/* Copyright (C) 2020 Open Information Security Foundation * * You can copy, redistribute or modify this Program under the terms of * the GNU General Public License version 2 as published by the Free * Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * version 2 along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA * 02110-1301, USA. */ // Author: Frank Honza use super::ipsec_parser::IkeV2Transform; use crate::ike::ike::*; use std::ffi::CStr; use std::ptr; #[no_mangle] pub extern "C" fn rs_ike_state_get_exch_type(tx: &mut IKETransaction, exch_type: *mut u8) -> u8 { debug_validate_bug_on!(exch_type.is_null()); if tx.ike_version == 1 { if let Some(r) = tx.hdr.ikev1_header.exchange_type { unsafe { *exch_type = r; } return 1; } } else if tx.ike_version == 2 { unsafe { *exch_type = tx.hdr.ikev2_header.exch_type.0; } return 1; } return 0; } #[no_mangle] pub extern "C" fn rs_ike_state_get_spi_initiator( tx: &mut IKETransaction, buffer: *mut *const u8, buffer_len: *mut u32, ) -> u8 { debug_validate_bug_on!(buffer.is_null() || buffer_len.is_null()); unsafe { *buffer = tx.hdr.spi_initiator.as_ptr(); *buffer_len = tx.hdr.spi_initiator.len() as u32; } return 1; } #[no_mangle] pub extern "C" fn rs_ike_state_get_spi_responder( tx: &mut IKETransaction, buffer: *mut *const u8, buffer_len: *mut u32, ) -> u8 { debug_validate_bug_on!(buffer.is_null() || buffer_len.is_null()); unsafe { *buffer = tx.hdr.spi_responder.as_ptr(); *buffer_len = tx.hdr.spi_responder.len() as u32; } return 1; } #[no_mangle] pub extern "C" fn rs_ike_state_get_nonce( tx: &mut IKETransaction, buffer: *mut *const u8, buffer_len: *mut u32, ) -> u8 { debug_validate_bug_on!(buffer.is_null() || buffer_len.is_null()); if tx.ike_version == 1 && !tx.hdr.ikev1_header.nonce.is_empty() { let p = &tx.hdr.ikev1_header.nonce; unsafe { *buffer = p.as_ptr(); *buffer_len = p.len() as u32; } return 1; } unsafe { *buffer = ptr::null(); *buffer_len = 0; } return 0; } #[no_mangle] pub extern "C" fn rs_ike_state_get_key_exchange( tx: &mut IKETransaction, buffer: *mut *const u8, buffer_len: *mut u32, ) -> u8 { debug_validate_bug_on!(buffer.is_null() || buffer_len.is_null()); if tx.ike_version == 1 && !tx.hdr.ikev1_header.key_exchange.is_empty() { let p = &tx.hdr.ikev1_header.key_exchange; unsafe { *buffer = p.as_ptr(); *buffer_len = p.len() as u32; } return 1; } unsafe { *buffer = ptr::null(); *buffer_len = 0; } return 0; } #[no_mangle] pub extern "C" fn rs_ike_tx_get_vendor( tx: &IKETransaction, i: u32, buf: *mut *const u8, len: *mut u32, ) -> u8 { if tx.ike_version == 1 && i < tx.hdr.ikev1_header.vendor_ids.len() as u32 { unsafe { *len = tx.hdr.ikev1_header.vendor_ids[i as usize].len() as u32; *buf = tx.hdr.ikev1_header.vendor_ids[i as usize].as_ptr(); } return 1; } unsafe { *buf = ptr::null(); *len = 0; } return 0; } #[no_mangle] pub extern "C" fn rs_ike_state_get_sa_attribute( tx: &mut IKETransaction, sa_type: *const std::os::raw::c_char, value: *mut u32, ) -> u8 { debug_validate_bug_on!(value.is_null()); let mut ret_val = 0; let mut ret_code = 0; let sa_type_s: Result<_, _>; unsafe { sa_type_s = CStr::from_ptr(sa_type).to_str() } SCLogInfo!("{:#?}", sa_type_s); if let Ok(sa) = sa_type_s { if tx.ike_version == 1 { if !tx.hdr.ikev1_transforms.is_empty() { // there should be only one chosen server_transform, check event if let Some(server_transform) = tx.hdr.ikev1_transforms.first() { for attr in server_transform { if attr.attribute_type.to_string() == sa { if let Some(numeric_value) = attr.numeric_value { ret_val = numeric_value; ret_code = 1; break; } } } } } } else if tx.ike_version == 2 { for attr in tx.hdr.ikev2_transforms.iter() { match attr { IkeV2Transform::Encryption(e) => { if sa == "alg_enc" { ret_val = e.0 as u32; ret_code = 1; break; } } IkeV2Transform::Auth(e) => { if sa == "alg_auth" { ret_val = e.0 as u32; ret_code = 1; break; } } IkeV2Transform::PRF(ref e) => { if sa == "alg_prf" { ret_val = e.0 as u32; ret_code = 1; break; } } IkeV2Transform::DH(ref e) => { if sa == "alg_dh" { ret_val = e.0 as u32; ret_code = 1; break; } } _ => (), } } } } unsafe { *value = ret_val; } return ret_code; } #[no_mangle] pub unsafe extern "C" fn rs_ike_state_get_key_exchange_payload_length( tx: &mut IKETransaction, value: *mut u32, ) -> u8 { debug_validate_bug_on!(value.is_null()); if tx.ike_version == 1 && !tx.hdr.ikev1_header.key_exchange.is_empty() { *value = tx.hdr.ikev1_header.key_exchange.len() as u32; return 1; } *value = 0; return 0; } #[no_mangle] pub unsafe extern "C" fn rs_ike_state_get_nonce_payload_length( tx: &mut IKETransaction, value: *mut u32, ) -> u8 { debug_validate_bug_on!(value.is_null()); if tx.ike_version == 1 && !tx.hdr.ikev1_header.nonce.is_empty() { *value = tx.hdr.ikev1_header.nonce.len() as u32; return 1; } *value = 0; return 0; }