source3/smbd/smb2_getinfo.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Core SMB2 server
   4
   5    Copyright (C) Stefan Metzmacher 2009
   6    Copyright (C) Jeremy Allison 2010
   7
   8    This program is free software; you can redistribute it and/or modify
   9    it under the terms of the GNU General Public License as published by
  10    the Free Software Foundation; either version 3 of the License, or
  11    (at your option) any later version.
  12
  13    This program is distributed in the hope that it will be useful,
  14    but WITHOUT ANY WARRANTY; without even the implied warranty of
  15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16    GNU General Public License for more details.
  17
  18    You should have received a copy of the GNU General Public License
  19    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  20 */
  21
  22 #include "includes.h"
  23 #include "smbd/smbd.h"
  24 #include "smbd/globals.h"
  25 #include "../libcli/smb/smb_common.h"
  26 #include "trans2.h"
  27 #include "../lib/util/tevent_ntstatus.h"
  28 #include "librpc/gen_ndr/ndr_quota.h"
  29 #include "librpc/gen_ndr/ndr_security.h"
  30
  31 #undef DBGC_CLASS
  32 #define DBGC_CLASS DBGC_SMB2
  33
  34 static struct tevent_req *smbd_smb2_getinfo_send(TALLOC_CTX *mem_ctx,
  35                                                  struct tevent_context *ev,
  36                                                  struct smbd_smb2_request *smb2req,
  37                                                  struct files_struct *in_fsp,
  38                                                  uint8_t in_info_type,
  39                                                  uint8_t in_file_info_class,
  40                                                  uint32_t in_output_buffer_length,
  41                                                  DATA_BLOB in_input_buffer,
  42                                                  uint32_t in_additional_information,
  43                                                  uint32_t in_flags);
  44 static NTSTATUS smbd_smb2_getinfo_recv(struct tevent_req *req,
  45                                        TALLOC_CTX *mem_ctx,
  46                                        DATA_BLOB *out_output_buffer,
  47                                        NTSTATUS *p_call_status);
  48
  49 static void smbd_smb2_request_getinfo_done(struct tevent_req *subreq);
  50 NTSTATUS smbd_smb2_request_process_getinfo(struct smbd_smb2_request *req)
  51 {
  52         struct smbXsrv_connection *xconn = req->xconn;
  53         NTSTATUS status;
  54         const uint8_t *inbody;
  55         uint8_t in_info_type;
  56         uint8_t in_file_info_class;
  57         uint32_t in_output_buffer_length;
  58         uint16_t in_input_buffer_offset;
  59         uint32_t in_input_buffer_length;
  60         DATA_BLOB in_input_buffer;
  61         uint32_t in_additional_information;
  62         uint32_t in_flags;
  63         uint64_t in_file_id_persistent;
  64         uint64_t in_file_id_volatile;
  65         struct files_struct *in_fsp;
  66         struct tevent_req *subreq;
  67
  68         status = smbd_smb2_request_verify_sizes(req, 0x29);
  69         if (!NT_STATUS_IS_OK(status)) {
  70                 return smbd_smb2_request_error(req, status);
  71         }
  72         inbody = SMBD_SMB2_IN_BODY_PTR(req);
  73
  74         in_info_type                    = CVAL(inbody, 0x02);
  75         in_file_info_class              = CVAL(inbody, 0x03);
  76         in_output_buffer_length         = IVAL(inbody, 0x04);
  77         in_input_buffer_offset          = SVAL(inbody, 0x08);
  78         /* 0x0A 2 bytes reserved */
  79         in_input_buffer_length          = IVAL(inbody, 0x0C);
  80         in_additional_information       = IVAL(inbody, 0x10);
  81         in_flags                        = IVAL(inbody, 0x14);
  82         in_file_id_persistent           = BVAL(inbody, 0x18);
  83         in_file_id_volatile             = BVAL(inbody, 0x20);
  84
  85         if (in_input_buffer_offset == 0 && in_input_buffer_length == 0) {
  86                 /* This is ok */
  87         } else if (in_input_buffer_offset !=
  88                    (SMB2_HDR_BODY + SMBD_SMB2_IN_BODY_LEN(req))) {
  89                 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
  90         }
  91
  92         if (in_input_buffer_length > SMBD_SMB2_IN_DYN_LEN(req)) {
  93                 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
  94         }
  95
  96         in_input_buffer.data = SMBD_SMB2_IN_DYN_PTR(req);
  97         in_input_buffer.length = in_input_buffer_length;
  98
  99         if (in_input_buffer.length > xconn->smb2.server.max_trans) {
 100                 DEBUG(2,("smbd_smb2_request_process_getinfo: "
 101                          "client ignored max trans: %s: 0x%08X: 0x%08X\n",
 102                          __location__, (unsigned)in_input_buffer.length,
 103                          (unsigned)xconn->smb2.server.max_trans));
 104                 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
 105         }
 106         if (in_output_buffer_length > xconn->smb2.server.max_trans) {
 107                 DEBUG(2,("smbd_smb2_request_process_getinfo: "
 108                          "client ignored max trans: %s: 0x%08X: 0x%08X\n",
 109                          __location__, in_output_buffer_length,
 110                          xconn->smb2.server.max_trans));
 111                 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
 112         }
 113
 114         status = smbd_smb2_request_verify_creditcharge(req,
 115                         MAX(in_input_buffer.length,in_output_buffer_length));
 116         if (!NT_STATUS_IS_OK(status)) {
 117                 return smbd_smb2_request_error(req, status);
 118         }
 119
 120         in_fsp = file_fsp_smb2(req, in_file_id_persistent, in_file_id_volatile);
 121         if (in_fsp == NULL) {
 122                 return smbd_smb2_request_error(req, NT_STATUS_FILE_CLOSED);
 123         }
 124
 125         subreq = smbd_smb2_getinfo_send(req, req->sconn->ev_ctx,
 126                                         req, in_fsp,
 127                                         in_info_type,
 128                                         in_file_info_class,
 129                                         in_output_buffer_length,
 130                                         in_input_buffer,
 131                                         in_additional_information,
 132                                         in_flags);
 133         if (subreq == NULL) {
 134                 return smbd_smb2_request_error(req, NT_STATUS_NO_MEMORY);
 135         }
 136         tevent_req_set_callback(subreq, smbd_smb2_request_getinfo_done, req);
 137
 138         return smbd_smb2_request_pending_queue(req, subreq, 500);
 139 }
 140
 141 static void smbd_smb2_request_getinfo_done(struct tevent_req *subreq)
 142 {
 143         struct smbd_smb2_request *req = tevent_req_callback_data(subreq,
 144                                         struct smbd_smb2_request);
 145         DATA_BLOB outbody;
 146         DATA_BLOB outdyn;
 147         uint16_t out_output_buffer_offset;
 148         DATA_BLOB out_output_buffer = data_blob_null;
 149         NTSTATUS status;
 150         NTSTATUS call_status = NT_STATUS_OK;
 151         NTSTATUS error; /* transport error */
 152
 153         status = smbd_smb2_getinfo_recv(subreq,
 154                                         req,
 155                                         &out_output_buffer,
 156                                         &call_status);
 157         TALLOC_FREE(subreq);
 158         if (!NT_STATUS_IS_OK(status)) {
 159                 error = smbd_smb2_request_error(req, status);
 160                 if (!NT_STATUS_IS_OK(error)) {
 161                         smbd_server_connection_terminate(req->xconn,
 162                                                          nt_errstr(error));
 163                         return;
 164                 }
 165                 return;
 166         }
 167
 168         /* some GetInfo responses set STATUS_BUFFER_OVERFLOW and return partial,
 169            but valid data */
 170         if (!(NT_STATUS_IS_OK(call_status) ||
 171               NT_STATUS_EQUAL(call_status, STATUS_BUFFER_OVERFLOW))) {
 172                 /* Return a specific error with data. */
 173                 error = smbd_smb2_request_error_ex(req,
 174                                                 call_status,
 175                                                 0,
 176                                                 &out_output_buffer,
 177                                                 __location__);
 178                 if (!NT_STATUS_IS_OK(error)) {
 179                         smbd_server_connection_terminate(req->xconn,
 180                                                          nt_errstr(error));
 181                         return;
 182                 }
 183                 return;
 184         }
 185
 186         out_output_buffer_offset = SMB2_HDR_BODY + 0x08;
 187
 188         outbody = smbd_smb2_generate_outbody(req, 0x08);
 189         if (outbody.data == NULL) {
 190                 error = smbd_smb2_request_error(req, NT_STATUS_NO_MEMORY);
 191                 if (!NT_STATUS_IS_OK(error)) {
 192                         smbd_server_connection_terminate(req->xconn,
 193                                                          nt_errstr(error));
 194                         return;
 195                 }
 196                 return;
 197         }
 198
 199         SSVAL(outbody.data, 0x00, 0x08 + 1);    /* struct size */
 200         SSVAL(outbody.data, 0x02,
 201               out_output_buffer_offset);        /* output buffer offset */
 202         SIVAL(outbody.data, 0x04,
 203               out_output_buffer.length);        /* output buffer length */
 204
 205         outdyn = out_output_buffer;
 206
 207         error = smbd_smb2_request_done_ex(req, call_status, outbody, &outdyn, __location__);
 208         if (!NT_STATUS_IS_OK(error)) {
 209                 smbd_server_connection_terminate(req->xconn,
 210                                                  nt_errstr(error));
 211                 return;
 212         }
 213 }
 214
 215 struct smbd_smb2_getinfo_state {
 216         struct smbd_smb2_request *smb2req;
 217         NTSTATUS status;
 218         DATA_BLOB out_output_buffer;
 219 };
 220
 221 static void smb2_ipc_getinfo(struct tevent_req *req,
 222                                 struct smbd_smb2_getinfo_state *state,
 223                                 struct tevent_context *ev,
 224                                 uint8_t in_info_type,
 225                                 uint8_t in_file_info_class)
 226 {
 227         /* We want to reply to SMB2_GETINFO_FILE
 228            with a class of SMB2_FILE_STANDARD_INFO as
 229            otherwise a Win7 client issues this request
 230            twice (2xroundtrips) if we return NOT_SUPPORTED.
 231            NB. We do the same for SMB1 in call_trans2qpipeinfo() */
 232
 233         if (in_info_type == 0x01 && /* SMB2_GETINFO_FILE */
 234                         in_file_info_class == 0x05) { /* SMB2_FILE_STANDARD_INFO */
 235                 state->out_output_buffer = data_blob_talloc(state,
 236                                                 NULL, 24);
 237                 if (tevent_req_nomem(state->out_output_buffer.data, req)) {
 238                         return;
 239                 }
 240
 241                 memset(state->out_output_buffer.data,0,24);
 242                 SOFF_T(state->out_output_buffer.data,0,4096LL);
 243                 SIVAL(state->out_output_buffer.data,16,1);
 244                 SIVAL(state->out_output_buffer.data,20,1);
 245                 tevent_req_done(req);
 246         } else {
 247                 tevent_req_nterror(req, NT_STATUS_NOT_SUPPORTED);
 248         }
 249 }
 250
 251 static struct tevent_req *smbd_smb2_getinfo_send(TALLOC_CTX *mem_ctx,
 252                                                  struct tevent_context *ev,
 253                                                  struct smbd_smb2_request *smb2req,
 254                                                  struct files_struct *fsp,
 255                                                  uint8_t in_info_type,
 256                                                  uint8_t in_file_info_class,
 257                                                  uint32_t in_output_buffer_length,
 258                                                  DATA_BLOB in_input_buffer,
 259                                                  uint32_t in_additional_information,
 260                                                  uint32_t in_flags)
 261 {
 262         struct tevent_req *req;
 263         struct smbd_smb2_getinfo_state *state;
 264         struct smb_request *smbreq;
 265         connection_struct *conn = smb2req->tcon->compat;
 266         NTSTATUS status;
 267
 268         req = tevent_req_create(mem_ctx, &state,
 269                                 struct smbd_smb2_getinfo_state);
 270         if (req == NULL) {
 271                 return NULL;
 272         }
 273         state->smb2req = smb2req;
 274         state->status = NT_STATUS_OK;
 275         state->out_output_buffer = data_blob_null;
 276
 277         DEBUG(10,("smbd_smb2_getinfo_send: %s - %s\n",
 278                   fsp_str_dbg(fsp), fsp_fnum_dbg(fsp)));
 279
 280         smbreq = smbd_smb2_fake_smb_request(smb2req);
 281         if (tevent_req_nomem(smbreq, req)) {
 282                 return tevent_req_post(req, ev);
 283         }
 284
 285         if (IS_IPC(conn)) {
 286                 smb2_ipc_getinfo(req, state, ev,
 287                         in_info_type, in_file_info_class);
 288                 return tevent_req_post(req, ev);
 289         }
 290
 291         switch (in_info_type) {
 292         case SMB2_0_INFO_FILE:
 293         {
 294                 uint16_t file_info_level;
 295                 char *data = NULL;
 296                 unsigned int data_size = 0;
 297                 bool delete_pending = false;
 298                 struct timespec write_time_ts;
 299                 struct file_id fileid;
 300                 struct ea_list *ea_list = NULL;
 301                 int lock_data_count = 0;
 302                 char *lock_data = NULL;
 303                 size_t fixed_portion;
 304
 305                 ZERO_STRUCT(write_time_ts);
 306
 307                 /*
 308                  * MS-SMB2 3.3.5.20.1 "Handling SMB2_0_INFO_FILE"
 309                  *
 310                  * FileBasicInformation, FileAllInformation,
 311                  * FileNetworkOpenInformation, FileAttributeTagInformation
 312                  * require FILE_READ_ATTRIBUTES.
 313                  *
 314                  * FileFullEaInformation requires FILE_READ_EA.
 315                  */
 316                 switch (in_file_info_class) {
 317                 case FSCC_FILE_BASIC_INFORMATION:
 318                 case FSCC_FILE_ALL_INFORMATION:
 319                 case FSCC_FILE_NETWORK_OPEN_INFORMATION:
 320                 case FSCC_FILE_ATTRIBUTE_TAG_INFORMATION:
 321                         if (!(fsp->access_mask & SEC_FILE_READ_ATTRIBUTE)) {
 322                                 tevent_req_nterror(req, NT_STATUS_ACCESS_DENIED);
 323                                 return tevent_req_post(req, ev);
 324                         }
 325                         break;
 326
 327                 case FSCC_FILE_FULL_EA_INFORMATION:
 328                         if (!(fsp->access_mask & SEC_FILE_READ_EA)) {
 329                                 tevent_req_nterror(req, NT_STATUS_ACCESS_DENIED);
 330                                 return tevent_req_post(req, ev);
 331                         }
 332                         break;
 333                 }
 334
 335                 switch (in_file_info_class) {
 336                 case FSCC_FILE_FULL_EA_INFORMATION:
 337                         file_info_level = SMB2_FILE_FULL_EA_INFORMATION;
 338                         break;
 339
 340                 case FSCC_FILE_ALL_INFORMATION:
 341                         file_info_level = SMB2_FILE_ALL_INFORMATION;
 342                         break;
 343
 344                 case SMB2_FILE_POSIX_INFORMATION:
 345                         if (!(fsp->posix_flags & FSP_POSIX_FLAGS_OPEN)) {
 346                                 tevent_req_nterror(req, NT_STATUS_INVALID_LEVEL);
 347                                 return tevent_req_post(req, ev);
 348                         }
 349                         file_info_level = SMB2_FILE_POSIX_INFORMATION_INTERNAL;
 350                         break;
 351
 352                 default:
 353                         /* the levels directly map to the passthru levels */
 354                         file_info_level = in_file_info_class + 1000;
 355                         break;
 356                 }
 357
 358                 switch (file_info_level) {
 359                 case SMB_FILE_NORMALIZED_NAME_INFORMATION:
 360                         if (smb2req->xconn->protocol < PROTOCOL_SMB3_11) {
 361                                 tevent_req_nterror(req, NT_STATUS_NOT_SUPPORTED);
 362                                 return tevent_req_post(req, ev);
 363                         }
 364                         break;
 365                 }
 366
 367                 if (fsp->fake_file_handle) {
 368                         /*
 369                          * This is actually for the QUOTA_FAKE_FILE --metze
 370                          */
 371
 372                         /* We know this name is ok, it's already passed the checks. */
 373
 374                 } else if (fsp_get_pathref_fd(fsp) == -1) {
 375                         /*
 376                          * This is actually a QFILEINFO on a directory
 377                          * handle (returned from an NT SMB). NT5.0 seems
 378                          * to do this call. JRA.
 379                          */
 380                         int ret = vfs_stat(conn, fsp->fsp_name);
 381                         if (ret != 0) {
 382                                 DBG_NOTICE("vfs_stat of %s failed (%s)\n",
 383                                          fsp_str_dbg(fsp),
 384                                          strerror(errno));
 385                                 status = map_nt_error_from_unix(errno);
 386                                 tevent_req_nterror(req, status);
 387                                 return tevent_req_post(req, ev);
 388                         }
 389
 390                         if (fsp_getinfo_ask_sharemode(fsp)) {
 391                                 fileid = vfs_file_id_from_sbuf(
 392                                         conn, &fsp->fsp_name->st);
 393                                 get_file_infos(fileid, fsp->name_hash,
 394                                                &delete_pending,
 395                                                &write_time_ts);
 396                         }
 397                 } else {
 398                         /*
 399                          * Original code - this is an open file.
 400                          */
 401
 402                         status = vfs_stat_fsp(fsp);
 403                         if (!NT_STATUS_IS_OK(status)) {
 404                                 DEBUG(3, ("smbd_smb2_getinfo_send: "
 405                                           "fstat of %s failed (%s)\n",
 406                                           fsp_fnum_dbg(fsp), nt_errstr(status)));
 407                                 tevent_req_nterror(req, status);
 408                                 return tevent_req_post(req, ev);
 409                         }
 410                         if (fsp_getinfo_ask_sharemode(fsp)) {
 411                                 fileid = vfs_file_id_from_sbuf(
 412                                         conn, &fsp->fsp_name->st);
 413                                 get_file_infos(fileid, fsp->name_hash,
 414                                                &delete_pending,
 415                                                &write_time_ts);
 416                         }
 417                 }
 418
 419                 status = smbd_do_qfilepathinfo(conn, state,
 420                                                smbreq,
 421                                                file_info_level,
 422                                                fsp,
 423                                                fsp->fsp_name,
 424                                                delete_pending,
 425                                                write_time_ts,
 426                                                ea_list,
 427                                                lock_data_count,
 428                                                lock_data,
 429                                                STR_UNICODE,
 430                                                in_output_buffer_length,
 431                                                &fixed_portion,
 432                                                &data,
 433                                                &data_size);
 434                 if (!NT_STATUS_IS_OK(status)) {
 435                         SAFE_FREE(data);
 436                         if (NT_STATUS_EQUAL(status, NT_STATUS_INVALID_LEVEL)) {
 437                                 status = NT_STATUS_INVALID_INFO_CLASS;
 438                         }
 439                         tevent_req_nterror(req, status);
 440                         return tevent_req_post(req, ev);
 441                 }
 442                 if (in_output_buffer_length < fixed_portion) {
 443                         SAFE_FREE(data);
 444                         tevent_req_nterror(
 445                                 req, NT_STATUS_INFO_LENGTH_MISMATCH);
 446                         return tevent_req_post(req, ev);
 447                 }
 448                 if (data_size > 0) {
 449                         state->out_output_buffer = data_blob_talloc(state,
 450                                                                     data,
 451                                                                     data_size);
 452                         SAFE_FREE(data);
 453                         if (tevent_req_nomem(state->out_output_buffer.data, req)) {
 454                                 return tevent_req_post(req, ev);
 455                         }
 456                         if (data_size > in_output_buffer_length) {
 457                                 state->out_output_buffer.length =
 458                                         in_output_buffer_length;
 459                                 status = STATUS_BUFFER_OVERFLOW;
 460                         }
 461                 }
 462                 SAFE_FREE(data);
 463                 break;
 464         }
 465
 466         case SMB2_0_INFO_FILESYSTEM:
 467         {
 468                 uint16_t file_info_level;
 469                 char *data = NULL;
 470                 int data_size = 0;
 471                 size_t fixed_portion;
 472
 473                 /* the levels directly map to the passthru levels */
 474                 file_info_level = in_file_info_class + 1000;
 475
 476                 status = smbd_do_qfsinfo(smb2req->xconn, conn, state,
 477                                          file_info_level,
 478                                          STR_UNICODE,
 479                                          in_output_buffer_length,
 480                                          &fixed_portion,
 481                                          fsp->fsp_name,
 482                                          &data,
 483                                          &data_size);
 484                 /* some responses set STATUS_BUFFER_OVERFLOW and return
 485                    partial, but valid data */
 486                 if (!(NT_STATUS_IS_OK(status) ||
 487                       NT_STATUS_EQUAL(status, STATUS_BUFFER_OVERFLOW))) {
 488                         SAFE_FREE(data);
 489                         if (NT_STATUS_EQUAL(status, NT_STATUS_INVALID_LEVEL)) {
 490                                 status = NT_STATUS_INVALID_INFO_CLASS;
 491                         }
 492                         tevent_req_nterror(req, status);
 493                         return tevent_req_post(req, ev);
 494                 }
 495                 if (in_output_buffer_length < fixed_portion) {
 496                         SAFE_FREE(data);
 497                         tevent_req_nterror(
 498                                 req, NT_STATUS_INFO_LENGTH_MISMATCH);
 499                         return tevent_req_post(req, ev);
 500                 }
 501                 if (data_size > 0) {
 502                         state->out_output_buffer = data_blob_talloc(state,
 503                                                                     data,
 504                                                                     data_size);
 505                         SAFE_FREE(data);
 506                         if (tevent_req_nomem(state->out_output_buffer.data, req)) {
 507                                 return tevent_req_post(req, ev);
 508                         }
 509                         if (data_size > in_output_buffer_length) {
 510                                 state->out_output_buffer.length =
 511                                         in_output_buffer_length;
 512                                 status = STATUS_BUFFER_OVERFLOW;
 513                         }
 514                 }
 515                 SAFE_FREE(data);
 516                 break;
 517         }
 518
 519         case SMB2_0_INFO_SECURITY:
 520         {
 521                 uint8_t *p_marshalled_sd = NULL;
 522                 size_t sd_size = 0;
 523
 524                 status = smbd_do_query_security_desc(conn,
 525                                 state,
 526                                 fsp,
 527                                 /* Security info wanted. */
 528                                 in_additional_information &
 529                                 SMB_SUPPORTED_SECINFO_FLAGS,
 530                                 in_output_buffer_length,
 531                                 &p_marshalled_sd,
 532                                 &sd_size);
 533
 534                 if (NT_STATUS_EQUAL(status, NT_STATUS_BUFFER_TOO_SMALL)) {
 535                         /* Return needed size. */
 536                         state->out_output_buffer = data_blob_talloc(state,
 537                                                                     NULL,
 538                                                                     4);
 539                         if (tevent_req_nomem(state->out_output_buffer.data, req)) {
 540                                 return tevent_req_post(req, ev);
 541                         }
 542                         SIVAL(state->out_output_buffer.data,0,(uint32_t)sd_size);
 543                         state->status = NT_STATUS_BUFFER_TOO_SMALL;
 544                         break;
 545                 }
 546                 if (!NT_STATUS_IS_OK(status)) {
 547                         DEBUG(10,("smbd_smb2_getinfo_send: "
 548                                  "smbd_do_query_security_desc of %s failed "
 549                                  "(%s)\n", fsp_str_dbg(fsp),
 550                                  nt_errstr(status)));
 551                         tevent_req_nterror(req, status);
 552                         return tevent_req_post(req, ev);
 553                 }
 554
 555                 if (sd_size > 0) {
 556                         state->out_output_buffer = data_blob_talloc(state,
 557                                                                     p_marshalled_sd,
 558                                                                     sd_size);
 559                         if (tevent_req_nomem(state->out_output_buffer.data, req)) {
 560                                 return tevent_req_post(req, ev);
 561                         }
 562                 }
 563                 break;
 564         }
 565
 566         case SMB2_0_INFO_QUOTA: {
 567 #ifdef HAVE_SYS_QUOTAS
 568                 struct smb2_query_quota_info info;
 569                 enum ndr_err_code err;
 570                 uint8_t *data = NULL;
 571                 uint32_t data_size = 0;
 572                 struct ndr_pull *ndr_pull = NULL;
 573                 DATA_BLOB sid_buf = data_blob_null;
 574                 TALLOC_CTX *tmp_ctx = talloc_init("geninfo_quota");
 575                 bool ok;
 576
 577                 if (!tmp_ctx) {
 578                         tevent_req_nterror(req, NT_STATUS_NO_MEMORY);
 579                         return tevent_req_post(req, ev);
 580                 }
 581
 582                 ok = check_fsp_ntquota_handle(conn, smbreq, fsp);
 583                 if (!ok) {
 584                         DBG_INFO("no valid QUOTA HANDLE\n");
 585                         TALLOC_FREE(tmp_ctx);
 586                         tevent_req_nterror(req, NT_STATUS_INVALID_HANDLE);
 587                         return tevent_req_post(req, ev);
 588                 }
 589
 590                 ndr_pull = ndr_pull_init_blob(&in_input_buffer, tmp_ctx);
 591                 if (!ndr_pull) {
 592                         TALLOC_FREE(tmp_ctx);
 593                         tevent_req_nterror(req, NT_STATUS_NO_MEMORY);
 594                         return tevent_req_post(req, ev);
 595                 }
 596
 597                 err = ndr_pull_smb2_query_quota_info(ndr_pull,
 598                                                      NDR_SCALARS | NDR_BUFFERS,
 599                                                      &info);
 600
 601                 if (!NDR_ERR_CODE_IS_SUCCESS(err)) {
 602                         DBG_DEBUG("failed to pull smb2_query_quota_info\n");
 603                         TALLOC_FREE(tmp_ctx);
 604                         tevent_req_nterror(req, NT_STATUS_INTERNAL_ERROR);
 605                         return tevent_req_post(req, ev);
 606                 }
 607
 608                 DBG_DEBUG("quota list returnsingle %u, restartscan %u, "
 609                           "sid_list_length %u, start_sid_length %u, "
 610                           "startsidoffset %u\n",
 611                           (unsigned int)info.return_single,
 612                           (unsigned int)info.restart_scan,
 613                           (unsigned int)info.sid_list_length,
 614                           (unsigned int)info.start_sid_length,
 615                           (unsigned int)info.start_sid_offset);
 616
 617                 /* Currently we do not support the single start sid format */
 618                 if (info.start_sid_length != 0 || info.start_sid_offset != 0 ) {
 619                         DBG_INFO("illegal single sid query\n");
 620                         TALLOC_FREE(tmp_ctx);
 621                         tevent_req_nterror(req, NT_STATUS_INVALID_PARAMETER);
 622                         return tevent_req_post(req, ev);
 623                 }
 624
 625                 if (in_input_buffer.length < ndr_pull->offset) {
 626                         DBG_INFO("Invalid buffer length\n");
 627                         TALLOC_FREE(tmp_ctx);
 628                         tevent_req_nterror(req, NT_STATUS_INVALID_PARAMETER);
 629                         return tevent_req_post(req, ev);
 630                 }
 631
 632                 sid_buf.data = in_input_buffer.data + ndr_pull->offset;
 633                 sid_buf.length = in_input_buffer.length - ndr_pull->offset;
 634
 635                 status = smbd_do_query_getinfo_quota(tmp_ctx,
 636                                   fsp,
 637                                   info.restart_scan,
 638                                   info.return_single,
 639                                   info.sid_list_length,
 640                                   &sid_buf,
 641                                   in_output_buffer_length,
 642                                   &data,
 643                                   &data_size);
 644
 645                 if (!NT_STATUS_IS_OK(status)) {
 646                         TALLOC_FREE(tmp_ctx);
 647                         tevent_req_nterror(req, status);
 648                         return tevent_req_post(req, ev);
 649                 }
 650
 651                 state->out_output_buffer =
 652                         data_blob_talloc(state, data, data_size);
 653                 status  = NT_STATUS_OK;
 654                 TALLOC_FREE(tmp_ctx);
 655                 break;
 656 #else
 657                 tevent_req_nterror(req, NT_STATUS_NOT_SUPPORTED);
 658                 return tevent_req_post(req, ev);
 659 #endif
 660         }
 661
 662         default:
 663                 DEBUG(10,("smbd_smb2_getinfo_send: "
 664                         "unknown in_info_type of %u "
 665                         " for file %s\n",
 666                         (unsigned int)in_info_type,
 667                         fsp_str_dbg(fsp) ));
 668
 669                 tevent_req_nterror(req, NT_STATUS_INVALID_PARAMETER);
 670                 return tevent_req_post(req, ev);
 671         }
 672
 673         state->status = status;
 674         tevent_req_done(req);
 675         return tevent_req_post(req, ev);
 676 }
 677
 678 static NTSTATUS smbd_smb2_getinfo_recv(struct tevent_req *req,
 679                                        TALLOC_CTX *mem_ctx,
 680                                        DATA_BLOB *out_output_buffer,
 681                                        NTSTATUS *pstatus)
 682 {
 683         NTSTATUS status;
 684         struct smbd_smb2_getinfo_state *state = tevent_req_data(req,
 685                                                 struct smbd_smb2_getinfo_state);
 686
 687         if (tevent_req_is_nterror(req, &status)) {
 688                 tevent_req_received(req);
 689                 return status;
 690         }
 691
 692         *out_output_buffer = state->out_output_buffer;
 693         talloc_steal(mem_ctx, out_output_buffer->data);
 694         *pstatus = state->status;
 695
 696         tevent_req_received(req);
 697         return NT_STATUS_OK;
 698 }