871e964627
Do more checks to make sure we don't run past the end of the data we're handed, and don't do a DISSECTOR_ASSERT(), as there may well be packets that don't have enough data to pass the assertion - that was causing some errors to show up in the 2.6 buildbot when doing 802.11 decryption tests. Those errors should instead be reported as "sorry, we can't do decryption" errors by the decryption code. (XXX - the 802.11 *dissector* should probably be extracting the relevant fields and doing the relevant checks, and hand the data to the decryption code, so that we don't duplicate 802.11 frame parsing with code that might not do as much necessary work as the 802.11 dissector.) Tweak some comments while we're at it. Change-Id: I1d230e07cec2fca8c23f265b5875a0bf83f79432 Reviewed-on: https://code.wireshark.org/review/28240 Reviewed-by: Guy Harris <guy@alum.mit.edu>
152 lines
5.1 KiB
C
152 lines
5.1 KiB
C
/* airpcap_int.h
|
|
*
|
|
* Copyright (c) 2006 CACE Technologies, Davis (California)
|
|
* All rights reserved.
|
|
*
|
|
* SPDX-License-Identifier: (BSD-3-Clause OR GPL-2.0-only)
|
|
*/
|
|
|
|
#ifndef _DOT11DECRYPT_INT_H
|
|
#define _DOT11DECRYPT_INT_H
|
|
|
|
/****************************************************************************/
|
|
/* File includes */
|
|
|
|
#include "dot11decrypt_interop.h"
|
|
#include "dot11decrypt_system.h"
|
|
|
|
/****************************************************************************/
|
|
|
|
/****************************************************************************/
|
|
/* Definitions */
|
|
|
|
/* IEEE 802.11 packet type values */
|
|
#define DOT11DECRYPT_TYPE_MANAGEMENT 0
|
|
#define DOT11DECRYPT_TYPE_CONTROL 1
|
|
#define DOT11DECRYPT_TYPE_DATA 2
|
|
|
|
/* IEEE 802.11 packet subtype values */
|
|
#define DOT11DECRYPT_SUBTYPE_ASSOC_REQ 0
|
|
#define DOT11DECRYPT_SUBTYPE_ASSOC_RESP 1
|
|
#define DOT11DECRYPT_SUBTYPE_REASSOC_REQ 2
|
|
#define DOT11DECRYPT_SUBTYPE_REASSOC_RESP 3
|
|
#define DOT11DECRYPT_SUBTYPE_PROBE_REQ 4
|
|
#define DOT11DECRYPT_SUBTYPE_PROBE_RESP 5
|
|
#define DOT11DECRYPT_SUBTYPE_MEASUREMENT_PILOT 6
|
|
#define DOT11DECRYPT_SUBTYPE_BEACON 8
|
|
#define DOT11DECRYPT_SUBTYPE_ATIM 9
|
|
#define DOT11DECRYPT_SUBTYPE_DISASS 10
|
|
#define DOT11DECRYPT_SUBTYPE_AUTHENTICATION 11
|
|
#define DOT11DECRYPT_SUBTYPE_DEAUTHENTICATION 12
|
|
#define DOT11DECRYPT_SUBTYPE_ACTION 13
|
|
#define DOT11DECRYPT_SUBTYPE_ACTION_NO_ACK 14
|
|
|
|
/*
|
|
* Min length of encrypted data (TKIP=21bytes, CCMP=17bytes)
|
|
* CCMP = 8 octets of CCMP header, 1 octet of data, 8 octets of MIC.
|
|
* TKIP = 4 octets of IV/Key ID, 4 octets of Extended IV, 1 octet of data,
|
|
* 8 octets of MIC, 4 octets of ICV
|
|
*/
|
|
#define DOT11DECRYPT_CRYPTED_DATA_MINLEN 17
|
|
|
|
#define DOT11DECRYPT_TA_OFFSET 10
|
|
|
|
/* */
|
|
/****************************************************************************/
|
|
|
|
/****************************************************************************/
|
|
/* Macro definitions */
|
|
|
|
/**
|
|
* Macros to get various bits of a 802.11 control frame
|
|
*/
|
|
#define DOT11DECRYPT_TYPE(FrameControl_0) (UINT8)((FrameControl_0 >> 2) & 0x3)
|
|
#define DOT11DECRYPT_SUBTYPE(FrameControl_0) (UINT8)((FrameControl_0 >> 4) & 0xF)
|
|
#define DOT11DECRYPT_DS_BITS(FrameControl_1) (UINT8)(FrameControl_1 & 0x3)
|
|
#define DOT11DECRYPT_TO_DS(FrameControl_1) (UINT8)(FrameControl_1 & 0x1)
|
|
#define DOT11DECRYPT_FROM_DS(FrameControl_1) (UINT8)((FrameControl_1 >> 1) & 0x1)
|
|
#define DOT11DECRYPT_WEP(FrameControl_1) (UINT8)((FrameControl_1 >> 6) & 0x1)
|
|
|
|
/**
|
|
* Get the Key ID from the Initialization Vector (last byte)
|
|
*/
|
|
#define DOT11DECRYPT_EXTIV(KeyID) ((KeyID >> 5) & 0x1)
|
|
|
|
#define DOT11DECRYPT_KEY_INDEX(KeyID) ((KeyID >> 6) & 0x3) /** Used to determine TKIP group key from unicast (group = 1, unicast = 0) */
|
|
|
|
/* Macros to get various bits of an EAPOL frame */
|
|
#define DOT11DECRYPT_EAP_KEY_DESCR_VER(KeyInfo_1) ((UCHAR)(KeyInfo_1 & 0x3))
|
|
#define DOT11DECRYPT_EAP_KEY(KeyInfo_1) ((KeyInfo_1 >> 3) & 0x1)
|
|
#define DOT11DECRYPT_EAP_INST(KeyInfo_1) ((KeyInfo_1 >> 6) & 0x1)
|
|
#define DOT11DECRYPT_EAP_ACK(KeyInfo_1) ((KeyInfo_1 >> 7) & 0x1)
|
|
#define DOT11DECRYPT_EAP_MIC(KeyInfo_0) (KeyInfo_0 & 0x1)
|
|
#define DOT11DECRYPT_EAP_SEC(KeyInfo_0) ((KeyInfo_0 >> 1) & 0x1)
|
|
|
|
/****************************************************************************/
|
|
|
|
/****************************************************************************/
|
|
/* Structure definitions */
|
|
|
|
/*
|
|
* XXX - According to the thread at
|
|
* http://www.wireshark.org/lists/wireshark-dev/200612/msg00384.html we
|
|
* shouldn't have to worry about packing our structs, since the largest
|
|
* elements are 8 bits wide.
|
|
*/
|
|
#ifdef _MSC_VER /* MS Visual C++ */
|
|
#pragma pack(push)
|
|
#pragma pack(1)
|
|
#endif
|
|
|
|
/* Definition of IEEE 802.11 frame (without the address 4) */
|
|
typedef struct _DOT11DECRYPT_MAC_FRAME {
|
|
UCHAR fc[2];
|
|
UCHAR dur[2];
|
|
UCHAR addr1[DOT11DECRYPT_MAC_LEN];
|
|
UCHAR addr2[DOT11DECRYPT_MAC_LEN];
|
|
UCHAR addr3[DOT11DECRYPT_MAC_LEN];
|
|
UCHAR seq[2];
|
|
} DOT11DECRYPT_MAC_FRAME, *PDOT11DECRYPT_MAC_FRAME;
|
|
|
|
/* Definition of IEEE 802.11 frame (with the address 4) */
|
|
typedef struct _DOT11DECRYPT_MAC_FRAME_ADDR4 {
|
|
UCHAR fc[2];
|
|
UCHAR dur[2];
|
|
UCHAR addr1[DOT11DECRYPT_MAC_LEN];
|
|
UCHAR addr2[DOT11DECRYPT_MAC_LEN];
|
|
UCHAR addr3[DOT11DECRYPT_MAC_LEN];
|
|
UCHAR seq[2];
|
|
UCHAR addr4[DOT11DECRYPT_MAC_LEN];
|
|
} DOT11DECRYPT_MAC_FRAME_ADDR4, *PDOT11DECRYPT_MAC_FRAME_ADDR4;
|
|
|
|
/* Definition of IEEE 802.11 frame (without the address 4, with QOS) */
|
|
typedef struct _DOT11DECRYPT_MAC_FRAME_QOS {
|
|
UCHAR fc[2];
|
|
UCHAR dur[2];
|
|
UCHAR addr1[DOT11DECRYPT_MAC_LEN];
|
|
UCHAR addr2[DOT11DECRYPT_MAC_LEN];
|
|
UCHAR addr3[DOT11DECRYPT_MAC_LEN];
|
|
UCHAR seq[2];
|
|
UCHAR qos[2];
|
|
} DOT11DECRYPT_MAC_FRAME_QOS, *PDOT11DECRYPT_MAC_FRAME_QOS;
|
|
|
|
/* Definition of IEEE 802.11 frame (with the address 4 and QOS) */
|
|
typedef struct _DOT11DECRYPT_MAC_FRAME_ADDR4_QOS {
|
|
UCHAR fc[2];
|
|
UCHAR dur[2];
|
|
UCHAR addr1[DOT11DECRYPT_MAC_LEN];
|
|
UCHAR addr2[DOT11DECRYPT_MAC_LEN];
|
|
UCHAR addr3[DOT11DECRYPT_MAC_LEN];
|
|
UCHAR seq[2];
|
|
UCHAR addr4[DOT11DECRYPT_MAC_LEN];
|
|
UCHAR qos[2];
|
|
} DOT11DECRYPT_MAC_FRAME_ADDR4_QOS, *PDOT11DECRYPT_MAC_FRAME_ADDR4_QOS;
|
|
|
|
#ifdef _MSC_VER /* MS Visual C++ */
|
|
#pragma pack(pop)
|
|
#endif
|
|
|
|
/******************************************************************************/
|
|
|
|
#endif
|