jh163888/xrdp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

cleanup refresh rect and check stream bounds

Browse Source
This commit is contained in:
Jay Sorg 2019-11-07 02:03:57 +00:00
parent c57e867a3b
commit 0fbbc47092
2 changed files with 31 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
common/xrdp_constants.h
View File

@ -543,6 +543,7 @@
#define RDP_DATA_PDU_POINTER 27 #define RDP_DATA_PDU_POINTER 27
#define RDP_DATA_PDU_INPUT 28 #define RDP_DATA_PDU_INPUT 28
#define RDP_DATA_PDU_SYNCHRONISE 31 #define RDP_DATA_PDU_SYNCHRONISE 31
#define PDUTYPE2_REFRESH_RECT 33
#define RDP_DATA_PDU_PLAY_SOUND 34 #define RDP_DATA_PDU_PLAY_SOUND 34
#define RDP_DATA_PDU_LOGON 38 #define RDP_DATA_PDU_LOGON 38
#define RDP_DATA_PDU_FONT2 39 #define RDP_DATA_PDU_FONT2 39

28
libxrdp/xrdp_rdp.c
View File

@ -1044,9 +1044,12 @@ xrdp_rdp_process_data_sync(struct xrdp_rdp *self)
} }
/*****************************************************************************/ /*****************************************************************************/
/* 2.2.11.2.1 Refresh Rect PDU Data (TS_REFRESH_RECT_PDU) */
static int static int
xrdp_rdp_process_screen_update(struct xrdp_rdp *self, struct stream *s) xrdp_rdp_process_screen_update(struct xrdp_rdp *self, struct stream *s)
{ {
int index;
int num_rects;
int left; int left;
int top; int top;
int right; int right;
@ -1054,19 +1057,34 @@ xrdp_rdp_process_screen_update(struct xrdp_rdp *self, struct stream *s)
int cx; int cx;
int cy; int cy;
in_uint8s(s, 4); /* op */ if (!s_check_rem(s, 4))
{
return 1;
}
in_uint8(s, num_rects);
in_uint8s(s, 3); /* pad */
g_writeln("xrdp_rdp_process_screen_update: num_rects %d", num_rects);
for (index = 0; index < num_rects; index++)
{
if (!s_check_rem(s, 8))
{
return 1;
}
/* Inclusive Rectangle (TS_RECTANGLE16) */
in_uint16_le(s, left); in_uint16_le(s, left);
in_uint16_le(s, top); in_uint16_le(s, top);
in_uint16_le(s, right); in_uint16_le(s, right);
in_uint16_le(s, bottom); in_uint16_le(s, bottom);
g_writeln(" left %d top %d right %d bottom %d",
left, top, right, bottom);
cx = (right - left) + 1; cx = (right - left) + 1;
cy = (bottom - top) + 1; cy = (bottom - top) + 1;
if (self->session->callback != 0) if (self->session->callback != 0)
{ {
self->session->callback(self->session->id, 0x4444, left, top, cx, cy); self->session->callback(self->session->id, 0x4444,
left, top, cx, cy);
}
} }
return 0; return 0;
} }
@ -1307,7 +1325,7 @@ xrdp_rdp_process_data(struct xrdp_rdp *self, struct stream *s)
case RDP_DATA_PDU_SYNCHRONISE: /* 31(0x1f) */ case RDP_DATA_PDU_SYNCHRONISE: /* 31(0x1f) */
xrdp_rdp_process_data_sync(self); xrdp_rdp_process_data_sync(self);
break; break;
case 33: /* 33(0x21) ?? Invalidate an area I think */ case PDUTYPE2_REFRESH_RECT:
xrdp_rdp_process_screen_update(self, s); xrdp_rdp_process_screen_update(self, s);
break; break;
case 35: /* 35(0x23) PDUTYPE2_SUPPRESS_OUTPUT */ case 35: /* 35(0x23) PDUTYPE2_SUPPRESS_OUTPUT */