1 /*
2  * Copyright (C) 2001 WIDE Project.
3  * All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  * 3. Neither the name of the project nor the names of its contributors
14  *    may be used to endorse or promote products derived from this software
15  *    without specific prior written permission.
16  *
17  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
18  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
21  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27  * SUCH DAMAGE.
28  */
29 
30 #define NETDISSECT_REWORKED
31 #ifdef HAVE_CONFIG_H
32 #include "config.h"
33 #endif
34 
35 #include <tcpdump-stdinc.h>
36 
37 #include "nameser.h"
38 
39 #include <stdio.h>
40 #include <string.h>
41 
42 #include "interface.h"
43 #include "addrtoname.h"
44 #include "extract.h"                    /* must come after interface.h */
45 
46 /* BIND9 lib/lwres/include/lwres */
47 typedef uint32_t lwres_uint32_t;
48 typedef uint16_t lwres_uint16_t;
49 typedef uint8_t lwres_uint8_t;
50 
51 struct lwres_lwpacket {
52 	lwres_uint32_t		length;
53 	lwres_uint16_t		version;
54 	lwres_uint16_t		pktflags;
55 	lwres_uint32_t		serial;
56 	lwres_uint32_t		opcode;
57 	lwres_uint32_t		result;
58 	lwres_uint32_t		recvlength;
59 	lwres_uint16_t		authtype;
60 	lwres_uint16_t		authlength;
61 };
62 
63 #define LWRES_LWPACKETFLAG_RESPONSE	0x0001U	/* if set, pkt is a response */
64 
65 #define LWRES_LWPACKETVERSION_0		0
66 
67 #define LWRES_FLAG_TRUSTNOTREQUIRED	0x00000001U
68 #define LWRES_FLAG_SECUREDATA		0x00000002U
69 
70 /*
71  * no-op
72  */
73 #define LWRES_OPCODE_NOOP		0x00000000U
74 
75 typedef struct {
76 	/* public */
77 	lwres_uint16_t			datalength;
78 	/* data follows */
79 } lwres_nooprequest_t;
80 
81 typedef struct {
82 	/* public */
83 	lwres_uint16_t			datalength;
84 	/* data follows */
85 } lwres_noopresponse_t;
86 
87 /*
88  * get addresses by name
89  */
90 #define LWRES_OPCODE_GETADDRSBYNAME	0x00010001U
91 
92 typedef struct lwres_addr lwres_addr_t;
93 
94 struct lwres_addr {
95 	lwres_uint32_t			family;
96 	lwres_uint16_t			length;
97 	/* address folows */
98 };
99 
100 typedef struct {
101 	/* public */
102 	lwres_uint32_t			flags;
103 	lwres_uint32_t			addrtypes;
104 	lwres_uint16_t			namelen;
105 	/* name follows */
106 } lwres_gabnrequest_t;
107 
108 typedef struct {
109 	/* public */
110 	lwres_uint32_t			flags;
111 	lwres_uint16_t			naliases;
112 	lwres_uint16_t			naddrs;
113 	lwres_uint16_t			realnamelen;
114 	/* aliases follows */
115 	/* addrs follows */
116 	/* realname follows */
117 } lwres_gabnresponse_t;
118 
119 /*
120  * get name by address
121  */
122 #define LWRES_OPCODE_GETNAMEBYADDR	0x00010002U
123 typedef struct {
124 	/* public */
125 	lwres_uint32_t			flags;
126 	lwres_addr_t			addr;
127 	/* addr body follows */
128 } lwres_gnbarequest_t;
129 
130 typedef struct {
131 	/* public */
132 	lwres_uint32_t			flags;
133 	lwres_uint16_t			naliases;
134 	lwres_uint16_t			realnamelen;
135 	/* aliases follows */
136 	/* realname follows */
137 } lwres_gnbaresponse_t;
138 
139 /*
140  * get rdata by name
141  */
142 #define LWRES_OPCODE_GETRDATABYNAME	0x00010003U
143 
144 typedef struct {
145 	/* public */
146 	lwres_uint32_t			flags;
147 	lwres_uint16_t			rdclass;
148 	lwres_uint16_t			rdtype;
149 	lwres_uint16_t			namelen;
150 	/* name follows */
151 } lwres_grbnrequest_t;
152 
153 typedef struct {
154 	/* public */
155 	lwres_uint32_t			flags;
156 	lwres_uint16_t			rdclass;
157 	lwres_uint16_t			rdtype;
158 	lwres_uint32_t			ttl;
159 	lwres_uint16_t			nrdatas;
160 	lwres_uint16_t			nsigs;
161 	/* realname here (len + name) */
162 	/* rdata here (len + name) */
163 	/* signatures here (len + name) */
164 } lwres_grbnresponse_t;
165 
166 #define LWRDATA_VALIDATED	0x00000001
167 
168 #define LWRES_ADDRTYPE_V4		0x00000001U	/* ipv4 */
169 #define LWRES_ADDRTYPE_V6		0x00000002U	/* ipv6 */
170 
171 #define LWRES_MAX_ALIASES		16		/* max # of aliases */
172 #define LWRES_MAX_ADDRS			64		/* max # of addrs */
173 
174 static const struct tok opcode[] = {
175 	{ LWRES_OPCODE_NOOP,		"noop", },
176 	{ LWRES_OPCODE_GETADDRSBYNAME,	"getaddrsbyname", },
177 	{ LWRES_OPCODE_GETNAMEBYADDR,	"getnamebyaddr", },
178 	{ LWRES_OPCODE_GETRDATABYNAME,	"getrdatabyname", },
179 	{ 0, 				NULL, },
180 };
181 
182 /* print-domain.c */
183 extern const struct tok ns_type2str[];
184 extern const struct tok ns_class2str[];
185 
186 static int
lwres_printname(netdissect_options * ndo,size_t l,const char * p0)187 lwres_printname(netdissect_options *ndo,
188                 size_t l, const char *p0)
189 {
190 	const char *p;
191 	size_t i;
192 
193 	p = p0;
194 	/* + 1 for terminating \0 */
195 	if (p + l + 1 > (const char *)ndo->ndo_snapend)
196 		goto trunc;
197 
198 	ND_PRINT((ndo, " "));
199 	for (i = 0; i < l; i++)
200 		safeputchar(ndo, *p++);
201 	p++;	/* skip terminating \0 */
202 
203 	return p - p0;
204 
205   trunc:
206 	return -1;
207 }
208 
209 static int
lwres_printnamelen(netdissect_options * ndo,const char * p)210 lwres_printnamelen(netdissect_options *ndo,
211                    const char *p)
212 {
213 	uint16_t l;
214 	int advance;
215 
216 	if (p + 2 > (const char *)ndo->ndo_snapend)
217 		goto trunc;
218 	l = EXTRACT_16BITS(p);
219 	advance = lwres_printname(ndo, l, p + 2);
220 	if (advance < 0)
221 		goto trunc;
222 	return 2 + advance;
223 
224   trunc:
225 	return -1;
226 }
227 
228 static int
lwres_printbinlen(netdissect_options * ndo,const char * p0)229 lwres_printbinlen(netdissect_options *ndo,
230                   const char *p0)
231 {
232 	const char *p;
233 	uint16_t l;
234 	int i;
235 
236 	p = p0;
237 	if (p + 2 > (const char *)ndo->ndo_snapend)
238 		goto trunc;
239 	l = EXTRACT_16BITS(p);
240 	if (p + 2 + l > (const char *)ndo->ndo_snapend)
241 		goto trunc;
242 	p += 2;
243 	for (i = 0; i < l; i++)
244 		ND_PRINT((ndo, "%02x", *p++));
245 	return p - p0;
246 
247   trunc:
248 	return -1;
249 }
250 
251 static int
lwres_printaddr(netdissect_options * ndo,lwres_addr_t * ap)252 lwres_printaddr(netdissect_options *ndo,
253                 lwres_addr_t *ap)
254 {
255 	uint16_t l;
256 	const char *p;
257 	int i;
258 
259 	ND_TCHECK(ap->length);
260 	l = EXTRACT_16BITS(&ap->length);
261 	/* XXX ap points to packed struct */
262 	p = (const char *)&ap->length + sizeof(ap->length);
263 	ND_TCHECK2(*p, l);
264 
265 	switch (EXTRACT_32BITS(&ap->family)) {
266 	case 1:	/* IPv4 */
267 		if (l < 4)
268 			return -1;
269 		ND_PRINT((ndo, " %s", ipaddr_string(ndo, p)));
270 		p += sizeof(struct in_addr);
271 		break;
272 #ifdef INET6
273 	case 2:	/* IPv6 */
274 		if (l < 16)
275 			return -1;
276 		ND_PRINT((ndo, " %s", ip6addr_string(ndo, p)));
277 		p += sizeof(struct in6_addr);
278 		break;
279 #endif
280 	default:
281 		ND_PRINT((ndo, " %u/", EXTRACT_32BITS(&ap->family)));
282 		for (i = 0; i < l; i++)
283 			ND_PRINT((ndo, "%02x", *p++));
284 	}
285 
286 	return p - (const char *)ap;
287 
288   trunc:
289 	return -1;
290 }
291 
292 void
lwres_print(netdissect_options * ndo,register const u_char * bp,u_int length)293 lwres_print(netdissect_options *ndo,
294             register const u_char *bp, u_int length)
295 {
296 	const struct lwres_lwpacket *np;
297 	uint32_t v;
298 	const char *s;
299 	int response;
300 	int advance;
301 	int unsupported = 0;
302 
303 	np = (const struct lwres_lwpacket *)bp;
304 	ND_TCHECK(np->authlength);
305 
306 	ND_PRINT((ndo, " lwres"));
307 	v = EXTRACT_16BITS(&np->version);
308 	if (ndo->ndo_vflag || v != LWRES_LWPACKETVERSION_0)
309 		ND_PRINT((ndo, " v%u", v));
310 	if (v != LWRES_LWPACKETVERSION_0) {
311 		s = (const char *)np + EXTRACT_32BITS(&np->length);
312 		goto tail;
313 	}
314 
315 	response = EXTRACT_16BITS(&np->pktflags) & LWRES_LWPACKETFLAG_RESPONSE;
316 
317 	/* opcode and pktflags */
318 	v = EXTRACT_32BITS(&np->opcode);
319 	s = tok2str(opcode, "#0x%x", v);
320 	ND_PRINT((ndo, " %s%s", s, response ? "" : "?"));
321 
322 	/* pktflags */
323 	v = EXTRACT_16BITS(&np->pktflags);
324 	if (v & ~LWRES_LWPACKETFLAG_RESPONSE)
325 		ND_PRINT((ndo, "[0x%x]", v));
326 
327 	if (ndo->ndo_vflag > 1) {
328 		ND_PRINT((ndo, " ("));	/*)*/
329 		ND_PRINT((ndo, "serial:0x%x", EXTRACT_32BITS(&np->serial)));
330 		ND_PRINT((ndo, " result:0x%x", EXTRACT_32BITS(&np->result)));
331 		ND_PRINT((ndo, " recvlen:%u", EXTRACT_32BITS(&np->recvlength)));
332 		/* BIND910: not used */
333 		if (ndo->ndo_vflag > 2) {
334 			ND_PRINT((ndo, " authtype:0x%x", EXTRACT_16BITS(&np->authtype)));
335 			ND_PRINT((ndo, " authlen:%u", EXTRACT_16BITS(&np->authlength)));
336 		}
337 		/*(*/
338 		ND_PRINT((ndo, ")"));
339 	}
340 
341 	/* per-opcode content */
342 	if (!response) {
343 		/*
344 		 * queries
345 		 */
346 		lwres_gabnrequest_t *gabn;
347 		lwres_gnbarequest_t *gnba;
348 		lwres_grbnrequest_t *grbn;
349 		uint32_t l;
350 
351 		gabn = NULL;
352 		gnba = NULL;
353 		grbn = NULL;
354 
355 		switch (EXTRACT_32BITS(&np->opcode)) {
356 		case LWRES_OPCODE_NOOP:
357 			break;
358 		case LWRES_OPCODE_GETADDRSBYNAME:
359 			gabn = (lwres_gabnrequest_t *)(np + 1);
360 			ND_TCHECK(gabn->namelen);
361 			/* XXX gabn points to packed struct */
362 			s = (const char *)&gabn->namelen +
363 			    sizeof(gabn->namelen);
364 			l = EXTRACT_16BITS(&gabn->namelen);
365 
366 			/* BIND910: not used */
367 			if (ndo->ndo_vflag > 2) {
368 				ND_PRINT((ndo, " flags:0x%x",
369 				    EXTRACT_32BITS(&gabn->flags)));
370 			}
371 
372 			v = EXTRACT_32BITS(&gabn->addrtypes);
373 			switch (v & (LWRES_ADDRTYPE_V4 | LWRES_ADDRTYPE_V6)) {
374 			case LWRES_ADDRTYPE_V4:
375 				ND_PRINT((ndo, " IPv4"));
376 				break;
377 			case LWRES_ADDRTYPE_V6:
378 				ND_PRINT((ndo, " IPv6"));
379 				break;
380 			case LWRES_ADDRTYPE_V4 | LWRES_ADDRTYPE_V6:
381 				ND_PRINT((ndo, " IPv4/6"));
382 				break;
383 			}
384 			if (v & ~(LWRES_ADDRTYPE_V4 | LWRES_ADDRTYPE_V6))
385 				ND_PRINT((ndo, "[0x%x]", v));
386 
387 			advance = lwres_printname(ndo, l, s);
388 			if (advance < 0)
389 				goto trunc;
390 			s += advance;
391 			break;
392 		case LWRES_OPCODE_GETNAMEBYADDR:
393 			gnba = (lwres_gnbarequest_t *)(np + 1);
394 			ND_TCHECK(gnba->addr);
395 
396 			/* BIND910: not used */
397 			if (ndo->ndo_vflag > 2) {
398 				ND_PRINT((ndo, " flags:0x%x",
399 				    EXTRACT_32BITS(&gnba->flags)));
400 			}
401 
402 			s = (const char *)&gnba->addr;
403 
404 			advance = lwres_printaddr(ndo, &gnba->addr);
405 			if (advance < 0)
406 				goto trunc;
407 			s += advance;
408 			break;
409 		case LWRES_OPCODE_GETRDATABYNAME:
410 			/* XXX no trace, not tested */
411 			grbn = (lwres_grbnrequest_t *)(np + 1);
412 			ND_TCHECK(grbn->namelen);
413 
414 			/* BIND910: not used */
415 			if (ndo->ndo_vflag > 2) {
416 				ND_PRINT((ndo, " flags:0x%x",
417 				    EXTRACT_32BITS(&grbn->flags)));
418 			}
419 
420 			ND_PRINT((ndo, " %s", tok2str(ns_type2str, "Type%d",
421 			    EXTRACT_16BITS(&grbn->rdtype))));
422 			if (EXTRACT_16BITS(&grbn->rdclass) != C_IN) {
423 				ND_PRINT((ndo, " %s", tok2str(ns_class2str, "Class%d",
424 				    EXTRACT_16BITS(&grbn->rdclass))));
425 			}
426 
427 			/* XXX grbn points to packed struct */
428 			s = (const char *)&grbn->namelen +
429 			    sizeof(grbn->namelen);
430 			l = EXTRACT_16BITS(&grbn->namelen);
431 
432 			advance = lwres_printname(ndo, l, s);
433 			if (advance < 0)
434 				goto trunc;
435 			s += advance;
436 			break;
437 		default:
438 			unsupported++;
439 			break;
440 		}
441 	} else {
442 		/*
443 		 * responses
444 		 */
445 		lwres_gabnresponse_t *gabn;
446 		lwres_gnbaresponse_t *gnba;
447 		lwres_grbnresponse_t *grbn;
448 		uint32_t l, na;
449 		uint32_t i;
450 
451 		gabn = NULL;
452 		gnba = NULL;
453 		grbn = NULL;
454 
455 		switch (EXTRACT_32BITS(&np->opcode)) {
456 		case LWRES_OPCODE_NOOP:
457 			break;
458 		case LWRES_OPCODE_GETADDRSBYNAME:
459 			gabn = (lwres_gabnresponse_t *)(np + 1);
460 			ND_TCHECK(gabn->realnamelen);
461 			/* XXX gabn points to packed struct */
462 			s = (const char *)&gabn->realnamelen +
463 			    sizeof(gabn->realnamelen);
464 			l = EXTRACT_16BITS(&gabn->realnamelen);
465 
466 			/* BIND910: not used */
467 			if (ndo->ndo_vflag > 2) {
468 				ND_PRINT((ndo, " flags:0x%x",
469 				    EXTRACT_32BITS(&gabn->flags)));
470 			}
471 
472 			ND_PRINT((ndo, " %u/%u", EXTRACT_16BITS(&gabn->naliases),
473 			    EXTRACT_16BITS(&gabn->naddrs)));
474 
475 			advance = lwres_printname(ndo, l, s);
476 			if (advance < 0)
477 				goto trunc;
478 			s += advance;
479 
480 			/* aliases */
481 			na = EXTRACT_16BITS(&gabn->naliases);
482 			for (i = 0; i < na; i++) {
483 				advance = lwres_printnamelen(ndo, s);
484 				if (advance < 0)
485 					goto trunc;
486 				s += advance;
487 			}
488 
489 			/* addrs */
490 			na = EXTRACT_16BITS(&gabn->naddrs);
491 			for (i = 0; i < na; i++) {
492 				advance = lwres_printaddr(ndo, (lwres_addr_t *)s);
493 				if (advance < 0)
494 					goto trunc;
495 				s += advance;
496 			}
497 			break;
498 		case LWRES_OPCODE_GETNAMEBYADDR:
499 			gnba = (lwres_gnbaresponse_t *)(np + 1);
500 			ND_TCHECK(gnba->realnamelen);
501 			/* XXX gnba points to packed struct */
502 			s = (const char *)&gnba->realnamelen +
503 			    sizeof(gnba->realnamelen);
504 			l = EXTRACT_16BITS(&gnba->realnamelen);
505 
506 			/* BIND910: not used */
507 			if (ndo->ndo_vflag > 2) {
508 				ND_PRINT((ndo, " flags:0x%x",
509 				    EXTRACT_32BITS(&gnba->flags)));
510 			}
511 
512 			ND_PRINT((ndo, " %u", EXTRACT_16BITS(&gnba->naliases)));
513 
514 			advance = lwres_printname(ndo, l, s);
515 			if (advance < 0)
516 				goto trunc;
517 			s += advance;
518 
519 			/* aliases */
520 			na = EXTRACT_16BITS(&gnba->naliases);
521 			for (i = 0; i < na; i++) {
522 				advance = lwres_printnamelen(ndo, s);
523 				if (advance < 0)
524 					goto trunc;
525 				s += advance;
526 			}
527 			break;
528 		case LWRES_OPCODE_GETRDATABYNAME:
529 			/* XXX no trace, not tested */
530 			grbn = (lwres_grbnresponse_t *)(np + 1);
531 			ND_TCHECK(grbn->nsigs);
532 
533 			/* BIND910: not used */
534 			if (ndo->ndo_vflag > 2) {
535 				ND_PRINT((ndo, " flags:0x%x",
536 				    EXTRACT_32BITS(&grbn->flags)));
537 			}
538 
539 			ND_PRINT((ndo, " %s", tok2str(ns_type2str, "Type%d",
540 			    EXTRACT_16BITS(&grbn->rdtype))));
541 			if (EXTRACT_16BITS(&grbn->rdclass) != C_IN) {
542 				ND_PRINT((ndo, " %s", tok2str(ns_class2str, "Class%d",
543 				    EXTRACT_16BITS(&grbn->rdclass))));
544 			}
545 			ND_PRINT((ndo, " TTL "));
546 			relts_print(ndo, EXTRACT_32BITS(&grbn->ttl));
547 			ND_PRINT((ndo, " %u/%u", EXTRACT_16BITS(&grbn->nrdatas),
548 			    EXTRACT_16BITS(&grbn->nsigs)));
549 
550 			/* XXX grbn points to packed struct */
551 			s = (const char *)&grbn->nsigs+ sizeof(grbn->nsigs);
552 
553 			advance = lwres_printnamelen(ndo, s);
554 			if (advance < 0)
555 				goto trunc;
556 			s += advance;
557 
558 			/* rdatas */
559 			na = EXTRACT_16BITS(&grbn->nrdatas);
560 			for (i = 0; i < na; i++) {
561 				/* XXX should decode resource data */
562 				advance = lwres_printbinlen(ndo, s);
563 				if (advance < 0)
564 					goto trunc;
565 				s += advance;
566 			}
567 
568 			/* sigs */
569 			na = EXTRACT_16BITS(&grbn->nsigs);
570 			for (i = 0; i < na; i++) {
571 				/* XXX how should we print it? */
572 				advance = lwres_printbinlen(ndo, s);
573 				if (advance < 0)
574 					goto trunc;
575 				s += advance;
576 			}
577 			break;
578 		default:
579 			unsupported++;
580 			break;
581 		}
582 	}
583 
584   tail:
585 	/* length mismatch */
586 	if (EXTRACT_32BITS(&np->length) != length) {
587 		ND_PRINT((ndo, " [len: %u != %u]", EXTRACT_32BITS(&np->length),
588 		    length));
589 	}
590 	if (!unsupported && s < (const char *)np + EXTRACT_32BITS(&np->length))
591 		ND_PRINT((ndo, "[extra]"));
592 	return;
593 
594   trunc:
595 	ND_PRINT((ndo, "[|lwres]"));
596 }
597