mardock2009/oscam-2.26.01-11942-802-with-Advanced-fake-dcw-detection
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
f5b28cec0e
oscam-2.26.01-11942-802-wit.../module-radegast.c

408 lines
9.7 KiB
C
Raw Blame History

#define MODULE_LOG_PREFIX "radegast"
#include "globals.h"
#ifdef MODULE_RADEGAST
#include "oscam-client.h"
#include "oscam-ecm.h"
#include "oscam-net.h"
#include "oscam-string.h"
#include "oscam-reader.h"
#ifdef MODULE_STREAMRELAY
#include "module-streamrelay.h"
#include "oscam-chk.h"
#endif
static int32_t radegast_connect(void);
static int32_t radegast_send(struct s_client *client, uint8_t *buf)
{
int32_t l = buf[1] + 2;
return (send(client->pfd, buf, l, 0));
}
static int32_t radegast_recv(struct s_client *client, uint8_t *buf, int32_t l)
{
int32_t n;
if(!client->pfd) { return (-1); }
if(client->typ == 'c') // server code
{
if((n = cs_recv(client->pfd, buf, l, 0)) > 0)
{ client->last = time((time_t *) 0); }
}
else // client code
{
if((n = cs_recv(client->pfd, buf, l, 0)) > 0)
{
cs_log_dump_dbg(D_CLIENT, buf, n, "radegast: received %d bytes from %s", n, remote_txt());
client->last = time((time_t *) 0);
if((buf[0] == 0x02) && (buf[1] == 0x12) && (buf[2] == 0x05) && (buf[3] == 0x10)) { return (n); } // dcw received
else if((buf[0] == 0x02) && (buf[1] == 0x02) && (buf[2] == 0x04) && (buf[3] == 0x00)) { return (n); } // dcw no found
else if((buf[0] == 0x81) && (buf[1] == 0x00)) { return (n); } // cmd unknown
else { n = -1; }// no cmd radegast disconnect
}
}
return (n);
}
static int32_t radegast_recv_chk(struct s_client *client, uint8_t *dcw, int32_t *rc, uint8_t *buf, int32_t UNUSED(n))
{
if((buf[0] == 2) && (buf[1] == 0x12))
{
char tmp_dbg[33];
memcpy(dcw, buf + 4, 16);
cs_log_dbg(D_CLIENT, "radegast: recv chk - %s", cs_hexdump(0, dcw, 16, tmp_dbg, sizeof(tmp_dbg)));
*rc = 1;
return (client->reader->msg_idx);
}
return (-1);
}
static void radegast_auth_client(IN_ADDR_T ip)
{
int32_t ok;
struct s_auth *account;
struct s_client *cl = cur_client();
ok = check_ip(cfg.rad_allowed, ip);
if(!ok)
{
cs_log("radegast: IP not allowed");
cs_auth_client(cl, (struct s_auth *)0, NULL);
cs_disconnect_client(cl);
}
for(ok = 0, account = cfg.account; cfg.rad_usr && account && !ok; account = account->next)
{
ok = streq(cfg.rad_usr, account->usr);
if(ok && cs_auth_client(cl, account, NULL))
{ cs_disconnect_client(cl); }
}
if(!ok)
{ cs_auth_client(cl, ok ? account : (struct s_auth *)(-1), "radegast"); }
}
static void radegast_send_dcw(struct s_client *client, ECM_REQUEST *er)
{
uint8_t mbuf[1024];
mbuf[0] = 0x02; // DCW
if(er->rc < E_NOTFOUND)
{
#ifdef MODULE_STREAMRELAY
if((cfg.stream_relay_ctab.ctnum == 0 || chk_ctab_ex(er->caid, &cfg.stream_relay_ctab)) && cfg.stream_relay_enabled)
{
stream_write_cw(er);
}
#endif
mbuf[1] = 0x12; // len (overall)
mbuf[2] = 0x05; // ACCESS
mbuf[3] = 0x10; // len
memcpy(mbuf + 4, er->cw, 16);
}
else
{
mbuf[1] = 0x02; // len (overall)
mbuf[2] = 0x04; // NO ACCESS
mbuf[3] = 0x00; // len
}
radegast_send(client, mbuf);
}
static void radegast_process_ecm(uint8_t *buf, int32_t l)
{
int32_t i, n, sl;
ECM_REQUEST *er;
struct s_client *cl = cur_client();
if(!(er = get_ecmtask()))
{ return; }
for(i = 0; i+1 < l; i += (sl + 2))
{
sl = buf[i + 1];
switch(buf[i])
{
case 2: // CAID (upper byte only, oldstyle)
if(i+2 >= l)
{ break; }
er->caid = buf[i + 2] << 8;
break;
case 10: // CAID
if(i+3 >= l)
{ break; }
er->caid = b2i(2, buf + i + 2);
break;
case 3: // ECM DATA
if(i+4 >= l)
{ break; }
er->ecmlen = (((buf[i + 1 + 2] & 0x0F) << 8) | buf[i + 2 + 2]) + 3;
if(er->ecmlen < 3 || er->ecmlen > MAX_ECM_SIZE || i+2+er->ecmlen > l)
{ break; }
memcpy(er->ecm, buf + i + 2, er->ecmlen);
break;
case 6: // PROVID (ASCII)
if(i+2+sl > l)
{ break; }
n = (sl > 6) ? 3 : (sl >> 1);
er->prid = cs_atoi((char *) buf + i + 2 + sl - (n << 1), n, 0);
break;
case 7: // KEYNR (ASCII), not needed
break;
case 8: // ECM PROCESS PID ?? don't know, not needed
break;
case 9: // Adding srvid because ECM contains 0000
if(i+2 >= l)
{ break; }
er->srvid = (buf[i + 4] << 8 ) | (buf[i + 2]);
break;
}
}
if(l != i)
{ cs_log("WARNING: ECM-request corrupt"); }
else
{ get_cw(cl, er); }
}
static void radegast_process_unknown(uint8_t *buf)
{
uint8_t answer[2] = {0x81, 0x00};
radegast_send(cur_client(), answer);
cs_log("unknown request %02X, len=%d", buf[0], buf[1]);
}
static void *radegast_server(struct s_client *client, uint8_t *mbuf, int32_t n)
{
if(n < 3)
{ return NULL; }
if(!client->init_done)
{
radegast_auth_client(cur_client()->ip);
client->init_done = 1;
}
switch(mbuf[0])
{
case 1:
radegast_process_ecm(mbuf + 2, mbuf[1]);
break;
default:
radegast_process_unknown(mbuf);
}
return NULL;
}
static int32_t radegast_send_ecm(struct s_client *client, ECM_REQUEST *er)
{
uint8_t provid_buf[8];
uint8_t header[22]
#if defined(__STDC_VERSION__) && __STDC_VERSION__ >= 202311L //gcc-15+
__attribute__((nonstring))
#endif
= "\x02\x01\x00\x06\x08\x30\x30\x30\x30\x30\x30\x30\x30\x07\x04\x30\x30\x30\x38\x08\x01\x02";
uint8_t *ecmbuf;
uint8_t *SubECMp;
uint8_t *via_ecm_mod;
uint32_t n, k, Len, pos = 0;
if(!radegast_connect())
{ return (-1); }
if(!cs_malloc(&ecmbuf, er->ecmlen + 30))
{ return -1; }
// Quickfix to suppress SubECMs with CWsSwap set to 01
// Applied only on Viaccess (CAID: 0x0500)
// this reduce the size of the ECM from long to short
// 40 07 03 0B 00 08 07 01 00 ... -> to keep
// 40 07 03 0B 00 08 07 01 01 ... -> to delete
// Thanks to luffy for the tip and the code.
if(er->caid == 0x500)
{
cs_log_dump_dbg(D_ATR, er->ecm, er->ecmlen, "%s: ecm dump BEFORE suppressing SubECMs with CWsSwap set to 01", __func__);
Len = er->ecmlen;
if(cs_malloc (&via_ecm_mod, Len+4))
{
if(er->ecm[4] == 0x80)
{
memcpy(via_ecm_mod, er->ecm, 4);
via_ecm_mod[1] = 0x70;
via_ecm_mod[2] = 0x01;
pos = 0x04;
k = 4;
while(k < Len)
{
SubECMp = (uint8_t *)&er->ecm[k];
if(((pos + SubECMp[1] + 2) > 0xE0) || (pos + SubECMp[1] + 2) > Len)
{
break;
}
if (SubECMp[2] == 0xD2)
{
if(SubECMp[0x0E] == 0x00)
{
memcpy(via_ecm_mod+pos, SubECMp, SubECMp[1] + 2);
via_ecm_mod[2] += SubECMp[1] + 2;
pos += SubECMp[1] + 2;
}
}
else if ((SubECMp[2] == 0x90 || SubECMp[2] == 0x40) && SubECMp[3] == 0x07)
{
if(SubECMp[0x0A] == 0x00 || SubECMp[0x0A] == 0xFF)
{
memcpy(via_ecm_mod + pos, SubECMp, SubECMp[1] + 2);
via_ecm_mod[2] += SubECMp[1] + 2;
pos += SubECMp[1] + 2;
}
}
k += SubECMp[1] + 2;
}
Len = via_ecm_mod[2] + 3;
er->ecmlen = Len;
memcpy(er->ecm, via_ecm_mod, Len);
cs_log_dump_dbg(D_ATR, er->ecm, er->ecmlen, "%s: ecm dump AFTER suppressing SubECMs with CWsSwap set to 01", __func__);
}
NULLFREE(via_ecm_mod);
}
}
ecmbuf[0] = 1;
ecmbuf[1] = (er->ecmlen + 30 - 2) & 0xff;
memcpy(ecmbuf + 2, header, sizeof(header));
for(n = 0; n < 4; n++)
{
snprintf((char *)provid_buf + (n * 2), sizeof(provid_buf) - (n * 2), "%02X", ((uint8_t *)(&er->prid))[4 - 1 - n]);
}
ecmbuf[7] = provid_buf[0];
ecmbuf[8] = provid_buf[1];
ecmbuf[9] = provid_buf[2];
ecmbuf[10] = provid_buf[3];
ecmbuf[11] = provid_buf[4];
ecmbuf[12] = provid_buf[5];
ecmbuf[13] = provid_buf[6];
ecmbuf[14] = provid_buf[7];
ecmbuf[2 + sizeof(header)] = 0xa;
ecmbuf[3 + sizeof(header)] = 2;
ecmbuf[4 + sizeof(header)] = er->caid >> 8;
ecmbuf[5 + sizeof(header)] = er->caid & 0xff;
ecmbuf[6 + sizeof(header)] = 3;
ecmbuf[7 + sizeof(header)] = er->ecmlen & 0xff;
memcpy(ecmbuf + 8 + sizeof(header), er->ecm, er->ecmlen);
ecmbuf[4] = er->caid >> 8;
client->reader->msg_idx = er->idx;
n = send(client->pfd, ecmbuf, er->ecmlen + 30, 0);
cs_log_dbg(D_TRACE, "radegast: sending ecm");
cs_log_dump_dbg(D_CLIENT, ecmbuf, er->ecmlen + 30, "ecm:");
NULLFREE(ecmbuf);
return ((n < 1) ? (-1) : 0);
}
int32_t radegast_cli_init(struct s_client *cl)
{
int32_t handle;
handle = network_tcp_connection_open(cl->reader);
if(handle < 0) { return -1; }
cs_log("radegast: proxy %s:%d (fd=%d)", cl->reader->device, cl->reader->r_port, cl->udp_fd);
cl->reader->tcp_connected = 2;
cl->reader->card_status = CARD_INSERTED;
cl->reader->last_g = cl->reader->last_s = time((time_t *)0);
cs_log_dbg(D_CLIENT, "radegast: last_s=%" PRId64 ", last_g=%" PRId64, (int64_t)cl->reader->last_s, (int64_t)cl->reader->last_g);
cl->pfd = cl->udp_fd;
return (0);
}
static void radegast_server_init(struct s_client *cl)
{
if(!cl->init_done)
{
if(IP_ISSET(cl->ip))
{ cs_log("radegast: new connection from %s", cs_inet_ntoa(cl->ip)); }
radegast_auth_client(cur_client()->ip);
cl->init_done = 1;
}
return;
}
static int32_t radegast_connect(void)
{
struct s_client *cl = cur_client();
if(cl->reader->tcp_connected < 2 && radegast_cli_init(cl) < 0)
{ return 0; }
if(!cl->udp_fd)
{ return 0; }
return 1;
}
void radegast_idle(void)
{
struct s_client *client = cur_client();
struct s_reader *rdr = client->reader;
time_t now = time(NULL);
if(!rdr) { return; }
if(rdr->tcp_ito > 0)
{
int32_t time_diff;
time_diff = llabs(now - rdr->last_s);
if(time_diff > (rdr->tcp_ito))
{
network_tcp_connection_close(rdr, "inactivity");
return;
}
}
else if(rdr->tcp_ito == -1)
{
radegast_connect();
return;
}
}
void module_radegast(struct s_module *ph)
{
ph->ptab.nports = 1;
ph->ptab.ports[0].s_port = cfg.rad_port;
ph->desc = "radegast";
ph->type = MOD_CONN_TCP;
ph->large_ecm_support = 1;
ph->listenertype = LIS_RADEGAST;
IP_ASSIGN(ph->s_ip, cfg.rad_srvip);
ph->s_handler = radegast_server;
ph->s_init = radegast_server_init;
ph->c_idle = radegast_idle;
ph->recv = radegast_recv;
ph->send_dcw = radegast_send_dcw;
ph->c_init = radegast_cli_init;
ph->c_recv_chk = radegast_recv_chk;
ph->c_send_ecm = radegast_send_ecm;
ph->num = R_RADEGAST;
}
#endif
Reference in New Issue View Git Blame Copy Permalink