xref: /src/usr.sbin/sdpd/record.c

/*	$NetBSD: record.c,v 1.2 2010/03/07 10:58:40 plunky Exp $	*/

/*-
 * Copyright (c) 2009 The NetBSD Foundation, Inc.
 * All rights reserved.
 *
 * This code is derived from software contributed to The NetBSD Foundation
 * by Iain Hibbert.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 * POSSIBILITY OF SUCH DAMAGE.
 */

#include <sys/cdefs.h>
__RCSID("$NetBSD: record.c,v 1.2 2010/03/07 10:58:40 plunky Exp $");

#include <bluetooth.h>
#include <sdp.h>
#include <string.h>

#include "sdpd.h"

static bool sdpd_valid_record(sdp_data_t *);

/*
 * These record manipulation requests are not part of the SDP
 * specification, they are a private extension and valid only
 * for privileged clients on the control socket.
 */

uint16_t
record_insert_request(server_t *srv, int fd)
{
	sdp_data_t	seq;
	bdaddr_t	bdaddr;

	log_debug("RecordInsertRequest by client on fd#%d", fd);

	seq.next = srv->ibuf;
	seq.end = srv->ibuf + srv->pdu.len;

	if (!srv->fdidx[fd].control
	    || !srv->fdidx[fd].priv)
		return SDP_ERROR_CODE_INVALID_REQUEST_SYNTAX;

	srv->fdidx[fd].offset = 0;
	db_unselect(srv, fd);

	/*
	 * extract BluetoothDeviceAddress
	 */
	if (seq.next + sizeof(bdaddr_t) > seq.end)
		return SDP_ERROR_CODE_INVALID_REQUEST_SYNTAX;

	memcpy(&bdaddr, seq.next, sizeof(bdaddr_t));
	seq.next += sizeof(bdaddr_t);

	/*
	 * extract ServiceRecord and add to database
	 */
	if (!sdp_get_seq(&seq, &seq)
	    || !sdpd_valid_record(&seq))
		return SDP_ERROR_CODE_INVALID_REQUEST_SYNTAX;

	/* (ignores any additional data) */

	if (!db_create(srv, fd, &bdaddr, srv->handle, &seq))
		return SDP_ERROR_CODE_INSUFFICIENT_RESOURCES;

	/*
	 * encode 'success' ErrorCode and ServiceRecordHandle and
	 * bump server handle
	 */
	be16enc(srv->obuf, 0x0000);
	be32enc(srv->obuf + sizeof(uint16_t), srv->handle++);

	/*
	 * fill in PDU header and we are done
	 */
	srv->pdu.pid = SDP_PDU_ERROR_RESPONSE;
	srv->pdu.len = sizeof(uint16_t) + sizeof(uint32_t);
	return 0;
}

uint16_t
record_update_request(server_t *srv, int fd)
{
	record_t	*rec;
	sdp_data_t	seq;

	log_debug("RecordUpdateRequest by client on fd#%d", fd);

	seq.next = srv->ibuf;
	seq.end = srv->ibuf + srv->pdu.len;

	if (!srv->fdidx[fd].control
	    || !srv->fdidx[fd].priv)
		return SDP_ERROR_CODE_INVALID_REQUEST_SYNTAX;

	srv->fdidx[fd].offset = 0;
	db_unselect(srv, fd);

	/*
	 * extract ServiceRecordHandle and select record
	 */
	if (seq.next + sizeof(uint32_t) > seq.end)
		return SDP_ERROR_CODE_INVALID_REQUEST_SYNTAX;

	db_select_handle(srv, fd, be32dec(seq.next));
	seq.next += sizeof(uint32_t);

	rec = NULL;
	db_next(srv, fd, &rec);
	if (rec == NULL || rec->fd != fd)
		return SDP_ERROR_CODE_INVALID_SERVICE_RECORD_HANDLE;

	db_unselect(srv, fd);

	/*
	 * extract ServiceRecord and add to database
	 */
	if (!sdp_get_seq(&seq, &seq)
	    || !sdpd_valid_record(&seq))
		return SDP_ERROR_CODE_INVALID_REQUEST_SYNTAX;

	/* (ignores any additional data) */

	if (!db_create(srv, fd, &rec->bdaddr, rec->handle, &seq))
		return SDP_ERROR_CODE_INSUFFICIENT_RESOURCES;

	/*
	 * encode 'success' ErrorCode
	 */
	be16enc(srv->obuf, 0x0000);

	/*
	 * fill in PDU header and we are done
	 */
	srv->pdu.pid = SDP_PDU_ERROR_RESPONSE;
	srv->pdu.len = sizeof(uint16_t);
	return 0;
}

uint16_t
record_remove_request(server_t *srv, int fd)
{
	record_t	*rec;

	log_debug("RecordRemoveRequest by client on fd#%d", fd);

	if (!srv->fdidx[fd].control
	    || !srv->fdidx[fd].priv)
		return SDP_ERROR_CODE_INVALID_REQUEST_SYNTAX;

	srv->fdidx[fd].offset = 0;
	db_unselect(srv, fd);

	/*
	 * extract ServiceRecordHandle
	 */
	if (srv->pdu.len != sizeof(uint32_t))
		return SDP_ERROR_CODE_INVALID_REQUEST_SYNTAX;

	db_select_handle(srv, fd, be32dec(srv->ibuf));

	rec = NULL;
	db_next(srv, fd, &rec);
	if (rec == NULL || rec->fd != fd)
		return SDP_ERROR_CODE_INVALID_SERVICE_RECORD_HANDLE;

	/*
	 * expire the record
	 */
	rec->refcnt--;
	rec->valid = false;
	rec->fd = -1;
	db_unselect(srv, fd);

	/*
	 * encode 'success' ErrorCode
	 */
	be16enc(srv->obuf, 0x0000);

	/*
	 * fill in PDU header and we are done
	 */
	srv->pdu.pid = SDP_PDU_ERROR_RESPONSE;
	srv->pdu.len = sizeof(uint16_t);
	return 0;
}

/*
 * validate ServiceRecord data element list
 *
 * The record must contain a list of attribute/value pairs where the
 * attributes are unsigned 16-bit integer values in ascending order.
 */
static bool
sdpd_valid_record(sdp_data_t *data)
{
	sdp_data_t	d, s;
	uintmax_t	a0, a;

	s = *data;
	if (!sdp_data_valid(&s))
		return false;

	/* The first attribute must be ServiceRecordHandle */
	if (!sdp_get_data(&s, &d)
	    || sdp_data_type(&d) != SDP_DATA_UINT16
	    || !sdp_get_uint(&d, &a0)
	    || a0 != SDP_ATTR_SERVICE_RECORD_HANDLE
	    || !sdp_get_data(&s, &d)
	    || sdp_data_type(&d) != SDP_DATA_UINT32)
		return false;

	/* and remaining attribute IDs must be in ascending order */
	while (sdp_get_data(&s, &d)
	    && sdp_data_type(&d) == SDP_DATA_UINT16
	    && sdp_get_uint(&d, &a)
	    && a > a0
	    && sdp_get_data(&s, &d))
		a0 = a;

	if (s.next != s.end)
		return false;

	return true;
}