2 Unix SMB/CIFS implementation.
3 client transaction calls
4 Copyright (C) Andrew Tridgell 1994-1998
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 2 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program; if not, write to the Free Software
18 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
26 /****************************************************************************
27 Send a SMB trans or trans2 request.
28 ****************************************************************************/
30 BOOL
cli_send_trans(struct cli_state
*cli
, int trans
,
31 const char *pipe_name
,
33 uint16
*setup
, unsigned int lsetup
, unsigned int msetup
,
34 const char *param
, unsigned int lparam
, unsigned int mparam
,
35 const char *data
, unsigned int ldata
, unsigned int mdata
)
38 unsigned int this_ldata
,this_lparam
;
39 unsigned int tot_data
=0,tot_param
=0;
40 char *outdata
,*outparam
;
45 this_lparam
= MIN(lparam
,cli
->max_xmit
- (500+lsetup
*2)); /* hack */
46 this_ldata
= MIN(ldata
,cli
->max_xmit
- (500+lsetup
*2+this_lparam
));
48 memset(cli
->outbuf
,'\0',smb_size
);
49 set_message(cli
->outbuf
,14+lsetup
,0,True
);
50 SCVAL(cli
->outbuf
,smb_com
,trans
);
51 SSVAL(cli
->outbuf
,smb_tid
, cli
->cnum
);
52 cli_setup_packet(cli
);
55 * Save the mid we're using. We need this for finding
62 pipe_name_len
= clistr_push(cli
, smb_buf(cli
->outbuf
), pipe_name
, -1, STR_TERMINATE
);
65 outparam
= smb_buf(cli
->outbuf
)+(trans
==SMBtrans
? pipe_name_len
: 3);
66 outdata
= outparam
+this_lparam
;
69 SSVAL(cli
->outbuf
,smb_tpscnt
,lparam
); /* tpscnt */
70 SSVAL(cli
->outbuf
,smb_tdscnt
,ldata
); /* tdscnt */
71 SSVAL(cli
->outbuf
,smb_mprcnt
,mparam
); /* mprcnt */
72 SSVAL(cli
->outbuf
,smb_mdrcnt
,mdata
); /* mdrcnt */
73 SCVAL(cli
->outbuf
,smb_msrcnt
,msetup
); /* msrcnt */
74 SSVAL(cli
->outbuf
,smb_flags
,flags
); /* flags */
75 SIVAL(cli
->outbuf
,smb_timeout
,0); /* timeout */
76 SSVAL(cli
->outbuf
,smb_pscnt
,this_lparam
); /* pscnt */
77 SSVAL(cli
->outbuf
,smb_psoff
,smb_offset(outparam
,cli
->outbuf
)); /* psoff */
78 SSVAL(cli
->outbuf
,smb_dscnt
,this_ldata
); /* dscnt */
79 SSVAL(cli
->outbuf
,smb_dsoff
,smb_offset(outdata
,cli
->outbuf
)); /* dsoff */
80 SCVAL(cli
->outbuf
,smb_suwcnt
,lsetup
); /* suwcnt */
81 for (i
=0;i
<lsetup
;i
++) /* setup[] */
82 SSVAL(cli
->outbuf
,smb_setup
+i
*2,setup
[i
]);
83 p
= smb_buf(cli
->outbuf
);
84 if (trans
!= SMBtrans
) {
85 *p
++ = 0; /* put in a null smb_name */
86 *p
++ = 'D'; *p
++ = ' '; /* observed in OS/2 */
88 if (this_lparam
) /* param[] */
89 memcpy(outparam
,param
,this_lparam
);
90 if (this_ldata
) /* data[] */
91 memcpy(outdata
,data
,this_ldata
);
92 cli_setup_bcc(cli
, outdata
+this_ldata
);
94 show_msg(cli
->outbuf
);
96 if (!cli_send_smb(cli
)) {
100 if (this_ldata
< ldata
|| this_lparam
< lparam
) {
101 /* receive interim response */
102 if (!cli_receive_smb(cli
) || cli_is_error(cli
)) {
106 tot_data
= this_ldata
;
107 tot_param
= this_lparam
;
109 while (tot_data
< ldata
|| tot_param
< lparam
) {
110 this_lparam
= MIN(lparam
-tot_param
,cli
->max_xmit
- 500); /* hack */
111 this_ldata
= MIN(ldata
-tot_data
,cli
->max_xmit
- (500+this_lparam
));
113 set_message(cli
->outbuf
,trans
==SMBtrans
?8:9,0,True
);
114 SCVAL(cli
->outbuf
,smb_com
,(trans
==SMBtrans
? SMBtranss
: SMBtranss2
));
116 outparam
= smb_buf(cli
->outbuf
);
117 outdata
= outparam
+this_lparam
;
119 /* secondary request */
120 SSVAL(cli
->outbuf
,smb_tpscnt
,lparam
); /* tpscnt */
121 SSVAL(cli
->outbuf
,smb_tdscnt
,ldata
); /* tdscnt */
122 SSVAL(cli
->outbuf
,smb_spscnt
,this_lparam
); /* pscnt */
123 SSVAL(cli
->outbuf
,smb_spsoff
,smb_offset(outparam
,cli
->outbuf
)); /* psoff */
124 SSVAL(cli
->outbuf
,smb_spsdisp
,tot_param
); /* psdisp */
125 SSVAL(cli
->outbuf
,smb_sdscnt
,this_ldata
); /* dscnt */
126 SSVAL(cli
->outbuf
,smb_sdsoff
,smb_offset(outdata
,cli
->outbuf
)); /* dsoff */
127 SSVAL(cli
->outbuf
,smb_sdsdisp
,tot_data
); /* dsdisp */
128 if (trans
==SMBtrans2
)
129 SSVALS(cli
->outbuf
,smb_sfid
,fid
); /* fid */
130 if (this_lparam
) /* param[] */
131 memcpy(outparam
,param
+tot_param
,this_lparam
);
132 if (this_ldata
) /* data[] */
133 memcpy(outdata
,data
+tot_data
,this_ldata
);
134 cli_setup_bcc(cli
, outdata
+this_ldata
);
137 * Save the mid we're using. We need this for finding
142 show_msg(cli
->outbuf
);
143 if (!cli_send_smb(cli
)) {
147 /* Ensure we use the same mid for the secondaries. */
150 tot_data
+= this_ldata
;
151 tot_param
+= this_lparam
;
155 /* Note we're in a trans state. Save the sequence
156 * numbers for replies. */
158 cli_signing_trans_start(cli
, mid
);
162 /****************************************************************************
163 Receive a SMB trans or trans2 response allocating the necessary memory.
164 ****************************************************************************/
166 BOOL
cli_receive_trans(struct cli_state
*cli
,int trans
,
167 char **param
, unsigned int *param_len
,
168 char **data
, unsigned int *data_len
)
170 unsigned int total_data
=0;
171 unsigned int total_param
=0;
172 unsigned int this_data
,this_param
;
177 *data_len
= *param_len
= 0;
179 if (!cli_receive_smb(cli
)) {
180 cli_signing_trans_stop(cli
);
184 show_msg(cli
->inbuf
);
187 if (CVAL(cli
->inbuf
,smb_com
) != trans
) {
188 DEBUG(0,("Expected %s response, got command 0x%02x\n",
189 trans
==SMBtrans
?"SMBtrans":"SMBtrans2",
190 CVAL(cli
->inbuf
,smb_com
)));
191 cli_signing_trans_stop(cli
);
196 * An NT RPC pipe call can return ERRDOS, ERRmoredata
197 * to a trans call. This is not an error and should not
198 * be treated as such.
200 status
= cli_nt_error(cli
);
202 if (NT_STATUS_IS_ERR(status
)) {
203 cli_signing_trans_stop(cli
);
207 /* parse out the lengths */
208 total_data
= SVAL(cli
->inbuf
,smb_tdrcnt
);
209 total_param
= SVAL(cli
->inbuf
,smb_tprcnt
);
213 tdata
= Realloc(*data
,total_data
);
215 DEBUG(0,("cli_receive_trans: failed to enlarge data buffer\n"));
216 cli_signing_trans_stop(cli
);
223 if (total_param
!=0) {
224 tparam
= Realloc(*param
,total_param
);
226 DEBUG(0,("cli_receive_trans: failed to enlarge param buffer\n"));
227 cli_signing_trans_stop(cli
);
235 this_data
= SVAL(cli
->inbuf
,smb_drcnt
);
236 this_param
= SVAL(cli
->inbuf
,smb_prcnt
);
238 if (this_data
+ *data_len
> total_data
||
239 this_param
+ *param_len
> total_param
) {
240 DEBUG(1,("Data overflow in cli_receive_trans\n"));
241 cli_signing_trans_stop(cli
);
245 if (this_data
+ *data_len
< this_data
||
246 this_data
+ *data_len
< *data_len
||
247 this_param
+ *param_len
< this_param
||
248 this_param
+ *param_len
< *param_len
) {
249 DEBUG(1,("Data overflow in cli_receive_trans\n"));
250 cli_signing_trans_stop(cli
);
255 unsigned int data_offset_out
= SVAL(cli
->inbuf
,smb_drdisp
);
256 unsigned int data_offset_in
= SVAL(cli
->inbuf
,smb_droff
);
258 if (data_offset_out
> total_data
||
259 data_offset_out
+ this_data
> total_data
||
260 data_offset_out
+ this_data
< data_offset_out
||
261 data_offset_out
+ this_data
< this_data
) {
262 DEBUG(1,("Data overflow in cli_receive_trans\n"));
263 cli_signing_trans_stop(cli
);
266 if (data_offset_in
> cli
->bufsize
||
267 data_offset_in
+ this_data
> cli
->bufsize
||
268 data_offset_in
+ this_data
< data_offset_in
||
269 data_offset_in
+ this_data
< this_data
) {
270 DEBUG(1,("Data overflow in cli_receive_trans\n"));
271 cli_signing_trans_stop(cli
);
275 memcpy(*data
+ data_offset_out
, smb_base(cli
->inbuf
) + data_offset_in
, this_data
);
278 unsigned int param_offset_out
= SVAL(cli
->inbuf
,smb_prdisp
);
279 unsigned int param_offset_in
= SVAL(cli
->inbuf
,smb_proff
);
281 if (param_offset_out
> total_param
||
282 param_offset_out
+ this_param
> total_param
||
283 param_offset_out
+ this_param
< param_offset_out
||
284 param_offset_out
+ this_param
< this_param
) {
285 DEBUG(1,("Param overflow in cli_receive_trans\n"));
286 cli_signing_trans_stop(cli
);
289 if (param_offset_in
> cli
->bufsize
||
290 param_offset_in
+ this_param
> cli
->bufsize
||
291 param_offset_in
+ this_param
< param_offset_in
||
292 param_offset_in
+ this_param
< this_param
) {
293 DEBUG(1,("Param overflow in cli_receive_trans\n"));
294 cli_signing_trans_stop(cli
);
298 memcpy(*param
+ param_offset_out
, smb_base(cli
->inbuf
) + param_offset_in
, this_param
);
300 *data_len
+= this_data
;
301 *param_len
+= this_param
;
303 if (total_data
<= *data_len
&& total_param
<= *param_len
)
306 if (!cli_receive_smb(cli
)) {
307 cli_signing_trans_stop(cli
);
311 show_msg(cli
->inbuf
);
314 if (CVAL(cli
->inbuf
,smb_com
) != trans
) {
315 DEBUG(0,("Expected %s response, got command 0x%02x\n",
316 trans
==SMBtrans
?"SMBtrans":"SMBtrans2",
317 CVAL(cli
->inbuf
,smb_com
)));
318 cli_signing_trans_stop(cli
);
321 if (NT_STATUS_IS_ERR(cli_nt_error(cli
))) {
322 cli_signing_trans_stop(cli
);
326 /* parse out the total lengths again - they can shrink! */
327 if (SVAL(cli
->inbuf
,smb_tdrcnt
) < total_data
)
328 total_data
= SVAL(cli
->inbuf
,smb_tdrcnt
);
329 if (SVAL(cli
->inbuf
,smb_tprcnt
) < total_param
)
330 total_param
= SVAL(cli
->inbuf
,smb_tprcnt
);
332 if (total_data
<= *data_len
&& total_param
<= *param_len
)
337 cli_signing_trans_stop(cli
);
341 /****************************************************************************
342 Send a SMB nttrans request.
343 ****************************************************************************/
345 BOOL
cli_send_nt_trans(struct cli_state
*cli
,
348 uint16
*setup
, unsigned int lsetup
, unsigned int msetup
,
349 char *param
, unsigned int lparam
, unsigned int mparam
,
350 char *data
, unsigned int ldata
, unsigned int mdata
)
353 unsigned int this_ldata
,this_lparam
;
354 unsigned int tot_data
=0,tot_param
=0;
356 char *outdata
,*outparam
;
358 this_lparam
= MIN(lparam
,cli
->max_xmit
- (500+lsetup
*2)); /* hack */
359 this_ldata
= MIN(ldata
,cli
->max_xmit
- (500+lsetup
*2+this_lparam
));
361 memset(cli
->outbuf
,'\0',smb_size
);
362 set_message(cli
->outbuf
,19+lsetup
,0,True
);
363 SCVAL(cli
->outbuf
,smb_com
,SMBnttrans
);
364 SSVAL(cli
->outbuf
,smb_tid
, cli
->cnum
);
365 cli_setup_packet(cli
);
368 * Save the mid we're using. We need this for finding
374 outparam
= smb_buf(cli
->outbuf
)+3;
375 outdata
= outparam
+this_lparam
;
377 /* primary request */
378 SCVAL(cli
->outbuf
,smb_nt_MaxSetupCount
,msetup
);
379 SCVAL(cli
->outbuf
,smb_nt_Flags
,flags
);
380 SIVAL(cli
->outbuf
,smb_nt_TotalParameterCount
, lparam
);
381 SIVAL(cli
->outbuf
,smb_nt_TotalDataCount
, ldata
);
382 SIVAL(cli
->outbuf
,smb_nt_MaxParameterCount
, mparam
);
383 SIVAL(cli
->outbuf
,smb_nt_MaxDataCount
, mdata
);
384 SIVAL(cli
->outbuf
,smb_nt_ParameterCount
, this_lparam
);
385 SIVAL(cli
->outbuf
,smb_nt_ParameterOffset
, smb_offset(outparam
,cli
->outbuf
));
386 SIVAL(cli
->outbuf
,smb_nt_DataCount
, this_ldata
);
387 SIVAL(cli
->outbuf
,smb_nt_DataOffset
, smb_offset(outdata
,cli
->outbuf
));
388 SIVAL(cli
->outbuf
,smb_nt_SetupCount
, lsetup
);
389 SIVAL(cli
->outbuf
,smb_nt_Function
, function
);
390 for (i
=0;i
<lsetup
;i
++) /* setup[] */
391 SSVAL(cli
->outbuf
,smb_nt_SetupStart
+i
*2,setup
[i
]);
393 if (this_lparam
) /* param[] */
394 memcpy(outparam
,param
,this_lparam
);
395 if (this_ldata
) /* data[] */
396 memcpy(outdata
,data
,this_ldata
);
398 cli_setup_bcc(cli
, outdata
+this_ldata
);
400 show_msg(cli
->outbuf
);
401 if (!cli_send_smb(cli
)) {
405 if (this_ldata
< ldata
|| this_lparam
< lparam
) {
406 /* receive interim response */
407 if (!cli_receive_smb(cli
) || cli_is_error(cli
)) {
411 tot_data
= this_ldata
;
412 tot_param
= this_lparam
;
414 while (tot_data
< ldata
|| tot_param
< lparam
) {
415 this_lparam
= MIN(lparam
-tot_param
,cli
->max_xmit
- 500); /* hack */
416 this_ldata
= MIN(ldata
-tot_data
,cli
->max_xmit
- (500+this_lparam
));
418 set_message(cli
->outbuf
,18,0,True
);
419 SCVAL(cli
->outbuf
,smb_com
,SMBnttranss
);
421 /* XXX - these should probably be aligned */
422 outparam
= smb_buf(cli
->outbuf
);
423 outdata
= outparam
+this_lparam
;
425 /* secondary request */
426 SIVAL(cli
->outbuf
,smb_nts_TotalParameterCount
,lparam
);
427 SIVAL(cli
->outbuf
,smb_nts_TotalDataCount
,ldata
);
428 SIVAL(cli
->outbuf
,smb_nts_ParameterCount
,this_lparam
);
429 SIVAL(cli
->outbuf
,smb_nts_ParameterOffset
,smb_offset(outparam
,cli
->outbuf
));
430 SIVAL(cli
->outbuf
,smb_nts_ParameterDisplacement
,tot_param
);
431 SIVAL(cli
->outbuf
,smb_nts_DataCount
,this_ldata
);
432 SIVAL(cli
->outbuf
,smb_nts_DataOffset
,smb_offset(outdata
,cli
->outbuf
));
433 SIVAL(cli
->outbuf
,smb_nts_DataDisplacement
,tot_data
);
434 if (this_lparam
) /* param[] */
435 memcpy(outparam
,param
+tot_param
,this_lparam
);
436 if (this_ldata
) /* data[] */
437 memcpy(outdata
,data
+tot_data
,this_ldata
);
438 cli_setup_bcc(cli
, outdata
+this_ldata
);
441 * Save the mid we're using. We need this for finding
446 show_msg(cli
->outbuf
);
448 if (!cli_send_smb(cli
)) {
452 /* Ensure we use the same mid for the secondaries. */
455 tot_data
+= this_ldata
;
456 tot_param
+= this_lparam
;
460 /* Note we're in a trans state. Save the sequence
461 * numbers for replies. */
463 cli_signing_trans_start(cli
, mid
);
467 /****************************************************************************
468 receive a SMB nttrans response allocating the necessary memory
469 ****************************************************************************/
471 BOOL
cli_receive_nt_trans(struct cli_state
*cli
,
472 char **param
, unsigned int *param_len
,
473 char **data
, unsigned int *data_len
)
475 unsigned int total_data
=0;
476 unsigned int total_param
=0;
477 unsigned int this_data
,this_param
;
483 *data_len
= *param_len
= 0;
485 if (!cli_receive_smb(cli
)) {
486 cli_signing_trans_stop(cli
);
490 show_msg(cli
->inbuf
);
493 if (CVAL(cli
->inbuf
,smb_com
) != SMBnttrans
) {
494 DEBUG(0,("Expected SMBnttrans response, got command 0x%02x\n",
495 CVAL(cli
->inbuf
,smb_com
)));
496 cli_signing_trans_stop(cli
);
501 * An NT RPC pipe call can return ERRDOS, ERRmoredata
502 * to a trans call. This is not an error and should not
503 * be treated as such.
505 if (cli_is_dos_error(cli
)) {
506 cli_dos_error(cli
, &eclass
, &ecode
);
507 if (cli
->nt_pipe_fnum
== 0 || !(eclass
== ERRDOS
&& ecode
== ERRmoredata
)) {
508 cli_signing_trans_stop(cli
);
514 * Likewise for NT_STATUS_BUFFER_TOO_SMALL
516 if (cli_is_nt_error(cli
)) {
517 if (!NT_STATUS_EQUAL(cli_nt_error(cli
),
518 NT_STATUS_BUFFER_TOO_SMALL
)) {
519 cli_signing_trans_stop(cli
);
524 /* parse out the lengths */
525 total_data
= SVAL(cli
->inbuf
,smb_ntr_TotalDataCount
);
526 total_param
= SVAL(cli
->inbuf
,smb_ntr_TotalParameterCount
);
530 tdata
= Realloc(*data
,total_data
);
532 DEBUG(0,("cli_receive_nt_trans: failed to enlarge data buffer to %d\n",total_data
));
533 cli_signing_trans_stop(cli
);
541 tparam
= Realloc(*param
,total_param
);
543 DEBUG(0,("cli_receive_nt_trans: failed to enlarge param buffer to %d\n", total_param
));
544 cli_signing_trans_stop(cli
);
552 this_data
= SVAL(cli
->inbuf
,smb_ntr_DataCount
);
553 this_param
= SVAL(cli
->inbuf
,smb_ntr_ParameterCount
);
555 if (this_data
+ *data_len
> total_data
||
556 this_param
+ *param_len
> total_param
) {
557 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
558 cli_signing_trans_stop(cli
);
562 if (this_data
+ *data_len
< this_data
||
563 this_data
+ *data_len
< *data_len
||
564 this_param
+ *param_len
< this_param
||
565 this_param
+ *param_len
< *param_len
) {
566 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
567 cli_signing_trans_stop(cli
);
572 unsigned int data_offset_out
= SVAL(cli
->inbuf
,smb_ntr_DataDisplacement
);
573 unsigned int data_offset_in
= SVAL(cli
->inbuf
,smb_ntr_DataOffset
);
575 if (data_offset_out
> total_data
||
576 data_offset_out
+ this_data
> total_data
||
577 data_offset_out
+ this_data
< data_offset_out
||
578 data_offset_out
+ this_data
< this_data
) {
579 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
580 cli_signing_trans_stop(cli
);
583 if (data_offset_in
> cli
->bufsize
||
584 data_offset_in
+ this_data
> cli
->bufsize
||
585 data_offset_in
+ this_data
< data_offset_in
||
586 data_offset_in
+ this_data
< this_data
) {
587 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
588 cli_signing_trans_stop(cli
);
592 memcpy(*data
+ data_offset_out
, smb_base(cli
->inbuf
) + data_offset_in
, this_data
);
596 unsigned int param_offset_out
= SVAL(cli
->inbuf
,smb_ntr_ParameterDisplacement
);
597 unsigned int param_offset_in
= SVAL(cli
->inbuf
,smb_ntr_ParameterOffset
);
599 if (param_offset_out
> total_param
||
600 param_offset_out
+ this_param
> total_param
||
601 param_offset_out
+ this_param
< param_offset_out
||
602 param_offset_out
+ this_param
< this_param
) {
603 DEBUG(1,("Param overflow in cli_receive_nt_trans\n"));
604 cli_signing_trans_stop(cli
);
607 if (param_offset_in
> cli
->bufsize
||
608 param_offset_in
+ this_param
> cli
->bufsize
||
609 param_offset_in
+ this_param
< param_offset_in
||
610 param_offset_in
+ this_param
< this_param
) {
611 DEBUG(1,("Param overflow in cli_receive_nt_trans\n"));
612 cli_signing_trans_stop(cli
);
616 memcpy(*param
+ param_offset_out
, smb_base(cli
->inbuf
) + param_offset_in
, this_param
);
619 *data_len
+= this_data
;
620 *param_len
+= this_param
;
622 if (total_data
<= *data_len
&& total_param
<= *param_len
)
625 if (!cli_receive_smb(cli
)) {
626 cli_signing_trans_stop(cli
);
630 show_msg(cli
->inbuf
);
633 if (CVAL(cli
->inbuf
,smb_com
) != SMBnttrans
) {
634 DEBUG(0,("Expected SMBnttrans response, got command 0x%02x\n",
635 CVAL(cli
->inbuf
,smb_com
)));
636 cli_signing_trans_stop(cli
);
639 if (cli_is_dos_error(cli
)) {
640 cli_dos_error(cli
, &eclass
, &ecode
);
641 if(cli
->nt_pipe_fnum
== 0 || !(eclass
== ERRDOS
&& ecode
== ERRmoredata
)) {
642 cli_signing_trans_stop(cli
);
646 /* parse out the total lengths again - they can shrink! */
647 if (SVAL(cli
->inbuf
,smb_ntr_TotalDataCount
) < total_data
)
648 total_data
= SVAL(cli
->inbuf
,smb_ntr_TotalDataCount
);
649 if (SVAL(cli
->inbuf
,smb_ntr_TotalParameterCount
) < total_param
)
650 total_param
= SVAL(cli
->inbuf
,smb_ntr_TotalParameterCount
);
652 if (total_data
<= *data_len
&& total_param
<= *param_len
)
656 cli_signing_trans_stop(cli
);