FreeRDP
Loading...
Searching...
No Matches
cliprdr_utils.c
1
22#include <winpr/stream.h>
23#include <freerdp/utils/cliprdr_utils.h>
24#include <freerdp/channels/cliprdr.h>
25
26#include <freerdp/log.h>
27#define TAG FREERDP_TAG("utils." CLIPRDR_SVC_CHANNEL_NAME)
28
29#define CLIPRDR_FILEDESCRIPTOR_SIZE (4 + 32 + 4 + 16 + 8 + 8 + 520)
30#define CLIPRDR_MAX_FILE_SIZE (2U * 1024 * 1024 * 1024)
31
32static UINT64 filetime_to_uint64(FILETIME value)
33{
34 UINT64 converted = 0;
35 converted |= (UINT32)value.dwHighDateTime;
36 converted <<= 32;
37 converted |= (UINT32)value.dwLowDateTime;
38 return converted;
39}
40
41static FILETIME uint64_to_filetime(UINT64 value)
42{
43 FILETIME converted;
44 converted.dwLowDateTime = (UINT32)(value >> 0);
45 converted.dwHighDateTime = (UINT32)(value >> 32);
46 return converted;
47}
48
61UINT cliprdr_parse_file_list(const BYTE* format_data, UINT32 format_data_length,
62 FILEDESCRIPTORW** file_descriptor_array, UINT32* file_descriptor_count)
63{
64 UINT result = NO_ERROR;
65 UINT32 count = 0;
66 wStream sbuffer = WINPR_C_ARRAY_INIT;
67
68 if (!format_data || !file_descriptor_array || !file_descriptor_count)
69 return ERROR_BAD_ARGUMENTS;
70
71 wStream* s = Stream_StaticConstInit(&sbuffer, format_data, format_data_length);
72 if (!s)
73 return ERROR_NOT_ENOUGH_MEMORY;
74
75 if (!Stream_CheckAndLogRequiredLength(TAG, s, 4))
76 {
77 result = ERROR_INCORRECT_SIZE;
78 goto out;
79 }
80
81 Stream_Read_UINT32(s, count); /* cItems (4 bytes) */
82
83 if (!Stream_CheckAndLogRequiredLengthOfSize(TAG, s, count, CLIPRDR_FILEDESCRIPTOR_SIZE))
84 {
85 result = ERROR_INCORRECT_SIZE;
86 goto out;
87 }
88
89 *file_descriptor_count = count;
90 *file_descriptor_array = calloc(count, sizeof(FILEDESCRIPTORW));
91 if (!*file_descriptor_array)
92 {
93 result = ERROR_NOT_ENOUGH_MEMORY;
94 goto out;
95 }
96
97 for (UINT32 i = 0; i < count; i++)
98 {
99 FILEDESCRIPTORW* file = &((*file_descriptor_array)[i]);
100
101 if (!cliprdr_read_filedescriptor(s, file))
102 goto out;
103 }
104
105 if (Stream_GetRemainingLength(s) > 0)
106 WLog_WARN(TAG, "packed file list has %" PRIuz " excess bytes",
107 Stream_GetRemainingLength(s));
108out:
109
110 return result;
111}
112
113WINPR_ATTR_NODISCARD
114static BOOL contains_dotdot(const WCHAR* path, size_t path_length)
115{
116 if (path_length < 2)
117 return FALSE;
118
119 size_t tstlen = path_length;
120 const WCHAR* tst = path;
121 do
122 {
123 tst = winpr_wcsnchr(tst, tstlen, '.');
124 if (!tst)
125 return FALSE;
126 const size_t diff = WINPR_ASSERTING_INT_CAST(size_t, tst - path);
127 tstlen = _wcsnlen(tst, path_length - diff);
128 if (tstlen < 2)
129 return FALSE;
130 if (tst[1] != '.')
131 continue;
132
133 /* Filter .. sequences in file or directory names */
134 if ((tst == path) || (*(tst - 1) == L'/') || (*(tst - 1) == L'\\'))
135 {
136 if (tst + 2 < path + path_length)
137 {
138 if ((tst[2] == '/') || (tst[2] == '\\') || (tst[2] == '\0'))
139 return TRUE;
140 }
141 else
142 return TRUE;
143 }
144 tst += 2;
145 } while (TRUE);
146
147 return FALSE;
148}
149
150BOOL cliprdr_read_filedescriptor(wStream* s, FILEDESCRIPTORW* descriptor)
151{
152 UINT64 tmp = 0;
153 WINPR_ASSERT(descriptor);
154
155 if (!Stream_CheckAndLogRequiredLength(TAG, s, sizeof(FILEDESCRIPTORW)))
156 return FALSE;
157
158 Stream_Read_UINT32(s, descriptor->dwFlags); /* flags (4 bytes) */
159 Stream_Read_UINT32(s, descriptor->clsid.Data1);
160 Stream_Read_UINT16(s, descriptor->clsid.Data2);
161 Stream_Read_UINT16(s, descriptor->clsid.Data3);
162 Stream_Read(s, &descriptor->clsid.Data4, sizeof(descriptor->clsid.Data4));
163 Stream_Read_INT32(s, descriptor->sizel.cx);
164 Stream_Read_INT32(s, descriptor->sizel.cy);
165 Stream_Read_INT32(s, descriptor->pointl.x);
166 Stream_Read_INT32(s, descriptor->pointl.y);
167 Stream_Read_UINT32(s, descriptor->dwFileAttributes); /* fileAttributes (4 bytes) */
168 Stream_Read_UINT64(s, tmp); /* ftCreationTime (8 bytes) */
169 descriptor->ftCreationTime = uint64_to_filetime(tmp);
170 Stream_Read_UINT64(s, tmp); /* ftLastAccessTime (8 bytes) */
171 descriptor->ftLastAccessTime = uint64_to_filetime(tmp);
172 Stream_Read_UINT64(s, tmp); /* lastWriteTime (8 bytes) */
173 descriptor->ftLastWriteTime = uint64_to_filetime(tmp);
174 Stream_Read_UINT32(s, descriptor->nFileSizeHigh); /* fileSizeHigh (4 bytes) */
175 Stream_Read_UINT32(s, descriptor->nFileSizeLow); /* fileSizeLow (4 bytes) */
176 if (!Stream_Read_UTF16_String(s, descriptor->cFileName,
177 ARRAYSIZE(descriptor->cFileName))) /* cFileName (520 bytes) */
178 return FALSE;
179 if (contains_dotdot(descriptor->cFileName, ARRAYSIZE(descriptor->cFileName)))
180 return FALSE;
181 return TRUE;
182}
183
184BOOL cliprdr_write_filedescriptor(wStream* s, const FILEDESCRIPTORW* descriptor)
185{
186 WINPR_ASSERT(descriptor);
187
188 if (!Stream_EnsureRemainingCapacity(s, sizeof(FILEDESCRIPTORW)))
189 return FALSE;
190
191 Stream_Write_UINT32(s, descriptor->dwFlags); /* flags (4 bytes) */
192
193 Stream_Write_UINT32(s, descriptor->clsid.Data1);
194 Stream_Write_UINT16(s, descriptor->clsid.Data2);
195 Stream_Write_UINT16(s, descriptor->clsid.Data3);
196 Stream_Write(s, &descriptor->clsid.Data4, sizeof(descriptor->clsid.Data4));
197 Stream_Write_INT32(s, descriptor->sizel.cx);
198 Stream_Write_INT32(s, descriptor->sizel.cy);
199 Stream_Write_INT32(s, descriptor->pointl.x);
200 Stream_Write_INT32(s, descriptor->pointl.y);
201 Stream_Write_UINT32(s, descriptor->dwFileAttributes); /* fileAttributes (4 bytes) */
202 Stream_Write_UINT64(s, filetime_to_uint64(descriptor->ftCreationTime));
203 Stream_Write_UINT64(s, filetime_to_uint64(descriptor->ftLastAccessTime));
204 Stream_Write_UINT64(
205 s, filetime_to_uint64(descriptor->ftLastWriteTime)); /* lastWriteTime (8 bytes) */
206 Stream_Write_UINT32(s, descriptor->nFileSizeHigh); /* fileSizeHigh (4 bytes) */
207 Stream_Write_UINT32(s, descriptor->nFileSizeLow); /* fileSizeLow (4 bytes) */
208 return Stream_Write_UTF16_String(s, descriptor->cFileName,
209 ARRAYSIZE(descriptor->cFileName)); /* cFileName (520 bytes) */
210}
211
224UINT cliprdr_serialize_file_list(const FILEDESCRIPTORW* file_descriptor_array,
225 UINT32 file_descriptor_count, BYTE** format_data,
226 UINT32* format_data_length)
227{
228 return cliprdr_serialize_file_list_ex(CB_STREAM_FILECLIP_ENABLED, file_descriptor_array,
229 file_descriptor_count, format_data, format_data_length);
230}
231
232UINT cliprdr_serialize_file_list_ex(UINT32 flags, const FILEDESCRIPTORW* file_descriptor_array,
233 UINT32 file_descriptor_count, BYTE** format_data,
234 UINT32* format_data_length)
235{
236 UINT result = NO_ERROR;
237 size_t len = 0;
238 wStream* s = nullptr;
239
240 if (!file_descriptor_array || !format_data || !format_data_length)
241 return ERROR_BAD_ARGUMENTS;
242
243 if ((flags & CB_STREAM_FILECLIP_ENABLED) == 0)
244 {
245 WLog_WARN(TAG, "No file clipboard support annouonced!");
246 return ERROR_BAD_ARGUMENTS;
247 }
248
249 s = Stream_New(nullptr, 4 + file_descriptor_count * CLIPRDR_FILEDESCRIPTOR_SIZE);
250 if (!s)
251 return ERROR_NOT_ENOUGH_MEMORY;
252
253 Stream_Write_UINT32(s, file_descriptor_count); /* cItems (4 bytes) */
254
255 for (UINT32 i = 0; i < file_descriptor_count; i++)
256 {
257 const FILEDESCRIPTORW* file = &file_descriptor_array[i];
258
259 /*
260 * There is a known issue with Windows server getting stuck in
261 * an infinite loop when downloading files that are larger than
262 * 2 gigabytes. Do not allow clients to send such file lists.
263 *
264 * https://support.microsoft.com/en-us/help/2258090
265 */
266 if ((flags & CB_HUGE_FILE_SUPPORT_ENABLED) == 0)
267 {
268 if ((file->nFileSizeHigh > 0) || (file->nFileSizeLow >= CLIPRDR_MAX_FILE_SIZE))
269 {
270 WLog_ERR(TAG, "cliprdr does not support files over 2 GB");
271 result = ERROR_FILE_TOO_LARGE;
272 goto error;
273 }
274 }
275
276 if (!cliprdr_write_filedescriptor(s, file))
277 goto error;
278 }
279
280 Stream_SealLength(s);
281
282 *format_data = Stream_Buffer(s);
283 Stream_GetLength(s, len);
284 if (len > UINT32_MAX)
285 goto error;
286
287 *format_data_length = (UINT32)len;
288
289 Stream_Free(s, FALSE);
290
291 return result;
292
293error:
294 Stream_Free(s, TRUE);
295
296 return result;
297}