Blame libfreerdp/core/fastpath.c

Packit 1fb8d4
/**
Packit 1fb8d4
 * FreeRDP: A Remote Desktop Protocol Implementation
Packit 1fb8d4
 * Fast Path
Packit 1fb8d4
 *
Packit 1fb8d4
 * Copyright 2011 Vic Lee
Packit 1fb8d4
 * Copyright 2014 Norbert Federa <norbert.federa@thincast.com>
Packit 1fb8d4
 * Copyright 2017 Armin Novak <armin.novak@thincast.com>
Packit 1fb8d4
 * Copyright 2017 Thincast Technologies GmbH
Packit 1fb8d4
 *
Packit 1fb8d4
 * Licensed under the Apache License, Version 2.0 (the "License");
Packit 1fb8d4
 * you may not use this file except in compliance with the License.
Packit 1fb8d4
 * You may obtain a copy of the License at
Packit 1fb8d4
 *
Packit 1fb8d4
 *     http://www.apache.org/licenses/LICENSE-2.0
Packit 1fb8d4
 *
Packit 1fb8d4
 * Unless required by applicable law or agreed to in writing, software
Packit 1fb8d4
 * distributed under the License is distributed on an "AS IS" BASIS,
Packit 1fb8d4
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
Packit 1fb8d4
 * See the License for the specific language governing permissions and
Packit 1fb8d4
 * limitations under the License.
Packit 1fb8d4
 */
Packit 1fb8d4
Packit 1fb8d4
#ifdef HAVE_CONFIG_H
Packit 1fb8d4
#include "config.h"
Packit 1fb8d4
#endif
Packit 1fb8d4
Packit 1fb8d4
#include <stdio.h>
Packit 1fb8d4
#include <stdlib.h>
Packit 1fb8d4
#include <string.h>
Packit 1fb8d4
Packit 1fb8d4
#include <winpr/crt.h>
Packit 1fb8d4
#include <winpr/stream.h>
Packit 1fb8d4
Packit 1fb8d4
#include <freerdp/api.h>
Packit 1fb8d4
#include <freerdp/log.h>
Packit 1fb8d4
#include <freerdp/crypto/per.h>
Packit 1fb8d4
Packit 1fb8d4
#include "orders.h"
Packit 1fb8d4
#include "update.h"
Packit 1fb8d4
#include "surface.h"
Packit 1fb8d4
#include "fastpath.h"
Packit 1fb8d4
#include "rdp.h"
Packit 1fb8d4
Packit 1fb8d4
#include "../cache/pointer.h"
Packit 1fb8d4
#include "../cache/palette.h"
Packit 1fb8d4
#include "../cache/bitmap.h"
Packit 1fb8d4
Packit 1fb8d4
#define TAG FREERDP_TAG("core.fastpath")
Packit 1fb8d4
Packit 1fb8d4
/**
Packit 1fb8d4
 * Fast-Path packet format is defined in [MS-RDPBCGR] 2.2.9.1.2, which revises
Packit 1fb8d4
 * server output packets from the first byte with the goal of improving
Packit 1fb8d4
 * bandwidth.
Packit 1fb8d4
 *
Packit 1fb8d4
 * Slow-Path packet always starts with TPKT header, which has the first
Packit 1fb8d4
 * byte 0x03, while Fast-Path packet starts with 2 zero bits in the first
Packit 1fb8d4
 * two less significant bits of the first byte.
Packit 1fb8d4
 */
Packit 1fb8d4
Packit Service 5a9772
static const char* const FASTPATH_UPDATETYPE_STRINGS[] = {
Packit Service 5a9772
	"Orders",                 /* 0x0 */
Packit Service 5a9772
	"Bitmap",                 /* 0x1 */
Packit Service 5a9772
	"Palette",                /* 0x2 */
Packit Service 5a9772
	"Synchronize",            /* 0x3 */
Packit Service 5a9772
	"Surface Commands",       /* 0x4 */
Packit Service 5a9772
	"System Pointer Hidden",  /* 0x5 */
Packit Service 5a9772
	"System Pointer Default", /* 0x6 */
Packit Service 5a9772
	"???",                    /* 0x7 */
Packit Service 5a9772
	"Pointer Position",       /* 0x8 */
Packit Service 5a9772
	"Color Pointer",          /* 0x9 */
Packit Service 5a9772
	"Cached Pointer",         /* 0xA */
Packit Service 5a9772
	"New Pointer",            /* 0xB */
Packit 1fb8d4
};
Packit 1fb8d4
Packit 1fb8d4
static const char* fastpath_update_to_string(UINT8 update)
Packit 1fb8d4
{
Packit 1fb8d4
	if (update >= ARRAYSIZE(FASTPATH_UPDATETYPE_STRINGS))
Packit 1fb8d4
		return "UNKNOWN";
Packit 1fb8d4
Packit 1fb8d4
	return FASTPATH_UPDATETYPE_STRINGS[update];
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
/*
Packit 1fb8d4
 * The fastpath header may be two or three bytes long.
Packit 1fb8d4
 * This function assumes that at least two bytes are available in the stream
Packit 1fb8d4
 * and doesn't touch third byte.
Packit 1fb8d4
 */
Packit 1fb8d4
UINT16 fastpath_header_length(wStream* s)
Packit 1fb8d4
{
Packit 1fb8d4
	BYTE length1;
Packit 1fb8d4
Packit 1fb8d4
	if (!s || (Stream_GetRemainingLength(s) < 2))
Packit 1fb8d4
		return 0;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Seek_UINT8(s);
Packit 1fb8d4
	Stream_Read_UINT8(s, length1);
Packit 1fb8d4
	Stream_Rewind(s, 2);
Packit 1fb8d4
	return ((length1 & 0x80) != 0 ? 3 : 2);
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
/**
Packit 1fb8d4
 * Read a Fast-Path packet header.\n
Packit 1fb8d4
 * @param s stream
Packit 1fb8d4
 * @param encryptionFlags
Packit 1fb8d4
 * @return length
Packit 1fb8d4
 */
Packit 1fb8d4
UINT16 fastpath_read_header(rdpFastPath* fastpath, wStream* s)
Packit 1fb8d4
{
Packit 1fb8d4
	BYTE header;
Packit 1fb8d4
	UINT16 length;
Packit 1fb8d4
Packit 1fb8d4
	if (!s || (Stream_GetRemainingLength(s) < 1))
Packit 1fb8d4
		return 0;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Read_UINT8(s, header);
Packit 1fb8d4
Packit 1fb8d4
	if (fastpath)
Packit 1fb8d4
	{
Packit 1fb8d4
		fastpath->encryptionFlags = (header & 0xC0) >> 6;
Packit 1fb8d4
		fastpath->numberEvents = (header & 0x3C) >> 2;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	if (!per_read_length(s, &length))
Packit 1fb8d4
		return 0;
Packit 1fb8d4
Packit 1fb8d4
	return length;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static BOOL fastpath_read_update_header(wStream* s, BYTE* updateCode, BYTE* fragmentation,
Packit 1fb8d4
                                        BYTE* compression)
Packit 1fb8d4
{
Packit 1fb8d4
	BYTE updateHeader;
Packit 1fb8d4
Packit 1fb8d4
	if (!s || !updateCode || !fragmentation || !compression)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	if (Stream_GetRemainingLength(s) < 1)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Read_UINT8(s, updateHeader);
Packit 1fb8d4
	*updateCode = updateHeader & 0x0F;
Packit 1fb8d4
	*fragmentation = (updateHeader >> 4) & 0x03;
Packit 1fb8d4
	*compression = (updateHeader >> 6) & 0x03;
Packit 1fb8d4
	return TRUE;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static BOOL fastpath_write_update_header(wStream* s, FASTPATH_UPDATE_HEADER* fpUpdateHeader)
Packit 1fb8d4
{
Packit 1fb8d4
	if (!s || !fpUpdateHeader)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	fpUpdateHeader->updateHeader = 0;
Packit 1fb8d4
	fpUpdateHeader->updateHeader |= fpUpdateHeader->updateCode & 0x0F;
Packit 1fb8d4
	fpUpdateHeader->updateHeader |= (fpUpdateHeader->fragmentation & 0x03) << 4;
Packit 1fb8d4
	fpUpdateHeader->updateHeader |= (fpUpdateHeader->compression & 0x03) << 6;
Packit 1fb8d4
	Stream_Write_UINT8(s, fpUpdateHeader->updateHeader);
Packit 1fb8d4
Packit 1fb8d4
	if (fpUpdateHeader->compression)
Packit 1fb8d4
	{
Packit 1fb8d4
		if (Stream_GetRemainingCapacity(s) < 1)
Packit 1fb8d4
			return FALSE;
Packit 1fb8d4
Packit 1fb8d4
		Stream_Write_UINT8(s, fpUpdateHeader->compressionFlags);
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	if (Stream_GetRemainingCapacity(s) < 2)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Write_UINT16(s, fpUpdateHeader->size);
Packit 1fb8d4
	return TRUE;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static UINT32 fastpath_get_update_header_size(FASTPATH_UPDATE_HEADER* fpUpdateHeader)
Packit 1fb8d4
{
Packit 1fb8d4
	if (!fpUpdateHeader)
Packit 1fb8d4
		return 0;
Packit 1fb8d4
Packit 1fb8d4
	return (fpUpdateHeader->compression) ? 4 : 3;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static BOOL fastpath_write_update_pdu_header(wStream* s,
Packit Service 5a9772
                                             FASTPATH_UPDATE_PDU_HEADER* fpUpdatePduHeader,
Packit Service 5a9772
                                             rdpRdp* rdp)
Packit 1fb8d4
{
Packit 1fb8d4
	if (!s || !fpUpdatePduHeader || !rdp)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	if (Stream_GetRemainingCapacity(s) < 3)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	fpUpdatePduHeader->fpOutputHeader = 0;
Packit 1fb8d4
	fpUpdatePduHeader->fpOutputHeader |= (fpUpdatePduHeader->action & 0x03);
Packit 1fb8d4
	fpUpdatePduHeader->fpOutputHeader |= (fpUpdatePduHeader->secFlags & 0x03) << 6;
Packit Service 5a9772
	Stream_Write_UINT8(s, fpUpdatePduHeader->fpOutputHeader);       /* fpOutputHeader (1 byte) */
Packit 1fb8d4
	Stream_Write_UINT8(s, 0x80 | (fpUpdatePduHeader->length >> 8)); /* length1 */
Packit Service 5a9772
	Stream_Write_UINT8(s, fpUpdatePduHeader->length & 0xFF);        /* length2 */
Packit 1fb8d4
Packit 1fb8d4
	if (fpUpdatePduHeader->secFlags)
Packit 1fb8d4
	{
Packit 1fb8d4
		if (rdp->settings->EncryptionMethods == ENCRYPTION_METHOD_FIPS)
Packit 1fb8d4
		{
Packit 1fb8d4
			if (Stream_GetRemainingCapacity(s) < 4)
Packit 1fb8d4
				return FALSE;
Packit 1fb8d4
Packit 1fb8d4
			Stream_Write(s, fpUpdatePduHeader->fipsInformation, 4);
Packit 1fb8d4
		}
Packit 1fb8d4
Packit 1fb8d4
		if (Stream_GetRemainingCapacity(s) < 8)
Packit 1fb8d4
			return FALSE;
Packit 1fb8d4
Packit 1fb8d4
		Stream_Write(s, fpUpdatePduHeader->dataSignature, 8);
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	return FALSE;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static UINT32 fastpath_get_update_pdu_header_size(FASTPATH_UPDATE_PDU_HEADER* fpUpdatePduHeader,
Packit Service 5a9772
                                                  rdpRdp* rdp)
Packit 1fb8d4
{
Packit 1fb8d4
	UINT32 size = 3; /* fpUpdatePduHeader + length1 + length2 */
Packit 1fb8d4
Packit 1fb8d4
	if (!fpUpdatePduHeader || !rdp)
Packit 1fb8d4
		return 0;
Packit 1fb8d4
Packit 1fb8d4
	if (fpUpdatePduHeader->secFlags)
Packit 1fb8d4
	{
Packit 1fb8d4
		size += 8; /* dataSignature */
Packit 1fb8d4
Packit 1fb8d4
		if (rdp->settings->EncryptionMethods == ENCRYPTION_METHOD_FIPS)
Packit 1fb8d4
			size += 4; /* fipsInformation */
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	return size;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
BOOL fastpath_read_header_rdp(rdpFastPath* fastpath, wStream* s, UINT16* length)
Packit 1fb8d4
{
Packit 1fb8d4
	BYTE header;
Packit 1fb8d4
Packit 1fb8d4
	if (!s || !length)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	if (Stream_GetRemainingLength(s) < 1)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Read_UINT8(s, header);
Packit 1fb8d4
Packit 1fb8d4
	if (fastpath)
Packit 1fb8d4
	{
Packit 1fb8d4
		fastpath->encryptionFlags = (header & 0xC0) >> 6;
Packit 1fb8d4
		fastpath->numberEvents = (header & 0x3C) >> 2;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	if (!per_read_length(s, length))
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	*length = *length - Stream_GetPosition(s);
Packit 1fb8d4
	return TRUE;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static BOOL fastpath_recv_orders(rdpFastPath* fastpath, wStream* s)
Packit 1fb8d4
{
Packit 1fb8d4
	rdpUpdate* update;
Packit 1fb8d4
	UINT16 numberOrders;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !fastpath->rdp || !s)
Packit 1fb8d4
	{
Packit 1fb8d4
		WLog_ERR(TAG, "Invalid arguments");
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	update = fastpath->rdp->update;
Packit 1fb8d4
Packit 1fb8d4
	if (!update)
Packit 1fb8d4
	{
Packit 1fb8d4
		WLog_ERR(TAG, "Invalid configuration");
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	if (Stream_GetRemainingLength(s) < 2)
Packit 1fb8d4
	{
Packit 1fb8d4
		WLog_ERR(TAG, "Stream short");
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	Stream_Read_UINT16(s, numberOrders); /* numberOrders (2 bytes) */
Packit 1fb8d4
Packit 1fb8d4
	while (numberOrders > 0)
Packit 1fb8d4
	{
Packit 1fb8d4
		if (!update_recv_order(update, s))
Packit 1fb8d4
			return FALSE;
Packit 1fb8d4
Packit 1fb8d4
		numberOrders--;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	return TRUE;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static BOOL fastpath_recv_update_common(rdpFastPath* fastpath, wStream* s)
Packit 1fb8d4
{
Packit 1fb8d4
	BOOL rc = FALSE;
Packit 1fb8d4
	UINT16 updateType;
Packit 1fb8d4
	rdpUpdate* update;
Packit 1fb8d4
	rdpContext* context;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !s || !fastpath->rdp)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	update = fastpath->rdp->update;
Packit 1fb8d4
Packit 1fb8d4
	if (!update || !update->context)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	context = update->context;
Packit 1fb8d4
Packit 1fb8d4
	if (Stream_GetRemainingLength(s) < 2)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Read_UINT16(s, updateType); /* updateType (2 bytes) */
Packit 1fb8d4
Packit 1fb8d4
	switch (updateType)
Packit 1fb8d4
	{
Packit 1fb8d4
		case UPDATE_TYPE_BITMAP:
Packit Service 5a9772
		{
Packit Service 5a9772
			BITMAP_UPDATE* bitmap_update = update_read_bitmap_update(update, s);
Packit 1fb8d4
Packit Service 5a9772
			if (!bitmap_update)
Packit Service 5a9772
				return FALSE;
Packit 1fb8d4
Packit Service 5a9772
			rc = IFCALLRESULT(FALSE, update->BitmapUpdate, context, bitmap_update);
Packit Service 5a9772
			free_bitmap_update(context, bitmap_update);
Packit Service 5a9772
		}
Packit Service 5a9772
		break;
Packit 1fb8d4
Packit 1fb8d4
		case UPDATE_TYPE_PALETTE:
Packit Service 5a9772
		{
Packit Service 5a9772
			PALETTE_UPDATE* palette_update = update_read_palette(update, s);
Packit 1fb8d4
Packit Service 5a9772
			if (!palette_update)
Packit Service 5a9772
				return FALSE;
Packit 1fb8d4
Packit Service 5a9772
			rc = IFCALLRESULT(FALSE, update->Palette, context, palette_update);
Packit Service 5a9772
			free_palette_update(context, palette_update);
Packit Service 5a9772
		}
Packit Service 5a9772
		break;
Packit 1fb8d4
Packit 1fb8d4
		default:
Packit 1fb8d4
			break;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	return rc;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static BOOL fastpath_recv_update_synchronize(rdpFastPath* fastpath, wStream* s)
Packit 1fb8d4
{
Packit 1fb8d4
	/* server 2008 can send invalid synchronize packet with missing padding,
Packit 1fb8d4
	  so don't return FALSE even if the packet is invalid */
Packit 1fb8d4
	Stream_SafeSeek(s, 2); /* size (2 bytes), MUST be set to zero */
Packit 1fb8d4
	return TRUE;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static int fastpath_recv_update(rdpFastPath* fastpath, BYTE updateCode, wStream* s)
Packit 1fb8d4
{
Packit 1fb8d4
	BOOL rc = FALSE;
Packit 1fb8d4
	int status = 0;
Packit 1fb8d4
	rdpUpdate* update;
Packit 1fb8d4
	rdpContext* context;
Packit 1fb8d4
	rdpPointerUpdate* pointer;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !fastpath->rdp || !s)
Packit 1fb8d4
		return -1;
Packit 1fb8d4
Packit 1fb8d4
	update = fastpath->rdp->update;
Packit 1fb8d4
Packit 1fb8d4
	if (!update || !update->pointer || !update->context)
Packit 1fb8d4
		return -1;
Packit 1fb8d4
Packit 1fb8d4
	context = update->context;
Packit 1fb8d4
	pointer = update->pointer;
Packit 1fb8d4
#ifdef WITH_DEBUG_RDP
Packit Service 5a9772
	DEBUG_RDP("recv Fast-Path %s Update (0x%02" PRIX8 "), length:%" PRIuz "",
Packit Service 5a9772
	          fastpath_update_to_string(updateCode), updateCode, Stream_GetRemainingLength(s));
Packit 1fb8d4
#endif
Packit 1fb8d4
Packit 1fb8d4
	switch (updateCode)
Packit 1fb8d4
	{
Packit 1fb8d4
		case FASTPATH_UPDATETYPE_ORDERS:
Packit 1fb8d4
			rc = fastpath_recv_orders(fastpath, s);
Packit 1fb8d4
			break;
Packit 1fb8d4
Packit 1fb8d4
		case FASTPATH_UPDATETYPE_BITMAP:
Packit 1fb8d4
		case FASTPATH_UPDATETYPE_PALETTE:
Packit 1fb8d4
			rc = fastpath_recv_update_common(fastpath, s);
Packit 1fb8d4
			break;
Packit 1fb8d4
Packit 1fb8d4
		case FASTPATH_UPDATETYPE_SYNCHRONIZE:
Packit 1fb8d4
			if (!fastpath_recv_update_synchronize(fastpath, s))
Packit Service 5a9772
				WLog_ERR(TAG, "fastpath_recv_update_synchronize failure but we continue");
Packit 1fb8d4
			else
Packit 1fb8d4
				rc = IFCALLRESULT(TRUE, update->Synchronize, context);
Packit 1fb8d4
Packit 1fb8d4
			break;
Packit 1fb8d4
Packit 1fb8d4
		case FASTPATH_UPDATETYPE_SURFCMDS:
Packit 1fb8d4
			status = update_recv_surfcmds(update, s);
Packit 1fb8d4
			rc = (status < 0) ? FALSE : TRUE;
Packit 1fb8d4
			break;
Packit 1fb8d4
Packit 1fb8d4
		case FASTPATH_UPDATETYPE_PTR_NULL:
Packit Service 5a9772
		{
Packit Service 5a9772
			POINTER_SYSTEM_UPDATE pointer_system;
Packit Service 5a9772
			pointer_system.type = SYSPTR_NULL;
Packit Service 5a9772
			rc = IFCALLRESULT(FALSE, pointer->PointerSystem, context, &pointer_system);
Packit Service 5a9772
		}
Packit Service 5a9772
		break;
Packit 1fb8d4
Packit 1fb8d4
		case FASTPATH_UPDATETYPE_PTR_DEFAULT:
Packit Service 5a9772
		{
Packit Service 5a9772
			POINTER_SYSTEM_UPDATE pointer_system;
Packit Service 5a9772
			pointer_system.type = SYSPTR_DEFAULT;
Packit Service 5a9772
			rc = IFCALLRESULT(FALSE, pointer->PointerSystem, context, &pointer_system);
Packit Service 5a9772
		}
Packit Service 5a9772
		break;
Packit 1fb8d4
Packit 1fb8d4
		case FASTPATH_UPDATETYPE_PTR_POSITION:
Packit Service 5a9772
		{
Packit Service 5a9772
			POINTER_POSITION_UPDATE* pointer_position = update_read_pointer_position(update, s);
Packit 1fb8d4
Packit Service 5a9772
			if (pointer_position)
Packit Service 5a9772
			{
Packit Service 5a9772
				rc = IFCALLRESULT(FALSE, pointer->PointerPosition, context, pointer_position);
Packit Service 5a9772
				free_pointer_position_update(context, pointer_position);
Packit 1fb8d4
			}
Packit Service 5a9772
		}
Packit Service 5a9772
		break;
Packit 1fb8d4
Packit 1fb8d4
		case FASTPATH_UPDATETYPE_COLOR:
Packit Service 5a9772
		{
Packit Service 5a9772
			POINTER_COLOR_UPDATE* pointer_color = update_read_pointer_color(update, s, 24);
Packit 1fb8d4
Packit Service 5a9772
			if (pointer_color)
Packit Service 5a9772
			{
Packit Service 5a9772
				rc = IFCALLRESULT(FALSE, pointer->PointerColor, context, pointer_color);
Packit Service 5a9772
				free_pointer_color_update(context, pointer_color);
Packit 1fb8d4
			}
Packit Service 5a9772
		}
Packit Service 5a9772
		break;
Packit 1fb8d4
Packit 1fb8d4
		case FASTPATH_UPDATETYPE_CACHED:
Packit Service 5a9772
		{
Packit Service 5a9772
			POINTER_CACHED_UPDATE* pointer_cached = update_read_pointer_cached(update, s);
Packit 1fb8d4
Packit Service 5a9772
			if (pointer_cached)
Packit Service 5a9772
			{
Packit Service 5a9772
				rc = IFCALLRESULT(FALSE, pointer->PointerCached, context, pointer_cached);
Packit Service 5a9772
				free_pointer_cached_update(context, pointer_cached);
Packit 1fb8d4
			}
Packit Service 5a9772
		}
Packit Service 5a9772
		break;
Packit 1fb8d4
Packit 1fb8d4
		case FASTPATH_UPDATETYPE_POINTER:
Packit Service 5a9772
		{
Packit Service 5a9772
			POINTER_NEW_UPDATE* pointer_new = update_read_pointer_new(update, s);
Packit 1fb8d4
Packit Service 5a9772
			if (pointer_new)
Packit Service 5a9772
			{
Packit Service 5a9772
				rc = IFCALLRESULT(FALSE, pointer->PointerNew, context, pointer_new);
Packit Service 5a9772
				free_pointer_new_update(context, pointer_new);
Packit 1fb8d4
			}
Packit Service 5a9772
		}
Packit Service 5a9772
		break;
Packit Service 5a9772
Packit Service 5a9772
		case FASTPATH_UPDATETYPE_LARGE_POINTER:
Packit Service 5a9772
		{
Packit Service 5a9772
			POINTER_LARGE_UPDATE* pointer_large = update_read_pointer_large(update, s);
Packit 1fb8d4
Packit Service 5a9772
			if (pointer_large)
Packit Service 5a9772
			{
Packit Service 5a9772
				rc = IFCALLRESULT(FALSE, pointer->PointerLarge, context, pointer_large);
Packit Service 5a9772
				free_pointer_large_update(context, pointer_large);
Packit Service 5a9772
			}
Packit Service 5a9772
		}
Packit Service 5a9772
		break;
Packit 1fb8d4
		default:
Packit 1fb8d4
			break;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	if (!rc)
Packit 1fb8d4
	{
Packit Service 5a9772
		WLog_ERR(TAG, "Fastpath update %s [%" PRIx8 "] failed, status %d",
Packit 1fb8d4
		         fastpath_update_to_string(updateCode), updateCode, status);
Packit 1fb8d4
		return -1;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	return status;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static int fastpath_recv_update_data(rdpFastPath* fastpath, wStream* s)
Packit 1fb8d4
{
Packit 1fb8d4
	int status;
Packit 1fb8d4
	UINT16 size;
Packit 1fb8d4
	rdpRdp* rdp;
Packit 1fb8d4
	int bulkStatus;
Packit 1fb8d4
	BYTE updateCode;
Packit 1fb8d4
	BYTE fragmentation;
Packit 1fb8d4
	BYTE compression;
Packit 1fb8d4
	BYTE compressionFlags;
Packit 1fb8d4
	UINT32 DstSize = 0;
Packit 1fb8d4
	BYTE* pDstData = NULL;
Packit 1fb8d4
	rdpTransport* transport;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !s)
Packit 1fb8d4
		return -1;
Packit 1fb8d4
Packit 1fb8d4
	status = 0;
Packit 1fb8d4
	rdp = fastpath->rdp;
Packit 1fb8d4
Packit 1fb8d4
	if (!rdp)
Packit 1fb8d4
		return -1;
Packit 1fb8d4
Packit 1fb8d4
	transport = fastpath->rdp->transport;
Packit 1fb8d4
Packit 1fb8d4
	if (!transport)
Packit 1fb8d4
		return -1;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath_read_update_header(s, &updateCode, &fragmentation, &compression))
Packit 1fb8d4
		return -1;
Packit 1fb8d4
Packit 1fb8d4
	if (compression == FASTPATH_OUTPUT_COMPRESSION_USED)
Packit 1fb8d4
	{
Packit 1fb8d4
		if (Stream_GetRemainingLength(s) < 1)
Packit 1fb8d4
			return -1;
Packit 1fb8d4
Packit 1fb8d4
		Stream_Read_UINT8(s, compressionFlags);
Packit 1fb8d4
	}
Packit 1fb8d4
	else
Packit 1fb8d4
		compressionFlags = 0;
Packit 1fb8d4
Packit 1fb8d4
	if (Stream_GetRemainingLength(s) < 2)
Packit 1fb8d4
		return -1;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Read_UINT16(s, size);
Packit 1fb8d4
Packit 1fb8d4
	if (Stream_GetRemainingLength(s) < size)
Packit 1fb8d4
	{
Packit 1fb8d4
		WLog_ERR(TAG, "Stream_GetRemainingLength() < size");
Packit 1fb8d4
		return -1;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit Service 5a9772
	bulkStatus =
Packit Service 5a9772
	    bulk_decompress(rdp->bulk, Stream_Pointer(s), size, &pDstData, &DstSize, compressionFlags);
Packit 1fb8d4
	Stream_Seek(s, size);
Packit 1fb8d4
Packit 1fb8d4
	if (bulkStatus < 0)
Packit 1fb8d4
	{
Packit 1fb8d4
		WLog_ERR(TAG, "bulk_decompress() failed");
Packit 1fb8d4
		return -1;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	if (!Stream_EnsureRemainingCapacity(fastpath->updateData, DstSize))
Packit 1fb8d4
		return -1;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Write(fastpath->updateData, pDstData, DstSize);
Packit 1fb8d4
Packit 1fb8d4
	if (fragmentation == FASTPATH_FRAGMENT_SINGLE)
Packit 1fb8d4
	{
Packit 1fb8d4
		if (fastpath->fragmentation != -1)
Packit 1fb8d4
		{
Packit 1fb8d4
			WLog_ERR(TAG, "Unexpected FASTPATH_FRAGMENT_SINGLE");
Packit 1fb8d4
			goto out_fail;
Packit 1fb8d4
		}
Packit 1fb8d4
Packit 1fb8d4
		Stream_SealLength(fastpath->updateData);
Packit 1fb8d4
		Stream_SetPosition(fastpath->updateData, 0);
Packit 1fb8d4
		status = fastpath_recv_update(fastpath, updateCode, fastpath->updateData);
Packit 1fb8d4
		Stream_SetPosition(fastpath->updateData, 0);
Packit 1fb8d4
Packit 1fb8d4
		if (status < 0)
Packit 1fb8d4
		{
Packit 1fb8d4
			WLog_ERR(TAG, "fastpath_recv_update() - %i", status);
Packit 1fb8d4
			goto out_fail;
Packit 1fb8d4
		}
Packit 1fb8d4
	}
Packit 1fb8d4
	else
Packit 1fb8d4
	{
Packit 1fb8d4
		const size_t totalSize = Stream_GetPosition(fastpath->updateData);
Packit 1fb8d4
Packit 1fb8d4
		if (totalSize > transport->settings->MultifragMaxRequestSize)
Packit 1fb8d4
		{
Packit Service 5a9772
			WLog_ERR(TAG, "Total size (%" PRIuz ") exceeds MultifragMaxRequestSize (%" PRIu32 ")",
Packit 1fb8d4
			         totalSize, transport->settings->MultifragMaxRequestSize);
Packit 1fb8d4
			goto out_fail;
Packit 1fb8d4
		}
Packit 1fb8d4
Packit 1fb8d4
		if (fragmentation == FASTPATH_FRAGMENT_FIRST)
Packit 1fb8d4
		{
Packit 1fb8d4
			if (fastpath->fragmentation != -1)
Packit 1fb8d4
			{
Packit 1fb8d4
				WLog_ERR(TAG, "fastpath_recv_update_data: Unexpected FASTPATH_FRAGMENT_FIRST");
Packit 1fb8d4
				goto out_fail;
Packit 1fb8d4
			}
Packit 1fb8d4
Packit 1fb8d4
			fastpath->fragmentation = FASTPATH_FRAGMENT_FIRST;
Packit 1fb8d4
		}
Packit 1fb8d4
		else if (fragmentation == FASTPATH_FRAGMENT_NEXT)
Packit 1fb8d4
		{
Packit 1fb8d4
			if ((fastpath->fragmentation != FASTPATH_FRAGMENT_FIRST) &&
Packit 1fb8d4
			    (fastpath->fragmentation != FASTPATH_FRAGMENT_NEXT))
Packit 1fb8d4
			{
Packit 1fb8d4
				WLog_ERR(TAG, "fastpath_recv_update_data: Unexpected FASTPATH_FRAGMENT_NEXT");
Packit 1fb8d4
				goto out_fail;
Packit 1fb8d4
			}
Packit 1fb8d4
Packit 1fb8d4
			fastpath->fragmentation = FASTPATH_FRAGMENT_NEXT;
Packit 1fb8d4
		}
Packit 1fb8d4
		else if (fragmentation == FASTPATH_FRAGMENT_LAST)
Packit 1fb8d4
		{
Packit 1fb8d4
			if ((fastpath->fragmentation != FASTPATH_FRAGMENT_FIRST) &&
Packit 1fb8d4
			    (fastpath->fragmentation != FASTPATH_FRAGMENT_NEXT))
Packit 1fb8d4
			{
Packit 1fb8d4
				WLog_ERR(TAG, "fastpath_recv_update_data: Unexpected FASTPATH_FRAGMENT_LAST");
Packit 1fb8d4
				goto out_fail;
Packit 1fb8d4
			}
Packit 1fb8d4
Packit 1fb8d4
			fastpath->fragmentation = -1;
Packit 1fb8d4
			Stream_SealLength(fastpath->updateData);
Packit 1fb8d4
			Stream_SetPosition(fastpath->updateData, 0);
Packit 1fb8d4
			status = fastpath_recv_update(fastpath, updateCode, fastpath->updateData);
Packit 1fb8d4
			Stream_SetPosition(fastpath->updateData, 0);
Packit 1fb8d4
Packit 1fb8d4
			if (status < 0)
Packit 1fb8d4
			{
Packit 1fb8d4
				WLog_ERR(TAG, "fastpath_recv_update_data: fastpath_recv_update() - %i", status);
Packit 1fb8d4
				goto out_fail;
Packit 1fb8d4
			}
Packit 1fb8d4
		}
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	return status;
Packit 1fb8d4
out_fail:
Packit 1fb8d4
	return -1;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
int fastpath_recv_updates(rdpFastPath* fastpath, wStream* s)
Packit 1fb8d4
{
Packit Service 5a9772
	int rc = -2;
Packit 1fb8d4
	rdpUpdate* update;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !fastpath->rdp || !fastpath->rdp->update || !s)
Packit 1fb8d4
		return -1;
Packit 1fb8d4
Packit 1fb8d4
	update = fastpath->rdp->update;
Packit 1fb8d4
Packit Service 5a9772
	if (!update_begin_paint(update))
Packit Service 5a9772
		goto fail;
Packit 1fb8d4
Packit 1fb8d4
	while (Stream_GetRemainingLength(s) >= 3)
Packit 1fb8d4
	{
Packit 1fb8d4
		if (fastpath_recv_update_data(fastpath, s) < 0)
Packit 1fb8d4
		{
Packit 1fb8d4
			WLog_ERR(TAG, "fastpath_recv_update_data() fail");
Packit Service 5a9772
			rc = -3;
Packit Service 5a9772
			goto fail;
Packit 1fb8d4
		}
Packit 1fb8d4
	}
Packit 1fb8d4
Packit Service 5a9772
	rc = 0;
Packit Service 5a9772
fail:
Packit Service 5a9772
Packit Service 5a9772
	if (!update_end_paint(update))
Packit 1fb8d4
		return -4;
Packit 1fb8d4
Packit Service 5a9772
	return rc;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static BOOL fastpath_read_input_event_header(wStream* s, BYTE* eventFlags, BYTE* eventCode)
Packit 1fb8d4
{
Packit 1fb8d4
	BYTE eventHeader;
Packit 1fb8d4
Packit 1fb8d4
	if (!s || !eventFlags || !eventCode)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	if (Stream_GetRemainingLength(s) < 1)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Read_UINT8(s, eventHeader); /* eventHeader (1 byte) */
Packit 1fb8d4
	*eventFlags = (eventHeader & 0x1F);
Packit 1fb8d4
	*eventCode = (eventHeader >> 5);
Packit 1fb8d4
	return TRUE;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static BOOL fastpath_recv_input_event_scancode(rdpFastPath* fastpath, wStream* s, BYTE eventFlags)
Packit 1fb8d4
{
Packit 1fb8d4
	rdpInput* input;
Packit 1fb8d4
	UINT16 flags;
Packit 1fb8d4
	UINT16 code;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !fastpath->rdp || !fastpath->rdp->input || !s)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	input = fastpath->rdp->input;
Packit 1fb8d4
Packit 1fb8d4
	if (Stream_GetRemainingLength(s) < 1)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Read_UINT8(s, code); /* keyCode (1 byte) */
Packit 1fb8d4
	flags = 0;
Packit 1fb8d4
Packit 1fb8d4
	if ((eventFlags & FASTPATH_INPUT_KBDFLAGS_RELEASE))
Packit 1fb8d4
		flags |= KBD_FLAGS_RELEASE;
Packit 1fb8d4
	else
Packit 1fb8d4
		flags |= KBD_FLAGS_DOWN;
Packit 1fb8d4
Packit 1fb8d4
	if ((eventFlags & FASTPATH_INPUT_KBDFLAGS_EXTENDED))
Packit 1fb8d4
		flags |= KBD_FLAGS_EXTENDED;
Packit 1fb8d4
Packit Service 5a9772
	if ((eventFlags & FASTPATH_INPUT_KBDFLAGS_PREFIX_E1))
Packit Service 5a9772
		flags |= KBD_FLAGS_EXTENDED1;
Packit Service 5a9772
Packit 1fb8d4
	return IFCALLRESULT(TRUE, input->KeyboardEvent, input, flags, code);
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static BOOL fastpath_recv_input_event_mouse(rdpFastPath* fastpath, wStream* s, BYTE eventFlags)
Packit 1fb8d4
{
Packit 1fb8d4
	rdpInput* input;
Packit 1fb8d4
	UINT16 pointerFlags;
Packit 1fb8d4
	UINT16 xPos;
Packit 1fb8d4
	UINT16 yPos;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !fastpath->rdp || !fastpath->rdp->input || !s)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	input = fastpath->rdp->input;
Packit 1fb8d4
Packit 1fb8d4
	if (Stream_GetRemainingLength(s) < 6)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Read_UINT16(s, pointerFlags); /* pointerFlags (2 bytes) */
Packit Service 5a9772
	Stream_Read_UINT16(s, xPos);         /* xPos (2 bytes) */
Packit Service 5a9772
	Stream_Read_UINT16(s, yPos);         /* yPos (2 bytes) */
Packit 1fb8d4
	return IFCALLRESULT(TRUE, input->MouseEvent, input, pointerFlags, xPos, yPos);
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static BOOL fastpath_recv_input_event_mousex(rdpFastPath* fastpath, wStream* s, BYTE eventFlags)
Packit 1fb8d4
{
Packit 1fb8d4
	rdpInput* input;
Packit 1fb8d4
	UINT16 pointerFlags;
Packit 1fb8d4
	UINT16 xPos;
Packit 1fb8d4
	UINT16 yPos;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !fastpath->rdp || !fastpath->rdp->input || !s)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	input = fastpath->rdp->input;
Packit 1fb8d4
Packit 1fb8d4
	if (Stream_GetRemainingLength(s) < 6)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Read_UINT16(s, pointerFlags); /* pointerFlags (2 bytes) */
Packit Service 5a9772
	Stream_Read_UINT16(s, xPos);         /* xPos (2 bytes) */
Packit Service 5a9772
	Stream_Read_UINT16(s, yPos);         /* yPos (2 bytes) */
Packit 1fb8d4
	return IFCALLRESULT(TRUE, input->ExtendedMouseEvent, input, pointerFlags, xPos, yPos);
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static BOOL fastpath_recv_input_event_sync(rdpFastPath* fastpath, wStream* s, BYTE eventFlags)
Packit 1fb8d4
{
Packit 1fb8d4
	rdpInput* input;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !fastpath->rdp || !fastpath->rdp->input || !s)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	input = fastpath->rdp->input;
Packit 1fb8d4
	return IFCALLRESULT(TRUE, input->SynchronizeEvent, input, eventFlags);
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static BOOL fastpath_recv_input_event_unicode(rdpFastPath* fastpath, wStream* s, BYTE eventFlags)
Packit 1fb8d4
{
Packit 1fb8d4
	UINT16 unicodeCode;
Packit 1fb8d4
	UINT16 flags;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !s)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	if (Stream_GetRemainingLength(s) < 2)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Read_UINT16(s, unicodeCode); /* unicodeCode (2 bytes) */
Packit 1fb8d4
	flags = 0;
Packit 1fb8d4
Packit 1fb8d4
	if ((eventFlags & FASTPATH_INPUT_KBDFLAGS_RELEASE))
Packit 1fb8d4
		flags |= KBD_FLAGS_RELEASE;
Packit 1fb8d4
	else
Packit 1fb8d4
		flags |= KBD_FLAGS_DOWN;
Packit 1fb8d4
Packit Service 5a9772
	return IFCALLRESULT(FALSE, fastpath->rdp->input->UnicodeKeyboardEvent, fastpath->rdp->input,
Packit Service 5a9772
	                    flags, unicodeCode);
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static BOOL fastpath_recv_input_event(rdpFastPath* fastpath, wStream* s)
Packit 1fb8d4
{
Packit 1fb8d4
	BYTE eventFlags;
Packit 1fb8d4
	BYTE eventCode;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !s)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath_read_input_event_header(s, &eventFlags, &eventCode))
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	switch (eventCode)
Packit 1fb8d4
	{
Packit 1fb8d4
		case FASTPATH_INPUT_EVENT_SCANCODE:
Packit 1fb8d4
			if (!fastpath_recv_input_event_scancode(fastpath, s, eventFlags))
Packit 1fb8d4
				return FALSE;
Packit 1fb8d4
Packit 1fb8d4
			break;
Packit 1fb8d4
Packit 1fb8d4
		case FASTPATH_INPUT_EVENT_MOUSE:
Packit 1fb8d4
			if (!fastpath_recv_input_event_mouse(fastpath, s, eventFlags))
Packit 1fb8d4
				return FALSE;
Packit 1fb8d4
Packit 1fb8d4
			break;
Packit 1fb8d4
Packit 1fb8d4
		case FASTPATH_INPUT_EVENT_MOUSEX:
Packit 1fb8d4
			if (!fastpath_recv_input_event_mousex(fastpath, s, eventFlags))
Packit 1fb8d4
				return FALSE;
Packit 1fb8d4
Packit 1fb8d4
			break;
Packit 1fb8d4
Packit 1fb8d4
		case FASTPATH_INPUT_EVENT_SYNC:
Packit 1fb8d4
			if (!fastpath_recv_input_event_sync(fastpath, s, eventFlags))
Packit 1fb8d4
				return FALSE;
Packit 1fb8d4
Packit 1fb8d4
			break;
Packit 1fb8d4
Packit 1fb8d4
		case FASTPATH_INPUT_EVENT_UNICODE:
Packit 1fb8d4
			if (!fastpath_recv_input_event_unicode(fastpath, s, eventFlags))
Packit 1fb8d4
				return FALSE;
Packit 1fb8d4
Packit 1fb8d4
			break;
Packit 1fb8d4
Packit 1fb8d4
		default:
Packit Service 5a9772
			WLog_ERR(TAG, "Unknown eventCode %" PRIu8 "", eventCode);
Packit 1fb8d4
			break;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	return TRUE;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
int fastpath_recv_inputs(rdpFastPath* fastpath, wStream* s)
Packit 1fb8d4
{
Packit 1fb8d4
	BYTE i;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !s)
Packit 1fb8d4
		return -1;
Packit 1fb8d4
Packit 1fb8d4
	if (fastpath->numberEvents == 0)
Packit 1fb8d4
	{
Packit 1fb8d4
		/**
Packit 1fb8d4
		 * If numberEvents is not provided in fpInputHeader, it will be provided
Packit 1fb8d4
		 * as one additional byte here.
Packit 1fb8d4
		 */
Packit 1fb8d4
		if (Stream_GetRemainingLength(s) < 1)
Packit 1fb8d4
			return -1;
Packit 1fb8d4
Packit 1fb8d4
		Stream_Read_UINT8(s, fastpath->numberEvents); /* eventHeader (1 byte) */
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	for (i = 0; i < fastpath->numberEvents; i++)
Packit 1fb8d4
	{
Packit 1fb8d4
		if (!fastpath_recv_input_event(fastpath, s))
Packit 1fb8d4
			return -1;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	return 0;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
static UINT32 fastpath_get_sec_bytes(rdpRdp* rdp)
Packit 1fb8d4
{
Packit 1fb8d4
	UINT32 sec_bytes;
Packit 1fb8d4
	sec_bytes = 0;
Packit 1fb8d4
Packit 1fb8d4
	if (!rdp)
Packit 1fb8d4
		return 0;
Packit 1fb8d4
Packit 1fb8d4
	if (rdp->do_crypt)
Packit 1fb8d4
	{
Packit 1fb8d4
		sec_bytes = 8;
Packit 1fb8d4
Packit 1fb8d4
		if (rdp->settings->EncryptionMethods == ENCRYPTION_METHOD_FIPS)
Packit 1fb8d4
			sec_bytes += 4;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	return sec_bytes;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
wStream* fastpath_input_pdu_init_header(rdpFastPath* fastpath)
Packit 1fb8d4
{
Packit 1fb8d4
	rdpRdp* rdp;
Packit 1fb8d4
	wStream* s;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !fastpath->rdp)
Packit 1fb8d4
		return NULL;
Packit 1fb8d4
Packit 1fb8d4
	rdp = fastpath->rdp;
Packit 1fb8d4
	s = transport_send_stream_init(rdp->transport, 256);
Packit 1fb8d4
Packit 1fb8d4
	if (!s)
Packit 1fb8d4
		return NULL;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Seek(s, 3); /* fpInputHeader, length1 and length2 */
Packit 1fb8d4
Packit 1fb8d4
	if (rdp->do_crypt)
Packit 1fb8d4
	{
Packit 1fb8d4
		rdp->sec_flags |= SEC_ENCRYPT;
Packit 1fb8d4
Packit 1fb8d4
		if (rdp->do_secure_checksum)
Packit 1fb8d4
			rdp->sec_flags |= SEC_SECURE_CHECKSUM;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	Stream_Seek(s, fastpath_get_sec_bytes(rdp));
Packit 1fb8d4
	return s;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
wStream* fastpath_input_pdu_init(rdpFastPath* fastpath, BYTE eventFlags, BYTE eventCode)
Packit 1fb8d4
{
Packit 1fb8d4
	wStream* s;
Packit 1fb8d4
	s = fastpath_input_pdu_init_header(fastpath);
Packit 1fb8d4
Packit 1fb8d4
	if (!s)
Packit 1fb8d4
		return NULL;
Packit 1fb8d4
Packit 1fb8d4
	Stream_Write_UINT8(s, eventFlags | (eventCode << 5)); /* eventHeader (1 byte) */
Packit 1fb8d4
	return s;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
BOOL fastpath_send_multiple_input_pdu(rdpFastPath* fastpath, wStream* s, int iNumEvents)
Packit 1fb8d4
{
Packit 1fb8d4
	BOOL rc = FALSE;
Packit 1fb8d4
	rdpRdp* rdp;
Packit 1fb8d4
	UINT16 length;
Packit 1fb8d4
	BYTE eventHeader;
Packit 1fb8d4
Packit 1fb8d4
	if (!s)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !fastpath->rdp)
Packit 1fb8d4
		goto fail;
Packit 1fb8d4
Packit 1fb8d4
	/*
Packit 1fb8d4
	 *  A maximum of 15 events are allowed per request
Packit 1fb8d4
	 *  if the optional numEvents field isn't used
Packit 1fb8d4
	 *  see MS-RDPBCGR 2.2.8.1.2 for details
Packit 1fb8d4
	 */
Packit 1fb8d4
	if (iNumEvents > 15)
Packit 1fb8d4
		goto fail;
Packit 1fb8d4
Packit 1fb8d4
	rdp = fastpath->rdp;
Packit 1fb8d4
	length = Stream_GetPosition(s);
Packit 1fb8d4
Packit 1fb8d4
	if (length >= (2 << 14))
Packit 1fb8d4
	{
Packit 1fb8d4
		WLog_ERR(TAG, "Maximum FastPath PDU length is 32767");
Packit 1fb8d4
		goto fail;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	eventHeader = FASTPATH_INPUT_ACTION_FASTPATH;
Packit 1fb8d4
	eventHeader |= (iNumEvents << 2); /* numberEvents */
Packit 1fb8d4
Packit 1fb8d4
	if (rdp->sec_flags & SEC_ENCRYPT)
Packit 1fb8d4
		eventHeader |= (FASTPATH_INPUT_ENCRYPTED << 6);
Packit 1fb8d4
Packit 1fb8d4
	if (rdp->sec_flags & SEC_SECURE_CHECKSUM)
Packit 1fb8d4
		eventHeader |= (FASTPATH_INPUT_SECURE_CHECKSUM << 6);
Packit 1fb8d4
Packit 1fb8d4
	Stream_SetPosition(s, 0);
Packit 1fb8d4
	Stream_Write_UINT8(s, eventHeader);
Packit 1fb8d4
	/* Write length later, RDP encryption might add a padding */
Packit 1fb8d4
	Stream_Seek(s, 2);
Packit 1fb8d4
Packit 1fb8d4
	if (rdp->sec_flags & SEC_ENCRYPT)
Packit 1fb8d4
	{
Packit 1fb8d4
		int sec_bytes = fastpath_get_sec_bytes(fastpath->rdp);
Packit 1fb8d4
		BYTE* fpInputEvents = Stream_Pointer(s) + sec_bytes;
Packit 1fb8d4
		UINT16 fpInputEvents_length = length - 3 - sec_bytes;
Packit 1fb8d4
Packit 1fb8d4
		if (rdp->settings->EncryptionMethods == ENCRYPTION_METHOD_FIPS)
Packit 1fb8d4
		{
Packit 1fb8d4
			BYTE pad;
Packit 1fb8d4
Packit 1fb8d4
			if ((pad = 8 - (fpInputEvents_length % 8)) == 8)
Packit 1fb8d4
				pad = 0;
Packit 1fb8d4
Packit 1fb8d4
			Stream_Write_UINT16(s, 0x10); /* length */
Packit Service 5a9772
			Stream_Write_UINT8(s, 0x1);   /* TSFIPS_VERSION 1*/
Packit Service 5a9772
			Stream_Write_UINT8(s, pad);   /* padding */
Packit 1fb8d4
Packit Service 5a9772
			if (!security_hmac_signature(fpInputEvents, fpInputEvents_length, Stream_Pointer(s),
Packit Service 5a9772
			                             rdp))
Packit 1fb8d4
				goto fail;
Packit 1fb8d4
Packit 1fb8d4
			if (pad)
Packit 1fb8d4
				memset(fpInputEvents + fpInputEvents_length, 0, pad);
Packit 1fb8d4
Packit 1fb8d4
			if (!security_fips_encrypt(fpInputEvents, fpInputEvents_length + pad, rdp))
Packit 1fb8d4
				goto fail;
Packit 1fb8d4
Packit 1fb8d4
			length += pad;
Packit 1fb8d4
		}
Packit 1fb8d4
		else
Packit 1fb8d4
		{
Packit 1fb8d4
			BOOL status;
Packit 1fb8d4
Packit 1fb8d4
			if (rdp->sec_flags & SEC_SECURE_CHECKSUM)
Packit Service 5a9772
				status = security_salted_mac_signature(rdp, fpInputEvents, fpInputEvents_length,
Packit Service 5a9772
				                                       TRUE, Stream_Pointer(s));
Packit 1fb8d4
			else
Packit Service 5a9772
				status = security_mac_signature(rdp, fpInputEvents, fpInputEvents_length,
Packit Service 5a9772
				                                Stream_Pointer(s));
Packit 1fb8d4
Packit 1fb8d4
			if (!status || !security_encrypt(fpInputEvents, fpInputEvents_length, rdp))
Packit 1fb8d4
				goto fail;
Packit 1fb8d4
		}
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	rdp->sec_flags = 0;
Packit 1fb8d4
	/*
Packit 1fb8d4
	 * We always encode length in two bytes, even though we could use
Packit 1fb8d4
	 * only one byte if length <= 0x7F. It is just easier that way,
Packit 1fb8d4
	 * because we can leave room for fixed-length header, store all
Packit 1fb8d4
	 * the data first and then store the header.
Packit 1fb8d4
	 */
Packit 1fb8d4
	Stream_SetPosition(s, 1);
Packit 1fb8d4
	Stream_Write_UINT16_BE(s, 0x8000 | length);
Packit 1fb8d4
	Stream_SetPosition(s, length);
Packit 1fb8d4
	Stream_SealLength(s);
Packit 1fb8d4
Packit 1fb8d4
	if (transport_write(fastpath->rdp->transport, s) < 0)
Packit 1fb8d4
		goto fail;
Packit 1fb8d4
Packit 1fb8d4
	rc = TRUE;
Packit 1fb8d4
fail:
Packit 1fb8d4
	Stream_Release(s);
Packit 1fb8d4
	return rc;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
BOOL fastpath_send_input_pdu(rdpFastPath* fastpath, wStream* s)
Packit 1fb8d4
{
Packit 1fb8d4
	return fastpath_send_multiple_input_pdu(fastpath, s, 1);
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
wStream* fastpath_update_pdu_init(rdpFastPath* fastpath)
Packit 1fb8d4
{
Packit 1fb8d4
	return transport_send_stream_init(fastpath->rdp->transport, FASTPATH_MAX_PACKET_SIZE);
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
wStream* fastpath_update_pdu_init_new(rdpFastPath* fastpath)
Packit 1fb8d4
{
Packit 1fb8d4
	wStream* s;
Packit 1fb8d4
	s = Stream_New(NULL, FASTPATH_MAX_PACKET_SIZE);
Packit 1fb8d4
	return s;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
BOOL fastpath_send_update_pdu(rdpFastPath* fastpath, BYTE updateCode, wStream* s,
Packit 1fb8d4
                              BOOL skipCompression)
Packit 1fb8d4
{
Packit 1fb8d4
	int fragment;
Packit 1fb8d4
	UINT16 maxLength;
Packit 1fb8d4
	UINT32 totalLength;
Packit 1fb8d4
	BOOL status = TRUE;
Packit 1fb8d4
	wStream* fs = NULL;
Packit 1fb8d4
	rdpSettings* settings;
Packit 1fb8d4
	rdpRdp* rdp;
Packit 1fb8d4
	UINT32 fpHeaderSize = 6;
Packit 1fb8d4
	UINT32 fpUpdatePduHeaderSize;
Packit 1fb8d4
	UINT32 fpUpdateHeaderSize;
Packit 1fb8d4
	UINT32 CompressionMaxSize;
Packit 1fb8d4
	FASTPATH_UPDATE_PDU_HEADER fpUpdatePduHeader = { 0 };
Packit 1fb8d4
	FASTPATH_UPDATE_HEADER fpUpdateHeader = { 0 };
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath || !fastpath->rdp || !fastpath->fs || !s)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	rdp = fastpath->rdp;
Packit 1fb8d4
	fs = fastpath->fs;
Packit 1fb8d4
	settings = rdp->settings;
Packit 1fb8d4
Packit 1fb8d4
	if (!settings)
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
Packit 1fb8d4
	maxLength = FASTPATH_MAX_PACKET_SIZE - 20;
Packit 1fb8d4
Packit 1fb8d4
	if (settings->CompressionEnabled && !skipCompression)
Packit 1fb8d4
	{
Packit 1fb8d4
		CompressionMaxSize = bulk_compression_max_size(rdp->bulk);
Packit 1fb8d4
		maxLength = (maxLength < CompressionMaxSize) ? maxLength : CompressionMaxSize;
Packit 1fb8d4
		maxLength -= 20;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	totalLength = Stream_GetPosition(s);
Packit 1fb8d4
	Stream_SetPosition(s, 0);
Packit 1fb8d4
Packit 1fb8d4
	/* check if fast path output is possible */
Packit 1fb8d4
	if (!settings->FastPathOutput)
Packit 1fb8d4
	{
Packit 1fb8d4
		WLog_ERR(TAG, "client does not support fast path output");
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	/* check if the client's fast path pdu buffer is large enough */
Packit 1fb8d4
	if (totalLength > settings->MultifragMaxRequestSize)
Packit 1fb8d4
	{
Packit 1fb8d4
		WLog_ERR(TAG,
Packit Service 5a9772
		         "fast path update size (%" PRIu32
Packit Service 5a9772
		         ") exceeds the client's maximum request size (%" PRIu32 ")",
Packit 1fb8d4
		         totalLength, settings->MultifragMaxRequestSize);
Packit 1fb8d4
		return FALSE;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	if (rdp->do_crypt)
Packit 1fb8d4
	{
Packit 1fb8d4
		rdp->sec_flags |= SEC_ENCRYPT;
Packit 1fb8d4
Packit 1fb8d4
		if (rdp->do_secure_checksum)
Packit 1fb8d4
			rdp->sec_flags |= SEC_SECURE_CHECKSUM;
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	for (fragment = 0; (totalLength > 0) || (fragment == 0); fragment++)
Packit 1fb8d4
	{
Packit 1fb8d4
		BYTE* pSrcData;
Packit 1fb8d4
		UINT32 SrcSize;
Packit 1fb8d4
		UINT32 DstSize = 0;
Packit 1fb8d4
		BYTE* pDstData = NULL;
Packit 1fb8d4
		UINT32 compressionFlags = 0;
Packit 1fb8d4
		BYTE pad = 0;
Packit 1fb8d4
		BYTE* pSignature = NULL;
Packit 1fb8d4
		fpUpdatePduHeader.action = 0;
Packit 1fb8d4
		fpUpdatePduHeader.secFlags = 0;
Packit 1fb8d4
		fpUpdateHeader.compression = 0;
Packit 1fb8d4
		fpUpdateHeader.compressionFlags = 0;
Packit 1fb8d4
		fpUpdateHeader.updateCode = updateCode;
Packit 1fb8d4
		fpUpdateHeader.size = (totalLength > maxLength) ? maxLength : totalLength;
Packit 1fb8d4
		pSrcData = pDstData = Stream_Pointer(s);
Packit 1fb8d4
		SrcSize = DstSize = fpUpdateHeader.size;
Packit 1fb8d4
Packit 1fb8d4
		if (rdp->sec_flags & SEC_ENCRYPT)
Packit 1fb8d4
			fpUpdatePduHeader.secFlags |= FASTPATH_OUTPUT_ENCRYPTED;
Packit 1fb8d4
Packit 1fb8d4
		if (rdp->sec_flags & SEC_SECURE_CHECKSUM)
Packit 1fb8d4
			fpUpdatePduHeader.secFlags |= FASTPATH_OUTPUT_SECURE_CHECKSUM;
Packit 1fb8d4
Packit 1fb8d4
		if (settings->CompressionEnabled && !skipCompression)
Packit 1fb8d4
		{
Packit Service 5a9772
			if (bulk_compress(rdp->bulk, pSrcData, SrcSize, &pDstData, &DstSize,
Packit Service 5a9772
			                  &compressionFlags) >= 0)
Packit 1fb8d4
			{
Packit 1fb8d4
				if (compressionFlags)
Packit 1fb8d4
				{
Packit 1fb8d4
					fpUpdateHeader.compressionFlags = compressionFlags;
Packit 1fb8d4
					fpUpdateHeader.compression = FASTPATH_OUTPUT_COMPRESSION_USED;
Packit 1fb8d4
				}
Packit 1fb8d4
			}
Packit 1fb8d4
		}
Packit 1fb8d4
Packit 1fb8d4
		if (!fpUpdateHeader.compression)
Packit 1fb8d4
		{
Packit 1fb8d4
			pDstData = Stream_Pointer(s);
Packit 1fb8d4
			DstSize = fpUpdateHeader.size;
Packit 1fb8d4
		}
Packit 1fb8d4
Packit 1fb8d4
		fpUpdateHeader.size = DstSize;
Packit 1fb8d4
		totalLength -= SrcSize;
Packit 1fb8d4
Packit 1fb8d4
		if (totalLength == 0)
Packit Service 5a9772
			fpUpdateHeader.fragmentation =
Packit Service 5a9772
			    (fragment == 0) ? FASTPATH_FRAGMENT_SINGLE : FASTPATH_FRAGMENT_LAST;
Packit 1fb8d4
		else
Packit Service 5a9772
			fpUpdateHeader.fragmentation =
Packit Service 5a9772
			    (fragment == 0) ? FASTPATH_FRAGMENT_FIRST : FASTPATH_FRAGMENT_NEXT;
Packit 1fb8d4
Packit 1fb8d4
		fpUpdateHeaderSize = fastpath_get_update_header_size(&fpUpdateHeader);
Packit 1fb8d4
		fpUpdatePduHeaderSize = fastpath_get_update_pdu_header_size(&fpUpdatePduHeader, rdp);
Packit 1fb8d4
		fpHeaderSize = fpUpdateHeaderSize + fpUpdatePduHeaderSize;
Packit 1fb8d4
Packit 1fb8d4
		if (rdp->sec_flags & SEC_ENCRYPT)
Packit 1fb8d4
		{
Packit 1fb8d4
			pSignature = Stream_Buffer(fs) + 3;
Packit 1fb8d4
Packit 1fb8d4
			if (rdp->settings->EncryptionMethods == ENCRYPTION_METHOD_FIPS)
Packit 1fb8d4
			{
Packit 1fb8d4
				pSignature += 4;
Packit 1fb8d4
Packit 1fb8d4
				if ((pad = 8 - ((DstSize + fpUpdateHeaderSize) % 8)) == 8)
Packit 1fb8d4
					pad = 0;
Packit 1fb8d4
Packit 1fb8d4
				fpUpdatePduHeader.fipsInformation[0] = 0x10;
Packit 1fb8d4
				fpUpdatePduHeader.fipsInformation[1] = 0x00;
Packit 1fb8d4
				fpUpdatePduHeader.fipsInformation[2] = 0x01;
Packit 1fb8d4
				fpUpdatePduHeader.fipsInformation[3] = pad;
Packit 1fb8d4
			}
Packit 1fb8d4
		}
Packit 1fb8d4
Packit 1fb8d4
		fpUpdatePduHeader.length = fpUpdateHeader.size + fpHeaderSize + pad;
Packit 1fb8d4
		Stream_SetPosition(fs, 0);
Packit 1fb8d4
		fastpath_write_update_pdu_header(fs, &fpUpdatePduHeader, rdp);
Packit 1fb8d4
		fastpath_write_update_header(fs, &fpUpdateHeader);
Packit 1fb8d4
		Stream_Write(fs, pDstData, DstSize);
Packit 1fb8d4
Packit 1fb8d4
		if (pad)
Packit 1fb8d4
			Stream_Zero(fs, pad);
Packit 1fb8d4
Packit 1fb8d4
		if (rdp->sec_flags & SEC_ENCRYPT)
Packit 1fb8d4
		{
Packit 1fb8d4
			UINT32 dataSize = fpUpdateHeaderSize + DstSize + pad;
Packit 1fb8d4
			BYTE* data = Stream_Pointer(fs) - dataSize;
Packit 1fb8d4
Packit 1fb8d4
			if (rdp->settings->EncryptionMethods == ENCRYPTION_METHOD_FIPS)
Packit 1fb8d4
			{
Packit 1fb8d4
				if (!security_hmac_signature(data, dataSize - pad, pSignature, rdp))
Packit 1fb8d4
					return FALSE;
Packit 1fb8d4
Packit 1fb8d4
				security_fips_encrypt(data, dataSize, rdp);
Packit 1fb8d4
			}
Packit 1fb8d4
			else
Packit 1fb8d4
			{
Packit 1fb8d4
				if (rdp->sec_flags & SEC_SECURE_CHECKSUM)
Packit 1fb8d4
					status = security_salted_mac_signature(rdp, data, dataSize, TRUE, pSignature);
Packit 1fb8d4
				else
Packit 1fb8d4
					status = security_mac_signature(rdp, data, dataSize, pSignature);
Packit 1fb8d4
Packit 1fb8d4
				if (!status || !security_encrypt(data, dataSize, rdp))
Packit 1fb8d4
					return FALSE;
Packit 1fb8d4
			}
Packit 1fb8d4
		}
Packit 1fb8d4
Packit 1fb8d4
		Stream_SealLength(fs);
Packit 1fb8d4
Packit 1fb8d4
		if (transport_write(rdp->transport, fs) < 0)
Packit 1fb8d4
		{
Packit 1fb8d4
			status = FALSE;
Packit 1fb8d4
			break;
Packit 1fb8d4
		}
Packit 1fb8d4
Packit 1fb8d4
		Stream_Seek(s, SrcSize);
Packit 1fb8d4
	}
Packit 1fb8d4
Packit 1fb8d4
	rdp->sec_flags = 0;
Packit 1fb8d4
	return status;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
rdpFastPath* fastpath_new(rdpRdp* rdp)
Packit 1fb8d4
{
Packit 1fb8d4
	rdpFastPath* fastpath;
Packit Service 5a9772
	fastpath = (rdpFastPath*)calloc(1, sizeof(rdpFastPath));
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath)
Packit 1fb8d4
		return NULL;
Packit 1fb8d4
Packit 1fb8d4
	fastpath->rdp = rdp;
Packit 1fb8d4
	fastpath->fragmentation = -1;
Packit 1fb8d4
	fastpath->fs = Stream_New(NULL, FASTPATH_MAX_PACKET_SIZE);
Packit 1fb8d4
	fastpath->updateData = Stream_New(NULL, FASTPATH_MAX_PACKET_SIZE);
Packit 1fb8d4
Packit 1fb8d4
	if (!fastpath->fs || !fastpath->updateData)
Packit 1fb8d4
		goto out_free;
Packit 1fb8d4
Packit 1fb8d4
	return fastpath;
Packit 1fb8d4
out_free:
Packit 1fb8d4
	fastpath_free(fastpath);
Packit 1fb8d4
	return NULL;
Packit 1fb8d4
}
Packit 1fb8d4
Packit 1fb8d4
void fastpath_free(rdpFastPath* fastpath)
Packit 1fb8d4
{
Packit 1fb8d4
	if (fastpath)
Packit 1fb8d4
	{
Packit 1fb8d4
		Stream_Free(fastpath->updateData, TRUE);
Packit 1fb8d4
		Stream_Free(fastpath->fs, TRUE);
Packit 1fb8d4
		free(fastpath);
Packit 1fb8d4
	}
Packit 1fb8d4
}