tsdecrypt reads and decrypts CSA encrypted incoming mpeg transport stream over UDP/RTP using code words obtained from OSCAM or similar CAM server. tsdecrypt communicates with CAM server using cs378x (camd35 over tcp) protocol or newcamd protocol. https://georgi.unixsol.org/programs/tsdecrypt/
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

tables.c 13KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459
  1. /*
  2. * Process PSI tables
  3. * Copyright (C) 2011 Unix Solutions Ltd.
  4. *
  5. * This program is free software; you can redistribute it and/or modify
  6. * it under the terms of the GNU General Public License version 2
  7. * as published by the Free Software Foundation.
  8. *
  9. * This program is distributed in the hope that it will be useful,
  10. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  12. * GNU General Public License (COPYING file) for more details.
  13. *
  14. */
  15. #include <string.h>
  16. #include "data.h"
  17. #include "tables.h"
  18. #include "camd.h"
  19. #include "filter.h"
  20. #include "libtsfuncs/tsfuncs.h"
  21. #include "libfuncs/libfuncs.h"
  22. extern void show_ts_pack(struct ts *ts, uint16_t pid, char *wtf, char *extra, uint8_t *ts_packet);
  23. #define handle_table_changes(TABLE) \
  24. do { \
  25. show_ts_pack(ts, pid, #TABLE, NULL, ts_packet); \
  26. ts->cur##TABLE = ts_##TABLE##_push_packet(ts->cur##TABLE, ts_packet); \
  27. if (!ts->cur##TABLE->initialized) \
  28. return; \
  29. if (ts_##TABLE##_is_same(ts->TABLE, ts->cur##TABLE)) { \
  30. ts_##TABLE##_clear(ts->cur##TABLE); \
  31. return; \
  32. } \
  33. ts_##TABLE##_free(&ts->TABLE); \
  34. ts->TABLE = ts_##TABLE##_copy(ts->cur##TABLE); \
  35. ts_##TABLE##_clear(ts->cur##TABLE); \
  36. if (ts->debug_level >= 1) \
  37. ts_##TABLE##_dump(ts->TABLE); \
  38. } while(0)
  39. void process_pat(struct ts *ts, uint16_t pid, uint8_t *ts_packet) {
  40. int i;
  41. int num_services = 0;
  42. uint16_t f_service = 0, f_pid = 0;
  43. if (pid != 0x00)
  44. return;
  45. handle_table_changes(pat);
  46. for (i=0;i<ts->pat->programs_num;i++) {
  47. struct ts_pat_program *prg = ts->pat->programs[i];
  48. if (prg->pid && prg->program != 0) {
  49. num_services++;
  50. ts->pmt_pid = prg->pid;
  51. ts->service_id = prg->program;
  52. if (prg->program == ts->forced_service_id) {
  53. f_pid = prg->pid;
  54. f_service = prg->program;
  55. }
  56. }
  57. }
  58. if (f_service && f_pid) {
  59. ts->pmt_pid = f_pid;
  60. ts->service_id = f_service;
  61. }
  62. if (num_services > 1 && !f_service) {
  63. ts_LOGf("PAT | %d services exists. Consider using --input-service parameter.\n",
  64. num_services);
  65. for (i = 0; i < ts->pat->programs_num; i++) {
  66. struct ts_pat_program *prg = ts->pat->programs[i];
  67. if (prg->pid && prg->program != 0) {
  68. ts_LOGf("PAT | Service 0x%04x (%5d) with PMT PID %04x (%d)\n",
  69. prg->program, prg->program,
  70. prg->pid, prg->pid);
  71. }
  72. }
  73. }
  74. ts_LOGf("PAT | Using service 0x%04x (%d), PMT pid: %04x (%d)\n",
  75. ts->service_id, ts->service_id,
  76. ts->pmt_pid, ts->pmt_pid);
  77. if (num_services > 1) {
  78. ts_pat_clear(ts->genpat);
  79. ts->genpat = ts_pat_init(ts->genpat, ts->pat->section_header->ts_id_number);
  80. ts_pat_add_program(ts->genpat, ts->service_id, ts->pmt_pid);
  81. }
  82. }
  83. void process_cat(struct ts *ts, uint16_t pid, uint8_t *ts_packet) {
  84. if (pid != 0x01)
  85. return;
  86. handle_table_changes(cat);
  87. if (ts->camd.constant_codeword)
  88. return;
  89. if (ts->forced_caid) {
  90. ts->emm_caid = ts->forced_caid;
  91. ts_get_emm_info_by_caid(ts->cat, ts->emm_caid, &ts->emm_pid);
  92. } else {
  93. ts_get_emm_info(ts->cat, ts->req_CA_sys, &ts->emm_caid, &ts->emm_pid);
  94. }
  95. if (ts->forced_emm_pid)
  96. ts_get_emm_info_by_pid(ts->cat, &ts->emm_caid, ts->forced_emm_pid);
  97. if (ts->emm_caid) {
  98. char *CA_sys = ts_get_CA_sys_txt(ts_get_CA_sys(ts->emm_caid));
  99. ts_LOGf("--- | EMM CAID: 0x%04x (%s)\n", ts->emm_caid, CA_sys);
  100. if (!ts->forced_emm_pid) {
  101. ts_LOGf("--- | EMM pid : 0x%04x (%s)\n", ts->emm_pid, CA_sys);
  102. } else {
  103. ts_LOGf("--- | EMM pid : 0x%04x (%s) (forced: 0x%04x)\n",
  104. ts->emm_pid, CA_sys, ts->forced_emm_pid);
  105. ts->emm_pid = ts->forced_emm_pid;
  106. }
  107. } else {
  108. ts_LOGf("*** | ERROR: Can't detect EMM pid.\n");
  109. }
  110. }
  111. void process_pmt(struct ts *ts, uint16_t pid, uint8_t *ts_packet) {
  112. int i;
  113. if (!pid || pid != ts->pmt_pid)
  114. return;
  115. handle_table_changes(pmt);
  116. pidmap_clear(&ts->pidmap);
  117. pidmap_set(&ts->pidmap, 0x0000); // PAT
  118. pidmap_set(&ts->pidmap, 0x0011); // SDT
  119. if (ts->nit_passthrough)
  120. pidmap_set(&ts->pidmap, 0x0010); // NIT
  121. if (ts->eit_passthrough)
  122. pidmap_set(&ts->pidmap, 0x0012); // EIT
  123. if (ts->tdt_passthrough)
  124. pidmap_set(&ts->pidmap, 0x0014); // TDT/TOT
  125. pidmap_set(&ts->pidmap, ts->pmt->ts_header.pid); // PMT PID
  126. pidmap_set(&ts->pidmap, ts->pmt->PCR_pid); // PCR
  127. for (i=0;i<ts->pmt->streams_num;i++) {
  128. struct ts_pmt_stream *stream = ts->pmt->streams[i];
  129. pidmap_set(&ts->pidmap, stream->pid); // Data
  130. }
  131. if (ts->camd.constant_codeword)
  132. return;
  133. if (ts->forced_caid) {
  134. ts->ecm_caid = ts->forced_caid;
  135. ts_get_ecm_info_by_caid(ts->pmt, ts->ecm_caid, &ts->ecm_pid);
  136. } else {
  137. ts_get_ecm_info(ts->pmt, ts->req_CA_sys, &ts->ecm_caid, &ts->ecm_pid);
  138. }
  139. if (ts->forced_ecm_pid)
  140. ts_get_ecm_info_by_pid(ts->pmt, &ts->ecm_caid, ts->forced_ecm_pid);
  141. if (ts->ecm_caid) {
  142. char *CA_sys = ts_get_CA_sys_txt(ts_get_CA_sys(ts->ecm_caid));
  143. ts_LOGf("--- | ECM CAID: 0x%04x (%s)\n", ts->ecm_caid, CA_sys);
  144. if (!ts->forced_ecm_pid) {
  145. ts_LOGf("--- | ECM pid : 0x%04x (%s)\n", ts->ecm_pid, CA_sys);
  146. } else {
  147. ts_LOGf("--- | ECM pid : 0x%04x (%s) (forced: 0x%04x)\n",
  148. ts->ecm_pid, CA_sys, ts->forced_ecm_pid);
  149. ts->ecm_pid = ts->forced_ecm_pid;
  150. }
  151. } else {
  152. ts_LOGf("*** | ERROR: Can't detect ECM pid.\n");
  153. }
  154. if (ts->req_CA_sys == CA_IRDETO) {
  155. memset(ts->irdeto_chid, 0, sizeof(ts->irdeto_chid));
  156. ts->irdeto_max_chids = 0;
  157. }
  158. }
  159. static int sdt_parse_service_name_desc(
  160. int desc_len, uint8_t *desc,
  161. uint8_t *service_type,
  162. uint8_t *pname_len, uint8_t **pname,
  163. uint8_t *sname_len, uint8_t **sname)
  164. {
  165. int ofs = 0;
  166. *pname_len = 0;
  167. *sname_len = 0;
  168. *pname = NULL;
  169. *sname = NULL;
  170. while (ofs + 2 < desc_len) {
  171. uint8_t tag = desc[ofs++];
  172. uint8_t len = desc[ofs++];
  173. if (tag != 0x48) {
  174. ofs += len;
  175. continue;
  176. }
  177. // Parse descriptor 0x48 - service_descriptor
  178. // +3 == +1 for service type, +1 for provider len, +1 for service len
  179. if (ofs + 3 > desc_len)
  180. break;
  181. *service_type = desc[ofs++];
  182. *pname_len = desc[ofs++];
  183. if (*pname_len)
  184. *pname = desc + ofs;
  185. ofs += *pname_len;
  186. if (ofs > desc_len)
  187. break;
  188. *sname_len = desc[ofs++];
  189. if (*sname_len)
  190. *sname = desc + ofs;
  191. return 1;
  192. }
  193. return 0;
  194. }
  195. void process_sdt(struct ts *ts, uint16_t pid, uint8_t *ts_packet) {
  196. int i;
  197. if (pid != 0x11)
  198. return;
  199. handle_table_changes(sdt);
  200. for(i=0;i<ts->sdt->streams_num;i++) {
  201. struct ts_sdt_stream *stream = ts->sdt->streams[i];
  202. uint8_t service_type;
  203. uint8_t *pname, *sname;
  204. uint8_t pname_len, sname_len;
  205. if (sdt_parse_service_name_desc(
  206. stream->descriptor_size, stream->descriptor_data,
  207. &service_type,
  208. &pname_len, &pname, &sname_len, &sname))
  209. {
  210. int r;
  211. for (r = 0; r < pname_len; r++) {
  212. if (pname[r] < ' ')
  213. pname[r] = '*';
  214. }
  215. for (r = 0; r < sname_len; r++) {
  216. if (sname[r] < ' ')
  217. sname[r] = '*';
  218. }
  219. ts_LOGf("SDT | Service 0x%04x (%5d) Type: 0x%02x (%s) Provider: \"%.*s\" Service: \"%.*s\"\n",
  220. stream->service_id, stream->service_id,
  221. service_type,
  222. // The service types are described in Table 87 of
  223. // ETSI EN 300 468 v1.12.1 and also in annex I of the
  224. // same document.
  225. service_type == 0x01 ? "Tv" :
  226. service_type == 0x02 ? "Radio" :
  227. service_type == 0x11 ? "Tv/HD" :
  228. service_type == 0x16 ? "Tv/h264" :
  229. service_type == 0x19 ? "Tv/HD/h264" :
  230. service_type == 0x1c ? "Tv/3d" : "unknown",
  231. pname_len, (char *)pname,
  232. sname_len, (char *)sname);
  233. } else {
  234. ts_LOGf("SDT | Service 0x%04x (%5d)\n",
  235. stream->service_id, stream->service_id);
  236. }
  237. }
  238. }
  239. #define dump_sz (15)
  240. #define dump_buf_sz (dump_sz * 6)
  241. static void __process_emm(struct ts *ts, uint16_t pid, uint8_t *ts_packet) {
  242. char dump[dump_buf_sz];
  243. show_ts_pack(ts, pid, "emm", NULL, ts_packet);
  244. ts->emm_input_count++;
  245. ts->emm = ts_privsec_push_packet(ts->emm, ts_packet);
  246. if (!ts->emm->initialized)
  247. return;
  248. struct ts_header *th = &ts->emm->ts_header;
  249. struct ts_section_header *sec = ts->emm->section_header;
  250. int emm_ok = 1;
  251. if (ts->emm_filters_num)
  252. emm_ok = filter_match_emm(ts, sec->section_data, sec->section_data_len);
  253. if (ts->debug_level >= 2) {
  254. ts_hex_dump_buf(dump, dump_buf_sz, sec->section_data, min(dump_sz, sec->section_data_len), 0);
  255. ts_LOGf("EMM | SID 0x%04x CAID: 0x%04x PID 0x%04x Table: 0x%02x Length: %4d %s %s..\n",
  256. ts->service_id,
  257. ts->emm_caid,
  258. th->pid,
  259. sec->table_id,
  260. sec->section_data_len,
  261. emm_ok == 1 ? "Data:" : "SKIP:",
  262. dump);
  263. }
  264. if (emm_ok)
  265. camd_process_packet(ts, camd_msg_alloc(EMM_MSG, ts->emm_caid, ts->service_id, sec->section_data, sec->section_data_len));
  266. else
  267. ts->emm_skipped_count++;
  268. ts_privsec_copy(ts->emm, ts->last_emm);
  269. ts_privsec_clear(ts->emm);
  270. }
  271. static void __process_ecm(struct ts *ts, uint16_t pid, uint8_t *ts_packet) {
  272. char dump[dump_buf_sz];
  273. ts->ecm = ts_privsec_push_packet(ts->ecm, ts_packet);
  274. if (!ts->ecm->initialized)
  275. return;
  276. if (ts->req_CA_sys == CA_IRDETO) {
  277. uint8_t idx = ts->ecm->section_header->section_data[4];
  278. uint8_t max_idx = ts->ecm->section_header->section_data[5];
  279. uint16_t chid = (ts->ecm->section_header->section_data[6] << 8) | ts->ecm->section_header->section_data[7];
  280. if (max_idx != ts->irdeto_max_chids) {
  281. memset(ts->irdeto_chid, 0, sizeof(ts->irdeto_chid));
  282. ts->irdeto_max_chids = max_idx;
  283. }
  284. bool ecm_ok = false;
  285. const char *filter_type;
  286. switch (ts->irdeto_ecm_filter_type) {
  287. case IRDETO_FILTER_IDX : ecm_ok = (idx == ts->irdeto_ecm_idx); filter_type = " BY IDX"; break;
  288. case IRDETO_FILTER_CHID: ecm_ok = (chid == ts->irdeto_ecm_chid); filter_type = " BY CHID"; break;
  289. }
  290. if (ts->irdeto_chid[idx].seen < 1) {
  291. ts_LOGf("CAS | Seen Irdeto CHID 0x%04x (idx %u/%u)%s%s\n", chid, idx, max_idx,
  292. ecm_ok ? " *SELECTED*" : "",
  293. ecm_ok ? filter_type : "");
  294. ts->irdeto_chid[idx].seen++;
  295. }
  296. if (!ecm_ok) {
  297. ts_privsec_clear(ts->ecm);
  298. return;
  299. }
  300. }
  301. struct ts_header *th = &ts->ecm->ts_header;
  302. struct ts_section_header *sec = ts->ecm->section_header;
  303. // ECMs should be in these tables.
  304. if (sec->section_data[0] != 0x80 && sec->section_data[0] != 0x81) {
  305. ts_privsec_clear(ts->ecm);
  306. return;
  307. }
  308. int duplicate = ts_privsec_is_same(ts->ecm, ts->last_ecm);
  309. if (duplicate && !ts->is_cw_error)
  310. ts->ecm_duplicate_count++;
  311. if (!ts->ecm_change_time.tv_sec && !ts->ecm_change_time.tv_usec) // The first time
  312. gettimeofday(&ts->ecm_change_time, NULL);
  313. if (!duplicate || ts->is_cw_error) {
  314. if (ts->ecm_cw_log) {
  315. struct timeval tv;
  316. gettimeofday(&tv, NULL);
  317. ts_LOGf("ECC | SID 0x%04x ------------ EcmChng: %5llu ms\n",
  318. ts->service_id,
  319. timeval_diff_msec(&ts->ecm_change_time, &tv));
  320. ts_hex_dump_buf(dump, dump_buf_sz, sec->section_data, min(dump_sz, sec->section_data_len), 0);
  321. ts_LOGf("ECM | SID 0x%04x CAID: 0x%04x PID 0x%04x Table: 0x%02x Length: %4d Data: %s..\n",
  322. ts->service_id,
  323. ts->ecm_caid,
  324. th->pid,
  325. sec->table_id,
  326. sec->section_data_len,
  327. dump);
  328. }
  329. gettimeofday(&ts->ecm_change_time, NULL);
  330. ts->is_cw_error = 0;
  331. camd_process_packet(ts, camd_msg_alloc(ECM_MSG, ts->ecm_caid, ts->service_id, sec->section_data, sec->section_data_len));
  332. } else if (ts->debug_level >= 3) {
  333. ts_LOGf("ECM | SID 0x%04x CAID: 0x%04x PID 0x%04x Table: 0x%02x Length: %4d Data: -dup-\n",
  334. ts->service_id,
  335. ts->ecm_caid,
  336. th->pid,
  337. sec->table_id,
  338. sec->section_data_len);
  339. }
  340. ts_privsec_copy(ts->ecm, ts->last_ecm);
  341. ts_privsec_clear(ts->ecm);
  342. show_ts_pack(ts, pid, !duplicate ? "ecm" : "ec+", NULL, ts_packet);
  343. }
  344. // There are cryptosystems that are puting more than one PSI table
  345. // in TS packet. IRDETO is such example. Because libtsfuncs assumes
  346. // that one ts packet can produce maximum 1 PSI table, the following
  347. // workaround is used for EMM/ECM private sections. Basically we detect
  348. // if after the section there is something else than 0xff (filler) and
  349. // if there is something change ts_packet pointer field to point to
  350. // start of the potential section and reparse section.
  351. void process_ecm(struct ts *ts, uint16_t pid, uint8_t *ts_packet) {
  352. int section_end;
  353. if (!ts->process_ecm)
  354. return;
  355. if (!ts->ecm_pid || ts->ecm_pid != pid)
  356. return;
  357. process_psi:
  358. ts->tmp_ecm = ts_privsec_push_packet(ts->tmp_ecm, ts_packet);
  359. if (!ts->tmp_ecm->initialized) {
  360. __process_ecm(ts, pid, ts_packet);
  361. return;
  362. }
  363. section_end = ts->tmp_ecm->section_header->pointer_field + ts->tmp_ecm->section_header->section_length + 3 + 4 + 1;
  364. if (section_end < 188 && ts_packet[section_end] != 0xff) {
  365. __process_ecm(ts, pid, ts_packet);
  366. ts_packet[4] = ts_packet[4] + ts->tmp_ecm->section_header->section_length + 3;
  367. ts_privsec_clear(ts->tmp_ecm);
  368. goto process_psi;
  369. } else {
  370. __process_ecm(ts, pid, ts_packet);
  371. }
  372. ts_privsec_clear(ts->tmp_ecm);
  373. }
  374. void process_emm(struct ts *ts, uint16_t pid, uint8_t *ts_packet) {
  375. int section_end;
  376. if (!ts->process_emm)
  377. return;
  378. process_psi:
  379. ts->tmp_emm = ts_privsec_push_packet(ts->tmp_emm, ts_packet);
  380. if (!ts->tmp_emm->initialized) {
  381. __process_emm(ts, pid, ts_packet);
  382. return;
  383. }
  384. section_end = ts->tmp_emm->section_header->pointer_field + ts->tmp_emm->section_header->section_length + 3 + 4 + 1;
  385. if (section_end < 188 && ts_packet[section_end] != 0xff) {
  386. __process_emm(ts, pid, ts_packet);
  387. ts_packet[4] = ts_packet[4] + ts->tmp_emm->section_header->section_length + 3;
  388. ts_privsec_clear(ts->tmp_emm);
  389. goto process_psi;
  390. } else {
  391. __process_emm(ts, pid, ts_packet);
  392. }
  393. ts_privsec_clear(ts->tmp_emm);
  394. }