?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
CVE-2020-1472(ZeroLogon): torture: ServerSetPassword2 all zero password
[Samba.git] / source3 / libsmb / clirap.c
blob3b47fd73323e4a5c8af16b59e71091a5a028ff8f
1 /*
2 Unix SMB/CIFS implementation.
3 client RAP calls
4 Copyright (C) Andrew Tridgell 1994-1998
5 Copyright (C) Gerald (Jerry) Carter 2004
6 Copyright (C) James Peach 2007
7
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
12
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
17
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
20 */
21
22 #include "includes.h"
23 #include "../libcli/auth/libcli_auth.h"
24 #include "../librpc/gen_ndr/rap.h"
25 #include "../lib/util/tevent_ntstatus.h"
26 #include "async_smb.h"
27 #include "libsmb/libsmb.h"
28 #include "libsmb/clirap.h"
29 #include "trans2.h"
30 #include "../libcli/smb/smbXcli_base.h"
31 #include "cli_smb2_fnum.h"
32 #include "lib/util/string_wrappers.h"
33
34 #include <gnutls/gnutls.h>
35 #include <gnutls/crypto.h>
36
37 #define PIPE_LANMAN "\\PIPE\\LANMAN"
38
39 /****************************************************************************
40 Call a remote api
41 ****************************************************************************/
42
43 bool cli_api(struct cli_state *cli,
44 char *param, int prcnt, int mprcnt,
45 char *data, int drcnt, int mdrcnt,
46 char **rparam, unsigned int *rprcnt,
47 char **rdata, unsigned int *rdrcnt)
48 {
49 NTSTATUS status;
50
51 uint8_t *my_rparam, *my_rdata;
52 uint32_t num_my_rparam, num_my_rdata;
53
54 status = cli_trans(talloc_tos(), cli, SMBtrans,
55 PIPE_LANMAN, 0, /* name, fid */
56 0, 0, /* function, flags */
57 NULL, 0, 0, /* setup */
58 (uint8_t *)param, prcnt, mprcnt, /* Params, length, max */
59 (uint8_t *)data, drcnt, mdrcnt, /* Data, length, max */
60 NULL, /* recv_flags2 */
61 NULL, 0, NULL, /* rsetup */
62 &my_rparam, 0, &num_my_rparam,
63 &my_rdata, 0, &num_my_rdata);
64 if (!NT_STATUS_IS_OK(status)) {
65 return false;
66 }
67
68 /*
69 * I know this memcpy massively hurts, but there are just tons
70 * of callers of cli_api that eventually need changing to
71 * talloc
72 */
73
74 *rparam = (char *)smb_memdup(my_rparam, num_my_rparam);
75 if (*rparam == NULL) {
76 goto fail;
77 }
78 *rprcnt = num_my_rparam;
79 TALLOC_FREE(my_rparam);
80
81 *rdata = (char *)smb_memdup(my_rdata, num_my_rdata);
82 if (*rdata == NULL) {
83 goto fail;
84 }
85 *rdrcnt = num_my_rdata;
86 TALLOC_FREE(my_rdata);
87
88 return true;
89 fail:
90 TALLOC_FREE(my_rdata);
91 TALLOC_FREE(my_rparam);
92 *rparam = NULL;
93 *rprcnt = 0;
94 *rdata = NULL;
95 *rdrcnt = 0;
96 return false;
97 }
98
99 /****************************************************************************
100 Call a NetShareEnum - try and browse available connections on a host.
101 ****************************************************************************/
102
103 int cli_RNetShareEnum(struct cli_state *cli, void (*fn)(const char *, uint32_t, const char *, void *), void *state)
104 {
105 char *rparam = NULL;
106 char *rdata = NULL;
107 char *p;
108 unsigned int rdrcnt,rprcnt;
109 char param[1024];
110 int count = -1;
111 bool ok;
112 int res;
113
114 /* now send a SMBtrans command with api RNetShareEnum */
115 p = param;
116 SSVAL(p,0,0); /* api number */
117 p += 2;
118 strlcpy(p,"WrLeh",sizeof(param)-PTR_DIFF(p,param));
119 p = skip_string(param,sizeof(param),p);
120 strlcpy(p,"B13BWz",sizeof(param)-PTR_DIFF(p,param));
121 p = skip_string(param,sizeof(param),p);
122 SSVAL(p,0,1);
123 /*
124 * Win2k needs a *smaller* buffer than 0xFFFF here -
125 * it returns "out of server memory" with 0xFFFF !!! JRA.
126 */
127 SSVAL(p,2,0xFFE0);
128 p += 4;
129
130 ok = cli_api(
131 cli,
132 param, PTR_DIFF(p,param), 1024, /* Param, length, maxlen */
133 NULL, 0, 0xFFE0, /* data, length, maxlen - Win2k needs a small buffer here too ! */
134 &rparam, &rprcnt, /* return params, length */
135 &rdata, &rdrcnt); /* return data, length */
136 if (!ok) {
137 DEBUG(4,("NetShareEnum failed\n"));
138 goto done;
139 }
140
141 if (rprcnt < 6) {
142 DBG_ERR("Got invalid result: rprcnt=%u\n", rprcnt);
143 goto done;
144 }
145
146 res = rparam? SVAL(rparam,0) : -1;
147
148 if (res == 0 || res == ERRmoredata) {
149 int converter=SVAL(rparam,2);
150 int i;
151 char *rdata_end = rdata + rdrcnt;
152
153 count=SVAL(rparam,4);
154 p = rdata;
155
156 for (i=0;i<count;i++,p+=20) {
157 char *sname;
158 int type;
159 int comment_offset;
160 const char *cmnt;
161 const char *p1;
162 char *s1, *s2;
163 size_t len;
164 TALLOC_CTX *frame = talloc_stackframe();
165
166 if (p + 20 > rdata_end) {
167 TALLOC_FREE(frame);
168 break;
169 }
170
171 sname = p;
172 type = SVAL(p,14);
173 comment_offset = (IVAL(p,16) & 0xFFFF) - converter;
174 if (comment_offset < 0 ||
175 comment_offset > (int)rdrcnt) {
176 TALLOC_FREE(frame);
177 break;
178 }
179 cmnt = comment_offset?(rdata+comment_offset):"";
180
181 /* Work out the comment length. */
182 for (p1 = cmnt, len = 0; *p1 &&
183 p1 < rdata_end; len++)
184 p1++;
185 if (!*p1) {
186 len++;
187 }
188 pull_string_talloc(frame,rdata,0,
189 &s1,sname,14,STR_ASCII);
190 pull_string_talloc(frame,rdata,0,
191 &s2,cmnt,len,STR_ASCII);
192 if (!s1 || !s2) {
193 TALLOC_FREE(frame);
194 continue;
195 }
196
197 fn(s1, type, s2, state);
198
199 TALLOC_FREE(frame);
200 }
201 } else {
202 DEBUG(4,("NetShareEnum res=%d\n", res));
203 }
204
205 done:
206 SAFE_FREE(rparam);
207 SAFE_FREE(rdata);
208
209 return count;
210 }
211
212 /****************************************************************************
213 Call a NetServerEnum for the specified workgroup and servertype mask. This
214 function then calls the specified callback function for each name returned.
215
216 The callback function takes 4 arguments: the machine name, the server type,
217 the comment and a state pointer.
218 ****************************************************************************/
219
220 bool cli_NetServerEnum(struct cli_state *cli, char *workgroup, uint32_t stype,
221 void (*fn)(const char *, uint32_t, const char *, void *),
222 void *state)
223 {
224 char *rparam = NULL;
225 char *rdata = NULL;
226 char *rdata_end = NULL;
227 unsigned int rdrcnt,rprcnt;
228 char *p;
229 char param[1024];
230 int uLevel = 1;
231 size_t len;
232 uint32_t func = RAP_NetServerEnum2;
233 char *last_entry = NULL;
234 int total_cnt = 0;
235 int return_cnt = 0;
236 int res;
237
238 errno = 0; /* reset */
239
240 /*
241 * This may take more than one transaction, so we should loop until
242 * we no longer get a more data to process or we have all of the
243 * items.
244 */
245 do {
246 /* send a SMBtrans command with api NetServerEnum */
247 p = param;
248 SIVAL(p,0,func); /* api number */
249 p += 2;
250
251 if (func == RAP_NetServerEnum3) {
252 strlcpy(p,"WrLehDzz", sizeof(param)-PTR_DIFF(p,param));
253 } else {
254 strlcpy(p,"WrLehDz", sizeof(param)-PTR_DIFF(p,param));
255 }
256
257 p = skip_string(param, sizeof(param), p);
258 strlcpy(p,"B16BBDz", sizeof(param)-PTR_DIFF(p,param));
259
260 p = skip_string(param, sizeof(param), p);
261 SSVAL(p,0,uLevel);
262 SSVAL(p,2,CLI_BUFFER_SIZE);
263 p += 4;
264 SIVAL(p,0,stype);
265 p += 4;
266
267 /* If we have more data, tell the server where
268 * to continue from.
269 */
270 len = push_ascii(p,
271 workgroup,
272 sizeof(param) - PTR_DIFF(p,param) - 1,
273 STR_TERMINATE|STR_UPPER);
274
275 if (len == 0) {
276 SAFE_FREE(last_entry);
277 return false;
278 }
279 p += len;
280
281 if (func == RAP_NetServerEnum3) {
282 len = push_ascii(p,
283 last_entry ? last_entry : "",
284 sizeof(param) - PTR_DIFF(p,param) - 1,
285 STR_TERMINATE);
286
287 if (len == 0) {
288 SAFE_FREE(last_entry);
289 return false;
290 }
291 p += len;
292 }
293
294 /* Next time through we need to use the continue api */
295 func = RAP_NetServerEnum3;
296
297 if (!cli_api(cli,
298 param, PTR_DIFF(p,param), 8, /* params, length, max */
299 NULL, 0, CLI_BUFFER_SIZE, /* data, length, max */
300 &rparam, &rprcnt, /* return params, return size */
301 &rdata, &rdrcnt)) { /* return data, return size */
302
303 /* break out of the loop on error */
304 res = -1;
305 break;
306 }
307
308 rdata_end = rdata + rdrcnt;
309
310 if (rprcnt < 6) {
311 DBG_ERR("Got invalid result: rprcnt=%u\n", rprcnt);
312 res = -1;
313 break;
314 }
315
316 res = rparam ? SVAL(rparam,0) : -1;
317
318 if (res == 0 || res == ERRmoredata ||
319 (res != -1 && cli_errno(cli) == 0)) {
320 char *sname = NULL;
321 int i, count;
322 int converter=SVAL(rparam,2);
323
324 /* Get the number of items returned in this buffer */
325 count = SVAL(rparam, 4);
326
327 /* The next field contains the number of items left,
328 * including those returned in this buffer. So the
329 * first time through this should contain all of the
330 * entries.
331 */
332 if (total_cnt == 0) {
333 total_cnt = SVAL(rparam, 6);
334 }
335
336 /* Keep track of how many we have read */
337 return_cnt += count;
338 p = rdata;
339
340 /* The last name in the previous NetServerEnum reply is
341 * sent back to server in the NetServerEnum3 request
342 * (last_entry). The next reply should repeat this entry
343 * as the first element. We have no proof that this is
344 * always true, but from traces that seems to be the
345 * behavior from Window Servers. So first lets do a lot
346 * of checking, just being paranoid. If the string
347 * matches then we already saw this entry so skip it.
348 *
349 * NOTE: sv1_name field must be null terminated and has
350 * a max size of 16 (NetBIOS Name).
351 */
352 if (last_entry && count && p &&
353 (strncmp(last_entry, p, 16) == 0)) {
354 count -= 1; /* Skip this entry */
355 return_cnt = -1; /* Not part of total, so don't count. */
356 p = rdata + 26; /* Skip the whole record */
357 }
358
359 for (i = 0; i < count; i++, p += 26) {
360 int comment_offset;
361 const char *cmnt;
362 const char *p1;
363 char *s1, *s2;
364 TALLOC_CTX *frame = talloc_stackframe();
365 uint32_t entry_stype;
366
367 if (p + 26 > rdata_end) {
368 TALLOC_FREE(frame);
369 break;
370 }
371
372 sname = p;
373 comment_offset = (IVAL(p,22) & 0xFFFF)-converter;
374 cmnt = comment_offset?(rdata+comment_offset):"";
375
376 if (comment_offset < 0 || comment_offset >= (int)rdrcnt) {
377 TALLOC_FREE(frame);
378 continue;
379 }
380
381 /* Work out the comment length. */
382 for (p1 = cmnt, len = 0; *p1 &&
383 p1 < rdata_end; len++)
384 p1++;
385 if (!*p1) {
386 len++;
387 }
388
389 entry_stype = IVAL(p,18) & ~SV_TYPE_LOCAL_LIST_ONLY;
390
391 pull_string_talloc(frame,rdata,0,
392 &s1,sname,16,STR_ASCII);
393 pull_string_talloc(frame,rdata,0,
394 &s2,cmnt,len,STR_ASCII);
395
396 if (!s1 || !s2) {
397 TALLOC_FREE(frame);
398 continue;
399 }
400
401 fn(s1, entry_stype, s2, state);
402 TALLOC_FREE(frame);
403 }
404
405 /* We are done with the old last entry, so now we can free it */
406 if (last_entry) {
407 SAFE_FREE(last_entry); /* This will set it to null */
408 }
409
410 /* We always make a copy of the last entry if we have one */
411 if (sname) {
412 last_entry = smb_xstrdup(sname);
413 }
414
415 /* If we have more data, but no last entry then error out */
416 if (!last_entry && (res == ERRmoredata)) {
417 errno = EINVAL;
418 res = 0;
419 }
420
421 }
422
423 SAFE_FREE(rparam);
424 SAFE_FREE(rdata);
425 } while ((res == ERRmoredata) && (total_cnt > return_cnt));
426
427 SAFE_FREE(rparam);
428 SAFE_FREE(rdata);
429 SAFE_FREE(last_entry);
430
431 if (res == -1) {
432 errno = cli_errno(cli);
433 } else {
434 if (!return_cnt) {
435 /* this is a very special case, when the domain master for the
436 work group isn't part of the work group itself, there is something
437 wild going on */
438 errno = ENOENT;
439 }
440 }
441
442 return(return_cnt > 0);
443 }
444
445 /****************************************************************************
446 Send a SamOEMChangePassword command.
447 ****************************************************************************/
448
449 bool cli_oem_change_password(struct cli_state *cli, const char *user, const char *new_password,
450 const char *old_password)
451 {
452 char param[1024];
453 unsigned char data[532];
454 char *p = param;
455 unsigned char old_pw_hash[16];
456 unsigned char new_pw_hash[16];
457 unsigned int data_len;
458 unsigned int param_len = 0;
459 char *rparam = NULL;
460 char *rdata = NULL;
461 unsigned int rprcnt, rdrcnt;
462 gnutls_cipher_hd_t cipher_hnd = NULL;
463 gnutls_datum_t old_pw_key = {
464 .data = old_pw_hash,
465 .size = sizeof(old_pw_hash),
466 };
467 int rc;
468
469 if (strlen(user) >= sizeof(fstring)-1) {
470 DEBUG(0,("cli_oem_change_password: user name %s is too long.\n", user));
471 return False;
472 }
473
474 SSVAL(p,0,214); /* SamOEMChangePassword command. */
475 p += 2;
476 strlcpy(p, "zsT", sizeof(param)-PTR_DIFF(p,param));
477 p = skip_string(param,sizeof(param),p);
478 strlcpy(p, "B516B16", sizeof(param)-PTR_DIFF(p,param));
479 p = skip_string(param,sizeof(param),p);
480 strlcpy(p,user, sizeof(param)-PTR_DIFF(p,param));
481 p = skip_string(param,sizeof(param),p);
482 SSVAL(p,0,532);
483 p += 2;
484
485 param_len = PTR_DIFF(p,param);
486
487 /*
488 * Get the Lanman hash of the old password, we
489 * use this as the key to make_oem_passwd_hash().
490 */
491 E_deshash(old_password, old_pw_hash);
492
493 encode_pw_buffer(data, new_password, STR_ASCII);
494
495 #ifdef DEBUG_PASSWORD
496 DEBUG(100,("make_oem_passwd_hash\n"));
497 dump_data(100, data, 516);
498 #endif
499 rc = gnutls_cipher_init(&cipher_hnd,
500 GNUTLS_CIPHER_ARCFOUR_128,
501 &old_pw_key,
502 NULL);
503 if (rc < 0) {
504 DBG_ERR("gnutls_cipher_init failed: %s\n",
505 gnutls_strerror(rc));
506 return false;
507 }
508 rc = gnutls_cipher_encrypt(cipher_hnd,
509 data,
510 516);
511 gnutls_cipher_deinit(cipher_hnd);
512 if (rc < 0) {
513 return false;
514 }
515
516 /*
517 * Now place the old password hash in the data.
518 */
519 E_deshash(new_password, new_pw_hash);
520
521 rc = E_old_pw_hash( new_pw_hash, old_pw_hash, (uchar *)&data[516]);
522 if (rc != 0) {
523 DBG_ERR("E_old_pw_hash failed: %s\n", gnutls_strerror(rc));
524 return false;
525 }
526
527 data_len = 532;
528
529 if (!cli_api(cli,
530 param, param_len, 4, /* param, length, max */
531 (char *)data, data_len, 0, /* data, length, max */
532 &rparam, &rprcnt,
533 &rdata, &rdrcnt)) {
534 DEBUG(0,("cli_oem_change_password: Failed to send password change for user %s\n",
535 user ));
536 return False;
537 }
538
539 if (rdrcnt < 2) {
540 cli->rap_error = ERRbadformat;
541 goto done;
542 }
543
544 if (rparam) {
545 cli->rap_error = SVAL(rparam,0);
546 }
547
548 done:
549 SAFE_FREE(rparam);
550 SAFE_FREE(rdata);
551
552 return (cli->rap_error == 0);
553 }
554
555 /****************************************************************************
556 Send a qpathinfo call.
557 ****************************************************************************/
558
559 struct cli_qpathinfo1_state {
560 struct cli_state *cli;
561 uint32_t num_data;
562 uint8_t *data;
563 };
564
565 static void cli_qpathinfo1_done(struct tevent_req *subreq);
566
567 struct tevent_req *cli_qpathinfo1_send(TALLOC_CTX *mem_ctx,
568 struct tevent_context *ev,
569 struct cli_state *cli,
570 const char *fname)
571 {
572 struct tevent_req *req = NULL, *subreq = NULL;
573 struct cli_qpathinfo1_state *state = NULL;
574
575 req = tevent_req_create(mem_ctx, &state, struct cli_qpathinfo1_state);
576 if (req == NULL) {
577 return NULL;
578 }
579 state->cli = cli;
580 subreq = cli_qpathinfo_send(state, ev, cli, fname, SMB_INFO_STANDARD,
581 22, CLI_BUFFER_SIZE);
582 if (tevent_req_nomem(subreq, req)) {
583 return tevent_req_post(req, ev);
584 }
585 tevent_req_set_callback(subreq, cli_qpathinfo1_done, req);
586 return req;
587 }
588
589 static void cli_qpathinfo1_done(struct tevent_req *subreq)
590 {
591 struct tevent_req *req = tevent_req_callback_data(
592 subreq, struct tevent_req);
593 struct cli_qpathinfo1_state *state = tevent_req_data(
594 req, struct cli_qpathinfo1_state);
595 NTSTATUS status;
596
597 status = cli_qpathinfo_recv(subreq, state, &state->data,
598 &state->num_data);
599 TALLOC_FREE(subreq);
600 if (!NT_STATUS_IS_OK(status)) {
601 tevent_req_nterror(req, status);
602 return;
603 }
604 tevent_req_done(req);
605 }
606
607 NTSTATUS cli_qpathinfo1_recv(struct tevent_req *req,
608 time_t *change_time,
609 time_t *access_time,
610 time_t *write_time,
611 off_t *size,
612 uint32_t *pattr)
613 {
614 struct cli_qpathinfo1_state *state = tevent_req_data(
615 req, struct cli_qpathinfo1_state);
616 NTSTATUS status;
617
618 time_t (*date_fn)(const void *buf, int serverzone);
619
620 if (tevent_req_is_nterror(req, &status)) {
621 return status;
622 }
623
624 if (state->cli->win95) {
625 date_fn = make_unix_date;
626 } else {
627 date_fn = make_unix_date2;
628 }
629
630 if (change_time) {
631 *change_time = date_fn(state->data+0, smb1cli_conn_server_time_zone(state->cli->conn));
632 }
633 if (access_time) {
634 *access_time = date_fn(state->data+4, smb1cli_conn_server_time_zone(state->cli->conn));
635 }
636 if (write_time) {
637 *write_time = date_fn(state->data+8, smb1cli_conn_server_time_zone(state->cli->conn));
638 }
639 if (size) {
640 *size = IVAL(state->data, 12);
641 }
642 if (pattr) {
643 *pattr = SVAL(state->data, l1_attrFile);
644 }
645 return NT_STATUS_OK;
646 }
647
648 NTSTATUS cli_qpathinfo1(struct cli_state *cli,
649 const char *fname,
650 time_t *change_time,
651 time_t *access_time,
652 time_t *write_time,
653 off_t *size,
654 uint32_t *pattr)
655 {
656 TALLOC_CTX *frame = talloc_stackframe();
657 struct tevent_context *ev;
658 struct tevent_req *req;
659 NTSTATUS status = NT_STATUS_NO_MEMORY;
660
661 if (smbXcli_conn_has_async_calls(cli->conn)) {
662 /*
663 * Can't use sync call while an async call is in flight
664 */
665 status = NT_STATUS_INVALID_PARAMETER;
666 goto fail;
667 }
668 ev = samba_tevent_context_init(frame);
669 if (ev == NULL) {
670 goto fail;
671 }
672 req = cli_qpathinfo1_send(frame, ev, cli, fname);
673 if (req == NULL) {
674 goto fail;
675 }
676 if (!tevent_req_poll_ntstatus(req, ev, &status)) {
677 goto fail;
678 }
679 status = cli_qpathinfo1_recv(req, change_time, access_time,
680 write_time, size, pattr);
681 fail:
682 TALLOC_FREE(frame);
683 return status;
684 }
685
686 static void prep_basic_information_buf(
687 uint8_t buf[40],
688 struct timespec create_time,
689 struct timespec access_time,
690 struct timespec write_time,
691 struct timespec change_time,
692 uint32_t attr)
693 {
694 char *p = (char *)buf;
695 /*
696 * Add the create, last access, modification, and status change times
697 */
698 put_long_date_full_timespec(
699 TIMESTAMP_SET_NT_OR_BETTER, p, &create_time);
700 p += 8;
701
702 put_long_date_full_timespec(
703 TIMESTAMP_SET_NT_OR_BETTER, p, &access_time);
704 p += 8;
705
706 put_long_date_full_timespec(
707 TIMESTAMP_SET_NT_OR_BETTER, p, &write_time);
708 p += 8;
709
710 put_long_date_full_timespec(
711 TIMESTAMP_SET_NT_OR_BETTER, p, &change_time);
712 p += 8;
713
714 if (attr == (uint32_t)-1 || attr == FILE_ATTRIBUTE_NORMAL) {
715 /* No change. */
716 attr = 0;
717 } else if (attr == 0) {
718 /* Clear all existing attributes. */
719 attr = FILE_ATTRIBUTE_NORMAL;
720 }
721
722 /* Add attributes */
723 SIVAL(p, 0, attr);
724
725 p += 4;
726
727 /* Add padding */
728 SIVAL(p, 0, 0);
729 p += 4;
730
731 SMB_ASSERT(PTR_DIFF(p, buf) == 40);
732 }
733
734 NTSTATUS cli_setpathinfo_ext(struct cli_state *cli, const char *fname,
735 struct timespec create_time,
736 struct timespec access_time,
737 struct timespec write_time,
738 struct timespec change_time,
739 uint32_t attr)
740 {
741 uint8_t buf[40];
742
743 prep_basic_information_buf(
744 buf,
745 create_time,
746 access_time,
747 write_time,
748 change_time,
749 attr);
750
751 if (smbXcli_conn_protocol(cli->conn) >= PROTOCOL_SMB2_02) {
752 DATA_BLOB in_data = data_blob_const(buf, sizeof(buf));
753 /*
754 * Split out SMB2 here as we need to select
755 * the correct info type and level.
756 */
757 return cli_smb2_setpathinfo(cli,
758 fname,
759 1, /* SMB2_SETINFO_FILE */
760 SMB_FILE_BASIC_INFORMATION - 1000,
761 &in_data);
762 }
763
764 return cli_setpathinfo(
765 cli, SMB_FILE_BASIC_INFORMATION, fname, buf, sizeof(buf));
766 }
767
768 struct cli_setfileinfo_ext_state {
769 uint8_t data[40];
770 DATA_BLOB in_data;
771 };
772
773 static void cli_setfileinfo_ext_done(struct tevent_req *subreq);
774 static void cli_setfileinfo_ext_done2(struct tevent_req *subreq);
775
776 struct tevent_req *cli_setfileinfo_ext_send(
777 TALLOC_CTX *mem_ctx,
778 struct tevent_context *ev,
779 struct cli_state *cli,
780 uint16_t fnum,
781 struct timespec create_time,
782 struct timespec access_time,
783 struct timespec write_time,
784 struct timespec change_time,
785 uint32_t attr)
786 {
787 struct tevent_req *req = NULL, *subreq = NULL;
788 struct cli_setfileinfo_ext_state *state = NULL;
789
790 req = tevent_req_create(
791 mem_ctx, &state, struct cli_setfileinfo_ext_state);
792 if (req == NULL) {
793 return NULL;
794 }
795 prep_basic_information_buf(
796 state->data,
797 create_time,
798 access_time,
799 write_time,
800 change_time,
801 attr);
802
803 if (smbXcli_conn_protocol(cli->conn) >= PROTOCOL_SMB2_02) {
804 state->in_data = (DATA_BLOB) {
805 .data = state->data, .length = sizeof(state->data),
806 };
807
808 subreq = cli_smb2_set_info_fnum_send(
809 state,
810 ev,
811 cli,
812 fnum,
813 SMB2_0_INFO_FILE,
814 SMB_FILE_BASIC_INFORMATION - 1000,
815 &state->in_data,
816 0); /* in_additional_info */
817 if (tevent_req_nomem(subreq, req)) {
818 return tevent_req_post(req, ev);
819 }
820 tevent_req_set_callback(
821 subreq, cli_setfileinfo_ext_done2, req);
822 return req;
823 }
824
825 subreq = cli_setfileinfo_send(
826 state,
827 ev,
828 cli,
829 fnum,
830 SMB_FILE_BASIC_INFORMATION,
831 state->data,
832 sizeof(state->data));
833 if (tevent_req_nomem(subreq, req)) {
834 return tevent_req_post(req, ev);
835 }
836 tevent_req_set_callback(subreq, cli_setfileinfo_ext_done, req);
837 return req;
838 }
839
840 static void cli_setfileinfo_ext_done(struct tevent_req *subreq)
841 {
842 NTSTATUS status = cli_setfileinfo_recv(subreq);
843 tevent_req_simple_finish_ntstatus(subreq, status);
844 }
845
846 static void cli_setfileinfo_ext_done2(struct tevent_req *subreq)
847 {
848 NTSTATUS status = cli_smb2_set_info_fnum_recv(subreq);
849 tevent_req_simple_finish_ntstatus(subreq, status);
850 }
851
852 NTSTATUS cli_setfileinfo_ext_recv(struct tevent_req *req)
853 {
854 return tevent_req_simple_recv_ntstatus(req);
855 }
856
857 NTSTATUS cli_setfileinfo_ext(
858 struct cli_state *cli,
859 uint16_t fnum,
860 struct timespec create_time,
861 struct timespec access_time,
862 struct timespec write_time,
863 struct timespec change_time,
864 uint32_t attr)
865 {
866 TALLOC_CTX *frame = NULL;
867 struct tevent_context *ev = NULL;
868 struct tevent_req *req = NULL;
869 NTSTATUS status = NT_STATUS_NO_MEMORY;
870
871 if (smbXcli_conn_has_async_calls(cli->conn)) {
872 /*
873 * Can't use sync call while an async call is in flight
874 */
875 return NT_STATUS_INVALID_PARAMETER;
876 }
877
878 frame = talloc_stackframe();
879
880 ev = samba_tevent_context_init(frame);
881 if (ev == NULL) {
882 goto fail;
883 }
884 req = cli_setfileinfo_ext_send(
885 ev,
886 ev,
887 cli,
888 fnum,
889 create_time,
890 access_time,
891 write_time,
892 change_time,
893 attr);
894 if (req == NULL) {
895 goto fail;
896 }
897 if (!tevent_req_poll_ntstatus(req, ev, &status)) {
898 goto fail;
899 }
900 status = cli_setfileinfo_ext_recv(req);
901 fail:
902 TALLOC_FREE(frame);
903 return status;
904 }
905
906 /****************************************************************************
907 Send a qpathinfo call with the SMB_QUERY_FILE_ALL_INFO info level.
908 ****************************************************************************/
909
910 struct cli_qpathinfo2_state {
911 uint32_t num_data;
912 uint8_t *data;
913 };
914
915 static void cli_qpathinfo2_done(struct tevent_req *subreq);
916
917 struct tevent_req *cli_qpathinfo2_send(TALLOC_CTX *mem_ctx,
918 struct tevent_context *ev,
919 struct cli_state *cli,
920 const char *fname)
921 {
922 struct tevent_req *req = NULL, *subreq = NULL;
923 struct cli_qpathinfo2_state *state = NULL;
924
925 req = tevent_req_create(mem_ctx, &state, struct cli_qpathinfo2_state);
926 if (req == NULL) {
927 return NULL;
928 }
929 subreq = cli_qpathinfo_send(state, ev, cli, fname,
930 SMB_QUERY_FILE_ALL_INFO,
931 68, CLI_BUFFER_SIZE);
932 if (tevent_req_nomem(subreq, req)) {
933 return tevent_req_post(req, ev);
934 }
935 tevent_req_set_callback(subreq, cli_qpathinfo2_done, req);
936 return req;
937 }
938
939 static void cli_qpathinfo2_done(struct tevent_req *subreq)
940 {
941 struct tevent_req *req = tevent_req_callback_data(
942 subreq, struct tevent_req);
943 struct cli_qpathinfo2_state *state = tevent_req_data(
944 req, struct cli_qpathinfo2_state);
945 NTSTATUS status;
946
947 status = cli_qpathinfo_recv(subreq, state, &state->data,
948 &state->num_data);
949 TALLOC_FREE(subreq);
950 if (!NT_STATUS_IS_OK(status)) {
951 tevent_req_nterror(req, status);
952 return;
953 }
954 tevent_req_done(req);
955 }
956
957 NTSTATUS cli_qpathinfo2_recv(struct tevent_req *req,
958 struct timespec *create_time,
959 struct timespec *access_time,
960 struct timespec *write_time,
961 struct timespec *change_time,
962 off_t *size, uint32_t *pattr,
963 SMB_INO_T *ino)
964 {
965 struct cli_qpathinfo2_state *state = tevent_req_data(
966 req, struct cli_qpathinfo2_state);
967 NTSTATUS status;
968
969 if (tevent_req_is_nterror(req, &status)) {
970 return status;
971 }
972
973 if (create_time) {
974 *create_time = interpret_long_date((char *)state->data+0);
975 }
976 if (access_time) {
977 *access_time = interpret_long_date((char *)state->data+8);
978 }
979 if (write_time) {
980 *write_time = interpret_long_date((char *)state->data+16);
981 }
982 if (change_time) {
983 *change_time = interpret_long_date((char *)state->data+24);
984 }
985 if (pattr) {
986 /* SMB_QUERY_FILE_ALL_INFO returns 32-bit attributes. */
987 *pattr = IVAL(state->data, 32);
988 }
989 if (size) {
990 *size = IVAL2_TO_SMB_BIG_UINT(state->data,48);
991 }
992 if (ino) {
993 /*
994 * SMB1 qpathinfo2 uses SMB_QUERY_FILE_ALL_INFO
995 * which doesn't return an inode number (fileid).
996 * We can't change this to one of the FILE_ID
997 * info levels as only Win2003 and above support
998 * these [MS-SMB: 2.2.2.3.1] and the SMB1 code
999 * needs to support older servers.
1000 */
1001 *ino = 0;
1002 }
1003 return NT_STATUS_OK;
1004 }
1005
1006 NTSTATUS cli_qpathinfo2(struct cli_state *cli, const char *fname,
1007 struct timespec *create_time,
1008 struct timespec *access_time,
1009 struct timespec *write_time,
1010 struct timespec *change_time,
1011 off_t *size, uint32_t *pattr,
1012 SMB_INO_T *ino)
1013 {
1014 TALLOC_CTX *frame = NULL;
1015 struct tevent_context *ev;
1016 struct tevent_req *req;
1017 NTSTATUS status = NT_STATUS_NO_MEMORY;
1018
1019 if (smbXcli_conn_protocol(cli->conn) >= PROTOCOL_SMB2_02) {
1020 return cli_smb2_qpathinfo2(cli,
1021 fname,
1022 create_time,
1023 access_time,
1024 write_time,
1025 change_time,
1026 size,
1027 pattr,
1028 ino);
1029 }
1030
1031 frame = talloc_stackframe();
1032
1033 if (smbXcli_conn_has_async_calls(cli->conn)) {
1034 /*
1035 * Can't use sync call while an async call is in flight
1036 */
1037 status = NT_STATUS_INVALID_PARAMETER;
1038 goto fail;
1039 }
1040 ev = samba_tevent_context_init(frame);
1041 if (ev == NULL) {
1042 goto fail;
1043 }
1044 req = cli_qpathinfo2_send(frame, ev, cli, fname);
1045 if (req == NULL) {
1046 goto fail;
1047 }
1048 if (!tevent_req_poll_ntstatus(req, ev, &status)) {
1049 goto fail;
1050 }
1051 status = cli_qpathinfo2_recv(req, create_time, access_time,
1052 write_time, change_time, size, pattr, ino);
1053 fail:
1054 TALLOC_FREE(frame);
1055 return status;
1056 }
1057
1058 /****************************************************************************
1059 Get the stream info
1060 ****************************************************************************/
1061
1062 struct cli_qpathinfo_streams_state {
1063 uint32_t num_data;
1064 uint8_t *data;
1065 };
1066
1067 static void cli_qpathinfo_streams_done(struct tevent_req *subreq);
1068
1069 struct tevent_req *cli_qpathinfo_streams_send(TALLOC_CTX *mem_ctx,
1070 struct tevent_context *ev,
1071 struct cli_state *cli,
1072 const char *fname)
1073 {
1074 struct tevent_req *req = NULL, *subreq = NULL;
1075 struct cli_qpathinfo_streams_state *state = NULL;
1076
1077 req = tevent_req_create(mem_ctx, &state,
1078 struct cli_qpathinfo_streams_state);
1079 if (req == NULL) {
1080 return NULL;
1081 }
1082 subreq = cli_qpathinfo_send(state, ev, cli, fname,
1083 SMB_FILE_STREAM_INFORMATION,
1084 0, CLI_BUFFER_SIZE);
1085 if (tevent_req_nomem(subreq, req)) {
1086 return tevent_req_post(req, ev);
1087 }
1088 tevent_req_set_callback(subreq, cli_qpathinfo_streams_done, req);
1089 return req;
1090 }
1091
1092 static void cli_qpathinfo_streams_done(struct tevent_req *subreq)
1093 {
1094 struct tevent_req *req = tevent_req_callback_data(
1095 subreq, struct tevent_req);
1096 struct cli_qpathinfo_streams_state *state = tevent_req_data(
1097 req, struct cli_qpathinfo_streams_state);
1098 NTSTATUS status;
1099
1100 status = cli_qpathinfo_recv(subreq, state, &state->data,
1101 &state->num_data);
1102 TALLOC_FREE(subreq);
1103 if (!NT_STATUS_IS_OK(status)) {
1104 tevent_req_nterror(req, status);
1105 return;
1106 }
1107 tevent_req_done(req);
1108 }
1109
1110 NTSTATUS cli_qpathinfo_streams_recv(struct tevent_req *req,
1111 TALLOC_CTX *mem_ctx,
1112 unsigned int *pnum_streams,
1113 struct stream_struct **pstreams)
1114 {
1115 struct cli_qpathinfo_streams_state *state = tevent_req_data(
1116 req, struct cli_qpathinfo_streams_state);
1117 NTSTATUS status;
1118
1119 if (tevent_req_is_nterror(req, &status)) {
1120 return status;
1121 }
1122 if (!parse_streams_blob(mem_ctx, state->data, state->num_data,
1123 pnum_streams, pstreams)) {
1124 return NT_STATUS_INVALID_NETWORK_RESPONSE;
1125 }
1126 return NT_STATUS_OK;
1127 }
1128
1129 NTSTATUS cli_qpathinfo_streams(struct cli_state *cli, const char *fname,
1130 TALLOC_CTX *mem_ctx,
1131 unsigned int *pnum_streams,
1132 struct stream_struct **pstreams)
1133 {
1134 TALLOC_CTX *frame = NULL;
1135 struct tevent_context *ev;
1136 struct tevent_req *req;
1137 NTSTATUS status = NT_STATUS_NO_MEMORY;
1138
1139 if (smbXcli_conn_protocol(cli->conn) >= PROTOCOL_SMB2_02) {
1140 return cli_smb2_qpathinfo_streams(cli,
1141 fname,
1142 mem_ctx,
1143 pnum_streams,
1144 pstreams);
1145 }
1146
1147 frame = talloc_stackframe();
1148
1149 if (smbXcli_conn_has_async_calls(cli->conn)) {
1150 /*
1151 * Can't use sync call while an async call is in flight
1152 */
1153 status = NT_STATUS_INVALID_PARAMETER;
1154 goto fail;
1155 }
1156 ev = samba_tevent_context_init(frame);
1157 if (ev == NULL) {
1158 goto fail;
1159 }
1160 req = cli_qpathinfo_streams_send(frame, ev, cli, fname);
1161 if (req == NULL) {
1162 goto fail;
1163 }
1164 if (!tevent_req_poll_ntstatus(req, ev, &status)) {
1165 goto fail;
1166 }
1167 status = cli_qpathinfo_streams_recv(req, mem_ctx, pnum_streams,
1168 pstreams);
1169 fail:
1170 TALLOC_FREE(frame);
1171 return status;
1172 }
1173
1174 bool parse_streams_blob(TALLOC_CTX *mem_ctx, const uint8_t *rdata,
1175 size_t data_len,
1176 unsigned int *pnum_streams,
1177 struct stream_struct **pstreams)
1178 {
1179 unsigned int num_streams;
1180 struct stream_struct *streams;
1181 unsigned int ofs;
1182
1183 num_streams = 0;
1184 streams = NULL;
1185 ofs = 0;
1186
1187 while ((data_len > ofs) && (data_len - ofs >= 24)) {
1188 uint32_t nlen, len;
1189 size_t size;
1190 void *vstr;
1191 struct stream_struct *tmp;
1192 uint8_t *tmp_buf;
1193
1194 tmp = talloc_realloc(mem_ctx, streams,
1195 struct stream_struct,
1196 num_streams+1);
1197
1198 if (tmp == NULL) {
1199 goto fail;
1200 }
1201 streams = tmp;
1202
1203 nlen = IVAL(rdata, ofs + 0x04);
1204
1205 streams[num_streams].size = IVAL_TO_SMB_OFF_T(
1206 rdata, ofs + 0x08);
1207 streams[num_streams].alloc_size = IVAL_TO_SMB_OFF_T(
1208 rdata, ofs + 0x10);
1209
1210 if (nlen > data_len - (ofs + 24)) {
1211 goto fail;
1212 }
1213
1214 /*
1215 * We need to null-terminate src, how do I do this with
1216 * convert_string_talloc??
1217 */
1218
1219 tmp_buf = talloc_array(streams, uint8_t, nlen+2);
1220 if (tmp_buf == NULL) {
1221 goto fail;
1222 }
1223
1224 memcpy(tmp_buf, rdata+ofs+24, nlen);
1225 tmp_buf[nlen] = 0;
1226 tmp_buf[nlen+1] = 0;
1227
1228 if (!convert_string_talloc(streams, CH_UTF16, CH_UNIX, tmp_buf,
1229 nlen+2, &vstr, &size))
1230 {
1231 TALLOC_FREE(tmp_buf);
1232 goto fail;
1233 }
1234
1235 TALLOC_FREE(tmp_buf);
1236 streams[num_streams].name = (char *)vstr;
1237 num_streams++;
1238
1239 len = IVAL(rdata, ofs);
1240 if (len > data_len - ofs) {
1241 goto fail;
1242 }
1243 if (len == 0) break;
1244 ofs += len;
1245 }
1246
1247 *pnum_streams = num_streams;
1248 *pstreams = streams;
1249 return true;
1250
1251 fail:
1252 TALLOC_FREE(streams);
1253 return false;
1254 }
1255
1256 /****************************************************************************
1257 Send a qfileinfo QUERY_FILE_NAME_INFO call.
1258 ****************************************************************************/
1259
1260 NTSTATUS cli_qfilename(struct cli_state *cli, uint16_t fnum,
1261 TALLOC_CTX *mem_ctx, char **_name)
1262 {
1263 uint16_t recv_flags2;
1264 uint8_t *rdata;
1265 uint32_t num_rdata;
1266 NTSTATUS status;
1267 char *name = NULL;
1268 uint32_t namelen;
1269
1270 status = cli_qfileinfo(talloc_tos(), cli, fnum,
1271 SMB_QUERY_FILE_NAME_INFO,
1272 4, CLI_BUFFER_SIZE, &recv_flags2,
1273 &rdata, &num_rdata);
1274 if (!NT_STATUS_IS_OK(status)) {
1275 return status;
1276 }
1277
1278 namelen = IVAL(rdata, 0);
1279 if (namelen > (num_rdata - 4)) {
1280 TALLOC_FREE(rdata);
1281 return NT_STATUS_INVALID_NETWORK_RESPONSE;
1282 }
1283
1284 pull_string_talloc(mem_ctx,
1285 (const char *)rdata,
1286 recv_flags2,
1287 &name,
1288 rdata + 4,
1289 namelen,
1290 STR_UNICODE);
1291 if (name == NULL) {
1292 status = map_nt_error_from_unix(errno);
1293 TALLOC_FREE(rdata);
1294 return status;
1295 }
1296
1297 *_name = name;
1298 TALLOC_FREE(rdata);
1299 return NT_STATUS_OK;
1300 }
1301
1302 struct cli_qfileinfo_basic_state {
1303 uint32_t attr;
1304 off_t size;
1305 struct timespec create_time;
1306 struct timespec access_time;
1307 struct timespec write_time;
1308 struct timespec change_time;
1309 SMB_INO_T ino;
1310 };
1311
1312 static void cli_qfileinfo_basic_done(struct tevent_req *subreq);
1313 static void cli_qfileinfo_basic_doneE(struct tevent_req *subreq);
1314 static void cli_qfileinfo_basic_done2(struct tevent_req *subreq);
1315
1316 struct tevent_req *cli_qfileinfo_basic_send(
1317 TALLOC_CTX *mem_ctx,
1318 struct tevent_context *ev,
1319 struct cli_state *cli,
1320 uint16_t fnum)
1321 {
1322 struct tevent_req *req = NULL, *subreq = NULL;
1323 struct cli_qfileinfo_basic_state *state = NULL;
1324
1325 req = tevent_req_create(
1326 mem_ctx, &state, struct cli_qfileinfo_basic_state);
1327 if (req == NULL) {
1328 return NULL;
1329 }
1330
1331 if ((smbXcli_conn_protocol(cli->conn) < PROTOCOL_LANMAN2) ||
1332 cli->win95) {
1333 /*
1334 * According to
1335 * https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cifs/3d9d8f3e-dc70-410d-a3fc-6f4a881e8cab
1336 * SMB_COM_TRANSACTION2 used in cli_qfileinfo_send()
1337 * further down was introduced with the LAN Manager
1338 * 1.2 dialect, which we encode as PROTOCOL_LANMAN2.
1339 *
1340 * The "win95" check was introduced with commit
1341 * 27e5850fd3e1c8 in 1998. Hard to check these days,
1342 * but leave it in.
1343 *
1344 * Use a lowerlevel fallback in both cases.
1345 */
1346
1347 subreq = cli_getattrE_send(state, ev, cli, fnum);
1348 if (tevent_req_nomem(subreq, req)) {
1349 return tevent_req_post(req, ev);
1350 }
1351 tevent_req_set_callback(
1352 subreq, cli_qfileinfo_basic_doneE, req);
1353 return req;
1354 }
1355
1356 if (smbXcli_conn_protocol(cli->conn) >= PROTOCOL_SMB2_02) {
1357 subreq = cli_smb2_query_info_fnum_send(
1358 state, /* mem_ctx */
1359 ev, /* ev */
1360 cli, /* cli */
1361 fnum, /* fnum */
1362 1, /* in_info_type */
1363 (SMB_FILE_ALL_INFORMATION - 1000), /* in_file_info_class */
1364 0xFFFF, /* in_max_output_length */
1365 NULL, /* in_input_buffer */
1366 0, /* in_additional_info */
1367 0); /* in_flags */
1368 if (tevent_req_nomem(subreq, req)) {
1369 return tevent_req_post(req, ev);
1370 }
1371 tevent_req_set_callback(
1372 subreq, cli_qfileinfo_basic_done2, req);
1373 return req;
1374 }
1375
1376 subreq = cli_qfileinfo_send(
1377 state,
1378 ev,
1379 cli,
1380 fnum,
1381 SMB_QUERY_FILE_ALL_INFO, /* level */
1382 68, /* min_rdata */
1383 CLI_BUFFER_SIZE); /* max_rdata */
1384 if (tevent_req_nomem(subreq, req)) {
1385 return tevent_req_post(req, ev);
1386 }
1387 tevent_req_set_callback(subreq, cli_qfileinfo_basic_done, req);
1388 return req;
1389 }
1390
1391 static void cli_qfileinfo_basic_done(struct tevent_req *subreq)
1392 {
1393 struct tevent_req *req = tevent_req_callback_data(
1394 subreq, struct tevent_req);
1395 struct cli_qfileinfo_basic_state *state = tevent_req_data(
1396 req, struct cli_qfileinfo_basic_state);
1397 uint8_t *rdata;
1398 uint32_t num_rdata;
1399 NTSTATUS status;
1400
1401 status = cli_qfileinfo_recv(
1402 subreq, state, NULL, &rdata, &num_rdata);
1403 TALLOC_FREE(subreq);
1404 if (tevent_req_nterror(req, status)) {
1405 return;
1406 }
1407
1408 state->create_time = interpret_long_date((char *)rdata+0);
1409 state->access_time = interpret_long_date((char *)rdata+8);
1410 state->write_time = interpret_long_date((char *)rdata+16);
1411 state->change_time = interpret_long_date((char *)rdata+24);
1412 state->attr = PULL_LE_U32(rdata, 32);
1413 state->size = PULL_LE_U64(rdata,48);
1414 state->ino = PULL_LE_U32(rdata, 64);
1415 TALLOC_FREE(rdata);
1416
1417 tevent_req_done(req);
1418 }
1419
1420 static void cli_qfileinfo_basic_doneE(struct tevent_req *subreq)
1421 {
1422 struct tevent_req *req = tevent_req_callback_data(
1423 subreq, struct tevent_req);
1424 struct cli_qfileinfo_basic_state *state = tevent_req_data(
1425 req, struct cli_qfileinfo_basic_state);
1426 NTSTATUS status;
1427
1428 status = cli_getattrE_recv(
1429 subreq,
1430 &state->attr,
1431 &state->size,
1432 &state->change_time.tv_sec,
1433 &state->access_time.tv_sec,
1434 &state->write_time.tv_sec);
1435 TALLOC_FREE(subreq);
1436 if (tevent_req_nterror(req, status)) {
1437 return;
1438 }
1439 tevent_req_done(req);
1440 }
1441
1442 static void cli_qfileinfo_basic_done2(struct tevent_req *subreq)
1443 {
1444 struct tevent_req *req = tevent_req_callback_data(
1445 subreq, struct tevent_req);
1446 struct cli_qfileinfo_basic_state *state = tevent_req_data(
1447 req, struct cli_qfileinfo_basic_state);
1448 DATA_BLOB outbuf = {0};
1449 NTSTATUS status;
1450
1451 status = cli_smb2_query_info_fnum_recv(subreq, state, &outbuf);
1452 TALLOC_FREE(subreq);
1453 if (tevent_req_nterror(req, status)) {
1454 return;
1455 }
1456
1457 /* Parse the reply. */
1458 if (outbuf.length < 0x60) {
1459 tevent_req_nterror(req, NT_STATUS_INVALID_NETWORK_RESPONSE);
1460 return;
1461 }
1462
1463 state->create_time = interpret_long_date(
1464 (const char *)outbuf.data + 0x0);
1465 state->access_time = interpret_long_date(
1466 (const char *)outbuf.data + 0x8);
1467 state->write_time = interpret_long_date(
1468 (const char *)outbuf.data + 0x10);
1469 state->change_time = interpret_long_date(
1470 (const char *)outbuf.data + 0x18);
1471 state->attr = IVAL(outbuf.data, 0x20);
1472 state->size = BVAL(outbuf.data, 0x30);
1473 state->ino = BVAL(outbuf.data, 0x40);
1474
1475 data_blob_free(&outbuf);
1476
1477 tevent_req_done(req);
1478 }
1479
1480 NTSTATUS cli_qfileinfo_basic_recv(
1481 struct tevent_req *req,
1482 uint32_t *attr,
1483 off_t *size,
1484 struct timespec *create_time,
1485 struct timespec *access_time,
1486 struct timespec *write_time,
1487 struct timespec *change_time,
1488 SMB_INO_T *ino)
1489 {
1490 struct cli_qfileinfo_basic_state *state = tevent_req_data(
1491 req, struct cli_qfileinfo_basic_state);
1492 NTSTATUS status;
1493
1494 if (tevent_req_is_nterror(req, &status)) {
1495 return status;
1496 }
1497
1498 if (create_time != NULL) {
1499 *create_time = state->create_time;
1500 }
1501 if (access_time != NULL) {
1502 *access_time = state->access_time;
1503 }
1504 if (write_time != NULL) {
1505 *write_time = state->write_time;
1506 }
1507 if (change_time != NULL) {
1508 *change_time = state->change_time;
1509 }
1510 if (attr != NULL) {
1511 *attr = state->attr;
1512 }
1513 if (size != NULL) {
1514 *size = state->size;
1515 }
1516 if (ino) {
1517 *ino = state->ino;
1518 }
1519
1520 return NT_STATUS_OK;
1521 }
1522 /****************************************************************************
1523 Send a qfileinfo call.
1524 ****************************************************************************/
1525
1526 NTSTATUS cli_qfileinfo_basic(
1527 struct cli_state *cli,
1528 uint16_t fnum,
1529 uint32_t *attr,
1530 off_t *size,
1531 struct timespec *create_time,
1532 struct timespec *access_time,
1533 struct timespec *write_time,
1534 struct timespec *change_time,
1535 SMB_INO_T *ino)
1536 {
1537 TALLOC_CTX *frame = NULL;
1538 struct tevent_context *ev = NULL;
1539 struct tevent_req *req = NULL;
1540 NTSTATUS status = NT_STATUS_NO_MEMORY;
1541
1542 frame = talloc_stackframe();
1543
1544 if (smbXcli_conn_has_async_calls(cli->conn)) {
1545 /*
1546 * Can't use sync call while an async call is in flight
1547 */
1548 status = NT_STATUS_INVALID_PARAMETER;
1549 goto fail;
1550 }
1551 ev = samba_tevent_context_init(frame);
1552 if (ev == NULL) {
1553 goto fail;
1554 }
1555 req = cli_qfileinfo_basic_send(frame, ev, cli, fnum);
1556 if (req == NULL) {
1557 goto fail;
1558 }
1559 if (!tevent_req_poll_ntstatus(req, ev, &status)) {
1560 goto fail;
1561 }
1562
1563 status = cli_qfileinfo_basic_recv(
1564 req,
1565 attr,
1566 size,
1567 create_time,
1568 access_time,
1569 write_time,
1570 change_time,
1571 ino);
1572
1573 /* cli_smb2_query_info_fnum_recv doesn't set this */
1574 cli->raw_status = status;
1575 fail:
1576 TALLOC_FREE(frame);
1577 return status;
1578 }
1579
1580 /****************************************************************************
1581 Send a qpathinfo BASIC_INFO call.
1582 ****************************************************************************/
1583
1584 struct cli_qpathinfo_basic_state {
1585 uint32_t num_data;
1586 uint8_t *data;
1587 };
1588
1589 static void cli_qpathinfo_basic_done(struct tevent_req *subreq);
1590
1591 struct tevent_req *cli_qpathinfo_basic_send(TALLOC_CTX *mem_ctx,
1592 struct tevent_context *ev,
1593 struct cli_state *cli,
1594 const char *fname)
1595 {
1596 struct tevent_req *req = NULL, *subreq = NULL;
1597 struct cli_qpathinfo_basic_state *state = NULL;
1598
1599 req = tevent_req_create(mem_ctx, &state,
1600 struct cli_qpathinfo_basic_state);
1601 if (req == NULL) {
1602 return NULL;
1603 }
1604 subreq = cli_qpathinfo_send(state, ev, cli, fname,
1605 SMB_QUERY_FILE_BASIC_INFO,
1606 36, CLI_BUFFER_SIZE);
1607 if (tevent_req_nomem(subreq, req)) {
1608 return tevent_req_post(req, ev);
1609 }
1610 tevent_req_set_callback(subreq, cli_qpathinfo_basic_done, req);
1611 return req;
1612 }
1613
1614 static void cli_qpathinfo_basic_done(struct tevent_req *subreq)
1615 {
1616 struct tevent_req *req = tevent_req_callback_data(
1617 subreq, struct tevent_req);
1618 struct cli_qpathinfo_basic_state *state = tevent_req_data(
1619 req, struct cli_qpathinfo_basic_state);
1620 NTSTATUS status;
1621
1622 status = cli_qpathinfo_recv(subreq, state, &state->data,
1623 &state->num_data);
1624 TALLOC_FREE(subreq);
1625 if (!NT_STATUS_IS_OK(status)) {
1626 tevent_req_nterror(req, status);
1627 return;
1628 }
1629 tevent_req_done(req);
1630 }
1631
1632 NTSTATUS cli_qpathinfo_basic_recv(struct tevent_req *req,
1633 SMB_STRUCT_STAT *sbuf, uint32_t *attributes)
1634 {
1635 struct cli_qpathinfo_basic_state *state = tevent_req_data(
1636 req, struct cli_qpathinfo_basic_state);
1637 NTSTATUS status;
1638
1639 if (tevent_req_is_nterror(req, &status)) {
1640 return status;
1641 }
1642
1643 sbuf->st_ex_btime = interpret_long_date((char *)state->data);
1644 sbuf->st_ex_atime = interpret_long_date((char *)state->data+8);
1645 sbuf->st_ex_mtime = interpret_long_date((char *)state->data+16);
1646 sbuf->st_ex_ctime = interpret_long_date((char *)state->data+24);
1647 *attributes = IVAL(state->data, 32);
1648 return NT_STATUS_OK;
1649 }
1650
1651 NTSTATUS cli_qpathinfo_basic(struct cli_state *cli, const char *name,
1652 SMB_STRUCT_STAT *sbuf, uint32_t *attributes)
1653 {
1654 TALLOC_CTX *frame = NULL;
1655 struct tevent_context *ev;
1656 struct tevent_req *req;
1657 NTSTATUS status = NT_STATUS_NO_MEMORY;
1658
1659 if (smbXcli_conn_protocol(cli->conn) >= PROTOCOL_SMB2_02) {
1660 return cli_smb2_qpathinfo_basic(cli,
1661 name,
1662 sbuf,
1663 attributes);
1664 }
1665
1666 frame = talloc_stackframe();
1667
1668 if (smbXcli_conn_has_async_calls(cli->conn)) {
1669 /*
1670 * Can't use sync call while an async call is in flight
1671 */
1672 status = NT_STATUS_INVALID_PARAMETER;
1673 goto fail;
1674 }
1675 ev = samba_tevent_context_init(frame);
1676 if (ev == NULL) {
1677 goto fail;
1678 }
1679 req = cli_qpathinfo_basic_send(frame, ev, cli, name);
1680 if (req == NULL) {
1681 goto fail;
1682 }
1683 if (!tevent_req_poll_ntstatus(req, ev, &status)) {
1684 goto fail;
1685 }
1686 status = cli_qpathinfo_basic_recv(req, sbuf, attributes);
1687 fail:
1688 TALLOC_FREE(frame);
1689 return status;
1690 }
1691
1692 /****************************************************************************
1693 Send a qpathinfo SMB_QUERY_FILE_ALT_NAME_INFO call.
1694 ****************************************************************************/
1695
1696 NTSTATUS cli_qpathinfo_alt_name(struct cli_state *cli, const char *fname, fstring alt_name)
1697 {
1698 uint8_t *rdata;
1699 uint32_t num_rdata;
1700 unsigned int len;
1701 char *converted = NULL;
1702 size_t converted_size = 0;
1703 NTSTATUS status;
1704
1705 if (smbXcli_conn_protocol(cli->conn) >= PROTOCOL_SMB2_02) {
1706 return cli_smb2_qpathinfo_alt_name(cli,
1707 fname,
1708 alt_name);
1709 }
1710
1711 status = cli_qpathinfo(talloc_tos(), cli, fname,
1712 SMB_QUERY_FILE_ALT_NAME_INFO,
1713 4, CLI_BUFFER_SIZE, &rdata, &num_rdata);
1714 if (!NT_STATUS_IS_OK(status)) {
1715 return status;
1716 }
1717
1718 len = IVAL(rdata, 0);
1719
1720 if (len > num_rdata - 4) {
1721 return NT_STATUS_INVALID_NETWORK_RESPONSE;
1722 }
1723
1724 /* The returned data is a pushed string, not raw data. */
1725 if (!convert_string_talloc(talloc_tos(),
1726 smbXcli_conn_use_unicode(cli->conn) ? CH_UTF16LE : CH_DOS,
1727 CH_UNIX,
1728 rdata + 4,
1729 len,
1730 &converted,
1731 &converted_size)) {
1732 return NT_STATUS_NO_MEMORY;
1733 }
1734 fstrcpy(alt_name, converted);
1735
1736 TALLOC_FREE(converted);
1737 TALLOC_FREE(rdata);
1738
1739 return NT_STATUS_OK;
1740 }
1741
1742 /****************************************************************************
1743 Send a qpathinfo SMB_QUERY_FILE_STANDARD_INFO call.
1744 ****************************************************************************/
1745
1746 NTSTATUS cli_qpathinfo_standard(struct cli_state *cli, const char *fname,
1747 uint64_t *allocated, uint64_t *size,
1748 uint32_t *nlinks,
1749 bool *is_del_pending, bool *is_dir)
1750 {
1751 uint8_t *rdata;
1752 uint32_t num_rdata;
1753 NTSTATUS status;
1754
1755 if (smbXcli_conn_protocol(cli->conn) >= PROTOCOL_SMB2_02) {
1756 return NT_STATUS_NOT_IMPLEMENTED;
1757 }
1758
1759 status = cli_qpathinfo(talloc_tos(), cli, fname,
1760 SMB_QUERY_FILE_STANDARD_INFO,
1761 24, CLI_BUFFER_SIZE, &rdata, &num_rdata);
1762 if (!NT_STATUS_IS_OK(status)) {
1763 return status;
1764 }
1765
1766 if (allocated) {
1767 *allocated = BVAL(rdata, 0);
1768 }
1769
1770 if (size) {
1771 *size = BVAL(rdata, 8);
1772 }
1773
1774 if (nlinks) {
1775 *nlinks = IVAL(rdata, 16);
1776 }
1777
1778 if (is_del_pending) {
1779 *is_del_pending = CVAL(rdata, 20);
1780 }
1781
1782 if (is_dir) {
1783 *is_dir = CVAL(rdata, 20);
1784 }
1785
1786 TALLOC_FREE(rdata);
1787
1788 return NT_STATUS_OK;
1789 }
1790
1791
1792 /* like cli_qpathinfo2 but do not use SMB_QUERY_FILE_ALL_INFO with smb1 */
1793 NTSTATUS cli_qpathinfo3(struct cli_state *cli, const char *fname,
1794 struct timespec *create_time,
1795 struct timespec *access_time,
1796 struct timespec *write_time,
1797 struct timespec *change_time,
1798 off_t *size, uint32_t *pattr,
1799 SMB_INO_T *ino)
1800 {
1801 NTSTATUS status = NT_STATUS_OK;
1802 SMB_STRUCT_STAT st = { 0 };
1803 uint32_t attr = 0;
1804 uint64_t pos;
1805
1806 if (smbXcli_conn_protocol(cli->conn) >= PROTOCOL_SMB2_02) {
1807 /*
1808 * NB. cli_qpathinfo2() checks pattr is valid before
1809 * storing a value into it, so we don't need to use
1810 * an intermediate attr variable as below but can
1811 * pass pattr directly.
1812 */
1813 return cli_qpathinfo2(cli, fname,
1814 create_time, access_time, write_time, change_time,
1815 size, pattr, ino);
1816 }
1817
1818 if (create_time || access_time || write_time || change_time || pattr) {
1819 /*
1820 * cli_qpathinfo_basic() always indirects the passed
1821 * in pointers so we use intermediate variables to
1822 * collect all of them before assigning any requested
1823 * below.
1824 */
1825 status = cli_qpathinfo_basic(cli, fname, &st, &attr);
1826 if (!NT_STATUS_IS_OK(status)) {
1827 return status;
1828 }
1829 }
1830
1831 if (size) {
1832 status = cli_qpathinfo_standard(cli, fname,
1833 NULL, &pos, NULL, NULL, NULL);
1834 if (!NT_STATUS_IS_OK(status)) {
1835 return status;
1836 }
1837
1838 *size = pos;
1839 }
1840
1841 if (create_time) {
1842 *create_time = st.st_ex_btime;
1843 }
1844 if (access_time) {
1845 *access_time = st.st_ex_atime;
1846 }
1847 if (write_time) {
1848 *write_time = st.st_ex_mtime;
1849 }
1850 if (change_time) {
1851 *change_time = st.st_ex_ctime;
1852 }
1853 if (pattr) {
1854 *pattr = attr;
1855 }
1856 if (ino) {
1857 *ino = 0;
1858 }
1859
1860 return NT_STATUS_OK;
1861 }
Samba GIT mirror