2 Unix SMB/CIFS implementation.
4 SMB2 client tree handling
6 Copyright (C) Andrew Tridgell 2005
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 #include "libcli/raw/libcliraw.h"
24 #include "libcli/raw/raw_proto.h"
25 #include "libcli/smb2/smb2.h"
26 #include "libcli/smb2/smb2_calls.h"
27 #include "librpc/gen_ndr/ndr_security.h"
32 struct smb2_request
*smb2_create_send(struct smb2_tree
*tree
, struct smb2_create
*io
)
34 struct smb2_request
*req
;
37 struct smb2_create_blobs blobs
;
42 req
= smb2_request_init_tree(tree
, SMB2_OP_CREATE
, 0x38, true, 0);
43 if (req
== NULL
) return NULL
;
45 SCVAL(req
->out
.body
, 0x02, io
->in
.security_flags
);
46 SCVAL(req
->out
.body
, 0x03, io
->in
.oplock_level
);
47 SIVAL(req
->out
.body
, 0x04, io
->in
.impersonation_level
);
48 SBVAL(req
->out
.body
, 0x08, io
->in
.create_flags
);
49 SBVAL(req
->out
.body
, 0x10, io
->in
.reserved
);
50 SIVAL(req
->out
.body
, 0x18, io
->in
.desired_access
);
51 SIVAL(req
->out
.body
, 0x1C, io
->in
.file_attributes
);
52 SIVAL(req
->out
.body
, 0x20, io
->in
.share_access
);
53 SIVAL(req
->out
.body
, 0x24, io
->in
.create_disposition
);
54 SIVAL(req
->out
.body
, 0x28, io
->in
.create_options
);
56 status
= smb2_push_o16s16_string(&req
->out
, 0x2C, io
->in
.fname
);
57 if (!NT_STATUS_IS_OK(status
)) {
62 /* now add all the optional blobs */
63 if (io
->in
.eas
.num_eas
!= 0) {
64 DATA_BLOB b
= data_blob_talloc(req
, NULL
,
65 ea_list_size_chained(io
->in
.eas
.num_eas
, io
->in
.eas
.eas
, 4));
66 ea_put_list_chained(b
.data
, io
->in
.eas
.num_eas
, io
->in
.eas
.eas
, 4);
67 status
= smb2_create_blob_add(req
, &blobs
,
68 SMB2_CREATE_TAG_EXTA
, b
);
69 if (!NT_STATUS_IS_OK(status
)) {
76 /* an empty MxAc tag seems to be used to ask the server to
77 return the maximum access mask allowed on the file */
78 if (io
->in
.query_maximal_access
) {
79 /* TODO: MS-SMB2 2.2.13.2.5 says this can contain a timestamp? What to do
80 with that if it doesn't match? */
81 status
= smb2_create_blob_add(req
, &blobs
,
82 SMB2_CREATE_TAG_MXAC
, data_blob(NULL
, 0));
83 if (!NT_STATUS_IS_OK(status
)) {
89 if (io
->in
.alloc_size
!= 0) {
91 SBVAL(data
, 0, io
->in
.alloc_size
);
92 status
= smb2_create_blob_add(req
, &blobs
,
93 SMB2_CREATE_TAG_ALSI
, data_blob_const(data
, 8));
94 if (!NT_STATUS_IS_OK(status
)) {
100 if (io
->in
.durable_open
) {
101 status
= smb2_create_blob_add(req
, &blobs
,
102 SMB2_CREATE_TAG_DHNQ
, data_blob_talloc_zero(req
, 16));
103 if (!NT_STATUS_IS_OK(status
)) {
109 if (io
->in
.durable_open_v2
) {
114 SIVAL(data
, 0, io
->in
.timeout
);
115 if (io
->in
.persistent_open
) {
116 flags
= SMB2_DHANDLE_FLAG_PERSISTENT
;
118 SIVAL(data
, 4, flags
);
119 SBVAL(data
, 8, 0x0); /* reserved */
120 status
= GUID_to_ndr_blob(&io
->in
.create_guid
, req
, /* TALLOC_CTX */
122 if (!NT_STATUS_IS_OK(status
)) {
126 memcpy(data
+16, guid_blob
.data
, 16);
128 status
= smb2_create_blob_add(req
, &blobs
,
129 SMB2_CREATE_TAG_DH2Q
,
130 data_blob_const(data
, 32));
131 if (!NT_STATUS_IS_OK(status
)) {
137 if (io
->in
.durable_handle
) {
139 smb2_push_handle(data
, io
->in
.durable_handle
);
140 status
= smb2_create_blob_add(req
, &blobs
,
141 SMB2_CREATE_TAG_DHNC
, data_blob_const(data
, 16));
142 if (!NT_STATUS_IS_OK(status
)) {
148 if (io
->in
.durable_handle_v2
) {
153 smb2_push_handle(data
, io
->in
.durable_handle_v2
);
154 status
= GUID_to_ndr_blob(&io
->in
.create_guid
, req
, /* TALLOC_CTX */
156 if (!NT_STATUS_IS_OK(status
)) {
160 memcpy(data
+16, guid_blob
.data
, 16);
161 if (io
->in
.persistent_open
) {
162 flags
= SMB2_DHANDLE_FLAG_PERSISTENT
;
164 SIVAL(data
, 32, flags
);
166 status
= smb2_create_blob_add(req
, &blobs
,
167 SMB2_CREATE_TAG_DH2C
,
168 data_blob_const(data
, 36));
169 if (!NT_STATUS_IS_OK(status
)) {
175 if (io
->in
.timewarp
) {
177 SBVAL(data
, 0, io
->in
.timewarp
);
178 status
= smb2_create_blob_add(req
, &blobs
,
179 SMB2_CREATE_TAG_TWRP
, data_blob_const(data
, 8));
180 if (!NT_STATUS_IS_OK(status
)) {
186 if (io
->in
.sec_desc
) {
187 enum ndr_err_code ndr_err
;
189 ndr_err
= ndr_push_struct_blob(&sd_blob
, req
, io
->in
.sec_desc
,
190 (ndr_push_flags_fn_t
)ndr_push_security_descriptor
);
191 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
195 status
= smb2_create_blob_add(req
, &blobs
,
196 SMB2_CREATE_TAG_SECD
, sd_blob
);
197 if (!NT_STATUS_IS_OK(status
)) {
203 if (io
->in
.query_on_disk_id
) {
204 status
= smb2_create_blob_add(req
, &blobs
,
205 SMB2_CREATE_TAG_QFID
, data_blob(NULL
, 0));
206 if (!NT_STATUS_IS_OK(status
)) {
212 if (io
->in
.lease_request
) {
215 memcpy(&data
[0], &io
->in
.lease_request
->lease_key
, 16);
216 SIVAL(data
, 16, io
->in
.lease_request
->lease_state
);
217 SIVAL(data
, 20, io
->in
.lease_request
->lease_flags
);
218 SBVAL(data
, 24, io
->in
.lease_request
->lease_duration
);
220 status
= smb2_create_blob_add(req
, &blobs
,
221 SMB2_CREATE_TAG_RQLS
,
222 data_blob_const(data
, 32));
223 if (!NT_STATUS_IS_OK(status
)) {
229 if (io
->in
.app_instance_id
) {
233 SSVAL(data
, 0, 20); /* structure size */
234 SSVAL(data
, 2, 0); /* reserved */
236 status
= GUID_to_ndr_blob(io
->in
.app_instance_id
,
237 req
, /* TALLOC_CTX */
239 if (!NT_STATUS_IS_OK(status
)) {
243 memcpy(data
+4, guid_blob
.data
, 16);
245 status
= smb2_create_blob_add(req
, &blobs
,
246 SMB2_CREATE_TAG_APP_INSTANCE_ID
,
247 data_blob_const(data
, 20));
248 if (!NT_STATUS_IS_OK(status
)) {
254 /* and any custom blobs */
255 for (i
=0;i
<io
->in
.blobs
.num_blobs
;i
++) {
256 status
= smb2_create_blob_add(req
, &blobs
,
257 io
->in
.blobs
.blobs
[i
].tag
,
258 io
->in
.blobs
.blobs
[i
].data
);
259 if (!NT_STATUS_IS_OK(status
)) {
266 status
= smb2_create_blob_push(req
, &blob
, blobs
);
267 if (!NT_STATUS_IS_OK(status
)) {
272 status
= smb2_push_o32s32_blob(&req
->out
, 0x30, blob
);
273 if (!NT_STATUS_IS_OK(status
)) {
278 data_blob_free(&blob
);
280 smb2_transport_send(req
);
289 NTSTATUS
smb2_create_recv(struct smb2_request
*req
, TALLOC_CTX
*mem_ctx
, struct smb2_create
*io
)
295 if (!smb2_request_receive(req
) ||
296 !smb2_request_is_ok(req
)) {
297 return smb2_request_destroy(req
);
300 SMB2_CHECK_PACKET_RECV(req
, 0x58, true);
301 ZERO_STRUCT(io
->out
);
302 io
->out
.oplock_level
= CVAL(req
->in
.body
, 0x02);
303 io
->out
.reserved
= CVAL(req
->in
.body
, 0x03);
304 io
->out
.create_action
= IVAL(req
->in
.body
, 0x04);
305 io
->out
.create_time
= smbcli_pull_nttime(req
->in
.body
, 0x08);
306 io
->out
.access_time
= smbcli_pull_nttime(req
->in
.body
, 0x10);
307 io
->out
.write_time
= smbcli_pull_nttime(req
->in
.body
, 0x18);
308 io
->out
.change_time
= smbcli_pull_nttime(req
->in
.body
, 0x20);
309 io
->out
.alloc_size
= BVAL(req
->in
.body
, 0x28);
310 io
->out
.size
= BVAL(req
->in
.body
, 0x30);
311 io
->out
.file_attr
= IVAL(req
->in
.body
, 0x38);
312 io
->out
.reserved2
= IVAL(req
->in
.body
, 0x3C);
313 smb2_pull_handle(req
->in
.body
+0x40, &io
->out
.file
.handle
);
314 status
= smb2_pull_o32s32_blob(&req
->in
, mem_ctx
, req
->in
.body
+0x50, &blob
);
315 if (!NT_STATUS_IS_OK(status
)) {
316 smb2_request_destroy(req
);
320 status
= smb2_create_blob_parse(mem_ctx
, blob
, &io
->out
.blobs
);
321 if (!NT_STATUS_IS_OK(status
)) {
322 smb2_request_destroy(req
);
326 /* pull out the parsed blobs */
327 for (i
=0;i
<io
->out
.blobs
.num_blobs
;i
++) {
328 if (strcmp(io
->out
.blobs
.blobs
[i
].tag
, SMB2_CREATE_TAG_MXAC
) == 0) {
329 /* TODO: this also contains a status field in
331 if (io
->out
.blobs
.blobs
[i
].data
.length
!= 8) {
332 smb2_request_destroy(req
);
333 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
335 io
->out
.maximal_access
= IVAL(io
->out
.blobs
.blobs
[i
].data
.data
, 4);
337 if (strcmp(io
->out
.blobs
.blobs
[i
].tag
, SMB2_CREATE_TAG_QFID
) == 0) {
338 if (io
->out
.blobs
.blobs
[i
].data
.length
!= 32) {
339 smb2_request_destroy(req
);
340 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
342 memcpy(io
->out
.on_disk_id
, io
->out
.blobs
.blobs
[i
].data
.data
, 32);
344 if (strcmp(io
->out
.blobs
.blobs
[i
].tag
, SMB2_CREATE_TAG_RQLS
) == 0) {
346 if (io
->out
.blobs
.blobs
[i
].data
.length
!= 32) {
347 smb2_request_destroy(req
);
348 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
351 data
= io
->out
.blobs
.blobs
[i
].data
.data
;
352 memcpy(&io
->out
.lease_response
.lease_key
, data
, 16);
353 io
->out
.lease_response
.lease_state
= IVAL(data
, 16);
354 io
->out
.lease_response
.lease_flags
= IVAL(data
, 20);
355 io
->out
.lease_response
.lease_duration
= BVAL(data
, 24);
357 if (strcmp(io
->out
.blobs
.blobs
[i
].tag
, SMB2_CREATE_TAG_DHNQ
) == 0) {
358 if (io
->out
.blobs
.blobs
[i
].data
.length
!= 8) {
359 smb2_request_destroy(req
);
360 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
362 io
->out
.durable_open
= true;
364 if (strcmp(io
->out
.blobs
.blobs
[i
].tag
, SMB2_CREATE_TAG_DH2Q
) == 0) {
368 if (io
->out
.blobs
.blobs
[i
].data
.length
!= 8) {
369 smb2_request_destroy(req
);
370 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
373 io
->out
.durable_open
= false;
374 io
->out
.durable_open_v2
= true;
376 data
= io
->out
.blobs
.blobs
[i
].data
.data
;
377 io
->out
.timeout
= IVAL(data
, 0);
378 flags
= IVAL(data
, 4);
379 if ((flags
& SMB2_DHANDLE_FLAG_PERSISTENT
) != 0) {
380 io
->out
.persistent_open
= true;
385 data_blob_free(&blob
);
387 return smb2_request_destroy(req
);
393 NTSTATUS
smb2_create(struct smb2_tree
*tree
, TALLOC_CTX
*mem_ctx
, struct smb2_create
*io
)
395 struct smb2_request
*req
= smb2_create_send(tree
, io
);
396 return smb2_create_recv(req
, mem_ctx
, io
);