Coverage Report

Created: 2026-10-15 06:31

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/FreeRDP/libfreerdp/core/peer.c
Line
Count
Source
1
/**
2
 * FreeRDP: A Remote Desktop Protocol Implementation
3
 * RDP Server Peer
4
 *
5
 * Copyright 2011 Vic Lee
6
 * Copyright 2014 DI (FH) Martin Haimberger <martin.haimberger@thincast.com>
7
 * Copyright 2023 Armin Novak <anovak@thincast.com>
8
 * Copyright 2023 Thincast Technologies GmbH
9
 *
10
 * Licensed under the Apache License, Version 2.0 (the "License");
11
 * you may not use this file except in compliance with the License.
12
 * You may obtain a copy of the License at
13
 *
14
 *     http://www.apache.org/licenses/LICENSE-2.0
15
 *
16
 * Unless required by applicable law or agreed to in writing, software
17
 * distributed under the License is distributed on an "AS IS" BASIS,
18
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
19
 * See the License for the specific language governing permissions and
20
 * limitations under the License.
21
 */
22
23
#include <freerdp/config.h>
24
25
#include "settings.h"
26
27
#include <winpr/assert.h>
28
#include <winpr/cast.h>
29
#include <winpr/crt.h>
30
#include <winpr/winsock.h>
31
32
#include "info.h"
33
#include "display.h"
34
35
#include <freerdp/log.h>
36
#include <freerdp/streamdump.h>
37
#include <freerdp/redirection.h>
38
#include <freerdp/crypto/certificate.h>
39
40
#include "rdp.h"
41
#include "peer.h"
42
#include "multitransport.h"
43
44
7.10k
#define TAG FREERDP_TAG("core.peer")
45
46
static state_run_t peer_recv_pdu(freerdp_peer* client, wStream* s);
47
48
static HANDLE freerdp_peer_virtual_channel_open(freerdp_peer* client, const char* name,
49
                                                UINT32 flags)
50
0
{
51
0
  WINPR_ASSERT(client);
52
0
  WINPR_ASSERT(client->context);
53
0
  WINPR_ASSERT(client->context->rdp);
54
0
  WINPR_ASSERT(name);
55
0
  rdpMcs* mcs = client->context->rdp->mcs;
56
0
  WINPR_ASSERT(mcs);
57
58
0
  if (flags & WTS_CHANNEL_OPTION_DYNAMIC)
59
0
    return nullptr; /* not yet supported */
60
61
0
  const size_t length = strnlen(name, 9);
62
63
0
  if (length > 8)
64
0
    return nullptr; /* SVC maximum name length is 8 */
65
66
0
  BOOL joined = FALSE;
67
0
  UINT32 index = 0;
68
0
  rdpMcsChannel* mcsChannel = nullptr;
69
0
  for (; index < mcs->channelCount; index++)
70
0
  {
71
0
    mcsChannel = &(mcs->channels[index]);
72
73
0
    if (!mcsChannel->joined)
74
0
      continue;
75
76
0
    if (_strnicmp(name, mcsChannel->Name, length) == 0)
77
0
    {
78
0
      joined = TRUE;
79
0
      break;
80
0
    }
81
0
  }
82
83
0
  if (!joined)
84
0
    return nullptr; /* channel is not joined */
85
86
0
  rdpPeerChannel* peerChannel = (rdpPeerChannel*)mcsChannel->handle;
87
88
0
  if (peerChannel)
89
0
  {
90
    /* channel is already open */
91
0
    return (HANDLE)peerChannel;
92
0
  }
93
94
0
  WINPR_ASSERT(index <= UINT16_MAX);
95
0
  peerChannel =
96
0
      server_channel_common_new(client, (UINT16)index, mcsChannel->ChannelId, 128, nullptr, name);
97
98
0
  if (peerChannel)
99
0
  {
100
0
    peerChannel->channelFlags = flags;
101
0
    peerChannel->mcsChannel = mcsChannel;
102
0
    mcsChannel->handle = (void*)peerChannel;
103
0
  }
104
105
0
  return (HANDLE)peerChannel;
106
0
}
107
108
static BOOL freerdp_peer_virtual_channel_close(WINPR_ATTR_UNUSED freerdp_peer* client,
109
                                               HANDLE hChannel)
110
0
{
111
0
  rdpMcsChannel* mcsChannel = nullptr;
112
0
  rdpPeerChannel* peerChannel = nullptr;
113
114
0
  WINPR_ASSERT(client);
115
116
0
  if (!hChannel)
117
0
    return FALSE;
118
119
0
  peerChannel = (rdpPeerChannel*)hChannel;
120
0
  mcsChannel = peerChannel->mcsChannel;
121
0
  WINPR_ASSERT(mcsChannel);
122
0
  mcsChannel->handle = nullptr;
123
0
  server_channel_common_free(peerChannel);
124
0
  return TRUE;
125
0
}
126
127
static int freerdp_peer_virtual_channel_write(freerdp_peer* client, HANDLE hChannel,
128
                                              const BYTE* buffer, UINT32 length)
129
0
{
130
0
  wStream* s = nullptr;
131
0
  UINT32 flags = 0;
132
0
  UINT32 chunkSize = 0;
133
0
  UINT32 maxChunkSize = 0;
134
0
  UINT32 totalLength = 0;
135
0
  rdpPeerChannel* peerChannel = nullptr;
136
0
  rdpMcsChannel* mcsChannel = nullptr;
137
0
  rdpRdp* rdp = nullptr;
138
139
0
  WINPR_ASSERT(client);
140
0
  WINPR_ASSERT(client->context);
141
142
0
  rdp = client->context->rdp;
143
0
  WINPR_ASSERT(rdp);
144
0
  WINPR_ASSERT(rdp->settings);
145
146
0
  if (!hChannel)
147
0
    return -1;
148
149
0
  peerChannel = (rdpPeerChannel*)hChannel;
150
0
  mcsChannel = peerChannel->mcsChannel;
151
0
  WINPR_ASSERT(peerChannel);
152
0
  WINPR_ASSERT(mcsChannel);
153
0
  if (peerChannel->channelFlags & WTS_CHANNEL_OPTION_DYNAMIC)
154
0
    return -1; /* not yet supported */
155
156
0
  maxChunkSize = rdp->settings->VCChunkSize;
157
0
  totalLength = length;
158
0
  flags = CHANNEL_FLAG_FIRST;
159
160
0
  while (length > 0)
161
0
  {
162
0
    UINT16 sec_flags = 0;
163
0
    s = rdp_send_stream_init(rdp, &sec_flags);
164
165
0
    if (!s)
166
0
      return -1;
167
168
0
    if (length > maxChunkSize)
169
0
    {
170
0
      chunkSize = rdp->settings->VCChunkSize;
171
0
    }
172
0
    else
173
0
    {
174
0
      chunkSize = length;
175
0
      flags |= CHANNEL_FLAG_LAST;
176
0
    }
177
178
0
    if (mcsChannel->options & CHANNEL_OPTION_SHOW_PROTOCOL)
179
0
      flags |= CHANNEL_FLAG_SHOW_PROTOCOL;
180
181
0
    Stream_Write_UINT32(s, totalLength);
182
0
    Stream_Write_UINT32(s, flags);
183
184
0
    if (!Stream_EnsureRemainingCapacity(s, chunkSize))
185
0
    {
186
0
      Stream_Release(s);
187
0
      return -1;
188
0
    }
189
190
0
    Stream_Write(s, buffer, chunkSize);
191
192
0
    WINPR_ASSERT(peerChannel->channelId <= UINT16_MAX);
193
0
    if (!rdp_send(rdp, s, (UINT16)peerChannel->channelId, sec_flags))
194
0
      return -1;
195
196
0
    buffer += chunkSize;
197
0
    length -= chunkSize;
198
0
    flags = 0;
199
0
  }
200
201
0
  return 1;
202
0
}
203
204
static void* freerdp_peer_virtual_channel_get_data(WINPR_ATTR_UNUSED freerdp_peer* client,
205
                                                   HANDLE hChannel)
206
0
{
207
0
  rdpPeerChannel* peerChannel = (rdpPeerChannel*)hChannel;
208
209
0
  WINPR_ASSERT(client);
210
0
  if (!hChannel)
211
0
    return nullptr;
212
213
0
  return peerChannel->extra;
214
0
}
215
216
static int freerdp_peer_virtual_channel_set_data(WINPR_ATTR_UNUSED freerdp_peer* client,
217
                                                 HANDLE hChannel, void* data)
218
0
{
219
0
  rdpPeerChannel* peerChannel = (rdpPeerChannel*)hChannel;
220
221
0
  WINPR_ASSERT(client);
222
0
  if (!hChannel)
223
0
    return -1;
224
225
0
  peerChannel->extra = data;
226
0
  return 1;
227
0
}
228
229
static BOOL freerdp_peer_set_state(freerdp_peer* client, CONNECTION_STATE state)
230
0
{
231
0
  WINPR_ASSERT(client);
232
0
  WINPR_ASSERT(client->context);
233
0
  return rdp_server_transition_to_state(client->context->rdp, state);
234
0
}
235
236
static BOOL freerdp_peer_initialize(freerdp_peer* client)
237
0
{
238
0
  rdpRdp* rdp = nullptr;
239
0
  rdpSettings* settings = nullptr;
240
241
0
  WINPR_ASSERT(client);
242
0
  WINPR_ASSERT(client->context);
243
244
0
  rdp = client->context->rdp;
245
0
  WINPR_ASSERT(rdp);
246
247
0
  settings = rdp->settings;
248
0
  WINPR_ASSERT(settings);
249
250
0
  settings->ServerMode = TRUE;
251
0
  settings->FrameAcknowledge = 0;
252
0
  settings->LocalConnection = client->local;
253
254
0
  const rdpCertificate* cert =
255
0
      freerdp_settings_get_pointer(settings, FreeRDP_RdpServerCertificate);
256
0
  if (!cert)
257
0
  {
258
0
    WLog_ERR(TAG, "Missing server certificate, can not continue.");
259
0
    return FALSE;
260
0
  }
261
262
0
  if (freerdp_settings_get_bool(settings, FreeRDP_RdpSecurity))
263
0
  {
264
265
0
    if (!freerdp_certificate_is_rdp_security_compatible(cert))
266
0
    {
267
0
      if (!freerdp_settings_set_bool(settings, FreeRDP_RdpSecurity, FALSE))
268
0
        return FALSE;
269
0
      if (!freerdp_settings_set_bool(settings, FreeRDP_UseRdpSecurityLayer, FALSE))
270
0
        return FALSE;
271
0
    }
272
0
  }
273
274
0
  nego_set_RCG_supported(rdp->nego, settings->RemoteCredentialGuard);
275
0
  nego_set_restricted_admin_mode_supported(rdp->nego, settings->RestrictedAdminModeSupported);
276
277
0
  return (rdp_server_transition_to_state(rdp, CONNECTION_STATE_INITIAL));
278
0
}
279
280
#if defined(WITH_FREERDP_DEPRECATED)
281
static BOOL freerdp_peer_get_fds(freerdp_peer* client, void** rfds, int* rcount)
282
{
283
  rdpTransport* transport = nullptr;
284
  WINPR_ASSERT(client);
285
  WINPR_ASSERT(client->context);
286
  WINPR_ASSERT(client->context->rdp);
287
288
  transport = client->context->rdp->transport;
289
  WINPR_ASSERT(transport);
290
  transport_get_fds(transport, rfds, rcount);
291
  return TRUE;
292
}
293
#endif
294
295
static HANDLE freerdp_peer_get_event_handle(freerdp_peer* client)
296
0
{
297
0
  HANDLE hEvent = nullptr;
298
0
  rdpTransport* transport = nullptr;
299
0
  WINPR_ASSERT(client);
300
0
  WINPR_ASSERT(client->context);
301
0
  WINPR_ASSERT(client->context->rdp);
302
303
0
  transport = client->context->rdp->transport;
304
0
  hEvent = transport_get_front_bio(transport);
305
0
  return hEvent;
306
0
}
307
308
static DWORD freerdp_peer_get_event_handles(freerdp_peer* client, HANDLE* events, DWORD count)
309
0
{
310
0
  WINPR_ASSERT(client);
311
0
  WINPR_ASSERT(client->context);
312
0
  WINPR_ASSERT(client->context->rdp);
313
0
  return transport_get_event_handles(client->context->rdp->transport, events, count);
314
0
}
315
316
static BOOL freerdp_peer_check_fds(freerdp_peer* peer)
317
0
{
318
0
  int status = 0;
319
0
  rdpRdp* rdp = nullptr;
320
321
0
  WINPR_ASSERT(peer);
322
0
  WINPR_ASSERT(peer->context);
323
324
0
  rdp = peer->context->rdp;
325
0
  status = rdp_check_fds(rdp);
326
327
0
  return (status >= 0);
328
0
}
329
330
static state_run_t peer_recv_data_pdu(freerdp_peer* client, wStream* s,
331
                                      WINPR_ATTR_UNUSED UINT16 totalLength)
332
0
{
333
0
  BYTE type = 0;
334
0
  UINT16 length = 0;
335
0
  UINT32 share_id = 0;
336
0
  BYTE compressed_type = 0;
337
0
  UINT16 compressed_len = 0;
338
0
  rdpUpdate* update = nullptr;
339
340
0
  WINPR_ASSERT(s);
341
0
  WINPR_ASSERT(client);
342
0
  WINPR_ASSERT(client->context);
343
0
  rdpRdp* rdp = client->context->rdp;
344
0
  WINPR_ASSERT(rdp);
345
0
  WINPR_ASSERT(rdp->mcs);
346
347
0
  update = client->context->update;
348
0
  WINPR_ASSERT(update);
349
350
0
  if (!rdp_read_share_data_header(rdp, s, &length, &type, &share_id, &compressed_type,
351
0
                                  &compressed_len))
352
0
    return STATE_RUN_FAILED;
353
354
#ifdef WITH_DEBUG_RDP
355
  WLog_Print(rdp->log, WLOG_DEBUG, "recv %s Data PDU (0x%02" PRIX8 "), length: %" PRIu16 "",
356
             data_pdu_type_to_string(type), type, length);
357
#endif
358
359
0
  switch (type)
360
0
  {
361
0
    case DATA_PDU_TYPE_SYNCHRONIZE:
362
0
      if (!rdp_recv_client_synchronize_pdu(rdp, s))
363
0
        return STATE_RUN_FAILED;
364
365
0
      break;
366
367
0
    case DATA_PDU_TYPE_CONTROL:
368
0
      if (!rdp_server_accept_client_control_pdu(rdp, s))
369
0
        return STATE_RUN_FAILED;
370
371
0
      break;
372
373
0
    case DATA_PDU_TYPE_INPUT:
374
0
      if (!input_recv(rdp->input, s))
375
0
        return STATE_RUN_FAILED;
376
377
0
      break;
378
379
0
    case DATA_PDU_TYPE_BITMAP_CACHE_PERSISTENT_LIST:
380
0
      if (!rdp_server_accept_client_persistent_key_list_pdu(rdp, s))
381
0
        return STATE_RUN_FAILED;
382
0
      break;
383
384
0
    case DATA_PDU_TYPE_FONT_LIST:
385
0
      if (!rdp_server_accept_client_font_list_pdu(rdp, s))
386
0
        return STATE_RUN_FAILED;
387
388
0
      return STATE_RUN_CONTINUE; // State changed, trigger rerun
389
390
0
    case DATA_PDU_TYPE_SHUTDOWN_REQUEST:
391
0
      mcs_send_disconnect_provider_ultimatum(rdp->mcs,
392
0
                                             Disconnect_Ultimatum_provider_initiated);
393
0
      WLog_WARN(TAG, "disconnect provider ultimatum sent to peer, closing connection");
394
0
      return STATE_RUN_QUIT_SESSION;
395
396
0
    case DATA_PDU_TYPE_FRAME_ACKNOWLEDGE:
397
0
      if (!Stream_CheckAndLogRequiredLength(TAG, s, 4))
398
0
        return STATE_RUN_FAILED;
399
400
0
      Stream_Read_UINT32(s, client->ack_frame_id);
401
0
      if (update->SurfaceFrameAcknowledge)
402
0
      {
403
0
        if (!update->SurfaceFrameAcknowledge(update->context, client->ack_frame_id))
404
0
          return STATE_RUN_FAILED;
405
0
      }
406
0
      break;
407
408
0
    case DATA_PDU_TYPE_REFRESH_RECT:
409
0
      if (!update_read_refresh_rect(update, s))
410
0
        return STATE_RUN_FAILED;
411
412
0
      break;
413
414
0
    case DATA_PDU_TYPE_SUPPRESS_OUTPUT:
415
0
      if (!update_read_suppress_output(update, s))
416
0
        return STATE_RUN_FAILED;
417
418
0
      break;
419
420
0
    default:
421
0
      WLog_ERR(TAG, "Data PDU type %" PRIu8 "", type);
422
0
      break;
423
0
  }
424
425
0
  return STATE_RUN_SUCCESS;
426
0
}
427
428
static state_run_t peer_recv_tpkt_pdu(freerdp_peer* client, wStream* s)
429
0
{
430
0
  state_run_t rc = STATE_RUN_SUCCESS;
431
0
  UINT16 length = 0;
432
0
  UINT16 pduType = 0;
433
0
  UINT16 pduSource = 0;
434
0
  UINT16 channelId = 0;
435
0
  UINT16 securityFlags = 0;
436
437
0
  WINPR_ASSERT(s);
438
0
  WINPR_ASSERT(client);
439
0
  WINPR_ASSERT(client->context);
440
441
0
  rdpRdp* rdp = client->context->rdp;
442
0
  WINPR_ASSERT(rdp);
443
0
  WINPR_ASSERT(rdp->mcs);
444
445
0
  rdpSettings* settings = client->context->settings;
446
0
  WINPR_ASSERT(settings);
447
448
0
  if (!rdp_read_header(rdp, s, &length, &channelId))
449
0
    return STATE_RUN_FAILED;
450
451
0
  rdp->inPackets++;
452
0
  if (freerdp_shall_disconnect_context(rdp->context))
453
0
    return STATE_RUN_SUCCESS;
454
455
0
  if (rdp_get_state(rdp) <= CONNECTION_STATE_LICENSING)
456
0
  {
457
0
    return rdp_handle_message_channel(rdp, s, channelId, length);
458
0
  }
459
460
0
  if (!rdp_handle_optional_rdp_decryption(rdp, s, &length, &securityFlags))
461
0
    return STATE_RUN_FAILED;
462
463
0
  if (channelId == MCS_GLOBAL_CHANNEL_ID)
464
0
  {
465
0
    char buffer[256] = WINPR_C_ARRAY_INIT;
466
0
    UINT16 pduLength = 0;
467
0
    UINT16 remain = 0;
468
0
    if (!rdp_read_share_control_header(rdp, s, &pduLength, &remain, &pduType, &pduSource))
469
0
      return STATE_RUN_FAILED;
470
471
0
    settings->PduSource = pduSource;
472
473
0
    WLog_DBG(TAG, "Received %s", pdu_type_to_str(pduType, buffer, sizeof(buffer)));
474
0
    switch (pduType)
475
0
    {
476
0
      case PDU_TYPE_DATA:
477
0
        rc = peer_recv_data_pdu(client, s, pduLength);
478
0
        break;
479
480
0
      case PDU_TYPE_CONFIRM_ACTIVE:
481
0
        if (!rdp_server_accept_confirm_active(rdp, s, pduLength))
482
0
          return STATE_RUN_FAILED;
483
484
0
        break;
485
486
0
      case PDU_TYPE_FLOW_RESPONSE:
487
0
      case PDU_TYPE_FLOW_STOP:
488
0
      case PDU_TYPE_FLOW_TEST:
489
0
        if (!Stream_SafeSeek(s, remain))
490
0
        {
491
0
          WLog_WARN(TAG, "Short PDU, need %" PRIu16 " bytes, got %" PRIuz, remain,
492
0
                    Stream_GetRemainingLength(s));
493
0
          return STATE_RUN_FAILED;
494
0
        }
495
0
        break;
496
497
0
      default:
498
0
        WLog_ERR(TAG, "Client sent unknown pduType %" PRIu16 "", pduType);
499
0
        return STATE_RUN_FAILED;
500
0
    }
501
0
  }
502
0
  else if ((rdp->mcs->messageChannelId > 0) && (channelId == rdp->mcs->messageChannelId))
503
0
  {
504
0
    if (!settings->UseRdpSecurityLayer)
505
0
    {
506
0
      if (!rdp_read_security_header(rdp, s, &securityFlags, nullptr))
507
0
        return STATE_RUN_FAILED;
508
0
    }
509
510
0
    return rdp_recv_message_channel_pdu(rdp, s, securityFlags);
511
0
  }
512
0
  else
513
0
  {
514
0
    if (!freerdp_channel_peer_process(client, s, channelId))
515
0
      return STATE_RUN_FAILED;
516
0
  }
517
0
  if (!tpkt_ensure_stream_consumed(rdp->log, s, length))
518
0
    return STATE_RUN_FAILED;
519
520
0
  return rc;
521
0
}
522
523
static state_run_t peer_recv_handle_auto_detect(freerdp_peer* client, wStream* s)
524
0
{
525
0
  state_run_t ret = STATE_RUN_FAILED;
526
0
  rdpRdp* rdp = nullptr;
527
528
0
  WINPR_ASSERT(client);
529
0
  WINPR_ASSERT(s);
530
0
  WINPR_ASSERT(client->context);
531
532
0
  rdp = client->context->rdp;
533
0
  WINPR_ASSERT(rdp);
534
535
0
  const rdpSettings* settings = client->context->settings;
536
0
  WINPR_ASSERT(settings);
537
538
0
  if (freerdp_settings_get_bool(settings, FreeRDP_NetworkAutoDetect))
539
0
  {
540
0
    switch (rdp_get_state(rdp))
541
0
    {
542
0
      case CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_REQUEST:
543
0
        autodetect_on_connect_time_auto_detect_begin(rdp->autodetect);
544
0
        switch (autodetect_get_state(rdp->autodetect))
545
0
        {
546
0
          case FREERDP_AUTODETECT_STATE_REQUEST:
547
0
            ret = STATE_RUN_SUCCESS;
548
0
            if (!rdp_server_transition_to_state(
549
0
                    rdp, CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_RESPONSE))
550
0
              return STATE_RUN_FAILED;
551
0
            break;
552
0
          case FREERDP_AUTODETECT_STATE_COMPLETE:
553
0
            ret = STATE_RUN_CONTINUE; /* Rerun in next state */
554
0
            if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_LICENSING))
555
0
              return STATE_RUN_FAILED;
556
0
            break;
557
0
          default:
558
0
            break;
559
0
        }
560
0
        break;
561
0
      case CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_RESPONSE:
562
0
        ret = peer_recv_pdu(client, s);
563
0
        if (state_run_success(ret))
564
0
        {
565
0
          autodetect_on_connect_time_auto_detect_progress(rdp->autodetect);
566
0
          switch (autodetect_get_state(rdp->autodetect))
567
0
          {
568
0
            case FREERDP_AUTODETECT_STATE_REQUEST:
569
0
              ret = STATE_RUN_SUCCESS;
570
0
              break;
571
0
            case FREERDP_AUTODETECT_STATE_COMPLETE:
572
0
              ret = STATE_RUN_CONTINUE; /* Rerun in next state */
573
0
              if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_LICENSING))
574
0
                return STATE_RUN_FAILED;
575
0
              break;
576
0
            default:
577
0
              break;
578
0
          }
579
0
        }
580
0
        break;
581
0
      default:
582
0
        WINPR_ASSERT(FALSE);
583
0
        break;
584
0
    }
585
0
  }
586
0
  else
587
0
  {
588
0
    if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_LICENSING))
589
0
      return STATE_RUN_FAILED;
590
591
0
    ret = STATE_RUN_CONTINUE; /* Rerun in next state */
592
0
  }
593
594
0
  return ret;
595
0
}
596
597
static state_run_t peer_recv_handle_licensing(freerdp_peer* client, wStream* s)
598
0
{
599
0
  state_run_t ret = STATE_RUN_FAILED;
600
0
  rdpRdp* rdp = nullptr;
601
0
  rdpSettings* settings = nullptr;
602
603
0
  WINPR_ASSERT(client);
604
0
  WINPR_ASSERT(s);
605
0
  WINPR_ASSERT(client->context);
606
607
0
  rdp = client->context->rdp;
608
0
  WINPR_ASSERT(rdp);
609
610
0
  settings = rdp->settings;
611
0
  WINPR_ASSERT(settings);
612
613
0
  switch (license_get_state(rdp->license))
614
0
  {
615
0
    case LICENSE_STATE_INITIAL:
616
0
    {
617
0
      const BOOL required =
618
0
          freerdp_settings_get_bool(settings, FreeRDP_ServerLicenseRequired);
619
620
0
      if (required)
621
0
      {
622
0
        if (!license_server_configure(rdp->license))
623
0
          ret = STATE_RUN_FAILED;
624
0
        else if (!license_server_send_request(rdp->license))
625
0
          ret = STATE_RUN_FAILED;
626
0
        else
627
0
          ret = STATE_RUN_SUCCESS;
628
0
      }
629
0
      else
630
0
      {
631
0
        if (license_send_valid_client_error_packet(rdp))
632
0
          ret = STATE_RUN_CONTINUE; /* Rerun in next state, might be capabilities */
633
0
      }
634
0
    }
635
0
    break;
636
0
    case LICENSE_STATE_COMPLETED:
637
0
      ret = STATE_RUN_CONTINUE; /* Licensing completed, continue in next state */
638
0
      break;
639
0
    case LICENSE_STATE_ABORTED:
640
0
      ret = STATE_RUN_FAILED;
641
0
      break;
642
0
    default:
643
0
      ret = peer_recv_pdu(client, s);
644
0
      break;
645
0
  }
646
647
0
  return ret;
648
0
}
649
650
static state_run_t peer_recv_fastpath_pdu(freerdp_peer* client, wStream* s)
651
0
{
652
0
  rdpRdp* rdp = nullptr;
653
0
  UINT16 length = 0;
654
0
  BOOL rc = 0;
655
0
  rdpFastPath* fastpath = nullptr;
656
657
0
  WINPR_ASSERT(s);
658
0
  WINPR_ASSERT(client);
659
0
  WINPR_ASSERT(client->context);
660
661
0
  rdp = client->context->rdp;
662
0
  WINPR_ASSERT(rdp);
663
664
0
  fastpath = rdp->fastpath;
665
0
  WINPR_ASSERT(fastpath);
666
667
0
  rc = fastpath_read_header_rdp(fastpath, s, &length);
668
669
0
  if (!rc || (length == 0))
670
0
  {
671
0
    WLog_ERR(TAG, "incorrect FastPath PDU header length %" PRIu16 "", length);
672
0
    return STATE_RUN_FAILED;
673
0
  }
674
0
  if (!Stream_CheckAndLogRequiredLength(TAG, s, length))
675
0
    return STATE_RUN_FAILED;
676
677
0
  if (!fastpath_decrypt(fastpath, s, &length))
678
0
    return STATE_RUN_FAILED;
679
680
0
  rdp->inPackets++;
681
682
0
  return fastpath_recv_inputs(fastpath, s);
683
0
}
684
685
state_run_t peer_recv_pdu(freerdp_peer* client, wStream* s)
686
0
{
687
0
  int rc = tpkt_verify_header(s);
688
689
0
  if (rc > 0)
690
0
    return peer_recv_tpkt_pdu(client, s);
691
0
  else if (rc == 0)
692
0
    return peer_recv_fastpath_pdu(client, s);
693
0
  else
694
0
    return STATE_RUN_FAILED;
695
0
}
696
697
static state_run_t peer_unexpected_client_message(rdpRdp* rdp, UINT32 flag)
698
0
{
699
0
  char buffer[1024] = WINPR_C_ARRAY_INIT;
700
0
  WLog_WARN(TAG, "Unexpected client message in state %s, missing flag %s",
701
0
            rdp_get_state_string(rdp), rdp_finalize_flags_to_str(flag, buffer, sizeof(buffer)));
702
0
  return STATE_RUN_SUCCESS; /* we ignore this as per spec input PDU are already allowed */
703
0
}
704
705
state_run_t rdp_peer_handle_state_demand_active(freerdp_peer* client)
706
0
{
707
0
  state_run_t ret = STATE_RUN_FAILED;
708
709
0
  WINPR_ASSERT(client);
710
0
  WINPR_ASSERT(client->context);
711
712
0
  rdpRdp* rdp = client->context->rdp;
713
0
  WINPR_ASSERT(rdp);
714
715
0
  if (client->Capabilities && !client->Capabilities(client))
716
0
  {
717
0
    WLog_ERR(TAG, "[%s] freerdp_peer::Capabilities() callback failed",
718
0
             rdp_get_state_string(rdp));
719
0
  }
720
0
  else if (!rdp_send_demand_active(rdp))
721
0
  {
722
0
    WLog_ERR(TAG, "[%s] rdp_send_demand_active() fail", rdp_get_state_string(rdp));
723
0
  }
724
0
  else
725
0
  {
726
0
    if (!rdp_server_transition_to_state(rdp,
727
0
                                        CONNECTION_STATE_CAPABILITIES_EXCHANGE_MONITOR_LAYOUT))
728
0
      return STATE_RUN_FAILED;
729
0
    ret = STATE_RUN_CONTINUE;
730
0
  }
731
0
  return ret;
732
0
}
733
734
/** \brief Handle server peer state ACTIVE:
735
 *  On initial run (not connected, not activated) do not read data
736
 *
737
 *  \return -1 in case of an error, 0 if no data needs to be processed, 1 to let
738
 *  the state machine run again and 2 if peer_recv_pdu must be called.
739
 */
740
static state_run_t rdp_peer_handle_state_active(freerdp_peer* client)
741
0
{
742
0
  state_run_t ret = STATE_RUN_FAILED;
743
744
0
  WINPR_ASSERT(client);
745
0
  WINPR_ASSERT(client->context);
746
747
0
  if (!client->connected)
748
0
  {
749
    /**
750
     * PostConnect should only be called once and should not
751
     * be called after a reactivation sequence.
752
     */
753
0
    IFCALLRET(client->PostConnect, client->connected, client);
754
0
  }
755
0
  if (!client->connected)
756
0
  {
757
0
    WLog_ERR(TAG, "PostConnect for peer %p failed", WINPR_CXX_COMPAT_CAST(const void*, client));
758
0
    ret = STATE_RUN_FAILED;
759
0
  }
760
0
  else if (!client->activated)
761
0
  {
762
0
    BOOL activated = TRUE;
763
764
    /*  Set client->activated TRUE before calling the Activate callback.
765
     *  the Activate callback might reset the client->activated flag even if it returns success
766
     * (e.g. deactivate/reactivate sequence) */
767
0
    client->activated = TRUE;
768
0
    IFCALLRET(client->Activate, activated, client);
769
770
0
    if (!activated)
771
0
    {
772
0
      WLog_ERR(TAG, "Activate for peer %p failed",
773
0
               WINPR_CXX_COMPAT_CAST(const void*, client));
774
0
      ret = STATE_RUN_FAILED;
775
0
    }
776
0
    else
777
0
      ret = STATE_RUN_SUCCESS;
778
0
  }
779
0
  else
780
0
    ret = STATE_RUN_ACTIVE;
781
0
  return ret;
782
0
}
783
784
static state_run_t peer_recv_callback_internal(WINPR_ATTR_UNUSED rdpTransport* transport,
785
                                               wStream* s, void* extra)
786
0
{
787
0
  freerdp_peer* client = (freerdp_peer*)extra;
788
0
  state_run_t ret = STATE_RUN_FAILED;
789
790
0
  WINPR_ASSERT(transport);
791
0
  WINPR_ASSERT(client);
792
0
  WINPR_ASSERT(client->context);
793
794
0
  rdpRdp* rdp = client->context->rdp;
795
0
  WINPR_ASSERT(rdp);
796
797
0
  rdpSettings* settings = client->context->settings;
798
0
  WINPR_ASSERT(settings);
799
800
0
  if (client->ReachedState)
801
0
  {
802
0
    if (!client->ReachedState(client, rdp_get_state(rdp)))
803
0
      return STATE_RUN_FAILED;
804
0
  }
805
0
  switch (rdp_get_state(rdp))
806
0
  {
807
0
    case CONNECTION_STATE_INITIAL:
808
0
      if (!freerdp_settings_enforce_consistency(settings))
809
0
        ret = STATE_RUN_FAILED;
810
0
      else if (rdp_server_transition_to_state(rdp, CONNECTION_STATE_NEGO))
811
0
        ret = STATE_RUN_CONTINUE;
812
0
      break;
813
814
0
    case CONNECTION_STATE_NEGO:
815
0
      if (!rdp_server_accept_nego(rdp, s))
816
0
      {
817
0
        WLog_ERR(TAG, "%s - rdp_server_accept_nego() fail", rdp_get_state_string(rdp));
818
0
      }
819
0
      else
820
0
      {
821
0
        const UINT32 SelectedProtocol = nego_get_selected_protocol(rdp->nego);
822
823
0
        settings->RdstlsSecurity = (SelectedProtocol & PROTOCOL_RDSTLS) != 0;
824
0
        settings->NlaSecurity = (SelectedProtocol & PROTOCOL_HYBRID) != 0;
825
0
        settings->ExtSecurity = (SelectedProtocol & PROTOCOL_HYBRID_EX) != 0;
826
0
        settings->TlsSecurity = (SelectedProtocol & PROTOCOL_SSL) != 0;
827
0
        settings->RdpSecurity = (SelectedProtocol == PROTOCOL_RDP) != 0;
828
829
0
        client->authenticated = FALSE;
830
0
        if (SelectedProtocol & PROTOCOL_HYBRID)
831
0
        {
832
0
          SEC_WINNT_AUTH_IDENTITY_INFO* identity =
833
0
              (SEC_WINNT_AUTH_IDENTITY_INFO*)nego_get_identity(rdp->nego);
834
0
          if (sspi_CopyAuthIdentity(&client->identity, identity) >= 0)
835
0
          {
836
0
            client->authenticated =
837
0
                IFCALLRESULT(TRUE, client->Logon, client, &client->identity, TRUE);
838
0
          }
839
0
          nego_free_nla(rdp->nego);
840
0
        }
841
0
        else
842
0
        {
843
0
          client->authenticated =
844
0
              IFCALLRESULT(TRUE, client->Logon, client, &client->identity, FALSE);
845
0
        }
846
0
        if (!client->authenticated)
847
0
          ret = STATE_RUN_FAILED;
848
0
        else
849
0
        {
850
0
          if (rdp_server_transition_to_state(rdp, CONNECTION_STATE_MCS_CREATE_REQUEST))
851
0
            ret = STATE_RUN_SUCCESS;
852
0
        }
853
0
      }
854
0
      break;
855
856
0
    case CONNECTION_STATE_NLA:
857
0
      WINPR_ASSERT(FALSE); // TODO
858
0
      break;
859
860
0
    case CONNECTION_STATE_MCS_CREATE_REQUEST:
861
0
      if (!rdp_server_accept_mcs_connect_initial(rdp, s))
862
0
      {
863
0
        WLog_ERR(TAG,
864
0
                 "%s - "
865
0
                 "rdp_server_accept_mcs_connect_initial() fail",
866
0
                 rdp_get_state_string(rdp));
867
0
      }
868
0
      else
869
0
        ret = STATE_RUN_SUCCESS;
870
871
0
      break;
872
873
0
    case CONNECTION_STATE_MCS_ERECT_DOMAIN:
874
0
      if (!rdp_server_accept_mcs_erect_domain_request(rdp, s))
875
0
      {
876
0
        WLog_ERR(TAG,
877
0
                 "%s - "
878
0
                 "rdp_server_accept_mcs_erect_domain_request() fail",
879
0
                 rdp_get_state_string(rdp));
880
0
      }
881
0
      else
882
0
        ret = STATE_RUN_SUCCESS;
883
884
0
      break;
885
886
0
    case CONNECTION_STATE_MCS_ATTACH_USER:
887
0
      if (!rdp_server_accept_mcs_attach_user_request(rdp, s))
888
0
      {
889
0
        WLog_ERR(TAG,
890
0
                 "%s - "
891
0
                 "rdp_server_accept_mcs_attach_user_request() fail",
892
0
                 rdp_get_state_string(rdp));
893
0
      }
894
0
      else
895
0
        ret = STATE_RUN_SUCCESS;
896
897
0
      break;
898
899
0
    case CONNECTION_STATE_MCS_CHANNEL_JOIN_REQUEST:
900
0
      if (!rdp_server_accept_mcs_channel_join_request(rdp, s))
901
0
      {
902
0
        WLog_ERR(TAG,
903
0
                 "%s - "
904
0
                 "rdp_server_accept_mcs_channel_join_request() fail",
905
0
                 rdp_get_state_string(rdp));
906
0
      }
907
0
      else
908
0
        ret = STATE_RUN_SUCCESS;
909
0
      break;
910
911
0
    case CONNECTION_STATE_RDP_SECURITY_COMMENCEMENT:
912
0
      ret = STATE_RUN_SUCCESS;
913
914
0
      if (!rdp_server_establish_keys(rdp, s))
915
0
      {
916
0
        WLog_ERR(TAG,
917
0
                 "%s - "
918
0
                 "rdp_server_establish_keys() fail",
919
0
                 rdp_get_state_string(rdp));
920
0
        ret = STATE_RUN_FAILED;
921
0
      }
922
923
0
      if (state_run_success(ret))
924
0
      {
925
0
        if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_SECURE_SETTINGS_EXCHANGE))
926
0
          ret = STATE_RUN_FAILED;
927
0
        else if (Stream_GetRemainingLength(s) > 0)
928
0
          ret = STATE_RUN_CONTINUE; /* Rerun function */
929
0
      }
930
0
      break;
931
932
0
    case CONNECTION_STATE_SECURE_SETTINGS_EXCHANGE:
933
0
      if (rdp_recv_client_info(rdp, s))
934
0
      {
935
0
        if (rdp_server_transition_to_state(
936
0
                rdp, CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_REQUEST))
937
0
          ret = STATE_RUN_CONTINUE;
938
0
      }
939
0
      break;
940
941
0
    case CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_REQUEST:
942
0
    case CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_RESPONSE:
943
0
      ret = peer_recv_handle_auto_detect(client, s);
944
0
      break;
945
946
0
    case CONNECTION_STATE_LICENSING:
947
0
      ret = peer_recv_handle_licensing(client, s);
948
0
      if (ret == STATE_RUN_CONTINUE)
949
0
      {
950
0
        if (!rdp_server_transition_to_state(
951
0
                rdp, CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_REQUEST))
952
0
          ret = STATE_RUN_FAILED;
953
0
      }
954
0
      break;
955
956
0
    case CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_REQUEST:
957
0
      if (settings->SupportMultitransport &&
958
0
          ((settings->MultitransportFlags & INITIATE_REQUEST_PROTOCOL_UDPFECR) != 0))
959
0
      {
960
        /* only UDP reliable for now, nobody does lossy UDP (MS-RDPUDP only) these days */
961
0
        ret = multitransport_server_request(rdp->multitransport,
962
0
                                            INITIATE_REQUEST_PROTOCOL_UDPFECR);
963
0
        switch (ret)
964
0
        {
965
0
          case STATE_RUN_SUCCESS:
966
0
            if (!rdp_server_transition_to_state(
967
0
                    rdp, CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_RESPONSE))
968
0
              ret = STATE_RUN_FAILED;
969
0
            break;
970
0
          case STATE_RUN_CONTINUE:
971
            /* mismatch on the supported kind of UDP transports */
972
0
            if (!rdp_server_transition_to_state(
973
0
                    rdp, CONNECTION_STATE_CAPABILITIES_EXCHANGE_DEMAND_ACTIVE))
974
0
              ret = STATE_RUN_FAILED;
975
0
            break;
976
0
          default:
977
0
            break;
978
0
        }
979
0
      }
980
0
      else
981
0
      {
982
0
        if (rdp_server_transition_to_state(
983
0
                rdp, CONNECTION_STATE_CAPABILITIES_EXCHANGE_DEMAND_ACTIVE))
984
0
          ret = STATE_RUN_CONTINUE; /* Rerun, initialize next state */
985
0
      }
986
0
      break;
987
0
    case CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_RESPONSE:
988
0
      ret = peer_recv_pdu(client, s);
989
0
      break;
990
991
0
    case CONNECTION_STATE_CAPABILITIES_EXCHANGE_DEMAND_ACTIVE:
992
0
      ret = rdp_peer_handle_state_demand_active(client);
993
0
      break;
994
995
0
    case CONNECTION_STATE_CAPABILITIES_EXCHANGE_MONITOR_LAYOUT:
996
0
      if (freerdp_settings_get_bool(settings, FreeRDP_SupportMonitorLayoutPdu))
997
0
      {
998
0
        MONITOR_DEF* monitors = nullptr;
999
1000
0
        if (client->AdjustMonitorsLayout)
1001
0
        {
1002
0
          if (!client->AdjustMonitorsLayout(client))
1003
0
            return STATE_RUN_FAILED;
1004
0
        }
1005
1006
        /* client supports the monitorLayout PDU, let's send him the monitors if any */
1007
0
        ret = STATE_RUN_SUCCESS;
1008
0
        if (freerdp_settings_get_uint32(settings, FreeRDP_MonitorCount) == 0)
1009
0
        {
1010
0
          const UINT32 w = freerdp_settings_get_uint32(settings, FreeRDP_DesktopWidth);
1011
0
          const UINT32 h = freerdp_settings_get_uint32(settings, FreeRDP_DesktopHeight);
1012
0
          const rdpMonitor primary = { .x = 0,
1013
0
                                     .y = 0,
1014
0
                                     .width = WINPR_ASSERTING_INT_CAST(int32_t, w),
1015
0
                                     .height = WINPR_ASSERTING_INT_CAST(int32_t, h),
1016
0
                                     .is_primary = TRUE,
1017
0
                                     .orig_screen = 0,
1018
0
                                     .attributes = { .physicalWidth = w,
1019
0
                                                     .physicalHeight = h,
1020
0
                                                     .orientation =
1021
0
                                                         ORIENTATION_LANDSCAPE,
1022
0
                                                     .desktopScaleFactor = 100,
1023
0
                                                     .deviceScaleFactor = 100 } };
1024
0
          if (!freerdp_settings_set_pointer_array(settings, FreeRDP_MonitorDefArray, 0,
1025
0
                                                  &primary))
1026
0
            ret = STATE_RUN_FAILED;
1027
0
          else if (!freerdp_settings_set_uint32(settings, FreeRDP_MonitorCount, 1))
1028
0
            ret = STATE_RUN_FAILED;
1029
0
        }
1030
0
        if (state_run_failed(ret))
1031
0
        {
1032
0
        }
1033
0
        else if (!display_convert_rdp_monitor_to_monitor_def(
1034
0
                     settings->MonitorCount, settings->MonitorDefArray, &monitors))
1035
0
        {
1036
0
          ret = STATE_RUN_FAILED;
1037
0
        }
1038
0
        else if (!freerdp_display_send_monitor_layout(rdp->context, settings->MonitorCount,
1039
0
                                                      monitors))
1040
0
        {
1041
0
          ret = STATE_RUN_FAILED;
1042
0
        }
1043
0
        else
1044
0
          ret = STATE_RUN_SUCCESS;
1045
0
        free(monitors);
1046
1047
0
        const size_t len = Stream_GetRemainingLength(s);
1048
0
        if (!state_run_failed(ret) && (len > 0))
1049
0
          ret = STATE_RUN_CONTINUE;
1050
0
      }
1051
0
      else
1052
0
      {
1053
0
        const size_t len = Stream_GetRemainingLength(s);
1054
0
        if (len > 0)
1055
0
          ret = STATE_RUN_CONTINUE;
1056
0
        else
1057
0
          ret = STATE_RUN_SUCCESS;
1058
0
      }
1059
0
      if (state_run_success(ret))
1060
0
      {
1061
0
        if (!rdp_server_transition_to_state(
1062
0
                rdp, CONNECTION_STATE_CAPABILITIES_EXCHANGE_CONFIRM_ACTIVE))
1063
0
          ret = STATE_RUN_FAILED;
1064
0
      }
1065
0
      break;
1066
1067
0
    case CONNECTION_STATE_CAPABILITIES_EXCHANGE_CONFIRM_ACTIVE:
1068
      /**
1069
       * During reactivation sequence the client might sent some input or channel data
1070
       * before receiving the Deactivate All PDU. We need to process them as usual.
1071
       */
1072
0
      ret = peer_recv_pdu(client, s);
1073
0
      break;
1074
1075
0
    case CONNECTION_STATE_FINALIZATION_SYNC:
1076
0
      ret = peer_recv_pdu(client, s);
1077
0
      if (rdp_finalize_is_flag_set(rdp, FINALIZE_CS_SYNCHRONIZE_PDU))
1078
0
      {
1079
0
        if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_FINALIZATION_COOPERATE))
1080
0
          ret = STATE_RUN_FAILED;
1081
0
      }
1082
0
      else
1083
0
        ret = peer_unexpected_client_message(rdp, FINALIZE_CS_SYNCHRONIZE_PDU);
1084
0
      break;
1085
0
    case CONNECTION_STATE_FINALIZATION_COOPERATE:
1086
0
      ret = peer_recv_pdu(client, s);
1087
0
      if (rdp_finalize_is_flag_set(rdp, FINALIZE_CS_CONTROL_COOPERATE_PDU))
1088
0
      {
1089
0
        if (!rdp_server_transition_to_state(rdp,
1090
0
                                            CONNECTION_STATE_FINALIZATION_REQUEST_CONTROL))
1091
0
          ret = STATE_RUN_FAILED;
1092
0
      }
1093
0
      else
1094
0
        ret = peer_unexpected_client_message(rdp, FINALIZE_CS_CONTROL_COOPERATE_PDU);
1095
0
      break;
1096
0
    case CONNECTION_STATE_FINALIZATION_REQUEST_CONTROL:
1097
0
      ret = peer_recv_pdu(client, s);
1098
0
      if (rdp_finalize_is_flag_set(rdp, FINALIZE_CS_CONTROL_REQUEST_PDU))
1099
0
      {
1100
0
        if (!rdp_send_server_control_granted_pdu(rdp))
1101
0
          ret = STATE_RUN_FAILED;
1102
0
        else if (!rdp_server_transition_to_state(
1103
0
                     rdp, CONNECTION_STATE_FINALIZATION_PERSISTENT_KEY_LIST))
1104
0
          ret = STATE_RUN_FAILED;
1105
0
      }
1106
0
      else
1107
0
        ret = peer_unexpected_client_message(rdp, FINALIZE_CS_CONTROL_REQUEST_PDU);
1108
0
      break;
1109
0
    case CONNECTION_STATE_FINALIZATION_PERSISTENT_KEY_LIST:
1110
0
      if (freerdp_settings_get_bool(settings, FreeRDP_BitmapCachePersistEnabled) &&
1111
0
          !rdp_finalize_is_flag_set(rdp, FINALIZE_DEACTIVATE_REACTIVATE))
1112
0
      {
1113
0
        ret = peer_recv_pdu(client, s);
1114
1115
0
        if (rdp_finalize_is_flag_set(rdp, FINALIZE_CS_PERSISTENT_KEY_LIST_PDU))
1116
0
        {
1117
0
          if (!rdp_server_transition_to_state(rdp,
1118
0
                                              CONNECTION_STATE_FINALIZATION_FONT_LIST))
1119
0
            ret = STATE_RUN_FAILED;
1120
0
        }
1121
0
        else
1122
0
          ret = peer_unexpected_client_message(rdp,
1123
0
                                               CONNECTION_STATE_FINALIZATION_FONT_LIST);
1124
0
      }
1125
0
      else
1126
0
      {
1127
0
        if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_FINALIZATION_FONT_LIST))
1128
0
          ret = STATE_RUN_FAILED;
1129
0
        else
1130
0
          ret = STATE_RUN_CONTINUE;
1131
0
      }
1132
0
      break;
1133
0
    case CONNECTION_STATE_FINALIZATION_FONT_LIST:
1134
0
      ret = peer_recv_pdu(client, s);
1135
0
      if (state_run_success(ret))
1136
0
      {
1137
0
        if (rdp_finalize_is_flag_set(rdp, FINALIZE_CS_FONT_LIST_PDU))
1138
0
        {
1139
0
          if (!rdp_server_transition_to_state(rdp, CONNECTION_STATE_ACTIVE))
1140
0
            ret = STATE_RUN_FAILED;
1141
0
          else
1142
0
          {
1143
0
            update_reset_state(rdp->update);
1144
0
            ret = STATE_RUN_CONTINUE;
1145
0
          }
1146
0
        }
1147
0
        else
1148
0
          ret = peer_unexpected_client_message(rdp, FINALIZE_CS_FONT_LIST_PDU);
1149
0
      }
1150
0
      break;
1151
1152
0
    case CONNECTION_STATE_ACTIVE:
1153
0
      ret = rdp_peer_handle_state_active(client);
1154
0
      if (ret >= STATE_RUN_ACTIVE)
1155
0
        ret = peer_recv_pdu(client, s);
1156
0
      break;
1157
1158
      /* States that must not happen in server state machine */
1159
0
    case CONNECTION_STATE_FINALIZATION_CLIENT_SYNC:
1160
0
    case CONNECTION_STATE_FINALIZATION_CLIENT_COOPERATE:
1161
0
    case CONNECTION_STATE_FINALIZATION_CLIENT_GRANTED_CONTROL:
1162
0
    case CONNECTION_STATE_FINALIZATION_CLIENT_FONT_MAP:
1163
0
    default:
1164
0
      WLog_ERR(TAG, "%s state %" PRId32, rdp_get_state_string(rdp),
1165
0
               WINPR_CXX_COMPAT_CAST(int32_t, rdp_get_state(rdp)));
1166
0
      break;
1167
0
  }
1168
1169
0
  return ret;
1170
0
}
1171
1172
static state_run_t peer_recv_callback(rdpTransport* transport, wStream* s, void* extra)
1173
0
{
1174
0
  char buffer[64] = WINPR_C_ARRAY_INIT;
1175
0
  state_run_t rc = STATE_RUN_FAILED;
1176
0
  const size_t start = Stream_GetPosition(s);
1177
0
  const rdpContext* context = transport_get_context(transport);
1178
0
  DWORD level = WLOG_TRACE;
1179
0
  static wLog* log = nullptr;
1180
0
  if (!log)
1181
0
    log = WLog_Get(TAG);
1182
1183
0
  WINPR_ASSERT(context);
1184
0
  do
1185
0
  {
1186
0
    const rdpRdp* rdp = context->rdp;
1187
0
    const char* old = rdp_get_state_string(rdp);
1188
1189
0
    if (rc == STATE_RUN_TRY_AGAIN)
1190
0
    {
1191
0
      if (!Stream_SetPosition(s, start))
1192
0
        return STATE_RUN_FAILED;
1193
0
    }
1194
0
    rc = peer_recv_callback_internal(transport, s, extra);
1195
1196
0
    const size_t len = Stream_GetRemainingLength(s);
1197
0
    if ((len > 0) && !state_run_continue(rc))
1198
0
      level = WLOG_WARN;
1199
0
    WLog_Print(log, level,
1200
0
               "(server)[%s -> %s] current return %s [%" PRIuz " bytes not processed]", old,
1201
0
               rdp_get_state_string(rdp), state_run_result_string(rc, buffer, sizeof(buffer)),
1202
0
               len);
1203
0
  } while (state_run_continue(rc));
1204
1205
0
  return rc;
1206
0
}
1207
1208
static BOOL freerdp_peer_close(freerdp_peer* client)
1209
0
{
1210
0
  UINT32 SelectedProtocol = 0;
1211
0
  rdpContext* context = nullptr;
1212
1213
0
  WINPR_ASSERT(client);
1214
1215
0
  context = client->context;
1216
0
  WINPR_ASSERT(context);
1217
0
  WINPR_ASSERT(context->settings);
1218
0
  WINPR_ASSERT(context->rdp);
1219
1220
  /** if negotiation has failed, we're not MCS connected. So don't
1221
   *  send anything else, or some mstsc will consider that as an error
1222
   */
1223
0
  SelectedProtocol = nego_get_selected_protocol(context->rdp->nego);
1224
1225
0
  if (SelectedProtocol & PROTOCOL_FAILED_NEGO)
1226
0
    return TRUE;
1227
1228
  /** The disconnection sequence below (Deactivate All + MCS Disconnect
1229
   *  Provider Ultimatum) only applies to sessions where MCS has been
1230
   *  established. If the connection never got past negotiation or NLA
1231
   *  authentication (e.g. a malformed X.224 request, or wrong
1232
   *  credentials), sending these PDUs emits an out-of-order X.224 DATA
1233
   *  TPDU that strict clients (e.g. Windows App on macOS) cannot handle,
1234
   *  leaving them hanging at "securing the connection" instead of
1235
   *  failing fast. Just drop the TCP connection in that case. */
1236
0
  if (rdp_get_state(context->rdp) < CONNECTION_STATE_MCS_ATTACH_USER_CONFIRM)
1237
0
    return TRUE;
1238
1239
  /**
1240
   * [MS-RDPBCGR] 1.3.1.4.2 User-Initiated Disconnection Sequence on Server
1241
   * The server first sends the client a Deactivate All PDU followed by an
1242
   * optional MCS Disconnect Provider Ultimatum PDU.
1243
   */
1244
0
  if (!rdp_send_deactivate_all(context->rdp))
1245
0
    return FALSE;
1246
1247
0
  if (freerdp_settings_get_bool(context->settings, FreeRDP_SupportErrorInfoPdu))
1248
0
  {
1249
0
    if (!rdp_send_error_info(context->rdp))
1250
0
      return FALSE;
1251
0
  }
1252
1253
0
  return mcs_send_disconnect_provider_ultimatum(context->rdp->mcs,
1254
0
                                                Disconnect_Ultimatum_provider_initiated);
1255
0
}
1256
1257
static void freerdp_peer_disconnect(freerdp_peer* client)
1258
0
{
1259
0
  rdpTransport* transport = nullptr;
1260
0
  WINPR_ASSERT(client);
1261
1262
0
  transport = freerdp_get_transport(client->context);
1263
0
  transport_disconnect(transport);
1264
0
}
1265
1266
static BOOL freerdp_peer_send_channel_data(freerdp_peer* client, UINT16 channelId, const BYTE* data,
1267
                                           size_t size)
1268
0
{
1269
0
  WINPR_ASSERT(client);
1270
0
  WINPR_ASSERT(client->context);
1271
0
  WINPR_ASSERT(client->context->rdp);
1272
0
  return rdp_send_channel_data(client->context->rdp, channelId, data, size);
1273
0
}
1274
1275
static BOOL freerdp_peer_send_server_redirection_pdu(freerdp_peer* peer,
1276
                                                     const rdpRedirection* redirection)
1277
0
{
1278
0
  BOOL rc = FALSE;
1279
0
  WINPR_ASSERT(peer);
1280
0
  WINPR_ASSERT(peer->context);
1281
1282
0
  UINT16 sec_flags = 0;
1283
0
  wStream* s = rdp_send_stream_pdu_init(peer->context->rdp, &sec_flags);
1284
0
  if (!s)
1285
0
    return FALSE;
1286
0
  if (!rdp_write_enhanced_security_redirection_packet(s, redirection))
1287
0
    goto fail;
1288
0
  if (!rdp_send_pdu(peer->context->rdp, s, PDU_TYPE_SERVER_REDIRECTION, 0, sec_flags))
1289
0
    goto fail;
1290
0
  rc = rdp_reset_runtime_settings(peer->context->rdp);
1291
0
fail:
1292
0
  Stream_Release(s);
1293
0
  return rc;
1294
0
}
1295
1296
static BOOL freerdp_peer_send_channel_packet(freerdp_peer* client, UINT16 channelId,
1297
                                             size_t totalSize, UINT32 flags, const BYTE* data,
1298
                                             size_t chunkSize)
1299
0
{
1300
0
  WINPR_ASSERT(client);
1301
0
  WINPR_ASSERT(client->context);
1302
0
  WINPR_ASSERT(client->context->rdp);
1303
0
  return rdp_channel_send_packet(client->context->rdp, channelId, totalSize, flags, data,
1304
0
                                 chunkSize);
1305
0
}
1306
1307
static BOOL freerdp_peer_is_write_blocked(freerdp_peer* peer)
1308
0
{
1309
0
  rdpTransport* transport = nullptr;
1310
0
  WINPR_ASSERT(peer);
1311
0
  WINPR_ASSERT(peer->context);
1312
0
  WINPR_ASSERT(peer->context->rdp);
1313
0
  WINPR_ASSERT(peer->context->rdp->transport);
1314
0
  transport = peer->context->rdp->transport;
1315
0
  return transport_is_write_blocked(transport);
1316
0
}
1317
1318
static int freerdp_peer_drain_output_buffer(freerdp_peer* peer)
1319
0
{
1320
0
  rdpTransport* transport = nullptr;
1321
0
  WINPR_ASSERT(peer);
1322
0
  WINPR_ASSERT(peer->context);
1323
0
  WINPR_ASSERT(peer->context->rdp);
1324
0
  WINPR_ASSERT(peer->context->rdp->transport);
1325
0
  transport = peer->context->rdp->transport;
1326
0
  return transport_drain_output_buffer(transport);
1327
0
}
1328
1329
static BOOL freerdp_peer_has_more_to_read(freerdp_peer* peer)
1330
0
{
1331
0
  WINPR_ASSERT(peer);
1332
0
  WINPR_ASSERT(peer->context);
1333
0
  WINPR_ASSERT(peer->context->rdp);
1334
0
  return transport_have_more_bytes_to_read(peer->context->rdp->transport);
1335
0
}
1336
1337
static LicenseCallbackResult freerdp_peer_nolicense(freerdp_peer* peer,
1338
                                                    WINPR_ATTR_UNUSED wStream* s)
1339
0
{
1340
0
  rdpRdp* rdp = nullptr;
1341
1342
0
  WINPR_ASSERT(peer);
1343
0
  WINPR_ASSERT(peer->context);
1344
1345
0
  rdp = peer->context->rdp;
1346
1347
0
  if (!license_send_valid_client_error_packet(rdp))
1348
0
  {
1349
0
    WLog_ERR(TAG, "freerdp_peer_nolicense: license_send_valid_client_error_packet() failed");
1350
0
    return LICENSE_CB_ABORT;
1351
0
  }
1352
1353
0
  return LICENSE_CB_COMPLETED;
1354
0
}
1355
1356
BOOL freerdp_peer_context_new(freerdp_peer* client)
1357
7.08k
{
1358
7.08k
  return freerdp_peer_context_new_ex(client, nullptr);
1359
7.08k
}
1360
1361
void freerdp_peer_context_free(freerdp_peer* client)
1362
7.08k
{
1363
7.08k
  if (!client)
1364
0
    return;
1365
1366
7.08k
  IFCALL(client->ContextFree, client, client->context);
1367
1368
7.08k
  if (client->context)
1369
7.08k
  {
1370
7.08k
    rdpContext* ctx = client->context;
1371
1372
7.08k
    (void)CloseHandle(ctx->channelErrorEvent);
1373
7.08k
    ctx->channelErrorEvent = nullptr;
1374
7.08k
    free(ctx->errorDescription);
1375
7.08k
    ctx->errorDescription = nullptr;
1376
7.08k
    rdp_free(ctx->rdp);
1377
7.08k
    ctx->rdp = nullptr;
1378
7.08k
    metrics_free(ctx->metrics);
1379
7.08k
    ctx->metrics = nullptr;
1380
7.08k
    stream_dump_free(ctx->dump);
1381
7.08k
    ctx->dump = nullptr;
1382
7.08k
    free(ctx);
1383
7.08k
  }
1384
7.08k
  client->context = nullptr;
1385
7.08k
}
1386
1387
static const char* os_major_type_to_string(UINT16 osMajorType)
1388
0
{
1389
0
  switch (osMajorType)
1390
0
  {
1391
0
    case OSMAJORTYPE_UNSPECIFIED:
1392
0
      return "Unspecified platform";
1393
0
    case OSMAJORTYPE_WINDOWS:
1394
0
      return "Windows platform";
1395
0
    case OSMAJORTYPE_OS2:
1396
0
      return "OS/2 platform";
1397
0
    case OSMAJORTYPE_MACINTOSH:
1398
0
      return "Macintosh platform";
1399
0
    case OSMAJORTYPE_UNIX:
1400
0
      return "UNIX platform";
1401
0
    case OSMAJORTYPE_IOS:
1402
0
      return "iOS platform";
1403
0
    case OSMAJORTYPE_OSX:
1404
0
      return "OS X platform";
1405
0
    case OSMAJORTYPE_ANDROID:
1406
0
      return "Android platform";
1407
0
    case OSMAJORTYPE_CHROME_OS:
1408
0
      return "Chrome OS platform";
1409
0
    default:
1410
0
      break;
1411
0
  }
1412
1413
0
  return "Unknown platform";
1414
0
}
1415
1416
const char* freerdp_peer_os_major_type_string(freerdp_peer* client)
1417
0
{
1418
0
  WINPR_ASSERT(client);
1419
1420
0
  rdpContext* context = client->context;
1421
0
  WINPR_ASSERT(context);
1422
0
  WINPR_ASSERT(context->settings);
1423
1424
0
  const UINT32 osMajorType = freerdp_settings_get_uint32(context->settings, FreeRDP_OsMajorType);
1425
0
  WINPR_ASSERT(osMajorType <= UINT16_MAX);
1426
0
  return os_major_type_to_string((UINT16)osMajorType);
1427
0
}
1428
1429
static const char* os_minor_type_to_string(UINT16 osMinorType)
1430
0
{
1431
0
  switch (osMinorType)
1432
0
  {
1433
0
    case OSMINORTYPE_UNSPECIFIED:
1434
0
      return "Unspecified version";
1435
0
    case OSMINORTYPE_WINDOWS_31X:
1436
0
      return "Windows 3.1x";
1437
0
    case OSMINORTYPE_WINDOWS_95:
1438
0
      return "Windows 95";
1439
0
    case OSMINORTYPE_WINDOWS_NT:
1440
0
      return "Windows NT";
1441
0
    case OSMINORTYPE_OS2_V21:
1442
0
      return "OS/2 2.1";
1443
0
    case OSMINORTYPE_POWER_PC:
1444
0
      return "PowerPC";
1445
0
    case OSMINORTYPE_MACINTOSH:
1446
0
      return "Macintosh";
1447
0
    case OSMINORTYPE_NATIVE_XSERVER:
1448
0
      return "Native X Server";
1449
0
    case OSMINORTYPE_PSEUDO_XSERVER:
1450
0
      return "Pseudo X Server";
1451
0
    case OSMINORTYPE_WINDOWS_RT:
1452
0
      return "Windows RT";
1453
0
    default:
1454
0
      break;
1455
0
  }
1456
1457
0
  return "Unknown version";
1458
0
}
1459
1460
const char* freerdp_peer_os_minor_type_string(freerdp_peer* client)
1461
0
{
1462
0
  WINPR_ASSERT(client);
1463
1464
0
  rdpContext* context = client->context;
1465
0
  WINPR_ASSERT(context);
1466
0
  WINPR_ASSERT(context->settings);
1467
1468
0
  const UINT32 osMinorType = freerdp_settings_get_uint32(context->settings, FreeRDP_OsMinorType);
1469
0
  WINPR_ASSERT(osMinorType <= UINT16_MAX);
1470
0
  return os_minor_type_to_string((UINT16)osMinorType);
1471
0
}
1472
1473
freerdp_peer* freerdp_peer_new(int sockfd)
1474
20
{
1475
20
  freerdp_peer* client = (freerdp_peer*)calloc(1, sizeof(freerdp_peer));
1476
1477
20
  if (!client)
1478
0
    return nullptr;
1479
1480
20
  if (sockfd >= 0)
1481
20
  {
1482
20
    (void)freerdp_tcp_set_nodelay(WLog_Get(TAG), WLOG_DEBUG, sockfd);
1483
20
  }
1484
1485
20
  client->sockfd = sockfd;
1486
20
  client->ContextSize = sizeof(rdpContext);
1487
20
  client->Initialize = freerdp_peer_initialize;
1488
#if defined(WITH_FREERDP_DEPRECATED)
1489
  client->GetFileDescriptor = freerdp_peer_get_fds;
1490
#endif
1491
20
  client->GetEventHandle = freerdp_peer_get_event_handle;
1492
20
  client->GetEventHandles = freerdp_peer_get_event_handles;
1493
20
  client->CheckFileDescriptor = freerdp_peer_check_fds;
1494
20
  client->Close = freerdp_peer_close;
1495
20
  client->Disconnect = freerdp_peer_disconnect;
1496
20
  client->SendChannelData = freerdp_peer_send_channel_data;
1497
20
  client->SendChannelPacket = freerdp_peer_send_channel_packet;
1498
20
  client->SendServerRedirection = freerdp_peer_send_server_redirection_pdu;
1499
20
  client->IsWriteBlocked = freerdp_peer_is_write_blocked;
1500
20
  client->DrainOutputBuffer = freerdp_peer_drain_output_buffer;
1501
20
  client->HasMoreToRead = freerdp_peer_has_more_to_read;
1502
20
  client->VirtualChannelOpen = freerdp_peer_virtual_channel_open;
1503
20
  client->VirtualChannelClose = freerdp_peer_virtual_channel_close;
1504
20
  client->VirtualChannelWrite = freerdp_peer_virtual_channel_write;
1505
20
  client->VirtualChannelRead = nullptr; /* must be defined by server application */
1506
20
  client->VirtualChannelGetData = freerdp_peer_virtual_channel_get_data;
1507
20
  client->VirtualChannelSetData = freerdp_peer_virtual_channel_set_data;
1508
20
  client->SetState = freerdp_peer_set_state;
1509
1510
20
  return client;
1511
20
}
1512
1513
void freerdp_peer_free(freerdp_peer* client)
1514
20
{
1515
20
  if (!client)
1516
0
    return;
1517
1518
20
  sspi_FreeAuthIdentity(&client->identity);
1519
20
  if (client->sockfd >= 0)
1520
0
    closesocket((SOCKET)client->sockfd);
1521
20
  free(client);
1522
20
}
1523
1524
static BOOL freerdp_peer_transport_setup(freerdp_peer* client)
1525
7.08k
{
1526
7.08k
  rdpRdp* rdp = nullptr;
1527
1528
7.08k
  WINPR_ASSERT(client);
1529
7.08k
  WINPR_ASSERT(client->context);
1530
1531
7.08k
  rdp = client->context->rdp;
1532
7.08k
  WINPR_ASSERT(rdp);
1533
1534
7.08k
  if (!transport_attach(rdp->transport, client->sockfd))
1535
0
    return FALSE;
1536
7.08k
  client->sockfd = -1;
1537
1538
7.08k
  if (!transport_set_recv_callbacks(rdp->transport, peer_recv_callback, client))
1539
0
    return FALSE;
1540
1541
7.08k
  if (!transport_set_blocking_mode(rdp->transport, FALSE))
1542
0
    return FALSE;
1543
1544
7.08k
  return TRUE;
1545
7.08k
}
1546
1547
BOOL freerdp_peer_context_new_ex(freerdp_peer* client, const rdpSettings* settings)
1548
7.08k
{
1549
7.08k
  rdpRdp* rdp = nullptr;
1550
7.08k
  rdpContext* context = nullptr;
1551
7.08k
  BOOL ret = TRUE;
1552
1553
7.08k
  if (!client)
1554
0
    return FALSE;
1555
1556
7.08k
  WINPR_ASSERT(client->ContextSize >= sizeof(rdpContext));
1557
7.08k
  if (!(context = (rdpContext*)calloc(1, client->ContextSize)))
1558
0
    goto fail;
1559
1560
7.08k
  client->context = context;
1561
7.08k
  context->peer = client;
1562
7.08k
  context->ServerMode = TRUE;
1563
7.08k
  context->log = WLog_Get(TAG);
1564
7.08k
  if (!context->log)
1565
0
    goto fail;
1566
1567
7.08k
  if (settings)
1568
0
  {
1569
0
    context->settings = freerdp_settings_clone(settings);
1570
0
    if (!context->settings)
1571
0
      goto fail;
1572
0
  }
1573
1574
7.08k
  context->dump = stream_dump_new();
1575
7.08k
  if (!context->dump)
1576
0
    goto fail;
1577
7.08k
  if (!(context->metrics = metrics_new(context)))
1578
0
    goto fail;
1579
1580
7.08k
  if (!(rdp = rdp_new(context)))
1581
0
    goto fail;
1582
1583
7.08k
  rdp_log_build_warnings(rdp);
1584
1585
#if defined(WITH_FREERDP_DEPRECATED)
1586
  client->update = rdp->update;
1587
  client->settings = rdp->settings;
1588
  client->autodetect = rdp->autodetect;
1589
#endif
1590
7.08k
  context->rdp = rdp;
1591
7.08k
  context->input = rdp->input;
1592
7.08k
  context->update = rdp->update;
1593
7.08k
  context->settings = rdp->settings;
1594
7.08k
  context->autodetect = rdp->autodetect;
1595
7.08k
  update_register_server_callbacks(rdp->update);
1596
7.08k
  autodetect_register_server_callbacks(rdp->autodetect);
1597
1598
7.08k
  if (!(context->channelErrorEvent = CreateEvent(nullptr, TRUE, FALSE, nullptr)))
1599
0
  {
1600
0
    WLog_ERR(TAG, "CreateEvent failed!");
1601
0
    goto fail;
1602
0
  }
1603
1604
7.08k
  if (!(context->errorDescription = calloc(1, 500)))
1605
0
  {
1606
0
    WLog_ERR(TAG, "calloc failed!");
1607
0
    goto fail;
1608
0
  }
1609
1610
7.08k
  if (!freerdp_peer_transport_setup(client))
1611
0
    goto fail;
1612
1613
7.08k
  client->IsWriteBlocked = freerdp_peer_is_write_blocked;
1614
7.08k
  client->DrainOutputBuffer = freerdp_peer_drain_output_buffer;
1615
7.08k
  client->HasMoreToRead = freerdp_peer_has_more_to_read;
1616
7.08k
  client->LicenseCallback = freerdp_peer_nolicense;
1617
7.08k
  IFCALLRET(client->ContextNew, ret, client, client->context);
1618
1619
7.08k
  if (!ret)
1620
0
    goto fail;
1621
7.08k
  return TRUE;
1622
1623
0
fail:
1624
0
  WLog_ERR(TAG, "ContextNew callback failed");
1625
0
  freerdp_peer_context_free(client);
1626
0
  return FALSE;
1627
7.08k
}