summaryrefslogtreecommitdiffstats
path: root/src/decode-udp.h
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-19 17:39:49 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-19 17:39:49 +0000
commita0aa2307322cd47bbf416810ac0292925e03be87 (patch)
tree37076262a026c4b48c8a0e84f44ff9187556ca35 /src/decode-udp.h
parentInitial commit. (diff)
downloadsuricata-a0aa2307322cd47bbf416810ac0292925e03be87.tar.xz
suricata-a0aa2307322cd47bbf416810ac0292925e03be87.zip
Adding upstream version 1:7.0.3.upstream/1%7.0.3
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'src/decode-udp.h')
-rw-r--r--src/decode-udp.h194
1 files changed, 194 insertions, 0 deletions
diff --git a/src/decode-udp.h b/src/decode-udp.h
new file mode 100644
index 0000000..6f695bd
--- /dev/null
+++ b/src/decode-udp.h
@@ -0,0 +1,194 @@
+/* Copyright (C) 2007-2022 Open Information Security Foundation
+ *
+ * You can copy, redistribute or modify this Program under the terms of
+ * the GNU General Public License version 2 as published by the Free
+ * Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * version 2 along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ * 02110-1301, USA.
+ */
+
+/**
+ * \file
+ *
+ * \author Victor Julien <victor@inliniac.net>
+ */
+
+#ifndef __DECODE_UDP_H__
+#define __DECODE_UDP_H__
+
+#define UDP_HEADER_LEN 8
+
+/* XXX RAW* needs to be really 'raw', so no SCNtohs there */
+#define UDP_GET_RAW_LEN(udph) SCNtohs((udph)->uh_len)
+#define UDP_GET_RAW_SRC_PORT(udph) SCNtohs((udph)->uh_sport)
+#define UDP_GET_RAW_DST_PORT(udph) SCNtohs((udph)->uh_dport)
+#define UDP_GET_RAW_SUM(udph) SCNtohs((udph)->uh_sum)
+
+#define UDP_GET_LEN(p) UDP_GET_RAW_LEN(p->udph)
+#define UDP_GET_SRC_PORT(p) UDP_GET_RAW_SRC_PORT(p->udph)
+#define UDP_GET_DST_PORT(p) UDP_GET_RAW_DST_PORT(p->udph)
+#define UDP_GET_SUM(p) UDP_GET_RAW_SUM(p->udph)
+
+/* UDP header structure */
+typedef struct UDPHdr_
+{
+ uint16_t uh_sport; /* source port */
+ uint16_t uh_dport; /* destination port */
+ uint16_t uh_len; /* length */
+ uint16_t uh_sum; /* checksum */
+} __attribute__((__packed__)) UDPHdr;
+
+#define CLEAR_UDP_PACKET(p) do { \
+ (p)->level4_comp_csum = -1; \
+ (p)->udph = NULL; \
+} while (0)
+
+void DecodeUDPV4RegisterTests(void);
+
+/** ------ Inline function ------ */
+
+/**
+ * \brief Calculate or valid the checksum for the UDP packet
+ *
+ * \param shdr Pointer to source address field from the IP packet. Used as a
+ * part of the psuedoheader for computing the checksum
+ * \param pkt Pointer to the start of the UDP packet
+ * \param hlen Total length of the UDP packet(header + payload)
+ * \param init For validation this is the UDP checksum, for calculation this
+ * value should be set to 0.
+ *
+ * \retval csum For validation 0 will be returned for success, for calculation
+ * this will be the checksum.
+ */
+static inline uint16_t UDPV4Checksum(
+ const uint16_t *shdr, const uint16_t *pkt, uint16_t tlen, uint16_t init)
+{
+ uint16_t pad = 0;
+ uint32_t csum = init;
+
+ csum += shdr[0] + shdr[1] + shdr[2] + shdr[3] + htons(17) + htons(tlen);
+
+ csum += pkt[0] + pkt[1] + pkt[2];
+
+ tlen -= 8;
+ pkt += 4;
+
+ while (tlen >= 32) {
+ csum += pkt[0] + pkt[1] + pkt[2] + pkt[3] + pkt[4] + pkt[5] + pkt[6] +
+ pkt[7] + pkt[8] + pkt[9] + pkt[10] + pkt[11] + pkt[12] + pkt[13] +
+ pkt[14] + pkt[15];
+ tlen -= 32;
+ pkt += 16;
+ }
+
+ while(tlen >= 8) {
+ csum += pkt[0] + pkt[1] + pkt[2] + pkt[3];
+ tlen -= 8;
+ pkt += 4;
+ }
+
+ while(tlen >= 4) {
+ csum += pkt[0] + pkt[1];
+ tlen -= 4;
+ pkt += 2;
+ }
+
+ while (tlen > 1) {
+ csum += pkt[0];
+ pkt += 1;
+ tlen -= 2;
+ }
+
+ if (tlen == 1) {
+ *(uint8_t *)(&pad) = (*(uint8_t *)pkt);
+ csum += pad;
+ }
+
+ csum = (csum >> 16) + (csum & 0x0000FFFF);
+ csum += (csum >> 16);
+
+ uint16_t csum_u16 = (uint16_t)~csum;
+ if (init == 0 && csum_u16 == 0)
+ return 0xFFFF;
+ else
+ return csum_u16;
+}
+
+/**
+ * \brief Calculate or valid the checksum for the UDP packet
+ *
+ * \param shdr Pointer to source address field from the IPV6 packet. Used as a
+ * part of the psuedoheader for computing the checksum
+ * \param pkt Pointer to the start of the UDP packet
+ * \param tlen Total length of the UDP packet(header + payload)
+ * \param init For validation this is the UDP checksum, for calculation this
+ * value should be set to 0.
+ *
+ * \retval csum For validation 0 will be returned for success, for calculation
+ * this will be the checksum.
+ */
+static inline uint16_t UDPV6Checksum(
+ const uint16_t *shdr, const uint16_t *pkt, uint16_t tlen, uint16_t init)
+{
+ uint16_t pad = 0;
+ uint32_t csum = init;
+
+ csum += shdr[0] + shdr[1] + shdr[2] + shdr[3] + shdr[4] + shdr[5] + shdr[6] +
+ shdr[7] + shdr[8] + shdr[9] + shdr[10] + shdr[11] + shdr[12] +
+ shdr[13] + shdr[14] + shdr[15] + htons(17) + htons(tlen);
+
+ csum += pkt[0] + pkt[1] + pkt[2];
+
+ tlen -= 8;
+ pkt += 4;
+
+ while (tlen >= 32) {
+ csum += pkt[0] + pkt[1] + pkt[2] + pkt[3] + pkt[4] + pkt[5] + pkt[6] +
+ pkt[7] + pkt[8] + pkt[9] + pkt[10] + pkt[11] + pkt[12] + pkt[13] +
+ pkt[14] + pkt[15];
+ tlen -= 32;
+ pkt += 16;
+ }
+
+ while(tlen >= 8) {
+ csum += pkt[0] + pkt[1] + pkt[2] + pkt[3];
+ tlen -= 8;
+ pkt += 4;
+ }
+
+ while(tlen >= 4) {
+ csum += pkt[0] + pkt[1];
+ tlen -= 4;
+ pkt += 2;
+ }
+
+ while (tlen > 1) {
+ csum += pkt[0];
+ pkt += 1;
+ tlen -= 2;
+ }
+
+ if (tlen == 1) {
+ *(uint8_t *)(&pad) = (*(uint8_t *)pkt);
+ csum += pad;
+ }
+
+ csum = (csum >> 16) + (csum & 0x0000FFFF);
+ csum += (csum >> 16);
+
+ uint16_t csum_u16 = (uint16_t)~csum;
+ if (init == 0 && csum_u16 == 0)
+ return 0xFFFF;
+ else
+ return csum_u16;
+}
+
+#endif /* __DECODE_UDP_H__ */