����JFIFXX�����    $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222����"��4�� ���,�PG"Z_�4�˷����kjز�Z�,F+��_z�,�© �����zh6�٨�ic�fu���#ډb���_�N�?��wQ���5-�~�I���8����TK<5o�Iv-�����k�_U_�����~b�M��d����Ӝ�U�Hh��?]��E�w��Q���k�{��_}qFW7HTՑ��Y��F�?_�'ϔ��_�Ջt��=||I ��6�έ"�����D���/[�k�9���Y�8ds|\���Ҿp6�Ҵ���]��.����6�z<�v��@]�i%��$j��~�g��J>��no����pM[me�i$[����s�o�ᘨ�˸ nɜG-�ĨU�ycP�3.DB�li�;��hj���x7Z^�N�h������N3u{�:j�x�힞��#M&��jL P@_���� P��&��o8������9�����@Sz6�t7#O�ߋ �s}Yf�T���lmr����Z)'N��k�۞p����w\�Tȯ?�8`�O��i{wﭹW�[�r�� ��Q4F�׊���3m&L�=��h3����z~��#�\�l :�F,j@�� ʱ�wQT����8�"kJO���6�֚l����}���R�>ډK���]��y����&����p�}b��;N�1�m�r$�|��7�>e�@B�TM*-iH��g�D�)� E�m�|�ؘbҗ�a��Ҿ����t4���o���G��*oCN�rP���Q��@z,|?W[0�����:�n,jWiE��W��$~/�hp\��?��{(�0���+�Y8rΟ�+����>S-S����VN;�}�s?.����� w�9��˟<���Mq4�Wv'��{)0�1mB��V����W[�����8�/<� �%���wT^�5���b��)iM� pg�N�&ݝ��VO~�q���u���9� ����!��J27����$O-���! �:�%H��� ـ����y�ΠM=t{!S�� oK8������t<����è:a������[�����ա�H���~��w��Qz`�po�^ ����Q��n� �,uu�C�$ ^���,������8�#��:�6��e�|~���!�3�3.�\0��q��o�4`.|� ����y�Q�`~;�d�ׯ,��O�Zw�������`73�v�܋�<���Ȏ�� ـ4k��5�K�a�u�=9Yd��$>x�A�&�� j0� ���vF��� Y�|�y��� ~�6�@c��1vOp�Ig����4��l�OD���L����� R���c���j�_�uX6��3?nk��Wy�f;^*B� ��@�~a�`��Eu������+���6�L��.ü>��}y���}_�O�6�͐�:�YrG�X��kG�����l^w���~㒶sy��Iu�!� W ��X��N�7BV��O��!X�2����wvG�R�f�T#�����t�/?���%8�^�W�aT��G�cL�M���I��(J����1~�8�?aT ���]����AS�E��(��*E}� 2��#I/�׍qz��^t�̔���b�Yz4x���t�){ OH��+(E��A&�N�������XT��o��"�XC��'���)}�J�z�p� ��~5�}�^����+�6����w��c��Q�|Lp�d�H��}�(�.|����k��c4^�"�����Z?ȕ ��a<�L�!039C� �Eu�C�F�Ew�ç ;�n?�*o���B�8�bʝ���'#Rqf���M}7����]����s2tcS{�\icTx;�\��7K���P���ʇ Z O-��~��c>"��?�������P��E��O�8��@�8��G��Q�g�a�Վ���󁶠�䧘��_%#r�>�1�z�a��eb��qcPѵ��n���#L��� =��׀t� L�7�`��V���A{�C:�g���e@�w1 Xp3�c3�ġ����p��M"'-�@n4���fG��B3�DJ�8[Jo�ߐ���gK)ƛ��$���� ���8�3�����+���� �����6�ʻ���� ���S�kI�*KZlT _`���?��K����QK�d����B`�s}�>���`��*�>��,*@J�d�oF*����弝��O}�k��s��]��y�ߘ��c1G�V���<=�7��7����6�q�PT��tXԀ�!9*4�4Tހ3XΛex�46���Y��D ����� �BdemDa����\�_l,��G�/���֌7���Y�](�xTt^%�GE�����4�}bT���ڹ�����;Y)���B�Q��u��>J/J �⮶.�XԄ��j�ݳ�+E��d ��r�5�_D�1 ��o�� �B�x�΢�#���<��W�����8���R6�@g�M�.��� dr�D��>(otU��@x=��~v���2� ӣ�d�oBd��3�eO�6�㣷�����ݜ6��6Y��Qz`��S��{���\P�~z m5{J/L��1������<�e�ͅPu�b�]�ϔ���'������f�b� Zpw��c`"��i���BD@:)ִ�:�]��hv�E�w���T�l��P���"Ju�}��وV J��G6��. J/�Qgl߭�e�����@�z�Zev2u�)]կ�����7x���s�M�-<ɯ�c��r�v�����@��$�ޮ}lk���a���'����>x��O\�ZFu>�����ck#��&:��`�$�ai�>2Δ����l���oF[h��lE�ܺ�Πk:)���`�� $[6�����9�����kOw�\|���8}������ބ:��񶐕��I�A1/�=�2[�,�!��.}gN#�u����b��� ~��݊��}34q����d�E��Lc��$��"�[q�U�硬g^��%B �z���r�pJ�ru%v\h1Y�ne`ǥ:g���pQM~�^�Xi� ��`S�:V29.�P���V�?B�k�� AEvw%�_�9C�Q����wKekPؠ�\�;Io d�{ ߞo�c1eP����\� `����E=���@K<�Y���eڼ�J���w����{av�F�'�M�@/J��+9p���|]�����Iw &`��8���&M�hg��[�{��Xj��%��Ӓ�$��(����ʹN���<>�I���RY���K2�NPlL�ɀ)��&e����B+ь����( � �JTx���_?EZ� }@ 6�U���뙢ط�z��dWI�n` D����噥�[��uV��"�G&Ú����2g�}&m��?ċ�"����Om#��������� ��{�ON��"S�X��Ne��ysQ���@Fn��Vg���dX�~nj�]J�<�K]:��FW��b�������62�=��5f����JKw��bf�X�55��~J �%^����:�-�QIE��P��v�nZum� z � ~ə ���� ���ة����;�f��\v���g�8�1��f24;�V���ǔ�)����9���1\��c��v�/'Ƞ�w�������$�4�R-��t���� e�6�/�ġ �̕Ecy�J���u�B���<�W�ַ~�w[B1L۲�-JS΂�{���΃������A��20�c#��@ 0!1@AP"#2Q`$3V�%45a6�FRUq��� ����^7ׅ,$n�������+��F�`��2X'��0vM��p�L=������5��8������u�p~���.�`r�����\���O��,ư�0oS ��_�M�����l���4�kv\JSd���x���SW�<��Ae�IX����������$I���w�:S���y���›R��9�Q[���,�5�;�@]�%���u�@ *ro�lbI �� ��+���%m:�͇ZV�����u�̉����θau<�fc�.����{�4Ա� �Q����*�Sm��8\ujqs]{kN���)qO�y�_*dJ�b�7���yQqI&9�ԌK!�M}�R�;������S�T���1���i[U�ɵz�]��U)V�S6���3$K{�ߊ<�(� E]Զ[ǼENg�����'�\?#)Dkf��J���o��v���'�%ƞ�&K�u�!��b�35LX�Ϸ��63$K�a�;�9>,R��W��3�3� d�JeTYE.Mϧ��-�o�j3+y��y^�c�������VO�9NV\nd�1 ��!͕_)a�v;����թ�M�lWR1��)El��P;��yوÏ�u 3�k�5Pr6<�⒲l�!˞*��u־�n�!�l:����UNW ��%��Chx8vL'��X�@��*��)���̮��ˍ��� ���D-M�+J�U�kvK����+�x8��cY������?�Ԡ��~3mo��|�u@[XeY�C�\Kp�x8�oC�C�&����N�~3-H���� ��MX�s�u<`���~"WL��$8ξ��3���a�)|:@�m�\���^�`�@ҷ)�5p+��6���p�%i)P M���ngc�����#0Aruz���RL+xSS?���ʮ}()#�t��mˇ!��0}}y����<�e� �-ή�Ԩ��X������ MF���ԙ~l L.3���}�V뽺�v�����멬��Nl�)�2����^�Iq��a��M��qG��T�����c3#������3U�Ǎ���}��לS�|qa��ڃ�+���-��2�f����/��bz��ڐ�� �ݼ[2�ç����k�X�2�* �Z�d���J�G����M*9W���s{��w���T��x��y,�in�O�v��]���n����P�$�JB@=4�OTI�n��e�22a\����q�d���%�$��(���:���: /*�K[PR�fr\nڙdN���F�n�$�4�[�� U�zƶ����� �mʋ���,�ao�u 3�z� �x��Kn����\[��VFmbE;�_U��&V�Gg�]L�۪&#n%�$ɯ�dG���D�TI=�%+AB�Ru#��b4�1�»x�cs�YzڙJG��f��Il��d�eF'T� iA��T���uC�$����Y��H?����[!G`}���ͪ� �纤Hv\������j�Ex�K���!���OiƸ�Yj�+u-<���'q����uN�*�r\��+�]���<�wOZ.fp�ێ��,-*)V?j-kÊ#�`�r��dV����(�ݽBk�����G�ƛk�QmUڗe��Z���f}|����8�8��a���i��3'J�����~G_�^���d�8w������ R�`(�~�.��u���l�s+g�bv���W���lGc}��u���afE~1�Ue������Z�0�8�=e�� f@/�jqEKQQ�J��oN��J���W5~M>$6�Lt�;$ʳ{���^��6�{����v6���ķܰg�V�cnn �~z�x�«�,2�u�?cE+Ș�H؎�%�Za�)���X>uW�Tz�Nyo����s���FQƤ��$��*�&�LLXL)�1�" L��eO��ɟ�9=���:t��Z���c��Ž���Y?�ӭV�wv�~,Y��r�ۗ�|�y��GaF�����C�����.�+� ���v1���fήJ�����]�S��T��B��n5sW}y�$��~z�'�c ��8 ��� ,! �p��VN�S��N�N�q��y8z˱�A��4��*��'������2n<�s���^ǧ˭P�Jޮɏ�U�G�L�J�*#��<�V��t7�8����TĜ>��i}K%,���)[��z�21z ?�N�i�n1?T�I�R#��m-�����������������1����lA�`��fT5+��ܐ�c�q՝��ʐ��,���3�f2U�եmab��#ŠdQ�y>\��)�SLY����w#��.���ʑ�f��� ,"+�w�~�N�'�c�O�3F�������N<���)j��&��,-� �љ���֊�_�zS���TǦ����w�>��?�������n��U仆�V���e�����0���$�C�d���rP �m�׈e�Xm�Vu� �L��.�bֹ��� �[Դaզ���*��\y�8�Է:�Ez\�0�Kq�C b��̘��cө���Q��=0Y��s�N��S.���3.���O�o:���#���v7�[#߫ ��5�܎�L���Er4���9n��COWlG�^��0k�%<���ZB���aB_���������'=��{i�v�l�$�uC���mƎҝ{�c㱼�y]���W�i ��ߧc��m�H� m�"�"�����;Y�ߝ�Z�Ǔ�����:S#��|}�y�,/k�Ld� TA�(�AI$+I3��;Y*���Z��}|��ӧO��d�v��..#:n��f>�>���ȶI�TX��� 8��y����"d�R�|�)0���=���n4��6ⲑ�+��r<�O�܂~zh�z����7ܓ�HH�Ga롏���nCo�>������a ���~]���R���̲c?�6(�q�;5%� |�uj�~z8R=X��I�V=�|{v�Gj\gc��q����z�؋%M�ߍ����1y��#��@f^���^�>N�����#x#۹��6�Y~�?�dfPO��{��P�4��V��u1E1J �*|���%���JN��`eWu�zk M6���q t[�� ��g�G���v��WIG��u_ft����5�j�"�Y�:T��ɐ���*�;� e5���4����q$C��2d�}���� _S�L#m�Yp��O�.�C�;��c����Hi#֩%+) �Ӎ��ƲV���SYź��g |���tj��3�8���r|���V��1#;.SQ�A[���S������#���`n�+���$��$I �P\[�@�s��(�ED�z���P��])8�G#��0B��[ى��X�II�q<��9�~[Z멜�Z�⊔IWU&A>�P~�#��dp<�?����7���c��'~���5 ��+$���lx@�M�dm��n<=e�dyX��?{�|Aef ,|n3�<~z�ƃ�uۧ�����P��Y,�ӥQ�*g�#먙R�\���;T��i,��[9Qi歉����c>]9�� ��"�c��P�� �Md?٥��If�ت�u��k��/����F��9�c*9��Ǎ:�ØF���z�n*�@|I�ށ9����N3{'��[�'ͬ�Ҳ4��#}��!�V� Fu��,�,mTIk���v C�7v���B�6k�T9��1�*l� '~��ƞF��lU��'�M ����][ΩũJ_�{�i�I�n��$���L�� j��O�dx�����kza۪��#�E��Cl����x˘�o�����V���ɞ�ljr��)�/,�߬h�L��#��^��L�ф�,íMƁe�̩�NB�L�����iL����q�}��(��q��6IçJ$�W�E$��:������=#����(�K�B����zђ <��K(�N�۫K�w��^O{!����)�H���>x�������lx�?>Պ�+�>�W���,Ly!_�D���Ō�l���Q�!�[ �S����J��1��Ɛ�Y}��b,+�Lo�x�ɓ)����=�y�oh�@�꥟/��I��ѭ=��P�y9��� �ۍYӘ�e+�p�Jnϱ?V\SO%�(�t� ���=?MR�[Ș�����d�/ ��n�l��B�7j� ��!�;ӥ�/�[-���A�>�dN�sLj ��,ɪv��=1c�.SQ�O3�U���ƀ�ܽ�E����������̻��9G�ϷD�7(�}��Ävӌ\�y�_0[w ���<΍>����a_��[0+�L��F.�޺��f�>oN�T����q;���y\��bՃ��y�jH�<|q-eɏ�_?_9+P���Hp$�����[ux�K w�Mw��N�ی'$Y2�=��q���KB��P��~������Yul:�[<����F1�2�O���5=d����]Y�sw:���Ϯ���E��j,_Q��X��z`H1,#II ��d�wr��P˂@�ZJV����y$�\y�{}��^~���[:N����ߌ�U�������O��d�����ؾe��${p>G��3c���Ė�lʌ�� ת��[��`ϱ�-W����dg�I��ig2��� ��}s ��ؤ(%#sS@���~���3�X�nRG�~\jc3�v��ӍL��M[JB�T��s3}��j�Nʖ��W����;7��ç?=X�F=-�=����q�ߚ���#���='�c��7���ڑW�I(O+=:uxq�������������e2�zi+�kuG�R��������0�&e�n���iT^J����~\jy���p'dtG��s����O��3����9* �b#Ɋ�� p������[Bws�T�>d4�ۧs���nv�n���U���_�~,�v����ƜJ1��s�� �QIz��)�(lv8M���U=�;����56��G���s#�K���MP�=��LvyGd��}�VwWBF�'�à �?MH�U�g2�� ����!�p�7Q��j��ڴ����=��j�u��� Jn�A s���uM������e��Ɔ�Ҕ�!)'��8Ϣ�ٔ��ޝ(��Vp���צ֖d=�IC�J�Ǡ{q������kԭ�߸���i��@K����u�|�p=..�*+����x�����z[Aqġ#s2a�Ɗ���RR�)*HRsi�~�a &f��M��P����-K�L@��Z��Xy�'x�{}��Zm+���:�)�) IJ�-i�u���� ���ܒH��'�L(7�y�GӜq���� j��� 6ߌg1�g�o���,kر���tY�?W,���p���e���f�OQS��!K�۟cҒA�|ս�j�>��=⬒��˧L[�� �߿2JaB~R��u�:��Q�] �0H~���]�7��Ƽ�I���(}��cq '�ήET���q�?f�ab���ӥvr� �)o��-Q��_'����ᴎo��K������;��V���o��%���~OK ����*��b�f:���-ťIR��`B�5!RB@���ï�� �u �̯e\�_U�_������� g�ES��3�������QT��a����x����U<~�c?�*�#]�MW,[8O�a�x��]�1bC|踤�P��lw5V%�)�{t�<��d��5���0i�XSU��m:��Z�┵�i�"��1�^B�-��P�hJ��&)O��*�D��c�W��vM��)����}���P��ܗ-q����\mmζZ-l@�}��a��E�6��F�@��&Sg@���ݚ�M����� ȹ 4����#p�\H����dYDo�H���"��\��..R�B�H�z_�/5˘����6��KhJR��P�mƶi�m���3�,#c�co��q�a)*Pt����R�m�k�7x�D�E�\Y�閣_X�<���~�)���c[[�BP����6�Yq���S��0����%_����;��Àv�~�| VS؇ ��'O0��F0��\���U�-�d@�����7�SJ*z��3n��y��P����O���������m�~�P�3|Y��ʉr#�C�<�G~�.,! ���bqx���h~0=��!ǫ�jy����l�O,�[B��~��|9��ٱ����Xly�#�i�B��g%�S��������tˋ���e���ې��\[d�t)��.+u�|1 ������#�~Oj����hS�%��i.�~X���I�H�m��0n���c�1uE�q��cF�RF�o���7� �O�ꮧ� ���ۛ{��ʛi5�rw?׌#Qn�TW��~?y$��m\�\o����%W� ?=>S�N@�� �Ʈ���R����N�)�r"C�:��:����� �����#��qb��Y�. �6[��2K����2u�Ǧ�HYR��Q�MV��� �G�$��Q+.>�����nNH��q�^��� ����q��mM��V��D�+�-�#*�U�̒ ���p욳��u:�������IB���m���PV@O���r[b= �� ��1U�E��_Nm�yKbN�O���U�}�the�`�|6֮P>�\2�P�V���I�D�i�P�O;�9�r�mAHG�W�S]��J*�_�G��+kP�2����Ka�Z���H�'K�x�W�MZ%�O�YD�Rc+o��?�q��Ghm��d�S�oh�\�D�|:W������UA�Qc yT�q������~^�H��/��#p�CZ���T�I�1�ӏT����4��"�ČZ�����}��`w�#�*,ʹ�� ��0�i��課�Om�*�da��^gJ݅{���l�e9uF#T�ֲ��̲�ٞC"�q���ߍ ոޑ�o#�XZTp����@ o�8��(jd��xw�]�,f���`~�|,s��^����f�1���t��|��m�򸄭/ctr��5s��7�9Q�4�H1꠲BB@l9@���C�����+�wp�xu�£Yc�9��?`@#�o�mH�s2��)�=��2�.�l����jg�9$�Y�S�%*L������R�Y������7Z���,*=�䷘$�������arm�o�ϰ���UW.|�r�uf����IGw�t����Zwo��~5 ��YյhO+=8fF�)�W�7�L9lM�̘·Y���֘YLf�큹�pRF���99.A �"wz��=E\Z���'a� 2��Ǚ�#;�'}�G���*��l��^"q��+2FQ� hj��kŦ��${���ޮ-�T�٭cf�|�3#~�RJ����t��$b�(R��(����r���dx� >U b�&9,>���%E\� Ά�e�$��'�q't��*�א���ެ�b��-|d���SB�O�O��$�R+�H�)�܎�K��1m`;�J�2�Y~9��O�g8=vqD`K[�F)k�[���1m޼c��n���]s�k�z$@��)!I �x՝"v��9=�ZA=`Ɠi �:�E��)`7��vI��}d�YI�_ �o�:ob���o ���3Q��&D&�2=�� �Ά��;>�h����y.*ⅥS������Ӭ�+q&����j|UƧ����}���J0��WW< ۋS�)jQR�j���Ư��rN)�Gű�4Ѷ(�S)Ǣ�8��i��W52���No˓� ۍ%�5brOn�L�;�n��\G����=�^U�dI���8$�&���h��'���+�(������cȁ߫k�l��S^���cƗjԌE�ꭔ��gF���Ȓ��@���}O���*;e�v�WV���YJ\�]X'5��ղ�k�F��b 6R�o՜m��i N�i����>J����?��lPm�U��}>_Z&�KK��q�r��I�D�Չ~�q�3fL�:S�e>���E���-G���{L�6p�e,8��������QI��h��a�Xa��U�A'���ʂ���s�+טIjP�-��y�8ۈZ?J$��W�P� ��R�s�]��|�l(�ԓ��sƊi��o(��S0��Y� 8�T97.�����WiL��c�~�dxc�E|�2!�X�K�Ƙਫ਼�$((�6�~|d9u+�qd�^3�89��Y�6L�.I�����?���iI�q���9�)O/뚅����O���X��X�V��ZF[�یgQ�L��K1���RҖr@v�#��X�l��F���Нy�S�8�7�kF!A��sM���^rkp�jP�DyS$N���q��nxҍ!U�f�!eh�i�2�m���`�Y�I�9r�6� �TF���C}/�y�^���Η���5d�'��9A-��J��>{�_l+�`��A���[�'��յ�ϛ#w:݅�%��X�}�&�PSt�Q�"�-��\縵�/����$Ɨh�Xb�*�y��BS����;W�ջ_mc�����vt?2}1�;qS�d�d~u:2k5�2�R�~�z+|HE!)�Ǟl��7`��0�<�,�2*���Hl-��x�^����'_TV�gZA�'j� ^�2Ϊ��N7t�����?w�� �x1��f��Iz�C-Ȗ��K�^q�;���-W�DvT�7��8�Z�������� hK�(P:��Q- �8�n�Z���܃e貾�<�1�YT<�,�����"�6{/ �?�͟��|1�:�#g��W�>$����d��J��d�B��=��jf[��%rE^��il:��B���x���Sּ�1հ��,�=��*�7 fcG��#q� �eh?��2�7�����,�!7x��6�n�LC�4x��},Geǝ�tC.��vS �F�43��zz\��;QYC,6����~;RYS/6���|2���5���v��T��i����������mlv��������&� �nRh^ejR�LG�f���? �ۉҬܦƩ��|��Ȱ����>3����!v��i�ʯ�>�v��オ�X3e���_1z�Kȗ\<������!�8���V��]��?b�k41�Re��T�q��mz��TiOʦ�Z��Xq���L������q"+���2ۨ��8}�&N7XU7Ap�d�X��~�׿��&4e�o�F��� �H����O���č�c�� 懴�6���͉��+)��v;j��ݷ�� �UV�� i��� j���Y9GdÒJ1��詞�����V?h��l����l�cGs�ځ�������y�Ac�����\V3�? �� ܙg�>qH�S,�E�W�[�㺨�uch�⍸�O�}���a��>�q�6�n6����N6�q������N ! 1AQaq�0@����"2BRb�#Pr���3C`��Scst���$4D���%Td�� ?���N����a��3��m���C���w��������xA�m�q�m���m������$����4n淿t'��C"w��zU=D�\R+w�p+Y�T�&�պ@��ƃ��3ޯ?�Aﶂ��aŘ���@-�����Q�=���9D��ռ�ѻ@��M�V��P��܅�G5�f�Y<�u=,EC)�<�Fy'�"�&�չ�X~f��l�KԆV��?�� �W�N����=(� �;���{�r����ٌ�Y���h{�١������jW����P���Tc�����X�K�r��}���w�R��%��?���E��m�� �Y�q|����\lEE4���r���}�lsI�Y������f�$�=�d�yO����p�����yBj8jU�o�/�S��?�U��*������ˍ�0������u�q�m [�?f����a�� )Q�>����6#������� ?����0UQ����,IX���(6ڵ[�DI�MNލ�c&���υ�j\��X�R|,4��� j������T�hA�e��^���d���b<����n�� �즇�=!���3�^�`j�h�ȓr��jẕ�c�,ٞX����-����a�ﶔ���#�$��]w�O��Ӫ�1y%��L�Y<�wg#�ǝ�̗`�x�xa�t�w��»1���o7o5��>�m뭛C���Uƃߜ}�C���y1Xνm�F8�jI���]����H���ۺиE@I�i;r�8ӭ����V�F�Շ| ��&?�3|x�B�MuS�Ge�=Ӕ�#BE5G�����Y!z��_e��q�р/W>|-�Ci߇�t�1ޯќd�R3�u��g�=0 5��[?�#͏��q�cf���H��{ ?u�=?�?ǯ���}Z��z���hmΔ�BFTW�����<�q�(v� ��!��z���iW]*�J�V�z��gX֧A�q�&��/w���u�gYӘa���; �i=����g:��?2�dž6�ى�k�4�>�Pxs����}������G�9��3 ���)gG�R<>r h�$��'nc�h�P��Bj��J�ҧH� -��N1���N��?��~��}-q!=��_2hc�M��l�vY%UE�@|�v����M2�.Y[|y�"Eï��K�ZF,�ɯ?,q�?v�M 80jx�"�;�9vk�����+ ֧�� �ȺU��?�%�vcV��mA�6��Qg^M����A}�3�nl� QRN�l8�kkn�'�����(��M�7m9و�q���%ޟ���*h$Zk"��$�9��: �?U8�Sl��,,|ɒ��xH(ѷ����Gn�/Q�4�P��G�%��Ա8�N��!� �&�7�;���eKM7�4��9R/%����l�c>�x;������>��C�:�����t��h?aKX�bhe�ᜋ^�$�Iհ �hr7%F$�E��Fd���t��5���+�(M6�t����Ü�UU|zW�=a�Ts�Tg������dqP�Q����b'�m���1{|Y����X�N��b �P~��F^F:����k6�"�j!�� �I�r�`��1&�-$�Bevk:y���#yw��I0��x��=D�4��tU���P�ZH��ڠ底taP��6����b>�xa����Q�#� WeF��ŮNj�p�J* mQ�N����*I�-*�ȩ�F�g�3 �5��V�ʊ�ɮ�a��5F���O@{���NX��?����H�]3��1�Ri_u��������ѕ�� ����0��� F��~��:60�p�͈�S��qX#a�5>���`�o&+�<2�D����: �������ڝ�$�nP���*)�N�|y�Ej�F�5ټ�e���ihy�Z �>���k�bH�a�v��h�-#���!�Po=@k̆IEN��@��}Ll?j�O������߭�ʞ���Q|A07x���wt!xf���I2?Z��<ץ�T���cU�j��]��陎Ltl �}5�ϓ��$�,��O�mˊ�;�@O��jE��j(�ا,��LX���LO���Ц�90�O �.����a��nA���7������j4 ��W��_ٓ���zW�jcB������y՗+EM�)d���N�g6�y1_x��p�$Lv:��9�"z��p���ʙ$��^��JԼ*�ϭ����o���=x�Lj�6�J��u82�A�H�3$�ٕ@�=Vv�]�'�qEz�;I˼��)��=��ɯ���x �/�W(V���p�����$ �m�������u�����񶤑Oqˎ�T����r��㠚x�sr�GC��byp�G��1ߠ�w e�8�$⿄����/�M{*}��W�]˷.�CK\�ުx���/$�WPw���r� |i���&�}�{�X� �>��$-��l���?-z���g����lΆ���(F���h�vS*���b���߲ڡn,|)mrH[���a�3�ר�[1��3o_�U�3�TC�$��(�=�)0�kgP���� ��u�^=��4 �WYCҸ:��vQ�ר�X�à��tk�m,�t*��^�,�}D*� �"(�I��9R����>`�`��[~Q]�#af��i6l��8���6�:,s�s�N6�j"�A4���IuQ��6E,�GnH��zS�HO�uk�5$�I�4��ؤ�Q9�@��C����wp�BGv[]�u�Ov���0I4���\��y�����Q�Ѹ��~>Z��8�T��a��q�ޣ;z��a���/��S��I:�ܫ_�|������>=Z����8:�S��U�I�J��"IY���8%b8���H��:�QO�6�;7�I�S��J��ҌAά3��>c���E+&jf$eC+�z�;��V����� �r���ʺ������my�e���aQ�f&��6�ND��.:��NT�vm�<- u���ǝ\MvZY�N�NT��-A�>jr!S��n�O 1�3�Ns�%�3D@���`������ܟ 1�^c<���� �a�ɽ�̲�Xë#�w�|y�cW�=�9I*H8�p�^(4���՗�k��arOcW�tO�\�ƍR��8����'�K���I�Q�����?5�>[�}��yU�ײ -h��=��% q�ThG�2�)���"ו3]�!kB��*p�FDl�A���,�eEi�H�f�Ps�����5�H:�Փ~�H�0Dت�D�I����h�F3�������c��2���E��9�H��5�zԑ�ʚ�i�X�=:m�xg�hd(�v����׊�9iS��O��d@0ڽ���:�p�5�h-��t�&���X�q�ӕ,��ie�|���7A�2���O%P��E��htj��Y1��w�Ѓ!����  ���� ࢽ��My�7�\�a�@�ţ�J �4�Ȼ�F�@o�̒?4�wx��)��]�P��~�����u�����5�����7X ��9��^ܩ�U;Iꭆ 5 �������eK2�7(�{|��Y׎ �V��\"���Z�1� Z�����}��(�Ǝ"�1S���_�vE30>���p;� ΝD��%x�W�?W?v����o�^V�i�d��r[��/&>�~`�9Wh��y�;���R��� ;;ɮT��?����r$�g1�K����A��C��c��K��l:�'��3 c�ﳯ*"t8�~l��)���m��+U,z��`(�>yJ�?����h>��]��v��ЍG*�{`��;y]��I�T� ;c��NU�fo¾h���/$���|NS���1�S�"�H��V���T���4��uhǜ�]�v;���5�͠x��'C\�SBpl���h}�N����� A�Bx���%��ޭ�l��/����T��w�ʽ]D�=����K���ž�r㻠l4�S�O?=�k �M:� ��c�C�a�#ha���)�ѐxc�s���gP�iG��{+���x���Q���I= �� z��ԫ+ �8"�k�ñ�j=|����c ��y��CF��/��*9ж�h{ �?4�o� ��k�m�Q�N�x��;�Y��4膚�a�w?�6�>e]�����Q�r�:����g�,i"�����ԩA�*M�<�G��b�if��l^M��5� �Ҩ�{����6J��ZJ�����P�*�����Y���ݛu�_4�9�I8�7���������,^ToR���m4�H��?�N�S�ѕw��/S��甍�@�9H�S�T��t�ƻ���ʒU��*{Xs�@����f�����֒Li�K{H�w^���������Ϥm�tq���s� ���ք��f:��o~s��g�r��ט� �S�ѱC�e]�x���a��) ���(b-$(�j>�7q�B?ӕ�F��hV25r[7 Y� }L�R��}����*sg+��x�r�2�U=�*'WS��ZDW]�WǞ�<��叓���{�$�9Ou4��y�90-�1�'*D`�c�^o?(�9��u���ݐ��'PI&� f�Jݮ�������:wS����jfP1F:X �H�9dԯ���˝[�_54 �}*;@�ܨ�� ð�yn�T���?�ןd�#���4rG�ͨ��H�1�|-#���Mr�S3��G�3�����)�.᧏3v�z֑��r����$G"�`j �1t��x0<Ɔ�Wh6�y�6��,œ�Ga��gA����y��b��)��h�D��ß�_�m��ü �gG;��e�v��ݝ�nQ� ��C����-�*��o���y�a��M��I�>�<���]obD��"�:���G�A��-\%LT�8���c�)��+y76���o�Q�#*{�(F�⽕�y����=���rW�\p���۩�c���A���^e6��K������ʐ�cVf5$�'->���ՉN"���F�"�UQ@�f��Gb~��#�&�M=��8�ט�JNu9��D��[̤�s�o�~������ G��9T�tW^g5y$b��Y'��س�Ǵ�=��U-2 #�MC�t(�i� �lj�@Q 5�̣i�*�O����s�x�K�f��}\��M{E�V�{�υ��Ƈ�����);�H����I��fe�Lȣr�2��>��W�I�Ȃ6������i��k�� �5�YOxȺ����>��Y�f5'��|��H+��98pj�n�.O�y�������jY��~��i�w'������l�;�s�2��Y��:'lg�ꥴ)o#'Sa�a�K��Z� �m��}�`169�n���"���x��I ��*+� }F<��cГ���F�P�������ֹ*�PqX�x۩��,� ��N�� �4<-����%����:��7����W���u�`����� $�?�I��&����o��o��`v�>��P��"��l���4��5'�Z�gE���8���?��[�X�7(��.Q�-��*���ތL@̲����v��.5���[��=�t\+�CNܛ��,g�SQnH����}*F�G16���&:�t��4ُ"A��̣��$�b �|����#rs��a�����T�� ]�<�j��BS�('$�ɻ� �wP;�/�n��?�ݜ��x�F��yUn�~mL*-�������Xf�wd^�a�}��f�,=t�׵i�.2/wpN�Ep8�OР���•��R�FJ� 55TZ��T �ɭ�<��]��/�0�r�@�f��V��V����Nz�G��^���7hZi����k��3�,kN�e|�vg�1{9]_i��X5y7� 8e]�U����'�-2,���e"����]ot�I��Y_��n�(JҼ��1�O ]bXc���Nu�No��pS���Q_���_�?i�~�x h5d'�(qw52] ��'ޤ�q��o1�R!���`ywy�A4u���h<קy���\[~�4�\ X�Wt/� 6�����n�F�a8��f���z �3$�t(���q��q�x��^�XWeN'p<-v�!�{�(>ӽDP7��ո0�y)�e$ٕv�Ih'Q�EA�m*�H��RI��=:��� ���4牢) �%_iN�ݧ�l]� �Nt���G��H�L��� ɱ�g<���1V�,�J~�ٹ�"K��Q�� 9�HS�9�?@��k����r�;we݁�]I�!{ �@�G�[�"��`���J:�n]�{�cA�E����V��ʆ���#��U9�6����j�#Y�m\��q�e4h�B�7��C�������d<�?J����1g:ٳ���=Y���D�p�ц� ׈ǔ��1�]26؜oS�'��9�V�FVu�P�h�9�xc�oq�X��p�o�5��Ա5$�9W�V(�[Ak�aY錎qf;�'�[�|���b�6�Ck��)��#a#a˙��8���=äh�4��2��C��4tm^ �n'c���]GQ$[Wҿ��i���vN�{Fu ��1�gx��1┷���N�m��{j-,��x�� Ūm�ЧS�[�s���Gna���䑴�� x�p 8<������97�Q���ϴ�v�aϚG��Rt�Һ׈�f^\r��WH�JU�7Z���y)�vg=����n��4�_)y��D'y�6�]�c�5̪�\� �PF�k����&�c;��cq�$~T�7j ���nç]�<�g ":�to�t}�159�<�/�8������m�b�K#g'I'.W�����6��I/��>v��\�MN��g���m�A�yQL�4u�Lj�j9��#44�t��l^�}L����n��R��!��t��±]��r��h6ٍ>�yҏ�N��fU�� ���� Fm@�8}�/u��jb9������he:A�y�ծw��GpΧh�5����l}�3p468��)U��d��c����;Us/�֔�YX�1�O2��uq�s��`hwg�r~�{ R��mhN��؎*q 42�*th��>�#���E����#��Hv�O����q�}�����6�e��\�,Wk�#���X��b>��p}�դ��3���T5��†��6��[��@�P�y*n��|'f�֧>�lư΂�̺����SU�'*�q�p�_S�����M�� '��c�6�����m�� ySʨ;M��r���Ƌ�m�Kxo,���Gm�P��A�G�:��i��w�9�}M(�^�V��$ǒ�ѽ�9���|���� �a����J�SQ�a���r�B;����}���ٻ֢�2�%U���c�#�g���N�a�ݕ�'�v�[�OY'��3L�3�;,p�]@�S��{ls��X�'���c�jw�k'a�.��}�}&�� �dP�*�bK=ɍ!����;3n�gΊU�ߴmt�'*{,=SzfD� A��ko~�G�aoq�_mi}#�m�������P�Xhύ����mxǍ�΂���巿zf��Q���c���|kc�����?���W��Y�$���_Lv����l߶��c���`?����l�j�ݲˏ!V��6����U�Ђ(A���4y)H���p�Z_�x��>���e��R��$�/�`^'3qˏ�-&Q�=?��CFVR �D�fV�9��{�8g�������n�h�(P"��6�[�D���< E�����~0<@�`�G�6����Hг�cc�� �c�K.5��D��d�B���`?�XQ��2��ٿyqo&+�1^� DW�0�ꊩ���G�#��Q�nL3��c���������/��x ��1�1[y�x�პCW��C�c�UĨ80�m�e�4.{�m��u���I=��f�����0QRls9���f���������9���~f�����Ǩ��a�"@�8���ȁ�Q����#c�ic������G��$���G���r/$W�(��W���V�"��m�7�[m�A�m����bo��D� j����۳� l���^�k�h׽����� ��#� iXn�v��eT�k�a�^Y�4�BN��ĕ��0 !01@Q"2AaPq3BR������?���@4�Q�����T3,���㺠�W�[=JK�Ϟ���2�r^7��vc�:�9 �E�ߴ�w�S#d���Ix��u��:��Hp��9E!�� V 2;73|F��9Y���*ʬ�F��D����u&���y؟��^EA��A��(ɩ���^��GV:ݜDy�`��Jr29ܾ�㝉��[���E;Fzx��YG��U�e�Y�C���� ����v-tx����I�sם�Ę�q��Eb�+P\ :>�i�C'�;�����k|z�رn�y]�#ǿb��Q��������w�����(�r|ӹs��[�D��2v-%��@;�8<a���[\o[ϧw��I!��*0�krs)�[�J9^��ʜ��p1)� "��/_>��o��<1����A�E�y^�C��`�x1'ܣn�p��s`l���fQ��):�l����b>�Me�jH^?�kl3(�z:���1ŠK&?Q�~�{�ٺ�h�y���/�[��V�|6��}�KbX����mn[-��7�5q�94�������dm���c^���h� X��5��<�eޘ>G���-�}�دB�ޟ� ��|�rt�M��V+�]�c?�-#ڛ��^ǂ}���Lkr���O��u�>�-D�ry� D?:ޞ�U��ǜ�7�V��?瓮�"�#���r��չģVR;�n���/_� ؉v�ݶe5d�b9��/O��009�G���5n�W����JpA�*�r9�>�1��.[t���s�F���nQ� V 77R�]�ɫ8����_0<՜�IF�u(v��4��F�k�3��E)��N:��yڮe��P�`�1}�$WS��J�SQ�N�j�ٺ��޵�#l���ј(�5=��5�lǏmoW�v-�1����v,W�mn��߀$x�<����v�j(����c]��@#��1������Ǔ���o'��u+����;G�#�޸��v-lη��/(`i⣍Pm^���ԯ̾9Z��F��������n��1��� ��]�[��)�'������:�֪�W��FC����� �B9،!?���]��V��A�Վ�M��b�w��G F>_DȬ0¤�#�QR�[V��kz���m�w�"��9ZG�7'[��=�Q����j8R?�zf�\a�=��O�U����*oB�A�|G���2�54 �p��.w7� �� ��&������ξxGHp� B%��$g�����t�Џ򤵍z���HN�u�Я�-�'4��0��;_��3 !01"@AQa2Pq#3BR������?��ʩca��en��^��8���<�u#��m*08r��y�N"�<�Ѳ0��@\�p��� �����Kv�D��J8�Fҽ� �f�Y��-m�ybX�NP����}�!*8t(�OqѢ��Q�wW�K��ZD��Δ^e��!� ��B�K��p~�����e*l}z#9ң�k���q#�Ft�o��S�R����-�w�!�S���Ӥß|M�l޶V��!eˈ�8Y���c�ЮM2��tk���� ������J�fS����Ö*i/2�����n]�k�\���|4yX�8��U�P.���Ы[���l��@"�t�<������5�lF���vU�����W��W��;�b�cД^6[#7@vU�xgZv��F�6��Q,K�v��� �+Ъ��n��Ǣ��Ft���8��0��c�@�!�Zq s�v�t�;#](B��-�nῃ~���3g������5�J�%���O������n�kB�ĺ�.r��+���#�N$?�q�/�s�6��p��a����a��J/��M�8��6�ܰ"�*������ɗud"\w���aT(����[��F��U՛����RT�b���n�*��6���O��SJ�.�ij<�v�MT��R\c��5l�sZB>F��<7�;EA��{��E���Ö��1U/�#��d1�a�n.1ě����0�ʾR�h��|�R��Ao�3�m3 ��%�� ���28Q� ��y��φ���H�To�7�lW>����#i`�q���c����a��� �m,B�-j����݋�'mR1Ήt�>��V��p���s�0IbI�C.���1R�ea�����]H�6����������4B>��o��](��$B���m�����a�!=��?�B� K�Ǿ+�Ծ"�n���K��*��+��[T#�{E�J�S����Q�����s�5�:�U�\wĐ�f�3����܆&�)����I���Ԇw��E T�lrTf6Q|R�h:��[K�� �z��c֧�G�C��%\��_�a�84��HcO�bi��ؖV��7H �)*ģK~Xhչ0��4?�0��� �E<���}3���#���u�?�� ��|g�S�6ꊤ�|�I#Hڛ� �ա��w�X��9��7���Ŀ%�SL��y6č��|�F�a 8���b��$�sק�h���b9RAu7�˨p�Č�_\*w��묦��F ����4D~�f����|(�"m���NK��i�S�>�$d7SlA��/�²����SL��|6N�}���S�˯���g��]6��; �#�.��<���q'Q�1|KQ$�����񛩶"�$r�b:���N8�w@��8$�� �AjfG|~�9F ���Y��ʺ��Bwؒ������M:I岎�G��`s�YV5����6��A �b:�W���G�q%l�����F��H���7�������Fsv7��k�� 403WebShell
403Webshell
Server IP : 51.161.54.47  /  Your IP : 216.73.216.114
Web Server : Apache/2.4.68 (Unix) OpenSSL/1.1.1k
System : Linux host.ditinformatica.ar 4.18.0-553.144.1.el8_10.x86_64 #1 SMP Tue Jul 14 09:26:58 EDT 2026 x86_64
User : kalaycom ( 1021)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /usr/share/nmap/nselib/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /usr/share/nmap/nselib/afp.lua
---
-- This library was written by Patrik Karlsson <patrik@cqure.net> to facilitate
-- communication with the Apple AFP Service. It is not feature complete and
-- still missing several functions.
--
-- The library currently supports
-- * Authentication using the DHX UAM (CAST128)
-- * File reading and writing
-- * Listing sharepoints
-- * Listing directory contents
-- * Querying ACLs and mapping user identities (UIDs)
--
-- The library was built based on the following reference:
-- http://developer.apple.com/mac/library/documentation/Networking/Reference/AFP_Reference/Reference/reference.html
-- http://developer.apple.com/mac/library/documentation/Networking/Conceptual/AFP/AFPSecurity/AFPSecurity.html#//apple_ref/doc/uid/TP40000854-CH232-CHBBAGCB
--
-- Most functions have been tested against both Mac OS X 10.6.2 and Netatalk 2.0.3
--
-- The library contains the following four classes
-- * <code>Response</code>
-- ** A class used as return value by functions in the <code>Proto</code> class.
-- ** The response class acts as a wrapper and holds the response data and any error information.
-- * <code>Proto</code>
-- ** This class contains all the AFP specific functions and calls.
-- ** The functions can be accessed directly but the preferred method is through the <code>Helper</code> class.
-- ** The function names closely resemble those described in the Apple documentation.
-- ** Some functions may lack some of the options outlined in Apple's documentation.
-- * <code>Helper</code>
-- ** The helper class wraps the <code>Proto</code> class using functions with a more descriptive name.
-- ** Functions are task-oriented. For example, <code>ReadFile</code> and usually call several functions in the <code>Proto</code> class.
-- ** The purpose of this class is to give developers easy access to some of the common AFP tasks.
-- * <code>Util</code>
-- ** The <code>Util</code> class contains a number of static functions mainly used to convert data.
--
-- The following information will describe how to use the AFP Helper class to communicate with an AFP server.
--
-- The short version:
-- <code>
-- helper = afp.Helper:new()
-- status, response = helper:OpenSession( host, port )
-- status, response = helper:Login()
-- .. do some fancy AFP stuff ..
-- status, response = helper:Logout()
-- status, response = helper:CloseSession()
-- </code>
--
-- Here's the longer version, with some explanatory text. To start using the Helper class,
-- the script has to create its own instance. We do this by issuing the following:
-- <code>
-- helper = afp.Helper:new()
-- </code>
--
-- Next a session to the AFP server must be established, this is done using the OpenSession method of the
-- Helper class, like this:
-- <code>
-- status, response = helper:OpenSession( host, port )
-- </code>
--
-- The next step needed to be performed is to authenticate to the server. We need to do this even for
-- functions that are available publicly. In order to authenticate as the public user simply
-- authenticate using nil for both username and password. This can be achieved by calling the Login method
-- without any parameters, like this:
-- <code>
-- status, response = helper:Login()
-- </code>
--
-- To authenticate to the server using the username 'admin' and password 'nimda' we do this instead:
-- <code>
-- status, response = helper:Login('admin', 'nimda')
-- </code>
--
-- At this stage we're authenticated and can call any of the AFP functions we're authorized to.
-- For the purpose of this documentation, we will attempt to list the servers share points.
-- We do this by issuing the following:
-- <code>
-- status, shares = helper:ListShares()
-- </code>
--
-- Once we're finished, we need to logout and close the AFP session this is done by calling the
-- following two methods of the Helper class:
-- <code>
-- status, response = helper:Logout()
-- status, response = helper:CloseSession()
-- </code>
--
-- Consult the documentation of each function to learn more about their respective return values.
--
--@author Patrik Karlsson <patrik@cqure.net>
--@copyright Same as Nmap--See https://nmap.org/book/man-legal.html
--
-- @args afp.username The username to use for authentication.
-- @args afp.password The password to use for authentication.

--
-- Version 0.5
--
-- Created 01/03/2010 - v0.1 - created by Patrik Karlsson <patrik@cqure.net>
-- Revised 01/20/2010 - v0.2 - updated all bitmaps to hex for better readability
-- Revised 02/15/2010 - v0.3 - added a bunch of new functions and re-designed the code to be OO
--
--   New functionality added as of v0.3
--    o File reading, writing
--    o Authentication
--    o Helper functions for most AFP functions
--    o More robust error handling
--
-- Revised 03/05/2010 - v0.4 - changed output table of Helper:Dir to include type and ID
--                           - added support for --without-openssl
--
-- Revised 03/09/2010 - v0.5 - documentation, documentation and more documentation
-- Revised 04/03/2011 - v0.6 - add support for getting file- sizes, dates and Unix ACLs
--                           - moved afp.username & afp.password arguments to library

local datetime = require "datetime"
local ipOps = require "ipOps"
local nmap = require "nmap"
local os = require "os"
local stdnse = require "stdnse"
local string = require "string"
local stringaux = require "stringaux"
local table = require "table"
_ENV = stdnse.module("afp", stdnse.seeall);

local HAVE_SSL, openssl = pcall(require,'openssl')

-- Table of valid REQUESTs
local REQUEST = {
  CloseSession = 0x01,
  OpenSession = 0x04,
  Command = 0x02,
  GetStatus = 0x03,
  Write = 0x06,
}

-- Table of headers flags to be set accordingly in requests and responses
local FLAGS = {
  Request = 0,
  Response = 1
}

-- Table of possible AFP_COMMANDs
COMMAND = {
  FPCloseVol = 0x02,
  FPCloseFork = 0x04,
  FPCopyFile = 0x05,
  FPCreateDir = 0x06,
  FPCreateFile = 0x07,
  FPGetSrvrInfo = 0x0f,
  FPGetSrvParms = 0x10,
  FPLogin = 0x12,
  FPLoginCont = 0x13,
  FPLogout = 0x14,
  FPMapId = 0x15,
  FPMapName = 0x16,
  FPGetUserInfo = 0x25,
  FPOpenVol = 0x18,
  FPOpenFork = 0x1a,
  FPGetFileDirParams = 0x22,
  FPChangePassword = 0x24,
  FPReadExt = 0x3c,
  FPWriteExt = 0x3d,
  FPGetAuthMethods = 0x3e,
  FPLoginExt = 0x3f,
  FPEnumerateExt2 = 0x44,
}

USER_BITMAP = {
  UserId = 0x01,
  PrimaryGroupId = 0x2,
  UUID = 0x4
}

VOL_BITMAP = {
  Attributes = 0x1,
  Signature = 0x2,
  CreationDate = 0x4,
  ModificationDate = 0x8,
  BackupDate = 0x10,
  ID = 0x20,
  BytesFree = 0x40,
  BytesTotal = 0x80,
  Name = 0x100,
  ExtendedBytesFree = 0x200,
  ExtendedBytesTotal = 0x400,
  BlockSize = 0x800
}

FILE_BITMAP = {
  Attributes = 0x1,
  ParentDirId = 0x2,
  CreationDate = 0x4,
  ModificationDate = 0x8,
  BackupDate = 0x10,
  FinderInfo = 0x20,
  LongName = 0x40,
  ShortName = 0x80,
  NodeId = 0x100,
  DataForkSize = 0x200,
  ResourceForkSize = 0x400,
  ExtendedDataForkSize = 0x800,
  LaunchLimit = 0x1000,
  UTF8Name = 0x2000,
  ExtendedResourceForkSize = 0x4000,
  UnixPrivileges = 0x8000,
  ALL = 0xFFFF
}

DIR_BITMAP = {
  Attributes = 0x1,
  ParentDirId = 0x2,
  CreationDate = 0x4,
  ModificationDate = 0x8,
  BackupDate = 0x10,
  FinderInfo = 0x20,
  LongName = 0x40,
  ShortName = 0x80,
  NodeId = 0x100,
  OffspringCount = 0x200,
  OwnerId = 0x400,
  GroupId = 0x800,
  AccessRights = 0x1000,
  UTF8Name = 0x2000,
  UnixPrivileges = 0x8000,
  ALL = 0xBFFF,
}

PATH_TYPE = {
  ShortName = 1,
  LongName = 2,
  UTF8Name = 3,
}

ACCESS_MODE = {
  Read = 0x1,
  Write = 0x2,
  DenyRead = 0x10,
  DenyWrite = 0x20
}

-- Access controls
ACLS = {
  OwnerSearch = 0x1,
  OwnerRead = 0x2,
  OwnerWrite = 0x4,

  GroupSearch = 0x100,
  GroupRead = 0x200,
  GroupWrite = 0x400,

  EveryoneSearch = 0x10000,
  EveryoneRead = 0x20000,
  EveryoneWrite = 0x40000,

  UserSearch = 0x100000,
  UserRead = 0x200000,
  UserWrite = 0x400000,

  BlankAccess = 0x10000000,
  UserIsOwner = 0x80000000
}

-- User authentication modules
UAM =
{
  NoUserAuth = "No User Authent",
  ClearText = "Cleartxt Passwrd",
  RandNum = "Randnum Exchange",
  TwoWayRandNum = "2-Way Randnum",
  DHCAST128 = "DHCAST128",
  DHX2 = "DHX2",
  Kerberos = "Client Krb v2",
  Reconnect = "Recon1",
}

ERROR =
{
  SocketError = 1000,
  CustomError = 0xdeadbeef,

  FPNoErr = 0,
  FPAccessDenied = -5000,
  FPAuthContinue = -5001,
  FPBadUAM = -5002,
  FPBadVersNum = -5003,
  FPBitmapErr = - 5004,
  FPCantMove = - 5005,
  FPEOFErr = -5009,
  FPItemNotFound = -5012,
  FPLockErr = -5013,
  FPMiscErr = -5014,
  FPObjectExists = -5017,
  FPObjectNotFound = -5018,
  FPParamErr = -5019,
  FPUserNotAuth = -5023,
  FPCallNotSupported = -5024,
}

MAP_ID =
{
  UserIDToName = 1,
  GroupIDToName = 2,
  UserIDToUTF8Name = 3,
  GroupIDToUTF8Name = 4,
  UserUUIDToUTF8Name = 5,
  GroupUUIDToUTF8Name = 6
}

MAP_NAME =
{
  NameToUserID = 1,
  NameToGroupID = 2,
  UTF8NameToUserID = 3,
  UTF8NameToGroupID = 4,
  UTF8NameToUserUUID = 5,
  UTF8NameToGroupUUID = 6
}


SERVERFLAGS =
{
  CopyFile = 0x01,
  ChangeablePasswords = 0x02,
  NoPasswordSaving = 0x04,
  ServerMessages = 0x08,
  ServerSignature = 0x10,
  TCPoverIP = 0x20,
  ServerNotifications = 0x40,
  Reconnect = 0x80,
  OpenDirectory = 0x100,
  UTF8ServerName = 0x200,
  UUIDs = 0x400,
  SuperClient = 0x8000
}

local ERROR_MSG = {
  [ERROR.FPAccessDenied]="Access Denied",
  [ERROR.FPAuthContinue]="Authentication is not yet complete",
  [ERROR.FPBadUAM]="Specified UAM is unknown",
  [ERROR.FPBadVersNum]="Server does not support the specified AFP version",
  [ERROR.FPBitmapErr]="Attempt was made to get or set a parameter that cannot be obtained or set with this command, or a required bitmap is null",
  [ERROR.FPCantMove]="Attempt was made to move a directory into one of its descendant directories.",
  [ERROR.FPEOFErr]="No more matches or end of fork reached.",
  [ERROR.FPLockErr]="Some or all of the requested range is locked by another user; a lock range conflict exists.",
  [ERROR.FPMiscErr]="Non-AFP error occurred.",
  [ERROR.FPObjectNotFound]="Input parameters do not point to an existing directory, file, or volume.",
  [ERROR.FPParamErr]="Parameter error.",
  [ERROR.FPObjectExists] = "File or directory already exists.",
  [ERROR.FPUserNotAuth] = "UAM failed (the specified old password doesn't match); no user is logged in yet for the specified session; authentication failed; password is incorrect.",
  [ERROR.FPItemNotFound] = "Specified APPL mapping, comment, or icon was not found in the Desktop database; specified ID is unknown.",
  [ERROR.FPCallNotSupported] = "Server does not support this command.",
}

-- Dates are shifted forward one day to avoid referencing 12/31/1969 UTC
-- when specifying 1/1/1970 (local) in a timezone that is ahead of UTC
local TIME_OFFSET = os.time({year=2000, month=1, day=2, hour=0}) - os.time({year=1970, month=1, day=2, hour=0})

-- Check if all the bits in flag are set in bitmap.
local function flag_is_set(bitmap, flag)
  return (bitmap & flag) == flag
end

-- Serialize path of a given type
-- NB: For now the actual UTF-8 encoding is ignored
local function encode_path (path)
  if path.type == PATH_TYPE.ShortName or path.type == PATH_TYPE.LongName then
    return string.pack("Bs1", path.type, path.name)
  elseif path.type == PATH_TYPE.UTF8Name then
    return string.pack(">BI4s2", path.type, 0x08000103, path.name)
  end
  assert(false, ("Unrecognized path type '%s'"):format(tostring(path.type)))
end

-- Response class returned by all functions in Proto
Response = {

  new = function(self,o)
    o = o or {}
    setmetatable(o, self)
    self.__index = self
    return o
  end,

  --- Sets the error code
  --
  -- @param code number containing the error code
  setErrorCode = function( self, code )
    self.error_code = code
  end,

  --- Gets the error code
  --
  -- @return code number containing the error code
  getErrorCode = function( self )
    return self.error_code
  end,

  --- Gets the error message
  --
  -- @return msg string containing the error
  getErrorMessage = function(self)
    if self.error_msg then
      return self.error_msg
    else
      return ERROR_MSG[self.error_code] or ("Unknown error (%d) occurred"):format(self.error_code)
    end
  end,

  --- Sets the error message
  --
  -- @param msg string containing the error message
  setErrorMessage = function(self, msg)
    self.error_code = ERROR.CustomError
    self.error_msg = msg
  end,

  --- Sets the result
  --
  -- @param result result to set
  setResult = function(self, result)
    self.result = result
  end,

  --- Get the result
  --
  -- @return result
  getResult = function(self)
    return self.result
  end,

  --- Sets the packet
  setPacket = function( self, packet )
    self.packet = packet
  end,

  getPacket = function( self )
    return self.packet
  end,

  --- Gets the packet data
  getPacketData = function(self)
    return self.packet.data
  end,

  --- Gets the packet header
  getPacketHeader = function(self)
    return self.packet.header
  end,
}

--- Proto class containing all AFP specific code
--
-- For more details consult:
-- http://developer.apple.com/mac/library/documentation/Networking/Reference/AFP_Reference/Reference/reference.html
Proto = {

  RequestId = 1,

  new = function(self,o)
    o = o or {}
    setmetatable(o, self)
    self.__index = self
    return o
  end,

  setSocket = function(self, socket)
    self.socket = socket
  end,

  --- Creates an AFP packet
  --
  -- @param command number should be one of the commands in the COMMAND table
  -- @param data_offset number holding the offset to the data
  -- @param data the actual data of the request
  create_fp_packet = function( self, command, data_offset, data )
    local reserved = 0
    local data = data or ""
    local data_len = data:len()
    local header = string.pack(">BBI2I4I4I4", FLAGS.Request, command, self.RequestId, data_offset, data_len, reserved)

    self.RequestId = self.RequestId + 1
    return header .. data
  end,

  --- Parses the FP header (first 16-bytes of packet)
  --
  -- @param packet string containing the raw packet
  -- @return table with header data containing <code>flags</code>, <code>command</code>,
  -- <code>request_id</code>, <code>error_code</code>, <code>length</code> and <code>reserved</code> fields
  parse_fp_header = function( self, packet )
    local header = {}
    local pos

    header.flags, header.command, header.request_id, pos = string.unpack( ">BBI2", packet )
    header.error_code, header.length, header.reserved, pos = string.unpack( ">i4I4I4", packet, pos )

    if header.error_code ~= 0 then
      header.error_msg = ERROR_MSG[header.error_code] or ("Unknown error: %d"):format(header.error_code)
      header.error_msg = "ERROR: " .. header.error_msg
    end
    header.raw = packet:sub(1,16)
    return header
  end,

  --- Reads a AFP packet of the socket
  --
  -- @return Response object
  read_fp_packet = function( self )

    local packet = {}
    local buf = ""
    local status, response

    status, buf = self.socket:receive_bytes(16)
    if ( not status ) then
      response = Response:new()
      response:setErrorCode(ERROR.SocketError)
      response:setErrorMessage(buf)
      return response
    end

    packet.header = self:parse_fp_header( buf )
    while buf:len() < packet.header.length + packet.header.raw:len() do
      local tmp
      status, tmp = self.socket:receive_bytes( packet.header.length + 16 - buf:len() )
      if not status then
        response = Response:new()
        response:setErrorCode(ERROR.SocketError)
        response:setErrorMessage(buf)
        return response
      end
      buf = buf .. tmp
    end

    packet.data = buf:len() > 16 and buf:sub( 17 ) or ""
    response = Response:new()
    response:setErrorCode(packet.header.error_code)
    response:setPacket(packet)

    return response
  end,

  --- Sends the raw packet over the socket
  --
  -- @param packet containing the raw data
  -- @return Response object
  send_fp_packet = function( self, packet )
    return self.socket:send(packet)
  end,

  --- Sends an DSIOpenSession request to the server and handles the response
  --
  -- @return Response object
  dsi_open_session = function( self, host, port )
    local data_offset = 0
    local option = 0x01 -- Attention Quantum
    local option_len = 4
    local quantum = 1024
    local data, packet, status

    data = string.pack( ">BBI4", option, option_len, quantum  )
    packet = self:create_fp_packet( REQUEST.OpenSession, data_offset, data )

    self:send_fp_packet( packet )
    return self:read_fp_packet()
  end,

  --- Sends an DSICloseSession request to the server and handles the response
  dsi_close_session = function( self )
    local data_offset = 0
    local option = 0x01 -- Attention Quantum
    local option_len = 4
    local quantum = 1024
    local data, packet, status

    data = ""
    packet = self:create_fp_packet( REQUEST.CloseSession, data_offset, data )

    self:send_fp_packet( packet )
  end,

  -- Sends an FPCopyFile request to the server
  --
  -- @param src_vol number containing the ID of the src file volume
  -- @param srd_did number containing the directory id of the src file
  -- @param src_path string containing the file path/name of the src file
  -- @param dst_vol number containing the ID of the dst file volume
  -- @param dst_did number containing the id of the dest. directory
  -- @param dst_path string containing the dest path (can be nil or "")
  -- @param new_name string containing the new name of the destination
  -- @return Response object
  fp_copy_file = function(self, src_vol, src_did, src_path, dst_vol, dst_did, dst_path, new_name )
    local data_offset = 0
    local unicode_names, unicode_hint = 0x03, 0x08000103
    local data, packet, response

    -- make sure we have empty names rather than nil values
    local dst_path = dst_path or ""
    local src_path = src_path or ""
    local new_name = new_name or ""

    data = string.pack(">BxI2I4I2I4", COMMAND.FPCopyFile, src_vol, src_did, dst_vol, dst_did )
           .. encode_path({type=PATH_TYPE.UTF8Name, name=src_path})
           .. encode_path({type=PATH_TYPE.UTF8Name, name=dst_path})
           .. encode_path({type=PATH_TYPE.UTF8Name, name=new_name})

    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
    self:send_fp_packet( packet )
    return self:read_fp_packet()
  end,

  --- Sends an GetStatus DSI request (which is basically a FPGetSrvrInfo
  -- AFP request) to the server and handles the response
  --
  -- @return status (true or false)
  -- @return table with server information (if status is true) or error string
  -- (if status is false)
  fp_get_server_info = function(self)
    local packet
    local data_offset = 0
    local response, result = {}, {}
    local offsets = {}
    local pos
    local status

    local data = string.pack("Bx", COMMAND.FPGetSrvrInfo)
    packet = self:create_fp_packet(REQUEST.GetStatus, data_offset, data)
    self:send_fp_packet(packet)
    response = self:read_fp_packet()

    if response:getErrorCode() ~= ERROR.FPNoErr then
      return response
    end

    packet = response.packet

    -- parse and store the offsets in the 'header'
    offsets.machine_type, offsets.afp_version_count,
      offsets.uam_count, offsets.volume_icon_and_mask, pos
      = string.unpack(">I2I2I2I2", packet.data)

    -- the flags are directly in the 'header'
    result.flags = {}
    result.flags.raw, pos = string.unpack(">I2", packet.data, pos)

    -- the short server name is stored directly in the 'header' as
    -- well
    result.server_name, pos = string.unpack("s1", packet.data, pos)

    -- Server offset should begin at an even boundary see link below
    -- http://developer.apple.com/mac/library/documentation/Networking/Reference/AFP_Reference/Reference/reference.html#//apple_ref/doc/uid/TP40003548-CH3-CHDIEGED
    if (pos + 1) % 2 ~= 0 then
      pos = pos + 1
    end

    -- and some more offsets
    offsets.server_signature, offsets.network_addresses_count,
    offsets.directory_names_count, offsets.utf8_server_name, pos
      = string.unpack(">I2I2I2I2", packet.data, pos)

    -- this sets up all the server flags in the response table as booleans
    result.flags.SuperClient = flag_is_set(result.flags.raw, SERVERFLAGS.SuperClient)
    result.flags.UUIDs = flag_is_set(result.flags.raw, SERVERFLAGS.UUIDs)
    result.flags.UTF8ServerName = flag_is_set(result.flags.raw, SERVERFLAGS.UTF8ServerName)
    result.flags.OpenDirectory = flag_is_set(result.flags.raw, SERVERFLAGS.OpenDirectory)
    result.flags.Reconnect = flag_is_set(result.flags.raw, SERVERFLAGS.Reconnect)
    result.flags.ServerNotifications = flag_is_set(result.flags.raw, SERVERFLAGS.ServerNotifications)
    result.flags.TCPoverIP = flag_is_set(result.flags.raw, SERVERFLAGS.TCPoverIP)
    result.flags.ServerSignature = flag_is_set(result.flags.raw, SERVERFLAGS.ServerSignature)
    result.flags.ServerMessages = flag_is_set(result.flags.raw, SERVERFLAGS.ServerMessages)
    result.flags.NoPasswordSaving = flag_is_set(result.flags.raw, SERVERFLAGS.NoPasswordSaving)
    result.flags.ChangeablePasswords = flag_is_set(result.flags.raw, SERVERFLAGS.ChangeablePasswords)
    result.flags.CopyFile = flag_is_set(result.flags.raw, SERVERFLAGS.CopyFile)

    -- store the machine type
    result.machine_type = string.unpack("s1", packet.data, offsets.machine_type + 1)

    -- this tells us the number of afp versions supported
    result.afp_version_count, pos = string.unpack("B", packet.data, offsets.afp_version_count + 1)

    -- now we loop through them all, storing for the response
    result.afp_versions = {}
    for i = 1,result.afp_version_count do
      local v
      v, pos = string.unpack("s1", packet.data, pos)
      table.insert(result.afp_versions, v)
    end

    -- same idea as the afp versions here
    result.uam_count, pos = string.unpack("B", packet.data, offsets.uam_count + 1)

    result.uams = {}
    for i = 1,result.uam_count do
      local uam
      uam, pos = string.unpack("s1", packet.data, pos)
      table.insert(result.uams, uam)
    end

    -- volume_icon_and_mask would normally be parsed out here,
    -- however the apple docs say it is deprecated in Mac OS X, so
    -- we don't bother with it

    -- server signature is 16 bytes
    result.server_signature = string.sub(packet.data, offsets.server_signature + 1, offsets.server_signature + 16)

    -- this is the same idea as afp_version and uam above
    result.network_addresses_count, pos = string.unpack("B", packet.data, offsets.network_addresses_count + 1)

    result.network_addresses = {}

    -- gets a little complicated in here, basically each entry has
    -- a length byte, a tag byte, and then the data. We parse
    -- differently based on the tag
    for i = 1, result.network_addresses_count do
      local length
      local tag

      length, tag, pos = string.unpack("BB", packet.data, pos)

      if tag == 0x00 then
        -- reserved, shouldn't ever come up, maybe this should
        -- return an error? maybe not, lets just ignore this
      elseif tag == 0x01 then
        -- four byte ip
        local ip
        ip, pos = string.unpack("c4", packet.data, pos)
        table.insert(result.network_addresses, ipOps.str_to_ip(ip))
      elseif tag == 0x02 then
        -- four byte ip and two byte port
        local ip, port
        ip, port, pos = string.unpack("c4 >I2", packet.data, pos)
        table.insert(result.network_addresses, string.format("%s:%d", ipOps.str_to_ip(ip), port))
      elseif tag == 0x03 then
        -- ddp address (two byte network, one byte
        -- node, one byte socket) not tested, anyone
        -- use ddp anymore?
        local network, node, socket
        network, node, socket, pos = string.unpack(">I2BB", packet.data, pos)
        table.insert(result.network_addresses, string.format("ddp %d.%d:%d", network, node, socket))
      elseif tag == 0x04 then
        -- dns name (string)
        local temp
        temp, pos = string.unpack("z", packet.data:sub(1,pos+length-3), pos)
        table.insert(result.network_addresses, temp)
      elseif tag == 0x05 then
        -- four byte ip and two byte port, client
        -- should use ssh. not tested, should work as it
        -- is the same as tag 0x02
        local ip, port
        ip, port, pos = string.unpack("c4 >I2", packet.data, pos)
        table.insert(result.network_addresses, string.format("ssh://%s:%d", ipOps.str_to_ip(ip), port))
      elseif tag == 0x06 then
        -- 16 byte ipv6
        -- not tested, but should work (next tag is
        -- tested)
        local ip
        ip, pos = string.unpack("c16", packet.data, pos)

        table.insert(result.network_addresses, ipOps.str_to_ip(ip))
      elseif tag == 0x07 then
        -- 16 byte ipv6 and two byte port
        local ip, port
        ip, port, pos = string.unpack(">c16 I2", packet.data, pos)

        table.insert(result.network_addresses,
          string.format("[%s]:%d", ipOps.str_to_ip(ip), port))
      end
    end

    -- same idea as the others here
    result.directory_names_count, pos = string.unpack("B", packet.data, offsets.directory_names_count + 1)

    result.directory_names = {}
    for i = 1, result.directory_names_count do
      local dirname
      dirname, pos = string.unpack("s1", packet.data, pos)
      table.insert(result.directory_names, dirname)
    end

    -- only one utf8 server name. note this string has a two-byte length.
    result.utf8_server_name = string.unpack(">s2", packet.data, offsets.utf8_server_name + 1)
    response.result = result

    return response
  end,


  --- Sends an FPGetUserInfo AFP request to the server and handles the response
  --
  -- @return response object with the following result <code>user_bitmap</code> and
  --     <code>uid</code> fields
  fp_get_user_info = function( self )

    local packet, pos, status, response
    local data_offset = 0
    local flags = 1 -- Default User
    local uid = 0
    local bitmap = USER_BITMAP.UserId
    local result = {}

    local data = string.pack( ">BBI4I2", COMMAND.FPGetUserInfo, flags, uid, bitmap )
    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )

    self:send_fp_packet( packet )
    response = self:read_fp_packet()
    if response:getErrorCode() ~= ERROR.FPNoErr then
      return response
    end

    response.result.user_bitmap, response.result.uid, pos = string.unpack(">I2I4", packet.data)

    return response
  end,

  --- Sends an FPGetSrvrParms AFP request to the server and handles the response
  --
  -- @return response object with the following result <code>server_time</code>,
  -- <code>vol_count</code>, <code>volumes</code> fields
  fp_get_srvr_parms = function(self)
    local packet, status, data
    local data_offset = 0
    local response = {}
    local pos = 0
    local parms = {}

    data = string.pack("Bx", COMMAND.FPGetSrvParms)
    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
    self:send_fp_packet( packet )
    response = self:read_fp_packet()

    if response:getErrorCode() ~= ERROR.FPNoErr then
      return response
    end

    data = response:getPacketData()
    parms.server_time, parms.vol_count, pos = string.unpack(">I4B", data)

    parms.volumes = {}

    for i=1, parms.vol_count do
      local volume_name
      -- pos+1 to skip over the volume bitmap
      volume_name, pos = string.unpack("s1", data, pos + 1)
      table.insert(parms.volumes, string.format("%s", volume_name) )
    end

    response:setResult(parms)

    return response
  end,


  --- Sends an FPLogin request to the server and handles the response
  --
  -- This function currently only supports the 3.1 through 3.3 protocol versions
  -- It currently supports the following authentication methods:
  --   o No User Authent
  --   o DHCAST128
  --
  -- The DHCAST128 UAM should work against most servers even though it's
  -- superceded by the DHX2 UAM.
  --
  -- @param afp_version string (AFP3.3|AFP3.2|AFP3.1)
  -- @param uam string containing authentication information
  -- @return Response object
  fp_login = function( self, afp_version, uam, username, password, options )
    local packet, status, data
    local data_offset = 0
    local status, response

    if not HAVE_SSL then
      response = Response:new()
      response:setErrorMessage("OpenSSL not available, aborting ...")
      return response
    end

    -- currently we only support AFP3.3
    if afp_version == nil or ( afp_version ~= "AFP3.3" and afp_version ~= "AFP3.2" and afp_version ~= "AFP3.1" ) then
      response = Response:new()
      response:setErrorMessage("Incorrect AFP version")
      return response
    end

    if ( uam == "No User Authent" ) then
      data = string.pack( "Bs1s1", COMMAND.FPLogin, afp_version, uam )
      packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
      self:send_fp_packet( packet )
      return self:read_fp_packet( )
    elseif( uam == "DHCAST128" ) then
      local dhx_s2civ, dhx_c2civ = 'CJalbert', 'LWallace'
      local p, g, Ra, Ma, Mb, K, nonce
      local EncData, PlainText, K_bin, auth_response
      local Id
      local username = username or ""
      local password = password or ""

      username = username .. string.rep('\0', (#username + 1) % 2)

      p = openssl.bignum_hex2bn("BA2873DFB06057D43F2024744CEEE75B")
      g = openssl.bignum_dec2bn("7")
      Ra = openssl.bignum_hex2bn("86F6D3C0B0D63E4B11F113A2F9F19E3BBBF803F28D30087A1450536BE979FD42")
      Ma = openssl.bignum_mod_exp(g, Ra, p)

      data = string.pack( "Bs1s1s1", COMMAND.FPLogin, afp_version, uam, username) .. openssl.bignum_bn2bin(Ma)
      packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
      self:send_fp_packet( packet )
      response = self:read_fp_packet( )
      if ( response:getErrorCode() ~= ERROR.FPAuthContinue ) then
        return response
      end

      if ( response.packet.header.length ~= 50 ) then
        response:setErrorMessage("LoginContinue packet contained invalid data")
        return response
      end

      Id, Mb, EncData = string.unpack(">I2c16c32", response.packet.data )

      Mb = openssl.bignum_bin2bn( Mb )
      K = openssl.bignum_mod_exp (Mb, Ra, p)
      K_bin = openssl.bignum_bn2bin(K)
      nonce = openssl.decrypt("cast5-cbc", K_bin, dhx_s2civ, EncData, false ):sub(1,16)
      nonce = openssl.bignum_add( openssl.bignum_bin2bn(nonce), openssl.bignum_dec2bn("1") )
      PlainText = openssl.bignum_bn2bin(nonce) .. Util.ZeroPad(password, 64)
      auth_response = openssl.encrypt( "cast5-cbc", K_bin, dhx_c2civ, PlainText, true)

      data = string.pack( ">BBI2", COMMAND.FPLoginCont, 0, Id) .. auth_response
      packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
      self:send_fp_packet( packet )
      response = self:read_fp_packet( )
      if ( response:getErrorCode() ~= ERROR.FPNoErr ) then
        return response
      end
      return response
    end
    response:setErrorMessage("Unsupported uam: " .. uam or "nil")
    return response
  end,

  -- Terminates sessions and frees server resources established by FPLoginand FPLoginExt.
  --
  -- @return response object
  fp_logout = function( self )
    local packet, data, response
    local data_offset = 0

    data = string.pack("Bx", COMMAND.FPLogout)
    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
    self:send_fp_packet( packet )
    return self:read_fp_packet( )
  end,

  --- Sends an FPOpenVol request to the server and handles the response
  --
  -- @param bitmap number bitmask of volume information to request
  -- @param volume_name string containing the volume name to query
  -- @return response object with the following result <code>bitmap</code> and
  --     <code>volume_id</code> fields
  fp_open_vol = function( self, bitmap, volume_name )
    local packet, status, pos, data
    local data_offset = 0
    local response, volume = {}, {}

    data = string.pack(">BxI2s1", COMMAND.FPOpenVol, bitmap, volume_name)
    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
    self:send_fp_packet( packet )
    response = self:read_fp_packet()
    if response:getErrorCode() ~= ERROR.FPNoErr then
      return response
    end

    volume.bitmap, volume.volume_id, pos = string.unpack(">I2I2", response.packet.data)
    response:setResult(volume)
    return response
  end,


  --- Sends an FPGetFileDirParms request to the server and handles the response
  --
  -- @param volume_id number containing the id of the volume to query
  -- @param did number containing the id of the directory to query
  -- @param file_bitmap number bitmask of file information to query
  -- @param dir_bitmap number bitmask of directory information to query
  -- @param path table containing the name and the name encoding type of the directory to query
  -- @return response object with the following result <code>file_bitmap</code>, <code>dir_bitmap</code>,
  --     <code>file_type</code> and (<code>dir<code> or <code>file</code> tables) depending on whether
  --     <code>did</code> is a file or directory
  fp_get_file_dir_parms = function( self, volume_id, did, file_bitmap, dir_bitmap, path )

    local packet, status, data
    local data_offset = 0
    local response, parms = {}, {}
    local pos

    if ( did == nil ) then
      response = Response:new()
      response:setErrorMessage("No Directory Id supplied")
      return response
    end

    if ( volume_id == nil ) then
      response = Response:new()
      response:setErrorMessage("No Volume Id supplied")
      return response
    end

    data = string.pack(">BxI2I4I2I2", COMMAND.FPGetFileDirParams, volume_id, did, file_bitmap, dir_bitmap)
           .. encode_path(path)
    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
    self:send_fp_packet( packet )
    response = self:read_fp_packet()

    if response:getErrorCode() ~= ERROR.FPNoErr then
      return response
    end

    parms.file_bitmap, parms.dir_bitmap, parms.file_type, pos = string.unpack( ">I2I2Bx", response.packet.data )

    -- file or dir?
    if ( parms.file_type == 0x80 ) then
      pos, parms.dir = Util.decode_dir_bitmap( parms.dir_bitmap, response.packet.data, pos )
    else
      -- file
      pos, parms.file = Util.decode_file_bitmap( parms.file_bitmap, response.packet.data, pos )
    end

    response:setResult(parms)
    return response
  end,

  --- Sends an FPEnumerateExt2 request to the server and handles the response
  --
  -- @param volume_id number containing the id of the volume to query
  -- @param did number containing the id of the directory to query
  -- @param file_bitmap number bitmask of file information to query
  -- @param dir_bitmap number bitmask of directory information to query
  -- @param req_count number
  -- @param start_index number
  -- @param reply_size number
  -- @param path table containing the name and the name encoding type of the directory to query
  -- @return response object with the following result set to a table of tables containing
  --   <code>file_bitmap</code>, <code>dir_bitmap</code>, <code>req_count</code> fields
  fp_enumerate_ext2 = function( self, volume_id, did, file_bitmap, dir_bitmap, req_count, start_index, reply_size, path )

    local packet, pos, status
    local data_offset = 0
    local response,records = {}, {}

    local data = string.pack( ">BxI2I4I2I2", COMMAND.FPEnumerateExt2, volume_id, did, file_bitmap, dir_bitmap )
                .. string.pack( ">I2I4I4", req_count, start_index, reply_size)
                .. encode_path(path)
    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )

    self:send_fp_packet( packet )
    response = self:read_fp_packet( )

    if response:getErrorCode() ~= ERROR.FPNoErr then
      return response
    end

    file_bitmap, dir_bitmap, req_count, pos = string.unpack(">I2I2I2", response.packet.data)

    records = {}

    for i=1, req_count do
      local record = {}
      local len, _, ftype

      len, ftype, pos = string.unpack(">I2Bx", response.packet.data, pos)

      if ( ftype == 0x80 ) then
        _, record = Util.decode_dir_bitmap( dir_bitmap, response.packet.data, pos )
      else
        -- file
        _, record = Util.decode_file_bitmap( file_bitmap, response.packet.data, pos )
      end

      if ( len % 2 ) ~= 0 then
        len = len + 1
      end

      pos = pos + ( len - 4 )

      record.type = ftype
      table.insert(records, record)
    end

    response:setResult(records)
    return response
  end,

  --- Sends an FPOpenFork request to the server and handles the response
  --
  -- @param flag number
  -- @param volume_id number containing the id of the volume to query
  -- @param did number containing the id of the directory to query
  -- @param file_bitmap number bitmask of file information to query
  -- @param access_mode number containing bitmask of options from <code>ACCESS_MODE</code>
  -- @param path string containing the name of the directory to query
  -- @return response object with the following result contents <code>file_bitmap</code> and <code>fork_id</code>
  fp_open_fork = function( self, flag, volume_id, did, file_bitmap, access_mode, path )

    local packet
    local data_offset = 0
    local response, fork = {}, {}

    local data = string.pack( ">BBI2I4I2I2", COMMAND.FPOpenFork, flag, volume_id, did, file_bitmap, access_mode )
                 .. encode_path(path)

    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
    self:send_fp_packet( packet )
    response = self:read_fp_packet()

    if response:getErrorCode() ~= ERROR.FPNoErr then
      return response
    end

    fork.file_bitmap, fork.fork_id = string.unpack(">I2I2", response.packet.data)
    response:setResult(fork)
    return response
  end,

  --- FPCloseFork
  --
  -- @param fork number containing the fork to close
  -- @return response object
  fp_close_fork = function( self, fork )
    local packet
    local data_offset = 0
    local response = {}

    local data = string.pack( ">BxI2", COMMAND.FPCloseFork, fork )

    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
    self:send_fp_packet( packet )
    return self:read_fp_packet( )
  end,

  --- FPCreateDir
  --
  -- @param vol_id number containing the volume id
  -- @param dir_id number containing the directory id
  -- @param path table containing the name and name encoding type of the directory to query
  -- @return response object
  fp_create_dir = function( self, vol_id, dir_id, path )
    local packet
    local data_offset = 0
    local response = {}

    local data = string.pack( ">BxI2I4", COMMAND.FPCreateDir, vol_id, dir_id)
                 .. encode_path(path)

    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
    self:send_fp_packet( packet )
    return self:read_fp_packet( )
  end,

  --- Sends an FPCloseVol request to the server and handles the response
  --
  -- @param volume_id number containing the id of the volume to close
  -- @return response object
  fp_close_vol = function( self, volume_id )
    local packet
    local data_offset = 0
    local response = {}

    local data = string.pack( ">BxI2", COMMAND.FPCloseVol, volume_id )

    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
    self:send_fp_packet( packet )
    return self:read_fp_packet( )
  end,

  --- FPReadExt
  --
  -- @param fork number containing the open fork
  -- @param offset number containing the offset from where writing should start. Negative value indicates offset from the end of the fork
  -- @param count number containing the number of bytes to be written
  -- @return response object
  fp_read_ext = function( self, fork, offset, count )
    local packet, response
    local data_offset = 0
    local block_size = 1024
    local data = string.pack( ">BxI2I8I8", COMMAND.FPReadExt, fork, offset, count  )

    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
    self:send_fp_packet( packet )
    response = self:read_fp_packet( )

    if ( response:getErrorCode() == ERROR.FPEOFErr and response.packet.header.length > 0 ) then
      response:setErrorCode( ERROR.FPNoErr )
    end

    response:setResult( response.packet.data )
    return response
  end,

  --- FPWriteExt
  --
  -- @param flag number indicates whether Offset is relative to the beginning or end of the fork.
  -- @param fork number containing the open fork
  -- @param offset number containing the offset from where writing should start. Negative value indicates offset from the end of the fork
  -- @param count number containing the number of bytes to be written
  -- @param fdata string containing the data to be written
  -- @return response object
  fp_write_ext = function( self, flag, fork, offset, count, fdata )
    local packet
    local data_offset = 20
    local data

    if count > fdata:len() then
      local err = Response:new()
      err:setErrorMessage("fp_write_ext: Count is greater than the amount of data")
      return err
    end
    if count < 0 then
      local err = Response:new()
      err:setErrorMessage("fp_write_ext: Count must exceed zero")
      return err
    end

    data = string.pack( ">BBI2I8I8", COMMAND.FPWriteExt, flag, fork, offset, count) .. fdata
    packet = self:create_fp_packet( REQUEST.Write, data_offset, data )
    self:send_fp_packet( packet )
    return self:read_fp_packet( )
  end,

  --- FPCreateFile
  --
  -- @param flag number where 0 indicates a soft create and 1 indicates a hard create.
  -- @param vol_id number containing the volume id
  -- @param did number containing the ancestor directory id
  -- @param path string containing the path, including the volume, path and file name
  -- @return response object
  fp_create_file = function(self, flag, vol_id, did, path )
    local packet
    local data_offset = 0
    local data = string.pack(">BBI2I4", COMMAND.FPCreateFile, flag, vol_id, did)
                 .. encode_path(path)

    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
    self:send_fp_packet( packet )
    return self:read_fp_packet()
  end,

  --- FPMapId
  --
  -- @param subfunc number containing the subfunction to call
  -- @param id number containing th id to translate
  -- @return response object with the id in the <code>result</code> field
  fp_map_id = function( self, subfunc, id )
    local packet, response
    local data_offset = 0
    local data = string.pack( "BB", COMMAND.FPMapId, subfunc )

    if ( subfunc == MAP_ID.UserUUIDToUTF8Name or subfunc == MAP_ID.GroupUUIDToUTF8Name ) then
      data = data .. string.pack(">I8", id)
    else
      data = data .. string.pack(">I4", id)
    end

    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
    self:send_fp_packet( packet )
    response = self:read_fp_packet( )

    if response:getErrorCode() ~= ERROR.FPNoErr then
      return response
    end

    -- Netatalk returns the name with 1-byte length prefix,
    -- Mac OS has a 2-byte (UTF-8) length prefix
    local len = string.unpack("B", response.packet.data)

    -- if length is zero assume 2-byte length (UTF-8 name)
    if len == 0 then
      response:setResult(string.unpack(">s2", response.packet.data))
    else
      response:setResult(string.unpack("s1", response.packet.data ))
    end
    return response
  end,

  --- FPMapName
  --
  -- @param subfunc number containing the subfunction to call
  -- @param name string containing name to map
  -- @return response object with the mapped name in the <code>result</code> field
  fp_map_name = function( self, subfunc, name )
    local packet
    local data_offset = 0
    local data = string.pack(">BBs2", COMMAND.FPMapName, subfunc, name )
    local response

    packet = self:create_fp_packet( REQUEST.Command, data_offset, data )
    self:send_fp_packet( packet )
    response = self:read_fp_packet( )

    if response:getErrorCode() ~= ERROR.FPNoErr then
      return response
    end

    response:setResult(string.unpack(">I4", response.packet.data))
    return response
  end,
}

--- The helper class wraps the protocol class and their functions. It contains
-- high-level functions with descriptive names, facilitating the use and
-- minimizing the need to fully understand the AFP low-level protocol details.
Helper = {

  --- Creates a new helper object
  new = function(self,o)
    local o = {}
    setmetatable(o, self)
    self.__index = self
    o.username = stdnse.get_script_args("afp.username")
    o.password = stdnse.get_script_args("afp.password")
    return o
  end,

  --- Connects to the remote server and establishes a new AFP session
  --
  -- @param host table as received by the action function of the script
  -- @param port table as received by the action function of the script
  -- @return status boolean
  -- @return string containing error message (if status is false)
  OpenSession = function( self, host, port )
    local status, response

    self.socket = nmap.new_socket()
    self.socket:set_timeout( 5000 )
    status = self.socket:connect(host, port)
    if not status then
      return false, "Socket connection failed"
    end

    self.proto = Proto:new( { socket=self.socket} )
    response = self.proto:dsi_open_session(self.socket)

    if response:getErrorCode() ~= ERROR.FPNoErr then
      self.socket:close()
      return false, response:getErrorMessage()
    end

    return true
  end,

  --- Closes the AFP session and then the socket
  --
  -- @return status boolean
  -- @return string containing error message (if status is false)
  CloseSession = function( self )
    local status, packet = self.proto:dsi_close_session( )
    self.socket:close()

    return status, packet
  end,

  --- Terminates the connection, without closing the AFP session
  --
  -- @return status (always true)
  -- @return string (always "")
  Terminate = function( self )
    self.socket:close()
    return true,""
  end,

  --- Logs in to an AFP service
  --
  -- @param username (optional) string containing the username
  -- @param password (optional) string containing the user password
  -- @param options table containing additional options <code>uam</code>
  Login = function( self, username, password, options )
    local uam = ( options and options.UAM ) and options.UAM or "DHCAST128"
    local response

    -- username and password arguments override the ones supplied using the
    -- script arguments afp.username and afp.password
    local username = username or self.username
    local password = password or self.password

    if ( username and uam == "DHCAST128" ) then
      response = self.proto:fp_login( "AFP3.1", "DHCAST128", username, password )
    elseif( username ) then
      return false, ("Unsupported UAM: %s"):format(uam)
    else
      response = self.proto:fp_login( "AFP3.1", "No User Authent" )
    end

    if response:getErrorCode() ~= ERROR.FPNoErr then
      return false, response:getErrorMessage()
    end

    return true, "Success"
  end,

  --- Logs out from the AFP service
  Logout = function(self)
    return self.proto:fp_logout()
  end,

  --- Walks the directory tree specified by <code>str_path</code> and returns the node information
  --
  -- @param str_path string containing the directory
  -- @return status boolean true on success, otherwise false
  -- @return item table containing node information <code>DirectoryId</code> and <code>DirectoryName</code>
  WalkDirTree = function( self, str_path )
    local status, response
    local elements = stringaux.strsplit( "/", str_path )
    local f_bm = FILE_BITMAP.NodeId + FILE_BITMAP.ParentDirId + FILE_BITMAP.LongName
    local d_bm = DIR_BITMAP.NodeId + DIR_BITMAP.ParentDirId + DIR_BITMAP.LongName
    local item = { DirectoryId = 2 }

    response = self.proto:fp_open_vol( VOL_BITMAP.ID, elements[1] )
    if response:getErrorCode() ~= ERROR.FPNoErr then
      return false, response:getErrorMessage()
    end

    item.VolumeId = response.result.volume_id
    item.DirectoryName = str_path

    for i=2, #elements do
      local path = { type=PATH_TYPE.LongName, name=elements[i] }
      response = self.proto:fp_get_file_dir_parms( item.VolumeId, item.DirectoryId, f_bm, d_bm, path )
      if response:getErrorCode() ~= ERROR.FPNoErr then
        return false, response:getErrorMessage()
      end
      item.DirectoryId = response.result.dir.NodeId
      item.DirectoryName = response.result.dir.LongName
    end

    return true, item
  end,

  --- Reads a file on the AFP server
  --
  -- @param str_path string containing the AFP sharepoint, path and filename eg. HR/Documents/File.doc
  -- @return status boolean true on success, false on failure
  -- @return content string containing the file contents
  ReadFile = function( self, str_path )
    local status, response, fork, content, vol_name
    local offset, count, did = 0, 1024, 2
    local status, path, vol_id
    local p = Util.SplitPath( str_path )

    status, response = self:WalkDirTree( p.dir )
    if ( not status ) then
      return false, response
    end

    vol_id = response.VolumeId
    did = response.DirectoryId

    path = { type=PATH_TYPE.LongName, name=p.file }

    response = self.proto:fp_open_fork(0, vol_id, did, 0, ACCESS_MODE.Read, path )
    if response:getErrorCode() ~= ERROR.FPNoErr then
      return false, response:getErrorMessage()
    end

    fork = response.result.fork_id
    content = ""

    while true do
      response = self.proto:fp_read_ext( fork, offset, count )
      if response:getErrorCode() ~= ERROR.FPNoErr then
        break
      end
      content = content .. response.result
      offset = offset + count
    end

    response = self.proto:fp_close_fork( fork )
    if response:getErrorCode() ~= ERROR.FPNoErr then
      return false, response:getErrorMessage()
    end

    return true, content
  end,

  --- Writes a file to the AFP server
  --
  -- @param str_path string containing the AFP sharepoint, path and filename eg. HR/Documents/File.doc
  -- @param fdata string containing the data to write to the file
  -- @return status boolean true on success, false on failure
  -- @return error string containing error message if status is false
  WriteFile = function( self, str_path, fdata )
    local status, response, fork, content
    local offset, count = 1, 1024
    local status, vol_id, did, path
    local p = Util.SplitPath( str_path )

    status, response = self:WalkDirTree( p.dir )
    vol_id = response.VolumeId
    did = response.DirectoryId

    if ( not status ) then
      return false, response
    end

    path = { type=PATH_TYPE.LongName, name=p.file }

    status, response = self.proto:fp_create_file( 0, vol_id, did, path )
    if not status then
      if ( response.header.error_code ~= ERROR.FPObjectExists ) then
        return false, response.header.error_msg
      end
    end

    response = self.proto:fp_open_fork( 0, vol_id, did, 0, ACCESS_MODE.Write, path )
    if response:getErrorCode() ~= ERROR.FPNoErr then
      return false, response:getErrorMessage()
    end

    fork = response.result.fork_id

    response = self.proto:fp_write_ext( 0, fork, 0, fdata:len(), fdata )

    return true, nil
  end,

  --- Maps a user id (uid) to a user name
  --
  -- @param uid number containing the uid to resolve
  -- @return status boolean true on success, false on failure
  -- @return username string on success
  --         error string on failure
  UIDToName = function( self, uid )
    local response = self.proto:fp_map_id( MAP_ID.UserIDToName, uid )
    if response:getErrorCode() ~= ERROR.FPNoErr then
      return false, response:getErrorMessage()
    end
    return true, response.result
  end,

  --- Maps a group id (gid) to group name
  --
  -- @param gid number containing the gid to lookup
  -- @return status boolean true on success, false on failure
  -- @return groupname string on success
  --         error string on failure
  GIDToName = function( self, gid )
    local response = self.proto:fp_map_id( MAP_ID.GroupIDToName, gid )
    if response:getErrorCode() ~= ERROR.FPNoErr then
      return false, response:getErrorMessage()
    end
    return true, response.result
  end,

  --- Maps a username to a UID
  --
  -- @param name string containing the username to map to an UID
  -- @return status boolean true on success, false on failure
  -- @return UID number on success
  --         error string on failure
  NameToUID = function( self, name )
    local response = self.proto:fp_map_name( MAP_NAME.NameToUserID, name )
    if response:getErrorCode() ~= ERROR.FPNoErr then
      return false, response:getErrorMessage()
    end
    return true, response.result
  end,

  --- List the contents of a directory
  --
  -- @param str_path string containing the sharepoint and directory names
  -- @param options table options containing zero or more of the options
  -- <code>max_depth</code> and <code>dironly</code>
  -- @param depth number containing the current depth (used when called recursively)
  -- @param parent table containing information about the parent object (used when called recursively)
  -- @return status boolean true on success, false on failure
  -- @return dir table containing a table for each directory item with the following:
  --         <code>type</code>, <code>name</code>, <code>id</code>,
  --         <code>fsize</code>, <code>uid</code>, <code>gid</code>,
  --         <code>privs</code>, <code>create</code>, <code>modify</code>
  Dir = function( self, str_path, options, depth, parent )
    local status, result
    local depth = depth or 1
    local options = options or { max_depth = 1 }
    local response, records
    local f_bm = FILE_BITMAP.NodeId | FILE_BITMAP.ParentDirId
                 | FILE_BITMAP.LongName | FILE_BITMAP.UnixPrivileges
                 | FILE_BITMAP.CreationDate | FILE_BITMAP.ModificationDate
                 | FILE_BITMAP.ExtendedDataForkSize
    local d_bm = DIR_BITMAP.NodeId | DIR_BITMAP.ParentDirId
                 | DIR_BITMAP.LongName | DIR_BITMAP.UnixPrivileges
                 | DIR_BITMAP.CreationDate | DIR_BITMAP.ModificationDate

    local TYPE_DIR = 0x80

    if ( parent == nil ) then
      status, response = self:WalkDirTree( str_path )
      if ( not status ) then
        return false, response
      end

      parent = {}
      parent.vol_id = response.VolumeId
      parent.did = response.DirectoryId
      parent.dir_name = response.DirectoryName or ""
      parent.out_tbl = {}
    end

    if ( options and options.max_depth and options.max_depth > 0 and options.max_depth < depth ) then
      return false, "Max Depth Reached"
    end

    local path = { type=PATH_TYPE.LongName, name="" }
    response = self.proto:fp_enumerate_ext2( parent.vol_id, parent.did, f_bm, d_bm, 1000, 1, 1000 * 300, path)

    if response:getErrorCode() ~= ERROR.FPNoErr then
      return false, response:getErrorMessage()
    end

    records = response.result or {}
    local dir_items = {}

    for _, record in ipairs( records ) do
      local isdir = record.type == TYPE_DIR
      -- Skip non-directories if option "dironly" is set
      if isdir or not options.dironly then
        local item = {type = record.type,
                      name = record.LongName,
                      id = record.NodeId,
                      fsize = record.ExtendedDataForkSize or 0}
        local privs = (record.UnixPrivileges or {}).ua_permissions
        if privs then
          item.uid = record.UnixPrivileges.uid
          item.gid = record.UnixPrivileges.gid
          item.privs = (isdir and "d" or "-") .. Util.decode_unix_privs(privs)
        end
        item.create = Util.time_to_string(record.CreationDate)
        item.modify = Util.time_to_string(record.ModificationDate)
        table.insert( dir_items, item )
      end
      if isdir then
        self:Dir("", options, depth + 1, { vol_id = parent.vol_id, did=record.NodeId, dir_name=record.LongName, out_tbl=dir_items} )
      end
    end

    table.insert( parent.out_tbl, dir_items )

    return true, parent.out_tbl
  end,

  --- Displays a directory tree
  --
  -- @param str_path string containing the sharepoint and the directory
  -- @param options table options containing zero or more of the options
  -- <code>max_depth</code> and <code>dironly</code>
  -- @return dirtree table containing the directories
  DirTree = function( self, str_path, options )
    local options = options or {}
    options.dironly = true
    return self:Dir( str_path, options )
  end,

  --- List the AFP sharepoints
  --
  -- @return volumes table containing the sharepoints
  ListShares = function( self )
    local response
    response = self.proto:fp_get_srvr_parms( )

    if response:getErrorCode() ~= ERROR.FPNoErr then
      return false, response:getErrorMessage()
    end

    return true, response.result.volumes
  end,

  --- Determine the sharepoint permissions
  --
  -- @param vol_name string containing the name of the volume
  -- @return status boolean true on success, false on failure
  -- @return acls table containing the volume acls as returned by <code>acls_to_long_string</code>
  GetSharePermissions = function( self, vol_name )
    local status, response, acls

    response = self.proto:fp_open_vol( VOL_BITMAP.ID, vol_name )

    if response:getErrorCode() == ERROR.FPNoErr then
      local vol_id = response.result.volume_id
      local path = { type = PATH_TYPE.LongName, name = "" }

      response = self.proto:fp_get_file_dir_parms( vol_id, 2, FILE_BITMAP.ALL, DIR_BITMAP.ALL, path )
      if response:getErrorCode() == ERROR.FPNoErr then
        if ( response.result.dir and response.result.dir.AccessRights ) then
          acls = Util.acls_to_long_string(response.result.dir.AccessRights)
          acls.name = nil
        end
      end
      self.proto:fp_close_vol( vol_id )
    end

    return true, acls
  end,

  --- Gets the Unix permissions of a file
  -- @param vol_name string containing the name of the volume
  -- @param str_path string containing the name of the file
  -- @return status true on success, false on failure
  -- @return acls table (on success) containing the following fields
  --  <code>uid</code> - a numeric user identifier
  --  <code>gid</code> - a numeric group identifier
  --  <code>privs</code> - a string value representing the permissions
  --                       eg: drwx------
  -- @return err string (on failure) containing the error message
  GetFileUnixPermissions = function(self, vol_name, str_path)
    local response = self.proto:fp_open_vol( VOL_BITMAP.ID, vol_name )

    if ( response:getErrorCode() ~= ERROR.FPNoErr ) then
      return false, response:getErrorMessage()
    end

    local vol_id = response.result.volume_id
    local path = { type = PATH_TYPE.LongName, name = str_path }
    response = self.proto:fp_get_file_dir_parms( vol_id, 2, FILE_BITMAP.UnixPrivileges, DIR_BITMAP.UnixPrivileges, path )
    if ( response:getErrorCode() ~= ERROR.FPNoErr ) then
      return false, response:getErrorMessage()
    end

    local item = response.result.file or response.result.dir
    local item_type = ( response.result.file ) and "-" or "d"
    local privs = item.UnixPrivileges and item.UnixPrivileges.ua_permissions
    if ( privs ) then
      local uid = item.UnixPrivileges.uid
      local gid = item.UnixPrivileges.gid
      local str_privs = item_type .. Util.decode_unix_privs(privs)
      return true, { uid = uid, gid = gid, privs = str_privs }
    end
  end,

  --- Gets the Unix permissions of a file
  -- @param vol_name string containing the name of the volume
  -- @param str_path string containing the name of the file
  -- @return status true on success, false on failure
  -- @return size containing the size of the file in bytes
  -- @return err string (on failure) containing the error message
  GetFileSize = function( self, vol_name, str_path )
    local response = self.proto:fp_open_vol( VOL_BITMAP.ID, vol_name )

    if ( response:getErrorCode() ~= ERROR.FPNoErr ) then
      return false, response:getErrorMessage()
    end

    local vol_id = response.result.volume_id
    local path = { type = PATH_TYPE.LongName, name = str_path }
    response = self.proto:fp_get_file_dir_parms( vol_id, 2, FILE_BITMAP.ExtendedDataForkSize, 0, path )
    if ( response:getErrorCode() ~= ERROR.FPNoErr ) then
      return false, response:getErrorMessage()
    end

    return true, response.result.file and response.result.file.ExtendedDataForkSize or 0
  end,


  --- Returns the creation, modification and backup dates of a file
  -- @param vol_name string containing the name of the volume
  -- @param str_path string containing the name of the file
  -- @return status true on success, false on failure
  -- @return dates table containing the following fields:
  --  <code>create</code> - Creation date of the file
  --  <code>modify</code> - Modification date of the file
  --  <code>backup</code> - Date of last backup
  -- @return err string (on failure) containing the error message
  GetFileDates = function( self, vol_name, str_path )
    local response = self.proto:fp_open_vol( VOL_BITMAP.ID, vol_name )

    if ( response:getErrorCode() ~= ERROR.FPNoErr ) then
      return false, response:getErrorMessage()
    end

    local vol_id = response.result.volume_id
    local path = { type = PATH_TYPE.LongName, name = str_path }
    local f_bm = FILE_BITMAP.CreationDate + FILE_BITMAP.ModificationDate + FILE_BITMAP.BackupDate
    local d_bm = DIR_BITMAP.CreationDate + DIR_BITMAP.ModificationDate + DIR_BITMAP.BackupDate
    response = self.proto:fp_get_file_dir_parms( vol_id, 2, f_bm, d_bm, path )
    if ( response:getErrorCode() ~= ERROR.FPNoErr ) then
      return false, response:getErrorMessage()
    end

    local item = response.result.file or response.result.dir

    local create = Util.time_to_string(item.CreationDate)
    local backup = Util.time_to_string(item.BackupDate)
    local modify = Util.time_to_string(item.ModificationDate)

    return true, { create = create, backup = backup, modify = modify }
  end,

  --- Creates a new directory on the AFP sharepoint
  --
  -- @param str_path containing the sharepoint and the directory
  -- @return status boolean true on success, false on failure
  -- @return dirId number containing the new directory id
  CreateDir = function( self, str_path )
    local status, response, vol_id, did
    local p = Util.SplitPath( str_path )
    local path = { type=PATH_TYPE.LongName, name=p.file }


    status, response = self:WalkDirTree( p.dir )
    if not status then
      return false, response
    end

    response = self.proto:fp_create_dir( response.VolumeId, response.DirectoryId, path )
    if response:getErrorCode() ~= ERROR.FPNoErr then
      return false, response:getErrorMessage()
    end

    return true, response
  end,

}

--- Util class, containing some static functions used by Helper and Proto
Util =
{
  --- Pads a string with zeroes
  --
  -- @param str string containing the string to be padded
  -- @param len number containing the length of the new string
  -- @return str string containing the new string
  ZeroPad = function( str, len )
    return str .. string.rep('\0', len - str:len())
  end,

  --- Splits a path into two pieces, directory and file
  --
  -- @param str_path string containing the path to split
  -- @return dir table containing <code>dir</code> and <code>file</code>
  SplitPath = function( str_path )
    local elements = stringaux.strsplit("/", str_path)
    local dir, file = "", ""

    if #elements < 2 then
      return nil
    end

    file = elements[#elements]

    table.remove( elements, #elements )
    dir = table.concat( elements, "/" )

    return { ['dir']=dir, ['file']=file }

  end,

  --- Converts a group bitmask of Search, Read and Write to table
  --
  -- @param acls number containing bitmasked acls
  -- @return table of ACLs
  acl_group_to_long_string = function(acls)

    local acl_table = {}

    if ( acls & ACLS.OwnerSearch ) == ACLS.OwnerSearch then
      table.insert( acl_table, "Search")
    end

    if ( acls & ACLS.OwnerRead ) == ACLS.OwnerRead then
      table.insert( acl_table, "Read")
    end

    if ( acls & ACLS.OwnerWrite ) == ACLS.OwnerWrite then
      table.insert( acl_table, "Write")
    end

    return acl_table
  end,


  --- Converts a numeric acl to string
  --
  -- @param acls number containing acls as received from <code>fp_get_file_dir_parms</code>
  -- @return table of long ACLs
  acls_to_long_string = function( acls )

    local owner = Util.acl_group_to_long_string( ( acls & 255 ) )
    local group = Util.acl_group_to_long_string( ( (acls >> 8) & 255 ) )
    local everyone = Util.acl_group_to_long_string( ( (acls >> 16) & 255 ) )
    local user = Util.acl_group_to_long_string( ( (acls >> 24) & 255 ) )

    local blank = ( acls & ACLS.BlankAccess ) == ACLS.BlankAccess and "Blank" or nil
    local isowner = ( acls & ACLS.UserIsOwner ) == ACLS.UserIsOwner and "IsOwner" or nil

    local options = {}

    if blank then
      table.insert(options, "Blank")
    end

    if isowner then
      table.insert(options, "IsOwner")
    end

    local acls_tbl = {}

    table.insert( acls_tbl, string.format( "Owner: %s", table.concat(owner, ",") ) )
    table.insert( acls_tbl, string.format( "Group: %s", table.concat(group, ",") ) )
    table.insert( acls_tbl, string.format( "Everyone: %s", table.concat(everyone, ",") ) )
    table.insert( acls_tbl, string.format( "User: %s", table.concat(user, ",") ) )

    if #options > 0 then
      table.insert( acls_tbl, string.format( "Options: %s", table.concat(options, ",") ) )
    end

    return acls_tbl

  end,


  --- Converts AFP file timestamp to a standard text format
  --
  -- @param timestamp value returned by FPEnumerateExt2 or FPGetFileDirParms
  -- @return string representing the timestamp
  time_to_string = function (timestamp)
    return timestamp and datetime.format_timestamp(timestamp + TIME_OFFSET) or nil
  end,


  --- Decodes the UnixPrivileges.ua_permissions value
  --
  -- @param privs number containing the UnixPrivileges.ua_permissions value
  -- @return string containing the ACL characters
  decode_unix_privs = function( privs )
    local owner = ( ( privs & ACLS.OwnerRead ) == ACLS.OwnerRead ) and "r" or "-"
    owner = owner .. (( ( privs & ACLS.OwnerWrite ) == ACLS.OwnerWrite ) and "w" or "-")
    owner = owner .. (( ( privs & ACLS.OwnerSearch ) == ACLS.OwnerSearch ) and "x" or "-")

    local group = ( ( privs & ACLS.GroupRead ) == ACLS.GroupRead ) and "r" or "-"
    group = group .. (( ( privs & ACLS.GroupWrite ) == ACLS.GroupWrite ) and "w" or "-")
    group = group .. (( ( privs & ACLS.GroupSearch ) == ACLS.GroupSearch ) and "x" or "-")

    local other = ( ( privs & ACLS.EveryoneRead ) == ACLS.EveryoneRead ) and "r" or "-"
    other = other .. (( ( privs & ACLS.EveryoneWrite ) == ACLS.EveryoneWrite ) and "w" or "-")
    other = other .. (( ( privs & ACLS.EveryoneSearch ) == ACLS.EveryoneSearch ) and "x" or "-")

    return owner .. group .. other
  end,


  --- Decodes a file bitmap
  --
  -- @param bitmap number containing the bitmap
  -- @param data string containing the data to be decoded
  -- @param pos number containing the offset into data
  -- @return pos number containing the new offset after decoding
  -- @return file table containing the decoded values
  decode_file_bitmap = function( bitmap, data, pos )
    local origpos = pos
    local file = {}

    if ( ( bitmap & FILE_BITMAP.Attributes ) == FILE_BITMAP.Attributes ) then
      file.Attributes, pos = string.unpack(">I2", data, pos )
    end
    if ( ( bitmap & FILE_BITMAP.ParentDirId ) == FILE_BITMAP.ParentDirId ) then
      file.ParentDirId, pos = string.unpack(">I4", data, pos )
    end
    if ( ( bitmap & FILE_BITMAP.CreationDate ) == FILE_BITMAP.CreationDate ) then
      file.CreationDate, pos = string.unpack(">I4", data, pos )
    end
    if ( ( bitmap & FILE_BITMAP.ModificationDate ) == FILE_BITMAP.ModificationDate ) then
      file.ModificationDate, pos = string.unpack(">I4", data, pos )
    end
    if ( ( bitmap & FILE_BITMAP.BackupDate ) == FILE_BITMAP.BackupDate ) then
      file.BackupDate, pos = string.unpack(">I4", data, pos )
    end
    if ( ( bitmap & FILE_BITMAP.FinderInfo ) == FILE_BITMAP.FinderInfo ) then
      file.FinderInfo, pos = string.unpack("c32", data, pos )
    end
    if ( ( bitmap & FILE_BITMAP.LongName ) == FILE_BITMAP.LongName ) then
      local offset
      offset, pos = string.unpack(">I2", data, pos)
      if offset > 0 then
        file.LongName = string.unpack("s1", data, origpos + offset)
      end
    end
    if ( ( bitmap & FILE_BITMAP.ShortName ) == FILE_BITMAP.ShortName ) then
      local offset
      offset, pos = string.unpack(">I2", data, pos)
      if offset > 0 then
        file.ShortName = string.unpack("s1", data, origpos + offset)
      end
    end
    if ( ( bitmap & FILE_BITMAP.NodeId ) == FILE_BITMAP.NodeId ) then
      file.NodeId, pos = string.unpack(">I4", data, pos )
    end
    if ( ( bitmap & FILE_BITMAP.DataForkSize ) == FILE_BITMAP.DataForkSize ) then
      file.DataForkSize, pos = string.unpack(">I4", data, pos )
    end
    if ( ( bitmap & FILE_BITMAP.ResourceForkSize ) == FILE_BITMAP.ResourceForkSize ) then
      file.ResourceForkSize, pos = string.unpack(">I4", data, pos )
    end
    if ( ( bitmap & FILE_BITMAP.ExtendedDataForkSize ) == FILE_BITMAP.ExtendedDataForkSize ) then
      file.ExtendedDataForkSize, pos = string.unpack(">I8", data, pos )
    end
    if ( ( bitmap & FILE_BITMAP.LaunchLimit ) == FILE_BITMAP.LaunchLimit ) then
      -- should not be set as it's deprecated according to:
      -- http://developer.apple.com/mac/library/documentation/Networking/Reference/AFP_Reference/Reference/reference.html#//apple_ref/doc/c_ref/kFPLaunchLimitBit
    end
    if ( ( bitmap & FILE_BITMAP.UTF8Name ) == FILE_BITMAP.UTF8Name ) then
      local offset
      offset, pos = string.unpack(">I2", data, pos)
      if offset > 0 then
        -- +4 to skip over the encoding hint
        file.UTF8Name = string.unpack(">s2", data, origpos + offset + 4)
      end
      -- Skip over the trailing pad
      pos = pos + 4
    end
    if ( ( bitmap & FILE_BITMAP.ExtendedResourceForkSize ) == FILE_BITMAP.ExtendedResourceForkSize ) then
      file.ExtendedResourceForkSize, pos = string.unpack(">I8", data, pos )
    end
    if ( ( bitmap & FILE_BITMAP.UnixPrivileges ) == FILE_BITMAP.UnixPrivileges ) then
      local unixprivs = {}
      unixprivs.uid, unixprivs.gid, unixprivs.permissions, unixprivs.ua_permissions, pos = string.unpack(">I4I4I4I4", data, pos)
      file.UnixPrivileges = unixprivs
    end
    return pos, file
  end,

  --- Decodes a directory bitmap
  --
  -- @param bitmap number containing the bitmap
  -- @param data string containing the data to be decoded
  -- @param pos number containing the offset into data
  -- @return pos number containing the new offset after decoding
  -- @return dir table containing the decoded values
  decode_dir_bitmap = function( bitmap, data, pos )
    local origpos = pos
    local dir = {}

    if ( ( bitmap & DIR_BITMAP.Attributes ) == DIR_BITMAP.Attributes ) then
      dir.Attributes, pos = string.unpack(">I2", data, pos)
    end
    if ( ( bitmap & DIR_BITMAP.ParentDirId ) == DIR_BITMAP.ParentDirId ) then
      dir.ParentDirId, pos = string.unpack(">I4", data, pos)
    end
    if ( ( bitmap & DIR_BITMAP.CreationDate ) == DIR_BITMAP.CreationDate ) then
      dir.CreationDate, pos = string.unpack(">I4", data, pos)
    end
    if ( ( bitmap & DIR_BITMAP.ModificationDate ) == DIR_BITMAP.ModificationDate ) then
      dir.ModificationDate, pos = string.unpack(">I4", data, pos)
    end
    if ( ( bitmap & DIR_BITMAP.BackupDate ) == DIR_BITMAP.BackupDate ) then
      dir.BackupDate, pos = string.unpack(">I4", data, pos)
    end
    if ( ( bitmap & DIR_BITMAP.FinderInfo ) == DIR_BITMAP.FinderInfo ) then
      dir.FinderInfo, pos = string.unpack("c32", data, pos)
    end
    if ( ( bitmap & DIR_BITMAP.LongName ) == DIR_BITMAP.LongName ) then
      local offset
      offset, pos = string.unpack(">I2", data, pos)

      -- TODO: This really needs to be addressed someway
      -- Barely, never, ever happens, which makes it difficult to pin down
      -- http://developer.apple.com/mac/library/documentation/Networking/Reference/AFP_Reference/Reference/reference.html#//apple_ref/doc/uid/TP40003548-CH3-CHDBEHBG

      -- [nnposter, 8/1/2020] URL above not available. Offset below (pos+4)
      -- seems illogical, as it partially covers two separate fields: bottom
      -- half of the file ID and the entire offspring count.
      -- Disabled the hack, as it interfered with valid cases

      --[[
      local justkidding = string.unpack(">I4", data, pos + 4)
      if ( justkidding ~= 0 ) then
        offset = 5
      end
      ]]

      if offset > 0 then
        dir.LongName = string.unpack("s1", data, origpos + offset)
      end
    end
    if ( ( bitmap & DIR_BITMAP.ShortName ) == DIR_BITMAP.ShortName ) then
      local offset
      offset, pos = string.unpack(">I2", data, pos)
      if offset > 0 then
        dir.ShortName = string.unpack("s1", data, origpos + offset)
      end
    end
    if ( ( bitmap & DIR_BITMAP.NodeId ) == DIR_BITMAP.NodeId ) then
      dir.NodeId, pos = string.unpack(">I4", data, pos )
    end
    if ( ( bitmap & DIR_BITMAP.OffspringCount ) == DIR_BITMAP.OffspringCount ) then
      dir.OffspringCount, pos = string.unpack(">I2", data, pos )
    end
    if ( ( bitmap & DIR_BITMAP.OwnerId ) == DIR_BITMAP.OwnerId ) then
      dir.OwnerId, pos = string.unpack(">I4", data, pos )
    end
    if ( ( bitmap & DIR_BITMAP.GroupId ) == DIR_BITMAP.GroupId ) then
      dir.GroupId, pos = string.unpack(">I4", data, pos )
    end
    if ( ( bitmap & DIR_BITMAP.AccessRights ) == DIR_BITMAP.AccessRights ) then
      dir.AccessRights, pos = string.unpack(">I4", data, pos )
    end
    if ( ( bitmap & DIR_BITMAP.UTF8Name ) == DIR_BITMAP.UTF8Name ) then
      local offset
      offset, pos = string.unpack(">I2", data, pos)
      if offset > 0 then
        -- +4 to skip over the encoding hint
        dir.UTF8Name = string.unpack(">s2", data, origpos + offset + 4)
      end
      -- Skip over the trailing pad
      pos = pos + 4
    end
    if ( ( bitmap & DIR_BITMAP.UnixPrivileges ) == DIR_BITMAP.UnixPrivileges ) then
      local unixprivs = {}

      unixprivs.uid, unixprivs.gid, unixprivs.permissions, unixprivs.ua_permissions, pos = string.unpack(">I4I4I4I4", data, pos)
      dir.UnixPrivileges = unixprivs
    end
    return pos, dir
  end,

}




return _ENV;

Youez - 2016 - github.com/yon3zu
LinuXploit