2 Unix SMB/CIFS implementation.
3 client transaction calls
4 Copyright (C) Andrew Tridgell 1994-1998
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 2 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program; if not, write to the Free Software
18 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
26 /****************************************************************************
27 Send a SMB trans or trans2 request.
28 ****************************************************************************/
30 BOOL
cli_send_trans(struct cli_state
*cli
, int trans
,
31 const char *pipe_name
,
33 uint16
*setup
, unsigned int lsetup
, unsigned int msetup
,
34 const char *param
, unsigned int lparam
, unsigned int mparam
,
35 const char *data
, unsigned int ldata
, unsigned int mdata
)
38 unsigned int this_ldata
,this_lparam
;
39 unsigned int tot_data
=0,tot_param
=0;
40 char *outdata
,*outparam
;
45 this_lparam
= MIN(lparam
,cli
->max_xmit
- (500+lsetup
*2)); /* hack */
46 this_ldata
= MIN(ldata
,cli
->max_xmit
- (500+lsetup
*2+this_lparam
));
48 memset(cli
->outbuf
,'\0',smb_size
);
49 set_message(cli
->outbuf
,14+lsetup
,0,True
);
50 SCVAL(cli
->outbuf
,smb_com
,trans
);
51 SSVAL(cli
->outbuf
,smb_tid
, cli
->cnum
);
52 cli_setup_packet(cli
);
56 pipe_name_len
= clistr_push(cli
, smb_buf(cli
->outbuf
), pipe_name
, -1, STR_TERMINATE
);
59 outparam
= smb_buf(cli
->outbuf
)+(trans
==SMBtrans
? pipe_name_len
: 3);
60 outdata
= outparam
+this_lparam
;
63 SSVAL(cli
->outbuf
,smb_tpscnt
,lparam
); /* tpscnt */
64 SSVAL(cli
->outbuf
,smb_tdscnt
,ldata
); /* tdscnt */
65 SSVAL(cli
->outbuf
,smb_mprcnt
,mparam
); /* mprcnt */
66 SSVAL(cli
->outbuf
,smb_mdrcnt
,mdata
); /* mdrcnt */
67 SCVAL(cli
->outbuf
,smb_msrcnt
,msetup
); /* msrcnt */
68 SSVAL(cli
->outbuf
,smb_flags
,flags
); /* flags */
69 SIVAL(cli
->outbuf
,smb_timeout
,0); /* timeout */
70 SSVAL(cli
->outbuf
,smb_pscnt
,this_lparam
); /* pscnt */
71 SSVAL(cli
->outbuf
,smb_psoff
,smb_offset(outparam
,cli
->outbuf
)); /* psoff */
72 SSVAL(cli
->outbuf
,smb_dscnt
,this_ldata
); /* dscnt */
73 SSVAL(cli
->outbuf
,smb_dsoff
,smb_offset(outdata
,cli
->outbuf
)); /* dsoff */
74 SCVAL(cli
->outbuf
,smb_suwcnt
,lsetup
); /* suwcnt */
75 for (i
=0;i
<lsetup
;i
++) /* setup[] */
76 SSVAL(cli
->outbuf
,smb_setup
+i
*2,setup
[i
]);
77 p
= smb_buf(cli
->outbuf
);
78 if (trans
!= SMBtrans
) {
79 *p
++ = 0; /* put in a null smb_name */
80 *p
++ = 'D'; *p
++ = ' '; /* observed in OS/2 */
82 if (this_lparam
) /* param[] */
83 memcpy(outparam
,param
,this_lparam
);
84 if (this_ldata
) /* data[] */
85 memcpy(outdata
,data
,this_ldata
);
86 cli_setup_bcc(cli
, outdata
+this_ldata
);
88 show_msg(cli
->outbuf
);
90 cli_signing_trans_start(cli
);
91 if (!cli_send_smb(cli
)) {
92 cli_signing_trans_stop(cli
);
96 if (this_ldata
< ldata
|| this_lparam
< lparam
) {
97 /* receive interim response */
98 if (!cli_receive_smb(cli
) || cli_is_error(cli
)) {
99 cli_signing_trans_stop(cli
);
103 tot_data
= this_ldata
;
104 tot_param
= this_lparam
;
106 while (tot_data
< ldata
|| tot_param
< lparam
) {
107 this_lparam
= MIN(lparam
-tot_param
,cli
->max_xmit
- 500); /* hack */
108 this_ldata
= MIN(ldata
-tot_data
,cli
->max_xmit
- (500+this_lparam
));
110 set_message(cli
->outbuf
,trans
==SMBtrans
?8:9,0,True
);
111 SCVAL(cli
->outbuf
,smb_com
,(trans
==SMBtrans
? SMBtranss
: SMBtranss2
));
113 outparam
= smb_buf(cli
->outbuf
);
114 outdata
= outparam
+this_lparam
;
116 /* secondary request */
117 SSVAL(cli
->outbuf
,smb_tpscnt
,lparam
); /* tpscnt */
118 SSVAL(cli
->outbuf
,smb_tdscnt
,ldata
); /* tdscnt */
119 SSVAL(cli
->outbuf
,smb_spscnt
,this_lparam
); /* pscnt */
120 SSVAL(cli
->outbuf
,smb_spsoff
,smb_offset(outparam
,cli
->outbuf
)); /* psoff */
121 SSVAL(cli
->outbuf
,smb_spsdisp
,tot_param
); /* psdisp */
122 SSVAL(cli
->outbuf
,smb_sdscnt
,this_ldata
); /* dscnt */
123 SSVAL(cli
->outbuf
,smb_sdsoff
,smb_offset(outdata
,cli
->outbuf
)); /* dsoff */
124 SSVAL(cli
->outbuf
,smb_sdsdisp
,tot_data
); /* dsdisp */
125 if (trans
==SMBtrans2
)
126 SSVALS(cli
->outbuf
,smb_sfid
,fid
); /* fid */
127 if (this_lparam
) /* param[] */
128 memcpy(outparam
,param
+tot_param
,this_lparam
);
129 if (this_ldata
) /* data[] */
130 memcpy(outdata
,data
+tot_data
,this_ldata
);
131 cli_setup_bcc(cli
, outdata
+this_ldata
);
133 /* Ensure this packet has the same MID as
134 * the primary. Important in signing. JRA. */
137 show_msg(cli
->outbuf
);
138 if (!cli_send_smb(cli
)) {
139 cli_signing_trans_stop(cli
);
143 tot_data
+= this_ldata
;
144 tot_param
+= this_lparam
;
151 /****************************************************************************
152 Receive a SMB trans or trans2 response allocating the necessary memory.
153 ****************************************************************************/
155 BOOL
cli_receive_trans(struct cli_state
*cli
,int trans
,
156 char **param
, unsigned int *param_len
,
157 char **data
, unsigned int *data_len
)
159 unsigned int total_data
=0;
160 unsigned int total_param
=0;
161 unsigned int this_data
,this_param
;
166 *data_len
= *param_len
= 0;
168 if (!cli_receive_smb(cli
)) {
169 cli_signing_trans_stop(cli
);
173 show_msg(cli
->inbuf
);
176 if (CVAL(cli
->inbuf
,smb_com
) != trans
) {
177 DEBUG(0,("Expected %s response, got command 0x%02x\n",
178 trans
==SMBtrans
?"SMBtrans":"SMBtrans2",
179 CVAL(cli
->inbuf
,smb_com
)));
180 cli_signing_trans_stop(cli
);
185 * An NT RPC pipe call can return ERRDOS, ERRmoredata
186 * to a trans call. This is not an error and should not
187 * be treated as such.
189 status
= cli_nt_error(cli
);
191 if (NT_STATUS_IS_ERR(status
)) {
192 cli_signing_trans_stop(cli
);
196 /* parse out the lengths */
197 total_data
= SVAL(cli
->inbuf
,smb_tdrcnt
);
198 total_param
= SVAL(cli
->inbuf
,smb_tprcnt
);
202 tdata
= Realloc(*data
,total_data
);
204 DEBUG(0,("cli_receive_trans: failed to enlarge data buffer\n"));
205 cli_signing_trans_stop(cli
);
212 if (total_param
!=0) {
213 tparam
= Realloc(*param
,total_param
);
215 DEBUG(0,("cli_receive_trans: failed to enlarge param buffer\n"));
216 cli_signing_trans_stop(cli
);
224 this_data
= SVAL(cli
->inbuf
,smb_drcnt
);
225 this_param
= SVAL(cli
->inbuf
,smb_prcnt
);
227 if (this_data
+ *data_len
> total_data
||
228 this_param
+ *param_len
> total_param
) {
229 DEBUG(1,("Data overflow in cli_receive_trans\n"));
230 cli_signing_trans_stop(cli
);
234 if (this_data
+ *data_len
< this_data
||
235 this_data
+ *data_len
< *data_len
||
236 this_param
+ *param_len
< this_param
||
237 this_param
+ *param_len
< *param_len
) {
238 DEBUG(1,("Data overflow in cli_receive_trans\n"));
239 cli_signing_trans_stop(cli
);
244 unsigned int data_offset_out
= SVAL(cli
->inbuf
,smb_drdisp
);
245 unsigned int data_offset_in
= SVAL(cli
->inbuf
,smb_droff
);
247 if (data_offset_out
> total_data
||
248 data_offset_out
+ this_data
> total_data
||
249 data_offset_out
+ this_data
< data_offset_out
||
250 data_offset_out
+ this_data
< this_data
) {
251 DEBUG(1,("Data overflow in cli_receive_trans\n"));
252 cli_signing_trans_stop(cli
);
255 if (data_offset_in
> cli
->bufsize
||
256 data_offset_in
+ this_data
> cli
->bufsize
||
257 data_offset_in
+ this_data
< data_offset_in
||
258 data_offset_in
+ this_data
< this_data
) {
259 DEBUG(1,("Data overflow in cli_receive_trans\n"));
260 cli_signing_trans_stop(cli
);
264 memcpy(*data
+ data_offset_out
, smb_base(cli
->inbuf
) + data_offset_in
, this_data
);
267 unsigned int param_offset_out
= SVAL(cli
->inbuf
,smb_prdisp
);
268 unsigned int param_offset_in
= SVAL(cli
->inbuf
,smb_proff
);
270 if (param_offset_out
> total_param
||
271 param_offset_out
+ this_param
> total_param
||
272 param_offset_out
+ this_param
< param_offset_out
||
273 param_offset_out
+ this_param
< this_param
) {
274 DEBUG(1,("Param overflow in cli_receive_trans\n"));
275 cli_signing_trans_stop(cli
);
278 if (param_offset_in
> cli
->bufsize
||
279 param_offset_in
+ this_param
> cli
->bufsize
||
280 param_offset_in
+ this_param
< param_offset_in
||
281 param_offset_in
+ this_param
< this_param
) {
282 DEBUG(1,("Param overflow in cli_receive_trans\n"));
283 cli_signing_trans_stop(cli
);
287 memcpy(*param
+ param_offset_out
, smb_base(cli
->inbuf
) + param_offset_in
, this_param
);
289 *data_len
+= this_data
;
290 *param_len
+= this_param
;
292 if (total_data
<= *data_len
&& total_param
<= *param_len
)
295 if (!cli_receive_smb(cli
)) {
296 cli_signing_trans_stop(cli
);
300 show_msg(cli
->inbuf
);
303 if (CVAL(cli
->inbuf
,smb_com
) != trans
) {
304 DEBUG(0,("Expected %s response, got command 0x%02x\n",
305 trans
==SMBtrans
?"SMBtrans":"SMBtrans2",
306 CVAL(cli
->inbuf
,smb_com
)));
307 cli_signing_trans_stop(cli
);
310 if (NT_STATUS_IS_ERR(cli_nt_error(cli
))) {
311 cli_signing_trans_stop(cli
);
315 /* parse out the total lengths again - they can shrink! */
316 if (SVAL(cli
->inbuf
,smb_tdrcnt
) < total_data
)
317 total_data
= SVAL(cli
->inbuf
,smb_tdrcnt
);
318 if (SVAL(cli
->inbuf
,smb_tprcnt
) < total_param
)
319 total_param
= SVAL(cli
->inbuf
,smb_tprcnt
);
321 if (total_data
<= *data_len
&& total_param
<= *param_len
)
326 cli_signing_trans_stop(cli
);
330 /****************************************************************************
331 Send a SMB nttrans request.
332 ****************************************************************************/
334 BOOL
cli_send_nt_trans(struct cli_state
*cli
,
337 uint16
*setup
, unsigned int lsetup
, unsigned int msetup
,
338 char *param
, unsigned int lparam
, unsigned int mparam
,
339 char *data
, unsigned int ldata
, unsigned int mdata
)
342 unsigned int this_ldata
,this_lparam
;
343 unsigned int tot_data
=0,tot_param
=0;
345 char *outdata
,*outparam
;
347 this_lparam
= MIN(lparam
,cli
->max_xmit
- (500+lsetup
*2)); /* hack */
348 this_ldata
= MIN(ldata
,cli
->max_xmit
- (500+lsetup
*2+this_lparam
));
350 memset(cli
->outbuf
,'\0',smb_size
);
351 set_message(cli
->outbuf
,19+lsetup
,0,True
);
352 SCVAL(cli
->outbuf
,smb_com
,SMBnttrans
);
353 SSVAL(cli
->outbuf
,smb_tid
, cli
->cnum
);
354 cli_setup_packet(cli
);
357 outparam
= smb_buf(cli
->outbuf
)+3;
358 outdata
= outparam
+this_lparam
;
360 /* primary request */
361 SCVAL(cli
->outbuf
,smb_nt_MaxSetupCount
,msetup
);
362 SCVAL(cli
->outbuf
,smb_nt_Flags
,flags
);
363 SIVAL(cli
->outbuf
,smb_nt_TotalParameterCount
, lparam
);
364 SIVAL(cli
->outbuf
,smb_nt_TotalDataCount
, ldata
);
365 SIVAL(cli
->outbuf
,smb_nt_MaxParameterCount
, mparam
);
366 SIVAL(cli
->outbuf
,smb_nt_MaxDataCount
, mdata
);
367 SIVAL(cli
->outbuf
,smb_nt_ParameterCount
, this_lparam
);
368 SIVAL(cli
->outbuf
,smb_nt_ParameterOffset
, smb_offset(outparam
,cli
->outbuf
));
369 SIVAL(cli
->outbuf
,smb_nt_DataCount
, this_ldata
);
370 SIVAL(cli
->outbuf
,smb_nt_DataOffset
, smb_offset(outdata
,cli
->outbuf
));
371 SIVAL(cli
->outbuf
,smb_nt_SetupCount
, lsetup
);
372 SIVAL(cli
->outbuf
,smb_nt_Function
, function
);
373 for (i
=0;i
<lsetup
;i
++) /* setup[] */
374 SSVAL(cli
->outbuf
,smb_nt_SetupStart
+i
*2,setup
[i
]);
376 if (this_lparam
) /* param[] */
377 memcpy(outparam
,param
,this_lparam
);
378 if (this_ldata
) /* data[] */
379 memcpy(outdata
,data
,this_ldata
);
381 cli_setup_bcc(cli
, outdata
+this_ldata
);
383 show_msg(cli
->outbuf
);
384 cli_signing_trans_start(cli
);
385 if (!cli_send_smb(cli
)) {
386 cli_signing_trans_stop(cli
);
390 if (this_ldata
< ldata
|| this_lparam
< lparam
) {
391 /* receive interim response */
392 if (!cli_receive_smb(cli
) || cli_is_error(cli
)) {
393 cli_signing_trans_stop(cli
);
397 tot_data
= this_ldata
;
398 tot_param
= this_lparam
;
400 while (tot_data
< ldata
|| tot_param
< lparam
) {
401 this_lparam
= MIN(lparam
-tot_param
,cli
->max_xmit
- 500); /* hack */
402 this_ldata
= MIN(ldata
-tot_data
,cli
->max_xmit
- (500+this_lparam
));
404 set_message(cli
->outbuf
,18,0,True
);
405 SCVAL(cli
->outbuf
,smb_com
,SMBnttranss
);
407 /* XXX - these should probably be aligned */
408 outparam
= smb_buf(cli
->outbuf
);
409 outdata
= outparam
+this_lparam
;
411 /* secondary request */
412 SIVAL(cli
->outbuf
,smb_nts_TotalParameterCount
,lparam
);
413 SIVAL(cli
->outbuf
,smb_nts_TotalDataCount
,ldata
);
414 SIVAL(cli
->outbuf
,smb_nts_ParameterCount
,this_lparam
);
415 SIVAL(cli
->outbuf
,smb_nts_ParameterOffset
,smb_offset(outparam
,cli
->outbuf
));
416 SIVAL(cli
->outbuf
,smb_nts_ParameterDisplacement
,tot_param
);
417 SIVAL(cli
->outbuf
,smb_nts_DataCount
,this_ldata
);
418 SIVAL(cli
->outbuf
,smb_nts_DataOffset
,smb_offset(outdata
,cli
->outbuf
));
419 SIVAL(cli
->outbuf
,smb_nts_DataDisplacement
,tot_data
);
420 if (this_lparam
) /* param[] */
421 memcpy(outparam
,param
+tot_param
,this_lparam
);
422 if (this_ldata
) /* data[] */
423 memcpy(outdata
,data
+tot_data
,this_ldata
);
424 cli_setup_bcc(cli
, outdata
+this_ldata
);
426 /* Ensure this packet has the same MID as
427 * the primary. Important in signing. JRA. */
430 show_msg(cli
->outbuf
);
432 if (!cli_send_smb(cli
)) {
433 cli_signing_trans_stop(cli
);
437 tot_data
+= this_ldata
;
438 tot_param
+= this_lparam
;
445 /****************************************************************************
446 receive a SMB nttrans response allocating the necessary memory
447 ****************************************************************************/
449 BOOL
cli_receive_nt_trans(struct cli_state
*cli
,
450 char **param
, unsigned int *param_len
,
451 char **data
, unsigned int *data_len
)
453 unsigned int total_data
=0;
454 unsigned int total_param
=0;
455 unsigned int this_data
,this_param
;
461 *data_len
= *param_len
= 0;
463 if (!cli_receive_smb(cli
)) {
464 cli_signing_trans_stop(cli
);
468 show_msg(cli
->inbuf
);
471 if (CVAL(cli
->inbuf
,smb_com
) != SMBnttrans
) {
472 DEBUG(0,("Expected SMBnttrans response, got command 0x%02x\n",
473 CVAL(cli
->inbuf
,smb_com
)));
474 cli_signing_trans_stop(cli
);
479 * An NT RPC pipe call can return ERRDOS, ERRmoredata
480 * to a trans call. This is not an error and should not
481 * be treated as such.
483 if (cli_is_dos_error(cli
)) {
484 cli_dos_error(cli
, &eclass
, &ecode
);
485 if (cli
->nt_pipe_fnum
== 0 || !(eclass
== ERRDOS
&& ecode
== ERRmoredata
)) {
486 cli_signing_trans_stop(cli
);
492 * Likewise for NT_STATUS_BUFFER_TOO_SMALL
494 if (cli_is_nt_error(cli
)) {
495 if (!NT_STATUS_EQUAL(cli_nt_error(cli
),
496 NT_STATUS_BUFFER_TOO_SMALL
)) {
497 cli_signing_trans_stop(cli
);
502 /* parse out the lengths */
503 total_data
= SVAL(cli
->inbuf
,smb_ntr_TotalDataCount
);
504 total_param
= SVAL(cli
->inbuf
,smb_ntr_TotalParameterCount
);
508 tdata
= Realloc(*data
,total_data
);
510 DEBUG(0,("cli_receive_nt_trans: failed to enlarge data buffer to %d\n",total_data
));
511 cli_signing_trans_stop(cli
);
519 tparam
= Realloc(*param
,total_param
);
521 DEBUG(0,("cli_receive_nt_trans: failed to enlarge param buffer to %d\n", total_param
));
522 cli_signing_trans_stop(cli
);
530 this_data
= SVAL(cli
->inbuf
,smb_ntr_DataCount
);
531 this_param
= SVAL(cli
->inbuf
,smb_ntr_ParameterCount
);
533 if (this_data
+ *data_len
> total_data
||
534 this_param
+ *param_len
> total_param
) {
535 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
536 cli_signing_trans_stop(cli
);
540 if (this_data
+ *data_len
< this_data
||
541 this_data
+ *data_len
< *data_len
||
542 this_param
+ *param_len
< this_param
||
543 this_param
+ *param_len
< *param_len
) {
544 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
545 cli_signing_trans_stop(cli
);
550 unsigned int data_offset_out
= SVAL(cli
->inbuf
,smb_ntr_DataDisplacement
);
551 unsigned int data_offset_in
= SVAL(cli
->inbuf
,smb_ntr_DataOffset
);
553 if (data_offset_out
> total_data
||
554 data_offset_out
+ this_data
> total_data
||
555 data_offset_out
+ this_data
< data_offset_out
||
556 data_offset_out
+ this_data
< this_data
) {
557 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
558 cli_signing_trans_stop(cli
);
561 if (data_offset_in
> cli
->bufsize
||
562 data_offset_in
+ this_data
> cli
->bufsize
||
563 data_offset_in
+ this_data
< data_offset_in
||
564 data_offset_in
+ this_data
< this_data
) {
565 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
566 cli_signing_trans_stop(cli
);
570 memcpy(*data
+ data_offset_out
, smb_base(cli
->inbuf
) + data_offset_in
, this_data
);
574 unsigned int param_offset_out
= SVAL(cli
->inbuf
,smb_ntr_ParameterDisplacement
);
575 unsigned int param_offset_in
= SVAL(cli
->inbuf
,smb_ntr_ParameterOffset
);
577 if (param_offset_out
> total_param
||
578 param_offset_out
+ this_param
> total_param
||
579 param_offset_out
+ this_param
< param_offset_out
||
580 param_offset_out
+ this_param
< this_param
) {
581 DEBUG(1,("Param overflow in cli_receive_nt_trans\n"));
582 cli_signing_trans_stop(cli
);
585 if (param_offset_in
> cli
->bufsize
||
586 param_offset_in
+ this_param
> cli
->bufsize
||
587 param_offset_in
+ this_param
< param_offset_in
||
588 param_offset_in
+ this_param
< this_param
) {
589 DEBUG(1,("Param overflow in cli_receive_nt_trans\n"));
590 cli_signing_trans_stop(cli
);
594 memcpy(*param
+ param_offset_out
, smb_base(cli
->inbuf
) + param_offset_in
, this_param
);
597 *data_len
+= this_data
;
598 *param_len
+= this_param
;
600 if (total_data
<= *data_len
&& total_param
<= *param_len
)
603 if (!cli_receive_smb(cli
)) {
604 cli_signing_trans_stop(cli
);
608 show_msg(cli
->inbuf
);
611 if (CVAL(cli
->inbuf
,smb_com
) != SMBnttrans
) {
612 DEBUG(0,("Expected SMBnttrans response, got command 0x%02x\n",
613 CVAL(cli
->inbuf
,smb_com
)));
614 cli_signing_trans_stop(cli
);
617 if (cli_is_dos_error(cli
)) {
618 cli_dos_error(cli
, &eclass
, &ecode
);
619 if(cli
->nt_pipe_fnum
== 0 || !(eclass
== ERRDOS
&& ecode
== ERRmoredata
)) {
620 cli_signing_trans_stop(cli
);
624 /* parse out the total lengths again - they can shrink! */
625 if (SVAL(cli
->inbuf
,smb_ntr_TotalDataCount
) < total_data
)
626 total_data
= SVAL(cli
->inbuf
,smb_ntr_TotalDataCount
);
627 if (SVAL(cli
->inbuf
,smb_ntr_TotalParameterCount
) < total_param
)
628 total_param
= SVAL(cli
->inbuf
,smb_ntr_TotalParameterCount
);
630 if (total_data
<= *data_len
&& total_param
<= *param_len
)
634 cli_signing_trans_stop(cli
);