ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/Convert-BER-XS/XS.pm
(Generate patch)

Comparing Convert-BER-XS/XS.pm (file contents):
Revision 1.37 by root, Sun Apr 21 00:36:19 2019 UTC vs.
Revision 1.51 by root, Mon Apr 22 00:53:54 2019 UTC

8 8
9 my $ber = ber_decode $buf, $Convert::BER::XS::SNMP_PROFILE 9 my $ber = ber_decode $buf, $Convert::BER::XS::SNMP_PROFILE
10 or die "unable to decode SNMP message"; 10 or die "unable to decode SNMP message";
11 11
12 # The above results in a data structure consisting of 12 # The above results in a data structure consisting of
13 # (class, tag, flags, data) 13 # (class, tag, flags, data)
14 # tuples. Below is such a message, SNMPv1 trap 14 # tuples. Below is such a message, SNMPv1 trap
15 # with a Cisco mac change notification. 15 # with a Cisco mac change notification.
16 # Did you know that Cisco is in the news almost 16 # Did you know that Cisco is in the news almost
17 # every week because of some backdoor password 17 # every week because of some backdoor password
18 # or other extremely stupid security bug? 18 # or other extremely stupid security bug?
412use Exporter qw(import); 412use Exporter qw(import);
413 413
414our $VERSION; 414our $VERSION;
415 415
416BEGIN { 416BEGIN {
417 $VERSION = '1.0'; 417 $VERSION = 1.1;
418 XSLoader::load __PACKAGE__, $VERSION; 418 XSLoader::load __PACKAGE__, $VERSION;
419} 419}
420 420
421our %EXPORT_TAGS = ( 421our %EXPORT_TAGS = (
422 const_index => [qw( 422 const_index => [qw(
496Example output: 496Example output:
497 497
498 SEQUENCE 498 SEQUENCE
499 | OCTET_STRING bytes 800063784300454045045400000001 499 | OCTET_STRING bytes 800063784300454045045400000001
500 | OCTET_STRING bytes 500 | OCTET_STRING bytes
501 | CONTEXT (7) bytes CONSTRUCTED 501 | CONTEXT (7) CONSTRUCTED
502 | | INTEGER int 1058588941 502 | | INTEGER int 1058588941
503 | | INTEGER int 0 503 | | INTEGER int 0
504 | | INTEGER int 0 504 | | INTEGER int 0
505 | | SEQUENCE 505 | | SEQUENCE
506 | | | SEQUENCE 506 | | | SEQUENCE
507 | | | | OID oid 1.3.6.1.2.1.1.3.0 507 | | | | OID oid 1.3.6.1.2.1.1.3.0
508 | | | | TIMETICKS int 638085796 508 | | | | TIMETICKS int 638085796
509 509
510=back
511
510=cut 512=cut
511 513
512# reverse enum, very slow and ugly hack 514# reverse enum, very slow and ugly hack
513sub _re { 515sub _re {
514 my ($export_tag, $value) = @_; 516 my ($export_tag, $value) = @_;
538 my $type = _re const_ber_type => $profile->get ($ber->[BER_CLASS], $ber->[BER_TAG]); 540 my $type = _re const_ber_type => $profile->get ($ber->[BER_CLASS], $ber->[BER_TAG]);
539 my $data = $ber->[BER_DATA]; 541 my $data = $ber->[BER_DATA];
540 542
541 if ($profile == $SNMP_PROFILE and $ber->[BER_CLASS] == ASN_APPLICATION) { 543 if ($profile == $SNMP_PROFILE and $ber->[BER_CLASS] == ASN_APPLICATION) {
542 $tag = _re const_snmp => $ber->[BER_TAG]; 544 $tag = _re const_snmp => $ber->[BER_TAG];
543 $asn = 1; 545 } elsif (!$asn) {
546 $tag = "$class ($tag)";
544 } 547 }
545
546 $asn or $tag = "$class ($tag)";
547 548
548 $class =~ s/^ASN_//; 549 $class =~ s/^ASN_//;
549 $tag =~ s/^(ASN_|SNMP_)//; 550 $tag =~ s/^(ASN_|SNMP_)//;
550 $type =~ s/^BER_TYPE_//; 551 $type =~ s/^BER_TYPE_//;
551 552
552 if ($ber->[BER_FLAGS]) { 553 if ($ber->[BER_FLAGS]) {
553 printf "$indent%-16.16s %-6.6s CONSTRUCTED\n", $tag, lc $type; 554 printf "$indent%-16.16s\n", $tag;
554 &_ber_dump ($_, $profile, "$indent| ") 555 &_ber_dump ($_, $profile, "$indent| ")
555 for @$data; 556 for @$data;
556 } else { 557 } else {
557 if ($data =~ y/\x20-\x7e//c > 10 or $data =~ /\x00./s) { 558 if ($data =~ y/\x20-\x7e//c / (length $data || 1) > 0.2 or $data =~ /\x00./s) {
558 # assume binary 559 # assume binary
559 $data = unpack "H*", $data; 560 $data = unpack "H*", $data;
560 substr $data, 40, 1e9, "..." if 40 < length $data;
561 } else { 561 } else {
562 $data =~ s/[^\x20-\x7e]/./g; 562 $data =~ s/[^\x20-\x7e]/./g;
563 $data = "\"$data\"" if $type =~ /string/i; 563 $data = "\"$data\"" if $tag =~ /string/i || !length $data;
564 substr $data, 40, 1e9, "..." if 40 < length $data;
565 } 564 }
565
566 substr $data, 40, 1e9, "..." if 40 < length $data;
566 567
567 printf "$indent%-16.16s %-6.6s %s\n", $tag, lc $type, $data; 568 printf "$indent%-16.16s %-6.6s %s\n", $tag, lc $type, $data;
568 } 569 }
569 } 570 }
570} 571}
640 641
641Returns the BER type mapped to the given C<$class>/C<$tag> combination. 642Returns the BER type mapped to the given C<$class>/C<$tag> combination.
642 643
643=back 644=back
644 645
645=head2 BER TYPES 646=head2 BER Types
646 647
647This lists the predefined BER types - you can map any C<CLASS>/C<TAG> 648This lists the predefined BER types. BER types are formatters used
648combination to any C<BER_TYPE_*>. 649internally to format and encode BER values. You can assign any C<BER_TYPE>
650to any C<CLASS>/C<TAG> combination tgo change how that tag is decoded or
651encoded.
649 652
650=over 653=over
651 654
652=item C<BER_TYPE_BYTES> 655=item C<BER_TYPE_BYTES>
653 656
736 $SNMP_PROFILE->set (ASN_APPLICATION, SNMP_COUNTER64 , BER_TYPE_INT); 739 $SNMP_PROFILE->set (ASN_APPLICATION, SNMP_COUNTER64 , BER_TYPE_INT);
737 740
738=head2 LIMITATIONS/NOTES 741=head2 LIMITATIONS/NOTES
739 742
740This module can only en-/decode 64 bit signed and unsigned integers, and 743This module can only en-/decode 64 bit signed and unsigned integers, and
741only when your perl supports those. 744only when your perl supports those. So no UUID OIDs for now (unless you
745map the C<OBJECT IDENTIFIER> tag to something other than C<BER_TYPE_OID>).
742 746
743This module does not generally care about ranges, i.e. it will happily 747This module does not generally care about ranges, i.e. it will happily
744de-/encode 64 bit integers into an C<ASN_INTEGER> value, or a negative 748de-/encode 64 bit integers into an C<ASN_INTEGER> value, or a negative
745number into an C<SNMP_COUNTER64>. 749number into an C<SNMP_COUNTER64>.
746 750
747OBJECT IDENTIFIEERs cannot have unlimited length, although the limit is 751OBJECT IDENTIFIEERs cannot have unlimited length, although the limit is
748much larger than e.g. the one imposed by SNMP or other protocols,a nd is 752much larger than e.g. the one imposed by SNMP or other protocols, and is
749about 4kB. 753about 4kB.
750 754
751Indefinite length encoding is not supported. 755Indefinite length encoding is not supported.
752 756
753Constructed strings are decoded just fine, but there should be a way to 757Constructed strings are decoded just fine, but there should be a way to
754join them for convenience. 758join them for convenience.
755 759
756REAL values are not supported and will currently croak. 760REAL values are not supported and will currently croak.
757 761
758The encoder and decoder tend to accept more formats than should be 762The encoder and decoder tend to accept more formats than should be
759strictly supported. 763strictly supported - security sensitive applications are strongly advised
764to review the code first.
760 765
761This module has undergone little to no testing so far. 766This module has undergone little to no testing so far.
762 767
763=head2 ITHREADS SUPPORT 768=head2 ITHREADS SUPPORT
764 769

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines