*
*/
-#include "aim.h"
+#include <faim/aim.h>
/*
* Send an ICBM (instant message).
* AIM_IMFLAGS_ACK -- Requests that the server send an ack
* when the message is received (of type 0x0004/0x000c)
*
- *
- * The first one is newer, but it seems to be broken. Beware. Use the
- * second one for normal use...for now.
- *
- *
*/
-
-#if 0 /* preliminary new fangled routine */
-u_long aim_send_im(struct aim_conn_t *conn, char *destsn, int flags, char *msg)
+faim_export unsigned long aim_send_im(struct aim_session_t *sess,
+ struct aim_conn_t *conn,
+ char *destsn, u_int flags, char *msg)
{
- int curbyte;
- struct command_tx_struct newpacket;
+ int curbyte,i;
+ struct command_tx_struct *newpacket;
- newpacket.lock = 1; /* lock struct */
- newpacket.type = 0x02; /* IMs are always family 0x02 */
- if (conn)
- newpacket.conn = conn;
- else
- newpacket.conn = aim_getconn_type(AIM_CONN_TYPE_BOS);
-
- newpacket.commandlen = 20+1+strlen(destsn)+1+1+2+7+2+4+strlen(msg)+2;
+ if (strlen(msg) >= MAXMSGLEN)
+ return -1;
- if (flags & AIM_IMFLAGS_ACK)
- newpacket.commandlen += 4;
- if (flags & AIM_IMFLAGS_AWAY)
- newpacket.commandlen += 4;
+ if (!(newpacket = aim_tx_new(AIM_FRAMETYPE_OSCAR, 0x0002, conn, strlen(msg)+256)))
+ return -1;
- newpacket.data = (char *) calloc(1, newpacket.commandlen);
+ newpacket->lock = 1; /* lock struct */
curbyte = 0;
- curbyte += aim_putsnac(newpacket.data+curbyte, 0x0004, 0x0006, 0x0000, aim_snac_nextid);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0000);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0000);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0000);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0000);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0001);
- curbyte += aimutil_put8(newpacket.data+curbyte,strlen(destsn));
- curbyte += aimutil_putstr(newpacket.data+curbyte, destsn, strlen(destsn));
-
- if (flags & AIM_IMFLAGS_ACK)
- {
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0003);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0000);
- }
+ curbyte += aim_putsnac(newpacket->data+curbyte,
+ 0x0004, 0x0006, 0x0000, sess->snac_nextid);
+
+ /*
+ * Generate a random message cookie
+ *
+ * We could cache these like we do SNAC IDs. (In fact, it
+ * might be a good idea.) In the message error functions,
+ * the 8byte message cookie is returned as well as the
+ * SNAC ID.
+ *
+ */
+ for (i=0;i<8;i++)
+ curbyte += aimutil_put8(newpacket->data+curbyte, (u_char) rand());
- if (flags & AIM_IMFLAGS_AWAY)
- {
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0004);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0000);
- }
+ /*
+ * Channel ID
+ */
+ curbyte += aimutil_put16(newpacket->data+curbyte,0x0001);
+
+ /*
+ * Destination SN (prepended with byte length)
+ */
+ curbyte += aimutil_put8(newpacket->data+curbyte,strlen(destsn));
+ curbyte += aimutil_putstr(newpacket->data+curbyte, destsn, strlen(destsn));
+
+ /*
+ * metaTLV start.
+ */
+ curbyte += aimutil_put16(newpacket->data+curbyte, 0x0002);
+ curbyte += aimutil_put16(newpacket->data+curbyte, strlen(msg) + 0x10);
+
+ /*
+ * Flag data / ICBM Parameters?
+ */
+ curbyte += aimutil_put8(newpacket->data+curbyte, 0x05);
+ curbyte += aimutil_put8(newpacket->data+curbyte, 0x01);
+
+ /* number of bytes to follow */
+ curbyte += aimutil_put16(newpacket->data+curbyte, 0x0004);
+ curbyte += aimutil_put8(newpacket->data+curbyte, 0x01);
+ curbyte += aimutil_put8(newpacket->data+curbyte, 0x01);
+ curbyte += aimutil_put8(newpacket->data+curbyte, 0x01);
+ curbyte += aimutil_put8(newpacket->data+curbyte, 0x02);
+
+ curbyte += aimutil_put16(newpacket->data+curbyte, 0x0101);
+
+ /*
+ * Message block length.
+ */
+ curbyte += aimutil_put16(newpacket->data+curbyte, strlen(msg) + 0x04);
+
+ /*
+ * Character set data?
+ */
+ curbyte += aimutil_put16(newpacket->data+curbyte, 0x0000);
+ curbyte += aimutil_put16(newpacket->data+curbyte, 0x0000);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0002);
- curbyte += aimutil_put16(newpacket.data+curbyte,strlen(msg)+0xf);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0501);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0001);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0101);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0101);
- curbyte += aimutil_put8(newpacket.data+curbyte,0x01);
- curbyte += aimutil_put16(newpacket.data+curbyte,strlen(msg)+4);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0000);
- curbyte += aimutil_put16(newpacket.data+curbyte,0x0000);
- curbyte += aimutil_putstr(newpacket.data+curbyte, msg, strlen(msg));
+ /*
+ * Message. Not terminated.
+ */
+ curbyte += aimutil_putstr(newpacket->data+curbyte,msg, strlen(msg));
+
+ /*
+ * Set the Request Acknowledge flag.
+ */
+ if (flags & AIM_IMFLAGS_ACK) {
+ curbyte += aimutil_put16(newpacket->data+curbyte,0x0003);
+ curbyte += aimutil_put16(newpacket->data+curbyte,0x0000);
+ }
+
+ /*
+ * Set the Autoresponse flag.
+ */
+ if (flags & AIM_IMFLAGS_AWAY) {
+ curbyte += aimutil_put16(newpacket->data+curbyte,0x0004);
+ curbyte += aimutil_put16(newpacket->data+curbyte,0x0000);
+ }
+
+ newpacket->commandlen = curbyte;
+ newpacket->lock = 0;
- aim_tx_enqueue(&newpacket);
+ aim_tx_enqueue(sess, newpacket);
#ifdef USE_SNAC_FOR_IMS
{
struct aim_snac_t snac;
- snac.id = aim_snac_nextid;
+ snac.id = sess->snac_nextid;
snac.family = 0x0004;
snac.type = 0x0006;
snac.flags = 0x0000;
snac.data = malloc(strlen(destsn)+1);
memcpy(snac.data, destsn, strlen(destsn)+1);
- aim_newsnac(&snac);
+ aim_newsnac(sess, &snac);
}
- aim_cleansnacs(60); /* clean out all SNACs over 60sec old */
+ aim_cleansnacs(sess, 60); /* clean out all SNACs over 60sec old */
#endif
- return (aim_snac_nextid++);
+ return (sess->snac_nextid++);
}
-#else
-u_long aim_send_im(struct aim_conn_t *conn, char *destsn, int flags, char *msg)
-{
-
- int i;
- struct command_tx_struct newpacket;
-
- newpacket.lock = 1; /* lock struct */
- newpacket.type = 0x02; /* IMs are always family 0x02 */
- if (conn)
- newpacket.conn = conn;
- else
- newpacket.conn = aim_getconn_type(AIM_CONN_TYPE_BOS);
-
- i = strlen(destsn); /* used as offset later */
- newpacket.commandlen = 20+1+strlen(destsn)+1+1+2+7+2+4+strlen(msg);
-
- if (flags & AIM_IMFLAGS_ACK)
- newpacket.commandlen += 4;
- if (flags & AIM_IMFLAGS_AWAY)
- newpacket.commandlen += 4;
-
- newpacket.data = (char *) malloc(newpacket.commandlen);
- memset(newpacket.data, 0x00, newpacket.commandlen);
-
- aim_putsnac(newpacket.data, 0x0004, 0x0006, 0x0000, aim_snac_nextid);
-
- newpacket.data[18] = 0x00;
- newpacket.data[19] = 0x01;
-
- newpacket.data[20] = i;
- memcpy(&(newpacket.data[21]), destsn, i);
-
- if (flags & AIM_IMFLAGS_ACK)
- {
- /* add TLV t(0004) l(0000) v(NULL) */
- newpacket.data[21+i] = 0x00;
- newpacket.data[22+i] = 0x03;
- newpacket.data[23+i] = 0x00;
- newpacket.data[24+i] = 0x00;
- i += 4;
- }
- if (flags & AIM_IMFLAGS_AWAY)
- {
- /* add TLV t(0004) l(0000) v(NULL) */
- newpacket.data[21+i] = 0x00;
- newpacket.data[22+i] = 0x04;
- newpacket.data[23+i] = 0x00;
- newpacket.data[24+i] = 0x00;
- i += 4;
- }
- newpacket.data[21+i] = 0x00;
+faim_internal int aim_parse_outgoing_im_middle(struct aim_session_t *sess,
+ struct command_rx_struct *command)
+{
+ unsigned int i = 0, z;
+ rxcallback_t userfunc = NULL;
+ unsigned char cookie[8];
+ int channel;
+ struct aim_tlvlist_t *tlvlist;
+ char sn[MAXSNLEN];
+ unsigned short icbmflags = 0;
+ unsigned char flag1 = 0, flag2 = 0;
+ unsigned char *msgblock = NULL, *msg = NULL;
+
+ i = 10;
+
+ /* ICBM Cookie. */
+ for (z=0; z<8; z++,i++)
+ cookie[z] = command->data[i];
- newpacket.data[22+i] = 0x02;
+ /* Channel ID */
+ channel = aimutil_get16(command->data+i);
+ i += 2;
- newpacket.data[23+i] = (char) ( (strlen(msg) + 0xD) >> 8);
- newpacket.data[24+i] = (char) ( (strlen(msg) + 0xD) & 0xFF);
+ if (channel != 0x01) {
+ printf("faim: icbm: ICBM recieved on unsupported channel. Ignoring. (chan = %04x)\n", channel);
+ return 1;
+ }
- newpacket.data[25+i] = 0x05;
- newpacket.data[26+i] = 0x01;
- newpacket.data[27+i] = 0x00;
- newpacket.data[28+i] = 0x01;
- newpacket.data[29+i] = 0x01;
- newpacket.data[30+i] = 0x01;
- newpacket.data[31+i] = 0x01;
+ strncpy(sn, (char *) command->data+i+1, (int) *(command->data+i));
+ i += 1 + (int) *(command->data+i);
- newpacket.data[32+i] = (char) ( (strlen(msg) + 4) >> 8);
- newpacket.data[33+i] = (char) ( (strlen(msg) + 4) & 0xFF);
+ tlvlist = aim_readtlvchain(command->data+i, command->commandlen-i);
- memcpy(&(newpacket.data[38+i]), msg, strlen(msg));
+ if (aim_gettlv(tlvlist, 0x0003, 1))
+ icbmflags |= AIM_IMFLAGS_ACK;
+ if (aim_gettlv(tlvlist, 0x0004, 1))
+ icbmflags |= AIM_IMFLAGS_AWAY;
- aim_tx_enqueue(&newpacket);
-#ifdef USE_SNAC_FOR_IMS
- {
- struct aim_snac_t snac;
+ if (aim_gettlv(tlvlist, 0x0002, 1)) {
+ int j = 0;
- snac.id = aim_snac_nextid;
- snac.family = 0x0004;
- snac.type = 0x0006;
- snac.flags = 0x0000;
+ msgblock = (unsigned char *)aim_gettlv_str(tlvlist, 0x0002, 1);
- snac.data = malloc(strlen(destsn)+1);
- memcpy(snac.data, destsn, strlen(destsn)+1);
+ /* no, this really is correct. I'm not high or anything either. */
+ j += 2;
+ j += 2 + aimutil_get16(msgblock+j);
+ j += 2;
+
+ j += 2; /* final block length */
- aim_newsnac(&snac);
+ flag1 = aimutil_get16(msgblock);
+ j += 2;
+ flag2 = aimutil_get16(msgblock);
+ j += 2;
+
+ msg = msgblock+j;
}
- aim_cleansnacs(60); /* clean out all SNACs over 60sec old */
-#endif
+ if ((userfunc = aim_callhandler(command->conn, 0x0004, 0x0006)) || (i = 0))
+ i = userfunc(sess, command, channel, sn, msg, icbmflags, flag1, flag2);
+
+ if (msgblock)
+ free(msgblock);
+ aim_freetlvchain(&tlvlist);
- return (aim_snac_nextid++);
+ return 0;
}
-#endif
-
-#if 0 /* this is the prelim work on a new routine */
-int aim_parse_incoming_im_middle(struct command_rx_struct *command)
+/*
+ * It can easily be said that parsing ICBMs is THE single
+ * most difficult thing to do in the in AIM protocol. In
+ * fact, I think I just did say that.
+ *
+ * Below is the best damned solution I've come up with
+ * over the past sixteen months of battling with it. This
+ * can parse both away and normal messages from every client
+ * I have access to. Its not fast, its not clean. But it works.
+ *
+ * We should also support at least minimal parsing of
+ * Channel 2, so that we can at least know the name of the
+ * room we're invited to, but obviously can't attend...
+ *
+ */
+faim_internal int aim_parse_incoming_im_middle(struct aim_session_t *sess,
+ struct command_rx_struct *command)
{
- int i = 0;
- char *srcsn = NULL;
- char *msg = NULL;
- u_int msglen = 0;
- int warninglevel = 0;
- int tlvcnt = 0;
- int class = 0;
- u_long membersince = 0;
- u_long onsince = 0;
- int idletime = 0;
- int isautoreply = 0;
+ u_int i = 0,z;
rxcallback_t userfunc = NULL;
+ u_char cookie[8];
+ int channel;
+ struct aim_tlvlist_t *tlvlist;
+ struct aim_userinfo_s userinfo;
+ u_short wastebits;
- int unknown_f = -1;
- int unknown_10 = -1;
+ memset(&userinfo, 0x00, sizeof(struct aim_userinfo_s));
+
+ i = 10; /* Skip SNAC header */
- i = 20; /* skip SNAC header and message cookie */
-
- srcsn = malloc(command->data[i] + 1);
- memcpy(srcsn, &(command->data[i+1]), command->data[i]);
- srcsn[(int)command->data[i]] = '\0';
-
- i += (int) command->data[i] + 1; /* add SN len */
+ /*
+ * Read ICBM Cookie. And throw away.
+ */
+ for (z=0; z<8; z++,i++)
+ cookie[z] = command->data[i];
- /* warning level */
- warninglevel = (command->data[i] << 8);
- warninglevel += (command->data[i+1]);
+ /*
+ * Channel ID.
+ *
+ * Channel 0x0001 is the message channel. There are
+ * other channels for things called "rendevous"
+ * which represent chat and some of the other new
+ * features of AIM2/3/3.5.
+ *
+ * Channel 0x0002 is the Rendevous channel, which
+ * is where Chat Invitiations and various client-client
+ * connection negotiations come from.
+ *
+ */
+ channel = aimutil_get16(command->data+i);
i += 2;
/*
- * This is suppose to be the number of TLVs that follow. However,
- * its not nearly as accurate as we need it to be, so we just run
- * the TLV parser all the way to the end of the frame.
+ *
+ */
+ if ((channel != 0x01) && (channel != 0x02))
+ {
+ printf("faim: icbm: ICBM received on an unsupported channel. Ignoring.\n (chan = %04x)", channel);
+ return 1;
+ }
+
+ /*
+ * Extract the standard user info block.
+ *
+ * Note that although this contains TLVs that appear contiguous
+ * with the TLVs read below, they are two different pieces. The
+ * userinfo block contains the number of TLVs that contain user
+ * information, the rest are not even though there is no seperation.
+ * aim_extractuserinfo() returns the number of bytes used by the
+ * userinfo tlvs, so you can start reading the rest of them right
+ * afterward.
+ *
+ * That also means that TLV types can be duplicated between the
+ * userinfo block and the rest of the message, however there should
+ * never be two TLVs of the same type in one block.
+ *
*/
- tlvcnt = ((command->data[i++]) << 8) & 0xFF00;
- tlvcnt += (command->data[i++]) & 0x00FF;
+ i += aim_extractuserinfo(command->data+i, &userinfo);
- /* a mini TLV parser */
- {
- int curtlv = 0;
- int count_t4 = 0, count_t3 = 0, count_t2 = 0, count_t1 = 0;
-
- while (i+4 < command->commandlen)
- {
- if ((command->data[i] == 0x00) &&
- (command->data[i+1] == 0x01) )
- {
- if (count_t1 == 0)
- {
- /* t(0001) = class */
- if (command->data[i+3] != 0x02)
- printf("faim: userinfo: **warning: strange v(%x) for t(1)\n", command->data[i+3]);
- class = ((command->data[i+4]) << 8) & 0xFF00;
- class += (command->data[i+5]) & 0x00FF;
- }
- else
- printf("faim: icbm: unexpected extra TLV t(0001)\n");
- count_t1++;
- }
- else if ((command->data[i] == 0x00) &&
- (command->data[i+1] == 0x02))
- {
- if (count_t2 == 0)
- {
- /* t(0002) = member since date */
- if (command->data[i+3] != 0x04)
- printf("faim: userinfo: **warning: strange v(%x) for t(2)\n", command->data[i+3]);
-
- membersince = ((command->data[i+4]) << 24) & 0xFF000000;
- membersince += ((command->data[i+5]) << 16) & 0x00FF0000;
- membersince += ((command->data[i+6]) << 8) & 0x0000FF00;
- membersince += ((command->data[i+7]) ) & 0x000000FF;
- }
- else if (count_t2 == 1)
- {
- int biglen = 0, innerlen = 0;
- int j;
-
- /* message */
-
- /*
- * Check for message signature (0x0501). I still don't really
- * like this, but it is better than the old way, and it does
- * seem to be consistent as long as AOL doesn't do any more
- * big changes.
- */
- if ( (command->data[i+4] != 0x05) ||
- (command->data[i+5] != 0x01) )
- printf("faim: icbm: warning: message signature not present, trying to recover\n");
-
- biglen = ((command->data[i+2] << 8) + command->data[i+3]) & 0xffff;
-
- printf("faim: icbm: biglen = %02x\n", biglen);
-
- j = 0;
- while (j+3 < (biglen-6))
- {
- if ( (command->data[i+6+j+0] == 0x00) &&
- (command->data[i+6+j+1] == 0x00) &&
- (command->data[i+6+j+2] == 0x00) )
- {
-
- innerlen = (command->data[i+6+j]<<8) + command->data[i+6+j+1];
- break;
- }
- j++;
- }
- if (!innerlen)
- {
- printf("faim: icbm: unable to find holy zeros; skipping message\n");
- msglen = 0;
- msg = NULL;
- }
- else
- {
- printf("faim: icbm: innerlen = %d\n", innerlen);
-
- msglen = innerlen - 4;
- printf("faim: icbm: msglen = %u\n", msglen);
-
- msg = malloc(msglen +1);
- memcpy(msg, &(command->data[i+6+j+4+1]), msglen);
- msg[msglen] = '\0';
- }
- }
- else
- printf("faim: icbm: **warning: extra TLV t(0002)\n");
- count_t2++;
- }
- else if ((command->data[i] == 0x00) &&
- (command->data[i+1] == 0x03))
- {
- if (count_t3 == 0)
- {
- /* t(0003) = on since date */
- if (command->data[i+3] != 0x04)
- printf("faim: userinfo: **warning: strange v(%x) for t(3)\n", command->data[i+3]);
-
- onsince = ((command->data[i+4]) << 24) & 0xFF000000;
- onsince += ((command->data[i+5]) << 16) & 0x00FF0000;
- onsince += ((command->data[i+6]) << 8) & 0x0000FF00;
- onsince += ((command->data[i+7]) ) & 0x000000FF;
- }
- else if (count_t3 == 1)
- printf("faim: icbm: request for acknowledgment ignored\n");
- else
- printf("faim: icbm: unexpected extra TLV t(0003)\n");
- count_t3++;
- }
- else if ((command->data[i] == 0x00) &&
- (command->data[i+1] == 0x04) )
- {
- if (count_t4 == 0)
- {
- /* t(0004) = idle time */
- if (command->data[i+3] != 0x02)
- printf("faim: userinfo: **warning: strange v(%x) for t(4)\n", command->data[i+3]);
- idletime = ((command->data[i+4]) << 8) & 0xFF00;
- idletime += (command->data[i+5]) & 0x00FF;
- }
- else if ((count_t4 == 1) && (((command->data[i+2]<<8)+command->data[i+3])==0x0000))
- isautoreply = 1;
- else
- printf("faim: icbm: unexpected extra TLV t(0004)\n");
- count_t4++;
- }
- else if ((command->data[i] == 0x00) &&
- (command->data[i+1] == 0x0f))
- {
- /* t(000f) = unknown...usually from AIM3 users */
- if (command->data[i+3] != 0x04)
- printf("faim: userinfo: **warning: strange v(%x) for t(f)\n", command->data[i+3]);
- unknown_f = (command->data[i+4] << 24) & 0xff000000;
- unknown_f += (command->data[i+5] << 16) & 0x00ff0000;
- unknown_f += (command->data[i+6] << 8) & 0x0000ff00;
- unknown_f += (command->data[i+7]) & 0x000000ff;
- }
- else if ((command->data[i] == 0x00) &&
- (command->data[i+1] == 0x10))
- {
- /* t(0010) = unknown...usually from AOL users */
- if (command->data[i+3] != 0x04)
- printf("faim: userinfo: **warning: strange v(%x) for t(10)\n", command->data[i+3]);
- unknown_10 = (command->data[i+4] << 24) & 0xff000000;
- unknown_10 += (command->data[i+5] << 16) & 0x00ff0000;
- unknown_10 += (command->data[i+6] << 8) & 0x0000ff00;
- unknown_10 += (command->data[i+7]) & 0x000000ff;
- }
- else
- {
- printf("faim: userinfo: **warning: unexpected TLV t(%02x%02x) l(%02x%02x)\n", command->data[i], command->data[i+1], command->data[i+2], command->data[i+3]);
+ /*
+ * Read block of TLVs (not including the userinfo data). All
+ * further data is derived from what is parsed here.
+ */
+ tlvlist = aim_readtlvchain(command->data+i, command->commandlen-i);
+
+ /*
+ * From here on, its depends on what channel we're on.
+ */
+ if (channel == 1)
+ {
+ u_int j = 0, y = 0, z = 0;
+ char *msg = NULL;
+ u_int icbmflags = 0;
+ struct aim_tlv_t *msgblocktlv;
+ u_char *msgblock;
+ u_short flag1,flag2;
+
+ /*
+ * Check Autoresponse status. If it is an autoresponse,
+ * it will contain a type 0x0004 TLV, with zero length.
+ */
+ if (aim_gettlv(tlvlist, 0x0004, 1))
+ icbmflags |= AIM_IMFLAGS_AWAY;
+
+ /*
+ * Check Ack Request status.
+ */
+ if (aim_gettlv(tlvlist, 0x0003, 1))
+ icbmflags |= AIM_IMFLAGS_ACK;
+
+ /*
+ * Message block.
+ */
+ msgblocktlv = aim_gettlv(tlvlist, 0x0002, 1);
+ if (!msgblocktlv || !msgblocktlv->value) {
+ printf("faim: icbm: major error! no message block TLV found!\n");
+ aim_freetlvchain(&tlvlist);
+ return 1;
+ }
+
+ /*
+ * Extracting the message from the unknown cruft.
+ *
+ * This is a bit messy, and I'm not really qualified,
+ * even as the author, to comment on it. At least
+ * its not as bad as a while loop shooting into infinity.
+ *
+ * "Do you believe in magic?"
+ *
+ */
+ msgblock = msgblocktlv->value;
+ j = 0;
+
+ wastebits = aimutil_get8(msgblock+j++);
+ wastebits = aimutil_get8(msgblock+j++);
+
+ y = aimutil_get16(msgblock+j);
+ j += 2;
+ for (z = 0; z < y; z++)
+ wastebits = aimutil_get8(msgblock+j++);
+ wastebits = aimutil_get8(msgblock+j++);
+ wastebits = aimutil_get8(msgblock+j++);
+
+ /*
+ * Message string length, including flag words.
+ */
+ i = aimutil_get16(msgblock+j);
+ j += 2;
+
+ /*
+ * Flag words.
+ *
+ * Its rumored that these can kick in some funky
+ * 16bit-wide char stuff that used to really kill
+ * libfaim. Hopefully the latter is no longer true.
+ *
+ * Though someone should investiagte the former.
+ *
+ */
+ flag1 = aimutil_get16(msgblock+j);
+ j += 2;
+ flag2 = aimutil_get16(msgblock+j);
+ j += 2;
+
+ if (flag1 || flag2)
+ printf("faim: icbm: **warning: encoding flags are being used! {%04x, %04x}\n", flag1, flag2);
+
+ /*
+ * Message string.
+ */
+ i -= 4;
+ msg = (char *)malloc(i+1);
+ memcpy(msg, msgblock+j, i);
+ msg[i] = '\0';
+
+ /*
+ * Call client.
+ */
+ userfunc = aim_callhandler(command->conn, 0x0004, 0x0007);
+ if (userfunc)
+ i = userfunc(sess, command, channel, &userinfo, msg, icbmflags, flag1, flag2);
+ else
+ i = 0;
+
+ free(msg);
+ }
+ else if (channel == 0x0002)
+ {
+ struct aim_tlv_t *block1;
+ struct aim_tlvlist_t *list2;
+ unsigned short reqclass = 0;
+ unsigned short status = 0;
+
+ /*
+ * There's another block of TLVs embedded in the type 5 here.
+ */
+ block1 = aim_gettlv(tlvlist, 0x0005, 1);
+ if (!block1) {
+ printf("faim: no tlv 0x0005 in rendezvous transaction!\n");
+ aim_freetlvchain(&tlvlist);
+ return 1; /* major problem */
+ }
+
+ /*
+ * First two bytes represent the status of the connection.
+ *
+ * 0 is a request, 2 is an accept
+ */
+ status = aimutil_get16(block1->value+0);
+
+ /*
+ * Next comes the cookie. Should match the ICBM cookie.
+ */
+ if (memcmp(block1->value+2, cookie, 8) != 0)
+ printf("faim: rend: warning cookies don't match!\n");
+
+ /*
+ * The next 16bytes are a capability block so we can
+ * identify what type of rendezvous this is.
+ *
+ * Thanks to Eric Warmenhoven <warmenhoven@linux.com> (of GAIM)
+ * for pointing some of this out to me. In fact, a lot of
+ * the client-to-client info comes from the work of the GAIM
+ * developers. Thanks!
+ *
+ * Read off one capability string and we should have it ID'd.
+ *
+ */
+ reqclass = aim_getcap(block1->value+2+8, 0x10);
+ if (reqclass == 0x0000) {
+ printf("faim: rend: no ID block\n");
+ aim_freetlvchain(&tlvlist);
+ return 1;
+ }
+
+ /*
+ * What follows may be TLVs or nothing, depending on the
+ * purpose of the message.
+ *
+ * Ack packets for instance have nothing more to them.
+ */
+ list2 = aim_readtlvchain(block1->value+2+8+16, block1->length-2-8-16);
+
+ if (!list2 || ((reqclass != AIM_CAPS_IMIMAGE) && !(aim_gettlv(list2, 0x2711, 1)))) {
+ struct aim_msgcookie_t *cook;
+ int type;
+
+ type = aim_msgcookie_gettype(reqclass); /* XXX: fix this shitty code */
+
+ if ((cook = aim_uncachecookie(sess, cookie, type)) == NULL) {
+ printf("faim: non-data rendezvous thats not in cache!\n");
+ aim_freetlvchain(&list2);
+ aim_freetlvchain(&tlvlist);
+ return 1;
+ }
+
+ if (cook->type == AIM_CAPS_SENDFILE) {
+ struct aim_filetransfer_priv *ft;
+
+ if (cook->data) {
+ struct aim_tlv_t *errortlv;
+ int errorcode = -1;
+
+ ft = (struct aim_filetransfer_priv *)cook->data;
+
+ if ((errortlv = aim_gettlv(list2, 0x000b, 1))) {
+ errorcode = aimutil_get16(errortlv->value);
+ }
+ if (errorcode) {
+ printf("faim: transfer from %s (%s) for %s cancelled (error code %d)\n", ft->sn, ft->ip, ft->fh.name, errorcode);
+ } else if (status == 0x0002) { /* connection accepted */
+ printf("faim: transfer from %s (%s) for %s accepted\n", ft->sn, ft->ip, ft->fh.name);
+ }
+ free(cook->data);
+ } else {
+ printf("faim: not data attached to file transfer\n");
}
- i += (2 + 2 + ((command->data[i+2] << 8) + command->data[i+3]));
- curtlv++;
+ } else if (cook->type == AIM_CAPS_VOICE) {
+ printf("faim: voice request cancelled\n");
+ } else {
+ printf("faim: unknown cookie cache type %d\n", cook->type);
+ }
+
+ free(cook);
+ if (list2)
+ aim_freetlvchain(&list2);
+ aim_freetlvchain(&tlvlist);
+ return 1;
}
- }
+ /*
+ * The rest of the handling depends on what type it is.
+ */
+ if (reqclass & AIM_CAPS_BUDDYICON) {
+
+ /*
+ * Call client.
+ */
#if 0
- {
- /* detect if this is an auto-response or not */
- /* auto-responses can be detected by the presence of a *second* TLV with
- t(0004), but of zero length (and therefore no value portion) */
- struct aim_tlv_t *tsttlv = NULL;
- tsttlv = aim_grabtlv((u_char *) &(command->data[i]));
- if (tsttlv->type == 0x04)
- isautoreply = 1;
- aim_freetlv(&tsttlv);
- }
+ userfunc = aim_callhandler(command->conn, 0x0004, 0x0007);
+ if (userfunc || (i = 0))
+ i = userfunc(sess,
+ command,
+ channel,
+ reqclass,
+ &userinfo,
+ ip,
+ cookie);
+#endif
- i += 2;
-
- i += 2; /* skip first msglen */
- i += 7; /* skip garbage */
- i -= 4;
+ } else if (reqclass & AIM_CAPS_VOICE) {
+ struct aim_msgcookie_t *cachedcook;
+
+ printf("faim: rend: voice!\n");
+
+ if(!(cachedcook = (struct aim_msgcookie_t*)calloc(1, sizeof(struct aim_msgcookie_t))))
+ return 1;
+
+ memcpy(cachedcook->cookie, cookie, 8);
+ cachedcook->type = AIM_COOKIETYPE_OFTVOICE;
+ cachedcook->data = NULL;
+
+ if (aim_cachecookie(sess, cachedcook) != 0)
+ printf("faim: ERROR caching message cookie\n");
+
+ /* XXX: implement all this */
+
+ /*
+ * Call client.
+ */
+ userfunc = aim_callhandler(command->conn, 0x0004, 0x0007);
+ if (userfunc || (i = 0)) {
+ i = userfunc(sess, command, channel, reqclass, &userinfo);
+ }
+ } else if ((reqclass & AIM_CAPS_IMIMAGE) || (reqclass & AIM_CAPS_BUDDYICON)) {
+ char ip[30];
+ struct aim_directim_priv *priv;
+
+ memset(ip, 0, 30);
+
+ if (aim_gettlv(list2, 0x0003, 1) && aim_gettlv(list2, 0x0005, 1)) {
+ struct aim_tlv_t *iptlv, *porttlv;
+
+ iptlv = aim_gettlv(list2, 0x0003, 1);
+ porttlv = aim_gettlv(list2, 0x0005, 1);
+
+ snprintf(ip, 30, "%d.%d.%d.%d:%d",
+ aimutil_get8(iptlv->value+0),
+ aimutil_get8(iptlv->value+1),
+ aimutil_get8(iptlv->value+2),
+ aimutil_get8(iptlv->value+3),
+ 4443 /*aimutil_get16(porttlv->value)*/);
+ }
+
+ printf("faim: rend: directIM request from %s (%s)\n",
+ userinfo.sn,
+ ip);
+
+ /* XXX: there are a couple of different request packets for
+ * different things */
+
+ priv = (struct aim_directim_priv *)calloc(1, sizeof(struct aim_directim_priv));
+ memcpy(priv->ip, ip, sizeof(priv->ip));
+ memcpy(priv->sn, userinfo.sn, sizeof(priv->sn));
+ memcpy(priv->cookie, cookie, sizeof(priv->cookie));
+
+ /*
+ * Call client.
+ */
+ userfunc = aim_callhandler(command->conn, 0x0004, 0x0007);
+ if (userfunc || (i = 0))
+ i = userfunc(sess,
+ command,
+ channel,
+ reqclass,
+ &userinfo, priv);
+
+ } else if (reqclass & AIM_CAPS_CHAT) {
+ struct aim_tlv_t *miscinfo;
+ struct aim_chat_roominfo roominfo;
+ char *msg=NULL,*encoding=NULL,*lang=NULL;
+
+ miscinfo = aim_gettlv(list2, 0x2711, 1);
+ aim_chat_readroominfo(miscinfo->value, &roominfo);
+
+ if (aim_gettlv(list2, 0x000c, 1))
+ msg = aim_gettlv_str(list2, 0x000c, 1);
+
+ if (aim_gettlv(list2, 0x000d, 1))
+ encoding = aim_gettlv_str(list2, 0x000d, 1);
+
+ if (aim_gettlv(list2, 0x000e, 1))
+ lang = aim_gettlv_str(list2, 0x000e, 1);
+
+ /*
+ * Call client.
+ */
+ userfunc = aim_callhandler(command->conn, 0x0004, 0x0007);
+ if (userfunc || (i = 0))
+ i = userfunc(sess,
+ command,
+ channel,
+ reqclass,
+ &userinfo,
+ &roominfo,
+ msg,
+ encoding?encoding+1:NULL,
+ lang?lang+1:NULL);
+ free(roominfo.name);
+ free(msg);
+ free(encoding);
+ free(lang);
+ } else if (reqclass & AIM_CAPS_GETFILE) {
+ char ip[30];
+ struct aim_msgcookie_t *cachedcook;
+ struct aim_tlv_t *miscinfo;
+
+ if (!(cachedcook = calloc(1, sizeof(struct aim_msgcookie_t))))
+ return 0;
+
+ memset(ip, 0, 30);
+
+ if (!(miscinfo = aim_gettlv(list2, 0x2711, 1))) {
+ free(cachedcook);
+ return 0;
+ }
+
+ if (aim_gettlv(list2, 0x0003, 1) && aim_gettlv(list2, 0x0005, 1)) {
+ struct aim_tlv_t *iptlv, *porttlv;
+
+ if (!(iptlv = aim_gettlv(list2, 0x0003, 1)) || !(porttlv = aim_gettlv(list2, 0x0005, 1))) {
+ free(cachedcook);
+ return 0;
+ }
- /* oh boy is this terrible... this comes from a specific of the spec */
- while(1)
- {
- if ( ( (command->data[i] == 0x00) &&
- (command->data[i+1] == 0x00) &&
- (command->data[i+2] == 0x00) &&
- (command->data[i+3] == 0x00) ) &&
- (i < command->commandlen) ) /* prevent infinity */
- break;
- else
- i++;
+ snprintf(ip, 30, "%d.%d.%d.%d:%d",
+ aimutil_get8(iptlv->value+0),
+ aimutil_get8(iptlv->value+1),
+ aimutil_get8(iptlv->value+2),
+ aimutil_get8(iptlv->value+3),
+ aimutil_get16(porttlv->value));
+ }
+
+ printf("faim: rend: file get request from %s (%s)\n", userinfo.sn, ip);
+
+ /*
+ * Call client.
+ */
+ userfunc = aim_callhandler(command->conn, 0x0004, 0x0007);
+ if (userfunc || (i = 0))
+ i = userfunc(sess,
+ command,
+ channel,
+ reqclass,
+ &userinfo,
+ ip,
+ cookie);
+
+ } else if (reqclass & AIM_CAPS_SENDFILE) {
+#if 0
+ char ip[30];
+ char *desc = NULL;
+ struct aim_msgcookie_t *cachedcook;
+ struct aim_filetransfer_priv *ft;
+ struct aim_tlv_t *miscinfo;
+
+ memset(ip, 0, sizeof(ip));
+
+ if (!(miscinfo = aim_gettlv(list2, 0x2711, 1)))
+ return 0;
+
+ if (aim_gettlv(list2, 0x0003, 1) && aim_gettlv(list2, 0x0003, 1)) {
+ struct aim_tlv_t *iptlv, *porttlv;
+
+ iptlv = aim_gettlv(list2, 0x0003, 1);
+ porttlv = aim_gettlv(list2, 0x0005, 1);
+
+ snprintf(ip, sizeof(ip)-1, "%d.%d.%d.%d:%d",
+ aimutil_get8(iptlv->value+0),
+ aimutil_get8(iptlv->value+1),
+ aimutil_get8(iptlv->value+2),
+ aimutil_get8(iptlv->value+3),
+ aimutil_get16(porttlv->value));
+ }
+
+ if (aim_gettlv(list2, 0x000c, 1)) {
+ desc = aim_gettlv_str(list2, 0x000c, 1);
+ }
+
+ printf("faim: rend: file transfer request from %s for %s: %s (%s)\n",
+ userinfo.sn,
+ miscinfo->value+8,
+ desc,
+ ip);
+
+ memcpy(cachedcook->cookie, cookie, 8);
+
+ ft = malloc(sizeof(struct aim_filetransfer_priv));
+ strncpy(ft->sn, userinfo.sn, sizeof(ft->sn));
+ strncpy(ft->ip, ip, sizeof(ft->ip));
+ strncpy(ft->fh.name, miscinfo->value+8, sizeof(ft->fh.name));
+ cachedcook->type = AIM_COOKIETYPE_OFTSEND;
+ cachedcook->data = ft;
+
+ if (aim_cachecookie(sess, cachedcook) != 0)
+ printf("faim: ERROR caching message cookie\n");
+
+
+ aim_accepttransfer(sess, command->conn, ft->sn, cookie, AIM_CAPS_SENDFILE);
+
+ if (desc)
+ free(desc);
+#endif
+ /*
+ * Call client.
+ */
+ userfunc = aim_callhandler(command->conn, 0x0004, 0x0007);
+ if (userfunc || (i = 0))
+ i = userfunc(sess,
+ command,
+ channel,
+ reqclass,
+ &userinfo);
+ } else {
+ printf("faim: rend: unknown rendezvous 0x%04x\n", reqclass);
+ }
+
+ aim_freetlvchain(&list2);
}
- i -= 2;
+ /*
+ * Free up the TLV chain.
+ */
+ aim_freetlvchain(&tlvlist);
- if ( (command->data[i] == 0x00) &&
- (command->data[i+1] == 0x00) )
- i += 2;
- msglen = ( (( (u_int) command->data[i]) & 0xFF ) << 8);
- msglen += ( (u_int) command->data[i+1]) & 0xFF; /* mask off garbage */
- i += 2;
+ return i;
+}
- msglen -= 4; /* skip four 0x00s */
- i += 4;
-
- msg = malloc(msglen +1);
-
- memcpy(msg, &(command->data[i]), msglen);
- msg[msglen] = '\0';
-#endif
- userfunc = aim_callhandler(command->conn, 0x0004, 0x0007);
- if (userfunc)
- i = userfunc(command, srcsn, msg, warninglevel, class, membersince, onsince, idletime, isautoreply, unknown_f, unknown_10);
- else
- i = 0;
+/*
+ * Possible codes:
+ * AIM_TRANSFER_DENY_NOTSUPPORTED -- "client does not support"
+ * AIM_TRANSFER_DENY_DECLINE -- "client has declined transfer"
+ * AIM_TRANSFER_DENY_NOTACCEPTING -- "client is not accepting transfers"
+ *
+ */
+faim_export unsigned long aim_denytransfer(struct aim_session_t *sess,
+ struct aim_conn_t *conn,
+ char *sender,
+ char *cookie,
+ unsigned short code)
+{
+ struct command_tx_struct *newpacket;
+ int curbyte, i;
- free(srcsn);
- free(msg);
+ if(!(newpacket = aim_tx_new(AIM_FRAMETYPE_OSCAR, 0x0002, conn, 10+8+2+1+strlen(sender)+6)))
+ return -1;
- return i;
+ newpacket->lock = 1;
+
+ curbyte = aim_putsnac(newpacket->data, 0x0004, 0x000b, 0x0000, sess->snac_nextid);
+ for (i = 0; i < 8; i++)
+ curbyte += aimutil_put8(newpacket->data+curbyte, cookie[i]);
+ curbyte += aimutil_put16(newpacket->data+curbyte, 0x0002);
+ curbyte += aimutil_put8(newpacket->data+curbyte, strlen(sender));
+ curbyte += aimutil_putstr(newpacket->data+curbyte, sender, strlen(sender));
+ curbyte += aim_puttlv_16(newpacket->data+curbyte, 0x0003, code);
+
+ newpacket->lock = 0;
+ aim_tx_enqueue(sess, newpacket);
+
+ return (sess->snac_nextid++);
}
-#else /* older routine, with new fixes */
-int aim_parse_incoming_im_middle(struct command_rx_struct *command)
+
+/*
+ * Not real sure what this does, nor does anyone I've talk to.
+ *
+ * Didn't use to send it. But now I think it might be a good
+ * idea.
+ *
+ */
+faim_export unsigned long aim_seticbmparam(struct aim_session_t *sess,
+ struct aim_conn_t *conn)
{
- struct aim_userinfo_s userinfo;
- u_int i = 0;
- char *msg = NULL;
- u_int msglen = 0;
- int isautoreply = 0;
+ struct command_tx_struct *newpacket;
+ int curbyte;
+
+ if(!(newpacket = aim_tx_new(AIM_FRAMETYPE_OSCAR, 0x0002, conn, 10+16)))
+ return -1;
+
+ newpacket->lock = 1;
+
+ curbyte = aim_putsnac(newpacket->data, 0x0004, 0x0002, 0x0000, sess->snac_nextid);
+ curbyte += aimutil_put16(newpacket->data+curbyte, 0x0000);
+ curbyte += aimutil_put32(newpacket->data+curbyte, 0x00000003);
+ curbyte += aimutil_put8(newpacket->data+curbyte, 0x1f);
+ curbyte += aimutil_put8(newpacket->data+curbyte, 0x40);
+ curbyte += aimutil_put8(newpacket->data+curbyte, 0x03);
+ curbyte += aimutil_put8(newpacket->data+curbyte, 0xe7);
+ curbyte += aimutil_put8(newpacket->data+curbyte, 0x03);
+ curbyte += aimutil_put8(newpacket->data+curbyte, 0xe7);
+ curbyte += aimutil_put16(newpacket->data+curbyte, 0x0000);
+ curbyte += aimutil_put16(newpacket->data+curbyte, 0x0000);
+
+ newpacket->lock = 0;
+ aim_tx_enqueue(sess, newpacket);
+
+ return (sess->snac_nextid++);
+}
+
+faim_internal int aim_parse_msgerror_middle(struct aim_session_t *sess,
+ struct command_rx_struct *command)
+{
+ u_long snacid = 0x000000000;
+ struct aim_snac_t *snac = NULL;
+ int ret = 0;
rxcallback_t userfunc = NULL;
+ char *dest;
+ unsigned short reason = 0;
- i = 20;
- i += aim_extractuserinfo(command->data+i, &userinfo);
+ /*
+ * Get SNAC from packet and look it up
+ * the list of unrepliedto/outstanding
+ * SNACs.
+ *
+ * After its looked up, the SN that the
+ * message should've gone to will be
+ * in the ->data element of the snac struct.
+ *
+ */
+ snacid = aimutil_get32(command->data+6);
+ snac = aim_remsnac(sess, snacid);
- {
- /*
- * Auto-responses can be detected by the presence of a *second* TLV with
- * t(0004), but of zero length (and therefore no value portion)
- */
- struct aim_tlv_t *tsttlv = NULL;
- tsttlv = aim_grabtlv((u_char *) &(command->data[i]));
- if (tsttlv->type == 0x04)
- isautoreply = 1;
-#if 0
- else if (tsttlv->type == 0x03)
- {
- printf("faim: icbm: ack requested, ignored\n");
- i += 2 + 2 + tsttlv->length;
- aim_freetlv(&tsttlv);
- tsttlv = aim_grabtlv((u_char *) &(command->data[i]));
- if (tsttlv->type == 0x04)
- isautoreply = 1;
- }
-#endif
- aim_freetlv(&tsttlv);
- }
-
- i += 2;
-
- i += 2; /* skip first msglen */
- i += 7; /* skip garbage */
- i -= 4;
+ if (!snac) {
+ printf("faim: msgerr: got an ICBM-failed error on an unknown SNAC ID! (%08lx)\n", snacid);
+ dest = NULL;
+ } else
+ dest = snac->data;
- /* oh boy is this terrible... this comes from a specific of the spec */
- while(1)
- {
- /*
- * We used to look for four zeros; I've reduced this to three
- * as it seems AOL changed it with Mac AIM 3.0 clients.
- */
- if ( ( (command->data[i] == 0x00) &&
- (command->data[i+1] == 0x00) &&
- (command->data[i+2] == 0x00) ) &&
- (i+2 < command->commandlen) ) /* prevent infinity */
- break;
- else
- i++;
- }
+ reason = aimutil_get16(command->data+10);
- i -= 2;
+ /*
+ * Call client.
+ */
+ userfunc = aim_callhandler(command->conn, 0x0004, 0x0001);
+ if (userfunc)
+ ret = userfunc(sess, command, dest, reason);
+ else
+ ret = 0;
- if (aimutil_get16(&command->data[i]) == 0x0000)
- i += 2;
+ if (snac) {
+ free(snac->data);
+ free(snac);
+ }
- msglen = aimutil_get16(&command->data[i]);
- i += 2;
+ return ret;
+}
- msglen -= 4; /* skip four 0x00s */
- i += 4;
-
- msg = malloc(msglen +1);
-
- memcpy(msg, &(command->data[i]), msglen);
- msg[msglen] = '\0';
- userfunc = aim_callhandler(command->conn, 0x0004, 0x0007);
+faim_internal int aim_parse_missedcall(struct aim_session_t *sess,
+ struct command_rx_struct *command)
+{
+ int i, ret = 1;
+ rxcallback_t userfunc = NULL;
+ unsigned short channel, nummissed, reason;
+ struct aim_userinfo_s userinfo;
+
+ i = 10; /* Skip SNAC header */
- if (userfunc)
- i = userfunc(command, &userinfo, msg, isautoreply);
- else
- i = 0;
- free(msg);
+ /*
+ * XXX: supposedly, this entire packet can repeat as many times
+ * as necessary. Should implement that.
+ */
- return i;
+ /*
+ * Channel ID.
+ */
+ channel = aimutil_get16(command->data+i);
+ i += 2;
+
+ /*
+ * Extract the standard user info block.
+ */
+ i += aim_extractuserinfo(command->data+i, &userinfo);
+
+ nummissed = aimutil_get16(command->data+i);
+ i += 2;
+
+ reason = aimutil_get16(command->data+i);
+ i += 2;
+
+ /*
+ * Call client.
+ */
+ userfunc = aim_callhandler(command->conn, 0x0004, 0x000a);
+ if (userfunc)
+ ret = userfunc(sess, command, channel, &userinfo, nummissed, reason);
+ else
+ ret = 0;
+
+ return ret;
}
-#endif
andersk / libfaim.git / blobdiff