/*********************************************************/

/*  toksvc: a framework-native token broker service      */

/*  Copyright (C) 2020  SysDeer Technologies, LLC        */

/*  Released under GPLv2 and GPLv3; see COPYING.TOKSVC.  */

/*********************************************************/

#include <psxtypes/psxtypes.h>

#include <ntapi/ntapi.h>

#include <ntapi/nt_termios.h>

#include "toksvc_daemon_impl.h"

#include "toksvc_driver_impl.h"

#include "toksvc_log_impl.h"

static int32_t toks_daemon_ioctl_get_token_count(struct toks_daemon_ctx * dctx)

{

	nt_tty_port_msg * msg = &dctx->reply;

	msg->ttyinfo.exarg = (void *)(intptr_t)toks_get_driver_ntokens(dctx->driver_ctx);

	return NT_STATUS_SUCCESS;

}

static int32_t toks_daemon_ioctl_set_token_count(struct toks_daemon_ctx * dctx)

{

	nt_tty_port_msg * msg;

	int               ntokens;

	msg     = &dctx->reply;

	ntokens = (int)(intptr_t)msg->ttyinfo.exarg;

	if (ntokens < 0)

		return NT_STATUS_INVALID_PARAMETER;

	else if (ntokens > toks_get_driver_atokens(dctx->driver_ctx))

		return NT_STATUS_BUFFER_TOO_SMALL;

	toks_set_driver_ntokens(dctx->driver_ctx,ntokens);

	dctx->ftokens = (dctx->utokens < ntokens)

		? ntokens - dctx->utokens : 0;

	return toks_daemon_release(dctx);

}

static int32_t toks_daemon_ioctl_get_log_level(struct toks_daemon_ctx * dctx)

{

	nt_tty_port_msg * msg = &dctx->reply;

	msg->ttyinfo.exarg = (void *)(intptr_t)dctx->driver_ctx->cctx->loglevel;

	return NT_STATUS_SUCCESS;

}

static int32_t toks_daemon_ioctl_set_log_level(struct toks_daemon_ctx * dctx)

{

	nt_tty_port_msg * msg;

	int               loglevel;

	msg      = &dctx->reply;

	loglevel = (int)(intptr_t)msg->ttyinfo.exarg;

	if ((loglevel < 0) || (loglevel > 9))

		return NT_STATUS_INVALID_PARAMETER;

	toks_set_driver_log_level(dctx->driver_ctx,loglevel);

	toks_log_service_info(dctx);

	return NT_STATUS_SUCCESS;

}

static int32_t toks_daemon_ioctl_get_service_info(struct toks_daemon_ctx * dctx)

{

	nt_tty_port_msg * msg = &dctx->reply;

	/* uuid */

	msg->svcdata.meta[0]  = (dctx->driver_ctx->cctx->uuid->data1);

	msg->svcdata.meta[1]  = (dctx->driver_ctx->cctx->uuid->data2);

	msg->svcdata.meta[1] |= (dctx->driver_ctx->cctx->uuid->data3 << 16);

	msg->svcdata.meta[2]  = (dctx->driver_ctx->cctx->uuid->data4[0]);

	msg->svcdata.meta[2] |= (dctx->driver_ctx->cctx->uuid->data4[1] << 8);

	msg->svcdata.meta[2] |= (dctx->driver_ctx->cctx->uuid->data4[2] << 16);

	msg->svcdata.meta[2] |= (dctx->driver_ctx->cctx->uuid->data4[3] << 24);

	msg->svcdata.meta[3]  = (dctx->driver_ctx->cctx->uuid->data4[4]);

	msg->svcdata.meta[3] |= (dctx->driver_ctx->cctx->uuid->data4[5] << 8);

	msg->svcdata.meta[3] |= (dctx->driver_ctx->cctx->uuid->data4[6] << 16);

	msg->svcdata.meta[3] |= (dctx->driver_ctx->cctx->uuid->data4[7] << 24);

	/* syspid, systid */

	msg->svcdata.data[0]  = pe_get_current_process_id();

	msg->svcdata.data[1]  = pe_get_current_thread_id();

	/* ctrlpid, csyspid */

	msg->svcdata.data[2]  = dctx->ctrlpid;

	msg->svcdata.data[3]  = dctx->csyspid;

	/* allocated, available, pending */

	msg->svcdata.data[4]  = toks_get_driver_atokens(dctx->driver_ctx);

	msg->svcdata.data[5]  = toks_get_driver_ntokens(dctx->driver_ctx);

	msg->svcdata.data[6]  = toks_get_driver_nwaiters(dctx->driver_ctx);

	/* used, free */

	msg->svcdata.data[7]  = dctx->utokens;

	msg->svcdata.data[8]  = dctx->ftokens;

	return NT_STATUS_SUCCESS;

}

static int32_t toks_daemon_ioctl_log_service_info(struct toks_daemon_ctx * dctx)

{

	toks_log_service_info(dctx);

	return NT_STATUS_SUCCESS;

}

static int32_t toks_daemon_ioctl_get_token_info(struct toks_daemon_ctx * dctx)

{

	int32_t                     status;

	void *                      hprocess;

	void *                      hfile;

	void *                      hrfile;

	void *                      addr;

	char *                      mark;

	size_t                      size;

	int32_t                     idx;

	nt_oa                       oa;

	nt_sd_common_buffer         sd;

	nt_iosb                     iosb;

	nt_unicode_string           path;

	nt_large_integer            asize;

	struct toks_token *         token;

	struct toks_waiter *        waiter;

	struct toks_token_ctx *     tctx;

	struct toks_token_info *    tinfo;

	struct toks_token_sctx      stctx;

	uint32_t                    access;

	uint32_t                    access_owner;

	uint32_t                    access_group;

	uint32_t                    access_other;

	uint32_t                    access_admin;

	int32_t                     nwaiters;

	uint32_t                    keys[4];

	wchar16_t                   name[37];

	/* service info */

	toks_daemon_ioctl_get_service_info(dctx);

	/* hprocess */

	oa.len      = sizeof(nt_oa);

	oa.root_dir = 0;

	oa.obj_name = 0;

	oa.obj_attr = 0;

	oa.sec_desc = 0;

	oa.sec_qos  = 0;

	if ((status = ntapi->zw_open_process(

			&hprocess,

			NT_PROCESS_SYNCHRONIZE

				| NT_PROCESS_DUP_HANDLE

				| NT_PROCESS_QUERY_INFORMATION,

			&oa,&dctx->request.header.client_id)))

		return status;

	/* sd */

	access_owner  = NT_GENERIC_READ     | NT_GENERIC_WRITE;

	access_group  = NT_SEC_READ_CONTROL | NT_FILE_READ_ATTRIBUTES;

	access_other  = NT_SEC_READ_CONTROL | NT_FILE_READ_ATTRIBUTES;

	access_owner |= NT_SEC_STANDARD_RIGHTS_ALL;

	access_admin  = access_owner;

	ntapi->acl_init_common_descriptor(

		&sd,0,0,0,0,

		access_owner,access_group,access_other,

		access_admin,access_owner,

		0);

	/* name */

	toks_query_performance_counters(

		dctx->driver_ctx,

		&dctx->pcnt);

	keys[0] = ntapi->tt_buffer_crc32(

		dctx->noise,

		&dctx->pcnt,sizeof(dctx->pcnt));

	keys[1] = ntapi->tt_buffer_crc32(

		keys[0],

		&dctx->request.header,sizeof(dctx->request.header));

	keys[2] = ntapi->tt_buffer_crc32(

		keys[1],

		toks_get_driver_tokens(dctx->driver_ctx),

		toks_get_driver_ntokens(dctx->driver_ctx)

		* sizeof(struct toks_token));

	keys[3] = ntapi->tt_buffer_crc32(

		keys[2],

		dctx,sizeof(*dctx));

	name[0]  = '.';

	name[9]  = '.';

	name[18] = '.';

	name[27] = '.';

	name[36] = 0;

	ntapi->tt_uint32_to_hex_utf16(keys[0],&name[1]);

	ntapi->tt_uint32_to_hex_utf16(keys[1],&name[10]);

	ntapi->tt_uint32_to_hex_utf16(keys[2],&name[19]);

	ntapi->tt_uint32_to_hex_utf16(keys[3],&name[28]);

	/* path */

	path.strlen = 36 * sizeof(wchar16_t);

	path.maxlen = 0;

	path.buffer = name;

	/* oa */

	oa.len      = sizeof(nt_oa);

	oa.root_dir = toks_get_driver_tmpfs(dctx->driver_ctx);

	oa.obj_name = &pat;;

	oa.obj_attr = 0;

	oa.sec_desc = &sd.sd;

	oa.sec_qos  = 0;

	/* access */

	access  = NT_SEC_SYNCHRONIZE | NT_SEC_DELETE;

	access |= NT_FILE_READ_DATA  | NT_FILE_READ_ATTRIBUTES;

	access |= NT_FILE_WRITE_DATA | NT_FILE_WRITE_ATTRIBUTES;

	/* alloc_size */

	nwaiters    = toks_get_driver_nwaiters(dctx->driver_ctx);

	asize.quad  = __offsetof(struct toks_token_ctx,tokens);

	asize.quad += sizeof(struct toks_token_info) * dctx->utokens;

	asize.quad += sizeof(struct toks_token_info) * nwaiters;

	/* create temporary file */

	status =  ntapi->zw_create_file(

		&hfile,

		access,&oa,&iosb,&asize,

		NT_FILE_ATTRIBUTE_NORMAL,

		0,NT_FILE_CREATE,

		NT_FILE_NON_DIRECTORY_FILE

			| NT_FILE_SYNCHRONOUS_IO_ALERT

			| NT_FILE_DELETE_ON_CLOSE,

		0,0);

	if (status) {

		ntapi->zw_close(hprocess);

		return status;

	}

	/* buffer */

	if ((dctx->utokens + nwaiters) <= 512) {

		tctx  = 0;

		addr  = &stctx;

		size  = asize.quad;

		tinfo = stctx.tokens;

		stctx.allocated = toks_get_driver_atokens(dctx->driver_ctx);

		stctx.available = toks_get_driver_ntokens(dctx->driver_ctx);

		stctx.pending   = nwaiters;

		stctx.tused     = dctx->utokens;

		stctx.tfree     = dctx->ftokens;

	} else {

		size = asize.quad;

		addr = toks_calloc(1,size);

		if (!addr) {

			ntapi->zw_close(hfile);

			ntapi->zw_close(hprocess);

			return NT_STATUS_MEMORY_NOT_ALLOCATED;

		}

		tctx  = (struct toks_token_ctx *)addr;

		tinfo = tctx->tokens;

		tctx->allocated = toks_get_driver_atokens(dctx->driver_ctx);

		tctx->available = toks_get_driver_ntokens(dctx->driver_ctx);

		tctx->pending   = nwaiters;

		tctx->tused     = dctx->utokens;

		tctx->tfree     = dctx->ftokens;

	}

	/* token info */

	token = toks_get_driver_tokens(dctx->driver_ctx);

	for (idx=0; idx<dctx->utokens; token++) {

		if (token->self) {

			tinfo->tokpid  = token->client.tokpid;

			tinfo->tsyspid = token->client.cid.process_id;

			tinfo->pad     = 0;

			tinfo->keys[0] = token->keys.key[0];

			tinfo->keys[1] = token->keys.key[1];

			tinfo->keys[2] = token->keys.key[2];

			tinfo->keys[3] = token->keys.key[3];

			tinfo->keys[4] = token->keys.key[4];

			tinfo->keys[5] = token->keys.key[5];

			tinfo->meta[0] = token->meta.key[0];

			tinfo->meta[1] = token->meta.key[1];

			tinfo->meta[2] = token->meta.key[2];

			tinfo->meta[3] = token->meta.key[3];

			tinfo->meta[4] = token->meta.key[4];

			tinfo->meta[5] = token->meta.key[5];

			idx++;

			tinfo++;

		}

	}

	/* waiter info */

	idx    = 0;

	waiter = dctx->waiter_first;

	for (; idx

		if (waiter->msg.header.msg_id) {

			tinfo->tokpid  = waiter->client.tokpid;

			tinfo->tsyspid = waiter->client.cid.process_id;

			tinfo->pad     = 0;

			tinfo->keys[0] = waiter->msg.syncinfo.ipckeys[0];

			tinfo->keys[1] = waiter->msg.syncinfo.ipckeys[1];

			tinfo->keys[2] = waiter->msg.syncinfo.ipckeys[2];

			tinfo->keys[3] = waiter->msg.syncinfo.ipckeys[3];

			tinfo->keys[4] = waiter->msg.syncinfo.ipckeys[4];

			tinfo->keys[5] = waiter->msg.syncinfo.ipckeys[5];

			tinfo->meta[0] = waiter->msg.syncinfo.ipcsvc.keys.key[0];

			tinfo->meta[1] = waiter->msg.syncinfo.ipcsvc.keys.key[1];

			tinfo->meta[2] = waiter->msg.syncinfo.ipcsvc.keys.key[2];

			tinfo->meta[3] = waiter->msg.syncinfo.ipcsvc.keys.key[3];

			tinfo->meta[4] = waiter->msg.syncinfo.ipcsvc.keys.key[4];

			tinfo->meta[5] = waiter->msg.syncinfo.ipcsvc.keys.key[5];

			idx++;

			tinfo++;

		}

		if (++waiter == dctx->waiter_cap)

			waiter = dctx->waiter_base;

	}

	/* write */

	for (mark=addr; size; size-=iosb.info) {

		status = ntapi->zw_write_file(

			hfile,0,0,0,

			&iosb,addr,size,

			0,0);

		switch (status) {

			case NT_STATUS_SUCCESS:

				mark += iosb.info;

				addr  = mark;

				break;

			default:

				ntapi->zw_close(hfile);

				ntapi->zw_close(hprocess);

				if (tctx)

					toks_free(tctx);

				return status;

		}

	}

	/* buffer */

	if (tctx)

		toks_free(tctx);

	/* remote handle */

	status = ntapi->zw_duplicate_object(

		NT_CURRENT_PROCESS_HANDLE,

		hfile,

		hprocess,

		&hrfile,

		0,0,

		NT_DUPLICATE_SAME_ACCESS

			| NT_DUPLICATE_SAME_ATTRIBUTES);

	ntapi->zw_close(hfile);

	ntapi->zw_close(hprocess);

	switch (status) {

		case NT_STATUS_SUCCESS:

			dctx->reply.ttyinfo.exarg = hrfile;

			return NT_STATUS_SUCCESS;

		default:

			dctx->reply.ttyinfo.exarg = 0;

			return status;

	}

}

static int32_t toks_daemon_ioctl_log_token_info(struct toks_daemon_ctx * dctx)

{

	toks_log_token_info(dctx);

	return NT_STATUS_SUCCESS;

}

int32_t __stdcall toks_daemon_ioctl(struct toks_daemon_ctx * dctx)

{

	nt_tty_port_msg * msg;

	uint32_t          ctlcode;

	msg     = &dctx->reply;

	ctlcode = msg->ttyinfo.opdata;

	switch (ctlcode) {

		case TOKS_IOCTL_GET_TOKEN_COUNT:

			return toks_daemon_ioctl_get_token_count(dctx);

		case TOKS_IOCTL_SET_TOKEN_COUNT:

			return toks_daemon_ioctl_set_token_count(dctx);

		case TOKS_IOCTL_GET_SERVICE_INFO:

			return toks_daemon_ioctl_get_service_info(dctx);

		case TOKS_IOCTL_LOG_SERVICE_INFO:

			return toks_daemon_ioctl_log_service_info(dctx);

		case TOKS_IOCTL_GET_TOKEN_INFO:

			return toks_daemon_ioctl_get_token_info(dctx);

		case TOKS_IOCTL_LOG_TOKEN_INFO:

			return toks_daemon_ioctl_log_token_info(dctx);

		case TOKS_IOCTL_GET_LOG_LEVEL:

			return toks_daemon_ioctl_get_log_level(dctx);

		case TOKS_IOCTL_SET_LOG_LEVEL:

			return toks_daemon_ioctl_set_log_level(dctx);

		default:

			return NT_STATUS_NOT_IMPLEMENTED;

	}

}