at(arg, rc);
  }
  CommandLineSwitchCase(arg, "bitmap-cache")
  {
    WLog_WARN(TAG, "/bitmap-cache is deprecated, use /cache:bitmap[:on|off] instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_BitmapCacheEnabled, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "persist-cache")
  {
    WLog_WARN(TAG, "/persist-cache is deprecated, use /cache:persist[:on|off] instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_BitmapCachePersistEnabled, enable))
      return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
  }
  CommandLineSwitchCase(arg, "persist-cache-file")
  {
    WLog_WARN(TAG, "/persist-cache-file:<filename> is deprecated, use "
                   "/cache:persist-file:<filename> instead");
    if (!freerdp_settings_set_string(settings, FreeRDP_BitmapCachePersistFile, arg->Value))
      return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);

    if (!freerdp_settings_set_bool(settings, FreeRDP_BitmapCachePersistEnabled, TRUE))
      return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
  }
  CommandLineSwitchCase(arg, "offscreen-cache")
  {
    WLog_WARN(TAG, "/bitmap-cache is deprecated, use /cache:bitmap[:on|off] instead");
    if (!freerdp_settings_set_uint32(settings, FreeRDP_OffscreenSupportLevel, (UINT32)enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "glyph-cache")
  {
    WLog_WARN(TAG, "/glyph-cache is deprecated, use /cache:glyph[:on|off] instead");
    if (!freerdp_settings_set_uint32(settings, FreeRDP_GlyphSupportLevel,
                                     arg->Value ? GLYPH_SUPPORT_FULL : GLYPH_SUPPORT_NONE))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "codec-cache")
  {
    WLog_WARN(TAG, "/codec-cache:<option> is deprecated, use /cache:codec:<option> instead");
    const int rc = parse_codec_cache_options(settings, arg);
    if (rc != 0)
      return fail_at(arg, rc);
  }
  CommandLineSwitchCase(arg, "sec-rdp")
  {
    WLog_WARN(TAG, "/sec-rdp is deprecated, use /sec:rdp[:on|off] instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_RdpSecurity, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "sec-tls")
  {
    WLog_WARN(TAG, "/sec-tls is deprecated, use /sec:tls[:on|off] instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_TlsSecurity, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "sec-nla")
  {
    WLog_WARN(TAG, "/sec-nla is deprecated, use /sec:nla[:on|off] instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_NlaSecurity, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "sec-ext")
  {
    WLog_WARN(TAG, "/sec-ext is deprecated, use /sec:ext[:on|off] instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_ExtSecurity, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "tls-ciphers")
  {
    WLog_WARN(TAG, "/tls-ciphers:<cipher list> is deprecated, use "
                   "/tls:ciphers:<cipher list> instead");
    int rc = parse_tls_cipher_options(settings, arg);
    if (rc != 0)
      return fail_at(arg, rc);
  }
  CommandLineSwitchCase(arg, "tls-seclevel")
  {
    WLog_WARN(TAG, "/tls-seclevel:<level> is deprecated, use /tls:sec-level:<level> instead");
    int rc = parse_tls_cipher_options(settings, arg);
    if (rc != 0)
      return fail_at(arg, rc);
  }
  CommandLineSwitchCase(arg, "tls-secrets-file")
  {
    WLog_WARN(TAG, "/tls-secrets-file:<filename> is deprecated, use "
                   "/tls:secrets-file:<filename> instead");
    int rc = parse_tls_cipher_options(settings, arg);
    if (rc != 0)
      return fail_at(arg, rc);
  }
  CommandLineSwitchCase(arg, "enforce-tlsv1_2")
  {
    WLog_WARN(TAG, "/enforce-tlsv1_2 is deprecated, use /tls:enforce:1.2 instead");
    int rc = parse_tls_cipher_options(settings, arg);
    if (rc != 0)
      return fail_at(arg, rc);
  }
  CommandLineSwitchCase(arg, "cert-name")
  {
    WLog_WARN(TAG, "/cert-name is deprecated, use /cert:name instead");
    if (!freerdp_settings_set_string(settings, FreeRDP_CertificateName, arg->Value))
      return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
  }
  CommandLineSwitchCase(arg, "cert-ignore")
  {
    WLog_WARN(TAG, "/cert-ignore is deprecated, use /cert:ignore instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_IgnoreCertificate, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "cert-tofu")
  {
    WLog_WARN(TAG, "/cert-tofu is deprecated, use /cert:tofu instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_AutoAcceptCertificate, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchCase(arg, "cert-deny")
  {
    WLog_WARN(TAG, "/cert-deny is deprecated, use /cert:deny instead");
    if (!freerdp_settings_set_bool(settings, FreeRDP_AutoDenyCertificate, enable))
      return fail_at(arg, COMMAND_LINE_ERROR);
  }
  CommandLineSwitchDefault(arg)
  {
    status = -1;
  }
  CommandLineSwitchEnd(arg);
  return status;
}
#endif

static int parse_command_line_option_timezone(rdpSettings* settings,
                                              const COMMAND_LINE_ARGUMENT_A* arg)
{
  BOOL found = FALSE;
  DWORD index = 0;
  DYNAMIC_TIME_ZONE_INFORMATION info = WINPR_C_ARRAY_INIT;
  char TimeZoneKeyName[ARRAYSIZE(info.TimeZoneKeyName) + 1] = WINPR_C_ARRAY_INIT;
  while (EnumDynamicTimeZoneInformation(index++, &info) != ERROR_NO_MORE_ITEMS)
  {
    (void)ConvertWCharNToUtf8(info.TimeZoneKeyName, ARRAYSIZE(info.TimeZoneKeyName),
                              TimeZoneKeyName, ARRAYSIZE(TimeZoneKeyName));

    WINPR_ASSERT(arg->Value);
    if (strncmp(TimeZoneKeyName, arg->Value, ARRAYSIZE(TimeZoneKeyName)) == 0)
    {
      found = TRUE;
      break;
    }
  }
  if (!found)
    return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);

  if (!freerdp_settings_set_string(settings, FreeRDP_DynamicDSTTimeZoneKeyName, TimeZoneKeyName))
    return fail_at(arg, COMMAND_LINE_ERROR);

  TIME_ZONE_INFORMATION* tz =
      freerdp_settings_get_pointer_writable(settings, FreeRDP_ClientTimeZone);
  if (!tz)
    return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);

  tz->Bias = info.Bias;
  tz->DaylightBias = info.DaylightBias;
  tz->DaylightDate = info.DaylightDate;
  memcpy(tz->DaylightName, info.DaylightName, sizeof(tz->DaylightName));
  tz->StandardBias = info.StandardBias;
  tz->StandardDate = info.StandardDate;
  memcpy(tz->StandardName, info.StandardName, sizeof(tz->StandardName));

  return 0;
}

static int parse_command_line_option_window_pos(rdpSettings* settings,
                                                const COMMAND_LINE_ARGUMENT_A* arg)
{
  WINPR_ASSERT(settings);
  WINPR_ASSERT(arg);

  unsigned long x = 0;
  unsigned long y = 0;

  if (!arg->Value)
    return fail_at(arg, COMMAND_LINE_ERROR_MISSING_ARGUMENT);

  if (!parseSizeValue(arg->Value, &x, &y) || x > UINT16_MAX || y > UINT16_MAX)
  {
    WLog_ERR(TAG, "invalid window-position argument");
    return fail_at(arg, COMMAND_LINE_ERROR_MISSING_ARGUMENT);
  }

  if (!freerdp_settings_set_uint32(settings, FreeRDP_DesktopPosX, (UINT32)x))
    return fail_at(arg, COMMAND_LINE_ERROR);
  if (!freerdp_settings_set_uint32(settings, FreeRDP_DesktopPosY, (UINT32)y))
    return fail_at(arg, COMMAND_LINE_ERROR);
  return 0;
}

static int parse_command_line(rdpSettings* settings, const COMMAND_LINE_ARGUMENT_A* arg,
                              freerdp_command_line_handle_option_t handle_option,
                              void* handle_userdata, BOOL* promptForPassword, char** user)
{
  WINPR_ASSERT(promptForPassword);
  WINPR_ASSERT(user);

  do
  {
    BOOL enable = (arg->Value != nullptr);

    if (!(arg->Flags & COMMAND_LINE_ARGUMENT_PRESENT))
      continue;

    CommandLineSwitchStart(arg)

        CommandLineSwitchCase(arg, "v")
    {
      const int rc = parse_host_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "spn-class")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_AuthenticationServiceClass,
                                       arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "sspi-module")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_SspiModule, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "winscard-module")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_WinSCardModule, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "redirect-prefer")
    {
      const int rc = parse_redirect_prefer_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "credentials-delegation")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_DisableCredentialsDelegation, !enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "prevent-session-lock")
    {
      const int rc = parse_prevent_session_lock_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "vmconnect")
    {
      const int rc = parse_vmconnect_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "w")
    {
      const int rc = parse_command_line_option_uint32(settings, arg, FreeRDP_DesktopWidth, -1,
                                                      UINT32_MAX);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "h")
    {
      const int rc = parse_command_line_option_uint32(settings, arg, FreeRDP_DesktopHeight,
                                                      -1, UINT32_MAX);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "size")
    {
      const int rc = parse_size_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "f")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_Fullscreen, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "suppress-output")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_SuppressOutput, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "multimon")
    {
      switch (parse_on_off_argument(arg))
      {
        case PARSE_ON:
          if (!freerdp_settings_set_bool(settings, FreeRDP_UseMultimon, TRUE))
            return fail_at(arg, COMMAND_LINE_ERROR);
          break;
        case PARSE_OFF:
          if (!freerdp_settings_set_bool(settings, FreeRDP_UseMultimon, FALSE))
            return fail_at(arg, COMMAND_LINE_ERROR);
          if (!freerdp_settings_set_bool(settings, FreeRDP_ForceMultimon, FALSE))
            return fail_at(arg, COMMAND_LINE_ERROR);
          break;
        case PARSE_NONE:
          if (!option_equals(arg->Value, str_force))
            return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
          if (!freerdp_settings_set_bool(settings, FreeRDP_UseMultimon, TRUE))
            return fail_at(arg, COMMAND_LINE_ERROR);
          if (!freerdp_settings_set_bool(settings, FreeRDP_ForceMultimon, TRUE))
            return fail_at(arg, COMMAND_LINE_ERROR);
          break;
        case PARSE_FAIL:
        default:
          return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
      }
    }
    CommandLineSwitchCase(arg, "span")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_SpanMonitors, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "workarea")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_Workarea, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "monitors")
    {
      const int rc = parse_monitors_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "t")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_WindowTitle, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "decorations")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_Decorations, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "dynamic-resolution")
    {
      const int rc = parse_dynamic_resolution_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "smart-sizing")
    {
      const int rc = parse_smart_sizing_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "bpp")
    {
      const int rc = parse_bpp_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "admin")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_ConsoleSession, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "relax-order-checks")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_AllowUnanouncedOrdersFromServer,
                                     enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "restricted-admin")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_ConsoleSession, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
      if (!freerdp_settings_set_bool(settings, FreeRDP_RestrictedAdminModeRequired, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
#ifdef CHANNEL_RDPEAR_CLIENT
    CommandLineSwitchCase(arg, "remoteGuard")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_RemoteCredentialGuard, TRUE))
        return fail_at(arg, COMMAND_LINE_ERROR);
      if (!freerdp_settings_set_bool(settings, FreeRDP_ExtSecurity, TRUE))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
#endif
    CommandLineSwitchCase(arg, "pth")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_ConsoleSession, TRUE))
        return fail_at(arg, COMMAND_LINE_ERROR);
      if (!freerdp_settings_set_bool(settings, FreeRDP_RestrictedAdminModeRequired, TRUE))
        return fail_at(arg, COMMAND_LINE_ERROR);

      if (!freerdp_settings_set_string(settings, FreeRDP_PasswordHash, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "client-hostname")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_ClientHostname, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "kbd")
    {
      int rc = parse_kbd_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }

    CommandLineSwitchCase(arg, "u")
    {
      WINPR_ASSERT(arg->Value);
      *user = arg->Value;
    }
    CommandLineSwitchCase(arg, "d")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_Domain, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "p")
    {
      /* In case of an optional password set that, if none provided set to empty string.
       * this way we know later on that we intentionally left the password blank. */
      const char* val = arg->Value;
      if (!val)
        val = "";

      if (!freerdp_settings_set_string(settings, FreeRDP_Password, val))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "gateway")
    {
      if (!parse_gateway_options(settings, arg))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "proxy")
    {
      const int rc = parse_proxy_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }

    CommandLineSwitchCase(arg, "azure")
    {
      int rc = parse_aad_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "app")
    {
      int rc = parse_app_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "load-balance-info")
    {
      WINPR_ASSERT(arg->Value);
      if (!freerdp_settings_set_pointer_len(settings, FreeRDP_LoadBalanceInfo, arg->Value,
                                            strlen(arg->Value)))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }

    CommandLineSwitchCase(arg, "compression")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_CompressionEnabled, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "compression-level")
    {
      const int rc = parse_command_line_option_uint32(settings, arg, FreeRDP_CompressionLevel,
                                                      0, UINT32_MAX);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "drives")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_RedirectDrives, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "dump")
    {
      const int rc = parse_dump_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "disable-output")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_DeactivateClientDecoding, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "home-drive")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_RedirectHomeDrive, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "ipv4")
    {
      if (arg->Value != nullptr && strncmp(arg->Value, str_force, ARRAYSIZE(str_force)) == 0)
      {
        if (!freerdp_settings_set_uint32(settings, FreeRDP_ForceIPvX, 4))
          return fail_at(arg, COMMAND_LINE_ERROR);
      }
      else
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_PreferIPv6OverIPv4, FALSE))
          return fail_at(arg, COMMAND_LINE_ERROR);
      }
    }
    CommandLineSwitchCase(arg, "ipv6")
    {
      if (arg->Value != nullptr && strncmp(arg->Value, str_force, ARRAYSIZE(str_force)) == 0)
      {
        if (!freerdp_settings_set_uint32(settings, FreeRDP_ForceIPvX, 6))
          return fail_at(arg, COMMAND_LINE_ERROR);
      }
      else
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_PreferIPv6OverIPv4, TRUE))
          return fail_at(arg, COMMAND_LINE_ERROR);
      }
    }
    CommandLineSwitchCase(arg, "clipboard")
    {
      const int rc = parse_clipboard_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "server-name")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_UserSpecifiedServerName, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "shell")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_AlternateShell, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "shell-dir")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_ShellWorkingDirectory, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "audio-mode")
    {
      const int rc = parse_audio_mode_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "network")
    {
      const int rc = parse_network_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "fonts")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_AllowFontSmoothing, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "wallpaper")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_DisableWallpaper, !enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "window-drag")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_DisableFullWindowDrag, !enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "window-position")
    {
      const int rc = parse_command_line_option_window_pos(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "menu-anims")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_DisableMenuAnims, !enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "themes")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_DisableThemes, !enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "timeout")
    {
      const int rc =
          parse_command_line_option_uint32(settings, arg, FreeRDP_TcpAckTimeout, 0, 600000);
      if (rc != 0)
        return fail_at(arg, rc);
      const int rc2 = parse_command_line_option_uint32(settings, arg,
                                                       FreeRDP_TcpConnectTimeout, 0, 600000);
      if (rc2 != 0)
        return fail_at(arg, rc2);
    }
    CommandLineSwitchCase(arg, "timezone")
    {
      const int rc = parse_command_line_option_timezone(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "aero")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_AllowDesktopComposition, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "gdi")
    {
      if (option_equals(arg->Value, "sw"))
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_SoftwareGdi, TRUE))
          return fail_at(arg, COMMAND_LINE_ERROR);
      }
      else if (option_equals(arg->Value, "hw"))
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_SoftwareGdi, FALSE))
          return fail_at(arg, COMMAND_LINE_ERROR);
      }
      else
        return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
    }
    CommandLineSwitchCase(arg, "gfx")
    {
      int rc = parse_gfx_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }

    CommandLineSwitchCase(arg, "rfx")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_RemoteFxCodec, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "rfx-mode")
    {
      if (!arg->Value)
        return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);

      if (option_equals(arg->Value, "video"))
      {
        if (!freerdp_settings_set_uint32(settings, FreeRDP_RemoteFxCodecMode, 0x00))
          return fail_at(arg, COMMAND_LINE_ERROR);
      }
      else if (option_equals(arg->Value, "image"))
      {
        if (!freerdp_settings_set_bool(settings, FreeRDP_RemoteFxImageCodec, TRUE))
          return fail_at(arg, COMMAND_LINE_ERROR);
        if (!freerdp_settings_set_uint32(settings, FreeRDP_RemoteFxCodecMode, 0x02))
          return fail_at(arg, COMMAND_LINE_ERROR);
      }
    }
    CommandLineSwitchCase(arg, "frame-ack")
    {
      const int rc = parse_command_line_option_uint32(settings, arg, FreeRDP_FrameAcknowledge,
                                                      0, UINT32_MAX);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "nsc")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_NSCodec, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
#if defined(WITH_JPEG)
    CommandLineSwitchCase(arg, "jpeg")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_JpegCodec, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
      if (!freerdp_settings_set_uint32(settings, FreeRDP_JpegQuality, 75))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "jpeg-quality")
    {
      LONGLONG val = 0;

      if (!value_to_int(arg->Value, &val, 0, 100))
        return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);

      if (!freerdp_settings_set_uint32(settings, FreeRDP_JpegQuality, (UINT32)val))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
#endif
    CommandLineSwitchCase(arg, "nego")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_NegotiateSecurityLayer, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "endpointfedauth")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_RdstlsSecurity, TRUE))
        return fail_at(arg, COMMAND_LINE_ERROR);
      if (!freerdp_settings_set_string(settings, FreeRDP_EndpointFedAuthToken, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "pcb")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_SendPreconnectionPdu, TRUE))
        return fail_at(arg, COMMAND_LINE_ERROR);

      if (!freerdp_settings_set_string(settings, FreeRDP_PreconnectionBlob, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "pcid")
    {
      const int rc = parse_command_line_option_uint32(settings, arg, FreeRDP_PreconnectionId,
                                                      0, UINT32_MAX);
      if (rc != 0)
        return fail_at(arg, rc);
      if (!freerdp_settings_set_bool(settings, FreeRDP_SendPreconnectionPdu, TRUE))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
#ifdef _WIN32
    CommandLineSwitchCase(arg, "connect-child-session")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_AuthenticationServiceClass,
                                       "vs-debug") ||
          !freerdp_settings_set_string(settings, FreeRDP_ServerHostname, "localhost") ||
          !freerdp_settings_set_string(settings, FreeRDP_AuthenticationPackageList, "ntlm") ||
          !freerdp_settings_set_string(settings, FreeRDP_ClientAddress, "0.0.0.0") ||
          !freerdp_settings_set_bool(settings, FreeRDP_NegotiateSecurityLayer, FALSE) ||
          !freerdp_settings_set_bool(settings, FreeRDP_VmConnectMode, TRUE) ||
          !freerdp_settings_set_bool(settings, FreeRDP_ConnectChildSession, TRUE) ||
          !freerdp_settings_set_bool(settings, FreeRDP_NlaSecurity, TRUE) ||
          !freerdp_settings_set_uint32(settings, FreeRDP_AuthenticationLevel, 0) ||
          !freerdp_settings_set_bool(settings, FreeRDP_NetworkAutoDetect, TRUE) ||
          !freerdp_settings_set_uint32(settings, FreeRDP_ConnectionType, CONNECTION_TYPE_LAN))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
#endif
    CommandLineSwitchCase(arg, "sec")
    {
      const int rc = parse_sec_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "encryption-methods")
    {
      const int rc = parse_encryption_methods_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "args-from")
    {
      WLog_ERR(TAG, "/args-from:%s can not be used in combination with other arguments!",
               arg->Value);
      return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
    }
    CommandLineSwitchCase(arg, "from-stdin")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_CredentialsFromStdin, TRUE))
        return fail_at(arg, COMMAND_LINE_ERROR);

      if (arg->Flags & COMMAND_LINE_VALUE_PRESENT)
      {
        if (!arg->Value)
          return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);
        *promptForPassword = (option_equals(arg->Value, str_force));

        if (!*promptForPassword)
          return fail_at(arg, COMMAND_LINE_ERROR);
      }
    }
    CommandLineSwitchCase(arg, "log-level")
    {
      wLog* root = WLog_GetRoot();

      if (!WLog_SetStringLogLevel(root, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "log-filters")
    {
      if (!WLog_AddStringLogFilters(arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "tls")
    {
      int rc = parse_tls_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "cert")
    {
      const int rc = parse_cert_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "authentication")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_Authentication, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "encryption")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_UseRdpSecurityLayer, !enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "grab-keyboard")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_GrabKeyboard, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "grab-mouse")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_GrabMouse, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "mouse-relative")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_MouseUseRelativeMove, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "mouse")
    {
      const int rc = parse_mouse_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "unmap-buttons")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_UnmapButtons, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "toggle-fullscreen")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_ToggleFullscreen, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "force-console-callbacks")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_UseCommonStdioCallbacks, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "floatbar")
    {
      const int rc = parse_floatbar_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "mouse-motion")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_MouseMotion, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "parent-window")
    {
      ULONGLONG val = 0;

      if (!value_to_uint(arg->Value, &val, 0, UINT64_MAX))
        return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);

      if (!freerdp_settings_set_uint64(settings, FreeRDP_ParentWindowId, (UINT64)val))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "client-build-number")
    {
      const int rc =
          parse_command_line_option_uint32(settings, arg, FreeRDP_ClientBuild, 0, UINT32_MAX);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "cache")
    {
      int rc = parse_cache_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }

    CommandLineSwitchCase(arg, "max-fast-path-size")
    {
      const int rc = parse_command_line_option_uint32(
          settings, arg, FreeRDP_MultifragMaxRequestSize, 0, UINT32_MAX);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "auto-request-control")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_RemoteAssistanceRequestControl,
                                     enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "async-update")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_AsyncUpdate, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "async-channels")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_AsyncChannels, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "wm-class")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_WmClass, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "play-rfx")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_PlayRemoteFxFile, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);

      if (!freerdp_settings_set_bool(settings, FreeRDP_PlayRemoteFx, TRUE))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "auth-only")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_AuthenticationOnly, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "auth-pkg-list")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_AuthenticationPackageList,
                                       arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
    CommandLineSwitchCase(arg, "auto-reconnect")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_AutoReconnectionEnabled, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "auto-reconnect-max-retries")
    {
      const int rc = parse_command_line_option_uint32(
          settings, arg, FreeRDP_AutoReconnectMaxRetries, 0, 1000);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "reconnect-cookie")
    {
      const int rc = parse_reconnect_cookie_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "print-reconnect-cookie")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_PrintReconnectCookie, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "pwidth")
    {
      const int rc = parse_command_line_option_uint32(
          settings, arg, FreeRDP_DesktopPhysicalWidth, 0, UINT32_MAX);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "pheight")
    {
      const int rc = parse_command_line_option_uint32(
          settings, arg, FreeRDP_DesktopPhysicalHeight, 0, UINT32_MAX);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "orientation")
    {
      LONGLONG val = 0;

      if (!value_to_int(arg->Value, &val, 0, UINT16_MAX))
        return fail_at(arg, COMMAND_LINE_ERROR_UNEXPECTED_VALUE);

      if (!freerdp_settings_set_uint16(settings, FreeRDP_DesktopOrientation, (UINT16)val))
        return fail_at(arg, COMMAND_LINE_ERROR);
      if (!set_monitor_override(settings, FREERDP_MONITOR_OVERRIDE_ORIENTATION))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "old-license")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_OldLicenseBehaviour, TRUE))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "scale")
    {
      const int rc = parse_scale_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "scale-desktop")
    {
      const int rc = parse_command_line_option_uint32(settings, arg,
                                                      FreeRDP_DesktopScaleFactor, 100, 500);
      if (rc != 0)
        return fail_at(arg, rc);
      if (!set_monitor_override(settings, FREERDP_MONITOR_OVERRIDE_DESKTOP_SCALE))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "scale-device")
    {
      const int rc = parse_scale_device_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "action-script")
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_ActionScript, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
#if !defined(WITHOUT_FREERDP_3x_DEPRECATED)
    CommandLineSwitchCase(arg, RDP2TCP_DVC_CHANNEL_NAME)
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_RDP2TCPArgs, arg->Value))
        return fail_at(arg, COMMAND_LINE_ERROR_MEMORY);
    }
#endif
    CommandLineSwitchCase(arg, "fipsmode")
    {
      if (!freerdp_settings_set_bool(settings, FreeRDP_FIPSMode, enable))
        return fail_at(arg, COMMAND_LINE_ERROR);
    }
    CommandLineSwitchCase(arg, "smartcard-logon")
    {
      const int rc = parse_smartcard_logon_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchCase(arg, "tune")
    {
      const int rc = parse_tune_options(settings, arg);
      if (rc != 0)
        return fail_at(arg, rc);
    }
    CommandLineSwitchDefault(arg)
    {
#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
      const int status = parse_deprecated_command_line(settings, arg);
      /* option handled, continue with next */
      if (status != -1)
        continue;
#endif
      if (handle_option)
      {
        const int rc = handle_option(arg, handle_userdata);
        if (rc != 0)
          return fail_at(arg, rc);
      }
    }
    CommandLineSwitchEnd(arg)
  } while ((arg = CommandLineFindNextArgumentA(arg)) != nullptr);
  return 0;
}

static void warn_credential_args(const COMMAND_LINE_ARGUMENT_A* args)
{
  WINPR_ASSERT(args);
  bool insecureArgFound = false;
  for (size_t x = 0; x < ARRAYSIZE(credential_args); x++)
  {
    const char* cred = credential_args[x];
    const COMMAND_LINE_ARGUMENT_A* arg = CommandLineFindArgumentA(args, cred);
    if (!arg)
      continue;
    if ((arg->Flags & COMMAND_LINE_ARGUMENT_PRESENT) == 0)
      continue;

    WLog_WARN(TAG, "Using /%s is insecure", arg->Name);
    insecureArgFound = true;
  }

  if (insecureArgFound)
  {
    WLog_WARN(TAG, "Passing credentials or secrets via command line might expose these in the "
                   "process list");
    WLog_WARN(TAG, "Consider using one of the following (more secure) alternatives:");
    WLog_WARN(TAG, "  - /args-from: pipe in arguments from stdin, file, file descriptor or "
                   "environment variable");
    WLog_WARN(TAG, "  - /from-stdin pass the credential via stdin");
    WLog_WARN(TAG, "  - set environment variable FREERDP_ASKPASS to have a gui tool query for "
                   "credentials");
  }
}

static int freerdp_client_settings_parse_command_line_arguments_int(
    rdpSettings* settings, int argc, char* argv[], BOOL allowUnknown,
    COMMAND_LINE_ARGUMENT_A* largs, WINPR_ATTR_UNUSED size_t count,
    freerdp_command_line_handle_option_t handle_option, void* handle_userdata, UINT32 cmdflags)
{
  char* user = nullptr;
  int status = 0;
  BOOL ext = FALSE;
  BOOL assist = FALSE;
  DWORD flags = 0;
  BOOL promptForPassword = FALSE;
  BOOL compatibility = FALSE;
  const COMMAND_LINE_ARGUMENT_A* arg = nullptr;

  /* Command line detection fails if only a .rdp or .msrcIncident file
   * is supplied. Check this case first, only then try to detect
   * legacy command line syntax. */
  if (argc > 1)
  {
    ext = option_is_rdp_file(argv[1]);
    assist = option_is_incident_file(argv[1]);
  }

  if (!ext && !assist)
    compatibility = freerdp_client_detect_command_line(argc, argv, &flags);
  else
    compatibility = freerdp_client_detect_command_line(argc - 1, &argv[1], &flags);

  if (!freerdp_settings_set_string(settings, FreeRDP_ProxyHostname, nullptr))
    return -1;
  if (!freerdp_settings_set_string(settings, FreeRDP_ProxyUsername, nullptr))
    return -1;
  if (!freerdp_settings_set_string(settings, FreeRDP_ProxyPassword, nullptr))
    return -1;

  if (compatibility)
  {
    WLog_WARN(TAG, "Unsupported command line syntax!");
    WLog_WARN(TAG, "%s 1.0 style syntax was dropped with version 3!",
              freerdp_getApplicationDetailsString());
    return -1;
  }

  if (allowUnknown)
    flags |= COMMAND_LINE_IGN_UNKNOWN_KEYWORD;

  if (ext)
  {
    if (freerdp_client_settings_parse_connection_file(settings, argv[1]))
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  }

  if (assist)
  {
    if (freerdp_client_settings_parse_assistance_file(settings, argc, argv) < 0)
      return COMMAND_LINE_ERROR_UNEXPECTED_VALUE;
  }

  CommandLineClearArgumentsA(largs);
  status = CommandLineParseArgumentsA(argc, argv, largs, flags, settings,
                                      freerdp_client_command_line_pre_filter,
                                      freerdp_client_command_line_post_filter);

  if (status < 0)
    return status;

  prepare_default_settings(settings, largs, ext);
  if ((cmdflags & FREERDP_SETTINGS_CMD_PARSE_SUPPRESS_WARNINGS) == 0)
    warn_credential_args(largs);

  arg = largs;
  errno = 0;

  /* Disable unicode input unless requested. */
  if (!freerdp_settings_set_bool(settings, FreeRDP_UnicodeInput, FALSE))
    return COMMAND_LINE_ERROR_MEMORY;

  status = parse_command_line(settings, arg, handle_option, handle_userdata, &promptForPassword,
                              &user);

  if (user)
  {
    if (!freerdp_settings_get_string(settings, FreeRDP_Domain) && user)
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_Username, nullptr))
        return COMMAND_LINE_ERROR;

      if (!freerdp_settings_set_string(settings, FreeRDP_Domain, nullptr))
        return COMMAND_LINE_ERROR;

      if (!freerdp_parse_username_settings(user, settings, FreeRDP_Username, FreeRDP_Domain))
        return COMMAND_LINE_ERROR;
    }
    else
    {
      if (!freerdp_settings_set_string(settings, FreeRDP_Username, user))
        return COMMAND_LINE_ERROR;
    }
  }

  if (promptForPassword)
  {
    freerdp* instance = freerdp_settings_get_pointer_writable(settings, FreeRDP_instance);
    if (!freerdp_settings_get_string(settings, FreeRDP_Password))
    {
      char buffer[512 + 1] = WINPR_C_ARRAY_INIT;

      if (!freerdp_passphrase_read(instance->context, "Password: ", buffer,
                                   ARRAYSIZE(buffer) - 1, 1))
        return COMMAND_LINE_ERROR;
      if (!freerdp_settings_set_string(settings, FreeRDP_Password, buffer))
        return COMMAND_LINE_ERROR;
    }

    if (freerdp_settings_get_bool(settings, FreeRDP_GatewayEnabled) &&
        !freerdp_settings_get_bool(settings, FreeRDP_GatewayUseSameCredentials))
    {
      if (!freerdp_settings_get_string(settings, FreeRDP_GatewayPassword))
      {
        char buffer[512 + 1] = WINPR_C_ARRAY_INIT;

        if (!freerdp_passphrase_read(instance->context, "Gateway Password: ", buffer,
                                     ARRAYSIZE(buffer) - 1, 1))
          return COMMAND_LINE_ERROR;
        if (!freerdp_settings_set_string(settings, FreeRDP_GatewayPassword, buffer))
          return COMMAND_LINE_ERROR;
      }
    }
  }

  freerdp_performance_flags_make(settings);

  if (freerdp_settings_get_bool(settings, FreeRDP_RemoteFxCodec) ||
      freerdp_settings_get_bool(settings, FreeRDP_NSCodec) ||
      freerdp_settings_get_bool(settings, FreeRDP_SupportGraphicsPipeline))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_FastPathOutput, TRUE))
      return COMMAND_LINE_ERROR;
    if (!freerdp_settings_set_bool(settings, FreeRDP_FrameMarkerCommandEnabled, TRUE))
      return COMMAND_LINE_ERROR;
  }

  arg = CommandLineFindArgumentA(largs, "port");
  if (arg->Flags & COMMAND_LINE_ARGUMENT_PRESENT)
  {
    const int rc =
        parse_command_line_option_uint32(settings, arg, FreeRDP_ServerPort, 0, UINT16_MAX);
    if (rc != 0)
      return fail_at(arg, rc);
  }

  if (freerdp_settings_get_bool(settings, FreeRDP_VmConnectMode))
  {
    const COMMAND_LINE_ARGUMENT_A* nego = CommandLineFindArgumentA(largs, "nego");
    if (nego && (nego->Flags & COMMAND_LINE_ARGUMENT_PRESENT))
      return fail_at(arg, COMMAND_LINE_ERROR);

    const UINT32 port = freerdp_settings_get_uint32(settings, FreeRDP_ServerPort);
    WLog_INFO(TAG, "/vmconnect uses custom port %" PRIu32, port);
  }

  fill_credential_strings(largs);

  return status;
}

static void argv_free(int* pargc, char** pargv[])
{
  WINPR_ASSERT(pargc);
  WINPR_ASSERT(pargv);
  const int argc = *pargc;
  char** argv = *pargv;
  *pargc = 0;
  *pargv = nullptr;

  if (!argv)
    return;
  for (int x = 0; x < argc; x++)
    free(argv[x]);
  free((void*)argv);
}

static BOOL argv_append(int* pargc, char** pargv[], char* what)
{
  WINPR_ASSERT(pargc);
  WINPR_ASSERT(pargv);

  if (*pargc < 0)
    return FALSE;

  if (!what)
    return FALSE;

  int nargc = *pargc + 1;
  char** tmp = (char**)realloc((void*)*pargv, (size_t)nargc * sizeof(char*));
  if (!tmp)
    return FALSE;

  tmp[*pargc] = what;
  *pargv = tmp;
  *pargc = nargc;
  return TRUE;
}

static BOOL argv_append_dup(int* pargc, char** pargv[], const char* what)
{
  char* copy = nullptr;
  if (what)
    copy = _strdup(what);

  const BOOL rc = argv_append(pargc, pargv, copy);
  if (!rc)
    free(copy);
  return rc;
}

static BOOL args_from_fp(FILE* fp, int* aargc, char** aargv[], const char* file, const char* cmd)
{
  BOOL success = FALSE;

  WINPR_ASSERT(aargc);
  WINPR_ASSERT(aargv);
  WINPR_ASSERT(cmd);

  if (!fp)
  {
    WLog_ERR(TAG, "Failed to read command line options from file '%s'", file);
    return FALSE;
  }
  if (!argv_append_dup(aargc, aargv, cmd))
    goto fail;
  while (!feof(fp))
  {
    char* line = nullptr;
    size_t size = 0;
    INT64 rc = GetLine(&line, &size, fp);
    if ((rc < 0) || !line)
    {
      /* abort if GetLine failed due to reaching EOF */
      if (feof(fp))
        break;
      goto fail;
    }

    while (rc > 0)
    {
      const char cur = (line[rc - 1]);
      if ((cur == '\n') || (cur == '\r'))
      {
        line[rc - 1] = '\0';
        rc--;
      }
      else
        break;
    }
    /* abort on empty lines */
    if (rc == 0)
    {
      free(line);
      break;
    }
    if (!argv_append(aargc, aargv, line))
    {
      free(line);
      goto fail;
    }
  }

  success = TRUE;
fail:
  fclose(fp);
  if (!success)
    argv_free(aargc, aargv);
  return success;
}

static BOOL args_from_env(const char* name, int* aargc, char** aargv[], const char* arg,
                          const char* cmd)
{
  BOOL success = FALSE;
  char* env = nullptr;

  WINPR_ASSERT(aargc);
  WINPR_ASSERT(aargv);
  WINPR_ASSERT(cmd);

  if (!name)
  {
    WLog_ERR(TAG, "%s - environment variable name empty", arg);
    goto cleanup;
  }

  {
    const DWORD size = GetEnvironmentVariableX(name, env, 0);
    if (size == 0)
    {
      WLog_ERR(TAG, "%s - no environment variable '%s'", arg, name);
      goto cleanup;
    }
    env = calloc(size + 1, sizeof(char));
    if (!env)
      goto cleanup;

    {
      const DWORD rc = GetEnvironmentVariableX(name, env, size);
      if (rc != size - 1)
        goto cleanup;
      if (rc == 0)
      {
        WLog_ERR(TAG, "environment variable '%s' is empty", arg);
        goto cleanup;
      }
    }
  }

  if (!argv_append_dup(aargc, aargv, cmd))
    goto cleanup;

  {
    char* context = nullptr;
    char* tok = strtok_s(env, "\n", &context);
    while (tok)
    {
      if (!argv_append_dup(aargc, aargv, tok))
        goto cleanup;
      tok = strtok_s(nullptr, "\n", &context);
    }
  }

  success = TRUE;
cleanup:
  free(env);
  if (!success)
    argv_free(aargc, aargv);
  return success;
}

int freerdp_client_settings_parse_command_line_arguments(rdpSettings* settings, int oargc,
                                                         char* oargv[], BOOL allowUnknown)
{
  return freerdp_client_settings_parse_command_line_arguments_ex(
      settings, oargc, oargv, allowUnknown, nullptr, 0, nullptr, nullptr);
}

int freerdp_client_settings_parse_command_line_arguments_ex(
    rdpSettings* settings, int argc, char** argv, BOOL allowUnknown, COMMAND_LINE_ARGUMENT_A* args,
    size_t count, freerdp_command_line_handle_option_t handle_option, void* handle_userdata)
{
  return freerdp_client_settings_parse_command_line_arguments_with_flags(
      settings, argc, argv, allowUnknown, args, count, handle_option, handle_userdata, 0);
}

int freerdp_client_settings_parse_command_line_arguments_with_flags(
    rdpSettings* settings, int oargc, char** oargv, BOOL allowUnknown,
    COMMAND_LINE_ARGUMENT_A* args, size_t count, freerdp_command_line_handle_option_t handle_option,
    void* handle_userdata, UINT32 flags, ...)
{
  int argc = oargc;
  char** argv = oargv;
  int res = -1;
  int aargc = 0;
  char** aargv = nullptr;

  if ((argc == 2) && option_starts_with("/args-from:", argv[1]))
  {
    flags |= FREERDP_SETTINGS_CMD_PARSE_SUPPRESS_WARNINGS;
    BOOL success = FALSE;
    const char* file = strchr(argv[1], ':') + 1;
    FILE* fp = stdin;

    if (option_starts_with("fd:", file))
    {
      ULONGLONG result = 0;
      const char* val = strchr(file, ':') + 1;
      if (!value_to_uint(val, &result, 0, INT_MAX))
        return -1;
      fp = fdopen((int)result, "r");
      success = args_from_fp(fp, &aargc, &aargv, file, oargv[0]);
    }
    else if (strncmp(file, "env:", 4) == 0)
    {
      const char* name = strchr(file, ':') + 1;
      success = args_from_env(name, &aargc, &aargv, oargv[1], oargv[0]);
    }
    else if (strncmp(file, "file:", 5) == 0)
    {
      file = strchr(file, ':') + 1;
      fp = winpr_fopen(file, "r");
      success = args_from_fp(fp, &aargc, &aargv, file, oargv[0]);
    }
#if !defined(WITHOUT_FREERDP_3x_DEPRECATED)
    else if (strcmp(file, "stdin") != 0)
    {
      fp = winpr_fopen(file, "r");
      WLog_WARN(TAG, "/args-from:%s is deprecated, use /args-from:file:%s instead", file,
                file);
      success = args_from_fp(fp, &aargc, &aargv, file, oargv[0]);
    }
#endif
    else if (strcmp(file, "stdin") == 0)
      success = args_from_fp(fp, &aargc, &aargv, file, oargv[0]);

    if (!success)
      return -1;
    argc = aargc;
    argv = aargv;
  }

  WINPR_ASSERT(count <= SSIZE_MAX);
  size_t lcount = 0;
  COMMAND_LINE_ARGUMENT_A* largs = create_merged_args(args, (SSIZE_T)count, &lcount);
  if (!largs)
    goto fail;

  res = freerdp_client_settings_parse_command_line_arguments_int(
      settings, argc, argv, allowUnknown, largs, lcount, handle_option, handle_userdata, flags);
fail:
  free(largs);
  argv_free(&aargc, &aargv);
  return res;
}

static BOOL freerdp_client_load_static_channel_addin(rdpChannels* channels, rdpSettings* settings,
                                                     const char* name, void* data)
{
  PVIRTUALCHANNELENTRY entry = nullptr;
  PVIRTUALCHANNELENTRY pvce = freerdp_load_channel_addin_entry(
      name, nullptr, nullptr, FREERDP_ADDIN_CHANNEL_STATIC | FREERDP_ADDIN_CHANNEL_ENTRYEX);
  PVIRTUALCHANNELENTRYEX pvceex = WINPR_FUNC_PTR_CAST(pvce, PVIRTUALCHANNELENTRYEX);

  if (!pvceex)
    entry =
        freerdp_load_channel_addin_entry(name, nullptr, nullptr, FREERDP_ADDIN_CHANNEL_STATIC);

  if (pvceex)
  {
    if (freerdp_channels_client_load_ex(channels, settings, pvceex, data) == 0)
    {
      WLog_DBG(TAG, "loading channelEx %s", name);
      return TRUE;
    }
  }
  else if (entry)
  {
    if (freerdp_channels_client_load(channels, settings, entry, data) == 0)
    {
      WLog_DBG(TAG, "loading channel %s", name);
      return TRUE;
    }
  }

  return FALSE;
}

typedef struct
{
  FreeRDP_Settings_Keys_Bool settingId;
  const char* channelName;
  void* args;
} ChannelToLoad;

BOOL freerdp_client_load_addins(rdpChannels* channels, rdpSettings* settings)
{
  ChannelToLoad dynChannels[] = {
#if defined(CHANNEL_AINPUT_CLIENT)
    { FreeRDP_BOOL_UNUSED, AINPUT_CHANNEL_NAME, nullptr }, /* always loaded */
#endif
#ifdef CHANNEL_AUDIN_CLIENT
    { FreeRDP_AudioCapture, AUDIN_CHANNEL_NAME, nullptr },
#endif
#ifdef CHANNEL_RDPSND_CLIENT
    { FreeRDP_AudioPlayback, RDPSND_CHANNEL_NAME, nullptr },
#endif
#ifdef CHANNEL_RDPEI_CLIENT
    { FreeRDP_MultiTouchInput, RDPEI_CHANNEL_NAME, nullptr },
#endif
#ifdef CHANNEL_RDPGFX_CLIENT
    { FreeRDP_SupportGraphicsPipeline, RDPGFX_CHANNEL_NAME, nullptr },
#endif
#ifdef CHANNEL_ECHO_CLIENT
    { FreeRDP_SupportEchoChannel, ECHO_CHANNEL_NAME, nullptr },
#endif
#ifdef CHANNEL_SSHAGENT_CLIENT
    { FreeRDP_SupportSSHAgentChannel, "sshagent", nullptr },
#endif
#ifdef CHANNEL_DISP_CLIENT
    { FreeRDP_SupportDisplayControl, DISP_CHANNEL_NAME, nullptr },
#endif
#ifdef CHANNEL_GEOMETRY_CLIENT
    { FreeRDP_SupportGeometryTracking, GEOMETRY_CHANNEL_NAME, nullptr },
#endif
#ifdef CHANNEL_VIDEO_CLIENT
    { FreeRDP_SupportVideoOptimized, VIDEO_CHANNEL_NAME, nullptr },
#endif
#ifdef CHANNEL_RDPEAR_CLIENT
    { FreeRDP_RemoteCredentialGuard, RDPEAR_CHANNEL_NAME, nullptr },
#endif
#ifdef CHANNEL_RDPEWA_CLIENT
    { FreeRDP_RedirectWebAuthN, RDPEWA_CHANNEL_NAME, nullptr },
#endif
  };

  ChannelToLoad staticChannels[] = {
#if defined(CHANNEL_RDPSND_CLIENT)
    { FreeRDP_AudioPlayback, RDPSND_CHANNEL_NAME, nullptr },
#endif
#if defined(CHANNEL_CLIPRDR_CLIENT)
    { FreeRDP_RedirectClipboard, CLIPRDR_SVC_CHANNEL_NAME, nullptr },
#endif
#if defined(CHANNEL_ENCOMSP_CLIENT)
    { FreeRDP_EncomspVirtualChannel, ENCOMSP_SVC_CHANNEL_NAME, settings },
#endif
#if defined(CHANNEL_REMDESK_CLIENT)
    { FreeRDP_RemdeskVirtualChannel, REMDESK_SVC_CHANNEL_NAME, settings },
#endif
#if defined(CHANNEL_RAIL_CLIENT)
    { FreeRDP_RemoteApplicationMode, RAIL_SVC_CHANNEL_NAME, settings }
#endif
  };

  /**
   * Step 1: first load dynamic channels according to the settings
   */
  for (size_t i = 0; i < ARRAYSIZE(dynChannels); i++)
  {
    if ((dynChannels[i].settingId == FreeRDP_BOOL_UNUSED) ||
        freerdp_settings_get_bool(settings, dynChannels[i].settingId))
    {
      const char* const p[] = { dynChannels[i].channelName };

      if (!freerdp_client_add_dynamic_channel(settings, ARRAYSIZE(p), p))
        return FALSE;
    }
  }

  /**
   * step 2: do various adjustments in the settings to handle channels and settings dependencies
   */
  if ((freerdp_static_channel_collection_find(settings, RDPSND_CHANNEL_NAME)) ||
      (freerdp_dynamic_channel_collection_find(settings, RDPSND_CHANNEL_NAME))
#if defined(CHANNEL_TSMF_CLIENT)
      || (freerdp_dynamic_channel_collection_find(settings, "tsmf"))
#endif
  )
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_DeviceRedirection, TRUE))
      return FALSE; /* rdpsnd requires rdpdr to be registered */
    if (!freerdp_settings_set_bool(settings, FreeRDP_AudioPlayback, TRUE))
      return FALSE; /* Both rdpsnd and tsmf require this flag to be set */
  }

  if (freerdp_dynamic_channel_collection_find(settings, AUDIN_CHANNEL_NAME))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_AudioCapture, TRUE))
      return FALSE;
  }

  if (freerdp_settings_get_bool(settings, FreeRDP_NetworkAutoDetect) ||
      freerdp_settings_get_bool(settings, FreeRDP_SupportHeartbeatPdu) ||
      freerdp_settings_get_bool(settings, FreeRDP_SupportMultitransport))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_DeviceRedirection, TRUE))
      return FALSE; /* these RDP8 features require rdpdr to be registered */
  }

  const char* DrivesToRedirect = freerdp_settings_get_string(settings, FreeRDP_DrivesToRedirect);

  if (DrivesToRedirect && (strlen(DrivesToRedirect) != 0))
  {
    /*
     * Drives to redirect:
     *
     * Very similar to DevicesToRedirect, but can contain a
     * comma-separated list of drive letters to redirect.
     */
    char* value = nullptr;
    char* tok = nullptr;
    char* context = nullptr;

    value = _strdup(DrivesToRedirect);
    if (!value)
      return FALSE;

    tok = strtok_s(value, ";", &context);
    if (!tok)
    {
      WLog_ERR(TAG, "DrivesToRedirect contains invalid data: '%s'", DrivesToRedirect);
      free(value);
      return FALSE;
    }

    while (tok)
    {
      /* Syntax: Comma separated list of the following entries:
       * '*'              ... Redirect all drives, including hotplug
       * 'DynamicDrives'  ... hotplug
       * '%'              ... user home directory
       * <label>(<path>)  ... One or more paths to redirect.
       * <path>(<label>)  ... One or more paths to redirect.
       * <path>           ... One or more paths to redirect.
       */
      /* TODO: Need to properly escape labels and paths */
      BOOL success = 0;
      const char* name = nullptr;
      const char* drive = tok;
      char* subcontext = nullptr;
      char* start = strtok_s(tok, "(", &subcontext);
      char* end = strtok_s(nullptr, ")", &subcontext);
      if (start && end)
        name = end;

      if (freerdp_path_valid(name, nullptr) && freerdp_path_valid(drive, nullptr))
      {
        success = freerdp_client_add_drive(settings, name, nullptr);
        if (success)
          success = freerdp_client_add_drive(settings, drive, nullptr);
      }
      else
        success = freerdp_client_add_drive(settings, drive, name);

      if (!success)
      {
        free(value);
        return FALSE;
      }

      tok = strtok_s(nullptr, ";", &context);
    }
    free(value);

    if (!freerdp_settings_set_bool(settings, FreeRDP_DeviceRedirection, TRUE))
      return FALSE;
  }
  else if (freerdp_settings_get_bool(settings, FreeRDP_RedirectDrives))
  {
    if (!freerdp_device_collection_find(settings, "drive"))
    {
      const char* const params[] = { "drive", "media", "*" };

      if (!freerdp_client_add_device_channel(settings, ARRAYSIZE(params), params))
        return FALSE;
    }
  }

  if (freerdp_settings_get_bool(settings, FreeRDP_RedirectDrives) ||
      freerdp_settings_get_bool(settings, FreeRDP_RedirectHomeDrive) ||
      freerdp_settings_get_bool(settings, FreeRDP_RedirectSerialPorts) ||
      freerdp_settings_get_bool(settings, FreeRDP_RedirectSmartCards) ||
      freerdp_settings_get_bool(settings, FreeRDP_RedirectPrinters))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_DeviceRedirection, TRUE))
      return FALSE; /* All of these features require rdpdr */
  }

  if (freerdp_settings_get_bool(settings, FreeRDP_RedirectHomeDrive))
  {
    if (!freerdp_device_collection_find(settings, "drive"))
    {
      const char* params[] = { "drive", "home", "%" };

      if (!freerdp_client_add_device_channel(settings, ARRAYSIZE(params), params))
        return FALSE;
    }
  }

  if (freerdp_settings_get_bool(settings, FreeRDP_DeviceRedirection))
  {
    if (!freerdp_client_load_static_channel_addin(channels, settings, RDPDR_SVC_CHANNEL_NAME,
                                                  settings))
      return FALSE;

    if (!freerdp_static_channel_collection_find(settings, RDPSND_CHANNEL_NAME) &&
        !freerdp_dynamic_channel_collection_find(settings, RDPSND_CHANNEL_NAME))
    {
      const char* const params[] = { RDPSND_CHANNEL_NAME, "sys:fake" };

      if (!freerdp_client_add_static_channel(settings, ARRAYSIZE(params), params))
        return FALSE;

      if (!freerdp_client_add_dynamic_channel(settings, ARRAYSIZE(params), params))
        return FALSE;
    }
  }

  if (freerdp_settings_get_bool(settings, FreeRDP_RedirectSmartCards))
  {
    if (!freerdp_device_collection_find_type(settings, RDPDR_DTYP_SMARTCARD))
    {
      RDPDR_DEVICE* smartcard = freerdp_device_new(RDPDR_DTYP_SMARTCARD, 0, nullptr);

      if (!smartcard)
        return FALSE;

      if (!freerdp_device_collection_add(settings, smartcard))
      {
        freerdp_device_free(smartcard);
        return FALSE;
      }
    }
  }

  if (freerdp_settings_get_bool(settings, FreeRDP_RedirectPrinters))
  {
    if (!freerdp_device_collection_find_type(settings, RDPDR_DTYP_PRINT))
    {
      RDPDR_DEVICE* printer = freerdp_device_new(RDPDR_DTYP_PRINT, 0, nullptr);

      if (!printer)
        return FALSE;

      if (!freerdp_device_collection_add(settings, printer))
      {
        freerdp_device_free(printer);
        return FALSE;
      }
    }
  }

  if (freerdp_settings_get_bool(settings, FreeRDP_LyncRdpMode))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_EncomspVirtualChannel, TRUE))
      return FALSE;
    if (!freerdp_settings_set_bool(settings, FreeRDP_RemdeskVirtualChannel, TRUE))
      return FALSE;
    if (!freerdp_settings_set_bool(settings, FreeRDP_CompressionEnabled, FALSE))
      return FALSE;
  }

  if (freerdp_settings_get_bool(settings, FreeRDP_RemoteAssistanceMode))
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_EncomspVirtualChannel, TRUE))
      return FALSE;
    if (!freerdp_settings_set_bool(settings, FreeRDP_RemdeskVirtualChannel, TRUE))
      return FALSE;
    if (!freerdp_settings_set_bool(settings, FreeRDP_NlaSecurity, FALSE))
      return FALSE;
  }

  /* step 3: schedule some static channels to load depending on the settings */
  for (size_t i = 0; i < ARRAYSIZE(staticChannels); i++)
  {
    if ((staticChannels[i].settingId == 0) ||
        freerdp_settings_get_bool(settings, staticChannels[i].settingId))
    {
      if (staticChannels[i].args)
      {
        if (!freerdp_client_load_static_channel_addin(
                channels, settings, staticChannels[i].channelName, staticChannels[i].args))
          return FALSE;
      }
      else
      {
        const char* const p[] = { staticChannels[i].channelName };
        if (!freerdp_client_add_static_channel(settings, ARRAYSIZE(p), p))
          return FALSE;
      }
    }
  }

#if !defined(WITHOUT_FREERDP_3x_DEPRECATED)
  {
    char* RDP2TCPArgs = freerdp_settings_get_string_writable(settings, FreeRDP_RDP2TCPArgs);
    if (RDP2TCPArgs)
    {
      const char* const p[] = { RDP2TCP_DVC_CHANNEL_NAME, RDP2TCPArgs };
      if (!freerdp_client_add_static_channel(settings, ARRAYSIZE(p), p))
        return FALSE;
    }
  }
#endif

  /* step 4: do the static channels loading and init */
  for (UINT32 i = 0; i < freerdp_settings_get_uint32(settings, FreeRDP_StaticChannelCount); i++)
  {
    ADDIN_ARGV* _args =
        freerdp_settings_get_pointer_array_writable(settings, FreeRDP_StaticChannelArray, i);

    if (!freerdp_client_load_static_channel_addin(channels, settings, _args->argv[0], _args))
      return FALSE;
  }

  if (freerdp_settings_get_uint32(settings, FreeRDP_DynamicChannelCount) > 0)
  {
    if (!freerdp_settings_set_bool(settings, FreeRDP_SupportDynamicChannels, TRUE))
      return FALSE;
  }

  if (freerdp_settings_get_bool(settings, FreeRDP_SupportDynamicChannels))
  {
    if (!freerdp_client_load_static_channel_addin(channels, settings, DRDYNVC_SVC_CHANNEL_NAME,
                                                  settings))
      return FALSE;
  }

  return TRUE;
}

void freerdp_client_warn_unmaintained(int argc, char* argv[])
{
  const char* app = (argc > 0) ? argv[0] : "INVALID_ARGV";
  wLog* log = WLog_Get(TAG);
  WINPR_ASSERT(log);

  freerdp_warn_unmaintained(log, "%s client", app);
}

void freerdp_client_warn_experimental(int argc, char* argv[])
{
  const char* app = (argc > 0) ? argv[0] : "INVALID_ARGV";
  wLog* log = WLog_Get(TAG);
  WINPR_ASSERT(log);

  freerdp_warn_experimental(log, "%s client", app);
}

void freerdp_client_warn_deprecated(int argc, char* argv[])
{
  const char* app = (argc > 0) ? argv[0] : "INVALID_ARGV";
  wLog* log = WLog_Get(TAG);
  WINPR_ASSERT(log);

  freerdp_warn_deprecated(log, "%s client",
                          "As replacement there is a SDL3 based client available.", app);
}

Coverage Report

Created: 2026-09-14 06:32