2 Unix SMB/CIFS implementation.
5 Copyright (C) Stefan Metzmacher 2009
6 Copyright (C) Jeremy Allison 2010
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 #include "smbd/smbd.h"
24 #include "smbd/globals.h"
25 #include "../libcli/smb/smb_common.h"
27 #include "../lib/util/tevent_ntstatus.h"
29 static struct tevent_req
*smbd_smb2_getinfo_send(TALLOC_CTX
*mem_ctx
,
30 struct tevent_context
*ev
,
31 struct smbd_smb2_request
*smb2req
,
32 struct files_struct
*in_fsp
,
34 uint8_t in_file_info_class
,
35 uint32_t in_output_buffer_length
,
36 DATA_BLOB in_input_buffer
,
37 uint32_t in_additional_information
,
39 static NTSTATUS
smbd_smb2_getinfo_recv(struct tevent_req
*req
,
41 DATA_BLOB
*out_output_buffer
,
42 NTSTATUS
*p_call_status
);
44 static void smbd_smb2_request_getinfo_done(struct tevent_req
*subreq
);
45 NTSTATUS
smbd_smb2_request_process_getinfo(struct smbd_smb2_request
*req
)
48 const uint8_t *inbody
;
50 uint8_t in_file_info_class
;
51 uint32_t in_output_buffer_length
;
52 uint16_t in_input_buffer_offset
;
53 uint32_t in_input_buffer_length
;
54 DATA_BLOB in_input_buffer
;
55 uint32_t in_additional_information
;
57 uint64_t in_file_id_persistent
;
58 uint64_t in_file_id_volatile
;
59 struct files_struct
*in_fsp
;
60 struct tevent_req
*subreq
;
62 status
= smbd_smb2_request_verify_sizes(req
, 0x29);
63 if (!NT_STATUS_IS_OK(status
)) {
64 return smbd_smb2_request_error(req
, status
);
66 inbody
= SMBD_SMB2_IN_BODY_PTR(req
);
68 in_info_type
= CVAL(inbody
, 0x02);
69 in_file_info_class
= CVAL(inbody
, 0x03);
70 in_output_buffer_length
= IVAL(inbody
, 0x04);
71 in_input_buffer_offset
= SVAL(inbody
, 0x08);
72 /* 0x0A 2 bytes reserved */
73 in_input_buffer_length
= IVAL(inbody
, 0x0C);
74 in_additional_information
= IVAL(inbody
, 0x10);
75 in_flags
= IVAL(inbody
, 0x14);
76 in_file_id_persistent
= BVAL(inbody
, 0x18);
77 in_file_id_volatile
= BVAL(inbody
, 0x20);
79 if (in_input_buffer_offset
== 0 && in_input_buffer_length
== 0) {
81 } else if (in_input_buffer_offset
!=
82 (SMB2_HDR_BODY
+ SMBD_SMB2_IN_BODY_LEN(req
))) {
83 return smbd_smb2_request_error(req
, NT_STATUS_INVALID_PARAMETER
);
86 if (in_input_buffer_length
> SMBD_SMB2_IN_DYN_LEN(req
)) {
87 return smbd_smb2_request_error(req
, NT_STATUS_INVALID_PARAMETER
);
90 in_input_buffer
.data
= SMBD_SMB2_IN_DYN_PTR(req
);
91 in_input_buffer
.length
= in_input_buffer_length
;
93 if (in_input_buffer
.length
> req
->sconn
->smb2
.max_trans
) {
94 DEBUG(2,("smbd_smb2_request_process_getinfo: "
95 "client ignored max trans: %s: 0x%08X: 0x%08X\n",
96 __location__
, (unsigned)in_input_buffer
.length
,
97 (unsigned)req
->sconn
->smb2
.max_trans
));
98 return smbd_smb2_request_error(req
, NT_STATUS_INVALID_PARAMETER
);
100 if (in_output_buffer_length
> req
->sconn
->smb2
.max_trans
) {
101 DEBUG(2,("smbd_smb2_request_process_getinfo: "
102 "client ignored max trans: %s: 0x%08X: 0x%08X\n",
103 __location__
, in_output_buffer_length
,
104 req
->sconn
->smb2
.max_trans
));
105 return smbd_smb2_request_error(req
, NT_STATUS_INVALID_PARAMETER
);
108 status
= smbd_smb2_request_verify_creditcharge(req
,
109 MAX(in_input_buffer
.length
,in_output_buffer_length
));
110 if (!NT_STATUS_IS_OK(status
)) {
111 return smbd_smb2_request_error(req
, status
);
114 in_fsp
= file_fsp_smb2(req
, in_file_id_persistent
, in_file_id_volatile
);
115 if (in_fsp
== NULL
) {
116 return smbd_smb2_request_error(req
, NT_STATUS_FILE_CLOSED
);
119 subreq
= smbd_smb2_getinfo_send(req
, req
->sconn
->ev_ctx
,
123 in_output_buffer_length
,
125 in_additional_information
,
127 if (subreq
== NULL
) {
128 return smbd_smb2_request_error(req
, NT_STATUS_NO_MEMORY
);
130 tevent_req_set_callback(subreq
, smbd_smb2_request_getinfo_done
, req
);
132 return smbd_smb2_request_pending_queue(req
, subreq
, 500);
135 static void smbd_smb2_request_getinfo_done(struct tevent_req
*subreq
)
137 struct smbd_smb2_request
*req
= tevent_req_callback_data(subreq
,
138 struct smbd_smb2_request
);
141 uint16_t out_output_buffer_offset
;
142 DATA_BLOB out_output_buffer
= data_blob_null
;
144 NTSTATUS call_status
= NT_STATUS_OK
;
145 NTSTATUS error
; /* transport error */
147 status
= smbd_smb2_getinfo_recv(subreq
,
152 if (!NT_STATUS_IS_OK(status
)) {
153 error
= smbd_smb2_request_error(req
, status
);
154 if (!NT_STATUS_IS_OK(error
)) {
155 smbd_server_connection_terminate(req
->sconn
,
162 /* some GetInfo responses set STATUS_BUFFER_OVERFLOW and return partial,
164 if (!(NT_STATUS_IS_OK(call_status
) ||
165 NT_STATUS_EQUAL(call_status
, STATUS_BUFFER_OVERFLOW
))) {
166 /* Return a specific error with data. */
167 error
= smbd_smb2_request_error_ex(req
,
171 if (!NT_STATUS_IS_OK(error
)) {
172 smbd_server_connection_terminate(req
->sconn
,
179 out_output_buffer_offset
= SMB2_HDR_BODY
+ 0x08;
181 outbody
= data_blob_talloc(req
->out
.vector
, NULL
, 0x08);
182 if (outbody
.data
== NULL
) {
183 error
= smbd_smb2_request_error(req
, NT_STATUS_NO_MEMORY
);
184 if (!NT_STATUS_IS_OK(error
)) {
185 smbd_server_connection_terminate(req
->sconn
,
192 SSVAL(outbody
.data
, 0x00, 0x08 + 1); /* struct size */
193 SSVAL(outbody
.data
, 0x02,
194 out_output_buffer_offset
); /* output buffer offset */
195 SIVAL(outbody
.data
, 0x04,
196 out_output_buffer
.length
); /* output buffer length */
198 outdyn
= out_output_buffer
;
200 error
= smbd_smb2_request_done_ex(req
, call_status
, outbody
, &outdyn
, __location__
);
201 if (!NT_STATUS_IS_OK(error
)) {
202 smbd_server_connection_terminate(req
->sconn
,
208 struct smbd_smb2_getinfo_state
{
209 struct smbd_smb2_request
*smb2req
;
211 DATA_BLOB out_output_buffer
;
214 static void smb2_ipc_getinfo(struct tevent_req
*req
,
215 struct smbd_smb2_getinfo_state
*state
,
216 struct tevent_context
*ev
,
217 uint8_t in_info_type
,
218 uint8_t in_file_info_class
)
220 /* We want to reply to SMB2_GETINFO_FILE
221 with a class of SMB2_FILE_STANDARD_INFO as
222 otherwise a Win7 client issues this request
223 twice (2xroundtrips) if we return NOT_SUPPORTED.
224 NB. We do the same for SMB1 in call_trans2qpipeinfo() */
226 if (in_info_type
== 0x01 && /* SMB2_GETINFO_FILE */
227 in_file_info_class
== 0x05) { /* SMB2_FILE_STANDARD_INFO */
228 state
->out_output_buffer
= data_blob_talloc(state
,
230 if (tevent_req_nomem(state
->out_output_buffer
.data
, req
)) {
234 memset(state
->out_output_buffer
.data
,0,24);
235 SOFF_T(state
->out_output_buffer
.data
,0,4096LL);
236 SIVAL(state
->out_output_buffer
.data
,16,1);
237 SIVAL(state
->out_output_buffer
.data
,20,1);
238 tevent_req_done(req
);
240 tevent_req_nterror(req
, NT_STATUS_NOT_SUPPORTED
);
244 static struct tevent_req
*smbd_smb2_getinfo_send(TALLOC_CTX
*mem_ctx
,
245 struct tevent_context
*ev
,
246 struct smbd_smb2_request
*smb2req
,
247 struct files_struct
*fsp
,
248 uint8_t in_info_type
,
249 uint8_t in_file_info_class
,
250 uint32_t in_output_buffer_length
,
251 DATA_BLOB in_input_buffer
,
252 uint32_t in_additional_information
,
255 struct tevent_req
*req
;
256 struct smbd_smb2_getinfo_state
*state
;
257 struct smb_request
*smbreq
;
258 connection_struct
*conn
= smb2req
->tcon
->compat
;
261 req
= tevent_req_create(mem_ctx
, &state
,
262 struct smbd_smb2_getinfo_state
);
266 state
->smb2req
= smb2req
;
267 state
->status
= NT_STATUS_OK
;
268 state
->out_output_buffer
= data_blob_null
;
270 DEBUG(10,("smbd_smb2_getinfo_send: %s - %s\n",
271 fsp_str_dbg(fsp
), fsp_fnum_dbg(fsp
)));
273 smbreq
= smbd_smb2_fake_smb_request(smb2req
);
274 if (tevent_req_nomem(smbreq
, req
)) {
275 return tevent_req_post(req
, ev
);
279 smb2_ipc_getinfo(req
, state
, ev
,
280 in_info_type
, in_file_info_class
);
281 return tevent_req_post(req
, ev
);
284 switch (in_info_type
) {
285 case 0x01:/* SMB2_GETINFO_FILE */
287 uint16_t file_info_level
;
289 unsigned int data_size
= 0;
290 bool delete_pending
= false;
291 struct timespec write_time_ts
;
292 struct file_id fileid
;
293 struct ea_list
*ea_list
= NULL
;
294 int lock_data_count
= 0;
295 char *lock_data
= NULL
;
297 ZERO_STRUCT(write_time_ts
);
299 switch (in_file_info_class
) {
300 case 0x0F:/* RAW_FILEINFO_SMB2_ALL_EAS */
301 file_info_level
= 0xFF00 | in_file_info_class
;
304 case 0x12:/* RAW_FILEINFO_SMB2_ALL_INFORMATION */
305 file_info_level
= 0xFF00 | in_file_info_class
;
309 /* the levels directly map to the passthru levels */
310 file_info_level
= in_file_info_class
+ 1000;
314 if (fsp
->fake_file_handle
) {
316 * This is actually for the QUOTA_FAKE_FILE --metze
319 /* We know this name is ok, it's already passed the checks. */
321 } else if (fsp
->fh
->fd
== -1) {
323 * This is actually a QFILEINFO on a directory
324 * handle (returned from an NT SMB). NT5.0 seems
325 * to do this call. JRA.
328 if (INFO_LEVEL_IS_UNIX(file_info_level
)) {
329 /* Always do lstat for UNIX calls. */
330 if (SMB_VFS_LSTAT(conn
, fsp
->fsp_name
)) {
331 DEBUG(3,("smbd_smb2_getinfo_send: "
332 "SMB_VFS_LSTAT of %s failed "
333 "(%s)\n", fsp_str_dbg(fsp
),
335 status
= map_nt_error_from_unix(errno
);
336 tevent_req_nterror(req
, status
);
337 return tevent_req_post(req
, ev
);
339 } else if (SMB_VFS_STAT(conn
, fsp
->fsp_name
)) {
340 DEBUG(3,("smbd_smb2_getinfo_send: "
341 "SMB_VFS_STAT of %s failed (%s)\n",
344 status
= map_nt_error_from_unix(errno
);
345 tevent_req_nterror(req
, status
);
346 return tevent_req_post(req
, ev
);
349 fileid
= vfs_file_id_from_sbuf(conn
,
351 get_file_infos(fileid
, fsp
->name_hash
,
352 &delete_pending
, &write_time_ts
);
355 * Original code - this is an open file.
358 if (SMB_VFS_FSTAT(fsp
, &fsp
->fsp_name
->st
) != 0) {
359 DEBUG(3, ("smbd_smb2_getinfo_send: "
360 "fstat of %s failed (%s)\n",
361 fsp_fnum_dbg(fsp
), strerror(errno
)));
362 status
= map_nt_error_from_unix(errno
);
363 tevent_req_nterror(req
, status
);
364 return tevent_req_post(req
, ev
);
366 fileid
= vfs_file_id_from_sbuf(conn
,
368 get_file_infos(fileid
, fsp
->name_hash
,
369 &delete_pending
, &write_time_ts
);
372 status
= smbd_do_qfilepathinfo(conn
, state
,
382 in_output_buffer_length
,
385 if (!NT_STATUS_IS_OK(status
)) {
387 if (NT_STATUS_EQUAL(status
, NT_STATUS_INVALID_LEVEL
)) {
388 status
= NT_STATUS_INVALID_INFO_CLASS
;
390 tevent_req_nterror(req
, status
);
391 return tevent_req_post(req
, ev
);
394 state
->out_output_buffer
= data_blob_talloc(state
,
398 if (tevent_req_nomem(state
->out_output_buffer
.data
, req
)) {
399 return tevent_req_post(req
, ev
);
406 case 0x02:/* SMB2_GETINFO_FS */
408 uint16_t file_info_level
;
412 /* the levels directly map to the passthru levels */
413 file_info_level
= in_file_info_class
+ 1000;
415 status
= smbd_do_qfsinfo(conn
, state
,
418 in_output_buffer_length
,
422 /* some responses set STATUS_BUFFER_OVERFLOW and return
423 partial, but valid data */
424 if (!(NT_STATUS_IS_OK(status
) ||
425 NT_STATUS_EQUAL(status
, STATUS_BUFFER_OVERFLOW
))) {
427 if (NT_STATUS_EQUAL(status
, NT_STATUS_INVALID_LEVEL
)) {
428 status
= NT_STATUS_INVALID_INFO_CLASS
;
430 tevent_req_nterror(req
, status
);
431 return tevent_req_post(req
, ev
);
434 state
->out_output_buffer
= data_blob_talloc(state
,
438 if (tevent_req_nomem(state
->out_output_buffer
.data
, req
)) {
439 return tevent_req_post(req
, ev
);
446 case 0x03:/* SMB2_GETINFO_SEC */
448 uint8_t *p_marshalled_sd
= NULL
;
451 status
= smbd_do_query_security_desc(conn
,
454 /* Security info wanted. */
455 in_additional_information
,
456 in_output_buffer_length
,
460 if (NT_STATUS_EQUAL(status
, NT_STATUS_BUFFER_TOO_SMALL
)) {
461 /* Return needed size. */
462 state
->out_output_buffer
= data_blob_talloc(state
,
465 if (tevent_req_nomem(state
->out_output_buffer
.data
, req
)) {
466 return tevent_req_post(req
, ev
);
468 SIVAL(state
->out_output_buffer
.data
,0,(uint32_t)sd_size
);
469 state
->status
= NT_STATUS_BUFFER_TOO_SMALL
;
472 if (!NT_STATUS_IS_OK(status
)) {
473 DEBUG(10,("smbd_smb2_getinfo_send: "
474 "smbd_do_query_security_desc of %s failed "
475 "(%s)\n", fsp_str_dbg(fsp
),
477 tevent_req_nterror(req
, status
);
478 return tevent_req_post(req
, ev
);
482 state
->out_output_buffer
= data_blob_talloc(state
,
485 if (tevent_req_nomem(state
->out_output_buffer
.data
, req
)) {
486 return tevent_req_post(req
, ev
);
492 case 0x04: /* SMB2_0_INFO_QUOTA */
493 tevent_req_nterror(req
, NT_STATUS_NOT_SUPPORTED
);
494 return tevent_req_post(req
, ev
);
497 DEBUG(10,("smbd_smb2_getinfo_send: "
498 "unknown in_info_type of %u "
500 (unsigned int)in_info_type
,
503 tevent_req_nterror(req
, NT_STATUS_INVALID_PARAMETER
);
504 return tevent_req_post(req
, ev
);
507 if (state
->out_output_buffer
.length
> in_output_buffer_length
) {
508 tevent_req_nterror(req
, NT_STATUS_INFO_LENGTH_MISMATCH
);
509 return tevent_req_post(req
, ev
);
512 state
->status
= status
;
513 tevent_req_done(req
);
514 return tevent_req_post(req
, ev
);
517 static NTSTATUS
smbd_smb2_getinfo_recv(struct tevent_req
*req
,
519 DATA_BLOB
*out_output_buffer
,
523 struct smbd_smb2_getinfo_state
*state
= tevent_req_data(req
,
524 struct smbd_smb2_getinfo_state
);
526 if (tevent_req_is_nterror(req
, &status
)) {
527 tevent_req_received(req
);
531 *out_output_buffer
= state
->out_output_buffer
;
532 talloc_steal(mem_ctx
, out_output_buffer
->data
);
533 *pstatus
= state
->status
;
535 tevent_req_received(req
);