Line data    Source code

       1             : /*
       2             :    Unix SMB/CIFS implementation.
       3             :    smb2 lib
       4             :    Copyright (C) Stefan Metzmacher 2012
       5             : 
       6             :    This program is free software; you can redistribute it and/or modify
       7             :    it under the terms of the GNU General Public License as published by
       8             :    the Free Software Foundation; either version 3 of the License, or
       9             :    (at your option) any later version.
      10             : 
      11             :    This program is distributed in the hope that it will be useful,
      12             :    but WITHOUT ANY WARRANTY; without even the implied warranty of
      13             :    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      14             :    GNU General Public License for more details.
      15             : 
      16             :    You should have received a copy of the GNU General Public License
      17             :    along with this program.  If not, see <http://www.gnu.org/licenses/>.
      18             : */
      19             : 
      20             : #include "includes.h"
      21             : #include "system/network.h"
      22             : #include "lib/util/tevent_ntstatus.h"
      23             : #include "smb_common.h"
      24             : #include "smbXcli_base.h"
      25             : 
      26             : struct smb2cli_query_info_state {
      27             :         uint8_t fixed[0x28];
      28             :         uint8_t dyn_pad[1];
      29             :         uint32_t max_output_length;
      30             :         struct iovec *recv_iov;
      31             :         DATA_BLOB out_output_buffer;
      32             :         bool out_valid;
      33             : };
      34             : 
      35             : static void smb2cli_query_info_done(struct tevent_req *subreq);
      36             : 
      37       10875 : struct tevent_req *smb2cli_query_info_send(TALLOC_CTX *mem_ctx,
      38             :                                            struct tevent_context *ev,
      39             :                                            struct smbXcli_conn *conn,
      40             :                                            uint32_t timeout_msec,
      41             :                                            struct smbXcli_session *session,
      42             :                                            struct smbXcli_tcon *tcon,
      43             :                                            uint8_t in_info_type,
      44             :                                            uint8_t in_file_info_class,
      45             :                                            uint32_t in_max_output_length,
      46             :                                            const DATA_BLOB *in_input_buffer,
      47             :                                            uint32_t in_additional_info,
      48             :                                            uint32_t in_flags,
      49             :                                            uint64_t in_fid_persistent,
      50             :                                            uint64_t in_fid_volatile)
      51             : {
      52           0 :         struct tevent_req *req, *subreq;
      53           0 :         struct smb2cli_query_info_state *state;
      54           0 :         uint8_t *fixed;
      55           0 :         uint8_t *dyn;
      56           0 :         size_t dyn_len;
      57       10875 :         uint16_t input_buffer_offset = 0;
      58       10875 :         uint32_t input_buffer_length = 0;
      59             : 
      60       10875 :         req = tevent_req_create(mem_ctx, &state,
      61             :                                 struct smb2cli_query_info_state);
      62       10875 :         if (req == NULL) {
      63           0 :                 return NULL;
      64             :         }
      65       10875 :         state->max_output_length = in_max_output_length;
      66             : 
      67       10875 :         if (in_input_buffer) {
      68          23 :                 input_buffer_offset = SMB2_HDR_BODY+0x28;
      69          23 :                 input_buffer_length = in_input_buffer->length;
      70             :         }
      71             : 
      72       10875 :         fixed = state->fixed;
      73             : 
      74       10875 :         SSVAL(fixed, 0x00, 0x29);
      75       10875 :         SCVAL(fixed, 0x02, in_info_type);
      76       10875 :         SCVAL(fixed, 0x03, in_file_info_class); /* reserved */
      77       10875 :         SIVAL(fixed, 0x04, in_max_output_length);
      78       10875 :         SSVAL(fixed, 0x08, input_buffer_offset);
      79       10875 :         SSVAL(fixed, 0x0A, 0); /* reserved */
      80       10875 :         SIVAL(fixed, 0x0C, input_buffer_length);
      81       10875 :         SIVAL(fixed, 0x10, in_additional_info);
      82       10875 :         SIVAL(fixed, 0x14, in_flags);
      83       10875 :         SBVAL(fixed, 0x18, in_fid_persistent);
      84       10875 :         SBVAL(fixed, 0x20, in_fid_volatile);
      85             : 
      86       10875 :         if (input_buffer_length > 0) {
      87          23 :                 dyn = in_input_buffer->data;
      88          23 :                 dyn_len = in_input_buffer->length;
      89             :         } else {
      90       10852 :                 dyn = state->dyn_pad;
      91       10852 :                 dyn_len = sizeof(state->dyn_pad);
      92             :         }
      93             : 
      94       10875 :         subreq = smb2cli_req_send(state, ev, conn, SMB2_OP_GETINFO,
      95             :                                   0, 0, /* flags */
      96             :                                   timeout_msec,
      97             :                                   tcon,
      98             :                                   session,
      99       10875 :                                   state->fixed, sizeof(state->fixed),
     100             :                                   dyn, dyn_len,
     101             :                                   in_max_output_length); /* max_dyn_len */
     102       10875 :         if (tevent_req_nomem(subreq, req)) {
     103           0 :                 return tevent_req_post(req, ev);
     104             :         }
     105       10875 :         tevent_req_set_callback(subreq, smb2cli_query_info_done, req);
     106       10875 :         return req;
     107             : }
     108             : 
     109       10875 : static void smb2cli_query_info_done(struct tevent_req *subreq)
     110             : {
     111           0 :         struct tevent_req *req =
     112       10875 :                 tevent_req_callback_data(subreq,
     113             :                 struct tevent_req);
     114           0 :         struct smb2cli_query_info_state *state =
     115       10875 :                 tevent_req_data(req,
     116             :                 struct smb2cli_query_info_state);
     117           0 :         NTSTATUS status;
     118           0 :         struct iovec *iov;
     119           0 :         uint8_t *fixed;
     120           0 :         uint8_t *dyn;
     121           0 :         size_t dyn_len;
     122       10875 :         uint32_t dyn_ofs = SMB2_HDR_BODY + 0x08;
     123           0 :         uint32_t output_buffer_offset;
     124           0 :         uint32_t output_buffer_length;
     125           0 :         static const struct smb2cli_req_expected_response expected[] = {
     126             :         {
     127             :                 .status = NT_STATUS_OK,
     128             :                 .body_size = 0x09
     129             :         },
     130             :         {
     131             :                 .status = STATUS_BUFFER_OVERFLOW,
     132             :                 .body_size = 0x09
     133             :         }
     134             :         };
     135             : 
     136       10875 :         status = smb2cli_req_recv(subreq, state, &iov,
     137             :                                   expected, ARRAY_SIZE(expected));
     138       10875 :         TALLOC_FREE(subreq);
     139       10875 :         if (NT_STATUS_EQUAL(status, STATUS_BUFFER_OVERFLOW)) {
     140             :                 /* no error */
     141             :         } else {
     142       10875 :                 if (tevent_req_nterror(req, status)) {
     143          47 :                         return;
     144             :                 }
     145             :         }
     146             : 
     147       10828 :         state->recv_iov = iov;
     148       10828 :         fixed = (uint8_t *)iov[1].iov_base;
     149       10828 :         dyn = (uint8_t *)iov[2].iov_base;
     150       10828 :         dyn_len = iov[2].iov_len;
     151             : 
     152       10828 :         output_buffer_offset = SVAL(fixed, 0x02);
     153       10828 :         output_buffer_length = IVAL(fixed, 0x04);
     154             : 
     155       10828 :         if ((output_buffer_offset > 0) && (output_buffer_length > 0)) {
     156       10708 :                 if (output_buffer_offset != dyn_ofs) {
     157           0 :                         tevent_req_nterror(
     158             :                                 req, NT_STATUS_INVALID_NETWORK_RESPONSE);
     159           0 :                         return;
     160             :                 }
     161             : 
     162       10708 :                 if (output_buffer_length > dyn_len) {
     163           0 :                         tevent_req_nterror(
     164             :                                 req, NT_STATUS_INVALID_NETWORK_RESPONSE);
     165           0 :                         return;
     166             :                 }
     167             : 
     168       10708 :                 if (output_buffer_length > state->max_output_length) {
     169           0 :                         tevent_req_nterror(
     170             :                                 req, NT_STATUS_INVALID_NETWORK_RESPONSE);
     171           0 :                         return;
     172             :                 }
     173             : 
     174       10708 :                 state->out_output_buffer.data = dyn;
     175       10708 :                 state->out_output_buffer.length = output_buffer_length;
     176             :         }
     177             : 
     178       10828 :         state->out_valid = true;
     179             : 
     180       10828 :         if (tevent_req_nterror(req, status)) {
     181           0 :                 return;
     182             :         }
     183             : 
     184       10828 :         tevent_req_done(req);
     185             : }
     186             : 
     187       10875 : NTSTATUS smb2cli_query_info_recv(struct tevent_req *req,
     188             :                                  TALLOC_CTX *mem_ctx,
     189             :                                  DATA_BLOB *out_output_buffer)
     190             : {
     191           0 :         struct smb2cli_query_info_state *state =
     192       10875 :                 tevent_req_data(req,
     193             :                 struct smb2cli_query_info_state);
     194       10875 :         NTSTATUS status = NT_STATUS_OK;
     195             : 
     196       10875 :         if (tevent_req_is_nterror(req, &status) && !state->out_valid) {
     197          47 :                 if (out_output_buffer) {
     198          47 :                         *out_output_buffer = data_blob_null;
     199             :                 }
     200          47 :                 tevent_req_received(req);
     201          47 :                 return status;
     202             :         }
     203             : 
     204       10828 :         talloc_steal(mem_ctx, state->recv_iov);
     205       10828 :         if (out_output_buffer) {
     206       10828 :                 *out_output_buffer = state->out_output_buffer;
     207             :         }
     208             : 
     209       10828 :         tevent_req_received(req);
     210       10828 :         return status;
     211             : }
     212             : 
     213         130 : NTSTATUS smb2cli_query_info(struct smbXcli_conn *conn,
     214             :                             uint32_t timeout_msec,
     215             :                             struct smbXcli_session *session,
     216             :                             struct smbXcli_tcon *tcon,
     217             :                             uint8_t in_info_type,
     218             :                             uint8_t in_file_info_class,
     219             :                             uint32_t in_max_output_length,
     220             :                             const DATA_BLOB *in_input_buffer,
     221             :                             uint32_t in_additional_info,
     222             :                             uint32_t in_flags,
     223             :                             uint64_t in_fid_persistent,
     224             :                             uint64_t in_fid_volatile,
     225             :                             TALLOC_CTX *mem_ctx,
     226             :                             DATA_BLOB *out_output_buffer)
     227             : {
     228         130 :         TALLOC_CTX *frame = talloc_stackframe();
     229           0 :         struct tevent_context *ev;
     230           0 :         struct tevent_req *req;
     231         130 :         NTSTATUS status = NT_STATUS_NO_MEMORY;
     232             : 
     233         130 :         if (smbXcli_conn_has_async_calls(conn)) {
     234             :                 /*
     235             :                  * Can't use sync call while an async call is in flight
     236             :                  */
     237           0 :                 status = NT_STATUS_INVALID_PARAMETER_MIX;
     238           0 :                 goto fail;
     239             :         }
     240         130 :         ev = samba_tevent_context_init(frame);
     241         130 :         if (ev == NULL) {
     242           0 :                 goto fail;
     243             :         }
     244         130 :         req = smb2cli_query_info_send(frame, ev,
     245             :                                       conn, timeout_msec,
     246             :                                       session, tcon,
     247             :                                       in_info_type,
     248             :                                       in_file_info_class,
     249             :                                       in_max_output_length,
     250             :                                       in_input_buffer,
     251             :                                       in_additional_info,
     252             :                                       in_flags,
     253             :                                       in_fid_persistent,
     254             :                                       in_fid_volatile);
     255         130 :         if (req == NULL) {
     256           0 :                 goto fail;
     257             :         }
     258         130 :         if (!tevent_req_poll_ntstatus(req, ev, &status)) {
     259           0 :                 goto fail;
     260             :         }
     261         130 :         status = smb2cli_query_info_recv(req, mem_ctx,
     262             :                                          out_output_buffer);
     263         130 :  fail:
     264         130 :         TALLOC_FREE(frame);
     265         130 :         return status;
     266             : }