2 Unix SMB/CIFS implementation.
4 SMB2 client tree handling
6 Copyright (C) Andrew Tridgell 2005
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 #include "libcli/raw/libcliraw.h"
24 #include "libcli/raw/raw_proto.h"
25 #include "libcli/smb2/smb2.h"
26 #include "libcli/smb2/smb2_calls.h"
27 #include "librpc/gen_ndr/ndr_security.h"
32 struct smb2_request
*smb2_create_send(struct smb2_tree
*tree
, struct smb2_create
*io
)
34 struct smb2_request
*req
;
37 struct smb2_create_blobs blobs
;
42 req
= smb2_request_init_tree(tree
, SMB2_OP_CREATE
, 0x38, true, 0);
43 if (req
== NULL
) return NULL
;
45 SCVAL(req
->out
.body
, 0x02, io
->in
.security_flags
);
46 SCVAL(req
->out
.body
, 0x03, io
->in
.oplock_level
);
47 SIVAL(req
->out
.body
, 0x04, io
->in
.impersonation_level
);
48 SBVAL(req
->out
.body
, 0x08, io
->in
.create_flags
);
49 SBVAL(req
->out
.body
, 0x10, io
->in
.reserved
);
50 SIVAL(req
->out
.body
, 0x18, io
->in
.desired_access
);
51 SIVAL(req
->out
.body
, 0x1C, io
->in
.file_attributes
);
52 SIVAL(req
->out
.body
, 0x20, io
->in
.share_access
);
53 SIVAL(req
->out
.body
, 0x24, io
->in
.create_disposition
);
54 SIVAL(req
->out
.body
, 0x28, io
->in
.create_options
);
56 status
= smb2_push_o16s16_string(&req
->out
, 0x2C, io
->in
.fname
);
57 if (!NT_STATUS_IS_OK(status
)) {
62 /* now add all the optional blobs */
63 if (io
->in
.eas
.num_eas
!= 0) {
64 DATA_BLOB b
= data_blob_talloc(req
, NULL
,
65 ea_list_size_chained(io
->in
.eas
.num_eas
, io
->in
.eas
.eas
, 4));
66 ea_put_list_chained(b
.data
, io
->in
.eas
.num_eas
, io
->in
.eas
.eas
, 4);
67 status
= smb2_create_blob_add(req
, &blobs
,
68 SMB2_CREATE_TAG_EXTA
, b
);
69 if (!NT_STATUS_IS_OK(status
)) {
76 /* an empty MxAc tag seems to be used to ask the server to
77 return the maximum access mask allowed on the file */
78 if (io
->in
.query_maximal_access
) {
79 /* TODO: MS-SMB2 2.2.13.2.5 says this can contain a timestamp? What to do
80 with that if it doesn't match? */
81 status
= smb2_create_blob_add(req
, &blobs
,
82 SMB2_CREATE_TAG_MXAC
, data_blob(NULL
, 0));
83 if (!NT_STATUS_IS_OK(status
)) {
89 if (io
->in
.alloc_size
!= 0) {
91 SBVAL(data
, 0, io
->in
.alloc_size
);
92 status
= smb2_create_blob_add(req
, &blobs
,
93 SMB2_CREATE_TAG_ALSI
, data_blob_const(data
, 8));
94 if (!NT_STATUS_IS_OK(status
)) {
100 if (io
->in
.durable_open
) {
101 status
= smb2_create_blob_add(req
, &blobs
,
102 SMB2_CREATE_TAG_DHNQ
, data_blob_talloc_zero(req
, 16));
103 if (!NT_STATUS_IS_OK(status
)) {
109 if (io
->in
.durable_handle
) {
111 smb2_push_handle(data
, io
->in
.durable_handle
);
112 status
= smb2_create_blob_add(req
, &blobs
,
113 SMB2_CREATE_TAG_DHNC
, data_blob_const(data
, 16));
114 if (!NT_STATUS_IS_OK(status
)) {
120 if (io
->in
.timewarp
) {
122 SBVAL(data
, 0, io
->in
.timewarp
);
123 status
= smb2_create_blob_add(req
, &blobs
,
124 SMB2_CREATE_TAG_TWRP
, data_blob_const(data
, 8));
125 if (!NT_STATUS_IS_OK(status
)) {
131 if (io
->in
.sec_desc
) {
132 enum ndr_err_code ndr_err
;
134 ndr_err
= ndr_push_struct_blob(&sd_blob
, req
, io
->in
.sec_desc
,
135 (ndr_push_flags_fn_t
)ndr_push_security_descriptor
);
136 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
140 status
= smb2_create_blob_add(req
, &blobs
,
141 SMB2_CREATE_TAG_SECD
, sd_blob
);
142 if (!NT_STATUS_IS_OK(status
)) {
148 if (io
->in
.query_on_disk_id
) {
149 status
= smb2_create_blob_add(req
, &blobs
,
150 SMB2_CREATE_TAG_QFID
, data_blob(NULL
, 0));
151 if (!NT_STATUS_IS_OK(status
)) {
157 if (io
->in
.lease_request
) {
160 memcpy(&data
[0], &io
->in
.lease_request
->lease_key
, 16);
161 SIVAL(data
, 16, io
->in
.lease_request
->lease_state
);
162 SIVAL(data
, 20, io
->in
.lease_request
->lease_flags
);
163 SBVAL(data
, 24, io
->in
.lease_request
->lease_duration
);
165 status
= smb2_create_blob_add(req
, &blobs
,
166 SMB2_CREATE_TAG_RQLS
,
167 data_blob_const(data
, 32));
168 if (!NT_STATUS_IS_OK(status
)) {
174 /* and any custom blobs */
175 for (i
=0;i
<io
->in
.blobs
.num_blobs
;i
++) {
176 status
= smb2_create_blob_add(req
, &blobs
,
177 io
->in
.blobs
.blobs
[i
].tag
,
178 io
->in
.blobs
.blobs
[i
].data
);
179 if (!NT_STATUS_IS_OK(status
)) {
186 status
= smb2_create_blob_push(req
, &blob
, blobs
);
187 if (!NT_STATUS_IS_OK(status
)) {
192 status
= smb2_push_o32s32_blob(&req
->out
, 0x30, blob
);
193 if (!NT_STATUS_IS_OK(status
)) {
198 data_blob_free(&blob
);
200 smb2_transport_send(req
);
209 NTSTATUS
smb2_create_recv(struct smb2_request
*req
, TALLOC_CTX
*mem_ctx
, struct smb2_create
*io
)
215 if (!smb2_request_receive(req
) ||
216 !smb2_request_is_ok(req
)) {
217 return smb2_request_destroy(req
);
220 SMB2_CHECK_PACKET_RECV(req
, 0x58, true);
221 ZERO_STRUCT(io
->out
);
222 io
->out
.oplock_level
= CVAL(req
->in
.body
, 0x02);
223 io
->out
.reserved
= CVAL(req
->in
.body
, 0x03);
224 io
->out
.create_action
= IVAL(req
->in
.body
, 0x04);
225 io
->out
.create_time
= smbcli_pull_nttime(req
->in
.body
, 0x08);
226 io
->out
.access_time
= smbcli_pull_nttime(req
->in
.body
, 0x10);
227 io
->out
.write_time
= smbcli_pull_nttime(req
->in
.body
, 0x18);
228 io
->out
.change_time
= smbcli_pull_nttime(req
->in
.body
, 0x20);
229 io
->out
.alloc_size
= BVAL(req
->in
.body
, 0x28);
230 io
->out
.size
= BVAL(req
->in
.body
, 0x30);
231 io
->out
.file_attr
= IVAL(req
->in
.body
, 0x38);
232 io
->out
.reserved2
= IVAL(req
->in
.body
, 0x3C);
233 smb2_pull_handle(req
->in
.body
+0x40, &io
->out
.file
.handle
);
234 status
= smb2_pull_o32s32_blob(&req
->in
, mem_ctx
, req
->in
.body
+0x50, &blob
);
235 if (!NT_STATUS_IS_OK(status
)) {
236 smb2_request_destroy(req
);
240 status
= smb2_create_blob_parse(mem_ctx
, blob
, &io
->out
.blobs
);
241 if (!NT_STATUS_IS_OK(status
)) {
242 smb2_request_destroy(req
);
246 /* pull out the parsed blobs */
247 for (i
=0;i
<io
->out
.blobs
.num_blobs
;i
++) {
248 if (strcmp(io
->out
.blobs
.blobs
[i
].tag
, SMB2_CREATE_TAG_MXAC
) == 0) {
249 /* TODO: this also contains a status field in
251 if (io
->out
.blobs
.blobs
[i
].data
.length
!= 8) {
252 smb2_request_destroy(req
);
253 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
255 io
->out
.maximal_access
= IVAL(io
->out
.blobs
.blobs
[i
].data
.data
, 4);
257 if (strcmp(io
->out
.blobs
.blobs
[i
].tag
, SMB2_CREATE_TAG_QFID
) == 0) {
258 if (io
->out
.blobs
.blobs
[i
].data
.length
!= 32) {
259 smb2_request_destroy(req
);
260 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
262 memcpy(io
->out
.on_disk_id
, io
->out
.blobs
.blobs
[i
].data
.data
, 32);
264 if (strcmp(io
->out
.blobs
.blobs
[i
].tag
, SMB2_CREATE_TAG_RQLS
) == 0) {
266 if (io
->out
.blobs
.blobs
[i
].data
.length
!= 32) {
267 smb2_request_destroy(req
);
268 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
271 data
= io
->out
.blobs
.blobs
[i
].data
.data
;
272 memcpy(&io
->out
.lease_response
.lease_key
, data
, 16);
273 io
->out
.lease_response
.lease_state
= IVAL(data
, 16);
274 io
->out
.lease_response
.lease_flags
= IVAL(data
, 20);
275 io
->out
.lease_response
.lease_duration
= BVAL(data
, 24);
279 data_blob_free(&blob
);
281 return smb2_request_destroy(req
);
287 NTSTATUS
smb2_create(struct smb2_tree
*tree
, TALLOC_CTX
*mem_ctx
, struct smb2_create
*io
)
289 struct smb2_request
*req
= smb2_create_send(tree
, io
);
290 return smb2_create_recv(req
, mem_ctx
, io
);