2 Unix SMB/CIFS implementation.
4 Copyright (C) Andrew Tridgell 2003
5 Copyright (C) Jelmer Vernooij 2006
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "system/filesys.h"
23 #include "system/locale.h"
24 #include "librpc/ndr/libndr.h"
25 #include "librpc/ndr/ndr_table.h"
26 #include "librpc/gen_ndr/ndr_dcerpc.h"
27 #include "lib/cmdline/popt_common.h"
28 #include "param/param.h"
30 static const struct ndr_interface_call
*find_function(
31 const struct ndr_interface_table
*p
,
35 if (isdigit(function
[0])) {
36 i
= strtol(function
, NULL
, 0);
39 for (i
=0;i
<p
->num_calls
;i
++) {
40 if (strcmp(p
->calls
[i
].name
, function
) == 0) {
44 if (i
== p
->num_calls
) {
45 printf("Function '%s' not found\n", function
);
51 _NORETURN_
static void show_pipes(void)
53 const struct ndr_interface_list
*l
;
54 printf("\nYou must specify a pipe\n");
55 printf("known pipes are:\n");
56 for (l
=ndr_table_list();l
;l
=l
->next
) {
57 if(l
->table
->helpstring
) {
58 printf("\t%s - %s\n", l
->table
->name
, l
->table
->helpstring
);
60 printf("\t%s\n", l
->table
->name
);
66 _NORETURN_
static void show_functions(const struct ndr_interface_table
*p
)
69 printf("\nYou must specify a function\n");
70 printf("known functions on '%s' are:\n", p
->name
);
71 for (i
=0;i
<p
->num_calls
;i
++) {
72 printf("\t0x%02x (%2d) %s\n", i
, i
, p
->calls
[i
].name
);
77 static char *stdin_load(TALLOC_CTX
*mem_ctx
, size_t *size
)
79 int num_read
, total_len
= 0;
83 while((num_read
= read(STDIN_FILENO
, buf
, 255)) > 0) {
86 result
= talloc_realloc(
87 mem_ctx
, result
, char, total_len
+ num_read
);
89 result
= talloc_array(mem_ctx
, char, num_read
);
92 memcpy(result
+ total_len
, buf
, num_read
);
94 total_len
+= num_read
;
103 static const struct ndr_interface_table
*load_iface_from_plugin(const char *plugin
, const char *pipe_name
)
105 const struct ndr_interface_table
*p
;
109 handle
= dlopen(plugin
, RTLD_NOW
);
110 if (handle
== NULL
) {
111 printf("%s: Unable to open: %s\n", plugin
, dlerror());
115 symbol
= talloc_asprintf(NULL
, "ndr_table_%s", pipe_name
);
116 p
= (const struct ndr_interface_table
*)dlsym(handle
, symbol
);
119 printf("%s: Unable to find DCE/RPC interface table for '%s': %s\n", plugin
, pipe_name
, dlerror());
130 static void ndrdump_data(uint8_t *d
, uint32_t l
, bool force
)
132 dump_data_file(d
, l
, !force
, stdout
);
135 static NTSTATUS
ndrdump_pull_and_print_pipes(const char *function
,
136 struct ndr_pull
*ndr_pull
,
137 struct ndr_print
*ndr_print
,
138 const struct ndr_interface_call_pipes
*pipes
)
141 enum ndr_err_code ndr_err
;
144 for (i
=0; i
< pipes
->num_pipes
; i
++) {
152 c
= talloc_zero_size(ndr_pull
, pipes
->pipes
[i
].chunk_struct_size
);
153 talloc_set_name(c
, "struct %s", pipes
->pipes
[i
].name
);
155 * Note: the first struct member is always
158 count
= (uint32_t *)c
;
160 n
= talloc_asprintf(c
, "%s: %s[%llu]",
161 function
, pipes
->pipes
[i
].name
,
162 (unsigned long long)idx
);
164 saved_mem_ctx
= ndr_pull
->current_mem_ctx
;
165 ndr_pull
->current_mem_ctx
= c
;
166 ndr_err
= pipes
->pipes
[i
].ndr_pull(ndr_pull
, NDR_SCALARS
, c
);
167 ndr_pull
->current_mem_ctx
= saved_mem_ctx
;
168 status
= ndr_map_error2ntstatus(ndr_err
);
170 printf("pull returned %s\n", nt_errstr(status
));
171 if (!NT_STATUS_IS_OK(status
)) {
175 pipes
->pipes
[i
].ndr_print(ndr_print
, n
, c
);
187 static void ndr_print_dummy(struct ndr_print
*ndr
, const char *format
, ...)
189 /* This is here so that you can turn ndr printing off for the purposes
190 of benchmarking ndr parsing. */
193 int main(int argc
, const char *argv
[])
195 const struct ndr_interface_table
*p
= NULL
;
196 const struct ndr_interface_call
*f
;
197 const char *pipe_name
, *function
, *inout
, *filename
;
201 struct ndr_pull
*ndr_pull
;
202 struct ndr_print
*ndr_print
;
207 enum ndr_err_code ndr_err
;
210 const char *ctx_filename
= NULL
;
211 const char *plugin
= NULL
;
212 bool validate
= false;
213 bool dumpdata
= false;
214 bool assume_ndr64
= false;
216 bool hex_input
= false;
218 enum {OPT_CONTEXT_FILE
=1000, OPT_VALIDATE
, OPT_DUMP_DATA
, OPT_LOAD_DSO
, OPT_NDR64
, OPT_QUIET
, OPT_HEX_INPUT
};
219 struct poptOption long_options
[] = {
221 {"context-file", 'c', POPT_ARG_STRING
, NULL
, OPT_CONTEXT_FILE
, "In-filename to parse first", "CTX-FILE" },
222 {"validate", 0, POPT_ARG_NONE
, NULL
, OPT_VALIDATE
, "try to validate the data", NULL
},
223 {"dump-data", 0, POPT_ARG_NONE
, NULL
, OPT_DUMP_DATA
, "dump the hex data", NULL
},
224 {"load-dso", 'l', POPT_ARG_STRING
, NULL
, OPT_LOAD_DSO
, "load from shared object file", NULL
},
225 {"ndr64", 0, POPT_ARG_NONE
, NULL
, OPT_NDR64
, "Assume NDR64 data", NULL
},
226 {"quiet", 0, POPT_ARG_NONE
, NULL
, OPT_QUIET
, "Don't actually dump anything", NULL
},
227 {"hex-input", 0, POPT_ARG_NONE
, NULL
, OPT_HEX_INPUT
, "Read the input file in as a hex dump", NULL
},
232 const struct ndr_interface_call_pipes
*in_pipes
= NULL
;
233 const struct ndr_interface_call_pipes
*out_pipes
= NULL
;
234 uint32_t highest_ofs
;
235 struct dcerpc_sec_verification_trailer
*sec_vt
= NULL
;
239 /* Initialise samba stuff */
244 setup_logging("ndrdump", DEBUG_STDOUT
);
246 pc
= poptGetContext("ndrdump", argc
, argv
, long_options
, 0);
248 poptSetOtherOptionHelp(
249 pc
, "<pipe|uuid> <function> <inout> [<filename>]");
251 while ((opt
= poptGetNextOpt(pc
)) != -1) {
253 case OPT_CONTEXT_FILE
:
254 ctx_filename
= poptGetOptArg(pc
);
263 plugin
= poptGetOptArg(pc
);
277 pipe_name
= poptGetArg(pc
);
280 poptPrintUsage(pc
, stderr
, 0);
285 if (plugin
!= NULL
) {
286 p
= load_iface_from_plugin(plugin
, pipe_name
);
289 p
= ndr_table_by_name(pipe_name
);
295 status
= GUID_from_string(pipe_name
, &uuid
);
297 if (NT_STATUS_IS_OK(status
)) {
298 p
= ndr_table_by_uuid(&uuid
);
303 printf("Unknown pipe or UUID '%s'\n", pipe_name
);
307 function
= poptGetArg(pc
);
308 inout
= poptGetArg(pc
);
309 filename
= poptGetArg(pc
);
311 if (!function
|| !inout
) {
312 poptPrintUsage(pc
, stderr
, 0);
317 f
= find_function(p
, function
);
319 if (strcmp(inout
, "in") == 0 ||
320 strcmp(inout
, "request") == 0) {
322 in_pipes
= &f
->in_pipes
;
323 } else if (strcmp(inout
, "out") == 0 ||
324 strcmp(inout
, "response") == 0) {
326 out_pipes
= &f
->out_pipes
;
328 printf("Bad inout value '%s'\n", inout
);
332 mem_ctx
= talloc_init("ndrdump");
334 st
= talloc_zero_size(mem_ctx
, f
->struct_size
);
336 printf("Unable to allocate %d bytes\n", (int)f
->struct_size
);
340 v_st
= talloc_zero_size(mem_ctx
, f
->struct_size
);
342 printf("Unable to allocate %d bytes\n", (int)f
->struct_size
);
347 if (flags
== NDR_IN
) {
348 printf("Context file can only be used for \"out\" packages\n");
352 data
= (uint8_t *)file_load(ctx_filename
, &size
, 0, mem_ctx
);
354 perror(ctx_filename
);
361 ndr_pull
= ndr_pull_init_blob(&blob
, mem_ctx
);
362 if (ndr_pull
== NULL
) {
363 perror("ndr_pull_init_blob");
366 ndr_pull
->flags
|= LIBNDR_FLAG_REF_ALLOC
;
368 ndr_pull
->flags
|= LIBNDR_FLAG_NDR64
;
371 ndr_err
= f
->ndr_pull(ndr_pull
, NDR_IN
, st
);
373 if (ndr_pull
->offset
> ndr_pull
->relative_highest_offset
) {
374 highest_ofs
= ndr_pull
->offset
;
376 highest_ofs
= ndr_pull
->relative_highest_offset
;
379 if (highest_ofs
!= ndr_pull
->data_size
) {
380 printf("WARNING! %d unread bytes while parsing context file\n", ndr_pull
->data_size
- highest_ofs
);
383 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
384 status
= ndr_map_error2ntstatus(ndr_err
);
385 printf("pull for context file returned %s\n", nt_errstr(status
));
388 memcpy(v_st
, st
, f
->struct_size
);
392 data
= (uint8_t *)file_load(filename
, &size
, 0, mem_ctx
);
394 data
= (uint8_t *)stdin_load(mem_ctx
, &size
);
405 blob
= hexdump_to_data_blob(mem_ctx
, (char *)data
, size
);
411 ndr_pull
= ndr_pull_init_blob(&blob
, mem_ctx
);
412 if (ndr_pull
== NULL
) {
413 perror("ndr_pull_init_blob");
416 ndr_pull
->flags
|= LIBNDR_FLAG_REF_ALLOC
;
418 ndr_pull
->flags
|= LIBNDR_FLAG_NDR64
;
421 ndr_print
= talloc_zero(mem_ctx
, struct ndr_print
);
423 ndr_print
->print
= ndr_print_dummy
;
425 ndr_print
->print
= ndr_print_printf_helper
;
427 ndr_print
->depth
= 1;
429 ndr_err
= ndr_pop_dcerpc_sec_verification_trailer(ndr_pull
, mem_ctx
, &sec_vt
);
430 status
= ndr_map_error2ntstatus(ndr_err
);
431 if (!NT_STATUS_IS_OK(status
)) {
432 printf("ndr_pop_dcerpc_sec_verification_trailer returned %s\n",
436 if (sec_vt
!= NULL
&& sec_vt
->count
.count
> 0) {
437 printf("SEC_VT: consumed %d bytes\n",
438 (int)(blob
.length
- ndr_pull
->data_size
));
440 ndrdump_data(blob
.data
+ ndr_pull
->data_size
,
441 blob
.length
- ndr_pull
->data_size
,
444 ndr_print_dcerpc_sec_verification_trailer(ndr_print
, "SEC_VT", sec_vt
);
449 status
= ndrdump_pull_and_print_pipes(function
, ndr_pull
, ndr_print
, out_pipes
);
450 if (!NT_STATUS_IS_OK(status
)) {
451 printf("dump FAILED\n");
456 ndr_err
= f
->ndr_pull(ndr_pull
, flags
, st
);
457 status
= ndr_map_error2ntstatus(ndr_err
);
459 printf("pull returned %s\n", nt_errstr(status
));
461 if (ndr_pull
->offset
> ndr_pull
->relative_highest_offset
) {
462 highest_ofs
= ndr_pull
->offset
;
464 highest_ofs
= ndr_pull
->relative_highest_offset
;
467 if (highest_ofs
!= ndr_pull
->data_size
) {
468 printf("WARNING! %d unread bytes\n", ndr_pull
->data_size
- highest_ofs
);
469 ndrdump_data(ndr_pull
->data
+highest_ofs
,
470 ndr_pull
->data_size
- highest_ofs
,
475 printf("%d bytes consumed\n", highest_ofs
);
476 ndrdump_data(blob
.data
, blob
.length
, dumpdata
);
479 f
->ndr_print(ndr_print
, function
, flags
, st
);
481 if (!NT_STATUS_IS_OK(status
)) {
482 printf("dump FAILED\n");
487 status
= ndrdump_pull_and_print_pipes(function
, ndr_pull
, ndr_print
, in_pipes
);
488 if (!NT_STATUS_IS_OK(status
)) {
489 printf("dump FAILED\n");
496 struct ndr_push
*ndr_v_push
;
497 struct ndr_pull
*ndr_v_pull
;
498 struct ndr_print
*ndr_v_print
;
499 uint32_t highest_v_ofs
;
501 uint8_t byte_a
, byte_b
;
504 ndr_v_push
= ndr_push_init_ctx(mem_ctx
);
505 if (ndr_v_push
== NULL
) {
506 printf("No memory\n");
511 ndr_v_push
->flags
|= LIBNDR_FLAG_NDR64
;
514 ndr_err
= f
->ndr_push(ndr_v_push
, flags
, st
);
515 status
= ndr_map_error2ntstatus(ndr_err
);
516 printf("push returned %s\n", nt_errstr(status
));
517 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
518 printf("validate push FAILED\n");
522 v_blob
= ndr_push_blob(ndr_v_push
);
525 printf("%ld bytes generated (validate)\n", (long)v_blob
.length
);
526 ndrdump_data(v_blob
.data
, v_blob
.length
, dumpdata
);
529 ndr_v_pull
= ndr_pull_init_blob(&v_blob
, mem_ctx
);
530 if (ndr_v_pull
== NULL
) {
531 perror("ndr_pull_init_blob");
534 ndr_v_pull
->flags
|= LIBNDR_FLAG_REF_ALLOC
;
536 ndr_err
= f
->ndr_pull(ndr_v_pull
, flags
, v_st
);
537 status
= ndr_map_error2ntstatus(ndr_err
);
538 printf("pull returned %s\n", nt_errstr(status
));
539 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
540 printf("validate pull FAILED\n");
544 if (ndr_v_pull
->offset
> ndr_v_pull
->relative_highest_offset
) {
545 highest_v_ofs
= ndr_v_pull
->offset
;
547 highest_v_ofs
= ndr_v_pull
->relative_highest_offset
;
550 if (highest_v_ofs
!= ndr_v_pull
->data_size
) {
551 printf("WARNING! %d unread bytes in validation\n",
552 ndr_v_pull
->data_size
- highest_v_ofs
);
553 ndrdump_data(ndr_v_pull
->data
+ highest_v_ofs
,
554 ndr_v_pull
->data_size
- highest_v_ofs
,
558 ndr_v_print
= talloc_zero(mem_ctx
, struct ndr_print
);
559 ndr_v_print
->print
= ndr_print_debug_helper
;
560 ndr_v_print
->depth
= 1;
561 f
->ndr_print(ndr_v_print
, function
, flags
, v_st
);
563 if (blob
.length
!= v_blob
.length
) {
564 printf("WARNING! orig bytes:%llu validated pushed bytes:%llu\n",
565 (unsigned long long)blob
.length
, (unsigned long long)v_blob
.length
);
568 if (highest_ofs
!= highest_v_ofs
) {
569 printf("WARNING! orig pulled bytes:%llu validated pulled bytes:%llu\n",
570 (unsigned long long)highest_ofs
, (unsigned long long)highest_v_ofs
);
576 for (i
=0; i
< blob
.length
; i
++) {
577 byte_a
= blob
.data
[i
];
579 if (i
== v_blob
.length
) {
585 byte_b
= v_blob
.data
[i
];
587 if (byte_a
!= byte_b
) {
593 printf("WARNING! orig and validated differ at byte 0x%02X (%u)\n", i
, i
);
594 printf("WARNING! orig byte[0x%02X] = 0x%02X validated byte[0x%02X] = 0x%02X\n",
595 i
, byte_a
, i
, byte_b
);
600 talloc_free(mem_ctx
);