--- ansh/src/utils.c	2011/10/13 16:08:52	1.1.1.1.2.8
+++ ansh/src/utils.c	2011/10/17 09:28:19	1.1.1.1.2.14
@@ -3,7 +3,7 @@
  *  by Michael Pounov <misho@elwix.org>
  *
  * $Author: misho $
- * $Id: utils.c,v 1.1.1.1.2.8 2011/10/13 16:08:52 misho Exp $
+ * $Id: utils.c,v 1.1.1.1.2.14 2011/10/17 09:28:19 misho Exp $
  *
  *************************************************************************
 The ELWIX and AITNET software is distributed under the following
@@ -120,10 +120,8 @@ PrepareL2(const char *psDev, int *bpflen)
 		return -1;
 	}
 
-	/*
 	n = fcntl(h, F_GETFL);
 	fcntl(h, F_SETFL, n | O_NONBLOCK);
-	*/
 
 	VERB(3) LOG("Openned device handle %d with bpf buflen %d", h, *bpflen);
 	return h;
@@ -208,6 +206,8 @@ icmpRecv(int s, u_int * __restrict seq, u_short * __re
 			VERB(3) LOG("Channel SECURED:: Plain text communication not supported at this moment ...");
 			return ANSH_FLG_ERR;
 		}
+		if (ntohl(hdr->ansh_nonce) != *crypted)
+			VERB(4) LOG("Detect change of nonce from %x to %x", *crypted, ntohl(hdr->ansh_nonce));
 
 		*crypted = ntohl(hdr->ansh_nonce);
 	}
@@ -277,7 +277,7 @@ icmpSend(int s, u_int seq, u_short id, char flg, u_int
 		VERB(4) LOG("Put packet with len=%d", ret);
 	if (ret != sizeof(struct icmp) + sizeof(struct ansh_hdr) + datlen) {
 		VERB(3) LOG("Sended data %d is different from source data len %d", ret, 
-				sizeof(struct icmp) + sizeof(struct ansh_hdr) + datlen);
+				(int) (sizeof(struct icmp) + sizeof(struct ansh_hdr) + datlen));
 		return ANSH_FLG_ERR;
 	}
 
@@ -285,9 +285,9 @@ icmpSend(int s, u_int seq, u_short id, char flg, u_int
 }
 
 static int
-_pkt_Send(int s, u_int seq, char flg, u_int crypted, u_char *data, int datlen, struct ether_addr *ea)
+_pkt_Send(int s, u_int seq, char flg, u_int crypted, u_char *data, int datlen, struct io_ether_addr *ea)
 {
-	u_char *pos, buf[USHRT_MAX] = { 0 };
+	u_char *pos, *str, buf[USHRT_MAX] = { 0 };
 	struct ether_header *e = (struct ether_header*) buf;
 	struct ansh_hdr *hdr;
 	int ret = 0;
@@ -297,12 +297,20 @@ _pkt_Send(int s, u_int seq, char flg, u_int crypted, u
 		return ANSH_FLG_ERR;
 
 	e->ether_type = ntohs(ANSH_ID);
-	memcpy(e->ether_dhost, ea->octet, ETHER_ADDR_LEN);
+	memcpy(e->ether_dhost, ea->ether_addr_octet, ETHER_ADDR_LEN);
 	hdr = (struct ansh_hdr*) (buf + ETHER_HDR_LEN);
 	pos = ((u_char*) hdr) + sizeof(struct ansh_hdr);
 
 	memcpy(pos, data, datlen);
 
+	if (Crypted) {
+		str = cryptBuffer(pos, datlen, Crypted);
+		if (str) {
+			memcpy(pos, str, datlen);
+			free(str);
+		}
+	}
+
 	hdr->ansh_ver = ANSH_VERSION;
 	hdr->ansh_flg = flg;
 	hdr->ansh_len = htons(datlen + sizeof(struct ansh_hdr));
@@ -318,7 +326,7 @@ _pkt_Send(int s, u_int seq, char flg, u_int crypted, u
 		VERB(4) LOG("Put packet with len=%d", ret);
 	if (ret != ETHER_HDR_LEN + sizeof(struct ansh_hdr) + datlen) {
 		VERB(3) LOG("Sended data %d is different from source data len %d", ret, 
-				ETHER_HDR_LEN + sizeof(struct ansh_hdr) + datlen);
+				(int) (ETHER_HDR_LEN + sizeof(struct ansh_hdr) + datlen));
 		return ANSH_FLG_ERR;
 	}
 
@@ -326,7 +334,7 @@ _pkt_Send(int s, u_int seq, char flg, u_int crypted, u
 }
 
 int
-pktSend(int s, u_int seq, char flg, u_int crypted, u_char *data, int datlen, struct ether_addr *ea)
+pktSend(int s, u_int seq, char flg, u_int crypted, u_char *data, int datlen, struct io_ether_addr *ea)
 {
 	int wlen, ret = 0;
 	u_char *pos = data;
@@ -354,6 +362,7 @@ _pkt_Recv(u_char * __restrict buf, int rlen, u_int * _
 	struct bpf_hdr *bpf;
 	struct ansh_hdr *hdr;
 	u_int crc;
+	u_char *str;
 
 	if (rlen < (sizeof(struct bpf_hdr) + ETHER_HDR_LEN + sizeof(struct ansh_hdr))) {
 		VERB(1) LOG("Discard packet too short %d ...", rlen);
@@ -386,6 +395,8 @@ _pkt_Recv(u_char * __restrict buf, int rlen, u_int * _
 			VERB(3) LOG("Channel SECURED:: Plain text communication not supported at this moment ...");
 			return ANSH_FLG_ERR;
 		}
+		if (ntohl(hdr->ansh_nonce) != *crypted)
+			VERB(4) LOG("Detect change of nonce from %x to %x", *crypted, ntohl(hdr->ansh_nonce));
 
 		*crypted = ntohl(hdr->ansh_nonce);
 	}
@@ -402,6 +413,16 @@ _pkt_Recv(u_char * __restrict buf, int rlen, u_int * _
 	/* select data */
 	if (data) {
 		*datlen = ntohs(hdr->ansh_len) - sizeof(struct ansh_hdr);
+		if (Crypted) {
+			str = cryptBuffer(buf + bpf->bh_hdrlen + ETHER_HDR_LEN + sizeof(struct ansh_hdr), 
+					*datlen, Crypted);
+			if (str) {
+				memcpy(buf + bpf->bh_hdrlen + ETHER_HDR_LEN + sizeof(struct ansh_hdr), 
+						str, *datlen);
+				free(str);
+			}
+		}
+
 		memcpy(data, buf + bpf->bh_hdrlen + ETHER_HDR_LEN + sizeof(struct ansh_hdr), *datlen);
 	}
 
@@ -509,8 +530,37 @@ cryptBuffer(u_char *buf, int rlen, u_int ctr)
 	memcpy(ivec + 8, &ctr, sizeof ctr);
 	memcpy(ivec + 12, &rctr, sizeof rctr);
 
-	if (io_ctr_AES(buf, rlen, &str, (u_char*) "_ansh_ELWIX_", ivec) == -1)
+	if (io_ctr_AES(buf, rlen, &str, (u_char*) Key, ivec) == -1)
 		return NULL;
 
 	return str;
+}
+
+int
+stopProcess(sched_root_task_t * __restrict root, proc_head_t * __restrict h, pid_t pid, sched_task_func_t func)
+{
+	struct tagProc *p;
+
+	FTRACE(3);
+
+	SLIST_FOREACH(p, h, proc_next)
+		if (p->proc_pid == pid) {
+			break;
+		}
+	VERB(3) LOG("pid=%d found=%p\n", pid, p);
+	if (!p)
+		return 1;
+
+	ioFreePTY(p->proc_pty, p->proc_ttyname);
+	if (p->proc_pty)
+		schedCancelby(root, NULL, CRITERIA_FD, (void*) ((intptr_t) p->proc_pty), NULL);
+
+	p->proc_pty = 0;
+	p->proc_pid = 0;
+	p->proc_seq = 0;
+	p->proc_flg = ANSH_FLG_EOF;
+	p->proc_rlen_[FD2NET] = 0;
+
+	schedCallOnce(root, func, p, p->proc_sock);
+	return 0;
 }