/*********************************************************/
/*  toksvc: a framework-native token broker service      */
/*  Copyright (C) 2020  SysDeer Technologies, LLC        */
/*  Released under GPLv2 and GPLv3; see COPYING.TOKSVC.  */
/*********************************************************/

#include <psxtypes/psxtypes.h>
#include <ntapi/ntapi.h>
#include <ntapi/nt_termios.h>

#include "toksvc_daemon_impl.h"
#include "toksvc_driver_impl.h"
#include "toksvc_log_impl.h"

static int32_t toks_daemon_ioctl_get_token_count(struct toks_daemon_ctx * dctx)
{
	nt_tty_port_msg * msg = &dctx->reply;
	msg->ttyinfo.exarg = (void *)(intptr_t)toks_get_driver_ntokens(dctx->driver_ctx);
	return NT_STATUS_SUCCESS;
}

static int32_t toks_daemon_ioctl_set_token_count(struct toks_daemon_ctx * dctx)
{
	nt_tty_port_msg * msg;
	int               ntokens;

	msg     = &dctx->reply;
	ntokens = (int)(intptr_t)msg->ttyinfo.exarg;

	if (ntokens < 0)
		return NT_STATUS_INVALID_PARAMETER;

	else if (ntokens > toks_get_driver_atokens(dctx->driver_ctx))
		return NT_STATUS_BUFFER_TOO_SMALL;

	toks_set_driver_ntokens(dctx->driver_ctx,ntokens);

	dctx->ftokens = (dctx->utokens < ntokens)
		? ntokens - dctx->utokens : 0;

	return toks_daemon_release(dctx);
}

static int32_t toks_daemon_ioctl_get_log_level(struct toks_daemon_ctx * dctx)
{
	nt_tty_port_msg * msg = &dctx->reply;
	msg->ttyinfo.exarg = (void *)(intptr_t)dctx->driver_ctx->cctx->loglevel;
	return NT_STATUS_SUCCESS;
}

static int32_t toks_daemon_ioctl_set_log_level(struct toks_daemon_ctx * dctx)
{
	nt_tty_port_msg * msg;
	int               loglevel;

	msg      = &dctx->reply;
	loglevel = (int)(intptr_t)msg->ttyinfo.exarg;

	if ((loglevel < 0) || (loglevel > 9))
		return NT_STATUS_INVALID_PARAMETER;

	toks_set_driver_log_level(dctx->driver_ctx,loglevel);

	toks_log_service_info(dctx);

	return NT_STATUS_SUCCESS;
}

static int32_t toks_daemon_ioctl_get_service_info(struct toks_daemon_ctx * dctx)
{
	nt_tty_port_msg * msg = &dctx->reply;

	/* uuid */
	msg->svcdata.meta[0]  = (dctx->driver_ctx->cctx->uuid->data1);

	msg->svcdata.meta[1]  = (dctx->driver_ctx->cctx->uuid->data2);
	msg->svcdata.meta[1] |= (dctx->driver_ctx->cctx->uuid->data3 << 16);

	msg->svcdata.meta[2]  = (dctx->driver_ctx->cctx->uuid->data4[0]);
	msg->svcdata.meta[2] |= (dctx->driver_ctx->cctx->uuid->data4[1] << 8);
	msg->svcdata.meta[2] |= (dctx->driver_ctx->cctx->uuid->data4[2] << 16);
	msg->svcdata.meta[2] |= (dctx->driver_ctx->cctx->uuid->data4[3] << 24);

	msg->svcdata.meta[3]  = (dctx->driver_ctx->cctx->uuid->data4[4]);
	msg->svcdata.meta[3] |= (dctx->driver_ctx->cctx->uuid->data4[5] << 8);
	msg->svcdata.meta[3] |= (dctx->driver_ctx->cctx->uuid->data4[6] << 16);
	msg->svcdata.meta[3] |= (dctx->driver_ctx->cctx->uuid->data4[7] << 24);

	/* syspid, systid */
	msg->svcdata.data[0]  = pe_get_current_process_id();
	msg->svcdata.data[1]  = pe_get_current_thread_id();

	/* ctrlpid, csyspid */
	msg->svcdata.data[2]  = dctx->ctrlpid;
	msg->svcdata.data[3]  = dctx->csyspid;

	/* allocated, available, pending */
	msg->svcdata.data[4]  = toks_get_driver_atokens(dctx->driver_ctx);
	msg->svcdata.data[5]  = toks_get_driver_ntokens(dctx->driver_ctx);
	msg->svcdata.data[6]  = toks_get_driver_nwaiters(dctx->driver_ctx);

	/* used, free */
	msg->svcdata.data[7]  = dctx->utokens;
	msg->svcdata.data[8]  = dctx->ftokens;

	return NT_STATUS_SUCCESS;
}

static int32_t toks_daemon_ioctl_log_service_info(struct toks_daemon_ctx * dctx)
{
	toks_log_service_info(dctx);
	return NT_STATUS_SUCCESS;
}

static int32_t toks_daemon_ioctl_get_token_info(struct toks_daemon_ctx * dctx)
{
	int32_t                     status;
	void *                      hprocess;
	void *                      hfile;
	void *                      hrfile;
	void *                      addr;
	char *                      mark;
	size_t                      size;
	int32_t                     idx;
	nt_oa                       oa;
	nt_sd_common_buffer         sd;
	nt_iosb                     iosb;
	nt_unicode_string           path;
	nt_large_integer            asize;
	struct toks_token *         token;
	struct toks_waiter *        waiter;
	struct toks_token_ctx *     tctx;
	struct toks_token_info *    tinfo;
	struct toks_token_sctx      stctx;
	uint32_t                    access;
	uint32_t                    access_owner;
	uint32_t                    access_group;
	uint32_t                    access_other;
	uint32_t                    access_admin;
	int32_t                     nwaiters;
	uint32_t                    keys[4];
	wchar16_t                   name[37];

	/* service info */
	toks_daemon_ioctl_get_service_info(dctx);

	/* hprocess */
	oa.len      = sizeof(nt_oa);
	oa.root_dir = 0;
	oa.obj_name = 0;
	oa.obj_attr = 0;
	oa.sec_desc = 0;
	oa.sec_qos  = 0;

	if ((status = ntapi->zw_open_process(
			&hprocess,
			NT_PROCESS_SYNCHRONIZE
				| NT_PROCESS_DUP_HANDLE
				| NT_PROCESS_QUERY_INFORMATION,
			&oa,&dctx->request.header.client_id)))
		return status;

	/* sd */
	access_owner  = NT_GENERIC_READ     | NT_GENERIC_WRITE;
	access_group  = NT_SEC_READ_CONTROL | NT_FILE_READ_ATTRIBUTES;
	access_other  = NT_SEC_READ_CONTROL | NT_FILE_READ_ATTRIBUTES;

	access_owner |= NT_SEC_STANDARD_RIGHTS_ALL;
	access_admin  = access_owner;

	ntapi->acl_init_common_descriptor(
		&sd,0,0,0,0,
		access_owner,access_group,access_other,
		access_admin,access_owner,
		0);

	/* name */
	toks_query_performance_counters(
		dctx->driver_ctx,
		&dctx->pcnt);

	keys[0] = ntapi->tt_buffer_crc32(
		dctx->noise,
		&dctx->pcnt,sizeof(dctx->pcnt));

	keys[1] = ntapi->tt_buffer_crc32(
		keys[0],
		&dctx->request.header,sizeof(dctx->request.header));

	keys[2] = ntapi->tt_buffer_crc32(
		keys[1],
		toks_get_driver_tokens(dctx->driver_ctx),
		toks_get_driver_ntokens(dctx->driver_ctx)
		* sizeof(struct toks_token));

	keys[3] = ntapi->tt_buffer_crc32(
		keys[2],
		dctx,sizeof(*dctx));

	name[0]  = '.';
	name[9]  = '.';
	name[18] = '.';
	name[27] = '.';
	name[36] = 0;

	ntapi->tt_uint32_to_hex_utf16(keys[0],&name[1]);
	ntapi->tt_uint32_to_hex_utf16(keys[1],&name[10]);
	ntapi->tt_uint32_to_hex_utf16(keys[2],&name[19]);
	ntapi->tt_uint32_to_hex_utf16(keys[3],&name[28]);

	/* path */
	path.strlen = 36 * sizeof(wchar16_t);
	path.maxlen = 0;
	path.buffer = name;

	/* oa */
	oa.len      = sizeof(nt_oa);
	oa.root_dir = toks_get_driver_tmpfs(dctx->driver_ctx);
	oa.obj_name = &path;
	oa.obj_attr = 0;
	oa.sec_desc = &sd.sd;
	oa.sec_qos  = 0;

	/* access */
	access  = NT_SEC_SYNCHRONIZE | NT_SEC_DELETE;
	access |= NT_FILE_READ_DATA  | NT_FILE_READ_ATTRIBUTES;
	access |= NT_FILE_WRITE_DATA | NT_FILE_WRITE_ATTRIBUTES;

	/* alloc_size */
	nwaiters    = toks_get_driver_nwaiters(dctx->driver_ctx);

	asize.quad  = __offsetof(struct toks_token_ctx,tokens);
	asize.quad += sizeof(struct toks_token_info) * dctx->utokens;
	asize.quad += sizeof(struct toks_token_info) * nwaiters;

	/* create temporary file */
	status =  ntapi->zw_create_file(
		&hfile,
		access,&oa,&iosb,&asize,
		NT_FILE_ATTRIBUTE_NORMAL,
		0,NT_FILE_CREATE,
		NT_FILE_NON_DIRECTORY_FILE
			| NT_FILE_SYNCHRONOUS_IO_ALERT
			| NT_FILE_DELETE_ON_CLOSE,
		0,0);

	if (status) {
		ntapi->zw_close(hprocess);
		return status;
	}

	/* buffer */
	if ((dctx->utokens + nwaiters) <= 512) {
		tctx  = 0;
		addr  = &stctx;
		size  = asize.quad;
		tinfo = stctx.tokens;

		stctx.allocated = toks_get_driver_atokens(dctx->driver_ctx);
		stctx.available = toks_get_driver_ntokens(dctx->driver_ctx);
		stctx.pending   = nwaiters;
		stctx.tused     = dctx->utokens;
		stctx.tfree     = dctx->ftokens;
	} else {
		size = asize.quad;
		addr = toks_calloc(1,size);

		if (!addr) {
			ntapi->zw_close(hfile);
			ntapi->zw_close(hprocess);
			return NT_STATUS_MEMORY_NOT_ALLOCATED;
		}

		tctx  = (struct toks_token_ctx *)addr;
		tinfo = tctx->tokens;

		tctx->allocated = toks_get_driver_atokens(dctx->driver_ctx);
		tctx->available = toks_get_driver_ntokens(dctx->driver_ctx);
		tctx->pending   = nwaiters;
		tctx->tused     = dctx->utokens;
		tctx->tfree     = dctx->ftokens;
	}

	/* token info */
	token = toks_get_driver_tokens(dctx->driver_ctx);

	for (idx=0; idx<dctx->utokens; token++) {
		if (token->self) {
			tinfo->tokpid  = token->client.tokpid;
			tinfo->tsyspid = token->client.cid.process_id;
			tinfo->pad     = 0;

			tinfo->keys[0] = token->keys.key[0];
			tinfo->keys[1] = token->keys.key[1];
			tinfo->keys[2] = token->keys.key[2];
			tinfo->keys[3] = token->keys.key[3];
			tinfo->keys[4] = token->keys.key[4];
			tinfo->keys[5] = token->keys.key[5];

			tinfo->meta[0] = token->meta.key[0];
			tinfo->meta[1] = token->meta.key[1];
			tinfo->meta[2] = token->meta.key[2];
			tinfo->meta[3] = token->meta.key[3];
			tinfo->meta[4] = token->meta.key[4];
			tinfo->meta[5] = token->meta.key[5];

			idx++;
			tinfo++;
		}
	}

	/* waiter info */
	idx    = 0;
	waiter = dctx->waiter_first;

	for (; idx<nwaiters; ) {
		if (waiter->msg.header.msg_id) {
			tinfo->tokpid  = waiter->client.tokpid;
			tinfo->tsyspid = waiter->client.cid.process_id;
			tinfo->pad     = 0;

			tinfo->keys[0] = waiter->msg.syncinfo.ipckeys[0];
			tinfo->keys[1] = waiter->msg.syncinfo.ipckeys[1];
			tinfo->keys[2] = waiter->msg.syncinfo.ipckeys[2];
			tinfo->keys[3] = waiter->msg.syncinfo.ipckeys[3];
			tinfo->keys[4] = waiter->msg.syncinfo.ipckeys[4];
			tinfo->keys[5] = waiter->msg.syncinfo.ipckeys[5];

			tinfo->meta[0] = waiter->msg.syncinfo.ipcsvc.keys.key[0];
			tinfo->meta[1] = waiter->msg.syncinfo.ipcsvc.keys.key[1];
			tinfo->meta[2] = waiter->msg.syncinfo.ipcsvc.keys.key[2];
			tinfo->meta[3] = waiter->msg.syncinfo.ipcsvc.keys.key[3];
			tinfo->meta[4] = waiter->msg.syncinfo.ipcsvc.keys.key[4];
			tinfo->meta[5] = waiter->msg.syncinfo.ipcsvc.keys.key[5];

			idx++;
			tinfo++;
		}

		if (++waiter == dctx->waiter_cap)
			waiter = dctx->waiter_base;
	}

	/* write */
	for (mark=addr; size; size-=iosb.info) {
		status = ntapi->zw_write_file(
			hfile,0,0,0,
			&iosb,addr,size,
			0,0);

		switch (status) {
			case NT_STATUS_SUCCESS:
				mark += iosb.info;
				addr  = mark;
				break;

			default:
				ntapi->zw_close(hfile);
				ntapi->zw_close(hprocess);

				if (tctx)
					toks_free(tctx);

				return status;
		}
	}

	/* buffer */
	if (tctx)
		toks_free(tctx);

	/* remote handle */
	status = ntapi->zw_duplicate_object(
		NT_CURRENT_PROCESS_HANDLE,
		hfile,
		hprocess,
		&hrfile,
		0,0,
		NT_DUPLICATE_SAME_ACCESS
			| NT_DUPLICATE_SAME_ATTRIBUTES);


	ntapi->zw_close(hfile);
	ntapi->zw_close(hprocess);

	switch (status) {
		case NT_STATUS_SUCCESS:
			dctx->reply.ttyinfo.exarg = hrfile;
			return NT_STATUS_SUCCESS;

		default:
			dctx->reply.ttyinfo.exarg = 0;
			return status;
	}
}

static int32_t toks_daemon_ioctl_log_token_info(struct toks_daemon_ctx * dctx)
{
	toks_log_token_info(dctx);
	return NT_STATUS_SUCCESS;
}

int32_t __stdcall toks_daemon_ioctl(struct toks_daemon_ctx * dctx)
{
	nt_tty_port_msg * msg;
	uint32_t          ctlcode;

	msg     = &dctx->reply;
	ctlcode = msg->ttyinfo.opdata;

	switch (ctlcode) {
		case TOKS_IOCTL_GET_TOKEN_COUNT:
			return toks_daemon_ioctl_get_token_count(dctx);

		case TOKS_IOCTL_SET_TOKEN_COUNT:
			return toks_daemon_ioctl_set_token_count(dctx);

		case TOKS_IOCTL_GET_SERVICE_INFO:
			return toks_daemon_ioctl_get_service_info(dctx);

		case TOKS_IOCTL_LOG_SERVICE_INFO:
			return toks_daemon_ioctl_log_service_info(dctx);

		case TOKS_IOCTL_GET_TOKEN_INFO:
			return toks_daemon_ioctl_get_token_info(dctx);

		case TOKS_IOCTL_LOG_TOKEN_INFO:
			return toks_daemon_ioctl_log_token_info(dctx);

		case TOKS_IOCTL_GET_LOG_LEVEL:
			return toks_daemon_ioctl_get_log_level(dctx);

		case TOKS_IOCTL_SET_LOG_LEVEL:
			return toks_daemon_ioctl_set_log_level(dctx);

		default:
			return NT_STATUS_NOT_IMPLEMENTED;
	}
}