source3/rpc_client/rpc_transport_np.c

   1 /*
   2  *  Unix SMB/CIFS implementation.
   3  *  RPC client transport over named pipes
   4  *  Copyright (C) Volker Lendecke 2009
   5  *
   6  *  This program is free software; you can redistribute it and/or modify
   7  *  it under the terms of the GNU General Public License as published by
   8  *  the Free Software Foundation; either version 3 of the License, or
   9  *  (at your option) any later version.
  10  *
  11  *  This program is distributed in the hope that it will be useful,
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  *  GNU General Public License for more details.
  15  *
  16  *  You should have received a copy of the GNU General Public License
  17  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
  18  */
  19
  20 #include "includes.h"
  21
  22 #undef DBGC_CLASS
  23 #define DBGC_CLASS DBGC_RPC_CLI
  24
  25 struct rpc_transport_np_state {
  26         struct cli_state *cli;
  27         const char *pipe_name;
  28         uint16_t fnum;
  29 };
  30
  31 static int rpc_transport_np_state_destructor(struct rpc_transport_np_state *s)
  32 {
  33         bool ret;
  34
  35         if (s->cli->fd == -1) {
  36                 DEBUG(10, ("socket was closed, no need to send close request.\n"));
  37                 return 0;
  38         }
  39
  40         ret = cli_close(s->cli, s->fnum);
  41         if (!ret) {
  42                 DEBUG(1, ("rpc_transport_np_state_destructor: cli_close "
  43                           "failed on pipe %s. Error was %s\n", s->pipe_name,
  44                           cli_errstr(s->cli)));
  45         }
  46         DEBUG(10, ("rpc_pipe_destructor: closed %s\n", s->pipe_name));
  47         /*
  48          * We can't do much on failure
  49          */
  50         return 0;
  51 }
  52
  53 struct rpc_np_write_state {
  54         size_t size;
  55         size_t written;
  56 };
  57
  58 static void rpc_np_write_done(struct async_req *subreq);
  59
  60 static struct async_req *rpc_np_write_send(TALLOC_CTX *mem_ctx,
  61                                            struct event_context *ev,
  62                                            const uint8_t *data, size_t size,
  63                                            void *priv)
  64 {
  65         struct rpc_transport_np_state *np_transport = talloc_get_type_abort(
  66                 priv, struct rpc_transport_np_state);
  67         struct async_req *result, *subreq;
  68         struct rpc_np_write_state *state;
  69
  70         if (!async_req_setup(mem_ctx, &result, &state,
  71                              struct rpc_np_write_state)) {
  72                 return NULL;
  73         }
  74         state->size = size;
  75
  76         subreq = cli_write_andx_send(mem_ctx, ev, np_transport->cli,
  77                                      np_transport->fnum,
  78                                      8, /* 8 means message mode. */
  79                                      data, 0, size);
  80         if (subreq == NULL) {
  81                 goto fail;
  82         }
  83         subreq->async.fn = rpc_np_write_done;
  84         subreq->async.priv = result;
  85         return result;
  86  fail:
  87         TALLOC_FREE(result);
  88         return NULL;
  89 }
  90
  91 static void rpc_np_write_done(struct async_req *subreq)
  92 {
  93         struct async_req *req = talloc_get_type_abort(
  94                 subreq->async.priv, struct async_req);
  95         struct rpc_np_write_state *state = talloc_get_type_abort(
  96                 req->private_data, struct rpc_np_write_state);
  97         NTSTATUS status;
  98
  99         status = cli_write_andx_recv(subreq, &state->written);
 100         TALLOC_FREE(subreq);
 101         if (!NT_STATUS_IS_OK(status)) {
 102                 async_req_nterror(req, status);
 103                 return;
 104         }
 105         async_req_done(req);
 106 }
 107
 108 static NTSTATUS rpc_np_write_recv(struct async_req *req, ssize_t *pwritten)
 109 {
 110         struct rpc_np_write_state *state = talloc_get_type_abort(
 111                 req->private_data, struct rpc_np_write_state);
 112         NTSTATUS status;
 113
 114         if (async_req_is_nterror(req, &status)) {
 115                 return status;
 116         }
 117         *pwritten = state->written;
 118         return NT_STATUS_OK;
 119 }
 120
 121 struct rpc_np_read_state {
 122         uint8_t *data;
 123         size_t size;
 124         ssize_t received;
 125 };
 126
 127 static void rpc_np_read_done(struct async_req *subreq);
 128
 129 static struct async_req *rpc_np_read_send(TALLOC_CTX *mem_ctx,
 130                                           struct event_context *ev,
 131                                           uint8_t *data, size_t size,
 132                                           void *priv)
 133 {
 134         struct rpc_transport_np_state *np_transport = talloc_get_type_abort(
 135                 priv, struct rpc_transport_np_state);
 136         struct async_req *result, *subreq;
 137         struct rpc_np_read_state *state;
 138
 139         if (!async_req_setup(mem_ctx, &result, &state,
 140                              struct rpc_np_read_state)) {
 141                 return NULL;
 142         }
 143         state->data = data;
 144         state->size = size;
 145
 146         subreq = cli_read_andx_send(mem_ctx, ev, np_transport->cli,
 147                                     np_transport->fnum, 0, size);
 148         if (subreq == NULL) {
 149                 goto fail;
 150         }
 151         subreq->async.fn = rpc_np_read_done;
 152         subreq->async.priv = result;
 153         return result;
 154  fail:
 155         TALLOC_FREE(result);
 156         return NULL;
 157 }
 158
 159 static void rpc_np_read_done(struct async_req *subreq)
 160 {
 161         struct async_req *req = talloc_get_type_abort(
 162                 subreq->async.priv, struct async_req);
 163         struct rpc_np_read_state *state = talloc_get_type_abort(
 164                 req->private_data, struct rpc_np_read_state);
 165         NTSTATUS status;
 166         uint8_t *rcvbuf;
 167
 168         /* We must free subreq in this function as there is
 169            a timer event attached to it. */
 170
 171         status = cli_read_andx_recv(subreq, &state->received, &rcvbuf);
 172         /*
 173          * We can't TALLOC_FREE(subreq) as usual here, as rcvbuf still is a
 174          * child of that.
 175          */
 176         if (NT_STATUS_EQUAL(status, NT_STATUS_BUFFER_TOO_SMALL)) {
 177                 status = NT_STATUS_OK;
 178         }
 179         if (!NT_STATUS_IS_OK(status)) {
 180                 TALLOC_FREE(subreq);
 181                 async_req_nterror(req, status);
 182                 return;
 183         }
 184
 185         if (state->received > state->size) {
 186                 TALLOC_FREE(subreq);
 187                 async_req_nterror(req, NT_STATUS_INVALID_NETWORK_RESPONSE);
 188                 return;
 189         }
 190
 191         if (state->received == 0) {
 192                 TALLOC_FREE(subreq);
 193                 async_req_nterror(req, NT_STATUS_PIPE_BROKEN);
 194                 return;
 195         }
 196
 197         memcpy(state->data, rcvbuf, state->received);
 198         TALLOC_FREE(subreq);
 199         async_req_done(req);
 200 }
 201
 202 static NTSTATUS rpc_np_read_recv(struct async_req *req, ssize_t *preceived)
 203 {
 204         struct rpc_np_read_state *state = talloc_get_type_abort(
 205                 req->private_data, struct rpc_np_read_state);
 206         NTSTATUS status;
 207
 208         if (async_req_is_nterror(req, &status)) {
 209                 return status;
 210         }
 211         *preceived = state->received;
 212         return NT_STATUS_OK;
 213 }
 214
 215 struct rpc_np_trans_state {
 216         uint16_t setup[2];
 217         uint32_t max_rdata_len;
 218         uint8_t *rdata;
 219         uint32_t rdata_len;
 220 };
 221
 222 static void rpc_np_trans_done(struct async_req *subreq);
 223
 224 static struct async_req *rpc_np_trans_send(TALLOC_CTX *mem_ctx,
 225                                            struct event_context *ev,
 226                                            uint8_t *data, size_t data_len,
 227                                            uint32_t max_rdata_len,
 228                                            void *priv)
 229 {
 230         struct rpc_transport_np_state *np_transport = talloc_get_type_abort(
 231                 priv, struct rpc_transport_np_state);
 232         struct async_req *result, *subreq;
 233         struct rpc_np_trans_state *state;
 234
 235         if (!async_req_setup(mem_ctx, &result, &state,
 236                              struct rpc_np_trans_state)) {
 237                 return NULL;
 238         }
 239
 240         state->max_rdata_len = max_rdata_len;
 241
 242         SSVAL(state->setup+0, 0, TRANSACT_DCERPCCMD);
 243         SSVAL(state->setup+1, 0, np_transport->fnum);
 244
 245         subreq = cli_trans_send(
 246                 state, ev, np_transport->cli, SMBtrans,
 247                 "\\PIPE\\", 0, 0, 0, state->setup, 2, 0,
 248                 NULL, 0, 0, data, data_len, max_rdata_len);
 249         if (subreq == NULL) {
 250                 goto fail;
 251         }
 252         subreq->async.fn = rpc_np_trans_done;
 253         subreq->async.priv = result;
 254         return result;
 255
 256  fail:
 257         TALLOC_FREE(result);
 258         return NULL;
 259 }
 260
 261 static void rpc_np_trans_done(struct async_req *subreq)
 262 {
 263         struct async_req *req = talloc_get_type_abort(
 264                 subreq->async.priv, struct async_req);
 265         struct rpc_np_trans_state *state = talloc_get_type_abort(
 266                 req->private_data, struct rpc_np_trans_state);
 267         NTSTATUS status;
 268
 269         status = cli_trans_recv(subreq, state, NULL, NULL, NULL, NULL,
 270                                 &state->rdata, &state->rdata_len);
 271         TALLOC_FREE(subreq);
 272         if (NT_STATUS_EQUAL(status, NT_STATUS_BUFFER_TOO_SMALL)) {
 273                 status = NT_STATUS_OK;
 274         }
 275         if (!NT_STATUS_IS_OK(status)) {
 276                 async_req_nterror(req, status);
 277                 return;
 278         }
 279
 280         if (state->rdata_len > state->max_rdata_len) {
 281                 async_req_nterror(req, NT_STATUS_INVALID_NETWORK_RESPONSE);
 282                 return;
 283         }
 284
 285         if (state->rdata_len == 0) {
 286                 async_req_nterror(req, NT_STATUS_PIPE_BROKEN);
 287                 return;
 288         }
 289
 290         async_req_done(req);
 291 }
 292
 293 static NTSTATUS rpc_np_trans_recv(struct async_req *req, TALLOC_CTX *mem_ctx,
 294                                   uint8_t **prdata, uint32_t *prdata_len)
 295 {
 296         struct rpc_np_trans_state *state = talloc_get_type_abort(
 297                 req->private_data, struct rpc_np_trans_state);
 298         NTSTATUS status;
 299
 300         if (async_req_is_nterror(req, &status)) {
 301                 return status;
 302         }
 303         *prdata = talloc_move(mem_ctx, &state->rdata);
 304         *prdata_len = state->rdata_len;
 305         return NT_STATUS_OK;
 306 }
 307
 308 struct rpc_transport_np_init_state {
 309         struct rpc_cli_transport *transport;
 310         struct rpc_transport_np_state *transport_np;
 311 };
 312
 313 static void rpc_transport_np_init_pipe_open(struct async_req *subreq);
 314
 315 struct async_req *rpc_transport_np_init_send(TALLOC_CTX *mem_ctx,
 316                                              struct event_context *ev,
 317                                              struct cli_state *cli,
 318                                              const struct ndr_syntax_id *abstract_syntax)
 319 {
 320         struct async_req *result, *subreq;
 321         struct rpc_transport_np_init_state *state;
 322
 323         if (!async_req_setup(mem_ctx, &result, &state,
 324                              struct rpc_transport_np_init_state)) {
 325                 return NULL;
 326         }
 327
 328         state->transport = talloc(state, struct rpc_cli_transport);
 329         if (state->transport == NULL) {
 330                 goto fail;
 331         }
 332         state->transport_np = talloc(state->transport,
 333                                      struct rpc_transport_np_state);
 334         if (state->transport_np == NULL) {
 335                 goto fail;
 336         }
 337         state->transport->priv = state->transport_np;
 338
 339         state->transport_np->pipe_name = get_pipe_name_from_iface(
 340                 abstract_syntax);
 341         state->transport_np->cli = cli;
 342
 343         subreq = cli_ntcreate_send(
 344                 state, ev, cli, state->transport_np->pipe_name, 0,
 345                 DESIRED_ACCESS_PIPE, 0, FILE_SHARE_READ|FILE_SHARE_WRITE,
 346                 FILE_OPEN, 0, 0);
 347         if (subreq == NULL) {
 348                 goto fail;
 349         }
 350         subreq->async.fn = rpc_transport_np_init_pipe_open;
 351         subreq->async.priv = result;
 352         return result;
 353
 354  fail:
 355         TALLOC_FREE(result);
 356         return NULL;
 357 }
 358
 359 static void rpc_transport_np_init_pipe_open(struct async_req *subreq)
 360 {
 361         struct async_req *req = talloc_get_type_abort(
 362                 subreq->async.priv, struct async_req);
 363         struct rpc_transport_np_init_state *state = talloc_get_type_abort(
 364                 req->private_data, struct rpc_transport_np_init_state);
 365         NTSTATUS status;
 366
 367         status = cli_ntcreate_recv(subreq, &state->transport_np->fnum);
 368         TALLOC_FREE(subreq);
 369         if (!NT_STATUS_IS_OK(status)) {
 370                 async_req_nterror(req, status);
 371                 return;
 372         }
 373
 374         talloc_set_destructor(state->transport_np,
 375                               rpc_transport_np_state_destructor);
 376         async_req_done(req);
 377 }
 378
 379 NTSTATUS rpc_transport_np_init_recv(struct async_req *req,
 380                                     TALLOC_CTX *mem_ctx,
 381                                     struct rpc_cli_transport **presult)
 382 {
 383         struct rpc_transport_np_init_state *state = talloc_get_type_abort(
 384                 req->private_data, struct rpc_transport_np_init_state);
 385         NTSTATUS status;
 386
 387         if (async_req_is_nterror(req, &status)) {
 388                 return status;
 389         }
 390
 391         state->transport->write_send = rpc_np_write_send;
 392         state->transport->write_recv = rpc_np_write_recv;
 393         state->transport->read_send = rpc_np_read_send;
 394         state->transport->read_recv = rpc_np_read_recv;
 395         state->transport->trans_send = rpc_np_trans_send;
 396         state->transport->trans_recv = rpc_np_trans_recv;
 397
 398         *presult = talloc_move(mem_ctx, &state->transport);
 399         return NT_STATUS_OK;
 400 }
 401
 402 NTSTATUS rpc_transport_np_init(TALLOC_CTX *mem_ctx, struct cli_state *cli,
 403                                const struct ndr_syntax_id *abstract_syntax,
 404                                struct rpc_cli_transport **presult)
 405 {
 406         TALLOC_CTX *frame = talloc_stackframe();
 407         struct event_context *ev;
 408         struct async_req *req;
 409         NTSTATUS status;
 410
 411         ev = event_context_init(frame);
 412         if (ev == NULL) {
 413                 status = NT_STATUS_NO_MEMORY;
 414                 goto fail;
 415         }
 416
 417         req = rpc_transport_np_init_send(frame, ev, cli, abstract_syntax);
 418         if (req == NULL) {
 419                 status = NT_STATUS_NO_MEMORY;
 420                 goto fail;
 421         }
 422
 423         while (req->state < ASYNC_REQ_DONE) {
 424                 event_loop_once(ev);
 425         }
 426
 427         status = rpc_transport_np_init_recv(req, mem_ctx, presult);
 428  fail:
 429         TALLOC_FREE(frame);
 430         return status;
 431 }
 432
 433 struct cli_state *rpc_pipe_np_smb_conn(struct rpc_pipe_client *p)
 434 {
 435         struct rpc_transport_np_state *state = talloc_get_type(
 436                 p->transport->priv, struct rpc_transport_np_state);
 437
 438         if (state == NULL) {
 439                 return NULL;
 440         }
 441         return state->cli;
 442 }