X-Git-Url: https://git.tcpdump.org/tcpdump/blobdiff_plain/c9d84d15c5c4dc8eca7594101fe5026080ed641e..refs/heads/master:/print-krb.c diff --git a/print-krb.c b/print-krb.c index 63bfc863..69a0c115 100644 --- a/print-krb.c +++ b/print-krb.c @@ -21,34 +21,36 @@ * Initial contribution from John Hawkinson (jhawk@mit.edu). */ -#ifndef lint -static const char rcsid[] = - "@(#) $Header: /tcpdump/master/tcpdump/print-krb.c,v 1.11 1999-10-30 05:11:17 itojun Exp $"; -#endif +/* \summary: Kerberos printer */ -#include -#include -#include +#include -#include -#include -#include -#include -#include -#include +#include "netdissect-stdinc.h" -#include -#include -#include +#include "netdissect.h" +#include "extract.h" -#include "interface.h" -#include "addrtoname.h" +/* + * Kerberos 4: + * + * Athena Technical Plan + * Section E.2.1 + * Kerberos Authentication and Authorization System + * by S. P. Miller, B. C. Neuman, J. I. Schiller, and J. H. Saltzer + * + * https://web.mit.edu/Saltzer/www/publications/athenaplan/e.2.1.pdf + * + * 7. Appendix I Design Specifications + * + * Kerberos 5: + * + * RFC 1510, RFC 2630, etc. + */ -const u_char *c_print(register const u_char *, register const u_char *); -const u_char *krb4_print_hdr(const u_char *); -void krb4_print(const u_char *); -void krb_print(const u_char *, u_int); +static const u_char *c_print(netdissect_options *, const u_char *, const u_char *); +static const u_char *krb4_print_hdr(netdissect_options *, const u_char *); +static void krb4_print(netdissect_options *, const u_char *); #define AUTH_MSG_KDC_REQUEST 1<<1 #define AUTH_MSG_KDC_REPLY 2<<1 @@ -73,13 +75,11 @@ void krb_print(const u_char *, u_int); #define KERB_ERR_NULL_KEY 10 struct krb { - u_char pvno; /* Protocol Version */ - u_char type; /* Type+B */ + nd_uint8_t pvno; /* Protocol Version */ + nd_uint8_t type; /* Type+B */ }; -static char tstr[] = " [|kerberos]"; - -static struct tok type2str[] = { +static const struct tok type2str[] = { { AUTH_MSG_KDC_REQUEST, "KDC_REQUEST" }, { AUTH_MSG_KDC_REPLY, "KDC_REPLY" }, { AUTH_MSG_APPL_REQUEST, "APPL_REQUEST" }, @@ -92,7 +92,7 @@ static struct tok type2str[] = { { 0, NULL } }; -static struct tok kerr2str[] = { +static const struct tok kerr2str[] = { { KERB_ERR_OK, "OK" }, { KERB_ERR_NAME_EXP, "NAME_EXP" }, { KERB_ERR_SERVICE_EXP, "SERVICE_EXP" }, @@ -107,182 +107,148 @@ static struct tok kerr2str[] = { { 0, NULL} }; - -/* little endian (unaligned) to host byte order */ -/* XXX need to look at this... */ -#define vtohlp(x) ((( ((char *)(x))[0] ) ) | \ - (( ((char *)(x))[1] ) << 8) | \ - (( ((char *)(x))[2] ) << 16) | \ - (( ((char *)(x))[3] ) << 24)) -#define vtohsp(x) ((( ((char *)(x))[0] ) ) | \ - (( ((char *)(x))[1] ) << 8)) -/* network (big endian) (unaligned) to host byte order */ -#define ntohlp(x) ((( ((char *)(x))[3] ) ) | \ - (( ((char *)(x))[2] ) << 8) | \ - (( ((char *)(x))[1] ) << 16) | \ - (( ((char *)(x))[0] ) << 24)) -#define ntohsp(x) ((( ((char *)(x))[1] ) ) | \ - (( ((char *)(x))[0] ) << 8)) - - - -const u_char * -c_print(register const u_char *s, register const u_char *ep) +static const u_char * +c_print(netdissect_options *ndo, + const u_char *s, const u_char *ep) { - register u_char c; - register int flag; + u_char c; + int flag; flag = 1; while (s < ep) { - c = *s++; + c = GET_U_1(s); + s++; if (c == '\0') { flag = 0; break; } - if (!isascii(c)) { - c = toascii(c); - putchar('M'); - putchar('-'); - } - if (!isprint(c)) { - c ^= 0x40; /* DEL to ?, others to alpha */ - putchar('^'); - } - putchar(c); + fn_print_char(ndo, c); } if (flag) return NULL; return (s); } -const u_char * -krb4_print_hdr(const u_char *cp) +static const u_char * +krb4_print_hdr(netdissect_options *ndo, + const u_char *cp) { cp += 2; -#define PRINT if ((cp = c_print(cp, snapend)) == NULL) goto trunc +#define PRINT if ((cp = c_print(ndo, cp, ndo->ndo_snapend)) == NULL) goto trunc PRINT; - putchar('.'); + ND_PRINT("."); PRINT; - putchar('@'); + ND_PRINT("@"); PRINT; return (cp); trunc: - fputs(tstr, stdout); + nd_print_trunc(ndo); return (NULL); #undef PRINT } -void -krb4_print(const u_char *cp) +static void +krb4_print(netdissect_options *ndo, + const u_char *cp) { - register const struct krb *kp; + const struct krb *kp; u_char type; u_short len; -#define PRINT if ((cp = c_print(cp, snapend)) == NULL) goto trunc +#define PRINT if ((cp = c_print(ndo, cp, ndo->ndo_snapend)) == NULL) goto trunc /* True if struct krb is little endian */ -#define IS_LENDIAN(kp) (((kp)->type & 0x01) != 0) -#define KTOHSP(kp, cp) (IS_LENDIAN(kp) ? vtohsp(cp) : ntohsp(cp)) +#define IS_LENDIAN(kp) ((GET_U_1((kp)->type) & 0x01) != 0) +#define KTOHSP(kp, cp) (IS_LENDIAN(kp) ? GET_LE_U_2(cp) : GET_BE_U_2(cp)) - kp = (struct krb *)cp; + kp = (const struct krb *)cp; - if ((&kp->type) >= snapend) { - fputs(tstr, stdout); - return; - } - - type = kp->type & (0xFF << 1); + type = GET_U_1(kp->type) & (0xFF << 1); - printf(" %s %s: ", + ND_PRINT(" %s %s: ", IS_LENDIAN(kp) ? "le" : "be", tok2str(type2str, NULL, type)); switch (type) { case AUTH_MSG_KDC_REQUEST: - if ((cp = krb4_print_hdr(cp)) == NULL) + if ((cp = krb4_print_hdr(ndo, cp)) == NULL) return; cp += 4; /* ctime */ - TCHECK(*cp); - printf(" %dmin ", *cp++ * 5); + ND_PRINT(" %umin ", GET_U_1(cp) * 5); + cp++; PRINT; - putchar('.'); + ND_PRINT("."); PRINT; break; case AUTH_MSG_APPL_REQUEST: cp += 2; - TCHECK(*cp); - printf("v%d ", *cp++); + ND_PRINT("v%u ", GET_U_1(cp)); + cp++; PRINT; - TCHECK(*cp); - printf(" (%d)", *cp++); - TCHECK(*cp); - printf(" (%d)", *cp); + ND_PRINT(" (%u)", GET_U_1(cp)); + cp++; + ND_PRINT(" (%u)", GET_U_1(cp)); break; case AUTH_MSG_KDC_REPLY: - if ((cp = krb4_print_hdr(cp)) == NULL) + if ((cp = krb4_print_hdr(ndo, cp)) == NULL) return; cp += 10; /* timestamp + n + exp + kvno */ - TCHECK2(*cp, sizeof(short)); len = KTOHSP(kp, cp); - printf(" (%d)", len); + ND_PRINT(" (%u)", len); break; case AUTH_MSG_ERR_REPLY: - if ((cp = krb4_print_hdr(cp)) == NULL) + if ((cp = krb4_print_hdr(ndo, cp)) == NULL) return; - cp += 4; /* timestamp */ - TCHECK2(*cp, sizeof(short)); - printf(" %s ", tok2str(kerr2str, NULL, KTOHSP(kp, cp))); + cp += 4; /* timestamp */ + ND_PRINT(" %s ", tok2str(kerr2str, NULL, KTOHSP(kp, cp))); cp += 4; PRINT; break; default: - fputs("(unknown)", stdout); + ND_PRINT("(unknown)"); break; } return; trunc: - fputs(tstr, stdout); + nd_print_trunc(ndo); } void -krb_print(const u_char *dat, u_int length) +krb_print(netdissect_options *ndo, + const u_char *dat) { - register const struct krb *kp; + const struct krb *kp; - kp = (struct krb *)dat; + ndo->ndo_protocol = "kerberos"; + nd_print_protocol(ndo); - if (dat >= snapend) { - fputs(tstr, stdout); - return; - } + kp = (const struct krb *)dat; - switch (kp->pvno) { + switch (GET_U_1(kp->pvno)) { case 1: case 2: case 3: - printf(" v%d", kp->pvno); + ND_PRINT(" v%u", GET_U_1(kp->pvno)); break; case 4: - printf(" v%d", kp->pvno); - krb4_print((const u_char *)kp); + ND_PRINT(" v%u", GET_U_1(kp->pvno)); + krb4_print(ndo, (const u_char *)kp); break; case 106: case 107: - fputs(" v5", stdout); + ND_PRINT(" v5"); /* Decode ASN.1 here "someday" */ break; } - return; }