netconn.c

   1 /*
   2 Copyright (C) 1996-1997 Id Software, Inc.
   3 Copyright (C) 2002 Mathieu Olivier
   4 Copyright (C) 2003 Forest Hale
   5
   6 This program is free software; you can redistribute it and/or
   7 modify it under the terms of the GNU General Public License
   8 as published by the Free Software Foundation; either version 2
   9 of the License, or (at your option) any later version.
  10
  11 This program is distributed in the hope that it will be useful,
  12 but WITHOUT ANY WARRANTY; without even the implied warranty of
  13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  14
  15 See the GNU General Public License for more details.
  16
  17 You should have received a copy of the GNU General Public License
  18 along with this program; if not, write to the Free Software
  19 Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
  20
  21 */
  22
  23
  24 #include "quakedef.h"
  25 #include "lhnet.h"
  26
  27 // for secure rcon authentication
  28 #include "hmac.h"
  29 #include "mdfour.h"
  30 #include <time.h>
  31
  32 #define QWMASTER_PORT 27000
  33 #define DPMASTER_PORT 27950
  34
  35 // note this defaults on for dedicated servers, off for listen servers
  36 cvar_t sv_public = {0, "sv_public", "0", "1: advertises this server on the master server (so that players can find it in the server browser); 0: allow direct queries only; -1: do not respond to direct queries; -2: do not allow anyone to connect"};
  37 static cvar_t sv_heartbeatperiod = {CVAR_SAVE, "sv_heartbeatperiod", "120", "how often to send heartbeat in seconds (only used if sv_public is 1)"};
  38
  39 static cvar_t sv_masters [] =
  40 {
  41         {CVAR_SAVE, "sv_master1", "", "user-chosen master server 1"},
  42         {CVAR_SAVE, "sv_master2", "", "user-chosen master server 2"},
  43         {CVAR_SAVE, "sv_master3", "", "user-chosen master server 3"},
  44         {CVAR_SAVE, "sv_master4", "", "user-chosen master server 4"},
  45         {0, "sv_masterextra1", "69.59.212.88", "ghdigital.com - default master server 1 (admin: LordHavoc)"}, // admin: LordHavoc
  46         {0, "sv_masterextra2", "64.22.107.125", "dpmaster.deathmask.net - default master server 2 (admin: Willis)"}, // admin: Willis
  47         {0, "sv_masterextra3", "92.62.40.73", "dpmaster.tchr.no - default master server 3 (admin: tChr)"}, // admin: tChr
  48         {0, NULL, NULL, NULL}
  49 };
  50
  51 static cvar_t sv_qwmasters [] =
  52 {
  53         {CVAR_SAVE, "sv_qwmaster1", "", "user-chosen qwmaster server 1"},
  54         {CVAR_SAVE, "sv_qwmaster2", "", "user-chosen qwmaster server 2"},
  55         {CVAR_SAVE, "sv_qwmaster3", "", "user-chosen qwmaster server 3"},
  56         {CVAR_SAVE, "sv_qwmaster4", "", "user-chosen qwmaster server 4"},
  57         {0, "sv_qwmasterextra1", "master.quakeservers.net:27000", "Global master server. (admin: unknown)"},
  58         {0, "sv_qwmasterextra2", "asgaard.morphos-team.net:27000", "Global master server. (admin: unknown)"},
  59         {0, "sv_qwmasterextra3", "qwmaster.ocrana.de:27000", "German master server. (admin: unknown)"},
  60         {0, "sv_qwmasterextra4", "masterserver.exhale.de:27000", "German master server. (admin: unknown)"},
  61         {0, "sv_qwmasterextra5", "kubus.rulez.pl:27000", "Poland master server. (admin: unknown)"},
  62         {0, NULL, NULL, NULL}
  63 };
  64
  65 static double nextheartbeattime = 0;
  66
  67 sizebuf_t net_message;
  68 static unsigned char net_message_buf[NET_MAXMESSAGE];
  69
  70 cvar_t net_messagetimeout = {0, "net_messagetimeout","300", "drops players who have not sent any packets for this many seconds"};
  71 cvar_t net_connecttimeout = {0, "net_connecttimeout","15", "after requesting a connection, the client must reply within this many seconds or be dropped (cuts down on connect floods). Must be above 10 seconds."};
  72 cvar_t net_connectfloodblockingtimeout = {0, "net_connectfloodblockingtimeout", "5", "when a connection packet is received, it will block all future connect packets from that IP address for this many seconds (cuts down on connect floods)"};
  73 cvar_t hostname = {CVAR_SAVE, "hostname", "UNNAMED", "server message to show in server browser"};
  74 cvar_t developer_networking = {0, "developer_networking", "0", "prints all received and sent packets (recommended only for debugging)"};
  75
  76 cvar_t cl_netlocalping = {0, "cl_netlocalping","0", "lags local loopback connection by this much ping time (useful to play more fairly on your own server with people with higher pings)"};
  77 static cvar_t cl_netpacketloss_send = {0, "cl_netpacketloss_send","0", "drops this percentage of outgoing packets, useful for testing network protocol robustness (jerky movement, prediction errors, etc)"};
  78 static cvar_t cl_netpacketloss_receive = {0, "cl_netpacketloss_receive","0", "drops this percentage of incoming packets, useful for testing network protocol robustness (jerky movement, effects failing to start, sounds failing to play, etc)"};
  79 static cvar_t net_slist_queriespersecond = {0, "net_slist_queriespersecond", "20", "how many server information requests to send per second"};
  80 static cvar_t net_slist_queriesperframe = {0, "net_slist_queriesperframe", "4", "maximum number of server information requests to send each rendered frame (guards against low framerates causing problems)"};
  81 static cvar_t net_slist_timeout = {0, "net_slist_timeout", "4", "how long to listen for a server information response before giving up"};
  82 static cvar_t net_slist_pause = {0, "net_slist_pause", "0", "when set to 1, the server list won't update until it is set back to 0"};
  83 static cvar_t net_slist_maxtries = {0, "net_slist_maxtries", "3", "how many times to ask the same server for information (more times gives better ping reports but takes longer)"};
  84 static cvar_t net_slist_favorites = {CVAR_SAVE | CVAR_NQUSERINFOHACK, "net_slist_favorites", "", "contains a list of IP addresses and ports to always query explicitly"};
  85 static cvar_t gameversion = {0, "gameversion", "0", "version of game data (mod-specific) to be sent to querying clients"};
  86 static cvar_t gameversion_min = {0, "gameversion_min", "-1", "minimum version of game data (mod-specific), when client and server gameversion mismatch in the server browser the server is shown as incompatible; if -1, gameversion is used alone"};
  87 static cvar_t gameversion_max = {0, "gameversion_max", "-1", "maximum version of game data (mod-specific), when client and server gameversion mismatch in the server browser the server is shown as incompatible; if -1, gameversion is used alone"};
  88 static cvar_t rcon_restricted_password = {CVAR_PRIVATE, "rcon_restricted_password", "", "password to authenticate rcon commands in restricted mode; may be set to a string of the form user1:pass1 user2:pass2 user3:pass3 to allow multiple user accounts - the client then has to specify ONE of these combinations"};
  89 static cvar_t rcon_restricted_commands = {0, "rcon_restricted_commands", "", "allowed commands for rcon when the restricted mode password was used"};
  90 static cvar_t rcon_secure_maxdiff = {0, "rcon_secure_maxdiff", "5", "maximum time difference between rcon request and server system clock (to protect against replay attack)"};
  91 extern cvar_t rcon_secure;
  92 extern cvar_t rcon_secure_challengetimeout;
  93
  94 /* statistic counters */
  95 static int packetsSent = 0;
  96 static int packetsReSent = 0;
  97 static int packetsReceived = 0;
  98 static int receivedDuplicateCount = 0;
  99 static int droppedDatagrams = 0;
 100
 101 static int unreliableMessagesSent = 0;
 102 static int unreliableMessagesReceived = 0;
 103 static int reliableMessagesSent = 0;
 104 static int reliableMessagesReceived = 0;
 105
 106 double masterquerytime = -1000;
 107 int masterquerycount = 0;
 108 int masterreplycount = 0;
 109 int serverquerycount = 0;
 110 int serverreplycount = 0;
 111
 112 /// this is only false if there are still servers left to query
 113 static qboolean serverlist_querysleep = true;
 114 static qboolean serverlist_paused = false;
 115 /// this is pushed a second or two ahead of realtime whenever a master server
 116 /// reply is received, to avoid issuing queries while master replies are still
 117 /// flooding in (which would make a mess of the ping times)
 118 static double serverlist_querywaittime = 0;
 119
 120 static unsigned char sendbuffer[NET_HEADERSIZE+NET_MAXMESSAGE];
 121 static unsigned char readbuffer[NET_HEADERSIZE+NET_MAXMESSAGE];
 122 static unsigned char cryptosendbuffer[NET_HEADERSIZE+NET_MAXMESSAGE+CRYPTO_HEADERSIZE];
 123 static unsigned char cryptoreadbuffer[NET_HEADERSIZE+NET_MAXMESSAGE+CRYPTO_HEADERSIZE];
 124
 125 static int cl_numsockets;
 126 static lhnetsocket_t *cl_sockets[16];
 127 static int sv_numsockets;
 128 static lhnetsocket_t *sv_sockets[16];
 129
 130 netconn_t *netconn_list = NULL;
 131 mempool_t *netconn_mempool = NULL;
 132
 133 cvar_t cl_netport = {0, "cl_port", "0", "forces client to use chosen port number if not 0"};
 134 cvar_t sv_netport = {0, "port", "26000", "server port for players to connect to"};
 135 cvar_t net_address = {0, "net_address", "", "network address to open ipv4 ports on (if empty, use default interfaces)"};
 136 cvar_t net_address_ipv6 = {0, "net_address_ipv6", "", "network address to open ipv6 ports on (if empty, use default interfaces)"};
 137
 138 char cl_net_extresponse[NET_EXTRESPONSE_MAX][1400];
 139 int cl_net_extresponse_count = 0;
 140 int cl_net_extresponse_last = 0;
 141
 142 char sv_net_extresponse[NET_EXTRESPONSE_MAX][1400];
 143 int sv_net_extresponse_count = 0;
 144 int sv_net_extresponse_last = 0;
 145
 146 // ServerList interface
 147 serverlist_mask_t serverlist_andmasks[SERVERLIST_ANDMASKCOUNT];
 148 serverlist_mask_t serverlist_ormasks[SERVERLIST_ORMASKCOUNT];
 149
 150 serverlist_infofield_t serverlist_sortbyfield;
 151 int serverlist_sortflags;
 152
 153 int serverlist_viewcount = 0;
 154 serverlist_entry_t *serverlist_viewlist[SERVERLIST_VIEWLISTSIZE];
 155
 156 int serverlist_cachecount;
 157 serverlist_entry_t serverlist_cache[SERVERLIST_TOTALSIZE];
 158
 159 qboolean serverlist_consoleoutput;
 160
 161 static int nFavorites = 0;
 162 static lhnetaddress_t favorites[256];
 163
 164 void NetConn_UpdateFavorites(void)
 165 {
 166         const char *p;
 167         nFavorites = 0;
 168         p = net_slist_favorites.string;
 169         while((size_t) nFavorites < sizeof(favorites) / sizeof(*favorites) && COM_ParseToken_Console(&p))
 170         {
 171                 if(LHNETADDRESS_FromString(&favorites[nFavorites], com_token, 26000))
 172                         ++nFavorites;
 173         }
 174 }
 175
 176 /// helper function to insert a value into the viewset
 177 /// spare entries will be removed
 178 static void _ServerList_ViewList_Helper_InsertBefore( int index, serverlist_entry_t *entry )
 179 {
 180     int i;
 181         if( serverlist_viewcount < SERVERLIST_VIEWLISTSIZE ) {
 182                 i = serverlist_viewcount++;
 183         } else {
 184                 i = SERVERLIST_VIEWLISTSIZE - 1;
 185         }
 186
 187         for( ; i > index ; i-- )
 188                 serverlist_viewlist[ i ] = serverlist_viewlist[ i - 1 ];
 189
 190         serverlist_viewlist[index] = entry;
 191 }
 192
 193 /// we suppose serverlist_viewcount to be valid, ie > 0
 194 static void _ServerList_ViewList_Helper_Remove( int index )
 195 {
 196         serverlist_viewcount--;
 197         for( ; index < serverlist_viewcount ; index++ )
 198                 serverlist_viewlist[index] = serverlist_viewlist[index + 1];
 199 }
 200
 201 /// \returns true if A should be inserted before B
 202 static qboolean _ServerList_Entry_Compare( serverlist_entry_t *A, serverlist_entry_t *B )
 203 {
 204         int result = 0; // > 0 if for numbers A > B and for text if A < B
 205
 206         if( serverlist_sortflags & SLSF_FAVORITESFIRST )
 207         {
 208                 if(A->info.isfavorite != B->info.isfavorite)
 209                         return A->info.isfavorite;
 210         }
 211
 212         switch( serverlist_sortbyfield ) {
 213                 case SLIF_PING:
 214                         result = A->info.ping - B->info.ping;
 215                         break;
 216                 case SLIF_MAXPLAYERS:
 217                         result = A->info.maxplayers - B->info.maxplayers;
 218                         break;
 219                 case SLIF_NUMPLAYERS:
 220                         result = A->info.numplayers - B->info.numplayers;
 221                         break;
 222                 case SLIF_NUMBOTS:
 223                         result = A->info.numbots - B->info.numbots;
 224                         break;
 225                 case SLIF_NUMHUMANS:
 226                         result = A->info.numhumans - B->info.numhumans;
 227                         break;
 228                 case SLIF_FREESLOTS:
 229                         result = A->info.freeslots - B->info.freeslots;
 230                         break;
 231                 case SLIF_PROTOCOL:
 232                         result = A->info.protocol - B->info.protocol;
 233                         break;
 234                 case SLIF_CNAME:
 235                         result = strcmp( B->info.cname, A->info.cname );
 236                         break;
 237                 case SLIF_GAME:
 238                         result = strcasecmp( B->info.game, A->info.game );
 239                         break;
 240                 case SLIF_MAP:
 241                         result = strcasecmp( B->info.map, A->info.map );
 242                         break;
 243                 case SLIF_MOD:
 244                         result = strcasecmp( B->info.mod, A->info.mod );
 245                         break;
 246                 case SLIF_NAME:
 247                         result = strcasecmp( B->info.name, A->info.name );
 248                         break;
 249                 case SLIF_QCSTATUS:
 250                         result = strcasecmp( B->info.qcstatus, A->info.qcstatus ); // not really THAT useful, though
 251                         break;
 252                 case SLIF_ISFAVORITE:
 253                         result = !!B->info.isfavorite - !!A->info.isfavorite;
 254                         break;
 255                 default:
 256                         Con_DPrint( "_ServerList_Entry_Compare: Bad serverlist_sortbyfield!\n" );
 257                         break;
 258         }
 259
 260         if (result != 0)
 261         {
 262                 if( serverlist_sortflags & SLSF_DESCENDING )
 263                         return result > 0;
 264                 else
 265                         return result < 0;
 266         }
 267
 268         // if the chosen sort key is identical, sort by index
 269         // (makes this a stable sort, so that later replies from servers won't
 270         //  shuffle the servers around when they have the same ping)
 271         return A < B;
 272 }
 273
 274 static qboolean _ServerList_CompareInt( int A, serverlist_maskop_t op, int B )
 275 {
 276         // This should actually be done with some intermediate and end-of-function return
 277         switch( op ) {
 278                 case SLMO_LESS:
 279                         return A < B;
 280                 case SLMO_LESSEQUAL:
 281                         return A <= B;
 282                 case SLMO_EQUAL:
 283                         return A == B;
 284                 case SLMO_GREATER:
 285                         return A > B;
 286                 case SLMO_NOTEQUAL:
 287                         return A != B;
 288                 case SLMO_GREATEREQUAL:
 289                 case SLMO_CONTAINS:
 290                 case SLMO_NOTCONTAIN:
 291                 case SLMO_STARTSWITH:
 292                 case SLMO_NOTSTARTSWITH:
 293                         return A >= B;
 294                 default:
 295                         Con_DPrint( "_ServerList_CompareInt: Bad op!\n" );
 296                         return false;
 297         }
 298 }
 299
 300 static qboolean _ServerList_CompareStr( const char *A, serverlist_maskop_t op, const char *B )
 301 {
 302         int i;
 303         char bufferA[ 1400 ], bufferB[ 1400 ]; // should be more than enough
 304         COM_StringDecolorize(A, 0, bufferA, sizeof(bufferA), false);
 305         for (i = 0;i < (int)sizeof(bufferA)-1 && bufferA[i];i++)
 306                 bufferA[i] = (bufferA[i] >= 'A' && bufferA[i] <= 'Z') ? (bufferA[i] + 'a' - 'A') : bufferA[i];
 307         bufferA[i] = 0;
 308         for (i = 0;i < (int)sizeof(bufferB)-1 && B[i];i++)
 309                 bufferB[i] = (B[i] >= 'A' && B[i] <= 'Z') ? (B[i] + 'a' - 'A') : B[i];
 310         bufferB[i] = 0;
 311
 312         // Same here, also using an intermediate & final return would be more appropriate
 313         // A info B mask
 314         switch( op ) {
 315                 case SLMO_CONTAINS:
 316                         return *bufferB && !!strstr( bufferA, bufferB ); // we want a real bool
 317                 case SLMO_NOTCONTAIN:
 318                         return !*bufferB || !strstr( bufferA, bufferB );
 319                 case SLMO_STARTSWITH:
 320                         //Con_Printf("startsWith: %s %s\n", bufferA, bufferB);
 321                         return *bufferB && !memcmp(bufferA, bufferB, strlen(bufferB));
 322                 case SLMO_NOTSTARTSWITH:
 323                         return !*bufferB || memcmp(bufferA, bufferB, strlen(bufferB));
 324                 case SLMO_LESS:
 325                         return strcmp( bufferA, bufferB ) < 0;
 326                 case SLMO_LESSEQUAL:
 327                         return strcmp( bufferA, bufferB ) <= 0;
 328                 case SLMO_EQUAL:
 329                         return strcmp( bufferA, bufferB ) == 0;
 330                 case SLMO_GREATER:
 331                         return strcmp( bufferA, bufferB ) > 0;
 332                 case SLMO_NOTEQUAL:
 333                         return strcmp( bufferA, bufferB ) != 0;
 334                 case SLMO_GREATEREQUAL:
 335                         return strcmp( bufferA, bufferB ) >= 0;
 336                 default:
 337                         Con_DPrint( "_ServerList_CompareStr: Bad op!\n" );
 338                         return false;
 339         }
 340 }
 341
 342 static qboolean _ServerList_Entry_Mask( serverlist_mask_t *mask, serverlist_info_t *info )
 343 {
 344         if( !_ServerList_CompareInt( info->ping, mask->tests[SLIF_PING], mask->info.ping ) )
 345                 return false;
 346         if( !_ServerList_CompareInt( info->maxplayers, mask->tests[SLIF_MAXPLAYERS], mask->info.maxplayers ) )
 347                 return false;
 348         if( !_ServerList_CompareInt( info->numplayers, mask->tests[SLIF_NUMPLAYERS], mask->info.numplayers ) )
 349                 return false;
 350         if( !_ServerList_CompareInt( info->numbots, mask->tests[SLIF_NUMBOTS], mask->info.numbots ) )
 351                 return false;
 352         if( !_ServerList_CompareInt( info->numhumans, mask->tests[SLIF_NUMHUMANS], mask->info.numhumans ) )
 353                 return false;
 354         if( !_ServerList_CompareInt( info->freeslots, mask->tests[SLIF_FREESLOTS], mask->info.freeslots ) )
 355                 return false;
 356         if( !_ServerList_CompareInt( info->protocol, mask->tests[SLIF_PROTOCOL], mask->info.protocol ))
 357                 return false;
 358         if( *mask->info.cname
 359                 && !_ServerList_CompareStr( info->cname, mask->tests[SLIF_CNAME], mask->info.cname ) )
 360                 return false;
 361         if( *mask->info.game
 362                 && !_ServerList_CompareStr( info->game, mask->tests[SLIF_GAME], mask->info.game ) )
 363                 return false;
 364         if( *mask->info.mod
 365                 && !_ServerList_CompareStr( info->mod, mask->tests[SLIF_MOD], mask->info.mod ) )
 366                 return false;
 367         if( *mask->info.map
 368                 && !_ServerList_CompareStr( info->map, mask->tests[SLIF_MAP], mask->info.map ) )
 369                 return false;
 370         if( *mask->info.name
 371                 && !_ServerList_CompareStr( info->name, mask->tests[SLIF_NAME], mask->info.name ) )
 372                 return false;
 373         if( *mask->info.qcstatus
 374                 && !_ServerList_CompareStr( info->qcstatus, mask->tests[SLIF_QCSTATUS], mask->info.qcstatus ) )
 375                 return false;
 376         if( *mask->info.players
 377                 && !_ServerList_CompareStr( info->players, mask->tests[SLIF_PLAYERS], mask->info.players ) )
 378                 return false;
 379         if( !_ServerList_CompareInt( info->isfavorite, mask->tests[SLIF_ISFAVORITE], mask->info.isfavorite ))
 380                 return false;
 381         return true;
 382 }
 383
 384 static void ServerList_ViewList_Insert( serverlist_entry_t *entry )
 385 {
 386         int start, end, mid, i;
 387         lhnetaddress_t addr;
 388
 389         // reject incompatible servers
 390         if(
 391                 entry->info.gameversion != gameversion.integer
 392                 &&
 393                 !(
 394                            gameversion_min.integer >= 0 // min/max range set by user/mod?
 395                         && gameversion_max.integer >= 0
 396                         && gameversion_min.integer >= entry->info.gameversion // version of server in min/max range?
 397                         && gameversion_max.integer <= entry->info.gameversion
 398                  )
 399         )
 400                 return;
 401
 402         // refresh the "favorite" status
 403         entry->info.isfavorite = false;
 404         if(LHNETADDRESS_FromString(&addr, entry->info.cname, 26000))
 405         {
 406                 for(i = 0; i < nFavorites; ++i)
 407                 {
 408                         if(LHNETADDRESS_Compare(&addr, &favorites[i]) == 0)
 409                         {
 410                                 entry->info.isfavorite = true;
 411                                 break;
 412                         }
 413                 }
 414         }
 415
 416         // FIXME: change this to be more readable (...)
 417         // now check whether it passes through the masks
 418         for( start = 0 ; start < SERVERLIST_ANDMASKCOUNT && serverlist_andmasks[start].active; start++ )
 419                 if( !_ServerList_Entry_Mask( &serverlist_andmasks[start], &entry->info ) )
 420                         return;
 421
 422         for( start = 0 ; start < SERVERLIST_ORMASKCOUNT && serverlist_ormasks[start].active ; start++ )
 423                 if( _ServerList_Entry_Mask( &serverlist_ormasks[start], &entry->info ) )
 424                         break;
 425         if( start == SERVERLIST_ORMASKCOUNT || (start > 0 && !serverlist_ormasks[start].active) )
 426                 return;
 427
 428         if( !serverlist_viewcount ) {
 429                 _ServerList_ViewList_Helper_InsertBefore( 0, entry );
 430                 return;
 431         }
 432         // ok, insert it, we just need to find out where exactly:
 433
 434         // two special cases
 435         // check whether to insert it as new first item
 436         if( _ServerList_Entry_Compare( entry, serverlist_viewlist[0] ) ) {
 437                 _ServerList_ViewList_Helper_InsertBefore( 0, entry );
 438                 return;
 439         } // check whether to insert it as new last item
 440         else if( !_ServerList_Entry_Compare( entry, serverlist_viewlist[serverlist_viewcount - 1] ) ) {
 441                 _ServerList_ViewList_Helper_InsertBefore( serverlist_viewcount, entry );
 442                 return;
 443         }
 444         start = 0;
 445         end = serverlist_viewcount - 1;
 446         while( end > start + 1 )
 447         {
 448                 mid = (start + end) / 2;
 449                 // test the item that lies in the middle between start and end
 450                 if( _ServerList_Entry_Compare( entry, serverlist_viewlist[mid] ) )
 451                         // the item has to be in the upper half
 452                         end = mid;
 453                 else
 454                         // the item has to be in the lower half
 455                         start = mid;
 456         }
 457         _ServerList_ViewList_Helper_InsertBefore( start + 1, entry );
 458 }
 459
 460 static void ServerList_ViewList_Remove( serverlist_entry_t *entry )
 461 {
 462         int i;
 463         for( i = 0; i < serverlist_viewcount; i++ )
 464         {
 465                 if (serverlist_viewlist[i] == entry)
 466                 {
 467                         _ServerList_ViewList_Helper_Remove(i);
 468                         break;
 469                 }
 470         }
 471 }
 472
 473 void ServerList_RebuildViewList(void)
 474 {
 475         int i;
 476
 477         serverlist_viewcount = 0;
 478         for( i = 0 ; i < serverlist_cachecount ; i++ ) {
 479                 serverlist_entry_t *entry = &serverlist_cache[i];
 480                 // also display entries that are currently being refreshed [11/8/2007 Black]
 481                 if( entry->query == SQS_QUERIED || entry->query == SQS_REFRESHING )
 482                         ServerList_ViewList_Insert( entry );
 483         }
 484 }
 485
 486 void ServerList_ResetMasks(void)
 487 {
 488         int i;
 489
 490         memset( &serverlist_andmasks, 0, sizeof( serverlist_andmasks ) );
 491         memset( &serverlist_ormasks, 0, sizeof( serverlist_ormasks ) );
 492         // numbots needs to be compared to -1 to always succeed
 493         for(i = 0; i < SERVERLIST_ANDMASKCOUNT; ++i)
 494                 serverlist_andmasks[i].info.numbots = -1;
 495         for(i = 0; i < SERVERLIST_ORMASKCOUNT; ++i)
 496                 serverlist_ormasks[i].info.numbots = -1;
 497 }
 498
 499 void ServerList_GetPlayerStatistics(int *numplayerspointer, int *maxplayerspointer)
 500 {
 501         int i;
 502         int numplayers = 0, maxplayers = 0;
 503         for (i = 0;i < serverlist_cachecount;i++)
 504         {
 505                 if (serverlist_cache[i].query == SQS_QUERIED)
 506                 {
 507                         numplayers += serverlist_cache[i].info.numhumans;
 508                         maxplayers += serverlist_cache[i].info.maxplayers;
 509                 }
 510         }
 511         *numplayerspointer = numplayers;
 512         *maxplayerspointer = maxplayers;
 513 }
 514
 515 #if 0
 516 static void _ServerList_Test(void)
 517 {
 518         int i;
 519         for( i = 0 ; i < 1024 ; i++ ) {
 520                 memset( &serverlist_cache[serverlist_cachecount], 0, sizeof( serverlist_entry_t ) );
 521                 serverlist_cache[serverlist_cachecount].info.ping = 1000 + 1024 - i;
 522                 dpsnprintf( serverlist_cache[serverlist_cachecount].info.name, sizeof(serverlist_cache[serverlist_cachecount].info.name), "Black's ServerList Test %i", i );
 523                 serverlist_cache[serverlist_cachecount].finished = true;
 524                 dpsnprintf( serverlist_cache[serverlist_cachecount].line1, sizeof(serverlist_cache[serverlist_cachecount].info.line1), "%i %s", serverlist_cache[serverlist_cachecount].info.ping, serverlist_cache[serverlist_cachecount].info.name );
 525                 ServerList_ViewList_Insert( &serverlist_cache[serverlist_cachecount] );
 526                 serverlist_cachecount++;
 527         }
 528 }
 529 #endif
 530
 531 void ServerList_QueryList(qboolean resetcache, qboolean querydp, qboolean queryqw, qboolean consoleoutput)
 532 {
 533         masterquerytime = realtime;
 534         masterquerycount = 0;
 535         masterreplycount = 0;
 536         if( resetcache ) {
 537                 serverquerycount = 0;
 538                 serverreplycount = 0;
 539                 serverlist_cachecount = 0;
 540                 serverlist_viewcount = 0;
 541         } else {
 542                 // refresh all entries
 543                 int n;
 544                 for( n = 0 ; n < serverlist_cachecount ; n++ ) {
 545                         serverlist_entry_t *entry = &serverlist_cache[ n ];
 546                         entry->query = SQS_REFRESHING;
 547                         entry->querycounter = 0;
 548                 }
 549         }
 550         serverlist_consoleoutput = consoleoutput;
 551
 552         //_ServerList_Test();
 553
 554         NetConn_QueryMasters(querydp, queryqw);
 555 }
 556
 557 // rest
 558
 559 int NetConn_Read(lhnetsocket_t *mysocket, void *data, int maxlength, lhnetaddress_t *peeraddress)
 560 {
 561         int length = LHNET_Read(mysocket, data, maxlength, peeraddress);
 562         int i;
 563         if (length == 0)
 564                 return 0;
 565         if (cl_netpacketloss_receive.integer)
 566                 for (i = 0;i < cl_numsockets;i++)
 567                         if (cl_sockets[i] == mysocket && (rand() % 100) < cl_netpacketloss_receive.integer)
 568                                 return 0;
 569         if (developer_networking.integer)
 570         {
 571                 char addressstring[128], addressstring2[128];
 572                 LHNETADDRESS_ToString(LHNET_AddressFromSocket(mysocket), addressstring, sizeof(addressstring), true);
 573                 if (length > 0)
 574                 {
 575                         LHNETADDRESS_ToString(peeraddress, addressstring2, sizeof(addressstring2), true);
 576                         Con_Printf("LHNET_Read(%p (%s), %p, %i, %p) = %i from %s:\n", (void *)mysocket, addressstring, (void *)data, maxlength, (void *)peeraddress, length, addressstring2);
 577                         Com_HexDumpToConsole((unsigned char *)data, length);
 578                 }
 579                 else
 580                         Con_Printf("LHNET_Read(%p (%s), %p, %i, %p) = %i\n", (void *)mysocket, addressstring, (void *)data, maxlength, (void *)peeraddress, length);
 581         }
 582         return length;
 583 }
 584
 585 int NetConn_Write(lhnetsocket_t *mysocket, const void *data, int length, const lhnetaddress_t *peeraddress)
 586 {
 587         int ret;
 588         int i;
 589         if (cl_netpacketloss_send.integer)
 590                 for (i = 0;i < cl_numsockets;i++)
 591                         if (cl_sockets[i] == mysocket && (rand() % 100) < cl_netpacketloss_send.integer)
 592                                 return length;
 593         ret = LHNET_Write(mysocket, data, length, peeraddress);
 594         if (developer_networking.integer)
 595         {
 596                 char addressstring[128], addressstring2[128];
 597                 LHNETADDRESS_ToString(LHNET_AddressFromSocket(mysocket), addressstring, sizeof(addressstring), true);
 598                 LHNETADDRESS_ToString(peeraddress, addressstring2, sizeof(addressstring2), true);
 599                 Con_Printf("LHNET_Write(%p (%s), %p, %i, %p (%s)) = %i%s\n", (void *)mysocket, addressstring, (void *)data, length, (void *)peeraddress, addressstring2, length, ret == length ? "" : " (ERROR)");
 600                 Com_HexDumpToConsole((unsigned char *)data, length);
 601         }
 602         return ret;
 603 }
 604
 605 int NetConn_WriteString(lhnetsocket_t *mysocket, const char *string, const lhnetaddress_t *peeraddress)
 606 {
 607         // note this does not include the trailing NULL because we add that in the parser
 608         return NetConn_Write(mysocket, string, (int)strlen(string), peeraddress);
 609 }
 610
 611 qboolean NetConn_CanSend(netconn_t *conn)
 612 {
 613         conn->outgoing_packetcounter = (conn->outgoing_packetcounter + 1) % NETGRAPH_PACKETS;
 614         conn->outgoing_netgraph[conn->outgoing_packetcounter].time            = realtime;
 615         conn->outgoing_netgraph[conn->outgoing_packetcounter].unreliablebytes = NETGRAPH_NOPACKET;
 616         conn->outgoing_netgraph[conn->outgoing_packetcounter].reliablebytes   = NETGRAPH_NOPACKET;
 617         conn->outgoing_netgraph[conn->outgoing_packetcounter].ackbytes        = NETGRAPH_NOPACKET;
 618         if (realtime > conn->cleartime)
 619                 return true;
 620         else
 621         {
 622                 conn->outgoing_netgraph[conn->outgoing_packetcounter].unreliablebytes = NETGRAPH_CHOKEDPACKET;
 623                 return false;
 624         }
 625 }
 626
 627 int NetConn_SendUnreliableMessage(netconn_t *conn, sizebuf_t *data, protocolversion_t protocol, int rate, qboolean quakesignon_suppressreliables)
 628 {
 629         int totallen = 0;
 630
 631         // if this packet was supposedly choked, but we find ourselves sending one
 632         // anyway, make sure the size counting starts at zero
 633         // (this mostly happens on level changes and disconnects and such)
 634         if (conn->outgoing_netgraph[conn->outgoing_packetcounter].unreliablebytes == NETGRAPH_CHOKEDPACKET)
 635                 conn->outgoing_netgraph[conn->outgoing_packetcounter].unreliablebytes = NETGRAPH_NOPACKET;
 636
 637         if (protocol == PROTOCOL_QUAKEWORLD)
 638         {
 639                 int packetLen;
 640                 qboolean sendreliable;
 641
 642                 // note that it is ok to send empty messages to the qw server,
 643                 // otherwise it won't respond to us at all
 644
 645                 sendreliable = false;
 646                 // if the remote side dropped the last reliable message, resend it
 647                 if (conn->qw.incoming_acknowledged > conn->qw.last_reliable_sequence && conn->qw.incoming_reliable_acknowledged != conn->qw.reliable_sequence)
 648                         sendreliable = true;
 649                 // if the reliable transmit buffer is empty, copy the current message out
 650                 if (!conn->sendMessageLength && conn->message.cursize)
 651                 {
 652                         memcpy (conn->sendMessage, conn->message.data, conn->message.cursize);
 653                         conn->sendMessageLength = conn->message.cursize;
 654                         SZ_Clear(&conn->message); // clear the message buffer
 655                         conn->qw.reliable_sequence ^= 1;
 656                         sendreliable = true;
 657                 }
 658                 // outgoing unreliable packet number, and outgoing reliable packet number (0 or 1)
 659                 StoreLittleLong(sendbuffer, (unsigned int)conn->outgoing_unreliable_sequence | ((unsigned int)sendreliable<<31));
 660                 // last received unreliable packet number, and last received reliable packet number (0 or 1)
 661                 StoreLittleLong(sendbuffer + 4, (unsigned int)conn->qw.incoming_sequence | ((unsigned int)conn->qw.incoming_reliable_sequence<<31));
 662                 packetLen = 8;
 663                 conn->outgoing_unreliable_sequence++;
 664                 // client sends qport in every packet
 665                 if (conn == cls.netcon)
 666                 {
 667                         *((short *)(sendbuffer + 8)) = LittleShort(cls.qw_qport);
 668                         packetLen += 2;
 669                         // also update cls.qw_outgoing_sequence
 670                         cls.qw_outgoing_sequence = conn->outgoing_unreliable_sequence;
 671                 }
 672                 if (packetLen + (sendreliable ? conn->sendMessageLength : 0) > 1400)
 673                 {
 674                         Con_Printf ("NetConn_SendUnreliableMessage: reliable message too big %u\n", data->cursize);
 675                         return -1;
 676                 }
 677
 678                 conn->outgoing_netgraph[conn->outgoing_packetcounter].unreliablebytes += packetLen + 28;
 679
 680                 // add the reliable message if there is one
 681                 if (sendreliable)
 682                 {
 683                         conn->outgoing_netgraph[conn->outgoing_packetcounter].reliablebytes += conn->sendMessageLength + 28;
 684                         memcpy(sendbuffer + packetLen, conn->sendMessage, conn->sendMessageLength);
 685                         packetLen += conn->sendMessageLength;
 686                         conn->qw.last_reliable_sequence = conn->outgoing_unreliable_sequence;
 687                 }
 688
 689                 // add the unreliable message if possible
 690                 if (packetLen + data->cursize <= 1400)
 691                 {
 692                         conn->outgoing_netgraph[conn->outgoing_packetcounter].unreliablebytes += data->cursize + 28;
 693                         memcpy(sendbuffer + packetLen, data->data, data->cursize);
 694                         packetLen += data->cursize;
 695                 }
 696
 697                 NetConn_Write(conn->mysocket, (void *)&sendbuffer, packetLen, &conn->peeraddress);
 698
 699                 packetsSent++;
 700                 unreliableMessagesSent++;
 701
 702                 totallen += packetLen + 28;
 703         }
 704         else
 705         {
 706                 unsigned int packetLen;
 707                 unsigned int dataLen;
 708                 unsigned int eom;
 709                 const void *sendme;
 710                 size_t sendmelen;
 711
 712                 // if a reliable message fragment has been lost, send it again
 713                 if (conn->sendMessageLength && (realtime - conn->lastSendTime) > 1.0)
 714                 {
 715                         if (conn->sendMessageLength <= MAX_PACKETFRAGMENT)
 716                         {
 717                                 dataLen = conn->sendMessageLength;
 718                                 eom = NETFLAG_EOM;
 719                         }
 720                         else
 721                         {
 722                                 dataLen = MAX_PACKETFRAGMENT;
 723                                 eom = 0;
 724                         }
 725
 726                         packetLen = NET_HEADERSIZE + dataLen;
 727
 728                         StoreBigLong(sendbuffer, packetLen | (NETFLAG_DATA | eom));
 729                         StoreBigLong(sendbuffer + 4, conn->nq.sendSequence - 1);
 730                         memcpy(sendbuffer + NET_HEADERSIZE, conn->sendMessage, dataLen);
 731
 732                         conn->outgoing_netgraph[conn->outgoing_packetcounter].reliablebytes += packetLen + 28;
 733
 734                         sendme = crypto_encryptpacket(&conn->crypto, &sendbuffer, packetLen, &cryptosendbuffer, &sendmelen, sizeof(cryptosendbuffer));
 735                         if (NetConn_Write(conn->mysocket, sendme, sendmelen, &conn->peeraddress) == (int)packetLen)
 736                         {
 737                                 conn->lastSendTime = realtime;
 738                                 packetsReSent++;
 739                         }
 740
 741                         totallen += packetLen + 28;
 742                 }
 743
 744                 // if we have a new reliable message to send, do so
 745                 if (!conn->sendMessageLength && conn->message.cursize && !quakesignon_suppressreliables)
 746                 {
 747                         if (conn->message.cursize > (int)sizeof(conn->sendMessage))
 748                         {
 749                                 Con_Printf("NetConn_SendUnreliableMessage: reliable message too big (%u > %u)\n", conn->message.cursize, (int)sizeof(conn->sendMessage));
 750                                 conn->message.overflowed = true;
 751                                 return -1;
 752                         }
 753
 754                         if (developer_networking.integer && conn == cls.netcon)
 755                         {
 756                                 Con_Print("client sending reliable message to server:\n");
 757                                 SZ_HexDumpToConsole(&conn->message);
 758                         }
 759
 760                         memcpy(conn->sendMessage, conn->message.data, conn->message.cursize);
 761                         conn->sendMessageLength = conn->message.cursize;
 762                         SZ_Clear(&conn->message);
 763
 764                         if (conn->sendMessageLength <= MAX_PACKETFRAGMENT)
 765                         {
 766                                 dataLen = conn->sendMessageLength;
 767                                 eom = NETFLAG_EOM;
 768                         }
 769                         else
 770                         {
 771                                 dataLen = MAX_PACKETFRAGMENT;
 772                                 eom = 0;
 773                         }
 774
 775                         packetLen = NET_HEADERSIZE + dataLen;
 776
 777                         StoreBigLong(sendbuffer, packetLen | (NETFLAG_DATA | eom));
 778                         StoreBigLong(sendbuffer + 4, conn->nq.sendSequence);
 779                         memcpy(sendbuffer + NET_HEADERSIZE, conn->sendMessage, dataLen);
 780
 781                         conn->nq.sendSequence++;
 782
 783                         conn->outgoing_netgraph[conn->outgoing_packetcounter].reliablebytes += packetLen + 28;
 784
 785                         sendme = crypto_encryptpacket(&conn->crypto, &sendbuffer, packetLen, &cryptosendbuffer, &sendmelen, sizeof(cryptosendbuffer));
 786                         NetConn_Write(conn->mysocket, sendme, sendmelen, &conn->peeraddress);
 787
 788                         conn->lastSendTime = realtime;
 789                         packetsSent++;
 790                         reliableMessagesSent++;
 791
 792                         totallen += packetLen + 28;
 793                 }
 794
 795                 // if we have an unreliable message to send, do so
 796                 if (data->cursize)
 797                 {
 798                         packetLen = NET_HEADERSIZE + data->cursize;
 799
 800                         if (packetLen > (int)sizeof(sendbuffer))
 801                         {
 802                                 Con_Printf("NetConn_SendUnreliableMessage: message too big %u\n", data->cursize);
 803                                 return -1;
 804                         }
 805
 806                         StoreBigLong(sendbuffer, packetLen | NETFLAG_UNRELIABLE);
 807                         StoreBigLong(sendbuffer + 4, conn->outgoing_unreliable_sequence);
 808                         memcpy(sendbuffer + NET_HEADERSIZE, data->data, data->cursize);
 809
 810                         conn->outgoing_unreliable_sequence++;
 811
 812                         conn->outgoing_netgraph[conn->outgoing_packetcounter].unreliablebytes += packetLen + 28;
 813
 814                         sendme = crypto_encryptpacket(&conn->crypto, &sendbuffer, packetLen, &cryptosendbuffer, &sendmelen, sizeof(cryptosendbuffer));
 815                         NetConn_Write(conn->mysocket, sendme, sendmelen, &conn->peeraddress);
 816
 817                         packetsSent++;
 818                         unreliableMessagesSent++;
 819
 820                         totallen += packetLen + 28;
 821                 }
 822         }
 823
 824         // delay later packets to obey rate limit
 825         if (conn->cleartime < realtime - 0.1)
 826                 conn->cleartime = realtime - 0.1;
 827         conn->cleartime = conn->cleartime + (double)totallen / (double)rate;
 828         if (conn->cleartime < realtime)
 829                 conn->cleartime = realtime;
 830
 831         return 0;
 832 }
 833
 834 qboolean NetConn_HaveClientPorts(void)
 835 {
 836         return !!cl_numsockets;
 837 }
 838
 839 qboolean NetConn_HaveServerPorts(void)
 840 {
 841         return !!sv_numsockets;
 842 }
 843
 844 void NetConn_CloseClientPorts(void)
 845 {
 846         for (;cl_numsockets > 0;cl_numsockets--)
 847                 if (cl_sockets[cl_numsockets - 1])
 848                         LHNET_CloseSocket(cl_sockets[cl_numsockets - 1]);
 849 }
 850
 851 void NetConn_OpenClientPort(const char *addressstring, lhnetaddresstype_t addresstype, int defaultport)
 852 {
 853         lhnetaddress_t address;
 854         lhnetsocket_t *s;
 855         int success;
 856         char addressstring2[1024];
 857         if (addressstring && addressstring[0])
 858                 success = LHNETADDRESS_FromString(&address, addressstring, defaultport);
 859         else
 860                 success = LHNETADDRESS_FromPort(&address, addresstype, defaultport);
 861         if (success)
 862         {
 863                 if ((s = LHNET_OpenSocket_Connectionless(&address)))
 864                 {
 865                         cl_sockets[cl_numsockets++] = s;
 866                         LHNETADDRESS_ToString(LHNET_AddressFromSocket(s), addressstring2, sizeof(addressstring2), true);
 867                         if (addresstype != LHNETADDRESSTYPE_LOOP)
 868                                 Con_Printf("Client opened a socket on address %s\n", addressstring2);
 869                 }
 870                 else
 871                 {
 872                         LHNETADDRESS_ToString(&address, addressstring2, sizeof(addressstring2), true);
 873                         Con_Printf("Client failed to open a socket on address %s\n", addressstring2);
 874                 }
 875         }
 876         else
 877                 Con_Printf("Client unable to parse address %s\n", addressstring);
 878 }
 879
 880 void NetConn_OpenClientPorts(void)
 881 {
 882         int port;
 883         NetConn_CloseClientPorts();
 884         port = bound(0, cl_netport.integer, 65535);
 885         if (cl_netport.integer != port)
 886                 Cvar_SetValueQuick(&cl_netport, port);
 887         if(port == 0)
 888                 Con_Printf("Client using an automatically assigned port\n");
 889         else
 890                 Con_Printf("Client using port %i\n", port);
 891         NetConn_OpenClientPort(NULL, LHNETADDRESSTYPE_LOOP, 2);
 892         NetConn_OpenClientPort(net_address.string, LHNETADDRESSTYPE_INET4, port);
 893 #ifdef SUPPORTIPV6
 894         NetConn_OpenClientPort(net_address_ipv6.string, LHNETADDRESSTYPE_INET6, port);
 895 #endif
 896 }
 897
 898 void NetConn_CloseServerPorts(void)
 899 {
 900         for (;sv_numsockets > 0;sv_numsockets--)
 901                 if (sv_sockets[sv_numsockets - 1])
 902                         LHNET_CloseSocket(sv_sockets[sv_numsockets - 1]);
 903 }
 904
 905 qboolean NetConn_OpenServerPort(const char *addressstring, lhnetaddresstype_t addresstype, int defaultport, int range)
 906 {
 907         lhnetaddress_t address;
 908         lhnetsocket_t *s;
 909         int port;
 910         char addressstring2[1024];
 911         int success;
 912
 913         for (port = defaultport; port <= defaultport + range; port++)
 914         {
 915                 if (addressstring && addressstring[0])
 916                         success = LHNETADDRESS_FromString(&address, addressstring, port);
 917                 else
 918                         success = LHNETADDRESS_FromPort(&address, addresstype, port);
 919                 if (success)
 920                 {
 921                         if ((s = LHNET_OpenSocket_Connectionless(&address)))
 922                         {
 923                                 sv_sockets[sv_numsockets++] = s;
 924                                 LHNETADDRESS_ToString(LHNET_AddressFromSocket(s), addressstring2, sizeof(addressstring2), true);
 925                                 if (addresstype != LHNETADDRESSTYPE_LOOP)
 926                                         Con_Printf("Server listening on address %s\n", addressstring2);
 927                                 return true;
 928                         }
 929                         else
 930                         {
 931                                 LHNETADDRESS_ToString(&address, addressstring2, sizeof(addressstring2), true);
 932                                 Con_Printf("Server failed to open socket on address %s\n", addressstring2);
 933                         }
 934                 }
 935                 else
 936                 {
 937                         Con_Printf("Server unable to parse address %s\n", addressstring);
 938                         // if it cant parse one address, it wont be able to parse another for sure
 939                         return false;
 940                 }
 941         }
 942         return false;
 943 }
 944
 945 void NetConn_OpenServerPorts(int opennetports)
 946 {
 947         int port;
 948         NetConn_CloseServerPorts();
 949         NetConn_UpdateSockets();
 950         port = bound(0, sv_netport.integer, 65535);
 951         if (port == 0)
 952                 port = 26000;
 953         Con_Printf("Server using port %i\n", port);
 954         if (sv_netport.integer != port)
 955                 Cvar_SetValueQuick(&sv_netport, port);
 956         if (cls.state != ca_dedicated)
 957                 NetConn_OpenServerPort(NULL, LHNETADDRESSTYPE_LOOP, 1, 1);
 958         if (opennetports)
 959         {
 960 #ifdef SUPPORTIPV6
 961                 qboolean ip4success = NetConn_OpenServerPort(net_address.string, LHNETADDRESSTYPE_INET4, port, 100);
 962                 NetConn_OpenServerPort(net_address_ipv6.string, LHNETADDRESSTYPE_INET6, port, ip4success ? 1 : 100);
 963 #else
 964                 NetConn_OpenServerPort(net_address.string, LHNETADDRESSTYPE_INET4, port, 100);
 965 #endif
 966         }
 967         if (sv_numsockets == 0)
 968                 Host_Error("NetConn_OpenServerPorts: unable to open any ports!");
 969 }
 970
 971 lhnetsocket_t *NetConn_ChooseClientSocketForAddress(lhnetaddress_t *address)
 972 {
 973         int i, a = LHNETADDRESS_GetAddressType(address);
 974         for (i = 0;i < cl_numsockets;i++)
 975                 if (cl_sockets[i] && LHNETADDRESS_GetAddressType(LHNET_AddressFromSocket(cl_sockets[i])) == a)
 976                         return cl_sockets[i];
 977         return NULL;
 978 }
 979
 980 lhnetsocket_t *NetConn_ChooseServerSocketForAddress(lhnetaddress_t *address)
 981 {
 982         int i, a = LHNETADDRESS_GetAddressType(address);
 983         for (i = 0;i < sv_numsockets;i++)
 984                 if (sv_sockets[i] && LHNETADDRESS_GetAddressType(LHNET_AddressFromSocket(sv_sockets[i])) == a)
 985                         return sv_sockets[i];
 986         return NULL;
 987 }
 988
 989 netconn_t *NetConn_Open(lhnetsocket_t *mysocket, lhnetaddress_t *peeraddress)
 990 {
 991         netconn_t *conn;
 992         conn = (netconn_t *)Mem_Alloc(netconn_mempool, sizeof(*conn));
 993         conn->mysocket = mysocket;
 994         conn->peeraddress = *peeraddress;
 995         conn->lastMessageTime = realtime;
 996         conn->message.data = conn->messagedata;
 997         conn->message.maxsize = sizeof(conn->messagedata);
 998         conn->message.cursize = 0;
 999         // LordHavoc: (inspired by ProQuake) use a short connect timeout to
1000         // reduce effectiveness of connection request floods
1001         conn->timeout = realtime + net_connecttimeout.value;
1002         LHNETADDRESS_ToString(&conn->peeraddress, conn->address, sizeof(conn->address), true);
1003         conn->next = netconn_list;
1004         netconn_list = conn;
1005         return conn;
1006 }
1007
1008 void NetConn_ClearConnectFlood(lhnetaddress_t *peeraddress);
1009 void NetConn_Close(netconn_t *conn)
1010 {
1011         netconn_t *c;
1012         // remove connection from list
1013
1014         // allow the client to reconnect immediately
1015         NetConn_ClearConnectFlood(&(conn->peeraddress));
1016
1017         if (conn == netconn_list)
1018                 netconn_list = conn->next;
1019         else
1020         {
1021                 for (c = netconn_list;c;c = c->next)
1022                 {
1023                         if (c->next == conn)
1024                         {
1025                                 c->next = conn->next;
1026                                 break;
1027                         }
1028                 }
1029                 // not found in list, we'll avoid crashing here...
1030                 if (!c)
1031                         return;
1032         }
1033         // free connection
1034         Mem_Free(conn);
1035 }
1036
1037 static int clientport = -1;
1038 static int clientport2 = -1;
1039 static int hostport = -1;
1040 void NetConn_UpdateSockets(void)
1041 {
1042         int i, j;
1043
1044         if (cls.state != ca_dedicated)
1045         {
1046                 if (clientport2 != cl_netport.integer)
1047                 {
1048                         clientport2 = cl_netport.integer;
1049                         if (cls.state == ca_connected)
1050                                 Con_Print("Changing \"cl_port\" will not take effect until you reconnect.\n");
1051                 }
1052                 if (cls.state == ca_disconnected && clientport != clientport2)
1053                 {
1054                         clientport = clientport2;
1055                         NetConn_CloseClientPorts();
1056                 }
1057                 if (cl_numsockets == 0)
1058                         NetConn_OpenClientPorts();
1059         }
1060
1061         if (hostport != sv_netport.integer)
1062         {
1063                 hostport = sv_netport.integer;
1064                 if (sv.active)
1065                         Con_Print("Changing \"port\" will not take effect until \"map\" command is executed.\n");
1066         }
1067
1068         for (j = 0;j < MAX_RCONS;j++)
1069         {
1070                 i = (cls.rcon_ringpos + j + 1) % MAX_RCONS;
1071                 if(cls.rcon_commands[i][0])
1072                 {
1073                         if(realtime > cls.rcon_timeout[i])
1074                         {
1075                                 char s[128];
1076                                 LHNETADDRESS_ToString(&cls.rcon_addresses[i], s, sizeof(s), true);
1077                                 Con_Printf("rcon to %s (for command %s) failed: challenge request timed out\n", s, cls.rcon_commands[i]);
1078                                 cls.rcon_commands[i][0] = 0;
1079                                 --cls.rcon_trying;
1080                                 break;
1081                         }
1082                 }
1083         }
1084 }
1085
1086 static int NetConn_ReceivedMessage(netconn_t *conn, const unsigned char *data, size_t length, protocolversion_t protocol, double newtimeout)
1087 {
1088         int originallength = length;
1089         if (length < 8)
1090                 return 0;
1091
1092         if (protocol == PROTOCOL_QUAKEWORLD)
1093         {
1094                 int sequence, sequence_ack;
1095                 int reliable_ack, reliable_message;
1096                 int count;
1097                 int qport;
1098
1099                 sequence = LittleLong(*((int *)(data + 0)));
1100                 sequence_ack = LittleLong(*((int *)(data + 4)));
1101                 data += 8;
1102                 length -= 8;
1103
1104                 if (conn != cls.netcon)
1105                 {
1106                         // server only
1107                         if (length < 2)
1108                                 return 0;
1109                         // TODO: use qport to identify that this client really is who they say they are?  (and elsewhere in the code to identify the connection without a port match?)
1110                         qport = LittleShort(*((int *)(data + 8)));
1111                         data += 2;
1112                         length -= 2;
1113                 }
1114
1115                 packetsReceived++;
1116                 reliable_message = (sequence >> 31) & 1;
1117                 reliable_ack = (sequence_ack >> 31) & 1;
1118                 sequence &= ~(1<<31);
1119                 sequence_ack &= ~(1<<31);
1120                 if (sequence <= conn->qw.incoming_sequence)
1121                 {
1122                         //Con_DPrint("Got a stale datagram\n");
1123                         return 0;
1124                 }
1125                 count = sequence - (conn->qw.incoming_sequence + 1);
1126                 if (count > 0)
1127                 {
1128                         droppedDatagrams += count;
1129                         //Con_DPrintf("Dropped %u datagram(s)\n", count);
1130                         while (count--)
1131                         {
1132                                 conn->incoming_packetcounter = (conn->incoming_packetcounter + 1) % NETGRAPH_PACKETS;
1133                                 conn->incoming_netgraph[conn->incoming_packetcounter].time            = realtime;
1134                                 conn->incoming_netgraph[conn->incoming_packetcounter].unreliablebytes = NETGRAPH_LOSTPACKET;
1135                                 conn->incoming_netgraph[conn->incoming_packetcounter].reliablebytes   = NETGRAPH_NOPACKET;
1136                                 conn->incoming_netgraph[conn->incoming_packetcounter].ackbytes        = NETGRAPH_NOPACKET;
1137                         }
1138                 }
1139                 conn->incoming_packetcounter = (conn->incoming_packetcounter + 1) % NETGRAPH_PACKETS;
1140                 conn->incoming_netgraph[conn->incoming_packetcounter].time            = realtime;
1141                 conn->incoming_netgraph[conn->incoming_packetcounter].unreliablebytes = originallength + 28;
1142                 conn->incoming_netgraph[conn->incoming_packetcounter].reliablebytes   = NETGRAPH_NOPACKET;
1143                 conn->incoming_netgraph[conn->incoming_packetcounter].ackbytes        = NETGRAPH_NOPACKET;
1144                 if (reliable_ack == conn->qw.reliable_sequence)
1145                 {
1146                         // received, now we will be able to send another reliable message
1147                         conn->sendMessageLength = 0;
1148                         reliableMessagesReceived++;
1149                 }
1150                 conn->qw.incoming_sequence = sequence;
1151                 if (conn == cls.netcon)
1152                         cls.qw_incoming_sequence = conn->qw.incoming_sequence;
1153                 conn->qw.incoming_acknowledged = sequence_ack;
1154                 conn->qw.incoming_reliable_acknowledged = reliable_ack;
1155                 if (reliable_message)
1156                         conn->qw.incoming_reliable_sequence ^= 1;
1157                 conn->lastMessageTime = realtime;
1158                 conn->timeout = realtime + newtimeout;
1159                 unreliableMessagesReceived++;
1160                 SZ_Clear(&net_message);
1161                 SZ_Write(&net_message, data, length);
1162                 MSG_BeginReading();
1163                 return 2;
1164         }
1165         else
1166         {
1167                 unsigned int count;
1168                 unsigned int flags;
1169                 unsigned int sequence;
1170                 size_t qlength;
1171
1172                 data = crypto_decryptpacket(&conn->crypto, data, length, cryptoreadbuffer, &length, sizeof(cryptoreadbuffer));
1173                 if(!data)
1174                         return 0;
1175                 originallength = length;
1176                 if(length < 8)
1177                         return 0;
1178
1179                 qlength = (unsigned int)BuffBigLong(data);
1180                 flags = qlength & ~NETFLAG_LENGTH_MASK;
1181                 qlength &= NETFLAG_LENGTH_MASK;
1182                 // control packets were already handled
1183                 if (!(flags & NETFLAG_CTL) && qlength == length)
1184                 {
1185                         sequence = BuffBigLong(data + 4);
1186                         packetsReceived++;
1187                         data += 8;
1188                         length -= 8;
1189                         if (flags & NETFLAG_UNRELIABLE)
1190                         {
1191                                 if (sequence >= conn->nq.unreliableReceiveSequence)
1192                                 {
1193                                         if (sequence > conn->nq.unreliableReceiveSequence)
1194                                         {
1195                                                 count = sequence - conn->nq.unreliableReceiveSequence;
1196                                                 droppedDatagrams += count;
1197                                                 //Con_DPrintf("Dropped %u datagram(s)\n", count);
1198                                                 while (count--)
1199                                                 {
1200                                                         conn->incoming_packetcounter = (conn->incoming_packetcounter + 1) % NETGRAPH_PACKETS;
1201                                                         conn->incoming_netgraph[conn->incoming_packetcounter].time            = realtime;
1202                                                         conn->incoming_netgraph[conn->incoming_packetcounter].unreliablebytes = NETGRAPH_LOSTPACKET;
1203                                                         conn->incoming_netgraph[conn->incoming_packetcounter].reliablebytes   = NETGRAPH_NOPACKET;
1204                                                         conn->incoming_netgraph[conn->incoming_packetcounter].ackbytes        = NETGRAPH_NOPACKET;
1205                                                 }
1206                                         }
1207                                         conn->incoming_packetcounter = (conn->incoming_packetcounter + 1) % NETGRAPH_PACKETS;
1208                                         conn->incoming_netgraph[conn->incoming_packetcounter].time            = realtime;
1209                                         conn->incoming_netgraph[conn->incoming_packetcounter].unreliablebytes = originallength + 28;
1210                                         conn->incoming_netgraph[conn->incoming_packetcounter].reliablebytes   = NETGRAPH_NOPACKET;
1211                                         conn->incoming_netgraph[conn->incoming_packetcounter].ackbytes        = NETGRAPH_NOPACKET;
1212                                         conn->nq.unreliableReceiveSequence = sequence + 1;
1213                                         conn->lastMessageTime = realtime;
1214                                         conn->timeout = realtime + newtimeout;
1215                                         unreliableMessagesReceived++;
1216                                         if (length > 0)
1217                                         {
1218                                                 SZ_Clear(&net_message);
1219                                                 SZ_Write(&net_message, data, length);
1220                                                 MSG_BeginReading();
1221                                                 return 2;
1222                                         }
1223                                 }
1224                                 //else
1225                                 //      Con_DPrint("Got a stale datagram\n");
1226                                 return 1;
1227                         }
1228                         else if (flags & NETFLAG_ACK)
1229                         {
1230                                 conn->incoming_netgraph[conn->incoming_packetcounter].ackbytes += originallength + 28;
1231                                 if (sequence == (conn->nq.sendSequence - 1))
1232                                 {
1233                                         if (sequence == conn->nq.ackSequence)
1234                                         {
1235                                                 conn->nq.ackSequence++;
1236                                                 if (conn->nq.ackSequence != conn->nq.sendSequence)
1237                                                         Con_DPrint("ack sequencing error\n");
1238                                                 conn->lastMessageTime = realtime;
1239                                                 conn->timeout = realtime + newtimeout;
1240                                                 if (conn->sendMessageLength > MAX_PACKETFRAGMENT)
1241                                                 {
1242                                                         unsigned int packetLen;
1243                                                         unsigned int dataLen;
1244                                                         unsigned int eom;
1245
1246                                                         conn->sendMessageLength -= MAX_PACKETFRAGMENT;
1247                                                         memmove(conn->sendMessage, conn->sendMessage+MAX_PACKETFRAGMENT, conn->sendMessageLength);
1248
1249                                                         if (conn->sendMessageLength <= MAX_PACKETFRAGMENT)
1250                                                         {
1251                                                                 dataLen = conn->sendMessageLength;
1252                                                                 eom = NETFLAG_EOM;
1253                                                         }
1254                                                         else
1255                                                         {
1256                                                                 dataLen = MAX_PACKETFRAGMENT;
1257                                                                 eom = 0;
1258                                                         }
1259
1260                                                         packetLen = NET_HEADERSIZE + dataLen;
1261
1262                                                         StoreBigLong(sendbuffer, packetLen | (NETFLAG_DATA | eom));
1263                                                         StoreBigLong(sendbuffer + 4, conn->nq.sendSequence);
1264                                                         memcpy(sendbuffer + NET_HEADERSIZE, conn->sendMessage, dataLen);
1265
1266                                                         conn->nq.sendSequence++;
1267
1268                                                         if (NetConn_Write(conn->mysocket, (void *)&sendbuffer, packetLen, &conn->peeraddress) == (int)packetLen)
1269                                                         {
1270                                                                 conn->lastSendTime = realtime;
1271                                                                 packetsSent++;
1272                                                         }
1273                                                 }
1274                                                 else
1275                                                         conn->sendMessageLength = 0;
1276                                         }
1277                                         //else
1278                                         //      Con_DPrint("Duplicate ACK received\n");
1279                                 }
1280                                 //else
1281                                 //      Con_DPrint("Stale ACK received\n");
1282                                 return 1;
1283                         }
1284                         else if (flags & NETFLAG_DATA)
1285                         {
1286                                 unsigned char temppacket[8];
1287                                 conn->incoming_netgraph[conn->incoming_packetcounter].reliablebytes   += originallength + 28;
1288                                 conn->outgoing_netgraph[conn->outgoing_packetcounter].ackbytes        += 8 + 28;
1289                                 StoreBigLong(temppacket, 8 | NETFLAG_ACK);
1290                                 StoreBigLong(temppacket + 4, sequence);
1291                                 NetConn_Write(conn->mysocket, (unsigned char *)temppacket, 8, &conn->peeraddress);
1292                                 if (sequence == conn->nq.receiveSequence)
1293                                 {
1294                                         conn->lastMessageTime = realtime;
1295                                         conn->timeout = realtime + newtimeout;
1296                                         conn->nq.receiveSequence++;
1297                                         if( conn->receiveMessageLength + length <= (int)sizeof( conn->receiveMessage ) ) {
1298                                                 memcpy(conn->receiveMessage + conn->receiveMessageLength, data, length);
1299                                                 conn->receiveMessageLength += length;
1300                                         } else {
1301                                                 Con_Printf( "Reliable message (seq: %i) too big for message buffer!\n"
1302                                                                         "Dropping the message!\n", sequence );
1303                                                 conn->receiveMessageLength = 0;
1304                                                 return 1;
1305                                         }
1306                                         if (flags & NETFLAG_EOM)
1307                                         {
1308                                                 reliableMessagesReceived++;
1309                                                 length = conn->receiveMessageLength;
1310                                                 conn->receiveMessageLength = 0;
1311                                                 if (length > 0)
1312                                                 {
1313                                                         SZ_Clear(&net_message);
1314                                                         SZ_Write(&net_message, conn->receiveMessage, length);
1315                                                         MSG_BeginReading();
1316                                                         return 2;
1317                                                 }
1318                                         }
1319                                 }
1320                                 else
1321                                         receivedDuplicateCount++;
1322                                 return 1;
1323                         }
1324                 }
1325         }
1326         return 0;
1327 }
1328
1329 void NetConn_ConnectionEstablished(lhnetsocket_t *mysocket, lhnetaddress_t *peeraddress, protocolversion_t initialprotocol)
1330 {
1331         cls.connect_trying = false;
1332         M_Update_Return_Reason("");
1333         // the connection request succeeded, stop current connection and set up a new connection
1334         CL_Disconnect();
1335         // if we're connecting to a remote server, shut down any local server
1336         if (LHNETADDRESS_GetAddressType(peeraddress) != LHNETADDRESSTYPE_LOOP && sv.active)
1337                 Host_ShutdownServer ();
1338         // allocate a net connection to keep track of things
1339         cls.netcon = NetConn_Open(mysocket, peeraddress);
1340         Con_Printf("Connection accepted to %s\n", cls.netcon->address);
1341         key_dest = key_game;
1342         m_state = m_none;
1343         cls.demonum = -1;                       // not in the demo loop now
1344         cls.state = ca_connected;
1345         cls.signon = 0;                         // need all the signon messages before playing
1346         cls.protocol = initialprotocol;
1347         // reset move sequence numbering on this new connection
1348         cls.servermovesequence = 0;
1349         if (cls.protocol == PROTOCOL_QUAKEWORLD)
1350                 Cmd_ForwardStringToServer("new");
1351         if (cls.protocol == PROTOCOL_QUAKE)
1352         {
1353                 // write a keepalive (clc_nop) as it seems to greatly improve the
1354                 // chances of connecting to a netquake server
1355                 sizebuf_t msg;
1356                 unsigned char buf[4];
1357                 memset(&msg, 0, sizeof(msg));
1358                 msg.data = buf;
1359                 msg.maxsize = sizeof(buf);
1360                 MSG_WriteChar(&msg, clc_nop);
1361                 NetConn_SendUnreliableMessage(cls.netcon, &msg, cls.protocol, 10000, false);
1362         }
1363 }
1364
1365 int NetConn_IsLocalGame(void)
1366 {
1367         if (cls.state == ca_connected && sv.active && cl.maxclients == 1)
1368                 return true;
1369         return false;
1370 }
1371
1372 static int NetConn_ClientParsePacket_ServerList_ProcessReply(const char *addressstring)
1373 {
1374         int n;
1375         int pingtime;
1376         serverlist_entry_t *entry = NULL;
1377
1378         // search the cache for this server and update it
1379         for (n = 0;n < serverlist_cachecount;n++) {
1380                 entry = &serverlist_cache[ n ];
1381                 if (!strcmp(addressstring, entry->info.cname))
1382                         break;
1383         }
1384
1385         if (n == serverlist_cachecount)
1386         {
1387                 // LAN search doesnt require an answer from the master server so we wont
1388                 // know the ping nor will it be initialized already...
1389
1390                 // find a slot
1391                 if (serverlist_cachecount == SERVERLIST_TOTALSIZE)
1392                         return -1;
1393
1394                 entry = &serverlist_cache[n];
1395
1396                 memset(entry, 0, sizeof(*entry));
1397                 // store the data the engine cares about (address and ping)
1398                 strlcpy(entry->info.cname, addressstring, sizeof(entry->info.cname));
1399                 entry->info.ping = 100000;
1400                 entry->querytime = realtime;
1401                 // if not in the slist menu we should print the server to console
1402                 if (serverlist_consoleoutput)
1403                         Con_Printf("querying %s\n", addressstring);
1404                 ++serverlist_cachecount;
1405         }
1406         // if this is the first reply from this server, count it as having replied
1407         pingtime = (int)((realtime - entry->querytime) * 1000.0 + 0.5);
1408         pingtime = bound(0, pingtime, 9999);
1409         if (entry->query == SQS_REFRESHING) {
1410                 entry->info.ping = pingtime;
1411                 entry->query = SQS_QUERIED;
1412         } else {
1413                 // convert to unsigned to catch the -1
1414                 // I still dont like this but its better than the old 10000 magic ping number - as in easier to type and read :( [11/8/2007 Black]
1415                 entry->info.ping = min((unsigned) entry->info.ping, (unsigned) pingtime);
1416                 serverreplycount++;
1417         }
1418
1419         // other server info is updated by the caller
1420         return n;
1421 }
1422
1423 static void NetConn_ClientParsePacket_ServerList_UpdateCache(int n)
1424 {
1425         serverlist_entry_t *entry = &serverlist_cache[n];
1426         serverlist_info_t *info = &entry->info;
1427         // update description strings for engine menu and console output
1428         dpsnprintf(entry->line1, sizeof(serverlist_cache[n].line1), "^%c%5d^7 ^%c%3u^7/%3u %-65.65s", info->ping >= 300 ? '1' : (info->ping >= 200 ? '3' : '7'), (int)info->ping, ((info->numhumans > 0 && info->numhumans < info->maxplayers) ? (info->numhumans >= 4 ? '7' : '3') : '1'), info->numplayers, info->maxplayers, info->name);
1429         dpsnprintf(entry->line2, sizeof(serverlist_cache[n].line2), "^4%-21.21s %-19.19s ^%c%-17.17s^4 %-20.20s", info->cname, info->game,
1430                         (
1431                          info->gameversion != gameversion.integer
1432                          &&
1433                          !(
1434                                     gameversion_min.integer >= 0 // min/max range set by user/mod?
1435                                  && gameversion_max.integer >= 0
1436                                  && gameversion_min.integer >= info->gameversion // version of server in min/max range?
1437                                  && gameversion_max.integer <= info->gameversion
1438                           )
1439                         ) ? '1' : '4',
1440                         info->mod, info->map);
1441         if (entry->query == SQS_QUERIED)
1442         {
1443                 if(!serverlist_paused)
1444                         ServerList_ViewList_Remove(entry);
1445         }
1446         // if not in the slist menu we should print the server to console (if wanted)
1447         else if( serverlist_consoleoutput )
1448                 Con_Printf("%s\n%s\n", serverlist_cache[n].line1, serverlist_cache[n].line2);
1449         // and finally, update the view set
1450         if(!serverlist_paused)
1451                 ServerList_ViewList_Insert( entry );
1452         //      update the entry's state
1453         serverlist_cache[n].query = SQS_QUERIED;
1454 }
1455
1456 // returns true, if it's sensible to continue the processing
1457 static qboolean NetConn_ClientParsePacket_ServerList_PrepareQuery( int protocol, const char *ipstring, qboolean isfavorite ) {
1458         int n;
1459         serverlist_entry_t *entry;
1460
1461         //      ignore the rest of the message if the serverlist is full
1462         if( serverlist_cachecount == SERVERLIST_TOTALSIZE )
1463                 return false;
1464         //      also ignore     it      if      we      have already queried    it      (other master server    response)
1465         for( n =        0 ; n   < serverlist_cachecount ; n++   )
1466                 if( !strcmp( ipstring, serverlist_cache[ n ].info.cname ) )
1467                         break;
1468
1469         entry = &serverlist_cache[n];
1470
1471         if( n < serverlist_cachecount ) {
1472                 // the entry has already been queried once or
1473                 return true;
1474         }
1475
1476         memset(entry, 0, sizeof(entry));
1477         entry->protocol =       protocol;
1478         //      store   the data        the engine cares about (address and     ping)
1479         strlcpy (entry->info.cname, ipstring, sizeof(entry->info.cname));
1480
1481         entry->info.isfavorite = isfavorite;
1482
1483         // no, then reset the ping right away
1484         entry->info.ping = -1;
1485         // we also want to increase the serverlist_cachecount then
1486         serverlist_cachecount++;
1487         serverquerycount++;
1488
1489         entry->query =  SQS_QUERYING;
1490
1491         return true;
1492 }
1493
1494 static void NetConn_ClientParsePacket_ServerList_ParseDPList(lhnetaddress_t *senderaddress, const unsigned char *data, int length, qboolean isextended)
1495 {
1496         masterreplycount++;
1497         if (serverlist_consoleoutput)
1498                 Con_Printf("received DarkPlaces %sserver list...\n", isextended ? "extended " : "");
1499         while (length >= 7)
1500         {
1501                 char ipstring [128];
1502
1503                 // IPv4 address
1504                 if (data[0] == '\\')
1505                 {
1506                         unsigned short port = data[5] * 256 + data[6];
1507
1508                         if (port != 0 && (data[1] != 0xFF || data[2] != 0xFF || data[3] != 0xFF || data[4] != 0xFF))
1509                                 dpsnprintf (ipstring, sizeof (ipstring), "%u.%u.%u.%u:%hu", data[1], data[2], data[3], data[4], port);
1510
1511                         // move on to next address in packet
1512                         data += 7;
1513                         length -= 7;
1514                 }
1515                 // IPv6 address
1516                 else if (data[0] == '/' && isextended && length >= 19)
1517                 {
1518                         unsigned short port = data[17] * 256 + data[18];
1519
1520                         if (port != 0)
1521                         {
1522                                 const char *ifname;
1523
1524                                 /// \TODO: make some basic checks of the IP address (broadcast, ...)
1525
1526                                 ifname = LHNETADDRESS_GetInterfaceName(senderaddress);
1527                                 if (ifname != NULL)
1528                                 {
1529                                         dpsnprintf (ipstring, sizeof (ipstring), "[%x%02x:%x%02x:%x%02x:%x%02x:%x%02x:%x%02x:%x%02x:%x%02x%%%s]:%hu",
1530                                                                 data[1], data[2], data[3], data[4], data[5], data[6], data[7], data[8],
1531                                                                 data[9], data[10], data[11], data[12], data[13], data[14], data[15], data[16],
1532                                                                 ifname, port);
1533                                 }
1534                                 else
1535                                 {
1536                                         dpsnprintf (ipstring, sizeof (ipstring), "[%x%02x:%x%02x:%x%02x:%x%02x:%x%02x:%x%02x:%x%02x:%x%02x]:%hu",
1537                                                                 data[1], data[2], data[3], data[4], data[5], data[6], data[7], data[8],
1538                                                                 data[9], data[10], data[11], data[12], data[13], data[14], data[15], data[16],
1539                                                                 port);
1540                                 }
1541                         }
1542
1543                         // move on to next address in packet
1544                         data += 19;
1545                         length -= 19;
1546                 }
1547                 else
1548                 {
1549                         Con_Print("Error while parsing the server list\n");
1550                         break;
1551                 }
1552
1553                 if (serverlist_consoleoutput && developer_networking.integer)
1554                         Con_Printf("Requesting info from DarkPlaces server %s\n", ipstring);
1555
1556                 if( !NetConn_ClientParsePacket_ServerList_PrepareQuery( PROTOCOL_DARKPLACES7, ipstring, false ) ) {
1557                         break;
1558                 }
1559
1560         }
1561
1562         // begin or resume serverlist queries
1563         serverlist_querysleep = false;
1564         serverlist_querywaittime = realtime + 3;
1565 }
1566
1567 static int NetConn_ClientParsePacket(lhnetsocket_t *mysocket, unsigned char *data, int length, lhnetaddress_t *peeraddress)
1568 {
1569         qboolean fromserver;
1570         int ret, c, control;
1571         const char *s;
1572         char *string, addressstring2[128], ipstring[32];
1573         char stringbuf[16384];
1574
1575         // quakeworld ingame packet
1576         fromserver = cls.netcon && mysocket == cls.netcon->mysocket && !LHNETADDRESS_Compare(&cls.netcon->peeraddress, peeraddress);
1577
1578         // convert the address to a string incase we need it
1579         LHNETADDRESS_ToString(peeraddress, addressstring2, sizeof(addressstring2), true);
1580
1581         if (length >= 5 && data[0] == 255 && data[1] == 255 && data[2] == 255 && data[3] == 255)
1582         {
1583                 // received a command string - strip off the packaging and put it
1584                 // into our string buffer with NULL termination
1585                 data += 4;
1586                 length -= 4;
1587                 length = min(length, (int)sizeof(stringbuf) - 1);
1588                 memcpy(stringbuf, data, length);
1589                 stringbuf[length] = 0;
1590                 string = stringbuf;
1591
1592                 if (developer_networking.integer)
1593                 {
1594                         Con_Printf("NetConn_ClientParsePacket: %s sent us a command:\n", addressstring2);
1595                         Com_HexDumpToConsole(data, length);
1596                 }
1597
1598                 if (length > 10 && !memcmp(string, "challenge ", 10) && cls.rcon_trying)
1599                 {
1600                         int i, j;
1601                         for (j = 0;j < MAX_RCONS;j++)
1602                         {
1603                                 i = (cls.rcon_ringpos + j) % MAX_RCONS;
1604                                 if(cls.rcon_commands[i][0])
1605                                         if (!LHNETADDRESS_Compare(peeraddress, &cls.rcon_addresses[i]))
1606                                                 break;
1607                         }
1608                         if (j < MAX_RCONS)
1609                         {
1610                                 char buf[1500];
1611                                 char argbuf[1500];
1612                                 const char *e;
1613                                 int n;
1614                                 dpsnprintf(argbuf, sizeof(argbuf), "%s %s", string + 10, cls.rcon_commands[i]);
1615                                 memcpy(buf, "\377\377\377\377srcon HMAC-MD4 CHALLENGE ", 29);
1616
1617                                 e = strchr(rcon_password.string, ' ');
1618                                 n = e ? e-rcon_password.string : (int)strlen(rcon_password.string);
1619
1620                                 if(HMAC_MDFOUR_16BYTES((unsigned char *) (buf + 29), (unsigned char *) argbuf, strlen(argbuf), (unsigned char *) rcon_password.string, n))
1621                                 {
1622                                         buf[45] = ' ';
1623                                         strlcpy(buf + 46, argbuf, sizeof(buf) - 46);
1624                                         NetConn_Write(mysocket, buf, 46 + strlen(buf + 46), peeraddress);
1625                                         cls.rcon_commands[i][0] = 0;
1626                                         --cls.rcon_trying;
1627
1628                                         for (i = 0;i < MAX_RCONS;i++)
1629                                                 if(cls.rcon_commands[i][0])
1630                                                         if (!LHNETADDRESS_Compare(peeraddress, &cls.rcon_addresses[i]))
1631                                                                 break;
1632                                         if(i < MAX_RCONS)
1633                                         {
1634                                                 NetConn_WriteString(mysocket, "\377\377\377\377getchallenge", peeraddress);
1635                                                 // extend the timeout on other requests as we asked for a challenge
1636                                                 for (i = 0;i < MAX_RCONS;i++)
1637                                                         if(cls.rcon_commands[i][0])
1638                                                                 if (!LHNETADDRESS_Compare(peeraddress, &cls.rcon_addresses[i]))
1639                                                                         cls.rcon_timeout[i] = realtime + rcon_secure_challengetimeout.value;
1640                                         }
1641
1642                                         return true; // we used up the challenge, so we can't use this oen for connecting now anyway
1643                                 }
1644                         }
1645                 }
1646                 if (length > 10 && !memcmp(string, "challenge ", 10) && cls.connect_trying)
1647                 {
1648                         // darkplaces or quake3
1649                         char protocolnames[1400];
1650                         Protocol_Names(protocolnames, sizeof(protocolnames));
1651                         Con_DPrintf("\"%s\" received, sending connect request back to %s\n", string, addressstring2);
1652                         M_Update_Return_Reason("Got challenge response");
1653                         // update the server IP in the userinfo (QW servers expect this, and it is used by the reconnect command)
1654                         InfoString_SetValue(cls.userinfo, sizeof(cls.userinfo), "*ip", addressstring2);
1655                         // TODO: add userinfo stuff here instead of using NQ commands?
1656                         if(crypto_rsaaes_pubkey)
1657                                 NetConn_WriteString(mysocket, va("\377\377\377\377connect\\protocol\\darkplaces 3\\protocols\\%s\\challenge\\%s\\crypto\\rsa+aes\\crypto_rsaaes_pubkey\\%s", protocolnames, string + 10, crypto_rsaaes_pubkey), peeraddress);
1658                         else
1659                                 NetConn_WriteString(mysocket, va("\377\377\377\377connect\\protocol\\darkplaces 3\\protocols\\%s\\challenge\\%s", protocolnames, string + 10), peeraddress);
1660                         return true;
1661                 }
1662                 if (length >= 24 && !memcmp(string, "crypto aes+dh serverkey ", 24))
1663                 {
1664                         char buf[1400];
1665                         int size;
1666                         crypto_rsaaes_handleserverkey(&cls.netcon->crypto, string + 24, length - 24);
1667                         memcpy(buf, "\377\377\377\377crypto aes+dh clientkey ", 28);
1668                         size = 28 + crypto_rsaaes_buildclientkey(&cls.netcon->crypto, buf + 28, sizeof(buf) - 28);
1669                         NetConn_Write(mysocket, buf, size, peeraddress);
1670                 }
1671                 if (length == 6 && !memcmp(string, "accept", 6) && cls.connect_trying)
1672                 {
1673                         // darkplaces or quake3
1674                         M_Update_Return_Reason("Accepted");
1675                         NetConn_ConnectionEstablished(mysocket, peeraddress, PROTOCOL_DARKPLACES3);
1676                         return true;
1677                 }
1678                 if (length > 7 && !memcmp(string, "reject ", 7) && cls.connect_trying)
1679                 {
1680                         char rejectreason[32];
1681                         cls.connect_trying = false;
1682                         string += 7;
1683                         length = min(length - 7, (int)sizeof(rejectreason) - 1);
1684                         memcpy(rejectreason, string, length);
1685                         rejectreason[length] = 0;
1686                         M_Update_Return_Reason(rejectreason);
1687                         return true;
1688                 }
1689                 if (length >= 15 && !memcmp(string, "statusResponse\x0A", 15))
1690                 {
1691                         serverlist_info_t *info;
1692                         char *p;
1693                         int n;
1694
1695                         string += 15;
1696                         // search the cache for this server and update it
1697                         n = NetConn_ClientParsePacket_ServerList_ProcessReply(addressstring2);
1698                         if (n < 0)
1699                                 return true;
1700
1701                         info = &serverlist_cache[n].info;
1702                         info->game[0] = 0;
1703                         info->mod[0]  = 0;
1704                         info->map[0]  = 0;
1705                         info->name[0] = 0;
1706                         info->qcstatus[0] = 0;
1707                         info->players[0] = 0;
1708                         info->protocol = -1;
1709                         info->numplayers = 0;
1710                         info->numbots = -1;
1711                         info->maxplayers  = 0;
1712                         info->gameversion = 0;
1713
1714                         p = strchr(string, '\n');
1715                         if(p)
1716                         {
1717                                 *p = 0; // cut off the string there
1718                                 ++p;
1719                         }
1720                         else
1721                                 Con_Printf("statusResponse without players block?\n");
1722
1723                         if ((s = SearchInfostring(string, "gamename"     )) != NULL) strlcpy(info->game, s, sizeof (info->game));
1724                         if ((s = SearchInfostring(string, "modname"      )) != NULL) strlcpy(info->mod , s, sizeof (info->mod ));
1725                         if ((s = SearchInfostring(string, "mapname"      )) != NULL) strlcpy(info->map , s, sizeof (info->map ));
1726                         if ((s = SearchInfostring(string, "hostname"     )) != NULL) strlcpy(info->name, s, sizeof (info->name));
1727                         if ((s = SearchInfostring(string, "protocol"     )) != NULL) info->protocol = atoi(s);
1728                         if ((s = SearchInfostring(string, "clients"      )) != NULL) info->numplayers = atoi(s);
1729                         if ((s = SearchInfostring(string, "bots"         )) != NULL) info->numbots = atoi(s);
1730                         if ((s = SearchInfostring(string, "sv_maxclients")) != NULL) info->maxplayers = atoi(s);
1731                         if ((s = SearchInfostring(string, "gameversion"  )) != NULL) info->gameversion = atoi(s);
1732                         if ((s = SearchInfostring(string, "qcstatus"     )) != NULL) strlcpy(info->qcstatus, s, sizeof(info->qcstatus));
1733                         if (p                                               != NULL) strlcpy(info->players, p, sizeof(info->players));
1734                         info->numhumans = info->numplayers - max(0, info->numbots);
1735                         info->freeslots = info->maxplayers - info->numplayers;
1736
1737                         NetConn_ClientParsePacket_ServerList_UpdateCache(n);
1738
1739                         return true;
1740                 }
1741                 if (length >= 13 && !memcmp(string, "infoResponse\x0A", 13))
1742                 {
1743                         serverlist_info_t *info;
1744                         int n;
1745
1746                         string += 13;
1747                         // search the cache for this server and update it
1748                         n = NetConn_ClientParsePacket_ServerList_ProcessReply(addressstring2);
1749                         if (n < 0)
1750                                 return true;
1751
1752                         info = &serverlist_cache[n].info;
1753                         info->game[0] = 0;
1754                         info->mod[0]  = 0;
1755                         info->map[0]  = 0;
1756                         info->name[0] = 0;
1757                         info->qcstatus[0] = 0;
1758                         info->players[0] = 0;
1759                         info->protocol = -1;
1760                         info->numplayers = 0;
1761                         info->numbots = -1;
1762                         info->maxplayers  = 0;
1763                         info->gameversion = 0;
1764
1765                         if ((s = SearchInfostring(string, "gamename"     )) != NULL) strlcpy(info->game, s, sizeof (info->game));
1766                         if ((s = SearchInfostring(string, "modname"      )) != NULL) strlcpy(info->mod , s, sizeof (info->mod ));
1767                         if ((s = SearchInfostring(string, "mapname"      )) != NULL) strlcpy(info->map , s, sizeof (info->map ));
1768                         if ((s = SearchInfostring(string, "hostname"     )) != NULL) strlcpy(info->name, s, sizeof (info->name));
1769                         if ((s = SearchInfostring(string, "protocol"     )) != NULL) info->protocol = atoi(s);
1770                         if ((s = SearchInfostring(string, "clients"      )) != NULL) info->numplayers = atoi(s);
1771                         if ((s = SearchInfostring(string, "bots"         )) != NULL) info->numbots = atoi(s);
1772                         if ((s = SearchInfostring(string, "sv_maxclients")) != NULL) info->maxplayers = atoi(s);
1773                         if ((s = SearchInfostring(string, "gameversion"  )) != NULL) info->gameversion = atoi(s);
1774                         if ((s = SearchInfostring(string, "qcstatus"     )) != NULL) strlcpy(info->qcstatus, s, sizeof(info->qcstatus));
1775                         info->numhumans = info->numplayers - max(0, info->numbots);
1776                         info->freeslots = info->maxplayers - info->numplayers;
1777
1778                         NetConn_ClientParsePacket_ServerList_UpdateCache(n);
1779
1780                         return true;
1781                 }
1782                 if (!strncmp(string, "getserversResponse\\", 19) && serverlist_cachecount < SERVERLIST_TOTALSIZE)
1783                 {
1784                         // Extract the IP addresses
1785                         data += 18;
1786                         length -= 18;
1787                         NetConn_ClientParsePacket_ServerList_ParseDPList(peeraddress, data, length, false);
1788                         return true;
1789                 }
1790                 if (!strncmp(string, "getserversExtResponse", 21) && serverlist_cachecount < SERVERLIST_TOTALSIZE)
1791                 {
1792                         // Extract the IP addresses
1793                         data += 21;
1794                         length -= 21;
1795                         NetConn_ClientParsePacket_ServerList_ParseDPList(peeraddress, data, length, true);
1796                         return true;
1797                 }
1798                 if (!memcmp(string, "d\n", 2) && serverlist_cachecount < SERVERLIST_TOTALSIZE)
1799                 {
1800                         // Extract the IP addresses
1801                         data += 2;
1802                         length -= 2;
1803                         masterreplycount++;
1804                         if (serverlist_consoleoutput)
1805                                 Con_Printf("received QuakeWorld server list from %s...\n", addressstring2);
1806                         while (length >= 6 && (data[0] != 0xFF || data[1] != 0xFF || data[2] != 0xFF || data[3] != 0xFF) && data[4] * 256 + data[5] != 0)
1807                         {
1808                                 dpsnprintf (ipstring, sizeof (ipstring), "%u.%u.%u.%u:%u", data[0], data[1], data[2], data[3], data[4] * 256 + data[5]);
1809                                 if (serverlist_consoleoutput && developer_networking.integer)
1810                                         Con_Printf("Requesting info from QuakeWorld server %s\n", ipstring);
1811
1812                                 if( !NetConn_ClientParsePacket_ServerList_PrepareQuery( PROTOCOL_QUAKEWORLD, ipstring, false ) ) {
1813                                         break;
1814                                 }
1815
1816                                 // move on to next address in packet
1817                                 data += 6;
1818                                 length -= 6;
1819                         }
1820                         // begin or resume serverlist queries
1821                         serverlist_querysleep = false;
1822                         serverlist_querywaittime = realtime + 3;
1823                         return true;
1824                 }
1825                 if (!strncmp(string, "extResponse ", 12))
1826                 {
1827                         ++cl_net_extresponse_count;
1828                         if(cl_net_extresponse_count > NET_EXTRESPONSE_MAX)
1829                                 cl_net_extresponse_count = NET_EXTRESPONSE_MAX;
1830                         cl_net_extresponse_last = (cl_net_extresponse_last + 1) % NET_EXTRESPONSE_MAX;
1831                         dpsnprintf(cl_net_extresponse[cl_net_extresponse_last], sizeof(cl_net_extresponse[cl_net_extresponse_last]), "\"%s\" %s", addressstring2, string + 12);
1832                         return true;
1833                 }
1834                 if (!strncmp(string, "ping", 4))
1835                 {
1836                         if (developer_extra.integer)
1837                                 Con_DPrintf("Received ping from %s, sending ack\n", addressstring2);
1838                         NetConn_WriteString(mysocket, "\377\377\377\377ack", peeraddress);
1839                         return true;
1840                 }
1841                 if (!strncmp(string, "ack", 3))
1842                         return true;
1843                 // QuakeWorld compatibility
1844                 if (length > 1 && string[0] == 'c' && (string[1] == '-' || (string[1] >= '0' && string[1] <= '9')) && cls.connect_trying)
1845                 {
1846                         // challenge message
1847                         Con_Printf("challenge %s received, sending QuakeWorld connect request back to %s\n", string + 1, addressstring2);
1848                         M_Update_Return_Reason("Got QuakeWorld challenge response");
1849                         cls.qw_qport = qport.integer;
1850                         // update the server IP in the userinfo (QW servers expect this, and it is used by the reconnect command)
1851                         InfoString_SetValue(cls.userinfo, sizeof(cls.userinfo), "*ip", addressstring2);
1852                         NetConn_WriteString(mysocket, va("\377\377\377\377connect %i %i %i \"%s\"\n", 28, cls.qw_qport, atoi(string + 1), cls.userinfo), peeraddress);
1853                         return true;
1854                 }
1855                 if (length >= 1 && string[0] == 'j' && cls.connect_trying)
1856                 {
1857                         // accept message
1858                         M_Update_Return_Reason("QuakeWorld Accepted");
1859                         NetConn_ConnectionEstablished(mysocket, peeraddress, PROTOCOL_QUAKEWORLD);
1860                         return true;
1861                 }
1862                 if (length > 2 && !memcmp(string, "n\\", 2))
1863                 {
1864                         serverlist_info_t *info;
1865                         int n;
1866
1867                         // qw server status
1868                         if (serverlist_consoleoutput && developer_networking.integer >= 2)
1869                                 Con_Printf("QW server status from server at %s:\n%s\n", addressstring2, string + 1);
1870
1871                         string += 1;
1872                         // search the cache for this server and update it
1873                         n = NetConn_ClientParsePacket_ServerList_ProcessReply(addressstring2);
1874                         if (n < 0)
1875                                 return true;
1876
1877                         info = &serverlist_cache[n].info;
1878                         strlcpy(info->game, "QuakeWorld", sizeof(info->game));
1879                         if ((s = SearchInfostring(string, "*gamedir"     )) != NULL) strlcpy(info->mod , s, sizeof (info->mod ));else info->mod[0]  = 0;
1880                         if ((s = SearchInfostring(string, "map"          )) != NULL) strlcpy(info->map , s, sizeof (info->map ));else info->map[0]  = 0;
1881                         if ((s = SearchInfostring(string, "hostname"     )) != NULL) strlcpy(info->name, s, sizeof (info->name));else info->name[0] = 0;
1882                         info->protocol = 0;
1883                         info->numplayers = 0; // updated below
1884                         info->numhumans = 0; // updated below
1885                         if ((s = SearchInfostring(string, "maxclients"   )) != NULL) info->maxplayers = atoi(s);else info->maxplayers  = 0;
1886                         if ((s = SearchInfostring(string, "gameversion"  )) != NULL) info->gameversion = atoi(s);else info->gameversion = 0;
1887
1888                         // count active players on server
1889                         // (we could gather more info, but we're just after the number)
1890                         s = strchr(string, '\n');
1891                         if (s)
1892                         {
1893                                 s++;
1894                                 while (s < string + length)
1895                                 {
1896                                         for (;s < string + length && *s != '\n';s++)
1897                                                 ;
1898                                         if (s >= string + length)
1899                                                 break;
1900                                         info->numplayers++;
1901                                         info->numhumans++;
1902                                         s++;
1903                                 }
1904                         }
1905
1906                         NetConn_ClientParsePacket_ServerList_UpdateCache(n);
1907
1908                         return true;
1909                 }
1910                 if (string[0] == 'n')
1911                 {
1912                         // qw print command
1913                         Con_Printf("QW print command from server at %s:\n%s\n", addressstring2, string + 1);
1914                 }
1915                 // we may not have liked the packet, but it was a command packet, so
1916                 // we're done processing this packet now
1917                 return true;
1918         }
1919         // quakeworld ingame packet
1920         if (fromserver && cls.protocol == PROTOCOL_QUAKEWORLD && length >= 8 && (ret = NetConn_ReceivedMessage(cls.netcon, data, length, cls.protocol, net_messagetimeout.value)) == 2)
1921         {
1922                 ret = 0;
1923                 CL_ParseServerMessage();
1924                 return ret;
1925         }
1926         // netquake control packets, supported for compatibility only
1927         if (length >= 5 && (control = BuffBigLong(data)) && (control & (~NETFLAG_LENGTH_MASK)) == (int)NETFLAG_CTL && (control & NETFLAG_LENGTH_MASK) == length)
1928         {
1929                 int n;
1930                 serverlist_info_t *info;
1931
1932                 data += 4;
1933                 length -= 4;
1934                 SZ_Clear(&net_message);
1935                 SZ_Write(&net_message, data, length);
1936                 MSG_BeginReading();
1937                 c = MSG_ReadByte();
1938                 switch (c)
1939                 {
1940                 case CCREP_ACCEPT:
1941                         if (developer_extra.integer)
1942                                 Con_DPrintf("Datagram_ParseConnectionless: received CCREP_ACCEPT from %s.\n", addressstring2);
1943                         if (cls.connect_trying)
1944                         {
1945                                 lhnetaddress_t clientportaddress;
1946                                 clientportaddress = *peeraddress;
1947                                 LHNETADDRESS_SetPort(&clientportaddress, MSG_ReadLong());
1948                                 // update the server IP in the userinfo (QW servers expect this, and it is used by the reconnect command)
1949                                 InfoString_SetValue(cls.userinfo, sizeof(cls.userinfo), "*ip", addressstring2);
1950                                 M_Update_Return_Reason("Accepted");
1951                                 NetConn_ConnectionEstablished(mysocket, &clientportaddress, PROTOCOL_QUAKE);
1952                         }
1953                         break;
1954                 case CCREP_REJECT:
1955                         if (developer_extra.integer)
1956                                 Con_DPrintf("Datagram_ParseConnectionless: received CCREP_REJECT from %s.\n", addressstring2);
1957                         cls.connect_trying = false;
1958                         M_Update_Return_Reason((char *)MSG_ReadString());
1959                         break;
1960                 case CCREP_SERVER_INFO:
1961                         if (developer_extra.integer)
1962                                 Con_DPrintf("Datagram_ParseConnectionless: received CCREP_SERVER_INFO from %s.\n", addressstring2);
1963                         // LordHavoc: because the quake server may report weird addresses
1964                         // we just ignore it and keep the real address
1965                         MSG_ReadString();
1966                         // search the cache for this server and update it
1967                         n = NetConn_ClientParsePacket_ServerList_ProcessReply(addressstring2);
1968                         if (n < 0)
1969                                 break;
1970
1971                         info = &serverlist_cache[n].info;
1972                         strlcpy(info->game, "Quake", sizeof(info->game));
1973                         strlcpy(info->mod , "", sizeof(info->mod)); // mod name is not specified
1974                         strlcpy(info->name, MSG_ReadString(), sizeof(info->name));
1975                         strlcpy(info->map , MSG_ReadString(), sizeof(info->map));
1976                         info->numplayers = MSG_ReadByte();
1977                         info->maxplayers = MSG_ReadByte();
1978                         info->protocol = MSG_ReadByte();
1979
1980                         NetConn_ClientParsePacket_ServerList_UpdateCache(n);
1981
1982                         break;
1983                 case CCREP_RCON: // RocketGuy: ProQuake rcon support
1984                         if (developer_extra.integer)
1985                                 Con_DPrintf("Datagram_ParseConnectionless: received CCREP_RCON from %s.\n", addressstring2);
1986
1987                         Con_Printf("%s\n", MSG_ReadString());
1988                         break;
1989                 case CCREP_PLAYER_INFO:
1990                         // we got a CCREP_PLAYER_INFO??
1991                         //if (developer_extra.integer)
1992                                 Con_Printf("Datagram_ParseConnectionless: received CCREP_PLAYER_INFO from %s.\n", addressstring2);
1993                         break;
1994                 case CCREP_RULE_INFO:
1995                         // we got a CCREP_RULE_INFO??
1996                         //if (developer_extra.integer)
1997                                 Con_Printf("Datagram_ParseConnectionless: received CCREP_RULE_INFO from %s.\n", addressstring2);
1998                         break;
1999                 default:
2000                         break;
2001                 }
2002                 SZ_Clear(&net_message);
2003                 // we may not have liked the packet, but it was a valid control
2004                 // packet, so we're done processing this packet now
2005                 return true;
2006         }
2007         ret = 0;
2008         if (fromserver && length >= (int)NET_HEADERSIZE && (ret = NetConn_ReceivedMessage(cls.netcon, data, length, cls.protocol, net_messagetimeout.value)) == 2)
2009                 CL_ParseServerMessage();
2010         return ret;
2011 }
2012
2013 void NetConn_QueryQueueFrame(void)
2014 {
2015         int index;
2016         int queries;
2017         int maxqueries;
2018         double timeouttime;
2019         static double querycounter = 0;
2020
2021         if(!net_slist_pause.integer && serverlist_paused)
2022                 ServerList_RebuildViewList();
2023         serverlist_paused = net_slist_pause.integer != 0;
2024
2025         if (serverlist_querysleep)
2026                 return;
2027
2028         // apply a cool down time after master server replies,
2029         // to avoid messing up the ping times on the servers
2030         if (serverlist_querywaittime > realtime)
2031                 return;
2032
2033         // each time querycounter reaches 1.0 issue a query
2034         querycounter += cl.realframetime * net_slist_queriespersecond.value;
2035         maxqueries = (int)querycounter;
2036         maxqueries = bound(0, maxqueries, net_slist_queriesperframe.integer);
2037         querycounter -= maxqueries;
2038
2039         if( maxqueries == 0 ) {
2040                 return;
2041         }
2042
2043         //      scan serverlist and issue queries as needed
2044         serverlist_querysleep = true;
2045
2046         timeouttime     = realtime - net_slist_timeout.value;
2047         for( index = 0, queries = 0 ;   index   < serverlist_cachecount &&      queries < maxqueries    ; index++ )
2048         {
2049                 serverlist_entry_t *entry = &serverlist_cache[ index ];
2050                 if( entry->query != SQS_QUERYING && entry->query != SQS_REFRESHING )
2051                 {
2052                         continue;
2053                 }
2054
2055                 serverlist_querysleep   = false;
2056                 if( entry->querycounter !=      0 && entry->querytime > timeouttime     )
2057                 {
2058                         continue;
2059                 }
2060
2061                 if( entry->querycounter !=      (unsigned) net_slist_maxtries.integer )
2062                 {
2063                         lhnetaddress_t  address;
2064                         int socket;
2065
2066                         LHNETADDRESS_FromString(&address, entry->info.cname, 0);
2067                         if      (entry->protocol == PROTOCOL_QUAKEWORLD)
2068                         {
2069                                 for (socket     = 0; socket     < cl_numsockets ;       socket++)
2070                                         NetConn_WriteString(cl_sockets[socket], "\377\377\377\377status\n", &address);
2071                         }
2072                         else
2073                         {
2074                                 for (socket     = 0; socket     < cl_numsockets ;       socket++)
2075                                         NetConn_WriteString(cl_sockets[socket], "\377\377\377\377getstatus", &address);
2076                         }
2077
2078                         //      update the entry fields
2079                         entry->querytime = realtime;
2080                         entry->querycounter++;
2081
2082                         // if not in the slist menu we should print the server to console
2083                         if (serverlist_consoleoutput)
2084                                 Con_Printf("querying %25s (%i. try)\n", entry->info.cname, entry->querycounter);
2085
2086                         queries++;
2087                 }
2088                 else
2089                 {
2090                         // have we tried to refresh this server?
2091                         if( entry->query == SQS_REFRESHING ) {
2092                                 // yes, so update the reply count (since its not responding anymore)
2093                                 serverreplycount--;
2094                                 if(!serverlist_paused)
2095                                         ServerList_ViewList_Remove(entry);
2096                         }
2097                         entry->query = SQS_TIMEDOUT;
2098                 }
2099         }
2100 }
2101
2102 void NetConn_ClientFrame(void)
2103 {
2104         int i, length;
2105         lhnetaddress_t peeraddress;
2106         NetConn_UpdateSockets();
2107         if (cls.connect_trying && cls.connect_nextsendtime < realtime)
2108         {
2109                 if (cls.connect_remainingtries == 0)
2110                         M_Update_Return_Reason("Connect: Waiting 10 seconds for reply");
2111                 cls.connect_nextsendtime = realtime + 1;
2112                 cls.connect_remainingtries--;
2113                 if (cls.connect_remainingtries <= -10)
2114                 {
2115                         cls.connect_trying = false;
2116                         M_Update_Return_Reason("Connect: Failed");
2117                         return;
2118                 }
2119                 // try challenge first (newer DP server or QW)
2120                 NetConn_WriteString(cls.connect_mysocket, "\377\377\377\377getchallenge", &cls.connect_address);
2121                 // then try netquake as a fallback (old server, or netquake)
2122                 SZ_Clear(&net_message);
2123                 // save space for the header, filled in later
2124                 MSG_WriteLong(&net_message, 0);
2125                 MSG_WriteByte(&net_message, CCREQ_CONNECT);
2126                 MSG_WriteString(&net_message, "QUAKE");
2127                 MSG_WriteByte(&net_message, NET_PROTOCOL_VERSION);
2128                 StoreBigLong(net_message.data, NETFLAG_CTL | (net_message.cursize & NETFLAG_LENGTH_MASK));
2129                 NetConn_Write(cls.connect_mysocket, net_message.data, net_message.cursize, &cls.connect_address);
2130                 SZ_Clear(&net_message);
2131         }
2132         for (i = 0;i < cl_numsockets;i++)
2133                 while (cl_sockets[i] && (length = NetConn_Read(cl_sockets[i], readbuffer, sizeof(readbuffer), &peeraddress)) > 0)
2134                         NetConn_ClientParsePacket(cl_sockets[i], readbuffer, length, &peeraddress);
2135         NetConn_QueryQueueFrame();
2136         if (cls.netcon && realtime > cls.netcon->timeout && !sv.active)
2137         {
2138                 Con_Print("Connection timed out\n");
2139                 CL_Disconnect();
2140                 Host_ShutdownServer ();
2141         }
2142 }
2143
2144 #define MAX_CHALLENGES 128
2145 struct challenge_s
2146 {
2147         lhnetaddress_t address;
2148         double time;
2149         char string[12];
2150 }
2151 challenge[MAX_CHALLENGES];
2152
2153 static void NetConn_BuildChallengeString(char *buffer, int bufferlength)
2154 {
2155         int i;
2156         char c;
2157         for (i = 0;i < bufferlength - 1;i++)
2158         {
2159                 do
2160                 {
2161                         c = rand () % (127 - 33) + 33;
2162                 } while (c == '\\' || c == ';' || c == '"' || c == '%' || c == '/');
2163                 buffer[i] = c;
2164         }
2165         buffer[i] = 0;
2166 }
2167
2168 /// (div0) build the full response only if possible; better a getinfo response than no response at all if getstatus won't fit
2169 static qboolean NetConn_BuildStatusResponse(const char* challenge, char* out_msg, size_t out_size, qboolean fullstatus)
2170 {
2171         char qcstatus[256];
2172         unsigned int nb_clients = 0, nb_bots = 0, i;
2173         int length;
2174         char teambuf[3];
2175
2176         SV_VM_Begin();
2177
2178         // How many clients are there?
2179         for (i = 0;i < (unsigned int)svs.maxclients;i++)
2180         {
2181                 if (svs.clients[i].active)
2182                 {
2183                         nb_clients++;
2184                         if (!svs.clients[i].netconnection)
2185                                 nb_bots++;
2186                 }
2187         }
2188
2189         *qcstatus = 0;
2190         if(prog->globaloffsets.worldstatus >= 0)
2191         {
2192                 const char *str = PRVM_G_STRING(prog->globaloffsets.worldstatus);
2193                 if(str && *str)
2194                 {
2195                         char *p;
2196                         const char *q;
2197                         p = qcstatus;
2198                         for(q = str; *q; ++q)
2199                                 if(*q != '\\' && *q != '\n')
2200                                         *p++ = *q;
2201                         *p = 0;
2202                 }
2203         }
2204
2205         /// \TODO: we should add more information for the full status string
2206         length = dpsnprintf(out_msg, out_size,
2207                                                 "\377\377\377\377%s\x0A"
2208                                                 "\\gamename\\%s\\modname\\%s\\gameversion\\%d\\sv_maxclients\\%d"
2209                                                 "\\clients\\%d\\bots\\%d\\mapname\\%s\\hostname\\%s\\protocol\\%d"
2210                                                 "%s%s"
2211                                                 "%s%s"
2212                                                 "%s",
2213                                                 fullstatus ? "statusResponse" : "infoResponse",
2214                                                 gamename, com_modname, gameversion.integer, svs.maxclients,
2215                                                 nb_clients, nb_bots, sv.name, hostname.string, NET_PROTOCOL_VERSION,
2216                                                 *qcstatus ? "\\qcstatus\\" : "", qcstatus,
2217                                                 challenge ? "\\challenge\\" : "", challenge ? challenge : "",
2218                                                 fullstatus ? "\n" : "");
2219
2220         // Make sure it fits in the buffer
2221         if (length < 0)
2222                 goto bad;
2223
2224         if (fullstatus)
2225         {
2226                 char *ptr;
2227                 int left;
2228                 int savelength;
2229
2230                 savelength = length;
2231
2232                 ptr = out_msg + length;
2233                 left = (int)out_size - length;
2234
2235                 for (i = 0;i < (unsigned int)svs.maxclients;i++)
2236                 {
2237                         client_t *cl = &svs.clients[i];
2238                         if (cl->active)
2239                         {
2240                                 int nameind, cleanind, pingvalue;
2241                                 char curchar;
2242                                 char cleanname [sizeof(cl->name)];
2243
2244                                 // Remove all characters '"' and '\' in the player name
2245                                 nameind = 0;
2246                                 cleanind = 0;
2247                                 do
2248                                 {
2249                                         curchar = cl->name[nameind++];
2250                                         if (curchar != '"' && curchar != '\\')
2251                                         {
2252                                                 cleanname[cleanind++] = curchar;
2253                                                 if (cleanind == sizeof(cleanname) - 1)
2254                                                         break;
2255                                         }
2256                                 } while (curchar != '\0');
2257                                 cleanname[cleanind] = 0; // cleanind is always a valid index even at this point
2258
2259                                 pingvalue = (int)(cl->ping * 1000.0f);
2260                                 if(cl->netconnection)
2261                                         pingvalue = bound(1, pingvalue, 9999);
2262                                 else
2263                                         pingvalue = 0;
2264
2265                                 *qcstatus = 0;
2266                                 if(prog->fieldoffsets.clientstatus >= 0)
2267                                 {
2268                                         const char *str = PRVM_E_STRING(PRVM_EDICT_NUM(i + 1), prog->fieldoffsets.clientstatus);
2269                                         if(str && *str)
2270                                         {
2271                                                 char *p;
2272                                                 const char *q;
2273                                                 p = qcstatus;
2274                                                 for(q = str; *q && p != qcstatus + sizeof(qcstatus) - 1; ++q)
2275                                                         if(*q != '\\' && *q != '"' && !ISWHITESPACE(*q))
2276                                                                 *p++ = *q;
2277                                                 *p = 0;
2278                                         }
2279                                 }
2280
2281                                 if ((gamemode == GAME_NEXUIZ) && (teamplay.integer > 0))
2282                                 {
2283                                         if(cl->frags == -666) // spectator
2284                                                 strlcpy(teambuf, " 0", sizeof(teambuf));
2285                                         else if(cl->colors == 0x44) // red team
2286                                                 strlcpy(teambuf, " 1", sizeof(teambuf));
2287                                         else if(cl->colors == 0xDD) // blue team
2288                                                 strlcpy(teambuf, " 2", sizeof(teambuf));
2289                                         else if(cl->colors == 0xCC) // yellow team
2290                                                 strlcpy(teambuf, " 3", sizeof(teambuf));
2291                                         else if(cl->colors == 0x99) // pink team
2292                                                 strlcpy(teambuf, " 4", sizeof(teambuf));
2293                                         else
2294                                                 strlcpy(teambuf, " 0", sizeof(teambuf));
2295                                 }
2296                                 else
2297                                         *teambuf = 0;
2298
2299                                 // note: team number is inserted according to SoF2 protocol
2300                                 if(*qcstatus)
2301                                         length = dpsnprintf(ptr, left, "%s %d%s \"%s\"\n",
2302                                                                                 qcstatus,
2303                                                                                 pingvalue,
2304                                                                                 teambuf,
2305                                                                                 cleanname);
2306                                 else
2307                                         length = dpsnprintf(ptr, left, "%d %d%s \"%s\"\n",
2308                                                                                 cl->frags,
2309                                                                                 pingvalue,
2310                                                                                 teambuf,
2311                                                                                 cleanname);
2312
2313                                 if(length < 0)
2314                                 {
2315                                         // out of space?
2316                                         // turn it into an infoResponse!
2317                                         out_msg[savelength] = 0;
2318                                         memcpy(out_msg + 4, "infoResponse\x0A", 13);
2319                                         memmove(out_msg + 17, out_msg + 19, savelength - 19);
2320                                         break;
2321                                 }
2322                                 left -= length;
2323                                 ptr += length;
2324                         }
2325                 }
2326         }
2327
2328         SV_VM_End();
2329         return true;
2330
2331 bad:
2332         SV_VM_End();
2333         return false;
2334 }
2335
2336 static qboolean NetConn_PreventConnectFlood(lhnetaddress_t *peeraddress)
2337 {
2338         int floodslotnum, bestfloodslotnum;
2339         double bestfloodtime;
2340         lhnetaddress_t noportpeeraddress;
2341         // see if this is a connect flood
2342         noportpeeraddress = *peeraddress;
2343         LHNETADDRESS_SetPort(&noportpeeraddress, 0);
2344         bestfloodslotnum = 0;
2345         bestfloodtime = sv.connectfloodaddresses[bestfloodslotnum].lasttime;
2346         for (floodslotnum = 0;floodslotnum < MAX_CONNECTFLOODADDRESSES;floodslotnum++)
2347         {
2348                 if (bestfloodtime >= sv.connectfloodaddresses[floodslotnum].lasttime)
2349                 {
2350                         bestfloodtime = sv.connectfloodaddresses[floodslotnum].lasttime;
2351                         bestfloodslotnum = floodslotnum;
2352                 }
2353                 if (sv.connectfloodaddresses[floodslotnum].lasttime && LHNETADDRESS_Compare(&noportpeeraddress, &sv.connectfloodaddresses[floodslotnum].address) == 0)
2354                 {
2355                         // this address matches an ongoing flood address
2356                         if (realtime < sv.connectfloodaddresses[floodslotnum].lasttime + net_connectfloodblockingtimeout.value)
2357                         {
2358                                 // renew the ban on this address so it does not expire
2359                                 // until the flood has subsided
2360                                 sv.connectfloodaddresses[floodslotnum].lasttime = realtime;
2361                                 //Con_Printf("Flood detected!\n");
2362                                 return true;
2363                         }
2364                         // the flood appears to have subsided, so allow this
2365                         bestfloodslotnum = floodslotnum; // reuse the same slot
2366                         break;
2367                 }
2368         }
2369         // begin a new timeout on this address
2370         sv.connectfloodaddresses[bestfloodslotnum].address = noportpeeraddress;
2371         sv.connectfloodaddresses[bestfloodslotnum].lasttime = realtime;
2372         //Con_Printf("Flood detection initiated!\n");
2373         return false;
2374 }
2375
2376 void NetConn_ClearConnectFlood(lhnetaddress_t *peeraddress)
2377 {
2378         int floodslotnum;
2379         lhnetaddress_t noportpeeraddress;
2380         // see if this is a connect flood
2381         noportpeeraddress = *peeraddress;
2382         LHNETADDRESS_SetPort(&noportpeeraddress, 0);
2383         for (floodslotnum = 0;floodslotnum < MAX_CONNECTFLOODADDRESSES;floodslotnum++)
2384         {
2385                 if (sv.connectfloodaddresses[floodslotnum].lasttime && LHNETADDRESS_Compare(&noportpeeraddress, &sv.connectfloodaddresses[floodslotnum].address) == 0)
2386                 {
2387                         // this address matches an ongoing flood address
2388                         // remove the ban
2389                         sv.connectfloodaddresses[floodslotnum].address.addresstype = LHNETADDRESSTYPE_NONE;
2390                         sv.connectfloodaddresses[floodslotnum].lasttime = 0;
2391                         //Con_Printf("Flood cleared!\n");
2392                 }
2393         }
2394 }
2395
2396 typedef qboolean (*rcon_matchfunc_t) (lhnetaddress_t *peeraddress, const char *password, const char *hash, const char *s, int slen);
2397
2398 qboolean hmac_mdfour_time_matching(lhnetaddress_t *peeraddress, const char *password, const char *hash, const char *s, int slen)
2399 {
2400         char mdfourbuf[16];
2401         long t1, t2;
2402
2403         t1 = (long) time(NULL);
2404         t2 = strtol(s, NULL, 0);
2405         if(abs(t1 - t2) > rcon_secure_maxdiff.integer)
2406                 return false;
2407
2408         if(!HMAC_MDFOUR_16BYTES((unsigned char *) mdfourbuf, (unsigned char *) s, slen, (unsigned char *) password, strlen(password)))
2409                 return false;
2410
2411         return !memcmp(mdfourbuf, hash, 16);
2412 }
2413
2414 qboolean hmac_mdfour_challenge_matching(lhnetaddress_t *peeraddress, const char *password, const char *hash, const char *s, int slen)
2415 {
2416         char mdfourbuf[16];
2417         int i;
2418
2419         if(slen < (int)(sizeof(challenge[0].string)) - 1)
2420                 return false;
2421
2422         // validate the challenge
2423         for (i = 0;i < MAX_CHALLENGES;i++)
2424                 if(challenge[i].time > 0)
2425                         if (!LHNETADDRESS_Compare(peeraddress, &challenge[i].address) && !strncmp(challenge[i].string, s, sizeof(challenge[0].string) - 1))
2426                                 break;
2427         // if the challenge is not recognized, drop the packet
2428         if (i == MAX_CHALLENGES)
2429                 return false;
2430
2431         if(!HMAC_MDFOUR_16BYTES((unsigned char *) mdfourbuf, (unsigned char *) s, slen, (unsigned char *) password, strlen(password)))
2432                 return false;
2433
2434         if(memcmp(mdfourbuf, hash, 16))
2435                 return false;
2436
2437         // unmark challenge to prevent replay attacks
2438         challenge[i].time = 0;
2439
2440         return true;
2441 }
2442
2443 qboolean plaintext_matching(lhnetaddress_t *peeraddress, const char *password, const char *hash, const char *s, int slen)
2444 {
2445         return !strcmp(password, hash);
2446 }
2447
2448 /// returns a string describing the user level, or NULL for auth failure
2449 const char *RCon_Authenticate(lhnetaddress_t *peeraddress, const char *password, const char *s, const char *endpos, rcon_matchfunc_t comparator, const char *cs, int cslen)
2450 {
2451         const char *text, *userpass_start, *userpass_end, *userpass_startpass;
2452         char buf[MAX_INPUTLINE];
2453         qboolean hasquotes;
2454         qboolean restricted = false;
2455         qboolean have_usernames = false;
2456
2457         userpass_start = rcon_password.string;
2458         while((userpass_end = strchr(userpass_start, ' ')))
2459         {
2460                 have_usernames = true;
2461                 strlcpy(buf, userpass_start, ((size_t)(userpass_end-userpass_start) >= sizeof(buf)) ? (int)(sizeof(buf)) : (int)(userpass_end-userpass_start+1));
2462                 if(buf[0])
2463                         if(comparator(peeraddress, buf, password, cs, cslen))
2464                                 goto allow;
2465                 userpass_start = userpass_end + 1;
2466         }
2467         if(userpass_start[0])
2468         {
2469                 userpass_end = userpass_start + strlen(userpass_start);
2470                 if(comparator(peeraddress, userpass_start, password, cs, cslen))
2471                         goto allow;
2472         }
2473
2474         restricted = true;
2475         have_usernames = false;
2476         userpass_start = rcon_restricted_password.string;
2477         while((userpass_end = strchr(userpass_start, ' ')))
2478         {
2479                 have_usernames = true;
2480                 strlcpy(buf, userpass_start, ((size_t)(userpass_end-userpass_start) >= sizeof(buf)) ? (int)(sizeof(buf)) : (int)(userpass_end-userpass_start+1));
2481                 if(buf[0])
2482                         if(comparator(peeraddress, buf, password, cs, cslen))
2483                                 goto check;
2484                 userpass_start = userpass_end + 1;
2485         }
2486         if(userpass_start[0])
2487         {
2488                 userpass_end = userpass_start + strlen(userpass_start);
2489                 if(comparator(peeraddress, userpass_start, password, cs, cslen))
2490                         goto check;
2491         }
2492
2493         return NULL; // DENIED
2494
2495 check:
2496         for(text = s; text != endpos; ++text)
2497                 if((signed char) *text > 0 && ((signed char) *text < (signed char) ' ' || *text == ';'))
2498                         return NULL; // block possible exploits against the parser/alias expansion
2499
2500         while(s != endpos)
2501         {
2502                 size_t l = strlen(s);
2503                 if(l)
2504                 {
2505                         hasquotes = (strchr(s, '"') != NULL);
2506                         // sorry, we can't allow these substrings in wildcard expressions,
2507                         // as they can mess with the argument counts
2508                         text = rcon_restricted_commands.string;
2509                         while(COM_ParseToken_Console(&text))
2510                         {
2511                                 // com_token now contains a pattern to check for...
2512                                 if(strchr(com_token, '*') || strchr(com_token, '?')) // wildcard expression, * can only match a SINGLE argument
2513                                 {
2514                                         if(!hasquotes)
2515                                                 if(matchpattern_with_separator(s, com_token, true, " ", true)) // note how we excluded tab, newline etc. above
2516                                                         goto match;
2517                                 }
2518                                 else if(strchr(com_token, ' ')) // multi-arg expression? must match in whole
2519                                 {
2520                                         if(!strcmp(com_token, s))
2521                                                 goto match;
2522                                 }
2523                                 else // single-arg expression? must match the beginning of the command
2524                                 {
2525                                         if(!strcmp(com_token, s))
2526                                                 goto match;
2527                                         if(!memcmp(va("%s ", com_token), s, strlen(com_token) + 1))
2528                                                 goto match;
2529                                 }
2530                         }
2531                         // if we got here, nothing matched!
2532                         return NULL;
2533                 }
2534 match:
2535                 s += l + 1;
2536         }
2537
2538 allow:
2539         userpass_startpass = strchr(userpass_start, ':');
2540         if(have_usernames && userpass_startpass && userpass_startpass < userpass_end)
2541                 return va("%srcon (username %.*s)", restricted ? "restricted " : "", (int)(userpass_startpass-userpass_start), userpass_start);
2542         else
2543                 return va("%srcon", restricted ? "restricted " : "");
2544
2545         return "restricted rcon";
2546 }
2547
2548 void RCon_Execute(lhnetsocket_t *mysocket, lhnetaddress_t *peeraddress, const char *addressstring2, const char *userlevel, const char *s, const char *endpos)
2549 {
2550         if(userlevel)
2551         {
2552                 // looks like a legitimate rcon command with the correct password
2553                 const char *s_ptr = s;
2554                 Con_Printf("server received %s command from %s: ", userlevel, host_client ? host_client->name : addressstring2);
2555                 while(s_ptr != endpos)
2556                 {
2557                         size_t l = strlen(s_ptr);
2558                         if(l)
2559                                 Con_Printf(" %s;", s_ptr);
2560                         s_ptr += l + 1;
2561                 }
2562                 Con_Printf("\n");
2563
2564                 if (!host_client || !host_client->netconnection || LHNETADDRESS_GetAddressType(&host_client->netconnection->peeraddress) != LHNETADDRESSTYPE_LOOP)
2565                         Con_Rcon_Redirect_Init(mysocket, peeraddress);
2566                 while(s != endpos)
2567                 {
2568                         size_t l = strlen(s);
2569                         if(l)
2570                         {
2571                                 client_t *host_client_save = host_client;
2572                                 Cmd_ExecuteString(s, src_command);
2573                                 host_client = host_client_save;
2574                                 // in case it is a command that changes host_client (like restart)
2575                         }
2576                         s += l + 1;
2577                 }
2578                 Con_Rcon_Redirect_End();
2579         }
2580         else
2581         {
2582                 Con_Printf("server denied rcon access to %s\n", host_client ? host_client->name : addressstring2);
2583         }
2584 }
2585
2586 extern void SV_SendServerinfo (client_t *client);
2587 static int NetConn_ServerParsePacket(lhnetsocket_t *mysocket, unsigned char *data, int length, lhnetaddress_t *peeraddress)
2588 {
2589         int i, ret, clientnum, best;
2590         double besttime;
2591         client_t *client;
2592         char *s, *string, response[1400], addressstring2[128], stringbuf[16384];
2593         qboolean islocal = (LHNETADDRESS_GetAddressType(peeraddress) == LHNETADDRESSTYPE_LOOP);
2594
2595         if (!sv.active)
2596                 return false;
2597
2598         // convert the address to a string incase we need it
2599         LHNETADDRESS_ToString(peeraddress, addressstring2, sizeof(addressstring2), true);
2600
2601         // see if we can identify the sender as a local player
2602         // (this is necessary for rcon to send a reliable reply if the client is
2603         //  actually on the server, not sending remotely)
2604         for (i = 0, host_client = svs.clients;i < svs.maxclients;i++, host_client++)
2605                 if (host_client->netconnection && host_client->netconnection->mysocket == mysocket && !LHNETADDRESS_Compare(&host_client->netconnection->peeraddress, peeraddress))
2606                         break;
2607         if (i == svs.maxclients)
2608                 host_client = NULL;
2609
2610         if (length >= 5 && data[0] == 255 && data[1] == 255 && data[2] == 255 && data[3] == 255)
2611         {
2612                 // received a command string - strip off the packaging and put it
2613                 // into our string buffer with NULL termination
2614                 data += 4;
2615                 length -= 4;
2616                 length = min(length, (int)sizeof(stringbuf) - 1);
2617                 memcpy(stringbuf, data, length);
2618                 stringbuf[length] = 0;
2619                 string = stringbuf;
2620
2621                 if (developer_extra.integer)
2622                 {
2623                         Con_Printf("NetConn_ServerParsePacket: %s sent us a command:\n", addressstring2);
2624                         Com_HexDumpToConsole(data, length);
2625                 }
2626
2627                 if (length >= 12 && !memcmp(string, "getchallenge", 12) && (islocal || sv_public.integer > -2))
2628                 {
2629                         for (i = 0, best = 0, besttime = realtime;i < MAX_CHALLENGES;i++)
2630                         {
2631                                 if(challenge[i].time > 0)
2632                                         if (!LHNETADDRESS_Compare(peeraddress, &challenge[i].address))
2633                                                 break;
2634                                 if (besttime > challenge[i].time)
2635                                         besttime = challenge[best = i].time;
2636                         }
2637                         // if we did not find an exact match, choose the oldest and
2638                         // update address and string
2639                         if (i == MAX_CHALLENGES)
2640                         {
2641                                 i = best;
2642                                 challenge[i].address = *peeraddress;
2643                                 NetConn_BuildChallengeString(challenge[i].string, sizeof(challenge[i].string));
2644                         }
2645                         challenge[i].time = realtime;
2646                         // send the challenge
2647                         NetConn_WriteString(mysocket, va("\377\377\377\377challenge %s", challenge[i].string), peeraddress);
2648                         return true;
2649                 }
2650                 if (length > 8 && !memcmp(string, "connect\\", 8) && (islocal || sv_public.integer > -2))
2651                 {
2652                         string += 7;
2653                         length -= 7;
2654
2655                         if (!(s = SearchInfostring(string, "challenge")))
2656                                 return true;
2657                         // validate the challenge
2658                         for (i = 0;i < MAX_CHALLENGES;i++)
2659                                 if(challenge[i].time > 0)
2660                                         if (!LHNETADDRESS_Compare(peeraddress, &challenge[i].address) && !strcmp(challenge[i].string, s))
2661                                                 break;
2662                         // if the challenge is not recognized, drop the packet
2663                         if (i == MAX_CHALLENGES)
2664                                 return true;
2665
2666                         // check engine protocol
2667                         if(!(s = SearchInfostring(string, "protocol")) || strcmp(s, "darkplaces 3"))
2668                         {
2669                                 if (developer_extra.integer)
2670                                         Con_Printf("Datagram_ParseConnectionless: sending \"reject Wrong game protocol.\" to %s.\n", addressstring2);
2671                                 NetConn_WriteString(mysocket, "\377\377\377\377reject Wrong game protocol.", peeraddress);
2672                                 return true;
2673                         }
2674
2675                         // see if this is a duplicate connection request or a disconnected
2676                         // client who is rejoining to the same client slot
2677                         for (clientnum = 0, client = svs.clients;clientnum < svs.maxclients;clientnum++, client++)
2678                         {
2679                                 if (client->netconnection && LHNETADDRESS_Compare(peeraddress, &client->netconnection->peeraddress) == 0)
2680                                 {
2681                                         // this is a known client...
2682                                         if (client->spawned)
2683                                         {
2684                                                 // client crashed and is coming back,
2685                                                 // keep their stuff intact
2686                                                 if (developer_extra.integer)
2687                                                         Con_Printf("Datagram_ParseConnectionless: sending \"accept\" to %s.\n", addressstring2);
2688                                                 NetConn_WriteString(mysocket, "\377\377\377\377accept", peeraddress);
2689                                                 SV_VM_Begin();
2690                                                 SV_SendServerinfo(client);
2691                                                 SV_VM_End();
2692                                         }
2693                                         else
2694                                         {
2695                                                 // client is still trying to connect,
2696                                                 // so we send a duplicate reply
2697                                                 if (developer_extra.integer)
2698                                                         Con_Printf("Datagram_ParseConnectionless: sending duplicate accept to %s.\n", addressstring2);
2699                                                 NetConn_WriteString(mysocket, "\377\377\377\377accept", peeraddress);
2700                                         }
2701                                         return true;
2702                                 }
2703                         }
2704
2705                         if (NetConn_PreventConnectFlood(peeraddress))
2706                                 return true;
2707
2708                         if((s = SearchInfostring(string, "crypto")) && !strcmp(s, "rsa+aes") && crypto_rsaaes_pubkey)
2709                         {
2710                                 char buf[1400];
2711                                 int size;
2712                                 int best = 0;
2713
2714                                 // crypto connect
2715                                 for(i = 0; i < MAX_CRYPTOCONNECTS; ++i)
2716                                 {
2717                                         if(LHNETADDRESS_Compare(peeraddress, &svs.cryptoconnects[i].address))
2718                                         {
2719                                                 best = i;
2720                                                 break;
2721                                         }
2722                                         if(svs.cryptoconnects[i].lasttime < svs.cryptoconnects[best].lasttime)
2723                                                 best = i;
2724                                 }
2725
2726                                 svs.cryptoconnects[best].lasttime = realtime;
2727                                 svs.cryptoconnects[best].address = *peeraddress;
2728
2729                                 memcpy(buf, "\377\377\377\377crypto aes+dh serverkey ", 28);
2730                                 crypto_rsaaes_initwithclientkey(&svs.cryptoconnects[best].crypto, SearchInfostring(string, "crypto_key"));
2731                                 size = 28 + crypto_rsaaes_buildserverkey(&svs.cryptoconnects[best].crypto, buf + 28, sizeof(buf) - 28);
2732                                 NetConn_Write(mysocket, buf, size, peeraddress);
2733
2734                                 return true;
2735                         }
2736
2737                         // find an empty client slot for this new client
2738                         for (clientnum = 0, client = svs.clients;clientnum < svs.maxclients;clientnum++, client++)
2739                         {
2740                                 netconn_t *conn;
2741                                 if (!client->active && (conn = NetConn_Open(mysocket, peeraddress)))
2742                                 {
2743                                         // allocated connection
2744                                         if (developer_extra.integer)
2745                                                 Con_Printf("Datagram_ParseConnectionless: sending \"accept\" to %s.\n", conn->address);
2746
2747                                         NetConn_WriteString(mysocket, "\377\377\377\377accept", peeraddress);
2748                                         // now set up the client
2749                                         SV_VM_Begin();
2750                                         SV_ConnectClient(clientnum, conn);
2751                                         SV_VM_End();
2752                                         NetConn_Heartbeat(1);
2753
2754                                         return true;
2755                                 }
2756                         }
2757
2758                         // no empty slots found - server is full
2759                         if (developer_extra.integer)
2760                                 Con_Printf("Datagram_ParseConnectionless: sending \"reject Server is full.\" to %s.\n", addressstring2);
2761                         NetConn_WriteString(mysocket, "\377\377\377\377reject Server is full.", peeraddress);
2762
2763                         return true;
2764                 }
2765                 if (length >= 24 && !memcmp(string, "crypto aes+dh clientkey ", 24))
2766                 {
2767                         // crypto connect
2768                         for(i = 0; i < MAX_CRYPTOCONNECTS; ++i)
2769                                 if(LHNETADDRESS_Compare(peeraddress, &svs.cryptoconnects[i].address))
2770                                         break;
2771
2772                         if(i < MAX_CRYPTOCONNECTS)
2773                         {
2774                                 crypto_rsaaes_handleclientkey(&svs.cryptoconnects[i].crypto, string + 24, length - 24);
2775
2776                                 // find an empty client slot for this new client
2777                                 for (clientnum = 0, client = svs.clients;clientnum < svs.maxclients;clientnum++, client++)
2778                                 {
2779                                         netconn_t *conn;
2780                                         if (!client->active && (conn = NetConn_Open(mysocket, peeraddress)))
2781                                         {
2782                                                 // allocated connection
2783                                                 if (developer.integer >= 10)
2784                                                         Con_Printf("Datagram_ParseConnectionless: sending \"accept\" to %s.\n", conn->address);
2785
2786                                                 conn->crypto = svs.cryptoconnects[i].crypto;
2787
2788                                                 NetConn_WriteString(mysocket, "\377\377\377\377accept", peeraddress);
2789                                                 // now set up the client
2790                                                 SV_VM_Begin();
2791                                                 SV_ConnectClient(clientnum, conn);
2792                                                 SV_VM_End();
2793                                                 NetConn_Heartbeat(1);
2794
2795                                                 return true;
2796                                         }
2797                                 }
2798
2799                                 // no empty slots found - server is full
2800                                 if (developer.integer >= 10)
2801                                         Con_Printf("Datagram_ParseConnectionless: sending \"reject Server is full.\" to %s.\n", addressstring2);
2802                                 NetConn_WriteString(mysocket, "\377\377\377\377reject Server is full.", peeraddress);
2803
2804                                 return true;
2805                         }
2806                 }
2807                 if (length >= 7 && !memcmp(string, "getinfo", 7) && (islocal || sv_public.integer > -1))
2808                 {
2809                         const char *challenge = NULL;
2810
2811                         // If there was a challenge in the getinfo message
2812                         if (length > 8 && string[7] == ' ')
2813                                 challenge = string + 8;
2814
2815                         if (NetConn_BuildStatusResponse(challenge, response, sizeof(response), false))
2816                         {
2817                                 if (developer_extra.integer)
2818                                         Con_DPrintf("Sending reply to master %s - %s\n", addressstring2, response);
2819                                 NetConn_WriteString(mysocket, response, peeraddress);
2820                         }
2821                         return true;
2822                 }
2823                 if (length >= 9 && !memcmp(string, "getstatus", 9) && (islocal || sv_public.integer > -1))
2824                 {
2825                         const char *challenge = NULL;
2826
2827                         // If there was a challenge in the getinfo message
2828                         if (length > 10 && string[9] == ' ')
2829                                 challenge = string + 10;
2830
2831                         if (NetConn_BuildStatusResponse(challenge, response, sizeof(response), true))
2832                         {
2833                                 if (developer_extra.integer)
2834                                         Con_DPrintf("Sending reply to client %s - %s\n", addressstring2, response);
2835                                 NetConn_WriteString(mysocket, response, peeraddress);
2836                         }
2837                         return true;
2838                 }
2839                 if (length >= 37 && !memcmp(string, "srcon HMAC-MD4 TIME ", 20))
2840                 {
2841                         char *password = string + 20;
2842                         char *timeval = string + 37;
2843                         char *s = strchr(timeval, ' ');
2844                         char *endpos = string + length + 1; // one behind the NUL, so adding strlen+1 will eventually reach it
2845                         const char *userlevel;
2846
2847                         if(rcon_secure.integer > 1)
2848                                 return true;
2849
2850                         if(!s)
2851                                 return true; // invalid packet
2852                         ++s;
2853
2854                         userlevel = RCon_Authenticate(peeraddress, password, s, endpos, hmac_mdfour_time_matching, timeval, endpos - timeval - 1); // not including the appended \0 into the HMAC
2855                         RCon_Execute(mysocket, peeraddress, addressstring2, userlevel, s, endpos);
2856                         return true;
2857                 }
2858                 if (length >= 42 && !memcmp(string, "srcon HMAC-MD4 CHALLENGE ", 25))
2859                 {
2860                         char *password = string + 25;
2861                         char *challenge = string + 42;
2862                         char *s = strchr(challenge, ' ');
2863                         char *endpos = string + length + 1; // one behind the NUL, so adding strlen+1 will eventually reach it
2864                         const char *userlevel;
2865                         if(!s)
2866                                 return true; // invalid packet
2867                         ++s;
2868
2869                         userlevel = RCon_Authenticate(peeraddress, password, s, endpos, hmac_mdfour_challenge_matching, challenge, endpos - challenge - 1); // not including the appended \0 into the HMAC
2870                         RCon_Execute(mysocket, peeraddress, addressstring2, userlevel, s, endpos);
2871                         return true;
2872                 }
2873                 if (length >= 5 && !memcmp(string, "rcon ", 5))
2874                 {
2875                         int i;
2876                         char *s = string + 5;
2877                         char *endpos = string + length + 1; // one behind the NUL, so adding strlen+1 will eventually reach it
2878                         char password[64];
2879
2880                         if(rcon_secure.integer > 0)
2881                                 return true;
2882
2883                         for (i = 0;!ISWHITESPACE(*s);s++)
2884                                 if (i < (int)sizeof(password) - 1)
2885                                         password[i++] = *s;
2886                         if(ISWHITESPACE(*s) && s != endpos) // skip leading ugly space
2887                                 ++s;
2888                         password[i] = 0;
2889                         if (!ISWHITESPACE(password[0]))
2890                         {
2891                                 const char *userlevel = RCon_Authenticate(peeraddress, password, s, endpos, plaintext_matching, NULL, 0);
2892                                 RCon_Execute(mysocket, peeraddress, addressstring2, userlevel, s, endpos);
2893                         }
2894                         return true;
2895                 }
2896                 if (!strncmp(string, "extResponse ", 12))
2897                 {
2898                         ++sv_net_extresponse_count;
2899                         if(sv_net_extresponse_count > NET_EXTRESPONSE_MAX)
2900                                 sv_net_extresponse_count = NET_EXTRESPONSE_MAX;
2901                         sv_net_extresponse_last = (sv_net_extresponse_last + 1) % NET_EXTRESPONSE_MAX;
2902                         dpsnprintf(sv_net_extresponse[sv_net_extresponse_last], sizeof(sv_net_extresponse[sv_net_extresponse_last]), "'%s' %s", addressstring2, string + 12);
2903                         return true;
2904                 }
2905                 if (!strncmp(string, "ping", 4))
2906                 {
2907                         if (developer_extra.integer)
2908                                 Con_DPrintf("Received ping from %s, sending ack\n", addressstring2);
2909                         NetConn_WriteString(mysocket, "\377\377\377\377ack", peeraddress);
2910                         return true;
2911                 }
2912                 if (!strncmp(string, "ack", 3))
2913                         return true;
2914                 // we may not have liked the packet, but it was a command packet, so
2915                 // we're done processing this packet now
2916                 return true;
2917         }
2918         // netquake control packets, supported for compatibility only, and only
2919         // when running game protocols that are normally served via this connection
2920         // protocol
2921         // (this protects more modern protocols against being used for
2922         //  Quake packet flood Denial Of Service attacks)
2923         if (length >= 5 && (i = BuffBigLong(data)) && (i & (~NETFLAG_LENGTH_MASK)) == (int)NETFLAG_CTL && (i & NETFLAG_LENGTH_MASK) == length && (sv.protocol == PROTOCOL_QUAKE || sv.protocol == PROTOCOL_QUAKEDP || sv.protocol == PROTOCOL_NEHAHRAMOVIE || sv.protocol == PROTOCOL_NEHAHRABJP || sv.protocol == PROTOCOL_NEHAHRABJP2 || sv.protocol == PROTOCOL_NEHAHRABJP3 || sv.protocol == PROTOCOL_DARKPLACES1 || sv.protocol == PROTOCOL_DARKPLACES2 || sv.protocol == PROTOCOL_DARKPLACES3))
2924         {
2925                 int c;
2926                 int protocolnumber;
2927                 const char *protocolname;
2928                 data += 4;
2929                 length -= 4;
2930                 SZ_Clear(&net_message);
2931                 SZ_Write(&net_message, data, length);
2932                 MSG_BeginReading();
2933                 c = MSG_ReadByte();
2934                 switch (c)
2935                 {
2936                 case CCREQ_CONNECT:
2937                         if (developer_extra.integer)
2938                                 Con_DPrintf("Datagram_ParseConnectionless: received CCREQ_CONNECT from %s.\n", addressstring2);
2939                         if(!islocal && sv_public.integer <= -2)
2940                                 break;
2941
2942                         protocolname = MSG_ReadString();
2943                         protocolnumber = MSG_ReadByte();
2944                         if (strcmp(protocolname, "QUAKE") || protocolnumber != NET_PROTOCOL_VERSION)
2945                         {
2946                                 if (developer_extra.integer)
2947                                         Con_DPrintf("Datagram_ParseConnectionless: sending CCREP_REJECT \"Incompatible version.\" to %s.\n", addressstring2);
2948                                 SZ_Clear(&net_message);
2949                                 // save space for the header, filled in later
2950                                 MSG_WriteLong(&net_message, 0);
2951                                 MSG_WriteByte(&net_message, CCREP_REJECT);
2952                                 MSG_WriteString(&net_message, "Incompatible version.\n");
2953                                 StoreBigLong(net_message.data, NETFLAG_CTL | (net_message.cursize & NETFLAG_LENGTH_MASK));
2954                                 NetConn_Write(mysocket, net_message.data, net_message.cursize, peeraddress);
2955                                 SZ_Clear(&net_message);
2956                                 break;
2957                         }
2958
2959                         // see if this connect request comes from a known client
2960                         for (clientnum = 0, client = svs.clients;clientnum < svs.maxclients;clientnum++, client++)
2961                         {
2962                                 if (client->netconnection && LHNETADDRESS_Compare(peeraddress, &client->netconnection->peeraddress) == 0)
2963                                 {
2964                                         // this is either a duplicate connection request
2965                                         // or coming back from a timeout
2966                                         // (if so, keep their stuff intact)
2967
2968                                         // send a reply
2969                                         if (developer_extra.integer)
2970                                                 Con_DPrintf("Datagram_ParseConnectionless: sending duplicate CCREP_ACCEPT to %s.\n", addressstring2);
2971                                         SZ_Clear(&net_message);
2972                                         // save space for the header, filled in later
2973                                         MSG_WriteLong(&net_message, 0);
2974                                         MSG_WriteByte(&net_message, CCREP_ACCEPT);
2975                                         MSG_WriteLong(&net_message, LHNETADDRESS_GetPort(LHNET_AddressFromSocket(client->netconnection->mysocket)));
2976                                         StoreBigLong(net_message.data, NETFLAG_CTL | (net_message.cursize & NETFLAG_LENGTH_MASK));
2977                                         NetConn_Write(mysocket, net_message.data, net_message.cursize, peeraddress);
2978                                         SZ_Clear(&net_message);
2979
2980                                         // if client is already spawned, re-send the
2981                                         // serverinfo message as they'll need it to play
2982                                         if (client->spawned)
2983                                         {
2984                                                 SV_VM_Begin();
2985                                                 SV_SendServerinfo(client);
2986                                                 SV_VM_End();
2987                                         }
2988                                         return true;
2989                                 }
2990                         }
2991
2992                         // this is a new client, check for connection flood
2993                         if (NetConn_PreventConnectFlood(peeraddress))
2994                                 break;
2995
2996                         // find a slot for the new client
2997                         for (clientnum = 0, client = svs.clients;clientnum < svs.maxclients;clientnum++, client++)
2998                         {
2999                                 netconn_t *conn;
3000                                 if (!client->active && (client->netconnection = conn = NetConn_Open(mysocket, peeraddress)) != NULL)
3001                                 {
3002                                         // connect to the client
3003                                         // everything is allocated, just fill in the details
3004                                         strlcpy (conn->address, addressstring2, sizeof (conn->address));
3005                                         if (developer_extra.integer)
3006                                                 Con_DPrintf("Datagram_ParseConnectionless: sending CCREP_ACCEPT to %s.\n", addressstring2);
3007                                         // send back the info about the server connection
3008                                         SZ_Clear(&net_message);
3009                                         // save space for the header, filled in later
3010                                         MSG_WriteLong(&net_message, 0);
3011                                         MSG_WriteByte(&net_message, CCREP_ACCEPT);
3012                                         MSG_WriteLong(&net_message, LHNETADDRESS_GetPort(LHNET_AddressFromSocket(conn->mysocket)));
3013                                         StoreBigLong(net_message.data, NETFLAG_CTL | (net_message.cursize & NETFLAG_LENGTH_MASK));
3014                                         NetConn_Write(mysocket, net_message.data, net_message.cursize, peeraddress);
3015                                         SZ_Clear(&net_message);
3016                                         // now set up the client struct
3017                                         SV_VM_Begin();
3018                                         SV_ConnectClient(clientnum, conn);
3019                                         SV_VM_End();
3020                                         NetConn_Heartbeat(1);
3021                                         return true;
3022                                 }
3023                         }
3024
3025                         if (developer_extra.integer)
3026                                 Con_DPrintf("Datagram_ParseConnectionless: sending CCREP_REJECT \"Server is full.\" to %s.\n", addressstring2);
3027                         // no room; try to let player know
3028                         SZ_Clear(&net_message);
3029                         // save space for the header, filled in later
3030                         MSG_WriteLong(&net_message, 0);
3031                         MSG_WriteByte(&net_message, CCREP_REJECT);
3032                         MSG_WriteString(&net_message, "Server is full.\n");
3033                         StoreBigLong(net_message.data, NETFLAG_CTL | (net_message.cursize & NETFLAG_LENGTH_MASK));
3034                         NetConn_Write(mysocket, net_message.data, net_message.cursize, peeraddress);
3035                         SZ_Clear(&net_message);
3036                         break;
3037                 case CCREQ_SERVER_INFO:
3038                         if (developer_extra.integer)
3039                                 Con_DPrintf("Datagram_ParseConnectionless: received CCREQ_SERVER_INFO from %s.\n", addressstring2);
3040                         if(!islocal && sv_public.integer <= -1)
3041                                 break;
3042                         if (sv.active && !strcmp(MSG_ReadString(), "QUAKE"))
3043                         {
3044                                 int numclients;
3045                                 char myaddressstring[128];
3046                                 if (developer_extra.integer)
3047                                         Con_DPrintf("Datagram_ParseConnectionless: sending CCREP_SERVER_INFO to %s.\n", addressstring2);
3048                                 SZ_Clear(&net_message);
3049                                 // save space for the header, filled in later
3050                                 MSG_WriteLong(&net_message, 0);
3051                                 MSG_WriteByte(&net_message, CCREP_SERVER_INFO);
3052                                 LHNETADDRESS_ToString(LHNET_AddressFromSocket(mysocket), myaddressstring, sizeof(myaddressstring), true);
3053                                 MSG_WriteString(&net_message, myaddressstring);
3054                                 MSG_WriteString(&net_message, hostname.string);
3055                                 MSG_WriteString(&net_message, sv.name);
3056                                 // How many clients are there?
3057                                 for (i = 0, numclients = 0;i < svs.maxclients;i++)
3058                                         if (svs.clients[i].active)
3059                                                 numclients++;
3060                                 MSG_WriteByte(&net_message, numclients);
3061                                 MSG_WriteByte(&net_message, svs.maxclients);
3062                                 MSG_WriteByte(&net_message, NET_PROTOCOL_VERSION);
3063                                 StoreBigLong(net_message.data, NETFLAG_CTL | (net_message.cursize & NETFLAG_LENGTH_MASK));
3064                                 NetConn_Write(mysocket, net_message.data, net_message.cursize, peeraddress);
3065                                 SZ_Clear(&net_message);
3066                         }
3067                         break;
3068                 case CCREQ_PLAYER_INFO:
3069                         if (developer_extra.integer)
3070                                 Con_DPrintf("Datagram_ParseConnectionless: received CCREQ_PLAYER_INFO from %s.\n", addressstring2);
3071                         if(!islocal && sv_public.integer <= -1)
3072                                 break;
3073                         if (sv.active)
3074                         {
3075                                 int playerNumber, activeNumber, clientNumber;
3076                                 client_t *client;
3077
3078                                 playerNumber = MSG_ReadByte();
3079                                 activeNumber = -1;
3080                                 for (clientNumber = 0, client = svs.clients; clientNumber < svs.maxclients; clientNumber++, client++)
3081                                         if (client->active && ++activeNumber == playerNumber)
3082                                                 break;
3083                                 if (clientNumber != svs.maxclients)
3084                                 {
3085                                         SZ_Clear(&net_message);
3086                                         // save space for the header, filled in later
3087                                         MSG_WriteLong(&net_message, 0);
3088                                         MSG_WriteByte(&net_message, CCREP_PLAYER_INFO);
3089                                         MSG_WriteByte(&net_message, playerNumber);
3090                                         MSG_WriteString(&net_message, client->name);
3091                                         MSG_WriteLong(&net_message, client->colors);
3092                                         MSG_WriteLong(&net_message, client->frags);
3093                                         MSG_WriteLong(&net_message, (int)(realtime - client->connecttime));
3094                                         MSG_WriteString(&net_message, client->netconnection ? client->netconnection->address : "botclient");
3095                                         StoreBigLong(net_message.data, NETFLAG_CTL | (net_message.cursize & NETFLAG_LENGTH_MASK));
3096                                         NetConn_Write(mysocket, net_message.data, net_message.cursize, peeraddress);
3097                                         SZ_Clear(&net_message);
3098                                 }
3099                         }
3100                         break;
3101                 case CCREQ_RULE_INFO:
3102                         if (developer_extra.integer)
3103                                 Con_DPrintf("Datagram_ParseConnectionless: received CCREQ_RULE_INFO from %s.\n", addressstring2);
3104                         if(!islocal && sv_public.integer <= -1)
3105                                 break;
3106                         if (sv.active)
3107                         {
3108                                 char *prevCvarName;
3109                                 cvar_t *var;
3110
3111                                 // find the search start location
3112                                 prevCvarName = MSG_ReadString();
3113                                 var = Cvar_FindVarAfter(prevCvarName, CVAR_NOTIFY);
3114
3115                                 // send the response
3116                                 SZ_Clear(&net_message);
3117                                 // save space for the header, filled in later
3118                                 MSG_WriteLong(&net_message, 0);
3119                                 MSG_WriteByte(&net_message, CCREP_RULE_INFO);
3120                                 if (var)
3121                                 {
3122                                         MSG_WriteString(&net_message, var->name);
3123                                         MSG_WriteString(&net_message, var->string);
3124                                 }
3125                                 StoreBigLong(net_message.data, NETFLAG_CTL | (net_message.cursize & NETFLAG_LENGTH_MASK));
3126                                 NetConn_Write(mysocket, net_message.data, net_message.cursize, peeraddress);
3127                                 SZ_Clear(&net_message);
3128                         }
3129                         break;
3130                 default:
3131                         break;
3132                 }
3133                 SZ_Clear(&net_message);
3134                 // we may not have liked the packet, but it was a valid control
3135                 // packet, so we're done processing this packet now
3136                 return true;
3137         }
3138         if (host_client)
3139         {
3140                 if ((ret = NetConn_ReceivedMessage(host_client->netconnection, data, length, sv.protocol, host_client->spawned ? net_messagetimeout.value : net_connecttimeout.value)) == 2)
3141                 {
3142                         SV_VM_Begin();
3143                         SV_ReadClientMessage();
3144                         SV_VM_End();
3145                         return ret;
3146                 }
3147         }
3148         return 0;
3149 }
3150
3151 void NetConn_ServerFrame(void)
3152 {
3153         int i, length;
3154         lhnetaddress_t peeraddress;
3155         for (i = 0;i < sv_numsockets;i++)
3156                 while (sv_sockets[i] && (length = NetConn_Read(sv_sockets[i], readbuffer, sizeof(readbuffer), &peeraddress)) > 0)
3157                         NetConn_ServerParsePacket(sv_sockets[i], readbuffer, length, &peeraddress);
3158         for (i = 0, host_client = svs.clients;i < svs.maxclients;i++, host_client++)
3159         {
3160                 // never timeout loopback connections
3161                 if (host_client->netconnection && realtime > host_client->netconnection->timeout && LHNETADDRESS_GetAddressType(&host_client->netconnection->peeraddress) != LHNETADDRESSTYPE_LOOP)
3162                 {
3163                         Con_Printf("Client \"%s\" connection timed out\n", host_client->name);
3164                         SV_VM_Begin();
3165                         SV_DropClient(false);
3166                         SV_VM_End();
3167                 }
3168         }
3169 }
3170
3171 void NetConn_SleepMicroseconds(int microseconds)
3172 {
3173         LHNET_SleepUntilPacket_Microseconds(microseconds);
3174 }
3175
3176 void NetConn_QueryMasters(qboolean querydp, qboolean queryqw)
3177 {
3178         int i, j;
3179         int masternum;
3180         lhnetaddress_t masteraddress;
3181         lhnetaddress_t broadcastaddress;
3182         char request[256];
3183
3184         if (serverlist_cachecount >= SERVERLIST_TOTALSIZE)
3185                 return;
3186
3187         // 26000 is the default quake server port, servers on other ports will not
3188         // be found
3189         // note this is IPv4-only, I doubt there are IPv6-only LANs out there
3190         LHNETADDRESS_FromString(&broadcastaddress, "255.255.255.255", 26000);
3191
3192         if (querydp)
3193         {
3194                 for (i = 0;i < cl_numsockets;i++)
3195                 {
3196                         if (cl_sockets[i])
3197                         {
3198                                 const char *cmdname, *extraoptions;
3199                                 int af = LHNETADDRESS_GetAddressType(LHNET_AddressFromSocket(cl_sockets[i]));
3200
3201                                 if(LHNETADDRESS_GetAddressType(&broadcastaddress) == af)
3202                                 {
3203                                         // search LAN for Quake servers
3204                                         SZ_Clear(&net_message);
3205                                         // save space for the header, filled in later
3206                                         MSG_WriteLong(&net_message, 0);
3207                                         MSG_WriteByte(&net_message, CCREQ_SERVER_INFO);
3208                                         MSG_WriteString(&net_message, "QUAKE");
3209                                         MSG_WriteByte(&net_message, NET_PROTOCOL_VERSION);
3210                                         StoreBigLong(net_message.data, NETFLAG_CTL | (net_message.cursize & NETFLAG_LENGTH_MASK));
3211                                         NetConn_Write(cl_sockets[i], net_message.data, net_message.cursize, &broadcastaddress);
3212                                         SZ_Clear(&net_message);
3213
3214                                         // search LAN for DarkPlaces servers
3215                                         NetConn_WriteString(cl_sockets[i], "\377\377\377\377getstatus", &broadcastaddress);
3216                                 }
3217
3218                                 // build the getservers message to send to the dpmaster master servers
3219                                 if (LHNETADDRESS_GetAddressType(LHNET_AddressFromSocket(cl_sockets[i])) == LHNETADDRESSTYPE_INET6)
3220                                 {
3221                                         cmdname = "getserversExt";
3222                                         extraoptions = " ipv4 ipv6";  // ask for IPv4 and IPv6 servers
3223                                 }
3224                                 else
3225                                 {
3226                                         cmdname = "getservers";
3227                                         extraoptions = "";
3228                                 }
3229                                 dpsnprintf(request, sizeof(request), "\377\377\377\377%s %s %u empty full%s", cmdname, gamename, NET_PROTOCOL_VERSION, extraoptions);
3230
3231                                 // search internet
3232                                 for (masternum = 0;sv_masters[masternum].name;masternum++)
3233                                 {
3234                                         if (sv_masters[masternum].string && sv_masters[masternum].string[0] && LHNETADDRESS_FromString(&masteraddress, sv_masters[masternum].string, DPMASTER_PORT) && LHNETADDRESS_GetAddressType(&masteraddress) == af)
3235                                         {
3236                                                 masterquerycount++;
3237                                                 NetConn_WriteString(cl_sockets[i], request, &masteraddress);
3238                                         }
3239                                 }
3240
3241                                 // search favorite servers
3242                                 for(j = 0; j < nFavorites; ++j)
3243                                 {
3244                                         if(LHNETADDRESS_GetAddressType(&favorites[j]) == af)
3245                                         {
3246                                                 if(LHNETADDRESS_ToString(&favorites[j], request, sizeof(request), true))
3247                                                         NetConn_ClientParsePacket_ServerList_PrepareQuery( PROTOCOL_DARKPLACES7, request, true );
3248                                         }
3249                                 }
3250                         }
3251                 }
3252         }
3253
3254         // only query QuakeWorld servers when the user wants to
3255         if (queryqw)
3256         {
3257                 for (i = 0;i < cl_numsockets;i++)
3258                 {
3259                         if (cl_sockets[i])
3260                         {
3261                                 int af = LHNETADDRESS_GetAddressType(LHNET_AddressFromSocket(cl_sockets[i]));
3262
3263                                 if(LHNETADDRESS_GetAddressType(&broadcastaddress) == af)
3264                                 {
3265                                         // search LAN for QuakeWorld servers
3266                                         NetConn_WriteString(cl_sockets[i], "\377\377\377\377status\n", &broadcastaddress);
3267
3268                                         // build the getservers message to send to the qwmaster master servers
3269                                         // note this has no -1 prefix, and the trailing nul byte is sent
3270                                         dpsnprintf(request, sizeof(request), "c\n");
3271                                 }
3272
3273                                 // search internet
3274                                 for (masternum = 0;sv_qwmasters[masternum].name;masternum++)
3275                                 {
3276                                         if (sv_qwmasters[masternum].string && LHNETADDRESS_FromString(&masteraddress, sv_qwmasters[masternum].string, QWMASTER_PORT) && LHNETADDRESS_GetAddressType(&masteraddress) == LHNETADDRESS_GetAddressType(LHNET_AddressFromSocket(cl_sockets[i])))
3277                                         {
3278                                                 if (m_state != m_slist)
3279                                                 {
3280                                                         char lookupstring[128];
3281                                                         LHNETADDRESS_ToString(&masteraddress, lookupstring, sizeof(lookupstring), true);
3282                                                         Con_Printf("Querying master %s (resolved from %s)\n", lookupstring, sv_qwmasters[masternum].string);
3283                                                 }
3284                                                 masterquerycount++;
3285                                                 NetConn_Write(cl_sockets[i], request, (int)strlen(request) + 1, &masteraddress);
3286                                         }
3287                                 }
3288
3289                                 // search favorite servers
3290                                 for(j = 0; j < nFavorites; ++j)
3291                                 {
3292                                         if(LHNETADDRESS_GetAddressType(&favorites[j]) == af)
3293                                         {
3294                                                 if(LHNETADDRESS_ToString(&favorites[j], request, sizeof(request), true))
3295                                                 {
3296                                                         NetConn_WriteString(cl_sockets[i], "\377\377\377\377status\n", &favorites[j]);
3297                                                         NetConn_ClientParsePacket_ServerList_PrepareQuery( PROTOCOL_QUAKEWORLD, request, true );
3298                                                 }
3299                                         }
3300                                 }
3301                         }
3302                 }
3303         }
3304         if (!masterquerycount)
3305         {
3306                 Con_Print("Unable to query master servers, no suitable network sockets active.\n");
3307                 M_Update_Return_Reason("No network");
3308         }
3309 }
3310
3311 void NetConn_Heartbeat(int priority)
3312 {
3313         lhnetaddress_t masteraddress;
3314         int masternum;
3315         lhnetsocket_t *mysocket;
3316
3317         // if it's a state change (client connected), limit next heartbeat to no
3318         // more than 30 sec in the future
3319         if (priority == 1 && nextheartbeattime > realtime + 30.0)
3320                 nextheartbeattime = realtime + 30.0;
3321
3322         // limit heartbeatperiod to 30 to 270 second range,
3323         // lower limit is to avoid abusing master servers with excess traffic,
3324         // upper limit is to avoid timing out on the master server (which uses
3325         // 300 sec timeout)
3326         if (sv_heartbeatperiod.value < 30)
3327                 Cvar_SetValueQuick(&sv_heartbeatperiod, 30);
3328         if (sv_heartbeatperiod.value > 270)
3329                 Cvar_SetValueQuick(&sv_heartbeatperiod, 270);
3330
3331         // make advertising optional and don't advertise singleplayer games, and
3332         // only send a heartbeat as often as the admin wants
3333         if (sv.active && sv_public.integer > 0 && svs.maxclients >= 2 && (priority > 1 || realtime > nextheartbeattime))
3334         {
3335                 nextheartbeattime = realtime + sv_heartbeatperiod.value;
3336                 for (masternum = 0;sv_masters[masternum].name;masternum++)
3337                         if (sv_masters[masternum].string && sv_masters[masternum].string[0] && LHNETADDRESS_FromString(&masteraddress, sv_masters[masternum].string, DPMASTER_PORT) && (mysocket = NetConn_ChooseServerSocketForAddress(&masteraddress)))
3338                                 NetConn_WriteString(mysocket, "\377\377\377\377heartbeat DarkPlaces\x0A", &masteraddress);
3339         }
3340 }
3341
3342 static void Net_Heartbeat_f(void)
3343 {
3344         if (sv.active)
3345                 NetConn_Heartbeat(2);
3346         else
3347                 Con_Print("No server running, can not heartbeat to master server.\n");
3348 }
3349
3350 void PrintStats(netconn_t *conn)
3351 {
3352         if ((cls.state == ca_connected && cls.protocol == PROTOCOL_QUAKEWORLD) || (sv.active && sv.protocol == PROTOCOL_QUAKEWORLD))
3353                 Con_Printf("address=%21s canSend=%u sendSeq=%6u recvSeq=%6u\n", conn->address, !conn->sendMessageLength, conn->outgoing_unreliable_sequence, conn->qw.incoming_sequence);
3354         else
3355                 Con_Printf("address=%21s canSend=%u sendSeq=%6u recvSeq=%6u\n", conn->address, !conn->sendMessageLength, conn->nq.sendSequence, conn->nq.receiveSequence);
3356 }
3357
3358 void Net_Stats_f(void)
3359 {
3360         netconn_t *conn;
3361         Con_Printf("unreliable messages sent   = %i\n", unreliableMessagesSent);
3362         Con_Printf("unreliable messages recv   = %i\n", unreliableMessagesReceived);
3363         Con_Printf("reliable messages sent     = %i\n", reliableMessagesSent);
3364         Con_Printf("reliable messages received = %i\n", reliableMessagesReceived);
3365         Con_Printf("packetsSent                = %i\n", packetsSent);
3366         Con_Printf("packetsReSent              = %i\n", packetsReSent);
3367         Con_Printf("packetsReceived            = %i\n", packetsReceived);
3368         Con_Printf("receivedDuplicateCount     = %i\n", receivedDuplicateCount);
3369         Con_Printf("droppedDatagrams           = %i\n", droppedDatagrams);
3370         Con_Print("connections                =\n");
3371         for (conn = netconn_list;conn;conn = conn->next)
3372                 PrintStats(conn);
3373 }
3374
3375 void Net_Refresh_f(void)
3376 {
3377         if (m_state != m_slist) {
3378                 Con_Print("Sending new requests to master servers\n");
3379                 ServerList_QueryList(false, true, false, true);
3380                 Con_Print("Listening for replies...\n");
3381         } else
3382                 ServerList_QueryList(false, true, false, false);
3383 }
3384
3385 void Net_Slist_f(void)
3386 {
3387         ServerList_ResetMasks();
3388         serverlist_sortbyfield = SLIF_PING;
3389         serverlist_sortflags = 0;
3390     if (m_state != m_slist) {
3391                 Con_Print("Sending requests to master servers\n");
3392                 ServerList_QueryList(true, true, false, true);
3393                 Con_Print("Listening for replies...\n");
3394         } else
3395                 ServerList_QueryList(true, true, false, false);
3396 }
3397
3398 void Net_SlistQW_f(void)
3399 {
3400         ServerList_ResetMasks();
3401         serverlist_sortbyfield = SLIF_PING;
3402         serverlist_sortflags = 0;
3403     if (m_state != m_slist) {
3404                 Con_Print("Sending requests to master servers\n");
3405                 ServerList_QueryList(true, false, true, true);
3406                 serverlist_consoleoutput = true;
3407                 Con_Print("Listening for replies...\n");
3408         } else
3409                 ServerList_QueryList(true, false, true, false);
3410 }
3411
3412 void NetConn_Init(void)
3413 {
3414         int i;
3415         lhnetaddress_t tempaddress;
3416         netconn_mempool = Mem_AllocPool("network connections", 0, NULL);
3417         Cmd_AddCommand("net_stats", Net_Stats_f, "print network statistics");
3418         Cmd_AddCommand("net_slist", Net_Slist_f, "query dp master servers and print all server information");
3419         Cmd_AddCommand("net_slistqw", Net_SlistQW_f, "query qw master servers and print all server information");
3420         Cmd_AddCommand("net_refresh", Net_Refresh_f, "query dp master servers and refresh all server information");
3421         Cmd_AddCommand("heartbeat", Net_Heartbeat_f, "send a heartbeat to the master server (updates your server information)");
3422         Cvar_RegisterVariable(&rcon_restricted_password);
3423         Cvar_RegisterVariable(&rcon_restricted_commands);
3424         Cvar_RegisterVariable(&rcon_secure_maxdiff);
3425         Cvar_RegisterVariable(&net_slist_queriespersecond);
3426         Cvar_RegisterVariable(&net_slist_queriesperframe);
3427         Cvar_RegisterVariable(&net_slist_timeout);
3428         Cvar_RegisterVariable(&net_slist_maxtries);
3429         Cvar_RegisterVariable(&net_slist_favorites);
3430         Cvar_RegisterVariable(&net_slist_pause);
3431         Cvar_RegisterVariable(&net_messagetimeout);
3432         Cvar_RegisterVariable(&net_connecttimeout);
3433         Cvar_RegisterVariable(&net_connectfloodblockingtimeout);
3434         Cvar_RegisterVariable(&cl_netlocalping);
3435         Cvar_RegisterVariable(&cl_netpacketloss_send);
3436         Cvar_RegisterVariable(&cl_netpacketloss_receive);
3437         Cvar_RegisterVariable(&hostname);
3438         Cvar_RegisterVariable(&developer_networking);
3439         Cvar_RegisterVariable(&cl_netport);
3440         Cvar_RegisterVariable(&sv_netport);
3441         Cvar_RegisterVariable(&net_address);
3442         Cvar_RegisterVariable(&net_address_ipv6);
3443         Cvar_RegisterVariable(&sv_public);
3444         Cvar_RegisterVariable(&sv_heartbeatperiod);
3445         for (i = 0;sv_masters[i].name;i++)
3446                 Cvar_RegisterVariable(&sv_masters[i]);
3447         Cvar_RegisterVariable(&gameversion);
3448         Cvar_RegisterVariable(&gameversion_min);
3449         Cvar_RegisterVariable(&gameversion_max);
3450 // COMMANDLINEOPTION: Server: -ip <ipaddress> sets the ip address of this machine for purposes of networking (default 0.0.0.0 also known as INADDR_ANY), use only if you have multiple network adapters and need to choose one specifically.
3451         if ((i = COM_CheckParm("-ip")) && i + 1 < com_argc)
3452         {
3453                 if (LHNETADDRESS_FromString(&tempaddress, com_argv[i + 1], 0) == 1)
3454                 {
3455                         Con_Printf("-ip option used, setting net_address to \"%s\"\n", com_argv[i + 1]);
3456                         Cvar_SetQuick(&net_address, com_argv[i + 1]);
3457                 }
3458                 else
3459                         Con_Printf("-ip option used, but unable to parse the address \"%s\"\n", com_argv[i + 1]);
3460         }
3461 // COMMANDLINEOPTION: Server: -port <portnumber> sets the port to use for a server (default 26000, the same port as QUAKE itself), useful if you host multiple servers on your machine
3462         if (((i = COM_CheckParm("-port")) || (i = COM_CheckParm("-ipport")) || (i = COM_CheckParm("-udpport"))) && i + 1 < com_argc)
3463         {
3464                 i = atoi(com_argv[i + 1]);
3465                 if (i >= 0 && i < 65536)
3466                 {
3467                         Con_Printf("-port option used, setting port cvar to %i\n", i);
3468                         Cvar_SetValueQuick(&sv_netport, i);
3469                 }
3470                 else
3471                         Con_Printf("-port option used, but %i is not a valid port number\n", i);
3472         }
3473         cl_numsockets = 0;
3474         sv_numsockets = 0;
3475         net_message.data = net_message_buf;
3476         net_message.maxsize = sizeof(net_message_buf);
3477         net_message.cursize = 0;
3478         LHNET_Init();
3479 }
3480
3481 void NetConn_Shutdown(void)
3482 {
3483         NetConn_CloseClientPorts();
3484         NetConn_CloseServerPorts();
3485         LHNET_Shutdown();
3486 }
3487