/* packet-gadu-gadu.c

 * Routines for Gadu-Gadu dissection

 * Copyright 2011,2012, Jakub Zawadzki <darkjames-ws@darkjames.pl>

 *

 * Protocol documentation available at https://libgadu.github.io/index.en.html

 *

 * Wireshark - Network traffic analyzer

 * By Gerald Combs <gerald@wireshark.org>

 * Copyright 1998 Gerald Combs

 *

 * SPDX-License-Identifier: GPL-2.0-or-later

 */

#include "config.h"

#include <epan/packet.h>

#include <epan/prefs.h>

#include "packet-tcp.h"

void proto_register_gadu_gadu(void);

void proto_reg_handoff_gadu_gadu(void);

#define TCP_PORT_GADU_GADU 8074  /* assigned by IANA */

/* desegmentation of Gadu-Gadu over TCP */

static bool gadu_gadu_desegment = true;

static dissector_handle_t gadu_gadu_handle;

static int proto_gadu_gadu;

static int hf_dcc_filename;

static int hf_dcc_id;

static int hf_dcc_type;

static int hf_dcc_uin_from;

static int hf_dcc_uin_to;

static int hf_gadu_gadu_contact_type;

static int hf_gadu_gadu_contact_uin;

static int hf_gadu_gadu_contact_uin_str;

static int hf_gadu_gadu_data;

static int hf_gadu_gadu_header_length;

static int hf_gadu_gadu_header_type_recv;

static int hf_gadu_gadu_header_type_send;

static int hf_gadu_gadu_login80_lang;

static int hf_gadu_gadu_login_hash;

static int hf_gadu_gadu_login_hash_type;

static int hf_gadu_gadu_login_local_ip;

static int hf_gadu_gadu_login_local_port;

static int hf_gadu_gadu_login_protocol;

static int hf_gadu_gadu_login_status;

static int hf_gadu_gadu_login_uin;

static int hf_gadu_gadu_login_version;

static int hf_gadu_gadu_msg80_offset_attr;

static int hf_gadu_gadu_msg80_offset_plain;

static int hf_gadu_gadu_msg_ack_recipient;

static int hf_gadu_gadu_msg_ack_seq;

static int hf_gadu_gadu_msg_ack_status;

static int hf_gadu_gadu_msg_class;

static int hf_gadu_gadu_msg_recipient;

static int hf_gadu_gadu_msg_sender;

static int hf_gadu_gadu_msg_seq;

static int hf_gadu_gadu_msg_text;

static int hf_gadu_gadu_msg_time;

static int hf_gadu_gadu_msg_uin;

static int hf_gadu_gadu_new_status_desc;

static int hf_gadu_gadu_new_status_status;

static int hf_gadu_gadu_pubdir_reply_seq;

static int hf_gadu_gadu_pubdir_reply_str;

static int hf_gadu_gadu_pubdir_reply_type;

static int hf_gadu_gadu_pubdir_request_seq;

static int hf_gadu_gadu_pubdir_request_str;

static int hf_gadu_gadu_pubdir_request_type;

static int hf_gadu_gadu_status_descr;

static int hf_gadu_gadu_status_img_size;

static int hf_gadu_gadu_status_ip;

static int hf_gadu_gadu_status_port;

static int hf_gadu_gadu_status_status;

static int hf_gadu_gadu_status_uin;

static int hf_gadu_gadu_status_version;

static int hf_gadu_gadu_typing_notify_type;

static int hf_gadu_gadu_typing_notify_uin;

static int hf_gadu_gadu_userdata_attr_name;

static int hf_gadu_gadu_userdata_attr_type;

static int hf_gadu_gadu_userdata_attr_value;

static int hf_gadu_gadu_userdata_uin;

static int hf_gadu_gadu_userlist;

static int hf_gadu_gadu_userlist_format;

static int hf_gadu_gadu_userlist_reply_type;

static int hf_gadu_gadu_userlist_request_type;

static int hf_gadu_gadu_userlist_version;

static int hf_gadu_gadu_welcome_seed;

static int ett_gadu_gadu;

static int ett_gadu_gadu_contact;

#define GG_ERA_OMNIX_MASK 0x04000000

#define GG_HAS_AUDIO_MASK 0x40000000

#define GG_WELCOME                  0x01

#define GG_STATUS                   0x02

#define GG_LOGIN_OK                 0x03

#define GG_SEND_MSG_ACK             0x05

#define GG_PONG                     0x07

#define GG_PING                     0x08

#define GG_LOGIN_FAILED             0x09

#define GG_RECV_MSG                 0x0a

#define GG_DISCONNECTING            0x0b

#define GG_NOTIFY_REPLY             0x0c

#define GG_DISCONNECT_ACK           0x0d

#define GG_PUBDIR50_REPLY           0x0e

#define GG_STATUS60                 0x0f

#define GG_USERLIST_REPLY           0x10

#define GG_NOTIFY_REPLY60           0x11

#define GG_NEED_EMAIL               0x14

#define GG_LOGIN_HASH_TYPE_INVALID  0x16

#define GG_STATUS77                 0x17

#define GG_NOTIFY_REPLY77           0x18

#define GG_DCC7_INFO                0x1f

#define GG_DCC7_NEW                 0x20

#define GG_DCC7_ACCEPT              0x21

#define GG_DCC7_REJECT              0x22

#define GG_DCC7_ID_REPLY            0x23

#define GG_DCC7_ID_ABORTED          0x25

#define GG_XML_EVENT                0x27

#define GG_STATUS80BETA             0x2a

#define GG_NOTIFY_REPLY80BETA       0x2b

#define GG_XML_ACTION               0x2c

#define GG_RECV_MSG80               0x2e

#define GG_USERLIST_REPLY80         0x30

#define GG_LOGIN_OK80               0x35

#define GG_STATUS80                 0x36

#define GG_NOTIFY_REPLY80           0x37

#define GG_USERLIST100_REPLY        0x41

#define GG_LOGIN80_FAILED           0x43

#define GG_USER_DATA                0x44

#define GG_TYPING_NOTIFY            0x59

#define GG_OWN_MESSAGE              0x5A

#define GG_OWN_RESOURCE_INFO        0x5B

#define GG_USERLIST100_VERSION      0x5C

#define GG_TYPE_VS(x) { x, #x }

/* original (GG_*) names likes in documentation (https://libgadu.github.io/protocol/#ch1.16) */

static const value_string gadu_gadu_packets_type_recv[] = {

  GG_TYPE_VS(GG_WELCOME),

  GG_TYPE_VS(GG_STATUS),

  GG_TYPE_VS(GG_LOGIN_OK),

  GG_TYPE_VS(GG_SEND_MSG_ACK),

  GG_TYPE_VS(GG_PONG),

  GG_TYPE_VS(GG_PING),

  GG_TYPE_VS(GG_LOGIN_FAILED),

  GG_TYPE_VS(GG_RECV_MSG),

  GG_TYPE_VS(GG_DISCONNECTING),

  GG_TYPE_VS(GG_NOTIFY_REPLY),

  GG_TYPE_VS(GG_DISCONNECT_ACK),

  GG_TYPE_VS(GG_PUBDIR50_REPLY),

  GG_TYPE_VS(GG_STATUS60),

  GG_TYPE_VS(GG_USERLIST_REPLY),

  GG_TYPE_VS(GG_NOTIFY_REPLY60),

  GG_TYPE_VS(GG_NEED_EMAIL),

  GG_TYPE_VS(GG_LOGIN_HASH_TYPE_INVALID),

  GG_TYPE_VS(GG_STATUS77),

  GG_TYPE_VS(GG_NOTIFY_REPLY77),

  GG_TYPE_VS(GG_DCC7_INFO),

  GG_TYPE_VS(GG_DCC7_NEW),

  GG_TYPE_VS(GG_DCC7_ACCEPT),

  GG_TYPE_VS(GG_DCC7_REJECT),

  GG_TYPE_VS(GG_DCC7_ID_REPLY),

  GG_TYPE_VS(GG_DCC7_ID_ABORTED),

  GG_TYPE_VS(GG_XML_EVENT),

  GG_TYPE_VS(GG_STATUS80BETA),

  GG_TYPE_VS(GG_NOTIFY_REPLY80BETA),

  GG_TYPE_VS(GG_XML_ACTION),

  GG_TYPE_VS(GG_RECV_MSG80),

  GG_TYPE_VS(GG_USERLIST_REPLY80),

  GG_TYPE_VS(GG_LOGIN_OK80),

  GG_TYPE_VS(GG_STATUS80),

  GG_TYPE_VS(GG_NOTIFY_REPLY80),

  GG_TYPE_VS(GG_USERLIST100_REPLY),

  GG_TYPE_VS(GG_LOGIN80_FAILED),

  GG_TYPE_VS(GG_USER_DATA),

  GG_TYPE_VS(GG_TYPING_NOTIFY),

  GG_TYPE_VS(GG_OWN_MESSAGE),

  GG_TYPE_VS(GG_OWN_RESOURCE_INFO),

  GG_TYPE_VS(GG_USERLIST100_VERSION),

  { 0, NULL }

};

#define GG_NEW_STATUS           0x02

#define GG_PONG                 0x07

#define GG_PING                 0x08

#define GG_SEND_MSG             0x0b

#define GG_LOGIN                0x0c

#define GG_ADD_NOTIFY           0x0d

#define GG_REMOVE_NOTIFY        0x0e

#define GG_NOTIFY_FIRST         0x0f

#define GG_NOTIFY_LAST          0x10

#define GG_LIST_EMPTY           0x12

#define GG_LOGIN_EXT            0x13

#define GG_PUBDIR50_REQUEST     0x14

#define GG_LOGIN60              0x15

#define GG_USERLIST_REQUEST     0x16

#define GG_LOGIN70              0x19

#define GG_DCC7_INFO            0x1f

#define GG_DCC7_NEW             0x20

#define GG_DCC7_ACCEPT          0x21

#define GG_DCC7_REJECT          0x22

#define GG_DCC7_ID_REQUEST      0x23

#define GG_DCC7_ID_DUNNO1       0x24

#define GG_DCC7_ID_ABORT        0x25

#define GG_NEW_STATUS80BETA     0x28

#define GG_LOGIN80BETA          0x29

#define GG_SEND_MSG80           0x2d

#define GG_USERLIST_REQUEST80   0x2f

#define GG_LOGIN80              0x31

#define GG_NEW_STATUS80         0x38

#define GG_USERLIST100_REQUEST  0x40

#define GG_RECV_MSG_ACK         0x46

#define GG_TYPING_NOTIFY        0x59

#define GG_OWN_DISCONNECT       0x62

#define GG_NEW_STATUS105        0x63

#define GG_NOTIFY105            0x78

#define GG_ADD_NOTIFY105        0x7b

#define GG_REMOVE_NOTIFY105     0x7c

#define GG_LOGIN105             0x83

static const value_string gadu_gadu_packets_type_send[] = {

  GG_TYPE_VS(GG_NEW_STATUS),

  GG_TYPE_VS(GG_PONG),

  GG_TYPE_VS(GG_PING),

  GG_TYPE_VS(GG_SEND_MSG),

  GG_TYPE_VS(GG_LOGIN),

  GG_TYPE_VS(GG_ADD_NOTIFY),

  GG_TYPE_VS(GG_REMOVE_NOTIFY),

  GG_TYPE_VS(GG_NOTIFY_FIRST),

  GG_TYPE_VS(GG_NOTIFY_LAST),

  GG_TYPE_VS(GG_LIST_EMPTY),

  GG_TYPE_VS(GG_LOGIN_EXT),

  GG_TYPE_VS(GG_PUBDIR50_REQUEST),

  GG_TYPE_VS(GG_LOGIN60),

  GG_TYPE_VS(GG_USERLIST_REQUEST),

  GG_TYPE_VS(GG_LOGIN70),

  GG_TYPE_VS(GG_DCC7_INFO),

  GG_TYPE_VS(GG_DCC7_NEW),

  GG_TYPE_VS(GG_DCC7_ACCEPT),

  GG_TYPE_VS(GG_DCC7_REJECT),

  GG_TYPE_VS(GG_DCC7_ID_REQUEST),

  GG_TYPE_VS(GG_DCC7_ID_DUNNO1),

  GG_TYPE_VS(GG_DCC7_ID_ABORT),

  GG_TYPE_VS(GG_NEW_STATUS80BETA),

  GG_TYPE_VS(GG_LOGIN80BETA),

  GG_TYPE_VS(GG_SEND_MSG80),

  GG_TYPE_VS(GG_USERLIST_REQUEST80),

  GG_TYPE_VS(GG_LOGIN80),

  GG_TYPE_VS(GG_NEW_STATUS80),

  GG_TYPE_VS(GG_USERLIST100_REQUEST),

  GG_TYPE_VS(GG_RECV_MSG_ACK),

  GG_TYPE_VS(GG_TYPING_NOTIFY),

  GG_TYPE_VS(GG_OWN_DISCONNECT),

  GG_TYPE_VS(GG_NEW_STATUS105),

  GG_TYPE_VS(GG_NOTIFY105),

  GG_TYPE_VS(GG_ADD_NOTIFY105),

  GG_TYPE_VS(GG_REMOVE_NOTIFY105),

  GG_TYPE_VS(GG_LOGIN105),

  { 0, NULL }

};

static const value_string gadu_gadu_msg_ack_status_vals[] = {

  { 0x01, "Message blocked" },

  { 0x02, "Message delivered" },

  { 0x03, "Message queued" },

  { 0x04, "Message not delivered (queue full)" },

  { 0x06, "CTCP Message not delivered" },

  { 0, NULL }

};

#define GG_STATUS_NOT_AVAIL         0x01

#define GG_STATUS_NOT_AVAIL_DESCR   0x15

#define GG_STATUS_FFC               0x17

#define GG_STATUS_FFC_DESCR         0x18

#define GG_STATUS_AVAIL             0x02

#define GG_STATUS_AVAIL_DESCR       0x04

#define GG_STATUS_BUSY              0x03

#define GG_STATUS_BUSY_DESCR        0x05

#define GG_STATUS_DND               0x21

#define GG_STATUS_DND_DESCR         0x22

#define GG_STATUS_INVISIBLE         0x14

#define GG_STATUS_INVISIBLE_DESCR   0x16

#define GG_STATUS_BLOCKED           0x06

#define GG_LOGIN_HASH_GG32 0x01

#define GG_LOGIN_HASH_SHA1 0x02

static const value_string gadu_gadu_hash_type_vals[] = {

  { GG_LOGIN_HASH_GG32, "GG32 hash" },

  { GG_LOGIN_HASH_SHA1, "SHA1 hash" },

  { 0, NULL }

};

#define GG_USERLIST_PUT 0x00

#define GG_USERLIST_PUT_MORE 0x01

#define GG_USERLIST_GET 0x02

static const value_string gadu_gadu_userlist_request_type_vals[] = {

  { GG_USERLIST_PUT, "Userlist put" },

  { GG_USERLIST_PUT_MORE, "Userlist put (more)" },

  { GG_USERLIST_GET, "Userlist get" },

  { 0, NULL }

};

#define GG_USERLIST_PUT_REPLY 0x00

#define GG_USERLIST_PUT_MORE_REPLY 0x02

#define GG_USERLIST_GET_REPLY 0x06

#define GG_USERLIST_GET_MORE_REPLY 0x04

static const value_string gadu_gadu_userlist_reply_type_vals[] = {

  { GG_USERLIST_PUT_REPLY, "Userlist put" },

  { GG_USERLIST_PUT_MORE_REPLY, "Userlist put (more)" },

  { GG_USERLIST_GET_REPLY, "Userlist get" },

  { GG_USERLIST_GET_MORE_REPLY, "Userlist get (more)" },

  { 0, NULL }

};

#define GG_USERLIST100_FORMAT_TYPE_NONE 0x00

#define GG_USERLIST100_FORMAT_TYPE_GG70 0x01

#define GG_USERLIST100_FORMAT_TYPE_GG100 0x02

static const value_string gadu_gadu_userlist_request_format_vals[] = {

  { GG_USERLIST100_FORMAT_TYPE_NONE, "None" },

  { GG_USERLIST100_FORMAT_TYPE_GG70, "Classic (7.0)" },

  { GG_USERLIST100_FORMAT_TYPE_GG100, "XML (10.0)" },

  { 0, NULL }

};

/* XXX, add compatible libgadu versions? */

static const value_string gadu_gadu_version_vals[] = {

  { 0x2e, "Gadu-Gadu 8.0 (build 8283)" },

  { 0x2d, "Gadu-Gadu 8.0 (build 4881)" },

  { 0x2a, "Gadu-Gadu 7.7 (build 3315)" },

  { 0x29, "Gadu-Gadu 7.6 (build 1688)" },

  { 0x28, "Gadu-Gadu 7.5.0 (build 2201)" },

  { 0x27, "Gadu-Gadu 7.0 (build 22)" },

  { 0x26, "Gadu-Gadu 7.0 (build 20)" },

  { 0x25, "Gadu-Gadu 7.0 (build 1)" },

  { 0x24, "Gadu-Gadu 6.1 (build 155) or 7.6 (build 1359)" },

  { 0x22, "Gadu-Gadu 6.0 (build 140)" },

  { 0x21, "Gadu-Gadu 6.0 (build 133)" },

  { 0x20, "Gadu-Gadu 6.0" },

  { 0x1e, "Gadu-Gadu 5.7 beta (build 121)" },

  { 0x1c, "Gadu_Gadu 5.7 beta" },

  { 0x1b, "Gadu-Gadu 5.0.5" },

  { 0x19, "Gadu-Gadu 5.0.3" },

  { 0x18, "Gadu-Gadu 5.0.1, 5.0.0, 4.9.3" },

  { 0x17, "Gadu-Gadu 4.9.2" },

  { 0x16, "Gadu-Gadu 4.9.1" },

  { 0x15, "Gadu-Gadu 4.8.9" },

  { 0x14, "Gadu-Gadu 4.8.3, 4.8.1" },

  { 0x11, "Gadu-Gadu 4.6.10, 4.6.1" },

  { 0x10, "Gadu-Gadu 4.5.22, 4.5.21, 4.5.19, 4.5.17, 4.5.15" },

  { 0x0f, "Gadu-Gadu 4.5.12" },

  { 0x0b, "Gadu-Gadu 4.0.30, 4.0.29, 4.0.28, 4.0.25" },

  { 0, NULL }

};

static const value_string gadu_gadu_dcc_type_vals[] = {

  { 1, "Voice transmission" },

  { 4, "File transmission" },

  { 0, NULL }

};

static const value_string gadu_gadu_typing_notify_type_vals[] = {

  { 1, "Typing started" },

  { 0, "Typing stopped" },

  { 0, NULL }

};

static const value_string gadu_gadu_pubdir_type_vals[] = {

  { 1, "Public directory write" },

  { 2, "Public directory read" },

  { 3, "Public directory search" },

  { 0, NULL }

};

static dissector_handle_t xml_handle;

struct gadu_gadu_conv_data {

  uint32_t uin; /* uin from login packet */

};

static struct gadu_gadu_conv_data *

gadu_gadu_create_conversation(packet_info *pinfo, uint32_t uin)

{

  conversation_t *conv;

  struct gadu_gadu_conv_data *gg_conv;

  conv = find_or_create_conversation(pinfo);

  gg_conv = (struct gadu_gadu_conv_data *)conversation_get_proto_data(conv, proto_gadu_gadu);

  if (!gg_conv) {

    gg_conv = wmem_new(wmem_file_scope(), struct gadu_gadu_conv_data);

    gg_conv->uin = uin;

    conversation_add_proto_data(conv, proto_gadu_gadu, gg_conv);

  }

  /* assert(gg_conv->uin == uin); */

  return gg_conv;

}

static struct gadu_gadu_conv_data *

gadu_gadu_get_conversation_data(packet_info *pinfo)

{

  conversation_t *conv;

  conv = find_conversation_pinfo(pinfo, 0);

  if (conv)

    return (struct gadu_gadu_conv_data *)conversation_get_proto_data(conv, proto_gadu_gadu);

  return NULL;

}

static bool

gadu_gadu_status_has_descr(int status)

{

  return

    (status == GG_STATUS_NOT_AVAIL_DESCR) ||

    (status == GG_STATUS_FFC_DESCR) ||

    (status == GG_STATUS_AVAIL_DESCR) ||

    (status == GG_STATUS_BUSY_DESCR) ||

    (status == GG_STATUS_DND_DESCR) ||

    (status == GG_STATUS_INVISIBLE_DESCR);

}

/* like tvb_strsize() but return maximum length instead of throwing exception */

static unsigned

gadu_gadu_strsize(tvbuff_t *tvb, const int abs_offset)

{

  int len;

  len = tvb_strnlen(tvb, abs_offset, -1);

  if (len == -1) {

    len = tvb_captured_length(tvb);

  } else {

    len++; // Include the NUL

  }

  return (unsigned)len;

}

static unsigned

dissect_gadu_gadu_stringz_cp1250(tvbuff_t *tvb, int hfindex, proto_tree *tree, const unsigned offset)

{

  unsigned len = gadu_gadu_strsize(tvb, offset);

  proto_tree_add_item(tree, hfindex, tvb, offset, len, ENC_WINDOWS_1250 | ENC_NA);

  return offset + len;

}

static unsigned

dissect_gadu_gadu_uint32_string_utf8(tvbuff_t *tvb, int hfindex, proto_tree *tree, unsigned offset)

{

  const unsigned org_offset = offset;

  uint32_t len;

  len = tvb_get_letohl(tvb, offset);

  offset += 4;

  offset += len;

  proto_tree_add_item(tree, hfindex, tvb, org_offset, offset - org_offset, ENC_UTF_8 | ENC_NA);

  return offset;

}

static unsigned

dissect_gadu_gadu_disconnecting(tvbuff_t *tvb _U_, packet_info *pinfo, proto_tree *tree _U_, unsigned offset)

{

  col_set_str(pinfo->cinfo, COL_INFO, "Disconnecting");

  /* empty packet */

  return offset;

}

static unsigned

dissect_gadu_gadu_disconnect_ack(tvbuff_t *tvb _U_, packet_info *pinfo, proto_tree *tree _U_, unsigned offset)

{

  col_set_str(pinfo->cinfo, COL_INFO, "Disconnect acknowledge (< 10.0)");

  /* empty packet */

  return offset;

}

static void *

_tvb_memcpy_reverse(tvbuff_t *tvb, void *target, unsigned offset, size_t length)

{

  uint8_t *t = (uint8_t *) target;

  while (length > 0) {

    length--;

    t[length]  = tvb_get_uint8(tvb, offset);

    offset++;

  }

  return target;

}

static unsigned

dissect_gadu_gadu_login_protocol(tvbuff_t *tvb, packet_info* pinfo, proto_tree *tree, unsigned offset)

{

  proto_item *ti;

  uint32_t protocol;

  /* TODO: is a 1 or 4 bytes field? */

  protocol = tvb_get_letohl(tvb, offset) & 0xff;

  proto_tree_add_item(tree, hf_gadu_gadu_login_protocol, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  ti = proto_tree_add_string(tree, hf_gadu_gadu_login_version, tvb, offset, 4, val_to_str(pinfo->pool, protocol, gadu_gadu_version_vals, "Unknown (0x%x)"));

  proto_item_set_generated(ti);

  offset += 4;

  return offset;

}

static unsigned

dissect_gadu_gadu_login(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)

{

  proto_item *ti;

  uint32_t uin;

  uint8_t hash[4];

  col_set_str(pinfo->cinfo, COL_INFO, "Login request (< 6.0)");

  uin = tvb_get_letohl(tvb, offset);

  gadu_gadu_create_conversation(pinfo, uin);

  proto_tree_add_uint(tree, hf_gadu_gadu_login_uin, tvb, offset, 4, uin);

  offset += 4;

  ti = proto_tree_add_uint(tree, hf_gadu_gadu_login_hash_type, tvb, 0, 0, GG_LOGIN_HASH_GG32);

  proto_item_set_generated(ti);

  /* hash is 32-bit number written in LE */

  _tvb_memcpy_reverse(tvb, hash, offset, 4);

  proto_tree_add_bytes_format_value(tree, hf_gadu_gadu_login_hash, tvb, offset, 4, hash, "0x%.8x", tvb_get_letohl(tvb, offset));

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_login_status, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  offset = dissect_gadu_gadu_login_protocol(tvb, pinfo, tree, offset);

  proto_tree_add_item(tree, hf_gadu_gadu_login_local_ip, tvb, offset, 4, ENC_BIG_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_login_local_port, tvb, offset, 2, ENC_LITTLE_ENDIAN);

  offset += 2;

  return offset;

}

static unsigned

dissect_gadu_gadu_login_hash(tvbuff_t *tvb, proto_tree *tree, unsigned offset)

{

  uint8_t hash_type;

  uint8_t hash[4];

  int i;

  proto_tree_add_item_ret_uint8(tree, hf_gadu_gadu_login_hash_type, tvb, offset, 1, ENC_LITTLE_ENDIAN, &hash_type);

  offset += 1;

  switch (hash_type) {

    case GG_LOGIN_HASH_GG32:

      /* hash is 32-bit number written in LE */

      _tvb_memcpy_reverse(tvb, hash, offset, 4);

      proto_tree_add_bytes_format_value(tree, hf_gadu_gadu_login_hash, tvb, offset, 4, hash, "0x%.8x", tvb_get_letohl(tvb, offset));

      for (i = 4; i < 64; i++) {

        if (tvb_get_uint8(tvb, offset+i)) {

          proto_tree_add_item(tree, hf_gadu_gadu_data, tvb, offset + 4, 64-4, ENC_NA);

          break;

        }

      }

      break;

    case GG_LOGIN_HASH_SHA1:

      proto_tree_add_item(tree, hf_gadu_gadu_login_hash, tvb, offset, 20, ENC_NA);

      for (i = 20; i < 64; i++) {

        if (tvb_get_uint8(tvb, offset+i)) {

          proto_tree_add_item(tree, hf_gadu_gadu_data, tvb, offset + 20, 64-20, ENC_NA);

          break;

        }

      }

      break;

    default:

      proto_tree_add_item(tree, hf_gadu_gadu_data, tvb, offset, 64, ENC_NA);

      break;

  }

  offset += 64;

  return offset;

}

static unsigned

dissect_gadu_gadu_login70(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)

{

  uint32_t uin;

  col_set_str(pinfo->cinfo, COL_INFO, "Login request (7.0)");

  uin = tvb_get_letohl(tvb, offset) & ~(GG_ERA_OMNIX_MASK | GG_HAS_AUDIO_MASK);

  gadu_gadu_create_conversation(pinfo, uin);

  proto_tree_add_uint(tree, hf_gadu_gadu_login_uin, tvb, offset, 4, uin);

  offset += 4;

  offset = dissect_gadu_gadu_login_hash(tvb, tree, offset);

  proto_tree_add_item(tree, hf_gadu_gadu_login_status, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  offset = dissect_gadu_gadu_login_protocol(tvb, pinfo, tree, offset);

  proto_tree_add_item(tree, hf_gadu_gadu_data, tvb, offset, 1, ENC_NA);  /* 00 */

  offset += 1;

  proto_tree_add_item(tree, hf_gadu_gadu_login_local_ip, tvb, offset, 4, ENC_BIG_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_login_local_port, tvb, offset, 2, ENC_LITTLE_ENDIAN);

  offset += 2;

  /* XXX packet not fully dissected */

  return offset;

}

static int

dissect_gadu_gadu_login80(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)

{

  uint32_t uin;

  col_set_str(pinfo->cinfo, COL_INFO, "Login request (8.0)");

  uin = tvb_get_letohl(tvb, offset);

  gadu_gadu_create_conversation(pinfo, uin);

  proto_tree_add_item(tree, hf_gadu_gadu_login_uin, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_login80_lang, tvb, offset, 2, ENC_ASCII);

  offset += 2;

  offset = dissect_gadu_gadu_login_hash(tvb, tree, offset);

  proto_tree_add_item(tree, hf_gadu_gadu_login_status, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  /* XXX packet not fully dissected */

  return offset;

}

static int

dissect_gadu_gadu_login_ok(tvbuff_t *tvb _U_, packet_info *pinfo, proto_tree *tree _U_, unsigned offset)

{

  col_set_str(pinfo->cinfo, COL_INFO, "Login success (< 8.0)");

  /* not empty packet, but content unknown */

  return offset;

}

static int

dissect_gadu_gadu_login_failed(tvbuff_t *tvb _U_, packet_info *pinfo, proto_tree *tree _U_, unsigned offset)

{

  col_set_str(pinfo->cinfo, COL_INFO, "Login fail (< 8.0)");

  /* empty packet */

  return offset;

}

static int

dissect_gadu_gadu_login_ok80(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)

{

  col_set_str(pinfo->cinfo, COL_INFO, "Login success (8.0)");

  proto_tree_add_item(tree, hf_gadu_gadu_data, tvb, offset, 4, ENC_NA);  /* 01 00 00 00 */

  offset += 4;

  return offset;

}

static int

dissect_gadu_gadu_login80_failed(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)

{

  col_set_str(pinfo->cinfo, COL_INFO, "Login fail (8.0)");

  proto_tree_add_item(tree, hf_gadu_gadu_data, tvb, offset, 4, ENC_NA);  /* 01 00 00 00 */

  offset += 4;

  return offset;

}

static int

dissect_gadu_gadu_user_data(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)

{

  uint32_t users_num;

  col_set_str(pinfo->cinfo, COL_INFO, "Contact details");

  /* XXX, add subtrees */

  offset += 4;

  users_num = tvb_get_letohl(tvb, offset);

  offset += 4;

  while (users_num--) {

    uint32_t attr_num;

    proto_tree_add_item(tree, hf_gadu_gadu_userdata_uin, tvb, offset, 4, ENC_LITTLE_ENDIAN);

    offset += 4;

    attr_num = tvb_get_letohl(tvb, offset);

    offset += 4;

    while (attr_num--) {

      uint32_t name_size, val_size;

      char *name, *val;

  /* name */

      name_size = tvb_get_letohl(tvb, offset);

      offset += 4;

      name = (char*)tvb_get_string_enc(pinfo->pool, tvb, offset, name_size, ENC_ASCII | ENC_NA);

      proto_tree_add_string(tree, hf_gadu_gadu_userdata_attr_name, tvb, offset - 4, 4 + name_size, name);

      offset += name_size;

  /* type */

      proto_tree_add_item(tree, hf_gadu_gadu_userdata_attr_type, tvb, offset, 4, ENC_LITTLE_ENDIAN);

      offset += 4;

  /* value */

      val_size = tvb_get_letohl(tvb, offset);

      offset += 4;

      val = (char*)tvb_get_string_enc(pinfo->pool, tvb, offset, val_size, ENC_ASCII | ENC_NA);

      proto_tree_add_string(tree, hf_gadu_gadu_userdata_attr_value, tvb, offset - 4, 4 + val_size, val);

      offset += val_size;

    }

  }

  return offset;

}

static unsigned

dissect_gadu_gadu_typing_notify(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)

{

  col_set_str(pinfo->cinfo, COL_INFO, "Typing notify");

  /* XXX, when type > 1, it's length not type ! */

  proto_tree_add_item(tree, hf_gadu_gadu_typing_notify_type, tvb, offset, 2, ENC_LITTLE_ENDIAN);

  offset += 2;

  proto_tree_add_item(tree, hf_gadu_gadu_typing_notify_uin, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  return offset;

}

static unsigned

dissect_gadu_gadu_msg_attr(tvbuff_t *tvb _U_, proto_tree *tree _U_, unsigned offset)

{

  /* XXX, stub */

  return offset;

}

static unsigned

dissect_gadu_gadu_recv_msg(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)

{

  struct gadu_gadu_conv_data *conv;

  proto_item *ti;

  col_set_str(pinfo->cinfo, COL_INFO, "Receive message (< 8.0)");

  if ((conv = gadu_gadu_get_conversation_data(pinfo))) {

    ti = proto_tree_add_uint(tree, hf_gadu_gadu_msg_recipient, tvb, 0, 0, conv->uin);

    proto_item_set_generated(ti);

    ti = proto_tree_add_uint(tree, hf_gadu_gadu_msg_uin, tvb, 0, 0, conv->uin);

    proto_item_set_generated(ti);

    proto_item_set_hidden(ti);

  }

  ti = proto_tree_add_item(tree, hf_gadu_gadu_msg_uin, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  proto_item_set_hidden(ti);

  proto_tree_add_item(tree, hf_gadu_gadu_msg_sender, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_msg_seq, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_msg_time, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_msg_class, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  offset = dissect_gadu_gadu_stringz_cp1250(tvb, hf_gadu_gadu_msg_text, tree, offset);

  offset = dissect_gadu_gadu_msg_attr(tvb, tree, offset);

  return offset;

}

static unsigned

dissect_gadu_gadu_send_msg(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)

{

  struct gadu_gadu_conv_data *conv;

  proto_item *ti;

  col_set_str(pinfo->cinfo, COL_INFO, "Send message (< 8.0)");

  ti = proto_tree_add_item(tree, hf_gadu_gadu_msg_uin, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  proto_item_set_hidden(ti);

  proto_tree_add_item(tree, hf_gadu_gadu_msg_recipient, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  if ((conv = gadu_gadu_get_conversation_data(pinfo))) {

    ti = proto_tree_add_uint(tree, hf_gadu_gadu_msg_sender, tvb, 0, 0, conv->uin);

    proto_item_set_generated(ti);

    ti = proto_tree_add_uint(tree, hf_gadu_gadu_msg_uin, tvb, 0, 0, conv->uin);

    proto_item_set_generated(ti);

    proto_item_set_hidden(ti);

  }

  proto_tree_add_item(tree, hf_gadu_gadu_msg_seq, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  ti = proto_tree_add_time(tree, hf_gadu_gadu_msg_time, tvb, 0, 0, &(pinfo->abs_ts));

  proto_item_set_generated(ti);

  proto_tree_add_item(tree, hf_gadu_gadu_msg_class, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  offset = dissect_gadu_gadu_stringz_cp1250(tvb, hf_gadu_gadu_msg_text, tree, offset);

  offset = dissect_gadu_gadu_msg_attr(tvb, tree, offset);

  return offset;

}

static unsigned

dissect_gadu_gadu_recv_msg80(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)

{

  struct gadu_gadu_conv_data *conv;

  proto_item *ti;

  col_set_str(pinfo->cinfo, COL_INFO, "Receive message (8.0)");

  if ((conv = gadu_gadu_get_conversation_data(pinfo))) {

    ti = proto_tree_add_uint(tree, hf_gadu_gadu_msg_recipient, tvb, 0, 0, conv->uin);

    proto_item_set_generated(ti);

    ti = proto_tree_add_uint(tree, hf_gadu_gadu_msg_uin, tvb, 0, 0, conv->uin);

    proto_item_set_generated(ti);

    proto_item_set_hidden(ti);

  }

  ti = proto_tree_add_item(tree, hf_gadu_gadu_msg_uin, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  proto_item_set_hidden(ti);

  proto_tree_add_item(tree, hf_gadu_gadu_msg_sender, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_msg_seq, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_msg_time, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_msg_class, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_msg80_offset_plain, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_msg80_offset_attr, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  /* XXX packet not fully dissected */

  return offset;

}

static unsigned

dissect_gadu_gadu_send_msg80(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)

{

  struct gadu_gadu_conv_data *conv;

  proto_item *ti;

  col_set_str(pinfo->cinfo, COL_INFO, "Send message (8.0)");

  ti = proto_tree_add_item(tree, hf_gadu_gadu_msg_uin, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  proto_item_set_hidden(ti);

  proto_tree_add_item(tree, hf_gadu_gadu_msg_recipient, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  if ((conv = gadu_gadu_get_conversation_data(pinfo))) {

    ti = proto_tree_add_uint(tree, hf_gadu_gadu_msg_sender, tvb, 0, 0, conv->uin);

    proto_item_set_generated(ti);

    ti = proto_tree_add_uint(tree, hf_gadu_gadu_msg_uin, tvb, 0, 0, conv->uin);

    proto_item_set_generated(ti);

    proto_item_set_hidden(ti);

  }

  proto_tree_add_item(tree, hf_gadu_gadu_msg_seq, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  ti = proto_tree_add_time(tree, hf_gadu_gadu_msg_time, tvb, 0, 0, &(pinfo->abs_ts));

  proto_item_set_generated(ti);

  proto_tree_add_item(tree, hf_gadu_gadu_msg_class, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_msg80_offset_plain, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_msg80_offset_attr, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  /* XXX packet not fully dissected */

  return offset;

}

static unsigned

dissect_gadu_gadu_send_msg_ack(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)

{

  col_set_str(pinfo->cinfo, COL_INFO, "Message acknowledge (server)");

  proto_tree_add_item(tree, hf_gadu_gadu_msg_ack_status, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_msg_ack_recipient, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  proto_tree_add_item(tree, hf_gadu_gadu_msg_ack_seq, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  return offset;

}

static unsigned

dissect_gadu_gadu_recv_msg_ack(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)

{

  col_set_str(pinfo->cinfo, COL_INFO, "Message acknowledge (client)");

  proto_tree_add_item(tree, hf_gadu_gadu_msg_ack_seq, tvb, offset, 4, ENC_LITTLE_ENDIAN);

  offset += 4;

  return offset;

}

static unsigned

dissect_gadu_gadu_status60(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset)