?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Fix bug #5937 - filenames with "*" char hide other files
[Samba.git] / source / smbd / trans2.c
blobebf448f4fd939f540120931bc3bbc690de995915
1 /*
2 Unix SMB/CIFS implementation.
3 SMB transaction2 handling
4 Copyright (C) Jeremy Allison 1994-2007
5 Copyright (C) Stefan (metze) Metzmacher 2003
6 Copyright (C) Volker Lendecke 2005-2007
7 Copyright (C) Steve French 2005
8 Copyright (C) James Peach 2006-2007
9
10 Extensively modified by Andrew Tridgell, 1995
11
12 This program is free software; you can redistribute it and/or modify
13 it under the terms of the GNU General Public License as published by
14 the Free Software Foundation; either version 3 of the License, or
15 (at your option) any later version.
16
17 This program is distributed in the hope that it will be useful,
18 but WITHOUT ANY WARRANTY; without even the implied warranty of
19 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 GNU General Public License for more details.
21
22 You should have received a copy of the GNU General Public License
23 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 */
25
26 #include "includes.h"
27
28 extern int max_send;
29 extern enum protocol_types Protocol;
30 extern uint32 global_client_caps;
31 extern struct current_user current_user;
32
33 #define get_file_size(sbuf) ((sbuf).st_size)
34 #define DIR_ENTRY_SAFETY_MARGIN 4096
35
36 static char *store_file_unix_basic(connection_struct *conn,
37 char *pdata,
38 files_struct *fsp,
39 const SMB_STRUCT_STAT *psbuf);
40
41 static char *store_file_unix_basic_info2(connection_struct *conn,
42 char *pdata,
43 files_struct *fsp,
44 const SMB_STRUCT_STAT *psbuf);
45
46 /********************************************************************
47 Roundup a value to the nearest allocation roundup size boundary.
48 Only do this for Windows clients.
49 ********************************************************************/
50
51 SMB_BIG_UINT smb_roundup(connection_struct *conn, SMB_BIG_UINT val)
52 {
53 SMB_BIG_UINT rval = lp_allocation_roundup_size(SNUM(conn));
54
55 /* Only roundup for Windows clients. */
56 enum remote_arch_types ra_type = get_remote_arch();
57 if (rval && (ra_type != RA_SAMBA) && (ra_type != RA_CIFSFS)) {
58 val = SMB_ROUNDUP(val,rval);
59 }
60 return val;
61 }
62
63 /********************************************************************
64 Given a stat buffer return the allocated size on disk, taking into
65 account sparse files.
66 ********************************************************************/
67
68 SMB_BIG_UINT get_allocation_size(connection_struct *conn, files_struct *fsp, const SMB_STRUCT_STAT *sbuf)
69 {
70 SMB_BIG_UINT ret;
71
72 if(S_ISDIR(sbuf->st_mode)) {
73 return 0;
74 }
75
76 #if defined(HAVE_STAT_ST_BLOCKS) && defined(STAT_ST_BLOCKSIZE)
77 ret = (SMB_BIG_UINT)STAT_ST_BLOCKSIZE * (SMB_BIG_UINT)sbuf->st_blocks;
78 #else
79 ret = (SMB_BIG_UINT)get_file_size(*sbuf);
80 #endif
81
82 if (fsp && fsp->initial_allocation_size)
83 ret = MAX(ret,fsp->initial_allocation_size);
84
85 return smb_roundup(conn, ret);
86 }
87
88 /****************************************************************************
89 Utility functions for dealing with extended attributes.
90 ****************************************************************************/
91
92 /****************************************************************************
93 Refuse to allow clients to overwrite our private xattrs.
94 ****************************************************************************/
95
96 static bool samba_private_attr_name(const char *unix_ea_name)
97 {
98 static const char *prohibited_ea_names[] = {
99 SAMBA_POSIX_INHERITANCE_EA_NAME,
100 SAMBA_XATTR_DOS_ATTRIB,
101 NULL
102 };
103
104 int i;
105
106 for (i = 0; prohibited_ea_names[i]; i++) {
107 if (strequal( prohibited_ea_names[i], unix_ea_name))
108 return true;
109 }
110 if (StrnCaseCmp(unix_ea_name, SAMBA_XATTR_DOSSTREAM_PREFIX,
111 strlen(SAMBA_XATTR_DOSSTREAM_PREFIX)) == 0) {
112 return true;
113 }
114 return false;
115 }
116
117 /****************************************************************************
118 Get one EA value. Fill in a struct ea_struct.
119 ****************************************************************************/
120
121 NTSTATUS get_ea_value(TALLOC_CTX *mem_ctx, connection_struct *conn,
122 files_struct *fsp, const char *fname,
123 const char *ea_name, struct ea_struct *pea)
124 {
125 /* Get the value of this xattr. Max size is 64k. */
126 size_t attr_size = 256;
127 char *val = NULL;
128 ssize_t sizeret;
129
130 again:
131
132 val = TALLOC_REALLOC_ARRAY(mem_ctx, val, char, attr_size);
133 if (!val) {
134 return NT_STATUS_NO_MEMORY;
135 }
136
137 if (fsp && fsp->fh->fd != -1) {
138 sizeret = SMB_VFS_FGETXATTR(fsp, ea_name, val, attr_size);
139 } else {
140 sizeret = SMB_VFS_GETXATTR(conn, fname, ea_name, val, attr_size);
141 }
142
143 if (sizeret == -1 && errno == ERANGE && attr_size != 65536) {
144 attr_size = 65536;
145 goto again;
146 }
147
148 if (sizeret == -1) {
149 return map_nt_error_from_unix(errno);
150 }
151
152 DEBUG(10,("get_ea_value: EA %s is of length %u\n", ea_name, (unsigned int)sizeret));
153 dump_data(10, (uint8 *)val, sizeret);
154
155 pea->flags = 0;
156 if (strnequal(ea_name, "user.", 5)) {
157 pea->name = talloc_strdup(mem_ctx, &ea_name[5]);
158 } else {
159 pea->name = talloc_strdup(mem_ctx, ea_name);
160 }
161 if (pea->name == NULL) {
162 TALLOC_FREE(val);
163 return NT_STATUS_NO_MEMORY;
164 }
165 pea->value.data = (unsigned char *)val;
166 pea->value.length = (size_t)sizeret;
167 return NT_STATUS_OK;
168 }
169
170 NTSTATUS get_ea_names_from_file(TALLOC_CTX *mem_ctx, connection_struct *conn,
171 files_struct *fsp, const char *fname,
172 char ***pnames, size_t *pnum_names)
173 {
174 /* Get a list of all xattrs. Max namesize is 64k. */
175 size_t ea_namelist_size = 1024;
176 char *ea_namelist = NULL;
177
178 char *p;
179 char **names, **tmp;
180 size_t num_names;
181 ssize_t sizeret;
182
183 if (!lp_ea_support(SNUM(conn))) {
184 *pnames = NULL;
185 *pnum_names = 0;
186 return NT_STATUS_OK;
187 }
188
189 /*
190 * TALLOC the result early to get the talloc hierarchy right.
191 */
192
193 names = TALLOC_ARRAY(mem_ctx, char *, 1);
194 if (names == NULL) {
195 DEBUG(0, ("talloc failed\n"));
196 return NT_STATUS_NO_MEMORY;
197 }
198
199 while (ea_namelist_size <= 65536) {
200
201 ea_namelist = TALLOC_REALLOC_ARRAY(
202 names, ea_namelist, char, ea_namelist_size);
203 if (ea_namelist == NULL) {
204 DEBUG(0, ("talloc failed\n"));
205 TALLOC_FREE(names);
206 return NT_STATUS_NO_MEMORY;
207 }
208
209 if (fsp && fsp->fh->fd != -1) {
210 sizeret = SMB_VFS_FLISTXATTR(fsp, ea_namelist,
211 ea_namelist_size);
212 } else {
213 sizeret = SMB_VFS_LISTXATTR(conn, fname, ea_namelist,
214 ea_namelist_size);
215 }
216
217 if ((sizeret == -1) && (errno == ERANGE)) {
218 ea_namelist_size *= 2;
219 }
220 else {
221 break;
222 }
223 }
224
225 if (sizeret == -1) {
226 TALLOC_FREE(names);
227 return map_nt_error_from_unix(errno);
228 }
229
230 DEBUG(10, ("get_ea_list_from_file: ea_namelist size = %u\n",
231 (unsigned int)sizeret));
232
233 if (sizeret == 0) {
234 TALLOC_FREE(names);
235 *pnames = NULL;
236 *pnum_names = 0;
237 return NT_STATUS_OK;
238 }
239
240 /*
241 * Ensure the result is 0-terminated
242 */
243
244 if (ea_namelist[sizeret-1] != '\0') {
245 TALLOC_FREE(names);
246 return NT_STATUS_INTERNAL_ERROR;
247 }
248
249 /*
250 * count the names
251 */
252 num_names = 0;
253
254 for (p = ea_namelist; p - ea_namelist < sizeret; p += strlen(p)+1) {
255 num_names += 1;
256 }
257
258 tmp = TALLOC_REALLOC_ARRAY(mem_ctx, names, char *, num_names);
259 if (tmp == NULL) {
260 DEBUG(0, ("talloc failed\n"));
261 TALLOC_FREE(names);
262 return NT_STATUS_NO_MEMORY;
263 }
264
265 names = tmp;
266 num_names = 0;
267
268 for (p = ea_namelist; p - ea_namelist < sizeret; p += strlen(p)+1) {
269 names[num_names++] = p;
270 }
271
272 *pnames = names;
273 *pnum_names = num_names;
274 return NT_STATUS_OK;
275 }
276
277 /****************************************************************************
278 Return a linked list of the total EA's. Plus the total size
279 ****************************************************************************/
280
281 static struct ea_list *get_ea_list_from_file(TALLOC_CTX *mem_ctx, connection_struct *conn, files_struct *fsp,
282 const char *fname, size_t *pea_total_len)
283 {
284 /* Get a list of all xattrs. Max namesize is 64k. */
285 size_t i, num_names;
286 char **names;
287 struct ea_list *ea_list_head = NULL;
288 NTSTATUS status;
289
290 *pea_total_len = 0;
291
292 if (!lp_ea_support(SNUM(conn))) {
293 return NULL;
294 }
295
296 status = get_ea_names_from_file(talloc_tos(), conn, fsp, fname,
297 &names, &num_names);
298
299 if (!NT_STATUS_IS_OK(status) || (num_names == 0)) {
300 return NULL;
301 }
302
303 for (i=0; i<num_names; i++) {
304 struct ea_list *listp;
305 fstring dos_ea_name;
306
307 if (strnequal(names[i], "system.", 7)
308 || samba_private_attr_name(names[i]))
309 continue;
310
311 listp = TALLOC_P(mem_ctx, struct ea_list);
312 if (listp == NULL) {
313 return NULL;
314 }
315
316 if (!NT_STATUS_IS_OK(get_ea_value(mem_ctx, conn, fsp,
317 fname, names[i],
318 &listp->ea))) {
319 return NULL;
320 }
321
322 push_ascii_fstring(dos_ea_name, listp->ea.name);
323
324 *pea_total_len +=
325 4 + strlen(dos_ea_name) + 1 + listp->ea.value.length;
326
327 DEBUG(10,("get_ea_list_from_file: total_len = %u, %s, val len "
328 "= %u\n", (unsigned int)*pea_total_len, dos_ea_name,
329 (unsigned int)listp->ea.value.length));
330
331 DLIST_ADD_END(ea_list_head, listp, struct ea_list *);
332
333 }
334
335 /* Add on 4 for total length. */
336 if (*pea_total_len) {
337 *pea_total_len += 4;
338 }
339
340 DEBUG(10, ("get_ea_list_from_file: total_len = %u\n",
341 (unsigned int)*pea_total_len));
342
343 return ea_list_head;
344 }
345
346 /****************************************************************************
347 Fill a qfilepathinfo buffer with EA's. Returns the length of the buffer
348 that was filled.
349 ****************************************************************************/
350
351 static unsigned int fill_ea_buffer(TALLOC_CTX *mem_ctx, char *pdata, unsigned int total_data_size,
352 connection_struct *conn, struct ea_list *ea_list)
353 {
354 unsigned int ret_data_size = 4;
355 char *p = pdata;
356
357 SMB_ASSERT(total_data_size >= 4);
358
359 if (!lp_ea_support(SNUM(conn))) {
360 SIVAL(pdata,4,0);
361 return 4;
362 }
363
364 for (p = pdata + 4; ea_list; ea_list = ea_list->next) {
365 size_t dos_namelen;
366 fstring dos_ea_name;
367 push_ascii_fstring(dos_ea_name, ea_list->ea.name);
368 dos_namelen = strlen(dos_ea_name);
369 if (dos_namelen > 255 || dos_namelen == 0) {
370 break;
371 }
372 if (ea_list->ea.value.length > 65535) {
373 break;
374 }
375 if (4 + dos_namelen + 1 + ea_list->ea.value.length > total_data_size) {
376 break;
377 }
378
379 /* We know we have room. */
380 SCVAL(p,0,ea_list->ea.flags);
381 SCVAL(p,1,dos_namelen);
382 SSVAL(p,2,ea_list->ea.value.length);
383 fstrcpy(p+4, dos_ea_name);
384 memcpy( p + 4 + dos_namelen + 1, ea_list->ea.value.data, ea_list->ea.value.length);
385
386 total_data_size -= 4 + dos_namelen + 1 + ea_list->ea.value.length;
387 p += 4 + dos_namelen + 1 + ea_list->ea.value.length;
388 }
389
390 ret_data_size = PTR_DIFF(p, pdata);
391 DEBUG(10,("fill_ea_buffer: data_size = %u\n", ret_data_size ));
392 SIVAL(pdata,0,ret_data_size);
393 return ret_data_size;
394 }
395
396 static unsigned int estimate_ea_size(connection_struct *conn, files_struct *fsp, const char *fname)
397 {
398 size_t total_ea_len = 0;
399 TALLOC_CTX *mem_ctx = NULL;
400
401 if (!lp_ea_support(SNUM(conn))) {
402 return 0;
403 }
404 mem_ctx = talloc_tos();
405 (void)get_ea_list_from_file(mem_ctx, conn, fsp, fname, &total_ea_len);
406 return total_ea_len;
407 }
408
409 /****************************************************************************
410 Ensure the EA name is case insensitive by matching any existing EA name.
411 ****************************************************************************/
412
413 static void canonicalize_ea_name(connection_struct *conn, files_struct *fsp, const char *fname, fstring unix_ea_name)
414 {
415 size_t total_ea_len;
416 TALLOC_CTX *mem_ctx = talloc_tos();
417 struct ea_list *ea_list = get_ea_list_from_file(mem_ctx, conn, fsp, fname, &total_ea_len);
418
419 for (; ea_list; ea_list = ea_list->next) {
420 if (strequal(&unix_ea_name[5], ea_list->ea.name)) {
421 DEBUG(10,("canonicalize_ea_name: %s -> %s\n",
422 &unix_ea_name[5], ea_list->ea.name));
423 safe_strcpy(&unix_ea_name[5], ea_list->ea.name, sizeof(fstring)-6);
424 break;
425 }
426 }
427 }
428
429 /****************************************************************************
430 Set or delete an extended attribute.
431 ****************************************************************************/
432
433 NTSTATUS set_ea(connection_struct *conn, files_struct *fsp, const char *fname, struct ea_list *ea_list)
434 {
435 if (!lp_ea_support(SNUM(conn))) {
436 return NT_STATUS_EAS_NOT_SUPPORTED;
437 }
438
439 for (;ea_list; ea_list = ea_list->next) {
440 int ret;
441 fstring unix_ea_name;
442
443 fstrcpy(unix_ea_name, "user."); /* All EA's must start with user. */
444 fstrcat(unix_ea_name, ea_list->ea.name);
445
446 canonicalize_ea_name(conn, fsp, fname, unix_ea_name);
447
448 DEBUG(10,("set_ea: ea_name %s ealen = %u\n", unix_ea_name, (unsigned int)ea_list->ea.value.length));
449
450 if (samba_private_attr_name(unix_ea_name)) {
451 DEBUG(10,("set_ea: ea name %s is a private Samba name.\n", unix_ea_name));
452 return NT_STATUS_ACCESS_DENIED;
453 }
454
455 if (ea_list->ea.value.length == 0) {
456 /* Remove the attribute. */
457 if (fsp && (fsp->fh->fd != -1)) {
458 DEBUG(10,("set_ea: deleting ea name %s on file %s by file descriptor.\n",
459 unix_ea_name, fsp->fsp_name));
460 ret = SMB_VFS_FREMOVEXATTR(fsp, unix_ea_name);
461 } else {
462 DEBUG(10,("set_ea: deleting ea name %s on file %s.\n",
463 unix_ea_name, fname));
464 ret = SMB_VFS_REMOVEXATTR(conn, fname, unix_ea_name);
465 }
466 #ifdef ENOATTR
467 /* Removing a non existent attribute always succeeds. */
468 if (ret == -1 && errno == ENOATTR) {
469 DEBUG(10,("set_ea: deleting ea name %s didn't exist - succeeding by default.\n",
470 unix_ea_name));
471 ret = 0;
472 }
473 #endif
474 } else {
475 if (fsp && (fsp->fh->fd != -1)) {
476 DEBUG(10,("set_ea: setting ea name %s on file %s by file descriptor.\n",
477 unix_ea_name, fsp->fsp_name));
478 ret = SMB_VFS_FSETXATTR(fsp, unix_ea_name,
479 ea_list->ea.value.data, ea_list->ea.value.length, 0);
480 } else {
481 DEBUG(10,("set_ea: setting ea name %s on file %s.\n",
482 unix_ea_name, fname));
483 ret = SMB_VFS_SETXATTR(conn, fname, unix_ea_name,
484 ea_list->ea.value.data, ea_list->ea.value.length, 0);
485 }
486 }
487
488 if (ret == -1) {
489 #ifdef ENOTSUP
490 if (errno == ENOTSUP) {
491 return NT_STATUS_EAS_NOT_SUPPORTED;
492 }
493 #endif
494 return map_nt_error_from_unix(errno);
495 }
496
497 }
498 return NT_STATUS_OK;
499 }
500 /****************************************************************************
501 Read a list of EA names from an incoming data buffer. Create an ea_list with them.
502 ****************************************************************************/
503
504 static struct ea_list *read_ea_name_list(TALLOC_CTX *ctx, const char *pdata, size_t data_size)
505 {
506 struct ea_list *ea_list_head = NULL;
507 size_t offset = 0;
508
509 while (offset + 2 < data_size) {
510 struct ea_list *eal = TALLOC_ZERO_P(ctx, struct ea_list);
511 unsigned int namelen = CVAL(pdata,offset);
512
513 offset++; /* Go past the namelen byte. */
514
515 /* integer wrap paranioa. */
516 if ((offset + namelen < offset) || (offset + namelen < namelen) ||
517 (offset > data_size) || (namelen > data_size) ||
518 (offset + namelen >= data_size)) {
519 break;
520 }
521 /* Ensure the name is null terminated. */
522 if (pdata[offset + namelen] != '\0') {
523 return NULL;
524 }
525 pull_ascii_talloc(ctx, &eal->ea.name, &pdata[offset]);
526 if (!eal->ea.name) {
527 return NULL;
528 }
529
530 offset += (namelen + 1); /* Go past the name + terminating zero. */
531 DLIST_ADD_END(ea_list_head, eal, struct ea_list *);
532 DEBUG(10,("read_ea_name_list: read ea name %s\n", eal->ea.name));
533 }
534
535 return ea_list_head;
536 }
537
538 /****************************************************************************
539 Read one EA list entry from the buffer.
540 ****************************************************************************/
541
542 struct ea_list *read_ea_list_entry(TALLOC_CTX *ctx, const char *pdata, size_t data_size, size_t *pbytes_used)
543 {
544 struct ea_list *eal = TALLOC_ZERO_P(ctx, struct ea_list);
545 uint16 val_len;
546 unsigned int namelen;
547
548 if (!eal) {
549 return NULL;
550 }
551
552 if (data_size < 6) {
553 return NULL;
554 }
555
556 eal->ea.flags = CVAL(pdata,0);
557 namelen = CVAL(pdata,1);
558 val_len = SVAL(pdata,2);
559
560 if (4 + namelen + 1 + val_len > data_size) {
561 return NULL;
562 }
563
564 /* Ensure the name is null terminated. */
565 if (pdata[namelen + 4] != '\0') {
566 return NULL;
567 }
568 pull_ascii_talloc(ctx, &eal->ea.name, pdata + 4);
569 if (!eal->ea.name) {
570 return NULL;
571 }
572
573 eal->ea.value = data_blob_talloc(eal, NULL, (size_t)val_len + 1);
574 if (!eal->ea.value.data) {
575 return NULL;
576 }
577
578 memcpy(eal->ea.value.data, pdata + 4 + namelen + 1, val_len);
579
580 /* Ensure we're null terminated just in case we print the value. */
581 eal->ea.value.data[val_len] = '\0';
582 /* But don't count the null. */
583 eal->ea.value.length--;
584
585 if (pbytes_used) {
586 *pbytes_used = 4 + namelen + 1 + val_len;
587 }
588
589 DEBUG(10,("read_ea_list_entry: read ea name %s\n", eal->ea.name));
590 dump_data(10, eal->ea.value.data, eal->ea.value.length);
591
592 return eal;
593 }
594
595 /****************************************************************************
596 Read a list of EA names and data from an incoming data buffer. Create an ea_list with them.
597 ****************************************************************************/
598
599 static struct ea_list *read_ea_list(TALLOC_CTX *ctx, const char *pdata, size_t data_size)
600 {
601 struct ea_list *ea_list_head = NULL;
602 size_t offset = 0;
603 size_t bytes_used = 0;
604
605 while (offset < data_size) {
606 struct ea_list *eal = read_ea_list_entry(ctx, pdata + offset, data_size - offset, &bytes_used);
607
608 if (!eal) {
609 return NULL;
610 }
611
612 DLIST_ADD_END(ea_list_head, eal, struct ea_list *);
613 offset += bytes_used;
614 }
615
616 return ea_list_head;
617 }
618
619 /****************************************************************************
620 Count the total EA size needed.
621 ****************************************************************************/
622
623 static size_t ea_list_size(struct ea_list *ealist)
624 {
625 fstring dos_ea_name;
626 struct ea_list *listp;
627 size_t ret = 0;
628
629 for (listp = ealist; listp; listp = listp->next) {
630 push_ascii_fstring(dos_ea_name, listp->ea.name);
631 ret += 4 + strlen(dos_ea_name) + 1 + listp->ea.value.length;
632 }
633 /* Add on 4 for total length. */
634 if (ret) {
635 ret += 4;
636 }
637
638 return ret;
639 }
640
641 /****************************************************************************
642 Return a union of EA's from a file list and a list of names.
643 The TALLOC context for the two lists *MUST* be identical as we steal
644 memory from one list to add to another. JRA.
645 ****************************************************************************/
646
647 static struct ea_list *ea_list_union(struct ea_list *name_list, struct ea_list *file_list, size_t *total_ea_len)
648 {
649 struct ea_list *nlistp, *flistp;
650
651 for (nlistp = name_list; nlistp; nlistp = nlistp->next) {
652 for (flistp = file_list; flistp; flistp = flistp->next) {
653 if (strequal(nlistp->ea.name, flistp->ea.name)) {
654 break;
655 }
656 }
657
658 if (flistp) {
659 /* Copy the data from this entry. */
660 nlistp->ea.flags = flistp->ea.flags;
661 nlistp->ea.value = flistp->ea.value;
662 } else {
663 /* Null entry. */
664 nlistp->ea.flags = 0;
665 ZERO_STRUCT(nlistp->ea.value);
666 }
667 }
668
669 *total_ea_len = ea_list_size(name_list);
670 return name_list;
671 }
672
673 /****************************************************************************
674 Send the required number of replies back.
675 We assume all fields other than the data fields are
676 set correctly for the type of call.
677 HACK ! Always assumes smb_setup field is zero.
678 ****************************************************************************/
679
680 void send_trans2_replies(connection_struct *conn,
681 struct smb_request *req,
682 const char *params,
683 int paramsize,
684 const char *pdata,
685 int datasize,
686 int max_data_bytes)
687 {
688 /* As we are using a protocol > LANMAN1 then the max_send
689 variable must have been set in the sessetupX call.
690 This takes precedence over the max_xmit field in the
691 global struct. These different max_xmit variables should
692 be merged as this is now too confusing */
693
694 int data_to_send = datasize;
695 int params_to_send = paramsize;
696 int useable_space;
697 const char *pp = params;
698 const char *pd = pdata;
699 int params_sent_thistime, data_sent_thistime, total_sent_thistime;
700 int alignment_offset = 1; /* JRA. This used to be 3. Set to 1 to make netmon parse ok. */
701 int data_alignment_offset = 0;
702 bool overflow = False;
703
704 /* Modify the data_to_send and datasize and set the error if
705 we're trying to send more than max_data_bytes. We still send
706 the part of the packet(s) that fit. Strange, but needed
707 for OS/2. */
708
709 if (max_data_bytes > 0 && datasize > max_data_bytes) {
710 DEBUG(5,("send_trans2_replies: max_data_bytes %d exceeded by data %d\n",
711 max_data_bytes, datasize ));
712 datasize = data_to_send = max_data_bytes;
713 overflow = True;
714 }
715
716 /* If there genuinely are no parameters or data to send just send the empty packet */
717
718 if(params_to_send == 0 && data_to_send == 0) {
719 reply_outbuf(req, 10, 0);
720 show_msg((char *)req->outbuf);
721 return;
722 }
723
724 /* When sending params and data ensure that both are nicely aligned */
725 /* Only do this alignment when there is also data to send - else
726 can cause NT redirector problems. */
727
728 if (((params_to_send % 4) != 0) && (data_to_send != 0))
729 data_alignment_offset = 4 - (params_to_send % 4);
730
731 /* Space is bufsize minus Netbios over TCP header minus SMB header */
732 /* The alignment_offset is to align the param bytes on an even byte
733 boundary. NT 4.0 Beta needs this to work correctly. */
734
735 useable_space = max_send - (smb_size
736 + 2 * 10 /* wct */
737 + alignment_offset
738 + data_alignment_offset);
739
740 if (useable_space < 0) {
741 DEBUG(0, ("send_trans2_replies failed sanity useable_space "
742 "= %d!!!", useable_space));
743 exit_server_cleanly("send_trans2_replies: Not enough space");
744 }
745
746 while (params_to_send || data_to_send) {
747 /* Calculate whether we will totally or partially fill this packet */
748
749 total_sent_thistime = params_to_send + data_to_send;
750
751 /* We can never send more than useable_space */
752 /*
753 * Note that 'useable_space' does not include the alignment offsets,
754 * but we must include the alignment offsets in the calculation of
755 * the length of the data we send over the wire, as the alignment offsets
756 * are sent here. Fix from Marc_Jacobsen@hp.com.
757 */
758
759 total_sent_thistime = MIN(total_sent_thistime, useable_space);
760
761 reply_outbuf(req, 10, total_sent_thistime + alignment_offset
762 + data_alignment_offset);
763
764 /* Set total params and data to be sent */
765 SSVAL(req->outbuf,smb_tprcnt,paramsize);
766 SSVAL(req->outbuf,smb_tdrcnt,datasize);
767
768 /* Calculate how many parameters and data we can fit into
769 * this packet. Parameters get precedence
770 */
771
772 params_sent_thistime = MIN(params_to_send,useable_space);
773 data_sent_thistime = useable_space - params_sent_thistime;
774 data_sent_thistime = MIN(data_sent_thistime,data_to_send);
775
776 SSVAL(req->outbuf,smb_prcnt, params_sent_thistime);
777
778 /* smb_proff is the offset from the start of the SMB header to the
779 parameter bytes, however the first 4 bytes of outbuf are
780 the Netbios over TCP header. Thus use smb_base() to subtract
781 them from the calculation */
782
783 SSVAL(req->outbuf,smb_proff,
784 ((smb_buf(req->outbuf)+alignment_offset)
785 - smb_base(req->outbuf)));
786
787 if(params_sent_thistime == 0)
788 SSVAL(req->outbuf,smb_prdisp,0);
789 else
790 /* Absolute displacement of param bytes sent in this packet */
791 SSVAL(req->outbuf,smb_prdisp,pp - params);
792
793 SSVAL(req->outbuf,smb_drcnt, data_sent_thistime);
794 if(data_sent_thistime == 0) {
795 SSVAL(req->outbuf,smb_droff,0);
796 SSVAL(req->outbuf,smb_drdisp, 0);
797 } else {
798 /* The offset of the data bytes is the offset of the
799 parameter bytes plus the number of parameters being sent this time */
800 SSVAL(req->outbuf, smb_droff,
801 ((smb_buf(req->outbuf)+alignment_offset)
802 - smb_base(req->outbuf))
803 + params_sent_thistime + data_alignment_offset);
804 SSVAL(req->outbuf,smb_drdisp, pd - pdata);
805 }
806
807 /* Initialize the padding for alignment */
808
809 if (alignment_offset != 0) {
810 memset(smb_buf(req->outbuf), 0, alignment_offset);
811 }
812
813 /* Copy the param bytes into the packet */
814
815 if(params_sent_thistime) {
816 memcpy((smb_buf(req->outbuf)+alignment_offset), pp,
817 params_sent_thistime);
818 }
819
820 /* Copy in the data bytes */
821 if(data_sent_thistime) {
822 if (data_alignment_offset != 0) {
823 memset((smb_buf(req->outbuf)+alignment_offset+
824 params_sent_thistime), 0,
825 data_alignment_offset);
826 }
827 memcpy(smb_buf(req->outbuf)+alignment_offset
828 +params_sent_thistime+data_alignment_offset,
829 pd,data_sent_thistime);
830 }
831
832 DEBUG(9,("t2_rep: params_sent_thistime = %d, data_sent_thistime = %d, useable_space = %d\n",
833 params_sent_thistime, data_sent_thistime, useable_space));
834 DEBUG(9,("t2_rep: params_to_send = %d, data_to_send = %d, paramsize = %d, datasize = %d\n",
835 params_to_send, data_to_send, paramsize, datasize));
836
837 if (overflow) {
838 error_packet_set((char *)req->outbuf,
839 ERRDOS,ERRbufferoverflow,
840 STATUS_BUFFER_OVERFLOW,
841 __LINE__,__FILE__);
842 }
843
844 /* Send the packet */
845 show_msg((char *)req->outbuf);
846 if (!srv_send_smb(smbd_server_fd(),
847 (char *)req->outbuf,
848 IS_CONN_ENCRYPTED(conn)))
849 exit_server_cleanly("send_trans2_replies: srv_send_smb failed.");
850
851 TALLOC_FREE(req->outbuf);
852
853 pp += params_sent_thistime;
854 pd += data_sent_thistime;
855
856 params_to_send -= params_sent_thistime;
857 data_to_send -= data_sent_thistime;
858
859 /* Sanity check */
860 if(params_to_send < 0 || data_to_send < 0) {
861 DEBUG(0,("send_trans2_replies failed sanity check pts = %d, dts = %d\n!!!",
862 params_to_send, data_to_send));
863 return;
864 }
865 }
866
867 return;
868 }
869
870 /****************************************************************************
871 Reply to a TRANSACT2_OPEN.
872 ****************************************************************************/
873
874 static void call_trans2open(connection_struct *conn,
875 struct smb_request *req,
876 char **pparams, int total_params,
877 char **ppdata, int total_data,
878 unsigned int max_data_bytes)
879 {
880 char *params = *pparams;
881 char *pdata = *ppdata;
882 int deny_mode;
883 int32 open_attr;
884 bool oplock_request;
885 #if 0
886 bool return_additional_info;
887 int16 open_sattr;
888 time_t open_time;
889 #endif
890 int open_ofun;
891 uint32 open_size;
892 char *pname;
893 char *fname = NULL;
894 SMB_OFF_T size=0;
895 int fattr=0,mtime=0;
896 SMB_INO_T inode = 0;
897 SMB_STRUCT_STAT sbuf;
898 int smb_action = 0;
899 files_struct *fsp;
900 struct ea_list *ea_list = NULL;
901 uint16 flags = 0;
902 NTSTATUS status;
903 uint32 access_mask;
904 uint32 share_mode;
905 uint32 create_disposition;
906 uint32 create_options = 0;
907 TALLOC_CTX *ctx = talloc_tos();
908
909 /*
910 * Ensure we have enough parameters to perform the operation.
911 */
912
913 if (total_params < 29) {
914 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
915 return;
916 }
917
918 flags = SVAL(params, 0);
919 deny_mode = SVAL(params, 2);
920 open_attr = SVAL(params,6);
921 oplock_request = (flags & REQUEST_OPLOCK) ? EXCLUSIVE_OPLOCK : 0;
922 if (oplock_request) {
923 oplock_request |= (flags & REQUEST_BATCH_OPLOCK) ? BATCH_OPLOCK : 0;
924 }
925
926 #if 0
927 return_additional_info = BITSETW(params,0);
928 open_sattr = SVAL(params, 4);
929 open_time = make_unix_date3(params+8);
930 #endif
931 open_ofun = SVAL(params,12);
932 open_size = IVAL(params,14);
933 pname = &params[28];
934
935 if (IS_IPC(conn)) {
936 reply_doserror(req, ERRSRV, ERRaccess);
937 return;
938 }
939
940 srvstr_get_path(ctx, params, req->flags2, &fname, pname,
941 total_params - 28, STR_TERMINATE,
942 &status);
943 if (!NT_STATUS_IS_OK(status)) {
944 reply_nterror(req, status);
945 return;
946 }
947
948 DEBUG(3,("call_trans2open %s deny_mode=0x%x attr=%d ofun=0x%x size=%d\n",
949 fname, (unsigned int)deny_mode, (unsigned int)open_attr,
950 (unsigned int)open_ofun, open_size));
951
952 if (open_ofun == 0) {
953 reply_nterror(req, NT_STATUS_OBJECT_NAME_COLLISION);
954 return;
955 }
956
957 if (!map_open_params_to_ntcreate(fname, deny_mode, open_ofun,
958 &access_mask,
959 &share_mode,
960 &create_disposition,
961 &create_options)) {
962 reply_doserror(req, ERRDOS, ERRbadaccess);
963 return;
964 }
965
966 /* Any data in this call is an EA list. */
967 if (total_data && (total_data != 4) && !lp_ea_support(SNUM(conn))) {
968 reply_nterror(req, NT_STATUS_EAS_NOT_SUPPORTED);
969 return;
970 }
971
972 if (total_data != 4) {
973 if (total_data < 10) {
974 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
975 return;
976 }
977
978 if (IVAL(pdata,0) > total_data) {
979 DEBUG(10,("call_trans2open: bad total data size (%u) > %u\n",
980 IVAL(pdata,0), (unsigned int)total_data));
981 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
982 return;
983 }
984
985 ea_list = read_ea_list(talloc_tos(), pdata + 4,
986 total_data - 4);
987 if (!ea_list) {
988 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
989 return;
990 }
991 } else if (IVAL(pdata,0) != 4) {
992 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
993 return;
994 }
995
996 status = create_file(conn, /* conn */
997 req, /* req */
998 0, /* root_dir_fid */
999 fname, /* fname */
1000 access_mask, /* access_mask */
1001 share_mode, /* share_access */
1002 create_disposition, /* create_disposition*/
1003 create_options, /* create_options */
1004 open_attr, /* file_attributes */
1005 oplock_request, /* oplock_request */
1006 open_size, /* allocation_size */
1007 NULL, /* sd */
1008 ea_list, /* ea_list */
1009 &fsp, /* result */
1010 &smb_action, /* pinfo */
1011 &sbuf); /* psbuf */
1012
1013 if (!NT_STATUS_IS_OK(status)) {
1014 if (open_was_deferred(req->mid)) {
1015 /* We have re-scheduled this call. */
1016 return;
1017 }
1018 reply_openerror(req, status);
1019 return;
1020 }
1021
1022 size = get_file_size(sbuf);
1023 fattr = dos_mode(conn,fsp->fsp_name,&sbuf);
1024 mtime = sbuf.st_mtime;
1025 inode = sbuf.st_ino;
1026 if (fattr & aDIR) {
1027 close_file(fsp,ERROR_CLOSE);
1028 reply_doserror(req, ERRDOS,ERRnoaccess);
1029 return;
1030 }
1031
1032 /* Realloc the size of parameters and data we will return */
1033 *pparams = (char *)SMB_REALLOC(*pparams, 30);
1034 if(*pparams == NULL ) {
1035 reply_nterror(req, NT_STATUS_NO_MEMORY);
1036 return;
1037 }
1038 params = *pparams;
1039
1040 SSVAL(params,0,fsp->fnum);
1041 SSVAL(params,2,fattr);
1042 srv_put_dos_date2(params,4, mtime);
1043 SIVAL(params,8, (uint32)size);
1044 SSVAL(params,12,deny_mode);
1045 SSVAL(params,14,0); /* open_type - file or directory. */
1046 SSVAL(params,16,0); /* open_state - only valid for IPC device. */
1047
1048 if (oplock_request && lp_fake_oplocks(SNUM(conn))) {
1049 smb_action |= EXTENDED_OPLOCK_GRANTED;
1050 }
1051
1052 SSVAL(params,18,smb_action);
1053
1054 /*
1055 * WARNING - this may need to be changed if SMB_INO_T <> 4 bytes.
1056 */
1057 SIVAL(params,20,inode);
1058 SSVAL(params,24,0); /* Padding. */
1059 if (flags & 8) {
1060 uint32 ea_size = estimate_ea_size(conn, fsp, fsp->fsp_name);
1061 SIVAL(params, 26, ea_size);
1062 } else {
1063 SIVAL(params, 26, 0);
1064 }
1065
1066 /* Send the required number of replies */
1067 send_trans2_replies(conn, req, params, 30, *ppdata, 0, max_data_bytes);
1068 }
1069
1070 /*********************************************************
1071 Routine to check if a given string matches exactly.
1072 as a special case a mask of "." does NOT match. That
1073 is required for correct wildcard semantics
1074 Case can be significant or not.
1075 **********************************************************/
1076
1077 static bool exact_match(connection_struct *conn,
1078 const char *str,
1079 const char *mask)
1080 {
1081 if (mask[0] == '.' && mask[1] == 0)
1082 return False;
1083 if (dptr_has_wild(conn->dirptr)) {
1084 return False;
1085 }
1086 if (conn->case_sensitive)
1087 return strcmp(str,mask)==0;
1088 else
1089 return StrCaseCmp(str,mask) == 0;
1090 }
1091
1092 /****************************************************************************
1093 Return the filetype for UNIX extensions.
1094 ****************************************************************************/
1095
1096 static uint32 unix_filetype(mode_t mode)
1097 {
1098 if(S_ISREG(mode))
1099 return UNIX_TYPE_FILE;
1100 else if(S_ISDIR(mode))
1101 return UNIX_TYPE_DIR;
1102 #ifdef S_ISLNK
1103 else if(S_ISLNK(mode))
1104 return UNIX_TYPE_SYMLINK;
1105 #endif
1106 #ifdef S_ISCHR
1107 else if(S_ISCHR(mode))
1108 return UNIX_TYPE_CHARDEV;
1109 #endif
1110 #ifdef S_ISBLK
1111 else if(S_ISBLK(mode))
1112 return UNIX_TYPE_BLKDEV;
1113 #endif
1114 #ifdef S_ISFIFO
1115 else if(S_ISFIFO(mode))
1116 return UNIX_TYPE_FIFO;
1117 #endif
1118 #ifdef S_ISSOCK
1119 else if(S_ISSOCK(mode))
1120 return UNIX_TYPE_SOCKET;
1121 #endif
1122
1123 DEBUG(0,("unix_filetype: unknown filetype %u\n", (unsigned)mode));
1124 return UNIX_TYPE_UNKNOWN;
1125 }
1126
1127 /****************************************************************************
1128 Map wire perms onto standard UNIX permissions. Obey share restrictions.
1129 ****************************************************************************/
1130
1131 enum perm_type { PERM_NEW_FILE, PERM_NEW_DIR, PERM_EXISTING_FILE, PERM_EXISTING_DIR};
1132
1133 static NTSTATUS unix_perms_from_wire( connection_struct *conn,
1134 SMB_STRUCT_STAT *psbuf,
1135 uint32 perms,
1136 enum perm_type ptype,
1137 mode_t *ret_perms)
1138 {
1139 mode_t ret = 0;
1140
1141 if (perms == SMB_MODE_NO_CHANGE) {
1142 if (!VALID_STAT(*psbuf)) {
1143 return NT_STATUS_INVALID_PARAMETER;
1144 } else {
1145 *ret_perms = psbuf->st_mode;
1146 return NT_STATUS_OK;
1147 }
1148 }
1149
1150 ret |= ((perms & UNIX_X_OTH ) ? S_IXOTH : 0);
1151 ret |= ((perms & UNIX_W_OTH ) ? S_IWOTH : 0);
1152 ret |= ((perms & UNIX_R_OTH ) ? S_IROTH : 0);
1153 ret |= ((perms & UNIX_X_GRP ) ? S_IXGRP : 0);
1154 ret |= ((perms & UNIX_W_GRP ) ? S_IWGRP : 0);
1155 ret |= ((perms & UNIX_R_GRP ) ? S_IRGRP : 0);
1156 ret |= ((perms & UNIX_X_USR ) ? S_IXUSR : 0);
1157 ret |= ((perms & UNIX_W_USR ) ? S_IWUSR : 0);
1158 ret |= ((perms & UNIX_R_USR ) ? S_IRUSR : 0);
1159 #ifdef S_ISVTX
1160 ret |= ((perms & UNIX_STICKY ) ? S_ISVTX : 0);
1161 #endif
1162 #ifdef S_ISGID
1163 ret |= ((perms & UNIX_SET_GID ) ? S_ISGID : 0);
1164 #endif
1165 #ifdef S_ISUID
1166 ret |= ((perms & UNIX_SET_UID ) ? S_ISUID : 0);
1167 #endif
1168
1169 switch (ptype) {
1170 case PERM_NEW_FILE:
1171 /* Apply mode mask */
1172 ret &= lp_create_mask(SNUM(conn));
1173 /* Add in force bits */
1174 ret |= lp_force_create_mode(SNUM(conn));
1175 break;
1176 case PERM_NEW_DIR:
1177 ret &= lp_dir_mask(SNUM(conn));
1178 /* Add in force bits */
1179 ret |= lp_force_dir_mode(SNUM(conn));
1180 break;
1181 case PERM_EXISTING_FILE:
1182 /* Apply mode mask */
1183 ret &= lp_security_mask(SNUM(conn));
1184 /* Add in force bits */
1185 ret |= lp_force_security_mode(SNUM(conn));
1186 break;
1187 case PERM_EXISTING_DIR:
1188 /* Apply mode mask */
1189 ret &= lp_dir_security_mask(SNUM(conn));
1190 /* Add in force bits */
1191 ret |= lp_force_dir_security_mode(SNUM(conn));
1192 break;
1193 }
1194
1195 *ret_perms = ret;
1196 return NT_STATUS_OK;
1197 }
1198
1199 /****************************************************************************
1200 Needed to show the msdfs symlinks as directories. Modifies psbuf
1201 to be a directory if it's a msdfs link.
1202 ****************************************************************************/
1203
1204 static bool check_msdfs_link(connection_struct *conn,
1205 const char *pathname,
1206 SMB_STRUCT_STAT *psbuf)
1207 {
1208 int saved_errno = errno;
1209 if(lp_host_msdfs() &&
1210 lp_msdfs_root(SNUM(conn)) &&
1211 is_msdfs_link(conn, pathname, psbuf)) {
1212
1213 DEBUG(5,("check_msdfs_link: Masquerading msdfs link %s "
1214 "as a directory\n",
1215 pathname));
1216 psbuf->st_mode = (psbuf->st_mode & 0xFFF) | S_IFDIR;
1217 errno = saved_errno;
1218 return true;
1219 }
1220 errno = saved_errno;
1221 return false;
1222 }
1223
1224
1225 /****************************************************************************
1226 Get a level dependent lanman2 dir entry.
1227 ****************************************************************************/
1228
1229 static bool get_lanman2_dir_entry(TALLOC_CTX *ctx,
1230 connection_struct *conn,
1231 uint16 flags2,
1232 const char *path_mask,
1233 uint32 dirtype,
1234 int info_level,
1235 int requires_resume_key,
1236 bool dont_descend,
1237 bool ask_sharemode,
1238 char **ppdata,
1239 char *base_data,
1240 char *end_data,
1241 int space_remaining,
1242 bool *out_of_space,
1243 bool *got_exact_match,
1244 int *last_entry_off,
1245 struct ea_list *name_list)
1246 {
1247 const char *dname;
1248 bool found = False;
1249 SMB_STRUCT_STAT sbuf;
1250 const char *mask = NULL;
1251 char *pathreal = NULL;
1252 const char *fname = NULL;
1253 char *p, *q, *pdata = *ppdata;
1254 uint32 reskey=0;
1255 long prev_dirpos=0;
1256 uint32 mode=0;
1257 SMB_OFF_T file_size = 0;
1258 SMB_BIG_UINT allocation_size = 0;
1259 uint32 len;
1260 struct timespec mdate_ts, adate_ts, create_date_ts;
1261 time_t mdate = (time_t)0, adate = (time_t)0, create_date = (time_t)0;
1262 char *nameptr;
1263 char *last_entry_ptr;
1264 bool was_8_3;
1265 uint32 nt_extmode; /* Used for NT connections instead of mode */
1266 bool needslash = ( conn->dirpath[strlen(conn->dirpath) -1] != '/');
1267 bool check_mangled_names = lp_manglednames(conn->params);
1268 char mangled_name[13]; /* mangled 8.3 name. */
1269
1270 *out_of_space = False;
1271 *got_exact_match = False;
1272
1273 ZERO_STRUCT(mdate_ts);
1274 ZERO_STRUCT(adate_ts);
1275 ZERO_STRUCT(create_date_ts);
1276
1277 if (!conn->dirptr) {
1278 return(False);
1279 }
1280
1281 p = strrchr_m(path_mask,'/');
1282 if(p != NULL) {
1283 if(p[1] == '\0') {
1284 mask = talloc_strdup(ctx,"*.*");
1285 } else {
1286 mask = p+1;
1287 }
1288 } else {
1289 mask = path_mask;
1290 }
1291
1292 while (!found) {
1293 bool got_match;
1294 bool ms_dfs_link = False;
1295
1296 /* Needed if we run out of space */
1297 long curr_dirpos = prev_dirpos = dptr_TellDir(conn->dirptr);
1298 dname = dptr_ReadDirName(ctx,conn->dirptr,&curr_dirpos,&sbuf);
1299
1300 /*
1301 * Due to bugs in NT client redirectors we are not using
1302 * resume keys any more - set them to zero.
1303 * Check out the related comments in findfirst/findnext.
1304 * JRA.
1305 */
1306
1307 reskey = 0;
1308
1309 DEBUG(8,("get_lanman2_dir_entry:readdir on dirptr 0x%lx now at offset %ld\n",
1310 (long)conn->dirptr,curr_dirpos));
1311
1312 if (!dname) {
1313 return(False);
1314 }
1315
1316 /*
1317 * fname may get mangled, dname is never mangled.
1318 * Whenever we're accessing the filesystem we use
1319 * pathreal which is composed from dname.
1320 */
1321
1322 pathreal = NULL;
1323 fname = dname;
1324
1325 /* Mangle fname if it's an illegal name. */
1326 if (mangle_must_mangle(dname,conn->params)) {
1327 if (!name_to_8_3(dname,mangled_name,True,conn->params)) {
1328 continue; /* Error - couldn't mangle. */
1329 }
1330 fname = mangled_name;
1331 }
1332
1333 if(!(got_match = *got_exact_match = exact_match(conn, fname, mask))) {
1334 got_match = mask_match(fname, mask, conn->case_sensitive);
1335 }
1336
1337 if(!got_match && check_mangled_names &&
1338 !mangle_is_8_3(fname, False, conn->params)) {
1339 /*
1340 * It turns out that NT matches wildcards against
1341 * both long *and* short names. This may explain some
1342 * of the wildcard wierdness from old DOS clients
1343 * that some people have been seeing.... JRA.
1344 */
1345 /* Force the mangling into 8.3. */
1346 if (!name_to_8_3( fname, mangled_name, False, conn->params)) {
1347 continue; /* Error - couldn't mangle. */
1348 }
1349
1350 if(!(got_match = *got_exact_match = exact_match(conn, mangled_name, mask))) {
1351 got_match = mask_match(mangled_name, mask, conn->case_sensitive);
1352 }
1353 }
1354
1355 if (got_match) {
1356 bool isdots = (ISDOT(dname) || ISDOTDOT(dname));
1357
1358 if (dont_descend && !isdots) {
1359 continue;
1360 }
1361
1362 if (needslash) {
1363 pathreal = NULL;
1364 pathreal = talloc_asprintf(ctx,
1365 "%s/%s",
1366 conn->dirpath,
1367 dname);
1368 } else {
1369 pathreal = talloc_asprintf(ctx,
1370 "%s%s",
1371 conn->dirpath,
1372 dname);
1373 }
1374
1375 if (!pathreal) {
1376 return False;
1377 }
1378
1379 if (INFO_LEVEL_IS_UNIX(info_level)) {
1380 if (SMB_VFS_LSTAT(conn,pathreal,&sbuf) != 0) {
1381 DEBUG(5,("get_lanman2_dir_entry:Couldn't lstat [%s] (%s)\n",
1382 pathreal,strerror(errno)));
1383 TALLOC_FREE(pathreal);
1384 continue;
1385 }
1386 } else if (!VALID_STAT(sbuf) && SMB_VFS_STAT(conn,pathreal,&sbuf) != 0) {
1387 /* Needed to show the msdfs symlinks as
1388 * directories */
1389
1390 ms_dfs_link = check_msdfs_link(conn, pathreal, &sbuf);
1391 if (!ms_dfs_link) {
1392 DEBUG(5,("get_lanman2_dir_entry:Couldn't stat [%s] (%s)\n",
1393 pathreal,strerror(errno)));
1394 TALLOC_FREE(pathreal);
1395 continue;
1396 }
1397 }
1398
1399 if (ms_dfs_link) {
1400 mode = dos_mode_msdfs(conn,pathreal,&sbuf);
1401 } else {
1402 mode = dos_mode(conn,pathreal,&sbuf);
1403 }
1404
1405 if (!dir_check_ftype(conn,mode,dirtype)) {
1406 DEBUG(5,("get_lanman2_dir_entry: [%s] attribs didn't match %x\n",fname,dirtype));
1407 TALLOC_FREE(pathreal);
1408 continue;
1409 }
1410
1411 if (!(mode & aDIR)) {
1412 file_size = get_file_size(sbuf);
1413 }
1414 allocation_size = get_allocation_size(conn,NULL,&sbuf);
1415
1416 mdate_ts = get_mtimespec(&sbuf);
1417 adate_ts = get_atimespec(&sbuf);
1418 create_date_ts = get_create_timespec(&sbuf,lp_fake_dir_create_times(SNUM(conn)));
1419
1420 if (ask_sharemode) {
1421 struct timespec write_time_ts;
1422 struct file_id fileid;
1423
1424 fileid = vfs_file_id_from_sbuf(conn, &sbuf);
1425 get_file_infos(fileid, NULL, &write_time_ts);
1426 if (!null_timespec(write_time_ts)) {
1427 mdate_ts = write_time_ts;
1428 }
1429 }
1430
1431 if (lp_dos_filetime_resolution(SNUM(conn))) {
1432 dos_filetime_timespec(&create_date_ts);
1433 dos_filetime_timespec(&mdate_ts);
1434 dos_filetime_timespec(&adate_ts);
1435 }
1436
1437 create_date = convert_timespec_to_time_t(create_date_ts);
1438 mdate = convert_timespec_to_time_t(mdate_ts);
1439 adate = convert_timespec_to_time_t(adate_ts);
1440
1441 DEBUG(5,("get_lanman2_dir_entry: found %s fname=%s\n",pathreal,fname));
1442
1443 found = True;
1444
1445 dptr_DirCacheAdd(conn->dirptr, dname, curr_dirpos);
1446 }
1447 }
1448
1449 p = pdata;
1450 last_entry_ptr = p;
1451
1452 nt_extmode = mode ? mode : FILE_ATTRIBUTE_NORMAL;
1453
1454 switch (info_level) {
1455 case SMB_FIND_INFO_STANDARD:
1456 DEBUG(10,("get_lanman2_dir_entry: SMB_FIND_INFO_STANDARD\n"));
1457 if(requires_resume_key) {
1458 SIVAL(p,0,reskey);
1459 p += 4;
1460 }
1461 srv_put_dos_date2(p,0,create_date);
1462 srv_put_dos_date2(p,4,adate);
1463 srv_put_dos_date2(p,8,mdate);
1464 SIVAL(p,12,(uint32)file_size);
1465 SIVAL(p,16,(uint32)allocation_size);
1466 SSVAL(p,20,mode);
1467 p += 23;
1468 nameptr = p;
1469 if (flags2 & FLAGS2_UNICODE_STRINGS) {
1470 p += ucs2_align(base_data, p, 0);
1471 }
1472 len = srvstr_push(base_data, flags2, p,
1473 fname, PTR_DIFF(end_data, p),
1474 STR_TERMINATE);
1475 if (flags2 & FLAGS2_UNICODE_STRINGS) {
1476 if (len > 2) {
1477 SCVAL(nameptr, -1, len - 2);
1478 } else {
1479 SCVAL(nameptr, -1, 0);
1480 }
1481 } else {
1482 if (len > 1) {
1483 SCVAL(nameptr, -1, len - 1);
1484 } else {
1485 SCVAL(nameptr, -1, 0);
1486 }
1487 }
1488 p += len;
1489 break;
1490
1491 case SMB_FIND_EA_SIZE:
1492 DEBUG(10,("get_lanman2_dir_entry: SMB_FIND_EA_SIZE\n"));
1493 if(requires_resume_key) {
1494 SIVAL(p,0,reskey);
1495 p += 4;
1496 }
1497 srv_put_dos_date2(p,0,create_date);
1498 srv_put_dos_date2(p,4,adate);
1499 srv_put_dos_date2(p,8,mdate);
1500 SIVAL(p,12,(uint32)file_size);
1501 SIVAL(p,16,(uint32)allocation_size);
1502 SSVAL(p,20,mode);
1503 {
1504 unsigned int ea_size = estimate_ea_size(conn, NULL, pathreal);
1505 SIVAL(p,22,ea_size); /* Extended attributes */
1506 }
1507 p += 27;
1508 nameptr = p - 1;
1509 len = srvstr_push(base_data, flags2,
1510 p, fname, PTR_DIFF(end_data, p),
1511 STR_TERMINATE | STR_NOALIGN);
1512 if (flags2 & FLAGS2_UNICODE_STRINGS) {
1513 if (len > 2) {
1514 len -= 2;
1515 } else {
1516 len = 0;
1517 }
1518 } else {
1519 if (len > 1) {
1520 len -= 1;
1521 } else {
1522 len = 0;
1523 }
1524 }
1525 SCVAL(nameptr,0,len);
1526 p += len;
1527 SCVAL(p,0,0); p += 1; /* Extra zero byte ? - why.. */
1528 break;
1529
1530 case SMB_FIND_EA_LIST:
1531 {
1532 struct ea_list *file_list = NULL;
1533 size_t ea_len = 0;
1534
1535 DEBUG(10,("get_lanman2_dir_entry: SMB_FIND_EA_LIST\n"));
1536 if (!name_list) {
1537 return False;
1538 }
1539 if(requires_resume_key) {
1540 SIVAL(p,0,reskey);
1541 p += 4;
1542 }
1543 srv_put_dos_date2(p,0,create_date);
1544 srv_put_dos_date2(p,4,adate);
1545 srv_put_dos_date2(p,8,mdate);
1546 SIVAL(p,12,(uint32)file_size);
1547 SIVAL(p,16,(uint32)allocation_size);
1548 SSVAL(p,20,mode);
1549 p += 22; /* p now points to the EA area. */
1550
1551 file_list = get_ea_list_from_file(ctx, conn, NULL, pathreal, &ea_len);
1552 name_list = ea_list_union(name_list, file_list, &ea_len);
1553
1554 /* We need to determine if this entry will fit in the space available. */
1555 /* Max string size is 255 bytes. */
1556 if (PTR_DIFF(p + 255 + ea_len,pdata) > space_remaining) {
1557 /* Move the dirptr back to prev_dirpos */
1558 dptr_SeekDir(conn->dirptr, prev_dirpos);
1559 *out_of_space = True;
1560 DEBUG(9,("get_lanman2_dir_entry: out of space\n"));
1561 return False; /* Not finished - just out of space */
1562 }
1563
1564 /* Push the ea_data followed by the name. */
1565 p += fill_ea_buffer(ctx, p, space_remaining, conn, name_list);
1566 nameptr = p;
1567 len = srvstr_push(base_data, flags2,
1568 p + 1, fname, PTR_DIFF(end_data, p+1),
1569 STR_TERMINATE | STR_NOALIGN);
1570 if (flags2 & FLAGS2_UNICODE_STRINGS) {
1571 if (len > 2) {
1572 len -= 2;
1573 } else {
1574 len = 0;
1575 }
1576 } else {
1577 if (len > 1) {
1578 len -= 1;
1579 } else {
1580 len = 0;
1581 }
1582 }
1583 SCVAL(nameptr,0,len);
1584 p += len + 1;
1585 SCVAL(p,0,0); p += 1; /* Extra zero byte ? - why.. */
1586 break;
1587 }
1588
1589 case SMB_FIND_FILE_BOTH_DIRECTORY_INFO:
1590 DEBUG(10,("get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO\n"));
1591 was_8_3 = mangle_is_8_3(fname, True, conn->params);
1592 p += 4;
1593 SIVAL(p,0,reskey); p += 4;
1594 put_long_date_timespec(p,create_date_ts); p += 8;
1595 put_long_date_timespec(p,adate_ts); p += 8;
1596 put_long_date_timespec(p,mdate_ts); p += 8;
1597 put_long_date_timespec(p,mdate_ts); p += 8;
1598 SOFF_T(p,0,file_size); p += 8;
1599 SOFF_T(p,0,allocation_size); p += 8;
1600 SIVAL(p,0,nt_extmode); p += 4;
1601 q = p; p += 4; /* q is placeholder for name length. */
1602 {
1603 unsigned int ea_size = estimate_ea_size(conn, NULL, pathreal);
1604 SIVAL(p,0,ea_size); /* Extended attributes */
1605 p += 4;
1606 }
1607 /* Clear the short name buffer. This is
1608 * IMPORTANT as not doing so will trigger
1609 * a Win2k client bug. JRA.
1610 */
1611 if (!was_8_3 && check_mangled_names) {
1612 if (!name_to_8_3(fname,mangled_name,True,
1613 conn->params)) {
1614 /* Error - mangle failed ! */
1615 memset(mangled_name,'\0',12);
1616 }
1617 mangled_name[12] = 0;
1618 len = srvstr_push(base_data, flags2,
1619 p+2, mangled_name, 24,
1620 STR_UPPER|STR_UNICODE);
1621 if (len < 24) {
1622 memset(p + 2 + len,'\0',24 - len);
1623 }
1624 SSVAL(p, 0, len);
1625 } else {
1626 memset(p,'\0',26);
1627 }
1628 p += 2 + 24;
1629 len = srvstr_push(base_data, flags2, p,
1630 fname, PTR_DIFF(end_data, p),
1631 STR_TERMINATE_ASCII);
1632 SIVAL(q,0,len);
1633 p += len;
1634 SIVAL(p,0,0); /* Ensure any padding is null. */
1635 len = PTR_DIFF(p, pdata);
1636 len = (len + 3) & ~3;
1637 SIVAL(pdata,0,len);
1638 p = pdata + len;
1639 break;
1640
1641 case SMB_FIND_FILE_DIRECTORY_INFO:
1642 DEBUG(10,("get_lanman2_dir_entry: SMB_FIND_FILE_DIRECTORY_INFO\n"));
1643 p += 4;
1644 SIVAL(p,0,reskey); p += 4;
1645 put_long_date_timespec(p,create_date_ts); p += 8;
1646 put_long_date_timespec(p,adate_ts); p += 8;
1647 put_long_date_timespec(p,mdate_ts); p += 8;
1648 put_long_date_timespec(p,mdate_ts); p += 8;
1649 SOFF_T(p,0,file_size); p += 8;
1650 SOFF_T(p,0,allocation_size); p += 8;
1651 SIVAL(p,0,nt_extmode); p += 4;
1652 len = srvstr_push(base_data, flags2,
1653 p + 4, fname, PTR_DIFF(end_data, p+4),
1654 STR_TERMINATE_ASCII);
1655 SIVAL(p,0,len);
1656 p += 4 + len;
1657 SIVAL(p,0,0); /* Ensure any padding is null. */
1658 len = PTR_DIFF(p, pdata);
1659 len = (len + 3) & ~3;
1660 SIVAL(pdata,0,len);
1661 p = pdata + len;
1662 break;
1663
1664 case SMB_FIND_FILE_FULL_DIRECTORY_INFO:
1665 DEBUG(10,("get_lanman2_dir_entry: SMB_FIND_FILE_FULL_DIRECTORY_INFO\n"));
1666 p += 4;
1667 SIVAL(p,0,reskey); p += 4;
1668 put_long_date_timespec(p,create_date_ts); p += 8;
1669 put_long_date_timespec(p,adate_ts); p += 8;
1670 put_long_date_timespec(p,mdate_ts); p += 8;
1671 put_long_date_timespec(p,mdate_ts); p += 8;
1672 SOFF_T(p,0,file_size); p += 8;
1673 SOFF_T(p,0,allocation_size); p += 8;
1674 SIVAL(p,0,nt_extmode); p += 4;
1675 q = p; p += 4; /* q is placeholder for name length. */
1676 {
1677 unsigned int ea_size = estimate_ea_size(conn, NULL, pathreal);
1678 SIVAL(p,0,ea_size); /* Extended attributes */
1679 p +=4;
1680 }
1681 len = srvstr_push(base_data, flags2, p,
1682 fname, PTR_DIFF(end_data, p),
1683 STR_TERMINATE_ASCII);
1684 SIVAL(q, 0, len);
1685 p += len;
1686
1687 SIVAL(p,0,0); /* Ensure any padding is null. */
1688 len = PTR_DIFF(p, pdata);
1689 len = (len + 3) & ~3;
1690 SIVAL(pdata,0,len);
1691 p = pdata + len;
1692 break;
1693
1694 case SMB_FIND_FILE_NAMES_INFO:
1695 DEBUG(10,("get_lanman2_dir_entry: SMB_FIND_FILE_NAMES_INFO\n"));
1696 p += 4;
1697 SIVAL(p,0,reskey); p += 4;
1698 p += 4;
1699 /* this must *not* be null terminated or w2k gets in a loop trying to set an
1700 acl on a dir (tridge) */
1701 len = srvstr_push(base_data, flags2, p,
1702 fname, PTR_DIFF(end_data, p),
1703 STR_TERMINATE_ASCII);
1704 SIVAL(p, -4, len);
1705 p += len;
1706 SIVAL(p,0,0); /* Ensure any padding is null. */
1707 len = PTR_DIFF(p, pdata);
1708 len = (len + 3) & ~3;
1709 SIVAL(pdata,0,len);
1710 p = pdata + len;
1711 break;
1712
1713 case SMB_FIND_ID_FULL_DIRECTORY_INFO:
1714 DEBUG(10,("get_lanman2_dir_entry: SMB_FIND_ID_FULL_DIRECTORY_INFO\n"));
1715 p += 4;
1716 SIVAL(p,0,reskey); p += 4;
1717 put_long_date_timespec(p,create_date_ts); p += 8;
1718 put_long_date_timespec(p,adate_ts); p += 8;
1719 put_long_date_timespec(p,mdate_ts); p += 8;
1720 put_long_date_timespec(p,mdate_ts); p += 8;
1721 SOFF_T(p,0,file_size); p += 8;
1722 SOFF_T(p,0,allocation_size); p += 8;
1723 SIVAL(p,0,nt_extmode); p += 4;
1724 q = p; p += 4; /* q is placeholder for name length. */
1725 {
1726 unsigned int ea_size = estimate_ea_size(conn, NULL, pathreal);
1727 SIVAL(p,0,ea_size); /* Extended attributes */
1728 p +=4;
1729 }
1730 SIVAL(p,0,0); p += 4; /* Unknown - reserved ? */
1731 SIVAL(p,0,sbuf.st_ino); p += 4; /* FileIndexLow */
1732 SIVAL(p,0,sbuf.st_dev); p += 4; /* FileIndexHigh */
1733 len = srvstr_push(base_data, flags2, p,
1734 fname, PTR_DIFF(end_data, p),
1735 STR_TERMINATE_ASCII);
1736 SIVAL(q, 0, len);
1737 p += len;
1738 SIVAL(p,0,0); /* Ensure any padding is null. */
1739 len = PTR_DIFF(p, pdata);
1740 len = (len + 3) & ~3;
1741 SIVAL(pdata,0,len);
1742 p = pdata + len;
1743 break;
1744
1745 case SMB_FIND_ID_BOTH_DIRECTORY_INFO:
1746 DEBUG(10,("get_lanman2_dir_entry: SMB_FIND_ID_BOTH_DIRECTORY_INFO\n"));
1747 was_8_3 = mangle_is_8_3(fname, True, conn->params);
1748 p += 4;
1749 SIVAL(p,0,reskey); p += 4;
1750 put_long_date_timespec(p,create_date_ts); p += 8;
1751 put_long_date_timespec(p,adate_ts); p += 8;
1752 put_long_date_timespec(p,mdate_ts); p += 8;
1753 put_long_date_timespec(p,mdate_ts); p += 8;
1754 SOFF_T(p,0,file_size); p += 8;
1755 SOFF_T(p,0,allocation_size); p += 8;
1756 SIVAL(p,0,nt_extmode); p += 4;
1757 q = p; p += 4; /* q is placeholder for name length */
1758 {
1759 unsigned int ea_size = estimate_ea_size(conn, NULL, pathreal);
1760 SIVAL(p,0,ea_size); /* Extended attributes */
1761 p +=4;
1762 }
1763 /* Clear the short name buffer. This is
1764 * IMPORTANT as not doing so will trigger
1765 * a Win2k client bug. JRA.
1766 */
1767 if (!was_8_3 && check_mangled_names) {
1768 if (!name_to_8_3(fname,mangled_name,True,
1769 conn->params)) {
1770 /* Error - mangle failed ! */
1771 memset(mangled_name,'\0',12);
1772 }
1773 mangled_name[12] = 0;
1774 len = srvstr_push(base_data, flags2,
1775 p+2, mangled_name, 24,
1776 STR_UPPER|STR_UNICODE);
1777 SSVAL(p, 0, len);
1778 if (len < 24) {
1779 memset(p + 2 + len,'\0',24 - len);
1780 }
1781 SSVAL(p, 0, len);
1782 } else {
1783 memset(p,'\0',26);
1784 }
1785 p += 26;
1786 SSVAL(p,0,0); p += 2; /* Reserved ? */
1787 SIVAL(p,0,sbuf.st_ino); p += 4; /* FileIndexLow */
1788 SIVAL(p,0,sbuf.st_dev); p += 4; /* FileIndexHigh */
1789 len = srvstr_push(base_data, flags2, p,
1790 fname, PTR_DIFF(end_data, p),
1791 STR_TERMINATE_ASCII);
1792 SIVAL(q,0,len);
1793 p += len;
1794 SIVAL(p,0,0); /* Ensure any padding is null. */
1795 len = PTR_DIFF(p, pdata);
1796 len = (len + 3) & ~3;
1797 SIVAL(pdata,0,len);
1798 p = pdata + len;
1799 break;
1800
1801 /* CIFS UNIX Extension. */
1802
1803 case SMB_FIND_FILE_UNIX:
1804 case SMB_FIND_FILE_UNIX_INFO2:
1805 p+= 4;
1806 SIVAL(p,0,reskey); p+= 4; /* Used for continuing search. */
1807
1808 /* Begin of SMB_QUERY_FILE_UNIX_BASIC */
1809
1810 if (info_level == SMB_FIND_FILE_UNIX) {
1811 DEBUG(10,("get_lanman2_dir_entry: SMB_FIND_FILE_UNIX\n"));
1812 p = store_file_unix_basic(conn, p,
1813 NULL, &sbuf);
1814 len = srvstr_push(base_data, flags2, p,
1815 fname, PTR_DIFF(end_data, p),
1816 STR_TERMINATE);
1817 } else {
1818 DEBUG(10,("get_lanman2_dir_entry: SMB_FIND_FILE_UNIX_INFO2\n"));
1819 p = store_file_unix_basic_info2(conn, p,
1820 NULL, &sbuf);
1821 nameptr = p;
1822 p += 4;
1823 len = srvstr_push(base_data, flags2, p, fname,
1824 PTR_DIFF(end_data, p), 0);
1825 SIVAL(nameptr, 0, len);
1826 }
1827
1828 p += len;
1829 SIVAL(p,0,0); /* Ensure any padding is null. */
1830
1831 len = PTR_DIFF(p, pdata);
1832 len = (len + 3) & ~3;
1833 SIVAL(pdata,0,len); /* Offset from this structure to the beginning of the next one */
1834 p = pdata + len;
1835 /* End of SMB_QUERY_FILE_UNIX_BASIC */
1836
1837 break;
1838
1839 default:
1840 return(False);
1841 }
1842
1843
1844 if (PTR_DIFF(p,pdata) > space_remaining) {
1845 /* Move the dirptr back to prev_dirpos */
1846 dptr_SeekDir(conn->dirptr, prev_dirpos);
1847 *out_of_space = True;
1848 DEBUG(9,("get_lanman2_dir_entry: out of space\n"));
1849 return False; /* Not finished - just out of space */
1850 }
1851
1852 /* Setup the last entry pointer, as an offset from base_data */
1853 *last_entry_off = PTR_DIFF(last_entry_ptr,base_data);
1854 /* Advance the data pointer to the next slot */
1855 *ppdata = p;
1856
1857 return(found);
1858 }
1859
1860 /****************************************************************************
1861 Reply to a TRANS2_FINDFIRST.
1862 ****************************************************************************/
1863
1864 static void call_trans2findfirst(connection_struct *conn,
1865 struct smb_request *req,
1866 char **pparams, int total_params,
1867 char **ppdata, int total_data,
1868 unsigned int max_data_bytes)
1869 {
1870 /* We must be careful here that we don't return more than the
1871 allowed number of data bytes. If this means returning fewer than
1872 maxentries then so be it. We assume that the redirector has
1873 enough room for the fixed number of parameter bytes it has
1874 requested. */
1875 char *params = *pparams;
1876 char *pdata = *ppdata;
1877 char *data_end;
1878 uint32 dirtype;
1879 int maxentries;
1880 uint16 findfirst_flags;
1881 bool close_after_first;
1882 bool close_if_end;
1883 bool requires_resume_key;
1884 int info_level;
1885 char *directory = NULL;
1886 char *mask = NULL;
1887 char *p;
1888 int last_entry_off=0;
1889 int dptr_num = -1;
1890 int numentries = 0;
1891 int i;
1892 bool finished = False;
1893 bool dont_descend = False;
1894 bool out_of_space = False;
1895 int space_remaining;
1896 bool mask_contains_wcard = False;
1897 SMB_STRUCT_STAT sbuf;
1898 struct ea_list *ea_list = NULL;
1899 NTSTATUS ntstatus = NT_STATUS_OK;
1900 bool ask_sharemode = lp_parm_bool(SNUM(conn), "smbd", "search ask sharemode", true);
1901 TALLOC_CTX *ctx = talloc_tos();
1902
1903 if (total_params < 13) {
1904 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
1905 return;
1906 }
1907
1908 dirtype = SVAL(params,0);
1909 maxentries = SVAL(params,2);
1910 findfirst_flags = SVAL(params,4);
1911 close_after_first = (findfirst_flags & FLAG_TRANS2_FIND_CLOSE);
1912 close_if_end = (findfirst_flags & FLAG_TRANS2_FIND_CLOSE_IF_END);
1913 requires_resume_key = (findfirst_flags & FLAG_TRANS2_FIND_REQUIRE_RESUME);
1914 info_level = SVAL(params,6);
1915
1916 DEBUG(3,("call_trans2findfirst: dirtype = %x, maxentries = %d, close_after_first=%d, \
1917 close_if_end = %d requires_resume_key = %d level = 0x%x, max_data_bytes = %d\n",
1918 (unsigned int)dirtype, maxentries, close_after_first, close_if_end, requires_resume_key,
1919 info_level, max_data_bytes));
1920
1921 if (!maxentries) {
1922 /* W2K3 seems to treat zero as 1. */
1923 maxentries = 1;
1924 }
1925
1926 switch (info_level) {
1927 case SMB_FIND_INFO_STANDARD:
1928 case SMB_FIND_EA_SIZE:
1929 case SMB_FIND_EA_LIST:
1930 case SMB_FIND_FILE_DIRECTORY_INFO:
1931 case SMB_FIND_FILE_FULL_DIRECTORY_INFO:
1932 case SMB_FIND_FILE_NAMES_INFO:
1933 case SMB_FIND_FILE_BOTH_DIRECTORY_INFO:
1934 case SMB_FIND_ID_FULL_DIRECTORY_INFO:
1935 case SMB_FIND_ID_BOTH_DIRECTORY_INFO:
1936 break;
1937 case SMB_FIND_FILE_UNIX:
1938 case SMB_FIND_FILE_UNIX_INFO2:
1939 /* Always use filesystem for UNIX mtime query. */
1940 ask_sharemode = false;
1941 if (!lp_unix_extensions()) {
1942 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
1943 return;
1944 }
1945 break;
1946 default:
1947 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
1948 return;
1949 }
1950
1951 srvstr_get_path_wcard(ctx, params, req->flags2, &directory,
1952 params+12, total_params - 12,
1953 STR_TERMINATE, &ntstatus, &mask_contains_wcard);
1954 if (!NT_STATUS_IS_OK(ntstatus)) {
1955 reply_nterror(req, ntstatus);
1956 return;
1957 }
1958
1959 ntstatus = resolve_dfspath_wcard(ctx, conn,
1960 req->flags2 & FLAGS2_DFS_PATHNAMES,
1961 directory,
1962 &directory,
1963 &mask_contains_wcard);
1964 if (!NT_STATUS_IS_OK(ntstatus)) {
1965 if (NT_STATUS_EQUAL(ntstatus,NT_STATUS_PATH_NOT_COVERED)) {
1966 reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
1967 ERRSRV, ERRbadpath);
1968 return;
1969 }
1970 reply_nterror(req, ntstatus);
1971 return;
1972 }
1973
1974 ntstatus = unix_convert(ctx, conn, directory, True, &directory, &mask, &sbuf);
1975 if (!NT_STATUS_IS_OK(ntstatus)) {
1976 reply_nterror(req, ntstatus);
1977 return;
1978 }
1979
1980 ntstatus = check_name(conn, directory);
1981 if (!NT_STATUS_IS_OK(ntstatus)) {
1982 reply_nterror(req, ntstatus);
1983 return;
1984 }
1985
1986 p = strrchr_m(directory,'/');
1987 if(p == NULL) {
1988 /* Windows and OS/2 systems treat search on the root '\' as if it were '\*' */
1989 if((directory[0] == '.') && (directory[1] == '\0')) {
1990 mask = talloc_strdup(ctx,"*");
1991 if (!mask) {
1992 reply_nterror(req, NT_STATUS_NO_MEMORY);
1993 return;
1994 }
1995 mask_contains_wcard = True;
1996 }
1997 directory = talloc_strdup(talloc_tos(), "./");
1998 if (!directory) {
1999 reply_nterror(req, NT_STATUS_NO_MEMORY);
2000 return;
2001 }
2002 } else {
2003 *p = 0;
2004 }
2005
2006 DEBUG(5,("dir=%s, mask = %s\n",directory, mask));
2007
2008 if (info_level == SMB_FIND_EA_LIST) {
2009 uint32 ea_size;
2010
2011 if (total_data < 4) {
2012 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2013 return;
2014 }
2015
2016 ea_size = IVAL(pdata,0);
2017 if (ea_size != total_data) {
2018 DEBUG(4,("call_trans2findfirst: Rejecting EA request with incorrect \
2019 total_data=%u (should be %u)\n", (unsigned int)total_data, (unsigned int)IVAL(pdata,0) ));
2020 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2021 return;
2022 }
2023
2024 if (!lp_ea_support(SNUM(conn))) {
2025 reply_doserror(req, ERRDOS, ERReasnotsupported);
2026 return;
2027 }
2028
2029 /* Pull out the list of names. */
2030 ea_list = read_ea_name_list(ctx, pdata + 4, ea_size - 4);
2031 if (!ea_list) {
2032 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2033 return;
2034 }
2035 }
2036
2037 *ppdata = (char *)SMB_REALLOC(
2038 *ppdata, max_data_bytes + DIR_ENTRY_SAFETY_MARGIN);
2039 if(*ppdata == NULL ) {
2040 reply_nterror(req, NT_STATUS_NO_MEMORY);
2041 return;
2042 }
2043 pdata = *ppdata;
2044 data_end = pdata + max_data_bytes + DIR_ENTRY_SAFETY_MARGIN - 1;
2045
2046 /* Realloc the params space */
2047 *pparams = (char *)SMB_REALLOC(*pparams, 10);
2048 if (*pparams == NULL) {
2049 reply_nterror(req, NT_STATUS_NO_MEMORY);
2050 return;
2051 }
2052 params = *pparams;
2053
2054 /* Save the wildcard match and attribs we are using on this directory -
2055 needed as lanman2 assumes these are being saved between calls */
2056
2057 ntstatus = dptr_create(conn,
2058 directory,
2059 False,
2060 True,
2061 req->smbpid,
2062 mask,
2063 mask_contains_wcard,
2064 dirtype,
2065 &conn->dirptr);
2066
2067 if (!NT_STATUS_IS_OK(ntstatus)) {
2068 reply_nterror(req, ntstatus);
2069 return;
2070 }
2071
2072 dptr_num = dptr_dnum(conn->dirptr);
2073 DEBUG(4,("dptr_num is %d, wcard = %s, attr = %d\n", dptr_num, mask, dirtype));
2074
2075 /* We don't need to check for VOL here as this is returned by
2076 a different TRANS2 call. */
2077
2078 DEBUG(8,("dirpath=<%s> dontdescend=<%s>\n", conn->dirpath,lp_dontdescend(SNUM(conn))));
2079 if (in_list(conn->dirpath,lp_dontdescend(SNUM(conn)),conn->case_sensitive))
2080 dont_descend = True;
2081
2082 p = pdata;
2083 space_remaining = max_data_bytes;
2084 out_of_space = False;
2085
2086 for (i=0;(i<maxentries) && !finished && !out_of_space;i++) {
2087 bool got_exact_match = False;
2088
2089 /* this is a heuristic to avoid seeking the dirptr except when
2090 absolutely necessary. It allows for a filename of about 40 chars */
2091 if (space_remaining < DIRLEN_GUESS && numentries > 0) {
2092 out_of_space = True;
2093 finished = False;
2094 } else {
2095 finished = !get_lanman2_dir_entry(ctx,
2096 conn,
2097 req->flags2,
2098 mask,dirtype,info_level,
2099 requires_resume_key,dont_descend,
2100 ask_sharemode,
2101 &p,pdata,data_end,
2102 space_remaining, &out_of_space,
2103 &got_exact_match,
2104 &last_entry_off, ea_list);
2105 }
2106
2107 if (finished && out_of_space)
2108 finished = False;
2109
2110 if (!finished && !out_of_space)
2111 numentries++;
2112
2113 /*
2114 * As an optimisation if we know we aren't looking
2115 * for a wildcard name (ie. the name matches the wildcard exactly)
2116 * then we can finish on any (first) match.
2117 * This speeds up large directory searches. JRA.
2118 */
2119
2120 if(got_exact_match)
2121 finished = True;
2122
2123 /* Ensure space_remaining never goes -ve. */
2124 if (PTR_DIFF(p,pdata) > max_data_bytes) {
2125 space_remaining = 0;
2126 out_of_space = true;
2127 } else {
2128 space_remaining = max_data_bytes - PTR_DIFF(p,pdata);
2129 }
2130 }
2131
2132 /* Check if we can close the dirptr */
2133 if(close_after_first || (finished && close_if_end)) {
2134 DEBUG(5,("call_trans2findfirst - (2) closing dptr_num %d\n", dptr_num));
2135 dptr_close(&dptr_num);
2136 }
2137
2138 /*
2139 * If there are no matching entries we must return ERRDOS/ERRbadfile -
2140 * from observation of NT. NB. This changes to ERRDOS,ERRnofiles if
2141 * the protocol level is less than NT1. Tested with smbclient. JRA.
2142 * This should fix the OS/2 client bug #2335.
2143 */
2144
2145 if(numentries == 0) {
2146 dptr_close(&dptr_num);
2147 if (Protocol < PROTOCOL_NT1) {
2148 reply_doserror(req, ERRDOS, ERRnofiles);
2149 return;
2150 } else {
2151 reply_botherror(req, NT_STATUS_NO_SUCH_FILE,
2152 ERRDOS, ERRbadfile);
2153 return;
2154 }
2155 }
2156
2157 /* At this point pdata points to numentries directory entries. */
2158
2159 /* Set up the return parameter block */
2160 SSVAL(params,0,dptr_num);
2161 SSVAL(params,2,numentries);
2162 SSVAL(params,4,finished);
2163 SSVAL(params,6,0); /* Never an EA error */
2164 SSVAL(params,8,last_entry_off);
2165
2166 send_trans2_replies(conn, req, params, 10, pdata, PTR_DIFF(p,pdata),
2167 max_data_bytes);
2168
2169 if ((! *directory) && dptr_path(dptr_num)) {
2170 directory = talloc_strdup(talloc_tos(),dptr_path(dptr_num));
2171 if (!directory) {
2172 reply_nterror(req, NT_STATUS_NO_MEMORY);
2173 }
2174 }
2175
2176 DEBUG( 4, ( "%s mask=%s directory=%s dirtype=%d numentries=%d\n",
2177 smb_fn_name(CVAL(req->inbuf,smb_com)),
2178 mask, directory, dirtype, numentries ) );
2179
2180 /*
2181 * Force a name mangle here to ensure that the
2182 * mask as an 8.3 name is top of the mangled cache.
2183 * The reasons for this are subtle. Don't remove
2184 * this code unless you know what you are doing
2185 * (see PR#13758). JRA.
2186 */
2187
2188 if(!mangle_is_8_3_wildcards( mask, False, conn->params)) {
2189 char mangled_name[13];
2190 name_to_8_3(mask, mangled_name, True, conn->params);
2191 }
2192
2193 return;
2194 }
2195
2196 /****************************************************************************
2197 Reply to a TRANS2_FINDNEXT.
2198 ****************************************************************************/
2199
2200 static void call_trans2findnext(connection_struct *conn,
2201 struct smb_request *req,
2202 char **pparams, int total_params,
2203 char **ppdata, int total_data,
2204 unsigned int max_data_bytes)
2205 {
2206 /* We must be careful here that we don't return more than the
2207 allowed number of data bytes. If this means returning fewer than
2208 maxentries then so be it. We assume that the redirector has
2209 enough room for the fixed number of parameter bytes it has
2210 requested. */
2211 char *params = *pparams;
2212 char *pdata = *ppdata;
2213 char *data_end;
2214 int dptr_num;
2215 int maxentries;
2216 uint16 info_level;
2217 uint32 resume_key;
2218 uint16 findnext_flags;
2219 bool close_after_request;
2220 bool close_if_end;
2221 bool requires_resume_key;
2222 bool continue_bit;
2223 bool mask_contains_wcard = False;
2224 char *resume_name = NULL;
2225 const char *mask = NULL;
2226 const char *directory = NULL;
2227 char *p = NULL;
2228 uint16 dirtype;
2229 int numentries = 0;
2230 int i, last_entry_off=0;
2231 bool finished = False;
2232 bool dont_descend = False;
2233 bool out_of_space = False;
2234 int space_remaining;
2235 struct ea_list *ea_list = NULL;
2236 NTSTATUS ntstatus = NT_STATUS_OK;
2237 bool ask_sharemode = lp_parm_bool(SNUM(conn), "smbd", "search ask sharemode", true);
2238 TALLOC_CTX *ctx = talloc_tos();
2239
2240 if (total_params < 13) {
2241 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2242 return;
2243 }
2244
2245 dptr_num = SVAL(params,0);
2246 maxentries = SVAL(params,2);
2247 info_level = SVAL(params,4);
2248 resume_key = IVAL(params,6);
2249 findnext_flags = SVAL(params,10);
2250 close_after_request = (findnext_flags & FLAG_TRANS2_FIND_CLOSE);
2251 close_if_end = (findnext_flags & FLAG_TRANS2_FIND_CLOSE_IF_END);
2252 requires_resume_key = (findnext_flags & FLAG_TRANS2_FIND_REQUIRE_RESUME);
2253 continue_bit = (findnext_flags & FLAG_TRANS2_FIND_CONTINUE);
2254
2255 srvstr_get_path_wcard(ctx, params, req->flags2, &resume_name,
2256 params+12,
2257 total_params - 12, STR_TERMINATE, &ntstatus,
2258 &mask_contains_wcard);
2259 if (!NT_STATUS_IS_OK(ntstatus)) {
2260 /* Win9x or OS/2 can send a resume name of ".." or ".". This will cause the parser to
2261 complain (it thinks we're asking for the directory above the shared
2262 path or an invalid name). Catch this as the resume name is only compared, never used in
2263 a file access. JRA. */
2264 srvstr_pull_talloc(ctx, params, req->flags2,
2265 &resume_name, params+12,
2266 total_params - 12,
2267 STR_TERMINATE);
2268
2269 if (!resume_name || !(ISDOT(resume_name) || ISDOTDOT(resume_name))) {
2270 reply_nterror(req, ntstatus);
2271 return;
2272 }
2273 }
2274
2275 DEBUG(3,("call_trans2findnext: dirhandle = %d, max_data_bytes = %d, maxentries = %d, \
2276 close_after_request=%d, close_if_end = %d requires_resume_key = %d \
2277 resume_key = %d resume name = %s continue=%d level = %d\n",
2278 dptr_num, max_data_bytes, maxentries, close_after_request, close_if_end,
2279 requires_resume_key, resume_key, resume_name, continue_bit, info_level));
2280
2281 if (!maxentries) {
2282 /* W2K3 seems to treat zero as 1. */
2283 maxentries = 1;
2284 }
2285
2286 switch (info_level) {
2287 case SMB_FIND_INFO_STANDARD:
2288 case SMB_FIND_EA_SIZE:
2289 case SMB_FIND_EA_LIST:
2290 case SMB_FIND_FILE_DIRECTORY_INFO:
2291 case SMB_FIND_FILE_FULL_DIRECTORY_INFO:
2292 case SMB_FIND_FILE_NAMES_INFO:
2293 case SMB_FIND_FILE_BOTH_DIRECTORY_INFO:
2294 case SMB_FIND_ID_FULL_DIRECTORY_INFO:
2295 case SMB_FIND_ID_BOTH_DIRECTORY_INFO:
2296 break;
2297 case SMB_FIND_FILE_UNIX:
2298 case SMB_FIND_FILE_UNIX_INFO2:
2299 /* Always use filesystem for UNIX mtime query. */
2300 ask_sharemode = false;
2301 if (!lp_unix_extensions()) {
2302 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
2303 return;
2304 }
2305 break;
2306 default:
2307 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
2308 return;
2309 }
2310
2311 if (info_level == SMB_FIND_EA_LIST) {
2312 uint32 ea_size;
2313
2314 if (total_data < 4) {
2315 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2316 return;
2317 }
2318
2319 ea_size = IVAL(pdata,0);
2320 if (ea_size != total_data) {
2321 DEBUG(4,("call_trans2findnext: Rejecting EA request with incorrect \
2322 total_data=%u (should be %u)\n", (unsigned int)total_data, (unsigned int)IVAL(pdata,0) ));
2323 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2324 return;
2325 }
2326
2327 if (!lp_ea_support(SNUM(conn))) {
2328 reply_doserror(req, ERRDOS, ERReasnotsupported);
2329 return;
2330 }
2331
2332 /* Pull out the list of names. */
2333 ea_list = read_ea_name_list(ctx, pdata + 4, ea_size - 4);
2334 if (!ea_list) {
2335 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2336 return;
2337 }
2338 }
2339
2340 *ppdata = (char *)SMB_REALLOC(
2341 *ppdata, max_data_bytes + DIR_ENTRY_SAFETY_MARGIN);
2342 if(*ppdata == NULL) {
2343 reply_nterror(req, NT_STATUS_NO_MEMORY);
2344 return;
2345 }
2346
2347 pdata = *ppdata;
2348 data_end = pdata + max_data_bytes + DIR_ENTRY_SAFETY_MARGIN - 1;
2349
2350 /* Realloc the params space */
2351 *pparams = (char *)SMB_REALLOC(*pparams, 6*SIZEOFWORD);
2352 if(*pparams == NULL ) {
2353 reply_nterror(req, NT_STATUS_NO_MEMORY);
2354 return;
2355 }
2356
2357 params = *pparams;
2358
2359 /* Check that the dptr is valid */
2360 if(!(conn->dirptr = dptr_fetch_lanman2(dptr_num))) {
2361 reply_doserror(req, ERRDOS, ERRnofiles);
2362 return;
2363 }
2364
2365 string_set(&conn->dirpath,dptr_path(dptr_num));
2366
2367 /* Get the wildcard mask from the dptr */
2368 if((p = dptr_wcard(dptr_num))== NULL) {
2369 DEBUG(2,("dptr_num %d has no wildcard\n", dptr_num));
2370 reply_doserror(req, ERRDOS, ERRnofiles);
2371 return;
2372 }
2373
2374 mask = p;
2375 directory = conn->dirpath;
2376
2377 /* Get the attr mask from the dptr */
2378 dirtype = dptr_attr(dptr_num);
2379
2380 DEBUG(3,("dptr_num is %d, mask = %s, attr = %x, dirptr=(0x%lX,%ld)\n",
2381 dptr_num, mask, dirtype,
2382 (long)conn->dirptr,
2383 dptr_TellDir(conn->dirptr)));
2384
2385 /* We don't need to check for VOL here as this is returned by
2386 a different TRANS2 call. */
2387
2388 DEBUG(8,("dirpath=<%s> dontdescend=<%s>\n",conn->dirpath,lp_dontdescend(SNUM(conn))));
2389 if (in_list(conn->dirpath,lp_dontdescend(SNUM(conn)),conn->case_sensitive))
2390 dont_descend = True;
2391
2392 p = pdata;
2393 space_remaining = max_data_bytes;
2394 out_of_space = False;
2395
2396 /*
2397 * Seek to the correct position. We no longer use the resume key but
2398 * depend on the last file name instead.
2399 */
2400
2401 if(*resume_name && !continue_bit) {
2402 SMB_STRUCT_STAT st;
2403
2404 long current_pos = 0;
2405 /*
2406 * Remember, name_to_8_3 is called by
2407 * get_lanman2_dir_entry(), so the resume name
2408 * could be mangled. Ensure we check the unmangled name.
2409 */
2410
2411 if (mangle_is_mangled(resume_name, conn->params)) {
2412 char *new_resume_name = NULL;
2413 mangle_lookup_name_from_8_3(ctx,
2414 resume_name,
2415 &new_resume_name,
2416 conn->params);
2417 if (new_resume_name) {
2418 resume_name = new_resume_name;
2419 }
2420 }
2421
2422 /*
2423 * Fix for NT redirector problem triggered by resume key indexes
2424 * changing between directory scans. We now return a resume key of 0
2425 * and instead look for the filename to continue from (also given
2426 * to us by NT/95/smbfs/smbclient). If no other scans have been done between the
2427 * findfirst/findnext (as is usual) then the directory pointer
2428 * should already be at the correct place.
2429 */
2430
2431 finished = !dptr_SearchDir(conn->dirptr, resume_name, &current_pos, &st);
2432 } /* end if resume_name && !continue_bit */
2433
2434 for (i=0;(i<(int)maxentries) && !finished && !out_of_space ;i++) {
2435 bool got_exact_match = False;
2436
2437 /* this is a heuristic to avoid seeking the dirptr except when
2438 absolutely necessary. It allows for a filename of about 40 chars */
2439 if (space_remaining < DIRLEN_GUESS && numentries > 0) {
2440 out_of_space = True;
2441 finished = False;
2442 } else {
2443 finished = !get_lanman2_dir_entry(ctx,
2444 conn,
2445 req->flags2,
2446 mask,dirtype,info_level,
2447 requires_resume_key,dont_descend,
2448 ask_sharemode,
2449 &p,pdata,data_end,
2450 space_remaining, &out_of_space,
2451 &got_exact_match,
2452 &last_entry_off, ea_list);
2453 }
2454
2455 if (finished && out_of_space)
2456 finished = False;
2457
2458 if (!finished && !out_of_space)
2459 numentries++;
2460
2461 /*
2462 * As an optimisation if we know we aren't looking
2463 * for a wildcard name (ie. the name matches the wildcard exactly)
2464 * then we can finish on any (first) match.
2465 * This speeds up large directory searches. JRA.
2466 */
2467
2468 if(got_exact_match)
2469 finished = True;
2470
2471 space_remaining = max_data_bytes - PTR_DIFF(p,pdata);
2472 }
2473
2474 DEBUG( 3, ( "%s mask=%s directory=%s dirtype=%d numentries=%d\n",
2475 smb_fn_name(CVAL(req->inbuf,smb_com)),
2476 mask, directory, dirtype, numentries ) );
2477
2478 /* Check if we can close the dirptr */
2479 if(close_after_request || (finished && close_if_end)) {
2480 DEBUG(5,("call_trans2findnext: closing dptr_num = %d\n", dptr_num));
2481 dptr_close(&dptr_num); /* This frees up the saved mask */
2482 }
2483
2484 /* Set up the return parameter block */
2485 SSVAL(params,0,numentries);
2486 SSVAL(params,2,finished);
2487 SSVAL(params,4,0); /* Never an EA error */
2488 SSVAL(params,6,last_entry_off);
2489
2490 send_trans2_replies(conn, req, params, 8, pdata, PTR_DIFF(p,pdata),
2491 max_data_bytes);
2492
2493 return;
2494 }
2495
2496 unsigned char *create_volume_objectid(connection_struct *conn, unsigned char objid[16])
2497 {
2498 E_md4hash(lp_servicename(SNUM(conn)),objid);
2499 return objid;
2500 }
2501
2502 static void samba_extended_info_version(struct smb_extended_info *extended_info)
2503 {
2504 SMB_ASSERT(extended_info != NULL);
2505
2506 extended_info->samba_magic = SAMBA_EXTENDED_INFO_MAGIC;
2507 extended_info->samba_version = ((SAMBA_VERSION_MAJOR & 0xff) << 24)
2508 | ((SAMBA_VERSION_MINOR & 0xff) << 16)
2509 | ((SAMBA_VERSION_RELEASE & 0xff) << 8);
2510 #ifdef SAMBA_VERSION_REVISION
2511 extended_info->samba_version |= (tolower(*SAMBA_VERSION_REVISION) - 'a' + 1) & 0xff;
2512 #endif
2513 extended_info->samba_subversion = 0;
2514 #ifdef SAMBA_VERSION_RC_RELEASE
2515 extended_info->samba_subversion |= (SAMBA_VERSION_RC_RELEASE & 0xff) << 24;
2516 #else
2517 #ifdef SAMBA_VERSION_PRE_RELEASE
2518 extended_info->samba_subversion |= (SAMBA_VERSION_PRE_RELEASE & 0xff) << 16;
2519 #endif
2520 #endif
2521 #ifdef SAMBA_VERSION_VENDOR_PATCH
2522 extended_info->samba_subversion |= (SAMBA_VERSION_VENDOR_PATCH & 0xffff);
2523 #endif
2524 extended_info->samba_gitcommitdate = 0;
2525 #ifdef SAMBA_VERSION_GIT_COMMIT_TIME
2526 unix_to_nt_time(&extended_info->samba_gitcommitdate, SAMBA_VERSION_GIT_COMMIT_TIME);
2527 #endif
2528
2529 memset(extended_info->samba_version_string, 0,
2530 sizeof(extended_info->samba_version_string));
2531
2532 snprintf (extended_info->samba_version_string,
2533 sizeof(extended_info->samba_version_string),
2534 "%s", samba_version_string());
2535 }
2536
2537 /****************************************************************************
2538 Reply to a TRANS2_QFSINFO (query filesystem info).
2539 ****************************************************************************/
2540
2541 static void call_trans2qfsinfo(connection_struct *conn,
2542 struct smb_request *req,
2543 char **pparams, int total_params,
2544 char **ppdata, int total_data,
2545 unsigned int max_data_bytes)
2546 {
2547 char *pdata, *end_data;
2548 char *params = *pparams;
2549 uint16 info_level;
2550 int data_len, len;
2551 SMB_STRUCT_STAT st;
2552 const char *vname = volume_label(SNUM(conn));
2553 int snum = SNUM(conn);
2554 char *fstype = lp_fstype(SNUM(conn));
2555 uint32 additional_flags = 0;
2556
2557 if (total_params < 2) {
2558 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2559 return;
2560 }
2561
2562 info_level = SVAL(params,0);
2563
2564 if (IS_IPC(conn)) {
2565 if (info_level != SMB_QUERY_CIFS_UNIX_INFO) {
2566 DEBUG(0,("call_trans2qfsinfo: not an allowed "
2567 "info level (0x%x) on IPC$.\n",
2568 (unsigned int)info_level));
2569 reply_nterror(req, NT_STATUS_ACCESS_DENIED);
2570 return;
2571 }
2572 }
2573
2574 if (ENCRYPTION_REQUIRED(conn) && !req->encrypted) {
2575 if (info_level != SMB_QUERY_CIFS_UNIX_INFO) {
2576 DEBUG(0,("call_trans2qfsinfo: encryption required "
2577 "and info level 0x%x sent.\n",
2578 (unsigned int)info_level));
2579 exit_server_cleanly("encryption required "
2580 "on connection");
2581 return;
2582 }
2583 }
2584
2585 DEBUG(3,("call_trans2qfsinfo: level = %d\n", info_level));
2586
2587 if(SMB_VFS_STAT(conn,".",&st)!=0) {
2588 DEBUG(2,("call_trans2qfsinfo: stat of . failed (%s)\n", strerror(errno)));
2589 reply_doserror(req, ERRSRV, ERRinvdevice);
2590 return;
2591 }
2592
2593 *ppdata = (char *)SMB_REALLOC(
2594 *ppdata, max_data_bytes + DIR_ENTRY_SAFETY_MARGIN);
2595 if (*ppdata == NULL ) {
2596 reply_nterror(req, NT_STATUS_NO_MEMORY);
2597 return;
2598 }
2599
2600 pdata = *ppdata;
2601 memset((char *)pdata,'\0',max_data_bytes + DIR_ENTRY_SAFETY_MARGIN);
2602 end_data = pdata + max_data_bytes + DIR_ENTRY_SAFETY_MARGIN - 1;
2603
2604 switch (info_level) {
2605 case SMB_INFO_ALLOCATION:
2606 {
2607 SMB_BIG_UINT dfree,dsize,bsize,block_size,sectors_per_unit,bytes_per_sector;
2608 data_len = 18;
2609 if (get_dfree_info(conn,".",False,&bsize,&dfree,&dsize) == (SMB_BIG_UINT)-1) {
2610 reply_unixerror(req, ERRHRD, ERRgeneral);
2611 return;
2612 }
2613
2614 block_size = lp_block_size(snum);
2615 if (bsize < block_size) {
2616 SMB_BIG_UINT factor = block_size/bsize;
2617 bsize = block_size;
2618 dsize /= factor;
2619 dfree /= factor;
2620 }
2621 if (bsize > block_size) {
2622 SMB_BIG_UINT factor = bsize/block_size;
2623 bsize = block_size;
2624 dsize *= factor;
2625 dfree *= factor;
2626 }
2627 bytes_per_sector = 512;
2628 sectors_per_unit = bsize/bytes_per_sector;
2629
2630 DEBUG(5,("call_trans2qfsinfo : SMB_INFO_ALLOCATION id=%x, bsize=%u, cSectorUnit=%u, \
2631 cBytesSector=%u, cUnitTotal=%u, cUnitAvail=%d\n", (unsigned int)st.st_dev, (unsigned int)bsize, (unsigned int)sectors_per_unit,
2632 (unsigned int)bytes_per_sector, (unsigned int)dsize, (unsigned int)dfree));
2633
2634 SIVAL(pdata,l1_idFileSystem,st.st_dev);
2635 SIVAL(pdata,l1_cSectorUnit,sectors_per_unit);
2636 SIVAL(pdata,l1_cUnit,dsize);
2637 SIVAL(pdata,l1_cUnitAvail,dfree);
2638 SSVAL(pdata,l1_cbSector,bytes_per_sector);
2639 break;
2640 }
2641
2642 case SMB_INFO_VOLUME:
2643 /* Return volume name */
2644 /*
2645 * Add volume serial number - hash of a combination of
2646 * the called hostname and the service name.
2647 */
2648 SIVAL(pdata,0,str_checksum(lp_servicename(snum)) ^ (str_checksum(get_local_machine_name())<<16) );
2649 /*
2650 * Win2k3 and previous mess this up by sending a name length
2651 * one byte short. I believe only older clients (OS/2 Win9x) use
2652 * this call so try fixing this by adding a terminating null to
2653 * the pushed string. The change here was adding the STR_TERMINATE. JRA.
2654 */
2655 len = srvstr_push(
2656 pdata, req->flags2,
2657 pdata+l2_vol_szVolLabel, vname,
2658 PTR_DIFF(end_data, pdata+l2_vol_szVolLabel),
2659 STR_NOALIGN|STR_TERMINATE);
2660 SCVAL(pdata,l2_vol_cch,len);
2661 data_len = l2_vol_szVolLabel + len;
2662 DEBUG(5,("call_trans2qfsinfo : time = %x, namelen = %d, name = %s\n",
2663 (unsigned)st.st_ctime, len, vname));
2664 break;
2665
2666 case SMB_QUERY_FS_ATTRIBUTE_INFO:
2667 case SMB_FS_ATTRIBUTE_INFORMATION:
2668
2669 additional_flags = 0;
2670 #if defined(HAVE_SYS_QUOTAS)
2671 additional_flags |= FILE_VOLUME_QUOTAS;
2672 #endif
2673
2674 if(lp_nt_acl_support(SNUM(conn))) {
2675 additional_flags |= FILE_PERSISTENT_ACLS;
2676 }
2677
2678 /* Capabilities are filled in at connection time through STATVFS call */
2679 additional_flags |= conn->fs_capabilities;
2680
2681 SIVAL(pdata,0,FILE_CASE_PRESERVED_NAMES|FILE_CASE_SENSITIVE_SEARCH|
2682 FILE_SUPPORTS_OBJECT_IDS|FILE_UNICODE_ON_DISK|
2683 additional_flags); /* FS ATTRIBUTES */
2684
2685 SIVAL(pdata,4,255); /* Max filename component length */
2686 /* NOTE! the fstype must *not* be null terminated or win98 won't recognise it
2687 and will think we can't do long filenames */
2688 len = srvstr_push(pdata, req->flags2, pdata+12, fstype,
2689 PTR_DIFF(end_data, pdata+12),
2690 STR_UNICODE);
2691 SIVAL(pdata,8,len);
2692 data_len = 12 + len;
2693 break;
2694
2695 case SMB_QUERY_FS_LABEL_INFO:
2696 case SMB_FS_LABEL_INFORMATION:
2697 len = srvstr_push(pdata, req->flags2, pdata+4, vname,
2698 PTR_DIFF(end_data, pdata+4), 0);
2699 data_len = 4 + len;
2700 SIVAL(pdata,0,len);
2701 break;
2702
2703 case SMB_QUERY_FS_VOLUME_INFO:
2704 case SMB_FS_VOLUME_INFORMATION:
2705
2706 /*
2707 * Add volume serial number - hash of a combination of
2708 * the called hostname and the service name.
2709 */
2710 SIVAL(pdata,8,str_checksum(lp_servicename(snum)) ^
2711 (str_checksum(get_local_machine_name())<<16));
2712
2713 /* Max label len is 32 characters. */
2714 len = srvstr_push(pdata, req->flags2, pdata+18, vname,
2715 PTR_DIFF(end_data, pdata+18),
2716 STR_UNICODE);
2717 SIVAL(pdata,12,len);
2718 data_len = 18+len;
2719
2720 DEBUG(5,("call_trans2qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = %d, vol=%s serv=%s\n",
2721 (int)strlen(vname),vname, lp_servicename(snum)));
2722 break;
2723
2724 case SMB_QUERY_FS_SIZE_INFO:
2725 case SMB_FS_SIZE_INFORMATION:
2726 {
2727 SMB_BIG_UINT dfree,dsize,bsize,block_size,sectors_per_unit,bytes_per_sector;
2728 data_len = 24;
2729 if (get_dfree_info(conn,".",False,&bsize,&dfree,&dsize) == (SMB_BIG_UINT)-1) {
2730 reply_unixerror(req, ERRHRD, ERRgeneral);
2731 return;
2732 }
2733 block_size = lp_block_size(snum);
2734 if (bsize < block_size) {
2735 SMB_BIG_UINT factor = block_size/bsize;
2736 bsize = block_size;
2737 dsize /= factor;
2738 dfree /= factor;
2739 }
2740 if (bsize > block_size) {
2741 SMB_BIG_UINT factor = bsize/block_size;
2742 bsize = block_size;
2743 dsize *= factor;
2744 dfree *= factor;
2745 }
2746 bytes_per_sector = 512;
2747 sectors_per_unit = bsize/bytes_per_sector;
2748 DEBUG(5,("call_trans2qfsinfo : SMB_QUERY_FS_SIZE_INFO bsize=%u, cSectorUnit=%u, \
2749 cBytesSector=%u, cUnitTotal=%u, cUnitAvail=%d\n", (unsigned int)bsize, (unsigned int)sectors_per_unit,
2750 (unsigned int)bytes_per_sector, (unsigned int)dsize, (unsigned int)dfree));
2751 SBIG_UINT(pdata,0,dsize);
2752 SBIG_UINT(pdata,8,dfree);
2753 SIVAL(pdata,16,sectors_per_unit);
2754 SIVAL(pdata,20,bytes_per_sector);
2755 break;
2756 }
2757
2758 case SMB_FS_FULL_SIZE_INFORMATION:
2759 {
2760 SMB_BIG_UINT dfree,dsize,bsize,block_size,sectors_per_unit,bytes_per_sector;
2761 data_len = 32;
2762 if (get_dfree_info(conn,".",False,&bsize,&dfree,&dsize) == (SMB_BIG_UINT)-1) {
2763 reply_unixerror(req, ERRHRD, ERRgeneral);
2764 return;
2765 }
2766 block_size = lp_block_size(snum);
2767 if (bsize < block_size) {
2768 SMB_BIG_UINT factor = block_size/bsize;
2769 bsize = block_size;
2770 dsize /= factor;
2771 dfree /= factor;
2772 }
2773 if (bsize > block_size) {
2774 SMB_BIG_UINT factor = bsize/block_size;
2775 bsize = block_size;
2776 dsize *= factor;
2777 dfree *= factor;
2778 }
2779 bytes_per_sector = 512;
2780 sectors_per_unit = bsize/bytes_per_sector;
2781 DEBUG(5,("call_trans2qfsinfo : SMB_QUERY_FS_FULL_SIZE_INFO bsize=%u, cSectorUnit=%u, \
2782 cBytesSector=%u, cUnitTotal=%u, cUnitAvail=%d\n", (unsigned int)bsize, (unsigned int)sectors_per_unit,
2783 (unsigned int)bytes_per_sector, (unsigned int)dsize, (unsigned int)dfree));
2784 SBIG_UINT(pdata,0,dsize); /* Total Allocation units. */
2785 SBIG_UINT(pdata,8,dfree); /* Caller available allocation units. */
2786 SBIG_UINT(pdata,16,dfree); /* Actual available allocation units. */
2787 SIVAL(pdata,24,sectors_per_unit); /* Sectors per allocation unit. */
2788 SIVAL(pdata,28,bytes_per_sector); /* Bytes per sector. */
2789 break;
2790 }
2791
2792 case SMB_QUERY_FS_DEVICE_INFO:
2793 case SMB_FS_DEVICE_INFORMATION:
2794 data_len = 8;
2795 SIVAL(pdata,0,0); /* dev type */
2796 SIVAL(pdata,4,0); /* characteristics */
2797 break;
2798
2799 #ifdef HAVE_SYS_QUOTAS
2800 case SMB_FS_QUOTA_INFORMATION:
2801 /*
2802 * what we have to send --metze:
2803 *
2804 * Unknown1: 24 NULL bytes
2805 * Soft Quota Treshold: 8 bytes seems like SMB_BIG_UINT or so
2806 * Hard Quota Limit: 8 bytes seems like SMB_BIG_UINT or so
2807 * Quota Flags: 2 byte :
2808 * Unknown3: 6 NULL bytes
2809 *
2810 * 48 bytes total
2811 *
2812 * details for Quota Flags:
2813 *
2814 * 0x0020 Log Limit: log if the user exceeds his Hard Quota
2815 * 0x0010 Log Warn: log if the user exceeds his Soft Quota
2816 * 0x0002 Deny Disk: deny disk access when the user exceeds his Hard Quota
2817 * 0x0001 Enable Quotas: enable quota for this fs
2818 *
2819 */
2820 {
2821 /* we need to fake up a fsp here,
2822 * because its not send in this call
2823 */
2824 files_struct fsp;
2825 SMB_NTQUOTA_STRUCT quotas;
2826
2827 ZERO_STRUCT(fsp);
2828 ZERO_STRUCT(quotas);
2829
2830 fsp.conn = conn;
2831 fsp.fnum = -1;
2832
2833 /* access check */
2834 if (current_user.ut.uid != 0) {
2835 DEBUG(0,("set_user_quota: access_denied service [%s] user [%s]\n",
2836 lp_servicename(SNUM(conn)),conn->user));
2837 reply_doserror(req, ERRDOS, ERRnoaccess);
2838 return;
2839 }
2840
2841 if (vfs_get_ntquota(&fsp, SMB_USER_FS_QUOTA_TYPE, NULL, &quotas)!=0) {
2842 DEBUG(0,("vfs_get_ntquota() failed for service [%s]\n",lp_servicename(SNUM(conn))));
2843 reply_doserror(req, ERRSRV, ERRerror);
2844 return;
2845 }
2846
2847 data_len = 48;
2848
2849 DEBUG(10,("SMB_FS_QUOTA_INFORMATION: for service [%s]\n",lp_servicename(SNUM(conn))));
2850
2851 /* Unknown1 24 NULL bytes*/
2852 SBIG_UINT(pdata,0,(SMB_BIG_UINT)0);
2853 SBIG_UINT(pdata,8,(SMB_BIG_UINT)0);
2854 SBIG_UINT(pdata,16,(SMB_BIG_UINT)0);
2855
2856 /* Default Soft Quota 8 bytes */
2857 SBIG_UINT(pdata,24,quotas.softlim);
2858
2859 /* Default Hard Quota 8 bytes */
2860 SBIG_UINT(pdata,32,quotas.hardlim);
2861
2862 /* Quota flag 2 bytes */
2863 SSVAL(pdata,40,quotas.qflags);
2864
2865 /* Unknown3 6 NULL bytes */
2866 SSVAL(pdata,42,0);
2867 SIVAL(pdata,44,0);
2868
2869 break;
2870 }
2871 #endif /* HAVE_SYS_QUOTAS */
2872 case SMB_FS_OBJECTID_INFORMATION:
2873 {
2874 unsigned char objid[16];
2875 struct smb_extended_info extended_info;
2876 memcpy(pdata,create_volume_objectid(conn, objid),16);
2877 samba_extended_info_version (&extended_info);
2878 SIVAL(pdata,16,extended_info.samba_magic);
2879 SIVAL(pdata,20,extended_info.samba_version);
2880 SIVAL(pdata,24,extended_info.samba_subversion);
2881 SBIG_UINT(pdata,28,extended_info.samba_gitcommitdate);
2882 memcpy(pdata+36,extended_info.samba_version_string,28);
2883 data_len = 64;
2884 break;
2885 }
2886
2887 /*
2888 * Query the version and capabilities of the CIFS UNIX extensions
2889 * in use.
2890 */
2891
2892 case SMB_QUERY_CIFS_UNIX_INFO:
2893 {
2894 bool large_write = lp_min_receive_file_size() &&
2895 !srv_is_signing_active();
2896 bool large_read = !srv_is_signing_active();
2897 int encrypt_caps = 0;
2898
2899 if (!lp_unix_extensions()) {
2900 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
2901 return;
2902 }
2903
2904 switch (conn->encrypt_level) {
2905 case 0:
2906 encrypt_caps = 0;
2907 break;
2908 case 1:
2909 case Auto:
2910 encrypt_caps = CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP;
2911 break;
2912 case Required:
2913 encrypt_caps = CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP|
2914 CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP;
2915 large_write = false;
2916 large_read = false;
2917 break;
2918 }
2919
2920 data_len = 12;
2921 SSVAL(pdata,0,CIFS_UNIX_MAJOR_VERSION);
2922 SSVAL(pdata,2,CIFS_UNIX_MINOR_VERSION);
2923
2924 /* We have POSIX ACLs, pathname, encryption,
2925 * large read/write, and locking capability. */
2926
2927 SBIG_UINT(pdata,4,((SMB_BIG_UINT)(
2928 CIFS_UNIX_POSIX_ACLS_CAP|
2929 CIFS_UNIX_POSIX_PATHNAMES_CAP|
2930 CIFS_UNIX_FCNTL_LOCKS_CAP|
2931 CIFS_UNIX_EXTATTR_CAP|
2932 CIFS_UNIX_POSIX_PATH_OPERATIONS_CAP|
2933 encrypt_caps|
2934 (large_read ? CIFS_UNIX_LARGE_READ_CAP : 0) |
2935 (large_write ?
2936 CIFS_UNIX_LARGE_WRITE_CAP : 0))));
2937 break;
2938 }
2939
2940 case SMB_QUERY_POSIX_FS_INFO:
2941 {
2942 int rc;
2943 vfs_statvfs_struct svfs;
2944
2945 if (!lp_unix_extensions()) {
2946 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
2947 return;
2948 }
2949
2950 rc = SMB_VFS_STATVFS(conn, ".", &svfs);
2951
2952 if (!rc) {
2953 data_len = 56;
2954 SIVAL(pdata,0,svfs.OptimalTransferSize);
2955 SIVAL(pdata,4,svfs.BlockSize);
2956 SBIG_UINT(pdata,8,svfs.TotalBlocks);
2957 SBIG_UINT(pdata,16,svfs.BlocksAvail);
2958 SBIG_UINT(pdata,24,svfs.UserBlocksAvail);
2959 SBIG_UINT(pdata,32,svfs.TotalFileNodes);
2960 SBIG_UINT(pdata,40,svfs.FreeFileNodes);
2961 SBIG_UINT(pdata,48,svfs.FsIdentifier);
2962 DEBUG(5,("call_trans2qfsinfo : SMB_QUERY_POSIX_FS_INFO succsessful\n"));
2963 #ifdef EOPNOTSUPP
2964 } else if (rc == EOPNOTSUPP) {
2965 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
2966 return;
2967 #endif /* EOPNOTSUPP */
2968 } else {
2969 DEBUG(0,("vfs_statvfs() failed for service [%s]\n",lp_servicename(SNUM(conn))));
2970 reply_doserror(req, ERRSRV, ERRerror);
2971 return;
2972 }
2973 break;
2974 }
2975
2976 case SMB_QUERY_POSIX_WHOAMI:
2977 {
2978 uint32_t flags = 0;
2979 uint32_t sid_bytes;
2980 int i;
2981
2982 if (!lp_unix_extensions()) {
2983 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
2984 return;
2985 }
2986
2987 if (max_data_bytes < 40) {
2988 reply_nterror(req, NT_STATUS_BUFFER_TOO_SMALL);
2989 return;
2990 }
2991
2992 /* We ARE guest if global_sid_Builtin_Guests is
2993 * in our list of SIDs.
2994 */
2995 if (nt_token_check_sid(&global_sid_Builtin_Guests,
2996 current_user.nt_user_token)) {
2997 flags |= SMB_WHOAMI_GUEST;
2998 }
2999
3000 /* We are NOT guest if global_sid_Authenticated_Users
3001 * is in our list of SIDs.
3002 */
3003 if (nt_token_check_sid(&global_sid_Authenticated_Users,
3004 current_user.nt_user_token)) {
3005 flags &= ~SMB_WHOAMI_GUEST;
3006 }
3007
3008 /* NOTE: 8 bytes for UID/GID, irrespective of native
3009 * platform size. This matches
3010 * SMB_QUERY_FILE_UNIX_BASIC and friends.
3011 */
3012 data_len = 4 /* flags */
3013 + 4 /* flag mask */
3014 + 8 /* uid */
3015 + 8 /* gid */
3016 + 4 /* ngroups */
3017 + 4 /* num_sids */
3018 + 4 /* SID bytes */
3019 + 4 /* pad/reserved */
3020 + (current_user.ut.ngroups * 8)
3021 /* groups list */
3022 + (current_user.nt_user_token->num_sids *
3023 SID_MAX_SIZE)
3024 /* SID list */;
3025
3026 SIVAL(pdata, 0, flags);
3027 SIVAL(pdata, 4, SMB_WHOAMI_MASK);
3028 SBIG_UINT(pdata, 8, (SMB_BIG_UINT)current_user.ut.uid);
3029 SBIG_UINT(pdata, 16, (SMB_BIG_UINT)current_user.ut.gid);
3030
3031
3032 if (data_len >= max_data_bytes) {
3033 /* Potential overflow, skip the GIDs and SIDs. */
3034
3035 SIVAL(pdata, 24, 0); /* num_groups */
3036 SIVAL(pdata, 28, 0); /* num_sids */
3037 SIVAL(pdata, 32, 0); /* num_sid_bytes */
3038 SIVAL(pdata, 36, 0); /* reserved */
3039
3040 data_len = 40;
3041 break;
3042 }
3043
3044 SIVAL(pdata, 24, current_user.ut.ngroups);
3045 SIVAL(pdata, 28,
3046 current_user.nt_user_token->num_sids);
3047
3048 /* We walk the SID list twice, but this call is fairly
3049 * infrequent, and I don't expect that it's performance
3050 * sensitive -- jpeach
3051 */
3052 for (i = 0, sid_bytes = 0;
3053 i < current_user.nt_user_token->num_sids; ++i) {
3054 sid_bytes += ndr_size_dom_sid(
3055 &current_user.nt_user_token->user_sids[i], 0);
3056 }
3057
3058 /* SID list byte count */
3059 SIVAL(pdata, 32, sid_bytes);
3060
3061 /* 4 bytes pad/reserved - must be zero */
3062 SIVAL(pdata, 36, 0);
3063 data_len = 40;
3064
3065 /* GID list */
3066 for (i = 0; i < current_user.ut.ngroups; ++i) {
3067 SBIG_UINT(pdata, data_len,
3068 (SMB_BIG_UINT)current_user.ut.groups[i]);
3069 data_len += 8;
3070 }
3071
3072 /* SID list */
3073 for (i = 0;
3074 i < current_user.nt_user_token->num_sids; ++i) {
3075 int sid_len = ndr_size_dom_sid(
3076 &current_user.nt_user_token->user_sids[i], 0);
3077
3078 sid_linearize(pdata + data_len, sid_len,
3079 &current_user.nt_user_token->user_sids[i]);
3080 data_len += sid_len;
3081 }
3082
3083 break;
3084 }
3085
3086 case SMB_MAC_QUERY_FS_INFO:
3087 /*
3088 * Thursby MAC extension... ONLY on NTFS filesystems
3089 * once we do streams then we don't need this
3090 */
3091 if (strequal(lp_fstype(SNUM(conn)),"NTFS")) {
3092 data_len = 88;
3093 SIVAL(pdata,84,0x100); /* Don't support mac... */
3094 break;
3095 }
3096 /* drop through */
3097 default:
3098 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
3099 return;
3100 }
3101
3102
3103 send_trans2_replies(conn, req, params, 0, pdata, data_len,
3104 max_data_bytes);
3105
3106 DEBUG( 4, ( "%s info_level = %d\n",
3107 smb_fn_name(CVAL(req->inbuf,smb_com)), info_level) );
3108
3109 return;
3110 }
3111
3112 /****************************************************************************
3113 Reply to a TRANS2_SETFSINFO (set filesystem info).
3114 ****************************************************************************/
3115
3116 static void call_trans2setfsinfo(connection_struct *conn,
3117 struct smb_request *req,
3118 char **pparams, int total_params,
3119 char **ppdata, int total_data,
3120 unsigned int max_data_bytes)
3121 {
3122 char *pdata = *ppdata;
3123 char *params = *pparams;
3124 uint16 info_level;
3125
3126 DEBUG(10,("call_trans2setfsinfo: for service [%s]\n",lp_servicename(SNUM(conn))));
3127
3128 /* */
3129 if (total_params < 4) {
3130 DEBUG(0,("call_trans2setfsinfo: requires total_params(%d) >= 4 bytes!\n",
3131 total_params));
3132 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
3133 return;
3134 }
3135
3136 info_level = SVAL(params,2);
3137
3138 if (IS_IPC(conn)) {
3139 if (info_level != SMB_REQUEST_TRANSPORT_ENCRYPTION &&
3140 info_level != SMB_SET_CIFS_UNIX_INFO) {
3141 DEBUG(0,("call_trans2setfsinfo: not an allowed "
3142 "info level (0x%x) on IPC$.\n",
3143 (unsigned int)info_level));
3144 reply_nterror(req, NT_STATUS_ACCESS_DENIED);
3145 return;
3146 }
3147 }
3148
3149 if (ENCRYPTION_REQUIRED(conn) && !req->encrypted) {
3150 if (info_level != SMB_REQUEST_TRANSPORT_ENCRYPTION) {
3151 DEBUG(0,("call_trans2setfsinfo: encryption required "
3152 "and info level 0x%x sent.\n",
3153 (unsigned int)info_level));
3154 exit_server_cleanly("encryption required "
3155 "on connection");
3156 return;
3157 }
3158 }
3159
3160 switch(info_level) {
3161 case SMB_SET_CIFS_UNIX_INFO:
3162 {
3163 uint16 client_unix_major;
3164 uint16 client_unix_minor;
3165 uint32 client_unix_cap_low;
3166 uint32 client_unix_cap_high;
3167
3168 if (!lp_unix_extensions()) {
3169 reply_nterror(req,
3170 NT_STATUS_INVALID_LEVEL);
3171 return;
3172 }
3173
3174 /* There should be 12 bytes of capabilities set. */
3175 if (total_data < 8) {
3176 reply_nterror(
3177 req,
3178 NT_STATUS_INVALID_PARAMETER);
3179 return;
3180 }
3181 client_unix_major = SVAL(pdata,0);
3182 client_unix_minor = SVAL(pdata,2);
3183 client_unix_cap_low = IVAL(pdata,4);
3184 client_unix_cap_high = IVAL(pdata,8);
3185 /* Just print these values for now. */
3186 DEBUG(10,("call_trans2setfsinfo: set unix info. major = %u, minor = %u \
3187 cap_low = 0x%x, cap_high = 0x%x\n",
3188 (unsigned int)client_unix_major,
3189 (unsigned int)client_unix_minor,
3190 (unsigned int)client_unix_cap_low,
3191 (unsigned int)client_unix_cap_high ));
3192
3193 /* Here is where we must switch to posix pathname processing... */
3194 if (client_unix_cap_low & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
3195 lp_set_posix_pathnames();
3196 mangle_change_to_posix();
3197 }
3198
3199 if ((client_unix_cap_low & CIFS_UNIX_FCNTL_LOCKS_CAP) &&
3200 !(client_unix_cap_low & CIFS_UNIX_POSIX_PATH_OPERATIONS_CAP)) {
3201 /* Client that knows how to do posix locks,
3202 * but not posix open/mkdir operations. Set a
3203 * default type for read/write checks. */
3204
3205 lp_set_posix_default_cifsx_readwrite_locktype(POSIX_LOCK);
3206
3207 }
3208 break;
3209 }
3210
3211 case SMB_REQUEST_TRANSPORT_ENCRYPTION:
3212 {
3213 NTSTATUS status;
3214 size_t param_len = 0;
3215 size_t data_len = total_data;
3216
3217 if (!lp_unix_extensions()) {
3218 reply_nterror(
3219 req,
3220 NT_STATUS_INVALID_LEVEL);
3221 return;
3222 }
3223
3224 if (lp_smb_encrypt(SNUM(conn)) == false) {
3225 reply_nterror(
3226 req,
3227 NT_STATUS_NOT_SUPPORTED);
3228 return;
3229 }
3230
3231 DEBUG( 4,("call_trans2setfsinfo: "
3232 "request transport encryption.\n"));
3233
3234 status = srv_request_encryption_setup(conn,
3235 (unsigned char **)ppdata,
3236 &data_len,
3237 (unsigned char **)pparams,
3238 &param_len);
3239
3240 if (!NT_STATUS_EQUAL(status, NT_STATUS_MORE_PROCESSING_REQUIRED) &&
3241 !NT_STATUS_IS_OK(status)) {
3242 reply_nterror(req, status);
3243 return;
3244 }
3245
3246 send_trans2_replies(conn, req,
3247 *pparams,
3248 param_len,
3249 *ppdata,
3250 data_len,
3251 max_data_bytes);
3252
3253 if (NT_STATUS_IS_OK(status)) {
3254 /* Server-side transport
3255 * encryption is now *on*. */
3256 status = srv_encryption_start(conn);
3257 if (!NT_STATUS_IS_OK(status)) {
3258 exit_server_cleanly(
3259 "Failure in setting "
3260 "up encrypted transport");
3261 }
3262 }
3263 return;
3264 }
3265
3266 case SMB_FS_QUOTA_INFORMATION:
3267 {
3268 files_struct *fsp = NULL;
3269 SMB_NTQUOTA_STRUCT quotas;
3270
3271 ZERO_STRUCT(quotas);
3272
3273 /* access check */
3274 if ((current_user.ut.uid != 0)||!CAN_WRITE(conn)) {
3275 DEBUG(0,("set_user_quota: access_denied service [%s] user [%s]\n",
3276 lp_servicename(SNUM(conn)),conn->user));
3277 reply_doserror(req, ERRSRV, ERRaccess);
3278 return;
3279 }
3280
3281 /* note: normaly there're 48 bytes,
3282 * but we didn't use the last 6 bytes for now
3283 * --metze
3284 */
3285 fsp = file_fsp(SVAL(params,0));
3286 if (!CHECK_NTQUOTA_HANDLE_OK(fsp,conn)) {
3287 DEBUG(3,("TRANSACT_GET_USER_QUOTA: no valid QUOTA HANDLE\n"));
3288 reply_nterror(
3289 req, NT_STATUS_INVALID_HANDLE);
3290 return;
3291 }
3292
3293 if (total_data < 42) {
3294 DEBUG(0,("call_trans2setfsinfo: SET_FS_QUOTA: requires total_data(%d) >= 42 bytes!\n",
3295 total_data));
3296 reply_nterror(
3297 req,
3298 NT_STATUS_INVALID_PARAMETER);
3299 return;
3300 }
3301
3302 /* unknown_1 24 NULL bytes in pdata*/
3303
3304 /* the soft quotas 8 bytes (SMB_BIG_UINT)*/
3305 quotas.softlim = (SMB_BIG_UINT)IVAL(pdata,24);
3306 #ifdef LARGE_SMB_OFF_T
3307 quotas.softlim |= (((SMB_BIG_UINT)IVAL(pdata,28)) << 32);
3308 #else /* LARGE_SMB_OFF_T */
3309 if ((IVAL(pdata,28) != 0)&&
3310 ((quotas.softlim != 0xFFFFFFFF)||
3311 (IVAL(pdata,28)!=0xFFFFFFFF))) {
3312 /* more than 32 bits? */
3313 reply_nterror(
3314 req,
3315 NT_STATUS_INVALID_PARAMETER);
3316 return;
3317 }
3318 #endif /* LARGE_SMB_OFF_T */
3319
3320 /* the hard quotas 8 bytes (SMB_BIG_UINT)*/
3321 quotas.hardlim = (SMB_BIG_UINT)IVAL(pdata,32);
3322 #ifdef LARGE_SMB_OFF_T
3323 quotas.hardlim |= (((SMB_BIG_UINT)IVAL(pdata,36)) << 32);
3324 #else /* LARGE_SMB_OFF_T */
3325 if ((IVAL(pdata,36) != 0)&&
3326 ((quotas.hardlim != 0xFFFFFFFF)||
3327 (IVAL(pdata,36)!=0xFFFFFFFF))) {
3328 /* more than 32 bits? */
3329 reply_nterror(
3330 req,
3331 NT_STATUS_INVALID_PARAMETER);
3332 return;
3333 }
3334 #endif /* LARGE_SMB_OFF_T */
3335
3336 /* quota_flags 2 bytes **/
3337 quotas.qflags = SVAL(pdata,40);
3338
3339 /* unknown_2 6 NULL bytes follow*/
3340
3341 /* now set the quotas */
3342 if (vfs_set_ntquota(fsp, SMB_USER_FS_QUOTA_TYPE, NULL, &quotas)!=0) {
3343 DEBUG(0,("vfs_set_ntquota() failed for service [%s]\n",lp_servicename(SNUM(conn))));
3344 reply_doserror(req, ERRSRV, ERRerror);
3345 return;
3346 }
3347
3348 break;
3349 }
3350 default:
3351 DEBUG(3,("call_trans2setfsinfo: unknown level (0x%X) not implemented yet.\n",
3352 info_level));
3353 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
3354 return;
3355 break;
3356 }
3357
3358 /*
3359 * sending this reply works fine,
3360 * but I'm not sure it's the same
3361 * like windows do...
3362 * --metze
3363 */
3364 reply_outbuf(req, 10, 0);
3365 }
3366
3367 #if defined(HAVE_POSIX_ACLS)
3368 /****************************************************************************
3369 Utility function to count the number of entries in a POSIX acl.
3370 ****************************************************************************/
3371
3372 static unsigned int count_acl_entries(connection_struct *conn, SMB_ACL_T posix_acl)
3373 {
3374 unsigned int ace_count = 0;
3375 int entry_id = SMB_ACL_FIRST_ENTRY;
3376 SMB_ACL_ENTRY_T entry;
3377
3378 while ( posix_acl && (SMB_VFS_SYS_ACL_GET_ENTRY(conn, posix_acl, entry_id, &entry) == 1)) {
3379 /* get_next... */
3380 if (entry_id == SMB_ACL_FIRST_ENTRY) {
3381 entry_id = SMB_ACL_NEXT_ENTRY;
3382 }
3383 ace_count++;
3384 }
3385 return ace_count;
3386 }
3387
3388 /****************************************************************************
3389 Utility function to marshall a POSIX acl into wire format.
3390 ****************************************************************************/
3391
3392 static bool marshall_posix_acl(connection_struct *conn, char *pdata, SMB_STRUCT_STAT *pst, SMB_ACL_T posix_acl)
3393 {
3394 int entry_id = SMB_ACL_FIRST_ENTRY;
3395 SMB_ACL_ENTRY_T entry;
3396
3397 while ( posix_acl && (SMB_VFS_SYS_ACL_GET_ENTRY(conn, posix_acl, entry_id, &entry) == 1)) {
3398 SMB_ACL_TAG_T tagtype;
3399 SMB_ACL_PERMSET_T permset;
3400 unsigned char perms = 0;
3401 unsigned int own_grp;
3402
3403 /* get_next... */
3404 if (entry_id == SMB_ACL_FIRST_ENTRY) {
3405 entry_id = SMB_ACL_NEXT_ENTRY;
3406 }
3407
3408 if (SMB_VFS_SYS_ACL_GET_TAG_TYPE(conn, entry, &tagtype) == -1) {
3409 DEBUG(0,("marshall_posix_acl: SMB_VFS_SYS_ACL_GET_TAG_TYPE failed.\n"));
3410 return False;
3411 }
3412
3413 if (SMB_VFS_SYS_ACL_GET_PERMSET(conn, entry, &permset) == -1) {
3414 DEBUG(0,("marshall_posix_acl: SMB_VFS_SYS_ACL_GET_PERMSET failed.\n"));
3415 return False;
3416 }
3417
3418 perms |= (SMB_VFS_SYS_ACL_GET_PERM(conn, permset, SMB_ACL_READ) ? SMB_POSIX_ACL_READ : 0);
3419 perms |= (SMB_VFS_SYS_ACL_GET_PERM(conn, permset, SMB_ACL_WRITE) ? SMB_POSIX_ACL_WRITE : 0);
3420 perms |= (SMB_VFS_SYS_ACL_GET_PERM(conn, permset, SMB_ACL_EXECUTE) ? SMB_POSIX_ACL_EXECUTE : 0);
3421
3422 SCVAL(pdata,1,perms);
3423
3424 switch (tagtype) {
3425 case SMB_ACL_USER_OBJ:
3426 SCVAL(pdata,0,SMB_POSIX_ACL_USER_OBJ);
3427 own_grp = (unsigned int)pst->st_uid;
3428 SIVAL(pdata,2,own_grp);
3429 SIVAL(pdata,6,0);
3430 break;
3431 case SMB_ACL_USER:
3432 {
3433 uid_t *puid = (uid_t *)SMB_VFS_SYS_ACL_GET_QUALIFIER(conn, entry);
3434 if (!puid) {
3435 DEBUG(0,("marshall_posix_acl: SMB_VFS_SYS_ACL_GET_QUALIFIER failed.\n"));
3436 return False;
3437 }
3438 own_grp = (unsigned int)*puid;
3439 SMB_VFS_SYS_ACL_FREE_QUALIFIER(conn, (void *)puid,tagtype);
3440 SCVAL(pdata,0,SMB_POSIX_ACL_USER);
3441 SIVAL(pdata,2,own_grp);
3442 SIVAL(pdata,6,0);
3443 break;
3444 }
3445 case SMB_ACL_GROUP_OBJ:
3446 SCVAL(pdata,0,SMB_POSIX_ACL_GROUP_OBJ);
3447 own_grp = (unsigned int)pst->st_gid;
3448 SIVAL(pdata,2,own_grp);
3449 SIVAL(pdata,6,0);
3450 break;
3451 case SMB_ACL_GROUP:
3452 {
3453 gid_t *pgid= (gid_t *)SMB_VFS_SYS_ACL_GET_QUALIFIER(conn, entry);
3454 if (!pgid) {
3455 DEBUG(0,("marshall_posix_acl: SMB_VFS_SYS_ACL_GET_QUALIFIER failed.\n"));
3456 return False;
3457 }
3458 own_grp = (unsigned int)*pgid;
3459 SMB_VFS_SYS_ACL_FREE_QUALIFIER(conn, (void *)pgid,tagtype);
3460 SCVAL(pdata,0,SMB_POSIX_ACL_GROUP);
3461 SIVAL(pdata,2,own_grp);
3462 SIVAL(pdata,6,0);
3463 break;
3464 }
3465 case SMB_ACL_MASK:
3466 SCVAL(pdata,0,SMB_POSIX_ACL_MASK);
3467 SIVAL(pdata,2,0xFFFFFFFF);
3468 SIVAL(pdata,6,0xFFFFFFFF);
3469 break;
3470 case SMB_ACL_OTHER:
3471 SCVAL(pdata,0,SMB_POSIX_ACL_OTHER);
3472 SIVAL(pdata,2,0xFFFFFFFF);
3473 SIVAL(pdata,6,0xFFFFFFFF);
3474 break;
3475 default:
3476 DEBUG(0,("marshall_posix_acl: unknown tagtype.\n"));
3477 return False;
3478 }
3479 pdata += SMB_POSIX_ACL_ENTRY_SIZE;
3480 }
3481
3482 return True;
3483 }
3484 #endif
3485
3486 /****************************************************************************
3487 Store the FILE_UNIX_BASIC info.
3488 ****************************************************************************/
3489
3490 static char *store_file_unix_basic(connection_struct *conn,
3491 char *pdata,
3492 files_struct *fsp,
3493 const SMB_STRUCT_STAT *psbuf)
3494 {
3495 DEBUG(10,("store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC\n"));
3496 DEBUG(4,("store_file_unix_basic: st_mode=%o\n",(int)psbuf->st_mode));
3497
3498 SOFF_T(pdata,0,get_file_size(*psbuf)); /* File size 64 Bit */
3499 pdata += 8;
3500
3501 SOFF_T(pdata,0,get_allocation_size(conn,fsp,psbuf)); /* Number of bytes used on disk - 64 Bit */
3502 pdata += 8;
3503
3504 put_long_date_timespec(pdata,get_ctimespec(psbuf)); /* Change Time 64 Bit */
3505 put_long_date_timespec(pdata+8,get_atimespec(psbuf)); /* Last access time 64 Bit */
3506 put_long_date_timespec(pdata+16,get_mtimespec(psbuf)); /* Last modification time 64 Bit */
3507 pdata += 24;
3508
3509 SIVAL(pdata,0,psbuf->st_uid); /* user id for the owner */
3510 SIVAL(pdata,4,0);
3511 pdata += 8;
3512
3513 SIVAL(pdata,0,psbuf->st_gid); /* group id of owner */
3514 SIVAL(pdata,4,0);
3515 pdata += 8;
3516
3517 SIVAL(pdata,0,unix_filetype(psbuf->st_mode));
3518 pdata += 4;
3519
3520 SIVAL(pdata,0,unix_dev_major(psbuf->st_rdev)); /* Major device number if type is device */
3521 SIVAL(pdata,4,0);
3522 pdata += 8;
3523
3524 SIVAL(pdata,0,unix_dev_minor(psbuf->st_rdev)); /* Minor device number if type is device */
3525 SIVAL(pdata,4,0);
3526 pdata += 8;
3527
3528 SINO_T_VAL(pdata,0,(SMB_INO_T)psbuf->st_ino); /* inode number */
3529 pdata += 8;
3530
3531 SIVAL(pdata,0, unix_perms_to_wire(psbuf->st_mode)); /* Standard UNIX file permissions */
3532 SIVAL(pdata,4,0);
3533 pdata += 8;
3534
3535 SIVAL(pdata,0,psbuf->st_nlink); /* number of hard links */
3536 SIVAL(pdata,4,0);
3537 pdata += 8;
3538
3539 return pdata;
3540 }
3541
3542 /* Forward and reverse mappings from the UNIX_INFO2 file flags field and
3543 * the chflags(2) (or equivalent) flags.
3544 *
3545 * XXX: this really should be behind the VFS interface. To do this, we would
3546 * need to alter SMB_STRUCT_STAT so that it included a flags and a mask field.
3547 * Each VFS module could then implement its own mapping as appropriate for the
3548 * platform. We would then pass the SMB flags into SMB_VFS_CHFLAGS.
3549 */
3550 static const struct {unsigned stat_fflag; unsigned smb_fflag;}
3551 info2_flags_map[] =
3552 {
3553 #ifdef UF_NODUMP
3554 { UF_NODUMP, EXT_DO_NOT_BACKUP },
3555 #endif
3556
3557 #ifdef UF_IMMUTABLE
3558 { UF_IMMUTABLE, EXT_IMMUTABLE },
3559 #endif
3560
3561 #ifdef UF_APPEND
3562 { UF_APPEND, EXT_OPEN_APPEND_ONLY },
3563 #endif
3564
3565 #ifdef UF_HIDDEN
3566 { UF_HIDDEN, EXT_HIDDEN },
3567 #endif
3568
3569 /* Do not remove. We need to guarantee that this array has at least one
3570 * entry to build on HP-UX.
3571 */
3572 { 0, 0 }
3573
3574 };
3575
3576 static void map_info2_flags_from_sbuf(const SMB_STRUCT_STAT *psbuf,
3577 uint32 *smb_fflags, uint32 *smb_fmask)
3578 {
3579 #ifdef HAVE_STAT_ST_FLAGS
3580 int i;
3581
3582 for (i = 0; i < ARRAY_SIZE(info2_flags_map); ++i) {
3583 *smb_fmask |= info2_flags_map[i].smb_fflag;
3584 if (psbuf->st_flags & info2_flags_map[i].stat_fflag) {
3585 *smb_fflags |= info2_flags_map[i].smb_fflag;
3586 }
3587 }
3588 #endif /* HAVE_STAT_ST_FLAGS */
3589 }
3590
3591 static bool map_info2_flags_to_sbuf(const SMB_STRUCT_STAT *psbuf,
3592 const uint32 smb_fflags,
3593 const uint32 smb_fmask,
3594 int *stat_fflags)
3595 {
3596 #ifdef HAVE_STAT_ST_FLAGS
3597 uint32 max_fmask = 0;
3598 int i;
3599
3600 *stat_fflags = psbuf->st_flags;
3601
3602 /* For each flags requested in smb_fmask, check the state of the
3603 * corresponding flag in smb_fflags and set or clear the matching
3604 * stat flag.
3605 */
3606
3607 for (i = 0; i < ARRAY_SIZE(info2_flags_map); ++i) {
3608 max_fmask |= info2_flags_map[i].smb_fflag;
3609 if (smb_fmask & info2_flags_map[i].smb_fflag) {
3610 if (smb_fflags & info2_flags_map[i].smb_fflag) {
3611 *stat_fflags |= info2_flags_map[i].stat_fflag;
3612 } else {
3613 *stat_fflags &= ~info2_flags_map[i].stat_fflag;
3614 }
3615 }
3616 }
3617
3618 /* If smb_fmask is asking to set any bits that are not supported by
3619 * our flag mappings, we should fail.
3620 */
3621 if ((smb_fmask & max_fmask) != smb_fmask) {
3622 return False;
3623 }
3624
3625 return True;
3626 #else
3627 return False;
3628 #endif /* HAVE_STAT_ST_FLAGS */
3629 }
3630
3631
3632 /* Just like SMB_QUERY_FILE_UNIX_BASIC, but with the addition
3633 * of file flags and birth (create) time.
3634 */
3635 static char *store_file_unix_basic_info2(connection_struct *conn,
3636 char *pdata,
3637 files_struct *fsp,
3638 const SMB_STRUCT_STAT *psbuf)
3639 {
3640 uint32 file_flags = 0;
3641 uint32 flags_mask = 0;
3642
3643 pdata = store_file_unix_basic(conn, pdata, fsp, psbuf);
3644
3645 /* Create (birth) time 64 bit */
3646 put_long_date_timespec(pdata, get_create_timespec(psbuf, False));
3647 pdata += 8;
3648
3649 map_info2_flags_from_sbuf(psbuf, &file_flags, &flags_mask);
3650 SIVAL(pdata, 0, file_flags); /* flags */
3651 SIVAL(pdata, 4, flags_mask); /* mask */
3652 pdata += 8;
3653
3654 return pdata;
3655 }
3656
3657 static NTSTATUS marshall_stream_info(unsigned int num_streams,
3658 const struct stream_struct *streams,
3659 char *data,
3660 unsigned int max_data_bytes,
3661 unsigned int *data_size)
3662 {
3663 unsigned int i;
3664 unsigned int ofs = 0;
3665
3666 for (i=0; i<num_streams; i++) {
3667 unsigned int next_offset;
3668 size_t namelen;
3669 smb_ucs2_t *namebuf;
3670
3671 namelen = push_ucs2_talloc(talloc_tos(), &namebuf,
3672 streams[i].name);
3673
3674 if ((namelen == (size_t)-1) || (namelen <= 2)) {
3675 return NT_STATUS_INVALID_PARAMETER;
3676 }
3677
3678 /*
3679 * name_buf is now null-terminated, we need to marshall as not
3680 * terminated
3681 */
3682
3683 namelen -= 2;
3684
3685 if (ofs + 24 + namelen > max_data_bytes) {
3686 TALLOC_FREE(namebuf);
3687 return NT_STATUS_BUFFER_TOO_SMALL;
3688 }
3689
3690 SIVAL(data, ofs+4, namelen);
3691 SOFF_T(data, ofs+8, streams[i].size);
3692 SOFF_T(data, ofs+16, streams[i].alloc_size);
3693 memcpy(data+ofs+24, namebuf, namelen);
3694 TALLOC_FREE(namebuf);
3695
3696 next_offset = ofs + 24 + namelen;
3697
3698 if (i == num_streams-1) {
3699 SIVAL(data, ofs, 0);
3700 }
3701 else {
3702 unsigned int align = ndr_align_size(next_offset, 8);
3703
3704 if (next_offset + align > max_data_bytes) {
3705 return NT_STATUS_BUFFER_TOO_SMALL;
3706 }
3707
3708 memset(data+next_offset, 0, align);
3709 next_offset += align;
3710
3711 SIVAL(data, ofs, next_offset - ofs);
3712 ofs = next_offset;
3713 }
3714
3715 ofs = next_offset;
3716 }
3717
3718 *data_size = ofs;
3719
3720 return NT_STATUS_OK;
3721 }
3722
3723 /****************************************************************************
3724 Reply to a TRANSACT2_QFILEINFO on a PIPE !
3725 ****************************************************************************/
3726
3727 static void call_trans2qpipeinfo(connection_struct *conn,
3728 struct smb_request *req,
3729 unsigned int tran_call,
3730 char **pparams, int total_params,
3731 char **ppdata, int total_data,
3732 unsigned int max_data_bytes)
3733 {
3734 char *params = *pparams;
3735 char *pdata = *ppdata;
3736 unsigned int data_size = 0;
3737 unsigned int param_size = 2;
3738 uint16 info_level;
3739 smb_np_struct *p_pipe = NULL;
3740
3741 if (!params) {
3742 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
3743 return;
3744 }
3745
3746 if (total_params < 4) {
3747 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
3748 return;
3749 }
3750
3751 p_pipe = get_rpc_pipe_p(SVAL(params,0));
3752 if (p_pipe == NULL) {
3753 reply_nterror(req, NT_STATUS_INVALID_HANDLE);
3754 return;
3755 }
3756
3757 info_level = SVAL(params,2);
3758
3759 *pparams = (char *)SMB_REALLOC(*pparams,2);
3760 if (*pparams == NULL) {
3761 reply_nterror(req, NT_STATUS_NO_MEMORY);
3762 return;
3763 }
3764 params = *pparams;
3765 SSVAL(params,0,0);
3766 data_size = max_data_bytes + DIR_ENTRY_SAFETY_MARGIN;
3767 *ppdata = (char *)SMB_REALLOC(*ppdata, data_size);
3768 if (*ppdata == NULL ) {
3769 reply_nterror(req, NT_STATUS_NO_MEMORY);
3770 return;
3771 }
3772 pdata = *ppdata;
3773
3774 switch (info_level) {
3775 case SMB_FILE_STANDARD_INFORMATION:
3776 memset(pdata,0,24);
3777 SOFF_T(pdata,0,4096LL);
3778 SIVAL(pdata,16,1);
3779 SIVAL(pdata,20,1);
3780 data_size = 24;
3781 break;
3782
3783 default:
3784 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
3785 return;
3786 }
3787
3788 send_trans2_replies(conn, req, params, param_size, *ppdata, data_size,
3789 max_data_bytes);
3790
3791 return;
3792 }
3793
3794 /****************************************************************************
3795 Reply to a TRANS2_QFILEPATHINFO or TRANSACT2_QFILEINFO (query file info by
3796 file name or file id).
3797 ****************************************************************************/
3798
3799 static void call_trans2qfilepathinfo(connection_struct *conn,
3800 struct smb_request *req,
3801 unsigned int tran_call,
3802 char **pparams, int total_params,
3803 char **ppdata, int total_data,
3804 unsigned int max_data_bytes)
3805 {
3806 char *params = *pparams;
3807 char *pdata = *ppdata;
3808 char *dstart, *dend;
3809 uint16 info_level;
3810 int mode=0;
3811 int nlink;
3812 SMB_OFF_T file_size=0;
3813 SMB_BIG_UINT allocation_size=0;
3814 unsigned int data_size = 0;
3815 unsigned int param_size = 2;
3816 SMB_STRUCT_STAT sbuf;
3817 char *dos_fname = NULL;
3818 char *fname = NULL;
3819 char *fullpathname;
3820 char *base_name;
3821 char *p;
3822 SMB_OFF_T pos = 0;
3823 bool delete_pending = False;
3824 int len;
3825 time_t create_time, mtime, atime;
3826 struct timespec create_time_ts, mtime_ts, atime_ts;
3827 struct timespec write_time_ts;
3828 files_struct *fsp = NULL;
3829 struct file_id fileid;
3830 struct ea_list *ea_list = NULL;
3831 uint32 access_mask = 0x12019F; /* Default - GENERIC_EXECUTE mapping from Windows */
3832 char *lock_data = NULL;
3833 bool ms_dfs_link = false;
3834 TALLOC_CTX *ctx = talloc_tos();
3835
3836 if (!params) {
3837 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
3838 return;
3839 }
3840
3841 ZERO_STRUCT(sbuf);
3842 ZERO_STRUCT(write_time_ts);
3843
3844 if (tran_call == TRANSACT2_QFILEINFO) {
3845 if (total_params < 4) {
3846 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
3847 return;
3848 }
3849
3850 if (IS_IPC(conn)) {
3851 call_trans2qpipeinfo(conn, req, tran_call,
3852 pparams, total_params,
3853 ppdata, total_data,
3854 max_data_bytes);
3855 return;
3856 }
3857
3858 fsp = file_fsp(SVAL(params,0));
3859 info_level = SVAL(params,2);
3860
3861 DEBUG(3,("call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = %d\n", info_level));
3862
3863 if (INFO_LEVEL_IS_UNIX(info_level) && !lp_unix_extensions()) {
3864 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
3865 return;
3866 }
3867
3868 /* Initial check for valid fsp ptr. */
3869 if (!check_fsp_open(conn, req, fsp, &current_user)) {
3870 return;
3871 }
3872
3873 fname = talloc_strdup(talloc_tos(),fsp->fsp_name);
3874 if (!fname) {
3875 reply_nterror(req, NT_STATUS_NO_MEMORY);
3876 return;
3877 }
3878
3879 if(fsp->fake_file_handle) {
3880 /*
3881 * This is actually for the QUOTA_FAKE_FILE --metze
3882 */
3883
3884 /* We know this name is ok, it's already passed the checks. */
3885
3886 } else if(fsp && (fsp->is_directory || fsp->fh->fd == -1)) {
3887 /*
3888 * This is actually a QFILEINFO on a directory
3889 * handle (returned from an NT SMB). NT5.0 seems
3890 * to do this call. JRA.
3891 */
3892
3893 if (INFO_LEVEL_IS_UNIX(info_level)) {
3894 /* Always do lstat for UNIX calls. */
3895 if (SMB_VFS_LSTAT(conn,fname,&sbuf)) {
3896 DEBUG(3,("call_trans2qfilepathinfo: SMB_VFS_LSTAT of %s failed (%s)\n",fname,strerror(errno)));
3897 reply_unixerror(req,ERRDOS,ERRbadpath);
3898 return;
3899 }
3900 } else if (SMB_VFS_STAT(conn,fname,&sbuf)) {
3901 DEBUG(3,("call_trans2qfilepathinfo: SMB_VFS_STAT of %s failed (%s)\n",fname,strerror(errno)));
3902 reply_unixerror(req, ERRDOS, ERRbadpath);
3903 return;
3904 }
3905
3906 fileid = vfs_file_id_from_sbuf(conn, &sbuf);
3907 get_file_infos(fileid, &delete_pending, &write_time_ts);
3908 } else {
3909 /*
3910 * Original code - this is an open file.
3911 */
3912 if (!check_fsp(conn, req, fsp, &current_user)) {
3913 return;
3914 }
3915
3916 if (SMB_VFS_FSTAT(fsp, &sbuf) != 0) {
3917 DEBUG(3,("fstat of fnum %d failed (%s)\n", fsp->fnum, strerror(errno)));
3918 reply_unixerror(req, ERRDOS, ERRbadfid);
3919 return;
3920 }
3921 pos = fsp->fh->position_information;
3922 fileid = vfs_file_id_from_sbuf(conn, &sbuf);
3923 get_file_infos(fileid, &delete_pending, &write_time_ts);
3924 access_mask = fsp->access_mask;
3925 }
3926
3927 } else {
3928 NTSTATUS status = NT_STATUS_OK;
3929
3930 /* qpathinfo */
3931 if (total_params < 7) {
3932 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
3933 return;
3934 }
3935
3936 info_level = SVAL(params,0);
3937
3938 DEBUG(3,("call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = %d\n", info_level));
3939
3940 if (INFO_LEVEL_IS_UNIX(info_level) && !lp_unix_extensions()) {
3941 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
3942 return;
3943 }
3944
3945 srvstr_get_path(ctx, params, req->flags2, &fname, &params[6],
3946 total_params - 6,
3947 STR_TERMINATE, &status);
3948 if (!NT_STATUS_IS_OK(status)) {
3949 reply_nterror(req, status);
3950 return;
3951 }
3952
3953 status = resolve_dfspath(ctx,
3954 conn,
3955 req->flags2 & FLAGS2_DFS_PATHNAMES,
3956 fname,
3957 &fname);
3958 if (!NT_STATUS_IS_OK(status)) {
3959 if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
3960 reply_botherror(req,
3961 NT_STATUS_PATH_NOT_COVERED,
3962 ERRSRV, ERRbadpath);
3963 }
3964 reply_nterror(req, status);
3965 return;
3966 }
3967
3968 status = unix_convert(ctx, conn, fname, False, &fname, NULL, &sbuf);
3969 if (!NT_STATUS_IS_OK(status)) {
3970 reply_nterror(req, status);
3971 return;
3972 }
3973 status = check_name(conn, fname);
3974 if (!NT_STATUS_IS_OK(status)) {
3975 DEBUG(3,("call_trans2qfilepathinfo: fileinfo of %s failed (%s)\n",fname,nt_errstr(status)));
3976 reply_nterror(req, status);
3977 return;
3978 }
3979
3980 if ((conn->fs_capabilities & FILE_NAMED_STREAMS)
3981 && is_ntfs_stream_name(fname)) {
3982 char *base;
3983 SMB_STRUCT_STAT bsbuf;
3984
3985 status = split_ntfs_stream_name(talloc_tos(), fname,
3986 &base, NULL);
3987 if (!NT_STATUS_IS_OK(status)) {
3988 DEBUG(10, ("create_file_unixpath: "
3989 "split_ntfs_stream_name failed: %s\n",
3990 nt_errstr(status)));
3991 reply_nterror(req, status);
3992 return;
3993 }
3994
3995 SMB_ASSERT(!is_ntfs_stream_name(base)); /* paranoia.. */
3996
3997 if (INFO_LEVEL_IS_UNIX(info_level)) {
3998 /* Always do lstat for UNIX calls. */
3999 if (SMB_VFS_LSTAT(conn,base,&bsbuf)) {
4000 DEBUG(3,("call_trans2qfilepathinfo: SMB_VFS_LSTAT of %s failed (%s)\n",base,strerror(errno)));
4001 reply_unixerror(req,ERRDOS,ERRbadpath);
4002 return;
4003 }
4004 } else {
4005 if (SMB_VFS_STAT(conn,base,&bsbuf) != 0) {
4006 DEBUG(3,("call_trans2qfilepathinfo: fileinfo of %s failed (%s)\n",base,strerror(errno)));
4007 reply_unixerror(req,ERRDOS,ERRbadpath);
4008 return;
4009 }
4010 }
4011
4012 fileid = vfs_file_id_from_sbuf(conn, &bsbuf);
4013 get_file_infos(fileid, &delete_pending, NULL);
4014 if (delete_pending) {
4015 reply_nterror(req, NT_STATUS_DELETE_PENDING);
4016 return;
4017 }
4018 }
4019
4020 if (INFO_LEVEL_IS_UNIX(info_level)) {
4021 /* Always do lstat for UNIX calls. */
4022 if (SMB_VFS_LSTAT(conn,fname,&sbuf)) {
4023 DEBUG(3,("call_trans2qfilepathinfo: SMB_VFS_LSTAT of %s failed (%s)\n",fname,strerror(errno)));
4024 reply_unixerror(req, ERRDOS, ERRbadpath);
4025 return;
4026 }
4027
4028 } else if (!VALID_STAT(sbuf) && SMB_VFS_STAT(conn,fname,&sbuf) && (info_level != SMB_INFO_IS_NAME_VALID)) {
4029 ms_dfs_link = check_msdfs_link(conn,fname,&sbuf);
4030
4031 if (!ms_dfs_link) {
4032 DEBUG(3,("call_trans2qfilepathinfo: SMB_VFS_STAT of %s failed (%s)\n",fname,strerror(errno)));
4033 reply_unixerror(req, ERRDOS, ERRbadpath);
4034 return;
4035 }
4036 }
4037
4038 fileid = vfs_file_id_from_sbuf(conn, &sbuf);
4039 get_file_infos(fileid, &delete_pending, &write_time_ts);
4040 if (delete_pending) {
4041 reply_nterror(req, NT_STATUS_DELETE_PENDING);
4042 return;
4043 }
4044 }
4045
4046 if (INFO_LEVEL_IS_UNIX(info_level) && !lp_unix_extensions()) {
4047 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
4048 return;
4049 }
4050
4051 DEBUG(3,("call_trans2qfilepathinfo %s (fnum = %d) level=%d call=%d total_data=%d\n",
4052 fname,fsp ? fsp->fnum : -1, info_level,tran_call,total_data));
4053
4054 p = strrchr_m(fname,'/');
4055 if (!p)
4056 base_name = fname;
4057 else
4058 base_name = p+1;
4059
4060 if (ms_dfs_link) {
4061 mode = dos_mode_msdfs(conn,fname,&sbuf);
4062 } else {
4063 mode = dos_mode(conn,fname,&sbuf);
4064 }
4065 if (!mode)
4066 mode = FILE_ATTRIBUTE_NORMAL;
4067
4068 nlink = sbuf.st_nlink;
4069
4070 if (nlink && (mode&aDIR)) {
4071 nlink = 1;
4072 }
4073
4074 if ((nlink > 0) && delete_pending) {
4075 nlink -= 1;
4076 }
4077
4078 fullpathname = fname;
4079 if (!(mode & aDIR))
4080 file_size = get_file_size(sbuf);
4081
4082 /* Pull out any data sent here before we realloc. */
4083 switch (info_level) {
4084 case SMB_INFO_QUERY_EAS_FROM_LIST:
4085 {
4086 /* Pull any EA list from the data portion. */
4087 uint32 ea_size;
4088
4089 if (total_data < 4) {
4090 reply_nterror(
4091 req, NT_STATUS_INVALID_PARAMETER);
4092 return;
4093 }
4094 ea_size = IVAL(pdata,0);
4095
4096 if (total_data > 0 && ea_size != total_data) {
4097 DEBUG(4,("call_trans2qfilepathinfo: Rejecting EA request with incorrect \
4098 total_data=%u (should be %u)\n", (unsigned int)total_data, (unsigned int)IVAL(pdata,0) ));
4099 reply_nterror(
4100 req, NT_STATUS_INVALID_PARAMETER);
4101 return;
4102 }
4103
4104 if (!lp_ea_support(SNUM(conn))) {
4105 reply_doserror(req, ERRDOS,
4106 ERReasnotsupported);
4107 return;
4108 }
4109
4110 /* Pull out the list of names. */
4111 ea_list = read_ea_name_list(ctx, pdata + 4, ea_size - 4);
4112 if (!ea_list) {
4113 reply_nterror(
4114 req, NT_STATUS_INVALID_PARAMETER);
4115 return;
4116 }
4117 break;
4118 }
4119
4120 case SMB_QUERY_POSIX_LOCK:
4121 {
4122 if (fsp == NULL || fsp->fh->fd == -1) {
4123 reply_nterror(req, NT_STATUS_INVALID_HANDLE);
4124 return;
4125 }
4126
4127 if (total_data != POSIX_LOCK_DATA_SIZE) {
4128 reply_nterror(
4129 req, NT_STATUS_INVALID_PARAMETER);
4130 return;
4131 }
4132
4133 /* Copy the lock range data. */
4134 lock_data = (char *)TALLOC_MEMDUP(
4135 ctx, pdata, total_data);
4136 if (!lock_data) {
4137 reply_nterror(req, NT_STATUS_NO_MEMORY);
4138 return;
4139 }
4140 }
4141 default:
4142 break;
4143 }
4144
4145 *pparams = (char *)SMB_REALLOC(*pparams,2);
4146 if (*pparams == NULL) {
4147 reply_nterror(req, NT_STATUS_NO_MEMORY);
4148 return;
4149 }
4150 params = *pparams;
4151 SSVAL(params,0,0);
4152 data_size = max_data_bytes + DIR_ENTRY_SAFETY_MARGIN;
4153 *ppdata = (char *)SMB_REALLOC(*ppdata, data_size);
4154 if (*ppdata == NULL ) {
4155 reply_nterror(req, NT_STATUS_NO_MEMORY);
4156 return;
4157 }
4158 pdata = *ppdata;
4159 dstart = pdata;
4160 dend = dstart + data_size - 1;
4161
4162 create_time_ts = get_create_timespec(&sbuf,lp_fake_dir_create_times(SNUM(conn)));
4163 mtime_ts = get_mtimespec(&sbuf);
4164 atime_ts = get_atimespec(&sbuf);
4165
4166 allocation_size = get_allocation_size(conn,fsp,&sbuf);
4167
4168 if (!fsp) {
4169 /* Do we have this path open ? */
4170 files_struct *fsp1;
4171 fileid = vfs_file_id_from_sbuf(conn, &sbuf);
4172 fsp1 = file_find_di_first(fileid);
4173 if (fsp1 && fsp1->initial_allocation_size) {
4174 allocation_size = get_allocation_size(conn, fsp1, &sbuf);
4175 }
4176 }
4177
4178 if (!null_timespec(write_time_ts) && !INFO_LEVEL_IS_UNIX(info_level)) {
4179 mtime_ts = write_time_ts;
4180 }
4181
4182 if (lp_dos_filetime_resolution(SNUM(conn))) {
4183 dos_filetime_timespec(&create_time_ts);
4184 dos_filetime_timespec(&mtime_ts);
4185 dos_filetime_timespec(&atime_ts);
4186 }
4187
4188 create_time = convert_timespec_to_time_t(create_time_ts);
4189 mtime = convert_timespec_to_time_t(mtime_ts);
4190 atime = convert_timespec_to_time_t(atime_ts);
4191
4192 /* NT expects the name to be in an exact form of the *full*
4193 filename. See the trans2 torture test */
4194 if (ISDOT(base_name)) {
4195 dos_fname = talloc_strdup(ctx, "\\");
4196 if (!dos_fname) {
4197 reply_nterror(req, NT_STATUS_NO_MEMORY);
4198 return;
4199 }
4200 } else {
4201 dos_fname = talloc_asprintf(ctx,
4202 "\\%s",
4203 fname);
4204 if (!dos_fname) {
4205 reply_nterror(req, NT_STATUS_NO_MEMORY);
4206 return;
4207 }
4208 string_replace(dos_fname, '/', '\\');
4209 }
4210
4211 switch (info_level) {
4212 case SMB_INFO_STANDARD:
4213 DEBUG(10,("call_trans2qfilepathinfo: SMB_INFO_STANDARD\n"));
4214 data_size = 22;
4215 srv_put_dos_date2(pdata,l1_fdateCreation,create_time);
4216 srv_put_dos_date2(pdata,l1_fdateLastAccess,atime);
4217 srv_put_dos_date2(pdata,l1_fdateLastWrite,mtime); /* write time */
4218 SIVAL(pdata,l1_cbFile,(uint32)file_size);
4219 SIVAL(pdata,l1_cbFileAlloc,(uint32)allocation_size);
4220 SSVAL(pdata,l1_attrFile,mode);
4221 break;
4222
4223 case SMB_INFO_QUERY_EA_SIZE:
4224 {
4225 unsigned int ea_size = estimate_ea_size(conn, fsp, fname);
4226 DEBUG(10,("call_trans2qfilepathinfo: SMB_INFO_QUERY_EA_SIZE\n"));
4227 data_size = 26;
4228 srv_put_dos_date2(pdata,0,create_time);
4229 srv_put_dos_date2(pdata,4,atime);
4230 srv_put_dos_date2(pdata,8,mtime); /* write time */
4231 SIVAL(pdata,12,(uint32)file_size);
4232 SIVAL(pdata,16,(uint32)allocation_size);
4233 SSVAL(pdata,20,mode);
4234 SIVAL(pdata,22,ea_size);
4235 break;
4236 }
4237
4238 case SMB_INFO_IS_NAME_VALID:
4239 DEBUG(10,("call_trans2qfilepathinfo: SMB_INFO_IS_NAME_VALID\n"));
4240 if (tran_call == TRANSACT2_QFILEINFO) {
4241 /* os/2 needs this ? really ?*/
4242 reply_doserror(req, ERRDOS, ERRbadfunc);
4243 return;
4244 }
4245 data_size = 0;
4246 param_size = 0;
4247 break;
4248
4249 case SMB_INFO_QUERY_EAS_FROM_LIST:
4250 {
4251 size_t total_ea_len = 0;
4252 struct ea_list *ea_file_list = NULL;
4253
4254 DEBUG(10,("call_trans2qfilepathinfo: SMB_INFO_QUERY_EAS_FROM_LIST\n"));
4255
4256 ea_file_list = get_ea_list_from_file(ctx, conn, fsp, fname, &total_ea_len);
4257 ea_list = ea_list_union(ea_list, ea_file_list, &total_ea_len);
4258
4259 if (!ea_list || (total_ea_len > data_size)) {
4260 data_size = 4;
4261 SIVAL(pdata,0,4); /* EA List Length must be set to 4 if no EA's. */
4262 break;
4263 }
4264
4265 data_size = fill_ea_buffer(ctx, pdata, data_size, conn, ea_list);
4266 break;
4267 }
4268
4269 case SMB_INFO_QUERY_ALL_EAS:
4270 {
4271 /* We have data_size bytes to put EA's into. */
4272 size_t total_ea_len = 0;
4273
4274 DEBUG(10,("call_trans2qfilepathinfo: SMB_INFO_QUERY_ALL_EAS\n"));
4275
4276 ea_list = get_ea_list_from_file(ctx, conn, fsp, fname, &total_ea_len);
4277 if (!ea_list || (total_ea_len > data_size)) {
4278 data_size = 4;
4279 SIVAL(pdata,0,4); /* EA List Length must be set to 4 if no EA's. */
4280 break;
4281 }
4282
4283 data_size = fill_ea_buffer(ctx, pdata, data_size, conn, ea_list);
4284 break;
4285 }
4286
4287 case SMB_FILE_BASIC_INFORMATION:
4288 case SMB_QUERY_FILE_BASIC_INFO:
4289
4290 if (info_level == SMB_QUERY_FILE_BASIC_INFO) {
4291 DEBUG(10,("call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO\n"));
4292 data_size = 36; /* w95 returns 40 bytes not 36 - why ?. */
4293 } else {
4294 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION\n"));
4295 data_size = 40;
4296 SIVAL(pdata,36,0);
4297 }
4298 put_long_date_timespec(pdata,create_time_ts);
4299 put_long_date_timespec(pdata+8,atime_ts);
4300 put_long_date_timespec(pdata+16,mtime_ts); /* write time */
4301 put_long_date_timespec(pdata+24,mtime_ts); /* change time */
4302 SIVAL(pdata,32,mode);
4303
4304 DEBUG(5,("SMB_QFBI - "));
4305 DEBUG(5,("create: %s ", ctime(&create_time)));
4306 DEBUG(5,("access: %s ", ctime(&atime)));
4307 DEBUG(5,("write: %s ", ctime(&mtime)));
4308 DEBUG(5,("change: %s ", ctime(&mtime)));
4309 DEBUG(5,("mode: %x\n", mode));
4310 break;
4311
4312 case SMB_FILE_STANDARD_INFORMATION:
4313 case SMB_QUERY_FILE_STANDARD_INFO:
4314
4315 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION\n"));
4316 data_size = 24;
4317 SOFF_T(pdata,0,allocation_size);
4318 SOFF_T(pdata,8,file_size);
4319 SIVAL(pdata,16,nlink);
4320 SCVAL(pdata,20,delete_pending?1:0);
4321 SCVAL(pdata,21,(mode&aDIR)?1:0);
4322 SSVAL(pdata,22,0); /* Padding. */
4323 break;
4324
4325 case SMB_FILE_EA_INFORMATION:
4326 case SMB_QUERY_FILE_EA_INFO:
4327 {
4328 unsigned int ea_size = estimate_ea_size(conn, fsp, fname);
4329 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_EA_INFORMATION\n"));
4330 data_size = 4;
4331 SIVAL(pdata,0,ea_size);
4332 break;
4333 }
4334
4335 /* Get the 8.3 name - used if NT SMB was negotiated. */
4336 case SMB_QUERY_FILE_ALT_NAME_INFO:
4337 case SMB_FILE_ALTERNATE_NAME_INFORMATION:
4338 {
4339 char mangled_name[13];
4340 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_ALTERNATE_NAME_INFORMATION\n"));
4341 if (!name_to_8_3(base_name,mangled_name,
4342 True,conn->params)) {
4343 reply_nterror(
4344 req,
4345 NT_STATUS_NO_MEMORY);
4346 }
4347 len = srvstr_push(dstart, req->flags2,
4348 pdata+4, mangled_name,
4349 PTR_DIFF(dend, pdata+4),
4350 STR_UNICODE);
4351 data_size = 4 + len;
4352 SIVAL(pdata,0,len);
4353 break;
4354 }
4355
4356 case SMB_QUERY_FILE_NAME_INFO:
4357 /*
4358 this must be *exactly* right for ACLs on mapped drives to work
4359 */
4360 len = srvstr_push(dstart, req->flags2,
4361 pdata+4, dos_fname,
4362 PTR_DIFF(dend, pdata+4),
4363 STR_UNICODE);
4364 DEBUG(10,("call_trans2qfilepathinfo: SMB_QUERY_FILE_NAME_INFO\n"));
4365 data_size = 4 + len;
4366 SIVAL(pdata,0,len);
4367 break;
4368
4369 case SMB_FILE_ALLOCATION_INFORMATION:
4370 case SMB_QUERY_FILE_ALLOCATION_INFO:
4371 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_ALLOCATION_INFORMATION\n"));
4372 data_size = 8;
4373 SOFF_T(pdata,0,allocation_size);
4374 break;
4375
4376 case SMB_FILE_END_OF_FILE_INFORMATION:
4377 case SMB_QUERY_FILE_END_OF_FILEINFO:
4378 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_END_OF_FILE_INFORMATION\n"));
4379 data_size = 8;
4380 SOFF_T(pdata,0,file_size);
4381 break;
4382
4383 case SMB_QUERY_FILE_ALL_INFO:
4384 case SMB_FILE_ALL_INFORMATION:
4385 {
4386 unsigned int ea_size = estimate_ea_size(conn, fsp, fname);
4387 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_ALL_INFORMATION\n"));
4388 put_long_date_timespec(pdata,create_time_ts);
4389 put_long_date_timespec(pdata+8,atime_ts);
4390 put_long_date_timespec(pdata+16,mtime_ts); /* write time */
4391 put_long_date_timespec(pdata+24,mtime_ts); /* change time */
4392 SIVAL(pdata,32,mode);
4393 SIVAL(pdata,36,0); /* padding. */
4394 pdata += 40;
4395 SOFF_T(pdata,0,allocation_size);
4396 SOFF_T(pdata,8,file_size);
4397 SIVAL(pdata,16,nlink);
4398 SCVAL(pdata,20,delete_pending);
4399 SCVAL(pdata,21,(mode&aDIR)?1:0);
4400 SSVAL(pdata,22,0);
4401 pdata += 24;
4402 SIVAL(pdata,0,ea_size);
4403 pdata += 4; /* EA info */
4404 len = srvstr_push(dstart, req->flags2,
4405 pdata+4, dos_fname,
4406 PTR_DIFF(dend, pdata+4),
4407 STR_UNICODE);
4408 SIVAL(pdata,0,len);
4409 pdata += 4 + len;
4410 data_size = PTR_DIFF(pdata,(*ppdata));
4411 break;
4412 }
4413 case SMB_FILE_INTERNAL_INFORMATION:
4414 /* This should be an index number - looks like
4415 dev/ino to me :-)
4416
4417 I think this causes us to fail the IFSKIT
4418 BasicFileInformationTest. -tpot */
4419
4420 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION\n"));
4421 SIVAL(pdata,0,sbuf.st_ino); /* FileIndexLow */
4422 SIVAL(pdata,4,sbuf.st_dev); /* FileIndexHigh */
4423 data_size = 8;
4424 break;
4425
4426 case SMB_FILE_ACCESS_INFORMATION:
4427 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_ACCESS_INFORMATION\n"));
4428 SIVAL(pdata,0,access_mask);
4429 data_size = 4;
4430 break;
4431
4432 case SMB_FILE_NAME_INFORMATION:
4433 /* Pathname with leading '\'. */
4434 {
4435 size_t byte_len;
4436 byte_len = dos_PutUniCode(pdata+4,dos_fname,(size_t)max_data_bytes,False);
4437 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_NAME_INFORMATION\n"));
4438 SIVAL(pdata,0,byte_len);
4439 data_size = 4 + byte_len;
4440 break;
4441 }
4442
4443 case SMB_FILE_DISPOSITION_INFORMATION:
4444 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_DISPOSITION_INFORMATION\n"));
4445 data_size = 1;
4446 SCVAL(pdata,0,delete_pending);
4447 break;
4448
4449 case SMB_FILE_POSITION_INFORMATION:
4450 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_POSITION_INFORMATION\n"));
4451 data_size = 8;
4452 SOFF_T(pdata,0,pos);
4453 break;
4454
4455 case SMB_FILE_MODE_INFORMATION:
4456 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_MODE_INFORMATION\n"));
4457 SIVAL(pdata,0,mode);
4458 data_size = 4;
4459 break;
4460
4461 case SMB_FILE_ALIGNMENT_INFORMATION:
4462 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_ALIGNMENT_INFORMATION\n"));
4463 SIVAL(pdata,0,0); /* No alignment needed. */
4464 data_size = 4;
4465 break;
4466
4467 /*
4468 * NT4 server just returns "invalid query" to this - if we try
4469 * to answer it then NTws gets a BSOD! (tridge). W2K seems to
4470 * want this. JRA.
4471 */
4472 /* The first statement above is false - verified using Thursby
4473 * client against NT4 -- gcolley.
4474 */
4475 case SMB_QUERY_FILE_STREAM_INFO:
4476 case SMB_FILE_STREAM_INFORMATION: {
4477 unsigned int num_streams;
4478 struct stream_struct *streams;
4479 NTSTATUS status;
4480
4481 DEBUG(10,("call_trans2qfilepathinfo: "
4482 "SMB_FILE_STREAM_INFORMATION\n"));
4483
4484 status = SMB_VFS_STREAMINFO(
4485 conn, fsp, fname, talloc_tos(),
4486 &num_streams, &streams);
4487
4488 if (!NT_STATUS_IS_OK(status)) {
4489 DEBUG(10, ("could not get stream info: %s\n",
4490 nt_errstr(status)));
4491 reply_nterror(req, status);
4492 return;
4493 }
4494
4495 status = marshall_stream_info(num_streams, streams,
4496 pdata, max_data_bytes,
4497 &data_size);
4498
4499 if (!NT_STATUS_IS_OK(status)) {
4500 DEBUG(10, ("marshall_stream_info failed: %s\n",
4501 nt_errstr(status)));
4502 reply_nterror(req, status);
4503 return;
4504 }
4505
4506 TALLOC_FREE(streams);
4507
4508 break;
4509 }
4510 case SMB_QUERY_COMPRESSION_INFO:
4511 case SMB_FILE_COMPRESSION_INFORMATION:
4512 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_COMPRESSION_INFORMATION\n"));
4513 SOFF_T(pdata,0,file_size);
4514 SIVAL(pdata,8,0); /* ??? */
4515 SIVAL(pdata,12,0); /* ??? */
4516 data_size = 16;
4517 break;
4518
4519 case SMB_FILE_NETWORK_OPEN_INFORMATION:
4520 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_NETWORK_OPEN_INFORMATION\n"));
4521 put_long_date_timespec(pdata,create_time_ts);
4522 put_long_date_timespec(pdata+8,atime_ts);
4523 put_long_date_timespec(pdata+16,mtime_ts); /* write time */
4524 put_long_date_timespec(pdata+24,mtime_ts); /* change time */
4525 SOFF_T(pdata,32,allocation_size);
4526 SOFF_T(pdata,40,file_size);
4527 SIVAL(pdata,48,mode);
4528 SIVAL(pdata,52,0); /* ??? */
4529 data_size = 56;
4530 break;
4531
4532 case SMB_FILE_ATTRIBUTE_TAG_INFORMATION:
4533 DEBUG(10,("call_trans2qfilepathinfo: SMB_FILE_ATTRIBUTE_TAG_INFORMATION\n"));
4534 SIVAL(pdata,0,mode);
4535 SIVAL(pdata,4,0);
4536 data_size = 8;
4537 break;
4538
4539 /*
4540 * CIFS UNIX Extensions.
4541 */
4542
4543 case SMB_QUERY_FILE_UNIX_BASIC:
4544
4545 pdata = store_file_unix_basic(conn, pdata, fsp, &sbuf);
4546 data_size = PTR_DIFF(pdata,(*ppdata));
4547
4548 {
4549 int i;
4550 DEBUG(4,("call_trans2qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC "));
4551
4552 for (i=0; i<100; i++)
4553 DEBUG(4,("%d=%x, ",i, (*ppdata)[i]));
4554 DEBUG(4,("\n"));
4555 }
4556
4557 break;
4558
4559 case SMB_QUERY_FILE_UNIX_INFO2:
4560
4561 pdata = store_file_unix_basic_info2(conn, pdata, fsp, &sbuf);
4562 data_size = PTR_DIFF(pdata,(*ppdata));
4563
4564 {
4565 int i;
4566 DEBUG(4,("call_trans2qfilepathinfo: SMB_QUERY_FILE_UNIX_INFO2 "));
4567
4568 for (i=0; i<100; i++)
4569 DEBUG(4,("%d=%x, ",i, (*ppdata)[i]));
4570 DEBUG(4,("\n"));
4571 }
4572
4573 break;
4574
4575 case SMB_QUERY_FILE_UNIX_LINK:
4576 {
4577 char *buffer = TALLOC_ARRAY(ctx, char, PATH_MAX+1);
4578
4579 if (!buffer) {
4580 reply_nterror(req, NT_STATUS_NO_MEMORY);
4581 return;
4582 }
4583
4584 DEBUG(10,("call_trans2qfilepathinfo: SMB_QUERY_FILE_UNIX_LINK\n"));
4585 #ifdef S_ISLNK
4586 if(!S_ISLNK(sbuf.st_mode)) {
4587 reply_unixerror(req, ERRSRV,
4588 ERRbadlink);
4589 return;
4590 }
4591 #else
4592 reply_unixerror(req, ERRDOS, ERRbadlink);
4593 return;
4594 #endif
4595 len = SMB_VFS_READLINK(conn,fullpathname,
4596 buffer, PATH_MAX);
4597 if (len == -1) {
4598 reply_unixerror(req, ERRDOS,
4599 ERRnoaccess);
4600 return;
4601 }
4602 buffer[len] = 0;
4603 len = srvstr_push(dstart, req->flags2,
4604 pdata, buffer,
4605 PTR_DIFF(dend, pdata),
4606 STR_TERMINATE);
4607 pdata += len;
4608 data_size = PTR_DIFF(pdata,(*ppdata));
4609
4610 break;
4611 }
4612
4613 #if defined(HAVE_POSIX_ACLS)
4614 case SMB_QUERY_POSIX_ACL:
4615 {
4616 SMB_ACL_T file_acl = NULL;
4617 SMB_ACL_T def_acl = NULL;
4618 uint16 num_file_acls = 0;
4619 uint16 num_def_acls = 0;
4620
4621 if (fsp && !fsp->is_directory && (fsp->fh->fd != -1)) {
4622 file_acl = SMB_VFS_SYS_ACL_GET_FD(fsp);
4623 } else {
4624 file_acl = SMB_VFS_SYS_ACL_GET_FILE(conn, fname, SMB_ACL_TYPE_ACCESS);
4625 }
4626
4627 if (file_acl == NULL && no_acl_syscall_error(errno)) {
4628 DEBUG(5,("call_trans2qfilepathinfo: ACLs not implemented on filesystem containing %s\n",
4629 fname ));
4630 reply_nterror(
4631 req,
4632 NT_STATUS_NOT_IMPLEMENTED);
4633 return;
4634 }
4635
4636 if (S_ISDIR(sbuf.st_mode)) {
4637 if (fsp && fsp->is_directory) {
4638 def_acl = SMB_VFS_SYS_ACL_GET_FILE(conn, fsp->fsp_name, SMB_ACL_TYPE_DEFAULT);
4639 } else {
4640 def_acl = SMB_VFS_SYS_ACL_GET_FILE(conn, fname, SMB_ACL_TYPE_DEFAULT);
4641 }
4642 def_acl = free_empty_sys_acl(conn, def_acl);
4643 }
4644
4645 num_file_acls = count_acl_entries(conn, file_acl);
4646 num_def_acls = count_acl_entries(conn, def_acl);
4647
4648 if ( data_size < (num_file_acls + num_def_acls)*SMB_POSIX_ACL_ENTRY_SIZE + SMB_POSIX_ACL_HEADER_SIZE) {
4649 DEBUG(5,("call_trans2qfilepathinfo: data_size too small (%u) need %u\n",
4650 data_size,
4651 (unsigned int)((num_file_acls + num_def_acls)*SMB_POSIX_ACL_ENTRY_SIZE +
4652 SMB_POSIX_ACL_HEADER_SIZE) ));
4653 if (file_acl) {
4654 SMB_VFS_SYS_ACL_FREE_ACL(conn, file_acl);
4655 }
4656 if (def_acl) {
4657 SMB_VFS_SYS_ACL_FREE_ACL(conn, def_acl);
4658 }
4659 reply_nterror(
4660 req,
4661 NT_STATUS_BUFFER_TOO_SMALL);
4662 return;
4663 }
4664
4665 SSVAL(pdata,0,SMB_POSIX_ACL_VERSION);
4666 SSVAL(pdata,2,num_file_acls);
4667 SSVAL(pdata,4,num_def_acls);
4668 if (!marshall_posix_acl(conn, pdata + SMB_POSIX_ACL_HEADER_SIZE, &sbuf, file_acl)) {
4669 if (file_acl) {
4670 SMB_VFS_SYS_ACL_FREE_ACL(conn, file_acl);
4671 }
4672 if (def_acl) {
4673 SMB_VFS_SYS_ACL_FREE_ACL(conn, def_acl);
4674 }
4675 reply_nterror(
4676 req, NT_STATUS_INTERNAL_ERROR);
4677 return;
4678 }
4679 if (!marshall_posix_acl(conn, pdata + SMB_POSIX_ACL_HEADER_SIZE + (num_file_acls*SMB_POSIX_ACL_ENTRY_SIZE), &sbuf, def_acl)) {
4680 if (file_acl) {
4681 SMB_VFS_SYS_ACL_FREE_ACL(conn, file_acl);
4682 }
4683 if (def_acl) {
4684 SMB_VFS_SYS_ACL_FREE_ACL(conn, def_acl);
4685 }
4686 reply_nterror(
4687 req,
4688 NT_STATUS_INTERNAL_ERROR);
4689 return;
4690 }
4691
4692 if (file_acl) {
4693 SMB_VFS_SYS_ACL_FREE_ACL(conn, file_acl);
4694 }
4695 if (def_acl) {
4696 SMB_VFS_SYS_ACL_FREE_ACL(conn, def_acl);
4697 }
4698 data_size = (num_file_acls + num_def_acls)*SMB_POSIX_ACL_ENTRY_SIZE + SMB_POSIX_ACL_HEADER_SIZE;
4699 break;
4700 }
4701 #endif
4702
4703
4704 case SMB_QUERY_POSIX_LOCK:
4705 {
4706 NTSTATUS status = NT_STATUS_INVALID_LEVEL;
4707 SMB_BIG_UINT count;
4708 SMB_BIG_UINT offset;
4709 uint32 lock_pid;
4710 enum brl_type lock_type;
4711
4712 if (total_data != POSIX_LOCK_DATA_SIZE) {
4713 reply_nterror(
4714 req, NT_STATUS_INVALID_PARAMETER);
4715 return;
4716 }
4717
4718 switch (SVAL(pdata, POSIX_LOCK_TYPE_OFFSET)) {
4719 case POSIX_LOCK_TYPE_READ:
4720 lock_type = READ_LOCK;
4721 break;
4722 case POSIX_LOCK_TYPE_WRITE:
4723 lock_type = WRITE_LOCK;
4724 break;
4725 case POSIX_LOCK_TYPE_UNLOCK:
4726 default:
4727 /* There's no point in asking for an unlock... */
4728 reply_nterror(
4729 req,
4730 NT_STATUS_INVALID_PARAMETER);
4731 return;
4732 }
4733
4734 lock_pid = IVAL(pdata, POSIX_LOCK_PID_OFFSET);
4735 #if defined(HAVE_LONGLONG)
4736 offset = (((SMB_BIG_UINT) IVAL(pdata,(POSIX_LOCK_START_OFFSET+4))) << 32) |
4737 ((SMB_BIG_UINT) IVAL(pdata,POSIX_LOCK_START_OFFSET));
4738 count = (((SMB_BIG_UINT) IVAL(pdata,(POSIX_LOCK_LEN_OFFSET+4))) << 32) |
4739 ((SMB_BIG_UINT) IVAL(pdata,POSIX_LOCK_LEN_OFFSET));
4740 #else /* HAVE_LONGLONG */
4741 offset = (SMB_BIG_UINT)IVAL(pdata,POSIX_LOCK_START_OFFSET);
4742 count = (SMB_BIG_UINT)IVAL(pdata,POSIX_LOCK_LEN_OFFSET);
4743 #endif /* HAVE_LONGLONG */
4744
4745 status = query_lock(fsp,
4746 &lock_pid,
4747 &count,
4748 &offset,
4749 &lock_type,
4750 POSIX_LOCK);
4751
4752 if (ERROR_WAS_LOCK_DENIED(status)) {
4753 /* Here we need to report who has it locked... */
4754 data_size = POSIX_LOCK_DATA_SIZE;
4755
4756 SSVAL(pdata, POSIX_LOCK_TYPE_OFFSET, lock_type);
4757 SSVAL(pdata, POSIX_LOCK_FLAGS_OFFSET, 0);
4758 SIVAL(pdata, POSIX_LOCK_PID_OFFSET, lock_pid);
4759 #if defined(HAVE_LONGLONG)
4760 SIVAL(pdata, POSIX_LOCK_START_OFFSET, (uint32)(offset & 0xFFFFFFFF));
4761 SIVAL(pdata, POSIX_LOCK_START_OFFSET + 4, (uint32)((offset >> 32) & 0xFFFFFFFF));
4762 SIVAL(pdata, POSIX_LOCK_LEN_OFFSET, (uint32)(count & 0xFFFFFFFF));
4763 SIVAL(pdata, POSIX_LOCK_LEN_OFFSET + 4, (uint32)((count >> 32) & 0xFFFFFFFF));
4764 #else /* HAVE_LONGLONG */
4765 SIVAL(pdata, POSIX_LOCK_START_OFFSET, offset);
4766 SIVAL(pdata, POSIX_LOCK_LEN_OFFSET, count);
4767 #endif /* HAVE_LONGLONG */
4768
4769 } else if (NT_STATUS_IS_OK(status)) {
4770 /* For success we just return a copy of what we sent
4771 with the lock type set to POSIX_LOCK_TYPE_UNLOCK. */
4772 data_size = POSIX_LOCK_DATA_SIZE;
4773 memcpy(pdata, lock_data, POSIX_LOCK_DATA_SIZE);
4774 SSVAL(pdata, POSIX_LOCK_TYPE_OFFSET, POSIX_LOCK_TYPE_UNLOCK);
4775 } else {
4776 reply_nterror(req, status);
4777 return;
4778 }
4779 break;
4780 }
4781
4782 default:
4783 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
4784 return;
4785 }
4786
4787 send_trans2_replies(conn, req, params, param_size, *ppdata, data_size,
4788 max_data_bytes);
4789
4790 return;
4791 }
4792
4793 /****************************************************************************
4794 Set a hard link (called by UNIX extensions and by NT rename with HARD link
4795 code.
4796 ****************************************************************************/
4797
4798 NTSTATUS hardlink_internals(TALLOC_CTX *ctx,
4799 connection_struct *conn,
4800 const char *oldname_in,
4801 const char *newname_in)
4802 {
4803 SMB_STRUCT_STAT sbuf1, sbuf2;
4804 char *last_component_oldname = NULL;
4805 char *last_component_newname = NULL;
4806 char *oldname = NULL;
4807 char *newname = NULL;
4808 NTSTATUS status = NT_STATUS_OK;
4809
4810 ZERO_STRUCT(sbuf1);
4811 ZERO_STRUCT(sbuf2);
4812
4813 status = unix_convert(ctx, conn, oldname_in, False, &oldname,
4814 &last_component_oldname, &sbuf1);
4815 if (!NT_STATUS_IS_OK(status)) {
4816 return status;
4817 }
4818
4819 status = check_name(conn, oldname);
4820 if (!NT_STATUS_IS_OK(status)) {
4821 return status;
4822 }
4823
4824 /* source must already exist. */
4825 if (!VALID_STAT(sbuf1)) {
4826 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
4827 }
4828
4829 status = unix_convert(ctx, conn, newname_in, False, &newname,
4830 &last_component_newname, &sbuf2);
4831 if (!NT_STATUS_IS_OK(status)) {
4832 return status;
4833 }
4834
4835 status = check_name(conn, newname);
4836 if (!NT_STATUS_IS_OK(status)) {
4837 return status;
4838 }
4839
4840 /* Disallow if newname already exists. */
4841 if (VALID_STAT(sbuf2)) {
4842 return NT_STATUS_OBJECT_NAME_COLLISION;
4843 }
4844
4845 /* No links from a directory. */
4846 if (S_ISDIR(sbuf1.st_mode)) {
4847 return NT_STATUS_FILE_IS_A_DIRECTORY;
4848 }
4849
4850 /* Ensure this is within the share. */
4851 status = check_reduced_name(conn, oldname);
4852 if (!NT_STATUS_IS_OK(status)) {
4853 return status;
4854 }
4855
4856 DEBUG(10,("hardlink_internals: doing hard link %s -> %s\n", newname, oldname ));
4857
4858 if (SMB_VFS_LINK(conn,oldname,newname) != 0) {
4859 status = map_nt_error_from_unix(errno);
4860 DEBUG(3,("hardlink_internals: Error %s hard link %s -> %s\n",
4861 nt_errstr(status), newname, oldname));
4862 }
4863
4864 return status;
4865 }
4866
4867 /****************************************************************************
4868 Deal with setting the time from any of the setfilepathinfo functions.
4869 ****************************************************************************/
4870
4871 NTSTATUS smb_set_file_time(connection_struct *conn,
4872 files_struct *fsp,
4873 const char *fname,
4874 const SMB_STRUCT_STAT *psbuf,
4875 struct timespec ts[2],
4876 bool setting_write_time)
4877 {
4878 uint32 action =
4879 FILE_NOTIFY_CHANGE_LAST_ACCESS
4880 |FILE_NOTIFY_CHANGE_LAST_WRITE;
4881
4882 if (!VALID_STAT(*psbuf)) {
4883 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
4884 }
4885
4886 /* get some defaults (no modifications) if any info is zero or -1. */
4887 if (null_timespec(ts[0])) {
4888 ts[0] = get_atimespec(psbuf);
4889 action &= ~FILE_NOTIFY_CHANGE_LAST_ACCESS;
4890 }
4891
4892 if (null_timespec(ts[1])) {
4893 ts[1] = get_mtimespec(psbuf);
4894 action &= ~FILE_NOTIFY_CHANGE_LAST_WRITE;
4895 }
4896
4897 if (!setting_write_time) {
4898 /* ts[1] comes from change time, not write time. */
4899 action &= ~FILE_NOTIFY_CHANGE_LAST_WRITE;
4900 }
4901
4902 DEBUG(6,("smb_set_file_time: actime: %s " , time_to_asc(convert_timespec_to_time_t(ts[0])) ));
4903 DEBUG(6,("smb_set_file_time: modtime: %s ", time_to_asc(convert_timespec_to_time_t(ts[1])) ));
4904
4905 /*
4906 * Try and set the times of this file if
4907 * they are different from the current values.
4908 */
4909
4910 {
4911 struct timespec mts = get_mtimespec(psbuf);
4912 struct timespec ats = get_atimespec(psbuf);
4913 if ((timespec_compare(&ts[0], &ats) == 0) && (timespec_compare(&ts[1], &mts) == 0)) {
4914 return NT_STATUS_OK;
4915 }
4916 }
4917
4918 if (setting_write_time) {
4919 /*
4920 * This was a setfileinfo on an open file.
4921 * NT does this a lot. We also need to
4922 * set the time here, as it can be read by
4923 * FindFirst/FindNext and with the patch for bug #2045
4924 * in smbd/fileio.c it ensures that this timestamp is
4925 * kept sticky even after a write. We save the request
4926 * away and will set it on file close and after a write. JRA.
4927 */
4928
4929 DEBUG(10,("smb_set_file_time: setting pending modtime to %s\n",
4930 time_to_asc(convert_timespec_to_time_t(ts[1])) ));
4931
4932 if (fsp != NULL) {
4933 if (fsp->base_fsp) {
4934 set_sticky_write_time_fsp(fsp->base_fsp, ts[1]);
4935 } else {
4936 set_sticky_write_time_fsp(fsp, ts[1]);
4937 }
4938 } else {
4939 set_sticky_write_time_path(conn, fname,
4940 vfs_file_id_from_sbuf(conn, psbuf),
4941 ts[1]);
4942 }
4943 }
4944
4945 DEBUG(10,("smb_set_file_time: setting utimes to modified values.\n"));
4946
4947 if (fsp && fsp->base_fsp) {
4948 fname = fsp->base_fsp->fsp_name;
4949 }
4950
4951 if(file_ntimes(conn, fname, ts)!=0) {
4952 return map_nt_error_from_unix(errno);
4953 }
4954 notify_fname(conn, NOTIFY_ACTION_MODIFIED, action, fname);
4955
4956 return NT_STATUS_OK;
4957 }
4958
4959 /****************************************************************************
4960 Deal with setting the dosmode from any of the setfilepathinfo functions.
4961 ****************************************************************************/
4962
4963 static NTSTATUS smb_set_file_dosmode(connection_struct *conn,
4964 const char *fname,
4965 SMB_STRUCT_STAT *psbuf,
4966 uint32 dosmode)
4967 {
4968 if (!VALID_STAT(*psbuf)) {
4969 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
4970 }
4971
4972 if (dosmode) {
4973 if (S_ISDIR(psbuf->st_mode)) {
4974 dosmode |= aDIR;
4975 } else {
4976 dosmode &= ~aDIR;
4977 }
4978 }
4979
4980 DEBUG(6,("smb_set_file_dosmode: dosmode: 0x%x\n", (unsigned int)dosmode));
4981
4982 /* check the mode isn't different, before changing it */
4983 if ((dosmode != 0) && (dosmode != dos_mode(conn, fname, psbuf))) {
4984
4985 DEBUG(10,("smb_set_file_dosmode: file %s : setting dos mode 0x%x\n",
4986 fname, (unsigned int)dosmode ));
4987
4988 if(file_set_dosmode(conn, fname, dosmode, psbuf, NULL, false)) {
4989 DEBUG(2,("smb_set_file_dosmode: file_set_dosmode of %s failed (%s)\n",
4990 fname, strerror(errno)));
4991 return map_nt_error_from_unix(errno);
4992 }
4993 }
4994 return NT_STATUS_OK;
4995 }
4996
4997 /****************************************************************************
4998 Deal with setting the size from any of the setfilepathinfo functions.
4999 ****************************************************************************/
5000
5001 static NTSTATUS smb_set_file_size(connection_struct *conn,
5002 struct smb_request *req,
5003 files_struct *fsp,
5004 const char *fname,
5005 SMB_STRUCT_STAT *psbuf,
5006 SMB_OFF_T size)
5007 {
5008 NTSTATUS status = NT_STATUS_OK;
5009 files_struct *new_fsp = NULL;
5010
5011 if (!VALID_STAT(*psbuf)) {
5012 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
5013 }
5014
5015 DEBUG(6,("smb_set_file_size: size: %.0f ", (double)size));
5016
5017 if (size == get_file_size(*psbuf)) {
5018 return NT_STATUS_OK;
5019 }
5020
5021 DEBUG(10,("smb_set_file_size: file %s : setting new size to %.0f\n",
5022 fname, (double)size ));
5023
5024 if (fsp && fsp->fh->fd != -1) {
5025 /* Handle based call. */
5026 if (vfs_set_filelen(fsp, size) == -1) {
5027 return map_nt_error_from_unix(errno);
5028 }
5029 trigger_write_time_update_immediate(fsp);
5030 return NT_STATUS_OK;
5031 }
5032
5033 status = open_file_ntcreate(conn, req, fname, psbuf,
5034 FILE_WRITE_ATTRIBUTES,
5035 FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
5036 FILE_OPEN,
5037 0,
5038 FILE_ATTRIBUTE_NORMAL,
5039 FORCE_OPLOCK_BREAK_TO_NONE,
5040 NULL, &new_fsp);
5041
5042 if (!NT_STATUS_IS_OK(status)) {
5043 /* NB. We check for open_was_deferred in the caller. */
5044 return status;
5045 }
5046
5047 if (vfs_set_filelen(new_fsp, size) == -1) {
5048 status = map_nt_error_from_unix(errno);
5049 close_file(new_fsp,NORMAL_CLOSE);
5050 return status;
5051 }
5052
5053 trigger_write_time_update_immediate(new_fsp);
5054 close_file(new_fsp,NORMAL_CLOSE);
5055 return NT_STATUS_OK;
5056 }
5057
5058 /****************************************************************************
5059 Deal with SMB_INFO_SET_EA.
5060 ****************************************************************************/
5061
5062 static NTSTATUS smb_info_set_ea(connection_struct *conn,
5063 const char *pdata,
5064 int total_data,
5065 files_struct *fsp,
5066 const char *fname)
5067 {
5068 struct ea_list *ea_list = NULL;
5069 TALLOC_CTX *ctx = NULL;
5070 NTSTATUS status = NT_STATUS_OK;
5071
5072 if (total_data < 10) {
5073
5074 /* OS/2 workplace shell seems to send SET_EA requests of "null"
5075 length. They seem to have no effect. Bug #3212. JRA */
5076
5077 if ((total_data == 4) && (IVAL(pdata,0) == 4)) {
5078 /* We're done. We only get EA info in this call. */
5079 return NT_STATUS_OK;
5080 }
5081
5082 return NT_STATUS_INVALID_PARAMETER;
5083 }
5084
5085 if (IVAL(pdata,0) > total_data) {
5086 DEBUG(10,("smb_info_set_ea: bad total data size (%u) > %u\n",
5087 IVAL(pdata,0), (unsigned int)total_data));
5088 return NT_STATUS_INVALID_PARAMETER;
5089 }
5090
5091 ctx = talloc_tos();
5092 ea_list = read_ea_list(ctx, pdata + 4, total_data - 4);
5093 if (!ea_list) {
5094 return NT_STATUS_INVALID_PARAMETER;
5095 }
5096 status = set_ea(conn, fsp, fname, ea_list);
5097
5098 return status;
5099 }
5100
5101 /****************************************************************************
5102 Deal with SMB_SET_FILE_DISPOSITION_INFO.
5103 ****************************************************************************/
5104
5105 static NTSTATUS smb_set_file_disposition_info(connection_struct *conn,
5106 const char *pdata,
5107 int total_data,
5108 files_struct *fsp,
5109 const char *fname,
5110 SMB_STRUCT_STAT *psbuf)
5111 {
5112 NTSTATUS status = NT_STATUS_OK;
5113 bool delete_on_close;
5114 uint32 dosmode = 0;
5115
5116 if (total_data < 1) {
5117 return NT_STATUS_INVALID_PARAMETER;
5118 }
5119
5120 if (fsp == NULL) {
5121 return NT_STATUS_INVALID_HANDLE;
5122 }
5123
5124 delete_on_close = (CVAL(pdata,0) ? True : False);
5125 dosmode = dos_mode(conn, fname, psbuf);
5126
5127 DEBUG(10,("smb_set_file_disposition_info: file %s, dosmode = %u, "
5128 "delete_on_close = %u\n",
5129 fsp->fsp_name,
5130 (unsigned int)dosmode,
5131 (unsigned int)delete_on_close ));
5132
5133 status = can_set_delete_on_close(fsp, delete_on_close, dosmode);
5134
5135 if (!NT_STATUS_IS_OK(status)) {
5136 return status;
5137 }
5138
5139 /* The set is across all open files on this dev/inode pair. */
5140 if (!set_delete_on_close(fsp, delete_on_close, &current_user.ut)) {
5141 return NT_STATUS_ACCESS_DENIED;
5142 }
5143 return NT_STATUS_OK;
5144 }
5145
5146 /****************************************************************************
5147 Deal with SMB_FILE_POSITION_INFORMATION.
5148 ****************************************************************************/
5149
5150 static NTSTATUS smb_file_position_information(connection_struct *conn,
5151 const char *pdata,
5152 int total_data,
5153 files_struct *fsp)
5154 {
5155 SMB_BIG_UINT position_information;
5156
5157 if (total_data < 8) {
5158 return NT_STATUS_INVALID_PARAMETER;
5159 }
5160
5161 if (fsp == NULL) {
5162 /* Ignore on pathname based set. */
5163 return NT_STATUS_OK;
5164 }
5165
5166 position_information = (SMB_BIG_UINT)IVAL(pdata,0);
5167 #ifdef LARGE_SMB_OFF_T
5168 position_information |= (((SMB_BIG_UINT)IVAL(pdata,4)) << 32);
5169 #else /* LARGE_SMB_OFF_T */
5170 if (IVAL(pdata,4) != 0) {
5171 /* more than 32 bits? */
5172 return NT_STATUS_INVALID_PARAMETER;
5173 }
5174 #endif /* LARGE_SMB_OFF_T */
5175
5176 DEBUG(10,("smb_file_position_information: Set file position information for file %s to %.0f\n",
5177 fsp->fsp_name, (double)position_information ));
5178 fsp->fh->position_information = position_information;
5179 return NT_STATUS_OK;
5180 }
5181
5182 /****************************************************************************
5183 Deal with SMB_FILE_MODE_INFORMATION.
5184 ****************************************************************************/
5185
5186 static NTSTATUS smb_file_mode_information(connection_struct *conn,
5187 const char *pdata,
5188 int total_data)
5189 {
5190 uint32 mode;
5191
5192 if (total_data < 4) {
5193 return NT_STATUS_INVALID_PARAMETER;
5194 }
5195 mode = IVAL(pdata,0);
5196 if (mode != 0 && mode != 2 && mode != 4 && mode != 6) {
5197 return NT_STATUS_INVALID_PARAMETER;
5198 }
5199 return NT_STATUS_OK;
5200 }
5201
5202 /****************************************************************************
5203 Deal with SMB_SET_FILE_UNIX_LINK (create a UNIX symlink).
5204 ****************************************************************************/
5205
5206 static NTSTATUS smb_set_file_unix_link(connection_struct *conn,
5207 struct smb_request *req,
5208 const char *pdata,
5209 int total_data,
5210 const char *fname)
5211 {
5212 char *link_target = NULL;
5213 const char *newname = fname;
5214 NTSTATUS status = NT_STATUS_OK;
5215 TALLOC_CTX *ctx = talloc_tos();
5216
5217 /* Set a symbolic link. */
5218 /* Don't allow this if follow links is false. */
5219
5220 if (total_data == 0) {
5221 return NT_STATUS_INVALID_PARAMETER;
5222 }
5223
5224 if (!lp_symlinks(SNUM(conn))) {
5225 return NT_STATUS_ACCESS_DENIED;
5226 }
5227
5228 srvstr_pull_talloc(ctx, pdata, req->flags2, &link_target, pdata,
5229 total_data, STR_TERMINATE);
5230
5231 if (!link_target) {
5232 return NT_STATUS_INVALID_PARAMETER;
5233 }
5234
5235 /* !widelinks forces the target path to be within the share. */
5236 /* This means we can interpret the target as a pathname. */
5237 if (!lp_widelinks(SNUM(conn))) {
5238 char *rel_name = NULL;
5239 char *last_dirp = NULL;
5240
5241 if (*link_target == '/') {
5242 /* No absolute paths allowed. */
5243 return NT_STATUS_ACCESS_DENIED;
5244 }
5245 rel_name = talloc_strdup(ctx,newname);
5246 if (!rel_name) {
5247 return NT_STATUS_NO_MEMORY;
5248 }
5249 last_dirp = strrchr_m(rel_name, '/');
5250 if (last_dirp) {
5251 last_dirp[1] = '\0';
5252 } else {
5253 rel_name = talloc_strdup(ctx,"./");
5254 if (!rel_name) {
5255 return NT_STATUS_NO_MEMORY;
5256 }
5257 }
5258 rel_name = talloc_asprintf_append(rel_name,
5259 "%s",
5260 link_target);
5261 if (!rel_name) {
5262 return NT_STATUS_NO_MEMORY;
5263 }
5264
5265 status = check_name(conn, rel_name);
5266 if (!NT_STATUS_IS_OK(status)) {
5267 return status;
5268 }
5269 }
5270
5271 DEBUG(10,("smb_set_file_unix_link: SMB_SET_FILE_UNIX_LINK doing symlink %s -> %s\n",
5272 newname, link_target ));
5273
5274 if (SMB_VFS_SYMLINK(conn,link_target,newname) != 0) {
5275 return map_nt_error_from_unix(errno);
5276 }
5277
5278 return NT_STATUS_OK;
5279 }
5280
5281 /****************************************************************************
5282 Deal with SMB_SET_FILE_UNIX_HLINK (create a UNIX hard link).
5283 ****************************************************************************/
5284
5285 static NTSTATUS smb_set_file_unix_hlink(connection_struct *conn,
5286 struct smb_request *req,
5287 const char *pdata, int total_data,
5288 const char *fname)
5289 {
5290 char *oldname = NULL;
5291 TALLOC_CTX *ctx = talloc_tos();
5292 NTSTATUS status = NT_STATUS_OK;
5293
5294 /* Set a hard link. */
5295 if (total_data == 0) {
5296 return NT_STATUS_INVALID_PARAMETER;
5297 }
5298
5299 srvstr_get_path(ctx, pdata, req->flags2, &oldname, pdata,
5300 total_data, STR_TERMINATE, &status);
5301 if (!NT_STATUS_IS_OK(status)) {
5302 return status;
5303 }
5304
5305 status = resolve_dfspath(ctx, conn,
5306 req->flags2 & FLAGS2_DFS_PATHNAMES,
5307 oldname,
5308 &oldname);
5309 if (!NT_STATUS_IS_OK(status)) {
5310 return status;
5311 }
5312
5313 DEBUG(10,("smb_set_file_unix_hlink: SMB_SET_FILE_UNIX_LINK doing hard link %s -> %s\n",
5314 fname, oldname));
5315
5316 return hardlink_internals(ctx, conn, oldname, fname);
5317 }
5318
5319 /****************************************************************************
5320 Deal with SMB_FILE_RENAME_INFORMATION.
5321 ****************************************************************************/
5322
5323 static NTSTATUS smb_file_rename_information(connection_struct *conn,
5324 struct smb_request *req,
5325 const char *pdata,
5326 int total_data,
5327 files_struct *fsp,
5328 const char *fname)
5329 {
5330 bool overwrite;
5331 uint32 root_fid;
5332 uint32 len;
5333 char *newname = NULL;
5334 char *base_name = NULL;
5335 bool dest_has_wcard = False;
5336 NTSTATUS status = NT_STATUS_OK;
5337 char *p;
5338 TALLOC_CTX *ctx = talloc_tos();
5339
5340 if (total_data < 13) {
5341 return NT_STATUS_INVALID_PARAMETER;
5342 }
5343
5344 overwrite = (CVAL(pdata,0) ? True : False);
5345 root_fid = IVAL(pdata,4);
5346 len = IVAL(pdata,8);
5347
5348 if (len > (total_data - 12) || (len == 0) || (root_fid != 0)) {
5349 return NT_STATUS_INVALID_PARAMETER;
5350 }
5351
5352 srvstr_get_path_wcard(ctx, pdata, req->flags2, &newname, &pdata[12],
5353 len, 0, &status,
5354 &dest_has_wcard);
5355 if (!NT_STATUS_IS_OK(status)) {
5356 return status;
5357 }
5358
5359 DEBUG(10,("smb_file_rename_information: got name |%s|\n",
5360 newname));
5361
5362 status = resolve_dfspath_wcard(ctx, conn,
5363 req->flags2 & FLAGS2_DFS_PATHNAMES,
5364 newname,
5365 &newname,
5366 &dest_has_wcard);
5367 if (!NT_STATUS_IS_OK(status)) {
5368 return status;
5369 }
5370
5371 /* Check the new name has no '/' characters. */
5372 if (strchr_m(newname, '/')) {
5373 return NT_STATUS_NOT_SUPPORTED;
5374 }
5375
5376 if (fsp && fsp->base_fsp) {
5377 if (newname[0] != ':') {
5378 return NT_STATUS_NOT_SUPPORTED;
5379 }
5380 base_name = talloc_asprintf(ctx, "%s%s",
5381 fsp->base_fsp->fsp_name,
5382 newname);
5383 if (!base_name) {
5384 return NT_STATUS_NO_MEMORY;
5385 }
5386 } else {
5387 if (is_ntfs_stream_name(newname)) {
5388 return NT_STATUS_NOT_SUPPORTED;
5389 }
5390
5391 /* Create the base directory. */
5392 base_name = talloc_strdup(ctx, fname);
5393 if (!base_name) {
5394 return NT_STATUS_NO_MEMORY;
5395 }
5396 p = strrchr_m(base_name, '/');
5397 if (p) {
5398 p[1] = '\0';
5399 } else {
5400 base_name = talloc_strdup(ctx, "./");
5401 if (!base_name) {
5402 return NT_STATUS_NO_MEMORY;
5403 }
5404 }
5405 /* Append the new name. */
5406 base_name = talloc_asprintf_append(base_name,
5407 "%s",
5408 newname);
5409 if (!base_name) {
5410 return NT_STATUS_NO_MEMORY;
5411 }
5412 }
5413
5414 if (fsp) {
5415 SMB_STRUCT_STAT sbuf;
5416 char *newname_last_component = NULL;
5417
5418 ZERO_STRUCT(sbuf);
5419
5420 status = unix_convert(ctx, conn, newname, False,
5421 &newname,
5422 &newname_last_component,
5423 &sbuf);
5424
5425 /* If an error we expect this to be
5426 * NT_STATUS_OBJECT_PATH_NOT_FOUND */
5427
5428 if (!NT_STATUS_IS_OK(status)
5429 && !NT_STATUS_EQUAL(NT_STATUS_OBJECT_PATH_NOT_FOUND,
5430 status)) {
5431 return status;
5432 }
5433
5434 DEBUG(10,("smb_file_rename_information: SMB_FILE_RENAME_INFORMATION (fnum %d) %s -> %s\n",
5435 fsp->fnum, fsp->fsp_name, base_name ));
5436 status = rename_internals_fsp(conn, fsp, base_name,
5437 newname_last_component, 0,
5438 overwrite);
5439 } else {
5440 DEBUG(10,("smb_file_rename_information: SMB_FILE_RENAME_INFORMATION %s -> %s\n",
5441 fname, base_name ));
5442 status = rename_internals(ctx, conn, req, fname, base_name, 0,
5443 overwrite, False, dest_has_wcard,
5444 FILE_WRITE_ATTRIBUTES);
5445 }
5446
5447 return status;
5448 }
5449
5450 /****************************************************************************
5451 Deal with SMB_SET_POSIX_ACL.
5452 ****************************************************************************/
5453
5454 #if defined(HAVE_POSIX_ACLS)
5455 static NTSTATUS smb_set_posix_acl(connection_struct *conn,
5456 const char *pdata,
5457 int total_data,
5458 files_struct *fsp,
5459 const char *fname,
5460 SMB_STRUCT_STAT *psbuf)
5461 {
5462 uint16 posix_acl_version;
5463 uint16 num_file_acls;
5464 uint16 num_def_acls;
5465 bool valid_file_acls = True;
5466 bool valid_def_acls = True;
5467
5468 if (total_data < SMB_POSIX_ACL_HEADER_SIZE) {
5469 return NT_STATUS_INVALID_PARAMETER;
5470 }
5471 posix_acl_version = SVAL(pdata,0);
5472 num_file_acls = SVAL(pdata,2);
5473 num_def_acls = SVAL(pdata,4);
5474
5475 if (num_file_acls == SMB_POSIX_IGNORE_ACE_ENTRIES) {
5476 valid_file_acls = False;
5477 num_file_acls = 0;
5478 }
5479
5480 if (num_def_acls == SMB_POSIX_IGNORE_ACE_ENTRIES) {
5481 valid_def_acls = False;
5482 num_def_acls = 0;
5483 }
5484
5485 if (posix_acl_version != SMB_POSIX_ACL_VERSION) {
5486 return NT_STATUS_INVALID_PARAMETER;
5487 }
5488
5489 if (total_data < SMB_POSIX_ACL_HEADER_SIZE +
5490 (num_file_acls+num_def_acls)*SMB_POSIX_ACL_ENTRY_SIZE) {
5491 return NT_STATUS_INVALID_PARAMETER;
5492 }
5493
5494 DEBUG(10,("smb_set_posix_acl: file %s num_file_acls = %u, num_def_acls = %u\n",
5495 fname ? fname : fsp->fsp_name,
5496 (unsigned int)num_file_acls,
5497 (unsigned int)num_def_acls));
5498
5499 if (valid_file_acls && !set_unix_posix_acl(conn, fsp, fname, num_file_acls,
5500 pdata + SMB_POSIX_ACL_HEADER_SIZE)) {
5501 return map_nt_error_from_unix(errno);
5502 }
5503
5504 if (valid_def_acls && !set_unix_posix_default_acl(conn, fname, psbuf, num_def_acls,
5505 pdata + SMB_POSIX_ACL_HEADER_SIZE +
5506 (num_file_acls*SMB_POSIX_ACL_ENTRY_SIZE))) {
5507 return map_nt_error_from_unix(errno);
5508 }
5509 return NT_STATUS_OK;
5510 }
5511 #endif
5512
5513 /****************************************************************************
5514 Deal with SMB_SET_POSIX_LOCK.
5515 ****************************************************************************/
5516
5517 static NTSTATUS smb_set_posix_lock(connection_struct *conn,
5518 const struct smb_request *req,
5519 const char *pdata,
5520 int total_data,
5521 files_struct *fsp)
5522 {
5523 SMB_BIG_UINT count;
5524 SMB_BIG_UINT offset;
5525 uint32 lock_pid;
5526 bool blocking_lock = False;
5527 enum brl_type lock_type;
5528
5529 NTSTATUS status = NT_STATUS_OK;
5530
5531 if (fsp == NULL || fsp->fh->fd == -1) {
5532 return NT_STATUS_INVALID_HANDLE;
5533 }
5534
5535 if (total_data != POSIX_LOCK_DATA_SIZE) {
5536 return NT_STATUS_INVALID_PARAMETER;
5537 }
5538
5539 switch (SVAL(pdata, POSIX_LOCK_TYPE_OFFSET)) {
5540 case POSIX_LOCK_TYPE_READ:
5541 lock_type = READ_LOCK;
5542 break;
5543 case POSIX_LOCK_TYPE_WRITE:
5544 /* Return the right POSIX-mappable error code for files opened read-only. */
5545 if (!fsp->can_write) {
5546 return NT_STATUS_INVALID_HANDLE;
5547 }
5548 lock_type = WRITE_LOCK;
5549 break;
5550 case POSIX_LOCK_TYPE_UNLOCK:
5551 lock_type = UNLOCK_LOCK;
5552 break;
5553 default:
5554 return NT_STATUS_INVALID_PARAMETER;
5555 }
5556
5557 if (SVAL(pdata,POSIX_LOCK_FLAGS_OFFSET) == POSIX_LOCK_FLAG_NOWAIT) {
5558 blocking_lock = False;
5559 } else if (SVAL(pdata,POSIX_LOCK_FLAGS_OFFSET) == POSIX_LOCK_FLAG_WAIT) {
5560 blocking_lock = True;
5561 } else {
5562 return NT_STATUS_INVALID_PARAMETER;
5563 }
5564
5565 if (!lp_blocking_locks(SNUM(conn))) {
5566 blocking_lock = False;
5567 }
5568
5569 lock_pid = IVAL(pdata, POSIX_LOCK_PID_OFFSET);
5570 #if defined(HAVE_LONGLONG)
5571 offset = (((SMB_BIG_UINT) IVAL(pdata,(POSIX_LOCK_START_OFFSET+4))) << 32) |
5572 ((SMB_BIG_UINT) IVAL(pdata,POSIX_LOCK_START_OFFSET));
5573 count = (((SMB_BIG_UINT) IVAL(pdata,(POSIX_LOCK_LEN_OFFSET+4))) << 32) |
5574 ((SMB_BIG_UINT) IVAL(pdata,POSIX_LOCK_LEN_OFFSET));
5575 #else /* HAVE_LONGLONG */
5576 offset = (SMB_BIG_UINT)IVAL(pdata,POSIX_LOCK_START_OFFSET);
5577 count = (SMB_BIG_UINT)IVAL(pdata,POSIX_LOCK_LEN_OFFSET);
5578 #endif /* HAVE_LONGLONG */
5579
5580 DEBUG(10,("smb_set_posix_lock: file %s, lock_type = %u,"
5581 "lock_pid = %u, count = %.0f, offset = %.0f\n",
5582 fsp->fsp_name,
5583 (unsigned int)lock_type,
5584 (unsigned int)lock_pid,
5585 (double)count,
5586 (double)offset ));
5587
5588 if (lock_type == UNLOCK_LOCK) {
5589 status = do_unlock(smbd_messaging_context(),
5590 fsp,
5591 lock_pid,
5592 count,
5593 offset,
5594 POSIX_LOCK);
5595 } else {
5596 uint32 block_smbpid;
5597
5598 struct byte_range_lock *br_lck = do_lock(smbd_messaging_context(),
5599 fsp,
5600 lock_pid,
5601 count,
5602 offset,
5603 lock_type,
5604 POSIX_LOCK,
5605 blocking_lock,
5606 &status,
5607 &block_smbpid);
5608
5609 if (br_lck && blocking_lock && ERROR_WAS_LOCK_DENIED(status)) {
5610 /*
5611 * A blocking lock was requested. Package up
5612 * this smb into a queued request and push it
5613 * onto the blocking lock queue.
5614 */
5615 if(push_blocking_lock_request(br_lck,
5616 req,
5617 fsp,
5618 -1, /* infinite timeout. */
5619 0,
5620 lock_pid,
5621 lock_type,
5622 POSIX_LOCK,
5623 offset,
5624 count,
5625 block_smbpid)) {
5626 TALLOC_FREE(br_lck);
5627 return status;
5628 }
5629 }
5630 TALLOC_FREE(br_lck);
5631 }
5632
5633 return status;
5634 }
5635
5636 /****************************************************************************
5637 Deal with SMB_INFO_STANDARD.
5638 ****************************************************************************/
5639
5640 static NTSTATUS smb_set_info_standard(connection_struct *conn,
5641 const char *pdata,
5642 int total_data,
5643 files_struct *fsp,
5644 const char *fname,
5645 const SMB_STRUCT_STAT *psbuf)
5646 {
5647 struct timespec ts[2];
5648
5649 if (total_data < 12) {
5650 return NT_STATUS_INVALID_PARAMETER;
5651 }
5652
5653 /* access time */
5654 ts[0] = convert_time_t_to_timespec(srv_make_unix_date2(pdata+l1_fdateLastAccess));
5655 /* write time */
5656 ts[1] = convert_time_t_to_timespec(srv_make_unix_date2(pdata+l1_fdateLastWrite));
5657
5658 DEBUG(10,("smb_set_info_standard: file %s\n",
5659 fname ? fname : fsp->fsp_name ));
5660
5661 return smb_set_file_time(conn,
5662 fsp,
5663 fname,
5664 psbuf,
5665 ts,
5666 true);
5667 }
5668
5669 /****************************************************************************
5670 Deal with SMB_SET_FILE_BASIC_INFO.
5671 ****************************************************************************/
5672
5673 static NTSTATUS smb_set_file_basic_info(connection_struct *conn,
5674 const char *pdata,
5675 int total_data,
5676 files_struct *fsp,
5677 const char *fname,
5678 SMB_STRUCT_STAT *psbuf)
5679 {
5680 /* Patch to do this correctly from Paul Eggert <eggert@twinsun.com>. */
5681 struct timespec write_time;
5682 struct timespec changed_time;
5683 uint32 dosmode = 0;
5684 struct timespec ts[2];
5685 NTSTATUS status = NT_STATUS_OK;
5686 bool setting_write_time = true;
5687
5688 if (total_data < 36) {
5689 return NT_STATUS_INVALID_PARAMETER;
5690 }
5691
5692 /* Set the attributes */
5693 dosmode = IVAL(pdata,32);
5694 status = smb_set_file_dosmode(conn,
5695 fname,
5696 psbuf,
5697 dosmode);
5698 if (!NT_STATUS_IS_OK(status)) {
5699 return status;
5700 }
5701
5702 /* Ignore create time at offset pdata. */
5703
5704 /* access time */
5705 ts[0] = interpret_long_date(pdata+8);
5706
5707 write_time = interpret_long_date(pdata+16);
5708 changed_time = interpret_long_date(pdata+24);
5709
5710 /* mtime */
5711 ts[1] = timespec_min(&write_time, &changed_time);
5712
5713 if ((timespec_compare(&write_time, &ts[1]) == 1) && !null_timespec(write_time)) {
5714 ts[1] = write_time;
5715 }
5716
5717 /* Prefer a defined time to an undefined one. */
5718 if (null_timespec(ts[1])) {
5719 if (null_timespec(write_time)) {
5720 ts[1] = changed_time;
5721 setting_write_time = false;
5722 } else {
5723 ts[1] = write_time;
5724 }
5725 }
5726
5727 DEBUG(10,("smb_set_file_basic_info: file %s\n",
5728 fname ? fname : fsp->fsp_name ));
5729
5730 return smb_set_file_time(conn,
5731 fsp,
5732 fname,
5733 psbuf,
5734 ts,
5735 setting_write_time);
5736 }
5737
5738 /****************************************************************************
5739 Deal with SMB_SET_FILE_ALLOCATION_INFO.
5740 ****************************************************************************/
5741
5742 static NTSTATUS smb_set_file_allocation_info(connection_struct *conn,
5743 struct smb_request *req,
5744 const char *pdata,
5745 int total_data,
5746 files_struct *fsp,
5747 const char *fname,
5748 SMB_STRUCT_STAT *psbuf)
5749 {
5750 SMB_BIG_UINT allocation_size = 0;
5751 NTSTATUS status = NT_STATUS_OK;
5752 files_struct *new_fsp = NULL;
5753
5754 if (!VALID_STAT(*psbuf)) {
5755 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
5756 }
5757
5758 if (total_data < 8) {
5759 return NT_STATUS_INVALID_PARAMETER;
5760 }
5761
5762 allocation_size = (SMB_BIG_UINT)IVAL(pdata,0);
5763 #ifdef LARGE_SMB_OFF_T
5764 allocation_size |= (((SMB_BIG_UINT)IVAL(pdata,4)) << 32);
5765 #else /* LARGE_SMB_OFF_T */
5766 if (IVAL(pdata,4) != 0) {
5767 /* more than 32 bits? */
5768 return NT_STATUS_INVALID_PARAMETER;
5769 }
5770 #endif /* LARGE_SMB_OFF_T */
5771
5772 DEBUG(10,("smb_set_file_allocation_info: Set file allocation info for file %s to %.0f\n",
5773 fname, (double)allocation_size ));
5774
5775 if (allocation_size) {
5776 allocation_size = smb_roundup(conn, allocation_size);
5777 }
5778
5779 DEBUG(10,("smb_set_file_allocation_info: file %s : setting new allocation size to %.0f\n",
5780 fname, (double)allocation_size ));
5781
5782 if (fsp && fsp->fh->fd != -1) {
5783 /* Open file handle. */
5784 /* Only change if needed. */
5785 if (allocation_size != get_file_size(*psbuf)) {
5786 if (vfs_allocate_file_space(fsp, allocation_size) == -1) {
5787 return map_nt_error_from_unix(errno);
5788 }
5789 }
5790 /* But always update the time. */
5791 /*
5792 * This is equivalent to a write. Ensure it's seen immediately
5793 * if there are no pending writes.
5794 */
5795 trigger_write_time_update_immediate(fsp);
5796 return NT_STATUS_OK;
5797 }
5798
5799 /* Pathname or stat or directory file. */
5800
5801 status = open_file_ntcreate(conn, req, fname, psbuf,
5802 FILE_WRITE_DATA,
5803 FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
5804 FILE_OPEN,
5805 0,
5806 FILE_ATTRIBUTE_NORMAL,
5807 FORCE_OPLOCK_BREAK_TO_NONE,
5808 NULL, &new_fsp);
5809
5810 if (!NT_STATUS_IS_OK(status)) {
5811 /* NB. We check for open_was_deferred in the caller. */
5812 return status;
5813 }
5814
5815 /* Only change if needed. */
5816 if (allocation_size != get_file_size(*psbuf)) {
5817 if (vfs_allocate_file_space(new_fsp, allocation_size) == -1) {
5818 status = map_nt_error_from_unix(errno);
5819 close_file(new_fsp,NORMAL_CLOSE);
5820 return status;
5821 }
5822 }
5823
5824 /* Changing the allocation size should set the last mod time. */
5825 /*
5826 * This is equivalent to a write. Ensure it's seen immediately
5827 * if there are no pending writes.
5828 */
5829 trigger_write_time_update_immediate(new_fsp);
5830
5831 close_file(new_fsp,NORMAL_CLOSE);
5832 return NT_STATUS_OK;
5833 }
5834
5835 /****************************************************************************
5836 Deal with SMB_SET_FILE_END_OF_FILE_INFO.
5837 ****************************************************************************/
5838
5839 static NTSTATUS smb_set_file_end_of_file_info(connection_struct *conn,
5840 struct smb_request *req,
5841 const char *pdata,
5842 int total_data,
5843 files_struct *fsp,
5844 const char *fname,
5845 SMB_STRUCT_STAT *psbuf)
5846 {
5847 SMB_OFF_T size;
5848
5849 if (total_data < 8) {
5850 return NT_STATUS_INVALID_PARAMETER;
5851 }
5852
5853 size = IVAL(pdata,0);
5854 #ifdef LARGE_SMB_OFF_T
5855 size |= (((SMB_OFF_T)IVAL(pdata,4)) << 32);
5856 #else /* LARGE_SMB_OFF_T */
5857 if (IVAL(pdata,4) != 0) {
5858 /* more than 32 bits? */
5859 return NT_STATUS_INVALID_PARAMETER;
5860 }
5861 #endif /* LARGE_SMB_OFF_T */
5862 DEBUG(10,("smb_set_file_end_of_file_info: Set end of file info for "
5863 "file %s to %.0f\n", fname, (double)size ));
5864
5865 return smb_set_file_size(conn, req,
5866 fsp,
5867 fname,
5868 psbuf,
5869 size);
5870 }
5871
5872 /****************************************************************************
5873 Allow a UNIX info mknod.
5874 ****************************************************************************/
5875
5876 static NTSTATUS smb_unix_mknod(connection_struct *conn,
5877 const char *pdata,
5878 int total_data,
5879 const char *fname,
5880 SMB_STRUCT_STAT *psbuf)
5881 {
5882 uint32 file_type = IVAL(pdata,56);
5883 #if defined(HAVE_MAKEDEV)
5884 uint32 dev_major = IVAL(pdata,60);
5885 uint32 dev_minor = IVAL(pdata,68);
5886 #endif
5887 SMB_DEV_T dev = (SMB_DEV_T)0;
5888 uint32 raw_unixmode = IVAL(pdata,84);
5889 NTSTATUS status;
5890 mode_t unixmode;
5891
5892 if (total_data < 100) {
5893 return NT_STATUS_INVALID_PARAMETER;
5894 }
5895
5896 status = unix_perms_from_wire(conn, psbuf, raw_unixmode, PERM_NEW_FILE, &unixmode);
5897 if (!NT_STATUS_IS_OK(status)) {
5898 return status;
5899 }
5900
5901 #if defined(HAVE_MAKEDEV)
5902 dev = makedev(dev_major, dev_minor);
5903 #endif
5904
5905 switch (file_type) {
5906 #if defined(S_IFIFO)
5907 case UNIX_TYPE_FIFO:
5908 unixmode |= S_IFIFO;
5909 break;
5910 #endif
5911 #if defined(S_IFSOCK)
5912 case UNIX_TYPE_SOCKET:
5913 unixmode |= S_IFSOCK;
5914 break;
5915 #endif
5916 #if defined(S_IFCHR)
5917 case UNIX_TYPE_CHARDEV:
5918 unixmode |= S_IFCHR;
5919 break;
5920 #endif
5921 #if defined(S_IFBLK)
5922 case UNIX_TYPE_BLKDEV:
5923 unixmode |= S_IFBLK;
5924 break;
5925 #endif
5926 default:
5927 return NT_STATUS_INVALID_PARAMETER;
5928 }
5929
5930 DEBUG(10,("smb_unix_mknod: SMB_SET_FILE_UNIX_BASIC doing mknod dev %.0f mode \
5931 0%o for file %s\n", (double)dev, (unsigned int)unixmode, fname ));
5932
5933 /* Ok - do the mknod. */
5934 if (SMB_VFS_MKNOD(conn, fname, unixmode, dev) != 0) {
5935 return map_nt_error_from_unix(errno);
5936 }
5937
5938 /* If any of the other "set" calls fail we
5939 * don't want to end up with a half-constructed mknod.
5940 */
5941
5942 if (lp_inherit_perms(SNUM(conn))) {
5943 inherit_access_acl(
5944 conn, parent_dirname(fname),
5945 fname, unixmode);
5946 }
5947
5948 if (SMB_VFS_STAT(conn, fname, psbuf) != 0) {
5949 status = map_nt_error_from_unix(errno);
5950 SMB_VFS_UNLINK(conn,fname);
5951 return status;
5952 }
5953 return NT_STATUS_OK;
5954 }
5955
5956 /****************************************************************************
5957 Deal with SMB_SET_FILE_UNIX_BASIC.
5958 ****************************************************************************/
5959
5960 static NTSTATUS smb_set_file_unix_basic(connection_struct *conn,
5961 struct smb_request *req,
5962 const char *pdata,
5963 int total_data,
5964 files_struct *fsp,
5965 const char *fname,
5966 SMB_STRUCT_STAT *psbuf)
5967 {
5968 struct timespec ts[2];
5969 uint32 raw_unixmode;
5970 mode_t unixmode;
5971 SMB_OFF_T size = 0;
5972 uid_t set_owner = (uid_t)SMB_UID_NO_CHANGE;
5973 gid_t set_grp = (uid_t)SMB_GID_NO_CHANGE;
5974 NTSTATUS status = NT_STATUS_OK;
5975 bool delete_on_fail = False;
5976 enum perm_type ptype;
5977
5978 if (total_data < 100) {
5979 return NT_STATUS_INVALID_PARAMETER;
5980 }
5981
5982 if(IVAL(pdata, 0) != SMB_SIZE_NO_CHANGE_LO &&
5983 IVAL(pdata, 4) != SMB_SIZE_NO_CHANGE_HI) {
5984 size=IVAL(pdata,0); /* first 8 Bytes are size */
5985 #ifdef LARGE_SMB_OFF_T
5986 size |= (((SMB_OFF_T)IVAL(pdata,4)) << 32);
5987 #else /* LARGE_SMB_OFF_T */
5988 if (IVAL(pdata,4) != 0) {
5989 /* more than 32 bits? */
5990 return NT_STATUS_INVALID_PARAMETER;
5991 }
5992 #endif /* LARGE_SMB_OFF_T */
5993 }
5994
5995 ts[0] = interpret_long_date(pdata+24); /* access_time */
5996 ts[1] = interpret_long_date(pdata+32); /* modification_time */
5997 set_owner = (uid_t)IVAL(pdata,40);
5998 set_grp = (gid_t)IVAL(pdata,48);
5999 raw_unixmode = IVAL(pdata,84);
6000
6001 if (VALID_STAT(*psbuf)) {
6002 if (S_ISDIR(psbuf->st_mode)) {
6003 ptype = PERM_EXISTING_DIR;
6004 } else {
6005 ptype = PERM_EXISTING_FILE;
6006 }
6007 } else {
6008 ptype = PERM_NEW_FILE;
6009 }
6010
6011 status = unix_perms_from_wire(conn, psbuf, raw_unixmode, ptype, &unixmode);
6012 if (!NT_STATUS_IS_OK(status)) {
6013 return status;
6014 }
6015
6016 DEBUG(10,("smb_set_file_unix_basic: SMB_SET_FILE_UNIX_BASIC: name = %s \
6017 size = %.0f, uid = %u, gid = %u, raw perms = 0%o\n",
6018 fname, (double)size, (unsigned int)set_owner, (unsigned int)set_grp, (int)raw_unixmode));
6019
6020 if (!VALID_STAT(*psbuf)) {
6021 /*
6022 * The only valid use of this is to create character and block
6023 * devices, and named pipes. This is deprecated (IMHO) and
6024 * a new info level should be used for mknod. JRA.
6025 */
6026
6027 status = smb_unix_mknod(conn,
6028 pdata,
6029 total_data,
6030 fname,
6031 psbuf);
6032 if (!NT_STATUS_IS_OK(status)) {
6033 return status;
6034 }
6035
6036 /* Ensure we don't try and change anything else. */
6037 raw_unixmode = SMB_MODE_NO_CHANGE;
6038 size = get_file_size(*psbuf);
6039 ts[0] = get_atimespec(psbuf);
6040 ts[1] = get_mtimespec(psbuf);
6041 /*
6042 * We continue here as we might want to change the
6043 * owner uid/gid.
6044 */
6045 delete_on_fail = True;
6046 }
6047
6048 #if 1
6049 /* Horrible backwards compatibility hack as an old server bug
6050 * allowed a CIFS client bug to remain unnoticed :-(. JRA.
6051 * */
6052
6053 if (!size) {
6054 size = get_file_size(*psbuf);
6055 }
6056 #endif
6057
6058 /*
6059 * Deal with the UNIX specific mode set.
6060 */
6061
6062 if (raw_unixmode != SMB_MODE_NO_CHANGE) {
6063 DEBUG(10,("smb_set_file_unix_basic: SMB_SET_FILE_UNIX_BASIC setting mode 0%o for file %s\n",
6064 (unsigned int)unixmode, fname ));
6065 if (SMB_VFS_CHMOD(conn, fname, unixmode) != 0) {
6066 return map_nt_error_from_unix(errno);
6067 }
6068 }
6069
6070 /*
6071 * Deal with the UNIX specific uid set.
6072 */
6073
6074 if ((set_owner != (uid_t)SMB_UID_NO_CHANGE) && (psbuf->st_uid != set_owner)) {
6075 int ret;
6076
6077 DEBUG(10,("smb_set_file_unix_basic: SMB_SET_FILE_UNIX_BASIC changing owner %u for path %s\n",
6078 (unsigned int)set_owner, fname ));
6079
6080 if (S_ISLNK(psbuf->st_mode)) {
6081 ret = SMB_VFS_LCHOWN(conn, fname, set_owner, (gid_t)-1);
6082 } else {
6083 ret = SMB_VFS_CHOWN(conn, fname, set_owner, (gid_t)-1);
6084 }
6085
6086 if (ret != 0) {
6087 status = map_nt_error_from_unix(errno);
6088 if (delete_on_fail) {
6089 SMB_VFS_UNLINK(conn,fname);
6090 }
6091 return status;
6092 }
6093 }
6094
6095 /*
6096 * Deal with the UNIX specific gid set.
6097 */
6098
6099 if ((set_grp != (uid_t)SMB_GID_NO_CHANGE) && (psbuf->st_gid != set_grp)) {
6100 DEBUG(10,("smb_set_file_unix_basic: SMB_SET_FILE_UNIX_BASIC changing group %u for file %s\n",
6101 (unsigned int)set_owner, fname ));
6102 if (SMB_VFS_CHOWN(conn, fname, (uid_t)-1, set_grp) != 0) {
6103 status = map_nt_error_from_unix(errno);
6104 if (delete_on_fail) {
6105 SMB_VFS_UNLINK(conn,fname);
6106 }
6107 return status;
6108 }
6109 }
6110
6111 /* Deal with any size changes. */
6112
6113 status = smb_set_file_size(conn, req,
6114 fsp,
6115 fname,
6116 psbuf,
6117 size);
6118 if (!NT_STATUS_IS_OK(status)) {
6119 return status;
6120 }
6121
6122 /* Deal with any time changes. */
6123
6124 return smb_set_file_time(conn,
6125 fsp,
6126 fname,
6127 psbuf,
6128 ts,
6129 true);
6130 }
6131
6132 /****************************************************************************
6133 Deal with SMB_SET_FILE_UNIX_INFO2.
6134 ****************************************************************************/
6135
6136 static NTSTATUS smb_set_file_unix_info2(connection_struct *conn,
6137 struct smb_request *req,
6138 const char *pdata,
6139 int total_data,
6140 files_struct *fsp,
6141 const char *fname,
6142 SMB_STRUCT_STAT *psbuf)
6143 {
6144 NTSTATUS status;
6145 uint32 smb_fflags;
6146 uint32 smb_fmask;
6147
6148 if (total_data < 116) {
6149 return NT_STATUS_INVALID_PARAMETER;
6150 }
6151
6152 /* Start by setting all the fields that are common between UNIX_BASIC
6153 * and UNIX_INFO2.
6154 */
6155 status = smb_set_file_unix_basic(conn, req, pdata, total_data,
6156 fsp, fname, psbuf);
6157 if (!NT_STATUS_IS_OK(status)) {
6158 return status;
6159 }
6160
6161 smb_fflags = IVAL(pdata, 108);
6162 smb_fmask = IVAL(pdata, 112);
6163
6164 /* NB: We should only attempt to alter the file flags if the client
6165 * sends a non-zero mask.
6166 */
6167 if (smb_fmask != 0) {
6168 int stat_fflags = 0;
6169
6170 if (!map_info2_flags_to_sbuf(psbuf, smb_fflags, smb_fmask,
6171 &stat_fflags)) {
6172 /* Client asked to alter a flag we don't understand. */
6173 return NT_STATUS_INVALID_PARAMETER;
6174 }
6175
6176 if (fsp && fsp->fh->fd != -1) {
6177 /* XXX: we should be using SMB_VFS_FCHFLAGS here. */
6178 return NT_STATUS_NOT_SUPPORTED;
6179 } else {
6180 if (SMB_VFS_CHFLAGS(conn, fname, stat_fflags) != 0) {
6181 return map_nt_error_from_unix(errno);
6182 }
6183 }
6184 }
6185
6186 /* XXX: need to add support for changing the create_time here. You
6187 * can do this for paths on Darwin with setattrlist(2). The right way
6188 * to hook this up is probably by extending the VFS utimes interface.
6189 */
6190
6191 return NT_STATUS_OK;
6192 }
6193
6194 /****************************************************************************
6195 Create a directory with POSIX semantics.
6196 ****************************************************************************/
6197
6198 static NTSTATUS smb_posix_mkdir(connection_struct *conn,
6199 struct smb_request *req,
6200 char **ppdata,
6201 int total_data,
6202 const char *fname,
6203 SMB_STRUCT_STAT *psbuf,
6204 int *pdata_return_size)
6205 {
6206 NTSTATUS status = NT_STATUS_OK;
6207 uint32 raw_unixmode = 0;
6208 uint32 mod_unixmode = 0;
6209 mode_t unixmode = (mode_t)0;
6210 files_struct *fsp = NULL;
6211 uint16 info_level_return = 0;
6212 int info;
6213 char *pdata = *ppdata;
6214
6215 if (total_data < 18) {
6216 return NT_STATUS_INVALID_PARAMETER;
6217 }
6218
6219 raw_unixmode = IVAL(pdata,8);
6220 /* Next 4 bytes are not yet defined. */
6221
6222 status = unix_perms_from_wire(conn, psbuf, raw_unixmode, PERM_NEW_DIR, &unixmode);
6223 if (!NT_STATUS_IS_OK(status)) {
6224 return status;
6225 }
6226
6227 mod_unixmode = (uint32)unixmode | FILE_FLAG_POSIX_SEMANTICS;
6228
6229 DEBUG(10,("smb_posix_mkdir: file %s, mode 0%o\n",
6230 fname, (unsigned int)unixmode ));
6231
6232 status = open_directory(conn, req,
6233 fname,
6234 psbuf,
6235 FILE_READ_ATTRIBUTES, /* Just a stat open */
6236 FILE_SHARE_NONE, /* Ignored for stat opens */
6237 FILE_CREATE,
6238 0,
6239 mod_unixmode,
6240 &info,
6241 &fsp);
6242
6243 if (NT_STATUS_IS_OK(status)) {
6244 close_file(fsp, NORMAL_CLOSE);
6245 }
6246
6247 info_level_return = SVAL(pdata,16);
6248
6249 if (info_level_return == SMB_QUERY_FILE_UNIX_BASIC) {
6250 *pdata_return_size = 12 + SMB_FILE_UNIX_BASIC_SIZE;
6251 } else if (info_level_return == SMB_QUERY_FILE_UNIX_INFO2) {
6252 *pdata_return_size = 12 + SMB_FILE_UNIX_INFO2_SIZE;
6253 } else {
6254 *pdata_return_size = 12;
6255 }
6256
6257 /* Realloc the data size */
6258 *ppdata = (char *)SMB_REALLOC(*ppdata,*pdata_return_size);
6259 if (*ppdata == NULL) {
6260 *pdata_return_size = 0;
6261 return NT_STATUS_NO_MEMORY;
6262 }
6263 pdata = *ppdata;
6264
6265 SSVAL(pdata,0,NO_OPLOCK_RETURN);
6266 SSVAL(pdata,2,0); /* No fnum. */
6267 SIVAL(pdata,4,info); /* Was directory created. */
6268
6269 switch (info_level_return) {
6270 case SMB_QUERY_FILE_UNIX_BASIC:
6271 SSVAL(pdata,8,SMB_QUERY_FILE_UNIX_BASIC);
6272 SSVAL(pdata,10,0); /* Padding. */
6273 store_file_unix_basic(conn, pdata + 12, fsp, psbuf);
6274 break;
6275 case SMB_QUERY_FILE_UNIX_INFO2:
6276 SSVAL(pdata,8,SMB_QUERY_FILE_UNIX_INFO2);
6277 SSVAL(pdata,10,0); /* Padding. */
6278 store_file_unix_basic_info2(conn, pdata + 12, fsp, psbuf);
6279 break;
6280 default:
6281 SSVAL(pdata,8,SMB_NO_INFO_LEVEL_RETURNED);
6282 SSVAL(pdata,10,0); /* Padding. */
6283 break;
6284 }
6285
6286 return status;
6287 }
6288
6289 /****************************************************************************
6290 Open/Create a file with POSIX semantics.
6291 ****************************************************************************/
6292
6293 static NTSTATUS smb_posix_open(connection_struct *conn,
6294 struct smb_request *req,
6295 char **ppdata,
6296 int total_data,
6297 const char *fname,
6298 SMB_STRUCT_STAT *psbuf,
6299 int *pdata_return_size)
6300 {
6301 bool extended_oplock_granted = False;
6302 char *pdata = *ppdata;
6303 uint32 flags = 0;
6304 uint32 wire_open_mode = 0;
6305 uint32 raw_unixmode = 0;
6306 uint32 mod_unixmode = 0;
6307 uint32 create_disp = 0;
6308 uint32 access_mask = 0;
6309 uint32 create_options = 0;
6310 NTSTATUS status = NT_STATUS_OK;
6311 mode_t unixmode = (mode_t)0;
6312 files_struct *fsp = NULL;
6313 int oplock_request = 0;
6314 int info = 0;
6315 uint16 info_level_return = 0;
6316
6317 if (total_data < 18) {
6318 return NT_STATUS_INVALID_PARAMETER;
6319 }
6320
6321 flags = IVAL(pdata,0);
6322 oplock_request = (flags & REQUEST_OPLOCK) ? EXCLUSIVE_OPLOCK : 0;
6323 if (oplock_request) {
6324 oplock_request |= (flags & REQUEST_BATCH_OPLOCK) ? BATCH_OPLOCK : 0;
6325 }
6326
6327 wire_open_mode = IVAL(pdata,4);
6328
6329 if (wire_open_mode == (SMB_O_CREAT|SMB_O_DIRECTORY)) {
6330 return smb_posix_mkdir(conn, req,
6331 ppdata,
6332 total_data,
6333 fname,
6334 psbuf,
6335 pdata_return_size);
6336 }
6337
6338 switch (wire_open_mode & SMB_ACCMODE) {
6339 case SMB_O_RDONLY:
6340 access_mask = FILE_READ_DATA;
6341 break;
6342 case SMB_O_WRONLY:
6343 access_mask = FILE_WRITE_DATA;
6344 break;
6345 case SMB_O_RDWR:
6346 access_mask = FILE_READ_DATA|FILE_WRITE_DATA;
6347 break;
6348 default:
6349 DEBUG(5,("smb_posix_open: invalid open mode 0x%x\n",
6350 (unsigned int)wire_open_mode ));
6351 return NT_STATUS_INVALID_PARAMETER;
6352 }
6353
6354 wire_open_mode &= ~SMB_ACCMODE;
6355
6356 if((wire_open_mode & (SMB_O_CREAT | SMB_O_EXCL)) == (SMB_O_CREAT | SMB_O_EXCL)) {
6357 create_disp = FILE_CREATE;
6358 } else if((wire_open_mode & (SMB_O_CREAT | SMB_O_TRUNC)) == (SMB_O_CREAT | SMB_O_TRUNC)) {
6359 create_disp = FILE_OVERWRITE_IF;
6360 } else if((wire_open_mode & SMB_O_CREAT) == SMB_O_CREAT) {
6361 create_disp = FILE_OPEN_IF;
6362 } else {
6363 DEBUG(5,("smb_posix_open: invalid create mode 0x%x\n",
6364 (unsigned int)wire_open_mode ));
6365 return NT_STATUS_INVALID_PARAMETER;
6366 }
6367
6368 raw_unixmode = IVAL(pdata,8);
6369 /* Next 4 bytes are not yet defined. */
6370
6371 status = unix_perms_from_wire(conn,
6372 psbuf,
6373 raw_unixmode,
6374 VALID_STAT(*psbuf) ? PERM_EXISTING_FILE : PERM_NEW_FILE,
6375 &unixmode);
6376
6377 if (!NT_STATUS_IS_OK(status)) {
6378 return status;
6379 }
6380
6381 mod_unixmode = (uint32)unixmode | FILE_FLAG_POSIX_SEMANTICS;
6382
6383 if (wire_open_mode & SMB_O_SYNC) {
6384 create_options |= FILE_WRITE_THROUGH;
6385 }
6386 if (wire_open_mode & SMB_O_APPEND) {
6387 access_mask |= FILE_APPEND_DATA;
6388 }
6389 if (wire_open_mode & SMB_O_DIRECT) {
6390 mod_unixmode |= FILE_FLAG_NO_BUFFERING;
6391 }
6392
6393 DEBUG(10,("smb_posix_open: file %s, smb_posix_flags = %u, mode 0%o\n",
6394 fname,
6395 (unsigned int)wire_open_mode,
6396 (unsigned int)unixmode ));
6397
6398 status = open_file_ntcreate(conn, req,
6399 fname,
6400 psbuf,
6401 access_mask,
6402 FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
6403 create_disp,
6404 0, /* no create options yet. */
6405 mod_unixmode,
6406 oplock_request,
6407 &info,
6408 &fsp);
6409
6410 if (!NT_STATUS_IS_OK(status)) {
6411 return status;
6412 }
6413
6414 if (oplock_request && lp_fake_oplocks(SNUM(conn))) {
6415 extended_oplock_granted = True;
6416 }
6417
6418 if(oplock_request && EXCLUSIVE_OPLOCK_TYPE(fsp->oplock_type)) {
6419 extended_oplock_granted = True;
6420 }
6421
6422 info_level_return = SVAL(pdata,16);
6423
6424 /* Allocate the correct return size. */
6425
6426 if (info_level_return == SMB_QUERY_FILE_UNIX_BASIC) {
6427 *pdata_return_size = 12 + SMB_FILE_UNIX_BASIC_SIZE;
6428 } else if (info_level_return == SMB_QUERY_FILE_UNIX_INFO2) {
6429 *pdata_return_size = 12 + SMB_FILE_UNIX_INFO2_SIZE;
6430 } else {
6431 *pdata_return_size = 12;
6432 }
6433
6434 /* Realloc the data size */
6435 *ppdata = (char *)SMB_REALLOC(*ppdata,*pdata_return_size);
6436 if (*ppdata == NULL) {
6437 close_file(fsp,ERROR_CLOSE);
6438 *pdata_return_size = 0;
6439 return NT_STATUS_NO_MEMORY;
6440 }
6441 pdata = *ppdata;
6442
6443 if (extended_oplock_granted) {
6444 if (flags & REQUEST_BATCH_OPLOCK) {
6445 SSVAL(pdata,0, BATCH_OPLOCK_RETURN);
6446 } else {
6447 SSVAL(pdata,0, EXCLUSIVE_OPLOCK_RETURN);
6448 }
6449 } else if (fsp->oplock_type == LEVEL_II_OPLOCK) {
6450 SSVAL(pdata,0, LEVEL_II_OPLOCK_RETURN);
6451 } else {
6452 SSVAL(pdata,0,NO_OPLOCK_RETURN);
6453 }
6454
6455 SSVAL(pdata,2,fsp->fnum);
6456 SIVAL(pdata,4,info); /* Was file created etc. */
6457
6458 switch (info_level_return) {
6459 case SMB_QUERY_FILE_UNIX_BASIC:
6460 SSVAL(pdata,8,SMB_QUERY_FILE_UNIX_BASIC);
6461 SSVAL(pdata,10,0); /* padding. */
6462 store_file_unix_basic(conn, pdata + 12, fsp, psbuf);
6463 break;
6464 case SMB_QUERY_FILE_UNIX_INFO2:
6465 SSVAL(pdata,8,SMB_QUERY_FILE_UNIX_INFO2);
6466 SSVAL(pdata,10,0); /* padding. */
6467 store_file_unix_basic_info2(conn, pdata + 12, fsp, psbuf);
6468 break;
6469 default:
6470 SSVAL(pdata,8,SMB_NO_INFO_LEVEL_RETURNED);
6471 SSVAL(pdata,10,0); /* padding. */
6472 break;
6473 }
6474 return NT_STATUS_OK;
6475 }
6476
6477 /****************************************************************************
6478 Delete a file with POSIX semantics.
6479 ****************************************************************************/
6480
6481 static NTSTATUS smb_posix_unlink(connection_struct *conn,
6482 struct smb_request *req,
6483 const char *pdata,
6484 int total_data,
6485 const char *fname,
6486 SMB_STRUCT_STAT *psbuf)
6487 {
6488 NTSTATUS status = NT_STATUS_OK;
6489 files_struct *fsp = NULL;
6490 uint16 flags = 0;
6491 char del = 1;
6492 int info = 0;
6493 int i;
6494 struct share_mode_lock *lck = NULL;
6495
6496 if (total_data < 2) {
6497 return NT_STATUS_INVALID_PARAMETER;
6498 }
6499
6500 flags = SVAL(pdata,0);
6501
6502 if (!VALID_STAT(*psbuf)) {
6503 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
6504 }
6505
6506 if ((flags == SMB_POSIX_UNLINK_DIRECTORY_TARGET) &&
6507 !VALID_STAT_OF_DIR(*psbuf)) {
6508 return NT_STATUS_NOT_A_DIRECTORY;
6509 }
6510
6511 DEBUG(10,("smb_posix_unlink: %s %s\n",
6512 (flags == SMB_POSIX_UNLINK_DIRECTORY_TARGET) ? "directory" : "file",
6513 fname));
6514
6515 if (VALID_STAT_OF_DIR(*psbuf)) {
6516 status = open_directory(conn, req,
6517 fname,
6518 psbuf,
6519 DELETE_ACCESS,
6520 FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
6521 FILE_OPEN,
6522 0,
6523 FILE_FLAG_POSIX_SEMANTICS|0777,
6524 &info,
6525 &fsp);
6526 } else {
6527
6528 status = open_file_ntcreate(conn, req,
6529 fname,
6530 psbuf,
6531 DELETE_ACCESS,
6532 FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
6533 FILE_OPEN,
6534 0,
6535 FILE_FLAG_POSIX_SEMANTICS|0777,
6536 0, /* No oplock, but break existing ones. */
6537 &info,
6538 &fsp);
6539 }
6540
6541 if (!NT_STATUS_IS_OK(status)) {
6542 return status;
6543 }
6544
6545 /*
6546 * Don't lie to client. If we can't really delete due to
6547 * non-POSIX opens return SHARING_VIOLATION.
6548 */
6549
6550 lck = get_share_mode_lock(talloc_tos(), fsp->file_id, NULL, NULL,
6551 NULL);
6552 if (lck == NULL) {
6553 DEBUG(0, ("smb_posix_unlink: Could not get share mode "
6554 "lock for file %s\n", fsp->fsp_name));
6555 close_file(fsp, NORMAL_CLOSE);
6556 return NT_STATUS_INVALID_PARAMETER;
6557 }
6558
6559 /*
6560 * See if others still have the file open. If this is the case, then
6561 * don't delete. If all opens are POSIX delete we can set the delete
6562 * on close disposition.
6563 */
6564 for (i=0; i<lck->num_share_modes; i++) {
6565 struct share_mode_entry *e = &lck->share_modes[i];
6566 if (is_valid_share_mode_entry(e)) {
6567 if (e->flags & SHARE_MODE_FLAG_POSIX_OPEN) {
6568 continue;
6569 }
6570 /* Fail with sharing violation. */
6571 close_file(fsp, NORMAL_CLOSE);
6572 TALLOC_FREE(lck);
6573 return NT_STATUS_SHARING_VIOLATION;
6574 }
6575 }
6576
6577 /*
6578 * Set the delete on close.
6579 */
6580 status = smb_set_file_disposition_info(conn,
6581 &del,
6582 1,
6583 fsp,
6584 fname,
6585 psbuf);
6586
6587 if (!NT_STATUS_IS_OK(status)) {
6588 close_file(fsp, NORMAL_CLOSE);
6589 TALLOC_FREE(lck);
6590 return status;
6591 }
6592 TALLOC_FREE(lck);
6593 return close_file(fsp, NORMAL_CLOSE);
6594 }
6595
6596 /****************************************************************************
6597 Reply to a TRANS2_SETFILEINFO (set file info by fileid or pathname).
6598 ****************************************************************************/
6599
6600 static void call_trans2setfilepathinfo(connection_struct *conn,
6601 struct smb_request *req,
6602 unsigned int tran_call,
6603 char **pparams, int total_params,
6604 char **ppdata, int total_data,
6605 unsigned int max_data_bytes)
6606 {
6607 char *params = *pparams;
6608 char *pdata = *ppdata;
6609 uint16 info_level;
6610 SMB_STRUCT_STAT sbuf;
6611 char *fname = NULL;
6612 files_struct *fsp = NULL;
6613 NTSTATUS status = NT_STATUS_OK;
6614 int data_return_size = 0;
6615 TALLOC_CTX *ctx = talloc_tos();
6616
6617 if (!params) {
6618 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
6619 return;
6620 }
6621
6622 ZERO_STRUCT(sbuf);
6623
6624 if (tran_call == TRANSACT2_SETFILEINFO) {
6625 if (total_params < 4) {
6626 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
6627 return;
6628 }
6629
6630 fsp = file_fsp(SVAL(params,0));
6631 /* Basic check for non-null fsp. */
6632 if (!check_fsp_open(conn, req, fsp, &current_user)) {
6633 return;
6634 }
6635 info_level = SVAL(params,2);
6636
6637 fname = talloc_strdup(talloc_tos(),fsp->fsp_name);
6638 if (!fname) {
6639 reply_nterror(req, NT_STATUS_NO_MEMORY);
6640 return;
6641 }
6642
6643 if(fsp->is_directory || fsp->fh->fd == -1) {
6644 /*
6645 * This is actually a SETFILEINFO on a directory
6646 * handle (returned from an NT SMB). NT5.0 seems
6647 * to do this call. JRA.
6648 */
6649 if (INFO_LEVEL_IS_UNIX(info_level)) {
6650 /* Always do lstat for UNIX calls. */
6651 if (SMB_VFS_LSTAT(conn,fname,&sbuf)) {
6652 DEBUG(3,("call_trans2setfilepathinfo: SMB_VFS_LSTAT of %s failed (%s)\n",fname,strerror(errno)));
6653 reply_unixerror(req,ERRDOS,ERRbadpath);
6654 return;
6655 }
6656 } else {
6657 if (SMB_VFS_STAT(conn,fname,&sbuf) != 0) {
6658 DEBUG(3,("call_trans2setfilepathinfo: fileinfo of %s failed (%s)\n",fname,strerror(errno)));
6659 reply_unixerror(req,ERRDOS,ERRbadpath);
6660 return;
6661 }
6662 }
6663 } else if (fsp->print_file) {
6664 /*
6665 * Doing a DELETE_ON_CLOSE should cancel a print job.
6666 */
6667 if ((info_level == SMB_SET_FILE_DISPOSITION_INFO) && CVAL(pdata,0)) {
6668 fsp->fh->private_options |= FILE_DELETE_ON_CLOSE;
6669
6670 DEBUG(3,("call_trans2setfilepathinfo: Cancelling print job (%s)\n", fsp->fsp_name ));
6671
6672 SSVAL(params,0,0);
6673 send_trans2_replies(conn, req, params, 2,
6674 *ppdata, 0,
6675 max_data_bytes);
6676 return;
6677 } else {
6678 reply_unixerror(req, ERRDOS, ERRbadpath);
6679 return;
6680 }
6681 } else {
6682 /*
6683 * Original code - this is an open file.
6684 */
6685 if (!check_fsp(conn, req, fsp, &current_user)) {
6686 return;
6687 }
6688
6689 if (SMB_VFS_FSTAT(fsp, &sbuf) != 0) {
6690 DEBUG(3,("call_trans2setfilepathinfo: fstat of fnum %d failed (%s)\n",fsp->fnum, strerror(errno)));
6691 reply_unixerror(req, ERRDOS, ERRbadfid);
6692 return;
6693 }
6694 }
6695 } else {
6696 /* set path info */
6697 if (total_params < 7) {
6698 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
6699 return;
6700 }
6701
6702 info_level = SVAL(params,0);
6703 srvstr_get_path(ctx, params, req->flags2, &fname, &params[6],
6704 total_params - 6, STR_TERMINATE,
6705 &status);
6706 if (!NT_STATUS_IS_OK(status)) {
6707 reply_nterror(req, status);
6708 return;
6709 }
6710
6711 status = resolve_dfspath(ctx, conn,
6712 req->flags2 & FLAGS2_DFS_PATHNAMES,
6713 fname,
6714 &fname);
6715 if (!NT_STATUS_IS_OK(status)) {
6716 if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
6717 reply_botherror(req,
6718 NT_STATUS_PATH_NOT_COVERED,
6719 ERRSRV, ERRbadpath);
6720 return;
6721 }
6722 reply_nterror(req, status);
6723 return;
6724 }
6725
6726 status = unix_convert(ctx, conn, fname, False,
6727 &fname, NULL, &sbuf);
6728 if (!NT_STATUS_IS_OK(status)) {
6729 reply_nterror(req, status);
6730 return;
6731 }
6732
6733 status = check_name(conn, fname);
6734 if (!NT_STATUS_IS_OK(status)) {
6735 reply_nterror(req, status);
6736 return;
6737 }
6738
6739 if (INFO_LEVEL_IS_UNIX(info_level)) {
6740 /*
6741 * For CIFS UNIX extensions the target name may not exist.
6742 */
6743
6744 /* Always do lstat for UNIX calls. */
6745 SMB_VFS_LSTAT(conn,fname,&sbuf);
6746
6747 } else if (!VALID_STAT(sbuf) && SMB_VFS_STAT(conn,fname,&sbuf)) {
6748 DEBUG(3,("call_trans2setfilepathinfo: SMB_VFS_STAT of %s failed (%s)\n",fname,strerror(errno)));
6749 reply_unixerror(req, ERRDOS, ERRbadpath);
6750 return;
6751 }
6752 }
6753
6754 if (!CAN_WRITE(conn)) {
6755 reply_doserror(req, ERRSRV, ERRaccess);
6756 return;
6757 }
6758
6759 if (INFO_LEVEL_IS_UNIX(info_level) && !lp_unix_extensions()) {
6760 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
6761 return;
6762 }
6763
6764 DEBUG(3,("call_trans2setfilepathinfo(%d) %s (fnum %d) info_level=%d totdata=%d\n",
6765 tran_call,fname, fsp ? fsp->fnum : -1, info_level,total_data));
6766
6767 /* Realloc the parameter size */
6768 *pparams = (char *)SMB_REALLOC(*pparams,2);
6769 if (*pparams == NULL) {
6770 reply_nterror(req, NT_STATUS_NO_MEMORY);
6771 return;
6772 }
6773 params = *pparams;
6774
6775 SSVAL(params,0,0);
6776
6777 switch (info_level) {
6778
6779 case SMB_INFO_STANDARD:
6780 {
6781 status = smb_set_info_standard(conn,
6782 pdata,
6783 total_data,
6784 fsp,
6785 fname,
6786 &sbuf);
6787 break;
6788 }
6789
6790 case SMB_INFO_SET_EA:
6791 {
6792 status = smb_info_set_ea(conn,
6793 pdata,
6794 total_data,
6795 fsp,
6796 fname);
6797 break;
6798 }
6799
6800 case SMB_SET_FILE_BASIC_INFO:
6801 case SMB_FILE_BASIC_INFORMATION:
6802 {
6803 status = smb_set_file_basic_info(conn,
6804 pdata,
6805 total_data,
6806 fsp,
6807 fname,
6808 &sbuf);
6809 break;
6810 }
6811
6812 case SMB_FILE_ALLOCATION_INFORMATION:
6813 case SMB_SET_FILE_ALLOCATION_INFO:
6814 {
6815 status = smb_set_file_allocation_info(conn, req,
6816 pdata,
6817 total_data,
6818 fsp,
6819 fname,
6820 &sbuf);
6821 break;
6822 }
6823
6824 case SMB_FILE_END_OF_FILE_INFORMATION:
6825 case SMB_SET_FILE_END_OF_FILE_INFO:
6826 {
6827 status = smb_set_file_end_of_file_info(conn, req,
6828 pdata,
6829 total_data,
6830 fsp,
6831 fname,
6832 &sbuf);
6833 break;
6834 }
6835
6836 case SMB_FILE_DISPOSITION_INFORMATION:
6837 case SMB_SET_FILE_DISPOSITION_INFO: /* Set delete on close for open file. */
6838 {
6839 #if 0
6840 /* JRA - We used to just ignore this on a path ?
6841 * Shouldn't this be invalid level on a pathname
6842 * based call ?
6843 */
6844 if (tran_call != TRANSACT2_SETFILEINFO) {
6845 return ERROR_NT(NT_STATUS_INVALID_LEVEL);
6846 }
6847 #endif
6848 status = smb_set_file_disposition_info(conn,
6849 pdata,
6850 total_data,
6851 fsp,
6852 fname,
6853 &sbuf);
6854 break;
6855 }
6856
6857 case SMB_FILE_POSITION_INFORMATION:
6858 {
6859 status = smb_file_position_information(conn,
6860 pdata,
6861 total_data,
6862 fsp);
6863 break;
6864 }
6865
6866 /* From tridge Samba4 :
6867 * MODE_INFORMATION in setfileinfo (I have no
6868 * idea what "mode information" on a file is - it takes a value of 0,
6869 * 2, 4 or 6. What could it be?).
6870 */
6871
6872 case SMB_FILE_MODE_INFORMATION:
6873 {
6874 status = smb_file_mode_information(conn,
6875 pdata,
6876 total_data);
6877 break;
6878 }
6879
6880 /*
6881 * CIFS UNIX extensions.
6882 */
6883
6884 case SMB_SET_FILE_UNIX_BASIC:
6885 {
6886 status = smb_set_file_unix_basic(conn, req,
6887 pdata,
6888 total_data,
6889 fsp,
6890 fname,
6891 &sbuf);
6892 break;
6893 }
6894
6895 case SMB_SET_FILE_UNIX_INFO2:
6896 {
6897 status = smb_set_file_unix_info2(conn, req,
6898 pdata,
6899 total_data,
6900 fsp,
6901 fname,
6902 &sbuf);
6903 break;
6904 }
6905
6906 case SMB_SET_FILE_UNIX_LINK:
6907 {
6908 if (tran_call != TRANSACT2_SETPATHINFO) {
6909 /* We must have a pathname for this. */
6910 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
6911 return;
6912 }
6913 status = smb_set_file_unix_link(conn, req, pdata,
6914 total_data, fname);
6915 break;
6916 }
6917
6918 case SMB_SET_FILE_UNIX_HLINK:
6919 {
6920 if (tran_call != TRANSACT2_SETPATHINFO) {
6921 /* We must have a pathname for this. */
6922 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
6923 return;
6924 }
6925 status = smb_set_file_unix_hlink(conn, req,
6926 pdata, total_data,
6927 fname);
6928 break;
6929 }
6930
6931 case SMB_FILE_RENAME_INFORMATION:
6932 {
6933 status = smb_file_rename_information(conn, req,
6934 pdata, total_data,
6935 fsp, fname);
6936 break;
6937 }
6938
6939 #if defined(HAVE_POSIX_ACLS)
6940 case SMB_SET_POSIX_ACL:
6941 {
6942 status = smb_set_posix_acl(conn,
6943 pdata,
6944 total_data,
6945 fsp,
6946 fname,
6947 &sbuf);
6948 break;
6949 }
6950 #endif
6951
6952 case SMB_SET_POSIX_LOCK:
6953 {
6954 if (tran_call != TRANSACT2_SETFILEINFO) {
6955 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
6956 return;
6957 }
6958 status = smb_set_posix_lock(conn, req,
6959 pdata, total_data, fsp);
6960 break;
6961 }
6962
6963 case SMB_POSIX_PATH_OPEN:
6964 {
6965 if (tran_call != TRANSACT2_SETPATHINFO) {
6966 /* We must have a pathname for this. */
6967 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
6968 return;
6969 }
6970
6971 status = smb_posix_open(conn, req,
6972 ppdata,
6973 total_data,
6974 fname,
6975 &sbuf,
6976 &data_return_size);
6977 break;
6978 }
6979
6980 case SMB_POSIX_PATH_UNLINK:
6981 {
6982 if (tran_call != TRANSACT2_SETPATHINFO) {
6983 /* We must have a pathname for this. */
6984 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
6985 return;
6986 }
6987
6988 status = smb_posix_unlink(conn, req,
6989 pdata,
6990 total_data,
6991 fname,
6992 &sbuf);
6993 break;
6994 }
6995
6996 default:
6997 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
6998 return;
6999 }
7000
7001
7002 if (!NT_STATUS_IS_OK(status)) {
7003 if (open_was_deferred(req->mid)) {
7004 /* We have re-scheduled this call. */
7005 return;
7006 }
7007 if (blocking_lock_was_deferred(req->mid)) {
7008 /* We have re-scheduled this call. */
7009 return;
7010 }
7011 if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
7012 reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
7013 ERRSRV, ERRbadpath);
7014 return;
7015 }
7016 if (info_level == SMB_POSIX_PATH_OPEN) {
7017 reply_openerror(req, status);
7018 return;
7019 }
7020
7021 reply_nterror(req, status);
7022 return;
7023 }
7024
7025 SSVAL(params,0,0);
7026 send_trans2_replies(conn, req, params, 2, *ppdata, data_return_size,
7027 max_data_bytes);
7028
7029 return;
7030 }
7031
7032 /****************************************************************************
7033 Reply to a TRANS2_MKDIR (make directory with extended attributes).
7034 ****************************************************************************/
7035
7036 static void call_trans2mkdir(connection_struct *conn, struct smb_request *req,
7037 char **pparams, int total_params,
7038 char **ppdata, int total_data,
7039 unsigned int max_data_bytes)
7040 {
7041 char *params = *pparams;
7042 char *pdata = *ppdata;
7043 char *directory = NULL;
7044 SMB_STRUCT_STAT sbuf;
7045 NTSTATUS status = NT_STATUS_OK;
7046 struct ea_list *ea_list = NULL;
7047 TALLOC_CTX *ctx = talloc_tos();
7048
7049 if (!CAN_WRITE(conn)) {
7050 reply_doserror(req, ERRSRV, ERRaccess);
7051 return;
7052 }
7053
7054 if (total_params < 5) {
7055 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7056 return;
7057 }
7058
7059 srvstr_get_path(ctx, params, req->flags2, &directory, &params[4],
7060 total_params - 4, STR_TERMINATE,
7061 &status);
7062 if (!NT_STATUS_IS_OK(status)) {
7063 reply_nterror(req, status);
7064 return;
7065 }
7066
7067 DEBUG(3,("call_trans2mkdir : name = %s\n", directory));
7068
7069 status = unix_convert(ctx, conn, directory, False, &directory, NULL, &sbuf);
7070 if (!NT_STATUS_IS_OK(status)) {
7071 reply_nterror(req, status);
7072 return;
7073 }
7074
7075 status = check_name(conn, directory);
7076 if (!NT_STATUS_IS_OK(status)) {
7077 DEBUG(5,("call_trans2mkdir error (%s)\n", nt_errstr(status)));
7078 reply_nterror(req, status);
7079 return;
7080 }
7081
7082 /* Any data in this call is an EA list. */
7083 if (total_data && (total_data != 4) && !lp_ea_support(SNUM(conn))) {
7084 reply_nterror(req, NT_STATUS_EAS_NOT_SUPPORTED);
7085 return;
7086 }
7087
7088 /*
7089 * OS/2 workplace shell seems to send SET_EA requests of "null"
7090 * length (4 bytes containing IVAL 4).
7091 * They seem to have no effect. Bug #3212. JRA.
7092 */
7093
7094 if (total_data != 4) {
7095 if (total_data < 10) {
7096 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7097 return;
7098 }
7099
7100 if (IVAL(pdata,0) > total_data) {
7101 DEBUG(10,("call_trans2mkdir: bad total data size (%u) > %u\n",
7102 IVAL(pdata,0), (unsigned int)total_data));
7103 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7104 return;
7105 }
7106
7107 ea_list = read_ea_list(talloc_tos(), pdata + 4,
7108 total_data - 4);
7109 if (!ea_list) {
7110 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7111 return;
7112 }
7113 }
7114 /* If total_data == 4 Windows doesn't care what values
7115 * are placed in that field, it just ignores them.
7116 * The System i QNTC IBM SMB client puts bad values here,
7117 * so ignore them. */
7118
7119 status = create_directory(conn, req, directory);
7120
7121 if (!NT_STATUS_IS_OK(status)) {
7122 reply_nterror(req, status);
7123 return;
7124 }
7125
7126 /* Try and set any given EA. */
7127 if (ea_list) {
7128 status = set_ea(conn, NULL, directory, ea_list);
7129 if (!NT_STATUS_IS_OK(status)) {
7130 reply_nterror(req, status);
7131 return;
7132 }
7133 }
7134
7135 /* Realloc the parameter and data sizes */
7136 *pparams = (char *)SMB_REALLOC(*pparams,2);
7137 if(*pparams == NULL) {
7138 reply_nterror(req, NT_STATUS_NO_MEMORY);
7139 return;
7140 }
7141 params = *pparams;
7142
7143 SSVAL(params,0,0);
7144
7145 send_trans2_replies(conn, req, params, 2, *ppdata, 0, max_data_bytes);
7146
7147 return;
7148 }
7149
7150 /****************************************************************************
7151 Reply to a TRANS2_FINDNOTIFYFIRST (start monitoring a directory for changes).
7152 We don't actually do this - we just send a null response.
7153 ****************************************************************************/
7154
7155 static void call_trans2findnotifyfirst(connection_struct *conn,
7156 struct smb_request *req,
7157 char **pparams, int total_params,
7158 char **ppdata, int total_data,
7159 unsigned int max_data_bytes)
7160 {
7161 static uint16 fnf_handle = 257;
7162 char *params = *pparams;
7163 uint16 info_level;
7164
7165 if (total_params < 6) {
7166 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7167 return;
7168 }
7169
7170 info_level = SVAL(params,4);
7171 DEBUG(3,("call_trans2findnotifyfirst - info_level %d\n", info_level));
7172
7173 switch (info_level) {
7174 case 1:
7175 case 2:
7176 break;
7177 default:
7178 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
7179 return;
7180 }
7181
7182 /* Realloc the parameter and data sizes */
7183 *pparams = (char *)SMB_REALLOC(*pparams,6);
7184 if (*pparams == NULL) {
7185 reply_nterror(req, NT_STATUS_NO_MEMORY);
7186 return;
7187 }
7188 params = *pparams;
7189
7190 SSVAL(params,0,fnf_handle);
7191 SSVAL(params,2,0); /* No changes */
7192 SSVAL(params,4,0); /* No EA errors */
7193
7194 fnf_handle++;
7195
7196 if(fnf_handle == 0)
7197 fnf_handle = 257;
7198
7199 send_trans2_replies(conn, req, params, 6, *ppdata, 0, max_data_bytes);
7200
7201 return;
7202 }
7203
7204 /****************************************************************************
7205 Reply to a TRANS2_FINDNOTIFYNEXT (continue monitoring a directory for
7206 changes). Currently this does nothing.
7207 ****************************************************************************/
7208
7209 static void call_trans2findnotifynext(connection_struct *conn,
7210 struct smb_request *req,
7211 char **pparams, int total_params,
7212 char **ppdata, int total_data,
7213 unsigned int max_data_bytes)
7214 {
7215 char *params = *pparams;
7216
7217 DEBUG(3,("call_trans2findnotifynext\n"));
7218
7219 /* Realloc the parameter and data sizes */
7220 *pparams = (char *)SMB_REALLOC(*pparams,4);
7221 if (*pparams == NULL) {
7222 reply_nterror(req, NT_STATUS_NO_MEMORY);
7223 return;
7224 }
7225 params = *pparams;
7226
7227 SSVAL(params,0,0); /* No changes */
7228 SSVAL(params,2,0); /* No EA errors */
7229
7230 send_trans2_replies(conn, req, params, 4, *ppdata, 0, max_data_bytes);
7231
7232 return;
7233 }
7234
7235 /****************************************************************************
7236 Reply to a TRANS2_GET_DFS_REFERRAL - Shirish Kalele <kalele@veritas.com>.
7237 ****************************************************************************/
7238
7239 static void call_trans2getdfsreferral(connection_struct *conn,
7240 struct smb_request *req,
7241 char **pparams, int total_params,
7242 char **ppdata, int total_data,
7243 unsigned int max_data_bytes)
7244 {
7245 char *params = *pparams;
7246 char *pathname = NULL;
7247 int reply_size = 0;
7248 int max_referral_level;
7249 NTSTATUS status = NT_STATUS_OK;
7250 TALLOC_CTX *ctx = talloc_tos();
7251
7252 DEBUG(10,("call_trans2getdfsreferral\n"));
7253
7254 if (total_params < 3) {
7255 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7256 return;
7257 }
7258
7259 max_referral_level = SVAL(params,0);
7260
7261 if(!lp_host_msdfs()) {
7262 reply_doserror(req, ERRDOS, ERRbadfunc);
7263 return;
7264 }
7265
7266 srvstr_pull_talloc(ctx, params, req->flags2, &pathname, &params[2],
7267 total_params - 2, STR_TERMINATE);
7268 if (!pathname) {
7269 reply_nterror(req, NT_STATUS_NOT_FOUND);
7270 return;
7271 }
7272 if((reply_size = setup_dfs_referral(conn, pathname, max_referral_level,
7273 ppdata,&status)) < 0) {
7274 reply_nterror(req, status);
7275 return;
7276 }
7277
7278 SSVAL(req->inbuf, smb_flg2,
7279 SVAL(req->inbuf,smb_flg2) | FLAGS2_DFS_PATHNAMES);
7280 send_trans2_replies(conn, req,0,0,*ppdata,reply_size, max_data_bytes);
7281
7282 return;
7283 }
7284
7285 #define LMCAT_SPL 0x53
7286 #define LMFUNC_GETJOBID 0x60
7287
7288 /****************************************************************************
7289 Reply to a TRANS2_IOCTL - used for OS/2 printing.
7290 ****************************************************************************/
7291
7292 static void call_trans2ioctl(connection_struct *conn,
7293 struct smb_request *req,
7294 char **pparams, int total_params,
7295 char **ppdata, int total_data,
7296 unsigned int max_data_bytes)
7297 {
7298 char *pdata = *ppdata;
7299 files_struct *fsp = file_fsp(SVAL(req->inbuf,smb_vwv15));
7300
7301 /* check for an invalid fid before proceeding */
7302
7303 if (!fsp) {
7304 reply_doserror(req, ERRDOS, ERRbadfid);
7305 return;
7306 }
7307
7308 if ((SVAL(req->inbuf,(smb_setup+4)) == LMCAT_SPL)
7309 && (SVAL(req->inbuf,(smb_setup+6)) == LMFUNC_GETJOBID)) {
7310 *ppdata = (char *)SMB_REALLOC(*ppdata, 32);
7311 if (*ppdata == NULL) {
7312 reply_nterror(req, NT_STATUS_NO_MEMORY);
7313 return;
7314 }
7315 pdata = *ppdata;
7316
7317 /* NOTE - THIS IS ASCII ONLY AT THE MOMENT - NOT SURE IF OS/2
7318 CAN ACCEPT THIS IN UNICODE. JRA. */
7319
7320 SSVAL(pdata,0,fsp->rap_print_jobid); /* Job number */
7321 srvstr_push(pdata, req->flags2, pdata + 2,
7322 global_myname(), 15,
7323 STR_ASCII|STR_TERMINATE); /* Our NetBIOS name */
7324 srvstr_push(pdata, req->flags2, pdata+18,
7325 lp_servicename(SNUM(conn)), 13,
7326 STR_ASCII|STR_TERMINATE); /* Service name */
7327 send_trans2_replies(conn, req, *pparams, 0, *ppdata, 32,
7328 max_data_bytes);
7329 return;
7330 }
7331
7332 DEBUG(2,("Unknown TRANS2_IOCTL\n"));
7333 reply_doserror(req, ERRSRV, ERRerror);
7334 }
7335
7336 /****************************************************************************
7337 Reply to a SMBfindclose (stop trans2 directory search).
7338 ****************************************************************************/
7339
7340 void reply_findclose(struct smb_request *req)
7341 {
7342 int dptr_num;
7343
7344 START_PROFILE(SMBfindclose);
7345
7346 if (req->wct < 1) {
7347 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7348 END_PROFILE(SMBfindclose);
7349 return;
7350 }
7351
7352 dptr_num = SVALS(req->inbuf,smb_vwv0);
7353
7354 DEBUG(3,("reply_findclose, dptr_num = %d\n", dptr_num));
7355
7356 dptr_close(&dptr_num);
7357
7358 reply_outbuf(req, 0, 0);
7359
7360 DEBUG(3,("SMBfindclose dptr_num = %d\n", dptr_num));
7361
7362 END_PROFILE(SMBfindclose);
7363 return;
7364 }
7365
7366 /****************************************************************************
7367 Reply to a SMBfindnclose (stop FINDNOTIFYFIRST directory search).
7368 ****************************************************************************/
7369
7370 void reply_findnclose(struct smb_request *req)
7371 {
7372 int dptr_num;
7373
7374 START_PROFILE(SMBfindnclose);
7375
7376 if (req->wct < 1) {
7377 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7378 END_PROFILE(SMBfindnclose);
7379 return;
7380 }
7381
7382 dptr_num = SVAL(req->inbuf,smb_vwv0);
7383
7384 DEBUG(3,("reply_findnclose, dptr_num = %d\n", dptr_num));
7385
7386 /* We never give out valid handles for a
7387 findnotifyfirst - so any dptr_num is ok here.
7388 Just ignore it. */
7389
7390 reply_outbuf(req, 0, 0);
7391
7392 DEBUG(3,("SMB_findnclose dptr_num = %d\n", dptr_num));
7393
7394 END_PROFILE(SMBfindnclose);
7395 return;
7396 }
7397
7398 static void handle_trans2(connection_struct *conn, struct smb_request *req,
7399 struct trans_state *state)
7400 {
7401 if (Protocol >= PROTOCOL_NT1) {
7402 req->flags2 |= 0x40; /* IS_LONG_NAME */
7403 SSVAL(req->inbuf,smb_flg2,req->flags2);
7404 }
7405
7406 if (conn->encrypt_level == Required && !req->encrypted) {
7407 if (state->call != TRANSACT2_QFSINFO &&
7408 state->call != TRANSACT2_SETFSINFO) {
7409 DEBUG(0,("handle_trans2: encryption required "
7410 "with call 0x%x\n",
7411 (unsigned int)state->call));
7412 reply_nterror(req, NT_STATUS_ACCESS_DENIED);
7413 return;
7414 }
7415 }
7416
7417 /* Now we must call the relevant TRANS2 function */
7418 switch(state->call) {
7419 case TRANSACT2_OPEN:
7420 {
7421 START_PROFILE(Trans2_open);
7422 call_trans2open(conn, req,
7423 &state->param, state->total_param,
7424 &state->data, state->total_data,
7425 state->max_data_return);
7426 END_PROFILE(Trans2_open);
7427 break;
7428 }
7429
7430 case TRANSACT2_FINDFIRST:
7431 {
7432 START_PROFILE(Trans2_findfirst);
7433 call_trans2findfirst(conn, req,
7434 &state->param, state->total_param,
7435 &state->data, state->total_data,
7436 state->max_data_return);
7437 END_PROFILE(Trans2_findfirst);
7438 break;
7439 }
7440
7441 case TRANSACT2_FINDNEXT:
7442 {
7443 START_PROFILE(Trans2_findnext);
7444 call_trans2findnext(conn, req,
7445 &state->param, state->total_param,
7446 &state->data, state->total_data,
7447 state->max_data_return);
7448 END_PROFILE(Trans2_findnext);
7449 break;
7450 }
7451
7452 case TRANSACT2_QFSINFO:
7453 {
7454 START_PROFILE(Trans2_qfsinfo);
7455 call_trans2qfsinfo(conn, req,
7456 &state->param, state->total_param,
7457 &state->data, state->total_data,
7458 state->max_data_return);
7459 END_PROFILE(Trans2_qfsinfo);
7460 break;
7461 }
7462
7463 case TRANSACT2_SETFSINFO:
7464 {
7465 START_PROFILE(Trans2_setfsinfo);
7466 call_trans2setfsinfo(conn, req,
7467 &state->param, state->total_param,
7468 &state->data, state->total_data,
7469 state->max_data_return);
7470 END_PROFILE(Trans2_setfsinfo);
7471 break;
7472 }
7473
7474 case TRANSACT2_QPATHINFO:
7475 case TRANSACT2_QFILEINFO:
7476 {
7477 START_PROFILE(Trans2_qpathinfo);
7478 call_trans2qfilepathinfo(conn, req, state->call,
7479 &state->param, state->total_param,
7480 &state->data, state->total_data,
7481 state->max_data_return);
7482 END_PROFILE(Trans2_qpathinfo);
7483 break;
7484 }
7485
7486 case TRANSACT2_SETPATHINFO:
7487 case TRANSACT2_SETFILEINFO:
7488 {
7489 START_PROFILE(Trans2_setpathinfo);
7490 call_trans2setfilepathinfo(conn, req, state->call,
7491 &state->param, state->total_param,
7492 &state->data, state->total_data,
7493 state->max_data_return);
7494 END_PROFILE(Trans2_setpathinfo);
7495 break;
7496 }
7497
7498 case TRANSACT2_FINDNOTIFYFIRST:
7499 {
7500 START_PROFILE(Trans2_findnotifyfirst);
7501 call_trans2findnotifyfirst(conn, req,
7502 &state->param, state->total_param,
7503 &state->data, state->total_data,
7504 state->max_data_return);
7505 END_PROFILE(Trans2_findnotifyfirst);
7506 break;
7507 }
7508
7509 case TRANSACT2_FINDNOTIFYNEXT:
7510 {
7511 START_PROFILE(Trans2_findnotifynext);
7512 call_trans2findnotifynext(conn, req,
7513 &state->param, state->total_param,
7514 &state->data, state->total_data,
7515 state->max_data_return);
7516 END_PROFILE(Trans2_findnotifynext);
7517 break;
7518 }
7519
7520 case TRANSACT2_MKDIR:
7521 {
7522 START_PROFILE(Trans2_mkdir);
7523 call_trans2mkdir(conn, req,
7524 &state->param, state->total_param,
7525 &state->data, state->total_data,
7526 state->max_data_return);
7527 END_PROFILE(Trans2_mkdir);
7528 break;
7529 }
7530
7531 case TRANSACT2_GET_DFS_REFERRAL:
7532 {
7533 START_PROFILE(Trans2_get_dfs_referral);
7534 call_trans2getdfsreferral(conn, req,
7535 &state->param, state->total_param,
7536 &state->data, state->total_data,
7537 state->max_data_return);
7538 END_PROFILE(Trans2_get_dfs_referral);
7539 break;
7540 }
7541
7542 case TRANSACT2_IOCTL:
7543 {
7544 START_PROFILE(Trans2_ioctl);
7545 call_trans2ioctl(conn, req,
7546 &state->param, state->total_param,
7547 &state->data, state->total_data,
7548 state->max_data_return);
7549 END_PROFILE(Trans2_ioctl);
7550 break;
7551 }
7552
7553 default:
7554 /* Error in request */
7555 DEBUG(2,("Unknown request %d in trans2 call\n", state->call));
7556 reply_doserror(req, ERRSRV,ERRerror);
7557 }
7558 }
7559
7560 /****************************************************************************
7561 Reply to a SMBtrans2.
7562 ****************************************************************************/
7563
7564 void reply_trans2(struct smb_request *req)
7565 {
7566 connection_struct *conn = req->conn;
7567 unsigned int dsoff;
7568 unsigned int dscnt;
7569 unsigned int psoff;
7570 unsigned int pscnt;
7571 unsigned int tran_call;
7572 unsigned int size;
7573 unsigned int av_size;
7574 struct trans_state *state;
7575 NTSTATUS result;
7576
7577 START_PROFILE(SMBtrans2);
7578
7579 if (req->wct < 14) {
7580 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7581 END_PROFILE(SMBtrans2);
7582 return;
7583 }
7584
7585 dsoff = SVAL(req->inbuf, smb_dsoff);
7586 dscnt = SVAL(req->inbuf, smb_dscnt);
7587 psoff = SVAL(req->inbuf, smb_psoff);
7588 pscnt = SVAL(req->inbuf, smb_pscnt);
7589 tran_call = SVAL(req->inbuf, smb_setup0);
7590 size = smb_len(req->inbuf) + 4;
7591 av_size = smb_len(req->inbuf);
7592
7593 result = allow_new_trans(conn->pending_trans, req->mid);
7594 if (!NT_STATUS_IS_OK(result)) {
7595 DEBUG(2, ("Got invalid trans2 request: %s\n",
7596 nt_errstr(result)));
7597 reply_nterror(req, result);
7598 END_PROFILE(SMBtrans2);
7599 return;
7600 }
7601
7602 if (IS_IPC(conn)) {
7603 switch (tran_call) {
7604 /* List the allowed trans2 calls on IPC$ */
7605 case TRANSACT2_OPEN:
7606 case TRANSACT2_GET_DFS_REFERRAL:
7607 case TRANSACT2_QFILEINFO:
7608 case TRANSACT2_QFSINFO:
7609 case TRANSACT2_SETFSINFO:
7610 break;
7611 default:
7612 reply_doserror(req, ERRSRV, ERRaccess);
7613 END_PROFILE(SMBtrans2);
7614 return;
7615 }
7616 }
7617
7618 if ((state = TALLOC_P(conn->mem_ctx, struct trans_state)) == NULL) {
7619 DEBUG(0, ("talloc failed\n"));
7620 reply_nterror(req, NT_STATUS_NO_MEMORY);
7621 END_PROFILE(SMBtrans2);
7622 return;
7623 }
7624
7625 state->cmd = SMBtrans2;
7626
7627 state->mid = req->mid;
7628 state->vuid = req->vuid;
7629 state->setup_count = SVAL(req->inbuf, smb_suwcnt);
7630 state->setup = NULL;
7631 state->total_param = SVAL(req->inbuf, smb_tpscnt);
7632 state->param = NULL;
7633 state->total_data = SVAL(req->inbuf, smb_tdscnt);
7634 state->data = NULL;
7635 state->max_param_return = SVAL(req->inbuf, smb_mprcnt);
7636 state->max_data_return = SVAL(req->inbuf, smb_mdrcnt);
7637 state->max_setup_return = SVAL(req->inbuf, smb_msrcnt);
7638 state->close_on_completion = BITSETW(req->inbuf+smb_vwv5,0);
7639 state->one_way = BITSETW(req->inbuf+smb_vwv5,1);
7640
7641 state->call = tran_call;
7642
7643 /* All trans2 messages we handle have smb_sucnt == 1 - ensure this
7644 is so as a sanity check */
7645 if (state->setup_count != 1) {
7646 /*
7647 * Need to have rc=0 for ioctl to get job id for OS/2.
7648 * Network printing will fail if function is not successful.
7649 * Similar function in reply.c will be used if protocol
7650 * is LANMAN1.0 instead of LM1.2X002.
7651 * Until DosPrintSetJobInfo with PRJINFO3 is supported,
7652 * outbuf doesn't have to be set(only job id is used).
7653 */
7654 if ( (state->setup_count == 4)
7655 && (tran_call == TRANSACT2_IOCTL)
7656 && (SVAL(req->inbuf,(smb_setup+4)) == LMCAT_SPL)
7657 && (SVAL(req->inbuf,(smb_setup+6)) == LMFUNC_GETJOBID)) {
7658 DEBUG(2,("Got Trans2 DevIOctl jobid\n"));
7659 } else {
7660 DEBUG(2,("Invalid smb_sucnt in trans2 call(%u)\n",state->setup_count));
7661 DEBUG(2,("Transaction is %d\n",tran_call));
7662 TALLOC_FREE(state);
7663 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7664 END_PROFILE(SMBtrans2);
7665 return;
7666 }
7667 }
7668
7669 if ((dscnt > state->total_data) || (pscnt > state->total_param))
7670 goto bad_param;
7671
7672 if (state->total_data) {
7673 /* Can't use talloc here, the core routines do realloc on the
7674 * params and data. */
7675 state->data = (char *)SMB_MALLOC(state->total_data);
7676 if (state->data == NULL) {
7677 DEBUG(0,("reply_trans2: data malloc fail for %u "
7678 "bytes !\n", (unsigned int)state->total_data));
7679 TALLOC_FREE(state);
7680 reply_nterror(req, NT_STATUS_NO_MEMORY);
7681 END_PROFILE(SMBtrans2);
7682 return;
7683 }
7684
7685 if (dscnt > state->total_data ||
7686 dsoff+dscnt < dsoff) {
7687 goto bad_param;
7688 }
7689
7690 if (dsoff > av_size ||
7691 dscnt > av_size ||
7692 dsoff+dscnt > av_size) {
7693 goto bad_param;
7694 }
7695
7696 memcpy(state->data,smb_base(req->inbuf)+dsoff,dscnt);
7697 }
7698
7699 if (state->total_param) {
7700 /* Can't use talloc here, the core routines do realloc on the
7701 * params and data. */
7702 state->param = (char *)SMB_MALLOC(state->total_param);
7703 if (state->param == NULL) {
7704 DEBUG(0,("reply_trans: param malloc fail for %u "
7705 "bytes !\n", (unsigned int)state->total_param));
7706 SAFE_FREE(state->data);
7707 TALLOC_FREE(state);
7708 reply_nterror(req, NT_STATUS_NO_MEMORY);
7709 END_PROFILE(SMBtrans2);
7710 return;
7711 }
7712
7713 if (pscnt > state->total_param ||
7714 psoff+pscnt < psoff) {
7715 goto bad_param;
7716 }
7717
7718 if (psoff > av_size ||
7719 pscnt > av_size ||
7720 psoff+pscnt > av_size) {
7721 goto bad_param;
7722 }
7723
7724 memcpy(state->param,smb_base(req->inbuf)+psoff,pscnt);
7725 }
7726
7727 state->received_data = dscnt;
7728 state->received_param = pscnt;
7729
7730 if ((state->received_param == state->total_param) &&
7731 (state->received_data == state->total_data)) {
7732
7733 handle_trans2(conn, req, state);
7734
7735 SAFE_FREE(state->data);
7736 SAFE_FREE(state->param);
7737 TALLOC_FREE(state);
7738 END_PROFILE(SMBtrans2);
7739 return;
7740 }
7741
7742 DLIST_ADD(conn->pending_trans, state);
7743
7744 /* We need to send an interim response then receive the rest
7745 of the parameter/data bytes */
7746 reply_outbuf(req, 0, 0);
7747 show_msg((char *)req->outbuf);
7748 END_PROFILE(SMBtrans2);
7749 return;
7750
7751 bad_param:
7752
7753 DEBUG(0,("reply_trans2: invalid trans parameters\n"));
7754 SAFE_FREE(state->data);
7755 SAFE_FREE(state->param);
7756 TALLOC_FREE(state);
7757 END_PROFILE(SMBtrans2);
7758 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7759 }
7760
7761
7762 /****************************************************************************
7763 Reply to a SMBtranss2
7764 ****************************************************************************/
7765
7766 void reply_transs2(struct smb_request *req)
7767 {
7768 connection_struct *conn = req->conn;
7769 unsigned int pcnt,poff,dcnt,doff,pdisp,ddisp;
7770 struct trans_state *state;
7771 unsigned int size;
7772 unsigned int av_size;
7773
7774 START_PROFILE(SMBtranss2);
7775
7776 show_msg((char *)req->inbuf);
7777
7778 if (req->wct < 8) {
7779 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7780 END_PROFILE(SMBtranss2);
7781 return;
7782 }
7783
7784 size = smb_len(req->inbuf)+4;
7785 av_size = smb_len(req->inbuf);
7786
7787 for (state = conn->pending_trans; state != NULL;
7788 state = state->next) {
7789 if (state->mid == req->mid) {
7790 break;
7791 }
7792 }
7793
7794 if ((state == NULL) || (state->cmd != SMBtrans2)) {
7795 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7796 END_PROFILE(SMBtranss2);
7797 return;
7798 }
7799
7800 /* Revise state->total_param and state->total_data in case they have
7801 changed downwards */
7802
7803 if (SVAL(req->inbuf, smb_tpscnt) < state->total_param)
7804 state->total_param = SVAL(req->inbuf, smb_tpscnt);
7805 if (SVAL(req->inbuf, smb_tdscnt) < state->total_data)
7806 state->total_data = SVAL(req->inbuf, smb_tdscnt);
7807
7808 pcnt = SVAL(req->inbuf, smb_spscnt);
7809 poff = SVAL(req->inbuf, smb_spsoff);
7810 pdisp = SVAL(req->inbuf, smb_spsdisp);
7811
7812 dcnt = SVAL(req->inbuf, smb_sdscnt);
7813 doff = SVAL(req->inbuf, smb_sdsoff);
7814 ddisp = SVAL(req->inbuf, smb_sdsdisp);
7815
7816 state->received_param += pcnt;
7817 state->received_data += dcnt;
7818
7819 if ((state->received_data > state->total_data) ||
7820 (state->received_param > state->total_param))
7821 goto bad_param;
7822
7823 if (pcnt) {
7824 if (pdisp > state->total_param ||
7825 pcnt > state->total_param ||
7826 pdisp+pcnt > state->total_param ||
7827 pdisp+pcnt < pdisp) {
7828 goto bad_param;
7829 }
7830
7831 if (poff > av_size ||
7832 pcnt > av_size ||
7833 poff+pcnt > av_size ||
7834 poff+pcnt < poff) {
7835 goto bad_param;
7836 }
7837
7838 memcpy(state->param+pdisp,smb_base(req->inbuf)+poff,
7839 pcnt);
7840 }
7841
7842 if (dcnt) {
7843 if (ddisp > state->total_data ||
7844 dcnt > state->total_data ||
7845 ddisp+dcnt > state->total_data ||
7846 ddisp+dcnt < ddisp) {
7847 goto bad_param;
7848 }
7849
7850 if (doff > av_size ||
7851 dcnt > av_size ||
7852 doff+dcnt > av_size ||
7853 doff+dcnt < doff) {
7854 goto bad_param;
7855 }
7856
7857 memcpy(state->data+ddisp, smb_base(req->inbuf)+doff,
7858 dcnt);
7859 }
7860
7861 if ((state->received_param < state->total_param) ||
7862 (state->received_data < state->total_data)) {
7863 END_PROFILE(SMBtranss2);
7864 return;
7865 }
7866
7867 /*
7868 * construct_reply_common will copy smb_com from inbuf to
7869 * outbuf. SMBtranss2 is wrong here.
7870 */
7871 SCVAL(req->inbuf,smb_com,SMBtrans2);
7872
7873 handle_trans2(conn, req, state);
7874
7875 DLIST_REMOVE(conn->pending_trans, state);
7876 SAFE_FREE(state->data);
7877 SAFE_FREE(state->param);
7878 TALLOC_FREE(state);
7879
7880 END_PROFILE(SMBtranss2);
7881 return;
7882
7883 bad_param:
7884
7885 DEBUG(0,("reply_transs2: invalid trans parameters\n"));
7886 DLIST_REMOVE(conn->pending_trans, state);
7887 SAFE_FREE(state->data);
7888 SAFE_FREE(state->param);
7889 TALLOC_FREE(state);
7890 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7891 END_PROFILE(SMBtranss2);
7892 return;
7893 }
Samba GIT mirror