X-Git-Url: http://andersk.mit.edu/gitweb/libfaim.git/blobdiff_plain/9de3ca7e3fdcf62e088fe2a0c7fcdc219e1a5094..225174938751264d2d11d880ca820a66961c694c:/aim_im.c diff --git a/aim_im.c b/aim_im.c index ab07048..216d2c0 100644 --- a/aim_im.c +++ b/aim_im.c @@ -5,7 +5,7 @@ * */ -#include "aim.h" +#include /* * Send an ICBM (instant message). @@ -16,77 +16,113 @@ * AIM_IMFLAGS_ACK -- Requests that the server send an ack * when the message is received (of type 0x0004/0x000c) * - * - * The first one is newer, but it seems to be broken. Beware. Use the - * second one for normal use...for now. - * - * */ - -#if 0 /* preliminary new fangled routine */ -u_long aim_send_im(struct aim_conn_t *conn, char *destsn, int flags, char *msg) +faim_export unsigned long aim_send_im(struct aim_session_t *sess, + struct aim_conn_t *conn, + char *destsn, u_int flags, char *msg) { - int curbyte; - struct command_tx_struct newpacket; + int curbyte,i; + struct command_tx_struct *newpacket; - newpacket.lock = 1; /* lock struct */ - newpacket.type = 0x02; /* IMs are always family 0x02 */ - if (conn) - newpacket.conn = conn; - else - newpacket.conn = aim_getconn_type(AIM_CONN_TYPE_BOS); - - newpacket.commandlen = 20+1+strlen(destsn)+1+1+2+7+2+4+strlen(msg)+2; + if (strlen(msg) >= MAXMSGLEN) + return -1; - if (flags & AIM_IMFLAGS_ACK) - newpacket.commandlen += 4; - if (flags & AIM_IMFLAGS_AWAY) - newpacket.commandlen += 4; + if (!(newpacket = aim_tx_new(AIM_FRAMETYPE_OSCAR, 0x0002, conn, strlen(msg)+256))) + return -1; - newpacket.data = (char *) calloc(1, newpacket.commandlen); + newpacket->lock = 1; /* lock struct */ curbyte = 0; - curbyte += aim_putsnac(newpacket.data+curbyte, 0x0004, 0x0006, 0x0000, aim_snac_nextid); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0000); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0000); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0000); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0000); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0001); - curbyte += aimutil_put8(newpacket.data+curbyte,strlen(destsn)); - curbyte += aimutil_putstr(newpacket.data+curbyte, destsn, strlen(destsn)); - - if (flags & AIM_IMFLAGS_ACK) - { - curbyte += aimutil_put16(newpacket.data+curbyte,0x0003); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0000); - } + curbyte += aim_putsnac(newpacket->data+curbyte, + 0x0004, 0x0006, 0x0000, sess->snac_nextid); + + /* + * Generate a random message cookie + * + * We could cache these like we do SNAC IDs. (In fact, it + * might be a good idea.) In the message error functions, + * the 8byte message cookie is returned as well as the + * SNAC ID. + * + */ + for (i=0;i<8;i++) + curbyte += aimutil_put8(newpacket->data+curbyte, (u_char) rand()); - if (flags & AIM_IMFLAGS_AWAY) - { - curbyte += aimutil_put16(newpacket.data+curbyte,0x0004); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0000); - } + /* + * Channel ID + */ + curbyte += aimutil_put16(newpacket->data+curbyte,0x0001); + + /* + * Destination SN (prepended with byte length) + */ + curbyte += aimutil_put8(newpacket->data+curbyte,strlen(destsn)); + curbyte += aimutil_putstr(newpacket->data+curbyte, destsn, strlen(destsn)); + + /* + * metaTLV start. + */ + curbyte += aimutil_put16(newpacket->data+curbyte, 0x0002); + curbyte += aimutil_put16(newpacket->data+curbyte, strlen(msg) + 0x10); + + /* + * Flag data / ICBM Parameters? + */ + curbyte += aimutil_put8(newpacket->data+curbyte, 0x05); + curbyte += aimutil_put8(newpacket->data+curbyte, 0x01); + + /* number of bytes to follow */ + curbyte += aimutil_put16(newpacket->data+curbyte, 0x0004); + curbyte += aimutil_put8(newpacket->data+curbyte, 0x01); + curbyte += aimutil_put8(newpacket->data+curbyte, 0x01); + curbyte += aimutil_put8(newpacket->data+curbyte, 0x01); + curbyte += aimutil_put8(newpacket->data+curbyte, 0x02); + + curbyte += aimutil_put16(newpacket->data+curbyte, 0x0101); + + /* + * Message block length. + */ + curbyte += aimutil_put16(newpacket->data+curbyte, strlen(msg) + 0x04); + + /* + * Character set data? + */ + curbyte += aimutil_put16(newpacket->data+curbyte, 0x0000); + curbyte += aimutil_put16(newpacket->data+curbyte, 0x0000); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0002); - curbyte += aimutil_put16(newpacket.data+curbyte,strlen(msg)+0xf); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0501); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0001); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0101); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0101); - curbyte += aimutil_put8(newpacket.data+curbyte,0x01); - curbyte += aimutil_put16(newpacket.data+curbyte,strlen(msg)+4); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0000); - curbyte += aimutil_put16(newpacket.data+curbyte,0x0000); - curbyte += aimutil_putstr(newpacket.data+curbyte, msg, strlen(msg)); + /* + * Message. Not terminated. + */ + curbyte += aimutil_putstr(newpacket->data+curbyte,msg, strlen(msg)); + + /* + * Set the Request Acknowledge flag. + */ + if (flags & AIM_IMFLAGS_ACK) { + curbyte += aimutil_put16(newpacket->data+curbyte,0x0003); + curbyte += aimutil_put16(newpacket->data+curbyte,0x0000); + } + + /* + * Set the Autoresponse flag. + */ + if (flags & AIM_IMFLAGS_AWAY) { + curbyte += aimutil_put16(newpacket->data+curbyte,0x0004); + curbyte += aimutil_put16(newpacket->data+curbyte,0x0000); + } + + newpacket->commandlen = curbyte; + newpacket->lock = 0; - aim_tx_enqueue(&newpacket); + aim_tx_enqueue(sess, newpacket); #ifdef USE_SNAC_FOR_IMS { struct aim_snac_t snac; - snac.id = aim_snac_nextid; + snac.id = sess->snac_nextid; snac.family = 0x0004; snac.type = 0x0006; snac.flags = 0x0000; @@ -94,453 +130,783 @@ u_long aim_send_im(struct aim_conn_t *conn, char *destsn, int flags, char *msg) snac.data = malloc(strlen(destsn)+1); memcpy(snac.data, destsn, strlen(destsn)+1); - aim_newsnac(&snac); + aim_newsnac(sess, &snac); } - aim_cleansnacs(60); /* clean out all SNACs over 60sec old */ + aim_cleansnacs(sess, 60); /* clean out all SNACs over 60sec old */ #endif - return (aim_snac_nextid++); + return (sess->snac_nextid++); } -#else -u_long aim_send_im(struct aim_conn_t *conn, char *destsn, int flags, char *msg) -{ - - int i; - struct command_tx_struct newpacket; - - newpacket.lock = 1; /* lock struct */ - newpacket.type = 0x02; /* IMs are always family 0x02 */ - if (conn) - newpacket.conn = conn; - else - newpacket.conn = aim_getconn_type(AIM_CONN_TYPE_BOS); - - i = strlen(destsn); /* used as offset later */ - newpacket.commandlen = 20+1+strlen(destsn)+1+1+2+7+2+4+strlen(msg); - - if (flags & AIM_IMFLAGS_ACK) - newpacket.commandlen += 4; - if (flags & AIM_IMFLAGS_AWAY) - newpacket.commandlen += 4; - - newpacket.data = (char *) malloc(newpacket.commandlen); - memset(newpacket.data, 0x00, newpacket.commandlen); - - aim_putsnac(newpacket.data, 0x0004, 0x0006, 0x0000, aim_snac_nextid); - - newpacket.data[18] = 0x00; - newpacket.data[19] = 0x01; - - newpacket.data[20] = i; - memcpy(&(newpacket.data[21]), destsn, i); - - if (flags & AIM_IMFLAGS_ACK) - { - /* add TLV t(0004) l(0000) v(NULL) */ - newpacket.data[21+i] = 0x00; - newpacket.data[22+i] = 0x03; - newpacket.data[23+i] = 0x00; - newpacket.data[24+i] = 0x00; - i += 4; - } - if (flags & AIM_IMFLAGS_AWAY) - { - /* add TLV t(0004) l(0000) v(NULL) */ - newpacket.data[21+i] = 0x00; - newpacket.data[22+i] = 0x04; - newpacket.data[23+i] = 0x00; - newpacket.data[24+i] = 0x00; - i += 4; - } - newpacket.data[21+i] = 0x00; +faim_internal int aim_parse_outgoing_im_middle(struct aim_session_t *sess, + struct command_rx_struct *command) +{ + unsigned int i = 0, z; + rxcallback_t userfunc = NULL; + unsigned char cookie[8]; + int channel; + struct aim_tlvlist_t *tlvlist; + char sn[MAXSNLEN]; + unsigned short icbmflags = 0; + unsigned char flag1 = 0, flag2 = 0; + unsigned char *msgblock = NULL, *msg = NULL; + + i = 10; + + /* ICBM Cookie. */ + for (z=0; z<8; z++,i++) + cookie[z] = command->data[i]; - newpacket.data[22+i] = 0x02; + /* Channel ID */ + channel = aimutil_get16(command->data+i); + i += 2; - newpacket.data[23+i] = (char) ( (strlen(msg) + 0xD) >> 8); - newpacket.data[24+i] = (char) ( (strlen(msg) + 0xD) & 0xFF); + if (channel != 0x01) { + printf("faim: icbm: ICBM recieved on unsupported channel. Ignoring. (chan = %04x)\n", channel); + return 1; + } - newpacket.data[25+i] = 0x05; - newpacket.data[26+i] = 0x01; - newpacket.data[27+i] = 0x00; - newpacket.data[28+i] = 0x01; - newpacket.data[29+i] = 0x01; - newpacket.data[30+i] = 0x01; - newpacket.data[31+i] = 0x01; + strncpy(sn, (char *) command->data+i+1, (int) *(command->data+i)); + i += 1 + (int) *(command->data+i); - newpacket.data[32+i] = (char) ( (strlen(msg) + 4) >> 8); - newpacket.data[33+i] = (char) ( (strlen(msg) + 4) & 0xFF); + tlvlist = aim_readtlvchain(command->data+i, command->commandlen-i); - memcpy(&(newpacket.data[38+i]), msg, strlen(msg)); + if (aim_gettlv(tlvlist, 0x0003, 1)) + icbmflags |= AIM_IMFLAGS_ACK; + if (aim_gettlv(tlvlist, 0x0004, 1)) + icbmflags |= AIM_IMFLAGS_AWAY; - aim_tx_enqueue(&newpacket); -#ifdef USE_SNAC_FOR_IMS - { - struct aim_snac_t snac; + if (aim_gettlv(tlvlist, 0x0002, 1)) { + int j = 0; - snac.id = aim_snac_nextid; - snac.family = 0x0004; - snac.type = 0x0006; - snac.flags = 0x0000; + msgblock = (unsigned char *)aim_gettlv_str(tlvlist, 0x0002, 1); - snac.data = malloc(strlen(destsn)+1); - memcpy(snac.data, destsn, strlen(destsn)+1); + /* no, this really is correct. I'm not high or anything either. */ + j += 2; + j += 2 + aimutil_get16(msgblock+j); + j += 2; + + j += 2; /* final block length */ - aim_newsnac(&snac); + flag1 = aimutil_get16(msgblock); + j += 2; + flag2 = aimutil_get16(msgblock); + j += 2; + + msg = msgblock+j; } - aim_cleansnacs(60); /* clean out all SNACs over 60sec old */ -#endif + if ((userfunc = aim_callhandler(command->conn, 0x0004, 0x0006)) || (i = 0)) + i = userfunc(sess, command, channel, sn, msg, icbmflags, flag1, flag2); + + if (msgblock) + free(msgblock); + aim_freetlvchain(&tlvlist); - return (aim_snac_nextid++); + return 0; } -#endif - -#if 0 /* this is the prelim work on a new routine */ -int aim_parse_incoming_im_middle(struct command_rx_struct *command) +/* + * It can easily be said that parsing ICBMs is THE single + * most difficult thing to do in the in AIM protocol. In + * fact, I think I just did say that. + * + * Below is the best damned solution I've come up with + * over the past sixteen months of battling with it. This + * can parse both away and normal messages from every client + * I have access to. Its not fast, its not clean. But it works. + * + * We should also support at least minimal parsing of + * Channel 2, so that we can at least know the name of the + * room we're invited to, but obviously can't attend... + * + */ +faim_internal int aim_parse_incoming_im_middle(struct aim_session_t *sess, + struct command_rx_struct *command) { - int i = 0; - char *srcsn = NULL; - char *msg = NULL; - u_int msglen = 0; - int warninglevel = 0; - int tlvcnt = 0; - int class = 0; - u_long membersince = 0; - u_long onsince = 0; - int idletime = 0; - int isautoreply = 0; + u_int i = 0,z; rxcallback_t userfunc = NULL; + u_char cookie[8]; + int channel; + struct aim_tlvlist_t *tlvlist; + struct aim_userinfo_s userinfo; + u_short wastebits; - int unknown_f = -1; - int unknown_10 = -1; + memset(&userinfo, 0x00, sizeof(struct aim_userinfo_s)); + + i = 10; /* Skip SNAC header */ - i = 20; /* skip SNAC header and message cookie */ - - srcsn = malloc(command->data[i] + 1); - memcpy(srcsn, &(command->data[i+1]), command->data[i]); - srcsn[(int)command->data[i]] = '\0'; - - i += (int) command->data[i] + 1; /* add SN len */ + /* + * Read ICBM Cookie. And throw away. + */ + for (z=0; z<8; z++,i++) + cookie[z] = command->data[i]; - /* warning level */ - warninglevel = (command->data[i] << 8); - warninglevel += (command->data[i+1]); + /* + * Channel ID. + * + * Channel 0x0001 is the message channel. There are + * other channels for things called "rendevous" + * which represent chat and some of the other new + * features of AIM2/3/3.5. + * + * Channel 0x0002 is the Rendevous channel, which + * is where Chat Invitiations and various client-client + * connection negotiations come from. + * + */ + channel = aimutil_get16(command->data+i); i += 2; /* - * This is suppose to be the number of TLVs that follow. However, - * its not nearly as accurate as we need it to be, so we just run - * the TLV parser all the way to the end of the frame. + * + */ + if ((channel != 0x01) && (channel != 0x02)) + { + printf("faim: icbm: ICBM received on an unsupported channel. Ignoring.\n (chan = %04x)", channel); + return 1; + } + + /* + * Extract the standard user info block. + * + * Note that although this contains TLVs that appear contiguous + * with the TLVs read below, they are two different pieces. The + * userinfo block contains the number of TLVs that contain user + * information, the rest are not even though there is no seperation. + * aim_extractuserinfo() returns the number of bytes used by the + * userinfo tlvs, so you can start reading the rest of them right + * afterward. + * + * That also means that TLV types can be duplicated between the + * userinfo block and the rest of the message, however there should + * never be two TLVs of the same type in one block. + * */ - tlvcnt = ((command->data[i++]) << 8) & 0xFF00; - tlvcnt += (command->data[i++]) & 0x00FF; + i += aim_extractuserinfo(command->data+i, &userinfo); - /* a mini TLV parser */ - { - int curtlv = 0; - int count_t4 = 0, count_t3 = 0, count_t2 = 0, count_t1 = 0; - - while (i+4 < command->commandlen) - { - if ((command->data[i] == 0x00) && - (command->data[i+1] == 0x01) ) - { - if (count_t1 == 0) - { - /* t(0001) = class */ - if (command->data[i+3] != 0x02) - printf("faim: userinfo: **warning: strange v(%x) for t(1)\n", command->data[i+3]); - class = ((command->data[i+4]) << 8) & 0xFF00; - class += (command->data[i+5]) & 0x00FF; - } - else - printf("faim: icbm: unexpected extra TLV t(0001)\n"); - count_t1++; - } - else if ((command->data[i] == 0x00) && - (command->data[i+1] == 0x02)) - { - if (count_t2 == 0) - { - /* t(0002) = member since date */ - if (command->data[i+3] != 0x04) - printf("faim: userinfo: **warning: strange v(%x) for t(2)\n", command->data[i+3]); - - membersince = ((command->data[i+4]) << 24) & 0xFF000000; - membersince += ((command->data[i+5]) << 16) & 0x00FF0000; - membersince += ((command->data[i+6]) << 8) & 0x0000FF00; - membersince += ((command->data[i+7]) ) & 0x000000FF; - } - else if (count_t2 == 1) - { - int biglen = 0, innerlen = 0; - int j; - - /* message */ - - /* - * Check for message signature (0x0501). I still don't really - * like this, but it is better than the old way, and it does - * seem to be consistent as long as AOL doesn't do any more - * big changes. - */ - if ( (command->data[i+4] != 0x05) || - (command->data[i+5] != 0x01) ) - printf("faim: icbm: warning: message signature not present, trying to recover\n"); - - biglen = ((command->data[i+2] << 8) + command->data[i+3]) & 0xffff; - - printf("faim: icbm: biglen = %02x\n", biglen); - - j = 0; - while (j+3 < (biglen-6)) - { - if ( (command->data[i+6+j+0] == 0x00) && - (command->data[i+6+j+1] == 0x00) && - (command->data[i+6+j+2] == 0x00) ) - { - - innerlen = (command->data[i+6+j]<<8) + command->data[i+6+j+1]; - break; - } - j++; - } - if (!innerlen) - { - printf("faim: icbm: unable to find holy zeros; skipping message\n"); - msglen = 0; - msg = NULL; - } - else - { - printf("faim: icbm: innerlen = %d\n", innerlen); - - msglen = innerlen - 4; - printf("faim: icbm: msglen = %u\n", msglen); - - msg = malloc(msglen +1); - memcpy(msg, &(command->data[i+6+j+4+1]), msglen); - msg[msglen] = '\0'; - } - } - else - printf("faim: icbm: **warning: extra TLV t(0002)\n"); - count_t2++; - } - else if ((command->data[i] == 0x00) && - (command->data[i+1] == 0x03)) - { - if (count_t3 == 0) - { - /* t(0003) = on since date */ - if (command->data[i+3] != 0x04) - printf("faim: userinfo: **warning: strange v(%x) for t(3)\n", command->data[i+3]); - - onsince = ((command->data[i+4]) << 24) & 0xFF000000; - onsince += ((command->data[i+5]) << 16) & 0x00FF0000; - onsince += ((command->data[i+6]) << 8) & 0x0000FF00; - onsince += ((command->data[i+7]) ) & 0x000000FF; - } - else if (count_t3 == 1) - printf("faim: icbm: request for acknowledgment ignored\n"); - else - printf("faim: icbm: unexpected extra TLV t(0003)\n"); - count_t3++; - } - else if ((command->data[i] == 0x00) && - (command->data[i+1] == 0x04) ) - { - if (count_t4 == 0) - { - /* t(0004) = idle time */ - if (command->data[i+3] != 0x02) - printf("faim: userinfo: **warning: strange v(%x) for t(4)\n", command->data[i+3]); - idletime = ((command->data[i+4]) << 8) & 0xFF00; - idletime += (command->data[i+5]) & 0x00FF; - } - else if ((count_t4 == 1) && (((command->data[i+2]<<8)+command->data[i+3])==0x0000)) - isautoreply = 1; - else - printf("faim: icbm: unexpected extra TLV t(0004)\n"); - count_t4++; - } - else if ((command->data[i] == 0x00) && - (command->data[i+1] == 0x0f)) - { - /* t(000f) = unknown...usually from AIM3 users */ - if (command->data[i+3] != 0x04) - printf("faim: userinfo: **warning: strange v(%x) for t(f)\n", command->data[i+3]); - unknown_f = (command->data[i+4] << 24) & 0xff000000; - unknown_f += (command->data[i+5] << 16) & 0x00ff0000; - unknown_f += (command->data[i+6] << 8) & 0x0000ff00; - unknown_f += (command->data[i+7]) & 0x000000ff; - } - else if ((command->data[i] == 0x00) && - (command->data[i+1] == 0x10)) - { - /* t(0010) = unknown...usually from AOL users */ - if (command->data[i+3] != 0x04) - printf("faim: userinfo: **warning: strange v(%x) for t(10)\n", command->data[i+3]); - unknown_10 = (command->data[i+4] << 24) & 0xff000000; - unknown_10 += (command->data[i+5] << 16) & 0x00ff0000; - unknown_10 += (command->data[i+6] << 8) & 0x0000ff00; - unknown_10 += (command->data[i+7]) & 0x000000ff; - } - else - { - printf("faim: userinfo: **warning: unexpected TLV t(%02x%02x) l(%02x%02x)\n", command->data[i], command->data[i+1], command->data[i+2], command->data[i+3]); + /* + * Read block of TLVs (not including the userinfo data). All + * further data is derived from what is parsed here. + */ + tlvlist = aim_readtlvchain(command->data+i, command->commandlen-i); + + /* + * From here on, its depends on what channel we're on. + */ + if (channel == 1) + { + u_int j = 0, y = 0, z = 0; + char *msg = NULL; + u_int icbmflags = 0; + struct aim_tlv_t *msgblocktlv; + u_char *msgblock; + u_short flag1,flag2; + + /* + * Check Autoresponse status. If it is an autoresponse, + * it will contain a type 0x0004 TLV, with zero length. + */ + if (aim_gettlv(tlvlist, 0x0004, 1)) + icbmflags |= AIM_IMFLAGS_AWAY; + + /* + * Check Ack Request status. + */ + if (aim_gettlv(tlvlist, 0x0003, 1)) + icbmflags |= AIM_IMFLAGS_ACK; + + /* + * Message block. + */ + msgblocktlv = aim_gettlv(tlvlist, 0x0002, 1); + if (!msgblocktlv || !msgblocktlv->value) { + printf("faim: icbm: major error! no message block TLV found!\n"); + aim_freetlvchain(&tlvlist); + return 1; + } + + /* + * Extracting the message from the unknown cruft. + * + * This is a bit messy, and I'm not really qualified, + * even as the author, to comment on it. At least + * its not as bad as a while loop shooting into infinity. + * + * "Do you believe in magic?" + * + */ + msgblock = msgblocktlv->value; + j = 0; + + wastebits = aimutil_get8(msgblock+j++); + wastebits = aimutil_get8(msgblock+j++); + + y = aimutil_get16(msgblock+j); + j += 2; + for (z = 0; z < y; z++) + wastebits = aimutil_get8(msgblock+j++); + wastebits = aimutil_get8(msgblock+j++); + wastebits = aimutil_get8(msgblock+j++); + + /* + * Message string length, including flag words. + */ + i = aimutil_get16(msgblock+j); + j += 2; + + /* + * Flag words. + * + * Its rumored that these can kick in some funky + * 16bit-wide char stuff that used to really kill + * libfaim. Hopefully the latter is no longer true. + * + * Though someone should investiagte the former. + * + */ + flag1 = aimutil_get16(msgblock+j); + j += 2; + flag2 = aimutil_get16(msgblock+j); + j += 2; + + if (flag1 || flag2) + printf("faim: icbm: **warning: encoding flags are being used! {%04x, %04x}\n", flag1, flag2); + + /* + * Message string. + */ + i -= 4; + msg = (char *)malloc(i+1); + memcpy(msg, msgblock+j, i); + msg[i] = '\0'; + + /* + * Call client. + */ + userfunc = aim_callhandler(command->conn, 0x0004, 0x0007); + if (userfunc) + i = userfunc(sess, command, channel, &userinfo, msg, icbmflags, flag1, flag2); + else + i = 0; + + free(msg); + } + else if (channel == 0x0002) + { + struct aim_tlv_t *block1; + struct aim_tlvlist_t *list2; + unsigned short reqclass = 0; + unsigned short status = 0; + + /* + * There's another block of TLVs embedded in the type 5 here. + */ + block1 = aim_gettlv(tlvlist, 0x0005, 1); + if (!block1) { + printf("faim: no tlv 0x0005 in rendezvous transaction!\n"); + aim_freetlvchain(&tlvlist); + return 1; /* major problem */ + } + + /* + * First two bytes represent the status of the connection. + * + * 0 is a request, 2 is an accept + */ + status = aimutil_get16(block1->value+0); + + /* + * Next comes the cookie. Should match the ICBM cookie. + */ + if (memcmp(block1->value+2, cookie, 8) != 0) + printf("faim: rend: warning cookies don't match!\n"); + + /* + * The next 16bytes are a capability block so we can + * identify what type of rendezvous this is. + * + * Thanks to Eric Warmenhoven (of GAIM) + * for pointing some of this out to me. In fact, a lot of + * the client-to-client info comes from the work of the GAIM + * developers. Thanks! + * + * Read off one capability string and we should have it ID'd. + * + */ + reqclass = aim_getcap(block1->value+2+8, 0x10); + if (reqclass == 0x0000) { + printf("faim: rend: no ID block\n"); + aim_freetlvchain(&tlvlist); + return 1; + } + + /* + * What follows may be TLVs or nothing, depending on the + * purpose of the message. + * + * Ack packets for instance have nothing more to them. + */ + list2 = aim_readtlvchain(block1->value+2+8+16, block1->length-2-8-16); + + if (!list2 || ((reqclass != AIM_CAPS_IMIMAGE) && !(aim_gettlv(list2, 0x2711, 1)))) { + struct aim_msgcookie_t *cook; + int type; + + type = aim_msgcookie_gettype(reqclass); /* XXX: fix this shitty code */ + + if ((cook = aim_uncachecookie(sess, cookie, type)) == NULL) { + printf("faim: non-data rendezvous thats not in cache!\n"); + aim_freetlvchain(&list2); + aim_freetlvchain(&tlvlist); + return 1; + } + + if (cook->type == AIM_CAPS_SENDFILE) { + struct aim_filetransfer_priv *ft; + + if (cook->data) { + struct aim_tlv_t *errortlv; + int errorcode = -1; + + ft = (struct aim_filetransfer_priv *)cook->data; + + if ((errortlv = aim_gettlv(list2, 0x000b, 1))) { + errorcode = aimutil_get16(errortlv->value); + } + if (errorcode) { + printf("faim: transfer from %s (%s) for %s cancelled (error code %d)\n", ft->sn, ft->ip, ft->fh.name, errorcode); + } else if (status == 0x0002) { /* connection accepted */ + printf("faim: transfer from %s (%s) for %s accepted\n", ft->sn, ft->ip, ft->fh.name); + } + free(cook->data); + } else { + printf("faim: not data attached to file transfer\n"); } - i += (2 + 2 + ((command->data[i+2] << 8) + command->data[i+3])); - curtlv++; + } else if (cook->type == AIM_CAPS_VOICE) { + printf("faim: voice request cancelled\n"); + } else { + printf("faim: unknown cookie cache type %d\n", cook->type); + } + + free(cook); + if (list2) + aim_freetlvchain(&list2); + aim_freetlvchain(&tlvlist); + return 1; } - } + /* + * The rest of the handling depends on what type it is. + */ + if (reqclass & AIM_CAPS_BUDDYICON) { + + /* + * Call client. + */ #if 0 - { - /* detect if this is an auto-response or not */ - /* auto-responses can be detected by the presence of a *second* TLV with - t(0004), but of zero length (and therefore no value portion) */ - struct aim_tlv_t *tsttlv = NULL; - tsttlv = aim_grabtlv((u_char *) &(command->data[i])); - if (tsttlv->type == 0x04) - isautoreply = 1; - aim_freetlv(&tsttlv); - } + userfunc = aim_callhandler(command->conn, 0x0004, 0x0007); + if (userfunc || (i = 0)) + i = userfunc(sess, + command, + channel, + reqclass, + &userinfo, + ip, + cookie); +#endif - i += 2; - - i += 2; /* skip first msglen */ - i += 7; /* skip garbage */ - i -= 4; + } else if (reqclass & AIM_CAPS_VOICE) { + struct aim_msgcookie_t *cachedcook; + + printf("faim: rend: voice!\n"); + + if(!(cachedcook = (struct aim_msgcookie_t*)calloc(1, sizeof(struct aim_msgcookie_t)))) + return 1; + + memcpy(cachedcook->cookie, cookie, 8); + cachedcook->type = AIM_COOKIETYPE_OFTVOICE; + cachedcook->data = NULL; + + if (aim_cachecookie(sess, cachedcook) != 0) + printf("faim: ERROR caching message cookie\n"); + + /* XXX: implement all this */ + + /* + * Call client. + */ + userfunc = aim_callhandler(command->conn, 0x0004, 0x0007); + if (userfunc || (i = 0)) { + i = userfunc(sess, command, channel, reqclass, &userinfo); + } + } else if ((reqclass & AIM_CAPS_IMIMAGE) || (reqclass & AIM_CAPS_BUDDYICON)) { + char ip[30]; + struct aim_directim_priv *priv; + + memset(ip, 0, 30); + + if (aim_gettlv(list2, 0x0003, 1) && aim_gettlv(list2, 0x0005, 1)) { + struct aim_tlv_t *iptlv, *porttlv; + + iptlv = aim_gettlv(list2, 0x0003, 1); + porttlv = aim_gettlv(list2, 0x0005, 1); + + snprintf(ip, 30, "%d.%d.%d.%d:%d", + aimutil_get8(iptlv->value+0), + aimutil_get8(iptlv->value+1), + aimutil_get8(iptlv->value+2), + aimutil_get8(iptlv->value+3), + 4443 /*aimutil_get16(porttlv->value)*/); + } + + printf("faim: rend: directIM request from %s (%s)\n", + userinfo.sn, + ip); + + /* XXX: there are a couple of different request packets for + * different things */ + + priv = (struct aim_directim_priv *)calloc(1, sizeof(struct aim_directim_priv)); + memcpy(priv->ip, ip, sizeof(priv->ip)); + memcpy(priv->sn, userinfo.sn, sizeof(priv->sn)); + memcpy(priv->cookie, cookie, sizeof(priv->cookie)); + + /* + * Call client. + */ + userfunc = aim_callhandler(command->conn, 0x0004, 0x0007); + if (userfunc || (i = 0)) + i = userfunc(sess, + command, + channel, + reqclass, + &userinfo, priv); + + } else if (reqclass & AIM_CAPS_CHAT) { + struct aim_tlv_t *miscinfo; + struct aim_chat_roominfo roominfo; + char *msg=NULL,*encoding=NULL,*lang=NULL; + + miscinfo = aim_gettlv(list2, 0x2711, 1); + aim_chat_readroominfo(miscinfo->value, &roominfo); + + if (aim_gettlv(list2, 0x000c, 1)) + msg = aim_gettlv_str(list2, 0x000c, 1); + + if (aim_gettlv(list2, 0x000d, 1)) + encoding = aim_gettlv_str(list2, 0x000d, 1); + + if (aim_gettlv(list2, 0x000e, 1)) + lang = aim_gettlv_str(list2, 0x000e, 1); + + /* + * Call client. + */ + userfunc = aim_callhandler(command->conn, 0x0004, 0x0007); + if (userfunc || (i = 0)) + i = userfunc(sess, + command, + channel, + reqclass, + &userinfo, + &roominfo, + msg, + encoding?encoding+1:NULL, + lang?lang+1:NULL); + free(roominfo.name); + free(msg); + free(encoding); + free(lang); + } else if (reqclass & AIM_CAPS_GETFILE) { + char ip[30]; + struct aim_msgcookie_t *cachedcook; + struct aim_tlv_t *miscinfo; + + if (!(cachedcook = calloc(1, sizeof(struct aim_msgcookie_t)))) + return 0; + + memset(ip, 0, 30); + + if (!(miscinfo = aim_gettlv(list2, 0x2711, 1))) { + free(cachedcook); + return 0; + } + + if (aim_gettlv(list2, 0x0003, 1) && aim_gettlv(list2, 0x0005, 1)) { + struct aim_tlv_t *iptlv, *porttlv; + + if (!(iptlv = aim_gettlv(list2, 0x0003, 1)) || !(porttlv = aim_gettlv(list2, 0x0005, 1))) { + free(cachedcook); + return 0; + } - /* oh boy is this terrible... this comes from a specific of the spec */ - while(1) - { - if ( ( (command->data[i] == 0x00) && - (command->data[i+1] == 0x00) && - (command->data[i+2] == 0x00) && - (command->data[i+3] == 0x00) ) && - (i < command->commandlen) ) /* prevent infinity */ - break; - else - i++; + snprintf(ip, 30, "%d.%d.%d.%d:%d", + aimutil_get8(iptlv->value+0), + aimutil_get8(iptlv->value+1), + aimutil_get8(iptlv->value+2), + aimutil_get8(iptlv->value+3), + aimutil_get16(porttlv->value)); + } + + printf("faim: rend: file get request from %s (%s)\n", userinfo.sn, ip); + + /* + * Call client. + */ + userfunc = aim_callhandler(command->conn, 0x0004, 0x0007); + if (userfunc || (i = 0)) + i = userfunc(sess, + command, + channel, + reqclass, + &userinfo, + ip, + cookie); + + } else if (reqclass & AIM_CAPS_SENDFILE) { +#if 0 + char ip[30]; + char *desc = NULL; + struct aim_msgcookie_t *cachedcook; + struct aim_filetransfer_priv *ft; + struct aim_tlv_t *miscinfo; + + memset(ip, 0, sizeof(ip)); + + if (!(miscinfo = aim_gettlv(list2, 0x2711, 1))) + return 0; + + if (aim_gettlv(list2, 0x0003, 1) && aim_gettlv(list2, 0x0003, 1)) { + struct aim_tlv_t *iptlv, *porttlv; + + iptlv = aim_gettlv(list2, 0x0003, 1); + porttlv = aim_gettlv(list2, 0x0005, 1); + + snprintf(ip, sizeof(ip)-1, "%d.%d.%d.%d:%d", + aimutil_get8(iptlv->value+0), + aimutil_get8(iptlv->value+1), + aimutil_get8(iptlv->value+2), + aimutil_get8(iptlv->value+3), + aimutil_get16(porttlv->value)); + } + + if (aim_gettlv(list2, 0x000c, 1)) { + desc = aim_gettlv_str(list2, 0x000c, 1); + } + + printf("faim: rend: file transfer request from %s for %s: %s (%s)\n", + userinfo.sn, + miscinfo->value+8, + desc, + ip); + + memcpy(cachedcook->cookie, cookie, 8); + + ft = malloc(sizeof(struct aim_filetransfer_priv)); + strncpy(ft->sn, userinfo.sn, sizeof(ft->sn)); + strncpy(ft->ip, ip, sizeof(ft->ip)); + strncpy(ft->fh.name, miscinfo->value+8, sizeof(ft->fh.name)); + cachedcook->type = AIM_COOKIETYPE_OFTSEND; + cachedcook->data = ft; + + if (aim_cachecookie(sess, cachedcook) != 0) + printf("faim: ERROR caching message cookie\n"); + + + aim_accepttransfer(sess, command->conn, ft->sn, cookie, AIM_CAPS_SENDFILE); + + if (desc) + free(desc); +#endif + /* + * Call client. + */ + userfunc = aim_callhandler(command->conn, 0x0004, 0x0007); + if (userfunc || (i = 0)) + i = userfunc(sess, + command, + channel, + reqclass, + &userinfo); + } else { + printf("faim: rend: unknown rendezvous 0x%04x\n", reqclass); + } + + aim_freetlvchain(&list2); } - i -= 2; + /* + * Free up the TLV chain. + */ + aim_freetlvchain(&tlvlist); - if ( (command->data[i] == 0x00) && - (command->data[i+1] == 0x00) ) - i += 2; - msglen = ( (( (u_int) command->data[i]) & 0xFF ) << 8); - msglen += ( (u_int) command->data[i+1]) & 0xFF; /* mask off garbage */ - i += 2; + return i; +} - msglen -= 4; /* skip four 0x00s */ - i += 4; - - msg = malloc(msglen +1); - - memcpy(msg, &(command->data[i]), msglen); - msg[msglen] = '\0'; -#endif - userfunc = aim_callhandler(command->conn, 0x0004, 0x0007); - if (userfunc) - i = userfunc(command, srcsn, msg, warninglevel, class, membersince, onsince, idletime, isautoreply, unknown_f, unknown_10); - else - i = 0; +/* + * Possible codes: + * AIM_TRANSFER_DENY_NOTSUPPORTED -- "client does not support" + * AIM_TRANSFER_DENY_DECLINE -- "client has declined transfer" + * AIM_TRANSFER_DENY_NOTACCEPTING -- "client is not accepting transfers" + * + */ +faim_export unsigned long aim_denytransfer(struct aim_session_t *sess, + struct aim_conn_t *conn, + char *sender, + char *cookie, + unsigned short code) +{ + struct command_tx_struct *newpacket; + int curbyte, i; - free(srcsn); - free(msg); + if(!(newpacket = aim_tx_new(AIM_FRAMETYPE_OSCAR, 0x0002, conn, 10+8+2+1+strlen(sender)+6))) + return -1; - return i; + newpacket->lock = 1; + + curbyte = aim_putsnac(newpacket->data, 0x0004, 0x000b, 0x0000, sess->snac_nextid); + for (i = 0; i < 8; i++) + curbyte += aimutil_put8(newpacket->data+curbyte, cookie[i]); + curbyte += aimutil_put16(newpacket->data+curbyte, 0x0002); + curbyte += aimutil_put8(newpacket->data+curbyte, strlen(sender)); + curbyte += aimutil_putstr(newpacket->data+curbyte, sender, strlen(sender)); + curbyte += aim_puttlv_16(newpacket->data+curbyte, 0x0003, code); + + newpacket->lock = 0; + aim_tx_enqueue(sess, newpacket); + + return (sess->snac_nextid++); } -#else /* older routine, with new fixes */ -int aim_parse_incoming_im_middle(struct command_rx_struct *command) + +/* + * Not real sure what this does, nor does anyone I've talk to. + * + * Didn't use to send it. But now I think it might be a good + * idea. + * + */ +faim_export unsigned long aim_seticbmparam(struct aim_session_t *sess, + struct aim_conn_t *conn) { - struct aim_userinfo_s userinfo; - u_int i = 0; - char *msg = NULL; - u_int msglen = 0; - int isautoreply = 0; + struct command_tx_struct *newpacket; + int curbyte; + + if(!(newpacket = aim_tx_new(AIM_FRAMETYPE_OSCAR, 0x0002, conn, 10+16))) + return -1; + + newpacket->lock = 1; + + curbyte = aim_putsnac(newpacket->data, 0x0004, 0x0002, 0x0000, sess->snac_nextid); + curbyte += aimutil_put16(newpacket->data+curbyte, 0x0000); + curbyte += aimutil_put32(newpacket->data+curbyte, 0x00000003); + curbyte += aimutil_put8(newpacket->data+curbyte, 0x1f); + curbyte += aimutil_put8(newpacket->data+curbyte, 0x40); + curbyte += aimutil_put8(newpacket->data+curbyte, 0x03); + curbyte += aimutil_put8(newpacket->data+curbyte, 0xe7); + curbyte += aimutil_put8(newpacket->data+curbyte, 0x03); + curbyte += aimutil_put8(newpacket->data+curbyte, 0xe7); + curbyte += aimutil_put16(newpacket->data+curbyte, 0x0000); + curbyte += aimutil_put16(newpacket->data+curbyte, 0x0000); + + newpacket->lock = 0; + aim_tx_enqueue(sess, newpacket); + + return (sess->snac_nextid++); +} + +faim_internal int aim_parse_msgerror_middle(struct aim_session_t *sess, + struct command_rx_struct *command) +{ + u_long snacid = 0x000000000; + struct aim_snac_t *snac = NULL; + int ret = 0; rxcallback_t userfunc = NULL; + char *dest; + unsigned short reason = 0; - i = 20; - i += aim_extractuserinfo(command->data+i, &userinfo); + /* + * Get SNAC from packet and look it up + * the list of unrepliedto/outstanding + * SNACs. + * + * After its looked up, the SN that the + * message should've gone to will be + * in the ->data element of the snac struct. + * + */ + snacid = aimutil_get32(command->data+6); + snac = aim_remsnac(sess, snacid); - { - /* - * Auto-responses can be detected by the presence of a *second* TLV with - * t(0004), but of zero length (and therefore no value portion) - */ - struct aim_tlv_t *tsttlv = NULL; - tsttlv = aim_grabtlv((u_char *) &(command->data[i])); - if (tsttlv->type == 0x04) - isautoreply = 1; -#if 0 - else if (tsttlv->type == 0x03) - { - printf("faim: icbm: ack requested, ignored\n"); - i += 2 + 2 + tsttlv->length; - aim_freetlv(&tsttlv); - tsttlv = aim_grabtlv((u_char *) &(command->data[i])); - if (tsttlv->type == 0x04) - isautoreply = 1; - } -#endif - aim_freetlv(&tsttlv); - } - - i += 2; - - i += 2; /* skip first msglen */ - i += 7; /* skip garbage */ - i -= 4; + if (!snac) { + printf("faim: msgerr: got an ICBM-failed error on an unknown SNAC ID! (%08lx)\n", snacid); + dest = NULL; + } else + dest = snac->data; - /* oh boy is this terrible... this comes from a specific of the spec */ - while(1) - { - /* - * We used to look for four zeros; I've reduced this to three - * as it seems AOL changed it with Mac AIM 3.0 clients. - */ - if ( ( (command->data[i] == 0x00) && - (command->data[i+1] == 0x00) && - (command->data[i+2] == 0x00) ) && - (i+2 < command->commandlen) ) /* prevent infinity */ - break; - else - i++; - } + reason = aimutil_get16(command->data+10); - i -= 2; + /* + * Call client. + */ + userfunc = aim_callhandler(command->conn, 0x0004, 0x0001); + if (userfunc) + ret = userfunc(sess, command, dest, reason); + else + ret = 0; - if (aimutil_get16(&command->data[i]) == 0x0000) - i += 2; + if (snac) { + free(snac->data); + free(snac); + } - msglen = aimutil_get16(&command->data[i]); - i += 2; + return ret; +} - msglen -= 4; /* skip four 0x00s */ - i += 4; - - msg = malloc(msglen +1); - - memcpy(msg, &(command->data[i]), msglen); - msg[msglen] = '\0'; - userfunc = aim_callhandler(command->conn, 0x0004, 0x0007); +faim_internal int aim_parse_missedcall(struct aim_session_t *sess, + struct command_rx_struct *command) +{ + int i, ret = 1; + rxcallback_t userfunc = NULL; + unsigned short channel, nummissed, reason; + struct aim_userinfo_s userinfo; + + i = 10; /* Skip SNAC header */ - if (userfunc) - i = userfunc(command, &userinfo, msg, isautoreply); - else - i = 0; - free(msg); + /* + * XXX: supposedly, this entire packet can repeat as many times + * as necessary. Should implement that. + */ - return i; + /* + * Channel ID. + */ + channel = aimutil_get16(command->data+i); + i += 2; + + /* + * Extract the standard user info block. + */ + i += aim_extractuserinfo(command->data+i, &userinfo); + + nummissed = aimutil_get16(command->data+i); + i += 2; + + reason = aimutil_get16(command->data+i); + i += 2; + + /* + * Call client. + */ + userfunc = aim_callhandler(command->conn, 0x0004, 0x000a); + if (userfunc) + ret = userfunc(sess, command, channel, &userinfo, nummissed, reason); + else + ret = 0; + + return ret; } -#endif