vncterm.c

   1 /*
   2
   3      Copyright (C) 2007-2011 Proxmox Server Solutions GmbH
   4
   5      Copyright: vzdump is under GNU GPL, the GNU General Public License.
   6
   7      This program is free software; you can redistribute it and/or modify
   8      it under the terms of the GNU General Public License as published by
   9      the Free Software Foundation; version 2 dated June, 1991.
  10
  11      This program is distributed in the hope that it will be useful,
  12      but WITHOUT ANY WARRANTY; without even the implied warranty of
  13      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14      GNU General Public License for more details.
  15
  16      You should have received a copy of the GNU General Public License
  17      along with this program; if not, write to the Free Software
  18      Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
  19      02111-1307, USA.
  20
  21      Author: Dietmar Maurer <dietmar@proxmox.com>
  22
  23 */
  24
  25 #include <stdio.h>
  26 #include <stdlib.h>
  27 #include <sys/types.h>
  28 #include <sys/socket.h>
  29 #include <arpa/inet.h>
  30 #include <netdb.h>
  31 #include <rfb/rfb.h>
  32 #include <rfb/keysym.h>
  33 #include <pty.h>  /* for openpty and forkpty */
  34 #include <string.h>
  35 #include <errno.h>
  36 #include <sys/ioctl.h>
  37 #include <sys/wait.h>
  38 #include <signal.h>
  39 #include <locale.h>
  40
  41 #include "vncterm.h"
  42 #include "glyphs.h"
  43
  44 #include <gnutls/gnutls.h>
  45 #include <gnutls/x509.h>
  46
  47 /* define this for debugging */
  48 //#define DEBUG
  49
  50 char *auth_path = "/";
  51 char *auth_perm = "Sys.Console";
  52
  53 int use_x509 = 1;
  54
  55 static char *
  56 urlencode(char *buf, const char *value)
  57 {
  58         static const char *hexchar = "0123456789abcdef";
  59         char *p = buf;
  60         int i;
  61         int l = strlen(value);
  62         for (i = 0; i < l; i++) {
  63                 char c = value[i];
  64                 if (('a' <= c && c <= 'z') ||
  65                     ('A' <= c && c <= 'Z') ||
  66                     ('0' <= c && c <= '9')) {
  67                         *p++ = c;
  68                 } else if (c == 32) {
  69                         *p++ = '+';
  70                 } else {
  71                         *p++ = '%';
  72                         *p++ = hexchar[c >> 4];
  73                         *p++ = hexchar[c & 15];
  74                 }
  75         }
  76         *p = 0;
  77
  78         return p;
  79 }
  80
  81 static int
  82 pve_auth_verify(const char *clientip, const char *username, const char *passwd)
  83 {
  84         struct sockaddr_in server;
  85
  86         int sfd = socket(AF_INET, SOCK_STREAM, 0);
  87         if (sfd == -1) {
  88                 perror("pve_auth_verify: socket failed");
  89                 return -1;
  90         }
  91
  92         struct hostent *he;
  93         if ((he = gethostbyname("localhost")) == NULL) {
  94                 fprintf(stderr, "pve_auth_verify: error resolving hostname\n");
  95                 goto err;
  96         }
  97
  98         memcpy(&server.sin_addr, he->h_addr_list[0], he->h_length);
  99         server.sin_family = AF_INET;
 100         server.sin_port = htons(85);
 101
 102         if (connect(sfd, (struct sockaddr *)&server, sizeof(server))) {
 103                 perror("pve_auth_verify: error connecting to server");
 104                 goto err;
 105         }
 106
 107         char buf[8192];
 108         char form[8192];
 109
 110         char *p = form;
 111         p = urlencode(p, "username");
 112         *p++ = '=';
 113         p = urlencode(p, username);
 114
 115         *p++ = '&';
 116         p = urlencode(p, "password");
 117         *p++ = '=';
 118         p = urlencode(p, passwd);
 119
 120         *p++ = '&';
 121         p = urlencode(p, "path");
 122         *p++ = '=';
 123         p = urlencode(p, auth_path);
 124
 125         *p++ = '&';
 126         p = urlencode(p, "privs");
 127         *p++ = '=';
 128         p = urlencode(p, auth_perm);
 129
 130         sprintf(buf, "POST /api2/json/access/ticket HTTP/1.1\n"
 131                 "Host: localhost:85\n"
 132                 "Connection: close\n"
 133                 "PVEClientIP: %s\n"
 134                 "Content-Type: application/x-www-form-urlencoded\n"
 135                 "Content-Length: %zd\n\n%s\n", clientip, strlen(form), form);
 136         ssize_t len = strlen(buf);
 137         ssize_t sb = send(sfd, buf, len, 0);
 138         if (sb < 0) {
 139                 perror("pve_auth_verify: send failed");
 140                 goto err;
 141         }
 142         if (sb != len) {
 143                 fprintf(stderr, "pve_auth_verify: partial send error\n");
 144                 goto err;
 145         }
 146
 147         len = recv(sfd, buf, sizeof(buf) - 1, 0);
 148         if (len < 0) {
 149                 perror("pve_auth_verify: recv failed");
 150                 goto err;
 151         }
 152
 153         buf[len] = 0;
 154
 155         //printf("DATA:%s\n", buf);
 156
 157         shutdown(sfd, SHUT_RDWR);
 158
 159         return strncmp(buf, "HTTP/1.1 200 OK", 15);
 160
 161 err:
 162         shutdown(sfd, SHUT_RDWR);
 163         return -1;
 164 }
 165
 166 #ifdef DEBUG
 167 static void vnc_debug_gnutls_log(int level, const char* str) {
 168         fprintf(stderr, "%d %s", level, str);
 169 }
 170 #endif
 171
 172 #define DH_BITS 2048
 173 static gnutls_dh_params_t dh_params;
 174
 175 typedef struct {
 176         gnutls_session_t session;
 177 } tls_client_t;
 178
 179 static ssize_t
 180 vnc_tls_push(
 181         gnutls_transport_ptr_t transport,
 182         const void *data,
 183         size_t len)
 184 {
 185         rfbClientPtr cl = (rfbClientPtr)transport;
 186         int n;
 187
 188 retry:
 189         n = send(cl->sock, data, len, 0);
 190         if (n < 0) {
 191                 if (errno == EINTR)
 192                         goto retry;
 193                 return -1;
 194         }
 195         return n;
 196 }
 197
 198 static ssize_t
 199 vnc_tls_pull(
 200         gnutls_transport_ptr_t transport,
 201         void *data,
 202         size_t len)
 203 {
 204         rfbClientPtr cl = (rfbClientPtr)transport;
 205         int n;
 206
 207 retry:
 208         n = recv(cl->sock, data, len, 0);
 209         if (n < 0) {
 210                 if (errno == EINTR)
 211                         goto retry;
 212                 return -1;
 213         }
 214         return n;
 215 }
 216
 217 ssize_t vnc_tls_read(rfbClientPtr cl, void *buf, size_t count)
 218 {
 219         tls_client_t *sd = (tls_client_t *)cl->clientData;
 220
 221         int ret = gnutls_read(sd->session, buf, count);
 222         if (ret < 0) {
 223                 if (ret == GNUTLS_E_AGAIN)
 224                         errno = EAGAIN;
 225                 else
 226                         errno = EIO;
 227                 ret = -1;
 228         }
 229
 230         return ret;
 231 }
 232 ssize_t vnc_tls_write(rfbClientPtr cl, void *buf, size_t count)
 233 {
 234         tls_client_t *sd = (tls_client_t *)cl->clientData;
 235
 236         int ret = gnutls_write(sd->session, buf, count);
 237         if (ret < 0) {
 238                 if (ret == GNUTLS_E_AGAIN)
 239                         errno = EAGAIN;
 240                 else
 241                         errno = EIO;
 242                 ret = -1;
 243         }
 244
 245         return ret;
 246 }
 247
 248 static gnutls_anon_server_credentials
 249 tls_initialize_anon_cred(void)
 250 {
 251         gnutls_anon_server_credentials anon_cred;
 252         int ret;
 253
 254         if ((ret = gnutls_anon_allocate_server_credentials(&anon_cred)) < 0) {
 255                 rfbLog("can't allocate credentials: %s\n", gnutls_strerror(ret));
 256                 return NULL;
 257         }
 258
 259 #if GNUTLS_VERSION_NUMBER >= 0x030506
 260         gnutls_anon_set_server_known_dh_params(anon_cred, GNUTLS_SEC_PARAM_MEDIUM);
 261 #else
 262         gnutls_anon_set_server_dh_params(anon_cred, dh_params);
 263 #endif
 264
 265         return anon_cred;
 266 }
 267
 268 static gnutls_certificate_credentials_t
 269 tls_initialize_x509_cred(void)
 270 {
 271         gnutls_certificate_credentials_t x509_cred;
 272         int ret;
 273
 274         /* Paths to x509 certs/keys */
 275         char *x509cacert = "/etc/pve/pve-root-ca.pem";
 276         char *x509cert = "/etc/pve/local/pve-ssl.pem";
 277         char *x509key = "/etc/pve/local/pve-ssl.key";
 278
 279         if ((ret = gnutls_certificate_allocate_credentials(&x509_cred)) < 0) {
 280                 rfbLog("can't allocate credentials: %s\n", gnutls_strerror(ret));
 281                 return NULL;
 282         }
 283
 284         if ((ret = gnutls_certificate_set_x509_trust_file
 285              (x509_cred, x509cacert, GNUTLS_X509_FMT_PEM)) < 0) {
 286                 rfbLog("can't load CA certificate: %s\n", gnutls_strerror(ret));
 287                 gnutls_certificate_free_credentials(x509_cred);
 288                 return NULL;
 289         }
 290
 291         if ((ret = gnutls_certificate_set_x509_key_file
 292              (x509_cred, x509cert, x509key, GNUTLS_X509_FMT_PEM)) < 0) {
 293                 rfbLog("can't load certificate & key: %s\n", gnutls_strerror(ret));
 294                 gnutls_certificate_free_credentials(x509_cred);
 295                 return NULL;
 296         }
 297 #if GNUTLS_VERSION_NUMBER >= 0x030506
 298         /* only available since GnuTLS 3.5.6, on previous versions see
 299          * gnutls_certificate_set_dh_params(). */
 300         gnutls_certificate_set_known_dh_params(x509_cred, GNUTLS_SEC_PARAM_MEDIUM);
 301 #else
 302         gnutls_certificate_set_dh_params (x509_cred, dh_params);
 303 #endif
 304
 305         return x509_cred;
 306 }
 307
 308 /* rfb tls security handler */
 309
 310 #define rfbSecTypeVencrypt  19
 311 #define rfbVencryptTlsPlain 259
 312 #define rfbVencryptX509Plain 262
 313
 314 void rfbEncodeU32(char *buf, uint32_t value)
 315 {
 316     buf[0] = (value >> 24) & 0xFF;
 317     buf[1] = (value >> 16) & 0xFF;
 318     buf[2] = (value >>  8) & 0xFF;
 319     buf[3] = value & 0xFF;
 320 }
 321
 322 uint32_t rfbDecodeU32(char *data, size_t offset)
 323 {
 324         return ((data[offset] << 24) | (data[offset + 1] << 16) |
 325                 (data[offset + 2] << 8) | data[offset + 3]);
 326 }
 327
 328 static void
 329 vencrypt_subauth_plain(rfbClientPtr cl)
 330 {
 331         const char *err = NULL;
 332         char buf[4096];
 333         int n;
 334
 335         char clientip[INET6_ADDRSTRLEN];
 336         clientip[0] = 0;
 337         struct sockaddr_in client;
 338         socklen_t addrlen = sizeof(client);
 339         if (getpeername(cl->sock, &client, &addrlen) == 0) {
 340                 inet_ntop(client.sin_family, &client.sin_addr,
 341                           clientip, sizeof(clientip));
 342         }
 343
 344         if ((n = rfbReadExact(cl, buf, 8)) <= 0) {
 345                 err = n ? "read failed" : "client gone";
 346                 goto err;
 347         }
 348
 349         uint32_t ulen = rfbDecodeU32(buf, 0);
 350         uint32_t pwlen = rfbDecodeU32(buf, 4);
 351
 352         if (!ulen) {
 353                 err = "No User name.";
 354                 goto err;
 355         }
 356         if (ulen >= 255) {
 357                 err = "User name too long.";
 358                 goto err;
 359         }
 360         if (!pwlen) {
 361                 err = "Password too short";
 362                 goto err;
 363         }
 364         if (pwlen >= 511) {
 365                 err = "Password too long.";
 366                 goto err;
 367         }
 368
 369         if ((n = rfbReadExact(cl, buf, ulen)) <= 0) {
 370                 err = n ? "read failed" : "client gone";
 371                 goto err;
 372         }
 373         buf[ulen] = 0;
 374         char *username = buf;
 375         char *passwd = buf + ulen + 1;
 376         if ((n = rfbReadExact(cl, passwd, pwlen)) <= 0) {
 377                 err = n ? "read failed" : "client gone";
 378                 goto err;
 379         }
 380         passwd[pwlen] = 0;
 381
 382         rfbLog("VencryptPlain: username: %s pw: %s\n", username, passwd);
 383
 384         if (pve_auth_verify(clientip, username, passwd) == 0) {
 385                 rfbEncodeU32(buf, 0); /* Accept auth completion */
 386                 rfbWriteExact(cl, buf, 4);
 387                 cl->state = RFB_INITIALISATION;
 388                 return;
 389         }
 390
 391         err = "Authentication failed";
 392 err:
 393         rfbLog("VencryptPlain: %s\n", err ? err : "no reason specified");
 394         if (err) {
 395                 rfbEncodeU32(buf, 1); /* Reject auth */
 396                 rfbWriteExact(cl, buf, 4);
 397                 if (cl->protocolMinorVersion >= 8) {
 398                         int elen = strlen(err);
 399                         rfbEncodeU32(buf, elen);
 400                         rfbWriteExact(cl, buf, 4);
 401                         rfbWriteExact(cl, err, elen);
 402                 }
 403         }
 404         rfbCloseClient(cl);
 405         return;
 406 }
 407
 408 static void
 409 rfbVncAuthVencrypt(rfbClientPtr cl)
 410 {
 411         int ret;
 412
 413         /* Send VeNCrypt version 0.2 */
 414         char buf[256];
 415         buf[0] = 0;
 416         buf[1] = 2;
 417
 418         if (rfbWriteExact(cl, buf, 2) < 0) {
 419             rfbLogPerror("rfbVncAuthVencrypt: write");
 420             rfbCloseClient(cl);
 421             return;
 422         }
 423
 424         int n = rfbReadExact(cl, buf, 2);
 425         if (n <= 0) {
 426                 if (n == 0)
 427                         rfbLog("rfbVncAuthVencrypt: client gone\n");
 428                 else
 429                         rfbLogPerror("rfbVncAuthVencrypt: read");
 430                 rfbCloseClient(cl);
 431                 return;
 432         }
 433
 434         if (buf[0] != 0 || buf[1] != 2) {
 435                 rfbLog("Unsupported VeNCrypt protocol %d.%d\n",
 436                        (int)buf[0], (int)buf[1]);
 437                 buf[0] = 1; /* Reject version */
 438                 rfbWriteExact(cl, buf, 1);
 439                 rfbCloseClient(cl);
 440                 return;
 441         }
 442
 443         /* Sending allowed auth */
 444         int req_auth = use_x509 ? rfbVencryptX509Plain : rfbVencryptTlsPlain;
 445
 446         buf[0] = 0; /* Accept version */
 447         buf[1] = 1; /* number of sub auths */
 448         rfbEncodeU32(buf+2, req_auth);
 449         if (rfbWriteExact(cl, buf, 6) < 0) {
 450                 rfbLogPerror("rfbVncAuthVencrypt: write");
 451                 rfbCloseClient(cl);
 452                 return;
 453         }
 454
 455         n = rfbReadExact(cl, buf, 4);
 456         if (n <= 0) {
 457                 if (n == 0)
 458                         rfbLog("rfbVncAuthVencrypt: client gone\n");
 459                 else
 460                         rfbLogPerror("rfbVncAuthVencrypt: read");
 461                 rfbCloseClient(cl);
 462                 return;
 463         }
 464
 465         int auth = rfbDecodeU32(buf, 0);
 466         if (auth != req_auth) {
 467                 buf[0] = 1; /* Reject auth*/
 468                 rfbWriteExact(cl, buf, 1);
 469                 rfbCloseClient(cl);
 470                 return;
 471         }
 472
 473         buf[0] = 1; /* Accept auth */
 474         if (rfbWriteExact(cl, buf, 1) < 0) {
 475                 rfbLogPerror("rfbVncAuthVencrypt: write");
 476                 rfbCloseClient(cl);
 477                 return;
 478         }
 479
 480         tls_client_t *sd = calloc(1, sizeof(tls_client_t));
 481
 482         if (sd->session == NULL) {
 483                 if (gnutls_init(&sd->session, GNUTLS_SERVER) < 0) {
 484                         rfbLog("gnutls_init failed\n");
 485                         rfbCloseClient(cl);
 486                         return;
 487
 488                 }
 489
 490                 if ((ret = gnutls_set_default_priority(sd->session)) < 0) {
 491                         rfbLog("gnutls_set_default_priority failed: %s\n", gnutls_strerror(ret));
 492                         sd->session = NULL;
 493                         rfbCloseClient(cl);
 494                         return;
 495                 }
 496
 497                 static const char *priority_str_x509 = "NORMAL";
 498                 static const char *priority_str_anon = "NORMAL:+ANON-ECDH:+ANON-DH";
 499                 if ((ret = gnutls_priority_set_direct(sd->session, use_x509 ? priority_str_x509 : priority_str_anon, NULL)) < 0) {
 500                         rfbLog("gnutls_priority_set_direct failed: %s\n", gnutls_strerror(ret));
 501                         sd->session = NULL;
 502                         rfbCloseClient(cl);
 503                         return;
 504                 }
 505
 506                 if (use_x509) {
 507                         gnutls_certificate_server_credentials x509_cred;
 508
 509                         if (!(x509_cred = tls_initialize_x509_cred())) {
 510                                 sd->session = NULL;
 511                                 rfbCloseClient(cl);
 512                                 return;
 513                         }
 514
 515                         if (gnutls_credentials_set(sd->session, GNUTLS_CRD_CERTIFICATE, x509_cred) < 0) {
 516                                 sd->session = NULL;
 517                                 gnutls_certificate_free_credentials(x509_cred);
 518                                 rfbCloseClient(cl);
 519                                 return;
 520                         }
 521
 522                 } else {
 523                         gnutls_anon_server_credentials anon_cred;
 524
 525                         if (!(anon_cred = tls_initialize_anon_cred())) {
 526                                 sd->session = NULL;
 527                                 rfbCloseClient(cl);
 528                                 return;
 529                         }
 530
 531                         if ((ret = gnutls_credentials_set(sd->session, GNUTLS_CRD_ANON, anon_cred)) < 0) {
 532                                 rfbLog("gnutls_credentials_set failed: %s\n", gnutls_strerror(ret));
 533                                 gnutls_anon_free_server_credentials(anon_cred);
 534                                 sd->session = NULL;
 535                                 rfbCloseClient(cl);
 536                                 return;
 537                         }
 538                 }
 539
 540                 gnutls_transport_set_ptr(sd->session, (gnutls_transport_ptr_t)cl);
 541                 gnutls_transport_set_push_function(sd->session, vnc_tls_push);
 542                 gnutls_transport_set_pull_function(sd->session, vnc_tls_pull);
 543         }
 544
 545
 546 retry:
 547         if ((ret = gnutls_handshake(sd->session)) < 0) {
 548                 if (!gnutls_error_is_fatal(ret)) {
 549                         usleep(100000);
 550                         goto retry;
 551                 }
 552                 rfbLog("rfbVncAuthVencrypt: handshake failed\n");
 553                 rfbCloseClient(cl);
 554                 return;
 555         }
 556
 557         /* set up TLS read/write hooks */
 558         cl->clientData = sd;
 559         cl->sock_read_fn = &vnc_tls_read;
 560         cl->sock_write_fn = &vnc_tls_write;
 561
 562         vencrypt_subauth_plain(cl);
 563 }
 564
 565 static rfbSecurityHandler VncSecurityHandlerVencrypt = {
 566     rfbSecTypeVencrypt,
 567     rfbVncAuthVencrypt,
 568     NULL
 569 };
 570
 571 #define TERM "xterm"
 572
 573 #define TERMIDCODE "[?1;2c" // vt100 ID
 574
 575 #define CHECK_ARGC(argc,argv,i) if (i >= argc-1) { \
 576    fprintf (stderr, "ERROR: not enough arguments for: %s\n", argv[i]); \
 577    print_usage (NULL); \
 578    exit(1); \
 579 }
 580
 581 /* these colours are from linux kernel drivers/char/vt.c */
 582
 583 static int idle_timeout = 1;
 584
 585 unsigned char color_table[] = { 0, 4, 2, 6, 1, 5, 3, 7,
 586                                 8,12,10,14, 9,13,11,15 };
 587
 588 /* the default colour table, for VGA+ colour systems */
 589 int default_red[] = {0x00,0xaa,0x00,0xaa,0x00,0xaa,0x00,0xaa,
 590     0x55,0xff,0x55,0xff,0x55,0xff,0x55,0xff};
 591 int default_grn[] = {0x00,0x00,0xaa,0x55,0x00,0x00,0xaa,0xaa,
 592     0x55,0x55,0xff,0xff,0x55,0x55,0xff,0xff};
 593 int default_blu[] = {0x00,0x00,0x00,0x00,0xaa,0xaa,0xaa,0xaa,
 594     0x55,0x55,0x55,0x55,0xff,0xff,0xff,0xff};
 595
 596 static void
 597 print_usage (const char *msg)
 598 {
 599   if (msg) { fprintf (stderr, "ERROR: %s\n", msg); }
 600   fprintf (stderr, "USAGE: vncterm [vncopts] [-c command [args]]\n");
 601 }
 602
 603 /* Convert UCS2 to UTF8 sequence, trailing zero */
 604 static int
 605 ucs2_to_utf8 (unicode c, char *out)
 606 {
 607   if (c < 0x80) {
 608     out[0] = c;                 //  0*******
 609     out[1] = 0;
 610     return 1;
 611   } else if (c < 0x800) {
 612     out[0] = 0xc0 | (c >> 6);   //  110***** 10******
 613     out[1] = 0x80 | (c & 0x3f);
 614     out[2] = 0;
 615     return 2;
 616   } else {
 617     out[0] = 0xe0 | (c >> 12);  //  1110**** 10****** 10******
 618     out[1] = 0x80 | ((c >> 6) & 0x3f);
 619     out[2] = 0x80 | (c & 0x3f);
 620     out[3] = 0;
 621     return 3;
 622   }
 623
 624   return 0;
 625 }
 626
 627 static void
 628 rfb_draw_char (rfbScreenInfoPtr rfbScreen, int x, int y,
 629                unsigned short c, rfbPixel col)
 630 {
 631   if (c > vt_font_size) {
 632     rfbLog ("undefined font glyph %d\n", c);
 633     return;
 634   }
 635
 636   int i,j;
 637   unsigned char *data= vt_font_data + c*16;
 638   unsigned char d=*data;
 639   int rowstride=rfbScreen->paddedWidthInBytes;
 640   char *colour=(char*)&col;
 641
 642   for(j = 0; j < 16; j++) {
 643     for(i = 0; i < 8; i++) {
 644       if ((i&7) == 0) {
 645         d=*data;
 646         data++;
 647       }
 648       if (d&0x80)
 649         *(rfbScreen->frameBuffer+(y+j)*rowstride+(x+i)) = *colour;
 650       d<<=1;
 651     }
 652   }
 653 }
 654
 655 static void
 656 draw_char_at (vncTerm *vt, int x, int y, unicode ch, TextAttributes attrib)
 657 {
 658   if (x < 0 || y < 0 || x >= vt->width || y >= vt->height) { return; }
 659
 660   int rx = x*8;
 661   int ry = y*16;
 662   int rxe = x*8+8;
 663   int rye = y*16+16;
 664
 665   int fg, bg;
 666
 667   if (attrib.invers) {
 668     bg = attrib.fgcol;
 669     fg = attrib.bgcol;
 670   } else {
 671     bg = attrib.bgcol;
 672     fg = attrib.fgcol;
 673   }
 674
 675   int ec = vt_fontmap[ch];
 676
 677   rfbFillRect (vt->screen, rx, ry, rxe, rye, bg);
 678
 679   if (attrib.bold) {
 680     fg += 8;
 681   }
 682
 683   // unsuported attributes = (attrib.blink || attrib.unvisible)
 684
 685   rfb_draw_char (vt->screen, rx, ry, ec, fg);
 686
 687   if (attrib.uline) {
 688     rfbDrawLine (vt->screen, rx, ry + 14, rxe, ry + 14, fg);
 689   }
 690
 691   rfbMarkRectAsModified (vt->screen, rx, ry, rxe, rye);
 692
 693 }
 694
 695 static void
 696 vncterm_update_xy (vncTerm *vt, int x, int y)
 697 {
 698   if (x < 0 || y < 0 || x >= vt->width || y >= vt->height) { return; }
 699
 700   int y1 = (vt->y_base + y) % vt->total_height;
 701   int y2 = y1 - vt->y_displ;
 702   if (y2 < 0) {
 703     y2 += vt->total_height;
 704   }
 705   if (y2 < vt->height) {
 706     TextCell *c = &vt->cells[y1 * vt->width + x];
 707     draw_char_at (vt, x, y2, c->ch, c->attrib);
 708   }
 709 }
 710
 711 static void
 712 vncterm_clear_xy (vncTerm *vt, int x, int y)
 713 {
 714   if (x < 0 || y < 0 || x >= vt->width || y >= vt->height) { return; }
 715
 716   int y1 = (vt->y_base + y) % vt->total_height;
 717   int y2 = y1 - vt->y_displ;
 718   if (y2 < 0) {
 719     y2 += vt->total_height;
 720   }
 721   if (y2 < vt->height) {
 722     TextCell *c = &vt->cells[y1 * vt->width + x];
 723     c->ch = ' ';
 724     c->attrib = vt->default_attrib;
 725     c->attrib.fgcol = vt->cur_attrib.fgcol;
 726     c->attrib.bgcol = vt->cur_attrib.bgcol;
 727
 728     draw_char_at (vt, x, y, c->ch, c->attrib);
 729   }
 730 }
 731
 732 static void
 733 vncterm_show_cursor (vncTerm *vt, int show)
 734 {
 735   int x = vt->cx;
 736   if (x >= vt->width) {
 737     x = vt->width - 1;
 738   }
 739
 740   int y1 = (vt->y_base + vt->cy) % vt->total_height;
 741   int y = y1 - vt->y_displ;
 742   if (y < 0) {
 743     y += vt->total_height;
 744   }
 745
 746   if (y < vt->height) {
 747
 748     TextCell *c = &vt->cells[y1 * vt->width + x];
 749
 750     if (show) {
 751       TextAttributes attrib = vt->default_attrib;
 752       attrib.invers = !(attrib.invers); /* invert fg and bg */
 753       draw_char_at (vt, x, y, c->ch, attrib);
 754     } else {
 755       draw_char_at (vt, x, y, c->ch, c->attrib);
 756     }
 757   }
 758 }
 759
 760 static void
 761 vncterm_refresh (vncTerm *vt)
 762 {
 763   int x, y, y1;
 764
 765   rfbFillRect (vt->screen, 0, 0, vt->maxx, vt->maxy, vt->default_attrib.bgcol);
 766
 767   y1 = vt->y_displ;
 768   for(y = 0; y < vt->height; y++) {
 769     TextCell *c = vt->cells + y1 * vt->width;
 770     for(x = 0; x < vt->width; x++) {
 771       draw_char_at (vt, x, y, c->ch, c->attrib);
 772       c++;
 773     }
 774     if (++y1 == vt->total_height)
 775       y1 = 0;
 776   }
 777   rfbMarkRectAsModified (vt->screen, 0, 0, vt->maxx, vt->maxy);
 778
 779   vncterm_show_cursor (vt, 1);
 780 }
 781
 782 static void
 783 vncterm_scroll_down (vncTerm *vt, int top, int bottom, int lines)
 784 {
 785   if ((top + lines) >= bottom) {
 786     lines = bottom - top -1;
 787   }
 788
 789   if (top < 0 || bottom > vt->height || top >= bottom || lines < 1) {
 790     return;
 791   }
 792
 793   int h = lines * 16;
 794   int y0 = top*16;
 795   int y1 = y0 + h;
 796   int y2 = bottom*16;
 797   int rowstride = vt->screen->paddedWidthInBytes;
 798   int rows = (bottom - top - lines)*16;
 799
 800   char *in = vt->screen->frameBuffer+y0*rowstride;
 801   char *out = vt->screen->frameBuffer+y1*rowstride;
 802   memmove(out,in, rowstride*rows);
 803
 804   memset(vt->screen->frameBuffer+y0*rowstride, 0, h*rowstride);
 805   rfbMarkRectAsModified (vt->screen, 0, y0, vt->screen->width, y2);
 806
 807   int i;
 808   for(i = bottom - top - lines - 1; i >= 0; i--) {
 809     int src = ((vt->y_base + top + i) % vt->total_height)*vt->width;
 810     int dst = ((vt->y_base + top + lines + i) % vt->total_height)*vt->width;
 811
 812     memmove(vt->cells + dst, vt->cells + src, vt->width*sizeof (TextCell));
 813   }
 814
 815   for (i = 0; i < lines; i++) {
 816     int j;
 817     TextCell *c = vt->cells + ((vt->y_base + top + i) % vt->total_height)*vt->width;
 818     for(j = 0; j < vt->width; j++) {
 819       c->attrib = vt->default_attrib;
 820       c->ch = ' ';
 821       c++;
 822     }
 823   }
 824 }
 825
 826 static void
 827 vncterm_scroll_up (vncTerm *vt, int top, int bottom, int lines, int moveattr)
 828 {
 829   if ((top + lines) >= bottom) {
 830     lines = bottom - top - 1;
 831   }
 832
 833   if (top < 0 || bottom > vt->height || top >= bottom || lines < 1) {
 834     return;
 835   }
 836
 837   int h = lines * 16;
 838   int y0 = top*16;
 839   int y1 = (top + lines)*16;
 840   int y2 = bottom*16;
 841   int rowstride = vt->screen->paddedWidthInBytes;
 842   int rows = (bottom - top - lines)*16;
 843
 844   char *in = vt->screen->frameBuffer+y1*rowstride;
 845   char *out = vt->screen->frameBuffer+y0*rowstride;
 846   memmove(out,in, rowstride*rows);
 847
 848   memset(vt->screen->frameBuffer+(y2-h)*rowstride, 0, h*rowstride);
 849
 850   rfbMarkRectAsModified (vt->screen, 0, y0, vt->screen->width, y2);
 851
 852   if (!moveattr) return;
 853
 854   // move attributes
 855
 856   int i;
 857   for(i = 0; i < (bottom - top - lines); i++) {
 858     int dst = ((vt->y_base + top + i) % vt->total_height)*vt->width;
 859     int src = ((vt->y_base + top + lines + i) % vt->total_height)*vt->width;
 860
 861     memmove(vt->cells + dst, vt->cells + src, vt->width*sizeof (TextCell));
 862   }
 863
 864   for (i = 1; i <= lines; i++) {
 865     int j;
 866     TextCell *c = vt->cells + ((vt->y_base + bottom - i) % vt->total_height)*vt->width;
 867     for(j = 0; j < vt->width; j++) {
 868       c->attrib = vt->default_attrib;
 869       c->ch = ' ';
 870       c++;
 871     }
 872   }
 873 }
 874
 875 static void
 876 vncterm_virtual_scroll (vncTerm *vt, int lines)
 877 {
 878   if (vt->altbuf || lines == 0) return;
 879
 880   if (lines < 0) {
 881     lines = -lines;
 882     int i = vt->scroll_height;
 883     if (i > vt->total_height - vt->height)
 884       i = vt->total_height - vt->height;
 885     int y1 = vt->y_base - i;
 886     if (y1 < 0)
 887       y1 += vt->total_height;
 888     for(i = 0; i < lines; i++) {
 889       if (vt->y_displ == y1) break;
 890       if (--vt->y_displ < 0) {
 891         vt->y_displ = vt->total_height - 1;
 892       }
 893     }
 894   } else {
 895     int i;
 896     for(i = 0; i < lines; i++) {
 897       if (vt->y_displ == vt->y_base) break;
 898       if (++vt->y_displ == vt->total_height) {
 899         vt->y_displ = 0;
 900       }
 901     }
 902
 903   }
 904
 905   vncterm_refresh (vt);
 906 }
 907 static void
 908 vncterm_respond_esc (vncTerm *vt, const char *esc)
 909 {
 910   int len = strlen (esc);
 911   int i;
 912
 913   if (vt->ibuf_count < (IBUFSIZE - 1 - len)) {
 914     vt->ibuf[vt->ibuf_count++] = 27;
 915     for (i = 0; i < len; i++) {
 916       vt->ibuf[vt->ibuf_count++] = esc[i];
 917     }
 918   }
 919 }
 920
 921 static void
 922 vncterm_put_lf (vncTerm *vt)
 923 {
 924   if (vt->cy + 1 == vt->region_bottom) {
 925
 926     if (vt->altbuf || vt->region_top != 0 || vt->region_bottom != vt->height) {
 927       vncterm_scroll_up (vt, vt->region_top, vt->region_bottom, 1, 1);
 928       return;
 929     }
 930
 931     if (vt->y_displ == vt->y_base) {
 932       vncterm_scroll_up (vt, vt->region_top, vt->region_bottom, 1, 0);
 933     }
 934
 935     if (vt->y_displ == vt->y_base) {
 936       if (++vt->y_displ == vt->total_height) {
 937         vt->y_displ = 0;
 938       }
 939     }
 940
 941     if (++vt->y_base == vt->total_height) {
 942       vt->y_base = 0;
 943     }
 944
 945     if (vt->scroll_height < vt->total_height) {
 946       vt->scroll_height++;
 947     }
 948
 949     int y1 = (vt->y_base + vt->height - 1) % vt->total_height;
 950     TextCell *c = &vt->cells[y1 * vt->width];
 951     int x;
 952     for (x = 0; x < vt->width; x++) {
 953       c->ch = ' ';
 954       c->attrib = vt->default_attrib;
 955       c++;
 956     }
 957
 958     // fprintf (stderr, "BASE: %d DISPLAY %d\n", vt->y_base, vt->y_displ);
 959
 960   } else if (vt->cy < vt->height - 1) {
 961     vt->cy += 1;
 962   }
 963 }
 964
 965
 966 static void
 967 vncterm_csi_m (vncTerm *vt)
 968 {
 969   int i;
 970
 971   for (i = 0; i < vt->esc_count; i++) {
 972     switch (vt->esc_buf[i]) {
 973     case 0: /* reset all console attributes to default */
 974       vt->cur_attrib = vt->default_attrib;
 975       break;
 976     case 1:
 977       vt->cur_attrib.bold = 1;
 978       break;
 979     case 4:
 980       vt->cur_attrib.uline = 1;
 981       break;
 982     case 5:
 983       vt->cur_attrib.blink = 1;
 984       break;
 985     case 7:
 986       vt->cur_attrib.invers = 1;
 987       break;
 988     case 8:
 989       vt->cur_attrib.unvisible = 1;
 990       break;
 991     case 10:
 992       vt->cur_enc = LAT1_MAP;
 993       // fixme: dispaly controls = 0 ?
 994       // fixme: toggle meta = 0 ?
 995       break;
 996     case 11:
 997       vt->cur_enc = IBMPC_MAP;
 998       // fixme: dispaly controls = 1 ?
 999       // fixme: toggle meta = 0 ?
1000       break;
1001     case 12:
1002       vt->cur_enc = IBMPC_MAP;
1003       // fixme: dispaly controls = 1 ?
1004       // fixme: toggle meta = 1 ?
1005       break;
1006     case 22:
1007       vt->cur_attrib.bold = 0;
1008       break;
1009     case 24:
1010       vt->cur_attrib.uline = 0;
1011       break;
1012     case 25:
1013       vt->cur_attrib.blink = 0;
1014       break;
1015     case 27:
1016       vt->cur_attrib.invers = 0;
1017       break;
1018     case 28:
1019       vt->cur_attrib.unvisible = 0;
1020       break;
1021     case 30:
1022     case 31:
1023     case 32:
1024     case 33:
1025     case 34:
1026     case 35:
1027     case 36:
1028     case 37:
1029       /* set foreground color */
1030       vt->cur_attrib.fgcol = color_table [vt->esc_buf[i] - 30];
1031       break;
1032     case 38:
1033       /* reset color to default, enable underline */
1034       vt->cur_attrib.fgcol = vt->default_attrib.fgcol;
1035       vt->cur_attrib.uline = 1;
1036       break;
1037     case 39:
1038       /* reset color to default, disable underline */
1039       vt->cur_attrib.fgcol = vt->default_attrib.fgcol;
1040       vt->cur_attrib.uline = 0;
1041       break;
1042     case 40:
1043     case 41:
1044     case 42:
1045     case 43:
1046     case 44:
1047     case 45:
1048     case 46:
1049     case 47:
1050       /* set background color */
1051       vt->cur_attrib.bgcol = color_table [vt->esc_buf[i] - 40];
1052       break;
1053     case 49:
1054       /* reset background color */
1055       vt->cur_attrib.bgcol = vt->default_attrib.bgcol;
1056       break;
1057     default:
1058       fprintf (stderr, "unhandled ESC[%d m code\n",vt->esc_buf[i]);
1059       //fixme: implement
1060      }
1061   }
1062 }
1063
1064 static void
1065 vncterm_save_cursor (vncTerm *vt)
1066 {
1067   vt->cx_saved = vt->cx;
1068   vt->cy_saved = vt->cy;
1069   vt->cur_attrib_saved = vt->cur_attrib;
1070   vt->charset_saved = vt->charset;
1071   vt->g0enc_saved = vt->g0enc;
1072   vt->g1enc_saved = vt->g1enc;
1073   vt->cur_enc_saved = vt->cur_enc;
1074 }
1075
1076 static void
1077 vncterm_restore_cursor (vncTerm *vt)
1078 {
1079   vt->cx = vt->cx_saved;
1080   vt->cy = vt->cy_saved;
1081   vt->cur_attrib = vt->cur_attrib_saved;
1082   vt->charset = vt->charset_saved;
1083   vt->g0enc = vt->g0enc_saved;
1084   vt->g1enc = vt->g1enc_saved;
1085   vt->cur_enc = vt->cur_enc_saved;
1086 }
1087
1088 static void
1089 vncterm_set_alternate_buffer (vncTerm *vt, int on_off)
1090 {
1091   int x, y;
1092
1093   vt->y_displ = vt->y_base;
1094
1095   if (on_off) {
1096
1097     if (vt->altbuf) return;
1098
1099     vt->altbuf = 1;
1100
1101     /* alternate buffer & cursor */
1102
1103     vncterm_save_cursor (vt);
1104     /* save screen to altcels */
1105     for (y = 0; y < vt->height; y++) {
1106       int y1 = (vt->y_base + y) % vt->total_height;
1107       for (x = 0; x < vt->width; x++) {
1108         vt->altcells[y*vt->width + x] = vt->cells[y1*vt->width + x];
1109       }
1110     }
1111
1112     /* clear screen */
1113     for (y = 0; y <= vt->height; y++) {
1114       for (x = 0; x < vt->width; x++) {
1115         vncterm_clear_xy (vt, x, y);
1116       }
1117     }
1118
1119   } else {
1120
1121     if (vt->altbuf == 0) return;
1122
1123     vt->altbuf = 0;
1124
1125     /* restore saved data */
1126     for (y = 0; y < vt->height; y++) {
1127       int y1 = (vt->y_base + y) % vt->total_height;
1128       for (x = 0; x < vt->width; x++) {
1129         vt->cells[y1*vt->width + x] = vt->altcells[y*vt->width + x];
1130       }
1131     }
1132
1133     vncterm_restore_cursor (vt);
1134   }
1135
1136   vncterm_refresh (vt);
1137 }
1138
1139 static void
1140 vncterm_set_mode (vncTerm *vt, int on_off)
1141 {
1142   int i;
1143
1144   for (i = 0; i <= vt->esc_count; i++) {
1145     if (vt->esc_ques) {          /* DEC private modes set/reset */
1146       switch(vt->esc_buf[i]) {
1147       case 10:                   /* X11 mouse reporting on/off */
1148       case 1000:
1149         vt->report_mouse = on_off;
1150         break;
1151       case 1049:                /* start/end special app mode (smcup/rmcup) */
1152         vncterm_set_alternate_buffer (vt, on_off);
1153         break;
1154       case 25:                  /* Cursor on/off */
1155       case 9:                   /* X10 mouse reporting on/off */
1156       case 6:                   /* Origin relative/absolute */
1157       case 1:                   /* Cursor keys in appl mode*/
1158       case 5:                   /* Inverted screen on/off */
1159       case 7:                   /* Autowrap on/off */
1160       case 8:                   /* Autorepeat on/off */
1161         break;
1162       }
1163     } else { /* ANSI modes set/reset */
1164       /* fixme: implement me */
1165     }
1166   }
1167 }
1168
1169 static void
1170 vncterm_gotoxy (vncTerm *vt, int x, int y)
1171 {
1172   /* verify all boundaries */
1173
1174   if (x < 0) {
1175     x = 0;
1176   }
1177
1178   if (x >= vt->width) {
1179     x = vt->width - 1;
1180   }
1181
1182   vt->cx = x;
1183
1184   if (y < 0) {
1185     y = 0;
1186   }
1187
1188   if (y >= vt->height) {
1189     y = vt->height - 1;
1190   }
1191
1192   vt->cy = y;
1193 }
1194
1195 enum { ESnormal, ESesc, ESsquare, ESgetpars, ESgotpars, ESfunckey,
1196        EShash, ESsetG0, ESsetG1, ESpercent, ESignore, ESnonstd,
1197        ESpalette, ESidquery, ESosc1, ESosc2};
1198
1199 static void
1200 vncterm_putchar (vncTerm *vt, unicode ch)
1201 {
1202   int x, y, i, c;
1203
1204 #ifdef DEBUG
1205   if (!vt->tty_state)
1206   fprintf (stderr, "CHAR:%2d: %4x '%c' (cur_enc %d) %d %d\n", vt->tty_state, ch, ch, vt->cur_enc, vt->cx, vt->cy);
1207 #endif
1208
1209   switch(vt->tty_state) {
1210   case ESesc:
1211     vt->tty_state = ESnormal;
1212     switch (ch) {
1213     case '[':
1214       vt->tty_state = ESsquare;
1215       break;
1216     case ']':
1217       vt->tty_state = ESnonstd;
1218       break;
1219     case '%':
1220       vt->tty_state = ESpercent;
1221       break;
1222     case '7':
1223       vncterm_save_cursor (vt);
1224       break;
1225     case '8':
1226       vncterm_restore_cursor (vt);
1227       break;
1228     case '(':
1229       vt->tty_state = ESsetG0; // SET G0
1230       break;
1231     case ')':
1232       vt->tty_state = ESsetG1; // SET G1
1233       break;
1234     case 'M':
1235       /* cursor up (ri) */
1236       if (vt->cy == vt->region_top)
1237         vncterm_scroll_down (vt, vt->region_top, vt->region_bottom, 1);
1238       else if (vt->cy > 0) {
1239         vt->cy--;
1240       }
1241       break;
1242     case '>':
1243       /* numeric keypad  - ignored */
1244       break;
1245     case '=':
1246       /* appl. keypad - ignored */
1247       break;
1248     default:
1249 #ifdef DEBUG
1250       fprintf(stderr, "got unhandled ESC%c  %d\n", ch, ch);
1251 #endif
1252       break;
1253     }
1254     break;
1255   case ESnonstd: /* Operating System Controls */
1256     vt->tty_state = ESnormal;
1257
1258     switch (ch) {
1259     case 'P':   /* palette escape sequence */
1260       for(i = 0; i < MAX_ESC_PARAMS; i++) {
1261         vt->esc_buf[i] = 0;
1262       }
1263
1264       vt->esc_count = 0;
1265       vt->tty_state = ESpalette;
1266       break;
1267     case 'R':   /* reset palette */
1268       // fixme: reset_palette(vc);
1269       break;
1270     case '0':
1271     case '1':
1272     case '2':
1273     case '4':
1274       vt->osc_cmd = ch;
1275       vt->osc_textbuf[0] = 0;
1276       vt->tty_state = ESosc1;
1277       break;
1278     default:
1279 #ifdef DEBUG
1280       fprintf (stderr, "unhandled OSC %c\n", ch);
1281 #endif
1282       vt->tty_state = ESnormal;
1283       break;
1284     }
1285     break;
1286   case ESosc1:
1287     vt->tty_state = ESnormal;
1288     if (ch == ';') {
1289       vt->tty_state = ESosc2;
1290     } else {
1291 #ifdef DEBUG
1292       fprintf (stderr, "got illegal OSC sequence\n");
1293 #endif
1294     }
1295     break;
1296   case ESosc2:
1297     if (ch != 0x9c && ch != 7) {
1298       int i = 0;
1299       while (vt->osc_textbuf[i]) i++;
1300       vt->osc_textbuf[i++] = ch;
1301       vt->osc_textbuf[i] = 0;
1302     } else {
1303 #ifdef DEBUG
1304       fprintf (stderr, "OSC:%c:%s\n", vt->osc_cmd, vt->osc_textbuf);
1305 #endif
1306       vt->tty_state = ESnormal;
1307     }
1308     break;
1309   case ESpalette:
1310     if ((ch >= '0' && ch <= '9') || (ch >= 'A' && ch <= 'F')
1311         || (ch >= 'a' && ch <= 'f')) {
1312       vt->esc_buf[vt->esc_count++] = (ch > '9' ? (ch & 0xDF) - 'A' + 10 : ch - '0');
1313       if (vt->esc_count == 7) {
1314         // fixme: this does not work - please test
1315         rfbColourMap *cmap =&vt->screen->colourMap;
1316
1317         int i = color_table[vt->esc_buf[0]] * 3, j = 1;
1318         cmap->data.bytes[i] = 16 * vt->esc_buf[j++];
1319         cmap->data.bytes[i++] += vt->esc_buf[j++];
1320         cmap->data.bytes[i] = 16 * vt->esc_buf[j++];
1321         cmap->data.bytes[i++] += vt->esc_buf[j++];
1322         cmap->data.bytes[i] = 16 * vt->esc_buf[j++];
1323         cmap->data.bytes[i] += vt->esc_buf[j];
1324
1325         //set_palette(vc); ?
1326
1327         vt->tty_state = ESnormal;
1328       }
1329     } else
1330        vt->tty_state = ESnormal;
1331     break;
1332   case ESsquare:
1333     for(i = 0; i < MAX_ESC_PARAMS; i++) {
1334       vt->esc_buf[i] = 0;
1335     }
1336
1337     vt->esc_count = 0;
1338     vt->esc_has_par = 0;
1339     vt->tty_state = ESgetpars;
1340
1341     if (ch == '>') {
1342       vt->tty_state = ESidquery;
1343       break;
1344     }
1345
1346     if ((vt->esc_ques = (ch == '?'))) {
1347       break;
1348     }
1349   case ESgetpars:
1350     if (ch >= '0' && ch <= '9') {
1351       vt->esc_has_par = 1;
1352       if (vt->esc_count < MAX_ESC_PARAMS) {
1353         vt->esc_buf[vt->esc_count] = vt->esc_buf[vt->esc_count] * 10 + ch - '0';
1354       }
1355       break;
1356     } else if (ch == ';') {
1357       vt->esc_has_par = 1;
1358       vt->esc_count++;
1359       break;
1360     } else {
1361       if (vt->esc_has_par) {
1362         vt->esc_count++;
1363       }
1364       vt->tty_state = ESgotpars;
1365     }
1366   case ESgotpars:
1367
1368     vt->tty_state = ESnormal;
1369
1370 #ifdef DEBUG
1371     char *qes = vt->esc_ques ? "?" : "";
1372     if (vt->esc_count == 0) {
1373       fprintf(stderr, "ESC[%s%c\n", qes, ch);
1374     } else if (vt->esc_count == 1) {
1375       fprintf(stderr, "ESC[%s%d%c\n", qes, vt->esc_buf[0], ch);
1376     } else {
1377       int i;
1378       fprintf(stderr, "ESC[%s%d", qes, vt->esc_buf[0]);
1379       for (i = 1; i < vt->esc_count; i++) {
1380         fprintf(stderr, ";%d",  vt->esc_buf[i]);
1381       }
1382       fprintf (stderr, "%c\n", ch);
1383     }
1384 #endif
1385
1386     switch (ch) {
1387     case 'h':
1388       vncterm_set_mode (vt, 1);
1389       break;
1390     case 'l':
1391       vncterm_set_mode (vt, 0);
1392       break;
1393     case 'm':
1394       if (!vt->esc_count) {
1395         vt->esc_count++; // default parameter 0
1396       }
1397       vncterm_csi_m (vt);
1398       break;
1399     case 'n':
1400       /* report cursor position */
1401       /* TODO: send ESC[row;colR */
1402       break;
1403     case 'A':
1404       /* move cursor up */
1405       if (vt->esc_buf[0] == 0) {
1406         vt->esc_buf[0] = 1;
1407       }
1408       vncterm_gotoxy (vt, vt->cx, vt->cy - vt->esc_buf[0]);
1409       break;
1410     case 'B':
1411     case 'e':
1412       /* move cursor down */
1413       if (vt->esc_buf[0] == 0) {
1414         vt->esc_buf[0] = 1;
1415       }
1416       vncterm_gotoxy (vt, vt->cx, vt->cy + vt->esc_buf[0]);
1417       break;
1418     case 'C':
1419     case 'a':
1420       /* move cursor right */
1421       if (vt->esc_buf[0] == 0) {
1422         vt->esc_buf[0] = 1;
1423       }
1424       vncterm_gotoxy (vt, vt->cx + vt->esc_buf[0], vt->cy);
1425       break;
1426     case 'D':
1427       /* move cursor left */
1428       if (vt->esc_buf[0] == 0) {
1429         vt->esc_buf[0] = 1;
1430       }
1431       vncterm_gotoxy (vt, vt->cx - vt->esc_buf[0], vt->cy);
1432       break;
1433     case 'G':
1434     case '`':
1435       /* move cursor to column */
1436       vncterm_gotoxy (vt, vt->esc_buf[0] - 1, vt->cy);
1437       break;
1438     case 'd':
1439       /* move cursor to row */
1440       vncterm_gotoxy (vt, vt->cx , vt->esc_buf[0] - 1);
1441       break;
1442     case 'f':
1443     case 'H':
1444       /* move cursor to row, column */
1445       vncterm_gotoxy (vt, vt->esc_buf[1] - 1,  vt->esc_buf[0] - 1);
1446       break;
1447     case 'J':
1448       switch (vt->esc_buf[0]) {
1449       case 0:
1450         /* clear to end of screen */
1451         for (y = vt->cy; y < vt->height; y++) {
1452           for (x = 0; x < vt->width; x++) {
1453             if (y == vt->cy && x < vt->cx) {
1454               continue;
1455             }
1456             vncterm_clear_xy (vt, x, y);
1457           }
1458         }
1459         break;
1460       case 1:
1461         /* clear from beginning of screen */
1462         for (y = 0; y <= vt->cy; y++) {
1463           for (x = 0; x < vt->width; x++) {
1464             if (y == vt->cy && x > vt->cx) {
1465               break;
1466             }
1467             vncterm_clear_xy (vt, x, y);
1468           }
1469         }
1470         break;
1471       case 2:
1472         /* clear entire screen */
1473         for (y = 0; y <= vt->height; y++) {
1474           for (x = 0; x < vt->width; x++) {
1475             vncterm_clear_xy (vt, x, y);
1476           }
1477         }
1478         break;
1479       }
1480       break;
1481     case 'K':
1482       switch (vt->esc_buf[0]) {
1483       case 0:
1484         /* clear to eol */
1485         for(x = vt->cx; x < vt->width; x++) {
1486           vncterm_clear_xy (vt, x, vt->cy);
1487         }
1488         break;
1489       case 1:
1490         /* clear from beginning of line */
1491         for (x = 0; x <= vt->cx; x++) {
1492           vncterm_clear_xy (vt, x, vt->cy);
1493         }
1494         break;
1495       case 2:
1496         /* clear entire line */
1497         for(x = 0; x < vt->width; x++) {
1498           vncterm_clear_xy (vt, x, vt->cy);
1499         }
1500         break;
1501       }
1502       break;
1503     case 'L':
1504       /* insert line */
1505       c = vt->esc_buf[0];
1506
1507       if (c > vt->height - vt->cy)
1508         c = vt->height - vt->cy;
1509       else if (!c)
1510         c = 1;
1511
1512       vncterm_scroll_down (vt, vt->cy, vt->region_bottom, c);
1513       break;
1514     case 'M':
1515       /* delete line */
1516       c = vt->esc_buf[0];
1517
1518       if (c > vt->height - vt->cy)
1519         c = vt->height - vt->cy;
1520       else if (!c)
1521         c = 1;
1522
1523       vncterm_scroll_up (vt, vt->cy, vt->region_bottom, c, 1);
1524       break;
1525     case 'T':
1526       /* scroll down */
1527       c = vt->esc_buf[0];
1528       if (!c) c = 1;
1529       vncterm_scroll_down (vt, vt->region_top, vt->region_bottom, c);
1530       break;
1531     case 'S':
1532       /* scroll up */
1533       c = vt->esc_buf[0];
1534       if (!c) c = 1;
1535       vncterm_scroll_up (vt, vt->region_top, vt->region_bottom, c, 1);
1536       break;
1537     case 'P':
1538       /* delete c character */
1539       c = vt->esc_buf[0];
1540
1541       if (c > vt->width - vt->cx)
1542         c = vt->width - vt->cx;
1543       else if (!c)
1544         c = 1;
1545
1546       for (x = vt->cx; x < vt->width - c; x++) {
1547         int y1 = (vt->y_base + vt->cy) % vt->total_height;
1548         TextCell *dst = &vt->cells[y1 * vt->width + x];
1549         TextCell *src = dst + c;
1550         *dst = *src;
1551         vncterm_update_xy (vt, x + c, vt->cy);
1552         src->ch = ' ';
1553         src->attrib = vt->default_attrib;
1554         vncterm_update_xy (vt, x, vt->cy);
1555       }
1556       break;
1557     case 's':
1558       /* save cursor position */
1559       vncterm_save_cursor (vt);
1560       break;
1561     case 'u':
1562       /* restore cursor position */
1563       vncterm_restore_cursor (vt);
1564       break;
1565     case 'X':
1566       /* erase c characters */
1567       c = vt->esc_buf[0];
1568       if (!c) c = 1;
1569
1570       if (c > (vt->width - vt->cx)) c = vt->width - vt->cx;
1571
1572       for(i = 0; i < c; i++) {
1573         vncterm_clear_xy (vt, vt->cx + i, vt->cy);
1574       }
1575       break;
1576     case '@':
1577       /* insert c character */
1578       c = vt->esc_buf[0];
1579       if (c > (vt->width - vt->cx)) {
1580         c = vt->width - vt->cx;
1581       }
1582       if (!c) c = 1;
1583
1584       for (x = vt->width - c; x >= vt->cx; x--) {
1585         int y1 = (vt->y_base + vt->cy) % vt->total_height;
1586         TextCell *src = &vt->cells[y1 * vt->width + x];
1587         TextCell *dst = src + c;
1588         *dst = *src;
1589         vncterm_update_xy (vt, x + c, vt->cy);
1590         src->ch = ' ';
1591         src->attrib = vt->cur_attrib;
1592         vncterm_update_xy (vt, x, vt->cy);
1593       }
1594
1595       break;
1596     case 'r':
1597       /* set region */
1598       if (!vt->esc_buf[0])
1599         vt->esc_buf[0]++;
1600       if (!vt->esc_buf[1])
1601         vt->esc_buf[1] = vt->height;
1602       /* Minimum allowed region is 2 lines */
1603       if (vt->esc_buf[0] < vt->esc_buf[1] &&
1604           vt->esc_buf[1] <= vt->height) {
1605         vt->region_top = vt->esc_buf[0] - 1;
1606         vt->region_bottom = vt->esc_buf[1];
1607         vt->cx = 0;
1608         vt->cy = vt->region_top;
1609 #ifdef DEBUG
1610         fprintf (stderr, "set region %d %d\n", vt->region_top, vt->region_bottom);
1611 #endif
1612       }
1613
1614       break;
1615     default:
1616 #ifdef DEBUG
1617       if (vt->esc_count == 0) {
1618         fprintf(stderr, "unhandled escape ESC[%s%c\n", qes, ch);
1619       } else if (vt->esc_count == 1) {
1620         fprintf(stderr, "unhandled escape ESC[%s%d%c\n", qes, vt->esc_buf[0], ch);
1621       } else {
1622         int i;
1623         fprintf(stderr, "unhandled escape ESC[%s%d", qes, vt->esc_buf[0]);
1624         for (i = 1; i < vt->esc_count; i++) {
1625           fprintf(stderr, ";%d",  vt->esc_buf[i]);
1626         }
1627         fprintf (stderr, "%c\n", ch);
1628       }
1629 #endif
1630       break;
1631     }
1632     vt->esc_ques = 0;
1633     break;
1634   case ESsetG0: // Set G0
1635     vt->tty_state = ESnormal;
1636
1637     if (ch == '0')
1638       vt->g0enc = GRAF_MAP;
1639     else if (ch == 'B')
1640       vt->g0enc = LAT1_MAP;
1641     else if (ch == 'U')
1642       vt->g0enc = IBMPC_MAP;
1643     else if (ch == 'K')
1644       vt->g0enc = USER_MAP;
1645
1646     if (vt->charset == 0)
1647       vt->cur_enc = vt->g0enc;
1648
1649     break;
1650   case ESsetG1: // Set G1
1651     vt->tty_state = ESnormal;
1652
1653     if (ch == '0')
1654       vt->g1enc = GRAF_MAP;
1655     else if (ch == 'B')
1656       vt->g1enc = LAT1_MAP;
1657     else if (ch == 'U')
1658       vt->g1enc = IBMPC_MAP;
1659     else if (ch == 'K')
1660       vt->g1enc = USER_MAP;
1661
1662     if (vt->charset == 1)
1663       vt->cur_enc = vt->g1enc;
1664
1665     break;
1666   case ESidquery: // vt100 query id
1667     vt->tty_state = ESnormal;
1668
1669     if (ch == 'c') {
1670 #ifdef DEBUG
1671       fprintf (stderr, "ESC[>c   Query term ID\n");
1672 #endif
1673       vncterm_respond_esc (vt, TERMIDCODE);
1674     }
1675     break;
1676   case ESpercent:
1677     vt->tty_state = ESnormal;
1678     switch (ch) {
1679     case '@':  /* defined in ISO 2022 */
1680       vt->utf8 = 0;
1681       break;
1682     case 'G':  /* prelim official escape code */
1683     case '8':  /* retained for compatibility */
1684       vt->utf8 = 1;
1685       break;
1686     }
1687     break;
1688   default: // ESnormal
1689     vt->tty_state = ESnormal;
1690
1691     switch(ch) {
1692     case 0:
1693       break;
1694     case 7:  /* alert aka. bell */
1695       rfbSendBell(vt->screen);
1696       break;
1697     case 8:  /* backspace */
1698       if (vt->cx > 0)
1699         vt->cx--;
1700       break;
1701     case 9:  /* tabspace */
1702       if (vt->cx + (8 - (vt->cx % 8)) > vt->width) {
1703         vt->cx = 0;
1704         vncterm_put_lf (vt);
1705       } else {
1706         vt->cx = vt->cx + (8 - (vt->cx % 8));
1707       }
1708       break;
1709     case 10:  /* LF,*/
1710     case 11:  /* VT */
1711     case 12:  /* FF */
1712       vncterm_put_lf (vt);
1713       break;
1714     case 13:  /* carriage return */
1715       vt->cx = 0;
1716       break;
1717     case 14:
1718       /* SI (shift in), select character set 1 */
1719       vt->charset = 1;
1720       vt->cur_enc = vt->g1enc;
1721       /* fixme: display controls = 1 */
1722       break;
1723     case 15:
1724       /* SO (shift out), select character set 0 */
1725       vt->charset = 0;
1726       vt->cur_enc = vt->g0enc;
1727       /* fixme: display controls = 0 */
1728       break;
1729     case 27:    /* esc */
1730       vt->tty_state = ESesc;
1731       break;
1732     case 127: /* delete */
1733       /* ignore */
1734       break;
1735     case 128+27:    /* csi */
1736       vt->tty_state = ESsquare;
1737       break;
1738     default:
1739       if (vt->cx >= vt->width) {
1740         /* line wrap */
1741         vt->cx = 0;
1742         vncterm_put_lf (vt);
1743       }
1744
1745       int y1 = (vt->y_base + vt->cy) % vt->total_height;
1746       TextCell *c = &vt->cells[y1*vt->width + vt->cx];
1747       c->attrib = vt->cur_attrib;
1748       c->ch = ch;
1749       vncterm_update_xy (vt, vt->cx, vt->cy);
1750       vt->cx++;
1751       break;
1752     }
1753     break;
1754   }
1755 }
1756
1757 static int
1758 vncterm_puts (vncTerm *vt, const char *buf, int len)
1759 {
1760     unicode tc;
1761
1762     vncterm_show_cursor (vt, 0);
1763
1764     while (len) {
1765       unsigned char c = *buf;
1766       len--;
1767       buf++;
1768
1769       if (vt->tty_state != ESnormal) {
1770         // never translate escape sequence
1771         tc = c;
1772       } else if (vt->utf8 && !vt->cur_enc) {
1773
1774         if(c & 0x80) { // utf8 multi-byte sequence
1775
1776           if (vt->utf_count > 0 && (c & 0xc0) == 0x80) {
1777             // inside UTF8 sequence
1778             vt->utf_char = (vt->utf_char << 6) | (c & 0x3f);
1779             vt->utf_count--;
1780             if (vt->utf_count == 0) {
1781                 if (vt->utf_char <= USHRT_MAX) {
1782                   tc = vt->utf_char;
1783                 } else {
1784                   tc = 0;
1785                 }
1786             } else {
1787               continue;
1788             }
1789           } else {
1790             //  first char of a UTF8 sequence
1791             if ((c & 0xe0) == 0xc0) {
1792               vt->utf_count = 1;
1793               vt->utf_char = (c & 0x1f);
1794             } else if ((c & 0xf0) == 0xe0) {
1795               vt->utf_count = 2;
1796               vt->utf_char = (c & 0x0f);
1797             } else if ((c & 0xf8) == 0xf0) {
1798               vt->utf_count = 3;
1799               vt->utf_char = (c & 0x07);
1800             } else if ((c & 0xfc) == 0xf8) {
1801               vt->utf_count = 4;
1802               vt->utf_char = (c & 0x03);
1803             } else if ((c & 0xfe) == 0xfc) {
1804               vt->utf_count = 5;
1805               vt->utf_char = (c & 0x01);
1806             } else
1807               vt->utf_count = 0;
1808
1809             continue;
1810           }
1811         } else {
1812           // utf8 single byte
1813           tc = c;
1814           vt->utf_count = 0;
1815         }
1816
1817       } else {
1818         // never translate controls
1819         if (c >= 32 && c != 127 && c != (128+27)) {
1820           tc = translations[vt->cur_enc][c & 0x0ff];
1821         } else {
1822           tc = c;
1823         }
1824       }
1825
1826       vncterm_putchar (vt, tc);
1827     }
1828
1829     vncterm_show_cursor (vt, 1);
1830     return len;
1831 }
1832
1833 void
1834 vncterm_kbd_event (rfbBool down, rfbKeySym keySym, rfbClientPtr cl)
1835 {
1836   vncTerm *vt =(vncTerm *)cl->screen->screenData;
1837   static int control = 0;
1838   static int shift = 0;
1839   char *esc = NULL;
1840
1841   //fprintf (stderr, "KEYEVENT:%d: %08x\n", down == 0, keySym);fflush (stderr);
1842   if (down) {
1843     //fprintf (stderr, "KEYPRESS: %d\n", keySym);fflush (stderr);
1844
1845     if (keySym == XK_Shift_L || keySym == XK_Shift_R) {
1846       shift = 1;
1847     } if (keySym == XK_Control_L || keySym == XK_Control_R) {
1848       control = 1;
1849     } else if (vt->ibuf_count < (IBUFSIZE - 32)) {
1850
1851       if (control) {
1852         if(keySym >= 'a' && keySym <= 'z')
1853           keySym -= 'a' -1;
1854         else if (keySym >= 'A' && keySym <= 'Z')
1855           keySym -= 'A'-1;
1856         else
1857           keySym=0xffff;
1858       } else {
1859         switch (keySym) {
1860         case XK_Escape:
1861           keySym=27; break;
1862         case XK_Return:
1863           keySym='\r'; break;
1864         case XK_BackSpace:
1865           keySym=8; break;
1866         case XK_Tab:
1867           keySym='\t'; break;
1868         case XK_Delete: /* kdch1 */
1869         case XK_KP_Delete:
1870           esc = "[3~";break;
1871         case XK_Home: /* khome */
1872         case XK_KP_Home:
1873           esc = "OH";break;
1874         case XK_End:
1875         case XK_KP_End: /* kend */
1876           esc = "OF";break;
1877         case XK_Insert: /* kich1 */
1878         case XK_KP_Insert:
1879           esc = "[2~";break;
1880         case XK_Up:
1881         case XK_KP_Up:  /* kcuu1 */
1882           esc = "OA";break;
1883         case XK_Down: /* kcud1 */
1884         case XK_KP_Down:
1885           esc = "OB";break;
1886         case XK_Right:
1887         case XK_KP_Right: /* kcuf1 */
1888           esc = "OC";break;
1889         case XK_Left:
1890         case XK_KP_Left: /* kcub1 */
1891           esc = "OD";break;
1892         case XK_Page_Up:
1893           if (shift) {
1894             vncterm_virtual_scroll (vt, -vt->height/2);
1895             return;
1896           }
1897           esc = "[5~";break;
1898         case XK_Page_Down:
1899           if (shift) {
1900             vncterm_virtual_scroll (vt, vt->height/2);
1901             return;
1902           }
1903           esc = "[6~";break;
1904         case XK_F1:
1905           esc = "OP";break;
1906         case XK_F2:
1907           esc = "OQ";break;
1908         case XK_F3:
1909           esc = "OR";break;
1910         case XK_F4:
1911           esc = "OS";break;
1912         case XK_F5:
1913           esc = "[15~";break;
1914         case XK_F6:
1915           esc = "[17~";break;
1916         case XK_F7:
1917           esc = "[18~";break;
1918         case XK_F8:
1919           esc = "[19~";break;
1920         case XK_F9:
1921           esc = "[20~";break;
1922         case XK_F10:
1923           esc = "[21~";break;
1924         case XK_F11:
1925           esc = "[23~";break;
1926         case XK_F12:
1927           esc = "[24~";break;
1928         default:
1929           break;
1930         }
1931       }
1932
1933 #ifdef DEBUG
1934       fprintf (stderr, "KEYPRESS OUT:%s: %d\n", esc, keySym); fflush (stderr);
1935 #endif
1936
1937       if (vt->y_displ != vt->y_base) {
1938         vt->y_displ = vt->y_base;
1939         vncterm_refresh (vt);
1940       }
1941
1942       if (esc) {
1943         vncterm_respond_esc (vt, esc);
1944       } else if(keySym<0x100) {
1945         if (vt->utf8) {
1946           int len = ucs2_to_utf8 (keySym & 0x0fff, &vt->ibuf[vt->ibuf_count]);
1947           vt->ibuf_count += len;
1948         } else {
1949           vt->ibuf[vt->ibuf_count++] = (char)keySym;
1950         }
1951       }
1952     }
1953   } else {
1954     if (keySym == XK_Shift_L || keySym == XK_Shift_R) {
1955       shift = 0;
1956     } else if (keySym == XK_Control_L || keySym == XK_Control_R) {
1957       control = 0;
1958     }
1959   }
1960 }
1961
1962 void
1963 vncterm_set_xcut_text (char* str, int len, struct _rfbClientRec* cl)
1964 {
1965   vncTerm *vt =(vncTerm *)cl->screen->screenData;
1966
1967   // seems str is Latin-1 encoded
1968   if (vt->selection) free (vt->selection);
1969   vt->selection = (unicode *)malloc (len*sizeof (unicode));
1970   int i;
1971   for (i = 0; i < len; i++) {
1972     vt->selection[i] = str[i] & 0xff;
1973   }
1974   vt->selection_len = len;
1975 }
1976
1977 static void
1978 mouse_report (vncTerm *vt, int butt, int mrx, int mry)
1979 {
1980   char buf[8];
1981
1982   sprintf (buf, "[M%c%c%c", (char)(' ' + butt), (char)('!' + mrx),
1983            (char)('!' + mry));
1984
1985   vncterm_respond_esc (vt, buf);
1986 }
1987
1988 void
1989 vncterm_toggle_marked_cell (vncTerm *vt, int pos)
1990 {
1991   int x= (pos%vt->width)*8;
1992   int y= (pos/vt->width)*16;
1993
1994   int i,j;
1995   rfbScreenInfoPtr s=vt->screen;
1996
1997   char *b = s->frameBuffer+y*s->width+x;
1998
1999   for (j=0; j < 16; j++) {
2000     for(i=0; i < 8; i++) {
2001       b[j*s->width+i] ^= 0x0f;
2002       rfbMarkRectAsModified (s, x, y, x+8, y+16);
2003     }
2004   }
2005 }
2006
2007 void
2008 vncterm_pointer_event (int buttonMask, int x, int y, rfbClientPtr cl)
2009 {
2010   vncTerm *vt =(vncTerm *)cl->screen->screenData;
2011   static int button2_released = 1;
2012   static int last_mask = 0;
2013   static int sel_start_pos = 0;
2014   static int sel_end_pos = 0;
2015   int i;
2016
2017   int cx = x/8;
2018   int cy = y/16;
2019
2020   if (cx < 0) cx = 0;
2021   if (cx >= vt->width) cx = vt->width - 1;
2022   if (cy < 0) cy = 0;
2023   if (cy >= vt->height) cy = vt->height - 1;
2024
2025   if (vt->report_mouse && buttonMask != last_mask) {
2026     last_mask = buttonMask;
2027     if (buttonMask & 1) {
2028       mouse_report (vt, 0, cx, cy);
2029     }
2030     if (buttonMask & 2) {
2031       mouse_report (vt, 1, cx, cy);
2032     }
2033     if (buttonMask & 4) {
2034       mouse_report (vt, 2, cx, cy);
2035     }
2036     if (!buttonMask) {
2037       mouse_report (vt, 3, cx, cy);
2038     }
2039   }
2040
2041   if (buttonMask & 2) {
2042     if(button2_released && vt->selection) {
2043       int i;
2044       for(i = 0; i < vt->selection_len; i++) {
2045         if (vt->ibuf_count < IBUFSIZE - 6) { // uft8 is max 6 characters wide
2046           if (vt->utf8) {
2047             vt->ibuf_count += ucs2_to_utf8 (vt->selection[i], &vt->ibuf[vt->ibuf_count]);
2048           } else  {
2049             vt->ibuf[vt->ibuf_count++] = vt->selection[i];
2050           }
2051         }
2052       }
2053       if (vt->y_displ != vt->y_base) {
2054         vt->y_displ = vt->y_base;
2055         vncterm_refresh (vt);
2056       }
2057     }
2058     button2_released = 0;
2059   } else {
2060     button2_released = 1;
2061   }
2062
2063   if (buttonMask & 1) {
2064     int pos = cy*vt->width + cx;
2065
2066     // code borrowed from libvncserver (VNConsole.c)
2067
2068     if (!vt->mark_active) {
2069
2070       vt->mark_active = 1;
2071       sel_start_pos = sel_end_pos = pos;
2072       vncterm_toggle_marked_cell (vt, pos);
2073
2074     } else {
2075
2076       if (pos != sel_end_pos) {
2077
2078         if (pos > sel_end_pos) {
2079           cx = sel_end_pos; cy=pos;
2080         } else {
2081           cx=pos; cy=sel_end_pos;
2082         }
2083
2084         if (cx < sel_start_pos) {
2085           if (cy < sel_start_pos) cy--;
2086         } else {
2087           cx++;
2088         }
2089
2090         while (cx <= cy) {
2091           vncterm_toggle_marked_cell (vt, cx);
2092           cx++;
2093         }
2094
2095         sel_end_pos = pos;
2096       }
2097     }
2098
2099   } else if (vt->mark_active) {
2100     vt->mark_active = 0;
2101
2102     if (sel_start_pos > sel_end_pos) {
2103       int tmp = sel_start_pos - 1;
2104       sel_start_pos = sel_end_pos;
2105       sel_end_pos = tmp;
2106     }
2107
2108     int len = sel_end_pos - sel_start_pos + 1;
2109
2110     if (vt->selection) free (vt->selection);
2111     vt->selection = (unicode *)malloc (len*sizeof (unicode));
2112     vt->selection_len = len;
2113     char *sel_latin1 = (char *)malloc (len + 1);
2114
2115     for (i = 0; i < len; i++) {
2116       int pos = sel_start_pos + i;
2117       int x = pos % vt->width;
2118       int y1 = ((pos / vt->width) + vt->y_displ) % vt->total_height;
2119       TextCell *c = &vt->cells[y1*vt->width + x];
2120       vt->selection[i] = c->ch;
2121       sel_latin1[i] = (char)c->ch;
2122       c++;
2123     }
2124     sel_latin1[len] = 0;
2125     rfbGotXCutText (vt->screen, sel_latin1, len);
2126     free (sel_latin1);
2127
2128     while (sel_start_pos <= sel_end_pos) {
2129       vncterm_toggle_marked_cell (vt, sel_start_pos++);
2130     }
2131
2132   }
2133
2134   rfbDefaultPtrAddEvent (buttonMask, x, y, cl);
2135 }
2136
2137 static int client_count = 0;
2138 static int client_connected = 0;
2139 static int last_client = 1;
2140 static time_t last_time = 0;
2141
2142 void
2143 client_gone (rfbClientPtr client)
2144 {
2145   client_count--;
2146
2147   last_time = time (NULL);
2148
2149   if (client_count <= 0) {
2150     last_client = 1;
2151   }
2152 }
2153
2154 /* libvncserver callback for when a new client connects */
2155 enum rfbNewClientAction
2156 new_client (rfbClientPtr client)
2157 {
2158   client->clientGoneHook = client_gone;
2159   client_count++;
2160
2161   last_time = time (NULL);
2162
2163   last_client = 0;
2164   client_connected = 1;
2165
2166   return RFB_CLIENT_ACCEPT;
2167 }
2168
2169 static char *vncticket = NULL;
2170
2171 vncTerm *
2172 create_vncterm (int argc, char** argv, int maxx, int maxy)
2173 {
2174   int i;
2175
2176   rfbScreenInfoPtr screen = rfbGetScreen (&argc, argv, maxx, maxy, 8, 1, 1);
2177   screen->frameBuffer=(char*)calloc(maxx*maxy, 1);
2178
2179   char **passwds = calloc(sizeof(char**), 2);
2180
2181   vncTerm *vt = (vncTerm *)calloc (sizeof(vncTerm), 1);
2182
2183   rfbColourMap *cmap =&screen->colourMap;
2184   cmap->data.bytes = malloc (16*3);
2185   for(i=0;i<16;i++) {
2186     cmap->data.bytes[i*3 + 0] = default_red[color_table[i]];
2187     cmap->data.bytes[i*3 + 1] = default_grn[color_table[i]];
2188     cmap->data.bytes[i*3 + 2] = default_blu[color_table[i]];
2189   }
2190   cmap->count = 16;
2191   cmap->is16 = FALSE;
2192   screen->serverFormat.trueColour = FALSE;
2193
2194   screen->kbdAddEvent = vncterm_kbd_event;
2195
2196   screen->setXCutText = vncterm_set_xcut_text;
2197
2198   screen->ptrAddEvent = vncterm_pointer_event;
2199
2200   screen->desktopName = "VNC Command Terminal";
2201
2202   screen->newClientHook = new_client;
2203
2204   vt->maxx = screen->width;
2205   vt->maxy = screen->height;
2206
2207   vt->width = vt->maxx / 8;
2208   vt->height = vt->maxy / 16;
2209
2210   vt->total_height = vt->height * 20;
2211   vt->scroll_height = 0;
2212   vt->y_base =  0;
2213   vt->y_displ =  0;
2214
2215   vt->region_top = 0;
2216   vt->region_bottom = vt->height;
2217
2218   vt->g0enc = LAT1_MAP;
2219   vt->g1enc = GRAF_MAP;
2220   vt->cur_enc = vt->g0enc;
2221   vt->charset = 0;
2222
2223   /* default text attributes */
2224   vt->default_attrib.bold = 0;
2225   vt->default_attrib.uline = 0;
2226   vt->default_attrib.blink = 0;
2227   vt->default_attrib.invers = 0;
2228   vt->default_attrib.unvisible = 0;
2229   vt->default_attrib.fgcol = 7;
2230   vt->default_attrib.bgcol = 0;
2231
2232   vt->cur_attrib = vt->default_attrib;
2233
2234   vt->cells = (TextCell *)calloc (sizeof (TextCell), vt->width*vt->total_height);
2235
2236   for (i = 0; i < vt->width*vt->total_height; i++) {
2237     vt->cells[i].ch = ' ';
2238     vt->cells[i].attrib = vt->default_attrib;
2239   }
2240
2241   vt->altcells = (TextCell *)calloc (sizeof (TextCell), vt->width*vt->height);
2242
2243   vt->screen = screen;
2244
2245   screen->screenData = (void*)vt;
2246
2247   //screen->autoPort = 1;
2248
2249   if (vncticket) {
2250       passwds[0] = vncticket;
2251       passwds[1] = NULL;
2252
2253       screen->authPasswdData = (void *)passwds;
2254       screen->passwordCheck = rfbCheckPasswordByList;
2255   } else {
2256       rfbRegisterSecurityHandler(&VncSecurityHandlerVencrypt);
2257   }
2258
2259   rfbInitServer(screen);
2260
2261   return vt;
2262 }
2263
2264 int
2265 main (int argc, char** argv)
2266 {
2267   int i;
2268   char **cmdargv = NULL;
2269   char *command = "/bin/bash"; // execute normal shell as default
2270   int pid;
2271   int master;
2272   char ptyname[1024];
2273   fd_set fs, fs1;
2274   struct timeval tv, tv1;
2275   time_t elapsed, cur_time;
2276   struct winsize dimensions;
2277
2278   if (gnutls_global_init () < 0) {
2279           fprintf(stderr, "gnutls_global_init failed\n");
2280           exit(-1);
2281   }
2282
2283   if (gnutls_dh_params_init (&dh_params) < 0) {
2284           fprintf(stderr, "gnutls_dh_params_init failed\n");
2285           exit(-1);
2286   }
2287
2288   if (gnutls_dh_params_generate2 (dh_params, DH_BITS) < 0) {
2289           fprintf(stderr, "gnutls_dh_params_init failed\n");
2290           exit(-1);
2291   }
2292
2293   for (i = 1; i < argc; i++) {
2294     if (!strcmp (argv[i], "-c")) {
2295       command = argv[i+1];
2296       cmdargv = &argv[i+1];
2297       argc = i;
2298       argv[i] = NULL;
2299       break;
2300     }
2301   }
2302
2303   for (i = 1; i < argc; i++) {
2304     if (!strcmp (argv[i], "-timeout")) {
2305       CHECK_ARGC (argc, argv, i);
2306       idle_timeout = atoi(argv[i+1]);
2307       rfbPurgeArguments(&argc, &i, 2, argv); i--;
2308     } else if (!strcmp (argv[i], "-authpath")) {
2309       CHECK_ARGC (argc, argv, i);
2310       auth_path = argv[i+1];
2311       rfbPurgeArguments(&argc, &i, 2, argv); i--;
2312     } else if (!strcmp (argv[i], "-perm")) {
2313       CHECK_ARGC (argc, argv, i);
2314       auth_perm = argv[i+1];
2315       rfbPurgeArguments(&argc, &i, 2, argv); i--;
2316     } else if (!strcmp (argv[i], "-notls")) {
2317         rfbPurgeArguments(&argc, &i, 1, argv); i--;
2318         if ((vncticket = getenv("PVE_VNC_TICKET")) == NULL) {
2319           fprintf(stderr, "missing env PVE_VNC_TICKET (-notls)\n");
2320           exit(-1);
2321         }
2322     }
2323   }
2324
2325   unsetenv("PVE_VNC_TICKET"); // do not expose this to child
2326
2327 #ifdef DEBUG
2328   rfbLogEnable (1);
2329   gnutls_global_set_log_level(10);
2330   gnutls_global_set_log_function(vnc_debug_gnutls_log);
2331 #else
2332   rfbLogEnable (0);
2333 #endif
2334
2335   vncTerm *vt = create_vncterm (argc, argv, 745, 400);
2336
2337   setlocale(LC_ALL, ""); // set from environment
2338
2339   char *ctype = setlocale (LC_CTYPE, NULL); // query LC_CTYPE
2340
2341   // fixme: ist there a standard way to detect utf8 mode ?
2342   if (strcasestr (ctype, ".utf-8")||strcasestr (ctype, ".utf8")) {
2343     vt->utf8 = 1;
2344   }
2345
2346   dimensions.ws_col = vt->width;
2347   dimensions.ws_row = vt->height;
2348
2349   setenv ("TERM", TERM, 1);
2350
2351   pid = forkpty (&master, ptyname, NULL, &dimensions);
2352   if(!pid) {
2353
2354     // install default signal handlers
2355     signal (SIGQUIT, SIG_DFL);
2356     signal (SIGTERM, SIG_DFL);
2357     signal (SIGINT, SIG_DFL);
2358
2359     if (cmdargv) {
2360       execvp (command, cmdargv);
2361     } else {
2362       execlp (command, command, NULL);
2363     }
2364     perror ("Error: exec failed\n");
2365     exit (-1); // should not be reached
2366   } else if (pid == -1) {
2367     perror ("Error: fork failed\n");
2368     exit (-1);
2369   }
2370
2371   FD_ZERO (&fs);
2372   FD_SET (master, &fs);
2373   tv.tv_sec = 0;
2374   tv.tv_usec = 5000; /* 5 ms */
2375
2376   last_time = time (NULL);
2377
2378   int count = 0;
2379   while (1) {
2380     count ++;
2381     tv1 = tv;
2382     fs1 = fs;
2383
2384     cur_time = time (NULL);
2385
2386     elapsed = cur_time - last_time;
2387     //printf ("Elapsed %ld\n", elapsed);
2388
2389     if (last_client) {
2390       if (client_connected) {
2391         if (idle_timeout && (elapsed >= idle_timeout)) {
2392           break;
2393         }
2394       } else {
2395         // wait at least 20 seconds for initial connect
2396         if (idle_timeout && (elapsed >= (idle_timeout > 20 ? idle_timeout : 20))) {
2397           break;
2398         }
2399       }
2400     } else {
2401       // exit after 30 minutes idle time
2402       if (elapsed >= 30*60) {
2403         break;
2404       }
2405     }
2406
2407     rfbProcessEvents (vt->screen, 40000); /* 40 ms */
2408
2409     if (vt->ibuf_count > 0) {
2410       //printf ("DEBUG: WRITE %d %d\n", vt->ibuf[0], vt->ibuf_count);
2411       write (master, vt->ibuf, vt->ibuf_count);
2412       vt->ibuf_count = 0;
2413       last_time = time (NULL);
2414     }
2415
2416     if (!vt->mark_active) {
2417
2418       int num_fds = select (master+1, &fs1, NULL, NULL, &tv1);
2419       if (num_fds >= 0) {
2420         if (FD_ISSET (master, &fs1)) {
2421           char buffer[1024];
2422           int c;
2423           while ((c = read (master, buffer, 1024)) == -1) {
2424             if (errno != EAGAIN) break;
2425           }
2426           if (c == -1) break;
2427           vncterm_puts (vt, buffer, c);
2428         }
2429       } else {
2430         break;
2431       }
2432     }
2433   }
2434
2435   kill (pid, 9);
2436   int status;
2437   waitpid(pid, &status, 0);
2438
2439   exit (0);
2440 }