s3:smbd: allow GetInfo responses with STATUS_BUFFER_OVERFLOW to return partial, but...
[Samba.git] / source3 / smbd / smb2_getinfo.c
blob7a41b1914df50b12a5605c30b3aab57fbc1ac6c0
1 /*
2 Unix SMB/CIFS implementation.
3 Core SMB2 server
5 Copyright (C) Stefan Metzmacher 2009
6 Copyright (C) Jeremy Allison 2010
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "includes.h"
23 #include "smbd/smbd.h"
24 #include "smbd/globals.h"
25 #include "../libcli/smb/smb_common.h"
26 #include "trans2.h"
27 #include "../lib/util/tevent_ntstatus.h"
29 static struct tevent_req *smbd_smb2_getinfo_send(TALLOC_CTX *mem_ctx,
30 struct tevent_context *ev,
31 struct smbd_smb2_request *smb2req,
32 struct files_struct *in_fsp,
33 uint8_t in_info_type,
34 uint8_t in_file_info_class,
35 uint32_t in_output_buffer_length,
36 DATA_BLOB in_input_buffer,
37 uint32_t in_additional_information,
38 uint32_t in_flags);
39 static NTSTATUS smbd_smb2_getinfo_recv(struct tevent_req *req,
40 TALLOC_CTX *mem_ctx,
41 DATA_BLOB *out_output_buffer,
42 NTSTATUS *p_call_status);
44 static void smbd_smb2_request_getinfo_done(struct tevent_req *subreq);
45 NTSTATUS smbd_smb2_request_process_getinfo(struct smbd_smb2_request *req)
47 NTSTATUS status;
48 const uint8_t *inbody;
49 uint8_t in_info_type;
50 uint8_t in_file_info_class;
51 uint32_t in_output_buffer_length;
52 uint16_t in_input_buffer_offset;
53 uint32_t in_input_buffer_length;
54 DATA_BLOB in_input_buffer;
55 uint32_t in_additional_information;
56 uint32_t in_flags;
57 uint64_t in_file_id_persistent;
58 uint64_t in_file_id_volatile;
59 struct files_struct *in_fsp;
60 struct tevent_req *subreq;
62 status = smbd_smb2_request_verify_sizes(req, 0x29);
63 if (!NT_STATUS_IS_OK(status)) {
64 return smbd_smb2_request_error(req, status);
66 inbody = SMBD_SMB2_IN_BODY_PTR(req);
68 in_info_type = CVAL(inbody, 0x02);
69 in_file_info_class = CVAL(inbody, 0x03);
70 in_output_buffer_length = IVAL(inbody, 0x04);
71 in_input_buffer_offset = SVAL(inbody, 0x08);
72 /* 0x0A 2 bytes reserved */
73 in_input_buffer_length = IVAL(inbody, 0x0C);
74 in_additional_information = IVAL(inbody, 0x10);
75 in_flags = IVAL(inbody, 0x14);
76 in_file_id_persistent = BVAL(inbody, 0x18);
77 in_file_id_volatile = BVAL(inbody, 0x20);
79 if (in_input_buffer_offset == 0 && in_input_buffer_length == 0) {
80 /* This is ok */
81 } else if (in_input_buffer_offset !=
82 (SMB2_HDR_BODY + SMBD_SMB2_IN_BODY_LEN(req))) {
83 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
86 if (in_input_buffer_length > SMBD_SMB2_IN_DYN_LEN(req)) {
87 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
90 in_input_buffer.data = SMBD_SMB2_IN_DYN_PTR(req);
91 in_input_buffer.length = in_input_buffer_length;
93 if (in_input_buffer.length > req->sconn->smb2.max_trans) {
94 DEBUG(2,("smbd_smb2_request_process_getinfo: "
95 "client ignored max trans: %s: 0x%08X: 0x%08X\n",
96 __location__, (unsigned)in_input_buffer.length,
97 (unsigned)req->sconn->smb2.max_trans));
98 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
100 if (in_output_buffer_length > req->sconn->smb2.max_trans) {
101 DEBUG(2,("smbd_smb2_request_process_getinfo: "
102 "client ignored max trans: %s: 0x%08X: 0x%08X\n",
103 __location__, in_output_buffer_length,
104 req->sconn->smb2.max_trans));
105 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
108 status = smbd_smb2_request_verify_creditcharge(req,
109 MAX(in_input_buffer.length,in_output_buffer_length));
110 if (!NT_STATUS_IS_OK(status)) {
111 return smbd_smb2_request_error(req, status);
114 in_fsp = file_fsp_smb2(req, in_file_id_persistent, in_file_id_volatile);
115 if (in_fsp == NULL) {
116 return smbd_smb2_request_error(req, NT_STATUS_FILE_CLOSED);
119 subreq = smbd_smb2_getinfo_send(req, req->sconn->ev_ctx,
120 req, in_fsp,
121 in_info_type,
122 in_file_info_class,
123 in_output_buffer_length,
124 in_input_buffer,
125 in_additional_information,
126 in_flags);
127 if (subreq == NULL) {
128 return smbd_smb2_request_error(req, NT_STATUS_NO_MEMORY);
130 tevent_req_set_callback(subreq, smbd_smb2_request_getinfo_done, req);
132 return smbd_smb2_request_pending_queue(req, subreq, 500);
135 static void smbd_smb2_request_getinfo_done(struct tevent_req *subreq)
137 struct smbd_smb2_request *req = tevent_req_callback_data(subreq,
138 struct smbd_smb2_request);
139 DATA_BLOB outbody;
140 DATA_BLOB outdyn;
141 uint16_t out_output_buffer_offset;
142 DATA_BLOB out_output_buffer = data_blob_null;
143 NTSTATUS status;
144 NTSTATUS call_status = NT_STATUS_OK;
145 NTSTATUS error; /* transport error */
147 status = smbd_smb2_getinfo_recv(subreq,
148 req,
149 &out_output_buffer,
150 &call_status);
151 TALLOC_FREE(subreq);
152 if (!NT_STATUS_IS_OK(status)) {
153 error = smbd_smb2_request_error(req, status);
154 if (!NT_STATUS_IS_OK(error)) {
155 smbd_server_connection_terminate(req->sconn,
156 nt_errstr(error));
157 return;
159 return;
162 /* some GetInfo responses set STATUS_BUFFER_OVERFLOW and return partial,
163 but valid data */
164 if (!(NT_STATUS_IS_OK(call_status) ||
165 NT_STATUS_EQUAL(call_status, STATUS_BUFFER_OVERFLOW))) {
166 /* Return a specific error with data. */
167 error = smbd_smb2_request_error_ex(req,
168 call_status,
169 &out_output_buffer,
170 __location__);
171 if (!NT_STATUS_IS_OK(error)) {
172 smbd_server_connection_terminate(req->sconn,
173 nt_errstr(error));
174 return;
176 return;
179 out_output_buffer_offset = SMB2_HDR_BODY + 0x08;
181 outbody = data_blob_talloc(req->out.vector, NULL, 0x08);
182 if (outbody.data == NULL) {
183 error = smbd_smb2_request_error(req, NT_STATUS_NO_MEMORY);
184 if (!NT_STATUS_IS_OK(error)) {
185 smbd_server_connection_terminate(req->sconn,
186 nt_errstr(error));
187 return;
189 return;
192 SSVAL(outbody.data, 0x00, 0x08 + 1); /* struct size */
193 SSVAL(outbody.data, 0x02,
194 out_output_buffer_offset); /* output buffer offset */
195 SIVAL(outbody.data, 0x04,
196 out_output_buffer.length); /* output buffer length */
198 outdyn = out_output_buffer;
200 error = smbd_smb2_request_done_ex(req, call_status, outbody, &outdyn, __location__);
201 if (!NT_STATUS_IS_OK(error)) {
202 smbd_server_connection_terminate(req->sconn,
203 nt_errstr(error));
204 return;
208 struct smbd_smb2_getinfo_state {
209 struct smbd_smb2_request *smb2req;
210 NTSTATUS status;
211 DATA_BLOB out_output_buffer;
214 static void smb2_ipc_getinfo(struct tevent_req *req,
215 struct smbd_smb2_getinfo_state *state,
216 struct tevent_context *ev,
217 uint8_t in_info_type,
218 uint8_t in_file_info_class)
220 /* We want to reply to SMB2_GETINFO_FILE
221 with a class of SMB2_FILE_STANDARD_INFO as
222 otherwise a Win7 client issues this request
223 twice (2xroundtrips) if we return NOT_SUPPORTED.
224 NB. We do the same for SMB1 in call_trans2qpipeinfo() */
226 if (in_info_type == 0x01 && /* SMB2_GETINFO_FILE */
227 in_file_info_class == 0x05) { /* SMB2_FILE_STANDARD_INFO */
228 state->out_output_buffer = data_blob_talloc(state,
229 NULL, 24);
230 if (tevent_req_nomem(state->out_output_buffer.data, req)) {
231 return;
234 memset(state->out_output_buffer.data,0,24);
235 SOFF_T(state->out_output_buffer.data,0,4096LL);
236 SIVAL(state->out_output_buffer.data,16,1);
237 SIVAL(state->out_output_buffer.data,20,1);
238 tevent_req_done(req);
239 } else {
240 tevent_req_nterror(req, NT_STATUS_NOT_SUPPORTED);
244 static struct tevent_req *smbd_smb2_getinfo_send(TALLOC_CTX *mem_ctx,
245 struct tevent_context *ev,
246 struct smbd_smb2_request *smb2req,
247 struct files_struct *fsp,
248 uint8_t in_info_type,
249 uint8_t in_file_info_class,
250 uint32_t in_output_buffer_length,
251 DATA_BLOB in_input_buffer,
252 uint32_t in_additional_information,
253 uint32_t in_flags)
255 struct tevent_req *req;
256 struct smbd_smb2_getinfo_state *state;
257 struct smb_request *smbreq;
258 connection_struct *conn = smb2req->tcon->compat;
259 NTSTATUS status;
261 req = tevent_req_create(mem_ctx, &state,
262 struct smbd_smb2_getinfo_state);
263 if (req == NULL) {
264 return NULL;
266 state->smb2req = smb2req;
267 state->status = NT_STATUS_OK;
268 state->out_output_buffer = data_blob_null;
270 DEBUG(10,("smbd_smb2_getinfo_send: %s - %s\n",
271 fsp_str_dbg(fsp), fsp_fnum_dbg(fsp)));
273 smbreq = smbd_smb2_fake_smb_request(smb2req);
274 if (tevent_req_nomem(smbreq, req)) {
275 return tevent_req_post(req, ev);
278 if (IS_IPC(conn)) {
279 smb2_ipc_getinfo(req, state, ev,
280 in_info_type, in_file_info_class);
281 return tevent_req_post(req, ev);
284 switch (in_info_type) {
285 case 0x01:/* SMB2_GETINFO_FILE */
287 uint16_t file_info_level;
288 char *data = NULL;
289 unsigned int data_size = 0;
290 bool delete_pending = false;
291 struct timespec write_time_ts;
292 struct file_id fileid;
293 struct ea_list *ea_list = NULL;
294 int lock_data_count = 0;
295 char *lock_data = NULL;
297 ZERO_STRUCT(write_time_ts);
299 switch (in_file_info_class) {
300 case 0x0F:/* RAW_FILEINFO_SMB2_ALL_EAS */
301 file_info_level = 0xFF00 | in_file_info_class;
302 break;
304 case 0x12:/* RAW_FILEINFO_SMB2_ALL_INFORMATION */
305 file_info_level = 0xFF00 | in_file_info_class;
306 break;
308 default:
309 /* the levels directly map to the passthru levels */
310 file_info_level = in_file_info_class + 1000;
311 break;
314 if (fsp->fake_file_handle) {
316 * This is actually for the QUOTA_FAKE_FILE --metze
319 /* We know this name is ok, it's already passed the checks. */
321 } else if (fsp->fh->fd == -1) {
323 * This is actually a QFILEINFO on a directory
324 * handle (returned from an NT SMB). NT5.0 seems
325 * to do this call. JRA.
328 if (INFO_LEVEL_IS_UNIX(file_info_level)) {
329 /* Always do lstat for UNIX calls. */
330 if (SMB_VFS_LSTAT(conn, fsp->fsp_name)) {
331 DEBUG(3,("smbd_smb2_getinfo_send: "
332 "SMB_VFS_LSTAT of %s failed "
333 "(%s)\n", fsp_str_dbg(fsp),
334 strerror(errno)));
335 status = map_nt_error_from_unix(errno);
336 tevent_req_nterror(req, status);
337 return tevent_req_post(req, ev);
339 } else if (SMB_VFS_STAT(conn, fsp->fsp_name)) {
340 DEBUG(3,("smbd_smb2_getinfo_send: "
341 "SMB_VFS_STAT of %s failed (%s)\n",
342 fsp_str_dbg(fsp),
343 strerror(errno)));
344 status = map_nt_error_from_unix(errno);
345 tevent_req_nterror(req, status);
346 return tevent_req_post(req, ev);
349 fileid = vfs_file_id_from_sbuf(conn,
350 &fsp->fsp_name->st);
351 get_file_infos(fileid, fsp->name_hash,
352 &delete_pending, &write_time_ts);
353 } else {
355 * Original code - this is an open file.
358 if (SMB_VFS_FSTAT(fsp, &fsp->fsp_name->st) != 0) {
359 DEBUG(3, ("smbd_smb2_getinfo_send: "
360 "fstat of %s failed (%s)\n",
361 fsp_fnum_dbg(fsp), strerror(errno)));
362 status = map_nt_error_from_unix(errno);
363 tevent_req_nterror(req, status);
364 return tevent_req_post(req, ev);
366 fileid = vfs_file_id_from_sbuf(conn,
367 &fsp->fsp_name->st);
368 get_file_infos(fileid, fsp->name_hash,
369 &delete_pending, &write_time_ts);
372 status = smbd_do_qfilepathinfo(conn, state,
373 file_info_level,
374 fsp,
375 fsp->fsp_name,
376 delete_pending,
377 write_time_ts,
378 ea_list,
379 lock_data_count,
380 lock_data,
381 STR_UNICODE,
382 in_output_buffer_length,
383 &data,
384 &data_size);
385 if (!NT_STATUS_IS_OK(status)) {
386 SAFE_FREE(data);
387 if (NT_STATUS_EQUAL(status, NT_STATUS_INVALID_LEVEL)) {
388 status = NT_STATUS_INVALID_INFO_CLASS;
390 tevent_req_nterror(req, status);
391 return tevent_req_post(req, ev);
393 if (data_size > 0) {
394 state->out_output_buffer = data_blob_talloc(state,
395 data,
396 data_size);
397 SAFE_FREE(data);
398 if (tevent_req_nomem(state->out_output_buffer.data, req)) {
399 return tevent_req_post(req, ev);
402 SAFE_FREE(data);
403 break;
406 case 0x02:/* SMB2_GETINFO_FS */
408 uint16_t file_info_level;
409 char *data = NULL;
410 int data_size = 0;
412 /* the levels directly map to the passthru levels */
413 file_info_level = in_file_info_class + 1000;
415 status = smbd_do_qfsinfo(conn, state,
416 file_info_level,
417 STR_UNICODE,
418 in_output_buffer_length,
419 fsp->fsp_name,
420 &data,
421 &data_size);
422 /* some responses set STATUS_BUFFER_OVERFLOW and return
423 partial, but valid data */
424 if (!(NT_STATUS_IS_OK(status) ||
425 NT_STATUS_EQUAL(status, STATUS_BUFFER_OVERFLOW))) {
426 SAFE_FREE(data);
427 if (NT_STATUS_EQUAL(status, NT_STATUS_INVALID_LEVEL)) {
428 status = NT_STATUS_INVALID_INFO_CLASS;
430 tevent_req_nterror(req, status);
431 return tevent_req_post(req, ev);
433 if (data_size > 0) {
434 state->out_output_buffer = data_blob_talloc(state,
435 data,
436 data_size);
437 SAFE_FREE(data);
438 if (tevent_req_nomem(state->out_output_buffer.data, req)) {
439 return tevent_req_post(req, ev);
442 SAFE_FREE(data);
443 break;
446 case 0x03:/* SMB2_GETINFO_SEC */
448 uint8_t *p_marshalled_sd = NULL;
449 size_t sd_size = 0;
451 status = smbd_do_query_security_desc(conn,
452 state,
453 fsp,
454 /* Security info wanted. */
455 in_additional_information,
456 in_output_buffer_length,
457 &p_marshalled_sd,
458 &sd_size);
460 if (NT_STATUS_EQUAL(status, NT_STATUS_BUFFER_TOO_SMALL)) {
461 /* Return needed size. */
462 state->out_output_buffer = data_blob_talloc(state,
463 NULL,
465 if (tevent_req_nomem(state->out_output_buffer.data, req)) {
466 return tevent_req_post(req, ev);
468 SIVAL(state->out_output_buffer.data,0,(uint32_t)sd_size);
469 state->status = NT_STATUS_BUFFER_TOO_SMALL;
470 break;
472 if (!NT_STATUS_IS_OK(status)) {
473 DEBUG(10,("smbd_smb2_getinfo_send: "
474 "smbd_do_query_security_desc of %s failed "
475 "(%s)\n", fsp_str_dbg(fsp),
476 nt_errstr(status)));
477 tevent_req_nterror(req, status);
478 return tevent_req_post(req, ev);
481 if (sd_size > 0) {
482 state->out_output_buffer = data_blob_talloc(state,
483 p_marshalled_sd,
484 sd_size);
485 if (tevent_req_nomem(state->out_output_buffer.data, req)) {
486 return tevent_req_post(req, ev);
489 break;
492 case 0x04: /* SMB2_0_INFO_QUOTA */
493 tevent_req_nterror(req, NT_STATUS_NOT_SUPPORTED);
494 return tevent_req_post(req, ev);
496 default:
497 DEBUG(10,("smbd_smb2_getinfo_send: "
498 "unknown in_info_type of %u "
499 " for file %s\n",
500 (unsigned int)in_info_type,
501 fsp_str_dbg(fsp) ));
503 tevent_req_nterror(req, NT_STATUS_INVALID_PARAMETER);
504 return tevent_req_post(req, ev);
507 if (state->out_output_buffer.length > in_output_buffer_length) {
508 tevent_req_nterror(req, NT_STATUS_INFO_LENGTH_MISMATCH);
509 return tevent_req_post(req, ev);
512 state->status = status;
513 tevent_req_done(req);
514 return tevent_req_post(req, ev);
517 static NTSTATUS smbd_smb2_getinfo_recv(struct tevent_req *req,
518 TALLOC_CTX *mem_ctx,
519 DATA_BLOB *out_output_buffer,
520 NTSTATUS *pstatus)
522 NTSTATUS status;
523 struct smbd_smb2_getinfo_state *state = tevent_req_data(req,
524 struct smbd_smb2_getinfo_state);
526 if (tevent_req_is_nterror(req, &status)) {
527 tevent_req_received(req);
528 return status;
531 *out_output_buffer = state->out_output_buffer;
532 talloc_steal(mem_ctx, out_output_buffer->data);
533 *pstatus = state->status;
535 tevent_req_received(req);
536 return NT_STATUS_OK;