3 * Basic Encoding Rules (BER) file reading
7 * This program is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License
9 * as published by the Free Software Foundation; either version 2
10 * of the License, or (at your option) any later version.
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU General Public License for more details.
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
28 #ifdef HAVE_SYS_STAT_H
33 #include "file_wrappers.h"
38 #define BER_CLASS_UNI 0
39 #define BER_CLASS_APP 1
40 #define BER_CLASS_CON 2
42 #define BER_UNI_TAG_SEQ 16 /* SEQUENCE, SEQUENCE OF */
43 #define BER_UNI_TAG_SET 17 /* SET, SET OF */
45 static gboolean ber_read(wtap *wth, int *err, gchar **err_info, gint64 *data_offset)
54 /* there is only ever one packet */
58 *data_offset = wth->data_offset;
60 if ((file_size = wtap_file_size(wth, err)) == -1)
63 if (file_size > WTAP_MAX_PACKET_SIZE) {
65 * Probably a corrupt capture file; don't blow up trying
66 * to allocate space for an immensely-large packet.
68 *err = WTAP_ERR_BAD_RECORD;
69 *err_info = g_strdup_printf("ber: File has %" G_GINT64_MODIFIER "d-byte packet, bigger than maximum of %u",
70 file_size, WTAP_MAX_PACKET_SIZE);
73 packet_size = (int)file_size;
75 buffer_assure_space(wth->frame_buffer, packet_size);
76 buf = buffer_start_ptr(wth->frame_buffer);
78 wtap_file_read_expected_bytes(buf, packet_size, wth->fh, err);
80 wth->data_offset += packet_size;
82 wth->phdr.caplen = packet_size;
83 wth->phdr.len = packet_size;
85 if (fstat(wth->fd, &statb) == -1) {
90 wth->phdr.ts.secs = statb.st_mtime;
91 wth->phdr.ts.nsecs = 0;
96 static gboolean ber_seek_read(wtap *wth, gint64 seek_off, union wtap_pseudo_header *pseudo_header _U_,
97 guint8 *pd, int length, int *err, gchar **err_info _U_)
99 int packet_size = length;
101 /* there is only one packet */
107 if (file_seek(wth->random_fh, seek_off, SEEK_SET, err) == -1)
110 wtap_file_read_expected_bytes(pd, packet_size, wth->random_fh, err);
115 int ber_open(wtap *wth, int *err, gchar **err_info _U_)
117 #define BER_BYTES_TO_CHECK 4
118 guint8 bytes[BER_BYTES_TO_CHECK];
129 bytes_read = file_read(&bytes, 1, BER_BYTES_TO_CHECK, wth->fh);
130 if (bytes_read != BER_BYTES_TO_CHECK) {
131 *err = file_error(wth->fh);
132 return (*err != 0) ? -1 : 0;
135 id = bytes[offset++];
137 class = (id>>6) & 0x03;
141 /* it must be constructed and either a SET or a SEQUENCE */
142 /* or a CONTEXT less than 32 (arbitrary) */
143 /* XXX: do we also want to allow APPLICATION */
145 (((class == BER_CLASS_UNI) && ((tag == BER_UNI_TAG_SET) || (tag == BER_UNI_TAG_SEQ))) ||
146 ((class == BER_CLASS_CON) && (tag < 32)))))
149 /* now check the length */
150 oct = bytes[offset++];
155 nlb = oct & 0x7F; /* number of length bytes */
157 if((nlb > 0) && (nlb <= (BER_BYTES_TO_CHECK - 2))) {
158 /* not indefinite length and we have read enough bytes to compute the length */
161 oct = bytes[offset++];
162 len = (len<<8) + oct;
167 if(len) { /* if we have a length, check it */
168 len += (2 + nlb); /* add back Tag and Length bytes */
169 file_size = wtap_file_size(wth, err);
171 if(len != file_size) {
172 return 0; /* not ASN.1 */
176 /* seek back to the start of the file */
177 if (file_seek(wth->fh, 0, SEEK_SET, err) == -1)
180 wth->file_type = WTAP_FILE_BER;
181 wth->file_encap = WTAP_ENCAP_BER;
182 wth->snapshot_length = 0;
184 wth->subtype_read = ber_read;
185 wth->subtype_seek_read = ber_seek_read;
186 wth->tsprecision = WTAP_FILE_TSPREC_SEC;