?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
s4:password_hash LDB module - introduce a "userPassword" flag which enables/disables...
[Samba.git] / source3 / smbd / filename.c
blob7bc86074008b999abe859b028f658cfd161f15fa
1 /*
2 Unix SMB/CIFS implementation.
3 filename handling routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Jeremy Allison 1999-2007
6 Copyright (C) Ying Chen 2000
7 Copyright (C) Volker Lendecke 2007
8
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
13
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
18
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
21 */
22
23 /*
24 * New hash table stat cache code added by Ying Chen.
25 */
26
27 #include "includes.h"
28 #include "fake_file.h"
29
30 static NTSTATUS build_stream_path(TALLOC_CTX *mem_ctx,
31 connection_struct *conn,
32 const char *orig_path,
33 struct smb_filename *smb_fname);
34
35 /****************************************************************************
36 Mangle the 2nd name and check if it is then equal to the first name.
37 ****************************************************************************/
38
39 static bool mangled_equal(const char *name1,
40 const char *name2,
41 const struct share_params *p)
42 {
43 char mname[13];
44
45 if (!name_to_8_3(name2, mname, False, p)) {
46 return False;
47 }
48 return strequal(name1, mname);
49 }
50
51 /****************************************************************************
52 Cope with the differing wildcard and non-wildcard error cases.
53 ****************************************************************************/
54
55 static NTSTATUS determine_path_error(const char *name,
56 bool allow_wcard_last_component)
57 {
58 const char *p;
59
60 if (!allow_wcard_last_component) {
61 /* Error code within a pathname. */
62 return NT_STATUS_OBJECT_PATH_NOT_FOUND;
63 }
64
65 /* We're terminating here so we
66 * can be a little slower and get
67 * the error code right. Windows
68 * treats the last part of the pathname
69 * separately I think, so if the last
70 * component is a wildcard then we treat
71 * this ./ as "end of component" */
72
73 p = strchr(name, '/');
74
75 if (!p && (ms_has_wild(name) || ISDOT(name))) {
76 /* Error code at the end of a pathname. */
77 return NT_STATUS_OBJECT_NAME_INVALID;
78 } else {
79 /* Error code within a pathname. */
80 return NT_STATUS_OBJECT_PATH_NOT_FOUND;
81 }
82 }
83
84 static NTSTATUS check_for_dot_component(const struct smb_filename *smb_fname)
85 {
86 /* Ensure we catch all names with in "/."
87 this is disallowed under Windows and
88 in POSIX they've already been removed. */
89 const char *p = strstr(smb_fname->base_name, "/."); /*mb safe*/
90 if (p) {
91 if (p[2] == '/') {
92 /* Error code within a pathname. */
93 return NT_STATUS_OBJECT_PATH_NOT_FOUND;
94 } else if (p[2] == '\0') {
95 /* Error code at the end of a pathname. */
96 return NT_STATUS_OBJECT_NAME_INVALID;
97 }
98 }
99 return NT_STATUS_OK;
100 }
101
102 /****************************************************************************
103 Optimization for common case where the missing part
104 is in the last component and the client already
105 sent the correct case.
106 Returns NT_STATUS_OK to mean continue the tree walk
107 (possibly with modified start pointer).
108 Any other NT_STATUS_XXX error means terminate the path
109 lookup here.
110 ****************************************************************************/
111
112 static NTSTATUS check_parent_exists(TALLOC_CTX *ctx,
113 connection_struct *conn,
114 bool posix_pathnames,
115 struct smb_filename *smb_fname,
116 char **pp_dirpath,
117 char **pp_start)
118 {
119 struct smb_filename parent_fname;
120 const char *last_component = NULL;
121 NTSTATUS status;
122 int ret;
123
124 ZERO_STRUCT(parent_fname);
125 if (!parent_dirname(ctx, smb_fname->base_name,
126 &parent_fname.base_name,
127 &last_component)) {
128 return NT_STATUS_NO_MEMORY;
129 }
130
131 /*
132 * If there was no parent component in
133 * smb_fname->base_name of the parent name
134 * contained a wildcard then don't do this
135 * optimization.
136 */
137 if ((smb_fname->base_name == last_component) ||
138 ms_has_wild(parent_fname.base_name)) {
139 return NT_STATUS_OK;
140 }
141
142 if (posix_pathnames) {
143 ret = SMB_VFS_LSTAT(conn, &parent_fname);
144 } else {
145 ret = SMB_VFS_STAT(conn, &parent_fname);
146 }
147
148 /* If the parent stat failed, just continue
149 with the normal tree walk. */
150
151 if (ret == -1) {
152 return NT_STATUS_OK;
153 }
154
155 status = check_for_dot_component(&parent_fname);
156 if (!NT_STATUS_IS_OK(status)) {
157 return status;
158 }
159
160 /* Parent exists - set "start" to be the
161 * last compnent to shorten the tree walk. */
162
163 /*
164 * Safe to use CONST_DISCARD
165 * here as last_component points
166 * into our smb_fname->base_name.
167 */
168 *pp_start = CONST_DISCARD(char *,last_component);
169
170 /* Update dirpath. */
171 TALLOC_FREE(*pp_dirpath);
172 *pp_dirpath = talloc_strdup(ctx, parent_fname.base_name);
173 if (!*pp_dirpath) {
174 return NT_STATUS_NO_MEMORY;
175 }
176
177 DEBUG(5,("check_parent_exists: name "
178 "= %s, dirpath = %s, "
179 "start = %s\n",
180 smb_fname->base_name,
181 *pp_dirpath,
182 *pp_start));
183
184 return NT_STATUS_OK;
185 }
186
187 /****************************************************************************
188 This routine is called to convert names from the dos namespace to unix
189 namespace. It needs to handle any case conversions, mangling, format changes,
190 streams etc.
191
192 We assume that we have already done a chdir() to the right "root" directory
193 for this service.
194
195 The function will return an NTSTATUS error if some part of the name except for
196 the last part cannot be resolved, else NT_STATUS_OK.
197
198 Note NT_STATUS_OK doesn't mean the name exists or is valid, just that we
199 didn't get any fatal errors that should immediately terminate the calling SMB
200 processing whilst resolving.
201
202 If the UCF_SAVE_LCOMP flag is passed in, then the unmodified last component
203 of the pathname is set in smb_filename->original_lcomp.
204
205 If UCF_ALWAYS_ALLOW_WCARD_LCOMP is passed in, then a MS wildcard was detected
206 and should be allowed in the last component of the path only.
207
208 If the orig_path was a stream, smb_filename->base_name will point to the base
209 filename, and smb_filename->stream_name will point to the stream name. If
210 orig_path was not a stream, then smb_filename->stream_name will be NULL.
211
212 On exit from unix_convert, the smb_filename->st stat struct will be populated
213 if the file exists and was found, if not this stat struct will be filled with
214 zeros (and this can be detected by checking for nlinks = 0, which can never be
215 true for any file).
216 ****************************************************************************/
217
218 NTSTATUS unix_convert(TALLOC_CTX *ctx,
219 connection_struct *conn,
220 const char *orig_path,
221 struct smb_filename **smb_fname_out,
222 uint32_t ucf_flags)
223 {
224 struct smb_filename *smb_fname = NULL;
225 char *start, *end;
226 char *dirpath = NULL;
227 char *stream = NULL;
228 bool component_was_mangled = False;
229 bool name_has_wildcard = False;
230 bool posix_pathnames = false;
231 bool allow_wcard_last_component =
232 (ucf_flags & UCF_ALWAYS_ALLOW_WCARD_LCOMP);
233 bool save_last_component = ucf_flags & UCF_SAVE_LCOMP;
234 NTSTATUS status;
235 int ret = -1;
236
237 *smb_fname_out = NULL;
238
239 smb_fname = talloc_zero(ctx, struct smb_filename);
240 if (smb_fname == NULL) {
241 return NT_STATUS_NO_MEMORY;
242 }
243
244 if (conn->printer) {
245 /* we don't ever use the filenames on a printer share as a
246 filename - so don't convert them */
247 if (!(smb_fname->base_name = talloc_strdup(smb_fname,
248 orig_path))) {
249 status = NT_STATUS_NO_MEMORY;
250 goto err;
251 }
252 goto done;
253 }
254
255 DEBUG(5, ("unix_convert called on file \"%s\"\n", orig_path));
256
257 /*
258 * Conversion to basic unix format is already done in
259 * check_path_syntax().
260 */
261
262 /*
263 * Names must be relative to the root of the service - any leading /.
264 * and trailing /'s should have been trimmed by check_path_syntax().
265 */
266
267 #ifdef DEVELOPER
268 SMB_ASSERT(*orig_path != '/');
269 #endif
270
271 /*
272 * If we trimmed down to a single '\0' character
273 * then we should use the "." directory to avoid
274 * searching the cache, but not if we are in a
275 * printing share.
276 * As we know this is valid we can return true here.
277 */
278
279 if (!*orig_path) {
280 if (!(smb_fname->base_name = talloc_strdup(smb_fname, "."))) {
281 status = NT_STATUS_NO_MEMORY;
282 goto err;
283 }
284 if (SMB_VFS_STAT(conn, smb_fname) != 0) {
285 status = map_nt_error_from_unix(errno);
286 goto err;
287 }
288 DEBUG(5, ("conversion finished \"\" -> %s\n",
289 smb_fname->base_name));
290 goto done;
291 }
292
293 if (orig_path[0] == '.' && (orig_path[1] == '/' ||
294 orig_path[1] == '\0')) {
295 /* Start of pathname can't be "." only. */
296 if (orig_path[1] == '\0' || orig_path[2] == '\0') {
297 status = NT_STATUS_OBJECT_NAME_INVALID;
298 } else {
299 status =determine_path_error(&orig_path[2],
300 allow_wcard_last_component);
301 }
302 goto err;
303 }
304
305 /* Start with the full orig_path as given by the caller. */
306 if (!(smb_fname->base_name = talloc_strdup(smb_fname, orig_path))) {
307 DEBUG(0, ("talloc_strdup failed\n"));
308 status = NT_STATUS_NO_MEMORY;
309 goto err;
310 }
311
312 /*
313 * Large directory fix normalization. If we're case sensitive, and
314 * the case preserving parameters are set to "no", normalize the case of
315 * the incoming filename from the client WHETHER IT EXISTS OR NOT !
316 * This is in conflict with the current (3.0.20) man page, but is
317 * what people expect from the "large directory howto". I'll update
318 * the man page. Thanks to jht@samba.org for finding this. JRA.
319 */
320
321 if (conn->case_sensitive && !conn->case_preserve &&
322 !conn->short_case_preserve) {
323 strnorm(smb_fname->base_name, lp_defaultcase(SNUM(conn)));
324 }
325
326 /*
327 * Ensure saved_last_component is valid even if file exists.
328 */
329
330 if(save_last_component) {
331 end = strrchr_m(smb_fname->base_name, '/');
332 if (end) {
333 smb_fname->original_lcomp = talloc_strdup(smb_fname,
334 end + 1);
335 } else {
336 smb_fname->original_lcomp =
337 talloc_strdup(smb_fname, smb_fname->base_name);
338 }
339 if (smb_fname->original_lcomp == NULL) {
340 status = NT_STATUS_NO_MEMORY;
341 goto err;
342 }
343 }
344
345 posix_pathnames = (lp_posix_pathnames() ||
346 (ucf_flags & UCF_POSIX_PATHNAMES));
347
348 /*
349 * Strip off the stream, and add it back when we're done with the
350 * base_name.
351 */
352 if (!posix_pathnames) {
353 stream = strchr_m(smb_fname->base_name, ':');
354
355 if (stream != NULL) {
356 char *tmp = talloc_strdup(smb_fname, stream);
357 if (tmp == NULL) {
358 status = NT_STATUS_NO_MEMORY;
359 goto err;
360 }
361 /*
362 * Since this is actually pointing into
363 * smb_fname->base_name this truncates base_name.
364 */
365 *stream = '\0';
366 stream = tmp;
367 }
368 }
369
370 start = smb_fname->base_name;
371
372 /*
373 * If we're providing case insentive semantics or
374 * the underlying filesystem is case insensitive,
375 * then a case-normalized hit in the stat-cache is
376 * authoratitive. JRA.
377 *
378 * Note: We're only checking base_name. The stream_name will be
379 * added and verified in build_stream_path().
380 */
381
382 if((!conn->case_sensitive || !(conn->fs_capabilities &
383 FILE_CASE_SENSITIVE_SEARCH)) &&
384 stat_cache_lookup(conn, &smb_fname->base_name, &dirpath, &start,
385 &smb_fname->st)) {
386 goto done;
387 }
388
389 /*
390 * Make sure "dirpath" is an allocated string, we use this for
391 * building the directories with asprintf and free it.
392 */
393
394 if ((dirpath == NULL) && (!(dirpath = talloc_strdup(ctx,"")))) {
395 DEBUG(0, ("talloc_strdup failed\n"));
396 status = NT_STATUS_NO_MEMORY;
397 goto err;
398 }
399
400 /*
401 * If we have a wildcard we must walk the path to
402 * find where the error is, even if case sensitive
403 * is true.
404 */
405
406 name_has_wildcard = ms_has_wild(smb_fname->base_name);
407 if (name_has_wildcard && !allow_wcard_last_component) {
408 /* Wildcard not valid anywhere. */
409 status = NT_STATUS_OBJECT_NAME_INVALID;
410 goto fail;
411 }
412
413 DEBUG(5,("unix_convert begin: name = %s, dirpath = %s, start = %s\n",
414 smb_fname->base_name, dirpath, start));
415
416 if (!name_has_wildcard) {
417 /*
418 * stat the name - if it exists then we can add the stream back (if
419 * there was one) and be done!
420 */
421
422 if (posix_pathnames) {
423 ret = SMB_VFS_LSTAT(conn, smb_fname);
424 } else {
425 ret = SMB_VFS_STAT(conn, smb_fname);
426 }
427
428 if (ret == 0) {
429 status = check_for_dot_component(smb_fname);
430 if (!NT_STATUS_IS_OK(status)) {
431 goto fail;
432 }
433 /* Add the path (not including the stream) to the cache. */
434 stat_cache_add(orig_path, smb_fname->base_name,
435 conn->case_sensitive);
436 DEBUG(5,("conversion of base_name finished %s -> %s\n",
437 orig_path, smb_fname->base_name));
438 goto done;
439 }
440
441 if (errno == ENOENT) {
442 /* Optimization when creating a new file - only
443 the last component doesn't exist. */
444 status = check_parent_exists(ctx,
445 conn,
446 posix_pathnames,
447 smb_fname,
448 &dirpath,
449 &start);
450 if (!NT_STATUS_IS_OK(status)) {
451 goto fail;
452 }
453 }
454
455 /*
456 * A special case - if we don't have any wildcards or mangling chars and are case
457 * sensitive or the underlying filesystem is case insentive then searching
458 * won't help.
459 */
460
461 if ((conn->case_sensitive || !(conn->fs_capabilities &
462 FILE_CASE_SENSITIVE_SEARCH)) &&
463 !mangle_is_mangled(smb_fname->base_name, conn->params)) {
464
465 status = check_for_dot_component(smb_fname);
466 if (!NT_STATUS_IS_OK(status)) {
467 goto fail;
468 }
469
470 /*
471 * The stat failed. Could be ok as it could be
472 * a new file.
473 */
474
475 if (errno == ENOTDIR || errno == ELOOP) {
476 status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
477 goto fail;
478 } else if (errno == ENOENT) {
479 /*
480 * Was it a missing last component ?
481 * or a missing intermediate component ?
482 */
483 struct smb_filename parent_fname;
484 const char *last_component = NULL;
485
486 ZERO_STRUCT(parent_fname);
487 if (!parent_dirname(ctx, smb_fname->base_name,
488 &parent_fname.base_name,
489 &last_component)) {
490 status = NT_STATUS_NO_MEMORY;
491 goto fail;
492 }
493 if (posix_pathnames) {
494 ret = SMB_VFS_LSTAT(conn, &parent_fname);
495 } else {
496 ret = SMB_VFS_STAT(conn, &parent_fname);
497 }
498 if (ret == -1) {
499 if (errno == ENOTDIR ||
500 errno == ENOENT ||
501 errno == ELOOP) {
502 status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
503 goto fail;
504 }
505 }
506
507 /*
508 * Missing last component is ok - new file.
509 * Also deal with permission denied elsewhere.
510 * Just drop out to done.
511 */
512 goto done;
513 }
514 }
515 } else {
516 /*
517 * We have a wildcard in the pathname.
518 *
519 * Optimization for common case where the wildcard
520 * is in the last component and the client already
521 * sent the correct case.
522 */
523 status = check_parent_exists(ctx,
524 conn,
525 posix_pathnames,
526 smb_fname,
527 &dirpath,
528 &start);
529 if (!NT_STATUS_IS_OK(status)) {
530 goto fail;
531 }
532 }
533
534 /*
535 * is_mangled() was changed to look at an entire pathname, not
536 * just a component. JRA.
537 */
538
539 if (mangle_is_mangled(start, conn->params)) {
540 component_was_mangled = True;
541 }
542
543 /*
544 * Now we need to recursively match the name against the real
545 * directory structure.
546 */
547
548 /*
549 * Match each part of the path name separately, trying the names
550 * as is first, then trying to scan the directory for matching names.
551 */
552
553 for (; start ; start = (end?end+1:(char *)NULL)) {
554 /*
555 * Pinpoint the end of this section of the filename.
556 */
557 /* mb safe. '/' can't be in any encoded char. */
558 end = strchr(start, '/');
559
560 /*
561 * Chop the name at this point.
562 */
563 if (end) {
564 *end = 0;
565 }
566
567 if (save_last_component) {
568 TALLOC_FREE(smb_fname->original_lcomp);
569 smb_fname->original_lcomp = talloc_strdup(smb_fname,
570 end ? end + 1 : start);
571 if (!smb_fname->original_lcomp) {
572 DEBUG(0, ("talloc failed\n"));
573 status = NT_STATUS_NO_MEMORY;
574 goto err;
575 }
576 }
577
578 /* The name cannot have a component of "." */
579
580 if (ISDOT(start)) {
581 if (!end) {
582 /* Error code at the end of a pathname. */
583 status = NT_STATUS_OBJECT_NAME_INVALID;
584 } else {
585 status = determine_path_error(end+1,
586 allow_wcard_last_component);
587 }
588 goto fail;
589 }
590
591 /* The name cannot have a wildcard if it's not
592 the last component. */
593
594 name_has_wildcard = ms_has_wild(start);
595
596 /* Wildcards never valid within a pathname. */
597 if (name_has_wildcard && end) {
598 status = NT_STATUS_OBJECT_NAME_INVALID;
599 goto fail;
600 }
601
602 /* Skip the stat call if it's a wildcard end. */
603 if (name_has_wildcard) {
604 DEBUG(5,("Wildcard %s\n",start));
605 goto done;
606 }
607
608 /*
609 * Check if the name exists up to this point.
610 */
611
612 if (posix_pathnames) {
613 ret = SMB_VFS_LSTAT(conn, smb_fname);
614 } else {
615 ret = SMB_VFS_STAT(conn, smb_fname);
616 }
617
618 if (ret == 0) {
619 /*
620 * It exists. it must either be a directory or this must
621 * be the last part of the path for it to be OK.
622 */
623 if (end && !S_ISDIR(smb_fname->st.st_ex_mode)) {
624 /*
625 * An intermediate part of the name isn't
626 * a directory.
627 */
628 DEBUG(5,("Not a dir %s\n",start));
629 *end = '/';
630 /*
631 * We need to return the fact that the
632 * intermediate name resolution failed. This
633 * is used to return an error of ERRbadpath
634 * rather than ERRbadfile. Some Windows
635 * applications depend on the difference between
636 * these two errors.
637 */
638 status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
639 goto fail;
640 }
641
642 } else {
643 char *found_name = NULL;
644
645 /* Stat failed - ensure we don't use it. */
646 SET_STAT_INVALID(smb_fname->st);
647
648 /*
649 * Reset errno so we can detect
650 * directory open errors.
651 */
652 errno = 0;
653
654 /*
655 * Try to find this part of the path in the directory.
656 */
657
658 if (name_has_wildcard ||
659 (get_real_filename(conn, dirpath, start,
660 talloc_tos(),
661 &found_name) == -1)) {
662 char *unmangled;
663
664 if (end) {
665 /*
666 * An intermediate part of the name
667 * can't be found.
668 */
669 DEBUG(5,("Intermediate not found %s\n",
670 start));
671 *end = '/';
672
673 /*
674 * We need to return the fact that the
675 * intermediate name resolution failed.
676 * This is used to return an error of
677 * ERRbadpath rather than ERRbadfile.
678 * Some Windows applications depend on
679 * the difference between these two
680 * errors.
681 */
682
683 /*
684 * ENOENT, ENOTDIR and ELOOP all map
685 * to NT_STATUS_OBJECT_PATH_NOT_FOUND
686 * in the filename walk.
687 */
688
689 if (errno == ENOENT ||
690 errno == ENOTDIR ||
691 errno == ELOOP) {
692 status =
693 NT_STATUS_OBJECT_PATH_NOT_FOUND;
694 }
695 else {
696 status =
697 map_nt_error_from_unix(errno);
698 }
699 goto fail;
700 }
701
702 /*
703 * ENOENT/EACCESS are the only valid errors
704 * here. EACCESS needs handling here for
705 * "dropboxes", i.e. directories where users
706 * can only put stuff with permission -wx.
707 */
708 if ((errno != 0) && (errno != ENOENT)
709 && (errno != EACCES)) {
710 /*
711 * ENOTDIR and ELOOP both map to
712 * NT_STATUS_OBJECT_PATH_NOT_FOUND
713 * in the filename walk.
714 */
715 if (errno == ENOTDIR ||
716 errno == ELOOP) {
717 status =
718 NT_STATUS_OBJECT_PATH_NOT_FOUND;
719 } else {
720 status =
721 map_nt_error_from_unix(errno);
722 }
723 goto fail;
724 }
725
726 /*
727 * Just the last part of the name doesn't exist.
728 * We need to strupper() or strlower() it as
729 * this conversion may be used for file creation
730 * purposes. Fix inspired by
731 * Thomas Neumann <t.neumann@iku-ag.de>.
732 */
733 if (!conn->case_preserve ||
734 (mangle_is_8_3(start, False,
735 conn->params) &&
736 !conn->short_case_preserve)) {
737 strnorm(start,
738 lp_defaultcase(SNUM(conn)));
739 }
740
741 /*
742 * check on the mangled stack to see if we can
743 * recover the base of the filename.
744 */
745
746 if (mangle_is_mangled(start, conn->params)
747 && mangle_lookup_name_from_8_3(ctx,
748 start,
749 &unmangled,
750 conn->params)) {
751 char *tmp;
752 size_t start_ofs =
753 start - smb_fname->base_name;
754
755 if (*dirpath != '\0') {
756 tmp = talloc_asprintf(
757 smb_fname, "%s/%s",
758 dirpath, unmangled);
759 TALLOC_FREE(unmangled);
760 }
761 else {
762 tmp = unmangled;
763 }
764 if (tmp == NULL) {
765 DEBUG(0, ("talloc failed\n"));
766 status = NT_STATUS_NO_MEMORY;
767 goto err;
768 }
769 TALLOC_FREE(smb_fname->base_name);
770 smb_fname->base_name = tmp;
771 start =
772 smb_fname->base_name + start_ofs;
773 end = start + strlen(start);
774 }
775
776 DEBUG(5,("New file %s\n",start));
777 goto done;
778 }
779
780
781 /*
782 * Restore the rest of the string. If the string was
783 * mangled the size may have changed.
784 */
785 if (end) {
786 char *tmp;
787 size_t start_ofs =
788 start - smb_fname->base_name;
789
790 if (*dirpath != '\0') {
791 tmp = talloc_asprintf(smb_fname,
792 "%s/%s/%s", dirpath,
793 found_name, end+1);
794 }
795 else {
796 tmp = talloc_asprintf(smb_fname,
797 "%s/%s", found_name,
798 end+1);
799 }
800 if (tmp == NULL) {
801 DEBUG(0, ("talloc_asprintf failed\n"));
802 status = NT_STATUS_NO_MEMORY;
803 goto err;
804 }
805 TALLOC_FREE(smb_fname->base_name);
806 smb_fname->base_name = tmp;
807 start = smb_fname->base_name + start_ofs;
808 end = start + strlen(found_name);
809 *end = '\0';
810 } else {
811 char *tmp;
812 size_t start_ofs =
813 start - smb_fname->base_name;
814
815 if (*dirpath != '\0') {
816 tmp = talloc_asprintf(smb_fname,
817 "%s/%s", dirpath,
818 found_name);
819 } else {
820 tmp = talloc_strdup(smb_fname,
821 found_name);
822 }
823 if (tmp == NULL) {
824 DEBUG(0, ("talloc failed\n"));
825 status = NT_STATUS_NO_MEMORY;
826 goto err;
827 }
828 TALLOC_FREE(smb_fname->base_name);
829 smb_fname->base_name = tmp;
830 start = smb_fname->base_name + start_ofs;
831
832 /*
833 * We just scanned for, and found the end of
834 * the path. We must return a valid stat struct
835 * if it exists. JRA.
836 */
837
838 if (posix_pathnames) {
839 ret = SMB_VFS_LSTAT(conn, smb_fname);
840 } else {
841 ret = SMB_VFS_STAT(conn, smb_fname);
842 }
843
844 if (ret != 0) {
845 SET_STAT_INVALID(smb_fname->st);
846 }
847 }
848
849 TALLOC_FREE(found_name);
850 } /* end else */
851
852 #ifdef DEVELOPER
853 /*
854 * This sucks!
855 * We should never provide different behaviors
856 * depending on DEVELOPER!!!
857 */
858 if (VALID_STAT(smb_fname->st)) {
859 bool delete_pending;
860 get_file_infos(vfs_file_id_from_sbuf(conn,
861 &smb_fname->st),
862 &delete_pending, NULL);
863 if (delete_pending) {
864 status = NT_STATUS_DELETE_PENDING;
865 goto fail;
866 }
867 }
868 #endif
869
870 /*
871 * Add to the dirpath that we have resolved so far.
872 */
873
874 if (*dirpath != '\0') {
875 char *tmp = talloc_asprintf(ctx,
876 "%s/%s", dirpath, start);
877 if (!tmp) {
878 DEBUG(0, ("talloc_asprintf failed\n"));
879 status = NT_STATUS_NO_MEMORY;
880 goto err;
881 }
882 TALLOC_FREE(dirpath);
883 dirpath = tmp;
884 }
885 else {
886 TALLOC_FREE(dirpath);
887 if (!(dirpath = talloc_strdup(ctx,start))) {
888 DEBUG(0, ("talloc_strdup failed\n"));
889 status = NT_STATUS_NO_MEMORY;
890 goto err;
891 }
892 }
893
894 /*
895 * Cache the dirpath thus far. Don't cache a name with mangled
896 * or wildcard components as this can change the size.
897 */
898 if(!component_was_mangled && !name_has_wildcard) {
899 stat_cache_add(orig_path, dirpath,
900 conn->case_sensitive);
901 }
902
903 /*
904 * Restore the / that we wiped out earlier.
905 */
906 if (end) {
907 *end = '/';
908 }
909 }
910
911 /*
912 * Cache the full path. Don't cache a name with mangled or wildcard
913 * components as this can change the size.
914 */
915
916 if(!component_was_mangled && !name_has_wildcard) {
917 stat_cache_add(orig_path, smb_fname->base_name,
918 conn->case_sensitive);
919 }
920
921 /*
922 * The name has been resolved.
923 */
924
925 DEBUG(5,("conversion finished %s -> %s\n", orig_path,
926 smb_fname->base_name));
927
928 done:
929 /* Add back the stream if one was stripped off originally. */
930 if (stream != NULL) {
931 smb_fname->stream_name = stream;
932
933 /* Check path now that the base_name has been converted. */
934 status = build_stream_path(ctx, conn, orig_path, smb_fname);
935 if (!NT_STATUS_IS_OK(status)) {
936 goto fail;
937 }
938 }
939 TALLOC_FREE(dirpath);
940 *smb_fname_out = smb_fname;
941 return NT_STATUS_OK;
942 fail:
943 DEBUG(10, ("dirpath = [%s] start = [%s]\n", dirpath, start));
944 if (*dirpath != '\0') {
945 smb_fname->base_name = talloc_asprintf(smb_fname, "%s/%s",
946 dirpath, start);
947 } else {
948 smb_fname->base_name = talloc_strdup(smb_fname, start);
949 }
950 if (!smb_fname->base_name) {
951 DEBUG(0, ("talloc_asprintf failed\n"));
952 status = NT_STATUS_NO_MEMORY;
953 goto err;
954 }
955
956 *smb_fname_out = smb_fname;
957 TALLOC_FREE(dirpath);
958 return status;
959 err:
960 TALLOC_FREE(smb_fname);
961 return status;
962 }
963
964 /****************************************************************************
965 Check a filename - possibly calling check_reduced_name.
966 This is called by every routine before it allows an operation on a filename.
967 It does any final confirmation necessary to ensure that the filename is
968 a valid one for the user to access.
969 ****************************************************************************/
970
971 NTSTATUS check_name(connection_struct *conn, const char *name)
972 {
973 if (IS_VETO_PATH(conn, name)) {
974 /* Is it not dot or dot dot. */
975 if (!((name[0] == '.') && (!name[1] ||
976 (name[1] == '.' && !name[2])))) {
977 DEBUG(5,("check_name: file path name %s vetoed\n",
978 name));
979 return map_nt_error_from_unix(ENOENT);
980 }
981 }
982
983 if (!lp_widelinks(SNUM(conn)) || !lp_symlinks(SNUM(conn))) {
984 NTSTATUS status = check_reduced_name(conn,name);
985 if (!NT_STATUS_IS_OK(status)) {
986 DEBUG(5,("check_name: name %s failed with %s\n",name,
987 nt_errstr(status)));
988 return status;
989 }
990 }
991
992 return NT_STATUS_OK;
993 }
994
995 /****************************************************************************
996 Check if two filenames are equal.
997 This needs to be careful about whether we are case sensitive.
998 ****************************************************************************/
999
1000 static bool fname_equal(const char *name1, const char *name2,
1001 bool case_sensitive)
1002 {
1003 /* Normal filename handling */
1004 if (case_sensitive) {
1005 return(strcmp(name1,name2) == 0);
1006 }
1007
1008 return(strequal(name1,name2));
1009 }
1010
1011 /****************************************************************************
1012 Scan a directory to find a filename, matching without case sensitivity.
1013 If the name looks like a mangled name then try via the mangling functions
1014 ****************************************************************************/
1015
1016 static int get_real_filename_full_scan(connection_struct *conn,
1017 const char *path, const char *name,
1018 bool mangled,
1019 TALLOC_CTX *mem_ctx, char **found_name)
1020 {
1021 struct smb_Dir *cur_dir;
1022 const char *dname = NULL;
1023 char *talloced = NULL;
1024 char *unmangled_name = NULL;
1025 long curpos;
1026
1027 /* handle null paths */
1028 if ((path == NULL) || (*path == 0)) {
1029 path = ".";
1030 }
1031
1032 /* If we have a case-sensitive filesystem, it doesn't do us any
1033 * good to search for a name. If a case variation of the name was
1034 * there, then the original stat(2) would have found it.
1035 */
1036 if (!mangled && !(conn->fs_capabilities & FILE_CASE_SENSITIVE_SEARCH)) {
1037 errno = ENOENT;
1038 return -1;
1039 }
1040
1041 /*
1042 * The incoming name can be mangled, and if we de-mangle it
1043 * here it will not compare correctly against the filename (name2)
1044 * read from the directory and then mangled by the name_to_8_3()
1045 * call. We need to mangle both names or neither.
1046 * (JRA).
1047 *
1048 * Fix for bug found by Dina Fine. If in case sensitive mode then
1049 * the mangle cache is no good (3 letter extension could be wrong
1050 * case - so don't demangle in this case - leave as mangled and
1051 * allow the mangling of the directory entry read (which is done
1052 * case insensitively) to match instead. This will lead to more
1053 * false positive matches but we fail completely without it. JRA.
1054 */
1055
1056 if (mangled && !conn->case_sensitive) {
1057 mangled = !mangle_lookup_name_from_8_3(talloc_tos(), name,
1058 &unmangled_name,
1059 conn->params);
1060 if (!mangled) {
1061 /* Name is now unmangled. */
1062 name = unmangled_name;
1063 }
1064 }
1065
1066 /* open the directory */
1067 if (!(cur_dir = OpenDir(talloc_tos(), conn, path, NULL, 0))) {
1068 DEBUG(3,("scan dir didn't open dir [%s]\n",path));
1069 TALLOC_FREE(unmangled_name);
1070 return -1;
1071 }
1072
1073 /* now scan for matching names */
1074 curpos = 0;
1075 while ((dname = ReadDirName(cur_dir, &curpos, NULL, &talloced))) {
1076
1077 /* Is it dot or dot dot. */
1078 if (ISDOT(dname) || ISDOTDOT(dname)) {
1079 TALLOC_FREE(talloced);
1080 continue;
1081 }
1082
1083 /*
1084 * At this point dname is the unmangled name.
1085 * name is either mangled or not, depending on the state
1086 * of the "mangled" variable. JRA.
1087 */
1088
1089 /*
1090 * Check mangled name against mangled name, or unmangled name
1091 * against unmangled name.
1092 */
1093
1094 if ((mangled && mangled_equal(name,dname,conn->params)) ||
1095 fname_equal(name, dname, conn->case_sensitive)) {
1096 /* we've found the file, change it's name and return */
1097 *found_name = talloc_strdup(mem_ctx, dname);
1098 TALLOC_FREE(unmangled_name);
1099 TALLOC_FREE(cur_dir);
1100 if (!*found_name) {
1101 errno = ENOMEM;
1102 TALLOC_FREE(talloced);
1103 return -1;
1104 }
1105 TALLOC_FREE(talloced);
1106 return 0;
1107 }
1108 TALLOC_FREE(talloced);
1109 }
1110
1111 TALLOC_FREE(unmangled_name);
1112 TALLOC_FREE(cur_dir);
1113 errno = ENOENT;
1114 return -1;
1115 }
1116
1117 /****************************************************************************
1118 Wrapper around the vfs get_real_filename and the full directory scan
1119 fallback.
1120 ****************************************************************************/
1121
1122 int get_real_filename(connection_struct *conn, const char *path,
1123 const char *name, TALLOC_CTX *mem_ctx,
1124 char **found_name)
1125 {
1126 int ret;
1127 bool mangled;
1128
1129 mangled = mangle_is_mangled(name, conn->params);
1130
1131 if (mangled) {
1132 return get_real_filename_full_scan(conn, path, name, mangled,
1133 mem_ctx, found_name);
1134 }
1135
1136 /* Try the vfs first to take advantage of case-insensitive stat. */
1137 ret = SMB_VFS_GET_REAL_FILENAME(conn, path, name, mem_ctx, found_name);
1138
1139 /*
1140 * If the case-insensitive stat was successful, or returned an error
1141 * other than EOPNOTSUPP then there is no need to fall back on the
1142 * full directory scan.
1143 */
1144 if (ret == 0 || (ret == -1 && errno != EOPNOTSUPP)) {
1145 return ret;
1146 }
1147
1148 return get_real_filename_full_scan(conn, path, name, mangled, mem_ctx,
1149 found_name);
1150 }
1151
1152 static NTSTATUS build_stream_path(TALLOC_CTX *mem_ctx,
1153 connection_struct *conn,
1154 const char *orig_path,
1155 struct smb_filename *smb_fname)
1156 {
1157 NTSTATUS status;
1158 unsigned int i, num_streams;
1159 struct stream_struct *streams = NULL;
1160
1161 if (SMB_VFS_STAT(conn, smb_fname) == 0) {
1162 DEBUG(10, ("'%s' exists\n", smb_fname_str_dbg(smb_fname)));
1163 return NT_STATUS_OK;
1164 }
1165
1166 if (errno != ENOENT) {
1167 DEBUG(10, ("vfs_stat failed: %s\n", strerror(errno)));
1168 status = map_nt_error_from_unix(errno);
1169 goto fail;
1170 }
1171
1172 /* Fall back to a case-insensitive scan of all streams on the file. */
1173 status = SMB_VFS_STREAMINFO(conn, NULL, smb_fname->base_name, mem_ctx,
1174 &num_streams, &streams);
1175
1176 if (NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
1177 SET_STAT_INVALID(smb_fname->st);
1178 return NT_STATUS_OK;
1179 }
1180
1181 if (!NT_STATUS_IS_OK(status)) {
1182 DEBUG(10, ("vfs_streaminfo failed: %s\n", nt_errstr(status)));
1183 goto fail;
1184 }
1185
1186 for (i=0; i<num_streams; i++) {
1187 DEBUG(10, ("comparing [%s] and [%s]: ",
1188 smb_fname->stream_name, streams[i].name));
1189 if (fname_equal(smb_fname->stream_name, streams[i].name,
1190 conn->case_sensitive)) {
1191 DEBUGADD(10, ("equal\n"));
1192 break;
1193 }
1194 DEBUGADD(10, ("not equal\n"));
1195 }
1196
1197 /* Couldn't find the stream. */
1198 if (i == num_streams) {
1199 SET_STAT_INVALID(smb_fname->st);
1200 TALLOC_FREE(streams);
1201 return NT_STATUS_OK;
1202 }
1203
1204 DEBUG(10, ("case insensitive stream. requested: %s, actual: %s\n",
1205 smb_fname->stream_name, streams[i].name));
1206
1207
1208 TALLOC_FREE(smb_fname->stream_name);
1209 smb_fname->stream_name = talloc_strdup(smb_fname, streams[i].name);
1210 if (smb_fname->stream_name == NULL) {
1211 status = NT_STATUS_NO_MEMORY;
1212 goto fail;
1213 }
1214
1215 SET_STAT_INVALID(smb_fname->st);
1216
1217 if (SMB_VFS_STAT(conn, smb_fname) == 0) {
1218 DEBUG(10, ("'%s' exists\n", smb_fname_str_dbg(smb_fname)));
1219 }
1220 status = NT_STATUS_OK;
1221 fail:
1222 TALLOC_FREE(streams);
1223 return status;
1224 }
1225
1226 /**
1227 * Go through all the steps to validate a filename.
1228 *
1229 * @param ctx talloc_ctx to allocate memory with.
1230 * @param conn connection struct for vfs calls.
1231 * @param dfs_path Whether this path requires dfs resolution.
1232 * @param name_in The unconverted name.
1233 * @param ucf_flags flags to pass through to unix_convert().
1234 * UCF_ALWAYS_ALLOW_WCARD_LCOMP will be OR'd in if
1235 * p_cont_wcard != NULL and is true and
1236 * UCF_COND_ALLOW_WCARD_LCOMP.
1237 * @param p_cont_wcard If not NULL, will be set to true if the dfs path
1238 * resolution detects a wildcard.
1239 * @param pp_smb_fname The final converted name will be allocated if the
1240 * return is NT_STATUS_OK.
1241 *
1242 * @return NT_STATUS_OK if all operations completed succesfully, appropriate
1243 * error otherwise.
1244 */
1245 NTSTATUS filename_convert(TALLOC_CTX *ctx,
1246 connection_struct *conn,
1247 bool dfs_path,
1248 const char *name_in,
1249 uint32_t ucf_flags,
1250 bool *ppath_contains_wcard,
1251 struct smb_filename **pp_smb_fname)
1252 {
1253 NTSTATUS status;
1254 bool allow_wcards = (ucf_flags & (UCF_COND_ALLOW_WCARD_LCOMP|UCF_ALWAYS_ALLOW_WCARD_LCOMP));
1255 char *fname = NULL;
1256
1257 *pp_smb_fname = NULL;
1258
1259 status = resolve_dfspath_wcard(ctx, conn,
1260 dfs_path,
1261 name_in,
1262 allow_wcards,
1263 &fname,
1264 ppath_contains_wcard);
1265 if (!NT_STATUS_IS_OK(status)) {
1266 DEBUG(10,("filename_convert: resolve_dfspath failed "
1267 "for name %s with %s\n",
1268 name_in,
1269 nt_errstr(status) ));
1270 return status;
1271 }
1272
1273 if (is_fake_file_path(name_in)) {
1274 SMB_STRUCT_STAT st;
1275 ZERO_STRUCT(st);
1276 st.st_ex_nlink = 1;
1277 status = create_synthetic_smb_fname_split(ctx,
1278 name_in,
1279 &st,
1280 pp_smb_fname);
1281 return status;
1282 }
1283
1284 /*
1285 * If the caller conditionally allows wildcard lookups, only add the
1286 * always allow if the path actually does contain a wildcard.
1287 */
1288 if (ucf_flags & UCF_COND_ALLOW_WCARD_LCOMP &&
1289 ppath_contains_wcard != NULL && *ppath_contains_wcard) {
1290 ucf_flags |= UCF_ALWAYS_ALLOW_WCARD_LCOMP;
1291 }
1292
1293 status = unix_convert(ctx, conn, fname, pp_smb_fname, ucf_flags);
1294 if (!NT_STATUS_IS_OK(status)) {
1295 DEBUG(10,("filename_convert: unix_convert failed "
1296 "for name %s with %s\n",
1297 fname,
1298 nt_errstr(status) ));
1299 return status;
1300 }
1301
1302 status = check_name(conn, (*pp_smb_fname)->base_name);
1303 if (!NT_STATUS_IS_OK(status)) {
1304 DEBUG(3,("filename_convert: check_name failed "
1305 "for name %s with %s\n",
1306 smb_fname_str_dbg(*pp_smb_fname),
1307 nt_errstr(status) ));
1308 TALLOC_FREE(*pp_smb_fname);
1309 return status;
1310 }
1311
1312 return status;
1313 }
Samba GIT mirror