1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843 |
- /*
- Minetest
- Copyright (C) 2015 nerzhul, Loic Blot <loic.blot@unix-experience.fr>
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU Lesser General Public License as published by
- the Free Software Foundation; either version 2.1 of the License, or
- (at your option) any later version.
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU Lesser General Public License for more details.
- You should have received a copy of the GNU Lesser General Public License along
- with this program; if not, write to the Free Software Foundation, Inc.,
- 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
- */
- #include "chatmessage.h"
- #include "server.h"
- #include "log.h"
- #include "emerge.h"
- #include "mapblock.h"
- #include "modchannels.h"
- #include "nodedef.h"
- #include "remoteplayer.h"
- #include "rollback_interface.h"
- #include "scripting_server.h"
- #include "settings.h"
- #include "tool.h"
- #include "version.h"
- #include "network/connection.h"
- #include "network/networkprotocol.h"
- #include "network/serveropcodes.h"
- #include "server/player_sao.h"
- #include "server/serverinventorymgr.h"
- #include "util/auth.h"
- #include "util/base64.h"
- #include "util/pointedthing.h"
- #include "util/serialize.h"
- #include "util/srp.h"
- void Server::handleCommand_Deprecated(NetworkPacket* pkt)
- {
- infostream << "Server: " << toServerCommandTable[pkt->getCommand()].name
- << " not supported anymore" << std::endl;
- }
- void Server::handleCommand_Init(NetworkPacket* pkt)
- {
- if(pkt->getSize() < 1)
- return;
- session_t peer_id = pkt->getPeerId();
- RemoteClient *client = getClient(peer_id, CS_Created);
- Address addr;
- std::string addr_s;
- try {
- addr = m_con->GetPeerAddress(peer_id);
- addr_s = addr.serializeString();
- } catch (con::PeerNotFoundException &e) {
- /*
- * no peer for this packet found
- * most common reason is peer timeout, e.g. peer didn't
- * respond for some time, your server was overloaded or
- * things like that.
- */
- infostream << "Server::ProcessData(): Canceling: peer " << peer_id <<
- " not found" << std::endl;
- return;
- }
- if (client->getState() > CS_Created) {
- verbosestream << "Server: Ignoring multiple TOSERVER_INITs from " <<
- addr_s << " (peer_id=" << peer_id << ")" << std::endl;
- return;
- }
- client->setCachedAddress(addr);
- verbosestream << "Server: Got TOSERVER_INIT from " << addr_s <<
- " (peer_id=" << peer_id << ")" << std::endl;
- // Do not allow multiple players in simple singleplayer mode.
- // This isn't a perfect way to do it, but will suffice for now
- if (m_simple_singleplayer_mode && !m_clients.getClientIDs().empty()) {
- infostream << "Server: Not allowing another client (" << addr_s <<
- ") to connect in simple singleplayer mode" << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_SINGLEPLAYER);
- return;
- }
- // First byte after command is maximum supported
- // serialization version
- u8 client_max;
- u16 supp_compr_modes;
- u16 min_net_proto_version = 0;
- u16 max_net_proto_version;
- std::string playerName;
- *pkt >> client_max >> supp_compr_modes >> min_net_proto_version
- >> max_net_proto_version >> playerName;
- u8 our_max = SER_FMT_VER_HIGHEST_READ;
- // Use the highest version supported by both
- u8 depl_serial_v = std::min(client_max, our_max);
- // If it's lower than the lowest supported, give up.
- #if SER_FMT_VER_LOWEST_READ > 0
- if (depl_serial_v < SER_FMT_VER_LOWEST_READ)
- depl_serial_v = SER_FMT_VER_INVALID;
- #endif
- if (depl_serial_v == SER_FMT_VER_INVALID) {
- actionstream << "Server: A mismatched client tried to connect from " <<
- addr_s << " ser_fmt_max=" << (int)client_max << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_WRONG_VERSION);
- return;
- }
- client->setPendingSerializationVersion(depl_serial_v);
- /*
- Read and check network protocol version
- */
- u16 net_proto_version = 0;
- // Figure out a working version if it is possible at all
- if (max_net_proto_version >= SERVER_PROTOCOL_VERSION_MIN ||
- min_net_proto_version <= SERVER_PROTOCOL_VERSION_MAX) {
- // If maximum is larger than our maximum, go with our maximum
- if (max_net_proto_version > SERVER_PROTOCOL_VERSION_MAX)
- net_proto_version = SERVER_PROTOCOL_VERSION_MAX;
- // Else go with client's maximum
- else
- net_proto_version = max_net_proto_version;
- }
- verbosestream << "Server: " << addr_s << ": Protocol version: min: "
- << min_net_proto_version << ", max: " << max_net_proto_version
- << ", chosen: " << net_proto_version << std::endl;
- client->net_proto_version = net_proto_version;
- if ((g_settings->getBool("strict_protocol_version_checking") &&
- net_proto_version != LATEST_PROTOCOL_VERSION) ||
- net_proto_version < SERVER_PROTOCOL_VERSION_MIN ||
- net_proto_version > SERVER_PROTOCOL_VERSION_MAX) {
- actionstream << "Server: A mismatched client tried to connect from " <<
- addr_s << " proto_max=" << (int)max_net_proto_version << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_WRONG_VERSION);
- return;
- }
- /*
- Validate player name
- */
- const char* playername = playerName.c_str();
- size_t pns = playerName.size();
- if (pns == 0 || pns > PLAYERNAME_SIZE) {
- actionstream << "Server: Player with " <<
- ((pns > PLAYERNAME_SIZE) ? "a too long" : "an empty") <<
- " name tried to connect from " << addr_s << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_WRONG_NAME);
- return;
- }
- if (!string_allowed(playerName, PLAYERNAME_ALLOWED_CHARS)) {
- actionstream << "Server: Player with an invalid name tried to connect "
- "from " << addr_s << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_WRONG_CHARS_IN_NAME);
- return;
- }
- RemotePlayer *player = m_env->getPlayer(playername);
- // If player is already connected, cancel
- if (player && player->getPeerId() != PEER_ID_INEXISTENT) {
- actionstream << "Server: Player with name \"" << playername <<
- "\" tried to connect, but player with same name is already connected" << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_ALREADY_CONNECTED);
- return;
- }
- m_clients.setPlayerName(peer_id, playername);
- //TODO (later) case insensitivity
- std::string legacyPlayerNameCasing = playerName;
- if (!isSingleplayer() && strcasecmp(playername, "singleplayer") == 0) {
- actionstream << "Server: Player with the name \"singleplayer\" tried "
- "to connect from " << addr_s << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_WRONG_NAME);
- return;
- }
- {
- std::string reason;
- if (m_script->on_prejoinplayer(playername, addr_s, &reason)) {
- actionstream << "Server: Player with the name \"" << playerName <<
- "\" tried to connect from " << addr_s <<
- " but it was disallowed for the following reason: " << reason <<
- std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_CUSTOM_STRING, reason);
- return;
- }
- }
- infostream << "Server: New connection: \"" << playerName << "\" from " <<
- addr_s << " (peer_id=" << peer_id << ")" << std::endl;
- // Enforce user limit.
- // Don't enforce for users that have some admin right or mod permits it.
- if (m_clients.isUserLimitReached() &&
- playername != g_settings->get("name") &&
- !m_script->can_bypass_userlimit(playername, addr_s)) {
- actionstream << "Server: " << playername << " tried to join from " <<
- addr_s << ", but there are already max_users=" <<
- g_settings->getU16("max_users") << " players." << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_TOO_MANY_USERS);
- return;
- }
- /*
- Compose auth methods for answer
- */
- std::string encpwd; // encrypted Password field for the user
- bool has_auth = m_script->getAuth(playername, &encpwd, nullptr);
- u32 auth_mechs = 0;
- client->chosen_mech = AUTH_MECHANISM_NONE;
- if (has_auth) {
- std::vector<std::string> pwd_components = str_split(encpwd, '#');
- if (pwd_components.size() == 4) {
- if (pwd_components[1] == "1") { // 1 means srp
- auth_mechs |= AUTH_MECHANISM_SRP;
- client->enc_pwd = encpwd;
- } else {
- actionstream << "User " << playername << " tried to log in, "
- "but password field was invalid (unknown mechcode)." <<
- std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_SERVER_FAIL);
- return;
- }
- } else if (base64_is_valid(encpwd)) {
- auth_mechs |= AUTH_MECHANISM_LEGACY_PASSWORD;
- client->enc_pwd = encpwd;
- } else {
- actionstream << "User " << playername << " tried to log in, but "
- "password field was invalid (invalid base64)." << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_SERVER_FAIL);
- return;
- }
- } else {
- std::string default_password = g_settings->get("default_password");
- if (default_password.length() == 0) {
- auth_mechs |= AUTH_MECHANISM_FIRST_SRP;
- } else {
- // Take care of default passwords.
- client->enc_pwd = get_encoded_srp_verifier(playerName, default_password);
- auth_mechs |= AUTH_MECHANISM_SRP;
- // Allocate player in db, but only on successful login.
- client->create_player_on_auth_success = true;
- }
- }
- /*
- Answer with a TOCLIENT_HELLO
- */
- verbosestream << "Sending TOCLIENT_HELLO with auth method field: "
- << auth_mechs << std::endl;
- NetworkPacket resp_pkt(TOCLIENT_HELLO,
- 1 + 4 + legacyPlayerNameCasing.size(), peer_id);
- u16 depl_compress_mode = NETPROTO_COMPRESSION_NONE;
- resp_pkt << depl_serial_v << depl_compress_mode << net_proto_version
- << auth_mechs << legacyPlayerNameCasing;
- Send(&resp_pkt);
- client->allowed_auth_mechs = auth_mechs;
- client->setDeployedCompressionMode(depl_compress_mode);
- m_clients.event(peer_id, CSE_Hello);
- }
- void Server::handleCommand_Init2(NetworkPacket* pkt)
- {
- session_t peer_id = pkt->getPeerId();
- verbosestream << "Server: Got TOSERVER_INIT2 from " << peer_id << std::endl;
- m_clients.event(peer_id, CSE_GotInit2);
- u16 protocol_version = m_clients.getProtocolVersion(peer_id);
- std::string lang;
- if (pkt->getSize() > 0)
- *pkt >> lang;
- /*
- Send some initialization data
- */
- infostream << "Server: Sending content to " << getPlayerName(peer_id) <<
- std::endl;
- // Send item definitions
- SendItemDef(peer_id, m_itemdef, protocol_version);
- // Send node definitions
- SendNodeDef(peer_id, m_nodedef, protocol_version);
- m_clients.event(peer_id, CSE_SetDefinitionsSent);
- // Send media announcement
- sendMediaAnnouncement(peer_id, lang);
- RemoteClient *client = getClient(peer_id, CS_InitDone);
- // Keep client language for server translations
- client->setLangCode(lang);
- // Send active objects
- {
- PlayerSAO *sao = getPlayerSAO(peer_id);
- if (sao)
- SendActiveObjectRemoveAdd(client, sao);
- }
- // Send detached inventories
- sendDetachedInventories(peer_id, false);
- // Send player movement settings
- SendMovement(peer_id);
- // Send time of day
- u16 time = m_env->getTimeOfDay();
- float time_speed = g_settings->getFloat("time_speed");
- SendTimeOfDay(peer_id, time, time_speed);
- SendCSMRestrictionFlags(peer_id);
- // Warnings about protocol version can be issued here
- if (client->net_proto_version < LATEST_PROTOCOL_VERSION) {
- SendChatMessage(peer_id, ChatMessage(CHATMESSAGE_TYPE_SYSTEM,
- L"# Server: WARNING: YOUR CLIENT'S VERSION MAY NOT BE FULLY COMPATIBLE "
- L"WITH THIS SERVER!"));
- }
- }
- void Server::handleCommand_RequestMedia(NetworkPacket* pkt)
- {
- std::vector<std::string> tosend;
- u16 numfiles;
- *pkt >> numfiles;
- session_t peer_id = pkt->getPeerId();
- infostream << "Sending " << numfiles << " files to " <<
- getPlayerName(peer_id) << std::endl;
- verbosestream << "TOSERVER_REQUEST_MEDIA: requested file(s)" << std::endl;
- for (u16 i = 0; i < numfiles; i++) {
- std::string name;
- *pkt >> name;
- tosend.emplace_back(name);
- verbosestream << " " << name << std::endl;
- }
- sendRequestedMedia(peer_id, tosend);
- }
- void Server::handleCommand_ClientReady(NetworkPacket* pkt)
- {
- session_t peer_id = pkt->getPeerId();
- // decode all information first
- u8 major_ver, minor_ver, patch_ver, reserved;
- u16 formspec_ver = 1; // v1 for clients older than 5.1.0-dev
- std::string full_ver;
- *pkt >> major_ver >> minor_ver >> patch_ver >> reserved >> full_ver;
- if (pkt->getRemainingBytes() >= 2)
- *pkt >> formspec_ver;
- m_clients.setClientVersion(peer_id, major_ver, minor_ver, patch_ver,
- full_ver);
- // Emerge player
- PlayerSAO* playersao = StageTwoClientInit(peer_id);
- if (!playersao) {
- errorstream << "Server: stage 2 client init failed "
- "peer_id=" << peer_id << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- playersao->getPlayer()->formspec_version = formspec_ver;
- m_clients.event(peer_id, CSE_SetClientReady);
- // Send player list to this client
- {
- const std::vector<std::string> &players = m_clients.getPlayerNames();
- NetworkPacket list_pkt(TOCLIENT_UPDATE_PLAYER_LIST, 0, peer_id);
- list_pkt << (u8) PLAYER_LIST_INIT << (u16) players.size();
- for (const auto &player : players)
- list_pkt << player;
- Send(peer_id, &list_pkt);
- }
- s64 last_login;
- m_script->getAuth(playersao->getPlayer()->getName(), nullptr, nullptr, &last_login);
- m_script->on_joinplayer(playersao, last_login);
- // Send shutdown timer if shutdown has been scheduled
- if (m_shutdown_state.isTimerRunning())
- SendChatMessage(peer_id, m_shutdown_state.getShutdownTimerMessage());
- }
- void Server::handleCommand_GotBlocks(NetworkPacket* pkt)
- {
- if (pkt->getSize() < 1)
- return;
- /*
- [0] u16 command
- [2] u8 count
- [3] v3s16 pos_0
- [3+6] v3s16 pos_1
- ...
- */
- u8 count;
- *pkt >> count;
- if ((s16)pkt->getSize() < 1 + (int)count * 6) {
- throw con::InvalidIncomingDataException
- ("GOTBLOCKS length is too short");
- }
- ClientInterface::AutoLock lock(m_clients);
- RemoteClient *client = m_clients.lockedGetClientNoEx(pkt->getPeerId());
- for (u16 i = 0; i < count; i++) {
- v3s16 p;
- *pkt >> p;
- client->GotBlock(p);
- }
- }
- void Server::process_PlayerPos(RemotePlayer *player, PlayerSAO *playersao,
- NetworkPacket *pkt)
- {
- if (pkt->getRemainingBytes() < 12 + 12 + 4 + 4 + 4 + 1 + 1)
- return;
- v3s32 ps, ss;
- s32 f32pitch, f32yaw;
- u8 f32fov;
- *pkt >> ps;
- *pkt >> ss;
- *pkt >> f32pitch;
- *pkt >> f32yaw;
- f32 pitch = (f32)f32pitch / 100.0f;
- f32 yaw = (f32)f32yaw / 100.0f;
- u32 keyPressed = 0;
- f32 fov = 0;
- u8 wanted_range = 0;
- *pkt >> keyPressed;
- *pkt >> f32fov;
- fov = (f32)f32fov / 80.0f;
- *pkt >> wanted_range;
- v3f position((f32)ps.X / 100.0f, (f32)ps.Y / 100.0f, (f32)ps.Z / 100.0f);
- v3f speed((f32)ss.X / 100.0f, (f32)ss.Y / 100.0f, (f32)ss.Z / 100.0f);
- pitch = modulo360f(pitch);
- yaw = wrapDegrees_0_360(yaw);
- if (!playersao->isAttached()) {
- // Only update player positions when moving freely
- // to not interfere with attachment handling
- playersao->setBasePosition(position);
- player->setSpeed(speed);
- }
- playersao->setLookPitch(pitch);
- playersao->setPlayerYaw(yaw);
- playersao->setFov(fov);
- playersao->setWantedRange(wanted_range);
- player->control.unpackKeysPressed(keyPressed);
- if (playersao->checkMovementCheat()) {
- // Call callbacks
- m_script->on_cheat(playersao, "moved_too_fast");
- SendMovePlayer(pkt->getPeerId());
- }
- }
- void Server::handleCommand_PlayerPos(NetworkPacket* pkt)
- {
- session_t peer_id = pkt->getPeerId();
- RemotePlayer *player = m_env->getPlayer(peer_id);
- if (player == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- PlayerSAO *playersao = player->getPlayerSAO();
- if (playersao == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player object for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- // If player is dead we don't care of this packet
- if (playersao->isDead()) {
- verbosestream << "TOSERVER_PLAYERPOS: " << player->getName()
- << " is dead. Ignoring packet";
- return;
- }
- process_PlayerPos(player, playersao, pkt);
- }
- void Server::handleCommand_DeletedBlocks(NetworkPacket* pkt)
- {
- if (pkt->getSize() < 1)
- return;
- /*
- [0] u16 command
- [2] u8 count
- [3] v3s16 pos_0
- [3+6] v3s16 pos_1
- ...
- */
- u8 count;
- *pkt >> count;
- RemoteClient *client = getClient(pkt->getPeerId());
- if ((s16)pkt->getSize() < 1 + (int)count * 6) {
- throw con::InvalidIncomingDataException
- ("DELETEDBLOCKS length is too short");
- }
- for (u16 i = 0; i < count; i++) {
- v3s16 p;
- *pkt >> p;
- client->SetBlockNotSent(p);
- }
- }
- void Server::handleCommand_InventoryAction(NetworkPacket* pkt)
- {
- session_t peer_id = pkt->getPeerId();
- RemotePlayer *player = m_env->getPlayer(peer_id);
- if (player == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- PlayerSAO *playersao = player->getPlayerSAO();
- if (playersao == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player object for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- // Strip command and create a stream
- std::string datastring(pkt->getString(0), pkt->getSize());
- verbosestream << "TOSERVER_INVENTORY_ACTION: data=" << datastring
- << std::endl;
- std::istringstream is(datastring, std::ios_base::binary);
- // Create an action
- std::unique_ptr<InventoryAction> a(InventoryAction::deSerialize(is));
- if (!a) {
- infostream << "TOSERVER_INVENTORY_ACTION: "
- << "InventoryAction::deSerialize() returned NULL"
- << std::endl;
- return;
- }
- // If something goes wrong, this player is to blame
- RollbackScopeActor rollback_scope(m_rollback,
- std::string("player:")+player->getName());
- /*
- Note: Always set inventory not sent, to repair cases
- where the client made a bad prediction.
- */
- const bool player_has_interact = checkPriv(player->getName(), "interact");
- auto check_inv_access = [player, player_has_interact, this] (
- const InventoryLocation &loc) -> bool {
- // Players without interact may modify their own inventory
- if (!player_has_interact && loc.type != InventoryLocation::PLAYER) {
- infostream << "Cannot modify foreign inventory: "
- << "No interact privilege" << std::endl;
- return false;
- }
- switch (loc.type) {
- case InventoryLocation::CURRENT_PLAYER:
- // Only used internally on the client, never sent
- return false;
- case InventoryLocation::PLAYER:
- // Allow access to own inventory in all cases
- return loc.name == player->getName();
- case InventoryLocation::NODEMETA:
- {
- // Check for out-of-range interaction
- v3f node_pos = intToFloat(loc.p, BS);
- v3f player_pos = player->getPlayerSAO()->getEyePosition();
- f32 d = player_pos.getDistanceFrom(node_pos);
- return checkInteractDistance(player, d, "inventory");
- }
- case InventoryLocation::DETACHED:
- return getInventoryMgr()->checkDetachedInventoryAccess(loc, player->getName());
- default:
- return false;
- }
- };
- /*
- Handle restrictions and special cases of the move action
- */
- if (a->getType() == IAction::Move) {
- IMoveAction *ma = (IMoveAction*)a.get();
- ma->from_inv.applyCurrentPlayer(player->getName());
- ma->to_inv.applyCurrentPlayer(player->getName());
- m_inventory_mgr->setInventoryModified(ma->from_inv);
- if (ma->from_inv != ma->to_inv)
- m_inventory_mgr->setInventoryModified(ma->to_inv);
- if (!check_inv_access(ma->from_inv) ||
- !check_inv_access(ma->to_inv))
- return;
- /*
- Disable moving items out of craftpreview
- */
- if (ma->from_list == "craftpreview") {
- infostream << "Ignoring IMoveAction from "
- << (ma->from_inv.dump()) << ":" << ma->from_list
- << " to " << (ma->to_inv.dump()) << ":" << ma->to_list
- << " because src is " << ma->from_list << std::endl;
- return;
- }
- /*
- Disable moving items into craftresult and craftpreview
- */
- if (ma->to_list == "craftpreview" || ma->to_list == "craftresult") {
- infostream << "Ignoring IMoveAction from "
- << (ma->from_inv.dump()) << ":" << ma->from_list
- << " to " << (ma->to_inv.dump()) << ":" << ma->to_list
- << " because dst is " << ma->to_list << std::endl;
- return;
- }
- }
- /*
- Handle restrictions and special cases of the drop action
- */
- else if (a->getType() == IAction::Drop) {
- IDropAction *da = (IDropAction*)a.get();
- da->from_inv.applyCurrentPlayer(player->getName());
- m_inventory_mgr->setInventoryModified(da->from_inv);
- /*
- Disable dropping items out of craftpreview
- */
- if (da->from_list == "craftpreview") {
- infostream << "Ignoring IDropAction from "
- << (da->from_inv.dump()) << ":" << da->from_list
- << " because src is " << da->from_list << std::endl;
- return;
- }
- // Disallow dropping items if not allowed to interact
- if (!player_has_interact || !check_inv_access(da->from_inv))
- return;
- // Disallow dropping items if dead
- if (playersao->isDead()) {
- infostream << "Ignoring IDropAction from "
- << (da->from_inv.dump()) << ":" << da->from_list
- << " because player is dead." << std::endl;
- return;
- }
- }
- /*
- Handle restrictions and special cases of the craft action
- */
- else if (a->getType() == IAction::Craft) {
- ICraftAction *ca = (ICraftAction*)a.get();
- ca->craft_inv.applyCurrentPlayer(player->getName());
- m_inventory_mgr->setInventoryModified(ca->craft_inv);
- // Disallow crafting if not allowed to interact
- if (!player_has_interact) {
- infostream << "Cannot craft: "
- << "No interact privilege" << std::endl;
- return;
- }
- if (!check_inv_access(ca->craft_inv))
- return;
- } else {
- // Unknown action. Ignored.
- return;
- }
- // Do the action
- a->apply(m_inventory_mgr.get(), playersao, this);
- }
- void Server::handleCommand_ChatMessage(NetworkPacket* pkt)
- {
- std::wstring message;
- *pkt >> message;
- session_t peer_id = pkt->getPeerId();
- RemotePlayer *player = m_env->getPlayer(peer_id);
- if (player == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- std::string name = player->getName();
- std::wstring answer_to_sender = handleChat(name, message, true, player);
- if (!answer_to_sender.empty()) {
- // Send the answer to sender
- SendChatMessage(peer_id, ChatMessage(CHATMESSAGE_TYPE_SYSTEM,
- answer_to_sender));
- }
- }
- void Server::handleCommand_Damage(NetworkPacket* pkt)
- {
- u16 damage;
- *pkt >> damage;
- session_t peer_id = pkt->getPeerId();
- RemotePlayer *player = m_env->getPlayer(peer_id);
- if (player == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- PlayerSAO *playersao = player->getPlayerSAO();
- if (playersao == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player object for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- if (!playersao->isImmortal()) {
- if (playersao->isDead()) {
- verbosestream << "Server::ProcessData(): Info: "
- "Ignoring damage as player " << player->getName()
- << " is already dead." << std::endl;
- return;
- }
- actionstream << player->getName() << " damaged by "
- << (int)damage << " hp at " << PP(playersao->getBasePosition() / BS)
- << std::endl;
- PlayerHPChangeReason reason(PlayerHPChangeReason::FALL);
- playersao->setHP((s32)playersao->getHP() - (s32)damage, reason, true);
- }
- }
- void Server::handleCommand_PlayerItem(NetworkPacket* pkt)
- {
- if (pkt->getSize() < 2)
- return;
- session_t peer_id = pkt->getPeerId();
- RemotePlayer *player = m_env->getPlayer(peer_id);
- if (player == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- PlayerSAO *playersao = player->getPlayerSAO();
- if (playersao == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player object for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- u16 item;
- *pkt >> item;
- if (item >= player->getHotbarItemcount()) {
- actionstream << "Player: " << player->getName()
- << " tried to access item=" << item
- << " out of hotbar_itemcount="
- << player->getHotbarItemcount()
- << "; ignoring." << std::endl;
- return;
- }
- playersao->getPlayer()->setWieldIndex(item);
- }
- void Server::handleCommand_Respawn(NetworkPacket* pkt)
- {
- session_t peer_id = pkt->getPeerId();
- RemotePlayer *player = m_env->getPlayer(peer_id);
- if (player == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- PlayerSAO *playersao = player->getPlayerSAO();
- assert(playersao);
- if (!playersao->isDead())
- return;
- RespawnPlayer(peer_id);
- actionstream << player->getName() << " respawns at "
- << PP(playersao->getBasePosition() / BS) << std::endl;
- // ActiveObject is added to environment in AsyncRunStep after
- // the previous addition has been successfully removed
- }
- bool Server::checkInteractDistance(RemotePlayer *player, const f32 d, const std::string &what)
- {
- ItemStack selected_item, hand_item;
- player->getWieldedItem(&selected_item, &hand_item);
- f32 max_d = BS * getToolRange(selected_item.getDefinition(m_itemdef),
- hand_item.getDefinition(m_itemdef));
- // Cube diagonal * 1.5 for maximal supported node extents:
- // sqrt(3) * 1.5 ≅ 2.6
- if (d > max_d + 2.6f * BS) {
- actionstream << "Player " << player->getName()
- << " tried to access " << what
- << " from too far: "
- << "d=" << d << ", max_d=" << max_d
- << "; ignoring." << std::endl;
- // Call callbacks
- m_script->on_cheat(player->getPlayerSAO(), "interacted_too_far");
- return false;
- }
- return true;
- }
- // Tiny helper to retrieve the selected item into an Optional
- static inline void getWieldedItem(const PlayerSAO *playersao, Optional<ItemStack> &ret)
- {
- ret = ItemStack();
- playersao->getWieldedItem(&(*ret));
- }
- void Server::handleCommand_Interact(NetworkPacket *pkt)
- {
- /*
- [0] u16 command
- [2] u8 action
- [3] u16 item
- [5] u32 length of the next item (plen)
- [9] serialized PointedThing
- [9 + plen] player position information
- */
- InteractAction action;
- u16 item_i;
- *pkt >> (u8 &)action;
- *pkt >> item_i;
- std::istringstream tmp_is(pkt->readLongString(), std::ios::binary);
- PointedThing pointed;
- pointed.deSerialize(tmp_is);
- verbosestream << "TOSERVER_INTERACT: action=" << (int)action << ", item="
- << item_i << ", pointed=" << pointed.dump() << std::endl;
- session_t peer_id = pkt->getPeerId();
- RemotePlayer *player = m_env->getPlayer(peer_id);
- if (player == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- PlayerSAO *playersao = player->getPlayerSAO();
- if (playersao == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player object for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- if (playersao->isDead()) {
- actionstream << "Server: " << player->getName()
- << " tried to interact while dead; ignoring." << std::endl;
- if (pointed.type == POINTEDTHING_NODE) {
- // Re-send block to revert change on client-side
- RemoteClient *client = getClient(peer_id);
- v3s16 blockpos = getNodeBlockPos(pointed.node_undersurface);
- client->SetBlockNotSent(blockpos);
- }
- // Call callbacks
- m_script->on_cheat(playersao, "interacted_while_dead");
- return;
- }
- process_PlayerPos(player, playersao, pkt);
- v3f player_pos = playersao->getLastGoodPosition();
- // Update wielded item
- if (item_i >= player->getHotbarItemcount()) {
- actionstream << "Player: " << player->getName()
- << " tried to access item=" << item_i
- << " out of hotbar_itemcount="
- << player->getHotbarItemcount()
- << "; ignoring." << std::endl;
- return;
- }
- playersao->getPlayer()->setWieldIndex(item_i);
- // Get pointed to object (NULL if not POINTEDTYPE_OBJECT)
- ServerActiveObject *pointed_object = NULL;
- if (pointed.type == POINTEDTHING_OBJECT) {
- pointed_object = m_env->getActiveObject(pointed.object_id);
- if (pointed_object == NULL) {
- verbosestream << "TOSERVER_INTERACT: "
- "pointed object is NULL" << std::endl;
- return;
- }
- }
- /*
- Make sure the player is allowed to do it
- */
- if (!checkPriv(player->getName(), "interact")) {
- actionstream << player->getName() << " attempted to interact with " <<
- pointed.dump() << " without 'interact' privilege" << std::endl;
- if (pointed.type != POINTEDTHING_NODE)
- return;
- // Re-send block to revert change on client-side
- RemoteClient *client = getClient(peer_id);
- // Digging completed -> under
- if (action == INTERACT_DIGGING_COMPLETED) {
- v3s16 blockpos = getNodeBlockPos(pointed.node_undersurface);
- client->SetBlockNotSent(blockpos);
- }
- // Placement -> above
- else if (action == INTERACT_PLACE) {
- v3s16 blockpos = getNodeBlockPos(pointed.node_abovesurface);
- client->SetBlockNotSent(blockpos);
- }
- return;
- }
- /*
- Check that target is reasonably close
- */
- static thread_local const bool enable_anticheat =
- !g_settings->getBool("disable_anticheat");
- if ((action == INTERACT_START_DIGGING || action == INTERACT_DIGGING_COMPLETED ||
- action == INTERACT_PLACE || action == INTERACT_USE) &&
- enable_anticheat && !isSingleplayer()) {
- v3f target_pos = player_pos;
- if (pointed.type == POINTEDTHING_NODE) {
- target_pos = intToFloat(pointed.node_undersurface, BS);
- } else if (pointed.type == POINTEDTHING_OBJECT) {
- if (playersao->getId() == pointed_object->getId()) {
- actionstream << "Server: " << player->getName()
- << " attempted to interact with themselves" << std::endl;
- m_script->on_cheat(playersao, "interacted_with_self");
- return;
- }
- target_pos = pointed_object->getBasePosition();
- }
- float d = playersao->getEyePosition().getDistanceFrom(target_pos);
- if (!checkInteractDistance(player, d, pointed.dump())) {
- if (pointed.type == POINTEDTHING_NODE) {
- // Re-send block to revert change on client-side
- RemoteClient *client = getClient(peer_id);
- v3s16 blockpos = getNodeBlockPos(pointed.node_undersurface);
- client->SetBlockNotSent(blockpos);
- }
- return;
- }
- }
- /*
- If something goes wrong, this player is to blame
- */
- RollbackScopeActor rollback_scope(m_rollback,
- std::string("player:")+player->getName());
- switch (action) {
- // Start digging or punch object
- case INTERACT_START_DIGGING: {
- if (pointed.type == POINTEDTHING_NODE) {
- MapNode n(CONTENT_IGNORE);
- bool pos_ok;
- v3s16 p_under = pointed.node_undersurface;
- n = m_env->getMap().getNode(p_under, &pos_ok);
- if (!pos_ok) {
- infostream << "Server: Not punching: Node not found. "
- "Adding block to emerge queue." << std::endl;
- m_emerge->enqueueBlockEmerge(peer_id,
- getNodeBlockPos(pointed.node_abovesurface), false);
- }
- if (n.getContent() != CONTENT_IGNORE)
- m_script->node_on_punch(p_under, n, playersao, pointed);
- // Cheat prevention
- playersao->noCheatDigStart(p_under);
- return;
- }
- // Skip if the object can't be interacted with anymore
- if (pointed.type != POINTEDTHING_OBJECT || pointed_object->isGone())
- return;
- ItemStack selected_item, hand_item;
- ItemStack tool_item = playersao->getWieldedItem(&selected_item, &hand_item);
- ToolCapabilities toolcap =
- tool_item.getToolCapabilities(m_itemdef);
- v3f dir = (pointed_object->getBasePosition() -
- (playersao->getBasePosition() + playersao->getEyeOffset())
- ).normalize();
- float time_from_last_punch =
- playersao->resetTimeFromLastPunch();
- u32 wear = pointed_object->punch(dir, &toolcap, playersao,
- time_from_last_punch, tool_item.wear);
- // Callback may have changed item, so get it again
- playersao->getWieldedItem(&selected_item);
- bool changed = selected_item.addWear(wear, m_itemdef);
- if (changed)
- playersao->setWieldedItem(selected_item);
- return;
- } // action == INTERACT_START_DIGGING
- case INTERACT_STOP_DIGGING:
- // Nothing to do
- return;
- case INTERACT_DIGGING_COMPLETED: {
- // Only digging of nodes
- if (pointed.type != POINTEDTHING_NODE)
- return;
- bool pos_ok;
- v3s16 p_under = pointed.node_undersurface;
- MapNode n = m_env->getMap().getNode(p_under, &pos_ok);
- if (!pos_ok) {
- infostream << "Server: Not finishing digging: Node not found. "
- "Adding block to emerge queue." << std::endl;
- m_emerge->enqueueBlockEmerge(peer_id,
- getNodeBlockPos(pointed.node_abovesurface), false);
- }
- /* Cheat prevention */
- bool is_valid_dig = true;
- if (enable_anticheat && !isSingleplayer()) {
- v3s16 nocheat_p = playersao->getNoCheatDigPos();
- float nocheat_t = playersao->getNoCheatDigTime();
- playersao->noCheatDigEnd();
- // If player didn't start digging this, ignore dig
- if (nocheat_p != p_under) {
- infostream << "Server: " << player->getName()
- << " started digging "
- << PP(nocheat_p) << " and completed digging "
- << PP(p_under) << "; not digging." << std::endl;
- is_valid_dig = false;
- // Call callbacks
- m_script->on_cheat(playersao, "finished_unknown_dig");
- }
- // Get player's wielded item
- // See also: Game::handleDigging
- ItemStack selected_item, hand_item;
- playersao->getPlayer()->getWieldedItem(&selected_item, &hand_item);
- // Get diggability and expected digging time
- DigParams params = getDigParams(m_nodedef->get(n).groups,
- &selected_item.getToolCapabilities(m_itemdef),
- selected_item.wear);
- // If can't dig, try hand
- if (!params.diggable) {
- params = getDigParams(m_nodedef->get(n).groups,
- &hand_item.getToolCapabilities(m_itemdef));
- }
- // If can't dig, ignore dig
- if (!params.diggable) {
- infostream << "Server: " << player->getName()
- << " completed digging " << PP(p_under)
- << ", which is not diggable with tool; not digging."
- << std::endl;
- is_valid_dig = false;
- // Call callbacks
- m_script->on_cheat(playersao, "dug_unbreakable");
- }
- // Check digging time
- // If already invalidated, we don't have to
- if (!is_valid_dig) {
- // Well not our problem then
- }
- // Clean and long dig
- else if (params.time > 2.0 && nocheat_t * 1.2 > params.time) {
- // All is good, but grab time from pool; don't care if
- // it's actually available
- playersao->getDigPool().grab(params.time);
- }
- // Short or laggy dig
- // Try getting the time from pool
- else if (playersao->getDigPool().grab(params.time)) {
- // All is good
- }
- // Dig not possible
- else {
- infostream << "Server: " << player->getName()
- << " completed digging " << PP(p_under)
- << "too fast; not digging." << std::endl;
- is_valid_dig = false;
- // Call callbacks
- m_script->on_cheat(playersao, "dug_too_fast");
- }
- }
- /* Actually dig node */
- if (is_valid_dig && n.getContent() != CONTENT_IGNORE)
- m_script->node_on_dig(p_under, n, playersao);
- v3s16 blockpos = getNodeBlockPos(p_under);
- RemoteClient *client = getClient(peer_id);
- // Send unusual result (that is, node not being removed)
- if (m_env->getMap().getNode(p_under).getContent() != CONTENT_AIR)
- // Re-send block to revert change on client-side
- client->SetBlockNotSent(blockpos);
- else
- client->ResendBlockIfOnWire(blockpos);
- return;
- } // action == INTERACT_DIGGING_COMPLETED
- // Place block or right-click object
- case INTERACT_PLACE: {
- Optional<ItemStack> selected_item;
- getWieldedItem(playersao, selected_item);
- // Reset build time counter
- if (pointed.type == POINTEDTHING_NODE &&
- selected_item->getDefinition(m_itemdef).type == ITEM_NODE)
- getClient(peer_id)->m_time_from_building = 0.0;
- const bool had_prediction = !selected_item->getDefinition(m_itemdef).
- node_placement_prediction.empty();
- if (pointed.type == POINTEDTHING_OBJECT) {
- // Right click object
- // Skip if object can't be interacted with anymore
- if (pointed_object->isGone())
- return;
- actionstream << player->getName() << " right-clicks object "
- << pointed.object_id << ": "
- << pointed_object->getDescription() << std::endl;
- // Do stuff
- if (m_script->item_OnSecondaryUse(selected_item, playersao, pointed)) {
- if (selected_item.has_value() && playersao->setWieldedItem(*selected_item))
- SendInventory(playersao, true);
- }
- pointed_object->rightClick(playersao);
- } else if (m_script->item_OnPlace(selected_item, playersao, pointed)) {
- // Placement was handled in lua
- // Apply returned ItemStack
- if (selected_item.has_value() && playersao->setWieldedItem(*selected_item))
- SendInventory(playersao, true);
- }
- if (pointed.type != POINTEDTHING_NODE)
- return;
- // If item has node placement prediction, always send the
- // blocks to make sure the client knows what exactly happened
- RemoteClient *client = getClient(peer_id);
- v3s16 blockpos = getNodeBlockPos(pointed.node_abovesurface);
- v3s16 blockpos2 = getNodeBlockPos(pointed.node_undersurface);
- if (had_prediction) {
- client->SetBlockNotSent(blockpos);
- if (blockpos2 != blockpos)
- client->SetBlockNotSent(blockpos2);
- } else {
- client->ResendBlockIfOnWire(blockpos);
- if (blockpos2 != blockpos)
- client->ResendBlockIfOnWire(blockpos2);
- }
- return;
- } // action == INTERACT_PLACE
- case INTERACT_USE: {
- Optional<ItemStack> selected_item;
- getWieldedItem(playersao, selected_item);
- actionstream << player->getName() << " uses " << selected_item->name
- << ", pointing at " << pointed.dump() << std::endl;
- if (m_script->item_OnUse(selected_item, playersao, pointed)) {
- // Apply returned ItemStack
- if (selected_item.has_value() && playersao->setWieldedItem(*selected_item))
- SendInventory(playersao, true);
- }
- return;
- }
- // Rightclick air
- case INTERACT_ACTIVATE: {
- Optional<ItemStack> selected_item;
- getWieldedItem(playersao, selected_item);
- actionstream << player->getName() << " activates "
- << selected_item->name << std::endl;
- pointed.type = POINTEDTHING_NOTHING; // can only ever be NOTHING
- if (m_script->item_OnSecondaryUse(selected_item, playersao, pointed)) {
- // Apply returned ItemStack
- if (selected_item.has_value() && playersao->setWieldedItem(*selected_item))
- SendInventory(playersao, true);
- }
- return;
- }
- default:
- warningstream << "Server: Invalid action " << action << std::endl;
- }
- }
- void Server::handleCommand_RemovedSounds(NetworkPacket* pkt)
- {
- u16 num;
- *pkt >> num;
- for (u16 k = 0; k < num; k++) {
- s32 id;
- *pkt >> id;
- std::unordered_map<s32, ServerPlayingSound>::iterator i =
- m_playing_sounds.find(id);
- if (i == m_playing_sounds.end())
- continue;
- ServerPlayingSound &psound = i->second;
- psound.clients.erase(pkt->getPeerId());
- if (psound.clients.empty())
- m_playing_sounds.erase(i++);
- }
- }
- void Server::handleCommand_NodeMetaFields(NetworkPacket* pkt)
- {
- v3s16 p;
- std::string formname;
- u16 num;
- *pkt >> p >> formname >> num;
- StringMap fields;
- for (u16 k = 0; k < num; k++) {
- std::string fieldname;
- *pkt >> fieldname;
- fields[fieldname] = pkt->readLongString();
- }
- session_t peer_id = pkt->getPeerId();
- RemotePlayer *player = m_env->getPlayer(peer_id);
- if (player == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- PlayerSAO *playersao = player->getPlayerSAO();
- if (playersao == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player object for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- // If something goes wrong, this player is to blame
- RollbackScopeActor rollback_scope(m_rollback,
- std::string("player:")+player->getName());
- // Check the target node for rollback data; leave others unnoticed
- RollbackNode rn_old(&m_env->getMap(), p, this);
- m_script->node_on_receive_fields(p, formname, fields, playersao);
- // Report rollback data
- RollbackNode rn_new(&m_env->getMap(), p, this);
- if (rollback() && rn_new != rn_old) {
- RollbackAction action;
- action.setSetNode(p, rn_old, rn_new);
- rollback()->reportAction(action);
- }
- }
- void Server::handleCommand_InventoryFields(NetworkPacket* pkt)
- {
- std::string client_formspec_name;
- u16 num;
- *pkt >> client_formspec_name >> num;
- StringMap fields;
- for (u16 k = 0; k < num; k++) {
- std::string fieldname;
- *pkt >> fieldname;
- fields[fieldname] = pkt->readLongString();
- }
- session_t peer_id = pkt->getPeerId();
- RemotePlayer *player = m_env->getPlayer(peer_id);
- if (player == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- PlayerSAO *playersao = player->getPlayerSAO();
- if (playersao == NULL) {
- errorstream <<
- "Server::ProcessData(): Canceling: No player object for peer_id=" <<
- peer_id << " disconnecting peer!" << std::endl;
- DisconnectPeer(peer_id);
- return;
- }
- if (client_formspec_name.empty()) { // pass through inventory submits
- m_script->on_playerReceiveFields(playersao, client_formspec_name, fields);
- return;
- }
- // verify that we displayed the formspec to the user
- const auto peer_state_iterator = m_formspec_state_data.find(peer_id);
- if (peer_state_iterator != m_formspec_state_data.end()) {
- const std::string &server_formspec_name = peer_state_iterator->second;
- if (client_formspec_name == server_formspec_name) {
- auto it = fields.find("quit");
- if (it != fields.end() && it->second == "true")
- m_formspec_state_data.erase(peer_state_iterator);
- m_script->on_playerReceiveFields(playersao, client_formspec_name, fields);
- return;
- }
- actionstream << "'" << player->getName()
- << "' submitted formspec ('" << client_formspec_name
- << "') but the name of the formspec doesn't match the"
- " expected name ('" << server_formspec_name << "')";
- } else {
- actionstream << "'" << player->getName()
- << "' submitted formspec ('" << client_formspec_name
- << "') but server hasn't sent formspec to client";
- }
- actionstream << ", possible exploitation attempt" << std::endl;
- }
- void Server::handleCommand_FirstSrp(NetworkPacket* pkt)
- {
- session_t peer_id = pkt->getPeerId();
- RemoteClient *client = getClient(peer_id, CS_Invalid);
- ClientState cstate = client->getState();
- const std::string playername = client->getName();
- std::string salt, verification_key;
- std::string addr_s = getPeerAddress(peer_id).serializeString();
- u8 is_empty;
- *pkt >> salt >> verification_key >> is_empty;
- verbosestream << "Server: Got TOSERVER_FIRST_SRP from " << addr_s
- << ", with is_empty=" << (is_empty == 1) << std::endl;
- const bool empty_disallowed = !isSingleplayer() && is_empty == 1 &&
- g_settings->getBool("disallow_empty_password");
- // Either this packet is sent because the user is new or to change the password
- if (cstate == CS_HelloSent) {
- if (!client->isMechAllowed(AUTH_MECHANISM_FIRST_SRP)) {
- actionstream << "Server: Client from " << addr_s
- << " tried to set password without being "
- << "authenticated, or the username being new." << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_UNEXPECTED_DATA);
- return;
- }
- if (empty_disallowed) {
- actionstream << "Server: " << playername
- << " supplied empty password from " << addr_s << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_EMPTY_PASSWORD);
- return;
- }
- std::string initial_ver_key;
- initial_ver_key = encode_srp_verifier(verification_key, salt);
- // It is possible for multiple connections to get this far with the same
- // player name. In the end only one player with a given name will be emerged
- // (see Server::StateTwoClientInit) but we still have to be careful here.
- if (m_script->getAuth(playername, nullptr, nullptr)) {
- // Another client beat us to it
- actionstream << "Server: Client from " << addr_s
- << " tried to register " << playername << " a second time."
- << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_ALREADY_CONNECTED);
- return;
- }
- m_script->createAuth(playername, initial_ver_key);
- m_script->on_authplayer(playername, addr_s, true);
- acceptAuth(peer_id, false);
- } else {
- if (cstate < CS_SudoMode) {
- infostream << "Server::ProcessData(): Ignoring TOSERVER_FIRST_SRP from "
- << addr_s << ": " << "Client has wrong state " << cstate << "."
- << std::endl;
- return;
- }
- m_clients.event(peer_id, CSE_SudoLeave);
- if (empty_disallowed) {
- actionstream << "Server: " << playername
- << " supplied empty password" << std::endl;
- SendChatMessage(peer_id, ChatMessage(CHATMESSAGE_TYPE_SYSTEM,
- L"Changing to an empty password is not allowed."));
- return;
- }
- std::string pw_db_field = encode_srp_verifier(verification_key, salt);
- bool success = m_script->setPassword(playername, pw_db_field);
- if (success) {
- actionstream << playername << " changes password" << std::endl;
- SendChatMessage(peer_id, ChatMessage(CHATMESSAGE_TYPE_SYSTEM,
- L"Password change successful."));
- } else {
- actionstream << playername <<
- " tries to change password but it fails" << std::endl;
- SendChatMessage(peer_id, ChatMessage(CHATMESSAGE_TYPE_SYSTEM,
- L"Password change failed or unavailable."));
- }
- }
- }
- void Server::handleCommand_SrpBytesA(NetworkPacket* pkt)
- {
- session_t peer_id = pkt->getPeerId();
- RemoteClient *client = getClient(peer_id, CS_Invalid);
- ClientState cstate = client->getState();
- if (!((cstate == CS_HelloSent) || (cstate == CS_Active))) {
- actionstream << "Server: got SRP _A packet in wrong state " << cstate <<
- " from " << getPeerAddress(peer_id).serializeString() <<
- ". Ignoring." << std::endl;
- return;
- }
- const bool wantSudo = (cstate == CS_Active);
- if (client->chosen_mech != AUTH_MECHANISM_NONE) {
- actionstream << "Server: got SRP _A packet, while auth is already "
- "going on with mech " << client->chosen_mech << " from " <<
- getPeerAddress(peer_id).serializeString() <<
- " (wantSudo=" << wantSudo << "). Ignoring." << std::endl;
- if (wantSudo) {
- DenySudoAccess(peer_id);
- return;
- }
- DenyAccess(peer_id, SERVER_ACCESSDENIED_UNEXPECTED_DATA);
- return;
- }
- std::string bytes_A;
- u8 based_on;
- *pkt >> bytes_A >> based_on;
- infostream << "Server: TOSERVER_SRP_BYTES_A received with "
- << "based_on=" << int(based_on) << " and len_A="
- << bytes_A.length() << "." << std::endl;
- AuthMechanism chosen = (based_on == 0) ?
- AUTH_MECHANISM_LEGACY_PASSWORD : AUTH_MECHANISM_SRP;
- if (wantSudo) {
- if (!client->isSudoMechAllowed(chosen)) {
- actionstream << "Server: Player \"" << client->getName() <<
- "\" at " << getPeerAddress(peer_id).serializeString() <<
- " tried to change password using unallowed mech " << chosen <<
- "." << std::endl;
- DenySudoAccess(peer_id);
- return;
- }
- } else {
- if (!client->isMechAllowed(chosen)) {
- actionstream << "Server: Client tried to authenticate from " <<
- getPeerAddress(peer_id).serializeString() <<
- " using unallowed mech " << chosen << "." << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_UNEXPECTED_DATA);
- return;
- }
- }
- client->chosen_mech = chosen;
- std::string salt, verifier;
- if (based_on == 0) {
- generate_srp_verifier_and_salt(client->getName(), client->enc_pwd,
- &verifier, &salt);
- } else if (!decode_srp_verifier_and_salt(client->enc_pwd, &verifier, &salt)) {
- // Non-base64 errors should have been catched in the init handler
- actionstream << "Server: User " << client->getName() <<
- " tried to log in, but srp verifier field was invalid (most likely "
- "invalid base64)." << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_SERVER_FAIL);
- return;
- }
- char *bytes_B = 0;
- size_t len_B = 0;
- client->auth_data = srp_verifier_new(SRP_SHA256, SRP_NG_2048,
- client->getName().c_str(),
- (const unsigned char *) salt.c_str(), salt.size(),
- (const unsigned char *) verifier.c_str(), verifier.size(),
- (const unsigned char *) bytes_A.c_str(), bytes_A.size(),
- NULL, 0,
- (unsigned char **) &bytes_B, &len_B, NULL, NULL);
- if (!bytes_B) {
- actionstream << "Server: User " << client->getName()
- << " tried to log in, SRP-6a safety check violated in _A handler."
- << std::endl;
- if (wantSudo) {
- DenySudoAccess(peer_id);
- client->resetChosenMech();
- return;
- }
- DenyAccess(peer_id, SERVER_ACCESSDENIED_UNEXPECTED_DATA);
- return;
- }
- NetworkPacket resp_pkt(TOCLIENT_SRP_BYTES_S_B, 0, peer_id);
- resp_pkt << salt << std::string(bytes_B, len_B);
- Send(&resp_pkt);
- }
- void Server::handleCommand_SrpBytesM(NetworkPacket* pkt)
- {
- session_t peer_id = pkt->getPeerId();
- RemoteClient *client = getClient(peer_id, CS_Invalid);
- ClientState cstate = client->getState();
- const std::string addr_s = client->getAddress().serializeString();
- const std::string playername = client->getName();
- const bool wantSudo = (cstate == CS_Active);
- verbosestream << "Server: Received TOSERVER_SRP_BYTES_M." << std::endl;
- if (!((cstate == CS_HelloSent) || (cstate == CS_Active))) {
- warningstream << "Server: got SRP_M packet in wrong state "
- << cstate << " from " << addr_s << ". Ignoring." << std::endl;
- return;
- }
- if (client->chosen_mech != AUTH_MECHANISM_SRP &&
- client->chosen_mech != AUTH_MECHANISM_LEGACY_PASSWORD) {
- warningstream << "Server: got SRP_M packet, while auth "
- "is going on with mech " << client->chosen_mech << " from "
- << addr_s << " (wantSudo=" << wantSudo << "). Denying." << std::endl;
- if (wantSudo) {
- DenySudoAccess(peer_id);
- return;
- }
- DenyAccess(peer_id, SERVER_ACCESSDENIED_UNEXPECTED_DATA);
- return;
- }
- std::string bytes_M;
- *pkt >> bytes_M;
- if (srp_verifier_get_session_key_length((SRPVerifier *) client->auth_data)
- != bytes_M.size()) {
- actionstream << "Server: User " << playername << " at " << addr_s
- << " sent bytes_M with invalid length " << bytes_M.size() << std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_UNEXPECTED_DATA);
- return;
- }
- unsigned char *bytes_HAMK = 0;
- srp_verifier_verify_session((SRPVerifier *) client->auth_data,
- (unsigned char *)bytes_M.c_str(), &bytes_HAMK);
- if (!bytes_HAMK) {
- if (wantSudo) {
- actionstream << "Server: User " << playername << " at " << addr_s
- << " tried to change their password, but supplied wrong"
- << " (SRP) password for authentication." << std::endl;
- DenySudoAccess(peer_id);
- client->resetChosenMech();
- return;
- }
- actionstream << "Server: User " << playername << " at " << addr_s
- << " supplied wrong password (auth mechanism: SRP)." << std::endl;
- m_script->on_authplayer(playername, addr_s, false);
- DenyAccess(peer_id, SERVER_ACCESSDENIED_WRONG_PASSWORD);
- return;
- }
- if (client->create_player_on_auth_success) {
- m_script->createAuth(playername, client->enc_pwd);
- if (!m_script->getAuth(playername, nullptr, nullptr)) {
- errorstream << "Server: " << playername <<
- " cannot be authenticated (auth handler does not work?)" <<
- std::endl;
- DenyAccess(peer_id, SERVER_ACCESSDENIED_SERVER_FAIL);
- return;
- }
- client->create_player_on_auth_success = false;
- }
- m_script->on_authplayer(playername, addr_s, true);
- acceptAuth(peer_id, wantSudo);
- }
- /*
- * Mod channels
- */
- void Server::handleCommand_ModChannelJoin(NetworkPacket *pkt)
- {
- std::string channel_name;
- *pkt >> channel_name;
- session_t peer_id = pkt->getPeerId();
- NetworkPacket resp_pkt(TOCLIENT_MODCHANNEL_SIGNAL,
- 1 + 2 + channel_name.size(), peer_id);
- // Send signal to client to notify join succeed or not
- if (g_settings->getBool("enable_mod_channels") &&
- m_modchannel_mgr->joinChannel(channel_name, peer_id)) {
- resp_pkt << (u8) MODCHANNEL_SIGNAL_JOIN_OK;
- infostream << "Peer " << peer_id << " joined channel " <<
- channel_name << std::endl;
- }
- else {
- resp_pkt << (u8)MODCHANNEL_SIGNAL_JOIN_FAILURE;
- infostream << "Peer " << peer_id << " tried to join channel " <<
- channel_name << ", but was already registered." << std::endl;
- }
- resp_pkt << channel_name;
- Send(&resp_pkt);
- }
- void Server::handleCommand_ModChannelLeave(NetworkPacket *pkt)
- {
- std::string channel_name;
- *pkt >> channel_name;
- session_t peer_id = pkt->getPeerId();
- NetworkPacket resp_pkt(TOCLIENT_MODCHANNEL_SIGNAL,
- 1 + 2 + channel_name.size(), peer_id);
- // Send signal to client to notify join succeed or not
- if (g_settings->getBool("enable_mod_channels") &&
- m_modchannel_mgr->leaveChannel(channel_name, peer_id)) {
- resp_pkt << (u8)MODCHANNEL_SIGNAL_LEAVE_OK;
- infostream << "Peer " << peer_id << " left channel " << channel_name <<
- std::endl;
- } else {
- resp_pkt << (u8) MODCHANNEL_SIGNAL_LEAVE_FAILURE;
- infostream << "Peer " << peer_id << " left channel " << channel_name <<
- ", but was not registered." << std::endl;
- }
- resp_pkt << channel_name;
- Send(&resp_pkt);
- }
- void Server::handleCommand_ModChannelMsg(NetworkPacket *pkt)
- {
- std::string channel_name, channel_msg;
- *pkt >> channel_name >> channel_msg;
- session_t peer_id = pkt->getPeerId();
- verbosestream << "Mod channel message received from peer " << peer_id <<
- " on channel " << channel_name << " message: " << channel_msg <<
- std::endl;
- // If mod channels are not enabled, discard message
- if (!g_settings->getBool("enable_mod_channels")) {
- return;
- }
- // If channel not registered, signal it and ignore message
- if (!m_modchannel_mgr->channelRegistered(channel_name)) {
- NetworkPacket resp_pkt(TOCLIENT_MODCHANNEL_SIGNAL,
- 1 + 2 + channel_name.size(), peer_id);
- resp_pkt << (u8)MODCHANNEL_SIGNAL_CHANNEL_NOT_REGISTERED << channel_name;
- Send(&resp_pkt);
- return;
- }
- // @TODO: filter, rate limit
- broadcastModChannelMessage(channel_name, channel_msg, peer_id);
- }
- void Server::handleCommand_HaveMedia(NetworkPacket *pkt)
- {
- std::vector<u32> tokens;
- u8 numtokens;
- *pkt >> numtokens;
- for (u16 i = 0; i < numtokens; i++) {
- u32 n;
- *pkt >> n;
- tokens.emplace_back(n);
- }
- const session_t peer_id = pkt->getPeerId();
- auto player = m_env->getPlayer(peer_id);
- for (const u32 token : tokens) {
- auto it = m_pending_dyn_media.find(token);
- if (it == m_pending_dyn_media.end())
- continue;
- if (it->second.waiting_players.count(peer_id)) {
- it->second.waiting_players.erase(peer_id);
- if (player)
- getScriptIface()->on_dynamic_media_added(token, player->getName());
- }
- }
- }
|