replace/waf: add rt to deps at this place
[Samba/gebeck_regimport.git] / source4 / libcli / raw / clitransport.c
blob7a3993c79bf5083ddddb3a9709e9f3266c96e02d
1 /*
2 Unix SMB/CIFS implementation.
3 SMB client transport context management functions
5 Copyright (C) Andrew Tridgell 1994-2005
6 Copyright (C) James Myers 2003 <myersjj@samba.org>
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "includes.h"
23 #include "libcli/raw/libcliraw.h"
24 #include "libcli/raw/raw_proto.h"
25 #include "lib/socket/socket.h"
26 #include "../lib/util/dlinklist.h"
27 #include "lib/events/events.h"
28 #include "lib/stream/packet.h"
29 #include "librpc/gen_ndr/ndr_nbt.h"
30 #include "../libcli/nbt/libnbt.h"
34 an event has happened on the socket
36 static void smbcli_transport_event_handler(struct tevent_context *ev,
37 struct tevent_fd *fde,
38 uint16_t flags, void *private_data)
40 struct smbcli_transport *transport = talloc_get_type(private_data,
41 struct smbcli_transport);
42 if (flags & EVENT_FD_READ) {
43 packet_recv(transport->packet);
44 return;
46 if (flags & EVENT_FD_WRITE) {
47 packet_queue_run(transport->packet);
52 destroy a transport
54 static int transport_destructor(struct smbcli_transport *transport)
56 smbcli_transport_dead(transport, NT_STATUS_LOCAL_DISCONNECT);
57 return 0;
62 handle receive errors
64 static void smbcli_transport_error(void *private_data, NTSTATUS status)
66 struct smbcli_transport *transport = talloc_get_type(private_data, struct smbcli_transport);
67 smbcli_transport_dead(transport, status);
70 static NTSTATUS smbcli_transport_finish_recv(void *private_data, DATA_BLOB blob);
73 create a transport structure based on an established socket
75 struct smbcli_transport *smbcli_transport_init(struct smbcli_socket *sock,
76 TALLOC_CTX *parent_ctx,
77 bool primary,
78 struct smbcli_options *options)
80 struct smbcli_transport *transport;
82 transport = talloc_zero(parent_ctx, struct smbcli_transport);
83 if (!transport) return NULL;
85 if (primary) {
86 transport->socket = talloc_steal(transport, sock);
87 } else {
88 transport->socket = talloc_reference(transport, sock);
90 transport->negotiate.protocol = PROTOCOL_NT1;
91 transport->options = *options;
92 transport->negotiate.max_xmit = transport->options.max_xmit;
94 /* setup the stream -> packet parser */
95 transport->packet = packet_init(transport);
96 if (transport->packet == NULL) {
97 talloc_free(transport);
98 return NULL;
100 packet_set_private(transport->packet, transport);
101 packet_set_socket(transport->packet, transport->socket->sock);
102 packet_set_callback(transport->packet, smbcli_transport_finish_recv);
103 packet_set_full_request(transport->packet, packet_full_request_nbt);
104 packet_set_error_handler(transport->packet, smbcli_transport_error);
105 packet_set_event_context(transport->packet, transport->socket->event.ctx);
106 packet_set_nofree(transport->packet);
107 packet_set_initial_read(transport->packet, 4);
109 smbcli_init_signing(transport);
111 ZERO_STRUCT(transport->called);
113 /* take over event handling from the socket layer - it only
114 handles events up until we are connected */
115 talloc_free(transport->socket->event.fde);
116 transport->socket->event.fde = event_add_fd(transport->socket->event.ctx,
117 transport->socket->sock,
118 socket_get_fd(transport->socket->sock),
119 EVENT_FD_READ,
120 smbcli_transport_event_handler,
121 transport);
123 packet_set_fde(transport->packet, transport->socket->event.fde);
124 packet_set_serialise(transport->packet);
125 talloc_set_destructor(transport, transport_destructor);
127 return transport;
131 mark the transport as dead
133 void smbcli_transport_dead(struct smbcli_transport *transport, NTSTATUS status)
135 smbcli_sock_dead(transport->socket);
137 if (NT_STATUS_EQUAL(NT_STATUS_UNSUCCESSFUL, status)) {
138 status = NT_STATUS_UNEXPECTED_NETWORK_ERROR;
141 /* kill only the first pending receive - this is so that if
142 that async function frees the connection we don't die trying
143 to use old memory. The caller has to cope with only one
144 network error */
145 if (transport->pending_recv) {
146 struct smbcli_request *req = transport->pending_recv;
147 req->state = SMBCLI_REQUEST_ERROR;
148 req->status = status;
149 DLIST_REMOVE(transport->pending_recv, req);
150 if (req->async.fn) {
151 req->async.fn(req);
158 send a session request
160 struct smbcli_request *smbcli_transport_connect_send(struct smbcli_transport *transport,
161 struct nbt_name *calling,
162 struct nbt_name *called)
164 uint8_t *p;
165 struct smbcli_request *req;
166 DATA_BLOB calling_blob, called_blob;
167 TALLOC_CTX *tmp_ctx = talloc_new(transport);
168 NTSTATUS status;
170 status = nbt_name_dup(transport, called, &transport->called);
171 if (!NT_STATUS_IS_OK(status)) goto failed;
173 status = nbt_name_to_blob(tmp_ctx, &calling_blob, calling);
174 if (!NT_STATUS_IS_OK(status)) goto failed;
176 status = nbt_name_to_blob(tmp_ctx, &called_blob, called);
177 if (!NT_STATUS_IS_OK(status)) goto failed;
179 /* allocate output buffer */
180 req = smbcli_request_setup_nonsmb(transport,
181 NBT_HDR_SIZE +
182 calling_blob.length + called_blob.length);
183 if (req == NULL) goto failed;
185 /* put in the destination name */
186 p = req->out.buffer + NBT_HDR_SIZE;
187 memcpy(p, called_blob.data, called_blob.length);
188 p += called_blob.length;
190 memcpy(p, calling_blob.data, calling_blob.length);
191 p += calling_blob.length;
193 _smb_setlen(req->out.buffer, PTR_DIFF(p, req->out.buffer) - NBT_HDR_SIZE);
194 SCVAL(req->out.buffer,0,0x81);
196 if (!smbcli_request_send(req)) {
197 smbcli_request_destroy(req);
198 goto failed;
201 talloc_free(tmp_ctx);
202 return req;
204 failed:
205 talloc_free(tmp_ctx);
206 return NULL;
210 map a session request error to a NTSTATUS
212 static NTSTATUS map_session_refused_error(uint8_t error)
214 switch (error) {
215 case 0x80:
216 case 0x81:
217 return NT_STATUS_REMOTE_NOT_LISTENING;
218 case 0x82:
219 return NT_STATUS_RESOURCE_NAME_NOT_FOUND;
220 case 0x83:
221 return NT_STATUS_REMOTE_RESOURCES;
223 return NT_STATUS_UNEXPECTED_IO_ERROR;
228 finish a smbcli_transport_connect()
230 NTSTATUS smbcli_transport_connect_recv(struct smbcli_request *req)
232 NTSTATUS status;
234 if (!smbcli_request_receive(req)) {
235 smbcli_request_destroy(req);
236 return NT_STATUS_UNEXPECTED_NETWORK_ERROR;
239 switch (CVAL(req->in.buffer,0)) {
240 case 0x82:
241 status = NT_STATUS_OK;
242 break;
243 case 0x83:
244 status = map_session_refused_error(CVAL(req->in.buffer,4));
245 break;
246 case 0x84:
247 DEBUG(1,("Warning: session retarget not supported\n"));
248 status = NT_STATUS_NOT_SUPPORTED;
249 break;
250 default:
251 status = NT_STATUS_UNEXPECTED_IO_ERROR;
252 break;
255 smbcli_request_destroy(req);
256 return status;
261 send a session request (if needed)
263 bool smbcli_transport_connect(struct smbcli_transport *transport,
264 struct nbt_name *calling,
265 struct nbt_name *called)
267 struct smbcli_request *req;
268 NTSTATUS status;
270 if (transport->socket->port == 445) {
271 return true;
274 req = smbcli_transport_connect_send(transport,
275 calling, called);
276 status = smbcli_transport_connect_recv(req);
277 return NT_STATUS_IS_OK(status);
280 /****************************************************************************
281 get next mid in sequence
282 ****************************************************************************/
283 uint16_t smbcli_transport_next_mid(struct smbcli_transport *transport)
285 uint16_t mid;
286 struct smbcli_request *req;
288 mid = transport->next_mid;
290 again:
291 /* now check to see if this mid is being used by one of the
292 pending requests. This is quite efficient because the list is
293 usually very short */
295 /* the zero mid is reserved for requests that don't have a mid */
296 if (mid == 0) mid = 1;
298 for (req=transport->pending_recv; req; req=req->next) {
299 if (req->mid == mid) {
300 mid++;
301 goto again;
305 transport->next_mid = mid+1;
306 return mid;
309 static void idle_handler(struct tevent_context *ev,
310 struct tevent_timer *te, struct timeval t, void *private_data)
312 struct smbcli_transport *transport = talloc_get_type(private_data,
313 struct smbcli_transport);
314 struct timeval next = timeval_add(&t, 0, transport->idle.period);
315 transport->socket->event.te = event_add_timed(transport->socket->event.ctx,
316 transport,
317 next,
318 idle_handler, transport);
319 transport->idle.func(transport, transport->idle.private_data);
323 setup the idle handler for a transport
324 the period is in microseconds
326 _PUBLIC_ void smbcli_transport_idle_handler(struct smbcli_transport *transport,
327 void (*idle_func)(struct smbcli_transport *, void *),
328 uint64_t period,
329 void *private_data)
331 transport->idle.func = idle_func;
332 transport->idle.private_data = private_data;
333 transport->idle.period = period;
335 if (transport->socket->event.te != NULL) {
336 talloc_free(transport->socket->event.te);
339 transport->socket->event.te = event_add_timed(transport->socket->event.ctx,
340 transport,
341 timeval_current_ofs(0, period),
342 idle_handler, transport);
346 we have a full request in our receive buffer - match it to a pending request
347 and process
349 static NTSTATUS smbcli_transport_finish_recv(void *private_data, DATA_BLOB blob)
351 struct smbcli_transport *transport = talloc_get_type(private_data,
352 struct smbcli_transport);
353 uint8_t *buffer, *hdr, *vwv;
354 int len;
355 uint16_t wct=0, mid = 0, op = 0;
356 struct smbcli_request *req = NULL;
358 buffer = blob.data;
359 len = blob.length;
361 hdr = buffer+NBT_HDR_SIZE;
362 vwv = hdr + HDR_VWV;
364 /* see if it could be an oplock break request */
365 if (smbcli_handle_oplock_break(transport, len, hdr, vwv)) {
366 talloc_free(buffer);
367 return NT_STATUS_OK;
370 /* at this point we need to check for a readbraw reply, as
371 these can be any length */
372 if (transport->readbraw_pending) {
373 transport->readbraw_pending = 0;
375 /* it must match the first entry in the pending queue
376 as the client is not allowed to have outstanding
377 readbraw requests */
378 req = transport->pending_recv;
379 if (!req) goto error;
381 req->in.buffer = buffer;
382 talloc_steal(req, buffer);
383 req->in.size = len;
384 req->in.allocated = req->in.size;
385 goto async;
388 if (len >= MIN_SMB_SIZE) {
389 /* extract the mid for matching to pending requests */
390 mid = SVAL(hdr, HDR_MID);
391 wct = CVAL(hdr, HDR_WCT);
392 op = CVAL(hdr, HDR_COM);
395 /* match the incoming request against the list of pending requests */
396 for (req=transport->pending_recv; req; req=req->next) {
397 if (req->mid == mid) break;
400 /* see if it's a ntcancel reply for the current MID */
401 req = smbcli_handle_ntcancel_reply(req, len, hdr);
403 if (!req) {
404 DEBUG(1,("Discarding unmatched reply with mid %d op %d\n", mid, op));
405 goto error;
408 /* fill in the 'in' portion of the matching request */
409 req->in.buffer = buffer;
410 talloc_steal(req, buffer);
411 req->in.size = len;
412 req->in.allocated = req->in.size;
414 /* handle NBT session replies */
415 if (req->in.size >= 4 && req->in.buffer[0] != 0) {
416 req->status = NT_STATUS_OK;
417 goto async;
420 /* handle non-SMB replies */
421 if (req->in.size < NBT_HDR_SIZE + MIN_SMB_SIZE) {
422 req->state = SMBCLI_REQUEST_ERROR;
423 goto error;
426 if (req->in.size < NBT_HDR_SIZE + MIN_SMB_SIZE + VWV(wct)) {
427 DEBUG(2,("bad reply size for mid %d\n", mid));
428 req->status = NT_STATUS_UNSUCCESSFUL;
429 req->state = SMBCLI_REQUEST_ERROR;
430 goto error;
433 req->in.hdr = hdr;
434 req->in.vwv = vwv;
435 req->in.wct = wct;
436 if (req->in.size >= NBT_HDR_SIZE + MIN_SMB_SIZE + VWV(wct)) {
437 req->in.data = req->in.vwv + VWV(wct) + 2;
438 req->in.data_size = SVAL(req->in.vwv, VWV(wct));
439 if (req->in.size < NBT_HDR_SIZE + MIN_SMB_SIZE + VWV(wct) + req->in.data_size) {
440 DEBUG(3,("bad data size for mid %d\n", mid));
441 /* blergh - w2k3 gives a bogus data size values in some
442 openX replies */
443 req->in.data_size = req->in.size - (NBT_HDR_SIZE + MIN_SMB_SIZE + VWV(wct));
446 req->in.ptr = req->in.data;
447 req->flags2 = SVAL(req->in.hdr, HDR_FLG2);
449 smb_setup_bufinfo(req);
451 if (!(req->flags2 & FLAGS2_32_BIT_ERROR_CODES)) {
452 int eclass = CVAL(req->in.hdr,HDR_RCLS);
453 int code = SVAL(req->in.hdr,HDR_ERR);
454 if (eclass == 0 && code == 0) {
455 transport->error.e.nt_status = NT_STATUS_OK;
456 } else {
457 transport->error.e.nt_status = NT_STATUS_DOS(eclass, code);
459 } else {
460 transport->error.e.nt_status = NT_STATUS(IVAL(req->in.hdr, HDR_RCLS));
463 req->status = transport->error.e.nt_status;
464 if (NT_STATUS_IS_OK(req->status)) {
465 transport->error.etype = ETYPE_NONE;
466 } else {
467 transport->error.etype = ETYPE_SMB;
470 if (!smbcli_request_check_sign_mac(req)) {
471 transport->error.etype = ETYPE_SOCKET;
472 transport->error.e.socket_error = SOCKET_READ_BAD_SIG;
473 req->state = SMBCLI_REQUEST_ERROR;
474 req->status = NT_STATUS_ACCESS_DENIED;
475 goto error;
478 async:
479 /* if this request has an async handler then call that to
480 notify that the reply has been received. This might destroy
481 the request so it must happen last */
483 req->state = SMBCLI_REQUEST_DONE;
485 if (req->recv_helper.fn) {
487 * let the recv helper decide in
488 * what state the request really is
490 req->state = req->recv_helper.fn(req);
492 /* if more parts are needed, wait for them */
493 if (req->state <= SMBCLI_REQUEST_RECV) {
494 return NT_STATUS_OK;
497 DLIST_REMOVE(transport->pending_recv, req);
498 if (req->async.fn) {
499 req->async.fn(req);
501 return NT_STATUS_OK;
503 error:
504 if (req) {
505 DLIST_REMOVE(transport->pending_recv, req);
506 req->state = SMBCLI_REQUEST_ERROR;
507 if (req->async.fn) {
508 req->async.fn(req);
510 } else {
511 talloc_free(buffer);
513 return NT_STATUS_OK;
517 process some read/write requests that are pending
518 return false if the socket is dead
520 _PUBLIC_ bool smbcli_transport_process(struct smbcli_transport *transport)
522 NTSTATUS status;
523 size_t npending;
525 packet_queue_run(transport->packet);
526 if (transport->socket->sock == NULL) {
527 return false;
530 status = socket_pending(transport->socket->sock, &npending);
531 if (NT_STATUS_IS_OK(status) && npending > 0) {
532 packet_recv(transport->packet);
534 if (transport->socket->sock == NULL) {
535 return false;
537 return true;
541 handle timeouts of individual smb requests
543 static void smbcli_timeout_handler(struct tevent_context *ev, struct tevent_timer *te,
544 struct timeval t, void *private_data)
546 struct smbcli_request *req = talloc_get_type(private_data, struct smbcli_request);
548 if (req->state == SMBCLI_REQUEST_RECV) {
549 DLIST_REMOVE(req->transport->pending_recv, req);
551 req->status = NT_STATUS_IO_TIMEOUT;
552 req->state = SMBCLI_REQUEST_ERROR;
553 if (req->async.fn) {
554 req->async.fn(req);
560 destroy a request
562 static int smbcli_request_destructor(struct smbcli_request *req)
564 if (req->state == SMBCLI_REQUEST_RECV) {
565 DLIST_REMOVE(req->transport->pending_recv, req);
567 return 0;
572 put a request into the send queue
574 void smbcli_transport_send(struct smbcli_request *req)
576 DATA_BLOB blob;
577 NTSTATUS status;
579 /* check if the transport is dead */
580 if (req->transport->socket->sock == NULL) {
581 req->state = SMBCLI_REQUEST_ERROR;
582 req->status = NT_STATUS_NET_WRITE_FAULT;
583 return;
586 blob = data_blob_const(req->out.buffer, req->out.size);
587 status = packet_send(req->transport->packet, blob);
588 if (!NT_STATUS_IS_OK(status)) {
589 req->state = SMBCLI_REQUEST_ERROR;
590 req->status = status;
591 return;
594 packet_queue_run(req->transport->packet);
595 if (req->transport->socket->sock == NULL) {
596 req->state = SMBCLI_REQUEST_ERROR;
597 req->status = NT_STATUS_NET_WRITE_FAULT;
598 return;
601 if (req->one_way_request) {
602 req->state = SMBCLI_REQUEST_DONE;
603 smbcli_request_destroy(req);
604 return;
607 req->state = SMBCLI_REQUEST_RECV;
608 DLIST_ADD(req->transport->pending_recv, req);
610 /* add a timeout */
611 if (req->transport->options.request_timeout) {
612 event_add_timed(req->transport->socket->event.ctx, req,
613 timeval_current_ofs(req->transport->options.request_timeout, 0),
614 smbcli_timeout_handler, req);
617 talloc_set_destructor(req, smbcli_request_destructor);
621 /****************************************************************************
622 Send an SMBecho (async send)
623 *****************************************************************************/
624 _PUBLIC_ struct smbcli_request *smb_raw_echo_send(struct smbcli_transport *transport,
625 struct smb_echo *p)
627 struct smbcli_request *req;
629 req = smbcli_request_setup_transport(transport, SMBecho, 1, p->in.size);
630 if (!req) return NULL;
632 SSVAL(req->out.vwv, VWV(0), p->in.repeat_count);
634 memcpy(req->out.data, p->in.data, p->in.size);
636 ZERO_STRUCT(p->out);
638 if (!smbcli_request_send(req)) {
639 smbcli_request_destroy(req);
640 return NULL;
643 return req;
646 /****************************************************************************
647 raw echo interface (async recv)
648 ****************************************************************************/
649 NTSTATUS smb_raw_echo_recv(struct smbcli_request *req, TALLOC_CTX *mem_ctx,
650 struct smb_echo *p)
652 if (!smbcli_request_receive(req) ||
653 smbcli_request_is_error(req)) {
654 goto failed;
657 SMBCLI_CHECK_WCT(req, 1);
658 p->out.count++;
659 p->out.sequence_number = SVAL(req->in.vwv, VWV(0));
660 p->out.size = req->in.data_size;
661 talloc_free(p->out.data);
662 p->out.data = talloc_array(mem_ctx, uint8_t, p->out.size);
663 NT_STATUS_HAVE_NO_MEMORY(p->out.data);
665 if (!smbcli_raw_pull_data(&req->in.bufinfo, req->in.data, p->out.size, p->out.data)) {
666 req->status = NT_STATUS_BUFFER_TOO_SMALL;
669 if (p->out.count == p->in.repeat_count) {
670 return smbcli_request_destroy(req);
673 return NT_STATUS_OK;
675 failed:
676 return smbcli_request_destroy(req);
679 /****************************************************************************
680 Send a echo (sync interface)
681 *****************************************************************************/
682 NTSTATUS smb_raw_echo(struct smbcli_transport *transport, struct smb_echo *p)
684 struct smbcli_request *req = smb_raw_echo_send(transport, p);
685 return smbcli_request_simple_recv(req);