epan/dissectors/packet-dcerpc-tapi.c

   1 /* packet-dcerpc-tapi.c
   2  * Routines for DCERPC TAPI packet disassembly
   3  * Copyright 2002, Ronnie Sahlberg
   4  *
   5  * Wireshark - Network traffic analyzer
   6  * By Gerald Combs <gerald@wireshark.org>
   7  * Copyright 1998 Gerald Combs
   8  *
   9  * SPDX-License-Identifier: GPL-2.0-or-later
  10  */
  11 /* The IDL file for this interface can be extracted by grepping for idl
  12  * in capitals.
  13  */
  14
  15 #include "config.h"
  16
  17 #include <epan/packet.h>
  18 #include "packet-dcerpc.h"
  19 #include "packet-dcerpc-nt.h"
  20 #include "packet-dcerpc-tapi.h"
  21 #include "packet-windows-common.h"
  22
  23 void proto_register_dcerpc_tapi(void);
  24 void proto_reg_handoff_dcerpc_tapi(void);
  25
  26 static int proto_dcerpc_tapi;
  27 static int hf_tapi_opnum;
  28 static int hf_tapi_rc;
  29 static int hf_tapi_hnd;
  30 static int hf_tapi_unknown_long;
  31 static int hf_tapi_unknown_string;
  32 static int hf_tapi_unknown_bytes;
  33
  34 static int ett_dcerpc_tapi;
  35
  36 /*
  37   IDL [ uuid(2f5f6520-ca46-1067-b319-00dd010662da),
  38   IDL   version(1.0),
  39   IDL   implicit_handle(handle_t rpc_binding)
  40   IDL ] interface tapi
  41   IDL {
  42 */
  43 static e_guid_t uuid_dcerpc_tapi = {
  44         0x2f5f6520, 0xca46, 0x1067,
  45         { 0xb3, 0x19, 0x00, 0xdd, 0x01, 0x06, 0x62, 0xda }
  46 };
  47
  48 static uint16_t ver_dcerpc_tapi = 1;
  49
  50 /*
  51   IDL   long ClientAttach(
  52   IDL         [out] [context_handle] void *element_1,
  53   IDL         [in] long element_2,
  54   IDL         [out] long element_3,
  55   IDL         [in] [string] [ref] wchar_t *element_4,
  56   IDL         [in] [string] [ref] wchar_t *element_5
  57   IDL   );
  58 */
  59 static int
  60 dissect_tapi_client_attach_rqst(tvbuff_t *tvb, int offset,
  61                         packet_info *pinfo, proto_tree *tree,
  62                         dcerpc_info *di, uint8_t *drep)
  63 {
  64         offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep,
  65                 hf_tapi_unknown_long, NULL);
  66
  67         offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, di, drep,
  68                         NDR_POINTER_REF, "unknown string",
  69                          hf_tapi_unknown_string, 0);
  70
  71         offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, di, drep,
  72                         NDR_POINTER_REF, "unknown string",
  73                          hf_tapi_unknown_string, 0);
  74
  75         return offset;
  76 }
  77 static int
  78 dissect_tapi_client_attach_reply(tvbuff_t *tvb, int offset,
  79                         packet_info *pinfo, proto_tree *tree,
  80                         dcerpc_info *di, uint8_t *drep)
  81 {
  82         offset = dissect_ndr_ctx_hnd(tvb, offset, pinfo, tree, di, drep,
  83                         hf_tapi_hnd, NULL);
  84
  85         offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep,
  86                 hf_tapi_unknown_long, NULL);
  87
  88         offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep,
  89                 hf_tapi_rc, NULL);
  90
  91         return offset;
  92 }
  93
  94 /*
  95   IDL   long ClientRequest(
  96   IDL         [in] [context_handle] void *element_6,
  97   IDL     [in,out] [size_is(element_8)] [length_is(???)] char element_7[*],
  98   IDL         [in] long element_8
  99   IDL   );
 100 */
 101 static int
 102 dissect_tapi_TYPE_1(tvbuff_t *tvb, int offset,
 103                         packet_info *pinfo, proto_tree *tree,
 104                         dcerpc_info *di, uint8_t *drep)
 105 {
 106         if(di->conformant_run){
 107                 /* this call is to make wireshark eat the array header for the conformant run */
 108                 offset =dissect_ndr_ucvarray(tvb, offset, pinfo, tree, di, drep, NULL);
 109
 110                 return offset;
 111         }
 112
 113         proto_tree_add_item(tree, hf_tapi_unknown_bytes, tvb, offset,
 114                 di->array_actual_count, ENC_NA);
 115         offset += di->array_actual_count;
 116
 117         return offset;
 118 }
 119
 120 static int
 121 dissect_tapi_client_request_rqst(tvbuff_t *tvb, int offset,
 122                         packet_info *pinfo, proto_tree *tree,
 123                         dcerpc_info *di, uint8_t *drep)
 124 {
 125         offset = dissect_ndr_ctx_hnd(tvb, offset, pinfo, tree, di, drep,
 126                         hf_tapi_hnd, NULL);
 127
 128         offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, di, drep,
 129                         dissect_tapi_TYPE_1, NDR_POINTER_REF,
 130                         "unknown array", -1);
 131
 132         offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep,
 133                 hf_tapi_unknown_long, NULL);
 134
 135         return offset;
 136 }
 137 static int
 138 dissect_tapi_client_request_reply(tvbuff_t *tvb, int offset,
 139                         packet_info *pinfo, proto_tree *tree,
 140                         dcerpc_info *di, uint8_t *drep)
 141 {
 142         offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep,
 143                 hf_tapi_rc, NULL);
 144
 145         return offset;
 146 }
 147
 148
 149 /*
 150   IDL   void ClientDetach(
 151   IDL         void
 152   IDL   );
 153 */
 154 static int
 155 dissect_tapi_client_detach_rqst(tvbuff_t *tvb _U_, int offset,
 156                         packet_info *pinfo _U_, proto_tree *tree _U_,
 157                         dcerpc_info *di _U_, uint8_t *drep _U_)
 158 {
 159         return offset;
 160 }
 161 static int
 162 dissect_tapi_client_detach_reply(tvbuff_t *tvb _U_, int offset,
 163                         packet_info *pinfo _U_, proto_tree *tree _U_,
 164                         dcerpc_info *di _U_, uint8_t *drep _U_)
 165 {
 166         return offset;
 167 }
 168
 169 /*
 170   IDL }
 171 */
 172 static const dcerpc_sub_dissector dcerpc_tapi_dissectors[] = {
 173         { TAPI_CLIENT_ATTACH, "ClientAttach",
 174                 dissect_tapi_client_attach_rqst,
 175                 dissect_tapi_client_attach_reply },
 176         { TAPI_CLIENT_REQUEST, "ClientRequest",
 177                 dissect_tapi_client_request_rqst,
 178                 dissect_tapi_client_request_reply },
 179         { TAPI_CLIENT_DETACH, "ClientDetach",
 180                 dissect_tapi_client_detach_rqst,
 181                 dissect_tapi_client_detach_reply },
 182
 183         {0, NULL, NULL,  NULL }
 184 };
 185
 186 void
 187 proto_register_dcerpc_tapi(void)
 188 {
 189 static hf_register_info hf[] = {
 190         { &hf_tapi_opnum, {
 191                 "Operation", "tapi.opnum", FT_UINT16, BASE_DEC,
 192                 NULL, 0x0, NULL, HFILL }},
 193         { &hf_tapi_rc, {
 194                 "Return code", "tapi.rc", FT_UINT32, BASE_HEX | BASE_EXT_STRING,
 195                 &NT_errors_ext, 0x0, "TAPI return code", HFILL }},
 196         { &hf_tapi_hnd, {
 197                 "Context Handle", "tapi.hnd", FT_BYTES, BASE_NONE,
 198                 NULL, 0x0, NULL, HFILL }},
 199         { &hf_tapi_unknown_long, {
 200                 "Unknown long", "tapi.unknown.long", FT_UINT32, BASE_HEX,
 201                 NULL, 0x0, "Unknown long. If you know what this is, contact wireshark developers.", HFILL }},
 202         { &hf_tapi_unknown_string, {
 203                 "Unknown string", "tapi.unknown.string", FT_STRING, BASE_NONE,
 204                 NULL, 0x0, "Unknown string. If you know what this is, contact wireshark developers.", HFILL }},
 205         { &hf_tapi_unknown_bytes, {
 206                 "Unknown bytes", "tapi.unknown.bytes", FT_BYTES, BASE_NONE,
 207                 NULL, 0x0, "Unknown bytes. If you know what this is, contact wireshark developers.", HFILL }}
 208         };
 209
 210         static int *ett[] = {
 211                 &ett_dcerpc_tapi
 212         };
 213
 214         proto_dcerpc_tapi = proto_register_protocol("Microsoft Telephony API Service", "TAPI", "tapi");
 215
 216         proto_register_field_array(proto_dcerpc_tapi, hf,
 217                                    array_length(hf));
 218
 219         proto_register_subtree_array(ett, array_length(ett));
 220 }
 221
 222 void
 223 proto_reg_handoff_dcerpc_tapi(void)
 224 {
 225         /* Register protocol as dcerpc */
 226
 227         dcerpc_init_uuid(proto_dcerpc_tapi, ett_dcerpc_tapi,
 228                          &uuid_dcerpc_tapi, ver_dcerpc_tapi,
 229                          dcerpc_tapi_dissectors, hf_tapi_opnum);
 230 }
 231
 232 /*
 233  * Editor modelines
 234  *
 235  * Local Variables:
 236  * c-basic-offset: 8
 237  * tab-width: 8
 238  * indent-tabs-mode: t
 239  * End:
 240  *
 241  * ex: set shiftwidth=8 tabstop=8 noexpandtab:
 242  * :indentSize=8:tabSize=8:noTabs=false:
 243  */