Fix bug #10010 - Missing integer wrap protection in EA list reading can cause server...
[Samba.git] / source3 / rpc_client / rpc_transport_np.c
blobc66d4b80227a4133053752eaece6f4ea760d7f86
1 /*
2 * Unix SMB/CIFS implementation.
3 * RPC client transport over named pipes
4 * Copyright (C) Volker Lendecke 2009
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 3 of the License, or
9 * (at your option) any later version.
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, see <http://www.gnu.org/licenses/>.
20 #include "includes.h"
21 #include "../lib/util/tevent_ntstatus.h"
22 #include "rpc_client/rpc_transport.h"
23 #include "libsmb/cli_np_tstream.h"
25 #undef DBGC_CLASS
26 #define DBGC_CLASS DBGC_RPC_CLI
28 struct rpc_transport_np_init_state {
29 struct rpc_cli_transport *transport;
32 static void rpc_transport_np_init_pipe_open(struct tevent_req *subreq);
34 struct tevent_req *rpc_transport_np_init_send(TALLOC_CTX *mem_ctx,
35 struct event_context *ev,
36 struct cli_state *cli,
37 const struct ndr_syntax_id *abstract_syntax)
39 struct tevent_req *req;
40 struct rpc_transport_np_init_state *state;
41 const char *pipe_name;
42 struct tevent_req *subreq;
44 req = tevent_req_create(mem_ctx, &state,
45 struct rpc_transport_np_init_state);
46 if (req == NULL) {
47 return NULL;
50 pipe_name = get_pipe_name_from_syntax(state, abstract_syntax);
51 if (tevent_req_nomem(pipe_name, req)) {
52 return tevent_req_post(req, ev);
55 subreq = tstream_cli_np_open_send(state, ev, cli, pipe_name);
56 if (tevent_req_nomem(subreq, req)) {
57 return tevent_req_post(req, ev);
59 tevent_req_set_callback(subreq, rpc_transport_np_init_pipe_open, req);
61 return req;
64 static void rpc_transport_np_init_pipe_open(struct tevent_req *subreq)
66 struct tevent_req *req = tevent_req_callback_data(
67 subreq, struct tevent_req);
68 struct rpc_transport_np_init_state *state = tevent_req_data(
69 req, struct rpc_transport_np_init_state);
70 NTSTATUS status;
71 struct tstream_context *stream;
73 status = tstream_cli_np_open_recv(subreq, state, &stream);
74 TALLOC_FREE(subreq);
75 if (!NT_STATUS_IS_OK(status)) {
76 tevent_req_nterror(req, status);
77 return;
80 status = rpc_transport_tstream_init(state,
81 &stream,
82 &state->transport);
83 if (!NT_STATUS_IS_OK(status)) {
84 tevent_req_nterror(req, status);
85 return;
88 tevent_req_done(req);
91 NTSTATUS rpc_transport_np_init_recv(struct tevent_req *req,
92 TALLOC_CTX *mem_ctx,
93 struct rpc_cli_transport **presult)
95 struct rpc_transport_np_init_state *state = tevent_req_data(
96 req, struct rpc_transport_np_init_state);
97 NTSTATUS status;
99 if (tevent_req_is_nterror(req, &status)) {
100 return status;
103 *presult = talloc_move(mem_ctx, &state->transport);
104 return NT_STATUS_OK;
107 NTSTATUS rpc_transport_np_init(TALLOC_CTX *mem_ctx, struct cli_state *cli,
108 const struct ndr_syntax_id *abstract_syntax,
109 struct rpc_cli_transport **presult)
111 TALLOC_CTX *frame = talloc_stackframe();
112 struct event_context *ev;
113 struct tevent_req *req;
114 NTSTATUS status = NT_STATUS_OK;
116 ev = event_context_init(frame);
117 if (ev == NULL) {
118 status = NT_STATUS_NO_MEMORY;
119 goto fail;
122 req = rpc_transport_np_init_send(frame, ev, cli, abstract_syntax);
123 if (req == NULL) {
124 status = NT_STATUS_NO_MEMORY;
125 goto fail;
128 if (!tevent_req_poll(req, ev)) {
129 status = map_nt_error_from_unix(errno);
130 goto fail;
133 status = rpc_transport_np_init_recv(req, mem_ctx, presult);
134 fail:
135 TALLOC_FREE(frame);
136 return status;