libcli/smb: make use of samba_tevent_context_init()
[Samba/gebeck_regimport.git] / libcli / smb / smb2cli_ioctl.c
blob15a990c2560d00738feb9fa0c5abca9c58ec1057
1 /*
2 Unix SMB/CIFS implementation.
3 smb2 lib
4 Copyright (C) Stefan Metzmacher 2011
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
20 #include "includes.h"
21 #include "system/network.h"
22 #include "lib/util/tevent_ntstatus.h"
23 #include "smb_common.h"
24 #include "smbXcli_base.h"
25 #include "librpc/ndr/libndr.h"
27 struct smb2cli_ioctl_state {
28 uint8_t fixed[0x38];
29 uint8_t dyn_pad[1];
30 uint32_t max_input_length;
31 uint32_t max_output_length;
32 struct iovec *recv_iov;
33 DATA_BLOB out_input_buffer;
34 DATA_BLOB out_output_buffer;
37 static void smb2cli_ioctl_done(struct tevent_req *subreq);
39 struct tevent_req *smb2cli_ioctl_send(TALLOC_CTX *mem_ctx,
40 struct tevent_context *ev,
41 struct smbXcli_conn *conn,
42 uint32_t timeout_msec,
43 struct smbXcli_session *session,
44 struct smbXcli_tcon *tcon,
45 uint64_t in_fid_persistent,
46 uint64_t in_fid_volatile,
47 uint32_t in_ctl_code,
48 uint32_t in_max_input_length,
49 const DATA_BLOB *in_input_buffer,
50 uint32_t in_max_output_length,
51 const DATA_BLOB *in_output_buffer,
52 uint32_t in_flags)
54 struct tevent_req *req, *subreq;
55 struct smb2cli_ioctl_state *state;
56 uint8_t *fixed;
57 uint8_t *dyn;
58 size_t dyn_len;
59 uint32_t input_buffer_offset = 0;
60 uint32_t input_buffer_length = 0;
61 uint32_t output_buffer_offset = 0;
62 uint32_t output_buffer_length = 0;
63 uint32_t pad_length = 0;
65 req = tevent_req_create(mem_ctx, &state,
66 struct smb2cli_ioctl_state);
67 if (req == NULL) {
68 return NULL;
70 state->max_input_length = in_max_input_length;
71 state->max_output_length = in_max_output_length;
73 if (in_input_buffer) {
74 input_buffer_offset = SMB2_HDR_BODY+0x38;
75 input_buffer_length = in_input_buffer->length;
78 if (in_output_buffer) {
79 output_buffer_offset = SMB2_HDR_BODY+0x38;
80 output_buffer_length = in_output_buffer->length;
81 if (input_buffer_length > 0 && output_buffer_length > 0) {
82 uint32_t tmp;
83 output_buffer_offset += input_buffer_length;
84 tmp = output_buffer_offset;
85 output_buffer_offset = NDR_ROUND(output_buffer_offset, 8);
86 pad_length = output_buffer_offset - tmp;
90 fixed = state->fixed;
92 SSVAL(fixed, 0x00, 0x39);
93 SSVAL(fixed, 0x02, 0); /* reserved */
94 SIVAL(fixed, 0x04, in_ctl_code);
95 SBVAL(fixed, 0x08, in_fid_persistent);
96 SBVAL(fixed, 0x10, in_fid_volatile);
97 SIVAL(fixed, 0x18, input_buffer_offset);
98 SIVAL(fixed, 0x1C, input_buffer_length);
99 SIVAL(fixed, 0x20, in_max_input_length);
100 SIVAL(fixed, 0x24, output_buffer_offset);
101 SIVAL(fixed, 0x28, output_buffer_length);
102 SIVAL(fixed, 0x2C, in_max_output_length);
103 SIVAL(fixed, 0x30, in_flags);
104 SIVAL(fixed, 0x34, 0); /* reserved */
106 if (input_buffer_length > 0 && output_buffer_length > 0) {
107 size_t avail = UINT32_MAX - (input_buffer_length + pad_length);
108 size_t ofs = output_buffer_offset - input_buffer_offset;
110 if (avail < output_buffer_length) {
111 tevent_req_nterror(req, NT_STATUS_INVALID_PARAMETER_MIX);
112 return tevent_req_post(req, ev);
115 dyn_len = input_buffer_length + output_buffer_length + pad_length;
117 dyn = talloc_zero_array(state, uint8_t, dyn_len);
118 if (tevent_req_nomem(dyn, req)) {
119 return tevent_req_post(req, ev);
121 memcpy(dyn, in_input_buffer->data,
122 in_input_buffer->length);
123 memcpy(dyn + ofs, in_output_buffer->data,
124 in_output_buffer->length);
125 } else if (input_buffer_length > 0) {
126 dyn = in_input_buffer->data;
127 dyn_len = in_input_buffer->length;
128 } else if (output_buffer_length > 0) {
129 dyn = in_output_buffer->data;
130 dyn_len = in_output_buffer->length;
131 } else {
132 dyn = state->dyn_pad;
133 dyn_len = sizeof(state->dyn_pad);
136 subreq = smb2cli_req_send(state, ev, conn, SMB2_OP_IOCTL,
137 0, 0, /* flags */
138 timeout_msec,
139 tcon,
140 session,
141 state->fixed, sizeof(state->fixed),
142 dyn, dyn_len);
143 if (tevent_req_nomem(subreq, req)) {
144 return tevent_req_post(req, ev);
146 tevent_req_set_callback(subreq, smb2cli_ioctl_done, req);
147 return req;
150 static void smb2cli_ioctl_done(struct tevent_req *subreq)
152 struct tevent_req *req =
153 tevent_req_callback_data(subreq,
154 struct tevent_req);
155 struct smb2cli_ioctl_state *state =
156 tevent_req_data(req,
157 struct smb2cli_ioctl_state);
158 NTSTATUS status;
159 struct iovec *iov;
160 uint8_t *fixed;
161 uint8_t *dyn;
162 size_t dyn_len;
163 uint32_t dyn_ofs = SMB2_HDR_BODY + 0x30;
164 uint32_t input_buffer_offset;
165 uint32_t input_buffer_length;
166 uint32_t output_buffer_offset;
167 uint32_t output_buffer_length;
168 static const struct smb2cli_req_expected_response expected[] = {
170 .status = NT_STATUS_OK,
171 .body_size = 0x31
174 .status = STATUS_BUFFER_OVERFLOW,
175 .body_size = 0x31
179 status = smb2cli_req_recv(subreq, state, &iov,
180 expected, ARRAY_SIZE(expected));
181 TALLOC_FREE(subreq);
182 if (tevent_req_nterror(req, status)) {
183 return;
186 state->recv_iov = iov;
187 fixed = (uint8_t *)iov[1].iov_base;
188 dyn = (uint8_t *)iov[2].iov_base;
189 dyn_len = iov[2].iov_len;
191 input_buffer_offset = IVAL(fixed, 0x18);
192 input_buffer_length = IVAL(fixed, 0x1C);
193 output_buffer_offset = IVAL(fixed, 0x20);
194 output_buffer_length = IVAL(fixed, 0x24);
196 if ((input_buffer_offset > 0) && (input_buffer_length > 0)) {
197 uint32_t ofs;
199 if (input_buffer_offset != dyn_ofs) {
200 tevent_req_nterror(
201 req, NT_STATUS_INVALID_NETWORK_RESPONSE);
202 return;
205 if (input_buffer_length < dyn_len) {
206 tevent_req_nterror(
207 req, NT_STATUS_INVALID_NETWORK_RESPONSE);
208 return;
211 if (input_buffer_length > state->max_input_length) {
212 tevent_req_nterror(
213 req, NT_STATUS_INVALID_NETWORK_RESPONSE);
214 return;
217 state->out_input_buffer.data = dyn;
218 state->out_input_buffer.length = input_buffer_length;
220 ofs = input_buffer_length;
221 ofs = NDR_ROUND(ofs, 8);
223 dyn_ofs += ofs;
224 dyn += ofs;
225 dyn_len -= ofs;
228 if ((output_buffer_offset > 0) && (output_buffer_length > 0)) {
229 if (output_buffer_offset != dyn_ofs) {
230 tevent_req_nterror(
231 req, NT_STATUS_INVALID_NETWORK_RESPONSE);
232 return;
235 if (output_buffer_length < dyn_len) {
236 tevent_req_nterror(
237 req, NT_STATUS_INVALID_NETWORK_RESPONSE);
238 return;
241 if (output_buffer_length > state->max_output_length) {
242 tevent_req_nterror(
243 req, NT_STATUS_INVALID_NETWORK_RESPONSE);
244 return;
247 state->out_output_buffer.data = dyn;
248 state->out_output_buffer.length = output_buffer_length;
251 tevent_req_done(req);
254 NTSTATUS smb2cli_ioctl_recv(struct tevent_req *req,
255 TALLOC_CTX *mem_ctx,
256 DATA_BLOB *out_input_buffer,
257 DATA_BLOB *out_output_buffer)
259 struct smb2cli_ioctl_state *state =
260 tevent_req_data(req,
261 struct smb2cli_ioctl_state);
262 NTSTATUS status;
264 if (tevent_req_is_nterror(req, &status)) {
265 tevent_req_received(req);
266 return status;
269 talloc_steal(mem_ctx, state->recv_iov);
270 if (out_input_buffer) {
271 *out_input_buffer = state->out_input_buffer;
273 if (out_output_buffer) {
274 *out_output_buffer = state->out_output_buffer;
277 tevent_req_received(req);
278 return NT_STATUS_OK;
281 NTSTATUS smb2cli_ioctl(struct smbXcli_conn *conn,
282 uint32_t timeout_msec,
283 struct smbXcli_session *session,
284 struct smbXcli_tcon *tcon,
285 uint64_t in_fid_persistent,
286 uint64_t in_fid_volatile,
287 uint32_t in_ctl_code,
288 uint32_t in_max_input_length,
289 const DATA_BLOB *in_input_buffer,
290 uint32_t in_max_output_length,
291 const DATA_BLOB *in_output_buffer,
292 uint32_t in_flags,
293 TALLOC_CTX *mem_ctx,
294 DATA_BLOB *out_input_buffer,
295 DATA_BLOB *out_output_buffer)
297 TALLOC_CTX *frame = talloc_stackframe();
298 struct tevent_context *ev;
299 struct tevent_req *req;
300 NTSTATUS status = NT_STATUS_NO_MEMORY;
302 if (smbXcli_conn_has_async_calls(conn)) {
304 * Can't use sync call while an async call is in flight
306 status = NT_STATUS_INVALID_PARAMETER_MIX;
307 goto fail;
309 ev = samba_tevent_context_init(frame);
310 if (ev == NULL) {
311 goto fail;
313 req = smb2cli_ioctl_send(frame, ev, conn, timeout_msec,
314 session, tcon,
315 in_fid_persistent,
316 in_fid_volatile,
317 in_ctl_code,
318 in_max_input_length,
319 in_input_buffer,
320 in_max_output_length,
321 in_output_buffer,
322 in_flags);
323 if (req == NULL) {
324 goto fail;
326 if (!tevent_req_poll_ntstatus(req, ev, &status)) {
327 goto fail;
329 status = smb2cli_ioctl_recv(req, mem_ctx,
330 out_input_buffer,
331 out_output_buffer);
332 fail:
333 TALLOC_FREE(frame);
334 return status;