mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 18:21:39 +01:00
1496 lines
36 KiB
C
1496 lines
36 KiB
C
/*
|
|
* QEMU VNC display driver
|
|
*
|
|
* Copyright (C) 2006 Anthony Liguori <anthony@codemonkey.ws>
|
|
* Copyright (C) 2006 Fabrice Bellard
|
|
* Copyright (C) 2006 Christian Limpach <Christian.Limpach@xensource.com>
|
|
*
|
|
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
* of this software and associated documentation files (the "Software"), to deal
|
|
* in the Software without restriction, including without limitation the rights
|
|
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
* copies of the Software, and to permit persons to whom the Software is
|
|
* furnished to do so, subject to the following conditions:
|
|
*
|
|
* The above copyright notice and this permission notice shall be included in
|
|
* all copies or substantial portions of the Software.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
|
|
* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
* THE SOFTWARE.
|
|
*/
|
|
|
|
#include "vl.h"
|
|
#include "qemu_socket.h"
|
|
#include <assert.h>
|
|
|
|
/* The refresh interval starts at BASE. If we scan the buffer and
|
|
find no change, we increase by INC, up to MAX. If the mouse moves
|
|
or we get a keypress, the interval is set back to BASE. If we find
|
|
an update, halve the interval.
|
|
|
|
All times in milliseconds. */
|
|
#define VNC_REFRESH_INTERVAL_BASE 30
|
|
#define VNC_REFRESH_INTERVAL_INC 50
|
|
#define VNC_REFRESH_INTERVAL_MAX 2000
|
|
|
|
/* Wait at most one second between updates, so that we can detect a
|
|
minimised vncviewer reasonably quickly. */
|
|
#define VNC_MAX_UPDATE_INTERVAL 5000
|
|
|
|
#include "vnc_keysym.h"
|
|
#include "keymaps.c"
|
|
#include "d3des.h"
|
|
|
|
#define XK_MISCELLANY
|
|
#define XK_LATIN1
|
|
#include <X11/keysymdef.h>
|
|
|
|
typedef struct Buffer
|
|
{
|
|
size_t capacity;
|
|
size_t offset;
|
|
uint8_t *buffer;
|
|
} Buffer;
|
|
|
|
typedef struct VncState VncState;
|
|
|
|
typedef int VncReadEvent(VncState *vs, uint8_t *data, size_t len);
|
|
|
|
typedef void VncWritePixels(VncState *vs, void *data, int size);
|
|
|
|
typedef void VncSendHextileTile(VncState *vs,
|
|
int x, int y, int w, int h,
|
|
uint32_t *last_bg,
|
|
uint32_t *last_fg,
|
|
int *has_bg, int *has_fg);
|
|
|
|
#if 0
|
|
#define VNC_MAX_WIDTH 2048
|
|
#define VNC_MAX_HEIGHT 2048
|
|
#define VNC_DIRTY_WORDS (VNC_MAX_WIDTH / (16 * 32))
|
|
#endif
|
|
|
|
struct VncState
|
|
{
|
|
QEMUTimer *timer;
|
|
int timer_interval;
|
|
int64_t last_update_time;
|
|
int lsock;
|
|
int csock;
|
|
DisplayState *ds;
|
|
int width;
|
|
int height;
|
|
uint64_t *dirty_row; /* screen regions which are possibly dirty */
|
|
int dirty_pixel_shift;
|
|
uint64_t *update_row; /* outstanding updates */
|
|
int has_update; /* there's outstanding updates in the
|
|
* visible area */
|
|
uint8_t *old_data;
|
|
int depth; /* internal VNC frame buffer byte per pixel */
|
|
int has_resize;
|
|
int has_hextile;
|
|
Buffer output;
|
|
Buffer input;
|
|
kbd_layout_t *kbd_layout;
|
|
/* current output mode information */
|
|
VncWritePixels *write_pixels;
|
|
VncSendHextileTile *send_hextile_tile;
|
|
int pix_bpp, pix_big_endian;
|
|
int red_shift, red_max, red_shift1;
|
|
int green_shift, green_max, green_shift1;
|
|
int blue_shift, blue_max, blue_shift1;
|
|
|
|
VncReadEvent *read_handler;
|
|
size_t read_handler_expect;
|
|
|
|
int visible_x;
|
|
int visible_y;
|
|
int visible_w;
|
|
int visible_h;
|
|
|
|
int ctl_keys; /* Ctrl+Alt starts calibration */
|
|
int shift_keys; /* Shift / CapsLock keys */
|
|
int numlock;
|
|
};
|
|
|
|
#define DIRTY_PIXEL_BITS 64
|
|
#define X2DP_DOWN(vs, x) ((x) >> (vs)->dirty_pixel_shift)
|
|
#define X2DP_UP(vs, x) \
|
|
(((x) + (1ULL << (vs)->dirty_pixel_shift) - 1) >> (vs)->dirty_pixel_shift)
|
|
#define DP2X(vs, x) ((x) << (vs)->dirty_pixel_shift)
|
|
|
|
/* TODO
|
|
1) Get the queue working for IO.
|
|
2) there is some weirdness when using the -S option (the screen is grey
|
|
and not totally invalidated
|
|
*/
|
|
|
|
static void vnc_write(VncState *vs, const void *data, size_t len);
|
|
static void vnc_write_u32(VncState *vs, uint32_t value);
|
|
static void vnc_write_s32(VncState *vs, int32_t value);
|
|
static void vnc_write_u16(VncState *vs, uint16_t value);
|
|
static void vnc_write_u8(VncState *vs, uint8_t value);
|
|
static void vnc_flush(VncState *vs);
|
|
static void _vnc_update_client(void *opaque);
|
|
static void vnc_update_client(void *opaque);
|
|
static void vnc_client_read(void *opaque);
|
|
static void framebuffer_set_updated(VncState *vs, int x, int y, int w, int h);
|
|
static int make_challenge(unsigned char *random, int size);
|
|
static void set_seed(unsigned int *seedp);
|
|
static void get_random(int len, unsigned char *buf);
|
|
|
|
#if 0
|
|
static inline void vnc_set_bit(uint32_t *d, int k)
|
|
{
|
|
d[k >> 5] |= 1 << (k & 0x1f);
|
|
}
|
|
|
|
static inline void vnc_clear_bit(uint32_t *d, int k)
|
|
{
|
|
d[k >> 5] &= ~(1 << (k & 0x1f));
|
|
}
|
|
|
|
static inline void vnc_set_bits(uint32_t *d, int n, int nb_words)
|
|
{
|
|
int j;
|
|
|
|
j = 0;
|
|
while (n >= 32) {
|
|
d[j++] = -1;
|
|
n -= 32;
|
|
}
|
|
if (n > 0)
|
|
d[j++] = (1 << n) - 1;
|
|
while (j < nb_words)
|
|
d[j++] = 0;
|
|
}
|
|
|
|
static inline int vnc_get_bit(const uint32_t *d, int k)
|
|
{
|
|
return (d[k >> 5] >> (k & 0x1f)) & 1;
|
|
}
|
|
|
|
static inline int vnc_and_bits(const uint32_t *d1, const uint32_t *d2,
|
|
int nb_words)
|
|
{
|
|
int i;
|
|
for(i = 0; i < nb_words; i++) {
|
|
if ((d1[i] & d2[i]) != 0)
|
|
return 1;
|
|
}
|
|
return 0;
|
|
}
|
|
#endif
|
|
|
|
static void set_bits_in_row(VncState *vs, uint64_t *row,
|
|
int x, int y, int w, int h)
|
|
{
|
|
int x1, x2;
|
|
uint64_t mask;
|
|
|
|
if (w == 0)
|
|
return;
|
|
|
|
x1 = X2DP_DOWN(vs, x);
|
|
x2 = X2DP_UP(vs, x + w);
|
|
|
|
if (X2DP_UP(vs, w) != DIRTY_PIXEL_BITS)
|
|
mask = ((1ULL << (x2 - x1)) - 1) << x1;
|
|
else
|
|
mask = ~(0ULL);
|
|
|
|
h += y;
|
|
if (h > vs->ds->height)
|
|
h = vs->ds->height;
|
|
for (; y < h; y++)
|
|
row[y] |= mask;
|
|
}
|
|
|
|
static void vnc_dpy_update(DisplayState *ds, int x, int y, int w, int h)
|
|
{
|
|
VncState *vs = ds->opaque;
|
|
|
|
set_bits_in_row(vs, vs->dirty_row, x, y, w, h);
|
|
}
|
|
|
|
static void vnc_framebuffer_update(VncState *vs, int x, int y, int w, int h,
|
|
int32_t encoding)
|
|
{
|
|
vnc_write_u16(vs, x);
|
|
vnc_write_u16(vs, y);
|
|
vnc_write_u16(vs, w);
|
|
vnc_write_u16(vs, h);
|
|
|
|
vnc_write_s32(vs, encoding);
|
|
}
|
|
|
|
static void vnc_dpy_resize(DisplayState *ds, int w, int h)
|
|
{
|
|
VncState *vs = ds->opaque;
|
|
int o;
|
|
|
|
ds->data = realloc(ds->data, w * h * vs->depth);
|
|
vs->old_data = realloc(vs->old_data, w * h * vs->depth);
|
|
vs->dirty_row = realloc(vs->dirty_row, h * sizeof(vs->dirty_row[0]));
|
|
vs->update_row = realloc(vs->update_row, h * sizeof(vs->dirty_row[0]));
|
|
|
|
if (ds->data == NULL || vs->old_data == NULL ||
|
|
vs->dirty_row == NULL || vs->update_row == NULL) {
|
|
fprintf(stderr, "vnc: memory allocation failed\n");
|
|
exit(1);
|
|
}
|
|
|
|
if (ds->depth != vs->depth * 8) {
|
|
ds->depth = vs->depth * 8;
|
|
set_color_table(ds);
|
|
}
|
|
ds->width = w;
|
|
ds->height = h;
|
|
ds->linesize = w * vs->depth;
|
|
if (vs->csock != -1 && vs->has_resize) {
|
|
vnc_write_u8(vs, 0); /* msg id */
|
|
vnc_write_u8(vs, 0);
|
|
vnc_write_u16(vs, 1); /* number of rects */
|
|
vnc_framebuffer_update(vs, 0, 0, ds->width, ds->height, -223);
|
|
vnc_flush(vs);
|
|
vs->width = ds->width;
|
|
vs->height = ds->height;
|
|
}
|
|
vs->dirty_pixel_shift = 0;
|
|
for (o = DIRTY_PIXEL_BITS; o < ds->width; o *= 2)
|
|
vs->dirty_pixel_shift++;
|
|
framebuffer_set_updated(vs, 0, 0, ds->width, ds->height);
|
|
}
|
|
|
|
/* fastest code */
|
|
static void vnc_write_pixels_copy(VncState *vs, void *pixels, int size)
|
|
{
|
|
vnc_write(vs, pixels, size);
|
|
}
|
|
|
|
/* slowest but generic code. */
|
|
static void vnc_convert_pixel(VncState *vs, uint8_t *buf, uint32_t v)
|
|
{
|
|
unsigned int r, g, b;
|
|
|
|
r = (v >> vs->red_shift1) & vs->red_max;
|
|
g = (v >> vs->green_shift1) & vs->green_max;
|
|
b = (v >> vs->blue_shift1) & vs->blue_max;
|
|
v = (r << vs->red_shift) |
|
|
(g << vs->green_shift) |
|
|
(b << vs->blue_shift);
|
|
switch(vs->pix_bpp) {
|
|
case 1:
|
|
buf[0] = v;
|
|
break;
|
|
case 2:
|
|
if (vs->pix_big_endian) {
|
|
buf[0] = v >> 8;
|
|
buf[1] = v;
|
|
} else {
|
|
buf[1] = v >> 8;
|
|
buf[0] = v;
|
|
}
|
|
break;
|
|
default:
|
|
case 4:
|
|
if (vs->pix_big_endian) {
|
|
buf[0] = v >> 24;
|
|
buf[1] = v >> 16;
|
|
buf[2] = v >> 8;
|
|
buf[3] = v;
|
|
} else {
|
|
buf[3] = v >> 24;
|
|
buf[2] = v >> 16;
|
|
buf[1] = v >> 8;
|
|
buf[0] = v;
|
|
}
|
|
break;
|
|
}
|
|
}
|
|
|
|
static void vnc_write_pixels_generic(VncState *vs, void *pixels1, int size)
|
|
{
|
|
uint32_t *pixels = pixels1;
|
|
uint8_t buf[4];
|
|
int n, i;
|
|
|
|
n = size >> 2;
|
|
for(i = 0; i < n; i++) {
|
|
vnc_convert_pixel(vs, buf, pixels[i]);
|
|
vnc_write(vs, buf, vs->pix_bpp);
|
|
}
|
|
}
|
|
|
|
static void send_framebuffer_update_raw(VncState *vs, int x, int y, int w, int h)
|
|
{
|
|
int i;
|
|
uint8_t *row;
|
|
|
|
vnc_framebuffer_update(vs, x, y, w, h, 0);
|
|
|
|
row = vs->ds->data + y * vs->ds->linesize + x * vs->depth;
|
|
for (i = 0; i < h; i++) {
|
|
vs->write_pixels(vs, row, w * vs->depth);
|
|
row += vs->ds->linesize;
|
|
}
|
|
}
|
|
|
|
static void hextile_enc_cord(uint8_t *ptr, int x, int y, int w, int h)
|
|
{
|
|
ptr[0] = ((x & 0x0F) << 4) | (y & 0x0F);
|
|
ptr[1] = (((w - 1) & 0x0F) << 4) | ((h - 1) & 0x0F);
|
|
}
|
|
|
|
#define BPP 8
|
|
#include "vnchextile.h"
|
|
#undef BPP
|
|
|
|
#define BPP 16
|
|
#include "vnchextile.h"
|
|
#undef BPP
|
|
|
|
#define BPP 32
|
|
#include "vnchextile.h"
|
|
#undef BPP
|
|
|
|
#define GENERIC
|
|
#define BPP 32
|
|
#include "vnchextile.h"
|
|
#undef BPP
|
|
#undef GENERIC
|
|
|
|
static void send_framebuffer_update_hextile(VncState *vs, int x, int y, int w, int h)
|
|
{
|
|
int i, j;
|
|
int has_fg, has_bg;
|
|
uint32_t last_fg32, last_bg32;
|
|
|
|
vnc_framebuffer_update(vs, x, y, w, h, 5);
|
|
|
|
has_fg = has_bg = 0;
|
|
for (j = y; j < (y + h); j += 16) {
|
|
for (i = x; i < (x + w); i += 16) {
|
|
vs->send_hextile_tile(vs, i, j,
|
|
MIN(16, x + w - i), MIN(16, y + h - j),
|
|
&last_bg32, &last_fg32, &has_bg, &has_fg);
|
|
}
|
|
}
|
|
}
|
|
|
|
static void send_framebuffer_update(VncState *vs, int x, int y, int w, int h)
|
|
{
|
|
if (vs->has_hextile)
|
|
send_framebuffer_update_hextile(vs, x, y, w, h);
|
|
else
|
|
send_framebuffer_update_raw(vs, x, y, w, h);
|
|
}
|
|
|
|
static void vnc_copy(DisplayState *ds, int src_x, int src_y, int dst_x, int dst_y, int w, int h)
|
|
{
|
|
int src, dst;
|
|
uint8_t *src_row;
|
|
uint8_t *dst_row;
|
|
uint8_t *old_row;
|
|
int y = 0;
|
|
int pitch = ds->linesize;
|
|
VncState *vs = ds->opaque;
|
|
int updating_client = 1;
|
|
|
|
if (src_x < vs->visible_x || src_y < vs->visible_y ||
|
|
dst_x < vs->visible_x || dst_y < vs->visible_y ||
|
|
(src_x + w) > (vs->visible_x + vs->visible_w) ||
|
|
(src_y + h) > (vs->visible_y + vs->visible_h) ||
|
|
(dst_x + w) > (vs->visible_x + vs->visible_w) ||
|
|
(dst_y + h) > (vs->visible_y + vs->visible_h))
|
|
updating_client = 0;
|
|
|
|
if (updating_client)
|
|
_vnc_update_client(vs);
|
|
|
|
if (dst_y > src_y) {
|
|
y = h - 1;
|
|
pitch = -pitch;
|
|
}
|
|
|
|
src = (ds->linesize * (src_y + y) + vs->depth * src_x);
|
|
dst = (ds->linesize * (dst_y + y) + vs->depth * dst_x);
|
|
|
|
src_row = ds->data + src;
|
|
dst_row = ds->data + dst;
|
|
old_row = vs->old_data + dst;
|
|
|
|
for (y = 0; y < h; y++) {
|
|
memmove(old_row, src_row, w * vs->depth);
|
|
memmove(dst_row, src_row, w * vs->depth);
|
|
src_row += pitch;
|
|
dst_row += pitch;
|
|
old_row += pitch;
|
|
}
|
|
|
|
if (updating_client && vs->csock != -1 && !vs->has_update) {
|
|
vnc_write_u8(vs, 0); /* msg id */
|
|
vnc_write_u8(vs, 0);
|
|
vnc_write_u16(vs, 1); /* number of rects */
|
|
vnc_framebuffer_update(vs, dst_x, dst_y, w, h, 1);
|
|
vnc_write_u16(vs, src_x);
|
|
vnc_write_u16(vs, src_y);
|
|
vnc_flush(vs);
|
|
} else
|
|
framebuffer_set_updated(vs, dst_x, dst_y, w, h);
|
|
}
|
|
|
|
static int find_update_height(VncState *vs, int y, int maxy, int last_x, int x)
|
|
{
|
|
int h;
|
|
|
|
for (h = 1; y + h < maxy; h++) {
|
|
int tmp_x;
|
|
if (!(vs->update_row[y + h] & (1ULL << last_x)))
|
|
break;
|
|
for (tmp_x = last_x; tmp_x < x; tmp_x++)
|
|
vs->update_row[y + h] &= ~(1ULL << tmp_x);
|
|
}
|
|
|
|
return h;
|
|
}
|
|
|
|
static void _vnc_update_client(void *opaque)
|
|
{
|
|
VncState *vs = opaque;
|
|
int64_t now;
|
|
int y;
|
|
uint8_t *row;
|
|
uint8_t *old_row;
|
|
uint64_t width_mask;
|
|
int n_rectangles;
|
|
int saved_offset;
|
|
int maxx, maxy;
|
|
int tile_bytes = vs->depth * DP2X(vs, 1);
|
|
|
|
if (vs->csock == -1)
|
|
return;
|
|
|
|
now = qemu_get_clock(rt_clock);
|
|
|
|
if (vs->width != DP2X(vs, DIRTY_PIXEL_BITS))
|
|
width_mask = (1ULL << X2DP_UP(vs, vs->ds->width)) - 1;
|
|
else
|
|
width_mask = ~(0ULL);
|
|
|
|
/* Walk through the dirty map and eliminate tiles that really
|
|
aren't dirty */
|
|
row = vs->ds->data;
|
|
old_row = vs->old_data;
|
|
|
|
for (y = 0; y < vs->ds->height; y++) {
|
|
if (vs->dirty_row[y] & width_mask) {
|
|
int x;
|
|
uint8_t *ptr, *old_ptr;
|
|
|
|
ptr = row;
|
|
old_ptr = old_row;
|
|
|
|
for (x = 0; x < X2DP_UP(vs, vs->ds->width); x++) {
|
|
if (vs->dirty_row[y] & (1ULL << x)) {
|
|
if (memcmp(old_ptr, ptr, tile_bytes)) {
|
|
vs->has_update = 1;
|
|
vs->update_row[y] |= (1ULL << x);
|
|
memcpy(old_ptr, ptr, tile_bytes);
|
|
}
|
|
vs->dirty_row[y] &= ~(1ULL << x);
|
|
}
|
|
|
|
ptr += tile_bytes;
|
|
old_ptr += tile_bytes;
|
|
}
|
|
}
|
|
|
|
row += vs->ds->linesize;
|
|
old_row += vs->ds->linesize;
|
|
}
|
|
|
|
if (!vs->has_update || vs->visible_y >= vs->ds->height ||
|
|
vs->visible_x >= vs->ds->width)
|
|
goto backoff;
|
|
|
|
/* Count rectangles */
|
|
n_rectangles = 0;
|
|
vnc_write_u8(vs, 0); /* msg id */
|
|
vnc_write_u8(vs, 0);
|
|
saved_offset = vs->output.offset;
|
|
vnc_write_u16(vs, 0);
|
|
|
|
maxy = vs->visible_y + vs->visible_h;
|
|
if (maxy > vs->ds->height)
|
|
maxy = vs->ds->height;
|
|
maxx = vs->visible_x + vs->visible_w;
|
|
if (maxx > vs->ds->width)
|
|
maxx = vs->ds->width;
|
|
|
|
for (y = vs->visible_y; y < maxy; y++) {
|
|
int x;
|
|
int last_x = -1;
|
|
for (x = X2DP_DOWN(vs, vs->visible_x);
|
|
x < X2DP_UP(vs, maxx); x++) {
|
|
if (vs->update_row[y] & (1ULL << x)) {
|
|
if (last_x == -1)
|
|
last_x = x;
|
|
vs->update_row[y] &= ~(1ULL << x);
|
|
} else {
|
|
if (last_x != -1) {
|
|
int h = find_update_height(vs, y, maxy, last_x, x);
|
|
if (h != 0) {
|
|
send_framebuffer_update(vs, DP2X(vs, last_x), y,
|
|
DP2X(vs, (x - last_x)), h);
|
|
n_rectangles++;
|
|
}
|
|
}
|
|
last_x = -1;
|
|
}
|
|
}
|
|
if (last_x != -1) {
|
|
int h = find_update_height(vs, y, maxy, last_x, x);
|
|
if (h != 0) {
|
|
send_framebuffer_update(vs, DP2X(vs, last_x), y,
|
|
DP2X(vs, (x - last_x)), h);
|
|
n_rectangles++;
|
|
}
|
|
}
|
|
}
|
|
vs->output.buffer[saved_offset] = (n_rectangles >> 8) & 0xFF;
|
|
vs->output.buffer[saved_offset + 1] = n_rectangles & 0xFF;
|
|
|
|
if (n_rectangles == 0)
|
|
goto backoff;
|
|
|
|
vs->has_update = 0;
|
|
vnc_flush(vs);
|
|
vs->last_update_time = now;
|
|
|
|
vs->timer_interval /= 2;
|
|
if (vs->timer_interval < VNC_REFRESH_INTERVAL_BASE)
|
|
vs->timer_interval = VNC_REFRESH_INTERVAL_BASE;
|
|
|
|
return;
|
|
|
|
backoff:
|
|
/* No update -> back off a bit */
|
|
vs->timer_interval += VNC_REFRESH_INTERVAL_INC;
|
|
if (vs->timer_interval > VNC_REFRESH_INTERVAL_MAX) {
|
|
vs->timer_interval = VNC_REFRESH_INTERVAL_MAX;
|
|
if (now - vs->last_update_time >= VNC_MAX_UPDATE_INTERVAL) {
|
|
/* Send a null update. If the client is no longer
|
|
interested (e.g. minimised) it'll ignore this, and we
|
|
can stop scanning the buffer until it sends another
|
|
update request. */
|
|
/* It turns out that there's a bug in realvncviewer 4.1.2
|
|
which means that if you send a proper null update (with
|
|
no update rectangles), it gets a bit out of sync and
|
|
never sends any further requests, regardless of whether
|
|
it needs one or not. Fix this by sending a single 1x1
|
|
update rectangle instead. */
|
|
vnc_write_u8(vs, 0);
|
|
vnc_write_u8(vs, 0);
|
|
vnc_write_u16(vs, 1);
|
|
send_framebuffer_update(vs, 0, 0, 1, 1);
|
|
vnc_flush(vs);
|
|
vs->last_update_time = now;
|
|
return;
|
|
}
|
|
}
|
|
qemu_mod_timer(vs->timer, now + vs->timer_interval);
|
|
return;
|
|
}
|
|
|
|
static void vnc_update_client(void *opaque)
|
|
{
|
|
VncState *vs = opaque;
|
|
|
|
vs->ds->dpy_refresh(vs->ds);
|
|
_vnc_update_client(vs);
|
|
}
|
|
|
|
static void vnc_timer_init(VncState *vs)
|
|
{
|
|
if (vs->timer == NULL) {
|
|
vs->timer = qemu_new_timer(rt_clock, vnc_update_client, vs);
|
|
vs->timer_interval = VNC_REFRESH_INTERVAL_BASE;
|
|
}
|
|
}
|
|
|
|
static void vnc_dpy_refresh(DisplayState *ds)
|
|
{
|
|
vga_hw_update();
|
|
}
|
|
|
|
static int vnc_listen_poll(void *opaque)
|
|
{
|
|
VncState *vs = opaque;
|
|
if (vs->csock == -1)
|
|
return 1;
|
|
return 0;
|
|
}
|
|
|
|
static void buffer_reserve(Buffer *buffer, size_t len)
|
|
{
|
|
if ((buffer->capacity - buffer->offset) < len) {
|
|
buffer->capacity += (len + 1024);
|
|
buffer->buffer = realloc(buffer->buffer, buffer->capacity);
|
|
if (buffer->buffer == NULL) {
|
|
fprintf(stderr, "vnc: out of memory\n");
|
|
exit(1);
|
|
}
|
|
}
|
|
}
|
|
|
|
static int buffer_empty(Buffer *buffer)
|
|
{
|
|
return buffer->offset == 0;
|
|
}
|
|
|
|
static uint8_t *buffer_end(Buffer *buffer)
|
|
{
|
|
return buffer->buffer + buffer->offset;
|
|
}
|
|
|
|
static void buffer_reset(Buffer *buffer)
|
|
{
|
|
buffer->offset = 0;
|
|
}
|
|
|
|
static void buffer_append(Buffer *buffer, const void *data, size_t len)
|
|
{
|
|
memcpy(buffer->buffer + buffer->offset, data, len);
|
|
buffer->offset += len;
|
|
}
|
|
|
|
static int vnc_client_io_error(VncState *vs, int ret, int last_errno)
|
|
{
|
|
if (ret == 0 || ret == -1) {
|
|
if (ret == -1 && (last_errno == EINTR || last_errno == EAGAIN))
|
|
return 0;
|
|
|
|
qemu_set_fd_handler2(vs->csock, NULL, NULL, NULL, NULL);
|
|
closesocket(vs->csock);
|
|
vs->csock = -1;
|
|
buffer_reset(&vs->input);
|
|
buffer_reset(&vs->output);
|
|
return 0;
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
static void vnc_client_error(VncState *vs)
|
|
{
|
|
vnc_client_io_error(vs, -1, EINVAL);
|
|
}
|
|
|
|
static void vnc_client_write(void *opaque)
|
|
{
|
|
long ret;
|
|
VncState *vs = opaque;
|
|
|
|
ret = send(vs->csock, vs->output.buffer, vs->output.offset, 0);
|
|
ret = vnc_client_io_error(vs, ret, socket_error());
|
|
if (!ret)
|
|
return;
|
|
|
|
memmove(vs->output.buffer, vs->output.buffer + ret,
|
|
vs->output.offset - ret);
|
|
vs->output.offset -= ret;
|
|
|
|
if (vs->output.offset == 0)
|
|
qemu_set_fd_handler2(vs->csock, NULL, vnc_client_read, NULL, vs);
|
|
}
|
|
|
|
static void vnc_read_when(VncState *vs, VncReadEvent *func, size_t expecting)
|
|
{
|
|
vs->read_handler = func;
|
|
vs->read_handler_expect = expecting;
|
|
}
|
|
|
|
static void vnc_client_read(void *opaque)
|
|
{
|
|
VncState *vs = opaque;
|
|
long ret;
|
|
|
|
buffer_reserve(&vs->input, 4096);
|
|
|
|
ret = recv(vs->csock, buffer_end(&vs->input), 4096, 0);
|
|
ret = vnc_client_io_error(vs, ret, socket_error());
|
|
if (!ret)
|
|
return;
|
|
|
|
vs->input.offset += ret;
|
|
|
|
while (vs->read_handler && vs->input.offset >= vs->read_handler_expect) {
|
|
size_t len = vs->read_handler_expect;
|
|
int ret;
|
|
|
|
ret = vs->read_handler(vs, vs->input.buffer, len);
|
|
if (vs->csock == -1)
|
|
return;
|
|
|
|
if (!ret) {
|
|
memmove(vs->input.buffer, vs->input.buffer + len,
|
|
vs->input.offset - len);
|
|
vs->input.offset -= len;
|
|
} else {
|
|
assert(ret > vs->read_handler_expect);
|
|
vs->read_handler_expect = ret;
|
|
}
|
|
}
|
|
}
|
|
|
|
static void vnc_write(VncState *vs, const void *data, size_t len)
|
|
{
|
|
buffer_reserve(&vs->output, len);
|
|
|
|
if (buffer_empty(&vs->output))
|
|
qemu_set_fd_handler2(vs->csock, NULL, vnc_client_read,
|
|
vnc_client_write, vs);
|
|
|
|
buffer_append(&vs->output, data, len);
|
|
}
|
|
|
|
static void vnc_write_s32(VncState *vs, int32_t value)
|
|
{
|
|
vnc_write_u32(vs, *(uint32_t *)&value);
|
|
}
|
|
|
|
static void vnc_write_u32(VncState *vs, uint32_t value)
|
|
{
|
|
uint8_t buf[4];
|
|
|
|
buf[0] = (value >> 24) & 0xFF;
|
|
buf[1] = (value >> 16) & 0xFF;
|
|
buf[2] = (value >> 8) & 0xFF;
|
|
buf[3] = value & 0xFF;
|
|
|
|
vnc_write(vs, buf, 4);
|
|
}
|
|
|
|
static void vnc_write_u16(VncState *vs, uint16_t value)
|
|
{
|
|
uint8_t buf[2];
|
|
|
|
buf[0] = (value >> 8) & 0xFF;
|
|
buf[1] = value & 0xFF;
|
|
|
|
vnc_write(vs, buf, 2);
|
|
}
|
|
|
|
static void vnc_write_u8(VncState *vs, uint8_t value)
|
|
{
|
|
vnc_write(vs, &value, 1);
|
|
}
|
|
|
|
static void vnc_flush(VncState *vs)
|
|
{
|
|
if (vs->output.offset)
|
|
vnc_client_write(vs);
|
|
}
|
|
|
|
static uint8_t read_u8(uint8_t *data, size_t offset)
|
|
{
|
|
return data[offset];
|
|
}
|
|
|
|
static uint16_t read_u16(uint8_t *data, size_t offset)
|
|
{
|
|
return ((data[offset] & 0xFF) << 8) | (data[offset + 1] & 0xFF);
|
|
}
|
|
|
|
static int32_t read_s32(uint8_t *data, size_t offset)
|
|
{
|
|
return (int32_t)((data[offset] << 24) | (data[offset + 1] << 16) |
|
|
(data[offset + 2] << 8) | data[offset + 3]);
|
|
}
|
|
|
|
static uint32_t read_u32(uint8_t *data, size_t offset)
|
|
{
|
|
return ((data[offset] << 24) | (data[offset + 1] << 16) |
|
|
(data[offset + 2] << 8) | data[offset + 3]);
|
|
}
|
|
|
|
static void client_cut_text(VncState *vs, size_t len, char *text)
|
|
{
|
|
}
|
|
|
|
static void pointer_event(VncState *vs, int button_mask, int x, int y)
|
|
{
|
|
int buttons = 0;
|
|
int dz = 0;
|
|
|
|
if (button_mask & 0x01)
|
|
buttons |= MOUSE_EVENT_LBUTTON;
|
|
if (button_mask & 0x02)
|
|
buttons |= MOUSE_EVENT_MBUTTON;
|
|
if (button_mask & 0x04)
|
|
buttons |= MOUSE_EVENT_RBUTTON;
|
|
if (button_mask & 0x08)
|
|
dz = -1;
|
|
if (button_mask & 0x10)
|
|
dz = 1;
|
|
|
|
if (kbd_mouse_is_absolute()) {
|
|
kbd_mouse_event(x * 0x7FFF / vs->ds->width,
|
|
y * 0x7FFF / vs->ds->height,
|
|
dz, buttons);
|
|
} else {
|
|
static int last_x = -1;
|
|
static int last_y = -1;
|
|
|
|
if (last_x != -1)
|
|
kbd_mouse_event(x - last_x, y - last_y, dz, buttons);
|
|
|
|
last_x = x;
|
|
last_y = y;
|
|
}
|
|
}
|
|
|
|
static void press_key(VncState *vs, int keycode)
|
|
{
|
|
kbd_put_keycode(keysym2scancode(vs->kbd_layout, keycode) & 0x7f);
|
|
kbd_put_keycode(keysym2scancode(vs->kbd_layout, keycode) | 0x80);
|
|
}
|
|
|
|
static void do_key_event(VncState *vs, int down, uint32_t sym)
|
|
{
|
|
sym &= 0xFFFF;
|
|
|
|
if (is_graphic_console()) {
|
|
int keycode;
|
|
int numlock;
|
|
|
|
keycode = keysym2scancode(vs->kbd_layout, sym);
|
|
numlock = keysym2numlock(vs->kbd_layout, sym);
|
|
|
|
/* If the numlock state needs to change then simulate an additional
|
|
keypress before sending this one. This will happen if the user
|
|
toggles numlock away from the VNC window.
|
|
*/
|
|
if (numlock == 1) {
|
|
if (!vs->numlock) {
|
|
vs->numlock = 1;
|
|
press_key(vs, XK_Num_Lock);
|
|
}
|
|
}
|
|
else if (numlock == -1) {
|
|
if (vs->numlock) {
|
|
vs->numlock = 0;
|
|
press_key(vs, XK_Num_Lock);
|
|
}
|
|
}
|
|
|
|
if (keycode & 0x80)
|
|
kbd_put_keycode(0xe0);
|
|
if (down)
|
|
kbd_put_keycode(keycode & 0x7f);
|
|
else
|
|
kbd_put_keycode(keycode | 0x80);
|
|
} else if (down) {
|
|
int qemu_keysym = 0;
|
|
|
|
if (sym <= 128) { /* normal ascii */
|
|
int shifted = vs->shift_keys == 1 || vs->shift_keys == 2;
|
|
qemu_keysym = sym;
|
|
if (sym >= 'a' && sym <= 'z' && shifted)
|
|
qemu_keysym -= 'a' - 'A';
|
|
} else {
|
|
switch (sym) {
|
|
case XK_Up: qemu_keysym = QEMU_KEY_UP; break;
|
|
case XK_Down: qemu_keysym = QEMU_KEY_DOWN; break;
|
|
case XK_Left: qemu_keysym = QEMU_KEY_LEFT; break;
|
|
case XK_Right: qemu_keysym = QEMU_KEY_RIGHT; break;
|
|
case XK_Home: qemu_keysym = QEMU_KEY_HOME; break;
|
|
case XK_End: qemu_keysym = QEMU_KEY_END; break;
|
|
case XK_Page_Up: qemu_keysym = QEMU_KEY_PAGEUP; break;
|
|
case XK_Page_Down: qemu_keysym = QEMU_KEY_PAGEDOWN; break;
|
|
case XK_BackSpace: qemu_keysym = QEMU_KEY_BACKSPACE; break;
|
|
case XK_Delete: qemu_keysym = QEMU_KEY_DELETE; break;
|
|
case XK_Return:
|
|
case XK_Linefeed: qemu_keysym = sym; break;
|
|
default: break;
|
|
}
|
|
}
|
|
if (qemu_keysym != 0)
|
|
kbd_put_keysym(qemu_keysym);
|
|
}
|
|
|
|
if (down) {
|
|
switch (sym) {
|
|
case XK_Control_L:
|
|
vs->ctl_keys |= 1;
|
|
break;
|
|
|
|
case XK_Alt_L:
|
|
vs->ctl_keys |= 2;
|
|
break;
|
|
|
|
case XK_Shift_L:
|
|
vs->shift_keys |= 1;
|
|
break;
|
|
|
|
default:
|
|
break;
|
|
}
|
|
} else {
|
|
switch (sym) {
|
|
case XK_Control_L:
|
|
vs->ctl_keys &= ~1;
|
|
break;
|
|
|
|
case XK_Alt_L:
|
|
vs->ctl_keys &= ~2;
|
|
break;
|
|
|
|
case XK_Shift_L:
|
|
vs->shift_keys &= ~1;
|
|
break;
|
|
|
|
case XK_Caps_Lock:
|
|
vs->shift_keys ^= 2;
|
|
break;
|
|
|
|
case XK_Num_Lock:
|
|
vs->numlock = !vs->numlock;
|
|
break;
|
|
|
|
case XK_1 ... XK_9:
|
|
if ((vs->ctl_keys & 3) != 3)
|
|
break;
|
|
|
|
console_select(sym - XK_1);
|
|
if (is_graphic_console()) {
|
|
/* tell the vga console to redisplay itself */
|
|
vga_hw_invalidate();
|
|
vnc_dpy_update(vs->ds, 0, 0, vs->ds->width, vs->ds->height);
|
|
}
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
static void key_event(VncState *vs, int down, uint32_t sym)
|
|
{
|
|
if (sym >= 'A' && sym <= 'Z')
|
|
sym = sym - 'A' + 'a';
|
|
do_key_event(vs, down, sym);
|
|
}
|
|
|
|
static void framebuffer_set_updated(VncState *vs, int x, int y, int w, int h)
|
|
{
|
|
|
|
set_bits_in_row(vs, vs->update_row, x, y, w, h);
|
|
|
|
vs->has_update = 1;
|
|
}
|
|
|
|
static void framebuffer_update_request(VncState *vs, int incremental,
|
|
int x_position, int y_position,
|
|
int w, int h)
|
|
{
|
|
if (!incremental)
|
|
framebuffer_set_updated(vs, x_position, y_position, w, h);
|
|
vs->visible_x = x_position;
|
|
vs->visible_y = y_position;
|
|
vs->visible_w = w;
|
|
vs->visible_h = h;
|
|
|
|
qemu_mod_timer(vs->timer, qemu_get_clock(rt_clock));
|
|
}
|
|
|
|
static void set_encodings(VncState *vs, int32_t *encodings, size_t n_encodings)
|
|
{
|
|
int i;
|
|
|
|
vs->has_hextile = 0;
|
|
vs->has_resize = 0;
|
|
vs->ds->dpy_copy = NULL;
|
|
|
|
for (i = n_encodings - 1; i >= 0; i--) {
|
|
switch (encodings[i]) {
|
|
case 0: /* Raw */
|
|
vs->has_hextile = 0;
|
|
break;
|
|
case 1: /* CopyRect */
|
|
vs->ds->dpy_copy = vnc_copy;
|
|
break;
|
|
case 5: /* Hextile */
|
|
vs->has_hextile = 1;
|
|
break;
|
|
case -223: /* DesktopResize */
|
|
vs->has_resize = 1;
|
|
break;
|
|
default:
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
static int compute_nbits(unsigned int val)
|
|
{
|
|
int n;
|
|
n = 0;
|
|
while (val != 0) {
|
|
n++;
|
|
val >>= 1;
|
|
}
|
|
return n;
|
|
}
|
|
|
|
static void set_pixel_format(VncState *vs,
|
|
int bits_per_pixel, int depth,
|
|
int big_endian_flag, int true_color_flag,
|
|
int red_max, int green_max, int blue_max,
|
|
int red_shift, int green_shift, int blue_shift)
|
|
{
|
|
int host_big_endian_flag;
|
|
|
|
#ifdef WORDS_BIGENDIAN
|
|
host_big_endian_flag = 1;
|
|
#else
|
|
host_big_endian_flag = 0;
|
|
#endif
|
|
if (!true_color_flag) {
|
|
fail:
|
|
vnc_client_error(vs);
|
|
return;
|
|
}
|
|
if (bits_per_pixel == 32 &&
|
|
host_big_endian_flag == big_endian_flag &&
|
|
red_max == 0xff && green_max == 0xff && blue_max == 0xff &&
|
|
red_shift == 16 && green_shift == 8 && blue_shift == 0) {
|
|
vs->depth = 4;
|
|
vs->write_pixels = vnc_write_pixels_copy;
|
|
vs->send_hextile_tile = send_hextile_tile_32;
|
|
} else
|
|
if (bits_per_pixel == 16 &&
|
|
host_big_endian_flag == big_endian_flag &&
|
|
red_max == 31 && green_max == 63 && blue_max == 31 &&
|
|
red_shift == 11 && green_shift == 5 && blue_shift == 0) {
|
|
vs->depth = 2;
|
|
vs->write_pixels = vnc_write_pixels_copy;
|
|
vs->send_hextile_tile = send_hextile_tile_16;
|
|
} else
|
|
if (bits_per_pixel == 8 &&
|
|
red_max == 7 && green_max == 7 && blue_max == 3 &&
|
|
red_shift == 5 && green_shift == 2 && blue_shift == 0) {
|
|
vs->depth = 1;
|
|
vs->write_pixels = vnc_write_pixels_copy;
|
|
vs->send_hextile_tile = send_hextile_tile_8;
|
|
} else
|
|
{
|
|
/* generic and slower case */
|
|
if (bits_per_pixel != 8 &&
|
|
bits_per_pixel != 16 &&
|
|
bits_per_pixel != 32)
|
|
goto fail;
|
|
vs->depth = 4;
|
|
vs->red_shift = red_shift;
|
|
vs->red_max = red_max;
|
|
vs->red_shift1 = 24 - compute_nbits(red_max);
|
|
vs->green_shift = green_shift;
|
|
vs->green_max = green_max;
|
|
vs->green_shift1 = 16 - compute_nbits(green_max);
|
|
vs->blue_shift = blue_shift;
|
|
vs->blue_max = blue_max;
|
|
vs->blue_shift1 = 8 - compute_nbits(blue_max);
|
|
vs->pix_bpp = bits_per_pixel / 8;
|
|
vs->pix_big_endian = big_endian_flag;
|
|
vs->write_pixels = vnc_write_pixels_generic;
|
|
vs->send_hextile_tile = send_hextile_tile_generic;
|
|
}
|
|
|
|
vnc_dpy_resize(vs->ds, vs->ds->width, vs->ds->height);
|
|
|
|
vga_hw_invalidate();
|
|
vga_hw_update();
|
|
}
|
|
|
|
static int protocol_client_msg(VncState *vs, uint8_t *data, size_t len)
|
|
{
|
|
int i;
|
|
uint16_t limit;
|
|
|
|
switch (data[0]) {
|
|
case 0:
|
|
if (len == 1)
|
|
return 20;
|
|
|
|
set_pixel_format(vs, read_u8(data, 4), read_u8(data, 5),
|
|
read_u8(data, 6), read_u8(data, 7),
|
|
read_u16(data, 8), read_u16(data, 10),
|
|
read_u16(data, 12), read_u8(data, 14),
|
|
read_u8(data, 15), read_u8(data, 16));
|
|
break;
|
|
case 2:
|
|
if (len == 1)
|
|
return 4;
|
|
|
|
if (len == 4) {
|
|
uint16_t v;
|
|
v = read_u16(data, 2);
|
|
if (v)
|
|
return 4 + v * 4;
|
|
}
|
|
|
|
limit = read_u16(data, 2);
|
|
for (i = 0; i < limit; i++) {
|
|
int32_t val = read_s32(data, 4 + (i * 4));
|
|
memcpy(data + 4 + (i * 4), &val, sizeof(val));
|
|
}
|
|
|
|
set_encodings(vs, (int32_t *)(data + 4), limit);
|
|
break;
|
|
case 3:
|
|
if (len == 1)
|
|
return 10;
|
|
|
|
framebuffer_update_request(vs,
|
|
read_u8(data, 1), read_u16(data, 2), read_u16(data, 4),
|
|
read_u16(data, 6), read_u16(data, 8));
|
|
break;
|
|
case 4:
|
|
if (len == 1)
|
|
return 8;
|
|
|
|
vs->timer_interval = VNC_REFRESH_INTERVAL_BASE;
|
|
qemu_advance_timer(vs->timer,
|
|
qemu_get_clock(rt_clock) + vs->timer_interval);
|
|
key_event(vs, read_u8(data, 1), read_u32(data, 4));
|
|
break;
|
|
case 5:
|
|
if (len == 1)
|
|
return 6;
|
|
|
|
vs->timer_interval = VNC_REFRESH_INTERVAL_BASE;
|
|
qemu_advance_timer(vs->timer,
|
|
qemu_get_clock(rt_clock) + vs->timer_interval);
|
|
pointer_event(vs, read_u8(data, 1), read_u16(data, 2), read_u16(data, 4));
|
|
break;
|
|
case 6:
|
|
if (len == 1)
|
|
return 8;
|
|
|
|
if (len == 8) {
|
|
uint32_t v;
|
|
v = read_u32(data, 4);
|
|
if (v)
|
|
return 8 + v;
|
|
}
|
|
|
|
client_cut_text(vs, read_u32(data, 4), (char *)(data + 8));
|
|
break;
|
|
default:
|
|
printf("Msg: %d\n", data[0]);
|
|
vnc_client_error(vs);
|
|
break;
|
|
}
|
|
|
|
vnc_read_when(vs, protocol_client_msg, 1);
|
|
return 0;
|
|
}
|
|
|
|
static int protocol_client_init(VncState *vs, uint8_t *data, size_t len)
|
|
{
|
|
size_t l;
|
|
char pad[3] = { 0, 0, 0 };
|
|
|
|
vga_hw_update();
|
|
|
|
vs->width = vs->ds->width;
|
|
vs->height = vs->ds->height;
|
|
vnc_write_u16(vs, vs->ds->width);
|
|
vnc_write_u16(vs, vs->ds->height);
|
|
|
|
vnc_write_u8(vs, vs->depth * 8); /* bits-per-pixel */
|
|
vnc_write_u8(vs, vs->depth * 8); /* depth */
|
|
#ifdef WORDS_BIGENDIAN
|
|
vnc_write_u8(vs, 1); /* big-endian-flag */
|
|
#else
|
|
vnc_write_u8(vs, 0); /* big-endian-flag */
|
|
#endif
|
|
vnc_write_u8(vs, 1); /* true-color-flag */
|
|
if (vs->depth == 4) {
|
|
vnc_write_u16(vs, 0xFF); /* red-max */
|
|
vnc_write_u16(vs, 0xFF); /* green-max */
|
|
vnc_write_u16(vs, 0xFF); /* blue-max */
|
|
vnc_write_u8(vs, 16); /* red-shift */
|
|
vnc_write_u8(vs, 8); /* green-shift */
|
|
vnc_write_u8(vs, 0); /* blue-shift */
|
|
vs->send_hextile_tile = send_hextile_tile_32;
|
|
} else if (vs->depth == 2) {
|
|
vnc_write_u16(vs, 31); /* red-max */
|
|
vnc_write_u16(vs, 63); /* green-max */
|
|
vnc_write_u16(vs, 31); /* blue-max */
|
|
vnc_write_u8(vs, 11); /* red-shift */
|
|
vnc_write_u8(vs, 5); /* green-shift */
|
|
vnc_write_u8(vs, 0); /* blue-shift */
|
|
vs->send_hextile_tile = send_hextile_tile_16;
|
|
} else if (vs->depth == 1) {
|
|
/* XXX: change QEMU pixel 8 bit pixel format to match the VNC one ? */
|
|
vnc_write_u16(vs, 7); /* red-max */
|
|
vnc_write_u16(vs, 7); /* green-max */
|
|
vnc_write_u16(vs, 3); /* blue-max */
|
|
vnc_write_u8(vs, 5); /* red-shift */
|
|
vnc_write_u8(vs, 2); /* green-shift */
|
|
vnc_write_u8(vs, 0); /* blue-shift */
|
|
vs->send_hextile_tile = send_hextile_tile_8;
|
|
}
|
|
vs->write_pixels = vnc_write_pixels_copy;
|
|
|
|
vnc_write(vs, pad, 3); /* padding */
|
|
|
|
l = strlen(domain_name);
|
|
vnc_write_u32(vs, l);
|
|
vnc_write(vs, domain_name, l);
|
|
|
|
vnc_flush(vs);
|
|
|
|
vnc_read_when(vs, protocol_client_msg, 1);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int protocol_response(VncState *vs, uint8_t *client_response, size_t len)
|
|
{
|
|
extern char vncpasswd[64];
|
|
extern unsigned char challenge[AUTHCHALLENGESIZE];
|
|
unsigned char cryptchallenge[AUTHCHALLENGESIZE];
|
|
unsigned char key[8];
|
|
int passwdlen, i, j;
|
|
|
|
memcpy(cryptchallenge, challenge, AUTHCHALLENGESIZE);
|
|
|
|
/* Calculate the sent challenge */
|
|
passwdlen = strlen(vncpasswd);
|
|
for (i=0; i<8; i++)
|
|
key[i] = i<passwdlen ? vncpasswd[i] : 0;
|
|
deskey(key, EN0);
|
|
for (j = 0; j < AUTHCHALLENGESIZE; j += 8)
|
|
des(cryptchallenge+j, cryptchallenge+j);
|
|
|
|
/* Check the actual response */
|
|
if (memcmp(cryptchallenge, client_response, AUTHCHALLENGESIZE) != 0) {
|
|
/* password error */
|
|
vnc_write_u32(vs, 1);
|
|
vnc_write_u32(vs, 22);
|
|
vnc_write(vs, "Authentication failure", 22);
|
|
vnc_flush(vs);
|
|
fprintf(stderr, "VNC Password error.\n");
|
|
vnc_client_error(vs);
|
|
return 0;
|
|
}
|
|
|
|
vnc_write_u32(vs, 0);
|
|
vnc_flush(vs);
|
|
|
|
vnc_read_when(vs, protocol_client_init, 1);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int protocol_version(VncState *vs, uint8_t *version, size_t len)
|
|
{
|
|
extern char vncpasswd[64];
|
|
extern unsigned char challenge[AUTHCHALLENGESIZE];
|
|
char local[13];
|
|
int support, maj, min;
|
|
|
|
memcpy(local, version, 12);
|
|
local[12] = 0;
|
|
|
|
/* protocol version check */
|
|
if (sscanf(local, "RFB %03d.%03d\n", &maj, &min) != 2) {
|
|
fprintf(stderr, "Protocol version error.\n");
|
|
vnc_client_error(vs);
|
|
return 0;
|
|
}
|
|
|
|
|
|
support = 0;
|
|
if (maj == 3) {
|
|
if (min == 3 || min ==4) {
|
|
support = 1;
|
|
}
|
|
}
|
|
|
|
if (! support) {
|
|
fprintf(stderr, "Client uses unsupported protocol version %d.%d.\n",
|
|
maj, min);
|
|
vnc_client_error(vs);
|
|
return 0;
|
|
}
|
|
|
|
if (*vncpasswd == '\0') {
|
|
/* AuthType is None */
|
|
vnc_write_u32(vs, 1);
|
|
vnc_flush(vs);
|
|
vnc_read_when(vs, protocol_client_init, 1);
|
|
} else {
|
|
/* AuthType is VncAuth */
|
|
vnc_write_u32(vs, 2);
|
|
|
|
/* Challenge-Responce authentication */
|
|
/* Send Challenge */
|
|
make_challenge(challenge, AUTHCHALLENGESIZE);
|
|
vnc_write(vs, challenge, AUTHCHALLENGESIZE);
|
|
vnc_flush(vs);
|
|
vnc_read_when(vs, protocol_response, AUTHCHALLENGESIZE);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static void vnc_listen_read(void *opaque)
|
|
{
|
|
VncState *vs = opaque;
|
|
struct sockaddr_in addr;
|
|
socklen_t addrlen = sizeof(addr);
|
|
|
|
vs->csock = accept(vs->lsock, (struct sockaddr *)&addr, &addrlen);
|
|
if (vs->csock != -1) {
|
|
socket_set_nonblock(vs->csock);
|
|
qemu_set_fd_handler2(vs->csock, NULL, vnc_client_read, NULL, opaque);
|
|
vnc_write(vs, "RFB 003.003\n", 12);
|
|
vnc_flush(vs);
|
|
vnc_read_when(vs, protocol_version, 12);
|
|
framebuffer_set_updated(vs, 0, 0, vs->ds->width, vs->ds->height);
|
|
vs->has_resize = 0;
|
|
vs->has_hextile = 0;
|
|
vs->ds->dpy_copy = NULL;
|
|
vnc_timer_init(vs);
|
|
}
|
|
}
|
|
|
|
int vnc_display_init(DisplayState *ds, int display, int find_unused, struct sockaddr_in *addr)
|
|
{
|
|
int reuse_addr, ret;
|
|
VncState *vs;
|
|
|
|
vs = qemu_mallocz(sizeof(VncState));
|
|
if (!vs)
|
|
exit(1);
|
|
|
|
ds->opaque = vs;
|
|
|
|
vs->lsock = -1;
|
|
vs->csock = -1;
|
|
vs->depth = 4;
|
|
vs->numlock = 0;
|
|
|
|
vs->ds = ds;
|
|
|
|
if (!keyboard_layout)
|
|
keyboard_layout = "en-us";
|
|
|
|
vs->kbd_layout = init_keyboard_layout(keyboard_layout);
|
|
if (!vs->kbd_layout)
|
|
exit(1);
|
|
|
|
vs->lsock = socket(PF_INET, SOCK_STREAM, 0);
|
|
if (vs->lsock == -1) {
|
|
fprintf(stderr, "Could not create socket\n");
|
|
exit(1);
|
|
}
|
|
|
|
reuse_addr = 1;
|
|
ret = setsockopt(vs->lsock, SOL_SOCKET, SO_REUSEADDR,
|
|
(const char *)&reuse_addr, sizeof(reuse_addr));
|
|
if (ret == -1) {
|
|
fprintf(stderr, "setsockopt() failed\n");
|
|
exit(1);
|
|
}
|
|
|
|
retry:
|
|
addr->sin_family = AF_INET;
|
|
addr->sin_port = htons(5900 + display);
|
|
|
|
if (bind(vs->lsock, (struct sockaddr *)addr, sizeof(struct sockaddr_in)) == -1) {
|
|
if (find_unused && errno == EADDRINUSE) {
|
|
display++;
|
|
goto retry;
|
|
}
|
|
fprintf(stderr, "bind() failed\n");
|
|
exit(1);
|
|
}
|
|
|
|
if (listen(vs->lsock, 1) == -1) {
|
|
fprintf(stderr, "listen() failed\n");
|
|
exit(1);
|
|
}
|
|
|
|
ret = qemu_set_fd_handler2(vs->lsock, vnc_listen_poll, vnc_listen_read,
|
|
NULL, vs);
|
|
if (ret == -1)
|
|
exit(1);
|
|
|
|
vs->ds->data = NULL;
|
|
vs->ds->dpy_update = vnc_dpy_update;
|
|
vs->ds->dpy_resize = vnc_dpy_resize;
|
|
vs->ds->dpy_refresh = vnc_dpy_refresh;
|
|
|
|
vnc_dpy_resize(vs->ds, 640, 400);
|
|
|
|
return display;
|
|
}
|
|
|
|
int vnc_start_viewer(int port)
|
|
{
|
|
int pid;
|
|
char s[16];
|
|
|
|
sprintf(s, ":%d", port);
|
|
|
|
switch (pid = fork()) {
|
|
case -1:
|
|
fprintf(stderr, "vncviewer failed fork\n");
|
|
exit(1);
|
|
|
|
case 0: /* child */
|
|
execlp("vncviewer", "vncviewer", s, NULL);
|
|
fprintf(stderr, "vncviewer execlp failed\n");
|
|
exit(1);
|
|
|
|
default:
|
|
return pid;
|
|
}
|
|
}
|
|
|
|
unsigned int seed;
|
|
|
|
static int make_challenge(unsigned char *random, int size)
|
|
{
|
|
|
|
set_seed(&seed);
|
|
get_random(size, random);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static void set_seed(unsigned int *seedp)
|
|
{
|
|
*seedp += (unsigned int)(time(NULL)+getpid()+getpid()*987654+rand());
|
|
srand(*seedp);
|
|
|
|
return;
|
|
}
|
|
|
|
static void get_random(int len, unsigned char *buf)
|
|
{
|
|
int i;
|
|
|
|
for (i=0; i<len; i++)
|
|
buf[i] = (int) (256.0*rand()/(RAND_MAX+1.0));
|
|
|
|
return;
|
|
}
|