mirror of
https://github.com/safing/portmaster
synced 2025-09-01 10:09:11 +00:00
329 lines
7.9 KiB
Go
329 lines
7.9 KiB
Go
// +build windows
|
|
|
|
package iphelper
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"net"
|
|
"sync"
|
|
"unsafe"
|
|
|
|
"golang.org/x/sys/windows"
|
|
)
|
|
|
|
// Windows API constants
|
|
const (
|
|
iphelperTCPTableOwnerPIDAll uintptr = 5
|
|
iphelperUDPTableOwnerPID uintptr = 1
|
|
iphelperTCPStateListen uint32 = 2
|
|
|
|
winErrInsufficientBuffer = uintptr(windows.ERROR_INSUFFICIENT_BUFFER)
|
|
winErrInvalidParameter = uintptr(windows.ERROR_INVALID_PARAMETER)
|
|
)
|
|
|
|
// ConnectionEntry describes a connection state table entry.
|
|
type ConnectionEntry struct {
|
|
localIP net.IP
|
|
remoteIP net.IP
|
|
localPort uint16
|
|
remotePort uint16
|
|
pid int
|
|
}
|
|
|
|
func (entry *ConnectionEntry) String() string {
|
|
return fmt.Sprintf("PID=%d %s:%d <> %s:%d", entry.pid, entry.localIP, entry.localPort, entry.remoteIP, entry.remotePort)
|
|
}
|
|
|
|
type iphelperTCPTable struct {
|
|
// docs: https://msdn.microsoft.com/en-us/library/windows/desktop/aa366921(v=vs.85).aspx
|
|
numEntries uint32
|
|
table [4096]iphelperTCPRow
|
|
}
|
|
|
|
type iphelperTCPRow struct {
|
|
// docs: https://msdn.microsoft.com/en-us/library/windows/desktop/aa366913(v=vs.85).aspx
|
|
state uint32
|
|
localAddr uint32
|
|
localPort uint32
|
|
remoteAddr uint32
|
|
remotePort uint32
|
|
owningPid uint32
|
|
}
|
|
|
|
type iphelperTCP6Table struct {
|
|
// docs: https://msdn.microsoft.com/en-us/library/windows/desktop/aa366905(v=vs.85).aspx
|
|
numEntries uint32
|
|
table [4096]iphelperTCP6Row
|
|
}
|
|
|
|
type iphelperTCP6Row struct {
|
|
// docs: https://msdn.microsoft.com/en-us/library/windows/desktop/aa366896(v=vs.85).aspx
|
|
localAddr [16]byte
|
|
localScopeID uint32
|
|
localPort uint32
|
|
remoteAddr [16]byte
|
|
remoteScopeID uint32
|
|
remotePort uint32
|
|
state uint32
|
|
owningPid uint32
|
|
}
|
|
|
|
type iphelperUDPTable struct {
|
|
// docs: https://msdn.microsoft.com/en-us/library/windows/desktop/aa366932(v=vs.85).aspx
|
|
numEntries uint32
|
|
table [4096]iphelperUDPRow
|
|
}
|
|
|
|
type iphelperUDPRow struct {
|
|
// docs: https://msdn.microsoft.com/en-us/library/windows/desktop/aa366928(v=vs.85).aspx
|
|
localAddr uint32
|
|
localPort uint32
|
|
owningPid uint32
|
|
}
|
|
|
|
type iphelperUDP6Table struct {
|
|
// docs: https://msdn.microsoft.com/en-us/library/windows/desktop/aa366925(v=vs.85).aspx
|
|
numEntries uint32
|
|
table [4096]iphelperUDP6Row
|
|
}
|
|
|
|
type iphelperUDP6Row struct {
|
|
// docs: https://msdn.microsoft.com/en-us/library/windows/desktop/aa366923(v=vs.85).aspx
|
|
localAddr [16]byte
|
|
localScopeID uint32
|
|
localPort uint32
|
|
owningPid uint32
|
|
}
|
|
|
|
// IP and Protocol constants
|
|
const (
|
|
IPv4 uint8 = 4
|
|
IPv6 uint8 = 6
|
|
|
|
TCP uint8 = 6
|
|
UDP uint8 = 17
|
|
)
|
|
|
|
const (
|
|
startBufSize = 4096
|
|
bufSizeUses = 100
|
|
)
|
|
|
|
var (
|
|
bufSize = startBufSize
|
|
bufSizeUsageLeft = bufSizeUses
|
|
bufSizeLock sync.Mutex
|
|
)
|
|
|
|
func getBufSize() int {
|
|
bufSizeLock.Lock()
|
|
defer bufSizeLock.Unlock()
|
|
|
|
// using bufSize
|
|
bufSizeUsageLeft--
|
|
// check if we want to reset
|
|
if bufSizeUsageLeft <= 0 {
|
|
// reset
|
|
bufSize = startBufSize
|
|
bufSizeUsageLeft = bufSizeUses
|
|
}
|
|
|
|
return bufSize
|
|
}
|
|
|
|
func increaseBufSize() int {
|
|
bufSizeLock.Lock()
|
|
defer bufSizeLock.Unlock()
|
|
|
|
// increase
|
|
bufSize = bufSize * 2
|
|
// not too much
|
|
if bufSize > 65536 {
|
|
bufSize = 65536
|
|
}
|
|
// reset
|
|
bufSizeUsageLeft = bufSizeUses
|
|
// return new bufSize
|
|
return bufSize
|
|
}
|
|
|
|
// GetTables returns the current connection state table of Windows of the given protocol and IP version.
|
|
func (ipHelper *IPHelper) GetTables(protocol uint8, ipVersion uint8) (connections []*ConnectionEntry, listeners []*ConnectionEntry, err error) {
|
|
// docs: https://msdn.microsoft.com/en-us/library/windows/desktop/aa365928(v=vs.85).aspx
|
|
|
|
if !ipHelper.valid.IsSet() {
|
|
return nil, nil, errInvalid
|
|
}
|
|
|
|
var afClass int
|
|
switch ipVersion {
|
|
case IPv4:
|
|
afClass = windows.AF_INET
|
|
case IPv6:
|
|
afClass = windows.AF_INET6
|
|
default:
|
|
return nil, nil, errors.New("invalid protocol")
|
|
}
|
|
|
|
// try max 3 times
|
|
maxTries := 3
|
|
bufSize := getBufSize()
|
|
var buf []byte
|
|
|
|
for i := 1; i <= maxTries; i++ {
|
|
buf = make([]byte, bufSize)
|
|
var r1 uintptr
|
|
|
|
switch protocol {
|
|
case TCP:
|
|
r1, _, err = ipHelper.getExtendedTCPTable.Call(
|
|
uintptr(unsafe.Pointer(&buf[0])), // _Out_ PVOID pTcpTable
|
|
uintptr(unsafe.Pointer(&bufSize)), // _Inout_ PDWORD pdwSize
|
|
0, // _In_ BOOL bOrder
|
|
uintptr(afClass), // _In_ ULONG ulAf
|
|
iphelperTCPTableOwnerPIDAll, // _In_ TCP_TABLE_CLASS TableClass
|
|
0, // _In_ ULONG Reserved
|
|
)
|
|
case UDP:
|
|
r1, _, err = ipHelper.getExtendedUDPTable.Call(
|
|
uintptr(unsafe.Pointer(&buf[0])), // _Out_ PVOID pUdpTable,
|
|
uintptr(unsafe.Pointer(&bufSize)), // _Inout_ PDWORD pdwSize,
|
|
0, // _In_ BOOL bOrder,
|
|
uintptr(afClass), // _In_ ULONG ulAf,
|
|
iphelperUDPTableOwnerPID, // _In_ UDP_TABLE_CLASS TableClass,
|
|
0, // _In_ ULONG Reserved
|
|
)
|
|
}
|
|
|
|
switch r1 {
|
|
case winErrInsufficientBuffer:
|
|
if i >= maxTries {
|
|
return nil, nil, fmt.Errorf("insufficient buffer error (tried %d times): [NT 0x%X] %s", i, r1, err)
|
|
}
|
|
bufSize = increaseBufSize()
|
|
case winErrInvalidParameter:
|
|
return nil, nil, fmt.Errorf("invalid parameter: [NT 0x%X] %s", r1, err)
|
|
case windows.NO_ERROR:
|
|
// success
|
|
break
|
|
default:
|
|
return nil, nil, fmt.Errorf("unexpected error: [NT 0x%X] %s", r1, err)
|
|
}
|
|
}
|
|
|
|
// parse output
|
|
switch {
|
|
case protocol == TCP && ipVersion == IPv4:
|
|
|
|
tcpTable := (*iphelperTCPTable)(unsafe.Pointer(&buf[0]))
|
|
table := tcpTable.table[:tcpTable.numEntries]
|
|
|
|
for _, row := range table {
|
|
new := &ConnectionEntry{}
|
|
|
|
// PID
|
|
new.pid = int(row.owningPid)
|
|
|
|
// local
|
|
if row.localAddr != 0 {
|
|
new.localIP = convertIPv4(row.localAddr)
|
|
}
|
|
new.localPort = uint16(row.localPort>>8 | row.localPort<<8)
|
|
|
|
// remote
|
|
if row.state == iphelperTCPStateListen {
|
|
listeners = append(listeners, new)
|
|
} else {
|
|
new.remoteIP = convertIPv4(row.remoteAddr)
|
|
new.remotePort = uint16(row.remotePort>>8 | row.remotePort<<8)
|
|
connections = append(connections, new)
|
|
}
|
|
|
|
}
|
|
|
|
case protocol == TCP && ipVersion == IPv6:
|
|
|
|
tcpTable := (*iphelperTCP6Table)(unsafe.Pointer(&buf[0]))
|
|
table := tcpTable.table[:tcpTable.numEntries]
|
|
|
|
for _, row := range table {
|
|
new := &ConnectionEntry{}
|
|
|
|
// PID
|
|
new.pid = int(row.owningPid)
|
|
|
|
// local
|
|
new.localIP = net.IP(row.localAddr[:])
|
|
new.localPort = uint16(row.localPort>>8 | row.localPort<<8)
|
|
|
|
// remote
|
|
if row.state == iphelperTCPStateListen {
|
|
if new.localIP.Equal(net.IPv6zero) {
|
|
new.localIP = nil
|
|
}
|
|
listeners = append(listeners, new)
|
|
} else {
|
|
new.remoteIP = net.IP(row.remoteAddr[:])
|
|
new.remotePort = uint16(row.remotePort>>8 | row.remotePort<<8)
|
|
connections = append(connections, new)
|
|
}
|
|
|
|
}
|
|
|
|
case protocol == UDP && ipVersion == IPv4:
|
|
|
|
udpTable := (*iphelperUDPTable)(unsafe.Pointer(&buf[0]))
|
|
table := udpTable.table[:udpTable.numEntries]
|
|
|
|
for _, row := range table {
|
|
new := &ConnectionEntry{}
|
|
|
|
// PID
|
|
new.pid = int(row.owningPid)
|
|
|
|
// local
|
|
new.localPort = uint16(row.localPort>>8 | row.localPort<<8)
|
|
if row.localAddr == 0 {
|
|
listeners = append(listeners, new)
|
|
} else {
|
|
new.localIP = convertIPv4(row.localAddr)
|
|
connections = append(connections, new)
|
|
}
|
|
}
|
|
|
|
case protocol == UDP && ipVersion == IPv6:
|
|
|
|
udpTable := (*iphelperUDP6Table)(unsafe.Pointer(&buf[0]))
|
|
table := udpTable.table[:udpTable.numEntries]
|
|
|
|
for _, row := range table {
|
|
new := &ConnectionEntry{}
|
|
|
|
// PID
|
|
new.pid = int(row.owningPid)
|
|
|
|
// local
|
|
new.localIP = net.IP(row.localAddr[:])
|
|
new.localPort = uint16(row.localPort>>8 | row.localPort<<8)
|
|
if new.localIP.Equal(net.IPv6zero) {
|
|
new.localIP = nil
|
|
listeners = append(listeners, new)
|
|
} else {
|
|
connections = append(connections, new)
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
return connections, listeners, nil
|
|
}
|
|
|
|
func convertIPv4(input uint32) net.IP {
|
|
return net.IPv4(
|
|
uint8(input&0xFF),
|
|
uint8(input>>8&0xFF),
|
|
uint8(input>>16&0xFF),
|
|
uint8(input>>24&0xFF),
|
|
)
|
|
}
|