?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Fix bug #8541 - readlink() on Linux clients fails if the symlink target is outside...
[Samba.git] / source3 / smbd / filename.c
blob2ea9d24f873eaf52b9887c8fa2a5545ef222dc6c
1 /*
2 Unix SMB/CIFS implementation.
3 filename handling routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Jeremy Allison 1999-2007
6 Copyright (C) Ying Chen 2000
7 Copyright (C) Volker Lendecke 2007
8
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
13
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
18
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
21 */
22
23 /*
24 * New hash table stat cache code added by Ying Chen.
25 */
26
27 #include "includes.h"
28
29 static NTSTATUS build_stream_path(TALLOC_CTX *mem_ctx,
30 connection_struct *conn,
31 const char *orig_path,
32 struct smb_filename *smb_fname);
33
34 /****************************************************************************
35 Mangle the 2nd name and check if it is then equal to the first name.
36 ****************************************************************************/
37
38 static bool mangled_equal(const char *name1,
39 const char *name2,
40 const struct share_params *p)
41 {
42 char mname[13];
43
44 if (!name_to_8_3(name2, mname, False, p)) {
45 return False;
46 }
47 return strequal(name1, mname);
48 }
49
50 /****************************************************************************
51 Cope with the differing wildcard and non-wildcard error cases.
52 ****************************************************************************/
53
54 static NTSTATUS determine_path_error(const char *name,
55 bool allow_wcard_last_component)
56 {
57 const char *p;
58
59 if (!allow_wcard_last_component) {
60 /* Error code within a pathname. */
61 return NT_STATUS_OBJECT_PATH_NOT_FOUND;
62 }
63
64 /* We're terminating here so we
65 * can be a little slower and get
66 * the error code right. Windows
67 * treats the last part of the pathname
68 * separately I think, so if the last
69 * component is a wildcard then we treat
70 * this ./ as "end of component" */
71
72 p = strchr(name, '/');
73
74 if (!p && (ms_has_wild(name) || ISDOT(name))) {
75 /* Error code at the end of a pathname. */
76 return NT_STATUS_OBJECT_NAME_INVALID;
77 } else {
78 /* Error code within a pathname. */
79 return NT_STATUS_OBJECT_PATH_NOT_FOUND;
80 }
81 }
82
83 static NTSTATUS check_for_dot_component(const struct smb_filename *smb_fname)
84 {
85 /* Ensure we catch all names with in "/."
86 this is disallowed under Windows and
87 in POSIX they've already been removed. */
88 const char *p = strstr(smb_fname->base_name, "/."); /*mb safe*/
89 if (p) {
90 if (p[2] == '/') {
91 /* Error code within a pathname. */
92 return NT_STATUS_OBJECT_PATH_NOT_FOUND;
93 } else if (p[2] == '\0') {
94 /* Error code at the end of a pathname. */
95 return NT_STATUS_OBJECT_NAME_INVALID;
96 }
97 }
98 return NT_STATUS_OK;
99 }
100
101 /****************************************************************************
102 This routine is called to convert names from the dos namespace to unix
103 namespace. It needs to handle any case conversions, mangling, format changes,
104 streams etc.
105
106 We assume that we have already done a chdir() to the right "root" directory
107 for this service.
108
109 The function will return an NTSTATUS error if some part of the name except for
110 the last part cannot be resolved, else NT_STATUS_OK.
111
112 Note NT_STATUS_OK doesn't mean the name exists or is valid, just that we
113 didn't get any fatal errors that should immediately terminate the calling SMB
114 processing whilst resolving.
115
116 If the UCF_SAVE_LCOMP flag is passed in, then the unmodified last component
117 of the pathname is set in smb_filename->original_lcomp.
118
119 If UCF_ALWAYS_ALLOW_WCARD_LCOMP is passed in, then a MS wildcard was detected
120 and should be allowed in the last component of the path only.
121
122 If the orig_path was a stream, smb_filename->base_name will point to the base
123 filename, and smb_filename->stream_name will point to the stream name. If
124 orig_path was not a stream, then smb_filename->stream_name will be NULL.
125
126 On exit from unix_convert, the smb_filename->st stat struct will be populated
127 if the file exists and was found, if not this stat struct will be filled with
128 zeros (and this can be detected by checking for nlinks = 0, which can never be
129 true for any file).
130 ****************************************************************************/
131
132 NTSTATUS unix_convert(TALLOC_CTX *ctx,
133 connection_struct *conn,
134 const char *orig_path,
135 struct smb_filename **smb_fname_out,
136 uint32_t ucf_flags)
137 {
138 struct smb_filename *smb_fname = NULL;
139 char *start, *end;
140 char *dirpath = NULL;
141 char *stream = NULL;
142 bool component_was_mangled = False;
143 bool name_has_wildcard = False;
144 bool posix_pathnames = false;
145 bool allow_wcard_last_component =
146 (ucf_flags & UCF_ALWAYS_ALLOW_WCARD_LCOMP);
147 bool save_last_component = ucf_flags & UCF_SAVE_LCOMP;
148 NTSTATUS status;
149 int ret = -1;
150
151 *smb_fname_out = NULL;
152
153 smb_fname = talloc_zero(ctx, struct smb_filename);
154 if (smb_fname == NULL) {
155 return NT_STATUS_NO_MEMORY;
156 }
157
158 if (conn->printer) {
159 /* we don't ever use the filenames on a printer share as a
160 filename - so don't convert them */
161 if (!(smb_fname->base_name = talloc_strdup(smb_fname,
162 orig_path))) {
163 status = NT_STATUS_NO_MEMORY;
164 goto err;
165 }
166 goto done;
167 }
168
169 DEBUG(5, ("unix_convert called on file \"%s\"\n", orig_path));
170
171 /*
172 * Conversion to basic unix format is already done in
173 * check_path_syntax().
174 */
175
176 /*
177 * Names must be relative to the root of the service - any leading /.
178 * and trailing /'s should have been trimmed by check_path_syntax().
179 */
180
181 #ifdef DEVELOPER
182 SMB_ASSERT(*orig_path != '/');
183 #endif
184
185 /*
186 * If we trimmed down to a single '\0' character
187 * then we should use the "." directory to avoid
188 * searching the cache, but not if we are in a
189 * printing share.
190 * As we know this is valid we can return true here.
191 */
192
193 if (!*orig_path) {
194 if (!(smb_fname->base_name = talloc_strdup(smb_fname, "."))) {
195 status = NT_STATUS_NO_MEMORY;
196 goto err;
197 }
198 if (SMB_VFS_STAT(conn, smb_fname) != 0) {
199 status = map_nt_error_from_unix(errno);
200 goto err;
201 }
202 DEBUG(5, ("conversion finished \"\" -> %s\n",
203 smb_fname->base_name));
204 goto done;
205 }
206
207 if (orig_path[0] == '.' && (orig_path[1] == '/' ||
208 orig_path[1] == '\0')) {
209 /* Start of pathname can't be "." only. */
210 if (orig_path[1] == '\0' || orig_path[2] == '\0') {
211 status = NT_STATUS_OBJECT_NAME_INVALID;
212 } else {
213 status =determine_path_error(&orig_path[2],
214 allow_wcard_last_component);
215 }
216 goto err;
217 }
218
219 /* Start with the full orig_path as given by the caller. */
220 if (!(smb_fname->base_name = talloc_strdup(smb_fname, orig_path))) {
221 DEBUG(0, ("talloc_strdup failed\n"));
222 status = NT_STATUS_NO_MEMORY;
223 goto err;
224 }
225
226 /*
227 * Large directory fix normalization. If we're case sensitive, and
228 * the case preserving parameters are set to "no", normalize the case of
229 * the incoming filename from the client WHETHER IT EXISTS OR NOT !
230 * This is in conflict with the current (3.0.20) man page, but is
231 * what people expect from the "large directory howto". I'll update
232 * the man page. Thanks to jht@samba.org for finding this. JRA.
233 */
234
235 if (conn->case_sensitive && !conn->case_preserve &&
236 !conn->short_case_preserve) {
237 strnorm(smb_fname->base_name, lp_defaultcase(SNUM(conn)));
238 }
239
240 /*
241 * Ensure saved_last_component is valid even if file exists.
242 */
243
244 if(save_last_component) {
245 end = strrchr_m(smb_fname->base_name, '/');
246 if (end) {
247 smb_fname->original_lcomp = talloc_strdup(smb_fname,
248 end + 1);
249 } else {
250 smb_fname->original_lcomp =
251 talloc_strdup(smb_fname, smb_fname->base_name);
252 }
253 if (smb_fname->original_lcomp == NULL) {
254 status = NT_STATUS_NO_MEMORY;
255 goto err;
256 }
257 }
258
259 posix_pathnames = (lp_posix_pathnames() ||
260 (ucf_flags & UCF_POSIX_PATHNAMES));
261
262 /*
263 * Strip off the stream, and add it back when we're done with the
264 * base_name.
265 */
266 if (!posix_pathnames) {
267 stream = strchr_m(smb_fname->base_name, ':');
268
269 if (stream != NULL) {
270 char *tmp = talloc_strdup(smb_fname, stream);
271 if (tmp == NULL) {
272 status = NT_STATUS_NO_MEMORY;
273 goto err;
274 }
275 /*
276 * Since this is actually pointing into
277 * smb_fname->base_name this truncates base_name.
278 */
279 *stream = '\0';
280 stream = tmp;
281 }
282 }
283
284 start = smb_fname->base_name;
285
286 /*
287 * If we're providing case insentive semantics or
288 * the underlying filesystem is case insensitive,
289 * then a case-normalized hit in the stat-cache is
290 * authoratitive. JRA.
291 *
292 * Note: We're only checking base_name. The stream_name will be
293 * added and verified in build_stream_path().
294 */
295
296 if((!conn->case_sensitive || !(conn->fs_capabilities &
297 FILE_CASE_SENSITIVE_SEARCH)) &&
298 stat_cache_lookup(conn, &smb_fname->base_name, &dirpath, &start,
299 &smb_fname->st)) {
300 goto done;
301 }
302
303 /*
304 * Make sure "dirpath" is an allocated string, we use this for
305 * building the directories with asprintf and free it.
306 */
307
308 if ((dirpath == NULL) && (!(dirpath = talloc_strdup(ctx,"")))) {
309 DEBUG(0, ("talloc_strdup failed\n"));
310 status = NT_STATUS_NO_MEMORY;
311 goto err;
312 }
313
314 /*
315 * If we have a wildcard we must walk the path to
316 * find where the error is, even if case sensitive
317 * is true.
318 */
319
320 name_has_wildcard = ms_has_wild(smb_fname->base_name);
321 if (name_has_wildcard && !allow_wcard_last_component) {
322 /* Wildcard not valid anywhere. */
323 status = NT_STATUS_OBJECT_NAME_INVALID;
324 goto fail;
325 }
326
327 DEBUG(5,("unix_convert begin: name = %s, dirpath = %s, start = %s\n",
328 smb_fname->base_name, dirpath, start));
329
330 if (!name_has_wildcard) {
331 /*
332 * stat the name - if it exists then we can add the stream back (if
333 * there was one) and be done!
334 */
335
336 if (posix_pathnames) {
337 ret = SMB_VFS_LSTAT(conn, smb_fname);
338 } else {
339 ret = SMB_VFS_STAT(conn, smb_fname);
340 }
341
342 if (ret == 0) {
343 status = check_for_dot_component(smb_fname);
344 if (!NT_STATUS_IS_OK(status)) {
345 goto fail;
346 }
347 /* Add the path (not including the stream) to the cache. */
348 stat_cache_add(orig_path, smb_fname->base_name,
349 conn->case_sensitive);
350 DEBUG(5,("conversion of base_name finished %s -> %s\n",
351 orig_path, smb_fname->base_name));
352 goto done;
353 }
354
355 /* Stat failed - ensure we don't use it. */
356 SET_STAT_INVALID(smb_fname->st);
357
358 /*
359 * A special case - if we don't have any wildcards or mangling chars and are case
360 * sensitive or the underlying filesystem is case insentive then searching
361 * won't help.
362 */
363
364 if ((conn->case_sensitive || !(conn->fs_capabilities &
365 FILE_CASE_SENSITIVE_SEARCH)) &&
366 !mangle_is_mangled(smb_fname->base_name, conn->params)) {
367
368 status = check_for_dot_component(smb_fname);
369 if (!NT_STATUS_IS_OK(status)) {
370 goto fail;
371 }
372
373 /*
374 * The stat failed. Could be ok as it could be
375 * a new file.
376 */
377
378 if (errno == ENOTDIR || errno == ELOOP) {
379 status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
380 goto fail;
381 } else if (errno == ENOENT) {
382 /*
383 * Was it a missing last component ?
384 * or a missing intermediate component ?
385 */
386 struct smb_filename parent_fname;
387 ZERO_STRUCT(parent_fname);
388 if (!parent_dirname(ctx, smb_fname->base_name,
389 &parent_fname.base_name,
390 NULL)) {
391 status = NT_STATUS_NO_MEMORY;
392 goto fail;
393 }
394 if (posix_pathnames) {
395 ret = SMB_VFS_LSTAT(conn, &parent_fname);
396 } else {
397 ret = SMB_VFS_STAT(conn, &parent_fname);
398 }
399 if (ret == -1) {
400 if (errno == ENOTDIR ||
401 errno == ENOENT ||
402 errno == ELOOP) {
403 status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
404 goto fail;
405 }
406 }
407 /*
408 * Missing last component is ok - new file.
409 * Also deal with permission denied elsewhere.
410 * Just drop out to done.
411 */
412 goto done;
413 }
414 }
415 }
416
417 /*
418 * is_mangled() was changed to look at an entire pathname, not
419 * just a component. JRA.
420 */
421
422 if (mangle_is_mangled(start, conn->params)) {
423 component_was_mangled = True;
424 }
425
426 /*
427 * Now we need to recursively match the name against the real
428 * directory structure.
429 */
430
431 /*
432 * Match each part of the path name separately, trying the names
433 * as is first, then trying to scan the directory for matching names.
434 */
435
436 for (; start ; start = (end?end+1:(char *)NULL)) {
437 /*
438 * Pinpoint the end of this section of the filename.
439 */
440 /* mb safe. '/' can't be in any encoded char. */
441 end = strchr(start, '/');
442
443 /*
444 * Chop the name at this point.
445 */
446 if (end) {
447 *end = 0;
448 }
449
450 if (save_last_component) {
451 TALLOC_FREE(smb_fname->original_lcomp);
452 smb_fname->original_lcomp = talloc_strdup(smb_fname,
453 end ? end + 1 : start);
454 if (!smb_fname->original_lcomp) {
455 DEBUG(0, ("talloc failed\n"));
456 status = NT_STATUS_NO_MEMORY;
457 goto err;
458 }
459 }
460
461 /* The name cannot have a component of "." */
462
463 if (ISDOT(start)) {
464 if (!end) {
465 /* Error code at the end of a pathname. */
466 status = NT_STATUS_OBJECT_NAME_INVALID;
467 } else {
468 status = determine_path_error(end+1,
469 allow_wcard_last_component);
470 }
471 goto fail;
472 }
473
474 /* The name cannot have a wildcard if it's not
475 the last component. */
476
477 name_has_wildcard = ms_has_wild(start);
478
479 /* Wildcards never valid within a pathname. */
480 if (name_has_wildcard && end) {
481 status = NT_STATUS_OBJECT_NAME_INVALID;
482 goto fail;
483 }
484
485 /*
486 * Check if the name exists up to this point.
487 */
488
489 if (posix_pathnames) {
490 ret = SMB_VFS_LSTAT(conn, smb_fname);
491 } else {
492 ret = SMB_VFS_STAT(conn, smb_fname);
493 }
494
495 if (ret == 0) {
496 /*
497 * It exists. it must either be a directory or this must
498 * be the last part of the path for it to be OK.
499 */
500 if (end && !S_ISDIR(smb_fname->st.st_ex_mode)) {
501 /*
502 * An intermediate part of the name isn't
503 * a directory.
504 */
505 DEBUG(5,("Not a dir %s\n",start));
506 *end = '/';
507 /*
508 * We need to return the fact that the
509 * intermediate name resolution failed. This
510 * is used to return an error of ERRbadpath
511 * rather than ERRbadfile. Some Windows
512 * applications depend on the difference between
513 * these two errors.
514 */
515 status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
516 goto fail;
517 }
518
519 } else {
520 char *found_name = NULL;
521
522 /* Stat failed - ensure we don't use it. */
523 SET_STAT_INVALID(smb_fname->st);
524
525 /*
526 * Reset errno so we can detect
527 * directory open errors.
528 */
529 errno = 0;
530
531 /*
532 * Try to find this part of the path in the directory.
533 */
534
535 if (name_has_wildcard ||
536 (get_real_filename(conn, dirpath, start,
537 talloc_tos(),
538 &found_name) == -1)) {
539 char *unmangled;
540
541 if (end) {
542 /*
543 * An intermediate part of the name
544 * can't be found.
545 */
546 DEBUG(5,("Intermediate not found %s\n",
547 start));
548 *end = '/';
549
550 /*
551 * We need to return the fact that the
552 * intermediate name resolution failed.
553 * This is used to return an error of
554 * ERRbadpath rather than ERRbadfile.
555 * Some Windows applications depend on
556 * the difference between these two
557 * errors.
558 */
559
560 /*
561 * ENOENT, ENOTDIR and ELOOP all map
562 * to NT_STATUS_OBJECT_PATH_NOT_FOUND
563 * in the filename walk.
564 */
565
566 if (errno == ENOENT ||
567 errno == ENOTDIR ||
568 errno == ELOOP) {
569 status =
570 NT_STATUS_OBJECT_PATH_NOT_FOUND;
571 }
572 else {
573 status =
574 map_nt_error_from_unix(errno);
575 }
576 goto fail;
577 }
578
579 /*
580 * ENOENT/EACCESS are the only valid errors
581 * here. EACCESS needs handling here for
582 * "dropboxes", i.e. directories where users
583 * can only put stuff with permission -wx.
584 */
585 if ((errno != 0) && (errno != ENOENT)
586 && (errno != EACCES)) {
587 /*
588 * ENOTDIR and ELOOP both map to
589 * NT_STATUS_OBJECT_PATH_NOT_FOUND
590 * in the filename walk.
591 */
592 if (errno == ENOTDIR ||
593 errno == ELOOP) {
594 status =
595 NT_STATUS_OBJECT_PATH_NOT_FOUND;
596 } else {
597 status =
598 map_nt_error_from_unix(errno);
599 }
600 goto fail;
601 }
602
603 /*
604 * Just the last part of the name doesn't exist.
605 * We need to strupper() or strlower() it as
606 * this conversion may be used for file creation
607 * purposes. Fix inspired by
608 * Thomas Neumann <t.neumann@iku-ag.de>.
609 */
610 if (!conn->case_preserve ||
611 (mangle_is_8_3(start, False,
612 conn->params) &&
613 !conn->short_case_preserve)) {
614 strnorm(start,
615 lp_defaultcase(SNUM(conn)));
616 }
617
618 /*
619 * check on the mangled stack to see if we can
620 * recover the base of the filename.
621 */
622
623 if (mangle_is_mangled(start, conn->params)
624 && mangle_lookup_name_from_8_3(ctx,
625 start,
626 &unmangled,
627 conn->params)) {
628 char *tmp;
629 size_t start_ofs =
630 start - smb_fname->base_name;
631
632 if (*dirpath != '\0') {
633 tmp = talloc_asprintf(
634 smb_fname, "%s/%s",
635 dirpath, unmangled);
636 TALLOC_FREE(unmangled);
637 }
638 else {
639 tmp = unmangled;
640 }
641 if (tmp == NULL) {
642 DEBUG(0, ("talloc failed\n"));
643 status = NT_STATUS_NO_MEMORY;
644 goto err;
645 }
646 TALLOC_FREE(smb_fname->base_name);
647 smb_fname->base_name = tmp;
648 start =
649 smb_fname->base_name + start_ofs;
650 end = start + strlen(start);
651 }
652
653 DEBUG(5,("New file %s\n",start));
654 goto done;
655 }
656
657
658 /*
659 * Restore the rest of the string. If the string was
660 * mangled the size may have changed.
661 */
662 if (end) {
663 char *tmp;
664 size_t start_ofs =
665 start - smb_fname->base_name;
666
667 if (*dirpath != '\0') {
668 tmp = talloc_asprintf(smb_fname,
669 "%s/%s/%s", dirpath,
670 found_name, end+1);
671 }
672 else {
673 tmp = talloc_asprintf(smb_fname,
674 "%s/%s", found_name,
675 end+1);
676 }
677 if (tmp == NULL) {
678 DEBUG(0, ("talloc_asprintf failed\n"));
679 status = NT_STATUS_NO_MEMORY;
680 goto err;
681 }
682 TALLOC_FREE(smb_fname->base_name);
683 smb_fname->base_name = tmp;
684 start = smb_fname->base_name + start_ofs;
685 end = start + strlen(found_name);
686 *end = '\0';
687 } else {
688 char *tmp;
689 size_t start_ofs =
690 start - smb_fname->base_name;
691
692 if (*dirpath != '\0') {
693 tmp = talloc_asprintf(smb_fname,
694 "%s/%s", dirpath,
695 found_name);
696 } else {
697 tmp = talloc_strdup(smb_fname,
698 found_name);
699 }
700 if (tmp == NULL) {
701 DEBUG(0, ("talloc failed\n"));
702 status = NT_STATUS_NO_MEMORY;
703 goto err;
704 }
705 TALLOC_FREE(smb_fname->base_name);
706 smb_fname->base_name = tmp;
707 start = smb_fname->base_name + start_ofs;
708
709 /*
710 * We just scanned for, and found the end of
711 * the path. We must return a valid stat struct
712 * if it exists. JRA.
713 */
714
715 if (posix_pathnames) {
716 ret = SMB_VFS_LSTAT(conn, smb_fname);
717 } else {
718 ret = SMB_VFS_STAT(conn, smb_fname);
719 }
720
721 if (ret != 0) {
722 SET_STAT_INVALID(smb_fname->st);
723 }
724 }
725
726 TALLOC_FREE(found_name);
727 } /* end else */
728
729 #ifdef DEVELOPER
730 /*
731 * This sucks!
732 * We should never provide different behaviors
733 * depending on DEVELOPER!!!
734 */
735 if (VALID_STAT(smb_fname->st)) {
736 bool delete_pending;
737 get_file_infos(vfs_file_id_from_sbuf(conn,
738 &smb_fname->st),
739 &delete_pending, NULL);
740 if (delete_pending) {
741 status = NT_STATUS_DELETE_PENDING;
742 goto fail;
743 }
744 }
745 #endif
746
747 /*
748 * Add to the dirpath that we have resolved so far.
749 */
750
751 if (*dirpath != '\0') {
752 char *tmp = talloc_asprintf(ctx,
753 "%s/%s", dirpath, start);
754 if (!tmp) {
755 DEBUG(0, ("talloc_asprintf failed\n"));
756 status = NT_STATUS_NO_MEMORY;
757 goto err;
758 }
759 TALLOC_FREE(dirpath);
760 dirpath = tmp;
761 }
762 else {
763 TALLOC_FREE(dirpath);
764 if (!(dirpath = talloc_strdup(ctx,start))) {
765 DEBUG(0, ("talloc_strdup failed\n"));
766 status = NT_STATUS_NO_MEMORY;
767 goto err;
768 }
769 }
770
771 /*
772 * Cache the dirpath thus far. Don't cache a name with mangled
773 * or wildcard components as this can change the size.
774 */
775 if(!component_was_mangled && !name_has_wildcard) {
776 stat_cache_add(orig_path, dirpath,
777 conn->case_sensitive);
778 }
779
780 /*
781 * Restore the / that we wiped out earlier.
782 */
783 if (end) {
784 *end = '/';
785 }
786 }
787
788 /*
789 * Cache the full path. Don't cache a name with mangled or wildcard
790 * components as this can change the size.
791 */
792
793 if(!component_was_mangled && !name_has_wildcard) {
794 stat_cache_add(orig_path, smb_fname->base_name,
795 conn->case_sensitive);
796 }
797
798 /*
799 * The name has been resolved.
800 */
801
802 DEBUG(5,("conversion finished %s -> %s\n", orig_path,
803 smb_fname->base_name));
804
805 done:
806 /* Add back the stream if one was stripped off originally. */
807 if (stream != NULL) {
808 smb_fname->stream_name = stream;
809
810 /* Check path now that the base_name has been converted. */
811 status = build_stream_path(ctx, conn, orig_path, smb_fname);
812 if (!NT_STATUS_IS_OK(status)) {
813 goto fail;
814 }
815 }
816 TALLOC_FREE(dirpath);
817 *smb_fname_out = smb_fname;
818 return NT_STATUS_OK;
819 fail:
820 DEBUG(10, ("dirpath = [%s] start = [%s]\n", dirpath, start));
821 if (*dirpath != '\0') {
822 smb_fname->base_name = talloc_asprintf(smb_fname, "%s/%s",
823 dirpath, start);
824 } else {
825 smb_fname->base_name = talloc_strdup(smb_fname, start);
826 }
827 if (!smb_fname->base_name) {
828 DEBUG(0, ("talloc_asprintf failed\n"));
829 status = NT_STATUS_NO_MEMORY;
830 goto err;
831 }
832
833 *smb_fname_out = smb_fname;
834 TALLOC_FREE(dirpath);
835 return status;
836 err:
837 TALLOC_FREE(smb_fname);
838 return status;
839 }
840
841 /****************************************************************************
842 Ensure a path is not vetod.
843 ****************************************************************************/
844
845 NTSTATUS check_veto_path(connection_struct *conn, const char *name)
846 {
847 if (IS_VETO_PATH(conn, name)) {
848 /* Is it not dot or dot dot. */
849 if (!(ISDOT(name) || ISDOTDOT(name))) {
850 DEBUG(5,("check_veto_path: file path name %s vetoed\n",
851 name));
852 return map_nt_error_from_unix(ENOENT);
853 }
854 }
855 return NT_STATUS_OK;
856 }
857
858 /****************************************************************************
859 Check a filename - possibly calling check_reduced_name.
860 This is called by every routine before it allows an operation on a filename.
861 It does any final confirmation necessary to ensure that the filename is
862 a valid one for the user to access.
863 ****************************************************************************/
864
865 NTSTATUS check_name(connection_struct *conn, const char *name)
866 {
867 NTSTATUS status = check_veto_path(conn, name);
868
869 if (!NT_STATUS_IS_OK(status)) {
870 return status;
871 }
872
873 if (!lp_widelinks(SNUM(conn)) || !lp_symlinks(SNUM(conn))) {
874 status = check_reduced_name(conn,name);
875 if (!NT_STATUS_IS_OK(status)) {
876 DEBUG(5,("check_name: name %s failed with %s\n",name,
877 nt_errstr(status)));
878 return status;
879 }
880 }
881
882 return NT_STATUS_OK;
883 }
884
885 /****************************************************************************
886 Check if two filenames are equal.
887 This needs to be careful about whether we are case sensitive.
888 ****************************************************************************/
889
890 static bool fname_equal(const char *name1, const char *name2,
891 bool case_sensitive)
892 {
893 /* Normal filename handling */
894 if (case_sensitive) {
895 return(strcmp(name1,name2) == 0);
896 }
897
898 return(strequal(name1,name2));
899 }
900
901 /****************************************************************************
902 Scan a directory to find a filename, matching without case sensitivity.
903 If the name looks like a mangled name then try via the mangling functions
904 ****************************************************************************/
905
906 static int get_real_filename_full_scan(connection_struct *conn,
907 const char *path, const char *name,
908 bool mangled,
909 TALLOC_CTX *mem_ctx, char **found_name)
910 {
911 struct smb_Dir *cur_dir;
912 const char *dname = NULL;
913 char *talloced = NULL;
914 char *unmangled_name = NULL;
915 long curpos;
916
917 /* handle null paths */
918 if ((path == NULL) || (*path == 0)) {
919 path = ".";
920 }
921
922 /* If we have a case-sensitive filesystem, it doesn't do us any
923 * good to search for a name. If a case variation of the name was
924 * there, then the original stat(2) would have found it.
925 */
926 if (!mangled && !(conn->fs_capabilities & FILE_CASE_SENSITIVE_SEARCH)) {
927 errno = ENOENT;
928 return -1;
929 }
930
931 /*
932 * The incoming name can be mangled, and if we de-mangle it
933 * here it will not compare correctly against the filename (name2)
934 * read from the directory and then mangled by the name_to_8_3()
935 * call. We need to mangle both names or neither.
936 * (JRA).
937 *
938 * Fix for bug found by Dina Fine. If in case sensitive mode then
939 * the mangle cache is no good (3 letter extension could be wrong
940 * case - so don't demangle in this case - leave as mangled and
941 * allow the mangling of the directory entry read (which is done
942 * case insensitively) to match instead. This will lead to more
943 * false positive matches but we fail completely without it. JRA.
944 */
945
946 if (mangled && !conn->case_sensitive) {
947 mangled = !mangle_lookup_name_from_8_3(talloc_tos(), name,
948 &unmangled_name,
949 conn->params);
950 if (!mangled) {
951 /* Name is now unmangled. */
952 name = unmangled_name;
953 }
954 }
955
956 /* open the directory */
957 if (!(cur_dir = OpenDir(talloc_tos(), conn, path, NULL, 0))) {
958 DEBUG(3,("scan dir didn't open dir [%s]\n",path));
959 TALLOC_FREE(unmangled_name);
960 return -1;
961 }
962
963 /* now scan for matching names */
964 curpos = 0;
965 while ((dname = ReadDirName(cur_dir, &curpos, NULL, &talloced))) {
966
967 /* Is it dot or dot dot. */
968 if (ISDOT(dname) || ISDOTDOT(dname)) {
969 TALLOC_FREE(talloced);
970 continue;
971 }
972
973 /*
974 * At this point dname is the unmangled name.
975 * name is either mangled or not, depending on the state
976 * of the "mangled" variable. JRA.
977 */
978
979 /*
980 * Check mangled name against mangled name, or unmangled name
981 * against unmangled name.
982 */
983
984 if ((mangled && mangled_equal(name,dname,conn->params)) ||
985 fname_equal(name, dname, conn->case_sensitive)) {
986 /* we've found the file, change it's name and return */
987 *found_name = talloc_strdup(mem_ctx, dname);
988 TALLOC_FREE(unmangled_name);
989 TALLOC_FREE(cur_dir);
990 if (!*found_name) {
991 errno = ENOMEM;
992 TALLOC_FREE(talloced);
993 return -1;
994 }
995 TALLOC_FREE(talloced);
996 return 0;
997 }
998 TALLOC_FREE(talloced);
999 }
1000
1001 TALLOC_FREE(unmangled_name);
1002 TALLOC_FREE(cur_dir);
1003 errno = ENOENT;
1004 return -1;
1005 }
1006
1007 /****************************************************************************
1008 Wrapper around the vfs get_real_filename and the full directory scan
1009 fallback.
1010 ****************************************************************************/
1011
1012 int get_real_filename(connection_struct *conn, const char *path,
1013 const char *name, TALLOC_CTX *mem_ctx,
1014 char **found_name)
1015 {
1016 int ret;
1017 bool mangled;
1018
1019 mangled = mangle_is_mangled(name, conn->params);
1020
1021 if (mangled) {
1022 return get_real_filename_full_scan(conn, path, name, mangled,
1023 mem_ctx, found_name);
1024 }
1025
1026 /* Try the vfs first to take advantage of case-insensitive stat. */
1027 ret = SMB_VFS_GET_REAL_FILENAME(conn, path, name, mem_ctx, found_name);
1028
1029 /*
1030 * If the case-insensitive stat was successful, or returned an error
1031 * other than EOPNOTSUPP then there is no need to fall back on the
1032 * full directory scan.
1033 */
1034 if (ret == 0 || (ret == -1 && errno != EOPNOTSUPP)) {
1035 return ret;
1036 }
1037
1038 return get_real_filename_full_scan(conn, path, name, mangled, mem_ctx,
1039 found_name);
1040 }
1041
1042 static NTSTATUS build_stream_path(TALLOC_CTX *mem_ctx,
1043 connection_struct *conn,
1044 const char *orig_path,
1045 struct smb_filename *smb_fname)
1046 {
1047 NTSTATUS status;
1048 unsigned int i, num_streams;
1049 struct stream_struct *streams = NULL;
1050
1051 if (SMB_VFS_STAT(conn, smb_fname) == 0) {
1052 DEBUG(10, ("'%s' exists\n", smb_fname_str_dbg(smb_fname)));
1053 return NT_STATUS_OK;
1054 }
1055
1056 if (errno != ENOENT) {
1057 DEBUG(10, ("vfs_stat failed: %s\n", strerror(errno)));
1058 status = map_nt_error_from_unix(errno);
1059 goto fail;
1060 }
1061
1062 /* Fall back to a case-insensitive scan of all streams on the file. */
1063 status = SMB_VFS_STREAMINFO(conn, NULL, smb_fname->base_name, mem_ctx,
1064 &num_streams, &streams);
1065
1066 if (NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
1067 SET_STAT_INVALID(smb_fname->st);
1068 return NT_STATUS_OK;
1069 }
1070
1071 if (!NT_STATUS_IS_OK(status)) {
1072 DEBUG(10, ("vfs_streaminfo failed: %s\n", nt_errstr(status)));
1073 goto fail;
1074 }
1075
1076 for (i=0; i<num_streams; i++) {
1077 DEBUG(10, ("comparing [%s] and [%s]: ",
1078 smb_fname->stream_name, streams[i].name));
1079 if (fname_equal(smb_fname->stream_name, streams[i].name,
1080 conn->case_sensitive)) {
1081 DEBUGADD(10, ("equal\n"));
1082 break;
1083 }
1084 DEBUGADD(10, ("not equal\n"));
1085 }
1086
1087 /* Couldn't find the stream. */
1088 if (i == num_streams) {
1089 SET_STAT_INVALID(smb_fname->st);
1090 TALLOC_FREE(streams);
1091 return NT_STATUS_OK;
1092 }
1093
1094 DEBUG(10, ("case insensitive stream. requested: %s, actual: %s\n",
1095 smb_fname->stream_name, streams[i].name));
1096
1097
1098 TALLOC_FREE(smb_fname->stream_name);
1099 smb_fname->stream_name = talloc_strdup(smb_fname, streams[i].name);
1100 if (smb_fname->stream_name == NULL) {
1101 status = NT_STATUS_NO_MEMORY;
1102 goto fail;
1103 }
1104
1105 SET_STAT_INVALID(smb_fname->st);
1106
1107 if (SMB_VFS_STAT(conn, smb_fname) == 0) {
1108 DEBUG(10, ("'%s' exists\n", smb_fname_str_dbg(smb_fname)));
1109 }
1110 status = NT_STATUS_OK;
1111 fail:
1112 TALLOC_FREE(streams);
1113 return status;
1114 }
1115
1116 /**
1117 * Go through all the steps to validate a filename.
1118 *
1119 * @param ctx talloc_ctx to allocate memory with.
1120 * @param conn connection struct for vfs calls.
1121 * @param dfs_path Whether this path requires dfs resolution.
1122 * @param name_in The unconverted name.
1123 * @param ucf_flags flags to pass through to unix_convert().
1124 * UCF_ALWAYS_ALLOW_WCARD_LCOMP will be OR'd in if
1125 * p_cont_wcard != NULL and is true and
1126 * UCF_COND_ALLOW_WCARD_LCOMP.
1127 * @param p_cont_wcard If not NULL, will be set to true if the dfs path
1128 * resolution detects a wildcard.
1129 * @param pp_smb_fname The final converted name will be allocated if the
1130 * return is NT_STATUS_OK.
1131 *
1132 * @return NT_STATUS_OK if all operations completed succesfully, appropriate
1133 * error otherwise.
1134 */
1135 NTSTATUS filename_convert(TALLOC_CTX *ctx,
1136 connection_struct *conn,
1137 bool dfs_path,
1138 const char *name_in,
1139 uint32_t ucf_flags,
1140 bool *ppath_contains_wcard,
1141 struct smb_filename **pp_smb_fname)
1142 {
1143 NTSTATUS status;
1144 bool allow_wcards = (ucf_flags & (UCF_COND_ALLOW_WCARD_LCOMP|UCF_ALWAYS_ALLOW_WCARD_LCOMP));
1145 char *fname = NULL;
1146
1147 *pp_smb_fname = NULL;
1148
1149 status = resolve_dfspath_wcard(ctx, conn,
1150 dfs_path,
1151 name_in,
1152 allow_wcards,
1153 &fname,
1154 ppath_contains_wcard);
1155 if (!NT_STATUS_IS_OK(status)) {
1156 DEBUG(10,("filename_convert: resolve_dfspath failed "
1157 "for name %s with %s\n",
1158 name_in,
1159 nt_errstr(status) ));
1160 return status;
1161 }
1162
1163 if (is_fake_file_path(name_in)) {
1164 SMB_STRUCT_STAT st;
1165 ZERO_STRUCT(st);
1166 st.st_ex_nlink = 1;
1167 status = create_synthetic_smb_fname_split(ctx,
1168 name_in,
1169 &st,
1170 pp_smb_fname);
1171 return status;
1172 }
1173
1174 /*
1175 * If the caller conditionally allows wildcard lookups, only add the
1176 * always allow if the path actually does contain a wildcard.
1177 */
1178 if (ucf_flags & UCF_COND_ALLOW_WCARD_LCOMP &&
1179 ppath_contains_wcard != NULL && *ppath_contains_wcard) {
1180 ucf_flags |= UCF_ALWAYS_ALLOW_WCARD_LCOMP;
1181 }
1182
1183 status = unix_convert(ctx, conn, fname, pp_smb_fname, ucf_flags);
1184 if (!NT_STATUS_IS_OK(status)) {
1185 DEBUG(10,("filename_convert: unix_convert failed "
1186 "for name %s with %s\n",
1187 fname,
1188 nt_errstr(status) ));
1189 return status;
1190 }
1191
1192 if ((ucf_flags & UCF_UNIX_NAME_LOOKUP) &&
1193 VALID_STAT((*pp_smb_fname)->st) &&
1194 S_ISLNK((*pp_smb_fname)->st.st_ex_mode)) {
1195 return check_veto_path(conn, (*pp_smb_fname)->base_name);
1196 }
1197
1198 status = check_name(conn, (*pp_smb_fname)->base_name);
1199 if (!NT_STATUS_IS_OK(status)) {
1200 DEBUG(3,("filename_convert: check_name failed "
1201 "for name %s with %s\n",
1202 smb_fname_str_dbg(*pp_smb_fname),
1203 nt_errstr(status) ));
1204 TALLOC_FREE(*pp_smb_fname);
1205 return status;
1206 }
1207
1208 return status;
1209 }
Samba GIT mirror