|
|
|
|
@ -19,15 +19,15 @@
|
|
|
|
|
|
|
|
|
|
extern crate nom;
|
|
|
|
|
|
|
|
|
|
use std;
|
|
|
|
|
use std::ffi::{CStr,CString};
|
|
|
|
|
use applayer;
|
|
|
|
|
use conf;
|
|
|
|
|
use core;
|
|
|
|
|
use core::{AppProto,Flow,ALPROTO_UNKNOWN,sc_detect_engine_state_free};
|
|
|
|
|
use parser::*;
|
|
|
|
|
use core::{sc_detect_engine_state_free, AppProto, Flow, ALPROTO_UNKNOWN};
|
|
|
|
|
use log::*;
|
|
|
|
|
use parser::*;
|
|
|
|
|
use sip::parser::*;
|
|
|
|
|
use conf;
|
|
|
|
|
use std;
|
|
|
|
|
use std::ffi::{CStr, CString};
|
|
|
|
|
|
|
|
|
|
#[repr(u32)]
|
|
|
|
|
pub enum SIPEvent {
|
|
|
|
|
@ -83,7 +83,10 @@ impl SIPState {
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
fn free_tx(&mut self, tx_id: u64) {
|
|
|
|
|
let tx = self.transactions.iter().position(|ref tx| tx.id == tx_id + 1);
|
|
|
|
|
let tx = self
|
|
|
|
|
.transactions
|
|
|
|
|
.iter()
|
|
|
|
|
.position(|ref tx| tx.id == tx_id + 1);
|
|
|
|
|
debug_assert!(tx != None);
|
|
|
|
|
if let Some(idx) = tx {
|
|
|
|
|
let _ = self.transactions.remove(idx);
|
|
|
|
|
@ -182,10 +185,10 @@ pub extern "C" fn rs_sip_state_free(state: *mut std::os::raw::c_void) {
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_state_get_tx(state: *mut std::os::raw::c_void,
|
|
|
|
|
tx_id: u64)
|
|
|
|
|
-> *mut std::os::raw::c_void
|
|
|
|
|
{
|
|
|
|
|
pub extern "C" fn rs_sip_state_get_tx(
|
|
|
|
|
state: *mut std::os::raw::c_void,
|
|
|
|
|
tx_id: u64,
|
|
|
|
|
) -> *mut std::os::raw::c_void {
|
|
|
|
|
let state = cast_pointer!(state, SIPState);
|
|
|
|
|
match state.get_tx_by_id(tx_id) {
|
|
|
|
|
Some(tx) => unsafe { std::mem::transmute(tx) },
|
|
|
|
|
@ -194,61 +197,54 @@ pub extern "C" fn rs_sip_state_get_tx(state: *mut std::os::raw::c_void,
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_state_get_tx_count(state: *mut std::os::raw::c_void)
|
|
|
|
|
-> u64
|
|
|
|
|
{
|
|
|
|
|
pub extern "C" fn rs_sip_state_get_tx_count(state: *mut std::os::raw::c_void) -> u64 {
|
|
|
|
|
let state = cast_pointer!(state, SIPState);
|
|
|
|
|
state.tx_id
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_state_tx_free(state: *mut std::os::raw::c_void,
|
|
|
|
|
tx_id: u64)
|
|
|
|
|
{
|
|
|
|
|
pub extern "C" fn rs_sip_state_tx_free(state: *mut std::os::raw::c_void, tx_id: u64) {
|
|
|
|
|
let state = cast_pointer!(state, SIPState);
|
|
|
|
|
state.free_tx(tx_id);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_state_progress_completion_status(
|
|
|
|
|
_direction: u8)
|
|
|
|
|
-> std::os::raw::c_int
|
|
|
|
|
{
|
|
|
|
|
pub extern "C" fn rs_sip_state_progress_completion_status(_direction: u8) -> std::os::raw::c_int {
|
|
|
|
|
return 1;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_tx_get_alstate_progress(_tx: *mut std::os::raw::c_void,
|
|
|
|
|
_direction: u8)
|
|
|
|
|
-> std::os::raw::c_int
|
|
|
|
|
{
|
|
|
|
|
pub extern "C" fn rs_sip_tx_get_alstate_progress(
|
|
|
|
|
_tx: *mut std::os::raw::c_void,
|
|
|
|
|
_direction: u8,
|
|
|
|
|
) -> std::os::raw::c_int {
|
|
|
|
|
1
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_tx_set_logged(_state: *mut std::os::raw::c_void,
|
|
|
|
|
pub extern "C" fn rs_sip_tx_set_logged(
|
|
|
|
|
_state: *mut std::os::raw::c_void,
|
|
|
|
|
tx: *mut std::os::raw::c_void,
|
|
|
|
|
logged: u32)
|
|
|
|
|
{
|
|
|
|
|
logged: u32,
|
|
|
|
|
) {
|
|
|
|
|
let tx = cast_pointer!(tx, SIPTransaction);
|
|
|
|
|
tx.logged.set(logged);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_tx_get_logged(_state: *mut std::os::raw::c_void,
|
|
|
|
|
tx: *mut std::os::raw::c_void)
|
|
|
|
|
-> u32
|
|
|
|
|
{
|
|
|
|
|
pub extern "C" fn rs_sip_tx_get_logged(
|
|
|
|
|
_state: *mut std::os::raw::c_void,
|
|
|
|
|
tx: *mut std::os::raw::c_void,
|
|
|
|
|
) -> u32 {
|
|
|
|
|
let tx = cast_pointer!(tx, SIPTransaction);
|
|
|
|
|
return tx.logged.get();
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_state_set_tx_detect_state(
|
|
|
|
|
tx: *mut std::os::raw::c_void,
|
|
|
|
|
de_state: &mut core::DetectEngineState) -> std::os::raw::c_int
|
|
|
|
|
{
|
|
|
|
|
de_state: &mut core::DetectEngineState,
|
|
|
|
|
) -> std::os::raw::c_int {
|
|
|
|
|
let tx = cast_pointer!(tx, SIPTransaction);
|
|
|
|
|
tx.de_state = Some(de_state);
|
|
|
|
|
0
|
|
|
|
|
@ -256,9 +252,8 @@ pub extern "C" fn rs_sip_state_set_tx_detect_state(
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_state_get_tx_detect_state(
|
|
|
|
|
tx: *mut std::os::raw::c_void)
|
|
|
|
|
-> *mut core::DetectEngineState
|
|
|
|
|
{
|
|
|
|
|
tx: *mut std::os::raw::c_void,
|
|
|
|
|
) -> *mut core::DetectEngineState {
|
|
|
|
|
let tx = cast_pointer!(tx, SIPTransaction);
|
|
|
|
|
match tx.de_state {
|
|
|
|
|
Some(ds) => ds,
|
|
|
|
|
@ -266,22 +261,23 @@ pub extern "C" fn rs_sip_state_get_tx_detect_state(
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_state_get_events(tx: *mut std::os::raw::c_void)
|
|
|
|
|
-> *mut core::AppLayerDecoderEvents
|
|
|
|
|
{
|
|
|
|
|
pub extern "C" fn rs_sip_state_get_events(
|
|
|
|
|
tx: *mut std::os::raw::c_void,
|
|
|
|
|
) -> *mut core::AppLayerDecoderEvents {
|
|
|
|
|
let tx = cast_pointer!(tx, SIPTransaction);
|
|
|
|
|
return tx.events
|
|
|
|
|
return tx.events;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_state_get_event_info(event_name: *const std::os::raw::c_char,
|
|
|
|
|
pub extern "C" fn rs_sip_state_get_event_info(
|
|
|
|
|
event_name: *const std::os::raw::c_char,
|
|
|
|
|
event_id: *mut std::os::raw::c_int,
|
|
|
|
|
event_type: *mut core::AppLayerEventType)
|
|
|
|
|
-> std::os::raw::c_int
|
|
|
|
|
{
|
|
|
|
|
if event_name == std::ptr::null() { return -1; }
|
|
|
|
|
event_type: *mut core::AppLayerEventType,
|
|
|
|
|
) -> std::os::raw::c_int {
|
|
|
|
|
if event_name == std::ptr::null() {
|
|
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
let c_event_name: &CStr = unsafe { CStr::from_ptr(event_name) };
|
|
|
|
|
let event = match c_event_name.to_str() {
|
|
|
|
|
Ok(s) => {
|
|
|
|
|
@ -290,7 +286,7 @@ pub extern "C" fn rs_sip_state_get_event_info(event_name: *const std::os::raw::c
|
|
|
|
|
"invalid_data" => SIPEvent::InvalidData as i32,
|
|
|
|
|
_ => -1, // unknown event
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
}
|
|
|
|
|
Err(_) => -1, // UTF-8 conversion failed
|
|
|
|
|
};
|
|
|
|
|
unsafe {
|
|
|
|
|
@ -301,15 +297,15 @@ pub extern "C" fn rs_sip_state_get_event_info(event_name: *const std::os::raw::c
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_state_get_event_info_by_id(event_id: std::os::raw::c_int,
|
|
|
|
|
pub extern "C" fn rs_sip_state_get_event_info_by_id(
|
|
|
|
|
event_id: std::os::raw::c_int,
|
|
|
|
|
event_name: *mut *const std::os::raw::c_char,
|
|
|
|
|
event_type: *mut core::AppLayerEventType)
|
|
|
|
|
-> i8
|
|
|
|
|
{
|
|
|
|
|
event_type: *mut core::AppLayerEventType,
|
|
|
|
|
) -> i8 {
|
|
|
|
|
if let Some(e) = SIPEvent::from_i32(event_id as i32) {
|
|
|
|
|
let estr = match e {
|
|
|
|
|
SIPEvent::IncompleteData => { "incomplete_data\0" },
|
|
|
|
|
SIPEvent::InvalidData => { "invalid_data\0" },
|
|
|
|
|
SIPEvent::IncompleteData => "incomplete_data\0",
|
|
|
|
|
SIPEvent::InvalidData => "invalid_data\0",
|
|
|
|
|
};
|
|
|
|
|
unsafe {
|
|
|
|
|
*event_name = estr.as_ptr() as *const std::os::raw::c_char;
|
|
|
|
|
@ -324,11 +320,13 @@ pub extern "C" fn rs_sip_state_get_event_info_by_id(event_id: std::os::raw::c_in
|
|
|
|
|
static mut ALPROTO_SIP: AppProto = ALPROTO_UNKNOWN;
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_probing_parser_ts(_flow: *const Flow,
|
|
|
|
|
pub extern "C" fn rs_sip_probing_parser_ts(
|
|
|
|
|
_flow: *const Flow,
|
|
|
|
|
_direction: u8,
|
|
|
|
|
input:*const u8, input_len: u32,
|
|
|
|
|
_rdir: *mut u8) -> AppProto
|
|
|
|
|
{
|
|
|
|
|
input: *const u8,
|
|
|
|
|
input_len: u32,
|
|
|
|
|
_rdir: *mut u8,
|
|
|
|
|
) -> AppProto {
|
|
|
|
|
let buf = build_slice!(input, input_len as usize);
|
|
|
|
|
if sip_parse_request(buf).is_ok() {
|
|
|
|
|
return unsafe { ALPROTO_SIP };
|
|
|
|
|
@ -337,12 +335,13 @@ pub extern "C" fn rs_sip_probing_parser_ts(_flow: *const Flow,
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_probing_parser_tc(_flow: *const Flow,
|
|
|
|
|
pub extern "C" fn rs_sip_probing_parser_tc(
|
|
|
|
|
_flow: *const Flow,
|
|
|
|
|
_direction: u8,
|
|
|
|
|
input: *const u8,
|
|
|
|
|
input_len: u32,
|
|
|
|
|
_rdir: *mut u8) -> AppProto
|
|
|
|
|
{
|
|
|
|
|
_rdir: *mut u8,
|
|
|
|
|
) -> AppProto {
|
|
|
|
|
let buf = build_slice!(input, input_len as usize);
|
|
|
|
|
if sip_parse_response(buf).is_ok() {
|
|
|
|
|
return unsafe { ALPROTO_SIP };
|
|
|
|
|
@ -351,13 +350,15 @@ pub extern "C" fn rs_sip_probing_parser_tc(_flow: *const Flow,
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_parse_request(_flow: *const core::Flow,
|
|
|
|
|
pub extern "C" fn rs_sip_parse_request(
|
|
|
|
|
_flow: *const core::Flow,
|
|
|
|
|
state: *mut std::os::raw::c_void,
|
|
|
|
|
_pstate: *mut std::os::raw::c_void,
|
|
|
|
|
input: *const u8,
|
|
|
|
|
input_len: u32,
|
|
|
|
|
_data: *const std::os::raw::c_void,
|
|
|
|
|
_flags: u8) -> i32 {
|
|
|
|
|
_flags: u8,
|
|
|
|
|
) -> i32 {
|
|
|
|
|
let buf = build_slice!(input, input_len as usize);
|
|
|
|
|
let state = cast_pointer!(state, SIPState);
|
|
|
|
|
if state.parse_request(buf) {
|
|
|
|
|
@ -368,13 +369,15 @@ pub extern "C" fn rs_sip_parse_request(_flow: *const core::Flow,
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[no_mangle]
|
|
|
|
|
pub extern "C" fn rs_sip_parse_response(_flow: *const core::Flow,
|
|
|
|
|
pub extern "C" fn rs_sip_parse_response(
|
|
|
|
|
_flow: *const core::Flow,
|
|
|
|
|
state: *mut std::os::raw::c_void,
|
|
|
|
|
_pstate: *mut std::os::raw::c_void,
|
|
|
|
|
input: *const u8,
|
|
|
|
|
input_len: u32,
|
|
|
|
|
_data: *const std::os::raw::c_void,
|
|
|
|
|
_flags: u8) -> i32 {
|
|
|
|
|
_flags: u8,
|
|
|
|
|
) -> i32 {
|
|
|
|
|
let buf = build_slice!(input, input_len as usize);
|
|
|
|
|
let state = cast_pointer!(state, SIPState);
|
|
|
|
|
if state.parse_response(buf) {
|
|
|
|
|
|