Return to ietf_swima_attr_sw_ev.c CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / src / libimcv / ietf / swima

Strongswan

/*
 * Copyright (C) 2017 Andreas Steffen
 * HSR Hochschule fuer Technik Rapperswil
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by the
 * Free Software Foundation; either version 2 of the License, or (at your
 * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
 * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 * for more details.
 */

#include "ietf_swima_attr_sw_ev.h"
#include "swima/swima_event.h"

#include <pa_tnc/pa_tnc_msg.h>
#include <bio/bio_writer.h>
#include <bio/bio_reader.h>
#include <utils/debug.h>

#define SW_EV_TIMESTAMP_SIZE	20

typedef struct private_ietf_swima_attr_sw_ev_t private_ietf_swima_attr_sw_ev_t;

/**
 * Software [Identifier] Events
 * see sections 5.9/5.11 of RFC 8412 SWIMA
 *
 *                       1                   2                   3
 *   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |     Flags     |           Software Identifier Count           |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |               Request ID Copy / Subscription ID               |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |                           EID Epoch                           |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |                           Last EID                            |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |                       Last Consulted EID                      |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |                              EID                              |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |                           Timestamp                           |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |                           Timestamp                           |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |                           Timestamp                           |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |                           Timestamp                           |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |                           Timestamp                           |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |                       Record Identifier                       |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |              Data Model Type PEN              |Data Model Type|
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  | Source ID Num |    Action     |  Software Identifier Length   |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |             Software Identifier (Variable Length)             |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |    Software Locator Length    |  Software Locator (Var. Len)  |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *
 * Software Event only
 * see section 5.11 of IETF SW Inventory Message and Attributes for PA-TNC
 *
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |                          Record Length                        |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 *  |                   Record (Variable length)                    |
 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 */

/**
 * Private data of an ietf_swima_attr_sw_ev_t object.
 */
struct private_ietf_swima_attr_sw_ev_t {

	/**
	 * Public members of ietf_swima_attr_sw_ev_t
	 */
	ietf_swima_attr_sw_ev_t public;

	/**
	 * Vendor-specific attribute type
	 */
	pen_type_t type;

	/**
	 * Length of attribute value
	 */
	size_t length;

	/**
	 * Offset up to which attribute value has been processed
	 */
	size_t offset;

	/**
	 * Current position of attribute value pointer
	 */
	chunk_t value;

	/**
	 * Contains complete attribute or current segment
	 */
	chunk_t segment;

	/**
	 * Noskip flag
	 */
	bool noskip_flag;

	/**
	 * Request ID
	 */
	uint32_t request_id;

	/**
	 * Attribute flags
	 */
	uint8_t flags;

	/**
	 * Number of unprocessed software events in attribute
	 */
	uint32_t event_count;

	/**
	 * Event list
	 */
	swima_events_t *events;

	/**
	 * Reference count
	 */
	refcount_t ref;
};

METHOD(pa_tnc_attr_t, get_type, pen_type_t,
	private_ietf_swima_attr_sw_ev_t *this)
{
	return this->type;
}

METHOD(pa_tnc_attr_t, get_value, chunk_t,
	private_ietf_swima_attr_sw_ev_t *this)
{
	return this->value;
}

METHOD(pa_tnc_attr_t, get_noskip_flag, bool,
	private_ietf_swima_attr_sw_ev_t *this)
{
	return this->noskip_flag;
}

METHOD(pa_tnc_attr_t, set_noskip_flag,void,
	private_ietf_swima_attr_sw_ev_t *this, bool noskip)
{
	this->noskip_flag = noskip;
}

/**
 * This function is shared with ietf_swima_attr_sw_inv.c
 **/
void ietf_swima_attr_sw_ev_build_sw_record(bio_writer_t *writer,
		uint8_t action, swima_record_t *sw_record, bool has_record)
{
	pen_type_t data_model;
	chunk_t sw_locator;

	data_model = sw_record->get_data_model(sw_record);

	writer->write_uint32(writer, sw_record->get_record_id(sw_record));
	writer->write_uint24(writer, data_model.vendor_id);
	writer->write_uint8 (writer, data_model.type);
	writer->write_uint8 (writer, sw_record->get_source_id(sw_record));
	writer->write_uint8 (writer, action);
	writer->write_data16(writer, sw_record->get_sw_id(sw_record, &sw_locator));
	writer->write_data16(writer, sw_locator);

	if (has_record)
	{
		writer->write_data32(writer, sw_record->get_record(sw_record));
	}
}

METHOD(pa_tnc_attr_t, build, void,
	private_ietf_swima_attr_sw_ev_t *this)
{
	bio_writer_t *writer;
	swima_event_t *sw_event;
	swima_record_t *sw_record;
	chunk_t timestamp;
	uint32_t last_eid, last_consulted_eid, eid_epoch;
	uint8_t action;
	enumerator_t *enumerator;

	if (this->value.ptr)
	{
		return;
	}
	last_consulted_eid = this->events->get_eid(this->events, &eid_epoch,
															 &last_eid);

	writer = bio_writer_create(IETF_SWIMA_SW_EV_MIN_SIZE);
	writer->write_uint8 (writer, this->flags);
	writer->write_uint24(writer, this->events->get_count(this->events));
	writer->write_uint32(writer, this->request_id);
	writer->write_uint32(writer, eid_epoch);
	writer->write_uint32(writer, last_eid);
	writer->write_uint32(writer, last_consulted_eid);

	enumerator = this->events->create_enumerator(this->events);
	while (enumerator->enumerate(enumerator, &sw_event))
	{
		action     = sw_event->get_action(sw_event);
		sw_record  = sw_event->get_sw_record(sw_event);

		writer->write_uint32(writer, sw_event->get_eid(sw_event, &timestamp));
		writer->write_data  (writer, timestamp);

		ietf_swima_attr_sw_ev_build_sw_record(writer, action, sw_record,
								this->type.type == IETF_ATTR_SW_EVENTS);
	}
	enumerator->destroy(enumerator);

	this->value = writer->extract_buf(writer);
	this->segment = this->value;
	this->length = this->value.len;
	writer->destroy(writer);
}

/**
 * This function is shared with ietf_swima_attr_sw_inv.c
 **/
bool ietf_swima_attr_sw_ev_process_sw_record(bio_reader_t *reader,
		uint8_t *action, swima_record_t **sw_record, bool has_record)
{
	pen_type_t data_model;
	swima_record_t *sw_rec;
	uint32_t data_model_pen, record_id;
	uint8_t  data_model_type, source_id, reserved;
	chunk_t sw_id, sw_locator, record = chunk_empty;

	if (!reader->read_uint32(reader, &record_id) ||
		!reader->read_uint24(reader, &data_model_pen) ||
		!reader->read_uint8 (reader, &data_model_type) ||
		!reader->read_uint8 (reader, &source_id) ||
		!reader->read_uint8 (reader, &reserved) ||
		!reader->read_data16(reader, &sw_id) ||
		!reader->read_data16(reader, &sw_locator))
	{
		return FALSE;
	}

	if (action)
	{
		*action = reserved;
	}

	if (has_record && !reader->read_data32(reader, &record))
	{
		return FALSE;
	}

	data_model = pen_type_create(data_model_pen, data_model_type);
	sw_rec = swima_record_create(record_id, sw_id, sw_locator);
	sw_rec->set_data_model(sw_rec, data_model);
	sw_rec->set_source_id(sw_rec, source_id);
	sw_rec->set_record(sw_rec, record);
	*sw_record = sw_rec;

	return TRUE;
}

METHOD(pa_tnc_attr_t, process, status_t,
	private_ietf_swima_attr_sw_ev_t *this, uint32_t *offset)
{
	bio_reader_t *reader;
	uint32_t eid, eid_epoch, last_eid, last_consulted_eid;
	uint8_t  action;
	chunk_t timestamp;
	swima_event_t *sw_event;
	swima_record_t *sw_record;
	status_t status = NEED_MORE;

	if (this->offset == 0)
	{
		if (this->length < IETF_SWIMA_SW_EV_MIN_SIZE)
		{
			DBG1(DBG_TNC, "insufficient data for %N/%N", pen_names, PEN_IETF,
						   ietf_attr_names, this->type.type);
			*offset = this->offset;
			return FAILED;
		}
		if (this->value.len < IETF_SWIMA_SW_EV_MIN_SIZE)
		{
			return NEED_MORE;
		}
		reader = bio_reader_create(this->value);
		reader->read_uint8 (reader, &this->flags);
		reader->read_uint24(reader, &this->event_count);
		reader->read_uint32(reader, &this->request_id);
		reader->read_uint32(reader, &eid_epoch);
		reader->read_uint32(reader, &last_eid);
		reader->read_uint32(reader, &last_consulted_eid);
		this->offset = IETF_SWIMA_SW_EV_MIN_SIZE;
		this->events->set_eid(this->events, last_consulted_eid, eid_epoch);
		this->events->set_last_eid(this->events, last_eid);
		this->value = reader->peek(reader);
		reader->destroy(reader);
	}

	reader = bio_reader_create(this->value);

	while (this->event_count)
	{
		if (!reader->read_uint32(reader, &eid) ||
			!reader->read_data  (reader, SW_EV_TIMESTAMP_SIZE, &timestamp) ||
			!ietf_swima_attr_sw_ev_process_sw_record(reader, &action, &sw_record,
								this->type.type == IETF_ATTR_SW_EVENTS))
		{
			goto end;
		}

		if (action == SWIMA_EVENT_ACTION_NONE ||
			action  > SWIMA_EVENT_ACTION_LAST)
		{
			DBG1(DBG_TNC, "invalid event action value for %N/%N", pen_names,
						   PEN_IETF, ietf_attr_names, this->type.type);
			*offset = this->offset;
			sw_record->destroy(sw_record);
			reader->destroy(reader);

			return FAILED;
		}

		sw_event = swima_event_create(eid, timestamp, action, sw_record);
		this->events->add(this->events, sw_event);
		this->offset += this->value.len - reader->remaining(reader);
		this->value = reader->peek(reader);

		/* at least one software event was processed */
		status = SUCCESS;
		this->event_count--;
	}

	if (this->length == this->offset)
	{
		status = SUCCESS;
	}
	else
	{
		DBG1(DBG_TNC, "inconsistent length for %N/%N", pen_names, PEN_IETF,
					   ietf_attr_names, this->type.type);
		*offset = this->offset;
		status = FAILED;
	}

end:
	reader->destroy(reader);
	return status;
}

METHOD(pa_tnc_attr_t, add_segment, void,
	private_ietf_swima_attr_sw_ev_t *this, chunk_t segment)
{
	this->value = chunk_cat("cc", this->value, segment);
	chunk_free(&this->segment);
	this->segment = this->value;
}

METHOD(pa_tnc_attr_t, get_ref, pa_tnc_attr_t*,
	private_ietf_swima_attr_sw_ev_t *this)
{
	ref_get(&this->ref);
	return &this->public.pa_tnc_attribute;
}

METHOD(pa_tnc_attr_t, destroy, void,
	private_ietf_swima_attr_sw_ev_t *this)
{
	if (ref_put(&this->ref))
	{
		this->events->destroy(this->events);
		free(this->segment.ptr);
		free(this);
	}
}

METHOD(ietf_swima_attr_sw_ev_t, get_flags, uint8_t,
	private_ietf_swima_attr_sw_ev_t *this)
{
	return this->flags;
}

METHOD(ietf_swima_attr_sw_ev_t, get_request_id, uint32_t,
	private_ietf_swima_attr_sw_ev_t *this)
{
	return this->request_id;
}

METHOD(ietf_swima_attr_sw_ev_t, get_event_count, uint32_t,
	private_ietf_swima_attr_sw_ev_t *this)
{
	return this->event_count;
}

METHOD(ietf_swima_attr_sw_ev_t, set_events, void,
	private_ietf_swima_attr_sw_ev_t *this, swima_events_t *events)
{
	this->events->destroy(this->events);
	this->events = events->get_ref(events);
}

METHOD(ietf_swima_attr_sw_ev_t, get_events, swima_events_t*,
	private_ietf_swima_attr_sw_ev_t *this)
{
	return this->events;
}

METHOD(ietf_swima_attr_sw_ev_t, clear_events, void,
	private_ietf_swima_attr_sw_ev_t *this)
{
	this->events->clear(this->events);
}

/**
 * Described in header.
 */
pa_tnc_attr_t *ietf_swima_attr_sw_ev_create(uint8_t flags, uint32_t request_id,
											 bool sw_id_only)
{
	private_ietf_swima_attr_sw_ev_t *this;
	ietf_attr_t type;

	type = sw_id_only ? IETF_ATTR_SW_ID_EVENTS : IETF_ATTR_SW_EVENTS;

	INIT(this,
		.public = {
			.pa_tnc_attribute = {
				.get_type = _get_type,
				.get_value = _get_value,
				.get_noskip_flag = _get_noskip_flag,
				.set_noskip_flag = _set_noskip_flag,
				.build = _build,
				.process = _process,
				.add_segment = _add_segment,
				.get_ref = _get_ref,
				.destroy = _destroy,
			},
			.get_flags = _get_flags,
			.get_request_id = _get_request_id,
			.get_event_count = _get_event_count,
			.set_events = _set_events,
			.get_events = _get_events,
			.clear_events = _clear_events,
		},
		.type = { PEN_IETF, type },
		.flags = flags,
		.request_id = request_id,
		.events = swima_events_create(),
		.ref = 1,
	);

	return &this->public.pa_tnc_attribute;
}


/**
 * Described in header.
 */
pa_tnc_attr_t *ietf_swima_attr_sw_ev_create_from_data(size_t length,
										chunk_t data, bool sw_id_only)
{
	private_ietf_swima_attr_sw_ev_t *this;
	ietf_attr_t type;

	type = sw_id_only ? IETF_ATTR_SW_ID_EVENTS : IETF_ATTR_SW_EVENTS;

	INIT(this,
		.public = {
			.pa_tnc_attribute = {
				.get_type = _get_type,
				.get_value = _get_value,
				.get_noskip_flag = _get_noskip_flag,
				.set_noskip_flag = _set_noskip_flag,
				.build = _build,
				.process = _process,
				.add_segment = _add_segment,
				.get_ref = _get_ref,
				.destroy = _destroy,
			},
			.get_flags = _get_flags,
			.get_request_id = _get_request_id,
			.get_event_count = _get_event_count,
			.set_events = _set_events,
			.get_events = _get_events,
			.clear_events = _clear_events,
		},
		.type = { PEN_IETF, type },
		.length = length,
		.segment = chunk_clone(data),
		.events = swima_events_create(),
		.ref = 1,
	);

	/* received either complete attribute value or first segment */
	this->value = this->segment;

	return &this->public.pa_tnc_attribute;
}