summaryrefslogtreecommitdiffstats
path: root/print-lwres.c
diff options
context:
space:
mode:
Diffstat (limited to 'print-lwres.c')
-rw-r--r--print-lwres.c555
1 files changed, 555 insertions, 0 deletions
diff --git a/print-lwres.c b/print-lwres.c
new file mode 100644
index 0000000..b8fc623
--- /dev/null
+++ b/print-lwres.c
@@ -0,0 +1,555 @@
+/*
+ * Copyright (C) 2001 WIDE Project.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in the
+ * documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the project nor the names of its contributors
+ * may be used to endorse or promote products derived from this software
+ * without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+
+/* \summary: BIND9 Lightweight Resolver protocol printer */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "netdissect-stdinc.h"
+
+#define ND_LONGJMP_FROM_TCHECK
+#include "netdissect.h"
+#include "addrtoname.h"
+#include "extract.h"
+
+#include "nameser.h"
+
+/* BIND9 lib/lwres/include/lwres */
+/*
+ * Use nd_uint16_t for lwres_uint16_t
+ * Use nd_uint32_t for lwres_uint32_t
+*/
+
+struct lwres_lwpacket {
+ nd_uint32_t length;
+ nd_uint16_t version;
+ nd_uint16_t pktflags;
+ nd_uint32_t serial;
+ nd_uint32_t opcode;
+ nd_uint32_t result;
+ nd_uint32_t recvlength;
+ nd_uint16_t authtype;
+ nd_uint16_t authlength;
+};
+
+#define LWRES_LWPACKETFLAG_RESPONSE 0x0001U /* if set, pkt is a response */
+
+#define LWRES_LWPACKETVERSION_0 0
+
+#define LWRES_FLAG_TRUSTNOTREQUIRED 0x00000001U
+#define LWRES_FLAG_SECUREDATA 0x00000002U
+
+/*
+ * no-op
+ */
+#define LWRES_OPCODE_NOOP 0x00000000U
+
+typedef struct {
+ /* public */
+ nd_uint16_t datalength;
+ /* data follows */
+} lwres_nooprequest_t;
+
+typedef struct {
+ /* public */
+ nd_uint16_t datalength;
+ /* data follows */
+} lwres_noopresponse_t;
+
+/*
+ * get addresses by name
+ */
+#define LWRES_OPCODE_GETADDRSBYNAME 0x00010001U
+
+typedef struct lwres_addr lwres_addr_t;
+
+struct lwres_addr {
+ nd_uint32_t family;
+ nd_uint16_t length;
+ /* address follows */
+};
+#define LWRES_ADDR_LEN 6
+
+typedef struct {
+ /* public */
+ nd_uint32_t flags;
+ nd_uint32_t addrtypes;
+ nd_uint16_t namelen;
+ /* name follows */
+} lwres_gabnrequest_t;
+#define LWRES_GABNREQUEST_LEN 10
+
+typedef struct {
+ /* public */
+ nd_uint32_t flags;
+ nd_uint16_t naliases;
+ nd_uint16_t naddrs;
+ nd_uint16_t realnamelen;
+ /* aliases follows */
+ /* addrs follows */
+ /* realname follows */
+} lwres_gabnresponse_t;
+#define LWRES_GABNRESPONSE_LEN 10
+
+/*
+ * get name by address
+ */
+#define LWRES_OPCODE_GETNAMEBYADDR 0x00010002U
+typedef struct {
+ /* public */
+ nd_uint32_t flags;
+ /* addr follows */
+} lwres_gnbarequest_t;
+#define LWRES_GNBAREQUEST_LEN 4
+
+typedef struct {
+ /* public */
+ nd_uint32_t flags;
+ nd_uint16_t naliases;
+ nd_uint16_t realnamelen;
+ /* aliases follows */
+ /* realname follows */
+} lwres_gnbaresponse_t;
+#define LWRES_GNBARESPONSE_LEN 8
+
+/*
+ * get rdata by name
+ */
+#define LWRES_OPCODE_GETRDATABYNAME 0x00010003U
+
+typedef struct {
+ /* public */
+ nd_uint32_t flags;
+ nd_uint16_t rdclass;
+ nd_uint16_t rdtype;
+ nd_uint16_t namelen;
+ /* name follows */
+} lwres_grbnrequest_t;
+#define LWRES_GRBNREQUEST_LEN 10
+
+typedef struct {
+ /* public */
+ nd_uint32_t flags;
+ nd_uint16_t rdclass;
+ nd_uint16_t rdtype;
+ nd_uint32_t ttl;
+ nd_uint16_t nrdatas;
+ nd_uint16_t nsigs;
+ /* realname here (len + name) */
+ /* rdata here (len + name) */
+ /* signatures here (len + name) */
+} lwres_grbnresponse_t;
+#define LWRES_GRBNRESPONSE_LEN 16
+
+#define LWRDATA_VALIDATED 0x00000001
+
+#define LWRES_ADDRTYPE_V4 0x00000001U /* ipv4 */
+#define LWRES_ADDRTYPE_V6 0x00000002U /* ipv6 */
+
+#define LWRES_MAX_ALIASES 16 /* max # of aliases */
+#define LWRES_MAX_ADDRS 64 /* max # of addrs */
+
+static const struct tok opcode[] = {
+ { LWRES_OPCODE_NOOP, "noop", },
+ { LWRES_OPCODE_GETADDRSBYNAME, "getaddrsbyname", },
+ { LWRES_OPCODE_GETNAMEBYADDR, "getnamebyaddr", },
+ { LWRES_OPCODE_GETRDATABYNAME, "getrdatabyname", },
+ { 0, NULL, },
+};
+
+/* print-domain.c */
+extern const struct tok ns_type2str[];
+extern const struct tok ns_class2str[];
+
+static unsigned
+lwres_printname(netdissect_options *ndo,
+ u_int l, const u_char *p0)
+{
+ ND_PRINT(" ");
+ (void)nd_printn(ndo, p0, l, NULL);
+ p0 += l;
+ if (GET_U_1(p0))
+ ND_PRINT(" (not NUL-terminated!)");
+ return l + 1;
+}
+
+static unsigned
+lwres_printnamelen(netdissect_options *ndo,
+ const u_char *p)
+{
+ uint16_t l;
+ int advance;
+
+ l = GET_BE_U_2(p);
+ advance = lwres_printname(ndo, l, p + 2);
+ return 2 + advance;
+}
+
+static unsigned
+lwres_printbinlen(netdissect_options *ndo,
+ const u_char *p0)
+{
+ const u_char *p;
+ uint16_t l;
+ int i;
+
+ p = p0;
+ l = GET_BE_U_2(p);
+ p += 2;
+ for (i = 0; i < l; i++) {
+ ND_PRINT("%02x", GET_U_1(p));
+ p++;
+ }
+ return 2 + l;
+}
+
+static int
+lwres_printaddr(netdissect_options *ndo,
+ const u_char *p0)
+{
+ const u_char *p;
+ const lwres_addr_t *ap;
+ uint16_t l;
+ int i;
+
+ p = p0;
+ ap = (const lwres_addr_t *)p;
+ l = GET_BE_U_2(ap->length);
+ p += LWRES_ADDR_LEN;
+ ND_TCHECK_LEN(p, l);
+
+ switch (GET_BE_U_4(ap->family)) {
+ case 1: /* IPv4 */
+ if (l < 4)
+ return -1;
+ ND_PRINT(" %s", GET_IPADDR_STRING(p));
+ p += sizeof(nd_ipv4);
+ break;
+ case 2: /* IPv6 */
+ if (l < 16)
+ return -1;
+ ND_PRINT(" %s", GET_IP6ADDR_STRING(p));
+ p += sizeof(nd_ipv6);
+ break;
+ default:
+ ND_PRINT(" %u/", GET_BE_U_4(ap->family));
+ for (i = 0; i < l; i++) {
+ ND_PRINT("%02x", GET_U_1(p));
+ p++;
+ }
+ }
+
+ return ND_BYTES_BETWEEN(p, p0);
+}
+
+void
+lwres_print(netdissect_options *ndo,
+ const u_char *bp, u_int length)
+{
+ const u_char *p;
+ const struct lwres_lwpacket *np;
+ uint32_t v;
+ const u_char *s;
+ int response;
+ int advance;
+ int unsupported = 0;
+
+ ndo->ndo_protocol = "lwres";
+ np = (const struct lwres_lwpacket *)bp;
+ ND_TCHECK_2(np->authlength);
+
+ ND_PRINT(" lwres");
+ v = GET_BE_U_2(np->version);
+ if (ndo->ndo_vflag || v != LWRES_LWPACKETVERSION_0)
+ ND_PRINT(" v%u", v);
+ if (v != LWRES_LWPACKETVERSION_0) {
+ s = bp + GET_BE_U_4(np->length);
+ goto tail;
+ }
+
+ response = GET_BE_U_2(np->pktflags) & LWRES_LWPACKETFLAG_RESPONSE;
+
+ /* opcode and pktflags */
+ v = GET_BE_U_4(np->opcode);
+ ND_PRINT(" %s%s", tok2str(opcode, "#0x%x", v), response ? "" : "?");
+
+ /* pktflags */
+ v = GET_BE_U_2(np->pktflags);
+ if (v & ~LWRES_LWPACKETFLAG_RESPONSE)
+ ND_PRINT("[0x%x]", v);
+
+ if (ndo->ndo_vflag > 1) {
+ ND_PRINT(" ("); /*)*/
+ ND_PRINT("serial:0x%x", GET_BE_U_4(np->serial));
+ ND_PRINT(" result:0x%x", GET_BE_U_4(np->result));
+ ND_PRINT(" recvlen:%u", GET_BE_U_4(np->recvlength));
+ /* BIND910: not used */
+ if (ndo->ndo_vflag > 2) {
+ ND_PRINT(" authtype:0x%x", GET_BE_U_2(np->authtype));
+ ND_PRINT(" authlen:%u", GET_BE_U_2(np->authlength));
+ }
+ /*(*/
+ ND_PRINT(")");
+ }
+
+ /* per-opcode content */
+ if (!response) {
+ /*
+ * queries
+ */
+ const lwres_gabnrequest_t *gabn;
+ const lwres_gnbarequest_t *gnba;
+ const lwres_grbnrequest_t *grbn;
+ uint32_t l;
+
+ gabn = NULL;
+ gnba = NULL;
+ grbn = NULL;
+
+ p = (const u_char *)(np + 1);
+ switch (GET_BE_U_4(np->opcode)) {
+ case LWRES_OPCODE_NOOP:
+ s = p;
+ break;
+ case LWRES_OPCODE_GETADDRSBYNAME:
+ gabn = (const lwres_gabnrequest_t *)p;
+ ND_TCHECK_2(gabn->namelen);
+
+ /* BIND910: not used */
+ if (ndo->ndo_vflag > 2) {
+ ND_PRINT(" flags:0x%x",
+ GET_BE_U_4(gabn->flags));
+ }
+
+ v = GET_BE_U_4(gabn->addrtypes);
+ switch (v & (LWRES_ADDRTYPE_V4 | LWRES_ADDRTYPE_V6)) {
+ case LWRES_ADDRTYPE_V4:
+ ND_PRINT(" IPv4");
+ break;
+ case LWRES_ADDRTYPE_V6:
+ ND_PRINT(" IPv6");
+ break;
+ case LWRES_ADDRTYPE_V4 | LWRES_ADDRTYPE_V6:
+ ND_PRINT(" IPv4/6");
+ break;
+ }
+ if (v & ~(LWRES_ADDRTYPE_V4 | LWRES_ADDRTYPE_V6))
+ ND_PRINT("[0x%x]", v);
+
+ s = p + LWRES_GABNREQUEST_LEN;
+ l = GET_BE_U_2(gabn->namelen);
+ advance = lwres_printname(ndo, l, s);
+ s += advance;
+ break;
+ case LWRES_OPCODE_GETNAMEBYADDR:
+ gnba = (const lwres_gnbarequest_t *)p;
+ ND_TCHECK_4(gnba->flags);
+
+ /* BIND910: not used */
+ if (ndo->ndo_vflag > 2) {
+ ND_PRINT(" flags:0x%x",
+ GET_BE_U_4(gnba->flags));
+ }
+
+ s = p + LWRES_GNBAREQUEST_LEN;
+ advance = lwres_printaddr(ndo, s);
+ if (advance < 0)
+ goto invalid;
+ s += advance;
+ break;
+ case LWRES_OPCODE_GETRDATABYNAME:
+ /* XXX no trace, not tested */
+ grbn = (const lwres_grbnrequest_t *)p;
+ ND_TCHECK_2(grbn->namelen);
+
+ /* BIND910: not used */
+ if (ndo->ndo_vflag > 2) {
+ ND_PRINT(" flags:0x%x",
+ GET_BE_U_4(grbn->flags));
+ }
+
+ ND_PRINT(" %s", tok2str(ns_type2str, "Type%u",
+ GET_BE_U_2(grbn->rdtype)));
+ if (GET_BE_U_2(grbn->rdclass) != C_IN) {
+ ND_PRINT(" %s", tok2str(ns_class2str, "Class%u",
+ GET_BE_U_2(grbn->rdclass)));
+ }
+
+ s = p + LWRES_GRBNREQUEST_LEN;
+ l = GET_BE_U_2(grbn->namelen);
+ advance = lwres_printname(ndo, l, s);
+ s += advance;
+ break;
+ default:
+ s = p;
+ unsupported++;
+ break;
+ }
+ } else {
+ /*
+ * responses
+ */
+ const lwres_gabnresponse_t *gabn;
+ const lwres_gnbaresponse_t *gnba;
+ const lwres_grbnresponse_t *grbn;
+ uint32_t l, na;
+ uint32_t i;
+
+ gabn = NULL;
+ gnba = NULL;
+ grbn = NULL;
+
+ p = (const u_char *)(np + 1);
+ switch (GET_BE_U_4(np->opcode)) {
+ case LWRES_OPCODE_NOOP:
+ s = p;
+ break;
+ case LWRES_OPCODE_GETADDRSBYNAME:
+ gabn = (const lwres_gabnresponse_t *)p;
+ ND_TCHECK_2(gabn->realnamelen);
+
+ /* BIND910: not used */
+ if (ndo->ndo_vflag > 2) {
+ ND_PRINT(" flags:0x%x",
+ GET_BE_U_4(gabn->flags));
+ }
+
+ ND_PRINT(" %u/%u", GET_BE_U_2(gabn->naliases),
+ GET_BE_U_2(gabn->naddrs));
+
+ s = p + LWRES_GABNRESPONSE_LEN;
+ l = GET_BE_U_2(gabn->realnamelen);
+ advance = lwres_printname(ndo, l, s);
+ s += advance;
+
+ /* aliases */
+ na = GET_BE_U_2(gabn->naliases);
+ for (i = 0; i < na; i++) {
+ advance = lwres_printnamelen(ndo, s);
+ s += advance;
+ }
+
+ /* addrs */
+ na = GET_BE_U_2(gabn->naddrs);
+ for (i = 0; i < na; i++) {
+ advance = lwres_printaddr(ndo, s);
+ if (advance < 0)
+ goto invalid;
+ s += advance;
+ }
+ break;
+ case LWRES_OPCODE_GETNAMEBYADDR:
+ gnba = (const lwres_gnbaresponse_t *)p;
+ ND_TCHECK_2(gnba->realnamelen);
+
+ /* BIND910: not used */
+ if (ndo->ndo_vflag > 2) {
+ ND_PRINT(" flags:0x%x",
+ GET_BE_U_4(gnba->flags));
+ }
+
+ ND_PRINT(" %u", GET_BE_U_2(gnba->naliases));
+
+ s = p + LWRES_GNBARESPONSE_LEN;
+ l = GET_BE_U_2(gnba->realnamelen);
+ advance = lwres_printname(ndo, l, s);
+ s += advance;
+
+ /* aliases */
+ na = GET_BE_U_2(gnba->naliases);
+ for (i = 0; i < na; i++) {
+ advance = lwres_printnamelen(ndo, s);
+ s += advance;
+ }
+ break;
+ case LWRES_OPCODE_GETRDATABYNAME:
+ /* XXX no trace, not tested */
+ grbn = (const lwres_grbnresponse_t *)p;
+ ND_TCHECK_2(grbn->nsigs);
+
+ /* BIND910: not used */
+ if (ndo->ndo_vflag > 2) {
+ ND_PRINT(" flags:0x%x",
+ GET_BE_U_4(grbn->flags));
+ }
+
+ ND_PRINT(" %s", tok2str(ns_type2str, "Type%u",
+ GET_BE_U_2(grbn->rdtype)));
+ if (GET_BE_U_2(grbn->rdclass) != C_IN) {
+ ND_PRINT(" %s", tok2str(ns_class2str, "Class%u",
+ GET_BE_U_2(grbn->rdclass)));
+ }
+ ND_PRINT(" TTL ");
+ unsigned_relts_print(ndo,
+ GET_BE_U_4(grbn->ttl));
+ ND_PRINT(" %u/%u", GET_BE_U_2(grbn->nrdatas),
+ GET_BE_U_2(grbn->nsigs));
+
+ s = p + LWRES_GRBNRESPONSE_LEN;
+ advance = lwres_printnamelen(ndo, s);
+ s += advance;
+
+ /* rdatas */
+ na = GET_BE_U_2(grbn->nrdatas);
+ for (i = 0; i < na; i++) {
+ /* XXX should decode resource data */
+ advance = lwres_printbinlen(ndo, s);
+ s += advance;
+ }
+
+ /* sigs */
+ na = GET_BE_U_2(grbn->nsigs);
+ for (i = 0; i < na; i++) {
+ /* XXX how should we print it? */
+ advance = lwres_printbinlen(ndo, s);
+ s += advance;
+ }
+ break;
+ default:
+ s = p;
+ unsupported++;
+ break;
+ }
+ }
+
+ tail:
+ /* length mismatch */
+ if (GET_BE_U_4(np->length) != length) {
+ ND_PRINT(" [len: %u != %u]", GET_BE_U_4(np->length),
+ length);
+ }
+ if (!unsupported && ND_BYTES_BETWEEN(s, bp) < GET_BE_U_4(np->length))
+ ND_PRINT("[extra]");
+ return;
+
+ invalid:
+ nd_print_invalid(ndo);
+}
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-16 05:17:41 +0000