/* XXX all this offset>>3 and calculations of bytes in the tvb every time we put something in the tree is just silly. should be replaced with some proper helper routines */ /* packet-per.c * Routines for dissection of ASN.1 Aligned PER * 2003 Ronnie Sahlberg * * Wireshark - Network traffic analyzer * By Gerald Combs * Copyright 1998 Gerald Combs * * SPDX-License-Identifier: GPL-2.0-or-later */ #include "config.h" #include #include #include #include #include #include #include #include #include "packet-per.h" void proto_register_per(void); static int proto_per; static int hf_per_GeneralString_length; static int hf_per_extension_bit; static int hf_per_extension_present_bit; static int hf_per_choice_index; static int hf_per_choice_extension_index; static int hf_per_enum_index; static int hf_per_enum_extension_index; static int hf_per_num_sequence_extensions; static int hf_per_small_number_bit; static int hf_per_optional_field_bit; static int hf_per_sequence_of_length; static int hf_per_object_identifier_length; static int hf_per_open_type_length; static int hf_per_real_length; static int hf_per_octet_string_length; static int hf_per_bit_string_length; static int hf_per_normally_small_nonnegative_whole_number_length; static int hf_per_const_int_len; static int hf_per_direct_reference; /* T_direct_reference */ static int hf_per_indirect_reference; /* T_indirect_reference */ static int hf_per_data_value_descriptor; /* T_data_value_descriptor */ static int hf_per_encoding; /* External_encoding */ static int hf_per_single_ASN1_type; /* T_single_ASN1_type */ static int hf_per_octet_aligned; /* T_octet_aligned */ static int hf_per_arbitrary; /* T_arbitrary */ static int hf_per_integer_length; /* Show integer length if "show internal per fields" */ /* static int hf_per_debug_pos; */ static int hf_per_internal_range; static int hf_per_internal_num_bits; static int hf_per_internal_min; static int hf_per_internal_value; static int hf_per_internal_min_int; static int hf_per_internal_value_int; static int hf_per_encoding_boiler_plate; static int ett_per_open_type; static int ett_per_containing; static int ett_per_sequence_of_item; static int ett_per_External; static int ett_per_External_encoding; static int ett_per_named_bits; static expert_field ei_per_size_constraint_value; static expert_field ei_per_size_constraint_too_few; static expert_field ei_per_size_constraint_too_many; static expert_field ei_per_choice_extension_unknown; static expert_field ei_per_sequence_extension_unknown; static expert_field ei_per_encoding_error; static expert_field ei_per_oid_not_implemented; static expert_field ei_per_undecoded; static expert_field ei_per_field_not_integer; static expert_field ei_per_external_type; static expert_field ei_per_open_type; static expert_field ei_per_open_type_len; static dissector_table_t per_oid_dissector_table; /* #define DEBUG_ENTRY(x) \ printf("#%u %s tvb:0x%08x\n",actx->pinfo->num,x,(int)tvb); */ #define DEBUG_ENTRY(x) \ ; #define BLEN(old_offset, offset) (((offset)>>3)!=((old_offset)>>3)?((offset)>>3)-((old_offset)>>3):1) /* whether the PER helpers should put the internal PER fields into the tree or not. */ static bool display_internal_per_fields; static const true_false_string tfs_extension_bit = { "Extension bit is set", "Extension bit is clear" }; static const true_false_string tfs_small_number_bit = { "The number is small, 0-63", "The number is large, >63" }; void add_per_encoded_label(tvbuff_t* tvb, packet_info* pinfo _U_, proto_tree* tree) { proto_item* ti; ti = proto_tree_add_item(tree, hf_per_encoding_boiler_plate, tvb, 0, -1, ENC_NA); proto_item_set_generated(ti); } #define BYTE_ALIGN_OFFSET(offset) if(offset&0x07){offset=(offset&0xfffffff8)+8;} #define SEQ_MAX_COMPONENTS 128 static void per_check_value(uint32_t value, uint32_t min_len, uint32_t max_len, asn1_ctx_t *actx, proto_item *item, bool is_signed) { if ((is_signed == false) && (value > max_len)) { expert_add_info_format(actx->pinfo, item, &ei_per_size_constraint_value, "Size constraint: value too big: %u (%u .. %u)", value, min_len, max_len); } else if ((is_signed == true) && ((int32_t)value > (int32_t)max_len)) { expert_add_info_format(actx->pinfo, item, &ei_per_size_constraint_value, "Size constraint: value too big: %d (%d .. %d)", (int32_t)value, (int32_t)min_len, (int32_t)max_len); } } static void per_check_value64(uint64_t value, uint64_t min_len, uint64_t max_len, asn1_ctx_t *actx, proto_item *item, bool is_signed) { if ((is_signed == false) && (value > max_len)) { expert_add_info_format(actx->pinfo, item, &ei_per_size_constraint_value, "Size constraint: value too big: %" PRIu64 " (%" PRIu64 " .. %" PRIu64 ")", value, min_len, max_len); } else if ((is_signed == true) && ((int64_t)value > (int64_t)max_len)) { expert_add_info_format(actx->pinfo, item, &ei_per_size_constraint_value, "Size constraint: value too big: %" PRId64 " (%" PRId64 " .. %" PRId64 ")", (int64_t)value, (int64_t)min_len, (int64_t)max_len); } } static void per_check_items(uint32_t cnt, int min_len, int max_len, asn1_ctx_t *actx, proto_item *item) { if (min_len != NO_BOUND && cnt < (uint32_t)min_len) { expert_add_info_format(actx->pinfo, item, &ei_per_size_constraint_too_few, "Size constraint: too few items: %d (%d .. %d)", cnt, min_len, max_len); } else if (max_len != NO_BOUND && cnt > (uint32_t)max_len) { expert_add_info_format(actx->pinfo, item, &ei_per_size_constraint_too_many, "Size constraint: too many items: %d (%d .. %d)", cnt, min_len, max_len); } } void dissect_per_not_decoded_yet(proto_tree* tree, packet_info* pinfo, tvbuff_t *tvb, const char* reason) { proto_tree_add_expert_format(tree, pinfo, &ei_per_undecoded, tvb, 0, 0, "something unknown here [%s]",reason); col_append_fstr(pinfo->cinfo, COL_INFO, "[UNKNOWN PER: %s]", reason); THROW(ReportedBoundsError); } /* 10 Encoding procedures -------------------------------------------------- */ /* 10.2 Open type fields --------------------------------------------------- */ static uint32_t dissect_per_open_type_internal(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, void* type_cb, asn1_cb_variant variant) { int type_length, start_offset, end_offset, fragmented_length = 0, pdu_length, pdu_offset; tvbuff_t *val_tvb = NULL, *pdu_tvb = NULL, *fragment_tvb = NULL; header_field_info *hfi; proto_tree *subtree = tree; bool is_fragmented; int captured_pdu_length; hfi = (hf_index <= 0) ? NULL : proto_registrar_get_nth(hf_index); start_offset = offset; do { offset = dissect_per_length_determinant(tvb, offset, actx, tree, hf_per_open_type_length, &type_length, &is_fragmented); if (actx->aligned) BYTE_ALIGN_OFFSET(offset); if (is_fragmented) { fragment_tvb = tvb_new_octet_aligned(tvb, offset, 8*type_length); if (fragmented_length == 0) { pdu_tvb = tvb_new_composite(); } tvb_composite_append(pdu_tvb, fragment_tvb); offset += 8*type_length; fragmented_length += type_length; } } while (is_fragmented); if (fragmented_length) { if (type_length) { tvb_composite_append(pdu_tvb, tvb_new_octet_aligned(tvb, offset, 8*type_length)); fragmented_length += type_length; } tvb_composite_finalize(pdu_tvb); add_new_data_source(actx->pinfo, pdu_tvb, "Fragmented OCTET STRING"); pdu_offset = 0; pdu_length = fragmented_length; } else { pdu_tvb = tvb; pdu_offset = offset; pdu_length = type_length; } end_offset = offset + type_length * 8; if (variant==CB_NEW_DISSECTOR) { if (fragmented_length) { val_tvb = pdu_tvb; } else { if (!pdu_length) { return end_offset; } /* Check if we have a tvb that holds the whole PDU */ captured_pdu_length = tvb_captured_length(pdu_tvb) - (pdu_offset>>3); if(captured_pdu_length < pdu_length){ val_tvb = tvb_new_octet_aligned(pdu_tvb, pdu_offset, captured_pdu_length * 8); actx->created_item = proto_tree_add_expert_format(tree, actx->pinfo, &ei_per_open_type_len, tvb, pdu_offset >> 3, captured_pdu_length,"Open type length(%i) > available data(%i)", pdu_length, captured_pdu_length); pdu_length = captured_pdu_length; } else { val_tvb = tvb_new_octet_aligned(pdu_tvb, pdu_offset, pdu_length * 8); } /* Add new data source if the offet was unaligned */ if ((pdu_offset & 7) != 0) { add_new_data_source(actx->pinfo, val_tvb, "Unaligned OCTET STRING"); } } if (hfi) { if (FT_IS_UINT(hfi->type)||FT_IS_INT(hfi->type)) { if (FT_IS_UINT(hfi->type)) actx->created_item = proto_tree_add_uint(tree, hf_index, val_tvb, 0, pdu_length, pdu_length); else actx->created_item = proto_tree_add_int(tree, hf_index, val_tvb, 0, pdu_length, pdu_length); proto_item_append_text(actx->created_item, plurality(pdu_length, " octet", " octets")); } else { actx->created_item = proto_tree_add_item(tree, hf_index, val_tvb, 0, pdu_length, ENC_BIG_ENDIAN); } subtree = proto_item_add_subtree(actx->created_item, ett_per_open_type); } } if (type_cb) { switch (variant) { case CB_ASN1_ENC: ((per_type_fn)type_cb)(pdu_tvb, pdu_offset, actx, tree, hf_index); break; case CB_NEW_DISSECTOR: /* Pas actx->private_data as "data" to the called function */ ((dissector_t)type_cb)(val_tvb, actx->pinfo, subtree, actx->private_data); break; case CB_DISSECTOR_HANDLE: break; } } else { actx->created_item = proto_tree_add_expert(tree, actx->pinfo, &ei_per_open_type, tvb, start_offset>>3, BLEN(start_offset, end_offset)); } return end_offset; } uint32_t dissect_per_open_type(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, per_type_fn type_cb) { return dissect_per_open_type_internal(tvb, offset, actx, tree, hf_index, (void*)type_cb, CB_ASN1_ENC); } uint32_t dissect_per_open_type_pdu_new(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, dissector_t type_cb) { return dissect_per_open_type_internal(tvb, offset, actx, tree, hf_index, (void*)type_cb, CB_NEW_DISSECTOR); } /* 10.9 General rules for encoding a length determinant -------------------- NOTE 1 - (Tutorial) The procedures of this subclause are invoked when an explicit length field is needed for some part of the encoding regardless of whether the length count is bounded above (by PER-visible constraints) or not. The part of the encoding to which the length applies may be a bit string (with the length count in bits), an octet string (with the length count in octets), a known-multiplier character string (with the length count in characters), or a list of fields (with the length count in components of a sequence-of or set-of). NOTE 2 - (Tutorial) In the case of the ALIGNED variant if the length count is bounded above by an upper bound that is less than 64K, then the constrained whole number encoding is used for the length. For sufficiently small ranges the result is a bit-field, otherwise the unconstrained length ("n" say) is encoded into an octet-aligned bit-field in one of three ways (in order of increasing size): a) ("n" less than 128) a single octet containing "n" with bit 8 set to zero; b) ("n" less than 16K) two octets containing "n" with bit 8 of the first octet set to 1 and bit 7 set to zero; c) (large "n") a single octet containing a count "m" with bit 8 set to 1 and bit 7 set to 1. The count "m" is one to four, and the length indicates that a fragment of the material follows (a multiple "m" of 16K items). For all values of "m", the fragment is then followed by another length encoding for the remainder of the material. NOTE 3 - (Tutorial) In the UNALIGNED variant, if the length count is bounded above by an upper bound that is less than 64K, then the constrained whole number encoding is used to encode the length in the minimum number of bits necessary to represent the range. Otherwise, the unconstrained length ("n" say) is encoded into a bit field in the manner described above in Note 2. */ uint32_t dissect_per_length_determinant(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, uint32_t *length, bool *is_fragmented) { uint8_t byte; uint32_t len; proto_item *pi; int num_bits; int i, bit, str_length, str_index; bool tmp; if(!length){ length=&len; } if (is_fragmented) { *is_fragmented = false; } /* byte aligned */ if (actx->aligned){ BYTE_ALIGN_OFFSET(offset); byte=tvb_get_uint8(tvb, offset>>3); offset+=8; }else{ char *str; uint32_t val; val = 0; /* prepare the string (max number of bits + quartet separators + prepended space) */ str_length = 256+64+1; str=(char *)wmem_alloc(actx->pinfo->pool, str_length+1); str_index = 0; str_length = snprintf(str, str_length+1, " "); for(bit=0;bit<((int)(offset&0x07));bit++){ if(bit&&(!(bit%4))){ if (str_index < str_length) str[str_index++] = ' '; } if (str_index < str_length) str[str_index++] = '.'; } /* read the bits for the int */ num_bits = 8; for(i=0;ipinfo, tvb, "10.9 Unconstrained"); return offset; } else { num_bits = 8; *is_fragmented = true; } } } else { if (str_index < str_length) str[str_index++] = '0'; } } str[str_index] = '\0'; /* Terminate string */ if(is_fragmented && *is_fragmented==true){ *length = val&0x3f; if (*length>4 || *length==0) { *length = 0; *is_fragmented = false; dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "10.9 Unconstrained unexpected fragment count"); return offset; } *length *= 0x4000; if(hf_index > 0){ pi = proto_tree_add_uint(tree, hf_index, tvb, (offset>>3)-1, 1, *length); if (display_internal_per_fields) proto_item_append_text(pi," %s", str); else proto_item_set_hidden(pi); } return offset; } else if((val&0x80)==0 && num_bits==8){ *length = val; if(hf_index > 0){ pi = proto_tree_add_uint(tree, hf_index, tvb, (offset>>3)-1, 1, *length); if (display_internal_per_fields) proto_item_append_text(pi," %s", str); else proto_item_set_hidden(pi); } return offset; } else if (num_bits==16) { *length = val&0x3fff; if(hf_index > 0){ pi = proto_tree_add_uint(tree, hf_index, tvb, (offset>>3)-2, 2, *length); if (display_internal_per_fields) proto_item_append_text(pi," %s", str); else proto_item_set_hidden(pi); } return offset; } *length = 0; dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "10.9 Unaligned"); return offset; } /* 10.9.3.6 */ if((byte&0x80)==0){ *length=byte; if(hf_index > 0){ pi = proto_tree_add_uint(tree, hf_index, tvb, (offset>>3)-1, 1, *length); if (!display_internal_per_fields) proto_item_set_hidden(pi); } return offset; } /* 10.9.3.7 */ if((byte&0xc0)==0x80){ *length=(byte&0x3f); *length=((*length)<<8)+tvb_get_uint8(tvb, offset>>3); offset+=8; if(hf_index > 0){ pi = proto_tree_add_uint(tree, hf_index, tvb, (offset>>3)-2, 2, *length); if (!display_internal_per_fields) proto_item_set_hidden(pi); } return offset; } /* 10.9.3.8.1 */ else if (is_fragmented){ *length = byte&0x3f; if (*length>4 || *length==0) { *length = 0; dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "10.9 Unconstrained unexpected fragment count"); return offset; } *length *= 0x4000; *is_fragmented = true; if(hf_index > 0){ pi = proto_tree_add_uint(tree, hf_index, tvb, (offset>>3)-1, 1, *length); if (!display_internal_per_fields) proto_item_set_hidden(pi); } return offset; } *length = 0; dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "10.9.3.8.1"); return offset; } /* 10.6 normally small non-negative whole number */ static uint32_t dissect_per_normally_small_nonnegative_whole_number(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, uint32_t *length) { bool small_number, length_bit; uint32_t len, length_determinant; proto_item *pi; DEBUG_ENTRY("dissect_per_normally_small_nonnegative_whole_number"); if(!length){ length=&len; } offset=dissect_per_boolean(tvb, offset, actx, tree, hf_per_small_number_bit, &small_number); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); if(!small_number){ int i; /* 10.6.1 */ *length=0; for(i=0;i<6;i++){ offset=dissect_per_boolean(tvb, offset, actx, tree, -1, &length_bit); *length<<=1; if (length_bit) { *length|=1; } } if(hf_index > 0){ pi = proto_tree_add_uint(tree, hf_index, tvb, (offset-6)>>3, (offset%8<6)?2:1, *length); if (!display_internal_per_fields) proto_item_set_hidden(pi); } return offset; } /* 10.6.2 */ offset=dissect_per_length_determinant(tvb, offset, actx, tree, hf_per_normally_small_nonnegative_whole_number_length, &length_determinant, NULL); switch (length_determinant) { case 0: *length = 0; break; case 1: *length = tvb_get_bits8(tvb, offset, 8); offset += 8; break; case 2: *length = tvb_get_bits16(tvb, offset, 16, ENC_BIG_ENDIAN); offset += 16; break; case 3: *length = tvb_get_bits32(tvb, offset, 24, ENC_BIG_ENDIAN); offset += 24; break; case 4: *length = tvb_get_bits32(tvb, offset, 32, ENC_BIG_ENDIAN); offset += 32; break; default: dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "too long integer(per_normally_small_nonnegative_whole_number)"); offset += 8*length_determinant; *length = 0; return offset; } if(hf_index > 0){ pi = proto_tree_add_uint(tree, hf_index, tvb, (offset-(8*length_determinant))>>3, length_determinant, *length); if (!display_internal_per_fields) proto_item_set_hidden(pi); } return offset; } /* this function reads a GeneralString */ /* currently based on pure guesswork since RFC2833 didn't tell me much i guess that the PER encoding for this is a normally-small-whole-number followed by a ascii string. based on pure guesswork. it looks ok in the only capture i have where there is a 1 byte general string encoded */ uint32_t dissect_per_GeneralString(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index) { uint32_t length; offset=dissect_per_length_determinant(tvb, offset, actx, tree, hf_per_GeneralString_length, &length, NULL); proto_tree_add_item(tree, hf_index, tvb, offset>>3, length, ENC_BIG_ENDIAN); offset+=length*8; return offset; } /* 17 Encoding the null type */ uint32_t dissect_per_null(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx _U_, proto_tree *tree, int hf_index) { proto_item *ti_tmp; ti_tmp = proto_tree_add_item(tree, hf_index, tvb, offset>>3, 0, ENC_BIG_ENDIAN); proto_item_append_text(ti_tmp, ": NULL"); return offset; } /* 19 this function dissects a sequence of */ // Arbitrary. Allow a sequence of NULLs, but not too many since we might add // a hierarchy of tree items per NULL #define PER_SEQUENCE_OF_MAX_NULLS 10 static uint32_t dissect_per_sequence_of_helper(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, per_type_fn func, int hf_index, uint32_t length) { uint32_t i; DEBUG_ENTRY("dissect_per_sequence_of_helper"); uint32_t old_offset = offset; for(i=0;i>3, 0, ett_per_sequence_of_item, &litem, "Item %d", i); offset=(*func)(tvb, offset, actx, ltree, hf_index); proto_item_set_len(litem, (offset>>3)!=(lold_offset>>3)?(offset>>3)-(lold_offset>>3):1); if (i >= PER_SEQUENCE_OF_MAX_NULLS-1 && offset <= old_offset) { dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "too many nulls in sequence"); } } return offset; } uint32_t dissect_per_sequence_of(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *parent_tree, int hf_index, int ett_index, const per_sequence_t *seq) { proto_item *item; proto_tree *tree; uint32_t old_offset=offset; uint32_t length; header_field_info *hfi; DEBUG_ENTRY("dissect_per_sequence_of"); /* semi-constrained whole number for number of elements */ /* each element encoded as 10.9 */ offset=dissect_per_length_determinant(tvb, offset, actx, parent_tree, hf_per_sequence_of_length, &length, NULL); hfi = proto_registrar_get_nth(hf_index); if (FT_IS_UINT(hfi->type)) { item = proto_tree_add_uint(parent_tree, hf_index, tvb, old_offset>>3, 0, length); proto_item_append_text(item, (length==1)?" item":" items"); } else { item=proto_tree_add_item(parent_tree, hf_index, tvb, old_offset>>3, 0, ENC_BIG_ENDIAN); } tree=proto_item_add_subtree(item, ett_index); offset=dissect_per_sequence_of_helper(tvb, offset, actx, tree, seq->func, *seq->p_id, length); proto_item_set_len(item, (offset>>3)!=(old_offset>>3)?(offset>>3)-(old_offset>>3):1); return offset; } /* XXX we don't do >64k length strings yet */ static uint32_t dissect_per_restricted_character_string_sorted(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int min_len, int max_len, bool has_extension, uint16_t lb, uint16_t ub, const char *alphabet, int alphabet_length, tvbuff_t **value_tvb) { uint32_t length; bool byte_aligned, use_canonical_order; wmem_strbuf_t *buf; int str_len; char *str; unsigned char_pos; int bits_per_char; uint32_t old_offset; DEBUG_ENTRY("dissect_per_restricted_character_string"); /* xx.x if the length is 0 bytes there will be no encoding */ if(max_len==0){ if (value_tvb) { *value_tvb = tvb_new_child_real_data(tvb, NULL, 0, 0); } return offset; } if (min_len == NO_BOUND) { min_len=0; } /* 27.5.2 depending of the alphabet length, find how many bits are used to encode each character */ /* unaligned PER */ if (actx->aligned){ if(alphabet_length<=2){ bits_per_char=1; } else if(alphabet_length<=4){ bits_per_char=2; } else if(alphabet_length<=16){ bits_per_char=4; } else { bits_per_char=8; } }else{ if(alphabet_length<=2){ bits_per_char=1; } else if(alphabet_length<=4){ bits_per_char=2; } else if(alphabet_length<=8){ bits_per_char=3; } else if(alphabet_length<=16){ bits_per_char=4; } else if(alphabet_length<=32){ bits_per_char=5; } else if(alphabet_length<=64){ bits_per_char=6; } else if(alphabet_length<=128){ bits_per_char=7; } else { bits_per_char=8; } } /* 27.4 If the type is extensible for PER encodings (see 9.3.16), * then a bit-field consisting of a single bit shall be added to the field-list. * The single bit shall be set to zero if the value is within the range of the extension root, * and to one otherwise. If the value is outside the range of the extension root, * then the following encoding shall be as if there was no effective size constraint, * and shall have an effective permitted-alphabet constraint that consists of the set of characters * of the unconstrained type. * NOTE - Only the known-multiplier character string types can be extensible for PER encodings. * Extensibility markers on other character string types do not affect the PER encoding. */ if (has_extension) { bool extension_present; offset = dissect_per_boolean(tvb, offset, actx, tree, hf_per_extension_present_bit, &extension_present); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); if(extension_present){ min_len = NO_BOUND; max_len = NO_BOUND; } } byte_aligned=true; if((min_len==max_len)&&(max_len<=2)){ byte_aligned=false; } if ((max_len != NO_BOUND) && (max_len < 2)) { byte_aligned=false; } /* xx.x */ length=max_len; old_offset = offset; if (max_len == NO_BOUND) { offset = dissect_per_length_determinant(tvb, offset, actx, tree, hf_per_octet_string_length, &length, NULL); /* the unconstrained strings are always byte aligned (27.6.3)*/ byte_aligned=true; } else if(min_len!=max_len){ offset=dissect_per_constrained_integer(tvb, offset, actx, tree, hf_per_octet_string_length, min_len, max_len, &length, false); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); } if(!length){ /* there is no string at all, so don't do any byte alignment */ /* byte_aligned=false; */ /* Advance offset to next 'element' */ if (offset == old_offset) offset = offset + 1; } if((byte_aligned)&&(actx->aligned)){ BYTE_ALIGN_OFFSET(offset); } /* 30.5: if "ub" is less than or equal to 2^b-1, then "v" is the value specified in above , else the characters are placed in the canonical order defined in ITU-T Rec. X.680 | ISO/IEC 8824-1, clause 43. The first is assigned the value zero and the next in canonical order is assigned a value that is one greater than the value assigned to the previous character in the canonical order. These are the values "v" */ use_canonical_order = (ub <= ((uint16_t)(1<pinfo->pool, NULL, length); old_offset=offset; for(char_pos=0;char_pos ub || val < lb) { wmem_strbuf_append_unichar_repl(buf); } else { wmem_strbuf_append_c(buf, val); } } else { if (val < alphabet_length){ wmem_strbuf_append_c(buf, alphabet[val]); } else { wmem_strbuf_append_unichar_repl(buf); } } } str_len = (int)wmem_strbuf_get_len(buf); str = wmem_strbuf_finalize(buf); /* Note that str can contain embedded nulls. Length claims any bytes partially used. */ proto_tree_add_string(tree, hf_index, tvb, (old_offset>>3), ((offset+7)>>3)-(old_offset>>3), str); if (value_tvb) { *value_tvb = tvb_new_child_real_data(tvb, str, str_len, str_len); } return offset; } static const char* sort_alphabet(char *sorted_alphabet, const char *alphabet, int alphabet_length, uint16_t *lb, uint16_t *ub) { int i, j; unsigned char c, c_max, c_min; char tmp_buf[256]; /* * XXX - presumably all members of alphabet will be in the * range 0 to 127. asn2wrs.py doesn't properly handle the * Quadruple or CharacterStringList types needed for other * characters, nor representing characters outside ASCII * in the "cstring" notation (possibly in UTF-8?) */ if (!alphabet_length) return sorted_alphabet; memset(tmp_buf, 0, 256); c_min = c_max = (unsigned char)alphabet[0]; for (i=0; i c_max) c_max = c; else if (c < c_min) c_min = c; } for (i=c_min,j=0; i<=c_max; i++) { if (tmp_buf[i]) sorted_alphabet[j++] = i; } *lb = (uint16_t)c_min; *ub = (uint16_t)c_max; return sorted_alphabet; } uint32_t dissect_per_restricted_character_string(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int min_len, int max_len, bool has_extension, const char *alphabet, int alphabet_length, tvbuff_t **value_tvb) { const char *alphabet_ptr; char sorted_alphabet[128]; uint16_t lb = 0; uint16_t ub = 65535; /* XXX: We don't handle permitted-alphabet characters outside the * ASCII range if used in BMPString (UCS2) or UniversalString (UCS4) */ if (alphabet_length > 127) { alphabet_ptr = alphabet; } else { alphabet_ptr = sort_alphabet(sorted_alphabet, alphabet, alphabet_length, &lb, &ub); } /* This is for a restricted character string type with a permitted- * alphabet constraint type. Such constraints are only PER-visible for * the known-multiplier character string types. */ return dissect_per_restricted_character_string_sorted(tvb, offset, actx, tree, hf_index, min_len, max_len, has_extension, lb, ub, alphabet_ptr, alphabet_length, value_tvb); } uint32_t dissect_per_IA5String(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int min_len, int max_len, bool has_extension, tvbuff_t **value_tvb) { offset=dissect_per_restricted_character_string_sorted(tvb, offset, actx, tree, hf_index, min_len, max_len, has_extension, 0, 127, NULL, 128, value_tvb); return offset; } uint32_t dissect_per_NumericString(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int min_len, int max_len, bool has_extension, tvbuff_t **value_tvb) { offset=dissect_per_restricted_character_string_sorted(tvb, offset, actx, tree, hf_index, min_len, max_len, has_extension, 32, 57, " 0123456789", 11, value_tvb); return offset; } uint32_t dissect_per_PrintableString(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int min_len, int max_len, bool has_extension, tvbuff_t **value_tvb) { offset=dissect_per_restricted_character_string_sorted(tvb, offset, actx, tree, hf_index, min_len, max_len, has_extension, 32, 122, " '()+,-.*0123456789:=?ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz", 74, value_tvb); return offset; } uint32_t dissect_per_VisibleString(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int min_len, int max_len, bool has_extension, tvbuff_t **value_tvb) { offset=dissect_per_restricted_character_string_sorted(tvb, offset, actx, tree, hf_index, min_len, max_len, has_extension, 32, 126, " !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~", 95, value_tvb); return offset; } uint32_t dissect_per_BMPString(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int min_len, int max_len, bool has_extension _U_) { uint32_t length; /* xx.x if the length is 0 bytes there will be no encoding */ if(max_len==0){ return offset; } if (min_len == NO_BOUND) { min_len = 0; } /* xx.x */ length=max_len; if(min_len!=max_len){ offset=dissect_per_constrained_integer(tvb, offset, actx, tree, hf_per_octet_string_length, min_len, max_len, &length, false); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); } /* align to byte boundary */ BYTE_ALIGN_OFFSET(offset); if(length>=1024){ dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "BMPString too long"); length=1024; } proto_tree_add_item(tree, hf_index, tvb, offset>>3, length*2, ENC_UCS_2|ENC_BIG_ENDIAN); offset+=(length<<3)*2; return offset; } uint32_t dissect_per_UTF8String(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int min_len _U_, int max_len _U_, bool has_extension _U_) { tvbuff_t *val_tvb; uint32_t length; /* UTF8String is not a known-multiplier character string (UTF8 * characters are variable width.) Hence subclause 27.6 applies, * and "constraints are never PER-visible, and the type can never * be extensible for PER encoding." */ /* 27.6.3 unconstrained length determinant with "n" in octets */ offset = dissect_per_length_determinant(tvb, offset, actx, tree, hf_per_octet_string_length, &length, NULL); if(length){ /* Unnecessary because the length determinant is aligned. */ if(actx->aligned) { BYTE_ALIGN_OFFSET(offset); } val_tvb = tvb_new_octet_aligned(tvb, offset, length * 8); /* Add new data source if the offset was unaligned */ if ((offset & 7) != 0) { add_new_data_source(actx->pinfo, val_tvb, "Unaligned UTF8String"); } proto_tree_add_item(tree, hf_index, val_tvb, 0, length, ENC_UTF_8); } else { /* tvb_new_octet_aligned doesn't like zero length. * length zero indicates a present but empty string, so add it */ proto_tree_add_item(tree, hf_index, tvb, (offset-1)>>3, length, ENC_UTF_8); } offset+=(length<<3); return offset; } uint32_t dissect_per_object_descriptor(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, tvbuff_t **value_tvb) { offset=dissect_per_octet_string(tvb, offset, actx, tree, hf_index, -1, -1, false, value_tvb); return offset; } /* this function dissects a constrained sequence of */ uint32_t dissect_per_constrained_sequence_of(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *parent_tree, int hf_index, int ett_index, const per_sequence_t *seq, int min_len, int max_len, bool has_extension) { proto_item *item; proto_tree *tree; uint32_t old_offset=offset; uint32_t length; header_field_info *hfi; DEBUG_ENTRY("dissect_per_constrained_sequence_of"); /* 19.4 If there is a PER-visible constraint and an extension marker is present in it, * a single bit shall be added to the field-list in a bit-field of length one */ if (has_extension) { bool extension_present; offset=dissect_per_boolean(tvb, offset, actx, parent_tree, hf_per_extension_present_bit, &extension_present); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); if (extension_present){ /* 10.9 shall be invoked to add the length determinant as a semi-constrained whole number to the field-list, * followed by the component values */ offset = dissect_per_length_determinant(tvb, offset, actx, parent_tree, hf_per_sequence_of_length, &length, NULL); goto call_sohelper; } } /* 19.5 if min==max and min,max<64k ==> no length determinant */ if((min_len==max_len) && (min_len<65536)){ length=min_len; goto call_sohelper; } /* 19.6 ub>=64k or unset */ if ((max_len >= 65536) || (max_len == NO_BOUND)) { /* no constraint, see 10.9.4.2 */ offset=dissect_per_length_determinant(tvb, offset, actx, parent_tree, hf_per_sequence_of_length, &length, NULL); goto call_sohelper; } /* constrained whole number for number of elements */ offset=dissect_per_constrained_integer(tvb, offset, actx, parent_tree, hf_per_sequence_of_length, min_len, max_len, &length, false); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); call_sohelper: hfi = proto_registrar_get_nth(hf_index); if (FT_IS_UINT(hfi->type)) { item = proto_tree_add_uint(parent_tree, hf_index, tvb, offset>>3, 0, length); proto_item_append_text(item, (length==1)?" item":" items"); } else { item=proto_tree_add_item(parent_tree, hf_index, tvb, offset>>3, 0, ENC_BIG_ENDIAN); } tree=proto_item_add_subtree(item, ett_index); per_check_items(length, min_len, max_len, actx, item); old_offset = offset; offset=dissect_per_sequence_of_helper(tvb, offset, actx, tree, seq->func, *seq->p_id, length); if (offset == old_offset) length = 0; else if (offset >> 3 == old_offset >> 3) length = 1; else length = (offset >> 3) - (old_offset >> 3); proto_item_set_len(item, length); return offset; } /* this function dissects a constrained set of */ uint32_t dissect_per_constrained_set_of(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *parent_tree, int hf_index, int ett_index, const per_sequence_t *seq, int min_len, int max_len, bool has_extension) { /* for basic-per a set-of is encoded in the same way as a sequence-of */ DEBUG_ENTRY("dissect_per_constrained_set_of"); offset=dissect_per_constrained_sequence_of(tvb, offset, actx, parent_tree, hf_index, ett_index, seq, min_len, max_len, has_extension); return offset; } /* this function dissects a set of */ uint32_t dissect_per_set_of(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *parent_tree, int hf_index, int ett_index, const per_sequence_t *seq) { /* for basic-per a set-of is encoded in the same way as a sequence-of */ DEBUG_ENTRY("dissect_per_set_of"); offset=dissect_per_sequence_of(tvb, offset, actx, parent_tree, hf_index, ett_index, seq); return offset; } /* 23 Encoding the object identifier type */ static uint32_t dissect_per_any_oid(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, tvbuff_t **value_tvb, bool is_absolute) { unsigned length; const char *str; tvbuff_t *val_tvb = NULL; header_field_info *hfi; DEBUG_ENTRY("dissect_per_any_oid"); offset = dissect_per_length_determinant(tvb, offset, actx, tree, hf_per_object_identifier_length, &length, NULL); if(length == 0){ dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "unexpected length"); } if (actx->aligned) BYTE_ALIGN_OFFSET(offset); val_tvb = tvb_new_octet_aligned(tvb, offset, length * 8); /* Add new data source if the offet was unaligned */ if ((offset & 7) != 0) { add_new_data_source(actx->pinfo, val_tvb, "Unaligned OCTET STRING"); } hfi = proto_registrar_get_nth(hf_index); if ((is_absolute && hfi->type == FT_OID) || (is_absolute && hfi->type == FT_REL_OID)) { actx->created_item = proto_tree_add_item(tree, hf_index, val_tvb, 0, length, ENC_BIG_ENDIAN); } else if (FT_IS_STRING(hfi->type)) { str = oid_encoded2string(actx->pinfo->pool, tvb_get_ptr(val_tvb, 0, length), length); actx->created_item = proto_tree_add_string(tree, hf_index, val_tvb, 0, length, str); } else { DISSECTOR_ASSERT_NOT_REACHED(); } if (value_tvb) *value_tvb = val_tvb; offset += 8 * length; return offset; } uint32_t dissect_per_object_identifier(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, tvbuff_t **value_tvb) { return dissect_per_any_oid(tvb, offset, actx, tree, hf_index, value_tvb, true); } uint32_t dissect_per_relative_oid(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, tvbuff_t **value_tvb) { return dissect_per_any_oid(tvb, offset, actx, tree, hf_index, value_tvb, false); } static uint32_t dissect_per_any_oid_str(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, const char **value_stringx, bool is_absolute) { tvbuff_t *value_tvb = NULL; unsigned length; offset = dissect_per_any_oid(tvb, offset, actx, tree, hf_index, (value_stringx) ? &value_tvb : NULL, is_absolute); if (value_stringx) { if (value_tvb && (length = tvb_captured_length(value_tvb))) { *value_stringx = oid_encoded2string(actx->pinfo->pool, tvb_get_ptr(value_tvb, 0, length), length); } else { *value_stringx = ""; } } return offset; } uint32_t dissect_per_object_identifier_str(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, const char **value_stringx) { return dissect_per_any_oid_str(tvb, offset, actx, tree, hf_index, value_stringx, true); } uint32_t dissect_per_relative_oid_str(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, const char **value_stringx) { return dissect_per_any_oid_str(tvb, offset, actx, tree, hf_index, value_stringx, false); } /* this function reads a single bit */ uint32_t dissect_per_boolean(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, bool *bool_val) { uint8_t ch, mask; bool value; header_field_info *hfi; DEBUG_ENTRY("dissect_per_boolean"); ch=tvb_get_uint8(tvb, offset>>3); mask=1<<(7-(offset&0x07)); if(ch&mask){ value=1; } else { value=0; } if(hf_index > 0){ char bits[10]; bits[0] = mask&0x80?'0'+value:'.'; bits[1] = mask&0x40?'0'+value:'.'; bits[2] = mask&0x20?'0'+value:'.'; bits[3] = mask&0x10?'0'+value:'.'; bits[4] = ' '; bits[5] = mask&0x08?'0'+value:'.'; bits[6] = mask&0x04?'0'+value:'.'; bits[7] = mask&0x02?'0'+value:'.'; bits[8] = mask&0x01?'0'+value:'.'; bits[9] = '\0'; hfi = proto_registrar_get_nth(hf_index); actx->created_item = proto_tree_add_boolean_format(tree, hf_index, tvb, offset>>3, 1, value, "%s %s: %s", bits, hfi->name, value?"True":"False"); } else { actx->created_item = NULL; } if(bool_val){ *bool_val=value; } return offset+1; } /* we currently only handle integers up to 32 bits in length. */ uint32_t dissect_per_integer(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int32_t *value) { uint32_t i, length; uint32_t val; tvbuff_t *val_tvb=NULL; proto_item *it=NULL; header_field_info *hfi; /* 12.2.6 b */ offset=dissect_per_length_determinant(tvb, offset, actx, tree,hf_per_integer_length, &length, NULL); /* gassert here? */ if(length>4){ dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "too long integer(per_integer)"); length=4; } if(length == 0){ dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "unexpected length"); } if (actx->aligned) BYTE_ALIGN_OFFSET(offset); val_tvb = tvb_new_octet_aligned(tvb, offset, length * 8); val=0; for(i=0;itype)) { it=proto_tree_add_int(tree, hf_index, tvb, (offset>>3)-(length+1), length+1, val); } else if (FT_IS_UINT(hfi->type)) { it=proto_tree_add_uint(tree, hf_index, tvb, (offset>>3)-(length+1), length+1, val); } else { proto_tree_add_expert_format(tree, actx->pinfo, &ei_per_field_not_integer, tvb, (offset>>3)-(length+1), length+1, "Field is not an integer: %s", hfi->abbrev); REPORT_DISSECTOR_BUG("PER integer field that's not an FT_INT* or FT_UINT*"); } actx->created_item = it; if(value){ *value=val; } return offset; } /* 64 bits experimental version, internal for now */ static uint32_t dissect_per_integer64b(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int64_t *value) { uint32_t i, length; uint64_t val; proto_item *it=NULL; header_field_info *hfi; /* 12.2.6 b */ offset=dissect_per_length_determinant(tvb, offset, actx, tree, -1, &length, NULL); /* gassert here? */ if(length>8){ dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "too long integer (64b)"); length=8; } val=0; for(i=0;i>3)&0x80){ /* negative number */ val=UINT64_C(0xffffffffffffffff); } else { /* positive number */ val=0; } } val=(val<<8)|tvb_get_uint8(tvb,offset>>3); offset+=8; } hfi = proto_registrar_get_nth(hf_index); if (! hfi) THROW(ReportedBoundsError); if (FT_IS_INT(hfi->type)) { it=proto_tree_add_int64(tree, hf_index, tvb, (offset>>3)-(length+1), length+1, (int64_t)val); } else if (FT_IS_UINT(hfi->type)) { it=proto_tree_add_uint64(tree, hf_index, tvb, (offset>>3)-(length+1), length+1, val); } else { proto_tree_add_expert_format(tree, actx->pinfo, &ei_per_field_not_integer, tvb, (offset>>3)-(length+1), length+1, "Field is not an integer: %s", hfi->abbrev); REPORT_DISSECTOR_BUG("PER integer field that's not an FT_INT* or FT_UINT*"); } actx->created_item = it; if(value){ *value=(int64_t)val; } return offset; } /* this function reads a constrained integer with or without a PER visible extension marker present has_extension==true would map to asn constructs such as: rfc-number INTEGER (1..32768, ...) while has_extension==false would map to: t35CountryCode INTEGER (0..255) it only handles integers that fit inside a 32 bit integer 10.5.1 info only 10.5.2 info only 10.5.3 range=ub-lb+1 10.5.4 empty range 10.5.5 info only 10.5.6 unaligned version 10.5.7 aligned version 10.5.7.1 decoding of 0-255 1-8 bits 10.5.7.2 decoding og 0-256 8 bits 10.5.7.3 decoding of 0-65535 16 bits 10.5.7.4 */ uint32_t dissect_per_constrained_integer(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, uint32_t min, uint32_t max, uint32_t *value, bool has_extension) { proto_item *it=NULL; uint32_t range, val; int val_start, val_length; nstime_t timeval; header_field_info *hfi; int num_bits; DEBUG_ENTRY("dissect_per_constrained_integer"); if(has_extension){ bool extension_present; offset=dissect_per_boolean(tvb, offset, actx, tree, hf_per_extension_present_bit, &extension_present); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); if(extension_present){ offset = dissect_per_integer(tvb, offset, actx, tree, hf_index, (int32_t*)value); return offset; } } hfi = proto_registrar_get_nth(hf_index); /* 10.5.3 Let "range" be defined as the integer value ("ub" - "lb" 1), and let the value to be encoded be "n". * 10.5.7 In the case of the ALIGNED variant the encoding depends on whether * d) "range" is greater than 64K (the indefinite length case). */ if(((max-min)>65536)&&(actx->aligned)){ /* just set range really big so it will fall through to the bottom of the encoding */ range=1000000; } else { /* Really ugly hack. * We should really use uint64_t as parameters for min/max. * This is to prevent range from being 0 if * the range for a signed integer spans the entire 32 bit range. * Special case the 2 common cases when this can happen until * a real fix is implemented. */ if( (max==0x7fffffff && min==0x80000000) || (max==0xffffffff && min==0x00000000) ){ range=0xffffffff; } else { range=max-min+1; } } val=0; timeval.secs=val; timeval.nsecs=0; /* 10.5.4 If "range" has the value 1, then the result of the encoding shall be an empty bit-field (no bits).*/ /* something is really wrong if range is 0 */ DISSECTOR_ASSERT(range!=0); if(range==1){ val_start = offset>>3; val_length = 0; val = min; } else if((range<=255)||(!actx->aligned)) { /* 10.5.7.1 * 10.5.6 In the case of the UNALIGNED variant the value ("n" - "lb") shall be encoded * as a non-negative binary integer in a bit field as specified in 10.3 with the minimum * number of bits necessary to represent the range. */ char *str; int i, length; uint32_t mask,mask2; /* We only handle 32 bit integers */ mask = 0x80000000; mask2 = 0x7fffffff; i = 32; while ((range & mask)== 0){ i = i - 1; mask = mask>>1; mask2 = mask2>>1; } if ((range & mask2) == 0) i = i-1; num_bits = i; length=(num_bits+7)>>3; if(range<=2){ num_bits=1; } val_start = (offset)>>3; val_length = length; val = (uint32_t)tvb_get_bits64(tvb,offset,num_bits,ENC_BIG_ENDIAN); if (display_internal_per_fields){ str = decode_bits_in_field(actx->pinfo->pool, (offset&0x07),num_bits,val,ENC_BIG_ENDIAN); if (FT_IS_INT(hfi->type)) { proto_tree_add_int(tree, hf_per_internal_min_int, tvb, val_start, val_length, min); } else { proto_tree_add_uint(tree, hf_per_internal_min, tvb, val_start, val_length, min); } proto_tree_add_uint64(tree, hf_per_internal_range, tvb, val_start, val_length, range); proto_tree_add_uint(tree, hf_per_internal_num_bits, tvb, val_start, val_length, num_bits); if (FT_IS_INT(hfi->type)) { proto_tree_add_int64_format_value(tree, hf_per_internal_value_int, tvb, val_start, val_length, val + min, "%s decimal value: %i", str, val + min); } else { proto_tree_add_uint64_format_value(tree, hf_per_internal_value, tvb, val_start, val_length, val + min, "%s decimal value: %u", str, val + min); } } /* The actual value */ val+=min; offset = offset+num_bits; } else if(range==256){ /* 10.5.7.2 */ /* in the aligned case, align to byte boundary */ BYTE_ALIGN_OFFSET(offset); val=tvb_get_uint8(tvb, offset>>3); offset+=8; val_start = (offset>>3)-1; val_length = 1; val+=min; } else if(range<=65536){ /* 10.5.7.3 */ /* in the aligned case, align to byte boundary */ BYTE_ALIGN_OFFSET(offset); val=tvb_get_uint8(tvb, offset>>3); val<<=8; offset+=8; val|=tvb_get_uint8(tvb, offset>>3); offset+=8; val_start = (offset>>3)-2; val_length = 2; val+=min; } else { int i,num_bytes; bool bit; /* 10.5.7.4 */ /* 12.2.6 */ offset=dissect_per_boolean(tvb, offset, actx, tree, -1, &bit); num_bytes=bit; offset=dissect_per_boolean(tvb, offset, actx, tree, -1, &bit); num_bytes=(num_bytes<<1)|bit; num_bytes++; /* lower bound for length determinant is 1 */ if (display_internal_per_fields) proto_tree_add_uint(tree, hf_per_const_int_len, tvb, (offset>>3), 1, num_bytes); /* byte aligned */ BYTE_ALIGN_OFFSET(offset); val=0; for(i=0;i>3); offset+=8; } val_start = (offset>>3)-(num_bytes+1); val_length = num_bytes+1; val+=min; } timeval.secs = val; if (FT_IS_UINT(hfi->type)) { it = proto_tree_add_uint(tree, hf_index, tvb, val_start, val_length, val); per_check_value(val, min, max, actx, it, false); } else if (FT_IS_INT(hfi->type)) { it = proto_tree_add_int(tree, hf_index, tvb, val_start, val_length, val); per_check_value(val, min, max, actx, it, true); } else if (FT_IS_TIME(hfi->type)) { it = proto_tree_add_time(tree, hf_index, tvb, val_start, val_length, &timeval); } else { THROW(ReportedBoundsError); } actx->created_item = it; if (value) *value = val; return offset; } uint32_t dissect_per_constrained_integer_64b(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, uint64_t min, uint64_t max, uint64_t *value, bool has_extension) { proto_item *it=NULL, *int_item=NULL; uint64_t range, val; int val_start, val_length; nstime_t timeval; header_field_info *hfi; int num_bits; bool tmp; DEBUG_ENTRY("dissect_per_constrained_integer_64b"); if(has_extension){ bool extension_present; offset=dissect_per_boolean(tvb, offset, actx, tree, hf_per_extension_present_bit, &extension_present); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); if(extension_present){ offset = dissect_per_integer64b(tvb, offset, actx, tree, hf_index, (int64_t*)value); return offset; } } hfi = proto_registrar_get_nth(hf_index); /* 10.5.3 Let "range" be defined as the integer value ("ub" - "lb" 1), and let the value to be encoded be "n". * 10.5.7 In the case of the ALIGNED variant the encoding depends on whether * d) "range" is greater than 64K (the indefinite length case). */ if(((max-min)>65536)&&(actx->aligned)){ /* just set range really big so it will fall through to the bottom of the encoding */ /* range=1000000; */ range = max-min; if (range==65536) range++; /* make it fall trough? */ } else { /* Copied from the 32 bit version, assuming the same problem occurs * at 64 bit boundary. * Really ugly hack. * We should really use uint64_t as parameters for min/max. * This is to prevent range from being 0 if * the range for a signed integer spans the entire 32 bit range. * Special case the 2 common cases when this can happen until * a real fix is implemented. */ if( (max==INT64_C(0x7fffffffffffffff) && min==INT64_C(0x8000000000000000)) || (max==INT64_C(0xffffffffffffffff) && min==0) ){ range=INT64_C(0xffffffffffffffff); } else { range=max-min+1; } } val=0; timeval.secs=0; timeval.nsecs=0; /* 10.5.4 If "range" has the value 1, then the result of the encoding shall be an empty bit-field (no bits).*/ /* something is really wrong if range is 0 */ DISSECTOR_ASSERT(range!=0); if(range==1){ val_start = offset>>3; val_length = 0; val = min; } else if((range<=255)||(!actx->aligned)) { /* 10.5.7.1 * 10.5.6 In the case of the UNALIGNED variant the value ("n" - "lb") shall be encoded * as a non-negative binary integer in a bit field as specified in 10.3 with the minimum * number of bits necessary to represent the range. */ char *str; int i, bit, length, str_length, str_index = 0; uint64_t mask,mask2; /* We only handle 64 bit integers */ mask = UINT64_C(0x8000000000000000); mask2 = UINT64_C(0x7fffffffffffffff); i = 64; while ((range & mask)== 0){ i = i - 1; mask = mask>>1; mask2 = mask2>>1; } if ((range & mask2) == 0) i = i-1; num_bits = i; length=1; if(range<=2){ num_bits=1; } /* prepare the string (max number of bits + quartet separators) */ str_length = 512+128; str = (char *)wmem_alloc(actx->pinfo->pool, str_length+1); for(bit=0;bit<((int)(offset&0x07));bit++){ if(bit&&(!(bit%4))){ if (str_index < str_length) str[str_index++] = ' '; } if (str_index < str_length) str[str_index++] = '.'; } /* read the bits for the int */ for(i=0;i>3; val_length = length; val+=min; if (display_internal_per_fields) { proto_tree_add_uint64(tree, hf_per_internal_range, tvb, val_start, val_length, range); proto_tree_add_uint(tree, hf_per_internal_num_bits, tvb, val_start,val_length, num_bits); proto_tree_add_uint64_format_value(tree, hf_per_internal_value, tvb, val_start, val_length, val, "%s decimal value: %" PRIu64, str, val); } } else if(range==256){ /* 10.5.7.2 */ /* in the aligned case, align to byte boundary */ BYTE_ALIGN_OFFSET(offset); val=tvb_get_uint8(tvb, offset>>3); offset+=8; val_start = (offset>>3)-1; val_length = 1; val+=min; } else if(range<=65536){ /* 10.5.7.3 */ /* in the aligned case, align to byte boundary */ BYTE_ALIGN_OFFSET(offset); val=tvb_get_uint8(tvb, offset>>3); val<<=8; offset+=8; val|=tvb_get_uint8(tvb, offset>>3); offset+=8; val_start = (offset>>3)-2; val_length = 2; val+=min; } else { int i,num_bytes,n_bits; /* 10.5.7.4 */ /* 12.2.6 */ /* calculate the number of bits to hold the length */ if ((range & INT64_C(0xffffffff00000000)) != 0){ n_bits=3; }else{ n_bits=2; } num_bytes =tvb_get_bits8(tvb, offset, n_bits); num_bytes++; /* lower bound for length determinant is 1 */ if (display_internal_per_fields){ int_item = proto_tree_add_bits_item(tree, hf_per_const_int_len, tvb, offset,n_bits, ENC_BIG_ENDIAN); proto_item_append_text(int_item,"+1=%u bytes, Range = (%" PRIu64 ")",num_bytes, range); } offset = offset+n_bits; /* byte aligned */ BYTE_ALIGN_OFFSET(offset); val=0; for(i=0;i>3); offset+=8; } val_start = (offset>>3)-(num_bytes+1); val_length = num_bytes+1; val+=min; } if (FT_IS_UINT(hfi->type)) { it = proto_tree_add_uint64(tree, hf_index, tvb, val_start, val_length, val); per_check_value64(val, min, max, actx, it, false); } else if (FT_IS_INT(hfi->type)) { it = proto_tree_add_int64(tree, hf_index, tvb, val_start, val_length, val); per_check_value64(val, min, max, actx, it, true); } else if (FT_IS_TIME(hfi->type)) { timeval.secs = (uint32_t)val; it = proto_tree_add_time(tree, hf_index, tvb, val_start, val_length, &timeval); } else { THROW(ReportedBoundsError); } actx->created_item = it; if (value) *value = val; return offset; } /* 13 Encoding the enumerated type */ uint32_t dissect_per_enumerated(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, uint32_t root_num, uint32_t *value, bool has_extension, uint32_t ext_num, uint32_t *value_map) { proto_item *it=NULL; uint32_t enum_index, val; uint32_t start_offset = offset; bool extension_present = false; header_field_info *hfi; if (has_extension) { /* Extension bit */ offset = dissect_per_boolean(tvb, offset, actx, tree, hf_per_extension_present_bit, &extension_present); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); } if (!extension_present) { /* 13.2 */ offset = dissect_per_constrained_integer(tvb, offset, actx, tree, hf_per_enum_index, 0, root_num - 1, &enum_index, false); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); } else { /* 13.3 ".. and the value shall be added to the field-list as a * normally small non-negative whole number whose value is the * enumeration index of the additional enumeration and with "lb" set to 0.." */ offset = dissect_per_normally_small_nonnegative_whole_number(tvb, offset, actx, tree, hf_per_enum_extension_index, &enum_index); enum_index += root_num; } val = (value_map && (enum_index<(root_num+ext_num))) ? value_map[enum_index] : enum_index; hfi = proto_registrar_get_nth(hf_index); if (FT_IS_UINT(hfi->type)) { it = proto_tree_add_uint(tree, hf_index, tvb, start_offset>>3, BLEN(start_offset, offset), val); } else { THROW(ReportedBoundsError); } actx->created_item = it; if (value) *value = val; return offset; } /* 14 Encoding the real type */ uint32_t dissect_per_real(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, double *value) { uint32_t val_length, end_offset; tvbuff_t *val_tvb; double val = 0; offset = dissect_per_length_determinant(tvb, offset, actx, tree, hf_per_real_length, &val_length, NULL); if(val_length == 0){ dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "unexpected length"); } if (actx->aligned) BYTE_ALIGN_OFFSET(offset); val_tvb = tvb_new_octet_aligned(tvb, offset, val_length * 8); /* Add new data source if the offet was unaligned */ if ((offset & 7) != 0) { add_new_data_source(actx->pinfo, val_tvb, "Unaligned OCTET STRING"); } end_offset = offset + val_length * 8; val = asn1_get_real(tvb_get_ptr(val_tvb, 0, val_length), val_length); actx->created_item = proto_tree_add_double(tree, hf_index, val_tvb, 0, val_length, val); if (value) *value = val; return end_offset; } /* 22 Encoding the choice type */ uint32_t dissect_per_choice(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int ett_index, const per_choice_t *choice, int *value) { bool /*extension_present,*/ extension_flag; int extension_root_entries; uint32_t choice_index; int i, idx, cidx; uint32_t ext_length = 0; uint32_t old_offset = offset; proto_item *choice_item = NULL; proto_tree *choice_tree = NULL; DEBUG_ENTRY("dissect_per_choice"); if (value) *value = -1; /* 22.5 */ if (choice[0].extension == ASN1_NO_EXTENSIONS){ /*extension_present = false; ?? */ extension_flag = false; } else { /*extension_present = true; ?? */ offset = dissect_per_boolean(tvb, offset, actx, tree, hf_per_extension_bit, &extension_flag); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); } /* count the number of entries in the extension root and extension addition */ extension_root_entries = 0; for (i=0; choice[i].p_id; i++) { switch(choice[i].extension){ case ASN1_NO_EXTENSIONS: case ASN1_EXTENSION_ROOT: extension_root_entries++; break; case ASN1_NOT_EXTENSION_ROOT: break; } } if (!extension_flag) { /* 22.6, 22.7 */ if (extension_root_entries == 1) { /* 22.5 */ choice_index = 0; } else { offset = dissect_per_constrained_integer(tvb, offset, actx, tree, hf_per_choice_index, 0, extension_root_entries - 1, &choice_index, false); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); } idx = -1; cidx = choice_index; for (i=0; choice[i].p_id; i++) { if(choice[i].extension != ASN1_NOT_EXTENSION_ROOT){ if (!cidx) { idx = i; break; } cidx--; } } } else { /* 22.8 */ offset = dissect_per_normally_small_nonnegative_whole_number(tvb, offset, actx, tree, hf_per_choice_extension_index, &choice_index); offset = dissect_per_length_determinant(tvb, offset, actx, tree, hf_per_open_type_length, &ext_length, NULL); idx = -1; cidx = choice_index; for (i=0; choice[i].p_id; i++) { if(choice[i].extension == ASN1_NOT_EXTENSION_ROOT){ if (!cidx) { idx = i; break; } cidx--; } } } if (idx != -1) { choice_item = proto_tree_add_uint(tree, hf_index, tvb, old_offset>>3, 0, choice[idx].value); choice_tree = proto_item_add_subtree(choice_item, ett_index); if (!extension_flag) { offset = choice[idx].func(tvb, offset, actx, choice_tree, *choice[idx].p_id); } else { choice[idx].func(tvb, offset, actx, choice_tree, *choice[idx].p_id); offset += ext_length * 8; } proto_item_set_len(choice_item, BLEN(old_offset, offset)); } else { if (!extension_flag) { dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "unknown extension root index in choice"); } else { offset += ext_length * 8; proto_tree_add_expert_format(tree, actx->pinfo, &ei_per_choice_extension_unknown, tvb, old_offset>>3, BLEN(old_offset, offset), "Choice no. %d in extension", choice_index); } } if (value && (idx != -1)) *value = choice[idx].value; return offset; } static const char * index_get_optional_name(const per_sequence_t *sequence, int idx) { int i; header_field_info *hfi; for(i=0;sequence[i].p_id;i++){ if((sequence[i].extension!=ASN1_NOT_EXTENSION_ROOT)&&(sequence[i].optional==ASN1_OPTIONAL)){ if (idx == 0) { hfi = proto_registrar_get_nth(*sequence[i].p_id); return (hfi) ? hfi->name : ""; } idx--; } } return ""; } static const char * index_get_extension_name(const per_sequence_t *sequence, int idx) { int i; header_field_info *hfi; for(i=0;sequence[i].p_id;i++){ if(sequence[i].extension==ASN1_NOT_EXTENSION_ROOT){ if (idx == 0) { if (*sequence[i].p_id == -1 || *sequence[i].p_id == 0) return "extension addition group"; hfi = proto_registrar_get_nth(*sequence[i].p_id); return (hfi) ? hfi->name : ""; } idx--; } } return ""; } static const char * index_get_field_name(const per_sequence_t *sequence, int idx) { if (sequence) { header_field_info *hfi = proto_registrar_get_nth(*sequence[idx].p_id); if (hfi) { return hfi->name; } } return ""; } /* this functions decodes a SEQUENCE it can only handle SEQUENCES with at most 32 DEFAULT or OPTIONAL fields 18.1 extension bit 18.2 optional/default items in root 18.3 we ignore the case where n>64K 18.4 the root sequence 18.5 18.6 18.7 18.8 18.9 */ uint32_t dissect_per_sequence(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *parent_tree, int hf_index, int ett_index, const per_sequence_t *sequence) { bool /*extension_present,*/ extension_flag, optional_field_flag; proto_item *item; proto_tree *tree; uint32_t old_offset=offset; uint32_t i, j, num_opts; uint32_t optional_mask[SEQ_MAX_COMPONENTS>>5]; DEBUG_ENTRY("dissect_per_sequence"); DISSECTOR_ASSERT(sequence); item=proto_tree_add_item(parent_tree, hf_index, tvb, offset>>3, 0, ENC_BIG_ENDIAN); tree=proto_item_add_subtree(item, ett_index); /* first check if there should be an extension bit for this CHOICE. we do this by just checking the first choice arm */ /* 18.1 */ extension_flag=0; if(sequence[0].extension==ASN1_NO_EXTENSIONS){ /*extension_present=0; ?? */ } else { /*extension_present=1; ?? */ offset=dissect_per_boolean(tvb, offset, actx, tree, hf_per_extension_bit, &extension_flag); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); } /* 18.2 */ num_opts=0; for(i=0;sequence[i].p_id;i++){ if((sequence[i].extension!=ASN1_NOT_EXTENSION_ROOT)&&(sequence[i].optional==ASN1_OPTIONAL)){ num_opts++; } } if (num_opts > SEQ_MAX_COMPONENTS) { dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "too many optional/default components"); } memset(optional_mask, 0, sizeof(optional_mask)); for(i=0;icreated_item, " (%s %s present)", index_get_optional_name(sequence, i), optional_field_flag?"is":"is NOT"); } if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); if(optional_field_flag){ optional_mask[i>>5]|=0x80000000>>(i&0x1f); } } /* 18.4 */ for(i=0,j=0;sequence[i].p_id;i++){ if( (sequence[i].extension==ASN1_NO_EXTENSIONS) || (sequence[i].extension==ASN1_EXTENSION_ROOT) ){ if(sequence[i].optional==ASN1_OPTIONAL){ bool is_present; if (num_opts == 0){ continue; } is_present=(0x80000000>>(j&0x1f))&optional_mask[j>>5]; num_opts--; j++; if(!is_present){ continue; } } if(sequence[i].func){ offset=sequence[i].func(tvb, offset, actx, tree, *sequence[i].p_id); } else { dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, index_get_field_name(sequence, i)); } } } if(extension_flag){ bool extension_bit; uint32_t num_known_extensions; uint32_t num_extensions; uint32_t extension_mask; offset=dissect_per_normally_small_nonnegative_whole_number(tvb, offset, actx, tree, hf_per_num_sequence_extensions, &num_extensions); /* the X.691 standard is VERY unclear here. there is no mention that the lower bound lb for this (apparently) semiconstrained value is 1, apart from the NOTE: comment in 18.8 that this value can not be 0. In my book, there is a semantic difference between having a comment that says that the value can not be zero and stating that the lb is 1. I don't know if this is right or not but it makes some of the very few captures I have decode properly. It could also be that the captures I have are generated by a broken implementation. If this is wrong and you don't report it as a bug then it won't get fixed! */ num_extensions+=1; if (num_extensions > 32) { dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "too many extensions"); } extension_mask=0; for(i=0;icreated_item, " (%s %s present)", index_get_extension_name(sequence, i), extension_bit?"is":"is NOT"); } if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); extension_mask=(extension_mask<<1)|extension_bit; } /* find how many extensions we know about */ num_known_extensions=0; for(i=0;sequence[i].p_id;i++){ if(sequence[i].extension==ASN1_NOT_EXTENSION_ROOT){ num_known_extensions++; } } /* decode the extensions one by one */ for(i=0;i=num_known_extensions){ /* we don't know how to decode this extension */ offset+=length*8; expert_add_info(actx->pinfo, item, &ei_per_sequence_extension_unknown); continue; } extension_index=0; for(j=0,k=0;sequence[j].p_id;j++){ if(sequence[j].extension==ASN1_NOT_EXTENSION_ROOT){ if(k==i){ extension_index=j; break; } k++; } } if(sequence[extension_index].func){ new_offset=sequence[extension_index].func(tvb, offset, actx, tree, *sequence[extension_index].p_id); offset+=length*8; difference = offset - new_offset; /* A difference of 7 or less might be byte aligning */ /* Difference could be 8 if open type has no bits and the length is 1 */ if ((length > 1) && (difference > 7)) { proto_tree_add_expert_format(tree, actx->pinfo, &ei_per_encoding_error, tvb, new_offset>>3, (offset-new_offset)>>3, "Possible encoding error full length not decoded. Open type length %u, decoded %u",length, length - (difference>>3)); } else if (difference < 0) { proto_tree_add_expert_format(tree, actx->pinfo, &ei_per_encoding_error, tvb, new_offset>>3, (offset-new_offset)>>3, "Possible encoding error open type length less than dissected bits. Open type length %u, decoded %u", length, length - (difference>>3)); } } else { dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, index_get_field_name(sequence, extension_index)); offset+=length*8; } } } proto_item_set_len(item, (offset>>3)!=(old_offset>>3)?(offset>>3)-(old_offset>>3):1); actx->created_item = item; return offset; } uint32_t dissect_per_sequence_eag(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, const per_sequence_t *sequence) { bool optional_field_flag; uint32_t i, j, num_opts; uint32_t optional_mask[SEQ_MAX_COMPONENTS>>5]; DEBUG_ENTRY("dissect_per_sequence_eag"); num_opts=0; for(i=0;sequence[i].p_id;i++){ if(sequence[i].optional==ASN1_OPTIONAL){ num_opts++; } } if (num_opts > SEQ_MAX_COMPONENTS) { dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "too many optional/default components"); } memset(optional_mask, 0, sizeof(optional_mask)); for(i=0;icreated_item, " (%s %s present)", index_get_optional_name(sequence, i), optional_field_flag?"is":"is NOT"); } if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); if(optional_field_flag){ optional_mask[i>>5]|=0x80000000>>(i&0x1f); } } for(i=0,j=0;sequence[i].p_id;i++){ if(sequence[i].optional==ASN1_OPTIONAL){ bool is_present; if (num_opts == 0){ continue; } is_present=(0x80000000>>(j&0x1f))&optional_mask[j>>5]; num_opts--; j++; if(!is_present){ continue; } } if(sequence[i].func){ offset=sequence[i].func(tvb, offset, actx, tree, *sequence[i].p_id); } else { dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, index_get_field_name(sequence, i)); } } return offset; } /* 15 Encoding the bitstring type max_len or min_len == NO_BOUND means there is no lower/upper constraint */ static tvbuff_t *dissect_per_bit_string_display(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, header_field_info *hfi, uint32_t length, int * const *named_bits, int num_named_bits _U_) { tvbuff_t *out_tvb = NULL; uint32_t pad_length=0; uint64_t value; out_tvb = tvb_new_octet_aligned(tvb, offset, length); add_new_data_source(actx->pinfo, out_tvb, "Bitstring tvb"); if (hfi) { actx->created_item = proto_tree_add_item(tree, hf_index, out_tvb, 0, -1, ENC_BIG_ENDIAN); proto_item_append_text(actx->created_item, " [bit length %u", length); if (length%8) { pad_length = 8-(length%8); proto_item_append_text(actx->created_item, ", %u LSB pad bits", pad_length); } if (length<=64) { /* if read into 64 bits also handle length <= 24, 40, 48, 56 bits */ if (length<=8) { value = tvb_get_bits8(out_tvb, 0, length); }else if (length<=16) { value = tvb_get_bits16(out_tvb, 0, length, ENC_BIG_ENDIAN); }else if (length<=24) { /* first read 16 and then the remaining bits */ value = tvb_get_bits16(out_tvb, 0, 16, ENC_BIG_ENDIAN); value <<= 8 - pad_length; value |= tvb_get_bits8(out_tvb, 16, length - 16); }else if (length<=32) { value = tvb_get_bits32(out_tvb, 0, length, ENC_BIG_ENDIAN); }else if (length<=40) { /* first read 32 and then the remaining bits */ value = tvb_get_bits32(out_tvb, 0, 32, ENC_BIG_ENDIAN); value <<= 8 - pad_length; value |= tvb_get_bits8(out_tvb, 32, length - 32); }else if (length<=48) { /* first read 32 and then the remaining bits */ value = tvb_get_bits32(out_tvb, 0, 32, ENC_BIG_ENDIAN); value <<= 16 - pad_length; value |= tvb_get_bits16(out_tvb, 32, length - 32, ENC_BIG_ENDIAN); }else if (length<=56) { /* first read 32 and 16 then the remaining bits */ value = tvb_get_bits32(out_tvb, 0, 32, ENC_BIG_ENDIAN); value <<= 16; value |= tvb_get_bits16(out_tvb, 32, 16, ENC_BIG_ENDIAN); value <<= 8 - pad_length; value |= tvb_get_bits8(out_tvb, 48, length - 48); }else { value = tvb_get_bits64(out_tvb, 0, length, ENC_BIG_ENDIAN); } proto_item_append_text(actx->created_item, ", %s decimal value %" PRIu64, decode_bits_in_field(actx->pinfo->pool, 0, length, value, ENC_BIG_ENDIAN), value); if (named_bits) { const uint32_t named_bits_bytelen = (num_named_bits + 7) / 8; proto_tree *subtree = proto_item_add_subtree(actx->created_item, ett_per_named_bits); for (uint32_t i = 0; i < named_bits_bytelen; i++) { // If less data is available than the number of named bits, then // the trailing (right) bits are assumed to be 0. value = 0; const uint32_t bit_offset = 8 * i; if (bit_offset < length) { value = tvb_get_uint8(out_tvb, i); } // Process 8 bits at a time instead of 64, each field masks a // single byte. int* const * section_named_bits = named_bits + bit_offset; int* flags[9]; if (num_named_bits - bit_offset > 8) { memcpy(&flags[0], named_bits + bit_offset, 8 * sizeof(int*)); flags[8] = NULL; section_named_bits = flags; } // TODO should non-zero pad bits be masked from the value? // When trailing zeroes are not present in the data, mark the // last byte for the lack of a better alternative. proto_tree_add_bitmask_list_value(subtree, out_tvb, offset + MIN(i, length - 1), 1, section_named_bits, value); } } } proto_item_append_text(actx->created_item, "]"); } return out_tvb; } uint32_t dissect_per_bit_string(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int min_len, int max_len, bool has_extension, int * const *named_bits, int num_named_bits, tvbuff_t **value_tvb, int *len) { /*int val_start, val_length;*/ uint32_t length, fragmented_length = 0; header_field_info *hfi; bool is_fragmented = false; tvbuff_t *fragmented_tvb = NULL, *out_tvb = NULL, *fragment_tvb = NULL; hfi = (hf_index <= 0) ? NULL : proto_registrar_get_nth(hf_index); DEBUG_ENTRY("dissect_per_bit_string"); /* 15.8 if the length is 0 bytes there will be no encoding */ if(max_len==0) { if (value_tvb) *value_tvb = out_tvb; if (len) *len = 0; return offset; } if (min_len == NO_BOUND) { min_len = 0; } /* 15.6 If an extension marker is present in the size constraint specification of the bitstring type, * a single bit shall be added to the field-list in a bit-field of length one. * The bit shall be set to 1 if the length of this encoding is not within the range of the extension root, * and zero otherwise. */ if (has_extension) { bool extension_present; offset = dissect_per_boolean(tvb, offset, actx, tree, hf_per_extension_present_bit, &extension_present); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); if(extension_present){ next_fragment1: offset=dissect_per_length_determinant(tvb, offset, actx, tree, hf_per_bit_string_length, &length, &is_fragmented); if(length || fragmented_length){ /* align to byte */ if (actx->aligned){ BYTE_ALIGN_OFFSET(offset); } if(is_fragmented){ fragment_tvb = tvb_new_octet_aligned(tvb, offset, length); if(fragmented_length==0) fragmented_tvb = tvb_new_composite(); tvb_composite_append(fragmented_tvb, fragment_tvb); offset += length; fragmented_length += length; goto next_fragment1; } if(fragmented_length){ if(length){ tvb_composite_append(fragmented_tvb, tvb_new_octet_aligned(tvb, offset, length)); fragmented_length += length; } tvb_composite_finalize(fragmented_tvb); add_new_data_source(actx->pinfo, fragmented_tvb, "Fragmented bitstring tvb"); out_tvb = dissect_per_bit_string_display(fragmented_tvb, 0, actx, tree, hf_index, hfi, fragmented_length, named_bits, num_named_bits); } else out_tvb = dissect_per_bit_string_display(tvb, offset, actx, tree, hf_index, hfi, length, named_bits, num_named_bits); } /* XXX: ?? */ /*val_start = offset>>3;*/ /*val_length = (length+7)/8;*/ offset+=length; if (value_tvb) *value_tvb = out_tvb; if (len) *len = fragmented_length ? fragmented_length : length; return offset; } } /* 15.9 if length is fixed and less than or equal to sixteen bits*/ if ((min_len==max_len) && (max_len<=16)) { out_tvb = dissect_per_bit_string_display(tvb, offset, actx, tree, hf_index, hfi, min_len, named_bits, num_named_bits); offset+=min_len; if (value_tvb) *value_tvb = out_tvb; if (len) *len = min_len; return offset; } /* 15.10 if length is fixed and less than to 64kbits*/ if((min_len==max_len)&&(min_len<65536)){ /* (octet-aligned in the ALIGNED variant) * align to byte */ if (actx->aligned){ BYTE_ALIGN_OFFSET(offset); } out_tvb = dissect_per_bit_string_display(tvb, offset, actx, tree, hf_index, hfi, min_len, named_bits, num_named_bits); offset+=min_len; if (value_tvb) *value_tvb = out_tvb; if (len) *len = min_len; return offset; } /* 15.11 */ if (max_len != NO_BOUND && max_len < 65536) { offset=dissect_per_constrained_integer(tvb, offset, actx, tree, hf_per_bit_string_length, min_len, max_len, &length, false); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); } else { next_fragment2: offset=dissect_per_length_determinant(tvb, offset, actx, tree, hf_per_bit_string_length, &length, &is_fragmented); } if(length || fragmented_length){ /* align to byte */ if (actx->aligned){ BYTE_ALIGN_OFFSET(offset); } if(is_fragmented){ fragment_tvb = tvb_new_octet_aligned(tvb, offset, length); if(fragmented_length==0) fragmented_tvb = tvb_new_composite(); tvb_composite_append(fragmented_tvb, fragment_tvb); offset += length; fragmented_length += length; goto next_fragment2; } if(fragmented_length){ if(length){ tvb_composite_append(fragmented_tvb, tvb_new_octet_aligned(tvb, offset, length)); fragmented_length += length; } tvb_composite_finalize(fragmented_tvb); add_new_data_source(actx->pinfo, fragmented_tvb, "Fragmented bitstring tvb"); out_tvb = dissect_per_bit_string_display(fragmented_tvb, 0, actx, tree, hf_index, hfi, fragmented_length, named_bits, num_named_bits); } else out_tvb = dissect_per_bit_string_display(tvb, offset, actx, tree, hf_index, hfi, length, named_bits, num_named_bits); } /* XXX: ?? */ /*val_start = offset>>3;*/ /*val_length = (length+7)/8;*/ offset+=length; if (value_tvb) *value_tvb = out_tvb; if (len) *len = fragmented_length ? fragmented_length : length; return offset; } uint32_t dissect_per_bit_string_containing_pdu_new(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int min_len, int max_len, bool has_extension, dissector_t type_cb) { tvbuff_t *val_tvb = NULL; proto_tree *subtree = tree; offset = dissect_per_bit_string(tvb, offset, actx, tree, hf_index, min_len, max_len, has_extension, NULL, 0, &val_tvb, NULL); if (type_cb && val_tvb) { subtree = proto_item_add_subtree(actx->created_item, ett_per_containing); type_cb(val_tvb, actx->pinfo, subtree, NULL); } return offset; } /* this function dissects an OCTET STRING 16.1 16.2 16.3 16.4 16.5 16.6 16.7 16.8 max_len or min_len == NO_BOUND means there is no lower/upper constraint hf_index can either be a FT_BYTES or an FT_STRING */ uint32_t dissect_per_octet_string(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int min_len, int max_len, bool has_extension, tvbuff_t **value_tvb) { int val_start = 0, val_length; uint32_t length = 0, fragmented_length = 0; header_field_info *hfi; bool is_fragmented = false; tvbuff_t *out_tvb = NULL, *fragment_tvb = NULL; hfi = (hf_index <= 0) ? NULL : proto_registrar_get_nth(hf_index); DEBUG_ENTRY("dissect_per_octet_string"); if (has_extension) { /* 16.3 an extension marker is present */ bool extension_present; offset = dissect_per_boolean(tvb, offset, actx, tree, hf_per_extension_present_bit, &extension_present); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); if (extension_present) max_len = NO_BOUND; /* skip to 16.8 */ } if (min_len == NO_BOUND) { min_len = 0; } if (max_len==0) { /* 16.5 if the length is 0 bytes there will be no encoding */ val_start = offset>>3; val_length = 0; } else if((min_len==max_len)&&(max_len<=2)) { /* 16.6 if length is fixed and less than or equal to two bytes*/ val_start = offset>>3; val_length = min_len; out_tvb = tvb_new_octet_aligned(tvb, offset, val_length * 8); /* Add new data source if the offet was unaligned */ if ((offset & 7) != 0) { add_new_data_source(actx->pinfo, out_tvb, "Unaligned OCTET STRING"); } offset+=min_len*8; } else if ((min_len==max_len)&&(min_len<65536)) { /* 16.7 if length is fixed and less than to 64k*/ /* align to byte */ if (actx->aligned){ BYTE_ALIGN_OFFSET(offset); } val_start = offset>>3; val_length = min_len; out_tvb = tvb_new_octet_aligned(tvb, offset, val_length * 8); if ((offset & 7) != 0) { add_new_data_source(actx->pinfo, out_tvb, "Unaligned OCTET STRING"); } offset+=min_len*8; } else { /* 16.8 */ if(max_len>0) { offset = dissect_per_constrained_integer(tvb, offset, actx, tree, hf_per_octet_string_length, min_len, max_len, &length, false); if (!display_internal_per_fields) proto_item_set_hidden(actx->created_item); } else { next_fragment: offset = dissect_per_length_determinant(tvb, offset, actx, tree, hf_per_octet_string_length, &length, &is_fragmented); } if(length || fragmented_length){ /* align to byte */ if (actx->aligned){ BYTE_ALIGN_OFFSET(offset); } if (is_fragmented) { fragment_tvb = tvb_new_octet_aligned(tvb, offset, length * 8); if (fragmented_length == 0) out_tvb = tvb_new_composite(); tvb_composite_append(out_tvb, fragment_tvb); offset += length * 8; fragmented_length += length; goto next_fragment; } if (fragmented_length) { if (length) { tvb_composite_append(out_tvb, tvb_new_octet_aligned(tvb, offset, length * 8)); fragmented_length += length; } tvb_composite_finalize(out_tvb); add_new_data_source(actx->pinfo, out_tvb, "Fragmented OCTET STRING"); } else { out_tvb = tvb_new_octet_aligned(tvb, offset, length * 8); if ((offset & 7) != 0) { add_new_data_source(actx->pinfo, out_tvb, "Unaligned OCTET STRING"); } } } else { val_start = offset>>3; } val_length = fragmented_length ? fragmented_length : length; offset+=length*8; } if (hfi) { if (FT_IS_UINT(hfi->type)||FT_IS_INT(hfi->type)) { /* If the type has been converted to FT_UINT or FT_INT in the .cnf file * display the length of this octet string instead of the octetstring itself */ if (FT_IS_UINT(hfi->type)) actx->created_item = proto_tree_add_uint(tree, hf_index, out_tvb, 0, val_length, val_length); else actx->created_item = proto_tree_add_int(tree, hf_index, out_tvb, 0, val_length, val_length); proto_item_append_text(actx->created_item, plurality(val_length, " octet", " octets")); } else { if(out_tvb){ actx->created_item = proto_tree_add_item(tree, hf_index, out_tvb, 0, val_length, ENC_BIG_ENDIAN); }else{ /* Length = 0 */ actx->created_item = proto_tree_add_item(tree, hf_index, tvb, val_start, val_length, ENC_BIG_ENDIAN); } } } if (value_tvb) *value_tvb = (out_tvb) ? out_tvb : tvb_new_subset_length(tvb, val_start, val_length); return offset; } uint32_t dissect_per_octet_string_containing_pdu_new(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, int min_len, int max_len, bool has_extension, dissector_t type_cb) { tvbuff_t *val_tvb = NULL; proto_tree *subtree = tree; offset = dissect_per_octet_string(tvb, offset, actx, tree, hf_index, min_len, max_len, has_extension, &val_tvb); if (type_cb && val_tvb && (tvb_reported_length(val_tvb) > 0)) { subtree = proto_item_add_subtree(actx->created_item, ett_per_containing); type_cb(val_tvb, actx->pinfo, subtree, NULL); } return offset; } uint32_t dissect_per_size_constrained_type(tvbuff_t *tvb, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, per_type_fn type_cb, const char *name, int min_len, int max_len, bool has_extension) { asn1_stack_frame_push(actx, name); asn1_param_push_integer(actx, min_len); asn1_param_push_integer(actx, max_len); asn1_param_push_boolean(actx, has_extension); offset = type_cb(tvb, offset, actx, tree, hf_index); asn1_stack_frame_pop(actx, name); return offset; } bool get_size_constraint_from_stack(asn1_ctx_t *actx, const char *name, int *pmin_len, int *pmax_len, bool *phas_extension) { asn1_par_t *par; if (pmin_len) *pmin_len = NO_BOUND; if (pmax_len) *pmax_len = NO_BOUND; if (phas_extension) *phas_extension = false; if (!actx->stack) return false; if (strcmp(actx->stack->name, name)) return false; par = actx->stack->par; if (!par || (par->ptype != ASN1_PAR_INTEGER)) return false; if (pmin_len) *pmin_len = par->value.v_integer; par = par->next; if (!par || (par->ptype != ASN1_PAR_INTEGER)) return false; if (pmax_len) *pmax_len = par->value.v_integer; par = par->next; if (!par || (par->ptype != ASN1_PAR_BOOLEAN)) return false; if (phas_extension) *phas_extension = par->value.v_boolean; return true; } /* 26 Encoding of a value of the external type */ /* code generated from definition in 26.1 */ /* [UNIVERSAL 8] IMPLICIT SEQUENCE { direct-reference OBJECT IDENTIFIER OPTIONAL, indirect-reference INTEGER OPTIONAL, data-value-descriptor ObjectDescriptor OPTIONAL, encoding CHOICE { single-ASN1-type [0] ABSTRACT-SYNTAX.&Type, octet-aligned [1] IMPLICIT OCTET STRING, arbitrary [2] IMPLICIT BIT STRING } } */ /* NOTE: This sequence type differs from that in ITU-T Rec. X.680 | ISO/IEC 8824-1 for historical reasons. */ static int dissect_per_T_direct_reference(tvbuff_t *tvb, int offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index) { DISSECTOR_ASSERT(actx); offset = dissect_per_object_identifier_str(tvb, offset, actx, tree, hf_index, &actx->external.direct_reference); actx->external.direct_ref_present = true; return offset; } static int dissect_per_T_indirect_reference(tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) { offset = dissect_per_integer(tvb, offset, actx, tree, hf_index, &actx->external.indirect_reference); actx->external.indirect_ref_present = true; return offset; } static int dissect_per_T_data_value_descriptor(tvbuff_t *tvb, int offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index) { offset = dissect_per_object_descriptor(tvb, offset, actx, tree, hf_index, &actx->external.data_value_descriptor); actx->external.data_value_descr_present = true; return offset; } static int dissect_per_T_single_ASN1_type(tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) { offset = dissect_per_open_type(tvb, offset, actx, tree, actx->external.hf_index, actx->external.u.per.type_cb); return offset; } static int dissect_per_T_octet_aligned(tvbuff_t *tvb, int offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index) { offset = dissect_per_octet_string(tvb, offset, actx, tree, hf_index, NO_BOUND, NO_BOUND, false, &actx->external.octet_aligned); if (actx->external.octet_aligned) { if (actx->external.u.per.type_cb) { actx->external.u.per.type_cb(actx->external.octet_aligned, 0, actx, tree, actx->external.hf_index); } else { actx->created_item = proto_tree_add_expert(tree, actx->pinfo, &ei_per_external_type, actx->external.octet_aligned, 0, -1); } } return offset; } static int dissect_per_T_arbitrary(tvbuff_t *tvb, int offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index) { offset = dissect_per_bit_string(tvb, offset, actx, tree, hf_index, NO_BOUND, NO_BOUND, false, NULL, 0, &actx->external.arbitrary, NULL); if (actx->external.arbitrary) { if (actx->external.u.per.type_cb) { actx->external.u.per.type_cb(actx->external.arbitrary, 0, actx, tree, actx->external.hf_index); } else { actx->created_item = proto_tree_add_expert(tree, actx->pinfo, &ei_per_external_type, actx->external.arbitrary, 0, -1); } } return offset; } static const value_string per_External_encoding_vals[] = { { 0, "single-ASN1-type" }, { 1, "octet-aligned" }, { 2, "arbitrary" }, { 0, NULL } }; static const per_choice_t External_encoding_choice[] = { { 0, &hf_per_single_ASN1_type, ASN1_NO_EXTENSIONS , dissect_per_T_single_ASN1_type }, { 1, &hf_per_octet_aligned , ASN1_NO_EXTENSIONS , dissect_per_T_octet_aligned }, { 2, &hf_per_arbitrary , ASN1_NO_EXTENSIONS , dissect_per_T_arbitrary }, { 0, NULL, 0, NULL } }; static int dissect_per_External_encoding(tvbuff_t *tvb, int offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index) { // This assertion is used to remove clang's warning. DISSECTOR_ASSERT(actx); offset = dissect_per_choice(tvb, offset, actx, tree, hf_index, ett_per_External_encoding, External_encoding_choice, &actx->external.encoding); return offset; } static const per_sequence_t External_sequence[] = { { &hf_per_direct_reference, ASN1_NO_EXTENSIONS , ASN1_OPTIONAL , dissect_per_T_direct_reference }, { &hf_per_indirect_reference, ASN1_NO_EXTENSIONS , ASN1_OPTIONAL , dissect_per_T_indirect_reference }, { &hf_per_data_value_descriptor, ASN1_NO_EXTENSIONS , ASN1_OPTIONAL , dissect_per_T_data_value_descriptor }, { &hf_per_encoding , ASN1_NO_EXTENSIONS , ASN1_NOT_OPTIONAL, dissect_per_External_encoding }, { NULL, 0, 0, NULL } }; static int dissect_per_External(tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) { offset = dissect_per_sequence(tvb, offset, actx, tree, hf_index, ett_per_External, External_sequence); return offset; } uint32_t dissect_per_external_type(tvbuff_t *tvb _U_, uint32_t offset, asn1_ctx_t *actx, proto_tree *tree _U_, int hf_index _U_, per_type_fn type_cb) { asn1_ctx_clean_external(actx); actx->external.u.per.type_cb = type_cb; offset = dissect_per_External(tvb, offset, actx, tree, hf_index); asn1_ctx_clean_external(actx); return offset; } /* * Calls the callback defined with register_per_oid_dissector() if found. * Offset is in bits. */ int call_per_oid_callback(const char *oid, tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset, asn1_ctx_t *actx, int hf_index) { uint32_t type_length, end_offset, start_offset; tvbuff_t *val_tvb = NULL; start_offset = offset; offset = dissect_per_length_determinant(tvb, offset, actx, tree, hf_per_open_type_length, &type_length, NULL); if(type_length == 0){ dissect_per_not_decoded_yet(tree, actx->pinfo, tvb, "unexpected length"); } if (actx->aligned) BYTE_ALIGN_OFFSET(offset); end_offset = offset + type_length; /* length in bits */ val_tvb = tvb_new_octet_aligned(tvb, offset, type_length * 8); if ((offset & 7) != 0) { add_new_data_source(actx->pinfo, val_tvb, "Unaligned OCTET STRING"); } if (oid == NULL || (dissector_try_string(per_oid_dissector_table, oid, val_tvb, pinfo, tree, actx)) == 0) { proto_tree_add_expert(tree, pinfo, &ei_per_oid_not_implemented, val_tvb, 0, -1); dissect_per_open_type(tvb, start_offset, actx, tree, hf_index, NULL); } return end_offset; } void register_per_oid_dissector(const char *oid, dissector_t dissector, int proto, const char *name) { dissector_handle_t dissector_handle; /* FIXME: This would be better as register_dissector() * so the dissector could be referenced by name * from the command line, Lua, etc. * But can we blindly trust name to be a unique dissector name, * or should we prefix "per." or something? */ dissector_handle = create_dissector_handle(dissector, proto); dissector_add_string("per.oid", oid, dissector_handle); oid_add_from_string(name, oid); } void proto_register_per(void) { static hf_register_info hf[] = { { &hf_per_num_sequence_extensions, { "Number of Sequence Extensions", "per.num_sequence_extensions", FT_UINT32, BASE_DEC, NULL, 0, "Number of extensions encoded in this sequence", HFILL }}, { &hf_per_choice_index, { "Choice Index", "per.choice_index", FT_UINT32, BASE_DEC, NULL, 0, "Which index of the Choice within extension root is encoded", HFILL }}, { &hf_per_choice_extension_index, { "Choice Extension Index", "per.choice_extension_index", FT_UINT32, BASE_DEC, NULL, 0, "Which index of the Choice within extension addition is encoded", HFILL }}, { &hf_per_enum_index, { "Enumerated Index", "per.enum_index", FT_UINT32, BASE_DEC, NULL, 0, "Which index of the Enumerated within extension root is encoded", HFILL }}, { &hf_per_enum_extension_index, { "Enumerated Extension Index", "per.enum_extension_index", FT_UINT32, BASE_DEC, NULL, 0, "Which index of the Enumerated within extension addition is encoded", HFILL }}, { &hf_per_GeneralString_length, { "GeneralString Length", "per.generalstring_length", FT_UINT32, BASE_DEC, NULL, 0, "Length of the GeneralString", HFILL }}, { &hf_per_extension_bit, { "Extension Bit", "per.extension_bit", FT_BOOLEAN, 8, TFS(&tfs_extension_bit), 0x01, "The extension bit of an aggregate", HFILL }}, { &hf_per_extension_present_bit, { "Extension Present Bit", "per.extension_present_bit", FT_BOOLEAN, 8, NULL, 0x01, "Whether this optional extension is present or not", HFILL }}, { &hf_per_small_number_bit, { "Small Number Bit", "per.small_number_bit", FT_BOOLEAN, 8, TFS(&tfs_small_number_bit), 0x01, "The small number bit for a section 10.6 integer", HFILL }}, { &hf_per_optional_field_bit, { "Optional Field Bit", "per.optional_field_bit", FT_BOOLEAN, 8, NULL, 0x01, "This bit specifies the presence/absence of an optional field", HFILL }}, { &hf_per_sequence_of_length, { "Sequence-Of Length", "per.sequence_of_length", FT_UINT32, BASE_DEC, NULL, 0, "Number of items in the Sequence Of", HFILL }}, { &hf_per_object_identifier_length, { "Object Identifier Length", "per.object_length", FT_UINT32, BASE_DEC, NULL, 0, "Length of the object identifier", HFILL }}, { &hf_per_open_type_length, { "Open Type Length", "per.open_type_length", FT_UINT32, BASE_DEC, NULL, 0, "Length of an open type encoding", HFILL }}, { &hf_per_real_length, { "Real Length", "per.real_length", FT_UINT32, BASE_DEC, NULL, 0, "Length of an real encoding", HFILL }}, { &hf_per_octet_string_length, { "Octet String Length", "per.octet_string_length", FT_UINT32, BASE_DEC, NULL, 0, "Number of bytes in the Octet String", HFILL }}, { &hf_per_bit_string_length, { "Bit String Length", "per.bit_string_length", FT_UINT32, BASE_DEC, NULL, 0, "Number of bits in the Bit String", HFILL }}, { &hf_per_normally_small_nonnegative_whole_number_length, { "Normally Small Non-negative Whole Number Length", "per.normally_small_nonnegative_whole_number_length", FT_UINT32, BASE_DEC, NULL, 0, "Number of bytes in the Normally Small Non-negative Whole Number", HFILL }}, { &hf_per_const_int_len, { "Constrained Integer Length", "per.const_int_len", FT_UINT32, BASE_DEC, NULL, 0, "Number of bytes in the Constrained Integer", HFILL }}, { &hf_per_direct_reference, { "direct-reference", "per.direct_reference", FT_OID, BASE_NONE, NULL, 0, "per.T_direct_reference", HFILL }}, { &hf_per_indirect_reference, { "indirect-reference", "per.indirect_reference", FT_INT32, BASE_DEC, NULL, 0, "per.T_indirect_reference", HFILL }}, { &hf_per_data_value_descriptor, { "data-value-descriptor", "per.data_value_descriptor", FT_STRING, BASE_NONE, NULL, 0, "per.T_data_value_descriptor", HFILL }}, { &hf_per_encoding, { "encoding", "per.encoding", FT_UINT32, BASE_DEC, VALS(per_External_encoding_vals), 0, "per.External_encoding", HFILL }}, { &hf_per_single_ASN1_type, { "single-ASN1-type", "per.single_ASN1_type", FT_NONE, BASE_NONE, NULL, 0, "per.T_single_ASN1_type", HFILL }}, { &hf_per_octet_aligned, { "octet-aligned", "per.octet_aligned", FT_BYTES, BASE_NONE, NULL, 0, "per.T_octet_aligned", HFILL }}, { &hf_per_arbitrary, { "arbitrary", "per.arbitrary", FT_BYTES, BASE_NONE, NULL, 0, "per.T_arbitrary", HFILL }}, { &hf_per_integer_length, { "integer length", "per.integer_length", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, #if 0 { &hf_per_debug_pos, { "Current bit offset", "per.debug_pos", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, #endif { &hf_per_internal_range, { "Range", "per.internal.range", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, { &hf_per_internal_num_bits, { "Bitfield length", "per.internal.num_bits", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, { &hf_per_internal_min, { "Min", "per.internal.min", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, { &hf_per_internal_value, { "Bits", "per.internal.value", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, { &hf_per_internal_min_int, { "Min", "per.internal.min_int", FT_INT32, BASE_DEC, NULL, 0, NULL, HFILL } }, { &hf_per_internal_value_int, { "Bits", "per.internal.value_int", FT_INT64, BASE_DEC, NULL, 0, NULL, HFILL } }, { &hf_per_encoding_boiler_plate, { "PER encoded protocol, to see PER internal fields set protocol PER preferences", "per.encoding_boiler_plate", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL } }, }; static int *ett[] = { &ett_per_open_type, &ett_per_containing, &ett_per_sequence_of_item, &ett_per_External, &ett_per_External_encoding, &ett_per_named_bits, }; static ei_register_info ei[] = { { &ei_per_size_constraint_value, { "per.size_constraint.value", PI_PROTOCOL, PI_WARN, "Size constraint: value too big", EXPFILL }}, { &ei_per_size_constraint_too_few, { "per.size_constraint.too_few", PI_PROTOCOL, PI_WARN, "Size constraint: too few items", EXPFILL }}, { &ei_per_size_constraint_too_many, { "per.size_constraint.too_many", PI_PROTOCOL, PI_WARN, "Size constraint: too many items", EXPFILL }}, { &ei_per_choice_extension_unknown, { "per.choice_extension_unknown", PI_UNDECODED, PI_NOTE, "unknown choice extension", EXPFILL }}, { &ei_per_sequence_extension_unknown, { "per.sequence_extension_unknown", PI_UNDECODED, PI_NOTE, "unknown sequence extension", EXPFILL }}, { &ei_per_encoding_error, { "per.encoding_error", PI_MALFORMED, PI_WARN, "Encoding error", EXPFILL }}, { &ei_per_oid_not_implemented, { "per.error.oid_not_implemented", PI_UNDECODED, PI_WARN, "PER: Dissector for OID not implemented. Contact Wireshark developers if you want this supported", EXPFILL }}, { &ei_per_undecoded, { "per.error.undecoded", PI_UNDECODED, PI_WARN, "PER: Something unknown here", EXPFILL }}, { &ei_per_field_not_integer, { "per.field_not_integer", PI_PROTOCOL, PI_ERROR, "Field is not an integer", EXPFILL }}, { &ei_per_external_type, { "per.external_type.unknown", PI_PROTOCOL, PI_WARN, "Unknown EXTERNAL Type", EXPFILL }}, { &ei_per_open_type, { "per.open_type.unknown", PI_PROTOCOL, PI_WARN, "Unknown Open Type", EXPFILL }}, { &ei_per_open_type_len, { "per.open_type.len", PI_PROTOCOL, PI_ERROR, "Open Type length > available data(tvb)", EXPFILL }} }; module_t *per_module; expert_module_t* expert_per; proto_per = proto_register_protocol("Packed Encoding Rules (ASN.1 X.691)", "PER", "per"); proto_register_field_array(proto_per, hf, array_length(hf)); proto_register_subtree_array(ett, array_length(ett)); expert_per = expert_register_protocol(proto_per); expert_register_field_array(expert_per, ei, array_length(ei)); proto_set_cant_toggle(proto_per); per_module = prefs_register_protocol(proto_per, NULL); prefs_register_bool_preference(per_module, "display_internal_per_fields", "Display the internal PER fields in the tree", "Whether the dissector should put the internal PER data in the tree or if it should hide it", &display_internal_per_fields); per_oid_dissector_table = register_dissector_table("per.oid", "PER OID", proto_per, FT_STRING, STRING_CASE_SENSITIVE); } /* * Editor modelines - https://www.wireshark.org/tools/modelines.html * * Local variables: * c-basic-offset: 8 * tab-width: 8 * indent-tabs-mode: t * End: * * vi: set shiftwidth=8 tabstop=8 noexpandtab: * :indentSize=8:tabSize=8:noTabs=false: */