Changeset e374dee for libfaim/auth.c

Timestamp:

Oct 10, 2003, 5:12:30 PM (21 years ago)

Author:

James M. Kretchmar <kretch@mit.edu>

Branches:

master, barnowl_perlaim, debian, owl, release-1.10, release-1.4, release-1.5, release-1.6, release-1.7, release-1.8, release-1.9

Children:

fe6f1d3

Parents:

f4d0975

Message:

*** empty log message ***

File:

• libfaim/auth.c (modified) (18 diffs)

libfaim/auth.c

@@ -8 +8 @@
 
 #define FAIM_INTERNAL
-#include <aim.h> 
+#include <aim.h>
 
 #include "md5.h"
 
-static int aim_encode_password(const char *password, unsigned char *encoded);
+static int aim_encode_password(const char *password, fu8_t *encoded);
 
 /* 
@@ -22 +22 @@
  *
  */
-faim_export int aim_sendcookie(aim_session_t *sess, aim_conn_t *conn, const fu8_t *chipsahoy)
+faim_export int aim_sendcookie(aim_session_t *sess, aim_conn_t *conn, const fu16_t length, const fu8_t *chipsahoy)
 {
         aim_frame_t *fr;
         aim_tlvlist_t *tl = NULL;
 
-        if (!(fr = aim_tx_new(sess, conn, AIM_FRAMETYPE_FLAP, 0x0001, 4+2+2+AIM_COOKIELEN)))
+        if (!(fr = aim_tx_new(sess, conn, AIM_FRAMETYPE_FLAP, 0x0001, 4+2+2+length)))
                 return -ENOMEM;
 
         aimbs_put32(&fr->data, 0x00000001);
-        aim_addtlvtochain_raw(&tl, 0x0006, AIM_COOKIELEN, chipsahoy);   
+        aim_addtlvtochain_raw(&tl, 0x0006, length, chipsahoy);
         aim_writetlvchain(&fr->data, &tl);
         aim_freetlvchain(&tl);
@@ -157 +157 @@
         aim_frame_t *fr;
         aim_tlvlist_t *tl = NULL;
-        char *password_encoded;
-
-        if (!(password_encoded = (char *) malloc(strlen(password))))
+        int passwdlen;
+        fu8_t *password_encoded;
+
+        passwdlen = strlen(password);
+        if (!(password_encoded = (char *)malloc(passwdlen+1)))
                 return -ENOMEM;
+        if (passwdlen > MAXICQPASSLEN)
+                passwdlen = MAXICQPASSLEN;
 
         if (!(fr = aim_tx_new(sess, conn, AIM_FRAMETYPE_FLAP, 0x01, 1152))) {
@@ -171 +175 @@
         aimbs_put32(&fr->data, 0x00000001); /* FLAP Version */
         aim_addtlvtochain_raw(&tl, 0x0001, strlen(sn), sn);
-        aim_addtlvtochain_raw(&tl, 0x0002, strlen(password), password_encoded);
+        aim_addtlvtochain_raw(&tl, 0x0002, passwdlen, password_encoded);
 
         if (ci->clientstring)
@@ -180 +184 @@
         aim_addtlvtochain16(&tl, 0x0019, (fu16_t)ci->point);
         aim_addtlvtochain16(&tl, 0x001a, (fu16_t)ci->build);
-        aim_addtlvtochain32(&tl, 0x0014, 0x00000055); /* distribution chan */
+        aim_addtlvtochain32(&tl, 0x0014, (fu32_t)ci->distrib); /* distribution chan */
         aim_addtlvtochain_raw(&tl, 0x000f, strlen(ci->lang), ci->lang);
         aim_addtlvtochain_raw(&tl, 0x000e, strlen(ci->country), ci->country);
@@ -202 +206 @@
  * then the client information you send here must exactly match the
  * executable that you're pulling the data from.
- *
- * WinAIM 4.8.2540
- *   clientstring = "AOL Instant Messenger (SM), version 4.8.2540/WIN32"
- *   clientid = 0x0109
- *   major = 0x0004
- *   minor = 0x0008
- *   point = 0x0000
- *   build = 0x09ec
- *   t(0x0014) = 0x000000af
- *   t(0x004a) = 0x01
- *
- * WinAIM 4.3.2188:
- *   clientstring = "AOL Instant Messenger (SM), version 4.3.2188/WIN32"
- *   clientid = 0x0109
- *   major = 0x0400
- *   minor = 0x0003
- *   point = 0x0000
- *   build = 0x088c
- *   unknown = 0x00000086
- *   lang = "en"
- *   country = "us"
- *   unknown4a = 0x01
- *
- * Latest WinAIM that libfaim can emulate without server-side buddylists:
- *   clientstring = "AOL Instant Messenger (SM), version 4.1.2010/WIN32"
- *   clientid = 0x0004
- *   major  = 0x0004
- *   minor  = 0x0001
- *   point = 0x0000
- *   build  = 0x07da
- *   unknown= 0x0000004b
- *
- * WinAIM 3.5.1670:
- *   clientstring = "AOL Instant Messenger (SM), version 3.5.1670/WIN32"
- *   clientid = 0x0004
- *   major =  0x0003
- *   minor =  0x0005
- *   point = 0x0000
- *   build =  0x0686
- *   unknown =0x0000002a
  *
  * Java AIM 1.1.19:
@@ -304 +268 @@
         aim_addtlvtochain16(&tl, 0x0019, (fu16_t)ci->point);
         aim_addtlvtochain16(&tl, 0x001a, (fu16_t)ci->build);
+        aim_addtlvtochain32(&tl, 0x0014, (fu32_t)ci->distrib);
         aim_addtlvtochain_raw(&tl, 0x000e, strlen(ci->country), ci->country);
         aim_addtlvtochain_raw(&tl, 0x000f, strlen(ci->lang), ci->lang);
 
+#ifndef NOSSI
         /*
          * If set, old-fashioned buddy lists will not work. You will need
@@ -312 +278 @@
          */
         aim_addtlvtochain8(&tl, 0x004a, 0x01);
+#endif
 
         aim_writetlvchain(&fr->data, &tl);
@@ -388 +355 @@
         aim_tlvlist_t *tlvlist;
         aim_rxcallback_t userfunc;
-        struct aim_authresp_info info;
+        struct aim_authresp_info *info;
         int ret = 0;
 
-        memset(&info, 0, sizeof(info));
+        info = (struct aim_authresp_info *)malloc(sizeof(struct aim_authresp_info));
+        memset(info, 0, sizeof(struct aim_authresp_info));
 
         /*
@@ -404 +372 @@
         memset(sess->sn, 0, sizeof(sess->sn));
         if (aim_gettlv(tlvlist, 0x0001, 1)) {
-                info.sn = aim_gettlv_str(tlvlist, 0x0001, 1);
-                strncpy(sess->sn, info.sn, sizeof(sess->sn));
+                info->sn = aim_gettlv_str(tlvlist, 0x0001, 1);
+                strncpy(sess->sn, info->sn, sizeof(sess->sn));
         }
 
@@ -413 +381 @@
          */
         if (aim_gettlv(tlvlist, 0x0008, 1)) 
-                info.errorcode = aim_gettlv16(tlvlist, 0x0008, 1);
+                info->errorcode = aim_gettlv16(tlvlist, 0x0008, 1);
         if (aim_gettlv(tlvlist, 0x0004, 1))
-                info.errorurl = aim_gettlv_str(tlvlist, 0x0004, 1);
+                info->errorurl = aim_gettlv_str(tlvlist, 0x0004, 1);
 
         /*
@@ -421 +389 @@
          */
         if (aim_gettlv(tlvlist, 0x0005, 1))
-                info.bosip = aim_gettlv_str(tlvlist, 0x0005, 1);
+                info->bosip = aim_gettlv_str(tlvlist, 0x0005, 1);
 
         /*
@@ -431 +399 @@
                 tmptlv = aim_gettlv(tlvlist, 0x0006, 1);
 
-                info.cookie = tmptlv->value;
+                info->cookielen = tmptlv->length;
+                info->cookie = tmptlv->value;
         }
 
         /*
          * The email address attached to this account
-         *   Not available for ICQ logins.
+         *   Not available for ICQ or @mac.com logins.
+         *   If you receive this TLV, then you are allowed to use 
+         *   family 0x0018 to check the status of your email.
+         * XXX - Not really true!
          */
         if (aim_gettlv(tlvlist, 0x0011, 1))
-                info.email = aim_gettlv_str(tlvlist, 0x0011, 1);
+                info->email = aim_gettlv_str(tlvlist, 0x0011, 1);
 
         /*
          * The registration status.  (Not real sure what it means.)
-         *   Not available for ICQ logins.
+         *   Not available for ICQ or @mac.com logins.
          *
          *   1 = No disclosure
@@ -452 +424 @@
          * to other users or not.  AFAIK, this feature is no longer used.
          *
+         * Means you can use the admin family? (0x0007)
+         *
          */
         if (aim_gettlv(tlvlist, 0x0013, 1))
-                info.regstatus = aim_gettlv16(tlvlist, 0x0013, 1);
+                info->regstatus = aim_gettlv16(tlvlist, 0x0013, 1);
 
         if (aim_gettlv(tlvlist, 0x0040, 1))
-                info.latestbeta.build = aim_gettlv32(tlvlist, 0x0040, 1);
+                info->latestbeta.build = aim_gettlv32(tlvlist, 0x0040, 1);
         if (aim_gettlv(tlvlist, 0x0041, 1))
-                info.latestbeta.url = aim_gettlv_str(tlvlist, 0x0041, 1);
+                info->latestbeta.url = aim_gettlv_str(tlvlist, 0x0041, 1);
         if (aim_gettlv(tlvlist, 0x0042, 1))
-                info.latestbeta.info = aim_gettlv_str(tlvlist, 0x0042, 1);
+                info->latestbeta.info = aim_gettlv_str(tlvlist, 0x0042, 1);
         if (aim_gettlv(tlvlist, 0x0043, 1))
-                info.latestbeta.name = aim_gettlv_str(tlvlist, 0x0043, 1);
+                info->latestbeta.name = aim_gettlv_str(tlvlist, 0x0043, 1);
         if (aim_gettlv(tlvlist, 0x0048, 1))
                 ; /* no idea what this is */
 
         if (aim_gettlv(tlvlist, 0x0044, 1))
-                info.latestrelease.build = aim_gettlv32(tlvlist, 0x0044, 1);
+                info->latestrelease.build = aim_gettlv32(tlvlist, 0x0044, 1);
         if (aim_gettlv(tlvlist, 0x0045, 1))
-                info.latestrelease.url = aim_gettlv_str(tlvlist, 0x0045, 1);
+                info->latestrelease.url = aim_gettlv_str(tlvlist, 0x0045, 1);
         if (aim_gettlv(tlvlist, 0x0046, 1))
-                info.latestrelease.info = aim_gettlv_str(tlvlist, 0x0046, 1);
+                info->latestrelease.info = aim_gettlv_str(tlvlist, 0x0046, 1);
         if (aim_gettlv(tlvlist, 0x0047, 1))
-                info.latestrelease.name = aim_gettlv_str(tlvlist, 0x0047, 1);
+                info->latestrelease.name = aim_gettlv_str(tlvlist, 0x0047, 1);
         if (aim_gettlv(tlvlist, 0x0049, 1))
                 ; /* no idea what this is */
@@ -482 +456 @@
          */
         if (aim_gettlv(tlvlist, 0x0054, 1))
-                info.chpassurl = aim_gettlv_str(tlvlist, 0x0054, 1);
+                info->chpassurl = aim_gettlv_str(tlvlist, 0x0054, 1);
+
+        /*
+         * Unknown.  Seen on an @mac.com screen name with value of 0x003f
+         */
+        if (aim_gettlv(tlvlist, 0x0055, 1))
+                ;
+
+        sess->authinfo = info;
 
         if ((userfunc = aim_callhandler(sess, rx->conn, snac ? snac->family : 0x0017, snac ? snac->subtype : 0x0003)))
-                ret = userfunc(sess, rx, &info);
-
-        free(info.sn);
-        free(info.bosip);
-        free(info.errorurl);
-        free(info.email);
-        free(info.chpassurl);
-        free(info.latestrelease.name);
-        free(info.latestrelease.url);
-        free(info.latestrelease.info);
-        free(info.latestbeta.name);
-        free(info.latestbeta.url);
-        free(info.latestbeta.info);
+                ret = userfunc(sess, rx, info);
 
         aim_freetlvchain(&tlvlist);
@@ -520 +490 @@
         keystr = aimbs_getstr(bs, keylen);
 
+        /* XXX - When GiantGrayPanda signed on AIM I got a thing asking me to register 
+         * for the netscape network.  This SNAC had a type 0x0058 TLV with length 10.  
+         * Data is 0x0007 0004 3e19 ae1e 0006 0004 0000 0005 */
+
         if ((userfunc = aim_callhandler(sess, rx->conn, snac->family, snac->subtype)))
                 ret = userfunc(sess, rx, keystr);
@@ -526 +500 @@
 
         return ret;
+}
+
+static void auth_shutdown(aim_session_t *sess, aim_module_t *mod)
+{
+        if (sess->authinfo) {
+                free(sess->authinfo->sn);
+                free(sess->authinfo->bosip);
+                free(sess->authinfo->errorurl);
+                free(sess->authinfo->email);
+                free(sess->authinfo->chpassurl);
+                free(sess->authinfo->latestrelease.name);
+                free(sess->authinfo->latestrelease.url);
+                free(sess->authinfo->latestrelease.info);
+                free(sess->authinfo->latestbeta.name);
+                free(sess->authinfo->latestbeta.url);
+                free(sess->authinfo->latestbeta.info);
+                free(sess->authinfo);
+        }
 }
 
@@ -547 +539 @@
         strncpy(mod->name, "auth", sizeof(mod->name));
         mod->snachandler = snachandler;
-
-        return 0;
-}
+        mod->shutdown = auth_shutdown;
+
+        return 0;
+}