crafter 0.3.1

Packet-level network interaction for Rust tools and agents.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94

//! TCP header splitting and registry-driven segment decode.

use crate::error::{CrafterError, Result};
use crate::packet::{Packet, Raw};
use crate::registry::ProtocolRegistry;

use super::constants::{TCP_MAX_RESERVED, TCP_MIN_HEADER_LEN};
use super::option::validate_tcp_options;
use super::segment::Tcp;

/// Append a decoded TCP segment using an explicit registry.
pub(crate) fn append_tcp_packet_with_registry(
    registry: &ProtocolRegistry,
    mut packet: Packet,
    bytes: &[u8],
) -> Result<Packet> {
    let decoded = decode_tcp_parts(bytes)?;
    packet = packet.push_tcp(decoded.tcp);
    if !decoded.payload.is_empty() {
        packet = if registry.decodes_applications() {
            registry.decode_tcp_application(
                packet,
                decoded.source_port,
                decoded.destination_port,
                decoded.payload,
            )?
        } else {
            packet.push_raw(Raw::from_bytes(decoded.payload))
        };
    }
    Ok(packet)
}

struct DecodedTcpSegment<'a> {
    tcp: Tcp,
    source_port: u16,
    destination_port: u16,
    payload: &'a [u8],
}

fn decode_tcp_parts(bytes: &[u8]) -> Result<DecodedTcpSegment<'_>> {
    if bytes.len() < TCP_MIN_HEADER_LEN {
        return Err(CrafterError::buffer_too_short(
            "tcp header",
            TCP_MIN_HEADER_LEN,
            bytes.len(),
        ));
    }

    let data_offset = bytes[12] >> 4;
    if data_offset < 5 {
        return Err(CrafterError::invalid_field_value(
            "tcp.data_offset",
            "TCP data offset must be at least 5 words",
        ));
    }

    let header_len = (data_offset as usize) * 4;
    if bytes.len() < header_len {
        return Err(CrafterError::buffer_too_short(
            "tcp header",
            header_len,
            bytes.len(),
        ));
    }
    let options = &bytes[TCP_MIN_HEADER_LEN..header_len];
    if !options.is_empty() {
        validate_tcp_options(options)?;
    }

    let flags = (((bytes[12] & 1) as u16) << 8) | bytes[13] as u16;
    let source_port = u16::from_be_bytes([bytes[0], bytes[1]]);
    let destination_port = u16::from_be_bytes([bytes[2], bytes[3]]);
    let tcp = Tcp::from_decoded_parts(
        source_port,
        destination_port,
        u32::from_be_bytes([bytes[4], bytes[5], bytes[6], bytes[7]]),
        u32::from_be_bytes([bytes[8], bytes[9], bytes[10], bytes[11]]),
        data_offset,
        (bytes[12] >> 1) & TCP_MAX_RESERVED,
        flags,
        u16::from_be_bytes([bytes[14], bytes[15]]),
        u16::from_be_bytes([bytes[16], bytes[17]]),
        u16::from_be_bytes([bytes[18], bytes[19]]),
        options.to_vec(),
    );

    Ok(DecodedTcpSegment {
        tcp,
        source_port,
        destination_port,
        payload: &bytes[header_len..],
    })
}