1 /*
2 Unix SMB/CIFS implementation.
3 smb2 lib
4 Copyright (C) Stefan Metzmacher 2012
5
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
10
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
15
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
18 */
19
20 #include "includes.h"
21 #include "system/network.h"
22 #include "lib/util/tevent_ntstatus.h"
23 #include "smb_common.h"
24 #include "smbXcli_base.h"
25
26 struct smb2cli_query_info_state {
27 uint8_t fixed[0x28];
28 uint8_t dyn_pad[1];
29 uint32_t max_output_length;
30 struct iovec *recv_iov;
31 DATA_BLOB out_output_buffer;
32 bool out_valid;
33 };
34
35 static void smb2cli_query_info_done(struct tevent_req *subreq);
36
smb2cli_query_info_send(TALLOC_CTX * mem_ctx,struct tevent_context * ev,struct smbXcli_conn * conn,uint32_t timeout_msec,struct smbXcli_session * session,struct smbXcli_tcon * tcon,uint8_t in_info_type,uint8_t in_file_info_class,uint32_t in_max_output_length,const DATA_BLOB * in_input_buffer,uint32_t in_additional_info,uint32_t in_flags,uint64_t in_fid_persistent,uint64_t in_fid_volatile)37 struct tevent_req *smb2cli_query_info_send(TALLOC_CTX *mem_ctx,
38 struct tevent_context *ev,
39 struct smbXcli_conn *conn,
40 uint32_t timeout_msec,
41 struct smbXcli_session *session,
42 struct smbXcli_tcon *tcon,
43 uint8_t in_info_type,
44 uint8_t in_file_info_class,
45 uint32_t in_max_output_length,
46 const DATA_BLOB *in_input_buffer,
47 uint32_t in_additional_info,
48 uint32_t in_flags,
49 uint64_t in_fid_persistent,
50 uint64_t in_fid_volatile)
51 {
52 struct tevent_req *req, *subreq;
53 struct smb2cli_query_info_state *state;
54 uint8_t *fixed;
55 uint8_t *dyn;
56 size_t dyn_len;
57 uint16_t input_buffer_offset = 0;
58 uint32_t input_buffer_length = 0;
59
60 req = tevent_req_create(mem_ctx, &state,
61 struct smb2cli_query_info_state);
62 if (req == NULL) {
63 return NULL;
64 }
65 state->max_output_length = in_max_output_length;
66
67 if (in_input_buffer) {
68 input_buffer_offset = SMB2_HDR_BODY+0x28;
69 input_buffer_length = in_input_buffer->length;
70 }
71
72 fixed = state->fixed;
73
74 SSVAL(fixed, 0x00, 0x29);
75 SCVAL(fixed, 0x02, in_info_type);
76 SCVAL(fixed, 0x03, in_file_info_class); /* reserved */
77 SIVAL(fixed, 0x04, in_max_output_length);
78 SSVAL(fixed, 0x08, input_buffer_offset);
79 SSVAL(fixed, 0x0A, 0); /* reserved */
80 SIVAL(fixed, 0x0C, input_buffer_length);
81 SIVAL(fixed, 0x10, in_additional_info);
82 SIVAL(fixed, 0x14, in_flags);
83 SBVAL(fixed, 0x18, in_fid_persistent);
84 SBVAL(fixed, 0x20, in_fid_volatile);
85
86 if (input_buffer_length > 0) {
87 dyn = in_input_buffer->data;
88 dyn_len = in_input_buffer->length;
89 } else {
90 dyn = state->dyn_pad;
91 dyn_len = sizeof(state->dyn_pad);
92 }
93
94 subreq = smb2cli_req_send(state, ev, conn, SMB2_OP_GETINFO,
95 0, 0, /* flags */
96 timeout_msec,
97 tcon,
98 session,
99 state->fixed, sizeof(state->fixed),
100 dyn, dyn_len,
101 in_max_output_length); /* max_dyn_len */
102 if (tevent_req_nomem(subreq, req)) {
103 return tevent_req_post(req, ev);
104 }
105 tevent_req_set_callback(subreq, smb2cli_query_info_done, req);
106 return req;
107 }
108
smb2cli_query_info_done(struct tevent_req * subreq)109 static void smb2cli_query_info_done(struct tevent_req *subreq)
110 {
111 struct tevent_req *req =
112 tevent_req_callback_data(subreq,
113 struct tevent_req);
114 struct smb2cli_query_info_state *state =
115 tevent_req_data(req,
116 struct smb2cli_query_info_state);
117 NTSTATUS status;
118 struct iovec *iov;
119 uint8_t *fixed;
120 uint8_t *dyn;
121 size_t dyn_len;
122 uint32_t dyn_ofs = SMB2_HDR_BODY + 0x08;
123 uint32_t output_buffer_offset;
124 uint32_t output_buffer_length;
125 static const struct smb2cli_req_expected_response expected[] = {
126 {
127 .status = NT_STATUS_OK,
128 .body_size = 0x09
129 },
130 {
131 .status = STATUS_BUFFER_OVERFLOW,
132 .body_size = 0x09
133 }
134 };
135
136 status = smb2cli_req_recv(subreq, state, &iov,
137 expected, ARRAY_SIZE(expected));
138 TALLOC_FREE(subreq);
139 if (NT_STATUS_EQUAL(status, STATUS_BUFFER_OVERFLOW)) {
140 /* no error */
141 } else {
142 if (tevent_req_nterror(req, status)) {
143 return;
144 }
145 }
146
147 state->recv_iov = iov;
148 fixed = (uint8_t *)iov[1].iov_base;
149 dyn = (uint8_t *)iov[2].iov_base;
150 dyn_len = iov[2].iov_len;
151
152 output_buffer_offset = SVAL(fixed, 0x02);
153 output_buffer_length = IVAL(fixed, 0x04);
154
155 if ((output_buffer_offset > 0) && (output_buffer_length > 0)) {
156 if (output_buffer_offset != dyn_ofs) {
157 tevent_req_nterror(
158 req, NT_STATUS_INVALID_NETWORK_RESPONSE);
159 return;
160 }
161
162 if (output_buffer_length > dyn_len) {
163 tevent_req_nterror(
164 req, NT_STATUS_INVALID_NETWORK_RESPONSE);
165 return;
166 }
167
168 if (output_buffer_length > state->max_output_length) {
169 tevent_req_nterror(
170 req, NT_STATUS_INVALID_NETWORK_RESPONSE);
171 return;
172 }
173
174 state->out_output_buffer.data = dyn;
175 state->out_output_buffer.length = output_buffer_length;
176 }
177
178 state->out_valid = true;
179
180 if (tevent_req_nterror(req, status)) {
181 return;
182 }
183
184 tevent_req_done(req);
185 }
186
smb2cli_query_info_recv(struct tevent_req * req,TALLOC_CTX * mem_ctx,DATA_BLOB * out_output_buffer)187 NTSTATUS smb2cli_query_info_recv(struct tevent_req *req,
188 TALLOC_CTX *mem_ctx,
189 DATA_BLOB *out_output_buffer)
190 {
191 struct smb2cli_query_info_state *state =
192 tevent_req_data(req,
193 struct smb2cli_query_info_state);
194 NTSTATUS status = NT_STATUS_OK;
195
196 if (tevent_req_is_nterror(req, &status) && !state->out_valid) {
197 if (out_output_buffer) {
198 *out_output_buffer = data_blob_null;
199 }
200 tevent_req_received(req);
201 return status;
202 }
203
204 talloc_steal(mem_ctx, state->recv_iov);
205 if (out_output_buffer) {
206 *out_output_buffer = state->out_output_buffer;
207 }
208
209 tevent_req_received(req);
210 return status;
211 }
212
smb2cli_query_info(struct smbXcli_conn * conn,uint32_t timeout_msec,struct smbXcli_session * session,struct smbXcli_tcon * tcon,uint8_t in_info_type,uint8_t in_file_info_class,uint32_t in_max_output_length,const DATA_BLOB * in_input_buffer,uint32_t in_additional_info,uint32_t in_flags,uint64_t in_fid_persistent,uint64_t in_fid_volatile,TALLOC_CTX * mem_ctx,DATA_BLOB * out_output_buffer)213 NTSTATUS smb2cli_query_info(struct smbXcli_conn *conn,
214 uint32_t timeout_msec,
215 struct smbXcli_session *session,
216 struct smbXcli_tcon *tcon,
217 uint8_t in_info_type,
218 uint8_t in_file_info_class,
219 uint32_t in_max_output_length,
220 const DATA_BLOB *in_input_buffer,
221 uint32_t in_additional_info,
222 uint32_t in_flags,
223 uint64_t in_fid_persistent,
224 uint64_t in_fid_volatile,
225 TALLOC_CTX *mem_ctx,
226 DATA_BLOB *out_output_buffer)
227 {
228 TALLOC_CTX *frame = talloc_stackframe();
229 struct tevent_context *ev;
230 struct tevent_req *req;
231 NTSTATUS status = NT_STATUS_NO_MEMORY;
232
233 if (smbXcli_conn_has_async_calls(conn)) {
234 /*
235 * Can't use sync call while an async call is in flight
236 */
237 status = NT_STATUS_INVALID_PARAMETER_MIX;
238 goto fail;
239 }
240 ev = samba_tevent_context_init(frame);
241 if (ev == NULL) {
242 goto fail;
243 }
244 req = smb2cli_query_info_send(frame, ev,
245 conn, timeout_msec,
246 session, tcon,
247 in_info_type,
248 in_file_info_class,
249 in_max_output_length,
250 in_input_buffer,
251 in_additional_info,
252 in_flags,
253 in_fid_persistent,
254 in_fid_volatile);
255 if (req == NULL) {
256 goto fail;
257 }
258 if (!tevent_req_poll_ntstatus(req, ev, &status)) {
259 goto fail;
260 }
261 status = smb2cli_query_info_recv(req, mem_ctx,
262 out_output_buffer);
263 fail:
264 TALLOC_FREE(frame);
265 return status;
266 }
267