hondacrx
246 lines
10 KiB
C#
246 lines
10 KiB
C#
// Copyright (c) CypherCore <http://github.com/CypherCore> All rights reserved.
|
|
// Licensed under the GNU GENERAL PUBLIC LICENSE. See LICENSE file in the project root for full license information.
|
|
|
|
using Framework.Constants;
|
|
using Framework.Database;
|
|
using System;
|
|
using System.Collections.Generic;
|
|
using System.Numerics;
|
|
|
|
namespace Game
|
|
{
|
|
public class WardenCheckManager : Singleton<WardenCheckManager>
|
|
{
|
|
static byte WARDEN_MAX_LUA_CHECK_LENGTH = 170;
|
|
|
|
List<WardenCheck> _checks = new();
|
|
Dictionary<uint, byte[]> _checkResults = new();
|
|
List<ushort>[] _pools = new List<ushort>[(int)WardenCheckCategory.Max];
|
|
|
|
WardenCheckManager()
|
|
{
|
|
for (var i = 0; i < (int)WardenCheckCategory.Max; ++i)
|
|
_pools[i] = new();
|
|
}
|
|
|
|
public void LoadWardenChecks()
|
|
{
|
|
uint oldMSTime = Time.GetMSTime();
|
|
|
|
// Check if Warden is enabled by config before loading anything
|
|
if (!WorldConfig.GetBoolValue(WorldCfg.WardenEnabled))
|
|
{
|
|
Log.outInfo(LogFilter.Warden, "Warden disabled, loading checks skipped.");
|
|
return;
|
|
}
|
|
|
|
// 0 1 2 3 4 5 6 7
|
|
SQLResult result = DB.World.Query("SELECT id, type, data, result, address, length, str, comment FROM warden_checks ORDER BY id ASC");
|
|
if (result.IsEmpty())
|
|
{
|
|
Log.outInfo(LogFilter.ServerLoading, "Loaded 0 Warden checks. DB table `warden_checks` is empty!");
|
|
return;
|
|
}
|
|
|
|
uint count = 0;
|
|
do
|
|
{
|
|
ushort id = result.Read<ushort>(0);
|
|
WardenCheckType checkType = (WardenCheckType)result.Read<byte>(1);
|
|
|
|
WardenCheckCategory category = GetWardenCheckCategory(checkType);
|
|
|
|
if (category == WardenCheckCategory.Max)
|
|
{
|
|
Log.outError(LogFilter.Sql, $"Warden check with id {id} lists check type {checkType} in `warden_checks`, which is not supported. Skipped.");
|
|
continue;
|
|
}
|
|
|
|
if ((checkType == WardenCheckType.LuaEval) && (id > 9999))
|
|
{
|
|
Log.outError(LogFilter.Sql, $"Warden Lua check with id {id} found in `warden_checks`. Lua checks may have four-digit IDs at most. Skipped.");
|
|
continue;
|
|
}
|
|
|
|
WardenCheck wardenCheck = new();
|
|
wardenCheck.Type = checkType;
|
|
wardenCheck.CheckId = id;
|
|
|
|
if (checkType == WardenCheckType.PageA || checkType == WardenCheckType.PageB || checkType == WardenCheckType.Driver)
|
|
wardenCheck.Data = result.Read<byte[]>(2);
|
|
|
|
if (checkType == WardenCheckType.Mpq || checkType == WardenCheckType.Mem)
|
|
_checkResults.Add(id, result.Read<byte[]>(3));
|
|
|
|
if (checkType == WardenCheckType.Mem || checkType == WardenCheckType.PageA || checkType == WardenCheckType.PageB || checkType == WardenCheckType.Proc)
|
|
wardenCheck.Address = result.Read<uint>(4);
|
|
|
|
if (checkType == WardenCheckType.PageA || checkType == WardenCheckType.PageB || checkType == WardenCheckType.Proc)
|
|
wardenCheck.Length = result.Read<byte>(5);
|
|
|
|
// PROC_CHECK support missing
|
|
if (checkType == WardenCheckType.Mem || checkType == WardenCheckType.Mpq || checkType == WardenCheckType.LuaEval || checkType == WardenCheckType.Driver || checkType == WardenCheckType.Module)
|
|
wardenCheck.Str = result.Read<string>(6);
|
|
|
|
wardenCheck.Comment = result.Read<string>(7);
|
|
if (wardenCheck.Comment.IsEmpty())
|
|
wardenCheck.Comment = "Undocumented Check";
|
|
|
|
if (checkType == WardenCheckType.LuaEval)
|
|
{
|
|
if (wardenCheck.Str.Length > WARDEN_MAX_LUA_CHECK_LENGTH)
|
|
{
|
|
Log.outError(LogFilter.Sql, $"Found over-long Lua check for Warden check with id {id} in `warden_checks`. Max length is {WARDEN_MAX_LUA_CHECK_LENGTH}. Skipped.");
|
|
continue;
|
|
}
|
|
|
|
string str = $"{id:U4}";
|
|
Cypher.Assert(str.Length == 4);
|
|
wardenCheck.IdStr = str.ToCharArray();
|
|
}
|
|
|
|
// initialize action with default action from config, this may be overridden later
|
|
wardenCheck.Action = (WardenActions)WorldConfig.GetIntValue(WorldCfg.WardenClientFailAction);
|
|
|
|
_pools[(int)category].Add(id);
|
|
++count;
|
|
}
|
|
while (result.NextRow());
|
|
|
|
Log.outInfo(LogFilter.ServerLoading, $"Loaded {count} warden checks in {Time.GetMSTimeDiffToNow(oldMSTime)} ms");
|
|
}
|
|
|
|
public void LoadWardenOverrides()
|
|
{
|
|
uint oldMSTime = Time.GetMSTime();
|
|
|
|
// Check if Warden is enabled by config before loading anything
|
|
if (!WorldConfig.GetBoolValue(WorldCfg.WardenEnabled))
|
|
{
|
|
Log.outInfo(LogFilter.Warden, "Warden disabled, loading check overrides skipped.");
|
|
return;
|
|
}
|
|
|
|
// 0 1
|
|
SQLResult result = DB.Characters.Query("SELECT wardenId, action FROM warden_action");
|
|
if (result.IsEmpty())
|
|
{
|
|
Log.outInfo(LogFilter.ServerLoading, "Loaded 0 Warden action overrides. DB table `warden_action` is empty!");
|
|
return;
|
|
}
|
|
|
|
uint count = 0;
|
|
do
|
|
{
|
|
ushort checkId = result.Read<ushort>(0);
|
|
WardenActions action = (WardenActions)result.Read<byte>(1);
|
|
|
|
// Check if action value is in range (0-2, see WardenActions enum)
|
|
if (action > WardenActions.Ban)
|
|
Log.outError(LogFilter.Warden, $"Warden check override action out of range (ID: {checkId}, action: {action})");
|
|
// Check if check actually exists before accessing the CheckStore vector
|
|
else if (checkId >= _checks.Count)
|
|
Log.outError(LogFilter.Warden, $"Warden check action override for non-existing check (ID: {checkId}, action: {action}), skipped");
|
|
else
|
|
{
|
|
_checks[checkId].Action = action;
|
|
++count;
|
|
}
|
|
}
|
|
while (result.NextRow());
|
|
|
|
Log.outInfo(LogFilter.ServerLoading, $"Loaded {count} warden action overrides in {Time.GetMSTimeDiffToNow(oldMSTime)} ms");
|
|
}
|
|
|
|
public WardenCheck GetCheckData(ushort Id)
|
|
{
|
|
if (Id < _checks.Count)
|
|
return _checks[Id];
|
|
|
|
return null;
|
|
}
|
|
|
|
public byte[] GetCheckResult(ushort Id)
|
|
{
|
|
return _checkResults.LookupByKey(Id);
|
|
}
|
|
|
|
public ushort GetMaxValidCheckId() { return (ushort)_checks.Count; }
|
|
|
|
public List<ushort> GetAvailableChecks(WardenCheckCategory category) { return _pools[(int)category]; }
|
|
|
|
public static WardenCheckCategory GetWardenCheckCategory(WardenCheckType type) => type switch
|
|
{
|
|
WardenCheckType.Timing => WardenCheckCategory.Max,
|
|
WardenCheckType.Driver => WardenCheckCategory.Inject,
|
|
WardenCheckType.Proc => WardenCheckCategory.Max,
|
|
WardenCheckType.LuaEval => WardenCheckCategory.Lua,
|
|
WardenCheckType.Mpq => WardenCheckCategory.Modded,
|
|
WardenCheckType.PageA => WardenCheckCategory.Inject,
|
|
WardenCheckType.PageB => WardenCheckCategory.Inject,
|
|
WardenCheckType.Module => WardenCheckCategory.Inject,
|
|
WardenCheckType.Mem => WardenCheckCategory.Modded,
|
|
_ => WardenCheckCategory.Max,
|
|
};
|
|
|
|
public static WorldCfg GetWardenCategoryCountConfig(WardenCheckCategory category) => category switch
|
|
{
|
|
WardenCheckCategory.Inject => WorldCfg.WardenNumInjectChecks,
|
|
WardenCheckCategory.Lua => WorldCfg.WardenNumLuaChecks,
|
|
WardenCheckCategory.Modded => WorldCfg.WardenNumClientModChecks,
|
|
_ => WorldCfg.Max,
|
|
};
|
|
|
|
public static bool IsWardenCategoryInWorldOnly(WardenCheckCategory category) => category switch
|
|
{
|
|
WardenCheckCategory.Inject => false,
|
|
WardenCheckCategory.Lua => true,
|
|
WardenCheckCategory.Modded => false,
|
|
_ => false,
|
|
};
|
|
}
|
|
|
|
public enum WardenActions
|
|
{
|
|
Log,
|
|
Kick,
|
|
Ban
|
|
}
|
|
|
|
public enum WardenCheckCategory
|
|
{
|
|
Inject = 0, // checks that test whether the client's execution has been interfered with
|
|
Lua, // checks that test whether the lua sandbox has been modified
|
|
Modded, // checks that test whether the client has been modified
|
|
|
|
Max // SKIP
|
|
}
|
|
|
|
public enum WardenCheckType
|
|
{
|
|
None = 0,
|
|
Timing = 87, // nyi
|
|
Driver = 113, // uint Seed + byte[20] SHA1 + byte driverNameIndex (check to ensure driver isn't loaded)
|
|
Proc = 126, // nyi
|
|
LuaEval = 139, // evaluate arbitrary Lua check
|
|
Mpq = 152, // get hash of MPQ file (to check it is not modified)
|
|
PageA = 178, // scans all pages for specified SHA1 hash
|
|
PageB = 191, // scans only pages starts with MZ+PE headers for specified hash
|
|
Module = 217, // check to make sure module isn't injected
|
|
Mem = 243, // retrieve specific memory
|
|
}
|
|
|
|
public class WardenCheck
|
|
{
|
|
public ushort CheckId;
|
|
public WardenCheckType Type;
|
|
public byte[] Data;
|
|
public uint Address; // PROC_CHECK, MEM_CHECK, PAGE_CHECK
|
|
public byte Length; // PROC_CHECK, MEM_CHECK, PAGE_CHECK
|
|
public string Str; // LUA, MPQ, DRIVER
|
|
public string Comment;
|
|
public char[] IdStr = new char[4]; // LUA
|
|
public WardenActions Action;
|
|
}
|
|
}
|