/* win32-utils.c
 * Win32 utility routines
 *
 * Wireshark - Network traffic analyzer
 * By Gerald Combs <gerald@wireshark.org>
 * Copyright 2006 Gerald Combs
 *
 * SPDX-License-Identifier: GPL-2.0-or-later
 */

#include <config.h>
#include <wsutil/array.h>

#include "win32-utils.h"

#include <tchar.h>
#include <versionhelpers.h>

/* Quote the argument element if necessary, so that it will get
 * reconstructed correctly in the C runtime startup code.  Note that
 * the unquoting algorithm in the C runtime is really weird, and
 * rather different than what Unix shells do. See stdargv.c in the C
 * runtime sources (in the Platform SDK, in src/crt).
 *
 * Stolen from GLib's protect_argv(), an internal routine that quotes
 * string in an argument list so that they arguments will be handled
 * correctly in the command-line string passed to CreateProcess()
 * if that string is constructed by gluing those strings together.
 */
char *
protect_arg (const char *argv)
{
    char *new_arg;
    const char *p = argv;
    char *q;
    int len = 0;
    bool need_dblquotes = false;

    while (*p) {
        if (*p == ' ' || *p == '\t')
            need_dblquotes = true;
        else if (*p == '"')
            len++;
        else if (*p == '\\') {
            const char *pp = p;

            while (*pp == '\\')
                pp++;
            if (*pp == '"')
                len++;
        }
        len++;
        p++;
    }

    q = new_arg = g_malloc (len + (need_dblquotes ? 2 : 0) + 1);
    p = argv;

    if (need_dblquotes)
        *q++ = '"';

    while (*p) {
        if (*p == '"')
            *q++ = '\\';
        else if (*p == '\\') {
            const char *pp = p;

            while (*pp == '\\')
                pp++;
            if (*pp == '"')
                *q++ = '\\';
        }
        *q++ = *p;
        p++;
    }

    if (need_dblquotes)
        *q++ = '"';
    *q++ = '\0';

    return new_arg;
}

#define PIPE_STR "\\pipe\\"

bool
win32_is_pipe_name(const char *pipe_name)
{
    char *pncopy, *pos;
    /* Under Windows, named pipes _must_ have the form
     * "\\<server>\pipe\<pipename>".  <server> may be "." for localhost.
     * https://learn.microsoft.com/en-us/windows/win32/ipc/pipe-names
     */
    pncopy = g_strdup(pipe_name);
    if ((pos = strstr(pncopy, "\\\\")) == pncopy) {
        pos = strchr(pncopy + 3, '\\');
        if (pos && g_ascii_strncasecmp(pos, PIPE_STR, strlen(PIPE_STR)) != 0)
            pos = NULL;
    }

    g_free(pncopy);

    return (pos != NULL);
}

/*
 * Generate a UTF-8 string for a Windows error.
 */

/*
 * We make the buffer at least this big, under the assumption that doing
 * so will reduce the number of reallocations to do.  (Otherwise, why
 * did Microsoft bother supporting a minimum buffer size?)
 */
#define ERRBUF_SIZE    128
const char *
win32strerror(DWORD error)
{
    DWORD retval;
    WCHAR *utf16_message;
    char *utf8_message;
    char *tempmsg;
    const char *msg;

    /*
     * XXX - what language ID to use?
     *
     * For UN*Xes, g_strerror() may or may not return localized strings.
     *
     * We currently don't have localized strings, except for GUI items,
     * but we might want to do so.  On the other hand, if most of these
     * messages are going to be read by Wireshark developers, English
     * might be a better choice, so the developer doesn't have to get
     * the message translated if it's in a language they don't happen
     * to understand.  Then again, we're including the error number,
     * so the developer can just look that up.
     */
    retval = FormatMessageW(FORMAT_MESSAGE_FROM_SYSTEM | FORMAT_MESSAGE_IGNORE_INSERTS | FORMAT_MESSAGE_ALLOCATE_BUFFER | FORMAT_MESSAGE_MAX_WIDTH_MASK,
                            NULL, error, MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT),
                            (LPTSTR)&utf16_message, ERRBUF_SIZE, NULL);
    if (retval == 0) {
        /* Failed. */
        tempmsg = ws_strdup_printf("Couldn't get error message for error (%lu) (because %lu)",
                                   error, GetLastError());
        msg = g_intern_string(tempmsg);
        g_free(tempmsg);
        return msg;
    }

    utf8_message = g_utf16_to_utf8(utf16_message, -1, NULL, NULL, NULL);
    LocalFree(utf16_message);
    if (utf8_message == NULL) {
        /* Conversion failed. */
        tempmsg = ws_strdup_printf("Couldn't convert error message for error to UTF-8 (%lu) (because %lu)",
                                   error, GetLastError());
        msg = g_intern_string(tempmsg);
        g_free(tempmsg);
        return msg;
    }
    tempmsg = ws_strdup_printf("%s (%lu)", utf8_message, error);
    g_free(utf8_message);
    msg = g_intern_string(tempmsg);
    g_free(tempmsg);
    return msg;
}

/*
 * Generate a string for a Win32 exception code.
 * It appears that:
 *
 *    1) Windoes exception codes are NT status codes;
 *
 *    2) if you load ntdll.dll as a module, and then
 *       use FormatError() with FORMAT_MESSAGE_FROM_HMODULE and the
 *       module handle for ntdll.dll, you can get Microsoft's error
 *       string for NT status codes.
 */
const char *
win32strexception(DWORD exception)
{
    HMODULE ntdll_hmodule;
    DWORD retval;
    WCHAR *utf16_message;
    char *utf8_message;
    char *tempmsg;
    const char *msg;

    ntdll_hmodule = LoadLibraryA("ntdll.dll");
    if (ntdll_hmodule == NULL) {
        /* Couldn't load ntdll.dll; give up */
        tempmsg = ws_strdup_printf("{EXCEPTION} Unknown - couldn't load ntdll.dll: %s(code 0x%08lx)",
                                   win32strerror(GetLastError()), exception);
        msg = g_intern_string(tempmsg);
        g_free(tempmsg);
        return msg;
    }

    /*
     * XXX - what language ID to use?
     *
     * For UN*Xes, g_strerror() may or may not return localized strings.
     *
     * We currently don't have localized strings, except for GUI items,
     * but we might want to do so.  On the other hand, if most of these
     * messages are going to be read by Wireshark developers, English
     * might be a better choice, so the developer doesn't have to get
     * the message translated if it's in a language they don't happen
     * to understand.  Then again, we're including the error number,
     * so the developer can just look that up.
     */
    retval = FormatMessageW(FORMAT_MESSAGE_FROM_HMODULE | FORMAT_MESSAGE_FROM_SYSTEM | FORMAT_MESSAGE_IGNORE_INSERTS | FORMAT_MESSAGE_ALLOCATE_BUFFER | FORMAT_MESSAGE_MAX_WIDTH_MASK,
                            ntdll_hmodule, exception,
                            MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT),
                            (LPTSTR)&utf16_message, ERRBUF_SIZE, NULL);
    if (retval == 0) {
        /* Failed. */
        tempmsg = ws_strdup_printf("{EXCEPTION} Unknown - couldn't get error message for status: %s(code 0x%08lx)",
                                   win32strerror(GetLastError()), exception);
        msg = g_intern_string(tempmsg);
        g_free(tempmsg);
        FreeLibrary(ntdll_hmodule);
        return msg;
    }

    utf8_message = g_utf16_to_utf8(utf16_message, -1, NULL, NULL, NULL);
    LocalFree(utf16_message);
    if (utf8_message == NULL) {
        /* Conversion failed. */
        tempmsg = ws_strdup_printf("{EXCEPTION} Unknown - couldn't convert error message for error to UTF-8: %s(code 0x%08lx))",
                                   win32strerror(GetLastError()), exception);
        msg = g_intern_string(tempmsg);
        g_free(tempmsg);
        FreeLibrary(ntdll_hmodule);
        return msg;
    }
    tempmsg = ws_strdup_printf("%s(code 0x%08lx)", utf8_message, exception);
    g_free(utf8_message);
    msg = g_intern_string(tempmsg);
    g_free(tempmsg);
    FreeLibrary(ntdll_hmodule);
    return msg;
}

// This appears to be the closest equivalent to SIGPIPE on Windows.
// https://devblogs.microsoft.com/oldnewthing/?p=2433
// https://stackoverflow.com/a/53214/82195

static void win32_kill_child_on_exit(HANDLE child_handle) {
    static HANDLE cjo_handle = NULL;
    if (!cjo_handle) {
        cjo_handle = CreateJobObject(NULL, NULL);

        if (!cjo_handle) {
            ws_log(LOG_DOMAIN_CAPTURE, LOG_LEVEL_DEBUG, "Could not create child cleanup job object: %s",
                win32strerror(GetLastError()));
            return;
        }

        JOBOBJECT_EXTENDED_LIMIT_INFORMATION cjo_jel_info = { 0 };
        cjo_jel_info.BasicLimitInformation.LimitFlags = JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE;
        BOOL sijo_ret = SetInformationJobObject(cjo_handle, JobObjectExtendedLimitInformation,
            &cjo_jel_info, sizeof(cjo_jel_info));
        if (!sijo_ret) {
            ws_log(LOG_DOMAIN_CAPTURE, LOG_LEVEL_DEBUG, "Could not set child cleanup limits: %s",
                win32strerror(GetLastError()));
        }
    }

    BOOL aptjo_ret = AssignProcessToJobObject(cjo_handle, child_handle);
    if (!aptjo_ret) {
        ws_log(LOG_DOMAIN_CAPTURE, LOG_LEVEL_DEBUG, "Could not assign child cleanup process: %s",
            win32strerror(GetLastError()));
    }
}

BOOL win32_create_process(const char *application_name, const char *command_line, LPSECURITY_ATTRIBUTES process_attributes, LPSECURITY_ATTRIBUTES thread_attributes, size_t n_inherit_handles, HANDLE *inherit_handles, DWORD creation_flags, LPVOID environment, const char *current_directory, LPSTARTUPINFO startup_info, LPPROCESS_INFORMATION process_information)
{
    gunichar2 *wappname = NULL, *wcurrentdirectory = NULL;
    gunichar2 *wcommandline = g_utf8_to_utf16(command_line, -1, NULL, NULL, NULL);
    LPPROC_THREAD_ATTRIBUTE_LIST attribute_list = NULL;
    STARTUPINFOEX startup_infoex;
    size_t i;
    // CREATE_SUSPENDED: Suspend the child so that we can cleanly call
    //     AssignProcessToJobObject.
    DWORD wcreationflags = creation_flags|CREATE_SUSPENDED;
    // CREATE_BREAKAWAY_FROM_JOB: The main application might be associated with a job,
    //     e.g. if we're running under "Run As", ConEmu, or Visual Studio. On Windows
    //     <= 7 our child process needs to break away from it so that we can cleanly
    //     call AssignProcessToJobObject on *our* job.
    //     Windows >= 8 supports nested jobs so this isn't necessary there.
    //     https://blogs.msdn.microsoft.com/winsdk/2014/09/22/job-object-insanity/
    //
    if (! IsWindowsVersionOrGreater(6, 2, 0)) { // Windows 8
        wcreationflags |= CREATE_BREAKAWAY_FROM_JOB;
    }

    if (application_name) {
        wappname = g_utf8_to_utf16(application_name, -1, NULL, NULL, NULL);
    }
    if (current_directory) {
        wcurrentdirectory = g_utf8_to_utf16(current_directory, -1, NULL, NULL, NULL);
    }
    if (n_inherit_handles > 0) {
        size_t attr_size = 0;
        BOOL success;
        success = InitializeProcThreadAttributeList(NULL, 1, 0, &attr_size);
        if (success || (GetLastError() == ERROR_INSUFFICIENT_BUFFER)) {
            attribute_list = g_malloc(attr_size);
            success = InitializeProcThreadAttributeList(attribute_list, 1, 0, &attr_size);
        }
        if (success && (attribute_list != NULL)) {
            success = UpdateProcThreadAttribute(attribute_list, 0, PROC_THREAD_ATTRIBUTE_HANDLE_LIST,
                inherit_handles, n_inherit_handles * sizeof(HANDLE), NULL, NULL);
        }
        if (!success && (attribute_list != NULL)) {
            DeleteProcThreadAttributeList(attribute_list);
            g_free(attribute_list);
            attribute_list = NULL;
        }
    }
    memset(&startup_infoex, 0, sizeof(startup_infoex));
    startup_infoex.StartupInfo = *startup_info;
    startup_infoex.StartupInfo.cb = sizeof(startup_infoex);
    startup_infoex.lpAttributeList = attribute_list;
    wcreationflags |= EXTENDED_STARTUPINFO_PRESENT;
    for (i = 0; i < n_inherit_handles; i++) {
        SetHandleInformation(inherit_handles[i], HANDLE_FLAG_INHERIT, HANDLE_FLAG_INHERIT);
    }
    BOOL cp_res = CreateProcess(wappname, wcommandline, process_attributes, thread_attributes,
        (n_inherit_handles > 0) ? true : false, wcreationflags, environment, wcurrentdirectory,
        &startup_infoex.StartupInfo, process_information);
    /* While this function makes the created process inherit only the explicitly
     * listed handles, there can be other functions (in 3rd party libraries)
     * that create processes inheriting all inheritable handles. To minimize
     * number of unwanted handle duplicates (handle duplicate can extend object
     * lifetime, e.g. pipe write end) created that way clear the inherit flag.
     */
    for (i = 0; i < n_inherit_handles; i++) {
        SetHandleInformation(inherit_handles[i], HANDLE_FLAG_INHERIT, 0);
    }
    if (cp_res) {
        win32_kill_child_on_exit(process_information->hProcess);
        ResumeThread(process_information->hThread);
    }
    // XXX Else try again if CREATE_BREAKAWAY_FROM_JOB and GetLastError() == ERROR_ACCESS_DENIED?

    if (attribute_list) {
        DeleteProcThreadAttributeList(attribute_list);
        g_free(attribute_list);
    }
    g_free(wappname);
    g_free(wcommandline);
    g_free(wcurrentdirectory);
    return cp_res;
}

/*
 * Editor modelines  -  https://www.wireshark.org/tools/modelines.html
 *
 * Local Variables:
 * c-basic-offset: 4
 * tab-width: 8
 * indent-tabs-mode: nil
 * End:
 *
 * ex: set shiftwidth=4 tabstop=8 expandtab:
 * :indentSize=4:tabSize=8:noTabs=true:
 */