ttssh2/ttxssh/ssh.c

/*
Copyright (c) 1998-2001, Robert O'Callahan
Copyright (c) 2004-2005, Yutaka Hirata
All rights reserved.

Redistribution and use in source and binary forms, with or without modification,
are permitted provided that the following conditions are met:

Redistributions of source code must retain the above copyright notice, this list of
conditions and the following disclaimer.

Redistributions in binary form must reproduce the above copyright notice, this list
of conditions and the following disclaimer in the documentation and/or other materials
provided with the distribution.

The name of Robert O'Callahan may not be used to endorse or promote products derived from
this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ``AS IS'' AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL
THE REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/

#include "ttxssh.h"
#include "util.h"

#include <openssl/bn.h>
#include <openssl/evp.h>
#include <openssl/dh.h>
#include <openssl/engine.h>
#include <openssl/rsa.h>
#include <openssl/dsa.h>
#include <limits.h>
#include <malloc.h>
#include <string.h>
#include <stdlib.h>
#include <process.h>
#include <time.h>
#include "buffer.h"
#include "ssh.h"
#include "crypt.h"
#include "fwd.h"

#include <sys/types.h>
#include <sys/stat.h>
#include <assert.h>

// SSH2 macro
#ifdef _DEBUG
#define SSH2_DEBUG
#endif

#define DONT_WANTCONFIRM 1  // (2005.3.28 yutaka)
#define INTBLOB_LEN 20
#define SIGBLOB_LEN (2*INTBLOB_LEN)

//
// SSH2 data structure
//

// channel data structure
#define CHANNEL_MAX 100

enum channel_type {
        TYPE_SHELL, TYPE_PORTFWD, TYPE_SCP,
};

enum scp_state {
        SCP_INIT, SCP_TIMESTAMP, SCP_FILEINFO, SCP_DATA, SCP_CLOSING,
};

typedef struct bufchain {
        buffer_t *msg;
        struct bufchain *next;
} bufchain_t;

typedef struct scp {
        enum scp_state state;      // SCP state 
        char sendfile[MAX_PATH];       // sending filename
        char sendfilefull[MAX_PATH];   // sending filename fullpath
        FILE *sendfp;                  // file pointer
        struct _stat filestat;         // file status information
        HANDLE thread;                 // sending thread handle
} scp_t;

typedef struct channel {
        int used;
        int self_id;
        int remote_id;
        unsigned int local_window;
        unsigned int local_window_max;
        unsigned int local_consumed;
        unsigned int local_maxpacket;
        unsigned int remote_window;
        unsigned int remote_maxpacket;
        enum channel_type type;
        int local_num;
        bufchain_t *bufchain;
        scp_t scp;
} Channel_t;

static Channel_t channels[CHANNEL_MAX];

static char ssh_ttymodes[] = "\x01\x03\x02\x1c\x03\x08\x04\x15\x05\x04";

static void try_send_credentials(PTInstVar pvar);
static void prep_compression(PTInstVar pvar);

// �����v���g�^�C�v����
void SSH2_send_kexinit(PTInstVar pvar);
static BOOL handle_SSH2_kexinit(PTInstVar pvar);
static void SSH2_dh_kex_init(PTInstVar pvar);
static void SSH2_dh_gex_kex_init(PTInstVar pvar);
static BOOL handle_SSH2_dh_common_reply(PTInstVar pvar);
static BOOL handle_SSH2_dh_gex_reply(PTInstVar pvar);
static BOOL handle_SSH2_newkeys(PTInstVar pvar);
static BOOL handle_SSH2_authrequest(PTInstVar pvar);
static BOOL handle_SSH2_userauth_success(PTInstVar pvar);
static BOOL handle_SSH2_userauth_failure(PTInstVar pvar);
static BOOL handle_SSH2_userauth_banner(PTInstVar pvar);
static BOOL handle_SSH2_open_confirm(PTInstVar pvar);
static BOOL handle_SSH2_open_failure(PTInstVar pvar);
static BOOL handle_SSH2_request_success(PTInstVar pvar);
static BOOL handle_SSH2_request_failure(PTInstVar pvar);
static BOOL handle_SSH2_channel_success(PTInstVar pvar);
static BOOL handle_SSH2_channel_data(PTInstVar pvar);
static BOOL handle_SSH2_channel_extended_data(PTInstVar pvar);
static BOOL handle_SSH2_channel_eof(PTInstVar pvar);
static BOOL handle_SSH2_channel_close(PTInstVar pvar);
static BOOL handle_SSH2_channel_open(PTInstVar pvar);
static BOOL handle_SSH2_window_adjust(PTInstVar pvar);
static BOOL handle_SSH2_channel_request(PTInstVar pvar);
void SSH2_dispatch_init(int stage);
int SSH2_dispatch_enabled_check(unsigned char message);
void SSH2_dispatch_add_message(unsigned char message);
void SSH2_dispatch_add_range_message(unsigned char begin, unsigned char end);
int dh_pub_is_valid(DH *dh, BIGNUM *dh_pub);
static void start_ssh_heartbeat_thread(PTInstVar pvar);
static void SSH2_send_channel_data(PTInstVar pvar, Channel_t *c, unsigned char FAR * buf, unsigned int buflen);

//
// channel function
//
static Channel_t *ssh2_channel_new(unsigned int window, unsigned int maxpack,
                                   enum confirm_type type, int local_num)
{
        int i, found;
        Channel_t *c;

        found = -1;
        for (i = 0 ; i < CHANNEL_MAX ; i++) {
                if (channels[i].used == 0) { // free channel
                        found = i;
                        break;
                }
        }
        if (found == -1) { // not free channel
                return (NULL);
        }

        // setup
        c = &channels[found];
        memset(c, 0, sizeof(Channel_t));
        c->used = 1;
        c->self_id = i;
        c->remote_id = -1;
        c->local_window = window;
        c->local_window_max = window;
        c->local_consumed = 0;
        c->local_maxpacket = maxpack;
        c->remote_window = 0;
        c->remote_maxpacket = 0;
        c->type = type;
        c->local_num = local_num;  // alloc_channel()�����l��������������
        c->bufchain = NULL;
        if (type == TYPE_SCP) {
                c->scp.state = SCP_INIT;
                c->scp.thread = (HANDLE)-1L;
        }

        return (c);
}

// remote_window�������������������A�������������o�b�t�@�����X�g�i�������j���������������B
static void ssh2_channel_add_bufchain(Channel_t *c, unsigned char *buf, unsigned int buflen)
{
        bufchain_t *p, *old;

        // allocate new buffer
        p = malloc(sizeof(bufchain_t));
        if (p == NULL)
                return;
        p->msg = buffer_init();
        if (p == NULL) {
                free(p);
                return;
        }
        buffer_put_raw(p->msg, buf, buflen);
        p->next = NULL;

        if (c->bufchain == NULL) {
                c->bufchain = p;
        } else {
                old = c->bufchain;
                while (old->next)
                        old = old->next;
                old->next = p;
        }
}


static void ssh2_channel_retry_send_bufchain(PTInstVar pvar, Channel_t *c)
{
        bufchain_t *ch;
        unsigned int size;

        while (c->bufchain) {
                // ����������������
                ch = c->bufchain;
                size = buffer_len(ch->msg);
                if (size >= c->remote_window)
                        break;

                SSH_channel_send(pvar, c->local_num, -1, buffer_ptr(ch->msg), size);

                c->bufchain = ch->next;

                buffer_free(ch->msg);
                free(ch);
        }
}


// channel close�����`���l���\���������X�g�����p����
// (2007.4.26 yutaka)
static void ssh2_channel_delete(Channel_t *c)
{
        bufchain_t *ch, *ptr;

        ch = c->bufchain;
        while (ch) {
                if (ch->msg)
                        buffer_free(ch->msg);
                ptr = ch;
                ch = ch->next;
                free(ptr);
        }

        if (c->type == TYPE_SCP) {
                c->scp.state = SCP_CLOSING;
                // SCP�X���b�h���������������I������������
                if (c->scp.thread != (HANDLE)-1L) {
                        WaitForSingleObject(c->scp.thread, INFINITE);
                        CloseHandle(c->scp.thread);
                        c->scp.thread = (HANDLE)-1L;
                }
        }

        memset(c, 0, sizeof(Channel_t));
        c->used = 0;
}


// connection close������������
void ssh2_channel_free(void)
{
        int i;
        Channel_t *c;

        for (i = 0 ; i < CHANNEL_MAX ; i++) {
                c = &channels[i];
                ssh2_channel_delete(c);
        }

}

static Channel_t *ssh2_channel_lookup(int id)
{
        Channel_t *c;

        if (id < 0 || id >= CHANNEL_MAX) {
                return (NULL);
        }
        c = &channels[id];
        if (c->used == 0) { // already freed
                return (NULL);
        }
        return (c);
}

// SSH1��������������channel�\���������ASSH2������Channel_t�����������B
// TODO: �����I�����`���l���\������1�������������B
// (2005.6.12 yutaka)
static Channel_t *ssh2_local_channel_lookup(int local_num)
{
        int i;
        Channel_t *c;

        for (i = 0 ; i < CHANNEL_MAX ; i++) {
                c = &channels[i];
                if (c->local_num == local_num)
                        return (c);
        }
        return (NULL);
}


//
// SSH heartbeat mutex
//
static CRITICAL_SECTION g_ssh_heartbeat_lock;   /* �����M�p���b�N */
static CRITICAL_SECTION g_ssh_blocking_send_lock;   /* send_packet_blocking()�p���b�N */

void ssh_heartbeat_lock_initialize(void)
{
        InitializeCriticalSection(&g_ssh_heartbeat_lock);
        InitializeCriticalSection(&g_ssh_blocking_send_lock);
}

void ssh_heartbeat_lock_finalize(void)
{
        DeleteCriticalSection(&g_ssh_heartbeat_lock);
        DeleteCriticalSection(&g_ssh_blocking_send_lock);
}

void ssh_heartbeat_lock(void)
{
        EnterCriticalSection(&g_ssh_heartbeat_lock);
}

void ssh_heartbeat_unlock(void)
{
        LeaveCriticalSection(&g_ssh_heartbeat_lock);
}

static void ssh_blocking_send_lock(void)
{
        EnterCriticalSection(&g_ssh_blocking_send_lock);
}

static void ssh_blocking_send_unlock(void)
{
        LeaveCriticalSection(&g_ssh_blocking_send_lock);
}


//
// SSH memory dump (for debug)
//
// (2005.3.7 yutaka)
//
#define MEMTAG_MAX 300
#define LOGDUMP "ssh2dump.log"
#define SENDTOME "Please send '"LOGDUMP"' file to TeraTerm developer team."

typedef struct memtag {
        char *name;
        char *desc;
        int len;
        char *data;
} memtag_t;

static memtag_t memtags[MEMTAG_MAX];
static int memtag_count = 0;
static int memtag_use = 0;

/* �_���v���C�����t�H�[�}�b�g�\������ */
static void displine_memdump(FILE *fp, int addr, int *bytes, int byte_cnt)
{
        int i, c;

        /* �������A�h���X�\�� */
        fprintf(fp, "%08X : ", addr);

        /* �o�C�i���\���i4�o�C�g�������������}���j*/
        for (i = 0 ; i < byte_cnt ; i++) {
                if (i > 0 && i % 4 == 0)
                        fprintf(fp, " ");

                fprintf(fp, "%02X", bytes[i]);
        }

        /* ASCII�\���������������������� */
        fprintf(fp, "   %*s%*s", (16-byte_cnt)*2+1, " ", (16-byte_cnt+3)/4, " ");

        /* ASCII�\�� */
        for (i = 0 ; i < byte_cnt ; i++) {
                c = bytes[i];
                if (c >= 0x20 && c <= 0x7f) {
                        fprintf(fp, "%c", c);
                } else {
                        fprintf(fp, ".");
                }
        }

        fprintf(fp, "\n");
}


/* �_���v���[�`�� */
static void dump_memdump(FILE *fp, char *data, int len)
{
        int c, addr;
        int bytes[16], *ptr;
        int byte_cnt;
        int i;

        addr = 0;
        byte_cnt = 0;
        ptr = bytes;
        for (i = 0 ; i < len ; i++) {
                c = data[i];
                *ptr++ = c & 0xff;
                byte_cnt++;

                if (byte_cnt == 16) {
                        displine_memdump(fp, addr, bytes, byte_cnt);

                        addr += 16;
                        byte_cnt = 0;
                        ptr = bytes;
                }
        }

        if (byte_cnt > 0) {
                displine_memdump(fp, addr, bytes, byte_cnt);
        }
}

void init_memdump(void)
{
        int i;

        for (i = 0 ; i < MEMTAG_MAX ; i++) {
                memtags[i].name = NULL;
                memtags[i].desc = NULL;
                memtags[i].data = NULL;
                memtags[i].len = 0;
        }
        memtag_use++;
}

void finish_memdump(void)
{
        int i;

        // initialize�������������������������������B(2005.4.3 yutaka)
        if (memtag_use <= 0)
                return;
        memtag_use--;

        for (i = 0 ; i < MEMTAG_MAX ; i++) {
                free(memtags[i].name);
                free(memtags[i].desc);
                free(memtags[i].data);
                memtags[i].len = 0;
        }
}

void save_memdump(char *filename)
{
        FILE *fp;
        int i;
        time_t t;
        struct tm *tm;

        fp = fopen(filename, "w");
        if (fp == NULL)
                return;

        t = time(NULL);
        tm = localtime(&t);

        fprintf(fp, "<<< TeraTerm SSH2 log dump >>>\n");
        fprintf(fp, "saved time: %04d/%02d/%02d %02d:%02d:%02d\n",
                tm->tm_year + 1900,
                tm->tm_mon + 1,
                tm->tm_mday,
                tm->tm_hour,
                tm->tm_min,
                tm->tm_sec);
        fprintf(fp, "\n");

        for (i = 0 ; i < memtag_count ; i++) {
                fprintf(fp, "============================================\n");
                fprintf(fp, "name: %s\n", memtags[i].name);
                fprintf(fp, "--------------------------------------------\n");
                fprintf(fp, "description: %s\n", memtags[i].desc);
                fprintf(fp, "============================================\n");
                dump_memdump(fp, memtags[i].data, memtags[i].len);
                fprintf(fp, "\n\n\n");
        }

        fprintf(fp, "[EOF]\n");

        fclose(fp);
}

void push_memdump(char *name, char *desc, char *data, int len)
{
        memtag_t *ptr;
        char *dp;

        dp = malloc(len);
        if (dp == NULL)
                return;
        memcpy(dp, data, len);

        if (memtag_count >= MEMTAG_MAX)
                return;

        ptr = &memtags[memtag_count];
        memtag_count++;
        ptr->name = _strdup(name);
        ptr->desc = _strdup(desc);
        ptr->data = dp;
        ptr->len = len;
}

void push_bignum_memdump(char *name, char *desc, BIGNUM *bignum)
{
        int len;
        char *buf;

        len = BN_num_bytes(bignum);
        buf = malloc(len); // allocate
        if (buf == NULL)
                return;
        BN_bn2bin(bignum, buf);
        push_memdump(name, desc, buf, len); // at push_bignum_memdump()
        free(buf); // free
}


//
//
//


static int get_predecryption_amount(PTInstVar pvar)
{
        static int small_block_decryption_sizes[] = { 5, 5, 6, 6, 8 };

        if (SSHv1(pvar)) {
                return 0;
        } else {
                int block_size = CRYPT_get_decryption_block_size(pvar);

                if (block_size < 5) {
                        return small_block_decryption_sizes[block_size];
                } else {
                        return block_size;
                }
        }
}

/* Get up to 'limit' bytes into the payload buffer.
   'limit' is counted from the start of the payload data.
   Returns the amount of data in the payload buffer, or
   -1 if there is an error.
   We can return more than limit in some cases. */
static int buffer_packet_data(PTInstVar pvar, int limit)
{
        if (pvar->ssh_state.payloadlen >= 0) {
                return pvar->ssh_state.payloadlen;
        } else {
                int cur_decompressed_bytes =
                        pvar->ssh_state.decompress_stream.next_out -
                        pvar->ssh_state.postdecompress_inbuf;

                while (limit > cur_decompressed_bytes) {
                        int result;

                        pvar->ssh_state.payload =
                                pvar->ssh_state.postdecompress_inbuf + 1;
                        if (pvar->ssh_state.postdecompress_inbuflen == cur_decompressed_bytes) {
                                buf_ensure_size(&pvar->ssh_state.postdecompress_inbuf,
                                                &pvar->ssh_state.postdecompress_inbuflen,
                                                min(limit, cur_decompressed_bytes * 2));
                        }

                        pvar->ssh_state.decompress_stream.next_out =
                                pvar->ssh_state.postdecompress_inbuf +
                                cur_decompressed_bytes;
                        pvar->ssh_state.decompress_stream.avail_out =
                                min(limit, pvar->ssh_state.postdecompress_inbuflen)
                                - cur_decompressed_bytes;

                        result =
                                inflate(&pvar->ssh_state.decompress_stream, Z_SYNC_FLUSH);
                        cur_decompressed_bytes =
                                pvar->ssh_state.decompress_stream.next_out -
                                pvar->ssh_state.postdecompress_inbuf;

                        switch (result) {
                        case Z_OK:
                                break;
                        case Z_BUF_ERROR:
                                pvar->ssh_state.payloadlen = cur_decompressed_bytes;
                                return cur_decompressed_bytes;
                        default:
                                UTIL_get_lang_msg("MSG_SSH_INVALID_COMPDATA_ERROR", pvar,
                                                  "Invalid compressed data in received packet");
                                notify_fatal_error(pvar, pvar->ts->UIMsg);
                                return -1;
                        }
                }

                return cur_decompressed_bytes;
        }
}

/* For use by the protocol processing code.
   Gets N bytes of uncompressed payload. Returns FALSE if data not available
   and a fatal error has been signaled.
   The data is available in the payload buffer. This buffer address
   can change during a call to grab_payload, so take care!
   The payload pointer is set to point to the first byte of the actual data
   (after the packet type byte).
*/
static BOOL grab_payload(PTInstVar pvar, int num_bytes)
{
        /* Accept maximum of 4MB of payload data */
        int in_buffer = buffer_packet_data(pvar, 4 * 1024 * 1024);

        if (in_buffer < 0) {
                return FALSE;
        } else {
                pvar->ssh_state.payload_grabbed += num_bytes;
                if (pvar->ssh_state.payload_grabbed > in_buffer) {
                        char buf[128];
                        UTIL_get_lang_msg("MSG_SSH_TRUNCATED_PKT_ERROR", pvar,
                                          "Received truncated packet (%ld > %d) @ grab_payload()");
                        _snprintf_s(buf, sizeof(buf), _TRUNCATE, pvar->ts->UIMsg,
                                    pvar->ssh_state.payload_grabbed, in_buffer);
                        notify_fatal_error(pvar, buf);
                        return FALSE;
                } else {
                        return TRUE;
                }
        }
}

static BOOL grab_payload_limited(PTInstVar pvar, int num_bytes)
{
        int in_buffer;

        pvar->ssh_state.payload_grabbed += num_bytes;
        in_buffer = buffer_packet_data(pvar, pvar->ssh_state.payload_grabbed);

        if (in_buffer < 0) {
                return FALSE;
        } else {
                if (pvar->ssh_state.payload_grabbed > in_buffer) {
                        char buf[128];
                        UTIL_get_lang_msg("MSG_SSH_TRUNCATED_PKT_LIM_ERROR", pvar,
                                          "Received truncated packet (%ld > %d) @ grab_payload_limited()");
                        _snprintf_s(buf, sizeof(buf), _TRUNCATE, pvar->ts->UIMsg,
                                    pvar->ssh_state.payload_grabbed, in_buffer);
                        notify_fatal_error(pvar, buf);
                        return FALSE;
                } else {
                        return TRUE;
                }
        }
}

#define get_payload_uint32(pvar, offset) get_uint32_MSBfirst((pvar)->ssh_state.payload + (offset))
#define get_uint32(buf) get_uint32_MSBfirst((buf))
#define set_uint32(buf, v) set_uint32_MSBfirst((buf), (v))
#define get_mpint_len(pvar, offset) ((get_ushort16_MSBfirst((pvar)->ssh_state.payload + (offset)) + 7) >> 3)
#define get_ushort16(buf) get_ushort16_MSBfirst((buf))

#define do_crc(buf, len) (~(uint32)crc32(0xFFFFFFFF, (buf), (len)))

/* Decrypt the payload, checksum it, eat the padding, get the packet type
   and return it.
   'data' points to the start of the packet --- its length field.
   'len' is the length of the
   payload + padding (+ length of CRC for SSHv1). 'padding' is the length
   of the padding alone. */
static int prep_packet(PTInstVar pvar, char FAR * data, int len,
                                           int padding)
{
        pvar->ssh_state.payload = data + 4;
        pvar->ssh_state.payloadlen = len;

        if (SSHv1(pvar)) {
                if (CRYPT_detect_attack(pvar, pvar->ssh_state.payload, len)) {
                        UTIL_get_lang_msg("MSG_SSH_COREINS_ERROR", pvar,
                                          "'CORE insertion attack' detected.  Aborting connection.");
                        notify_fatal_error(pvar, pvar->ts->UIMsg);
                }

                CRYPT_decrypt(pvar, pvar->ssh_state.payload, len);
                /* PKT guarantees that the data is always 4-byte aligned */
                if (do_crc(pvar->ssh_state.payload, len - 4) !=
                        get_uint32_MSBfirst(pvar->ssh_state.payload + len - 4)) {
                        UTIL_get_lang_msg("MSG_SSH_CORRUPTDATA_ERROR", pvar,
                                          "Detected corrupted data; connection terminating.");
                        notify_fatal_error(pvar, pvar->ts->UIMsg);
                        return SSH_MSG_NONE;
                }

                pvar->ssh_state.payload += padding;
                pvar->ssh_state.payloadlen -= padding + 4;
        } else {
                int already_decrypted = get_predecryption_amount(pvar);

#if 0
                CRYPT_decrypt(pvar, data + already_decrypted,
                              len - already_decrypted);
#else
                CRYPT_decrypt(pvar, data + already_decrypted,
                              (4 + len) - already_decrypted);
#endif

                if (!CRYPT_verify_receiver_MAC
                        (pvar, pvar->ssh_state.receiver_sequence_number, data, len + 4,
                         data + len + 4)) {
                        UTIL_get_lang_msg("MSG_SSH_CORRUPTDATA_ERROR", pvar,
                                          "Detected corrupted data; connection terminating.");
                        notify_fatal_error(pvar, pvar->ts->UIMsg);
                        return SSH_MSG_NONE;
                }

                pvar->ssh_state.payload++;
                pvar->ssh_state.payloadlen -= padding + 1;
        }

        pvar->ssh_state.payload_grabbed = 0;

        if (SSHv1(pvar)) {
                if (pvar->ssh_state.decompressing) {
                        if (pvar->ssh_state.decompress_stream.avail_in != 0) {
                                UTIL_get_lang_msg("MSG_SSH_DECOMPRESS_ERROR", pvar,
                                                  "Internal error: a packet was not fully decompressed.\n"
                                                  "This is a bug, please report it.");
                                notify_nonfatal_error(pvar, pvar->ts->UIMsg);
                        }

                        pvar->ssh_state.decompress_stream.next_in =
                                pvar->ssh_state.payload;
                        pvar->ssh_state.decompress_stream.avail_in =
                                pvar->ssh_state.payloadlen;
                        pvar->ssh_state.decompress_stream.next_out =
                                pvar->ssh_state.postdecompress_inbuf;
                        pvar->ssh_state.payloadlen = -1;
                } else {
                        pvar->ssh_state.payload++;
                }

                if (!grab_payload_limited(pvar, 1)) {
                        return SSH_MSG_NONE;
                }

        } else {
                // support of SSH2 packet compression (2005.7.9 yutaka)
                // support of "Compression delayed" (2006.6.23 maya)
                if ((pvar->stoc_compression == COMP_ZLIB ||
                     pvar->stoc_compression == COMP_DELAYED && pvar->userauth_success) &&
                    pvar->ssh2_keys[MODE_IN].comp.enabled) { // compression enabled
                        int ret;

                        if (pvar->decomp_buffer == NULL) {
                                pvar->decomp_buffer = buffer_init();
                                if (pvar->decomp_buffer == NULL)
                                        return SSH_MSG_NONE;
                        }
                        // ���x�m�������o�b�t�@���g�������������������Y�������B
                        buffer_clear(pvar->decomp_buffer);

                        // packet size��padding�������������y�C���[�h�����������W�J�����B
                        ret = buffer_decompress(&pvar->ssh_state.decompress_stream,
                                                pvar->ssh_state.payload,
                                                pvar->ssh_state.payloadlen,
                                                pvar->decomp_buffer);

                        // �|�C���^���X�V�B
                        pvar->ssh_state.payload = buffer_ptr(pvar->decomp_buffer);
                        pvar->ssh_state.payload++;
                        pvar->ssh_state.payloadlen = buffer_len(pvar->decomp_buffer);

                } else {
                        pvar->ssh_state.payload++;
                }

                if (!grab_payload_limited(pvar, 1)) {
                        return SSH_MSG_NONE;
                }

        }

        pvar->ssh_state.receiver_sequence_number++;

        return pvar->ssh_state.payload[-1];
}

/* Create a packet to be sent. The SSH protocol packet type is in 'type';
   'len' contains the length of the packet payload, in bytes (this
   does not include the space for any of the packet headers or padding,
   or for the packet type byte).
   Returns a pointer to the payload data area, a region of length 'len',
   to be filled by the caller. */
static unsigned char FAR *begin_send_packet(PTInstVar pvar, int type, int len)
{
        unsigned char FAR *buf;

        pvar->ssh_state.outgoing_packet_len = len + 1;

        if (pvar->ssh_state.compressing) {
                buf_ensure_size(&pvar->ssh_state.precompress_outbuf,
                                &pvar->ssh_state.precompress_outbuflen, 1 + len);
                buf = pvar->ssh_state.precompress_outbuf;
        } else {
                /* For SSHv2,
                   Encrypted_length is 4(packetlength) + 1(paddinglength) + 1(packettype)
                   + len(payload) + 4(minpadding), rounded up to nearest block_size
                   We only need a reasonable upper bound for the buffer size */
                buf_ensure_size(&pvar->ssh_state.outbuf,
                                &pvar->ssh_state.outbuflen,
                                len + 30 + CRYPT_get_sender_MAC_size(pvar) +
                                CRYPT_get_encryption_block_size(pvar));
                buf = pvar->ssh_state.outbuf + 12;
        }

        buf[0] = (unsigned char) type;
        return buf + 1;
}

#define finish_send_packet(pvar) finish_send_packet_special((pvar), 0)

// ���M���g���C����������
//
// WinSock�� send() ���o�b�t�@�T�C�Y(len)�������������l��������������������
// ���������������A�����������G���[���������B
// �����������ATCP�R�l�N�V�������f�������o���h���B
// (2006.12.9 yutaka)
static int retry_send_packet(PTInstVar pvar, char FAR * data, int len)
{
        int n;
        int err;

        while (len > 0) {
                n = (pvar->Psend)(pvar->socket, data, len, 0);

                if (n < 0) {
                        err = WSAGetLastError();
                        if (err < WSABASEERR || err == WSAEWOULDBLOCK) {
                                // send()�����l��0�������A�����G���[������ 10000 �������������A
                                // ���������������������B
                                // PuTTY 0.58���������Q�l�B
                                // (2007.2.4 yutak)
                                return 0; // success
                        }
                        return 1; // error
                }

                len -= n;
                data += n;
        }

        return 0; // success
}

static BOOL send_packet_blocking(PTInstVar pvar, char FAR * data, int len)
{
        // �p�P�b�g���M�����o�b�t�@���g�������������A�u���b�L���O�����M�����������K�v�������B
        // �m���u���b�L���O�����M����WSAEWOULDBLOCK�����������������A�����o�b�t�@�����M��������
        // ���������������������������������B(2007.10.30 yutaka)
        // ������������ thread-safe �������������A���s���������������B�������A�S�������b�N����
        // �K�v�������B(2007.12.24 yutaka)
        u_long do_block = 0;
        int code = 0;
        char *kind = NULL, buf[256];

#if 0
        if ((pvar->PWSAAsyncSelect) (pvar->socket, pvar->NotificationWindow,
                                     0, 0) == SOCKET_ERROR
         || ioctlsocket(pvar->socket, FIONBIO, &do_block) == SOCKET_ERROR
         || retry_send_packet(pvar, data, len)
         || (pvar->PWSAAsyncSelect) (pvar->socket, pvar->NotificationWindow,
                                     pvar->notification_msg,
                                     pvar->notification_events) ==
                SOCKET_ERROR) {
                UTIL_get_lang_msg("MSG_SSH_SEND_PKT_ERROR", pvar,
                                  "A communications error occurred while sending an SSH packet.\n"
                                  "The connection will close.");
                notify_fatal_error(pvar, pvar->ts->UIMsg);
                return FALSE;
        } else {
                return TRUE;
        }
#else
        ssh_blocking_send_lock();

        if ((pvar->PWSAAsyncSelect) (pvar->socket, pvar->NotificationWindow,
                                     0, 0) == SOCKET_ERROR) {
                        code = WSAGetLastError();
                        kind = "WSAAsyncSelect1";
                        goto error;
        }
        if (ioctlsocket(pvar->socket, FIONBIO, &do_block) == SOCKET_ERROR) {
                        code = WSAGetLastError();
                        kind = "ioctlsocket";
                        goto error;
        }
        if (retry_send_packet(pvar, data, len) != 0) {
                        code = WSAGetLastError();
                        kind = "retry_send_packet";
                        goto error;
        }
        if ((pvar->PWSAAsyncSelect) (pvar->socket, pvar->NotificationWindow,
                                     pvar->notification_msg,
                                     pvar->notification_events) ==
                SOCKET_ERROR) {
                        code = WSAGetLastError();
                        kind = "WSAAsyncSelect2";
                        goto error;
        }
        ssh_blocking_send_unlock();

        return TRUE;

error:
        ssh_blocking_send_unlock();

        UTIL_get_lang_msg("MSG_SSH_SEND_PKT_ERROR", pvar,
                          "A communications error occurred while sending an SSH packet.\n"
                          "The connection will close. (%s:%d)");
        _snprintf_s(buf, sizeof(buf), _TRUNCATE, pvar->ts->UIMsg,
                    kind, code);
        notify_fatal_error(pvar, buf);
        return FALSE;
#endif
}

/* if skip_compress is true, then the data has already been compressed
   into outbuf + 12 */
static void finish_send_packet_special(PTInstVar pvar, int skip_compress)
{
        unsigned int len = pvar->ssh_state.outgoing_packet_len;
        unsigned char FAR *data;
        unsigned int data_length;
        buffer_t *msg = NULL; // for SSH2 packet compression

        if (pvar->ssh_state.compressing) {
                if (!skip_compress) {
                        buf_ensure_size(&pvar->ssh_state.outbuf,
                                        &pvar->ssh_state.outbuflen,
                                        (int)(len + (len >> 6) + 50 +
                                              CRYPT_get_sender_MAC_size(pvar)));
                        pvar->ssh_state.compress_stream.next_in =
                                pvar->ssh_state.precompress_outbuf;
                        pvar->ssh_state.compress_stream.avail_in = len;
                        pvar->ssh_state.compress_stream.next_out =
                                pvar->ssh_state.outbuf + 12;
                        pvar->ssh_state.compress_stream.avail_out =
                                pvar->ssh_state.outbuflen - 12;

                        if (deflate(&pvar->ssh_state.compress_stream, Z_SYNC_FLUSH) != Z_OK) {
                                UTIL_get_lang_msg("MSG_SSH_COMP_ERROR", pvar,
                                                  "An error occurred while compressing packet data.\n"
                                                  "The connection will close.");
                                notify_fatal_error(pvar, pvar->ts->UIMsg);
                                return;
                        }
                }

                len =
                        pvar->ssh_state.outbuflen - 12 -
                        pvar->ssh_state.compress_stream.avail_out;
        }

        if (SSHv1(pvar)) {
                int padding = 8 - ((len + 4) % 8);

                data = pvar->ssh_state.outbuf + 8 - padding;
                data_length = padding + len + 8;

                set_uint32(data, len + 4);
                if (CRYPT_get_receiver_cipher(pvar) != SSH_CIPHER_NONE) {
                        CRYPT_set_random_data(pvar, data + 4, padding);
                } else {
                        memset(data + 4, 0, padding);
                }
                set_uint32(data + data_length - 4,
                           do_crc(data + 4, data_length - 8));
                CRYPT_encrypt(pvar, data + 4, data_length - 4);
        } else { //for SSH2(yutaka)
                int block_size = CRYPT_get_encryption_block_size(pvar);
                unsigned int encryption_size;
                unsigned int padding;
                BOOL ret;

                /*
                 �f�[�^�\��
                 pvar->ssh_state.outbuf:
                 offset: 0 1 2 3 4 5 6 7 8 9 10 11 12 ...         EOD
                         <--ignore---> ^^^^^^^^    <---- payload --->
                                               packet length

                                                                    ^^padding

                                                           <---------------------------->
                                                              SSH2 sending data on TCP
                
                 NOTE:
                   payload = type(1) + raw-data
                   len = ssh_state.outgoing_packet_len = payload size
                 */
                // �p�P�b�g���k���L���������A�p�P�b�g�����k�����������M�p�P�b�g���\�z�����B(2005.7.9 yutaka)
                // support of "Compression delayed" (2006.6.23 maya)
                if ((pvar->ctos_compression == COMP_ZLIB ||
                     pvar->ctos_compression == COMP_DELAYED && pvar->userauth_success) &&
                    pvar->ssh2_keys[MODE_OUT].comp.enabled) {
                        // �����o�b�t�@�� packet-length(4) + padding(1) + payload(any) �������B
                        msg = buffer_init();
                        if (msg == NULL) {
                                // TODO: error check
                                return;
                        }

                        // ���k�������w�b�_�������y�C���[�h�����B
                        buffer_append(msg, "\0\0\0\0\0", 5);  // 5 = packet-length(4) + padding(1)
                        if (buffer_compress(&pvar->ssh_state.compress_stream, pvar->ssh_state.outbuf + 12, len, msg) == -1) {
                                UTIL_get_lang_msg("MSG_SSH_COMP_ERROR", pvar,
                                                  "An error occurred while compressing packet data.\n"
                                                  "The connection will close.");
                                notify_fatal_error(pvar, pvar->ts->UIMsg);
                                return;
                        }
                        data = buffer_ptr(msg);
                        len = buffer_len(msg) - 5;  // 'len' is overwritten.

                } else {
                        // �����k
                        data = pvar->ssh_state.outbuf + 7;

                }

                // ���M�p�P�b�g�\�z(input parameter: data, len)
                if (block_size < 8) {
                        block_size = 8;
                }
#if 0
                encryption_size = ((len + 8) / block_size + 1) * block_size;
                data_length = encryption_size + CRYPT_get_sender_MAC_size(pvar);

                set_uint32(data, encryption_size - 4);
                padding = encryption_size - len - 5;
                data[4] = (unsigned char) padding;
#else
                // �������p�P�b�g�����������������A�T�[�o����"Bad packet length"���������������������������B
                // (2007.10.29 yutaka)
                encryption_size = 4 + 1 + len;
                padding = block_size - (encryption_size % block_size);
                if (padding < 4)
                        padding += block_size;
                encryption_size += padding;
                set_uint32(data, encryption_size - 4);
                data[4] = (unsigned char) padding;
                data_length = encryption_size + CRYPT_get_sender_MAC_size(pvar);
#endif
                //if (pvar->ssh_state.outbuflen <= 7 + data_length) *(int *)0 = 0;
                CRYPT_set_random_data(pvar, data + 5 + len, padding);
                ret = CRYPT_build_sender_MAC(pvar,
                                             pvar->ssh_state.sender_sequence_number,
                                             data, encryption_size,
                                             data + encryption_size);
                if (ret == FALSE) { // HMAC��������������������������
                        data_length = encryption_size;
                }

                // �p�P�b�g�������������BHMAC���~�������������O�B
                CRYPT_encrypt(pvar, data, encryption_size);
        }

        send_packet_blocking(pvar, data, data_length);

        buffer_free(msg);

        pvar->ssh_state.sender_sequence_number++;

        // ���M�������L�^
        pvar->ssh_heartbeat_tick = time(NULL);
}

static void destroy_packet_buf(PTInstVar pvar)
{
        memset(pvar->ssh_state.outbuf, 0, pvar->ssh_state.outbuflen);
        if (pvar->ssh_state.compressing) {
                memset(pvar->ssh_state.precompress_outbuf, 0,
                       pvar->ssh_state.precompress_outbuflen);
        }
}

/* The handlers are added to the queue for each message. When one of the
   handlers fires, if it returns FALSE, then all handlers in the set are
   removed from their queues. */
static void enque_handlers(PTInstVar pvar, int num_msgs,
                           const int FAR * messages,
                           const SSHPacketHandler FAR * handlers)
{
        SSHPacketHandlerItem FAR *first_item;
        SSHPacketHandlerItem FAR *last_item = NULL;
        int i;

        for (i = 0; i < num_msgs; i++) {
                SSHPacketHandlerItem FAR *item =
                        (SSHPacketHandlerItem FAR *)
                        malloc(sizeof(SSHPacketHandlerItem));
                SSHPacketHandlerItem FAR *cur_item =
                        pvar->ssh_state.packet_handlers[messages[i]];

                item->handler = handlers[i];

                if (cur_item == NULL) {
                        pvar->ssh_state.packet_handlers[messages[i]] = item;
                        item->next_for_message = item;
                        item->last_for_message = item;
                        item->active_for_message = messages[i];
                } else {
                        item->next_for_message = cur_item;
                        item->last_for_message = cur_item->last_for_message;
                        cur_item->last_for_message->next_for_message = item;
                        cur_item->last_for_message = item;
                        item->active_for_message = -1;
                }

                if (last_item != NULL) {
                        last_item->next_in_set = item;
                } else {
                        first_item = item;
                }
                last_item = item;
        }

        if (last_item != NULL) {
                last_item->next_in_set = first_item;
        }
}

static SSHPacketHandler get_handler(PTInstVar pvar, int message)
{
        SSHPacketHandlerItem FAR *cur_item =
                pvar->ssh_state.packet_handlers[message];

        if (cur_item == NULL) {
                return NULL;
        } else {
                return cur_item->handler;
        }
}

/* Called only by SSH_handle_packet */
static void deque_handlers(PTInstVar pvar, int message)
{
        SSHPacketHandlerItem FAR *cur_item =
                pvar->ssh_state.packet_handlers[message];
        SSHPacketHandlerItem FAR *first_item_in_set = cur_item;

        do {
                SSHPacketHandlerItem FAR *next_in_set = cur_item->next_in_set;

                if (cur_item->active_for_message >= 0) {
                        SSHPacketHandlerItem FAR *replacement =
                                cur_item->next_for_message;

                        if (replacement == cur_item) {
                                replacement = NULL;
                        } else {
                                replacement->active_for_message =
                                        cur_item->active_for_message;
                        }
                        pvar->ssh_state.packet_handlers[cur_item->active_for_message] =
                                replacement;
                }
                cur_item->next_for_message->last_for_message =
                        cur_item->last_for_message;
                cur_item->last_for_message->next_for_message =
                        cur_item->next_for_message;

                free(cur_item);
                cur_item = next_in_set;
        } while (cur_item != first_item_in_set);
}

static void enque_handler(PTInstVar pvar, int message,
                          SSHPacketHandler handler)
{
        enque_handlers(pvar, 1, &message, &handler);
}

static void chop_newlines(char FAR * buf)
{
        int len = strlen(buf);

        while (len > 0 && (buf[len - 1] == '\n' || buf[len - 1] == '\r')) {
                buf[len - 1] = 0;
                len--;
        }
}

/********************/
/* Message handlers */
/********************/

static BOOL handle_forwarding_success(PTInstVar pvar)
{
        return FALSE;
}

static BOOL handle_forwarding_failure(PTInstVar pvar)
{
        return FALSE;
}

static void enque_forwarding_request_handlers(PTInstVar pvar)
{
        static const int msgs[] = { SSH_SMSG_SUCCESS, SSH_SMSG_FAILURE };
        static const SSHPacketHandler handlers[]
        = { handle_forwarding_success, handle_forwarding_failure };

        enque_handlers(pvar, 2, msgs, handlers);
}

static BOOL handle_auth_failure(PTInstVar pvar)
{
        notify_verbose_message(pvar, "Authentication failed",
                               LOG_LEVEL_VERBOSE);

        // retry count������ (2005.7.15 yutaka)
        pvar->userauth_retry_count++;

        AUTH_set_generic_mode(pvar);
        AUTH_advance_to_next_cred(pvar);
        pvar->ssh_state.status_flags &= ~STATUS_DONT_SEND_CREDENTIALS;
        try_send_credentials(pvar);
        return FALSE;
}

static BOOL handle_rsa_auth_refused(PTInstVar pvar)
{
        AUTH_destroy_cur_cred(pvar);
        return handle_auth_failure(pvar);
}

static BOOL handle_TIS_challenge(PTInstVar pvar)
{
        if (grab_payload(pvar, 4)) {
                int len = get_payload_uint32(pvar, 0);

                if (grab_payload(pvar, len)) {
                        notify_verbose_message(pvar, "Received TIS challenge",
                                               LOG_LEVEL_VERBOSE);

                        AUTH_set_TIS_mode(pvar, pvar->ssh_state.payload + 4, len);
                        AUTH_advance_to_next_cred(pvar);
                        pvar->ssh_state.status_flags &= ~STATUS_DONT_SEND_CREDENTIALS;
                        try_send_credentials(pvar);
                }
        }
        return FALSE;
}

static BOOL handle_auth_required(PTInstVar pvar)
{
        notify_verbose_message(pvar, "Server requires authentication",
                               LOG_LEVEL_VERBOSE);

        pvar->ssh_state.status_flags &= ~STATUS_DONT_SEND_CREDENTIALS;
        try_send_credentials(pvar);
        /* the first AUTH_advance_to_next_cred is issued early by ttxssh.c */

        return FALSE;
}

static BOOL handle_ignore(PTInstVar pvar)
{
        if (SSHv1(pvar)) {
                if (grab_payload(pvar, 4)
                 && grab_payload(pvar, get_payload_uint32(pvar, 0))) {
                        /* ignore it! but it must be decompressed */
                }
        }
        /*
        else {
                // ���b�Z�[�W�� SSH2_MSG_IGNORE ����������������
                // Cisco ���[�^���� (2006.11.28 maya)
        }
         */
        return TRUE;
}

static BOOL handle_debug(PTInstVar pvar)
{
        BOOL always_display;
        char FAR *description;
        int description_len;
        char buf[2048];

        if (SSHv1(pvar)) {
                if (grab_payload(pvar, 4)
                 && grab_payload(pvar, description_len =
                                 get_payload_uint32(pvar, 0))) {
                        always_display = FALSE;
                        description = pvar->ssh_state.payload + 4;
                        description[description_len] = 0;
                } else {
                        return TRUE;
                }
        } else {
                if (grab_payload(pvar, 5)
                 && grab_payload(pvar,
                                 (description_len = get_payload_uint32(pvar, 1)) + 4)
                 && grab_payload(pvar,
                                 get_payload_uint32(pvar, 5 + description_len))) {
                        always_display = pvar->ssh_state.payload[0] != 0;
                        description = pvar->ssh_state.payload + 5;
                        description[description_len] = 0;
                } else {
                        return TRUE;
                }
        }

        chop_newlines(description);
        _snprintf_s(buf, sizeof(buf), _TRUNCATE, "DEBUG message from server: %s",
                    description);
        if (always_display) {
                notify_nonfatal_error(pvar, buf);
        } else {
                notify_verbose_message(pvar, buf, LOG_LEVEL_VERBOSE);
        }
        return TRUE;
}

static BOOL handle_disconnect(PTInstVar pvar)
{
        int reason_code;
        char FAR *description;
        int description_len;
        char buf[2048];
        char FAR *explanation = "";
        char uimsg[MAX_UIMSG];

        if (SSHv1(pvar)) {
                if (grab_payload(pvar, 4)
                 && grab_payload(pvar, description_len = get_payload_uint32(pvar, 0))) {
                        reason_code = -1;
                        description = pvar->ssh_state.payload + 4;
                        description[description_len] = 0;
                } else {
                        return TRUE;
                }
        } else {
                if (grab_payload(pvar, 8)
                 && grab_payload(pvar,
                                 (description_len = get_payload_uint32(pvar, 4)) + 4)
                 && grab_payload(pvar,
                                 get_payload_uint32(pvar, 8 + description_len))) {
                        reason_code = get_payload_uint32(pvar, 0);
                        description = pvar->ssh_state.payload + 8;
                        description[description_len] = 0;
                } else {
                        return TRUE;
                }
        }

        chop_newlines(description);
        if (description[0] == 0) {
                description = NULL;
        }

        if (get_handler(pvar, SSH_SMSG_FAILURE) == handle_forwarding_failure) {
                UTIL_get_lang_msg("MSG_SSH_UNABLE_FWD_ERROR", pvar,
                                  "\nIt may have disconnected because it was unable to forward a port you requested to be forwarded from the server.\n"
                                  "This often happens when someone is already forwarding that port from the server.");
                strncpy_s(uimsg, sizeof(uimsg), pvar->ts->UIMsg, _TRUNCATE);
                explanation = uimsg;
        }

        if (description != NULL) {
                UTIL_get_lang_msg("MSG_SSH_SERVER_DISCON_ERROR", pvar,
                                  "Server disconnected with message '%s'%s");
                _snprintf_s(buf, sizeof(buf), _TRUNCATE,
                            pvar->ts->UIMsg, description,
                            explanation);
        } else {
                UTIL_get_lang_msg("MSG_SSH_SERVER_DISCON_NORES_ERROR", pvar,
                                  "Server disconnected (no reason given).%s");
                _snprintf_s(buf, sizeof(buf), _TRUNCATE,
                            pvar->ts->UIMsg, explanation);
        }
        notify_fatal_error(pvar, buf);

        return TRUE;
}

static BOOL handle_unimplemented(PTInstVar pvar)
{
        /* Should never receive this since we only send base 2.0 protocol messages */
        grab_payload(pvar, 4);
        return TRUE;
}

static BOOL handle_crypt_success(PTInstVar pvar)
{
        notify_verbose_message(pvar, "Secure mode successfully achieved",
                               LOG_LEVEL_VERBOSE);
        return FALSE;
}

static BOOL handle_noauth_success(PTInstVar pvar)
{
        notify_verbose_message(pvar, "Server does not require authentication",
                               LOG_LEVEL_VERBOSE);
        prep_compression(pvar);
        return FALSE;
}

static BOOL handle_auth_success(PTInstVar pvar)
{
        notify_verbose_message(pvar, "Authentication accepted",
                               LOG_LEVEL_VERBOSE);
        prep_compression(pvar);

        // �n�[�g�r�[�g�E�X���b�h���J�n (2004.12.11 yutaka)
        start_ssh_heartbeat_thread(pvar);

        return FALSE;
}

static BOOL handle_server_public_key(PTInstVar pvar)
{
        int server_key_public_exponent_len;
        int server_key_public_modulus_pos;
        int server_key_public_modulus_len;
        int host_key_bits_pos;
        int host_key_public_exponent_len;
        int host_key_public_modulus_pos;
        int host_key_public_modulus_len;
        int protocol_flags_pos;
        int supported_ciphers;
        char FAR *inmsg;
        Key hostkey;

        if (!grab_payload(pvar, 14))
                return FALSE;
        server_key_public_exponent_len = get_mpint_len(pvar, 12);

        if (!grab_payload(pvar, server_key_public_exponent_len + 2))
                return FALSE;
        server_key_public_modulus_pos = 14 + server_key_public_exponent_len;
        server_key_public_modulus_len =
                get_mpint_len(pvar, server_key_public_modulus_pos);

        if (!grab_payload(pvar, server_key_public_modulus_len + 6))
                return FALSE;
        host_key_bits_pos =
                server_key_public_modulus_pos + 2 + server_key_public_modulus_len;
        host_key_public_exponent_len =
                get_mpint_len(pvar, host_key_bits_pos + 4);

        if (!grab_payload(pvar, host_key_public_exponent_len + 2))
                return FALSE;
        host_key_public_modulus_pos =
                host_key_bits_pos + 6 + host_key_public_exponent_len;
        host_key_public_modulus_len =
                get_mpint_len(pvar, host_key_public_modulus_pos);

        if (!grab_payload(pvar, host_key_public_modulus_len + 12))
                return FALSE;
        protocol_flags_pos =
                host_key_public_modulus_pos + 2 + host_key_public_modulus_len;

        inmsg = pvar->ssh_state.payload;

        CRYPT_set_server_cookie(pvar, inmsg);
        if (!CRYPT_set_server_RSA_key(pvar,
                                      get_uint32(inmsg + 8),
                                      pvar->ssh_state.payload + 12,
                                      inmsg + server_key_public_modulus_pos))
                return FALSE;
        if (!CRYPT_set_host_RSA_key(pvar,
                                    get_uint32(inmsg + host_key_bits_pos),
                                    inmsg + host_key_bits_pos + 4,
                                    inmsg + host_key_public_modulus_pos))
                return FALSE;
        pvar->ssh_state.server_protocol_flags =
                get_uint32(inmsg + protocol_flags_pos);

        supported_ciphers = get_uint32(inmsg + protocol_flags_pos + 4);
        if (!CRYPT_set_supported_ciphers(pvar,
                                         supported_ciphers,
                                         supported_ciphers))
                return FALSE;
        if (!AUTH_set_supported_auth_types(pvar,
                                           get_uint32(inmsg + protocol_flags_pos + 8)))
                return FALSE;

        /* this must be the LAST THING in this function, since it can cause
           host_is_OK to be called. */
        hostkey.type = KEY_RSA1;
        hostkey.bits = get_uint32(inmsg + host_key_bits_pos);
        hostkey.exp = inmsg + host_key_bits_pos + 4;
        hostkey.mod = inmsg + host_key_public_modulus_pos;
        HOSTS_check_host_key(pvar, pvar->ssh_state.hostname, &hostkey);

        return FALSE;
}

/*
The ID must have already been found to start with "SSH-". It must
be null-terminated.
*/
static BOOL parse_protocol_ID(PTInstVar pvar, char FAR * ID)
{
        char FAR *str;

        for (str = ID + 4; *str >= '0' && *str <= '9'; str++) {
        }

        if (*str != '.') {
                return FALSE;
        }

        pvar->protocol_major = atoi(ID + 4);
        pvar->protocol_minor = atoi(str + 1);

        // for SSH2(yutaka)
        // 1.99����SSH2�����������s��
        if (pvar->protocol_major == 1 && pvar->protocol_minor == 99) {
                // ���[�U�� SSH2 ���I������������������
                if (pvar->settings.ssh_protocol_version == 2) {
                        pvar->protocol_major = 2;
                        pvar->protocol_minor = 0;
                }

        }

        for (str = str + 1; *str >= '0' && *str <= '9'; str++) {
        }

        return *str == '-';
}

/*
On entry, the pvar->protocol_xxx fields hold the server's advertised
protocol number. We replace the fields with the protocol number we will
actually use, or return FALSE if there is no usable protocol version.
*/
static BOOL negotiate_protocol(PTInstVar pvar)
{
        switch (pvar->protocol_major) {
        case 1:
                if (pvar->protocol_minor > 5) {
                        pvar->protocol_minor = 5;
                }

                return TRUE;

        // for SSH2(yutaka)
        case 2:
                return TRUE;                    // SSH2 support

        default:
                return FALSE;
        }
}

static void init_protocol(PTInstVar pvar)
{
        CRYPT_initialize_random_numbers(pvar);

        // known_hosts�t�@�C�������z�X�g���J������������������
        HOSTS_prefetch_host_key(pvar, pvar->ssh_state.hostname);

        /* while we wait for a response from the server... */

        if (SSHv1(pvar)) {
                enque_handler(pvar, SSH_MSG_DISCONNECT, handle_disconnect);
                enque_handler(pvar, SSH_MSG_IGNORE, handle_ignore);
                enque_handler(pvar, SSH_MSG_DEBUG, handle_debug);
                enque_handler(pvar, SSH_SMSG_PUBLIC_KEY, handle_server_public_key);

        } else {  // for SSH2(yutaka)
                enque_handler(pvar, SSH2_MSG_DISCONNECT, handle_disconnect);
                enque_handler(pvar, SSH2_MSG_IGNORE, handle_ignore);
                enque_handler(pvar, SSH2_MSG_DEBUG, handle_debug);
                enque_handler(pvar, SSH2_MSG_KEXINIT, handle_SSH2_kexinit);
                enque_handler(pvar, SSH2_MSG_KEXDH_INIT, handle_unimplemented);
                enque_handler(pvar, SSH2_MSG_KEXDH_REPLY, handle_SSH2_dh_common_reply);
                enque_handler(pvar, SSH2_MSG_KEX_DH_GEX_REPLY, handle_SSH2_dh_gex_reply);
                enque_handler(pvar, SSH2_MSG_NEWKEYS, handle_SSH2_newkeys);
                enque_handler(pvar, SSH2_MSG_SERVICE_ACCEPT, handle_SSH2_authrequest);
                enque_handler(pvar, SSH2_MSG_USERAUTH_SUCCESS, handle_SSH2_userauth_success);
                enque_handler(pvar, SSH2_MSG_USERAUTH_FAILURE, handle_SSH2_userauth_failure);
                enque_handler(pvar, SSH2_MSG_USERAUTH_BANNER, handle_SSH2_userauth_banner);
                enque_handler(pvar, SSH2_MSG_USERAUTH_INFO_REQUEST, handle_SSH2_userauth_inforeq);

                enque_handler(pvar, SSH2_MSG_UNIMPLEMENTED, handle_unimplemented);

                // ���[�U�F�������f�B�X�p�b�`���[�`��
                enque_handler(pvar, SSH2_MSG_CHANNEL_CLOSE, handle_SSH2_channel_close);
                enque_handler(pvar, SSH2_MSG_CHANNEL_DATA, handle_SSH2_channel_data);
                enque_handler(pvar, SSH2_MSG_CHANNEL_EOF, handle_SSH2_channel_eof);
                enque_handler(pvar, SSH2_MSG_CHANNEL_EXTENDED_DATA, handle_SSH2_channel_extended_data);
                enque_handler(pvar, SSH2_MSG_CHANNEL_OPEN, handle_SSH2_channel_open);
                enque_handler(pvar, SSH2_MSG_CHANNEL_OPEN_CONFIRMATION, handle_SSH2_open_confirm);
                enque_handler(pvar, SSH2_MSG_CHANNEL_OPEN_FAILURE, handle_SSH2_open_failure);
                enque_handler(pvar, SSH2_MSG_CHANNEL_REQUEST, handle_SSH2_channel_request);
                enque_handler(pvar, SSH2_MSG_CHANNEL_WINDOW_ADJUST, handle_SSH2_window_adjust);
                enque_handler(pvar, SSH2_MSG_CHANNEL_SUCCESS, handle_SSH2_channel_success);
//              enque_handler(pvar, SSH2_MSG_GLOBAL_REQUEST, handle_unimplemented);
                enque_handler(pvar, SSH2_MSG_REQUEST_FAILURE, handle_SSH2_request_failure);
                enque_handler(pvar, SSH2_MSG_REQUEST_SUCCESS, handle_SSH2_request_success);

        }
}

BOOL SSH_handle_server_ID(PTInstVar pvar, char FAR * ID, int ID_len)
{
        static const char prefix[] = "Received server prologue string: ";

        // initialize SSH2 memory dump (2005.3.7 yutaka)
        init_memdump();
        push_memdump("pure server ID", "start protocol version exchange", ID, ID_len);

        if (ID_len <= 0) {
                return FALSE;
        } else {
                int buf_len = ID_len + NUM_ELEM(prefix);
                char FAR *buf = (char FAR *) malloc(buf_len);

                strncpy_s(buf, buf_len, prefix, _TRUNCATE);
                strncat_s(buf, buf_len, ID, _TRUNCATE);
                chop_newlines(buf);

                notify_verbose_message(pvar, buf, LOG_LEVEL_VERBOSE);

                free(buf);


                // ���������R�s�[������ (2005.3.9 yutaka)
#if 0
                // for calculate SSH2 hash
                // �T�[�o�o�[�W�����������i���s���������������j
                if (ID_len >= sizeof(pvar->server_version_string))
                        return FALSE;
                strncpy(pvar->server_version_string, ID, ID_len);
#endif


                if (ID[ID_len - 1] != '\n') {
                        pvar->ssh_state.status_flags |= STATUS_IN_PARTIAL_ID_STRING;
                        return FALSE;
                } else if ((pvar->ssh_state.status_flags & STATUS_IN_PARTIAL_ID_STRING) != 0) {
                        pvar->ssh_state.status_flags &= ~STATUS_IN_PARTIAL_ID_STRING;
                        return FALSE;
                } else if (strncmp(ID, "SSH-", 4) != 0) {
                        return FALSE;
                } else {
                        ID[ID_len - 1] = 0;

                        if (ID_len > 1 && ID[ID_len - 2] == '\r') {
                                ID[ID_len - 2] = 0;
                        }

                        pvar->ssh_state.server_ID = _strdup(ID);

                        if (!parse_protocol_ID(pvar, ID) || !negotiate_protocol(pvar)) {
                                UTIL_get_lang_msg("MSG_SSH_VERSION_ERROR", pvar,
                                                  "This program does not understand the server's version of the protocol.");
                                notify_fatal_error(pvar, pvar->ts->UIMsg);
                        } else {
                                char TTSSH_ID[1024];
                                int TTSSH_ID_len;
                                int a, b, c, d;

                                // �������g���o�[�W�������������� (2005.3.3 yutaka)
                                get_file_version("ttxssh.dll", &a, &b, &c, &d);

                                _snprintf_s(TTSSH_ID, sizeof(TTSSH_ID), _TRUNCATE,
                                            "SSH-%d.%d-TTSSH/%d.%d Win32\n",
                                            pvar->protocol_major, pvar->protocol_minor, a, b);
                                TTSSH_ID_len = strlen(TTSSH_ID);

                                // for SSH2(yutaka)
                                // �N���C�A���g�o�[�W�����������i���s���������������j
                                strncpy_s(pvar->client_version_string, sizeof(pvar->client_version_string),
                                          TTSSH_ID, _TRUNCATE);

                                // �T�[�o�o�[�W�����������i���s���������������j(2005.3.9 yutaka)
                                _snprintf_s(pvar->server_version_string,
                                            sizeof(pvar->server_version_string), _TRUNCATE,
                                            "%s", pvar->ssh_state.server_ID);

                                if ((pvar->Psend) (pvar->socket, TTSSH_ID, TTSSH_ID_len,
                                                   0) != TTSSH_ID_len) {
                                        UTIL_get_lang_msg("MSG_SSH_SEND_ID_ERROR", pvar,
                                                          "An error occurred while sending the SSH ID string.\n"
                                                          "The connection will close.");
                                        notify_fatal_error(pvar, pvar->ts->UIMsg);
                                } else {
                                        // ���s�R�[�h������ (2004.8.4 yutaka)
                                        pvar->client_version_string[--TTSSH_ID_len] = 0;

                                        push_memdump("server ID", NULL, pvar->server_version_string, strlen(pvar->server_version_string));
                                        push_memdump("client ID", NULL, pvar->client_version_string, strlen(pvar->client_version_string));

                                        // SSH�n���h�����o�^���s��
                                        init_protocol(pvar);

                                        SSH2_dispatch_init(1);
                                        SSH2_dispatch_add_message(SSH2_MSG_KEXINIT);
                                        SSH2_dispatch_add_message(SSH2_MSG_IGNORE); // XXX: Tru64 UNIX workaround   (2005.3.3 yutaka)
                                }
                        }

                        return TRUE;
                }
        }
}

static BOOL handle_exit(PTInstVar pvar)
{
        if (grab_payload(pvar, 4)) {
                begin_send_packet(pvar, SSH_CMSG_EXIT_CONFIRMATION, 0);
                finish_send_packet(pvar);
                notify_closed_connection(pvar);
        }
        return TRUE;
}

static BOOL handle_data(PTInstVar pvar)
{
        if (grab_payload_limited(pvar, 4)) {
                pvar->ssh_state.payload_datalen = get_payload_uint32(pvar, 0);
                pvar->ssh_state.payload_datastart = 4;
        }
        return TRUE;
}

static BOOL handle_channel_open(PTInstVar pvar)
{
        int host_len;
        int originator_len;

        if ((pvar->ssh_state.
                 server_protocol_flags & SSH_PROTOFLAG_HOST_IN_FWD_OPEN) != 0) {
                if (grab_payload(pvar, 8)
                 && grab_payload(pvar,
                                 8 + (host_len = get_payload_uint32(pvar, 4)))
                 && grab_payload(pvar, originator_len =
                                 get_payload_uint32(pvar, host_len + 12))) {
                        int local_port = get_payload_uint32(pvar, 8 + host_len);

                        pvar->ssh_state.payload[8 + host_len] = 0;
                        FWD_open(pvar, get_payload_uint32(pvar, 0),
                                 pvar->ssh_state.payload + 8, local_port,
                                 pvar->ssh_state.payload + 16 + host_len,
                                 originator_len,
                                 NULL);
                }
        } else {
                if (grab_payload(pvar, 8)
                 && grab_payload(pvar,
                                 4 + (host_len = get_payload_uint32(pvar, 4)))) {
                        int local_port = get_payload_uint32(pvar, 8 + host_len);

                        pvar->ssh_state.payload[8 + host_len] = 0;
                        FWD_open(pvar, get_payload_uint32(pvar, 0),
                                 pvar->ssh_state.payload + 8, local_port, NULL, 0,
                                 NULL);
                }
        }

        return TRUE;
}

static BOOL handle_X11_channel_open(PTInstVar pvar)
{
        int originator_len;

        if ((pvar->ssh_state.server_protocol_flags & SSH_PROTOFLAG_HOST_IN_FWD_OPEN) != 0) {
                if (grab_payload(pvar, 8)
                 && grab_payload(pvar, originator_len = get_payload_uint32(pvar, 4))) {
                        FWD_X11_open(pvar, get_payload_uint32(pvar, 0),
                                     pvar->ssh_state.payload + 8, originator_len, NULL);
                }
        } else {
                if (grab_payload(pvar, 4)) {
                        FWD_X11_open(pvar, get_payload_uint32(pvar, 0), NULL, 0, NULL);
                }
        }

        return TRUE;
}

static BOOL handle_channel_open_confirmation(PTInstVar pvar)
{
        if (grab_payload(pvar, 8)) {
                FWD_confirmed_open(pvar, get_payload_uint32(pvar, 0),
                                   get_payload_uint32(pvar, 4));
        }
        return FALSE;
}

static BOOL handle_channel_open_failure(PTInstVar pvar)
{
        if (grab_payload(pvar, 4)) {
                FWD_failed_open(pvar, get_payload_uint32(pvar, 0));
        }
        return FALSE;
}

static BOOL handle_channel_data(PTInstVar pvar)
{
        int len;

        if (grab_payload(pvar, 8)
         && grab_payload(pvar, len = get_payload_uint32(pvar, 4))) {
                FWD_received_data(pvar, get_payload_uint32(pvar, 0),
                                  pvar->ssh_state.payload + 8, len);
        }
        return TRUE;
}

static BOOL handle_channel_input_eof(PTInstVar pvar)
{
        if (grab_payload(pvar, 4)) {
                FWD_channel_input_eof(pvar, get_payload_uint32(pvar, 0));
        }
        return TRUE;
}

static BOOL handle_channel_output_eof(PTInstVar pvar)
{
        if (grab_payload(pvar, 4)) {
                FWD_channel_output_eof(pvar, get_payload_uint32(pvar, 0));
        }
        return TRUE;
}


// �n���h�����O�������b�Z�[�W����������

#define HANDLE_MESSAGE_MAX 30
static unsigned char handle_messages[HANDLE_MESSAGE_MAX];
static int handle_message_count = 0;
static int handle_message_stage = 0;

void SSH2_dispatch_init(int stage)
{
        handle_message_count = 0;
        handle_message_stage = stage;
}

int SSH2_dispatch_enabled_check(unsigned char message)
{
        int i;

        for (i = 0 ; i < handle_message_count ; i++) {
                if (handle_messages[i] == message)
                        return 1;
        }
        return 0;
}

void SSH2_dispatch_add_message(unsigned char message)
{

        if (handle_message_count >= HANDLE_MESSAGE_MAX) {
                // TODO: error check
                return;
        }

        handle_messages[handle_message_count++] = message;
}

void SSH2_dispatch_add_range_message(unsigned char begin, unsigned char end)
{
        unsigned char c;

        for (c = begin ; c <= end ; c++) {
                SSH2_dispatch_add_message(c);
        }
}


void SSH_handle_packet(PTInstVar pvar, char FAR * data, int len,
                                           int padding)
{
        unsigned char message = prep_packet(pvar, data, len, padding);

        
#ifdef SSH2_DEBUG
        // for SSH2(yutaka)
        if (SSHv2(pvar)) {
                if (pvar->key_done) {
                        message = message;
                }

                if (pvar->userauth_success) {
                        message = message;
                }

                if (pvar->rekeying) {
                        message = message;
                }
        }
#endif

        // SSH�����b�Z�[�W�^�C�v���`�F�b�N
        if (message != SSH_MSG_NONE) {
                // ���b�Z�[�W�^�C�v���������n���h�����N��
                SSHPacketHandler handler = get_handler(pvar, message);

                // for SSH2(yutaka)
                if (SSHv2(pvar)) {
                        // �z���O�����b�Z�[�W�^�C�v�������������A�{�[�g�������B
                        if (!SSH2_dispatch_enabled_check(message) || handler == NULL) {
                                char buf[1024];

                                UTIL_get_lang_msg("MSG_SSH_UNEXP_MSG2_ERROR", pvar,
                                                                  "Unexpected SSH2 message(%d) on current stage(%d)");
                                _snprintf_s(buf, sizeof(buf), _TRUNCATE,
                                        pvar->ts->UIMsg, message, handle_message_stage);
                                notify_fatal_error(pvar, buf);
                                // abort
                        }
                }

                if (handler == NULL) {
                        if (SSHv1(pvar)) {
                                char buf[1024];

                                UTIL_get_lang_msg("MSG_SSH_UNEXP_MSG_ERROR", pvar,
                                                  "Unexpected packet type received: %d");
                                _snprintf_s(buf, sizeof(buf), _TRUNCATE,
                                        pvar->ts->UIMsg, message, handle_message_stage);
                                notify_fatal_error(pvar, buf);
                        } else {
                                unsigned char FAR *outmsg =
                                        begin_send_packet(pvar, SSH2_MSG_UNIMPLEMENTED, 4);

                                set_uint32(outmsg,
                                           pvar->ssh_state.receiver_sequence_number - 1);
                                finish_send_packet(pvar);
                                /* XXX need to decompress incoming packet, but how? */
                        }
                } else {
                        if (!handler(pvar)) {
                                deque_handlers(pvar, message);
                        }
                }
        }
}

static BOOL handle_pty_success(PTInstVar pvar)
{
        FWD_enter_interactive_mode(pvar);
        enque_handler(pvar, SSH_SMSG_EXITSTATUS, handle_exit);
        enque_handler(pvar, SSH_SMSG_STDOUT_DATA, handle_data);
        enque_handler(pvar, SSH_SMSG_STDERR_DATA, handle_data);
        enque_handler(pvar, SSH_MSG_CHANNEL_DATA, handle_channel_data);
        enque_handler(pvar, SSH_MSG_CHANNEL_INPUT_EOF,
                      handle_channel_input_eof);
        enque_handler(pvar, SSH_MSG_CHANNEL_OUTPUT_CLOSED,
                      handle_channel_output_eof);
        enque_handler(pvar, SSH_MSG_PORT_OPEN, handle_channel_open);
        enque_handler(pvar, SSH_SMSG_X11_OPEN, handle_X11_channel_open);
        return FALSE;
}

static BOOL handle_pty_failure(PTInstVar pvar)
{
        UTIL_get_lang_msg("MSG_SSH_ALLOC_TERMINAL_ERROR", pvar,
                          "The server cannot allocate a pseudo-terminal. "
                          "You may encounter some problems with the terminal.");
        notify_nonfatal_error(pvar, pvar->ts->UIMsg);
        return handle_pty_success(pvar);
}

static void prep_pty(PTInstVar pvar)
{
        int len = strlen(pvar->ts->TermType);
        unsigned char FAR *outmsg =
                begin_send_packet(pvar, SSH_CMSG_REQUEST_PTY,
                                  4 + len + 16 + sizeof(ssh_ttymodes));
        static const int msgs[] = { SSH_SMSG_SUCCESS, SSH_SMSG_FAILURE };
        static const SSHPacketHandler handlers[]
        = { handle_pty_success, handle_pty_failure };

        set_uint32(outmsg, len);
        memcpy(outmsg + 4, pvar->ts->TermType, len);
        set_uint32(outmsg + 4 + len, pvar->ssh_state.win_rows);
        set_uint32(outmsg + 4 + len + 4, pvar->ssh_state.win_cols);
        set_uint32(outmsg + 4 + len + 8, 0);
        set_uint32(outmsg + 4 + len + 12, 0);
        memcpy(outmsg + 4 + len + 16, ssh_ttymodes, sizeof(ssh_ttymodes));
        finish_send_packet(pvar);

        enque_handlers(pvar, 2, msgs, handlers);

        begin_send_packet(pvar, SSH_CMSG_EXEC_SHELL, 0);
        finish_send_packet(pvar);
}

static void prep_forwarding(PTInstVar pvar)
{
        FWD_prep_forwarding(pvar);
        prep_pty(pvar);
}


//
//
// (2005.7.10 yutaka)
static void enable_send_compression(PTInstVar pvar)
{
        static int initialize = 0;

        if (initialize) {
                deflateEnd(&pvar->ssh_state.compress_stream);
        }
        initialize = 1;

        pvar->ssh_state.compress_stream.zalloc = NULL;
        pvar->ssh_state.compress_stream.zfree = NULL;
        pvar->ssh_state.compress_stream.opaque = NULL;
        if (deflateInit
            (&pvar->ssh_state.compress_stream,
             pvar->ssh_state.compression_level) != Z_OK) {
                UTIL_get_lang_msg("MSG_SSH_SETUP_COMP_ERROR", pvar,
                                  "An error occurred while setting up compression.\n"
                                  "The connection will close.");
                notify_fatal_error(pvar, pvar->ts->UIMsg);
                return;
        } else {
                // SSH2�������k�E�W�J������SSH1���������s�������A���L�t���O���������������B(2005.7.9 yutaka)
                if (SSHv2(pvar)) {
                        pvar->ssh_state.compressing = FALSE;
                } else {
                        pvar->ssh_state.compressing = TRUE;
                }
        }
}

static void enable_recv_compression(PTInstVar pvar)
{
        static int initialize = 0;

        if (initialize) {
                deflateEnd(&pvar->ssh_state.decompress_stream);
        }
        initialize = 1;

        pvar->ssh_state.decompress_stream.zalloc = NULL;
        pvar->ssh_state.decompress_stream.zfree = NULL;
        pvar->ssh_state.decompress_stream.opaque = NULL;
        if (inflateInit(&pvar->ssh_state.decompress_stream) != Z_OK) {
                deflateEnd(&pvar->ssh_state.compress_stream);
                UTIL_get_lang_msg("MSG_SSH_SETUP_COMP_ERROR", pvar,
                                  "An error occurred while setting up compression.\n"
                                  "The connection will close.");
                notify_fatal_error(pvar, pvar->ts->UIMsg);
                return;
        } else {
                // SSH2�������k�E�W�J������SSH1���������s�������A���L�t���O���������������B(2005.7.9 yutaka)
                if (SSHv2(pvar)) {
                        pvar->ssh_state.decompressing = FALSE;
                } else {
                        pvar->ssh_state.decompressing = TRUE;
                }

                buf_ensure_size(&pvar->ssh_state.postdecompress_inbuf,
                                &pvar->ssh_state.postdecompress_inbuflen, 1000);
        }
}

static void enable_compression(PTInstVar pvar)
{
        enable_send_compression(pvar);
        enable_recv_compression(pvar);

        // SSH2�������k�E�W�J������SSH1���������s�������A���L�t���O���������������B(2005.7.9 yutaka)
        if (SSHv2(pvar)) {
                pvar->ssh_state.compressing = FALSE;
                pvar->ssh_state.decompressing = FALSE;
        }

}

static BOOL handle_enable_compression(PTInstVar pvar)
{
        enable_compression(pvar);
        prep_forwarding(pvar);
        return FALSE;
}

static BOOL handle_disable_compression(PTInstVar pvar)
{
        prep_forwarding(pvar);
        return FALSE;
}

static void prep_compression(PTInstVar pvar)
{
        if (pvar->session_settings.CompressionLevel > 0) {
                // added if statement (2005.7.10 yutaka)
                if (SSHv1(pvar)) {
                        static const int msgs[] = { SSH_SMSG_SUCCESS, SSH_SMSG_FAILURE };
                        static const SSHPacketHandler handlers[]
                        = { handle_enable_compression, handle_disable_compression };

                        unsigned char FAR *outmsg =
                                begin_send_packet(pvar, SSH_CMSG_REQUEST_COMPRESSION, 4);

                        set_uint32(outmsg, pvar->session_settings.CompressionLevel);
                        finish_send_packet(pvar);

                        enque_handlers(pvar, 2, msgs, handlers);
                }

                pvar->ssh_state.compression_level =
                        pvar->session_settings.CompressionLevel;

        } else {
                // added if statement (2005.7.10 yutaka)
                if (SSHv1(pvar)) {
                        prep_forwarding(pvar);
                }
        }
}

static void enque_simple_auth_handlers(PTInstVar pvar)
{
        static const int msgs[] = { SSH_SMSG_SUCCESS, SSH_SMSG_FAILURE };
        static const SSHPacketHandler handlers[]
        = { handle_auth_success, handle_auth_failure };

        enque_handlers(pvar, 2, msgs, handlers);
}

static BOOL handle_rsa_challenge(PTInstVar pvar)
{
        int challenge_bytes;

        if (!grab_payload(pvar, 2)) {
                return FALSE;
        }

        challenge_bytes = get_mpint_len(pvar, 0);

        if (grab_payload(pvar, challenge_bytes)) {
                unsigned char FAR *outmsg =
                        begin_send_packet(pvar, SSH_CMSG_AUTH_RSA_RESPONSE, 16);

                if (CRYPT_generate_RSA_challenge_response
                        (pvar, pvar->ssh_state.payload + 2, challenge_bytes, outmsg)) {

                        // �Z�b�V�������������p�X���[�h���g���������������A�����������\�[�X�������������B
                        // socket close���������������������������������A���������������B(2005.4.8 yutaka)
#if 0
                        //AUTH_destroy_cur_cred(pvar);
#endif

                        finish_send_packet(pvar);

                        enque_simple_auth_handlers(pvar);
                } else {
                        UTIL_get_lang_msg("MSG_SSH_DECRYPT_RSA_ERROR", pvar,
                                          "An error occurred while decrypting the RSA challenge.\n"
                                          "Perhaps the key file is corrupted.");
                        notify_fatal_error(pvar, pvar->ts->UIMsg);
                }
        }

        return FALSE;
}

#define OBFUSCATING_ROUND_TO 32

static int obfuscating_round_up(PTInstVar pvar, int size)
{
        return (size + OBFUSCATING_ROUND_TO - 1) & ~(OBFUSCATING_ROUND_TO - 1);
}

static void try_send_credentials(PTInstVar pvar)
{
        if ((pvar->ssh_state.status_flags & STATUS_DONT_SEND_CREDENTIALS) == 0) {
                AUTHCred FAR *cred = AUTH_get_cur_cred(pvar);
                static const int RSA_msgs[] =
                        { SSH_SMSG_AUTH_RSA_CHALLENGE, SSH_SMSG_FAILURE };
                static const SSHPacketHandler RSA_handlers[]
                = { handle_rsa_challenge, handle_rsa_auth_refused };
                static const int TIS_msgs[] =
                        { SSH_SMSG_AUTH_TIS_CHALLENGE, SSH_SMSG_FAILURE };
                static const SSHPacketHandler TIS_handlers[]
                = { handle_TIS_challenge, handle_auth_failure };

                // SSH2���������������������X�L�b�v
                if (SSHv2(pvar))
                        goto skip_ssh2;

                switch (cred->method) {
                case SSH_AUTH_NONE:
                        return;
                case SSH_AUTH_PASSWORD:{
                                int len = strlen(cred->password);
                                // Round up password length to discourage traffic analysis
                                int obfuscated_len = obfuscating_round_up(pvar, len);
                                unsigned char FAR *outmsg =
                                        begin_send_packet(pvar, SSH_CMSG_AUTH_PASSWORD,
                                                          4 + obfuscated_len);

                                notify_verbose_message(pvar,
                                                       "Trying PASSWORD authentication...",
                                                       LOG_LEVEL_VERBOSE);

                                set_uint32(outmsg, obfuscated_len);
                                memcpy(outmsg + 4, cred->password, len);
                                memset(outmsg + 4 + len, 0, obfuscated_len - len);
                                
                                // �Z�b�V�������������p�X���[�h���g���������������A�����������\�[�X�������������B
                                // socket close���������������������������������A���������������B(2005.4.8 yutaka)
#if 0
                                //AUTH_destroy_cur_cred(pvar);
#endif
                                
                                enque_simple_auth_handlers(pvar);
                                break;
                        }
                case SSH_AUTH_RHOSTS:{
                                int len = strlen(cred->rhosts_client_user);
                                unsigned char FAR *outmsg =
                                        begin_send_packet(pvar, SSH_CMSG_AUTH_RHOSTS, 4 + len);

                                notify_verbose_message(pvar,
                                                       "Trying RHOSTS authentication...",
                                                       LOG_LEVEL_VERBOSE);

                                set_uint32(outmsg, len);
                                memcpy(outmsg + 4, cred->rhosts_client_user, len);
                                AUTH_destroy_cur_cred(pvar);
                                enque_simple_auth_handlers(pvar);
                                break;
                        }
                case SSH_AUTH_RSA:{
                                int len = BN_num_bytes(cred->key_pair->RSA_key->n);
                                unsigned char FAR *outmsg =
                                        begin_send_packet(pvar, SSH_CMSG_AUTH_RSA, 2 + len);

                                notify_verbose_message(pvar,
                                                       "Trying RSA authentication...",
                                                       LOG_LEVEL_VERBOSE);

                                set_ushort16_MSBfirst(outmsg, len * 8);
                                BN_bn2bin(cred->key_pair->RSA_key->n, outmsg + 2);
                                /* don't destroy the current credentials yet */
                                enque_handlers(pvar, 2, RSA_msgs, RSA_handlers);
                                break;
                        }
                case SSH_AUTH_RHOSTS_RSA:{
                                int mod_len = BN_num_bytes(cred->key_pair->RSA_key->n);
                                int name_len = strlen(cred->rhosts_client_user);
                                int exp_len = BN_num_bytes(cred->key_pair->RSA_key->e);
                                int index;
                                unsigned char FAR *outmsg =
                                        begin_send_packet(pvar, SSH_CMSG_AUTH_RHOSTS_RSA,
                                                          12 + mod_len + name_len + exp_len);

                                notify_verbose_message(pvar,
                                                       "Trying RHOSTS+RSA authentication...",
                                                       LOG_LEVEL_VERBOSE);

                                set_uint32(outmsg, name_len);
                                memcpy(outmsg + 4, cred->rhosts_client_user, name_len);
                                index = 4 + name_len;

                                set_uint32(outmsg + index, 8 * mod_len);
                                set_ushort16_MSBfirst(outmsg + index + 4, 8 * exp_len);
                                BN_bn2bin(cred->key_pair->RSA_key->e, outmsg + index + 6);
                                index += 6 + exp_len;

                                set_ushort16_MSBfirst(outmsg + index, 8 * mod_len);
                                BN_bn2bin(cred->key_pair->RSA_key->n, outmsg + index + 2);
                                /* don't destroy the current credentials yet */
                                enque_handlers(pvar, 2, RSA_msgs, RSA_handlers);
                                break;
                        }
                case SSH_AUTH_TIS:{
                                if (cred->password == NULL) {
                                        unsigned char FAR *outmsg =
                                                begin_send_packet(pvar, SSH_CMSG_AUTH_TIS, 0);

                                        notify_verbose_message(pvar,
                                                            "Trying TIS authentication...",
                                                            LOG_LEVEL_VERBOSE);
                                        enque_handlers(pvar, 2, TIS_msgs, TIS_handlers);
                                } else {
                                        int len = strlen(cred->password);
                                        int obfuscated_len = obfuscating_round_up(pvar, len);
                                        unsigned char FAR *outmsg =
                                                begin_send_packet(pvar, SSH_CMSG_AUTH_TIS_RESPONSE,
                                                                  4 + obfuscated_len);

                                        notify_verbose_message(pvar, "Sending TIS response",
                                                                                        LOG_LEVEL_VERBOSE);

                                        set_uint32(outmsg, obfuscated_len);
                                        memcpy(outmsg + 4, cred->password, len);
                                        memset(outmsg + 4 + len, 0, obfuscated_len - len);
                                        enque_simple_auth_handlers(pvar);
                                }

                                AUTH_destroy_cur_cred(pvar);
                                break;
                        }
                default:
                        UTIL_get_lang_msg("MSG_SSH_UNSUPPORT_AUTH_METHOD_ERROR", pvar,
                                          "Internal error: unsupported authentication method");
                        notify_fatal_error(pvar, pvar->ts->UIMsg);
                        return;
                }

                finish_send_packet(pvar);

skip_ssh2:;
                destroy_packet_buf(pvar);

                pvar->ssh_state.status_flags |= STATUS_DONT_SEND_CREDENTIALS;
        }
}

static void try_send_user_name(PTInstVar pvar)
{
        if ((pvar->ssh_state.status_flags & STATUS_DONT_SEND_USER_NAME) == 0) {
                char FAR *username = AUTH_get_user_name(pvar);

                if (username != NULL) {
                        int len = strlen(username);
                        int obfuscated_len = obfuscating_round_up(pvar, len);
                        unsigned char FAR *outmsg =
                                begin_send_packet(pvar, SSH_CMSG_USER, 4 + obfuscated_len);
                        char buf[1024] = "Sending user name: ";
                        static const int msgs[] =
                                { SSH_SMSG_SUCCESS, SSH_SMSG_FAILURE };
                        static const SSHPacketHandler handlers[]
                        = { handle_noauth_success, handle_auth_required };

                        set_uint32(outmsg, obfuscated_len);
                        memcpy(outmsg + 4, username, len);
                        memset(outmsg + 4 + len, 0, obfuscated_len - len);
                        finish_send_packet(pvar);

                        pvar->ssh_state.status_flags |= STATUS_DONT_SEND_USER_NAME;

                        strncat_s(buf, sizeof(buf), username, _TRUNCATE);
                        notify_verbose_message(pvar, buf, LOG_LEVEL_VERBOSE);

                        enque_handlers(pvar, 2, msgs, handlers);
                }
        }
}

static void send_session_key(PTInstVar pvar)
{
        int encrypted_session_key_len;
        unsigned char FAR *outmsg;

        if (SSHv1(pvar)) {
                encrypted_session_key_len =
                        CRYPT_get_encrypted_session_key_len(pvar);
        }

        if (!CRYPT_choose_ciphers(pvar))
                return;

        if (SSHv1(pvar)) {
                outmsg =
                        begin_send_packet(pvar, SSH_CMSG_SESSION_KEY,
                                          15 + encrypted_session_key_len);
                outmsg[0] = (unsigned char) CRYPT_get_sender_cipher(pvar);
                memcpy(outmsg + 1, CRYPT_get_server_cookie(pvar), 8);   /* antispoofing cookie */
                outmsg[9] = (unsigned char) (encrypted_session_key_len >> 5);
                outmsg[10] = (unsigned char) (encrypted_session_key_len << 3);
                if (!CRYPT_choose_session_key(pvar, outmsg + 11))
                        return;
                set_uint32(outmsg + 11 + encrypted_session_key_len,
                           SSH_PROTOFLAG_SCREEN_NUMBER |
                           SSH_PROTOFLAG_HOST_IN_FWD_OPEN);
                finish_send_packet(pvar);
        }

        if (!CRYPT_start_encryption(pvar, 1, 1))
                return;
        notify_established_secure_connection(pvar);

        if (SSHv1(pvar)) {
                enque_handler(pvar, SSH_SMSG_SUCCESS, handle_crypt_success);
        }

        pvar->ssh_state.status_flags &= ~STATUS_DONT_SEND_USER_NAME;

        if (SSHv1(pvar)) {
                try_send_user_name(pvar);
        }
}

/*************************
   END of message handlers
   ************************/

void SSH_init(PTInstVar pvar)
{
        int i;

        buf_create(&pvar->ssh_state.outbuf, &pvar->ssh_state.outbuflen);
        buf_create(&pvar->ssh_state.precompress_outbuf,
                   &pvar->ssh_state.precompress_outbuflen);
        buf_create(&pvar->ssh_state.postdecompress_inbuf,
                   &pvar->ssh_state.postdecompress_inbuflen);
        pvar->ssh_state.payload = NULL;
        pvar->ssh_state.compressing = FALSE;
        pvar->ssh_state.decompressing = FALSE;
        pvar->ssh_state.status_flags =
                STATUS_DONT_SEND_USER_NAME | STATUS_DONT_SEND_CREDENTIALS;
        pvar->ssh_state.payload_datalen = 0;
        pvar->ssh_state.hostname = NULL;
        pvar->ssh_state.server_ID = NULL;
        pvar->ssh_state.receiver_sequence_number = 0;
        pvar->ssh_state.sender_sequence_number = 