intronet.c

Go to the documentation of this file.

/*
 * Copyright (c) 2020 Bitdefender
 * SPDX-License-Identifier: Apache-2.0
 */
#include "intronet.h"
#include "guests.h"


_Success_(return > 0)
DWORD
IntNetAddrToStr(
    _In_ const INTRO_NET_AF Family,
    _In_ const INTRONET_ADDRESS *Address,
    _Out_writes_(INTRONET_MIN_BUFFER_SIZE) CHAR *String
    )
{
    DWORD written = 0;

    if (NULL == Address || NULL == String)
    {
        return 0;
    }

    if (introNetAfIpv4 == Family)
    {
        written = snprintf(String, INTRONET_MIN_BUFFER_SIZE, "%d.%d.%d.%d",
                           Address->Ipv4[0], Address->Ipv4[1], Address->Ipv4[2], Address->Ipv4[3]);
    }
    else if (introNetAfIpv6 == Family)
    {
        CHAR *format = NULL;
        BOOLEAN first = TRUE;
        WORD toPrint = 0;

        written = snprintf(String, INTRONET_MIN_BUFFER_SIZE, "[");

        // Iterate up to 14 since we don't want to print the last two BYTEs inside this loop.
        for (DWORD i = 0; i < 14; i += 2)
        {
            toPrint = Address->Ipv6[i] << 8 | Address->Ipv6[i + 1];

            if (0 != toPrint)
            {
                format = first ? "%04x:" : ":%04x";

                written += snprintf(String + written, INTRONET_MIN_BUFFER_SIZE - written, format, toPrint);
            }
            else if (first)
            {
                written += snprintf(String + written, INTRONET_MIN_BUFFER_SIZE - written, ":");
            }

            first = FALSE;
        }

        format = ":%x]";
        toPrint = Address->Ipv6[14] << 8 | Address->Ipv6[15];

        written += snprintf(String + written, INTRONET_MIN_BUFFER_SIZE - written, format, toPrint);
    }

    return written;
}


static __forceinline INTRO_NET_STATE
IntNetConvertStateLix(
    _In_ const LIX_SOCK_STATE State
    )
{
    switch (State)
    {
    case LIX_TCP_ESTABLISHED:
        return introNetStateEstablished;
    case LIX_TCP_SYN_SENT:
        return introNetStateSynSent;
    case LIX_TCP_SYN_RECV:
        return introNetStateSynRecv;
    case LIX_TCP_FIN_WAIT1:
        return introNetStateFinWait;
    case LIX_TCP_FIN_WAIT2:
        return introNetStateFinWait2;
    case LIX_TCP_TIME_WAIT:
        return introNetStateTimeWait;
    case LIX_TCP_CLOSE:
        return introNetStateClosed;
    case LIX_TCP_CLOSE_WAIT:
        return introNetStateCloseWait;
    case LIX_TCP_LAST_ACK:
        return introNetStateLastAck;
    case LIX_TCP_LISTEN:
        return introNetStateListening;
    case LIX_TCP_CLOSING:
        return introNetStateClosing;
    case LIX_TCP_NEW_SYN_RECV:
        return introNetStateNewSynRecv;
    default:
        return introNetStateUnknown;
    }
}


static __forceinline INTRO_NET_STATE
IntNetConvertStateWin(
    _In_ const WIN_SOCK_STATE State
    )
{
    switch (State)
    {
    case WIN_TCP_CLOSED:
        return introNetStateClosed;
    case WIN_TCP_LISTENING:
        return introNetStateListening;
    case WIN_TCP_SYN_SENT:
        return introNetStateSynSent;
    case WIN_TCP_SYN_RECV:
        return introNetStateSynRecv;
    case WIN_TCP_ESTABLISHED:
        return introNetStateEstablished;
    case WIN_TCP_FIN_WAIT:
        return introNetStateFinWait;
    case WIN_TCP_FIN_WAIT2:
        return introNetStateFinWait2;
    case WIN_TCP_CLOSE_WAIT:
        return introNetStateCloseWait;
    case WIN_TCP_CLOSING:
        return introNetStateClosing;
    case WIN_TCP_LAST_ACK:
        return introNetStateLastAck;
    case WIN_TCP_TIME_WAIT:
        return introNetStateTimeWait;
    case WIN_TCP_DELETE_TCB:
        return introNetStateDeleteTcb;
    default:
        return introNetStateUnknown;
    }
}


INTRO_NET_STATE
IntNetConvertState(
    _In_ const DWORD State
    )
{
    switch (gGuest.OSType)
    {
    case introGuestLinux:
        return IntNetConvertStateLix(State);

    case introGuestWindows:
        return IntNetConvertStateWin(State);

    default:
        return introNetStateUnknown;
    }
}