]> The Tcpdump Group git mirrors - tcpdump/blob - util-print.c
Text protocols: Use u_int as return type for fetch_token()
[tcpdump] / util-print.c
1 /*
2 * Copyright (c) 1990, 1991, 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 */
21
22 /*
23 * txtproto_print() derived from original code by Hannes Gredler
24 * (hannes@gredler.at):
25 *
26 * Redistribution and use in source and binary forms, with or without
27 * modification, are permitted provided that: (1) source code
28 * distributions retain the above copyright notice and this paragraph
29 * in its entirety, and (2) distributions including binary code include
30 * the above copyright notice and this paragraph in its entirety in
31 * the documentation or other materials provided with the distribution.
32 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND
33 * WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT
34 * LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
35 * FOR A PARTICULAR PURPOSE.
36 */
37
38 #ifdef HAVE_CONFIG_H
39 #include <config.h>
40 #endif
41
42 #include "netdissect-stdinc.h"
43
44 #include <sys/stat.h>
45
46 #ifdef HAVE_FCNTL_H
47 #include <fcntl.h>
48 #endif
49 #include <stdio.h>
50 #include <stdarg.h>
51 #include <stdlib.h>
52 #include <string.h>
53
54 #include "netdissect-ctype.h"
55
56 #include "netdissect.h"
57 #include "extract.h"
58 #include "ascii_strcasecmp.h"
59 #include "timeval-operations.h"
60
61 #define TOKBUFSIZE 128
62
63 enum date_flag { WITHOUT_DATE = 0, WITH_DATE = 1 };
64 enum time_flag { UTC_TIME = 0, LOCAL_TIME = 1 };
65
66 /*
67 * Print out a character, filtering out the non-printable ones
68 */
69 void
70 fn_print_char(netdissect_options *ndo, u_char c)
71 {
72 if (!ND_ISASCII(c)) {
73 c = ND_TOASCII(c);
74 ND_PRINT("M-");
75 }
76 if (!ND_ASCII_ISPRINT(c)) {
77 c ^= 0x40; /* DEL to ?, others to alpha */
78 ND_PRINT("^");
79 }
80 ND_PRINT("%c", c);
81 }
82
83 /*
84 * Print a null-terminated string, filtering out non-printable characters.
85 * DON'T USE IT with a pointer on the packet buffer because there is no
86 * truncation check. For this use, see the nd_printX() functions below.
87 */
88 void
89 fn_print_str(netdissect_options *ndo, const u_char *s)
90 {
91 while (*s != '\0') {
92 fn_print_char(ndo, *s);
93 s++;
94 }
95 }
96
97 /*
98 * Print out a null-terminated filename (or other ASCII string) from
99 * a fixed-length field in the packet buffer, or from what remains of
100 * the packet.
101 *
102 * n is the length of the fixed-length field, or the number of bytes
103 * remaining in the packet based on its on-the-network length.
104 *
105 * If ep is non-null, it should point just past the last captured byte
106 * of the packet, e.g. ndo->ndo_snapend. If ep is NULL, we assume no
107 * truncation check, other than the checks of the field length/remaining
108 * packet data length, is needed.
109 *
110 * Return the number of bytes of string processed, including the
111 * terminating null, if not truncated; as the terminating null is
112 * included in the count, and as there must be a terminating null,
113 * this will always be non-zero. Return 0 if truncated.
114 */
115 u_int
116 nd_printztn(netdissect_options *ndo,
117 const u_char *s, u_int n, const u_char *ep)
118 {
119 u_int bytes;
120 u_char c;
121
122 bytes = 0;
123 for (;;) {
124 if (n == 0 || (ep != NULL && s >= ep)) {
125 /*
126 * Truncated. This includes "no null before we
127 * got to the end of the fixed-length buffer or
128 * the end of the packet".
129 *
130 * XXX - BOOTP says "null-terminated", which
131 * means the maximum length of the string, in
132 * bytes, is 1 less than the size of the buffer,
133 * as there must always be a terminating null.
134 */
135 bytes = 0;
136 break;
137 }
138
139 c = GET_U_1(s);
140 s++;
141 bytes++;
142 n--;
143 if (c == '\0') {
144 /* End of string */
145 break;
146 }
147 fn_print_char(ndo, c);
148 }
149 return(bytes);
150 }
151
152 /*
153 * Print out a counted filename (or other ASCII string), part of
154 * the packet buffer.
155 * If ep is NULL, assume no truncation check is needed.
156 * Return true if truncated.
157 * Stop at ep (if given) or after n bytes, whichever is first.
158 */
159 int
160 nd_printn(netdissect_options *ndo,
161 const u_char *s, u_int n, const u_char *ep)
162 {
163 u_char c;
164
165 while (n > 0 && (ep == NULL || s < ep)) {
166 n--;
167 c = GET_U_1(s);
168 s++;
169 fn_print_char(ndo, c);
170 }
171 return (n == 0) ? 0 : 1;
172 }
173
174 /*
175 * Print a counted filename (or other ASCII string), part of
176 * the packet buffer, filtering out non-printable characters.
177 * Stop if truncated (via GET_U_1/longjmp) or after n bytes,
178 * whichever is first.
179 * The suffix comes from: j:longJmp, n:after N bytes.
180 */
181 void
182 nd_printjn(netdissect_options *ndo, const u_char *s, u_int n)
183 {
184 while (n > 0) {
185 fn_print_char(ndo, GET_U_1(s));
186 n--;
187 s++;
188 }
189 }
190
191 /*
192 * Print a null-padded filename (or other ASCII string), part of
193 * the packet buffer, filtering out non-printable characters.
194 * Stop if truncated (via GET_U_1/longjmp) or after n bytes or before
195 * the null char, whichever occurs first.
196 * The suffix comes from: j:longJmp, n:after N bytes, p:null-Padded.
197 */
198 void
199 nd_printjnp(netdissect_options *ndo, const u_char *s, u_int n)
200 {
201 u_char c;
202
203 while (n > 0) {
204 c = GET_U_1(s);
205 if (c == '\0')
206 break;
207 fn_print_char(ndo, c);
208 n--;
209 s++;
210 }
211 }
212
213 /*
214 * Print the timestamp .FRAC part (Microseconds/nanoseconds)
215 */
216 static void
217 ts_frac_print(netdissect_options *ndo, long usec)
218 {
219 #ifdef HAVE_PCAP_SET_TSTAMP_PRECISION
220 switch (ndo->ndo_tstamp_precision) {
221
222 case PCAP_TSTAMP_PRECISION_MICRO:
223 ND_PRINT(".%06u", (unsigned)usec);
224 break;
225
226 case PCAP_TSTAMP_PRECISION_NANO:
227 ND_PRINT(".%09u", (unsigned)usec);
228 break;
229
230 default:
231 ND_PRINT(".{unknown}");
232 break;
233 }
234 #else
235 ND_PRINT(".%06u", (unsigned)usec);
236 #endif
237 }
238
239 /*
240 * Print the timestamp as [YY:MM:DD] HH:MM:SS.FRAC.
241 * if time_flag == LOCAL_TIME print local time else UTC/GMT time
242 * if date_flag == WITH_DATE print YY:MM:DD before HH:MM:SS.FRAC
243 */
244 static void
245 ts_date_hmsfrac_print(netdissect_options *ndo, long sec, long usec,
246 enum date_flag date_flag, enum time_flag time_flag)
247 {
248 time_t Time = sec;
249 struct tm *tm;
250 char timebuf[32];
251 const char *timestr;
252
253 if ((unsigned)sec & 0x80000000) {
254 ND_PRINT("[Error converting time]");
255 return;
256 }
257
258 if (time_flag == LOCAL_TIME)
259 tm = localtime(&Time);
260 else
261 tm = gmtime(&Time);
262
263 if (date_flag == WITH_DATE) {
264 timestr = nd_format_time(timebuf, sizeof(timebuf),
265 "%Y-%m-%d %H:%M:%S", tm);
266 } else {
267 timestr = nd_format_time(timebuf, sizeof(timebuf),
268 "%H:%M:%S", tm);
269 }
270 ND_PRINT("%s", timestr);
271
272 ts_frac_print(ndo, usec);
273 }
274
275 /*
276 * Print the timestamp - Unix timeval style, as SECS.FRAC.
277 */
278 static void
279 ts_unix_print(netdissect_options *ndo, long sec, long usec)
280 {
281 if ((unsigned)sec & 0x80000000) {
282 ND_PRINT("[Error converting time]");
283 return;
284 }
285
286 ND_PRINT("%u", (unsigned)sec);
287 ts_frac_print(ndo, usec);
288 }
289
290 /*
291 * Print the timestamp
292 */
293 void
294 ts_print(netdissect_options *ndo,
295 const struct timeval *tvp)
296 {
297 static struct timeval tv_ref;
298 struct timeval tv_result;
299 int negative_offset;
300 int nano_prec;
301
302 switch (ndo->ndo_tflag) {
303
304 case 0: /* Default */
305 ts_date_hmsfrac_print(ndo, tvp->tv_sec, tvp->tv_usec,
306 WITHOUT_DATE, LOCAL_TIME);
307 ND_PRINT(" ");
308 break;
309
310 case 1: /* No time stamp */
311 break;
312
313 case 2: /* Unix timeval style */
314 ts_unix_print(ndo, tvp->tv_sec, tvp->tv_usec);
315 ND_PRINT(" ");
316 break;
317
318 case 3: /* Microseconds/nanoseconds since previous packet */
319 case 5: /* Microseconds/nanoseconds since first packet */
320 #ifdef HAVE_PCAP_SET_TSTAMP_PRECISION
321 switch (ndo->ndo_tstamp_precision) {
322 case PCAP_TSTAMP_PRECISION_MICRO:
323 nano_prec = 0;
324 break;
325 case PCAP_TSTAMP_PRECISION_NANO:
326 nano_prec = 1;
327 break;
328 default:
329 nano_prec = 0;
330 break;
331 }
332 #else
333 nano_prec = 0;
334 #endif
335 if (!(netdissect_timevalisset(&tv_ref)))
336 tv_ref = *tvp; /* set timestamp for first packet */
337
338 negative_offset = netdissect_timevalcmp(tvp, &tv_ref, <);
339 if (negative_offset)
340 netdissect_timevalsub(&tv_ref, tvp, &tv_result, nano_prec);
341 else
342 netdissect_timevalsub(tvp, &tv_ref, &tv_result, nano_prec);
343
344 ND_PRINT((negative_offset ? "-" : " "));
345 ts_date_hmsfrac_print(ndo, tv_result.tv_sec, tv_result.tv_usec,
346 WITHOUT_DATE, UTC_TIME);
347 ND_PRINT(" ");
348
349 if (ndo->ndo_tflag == 3)
350 tv_ref = *tvp; /* set timestamp for previous packet */
351 break;
352
353 case 4: /* Date + Default */
354 ts_date_hmsfrac_print(ndo, tvp->tv_sec, tvp->tv_usec,
355 WITH_DATE, LOCAL_TIME);
356 ND_PRINT(" ");
357 break;
358 }
359 }
360
361 /*
362 * Print an unsigned relative number of seconds (e.g. hold time, prune timer)
363 * in the form 5m1s. This does no truncation, so 32230861 seconds
364 * is represented as 1y1w1d1h1m1s.
365 */
366 void
367 unsigned_relts_print(netdissect_options *ndo,
368 uint32_t secs)
369 {
370 static const char *lengths[] = {"y", "w", "d", "h", "m", "s"};
371 static const u_int seconds[] = {31536000, 604800, 86400, 3600, 60, 1};
372 const char **l = lengths;
373 const u_int *s = seconds;
374
375 if (secs == 0) {
376 ND_PRINT("0s");
377 return;
378 }
379 while (secs > 0) {
380 if (secs >= *s) {
381 ND_PRINT("%u%s", secs / *s, *l);
382 secs -= (secs / *s) * *s;
383 }
384 s++;
385 l++;
386 }
387 }
388
389 /*
390 * Print a signed relative number of seconds (e.g. hold time, prune timer)
391 * in the form 5m1s. This does no truncation, so 32230861 seconds
392 * is represented as 1y1w1d1h1m1s.
393 */
394 void
395 signed_relts_print(netdissect_options *ndo,
396 int32_t secs)
397 {
398 if (secs < 0) {
399 ND_PRINT("-");
400 if (secs == INT32_MIN) {
401 /*
402 * -2^31; you can't fit its absolute value into
403 * a 32-bit signed integer.
404 *
405 * Just directly pass said absolute value to
406 * unsigned_relts_print() directly.
407 *
408 * (XXX - does ISO C guarantee that -(-2^n),
409 * when calculated and cast to an n-bit unsigned
410 * integer type, will have the value 2^n?)
411 */
412 unsigned_relts_print(ndo, 2147483648U);
413 } else {
414 /*
415 * We now know -secs will fit into an int32_t;
416 * negate it and pass that to unsigned_relts_print().
417 */
418 unsigned_relts_print(ndo, -secs);
419 }
420 return;
421 }
422 unsigned_relts_print(ndo, secs);
423 }
424
425 /*
426 * Format a struct tm with strftime().
427 * If the pointer to the struct tm is null, that means that the
428 * routine to convert a time_t to a struct tm failed; the localtime()
429 * and gmtime() in the Microsoft Visual Studio C library will fail,
430 * returning null, if the value is before the UNIX Epoch.
431 */
432 const char *
433 nd_format_time(char *buf, size_t bufsize, const char *format,
434 const struct tm *timeptr)
435 {
436 if (timeptr != NULL) {
437 if (strftime(buf, bufsize, format, timeptr) != 0)
438 return (buf);
439 else
440 return ("[nd_format_time() buffer is too small]");
441 } else
442 return ("[localtime() or gmtime() couldn't convert the date and time]");
443 }
444
445 /* Print the truncated string */
446 void nd_print_trunc(netdissect_options *ndo)
447 {
448 ND_PRINT(" [|%s]", ndo->ndo_protocol);
449 }
450
451 /* Print the protocol name */
452 void nd_print_protocol(netdissect_options *ndo)
453 {
454 ND_PRINT("%s", ndo->ndo_protocol);
455 }
456
457 /* Print the protocol name in caps (uppercases) */
458 void nd_print_protocol_caps(netdissect_options *ndo)
459 {
460 const char *p;
461 for (p = ndo->ndo_protocol; *p != '\0'; p++)
462 ND_PRINT("%c", ND_ASCII_TOUPPER(*p));
463 }
464
465 /* Print the invalid string */
466 void nd_print_invalid(netdissect_options *ndo)
467 {
468 ND_PRINT(" (invalid)");
469 }
470
471 /*
472 * this is a generic routine for printing unknown data;
473 * we pass on the linefeed plus indentation string to
474 * get a proper output - returns 0 on error
475 */
476
477 int
478 print_unknown_data(netdissect_options *ndo, const u_char *cp,
479 const char *indent, u_int len)
480 {
481 if (!ND_TTEST_LEN(cp, 0)) {
482 ND_PRINT("%sDissector error: %s() called with pointer past end of packet",
483 indent, __func__);
484 return(0);
485 }
486 hex_print(ndo, indent, cp, ND_MIN(len, ND_BYTES_AVAILABLE_AFTER(cp)));
487 return(1); /* everything is ok */
488 }
489
490 /*
491 * Convert a token value to a string; use "fmt" if not found.
492 */
493 static const char *
494 tok2strbuf(const struct tok *lp, const char *fmt,
495 const u_int v, char *buf, const size_t bufsize)
496 {
497 if (lp != NULL) {
498 while (lp->s != NULL) {
499 if (lp->v == v)
500 return (lp->s);
501 ++lp;
502 }
503 }
504 if (fmt == NULL)
505 fmt = "#%d";
506
507 (void)snprintf(buf, bufsize, fmt, v);
508 return (const char *)buf;
509 }
510
511 /*
512 * Convert a token value to a string; use "fmt" if not found.
513 * Uses tok2strbuf() on one of four local static buffers of size TOKBUFSIZE
514 * in round-robin fashion.
515 */
516 const char *
517 tok2str(const struct tok *lp, const char *fmt, const u_int v)
518 {
519 static char buf[4][TOKBUFSIZE];
520 static int idx = 0;
521 char *ret;
522
523 ret = buf[idx];
524 idx = (idx+1) & 3;
525 return tok2strbuf(lp, fmt, v, ret, sizeof(buf[0]));
526 }
527
528 /*
529 * Convert a bit token value to a string; use "fmt" if not found.
530 * this is useful for parsing bitfields, the output strings are separated
531 * if the s field is positive.
532 *
533 * A token matches iff it has one or more bits set and every bit that is set
534 * in the token is set in v. Consequently, a 0 token never matches.
535 */
536 static char *
537 bittok2str_internal(const struct tok *lp, const char *fmt,
538 const u_int v, const char *sep)
539 {
540 static char buf[1024+1]; /* our string buffer */
541 char *bufp = buf;
542 size_t space_left = sizeof(buf), string_size;
543 const char * sepstr = "";
544
545 while (lp != NULL && lp->s != NULL) {
546 if (lp->v && (v & lp->v) == lp->v) {
547 /* ok we have found something */
548 if (space_left <= 1)
549 return (buf); /* only enough room left for NUL, if that */
550 string_size = strlcpy(bufp, sepstr, space_left);
551 if (string_size >= space_left)
552 return (buf); /* we ran out of room */
553 bufp += string_size;
554 space_left -= string_size;
555 if (space_left <= 1)
556 return (buf); /* only enough room left for NUL, if that */
557 string_size = strlcpy(bufp, lp->s, space_left);
558 if (string_size >= space_left)
559 return (buf); /* we ran out of room */
560 bufp += string_size;
561 space_left -= string_size;
562 sepstr = sep;
563 }
564 lp++;
565 }
566
567 if (bufp == buf)
568 /* bummer - lets print the "unknown" message as advised in the fmt string if we got one */
569 (void)snprintf(buf, sizeof(buf), fmt == NULL ? "#%08x" : fmt, v);
570 return (buf);
571 }
572
573 /*
574 * Convert a bit token value to a string; use "fmt" if not found.
575 * this is useful for parsing bitfields, the output strings are not separated.
576 */
577 char *
578 bittok2str_nosep(const struct tok *lp, const char *fmt, const u_int v)
579 {
580 return (bittok2str_internal(lp, fmt, v, ""));
581 }
582
583 /*
584 * Convert a bit token value to a string; use "fmt" if not found.
585 * this is useful for parsing bitfields, the output strings are comma separated.
586 */
587 char *
588 bittok2str(const struct tok *lp, const char *fmt, const u_int v)
589 {
590 return (bittok2str_internal(lp, fmt, v, ", "));
591 }
592
593 /*
594 * Convert a value to a string using an array; the macro
595 * tok2strary() in <netdissect.h> is the public interface to
596 * this function and ensures that the second argument is
597 * correct for bounds-checking.
598 */
599 const char *
600 tok2strary_internal(const char **lp, int n, const char *fmt, const int v)
601 {
602 static char buf[TOKBUFSIZE];
603
604 if (v >= 0 && v < n && lp[v] != NULL)
605 return lp[v];
606 if (fmt == NULL)
607 fmt = "#%d";
608 (void)snprintf(buf, sizeof(buf), fmt, v);
609 return (buf);
610 }
611
612 const struct tok *
613 uint2tokary_internal(const struct uint_tokary dict[], const size_t size,
614 const u_int val)
615 {
616 size_t i;
617 /* Try a direct lookup before the full scan. */
618 if (val < size && dict[val].uintval == val)
619 return dict[val].tokary; /* OK if NULL */
620 for (i = 0; i < size; i++)
621 if (dict[i].uintval == val)
622 return dict[i].tokary; /* OK if NULL */
623 return NULL;
624 }
625
626 /*
627 * Convert a 32-bit netmask to prefixlen if possible
628 * the function returns the prefix-len; if plen == -1
629 * then conversion was not possible;
630 */
631
632 int
633 mask2plen(const uint32_t mask)
634 {
635 const uint32_t bitmasks[33] = {
636 0x00000000,
637 0x80000000, 0xc0000000, 0xe0000000, 0xf0000000,
638 0xf8000000, 0xfc000000, 0xfe000000, 0xff000000,
639 0xff800000, 0xffc00000, 0xffe00000, 0xfff00000,
640 0xfff80000, 0xfffc0000, 0xfffe0000, 0xffff0000,
641 0xffff8000, 0xffffc000, 0xffffe000, 0xfffff000,
642 0xfffff800, 0xfffffc00, 0xfffffe00, 0xffffff00,
643 0xffffff80, 0xffffffc0, 0xffffffe0, 0xfffffff0,
644 0xfffffff8, 0xfffffffc, 0xfffffffe, 0xffffffff
645 };
646 int prefix_len = 32;
647
648 /* let's see if we can transform the mask into a prefixlen */
649 while (prefix_len >= 0) {
650 if (bitmasks[prefix_len] == mask)
651 break;
652 prefix_len--;
653 }
654 return (prefix_len);
655 }
656
657 int
658 mask62plen(const u_char *mask)
659 {
660 u_char bitmasks[9] = {
661 0x00,
662 0x80, 0xc0, 0xe0, 0xf0,
663 0xf8, 0xfc, 0xfe, 0xff
664 };
665 int byte;
666 int cidr_len = 0;
667
668 for (byte = 0; byte < 16; byte++) {
669 u_int bits;
670
671 for (bits = 0; bits < (sizeof (bitmasks) / sizeof (bitmasks[0])); bits++) {
672 if (mask[byte] == bitmasks[bits]) {
673 cidr_len += bits;
674 break;
675 }
676 }
677
678 if (mask[byte] != 0xff)
679 break;
680 }
681 return (cidr_len);
682 }
683
684 /*
685 * Routine to print out information for text-based protocols such as FTP,
686 * HTTP, SMTP, RTSP, SIP, ....
687 */
688 #define MAX_TOKEN 128
689
690 /*
691 * Fetch a token from a packet, starting at the specified index,
692 * and return the length of the token.
693 *
694 * Returns 0 on error; yes, this is indistinguishable from an empty
695 * token, but an "empty token" isn't a valid token - it just means
696 * either a space character at the beginning of the line (this
697 * includes a blank line) or no more tokens remaining on the line.
698 */
699 static u_int
700 fetch_token(netdissect_options *ndo, const u_char *pptr, u_int idx, u_int len,
701 u_char *tbuf, size_t tbuflen)
702 {
703 size_t toklen = 0;
704 u_char c;
705
706 for (; idx < len; idx++) {
707 if (!ND_TTEST_1(pptr + idx)) {
708 /* ran past end of captured data */
709 return (0);
710 }
711 c = GET_U_1(pptr + idx);
712 if (!ND_ISASCII(c)) {
713 /* not an ASCII character */
714 return (0);
715 }
716 if (c == ' ' || c == '\t' || c == '\r' || c == '\n') {
717 /* end of token */
718 break;
719 }
720 if (!ND_ASCII_ISPRINT(c)) {
721 /* not part of a command token or response code */
722 return (0);
723 }
724 if (toklen + 2 > tbuflen) {
725 /* no room for this character and terminating '\0' */
726 return (0);
727 }
728 tbuf[toklen] = c;
729 toklen++;
730 }
731 if (toklen == 0) {
732 /* no token */
733 return (0);
734 }
735 tbuf[toklen] = '\0';
736
737 /*
738 * Skip past any white space after the token, until we see
739 * an end-of-line (CR or LF).
740 */
741 for (; idx < len; idx++) {
742 if (!ND_TTEST_1(pptr + idx)) {
743 /* ran past end of captured data */
744 break;
745 }
746 c = GET_U_1(pptr + idx);
747 if (c == '\r' || c == '\n') {
748 /* end of line */
749 break;
750 }
751 if (!ND_ASCII_ISPRINT(c)) {
752 /* not a printable ASCII character */
753 break;
754 }
755 if (c != ' ' && c != '\t' && c != '\r' && c != '\n') {
756 /* beginning of next token */
757 break;
758 }
759 }
760 return (idx);
761 }
762
763 /*
764 * Scan a buffer looking for a line ending - LF or CR-LF.
765 * Return the index of the character after the line ending or 0 if
766 * we encounter a non-ASCII or non-printable character or don't find
767 * the line ending.
768 */
769 static u_int
770 print_txt_line(netdissect_options *ndo, const char *prefix,
771 const u_char *pptr, u_int idx, u_int len)
772 {
773 u_int startidx;
774 u_int linelen;
775 u_char c;
776
777 startidx = idx;
778 while (idx < len) {
779 c = GET_U_1(pptr + idx);
780 if (c == '\n') {
781 /*
782 * LF without CR; end of line.
783 * Skip the LF and print the line, with the
784 * exception of the LF.
785 */
786 linelen = idx - startidx;
787 idx++;
788 goto print;
789 } else if (c == '\r') {
790 /* CR - any LF? */
791 if ((idx+1) >= len) {
792 /* not in this packet */
793 return (0);
794 }
795 if (GET_U_1(pptr + idx + 1) == '\n') {
796 /*
797 * CR-LF; end of line.
798 * Skip the CR-LF and print the line, with
799 * the exception of the CR-LF.
800 */
801 linelen = idx - startidx;
802 idx += 2;
803 goto print;
804 }
805
806 /*
807 * CR followed by something else; treat this
808 * as if it were binary data, and don't print
809 * it.
810 */
811 return (0);
812 } else if (!ND_ASCII_ISPRINT(c) && c != '\t') {
813 /*
814 * Not a printable ASCII character and not a tab;
815 * treat this as if it were binary data, and
816 * don't print it.
817 */
818 return (0);
819 }
820 idx++;
821 }
822
823 /*
824 * All printable ASCII, but no line ending after that point
825 * in the buffer.
826 */
827 linelen = idx - startidx;
828 ND_PRINT("%s%.*s", prefix, (int)linelen, pptr + startidx);
829 return (0);
830
831 print:
832 ND_PRINT("%s%.*s", prefix, (int)linelen, pptr + startidx);
833 return (idx);
834 }
835
836 /* Assign needed before calling txtproto_print(): ndo->ndo_protocol = "proto" */
837 void
838 txtproto_print(netdissect_options *ndo, const u_char *pptr, u_int len,
839 const char **cmds, u_int flags)
840 {
841 u_int idx, eol;
842 u_char token[MAX_TOKEN+1];
843 const char *cmd;
844 int print_this = 0;
845
846 if (cmds != NULL) {
847 /*
848 * This protocol has more than just request and
849 * response lines; see whether this looks like a
850 * request or response and, if so, print it and,
851 * in verbose mode, print everything after it.
852 *
853 * This is for HTTP-like protocols, where we
854 * want to print requests and responses, but
855 * don't want to print continuations of request
856 * or response bodies in packets that don't
857 * contain the request or response line.
858 */
859 idx = fetch_token(ndo, pptr, 0, len, token, sizeof(token));
860 if (idx != 0) {
861 /* Is this a valid request name? */
862 while ((cmd = *cmds++) != NULL) {
863 if (ascii_strcasecmp((const char *)token, cmd) == 0) {
864 /* Yes. */
865 print_this = 1;
866 break;
867 }
868 }
869
870 /*
871 * No - is this a valid response code (3 digits)?
872 *
873 * Is this token the response code, or is the next
874 * token the response code?
875 */
876 if (flags & RESP_CODE_SECOND_TOKEN) {
877 /*
878 * Next token - get it.
879 */
880 idx = fetch_token(ndo, pptr, idx, len, token,
881 sizeof(token));
882 }
883 if (idx != 0) {
884 if (ND_ASCII_ISDIGIT(token[0]) && ND_ASCII_ISDIGIT(token[1]) &&
885 ND_ASCII_ISDIGIT(token[2]) && token[3] == '\0') {
886 /* Yes. */
887 print_this = 1;
888 }
889 }
890 }
891 } else {
892 /*
893 * Either:
894 *
895 * 1) This protocol has only request and response lines
896 * (e.g., FTP, where all the data goes over a different
897 * connection); assume the payload is a request or
898 * response.
899 *
900 * or
901 *
902 * 2) This protocol is just text, so that we should
903 * always, at minimum, print the first line and,
904 * in verbose mode, print all lines.
905 */
906 print_this = 1;
907 }
908
909 nd_print_protocol_caps(ndo);
910
911 if (print_this) {
912 /*
913 * In non-verbose mode, just print the protocol, followed
914 * by the first line.
915 *
916 * In verbose mode, print lines as text until we run out
917 * of characters or see something that's not a
918 * printable-ASCII line.
919 */
920 if (ndo->ndo_vflag) {
921 /*
922 * We're going to print all the text lines in the
923 * request or response; just print the length
924 * on the first line of the output.
925 */
926 ND_PRINT(", length: %u", len);
927 for (idx = 0;
928 idx < len && (eol = print_txt_line(ndo, "\n\t", pptr, idx, len)) != 0;
929 idx = eol)
930 ;
931 } else {
932 /*
933 * Just print the first text line.
934 */
935 print_txt_line(ndo, ": ", pptr, 0, len);
936 }
937 }
938 }
939
940 #if (defined(__i386__) || defined(_M_IX86) || defined(__X86__) || defined(__x86_64__) || defined(_M_X64)) || \
941 (defined(__arm__) || defined(_M_ARM) || defined(__aarch64__)) || \
942 (defined(__m68k__) && (!defined(__mc68000__) && !defined(__mc68010__))) || \
943 (defined(__ppc__) || defined(__ppc64__) || defined(_M_PPC) || defined(_ARCH_PPC) || defined(_ARCH_PPC64)) || \
944 (defined(__s390__) || defined(__s390x__) || defined(__zarch__)) || \
945 defined(__vax__)
946 /*
947 * The processor natively handles unaligned loads, so just use memcpy()
948 * and memcmp(), to enable those optimizations.
949 *
950 * XXX - are those all the x86 tests we need?
951 * XXX - do we need to worry about ARMv1 through ARMv5, which didn't
952 * support unaligned loads, and, if so, do we need to worry about all
953 * of them, or just some of them, e.g. ARMv5?
954 * XXX - are those the only 68k tests we need not to generated
955 * unaligned accesses if the target is the 68000 or 68010?
956 * XXX - are there any tests we don't need, because some definitions are for
957 * compilers that also predefine the GCC symbols?
958 * XXX - do we need to test for both 32-bit and 64-bit versions of those
959 * architectures in all cases?
960 */
961 #else
962 /*
963 * The processor doesn't natively handle unaligned loads,
964 * and the compiler might "helpfully" optimize memcpy()
965 * and memcmp(), when handed pointers that would normally
966 * be properly aligned, into sequences that assume proper
967 * alignment.
968 *
969 * Do copies and compares of possibly-unaligned data by
970 * calling routines that wrap memcpy() and memcmp(), to
971 * prevent that optimization.
972 */
973 void
974 unaligned_memcpy(void *p, const void *q, size_t l)
975 {
976 memcpy(p, q, l);
977 }
978
979 /* As with memcpy(), so with memcmp(). */
980 int
981 unaligned_memcmp(const void *p, const void *q, size_t l)
982 {
983 return (memcmp(p, q, l));
984 }
985 #endif
986