blob: 97afbdf60adb0067c72e2456d950fc5063b2494b [file] [log] [blame]
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001/*
Damien Miller95def091999-11-25 00:26:21 +11002 * Author: Tatu Ylonen <ylo@cs.hut.fi>
Damien Miller95def091999-11-25 00:26:21 +11003 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
4 * All rights reserved
Damien Miller95def091999-11-25 00:26:21 +11005 * Interface for the packet protocol functions.
Damien Miller4af51302000-04-16 11:18:38 +10006 *
Damien Millere4340be2000-09-16 13:29:08 +11007 * As far as I am concerned, the code I have written for this software
8 * can be used freely for any purpose. Any derived versions of this
9 * software must be clearly marked as such, and if the derived work is
10 * incompatible with the protocol description in the RFC file, it must be
11 * called by a name other than "ssh" or "Secure Shell".
Damien Miller95def091999-11-25 00:26:21 +110012 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100013
Ben Lindstrom16ae3d02001-07-04 04:02:36 +000014/* RCSID("$OpenBSD: packet.h,v 1.24 2001/06/26 06:32:57 itojun Exp $"); */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100015
16#ifndef PACKET_H
17#define PACKET_H
18
19#include <openssl/bn.h>
Damien Millerd4a8b7e1999-10-27 13:42:43 +100020
Damien Miller5428f641999-11-25 11:54:57 +110021/*
22 * Sets the socket used for communication. Disables encryption until
23 * packet_set_encryption_key is called. It is permissible that fd_in and
24 * fd_out are the same descriptor; in that case it is assumed to be a socket.
25 */
Ben Lindstrom16ae3d02001-07-04 04:02:36 +000026void packet_set_connection(int, int);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100027
28/* Puts the connection file descriptors into non-blocking mode. */
Damien Miller95def091999-11-25 00:26:21 +110029void packet_set_nonblocking(void);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100030
31/* Returns the file descriptor used for input. */
Damien Miller95def091999-11-25 00:26:21 +110032int packet_get_connection_in(void);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100033
34/* Returns the file descriptor used for output. */
Damien Miller95def091999-11-25 00:26:21 +110035int packet_get_connection_out(void);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100036
Damien Miller5428f641999-11-25 11:54:57 +110037/*
38 * Closes the connection (both descriptors) and clears and frees internal
39 * data structures.
40 */
Damien Miller95def091999-11-25 00:26:21 +110041void packet_close(void);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100042
Damien Miller5428f641999-11-25 11:54:57 +110043/*
44 * Causes any further packets to be encrypted using the given key. The same
45 * key is used for both sending and reception. However, both directions are
46 * encrypted independently of each other. Cipher types are defined in ssh.h.
47 */
Damien Miller4af51302000-04-16 11:18:38 +100048void
Ben Lindstrom16ae3d02001-07-04 04:02:36 +000049packet_set_encryption_key(const u_char *, u_int, int);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100050
Damien Miller5428f641999-11-25 11:54:57 +110051/*
52 * Sets remote side protocol flags for the current connection. This can be
53 * called at any time.
54 */
Ben Lindstrom16ae3d02001-07-04 04:02:36 +000055void packet_set_protocol_flags(u_int);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100056
57/* Returns the remote protocol flags set earlier by the above function. */
Ben Lindstrom46c16222000-12-22 01:43:59 +000058u_int packet_get_protocol_flags(void);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100059
60/* Enables compression in both directions starting from the next packet. */
Ben Lindstrom16ae3d02001-07-04 04:02:36 +000061void packet_start_compression(int);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100062
Damien Miller5428f641999-11-25 11:54:57 +110063/*
64 * Informs that the current session is interactive. Sets IP flags for
65 * optimal performance in interactive use.
66 */
Ben Lindstrom16ae3d02001-07-04 04:02:36 +000067void packet_set_interactive(int);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100068
69/* Returns true if the current connection is interactive. */
Damien Miller95def091999-11-25 00:26:21 +110070int packet_is_interactive(void);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100071
72/* Starts constructing a packet to send. */
Ben Lindstrom16ae3d02001-07-04 04:02:36 +000073void packet_start(u_char);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100074
75/* Appends a character to the packet data. */
Damien Miller95def091999-11-25 00:26:21 +110076void packet_put_char(int ch);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100077
78/* Appends an integer to the packet data. */
Ben Lindstrom46c16222000-12-22 01:43:59 +000079void packet_put_int(u_int value);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100080
81/* Appends an arbitrary precision integer to packet data. */
Damien Miller95def091999-11-25 00:26:21 +110082void packet_put_bignum(BIGNUM * value);
Damien Miller33b13562000-04-04 14:38:59 +100083void packet_put_bignum2(BIGNUM * value);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100084
85/* Appends a string to packet data. */
Ben Lindstrom46c16222000-12-22 01:43:59 +000086void packet_put_string(const char *buf, u_int len);
Damien Miller33b13562000-04-04 14:38:59 +100087void packet_put_cstring(const char *str);
Ben Lindstrom46c16222000-12-22 01:43:59 +000088void packet_put_raw(const char *buf, u_int len);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100089
Damien Miller5428f641999-11-25 11:54:57 +110090/*
91 * Finalizes and sends the packet. If the encryption key has been set,
92 * encrypts the packet before sending.
93 */
Damien Miller95def091999-11-25 00:26:21 +110094void packet_send(void);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100095
96/* Waits until a packet has been received, and returns its type. */
Damien Miller95def091999-11-25 00:26:21 +110097int packet_read(int *payload_len_ptr);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100098
Damien Miller5428f641999-11-25 11:54:57 +110099/*
100 * Waits until a packet has been received, verifies that its type matches
101 * that given, and gives a fatal error and exits if there is a mismatch.
102 */
Damien Miller95def091999-11-25 00:26:21 +1100103void packet_read_expect(int *payload_len_ptr, int type);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000104
Damien Miller5428f641999-11-25 11:54:57 +1100105/*
106 * Checks if a full packet is available in the data received so far via
107 * packet_process_incoming. If so, reads the packet; otherwise returns
108 * SSH_MSG_NONE. This does not wait for data from the connection.
109 * SSH_MSG_DISCONNECT is handled specially here. Also, SSH_MSG_IGNORE
110 * messages are skipped by this function and are never returned to higher
111 * levels.
112 */
Damien Miller95def091999-11-25 00:26:21 +1100113int packet_read_poll(int *packet_len_ptr);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000114
Damien Miller5428f641999-11-25 11:54:57 +1100115/*
116 * Buffers the given amount of input characters. This is intended to be used
117 * together with packet_read_poll.
118 */
Ben Lindstrom46c16222000-12-22 01:43:59 +0000119void packet_process_incoming(const char *buf, u_int len);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000120
121/* Returns a character (0-255) from the packet data. */
Ben Lindstrom46c16222000-12-22 01:43:59 +0000122u_int packet_get_char(void);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000123
124/* Returns an integer from the packet data. */
Ben Lindstrom46c16222000-12-22 01:43:59 +0000125u_int packet_get_int(void);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000126
Damien Miller5428f641999-11-25 11:54:57 +1100127/*
128 * Returns an arbitrary precision integer from the packet data. The integer
129 * must have been initialized before this call.
130 */
Damien Miller95def091999-11-25 00:26:21 +1100131void packet_get_bignum(BIGNUM * value, int *length_ptr);
Damien Miller33b13562000-04-04 14:38:59 +1000132void packet_get_bignum2(BIGNUM * value, int *length_ptr);
133char *packet_get_raw(int *length_ptr);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000134
Damien Miller5428f641999-11-25 11:54:57 +1100135/*
136 * Returns a string from the packet data. The string is allocated using
137 * xmalloc; it is the responsibility of the calling program to free it when
138 * no longer needed. The length_ptr argument may be NULL, or point to an
139 * integer into which the length of the string is stored.
140 */
Ben Lindstrom46c16222000-12-22 01:43:59 +0000141char *packet_get_string(u_int *length_ptr);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000142
Damien Miller5428f641999-11-25 11:54:57 +1100143/*
144 * Logs the error in syslog using LOG_INFO, constructs and sends a disconnect
145 * packet, closes the connection, and exits. This function never returns.
146 * The error message should not contain a newline. The total length of the
147 * message must not exceed 1024 bytes.
148 */
Damien Miller7684ee12000-03-17 23:40:15 +1100149void packet_disconnect(const char *fmt,...) __attribute__((format(printf, 1, 2)));
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000150
Damien Miller5428f641999-11-25 11:54:57 +1100151/*
152 * Sends a diagnostic message to the other side. This message can be sent at
153 * any time (but not while constructing another message). The message is
154 * printed immediately, but only if the client is being executed in verbose
155 * mode. These messages are primarily intended to ease debugging
156 * authentication problems. The total length of the message must not exceed
157 * 1024 bytes. This will automatically call packet_write_wait. If the
158 * remote side protocol flags do not indicate that it supports SSH_MSG_DEBUG,
159 * this will do nothing.
160 */
Damien Miller7684ee12000-03-17 23:40:15 +1100161void packet_send_debug(const char *fmt,...) __attribute__((format(printf, 1, 2)));
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000162
Damien Miller5428f641999-11-25 11:54:57 +1100163/* Checks if there is any buffered output, and tries to write some of the output. */
Damien Miller95def091999-11-25 00:26:21 +1100164void packet_write_poll(void);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000165
166/* Waits until all pending output data has been written. */
Damien Miller95def091999-11-25 00:26:21 +1100167void packet_write_wait(void);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000168
169/* Returns true if there is buffered data to write to the connection. */
Damien Miller95def091999-11-25 00:26:21 +1100170int packet_have_data_to_write(void);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000171
172/* Returns true if there is not too much data to write to the connection. */
Damien Miller95def091999-11-25 00:26:21 +1100173int packet_not_very_much_data_to_write(void);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000174
Damien Miller6162d121999-11-21 13:23:52 +1100175/* maximum packet size, requested by client with SSH_CMSG_MAX_PACKET_SIZE */
176extern int max_packet_size;
Ben Lindstrom16ae3d02001-07-04 04:02:36 +0000177int packet_set_maxsize(int);
Damien Miller6162d121999-11-21 13:23:52 +1100178#define packet_get_maxsize() max_packet_size
179
Ben Lindstromae8e2d32001-04-14 23:13:02 +0000180/* Stores tty modes from the fd or tiop into current packet. */
Ben Lindstrom16ae3d02001-07-04 04:02:36 +0000181void tty_make_modes(int, struct termios *);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000182
183/* Parses tty modes for the fd from the current packet. */
Ben Lindstrom16ae3d02001-07-04 04:02:36 +0000184void tty_parse_modes(int, int *);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000185
186#define packet_integrity_check(payload_len, expected_len, type) \
187do { \
188 int _p = (payload_len), _e = (expected_len); \
189 if (_p != _e) { \
190 log("Packet integrity error (%d != %d) at %s:%d", \
191 _p, _e, __FILE__, __LINE__); \
192 packet_disconnect("Packet integrity error. (%d)", (type)); \
193 } \
194} while (0)
195
Damien Miller4af51302000-04-16 11:18:38 +1000196#define packet_done() \
197do { \
198 int _len = packet_remaining(); \
199 if (_len > 0) { \
200 log("Packet integrity error (%d bytes remaining) at %s:%d", \
201 _len ,__FILE__, __LINE__); \
202 packet_disconnect("Packet integrity error."); \
203 } \
204} while (0)
205
Damien Miller34132e52000-01-14 15:45:46 +1100206/* remote host is connected via a socket/ipv4 */
207int packet_connection_is_on_socket(void);
208int packet_connection_is_ipv4(void);
209
Damien Miller4af51302000-04-16 11:18:38 +1000210/* returns remaining payload bytes */
211int packet_remaining(void);
212
Ben Lindstrom5699c5f2001-03-05 06:17:49 +0000213/* append an ignore message */
Ben Lindstrom16ae3d02001-07-04 04:02:36 +0000214void packet_send_ignore(int);
Ben Lindstrome229b252001-03-05 06:28:06 +0000215
216/* add an ignore message and make sure size (current+ignore) = n*sumlen */
Ben Lindstrom16ae3d02001-07-04 04:02:36 +0000217void packet_inject_ignore(int);
Ben Lindstrom5699c5f2001-03-05 06:17:49 +0000218
Damien Miller95def091999-11-25 00:26:21 +1100219#endif /* PACKET_H */