2 Unix SMB/CIFS implementation.
4 SMB2 client tree handling
6 Copyright (C) Andrew Tridgell 2005
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 #include "libcli/raw/libcliraw.h"
24 #include "libcli/raw/raw_proto.h"
25 #include "libcli/smb2/smb2.h"
26 #include "libcli/smb2/smb2_calls.h"
27 #include "librpc/gen_ndr/ndr_security.h"
32 struct smb2_request
*smb2_create_send(struct smb2_tree
*tree
, struct smb2_create
*io
)
34 struct smb2_request
*req
;
37 struct smb2_create_blobs blobs
;
42 req
= smb2_request_init_tree(tree
, SMB2_OP_CREATE
, 0x38, true, 0);
43 if (req
== NULL
) return NULL
;
45 SCVAL(req
->out
.body
, 0x02, io
->in
.security_flags
);
46 SCVAL(req
->out
.body
, 0x03, io
->in
.oplock_level
);
47 SIVAL(req
->out
.body
, 0x04, io
->in
.impersonation_level
);
48 SBVAL(req
->out
.body
, 0x08, io
->in
.create_flags
);
49 SBVAL(req
->out
.body
, 0x10, io
->in
.reserved
);
50 SIVAL(req
->out
.body
, 0x18, io
->in
.desired_access
);
51 SIVAL(req
->out
.body
, 0x1C, io
->in
.file_attributes
);
52 SIVAL(req
->out
.body
, 0x20, io
->in
.share_access
);
53 SIVAL(req
->out
.body
, 0x24, io
->in
.create_disposition
);
54 SIVAL(req
->out
.body
, 0x28, io
->in
.create_options
);
56 status
= smb2_push_o16s16_string(&req
->out
, 0x2C, io
->in
.fname
);
57 if (!NT_STATUS_IS_OK(status
)) {
62 /* now add all the optional blobs */
63 if (io
->in
.eas
.num_eas
!= 0) {
64 DATA_BLOB b
= data_blob_talloc(req
, NULL
,
65 ea_list_size_chained(io
->in
.eas
.num_eas
, io
->in
.eas
.eas
, 4));
66 ea_put_list_chained(b
.data
, io
->in
.eas
.num_eas
, io
->in
.eas
.eas
, 4);
67 status
= smb2_create_blob_add(req
, &blobs
,
68 SMB2_CREATE_TAG_EXTA
, b
);
69 if (!NT_STATUS_IS_OK(status
)) {
76 /* an empty MxAc tag seems to be used to ask the server to
77 return the maximum access mask allowed on the file */
78 if (io
->in
.query_maximal_access
) {
79 /* TODO: MS-SMB2 2.2.13.2.5 says this can contain a timestamp? What to do
80 with that if it doesn't match? */
81 status
= smb2_create_blob_add(req
, &blobs
,
82 SMB2_CREATE_TAG_MXAC
, data_blob(NULL
, 0));
83 if (!NT_STATUS_IS_OK(status
)) {
89 if (io
->in
.alloc_size
!= 0) {
91 SBVAL(data
, 0, io
->in
.alloc_size
);
92 status
= smb2_create_blob_add(req
, &blobs
,
93 SMB2_CREATE_TAG_ALSI
, data_blob_const(data
, 8));
94 if (!NT_STATUS_IS_OK(status
)) {
100 if (io
->in
.durable_open
) {
101 status
= smb2_create_blob_add(req
, &blobs
,
102 SMB2_CREATE_TAG_DHNQ
, data_blob_talloc_zero(req
, 16));
103 if (!NT_STATUS_IS_OK(status
)) {
109 if (io
->in
.durable_open_v2
) {
114 SIVAL(data
, 0, io
->in
.timeout
);
115 if (io
->in
.persistent_open
) {
116 flags
= SMB2_DHANDLE_FLAG_PERSISTENT
;
118 SIVAL(data
, 4, flags
);
119 SBVAL(data
, 8, 0x0); /* reserved */
120 status
= GUID_to_ndr_blob(&io
->in
.create_guid
, req
, /* TALLOC_CTX */
122 if (!NT_STATUS_IS_OK(status
)) {
126 memcpy(data
+16, guid_blob
.data
, 16);
128 status
= smb2_create_blob_add(req
, &blobs
,
129 SMB2_CREATE_TAG_DH2Q
,
130 data_blob_const(data
, 32));
131 if (!NT_STATUS_IS_OK(status
)) {
137 if (io
->in
.durable_handle
) {
139 smb2_push_handle(data
, io
->in
.durable_handle
);
140 status
= smb2_create_blob_add(req
, &blobs
,
141 SMB2_CREATE_TAG_DHNC
, data_blob_const(data
, 16));
142 if (!NT_STATUS_IS_OK(status
)) {
148 if (io
->in
.durable_handle_v2
) {
153 smb2_push_handle(data
, io
->in
.durable_handle_v2
);
154 status
= GUID_to_ndr_blob(&io
->in
.create_guid
, req
, /* TALLOC_CTX */
156 if (!NT_STATUS_IS_OK(status
)) {
160 memcpy(data
+16, guid_blob
.data
, 16);
161 if (io
->in
.persistent_open
) {
162 flags
= SMB2_DHANDLE_FLAG_PERSISTENT
;
164 SIVAL(data
, 32, flags
);
166 status
= smb2_create_blob_add(req
, &blobs
,
167 SMB2_CREATE_TAG_DH2C
,
168 data_blob_const(data
, 36));
169 if (!NT_STATUS_IS_OK(status
)) {
175 if (io
->in
.timewarp
) {
177 SBVAL(data
, 0, io
->in
.timewarp
);
178 status
= smb2_create_blob_add(req
, &blobs
,
179 SMB2_CREATE_TAG_TWRP
, data_blob_const(data
, 8));
180 if (!NT_STATUS_IS_OK(status
)) {
186 if (io
->in
.sec_desc
) {
187 enum ndr_err_code ndr_err
;
189 ndr_err
= ndr_push_struct_blob(&sd_blob
, req
, io
->in
.sec_desc
,
190 (ndr_push_flags_fn_t
)ndr_push_security_descriptor
);
191 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
195 status
= smb2_create_blob_add(req
, &blobs
,
196 SMB2_CREATE_TAG_SECD
, sd_blob
);
197 if (!NT_STATUS_IS_OK(status
)) {
203 if (io
->in
.query_on_disk_id
) {
204 status
= smb2_create_blob_add(req
, &blobs
,
205 SMB2_CREATE_TAG_QFID
, data_blob(NULL
, 0));
206 if (!NT_STATUS_IS_OK(status
)) {
212 if (io
->in
.lease_request
) {
215 if (!smb2_lease_push(io
->in
.lease_request
, data
,
221 status
= smb2_create_blob_add(
222 req
, &blobs
, SMB2_CREATE_TAG_RQLS
,
223 data_blob_const(data
, sizeof(data
)));
224 if (!NT_STATUS_IS_OK(status
)) {
230 if (io
->in
.lease_request_v2
) {
233 if (!smb2_lease_push(io
->in
.lease_request_v2
, data
,
239 status
= smb2_create_blob_add(
240 req
, &blobs
, SMB2_CREATE_TAG_RQLS
,
241 data_blob_const(data
, sizeof(data
)));
242 if (!NT_STATUS_IS_OK(status
)) {
248 if (io
->in
.app_instance_id
) {
252 SSVAL(data
, 0, 20); /* structure size */
253 SSVAL(data
, 2, 0); /* reserved */
255 status
= GUID_to_ndr_blob(io
->in
.app_instance_id
,
256 req
, /* TALLOC_CTX */
258 if (!NT_STATUS_IS_OK(status
)) {
262 memcpy(data
+4, guid_blob
.data
, 16);
264 status
= smb2_create_blob_add(req
, &blobs
,
265 SMB2_CREATE_TAG_APP_INSTANCE_ID
,
266 data_blob_const(data
, 20));
267 if (!NT_STATUS_IS_OK(status
)) {
273 /* and any custom blobs */
274 for (i
=0;i
<io
->in
.blobs
.num_blobs
;i
++) {
275 status
= smb2_create_blob_add(req
, &blobs
,
276 io
->in
.blobs
.blobs
[i
].tag
,
277 io
->in
.blobs
.blobs
[i
].data
);
278 if (!NT_STATUS_IS_OK(status
)) {
285 status
= smb2_create_blob_push(req
, &blob
, blobs
);
286 if (!NT_STATUS_IS_OK(status
)) {
291 status
= smb2_push_o32s32_blob(&req
->out
, 0x30, blob
);
292 if (!NT_STATUS_IS_OK(status
)) {
297 data_blob_free(&blob
);
299 smb2_transport_send(req
);
308 NTSTATUS
smb2_create_recv(struct smb2_request
*req
, TALLOC_CTX
*mem_ctx
, struct smb2_create
*io
)
314 if (!smb2_request_receive(req
) ||
315 !smb2_request_is_ok(req
)) {
316 return smb2_request_destroy(req
);
319 SMB2_CHECK_PACKET_RECV(req
, 0x58, true);
320 ZERO_STRUCT(io
->out
);
321 io
->out
.oplock_level
= CVAL(req
->in
.body
, 0x02);
322 io
->out
.reserved
= CVAL(req
->in
.body
, 0x03);
323 io
->out
.create_action
= IVAL(req
->in
.body
, 0x04);
324 io
->out
.create_time
= smbcli_pull_nttime(req
->in
.body
, 0x08);
325 io
->out
.access_time
= smbcli_pull_nttime(req
->in
.body
, 0x10);
326 io
->out
.write_time
= smbcli_pull_nttime(req
->in
.body
, 0x18);
327 io
->out
.change_time
= smbcli_pull_nttime(req
->in
.body
, 0x20);
328 io
->out
.alloc_size
= BVAL(req
->in
.body
, 0x28);
329 io
->out
.size
= BVAL(req
->in
.body
, 0x30);
330 io
->out
.file_attr
= IVAL(req
->in
.body
, 0x38);
331 io
->out
.reserved2
= IVAL(req
->in
.body
, 0x3C);
332 smb2_pull_handle(req
->in
.body
+0x40, &io
->out
.file
.handle
);
333 status
= smb2_pull_o32s32_blob(&req
->in
, mem_ctx
, req
->in
.body
+0x50, &blob
);
334 if (!NT_STATUS_IS_OK(status
)) {
335 smb2_request_destroy(req
);
339 status
= smb2_create_blob_parse(mem_ctx
, blob
, &io
->out
.blobs
);
340 if (!NT_STATUS_IS_OK(status
)) {
341 smb2_request_destroy(req
);
345 /* pull out the parsed blobs */
346 for (i
=0;i
<io
->out
.blobs
.num_blobs
;i
++) {
347 if (strcmp(io
->out
.blobs
.blobs
[i
].tag
, SMB2_CREATE_TAG_MXAC
) == 0) {
348 /* TODO: this also contains a status field in
350 if (io
->out
.blobs
.blobs
[i
].data
.length
!= 8) {
351 smb2_request_destroy(req
);
352 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
354 io
->out
.maximal_access
= IVAL(io
->out
.blobs
.blobs
[i
].data
.data
, 4);
356 if (strcmp(io
->out
.blobs
.blobs
[i
].tag
, SMB2_CREATE_TAG_QFID
) == 0) {
357 if (io
->out
.blobs
.blobs
[i
].data
.length
!= 32) {
358 smb2_request_destroy(req
);
359 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
361 memcpy(io
->out
.on_disk_id
, io
->out
.blobs
.blobs
[i
].data
.data
, 32);
363 if (strcmp(io
->out
.blobs
.blobs
[i
].tag
, SMB2_CREATE_TAG_RQLS
) == 0) {
364 struct smb2_lease
*ls
= NULL
;
367 ZERO_STRUCT(io
->out
.lease_response
);
368 ZERO_STRUCT(io
->out
.lease_response_v2
);
370 switch (io
->out
.blobs
.blobs
[i
].data
.length
) {
372 ls
= &io
->out
.lease_response
;
375 ls
= &io
->out
.lease_response_v2
;
378 smb2_request_destroy(req
);
379 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
382 data
= io
->out
.blobs
.blobs
[i
].data
.data
;
383 memcpy(&ls
->lease_key
, data
, 16);
384 ls
->lease_state
= IVAL(data
, 16);
385 ls
->lease_flags
= IVAL(data
, 20);
386 ls
->lease_duration
= BVAL(data
, 24);
388 if (io
->out
.blobs
.blobs
[i
].data
.length
== 52) {
389 memcpy(&ls
->parent_lease_key
, data
+32, 16);
390 ls
->lease_epoch
= SVAL(data
, 48);
393 if (strcmp(io
->out
.blobs
.blobs
[i
].tag
, SMB2_CREATE_TAG_DHNQ
) == 0) {
394 if (io
->out
.blobs
.blobs
[i
].data
.length
!= 8) {
395 smb2_request_destroy(req
);
396 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
398 io
->out
.durable_open
= true;
400 if (strcmp(io
->out
.blobs
.blobs
[i
].tag
, SMB2_CREATE_TAG_DH2Q
) == 0) {
404 if (io
->out
.blobs
.blobs
[i
].data
.length
!= 8) {
405 smb2_request_destroy(req
);
406 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
409 io
->out
.durable_open
= false;
410 io
->out
.durable_open_v2
= true;
412 data
= io
->out
.blobs
.blobs
[i
].data
.data
;
413 io
->out
.timeout
= IVAL(data
, 0);
414 flags
= IVAL(data
, 4);
415 if ((flags
& SMB2_DHANDLE_FLAG_PERSISTENT
) != 0) {
416 io
->out
.persistent_open
= true;
421 data_blob_free(&blob
);
423 return smb2_request_destroy(req
);
429 NTSTATUS
smb2_create(struct smb2_tree
*tree
, TALLOC_CTX
*mem_ctx
, struct smb2_create
*io
)
431 struct smb2_request
*req
= smb2_create_send(tree
, io
);
432 return smb2_create_recv(req
, mem_ctx
, io
);