/* * aim_im.c * * The routines for sending/receiving Instant Messages. * * Note the term ICBM (Inter-Client Basic Message) which blankets * all types of genericly routed through-server messages. Within * the ICBM types (family 4), a channel is defined. Each channel * represents a different type of message. Channel 1 is used for * what would commonly be called an "instant message". Channel 2 * is used for negotiating "rendezvous". These transactions end in * something more complex happening, such as a chat invitation, or * a file transfer. * * In addition to the channel, every ICBM contains a cookie. For * standard IMs, these are only used for error messages. However, * the more complex rendezvous messages make suitably more complex * use of this field. * */ #define FAIM_INTERNAL #include /* * Takes a msghdr (and a length) and returns a client type * code. Note that this is *only a guess* and has a low likelihood * of actually being accurate. * * Its based on experimental data, with the help of Eric Warmenhoven * who seems to have collected a wide variety of different AIM clients. * * * Heres the current collection: * 0501 0003 0101 0101 01 AOL Mobile Communicator, WinAIM 1.0.414 * 0501 0003 0101 0201 01 WinAIM 2.0.847, 2.1.1187, 3.0.1464, * 4.3.2229, 4.4.2286 * 0501 0004 0101 0102 0101 WinAIM 4.1.2010, libfaim (right here) * 0501 0001 0101 01 AOL v6.0, CompuServe 2000 v6.0, any * TOC client * * Note that in this function, only the feature bytes are tested, since * the rest will always be the same. * */ faim_export fu16_t aim_fingerprintclient(fu8_t *msghdr, int len) { static const struct { fu16_t clientid; int len; fu8_t data[10]; } fingerprints[] = { /* AOL Mobile Communicator, WinAIM 1.0.414 */ { AIM_CLIENTTYPE_MC, 3, {0x01, 0x01, 0x01}}, /* WinAIM 2.0.847, 2.1.1187, 3.0.1464, 4.3.2229, 4.4.2286 */ { AIM_CLIENTTYPE_WINAIM, 3, {0x01, 0x01, 0x02}}, /* WinAIM 4.1.2010, libfaim */ { AIM_CLIENTTYPE_WINAIM41, 4, {0x01, 0x01, 0x01, 0x02}}, /* AOL v6.0, CompuServe 2000 v6.0, any TOC client */ { AIM_CLIENTTYPE_AOL_TOC, 1, {0x01}}, { 0, 0} }; int i; if (!msghdr || (len <= 0)) return AIM_CLIENTTYPE_UNKNOWN; for (i = 0; fingerprints[i].len; i++) { if (fingerprints[i].len != len) continue; if (memcmp(fingerprints[i].data, msghdr, fingerprints[i].len) == 0) return fingerprints[i].clientid; } return AIM_CLIENTTYPE_UNKNOWN; } /* This should be endian-safe now... but who knows... */ faim_export fu16_t aim_iconsum(const fu8_t *buf, int buflen) { fu32_t sum; int i; for (i = 0, sum = 0; i < buflen; i += 2) sum += (buf[i+1] << 8) + buf[i]; sum = ((sum & 0xffff0000) >> 16) + (sum & 0x0000ffff); return sum & 0xffff; } /* * Send an ICBM (instant message). * * * Possible flags: * AIM_IMFLAGS_AWAY -- Marks the message as an autoresponse * AIM_IMFLAGS_ACK -- Requests that the server send an ack * when the message is received (of type 0x0004/0x000c) * AIM_IMFLAGS_UNICODE--Instead of ASCII7, the passed message is * made up of UNICODE duples. If you set * this, you'd better be damn sure you know * what you're doing. * AIM_IMFLAGS_ISO_8859_1 -- The message contains the ASCII8 subset * known as ISO-8859-1. * * Generally, you should use the lowest encoding possible to send * your message. If you only use basic punctuation and the generic * Latin alphabet, use ASCII7 (no flags). If you happen to use non-ASCII7 * characters, but they are all clearly defined in ISO-8859-1, then * use that. Keep in mind that not all characters in the PC ASCII8 * character set are defined in the ISO standard. For those cases (most * notably when the (r) symbol is used), you must use the full UNICODE * encoding for your message. In UNICODE mode, _all_ characters must * occupy 16bits, including ones that are not special. (Remember that * the first 128 UNICODE symbols are equivelent to ASCII7, however they * must be prefixed with a zero high order byte.) * * I strongly discourage the use of UNICODE mode, mainly because none * of the clients I use can parse those messages (and besides that, * wchars are difficult and non-portable to handle in most UNIX environments). * If you really need to include special characters, use the HTML UNICODE * entities. These are of the form ߪ where 2026 is the hex * representation of the UNICODE index (in this case, UNICODE * "Horizontal Ellipsis", or 133 in in ASCII8). * * Implementation note: Since this is one of the most-used functions * in all of libfaim, it is written with performance in mind. As such, * it is not as clear as it could be in respect to how this message is * supposed to be layed out. Most obviously, tlvlists should be used * instead of writing out the bytes manually. * * XXX support multipart * */ faim_export int aim_send_im_ext(aim_session_t *sess, aim_conn_t *conn, struct aim_sendimext_args *args) { int i; aim_frame_t *fr; aim_snacid_t snacid; if (!sess || !conn || !args) return -EINVAL; if (!args->msg || (args->msglen <= 0)) return -EINVAL; if (args->msglen >= MAXMSGLEN) return -E2BIG; if (!(fr = aim_tx_new(sess, conn, AIM_FRAMETYPE_FLAP, 0x02, args->msglen+512))) return -ENOMEM; /* XXX should be optional */ snacid = aim_cachesnac(sess, 0x0004, 0x0006, 0x0000, args->destsn, strlen(args->destsn)+1); aim_putsnac(&fr->data, 0x0004, 0x0006, 0x0000, snacid); /* * Generate a random message cookie * * We could cache these like we do SNAC IDs. (In fact, it * might be a good idea.) In the message error functions, * the 8byte message cookie is returned as well as the * SNAC ID. * */ for (i = 0; i < 8; i++) aimbs_put8(&fr->data, (fu8_t) rand()); /* * Channel ID */ aimbs_put16(&fr->data, 0x0001); /* * Destination SN (prepended with byte length) */ aimbs_put8(&fr->data, strlen(args->destsn)); aimbs_putraw(&fr->data, args->destsn, strlen(args->destsn)); /* * metaTLV start. */ aimbs_put16(&fr->data, 0x0002); aimbs_put16(&fr->data, args->msglen + 0x10); /* * Flag data / ICBM Parameters? * * I don't know what these are... * */ aimbs_put8(&fr->data, 0x05); aimbs_put8(&fr->data, 0x01); /* number of bytes to follow */ aimbs_put16(&fr->data, 0x0004); aimbs_put8(&fr->data, 0x01); aimbs_put8(&fr->data, 0x01); aimbs_put8(&fr->data, 0x01); aimbs_put8(&fr->data, 0x02); aimbs_put16(&fr->data, 0x0101); /* * Message block length. */ aimbs_put16(&fr->data, args->msglen + 0x04); /* * Character set. */ if (args->flags & AIM_IMFLAGS_UNICODE) aimbs_put16(&fr->data, 0x0002); else if (args->flags & AIM_IMFLAGS_ISO_8859_1) aimbs_put16(&fr->data, 0x0003); else aimbs_put16(&fr->data, 0x0000); aimbs_put16(&fr->data, 0x0000); /* * Message. Not terminated. */ aimbs_putraw(&fr->data, args->msg, args->msglen); /* * Set the Request Acknowledge flag. */ if (args->flags & AIM_IMFLAGS_ACK) { aimbs_put16(&fr->data, 0x0003); aimbs_put16(&fr->data, 0x0000); } /* * Set the Autoresponse flag. */ if (args->flags & AIM_IMFLAGS_AWAY) { aimbs_put16(&fr->data, 0x0004); aimbs_put16(&fr->data, 0x0000); } /* * Set the Buddy Icon Requested flag. */ if (args->flags & AIM_IMFLAGS_BUDDYREQ) { aimbs_put16(&fr->data, 0x0009); aimbs_put16(&fr->data, 0x0000); } /* * Set the I HAVE A REALLY PURTY ICON flag. */ if (args->flags & AIM_IMFLAGS_HASICON) { aimbs_put16(&fr->data, 0x0009); aimbs_put16(&fr->data, 0x000c); aimbs_put32(&fr->data, args->iconlen); aimbs_put16(&fr->data, 0x0001); /* XXX is this right?! */ aimbs_put16(&fr->data, args->iconsum); aimbs_put32(&fr->data, args->iconstamp); } aim_tx_enqueue(sess, fr); #if 1 /* XXX do this with autoconf or something... */ aim_cleansnacs(sess, 60); /* clean out all SNACs over 60sec old */ #endif return 0; } /* * Simple wrapper for aim_send_im_ext() * * You cannot use aim_send_im if you need the HASICON flag. You must * use aim_send_im_ext directly for that. * * aim_send_im also cannot be used if you require UNICODE messages, because * that requires an explicit message length. Use aim_send_im_ext(). * */ faim_export int aim_send_im(aim_session_t *sess, aim_conn_t *conn, const char *destsn, fu16_t flags, const char *msg) { struct aim_sendimext_args args; args.destsn = destsn; args.flags = flags; args.msg = msg; args.msglen = strlen(msg); return aim_send_im_ext(sess, conn, &args); } /* * This is also performance sensative. (If you can believe it...) * */ faim_export int aim_send_icon(aim_session_t *sess, aim_conn_t *conn, const char *sn, const fu8_t *icon, int iconlen, time_t stamp, fu16_t iconsum) { int i; fu8_t ck[8]; aim_frame_t *fr; aim_snacid_t snacid; if (!sess || !conn || !sn || !icon || (iconlen <= 0) || (iconlen >= MAXICONLEN)) return -EINVAL; if (conn->type != AIM_CONN_TYPE_BOS) return -EINVAL; for (i = 0; i < 8; i++) aimutil_put8(ck+i, (fu8_t) rand()); if (!(fr = aim_tx_new(sess, conn, AIM_FRAMETYPE_FLAP, 0x02, 10+8+2+1+strlen(sn)+2+2+2+8+16+2+2+2+2+2+2+2+4+4+4+iconlen+strlen(AIM_ICONIDENT)+2+2))) return -ENOMEM; snacid = aim_cachesnac(sess, 0x0004, 0x0006, 0x0000, NULL, 0); aim_putsnac(&fr->data, 0x0004, 0x0006, 0x0000, snacid); /* * Cookie */ aimbs_putraw(&fr->data, ck, 8); /* * Channel (2) */ aimbs_put16(&fr->data, 0x0002); /* * Dest sn */ aimbs_put8(&fr->data, strlen(sn)); aimbs_putraw(&fr->data, sn, strlen(sn)); /* * TLV t(0005) * * Encompasses everything below. */ aimbs_put16(&fr->data, 0x0005); aimbs_put16(&fr->data, 2+8+16+6+4+4+iconlen+4+4+4+strlen(AIM_ICONIDENT)); aimbs_put16(&fr->data, 0x0000); aimbs_putraw(&fr->data, ck, 8); aim_putcap(&fr->data, AIM_CAPS_BUDDYICON); /* TLV t(000a) */ aimbs_put16(&fr->data, 0x000a); aimbs_put16(&fr->data, 0x0002); aimbs_put16(&fr->data, 0x0001); /* TLV t(000f) */ aimbs_put16(&fr->data, 0x000f); aimbs_put16(&fr->data, 0x0000); /* TLV t(2711) */ aimbs_put16(&fr->data, 0x2711); aimbs_put16(&fr->data, 4+4+4+iconlen+strlen(AIM_ICONIDENT)); aimbs_put16(&fr->data, 0x0000); /* XXX is this right?! */ aimbs_put16(&fr->data, iconsum); aimbs_put32(&fr->data, iconlen); aimbs_put32(&fr->data, stamp); aimbs_putraw(&fr->data, icon, iconlen); aimbs_putraw(&fr->data, AIM_ICONIDENT, strlen(AIM_ICONIDENT)); /* TLV t(0003) */ aimbs_put16(&fr->data, 0x0003); aimbs_put16(&fr->data, 0x0000); aim_tx_enqueue(sess, fr); return 0; } static int outgoingim(aim_session_t *sess, aim_module_t *mod, aim_frame_t *rx, aim_modsnac_t *snac, aim_bstream_t *bs) { int i, ret = 0; aim_rxcallback_t userfunc; fu8_t cookie[8]; fu16_t channel; aim_tlvlist_t *tlvlist; char *sn; int snlen; fu16_t icbmflags = 0; fu8_t flag1 = 0, flag2 = 0; fu8_t *msg = NULL; aim_tlv_t *msgblock; /* ICBM Cookie. */ for (i = 0; i < 8; i++) cookie[i] = aimbs_get8(bs); /* Channel ID */ channel = aimbs_get16(bs); if (channel != 0x01) { faimdprintf(sess, 0, "icbm: ICBM recieved on unsupported channel. Ignoring. (chan = %04x)\n", channel); return 0; } snlen = aimbs_get8(bs); sn = aimbs_getstr(bs, snlen); tlvlist = aim_readtlvchain(bs); if (aim_gettlv(tlvlist, 0x0003, 1)) icbmflags |= AIM_IMFLAGS_ACK; if (aim_gettlv(tlvlist, 0x0004, 1)) icbmflags |= AIM_IMFLAGS_AWAY; if ((msgblock = aim_gettlv(tlvlist, 0x0002, 1))) { aim_bstream_t mbs; int featurelen, msglen; aim_bstream_init(&mbs, msgblock->value, msgblock->length); aimbs_get8(&mbs); aimbs_get8(&mbs); for (featurelen = aimbs_get16(&mbs); featurelen; featurelen--) aimbs_get8(&mbs); aimbs_get8(&mbs); aimbs_get8(&mbs); msglen = aimbs_get16(&mbs) - 4; /* final block length */ flag1 = aimbs_get16(&mbs); flag2 = aimbs_get16(&mbs); msg = aimbs_getstr(&mbs, msglen); } if ((userfunc = aim_callhandler(sess, rx->conn, snac->family, snac->subtype))) ret = userfunc(sess, rx, channel, sn, msg, icbmflags, flag1, flag2); free(sn); aim_freetlvchain(&tlvlist); return ret; } /* * * This should use tlvlists, but doesn't for performance reasons. * * XXX support multipart IMs: * * 0004 0007 0000 8f08 d295 * 0031 6520 3b7b f9fd * 0001 * 06 XXXX XXXX XXXX * 0000 * 0004 * 0001 0002 0004 * 0010 0004 0000 01a3 * 0002 0004 3ab6 94fa * 0003 0004 3b7b f85a * 0002 003c * 0501 0001 01 * 0101 000a 0000 0000 3c48 544d 4c3e ASCII part * ISO-8859 part: * 0101 0016 0003 0000 6c6b 7364 6a6b 6c6a 676c a56b 3b73 646a 6b6a * 0101 000b 0000 0000 3c2f 4854 4d4c 3e another ASCII part * */ static int incomingim_ch1(aim_session_t *sess, aim_module_t *mod, aim_frame_t *rx, aim_modsnac_t *snac, fu16_t channel, struct aim_userinfo_s *userinfo, aim_bstream_t *bs, fu8_t *cookie) { fu16_t type, length; aim_rxcallback_t userfunc; int ret = 0; struct aim_incomingim_ch1_args args; int endpos; memset(&args, 0, sizeof(args)); /* * This used to be done using tlvchains. For performance reasons, * I've changed it to process the TLVs in-place. This avoids lots * of per-IM memory allocations. */ while (aim_bstream_empty(bs)) { type = aimbs_get16(bs); length = aimbs_get16(bs); endpos = aim_bstream_curpos(bs) + length; if (type == 0x0002) { /* Message Block */ fu16_t featureslen; int z; /* * This TLV consists of the following: * - 0501 -- Unknown * - Features: Don't know how to interpret these * - 0101 -- Unknown * - Message * */ aimbs_get8(bs); /* 05 */ aimbs_get8(bs); /* 01 */ featureslen = aimbs_get16(bs); for (z = 0, args.finlen = 0; z < featureslen; z++) { fu8_t tmp; tmp = aimbs_get8(bs); if (z < sizeof(args.fingerprint)) { args.fingerprint[z] = tmp; args.finlen++; } } aimbs_get8(bs); /* 01 */ aimbs_get8(bs); /* 01 */ /* Message string length, including flag words. */ args.msglen = aimbs_get16(bs); /* Flag words. */ args.flag1 = aimbs_get16(bs); if (args.flag1 == 0x0000) ; /* ASCII */ else if (args.flag1 == 0x0002) args.icbmflags |= AIM_IMFLAGS_UNICODE; else if (args.flag1 == 0x0003) args.icbmflags |= AIM_IMFLAGS_ISO_8859_1; else if (args.flag1 == 0xffff) ; /* no encoding (yeep!) */ args.flag2 = aimbs_get16(bs); if (args.flag2 == 0x0000) ; /* standard subencoding? */ else if (args.flag2 == 0x000b) args.icbmflags |= AIM_IMFLAGS_SUBENC_MACINTOSH; else if (args.flag2 == 0xffff) ; /* no subencoding */ /* XXX this isn't really necesary... */ if ( ((args.flag1 != 0x0000) && (args.flag1 != 0x0002) && (args.flag1 != 0x0003) && (args.flag1 != 0xffff)) || ((args.flag2 != 0x0000) && (args.flag2 != 0x000b) && (args.flag2 != 0xffff))) { faimdprintf(sess, 0, "icbm: **warning: encoding flags are being used! {%04x, %04x}\n", args.flag1, args.flag2); } /* Message. */ args.msglen -= 4; if (args.icbmflags & AIM_IMFLAGS_UNICODE) { fu8_t *umsg; /* Can't use getstr because of wide null */ umsg = aimbs_getraw(bs, args.msglen); args.msg = malloc(args.msglen+2); memcpy(args.msg, umsg, args.msglen); args.msg[args.msglen] = '\0'; /* wide NULL */ args.msg[args.msglen+1] = '\0'; free(umsg); } else args.msg = aimbs_getstr(bs, args.msglen); } else if (type == 0x0003) { /* Server Ack Requested */ args.icbmflags |= AIM_IMFLAGS_ACK; } else if (type == 0x0004) { /* Message is Auto Response */ args.icbmflags |= AIM_IMFLAGS_AWAY; } else if (type == 0x0008) { /* I-HAVE-A-REALLY-PURTY-ICON Flag */ args.iconchecksum = aimbs_get32(bs); args.iconlength = aimbs_get32(bs); args.iconstamp = aimbs_get32(bs); args.icbmflags |= AIM_IMFLAGS_HASICON; } else if (type == 0x0009) { args.icbmflags |= AIM_IMFLAGS_BUDDYREQ; } else if (type == 0x0017) { args.extdatalen = length; args.extdata = aimbs_getraw(bs, args.extdatalen); } else { faimdprintf(sess, 0, "incomingim_ch1: unknown TLV 0x%04x (len %d)\n", type, length); } /* * This is here to protect ourselves from ourselves. That * is, if something above doesn't completly parse its value * section, or, worse, overparses it, this will set the * stream where it needs to be in order to land on the next * TLV when the loop continues. * */ aim_bstream_setpos(bs, endpos); } if ((userfunc = aim_callhandler(sess, rx->conn, snac->family, snac->subtype))) ret = userfunc(sess, rx, channel, userinfo, &args); free(args.extdata); free(args.msg); return ret; } /* XXX Ugh. I think its obvious. */ static int incomingim_ch2(aim_session_t *sess, aim_module_t *mod, aim_frame_t *rx, aim_modsnac_t *snac, fu16_t channel, struct aim_userinfo_s *userinfo, aim_tlvlist_t *tlvlist, fu8_t *cookie) { aim_rxcallback_t userfunc; aim_tlv_t *block1; aim_tlvlist_t *list2; int ret = 0; struct aim_incomingim_ch2_args args; aim_bstream_t bbs; fu8_t *cookie2; memset(&args, 0, sizeof(args)); /* * There's another block of TLVs embedded in the type 5 here. */ if (!(block1 = aim_gettlv(tlvlist, 0x0005, 1)) || !block1->value) { faimdprintf(sess, 0, "no tlv 0x0005 in rendezvous transaction!\n"); return 0; } aim_bstream_init(&bbs, block1->value, block1->length); /* * First two bytes represent the status of the connection. * * 0 is a request, 2 is an accept */ args.status = aimbs_get16(&bbs); /* * Next comes the cookie. Should match the ICBM cookie. */ cookie2 = aimbs_getraw(&bbs, 8); if (memcmp(cookie, cookie2, 8) != 0) faimdprintf(sess, 0, "rend: warning cookies don't match!\n"); free(cookie2); /* * The next 16bytes are a capability block so we can * identify what type of rendezvous this is. * * Thanks to Eric Warmenhoven (of GAIM) * for pointing some of this out to me. In fact, a lot of * the client-to-client info comes from the work of the GAIM * developers. Thanks! * * Read off one capability string and we should have it ID'd. * */ if ((args.reqclass = aim_getcap(sess, &bbs, 0x10)) == 0x0000) { faimdprintf(sess, 0, "rend: no ID block\n"); return 0; } /* * What follows may be TLVs or nothing, depending on the * purpose of the message. * * Ack packets for instance have nothing more to them. */ list2 = aim_readtlvchain(&bbs); if (!list2 || ((args.reqclass != AIM_CAPS_IMIMAGE) && !(aim_gettlv(list2, 0x2711, 1)))) { aim_msgcookie_t *cook; int type; type = aim_msgcookie_gettype(args.reqclass); /* XXX: fix this shitty code */ if ((cook = aim_checkcookie(sess, cookie, type)) == NULL) { faimdprintf(sess, 0, "non-data rendezvous thats not in cache (type %d)\n", type); aim_freetlvchain(&list2); return 1; } if (cook->type == AIM_COOKIETYPE_OFTGET) { struct aim_filetransfer_priv *ft; if (cook->data) { int errorcode = -1; /* XXX shouldnt this be 0? */ ft = (struct aim_filetransfer_priv *)cook->data; if (args.status != 0x0002) { if (aim_gettlv(list2, 0x000b, 1)) errorcode = aim_gettlv16(list2, 0x000b, 1); /* XXX this should make it up to the client, you know.. */ if (errorcode) faimdprintf(sess, 0, "transfer from %s (%s) for %s cancelled (error code %d)\n", ft->sn, ft->ip, ft->fh.name, errorcode); } /* args.status != 0x0002 */ } else { faimdprintf(sess, 0, "no data attached to file transfer\n"); } /* !cook->data */ } else if (cook->type == AIM_CAPS_VOICE) { faimdprintf(sess, 0, "voice request cancelled\n"); } else { faimdprintf(sess, 0, "unknown cookie cache type %d\n", cook->type); } aim_freetlvchain(&list2); return 1; } /* * The rest of the handling depends on what type it is. */ if (args.reqclass & AIM_CAPS_BUDDYICON) { aim_tlv_t *miscinfo; aim_bstream_t tbs; miscinfo = aim_gettlv(list2, 0x2711, 1); aim_bstream_init(&tbs, miscinfo->value, miscinfo->length); args.info.icon.checksum = aimbs_get32(&tbs); args.info.icon.length = aimbs_get32(&tbs); args.info.icon.timestamp = aimbs_get32(&tbs); args.info.icon.icon = aimbs_getraw(&tbs, args.info.icon.length); if ((userfunc = aim_callhandler(sess, rx->conn, snac->family, snac->subtype))) ret = userfunc(sess, rx, channel, userinfo, &args); free(args.info.icon.icon); } else if (args.reqclass & AIM_CAPS_VOICE) { aim_msgcookie_t *cachedcook; faimdprintf(sess, 1, "rend: voice!\n"); if(!(cachedcook = (aim_msgcookie_t*)calloc(1, sizeof(aim_msgcookie_t)))) { aim_freetlvchain(&list2); return 0; } memcpy(cachedcook->cookie, cookie, 8); cachedcook->type = AIM_COOKIETYPE_OFTVOICE; cachedcook->data = NULL; if (aim_cachecookie(sess, cachedcook) == -1) faimdprintf(sess, 0, "ERROR caching message cookie\n"); /* XXX: implement all this */ if ((userfunc = aim_callhandler(sess, rx->conn, snac->family, snac->subtype))) ret = userfunc(sess, rx, channel, userinfo, &args); } else if (args.reqclass & AIM_CAPS_IMIMAGE) { char ip[30]; struct aim_directim_priv *priv; memset(ip, 0, sizeof(ip)); if (aim_gettlv(list2, 0x0003, 1) && aim_gettlv(list2, 0x0005, 1)) { aim_tlv_t *iptlv, *porttlv; iptlv = aim_gettlv(list2, 0x0003, 1); porttlv = aim_gettlv(list2, 0x0005, 1); snprintf(ip, 30, "%d.%d.%d.%d:%d", aimutil_get8(iptlv->value+0), aimutil_get8(iptlv->value+1), aimutil_get8(iptlv->value+2), aimutil_get8(iptlv->value+3), 4443 /*aimutil_get16(porttlv->value)*/); } faimdprintf(sess, 1, "rend: directIM request from %s (%s)\n", userinfo->sn, ip); /* * XXX: there are a couple of different request packets for * different things */ args.info.directim = priv = (struct aim_directim_priv *)calloc(1, sizeof(struct aim_directim_priv)); /* XXX error */ memcpy(priv->ip, ip, sizeof(priv->ip)); memcpy(priv->sn, userinfo->sn, sizeof(priv->sn)); memcpy(priv->cookie, cookie, sizeof(priv->cookie)); if ((userfunc = aim_callhandler(sess, rx->conn, snac->family, snac->subtype))) ret = userfunc(sess, rx, channel, userinfo, &args); } else if (args.reqclass & AIM_CAPS_CHAT) { aim_tlv_t *miscinfo; aim_bstream_t tbs; miscinfo = aim_gettlv(list2, 0x2711, 1); aim_bstream_init(&tbs, miscinfo->value, miscinfo->length); aim_chat_readroominfo(&tbs, &args.info.chat.roominfo); if (aim_gettlv(list2, 0x000c, 1)) args.info.chat.msg = aim_gettlv_str(list2, 0x000c, 1); if (aim_gettlv(list2, 0x000d, 1)) args.info.chat.encoding = aim_gettlv_str(list2, 0x000d, 1); if (aim_gettlv(list2, 0x000e, 1)) args.info.chat.lang = aim_gettlv_str(list2, 0x000e, 1); if ((userfunc = aim_callhandler(sess, rx->conn, snac->family, snac->subtype))) ret = userfunc(sess, rx, channel, userinfo, &args); free(args.info.chat.roominfo.name); free(args.info.chat.msg); free(args.info.chat.encoding); free(args.info.chat.lang); } else if (args.reqclass & AIM_CAPS_GETFILE) { char ip[30]; aim_msgcookie_t *cachedcook; aim_tlv_t *miscinfo; aim_tlv_t *iptlv, *porttlv; memset(ip, 0, 30); if (!(cachedcook = calloc(1, sizeof(aim_msgcookie_t)))) { aim_freetlvchain(&list2); return 0; } if (!(miscinfo = aim_gettlv(list2, 0x2711, 1)) || !(iptlv = aim_gettlv(list2, 0x0003, 1)) || !(porttlv = aim_gettlv(list2, 0x0005, 1))) { faimdprintf(sess, 0, "rend: badly damaged file get request from %s...\n", userinfo->sn); aim_cookie_free(sess, cachedcook); aim_freetlvchain(&list2); return 0; } snprintf(ip, 30, "%d.%d.%d.%d:%d", aimutil_get8(iptlv->value+0), aimutil_get8(iptlv->value+1), aimutil_get8(iptlv->value+2), aimutil_get8(iptlv->value+3), aimutil_get16(porttlv->value)); faimdprintf(sess, 0, "rend: file get request from %s (%s)\n", userinfo->sn, ip); args.info.getfile.ip = ip; args.info.getfile.cookie = cookie; if ((userfunc = aim_callhandler(sess, rx->conn, snac->family, snac->subtype))) ret = userfunc(sess, rx, channel, userinfo, &args); } else if (args.reqclass & AIM_CAPS_SENDFILE) { #if 0 char ip[30]; aim_msgcookie_t *cachedcook; aim_tlv_t *miscinfo; aim_tlv_t *iptlv, *porttlv; memset(ip, 0, 30); if (!(cachedcook = calloc(1, sizeof(aim_msgcookie_t)))) { aim_freetlvchain(&list2); return 0; } if (!(miscinfo = aim_gettlv(list2, 0x2711, 1)) || !(iptlv = aim_gettlv(list2, 0x0003, 1)) || !(porttlv = aim_gettlv(list2, 0x0005, 1))) { faimdprintf(sess, 0, "rend: badly damaged file get request from %s...\n", userinfo->sn); aim_cookie_free(sess, cachedcook); aim_freetlvchain(&list2); return 0; } snprintf(ip, 30, "%d.%d.%d.%d:%d", aimutil_get8(iptlv->value+0), aimutil_get8(iptlv->value+1), aimutil_get8(iptlv->value+2), aimutil_get8(iptlv->value+3), aimutil_get16(porttlv->value)); if (aim_gettlv(list2, 0x000c, 1)) desc = aim_gettlv_str(list2, 0x000c, 1); faimdprintf(sess, 0, "rend: file transfer request from %s: %s (%s)\n", userinfo->sn, desc, ip); memcpy(cachedcook->cookie, cookie, 8); ft = malloc(sizeof(struct aim_filetransfer_priv)); /* XXX */ strncpy(ft->sn, userinfo.sn, sizeof(ft->sn)); strncpy(ft->ip, ip, sizeof(ft->ip)); strncpy(ft->fh.name, miscinfo->value+8, sizeof(ft->fh.name)); cachedcook->type = AIM_COOKIETYPE_OFTSEND; cachedcook->data = ft; if (aim_cachecookie(sess, cachedcook) == -1) faimdprintf(sess, 0, "ERROR caching message cookie\n"); aim_accepttransfer(sess, rx->conn, ft->sn, cookie, AIM_CAPS_SENDFILE); if (desc) free(desc); if ((userfunc = aim_callhandler(sess, rx->conn, snac->family, snac->subtype))) ret = userfunc(sess, rx, channel, userinfo, &args); #endif } else faimdprintf(sess, 0, "rend: unknown rendezvous 0x%04x\n", args.reqclass); aim_freetlvchain(&list2); return ret; } /* * It can easily be said that parsing ICBMs is THE single * most difficult thing to do in the in AIM protocol. In * fact, I think I just did say that. * * Below is the best damned solution I've come up with * over the past sixteen months of battling with it. This * can parse both away and normal messages from every client * I have access to. Its not fast, its not clean. But it works. * */ static int incomingim(aim_session_t *sess, aim_module_t *mod, aim_frame_t *rx, aim_modsnac_t *snac, aim_bstream_t *bs) { int i, ret = 0; fu8_t cookie[8]; fu16_t channel; struct aim_userinfo_s userinfo; memset(&userinfo, 0x00, sizeof(struct aim_userinfo_s)); /* * Read ICBM Cookie. And throw away. */ for (i = 0; i < 8; i++) cookie[i] = aimbs_get8(bs); /* * Channel ID. * * Channel 0x0001 is the message channel. There are * other channels for things called "rendevous" * which represent chat and some of the other new * features of AIM2/3/3.5. * * Channel 0x0002 is the Rendevous channel, which * is where Chat Invitiations and various client-client * connection negotiations come from. * */ channel = aimbs_get16(bs); /* * Technically Channel 3 in chat could be done here too. */ if ((channel != 0x01) && (channel != 0x02)) { faimdprintf(sess, 0, "icbm: ICBM received on an unsupported channel. Ignoring.\n (chan = %04x)", channel); return 0; } /* * Extract the standard user info block. * * Note that although this contains TLVs that appear contiguous * with the TLVs read below, they are two different pieces. The * userinfo block contains the number of TLVs that contain user * information, the rest are not even though there is no seperation. * aim_extractuserinfo() returns the number of bytes used by the * userinfo tlvs, so you can start reading the rest of them right * afterward. * * That also means that TLV types can be duplicated between the * userinfo block and the rest of the message, however there should * never be two TLVs of the same type in one block. * */ aim_extractuserinfo(sess, bs, &userinfo); /* * From here on, its depends on what channel we're on. * * Technically all channels have a TLV list have this, however, * for the common channel 1 case, in-place parsing is used for * performance reasons (less memory allocation). */ if (channel == 1) { ret = incomingim_ch1(sess, mod, rx, snac, channel, &userinfo, bs, cookie); } else if (channel == 0x0002) { aim_tlvlist_t *tlvlist; /* * Read block of TLVs (not including the userinfo data). All * further data is derived from what is parsed here. */ tlvlist = aim_readtlvchain(bs); ret = incomingim_ch2(sess, mod, rx, snac, channel, &userinfo, tlvlist, cookie); /* * Free up the TLV chain. */ aim_freetlvchain(&tlvlist); } return ret; } /* * Possible codes: * AIM_TRANSFER_DENY_NOTSUPPORTED -- "client does not support" * AIM_TRANSFER_DENY_DECLINE -- "client has declined transfer" * AIM_TRANSFER_DENY_NOTACCEPTING -- "client is not accepting transfers" * */ faim_export int aim_denytransfer(aim_session_t *sess, aim_conn_t *conn, const char *sender, const char *cookie, fu16_t code) { aim_frame_t *fr; aim_snacid_t snacid; aim_tlvlist_t *tl = NULL; if (!(fr = aim_tx_new(sess, conn, AIM_FRAMETYPE_FLAP, 0x02, 10+8+2+1+strlen(sender)+6))) return -ENOMEM; snacid = aim_cachesnac(sess, 0x0004, 0x000b, 0x0000, NULL, 0); aim_putsnac(&fr->data, 0x0004, 0x000b, 0x0000, snacid); aimbs_putraw(&fr->data, cookie, 8); aimbs_put16(&fr->data, 0x0002); /* channel */ aimbs_put8(&fr->data, strlen(sender)); aimbs_putraw(&fr->data, sender, strlen(sender)); aim_addtlvtochain16(&tl, 0x0003, code); aim_writetlvchain(&fr->data, &tl); aim_freetlvchain(&tl); aim_tx_enqueue(sess, fr); return 0; } /* * aim_reqicbmparaminfo() * * Request ICBM parameter information. * */ faim_export int aim_reqicbmparams(aim_session_t *sess, aim_conn_t *conn) { return aim_genericreq_n(sess, conn, 0x0004, 0x0004); } /* * * I definitly recommend sending this. If you don't, you'll be stuck * with the rather unreasonable defaults. You don't want those. Send this. * */ faim_export int aim_seticbmparam(aim_session_t *sess, aim_conn_t *conn, struct aim_icbmparameters *params) { aim_frame_t *fr; aim_snacid_t snacid; if (!sess || !conn || !params) return -EINVAL; if (!(fr = aim_tx_new(sess, conn, AIM_FRAMETYPE_FLAP, 0x02, 10+16))) return -ENOMEM; snacid = aim_cachesnac(sess, 0x0004, 0x0002, 0x0000, NULL, 0); aim_putsnac(&fr->data, 0x0004, 0x0002, 0x0000, snacid); /* This is read-only (see Parameter Reply). Must be set to zero here. */ aimbs_put16(&fr->data, 0x0000); /* These are all read-write */ aimbs_put32(&fr->data, params->flags); aimbs_put16(&fr->data, params->maxmsglen); aimbs_put16(&fr->data, params->maxsenderwarn); aimbs_put16(&fr->data, params->maxrecverwarn); aimbs_put32(&fr->data, params->minmsginterval); aim_tx_enqueue(sess, fr); return 0; } static int paraminfo(aim_session_t *sess, aim_module_t *mod, aim_frame_t *rx, aim_modsnac_t *snac, aim_bstream_t *bs) { struct aim_icbmparameters params; aim_rxcallback_t userfunc; params.maxchan = aimbs_get16(bs); params.flags = aimbs_get32(bs); params.maxmsglen = aimbs_get16(bs); params.maxsenderwarn = aimbs_get16(bs); params.maxrecverwarn = aimbs_get16(bs); params.minmsginterval = aimbs_get32(bs); if ((userfunc = aim_callhandler(sess, rx->conn, snac->family, snac->subtype))) return userfunc(sess, rx, ¶ms); return 0; } static int missedcall(aim_session_t *sess, aim_module_t *mod, aim_frame_t *rx, aim_modsnac_t *snac, aim_bstream_t *bs) { int ret = 0; aim_rxcallback_t userfunc; fu16_t channel, nummissed, reason; struct aim_userinfo_s userinfo; while (aim_bstream_empty(bs)) { channel = aimbs_get16(bs); aim_extractuserinfo(sess, bs, &userinfo); nummissed = aimbs_get16(bs); reason = aimbs_get16(bs); if ((userfunc = aim_callhandler(sess, rx->conn, snac->family, snac->subtype))) ret = userfunc(sess, rx, channel, &userinfo, nummissed, reason); } return ret; } static int clienterr(aim_session_t *sess, aim_module_t *mod, aim_frame_t *rx, aim_modsnac_t *snac, aim_bstream_t *bs) { int ret = 0; aim_rxcallback_t userfunc; fu16_t channel, reason; char *sn; fu8_t *ck, snlen; ck = aimbs_getraw(bs, 8); channel = aimbs_get16(bs); snlen = aimbs_get8(bs); sn = aimbs_getstr(bs, snlen); reason = aimbs_get16(bs); if ((userfunc = aim_callhandler(sess, rx->conn, snac->family, snac->subtype))) ret = userfunc(sess, rx, channel, sn, reason); return ret; } static int msgack(aim_session_t *sess, aim_module_t *mod, aim_frame_t *rx, aim_modsnac_t *snac, aim_bstream_t *bs) { aim_rxcallback_t userfunc; fu16_t type; fu8_t snlen, *ck; char *sn; ck = aimbs_getraw(bs, 8); type = aimbs_get16(bs); snlen = aimbs_get8(bs); sn = aimbs_getstr(bs, snlen); if ((userfunc = aim_callhandler(sess, rx->conn, snac->family, snac->subtype))) return userfunc(sess, rx, type, sn); free(sn); free(ck); return 0; } static int snachandler(aim_session_t *sess, aim_module_t *mod, aim_frame_t *rx, aim_modsnac_t *snac, aim_bstream_t *bs) { if (snac->subtype == 0x0005) return paraminfo(sess, mod, rx, snac, bs); else if (snac->subtype == 0x0006) return outgoingim(sess, mod, rx, snac, bs); else if (snac->subtype == 0x0007) return incomingim(sess, mod, rx, snac, bs); else if (snac->subtype == 0x000a) return missedcall(sess, mod, rx, snac, bs); else if (snac->subtype == 0x000b) return clienterr(sess, mod, rx, snac, bs); else if (snac->subtype == 0x000c) return msgack(sess, mod, rx, snac, bs); return 0; } faim_internal int msg_modfirst(aim_session_t *sess, aim_module_t *mod) { mod->family = 0x0004; mod->version = 0x0000; mod->flags = 0; strncpy(mod->name, "messaging", sizeof(mod->name)); mod->snachandler = snachandler; return 0; }