1 | #include "idl_types.h"
|
---|
2 |
|
---|
3 | /*
|
---|
4 | the base dcerpc packet definitions - not traditionally coded as IDL,
|
---|
5 | but given that pidl can handle it nicely it simplifies things a lot
|
---|
6 | to do it this way
|
---|
7 |
|
---|
8 | see http://www.opengroup.org/onlinepubs/9629399/chap12.htm for packet
|
---|
9 | layouts
|
---|
10 | */
|
---|
11 | import "misc.idl";
|
---|
12 |
|
---|
13 | interface dcerpc
|
---|
14 | {
|
---|
15 | typedef struct {
|
---|
16 | uint16 context_id;
|
---|
17 | uint8 num_transfer_syntaxes;
|
---|
18 | ndr_syntax_id abstract_syntax;
|
---|
19 | ndr_syntax_id transfer_syntaxes[num_transfer_syntaxes];
|
---|
20 | } dcerpc_ctx_list;
|
---|
21 |
|
---|
22 | typedef struct {
|
---|
23 | uint16 max_xmit_frag;
|
---|
24 | uint16 max_recv_frag;
|
---|
25 | uint32 assoc_group_id;
|
---|
26 | uint8 num_contexts;
|
---|
27 | dcerpc_ctx_list ctx_list[num_contexts];
|
---|
28 | [flag(NDR_ALIGN4)] DATA_BLOB _pad;
|
---|
29 | [flag(NDR_REMAINING)] DATA_BLOB auth_info;
|
---|
30 | } dcerpc_bind;
|
---|
31 |
|
---|
32 | const uint8 DCERPC_REQUEST_LENGTH = 24;
|
---|
33 |
|
---|
34 | typedef struct {
|
---|
35 | } dcerpc_empty;
|
---|
36 |
|
---|
37 | typedef [nodiscriminant] union {
|
---|
38 | [default] dcerpc_empty empty;
|
---|
39 | [case(LIBNDR_FLAG_OBJECT_PRESENT)] GUID object;
|
---|
40 | } dcerpc_object;
|
---|
41 |
|
---|
42 | typedef struct {
|
---|
43 | uint32 alloc_hint;
|
---|
44 | uint16 context_id;
|
---|
45 | uint16 opnum;
|
---|
46 | [switch_is(ndr->flags & LIBNDR_FLAG_OBJECT_PRESENT)] dcerpc_object object;
|
---|
47 | [flag(NDR_ALIGN8)] DATA_BLOB _pad;
|
---|
48 | [flag(NDR_REMAINING)] DATA_BLOB stub_and_verifier;
|
---|
49 | } dcerpc_request;
|
---|
50 |
|
---|
51 | const int DCERPC_BIND_REASON_ASYNTAX = 1;
|
---|
52 | const int DCERPC_BIND_PROVIDER_REJECT = 2;
|
---|
53 | const int DECRPC_BIND_PROTOCOL_VERSION_NOT_SUPPORTED = 4;
|
---|
54 | const int DCERPC_BIND_REASON_INVALID_AUTH_TYPE = 8;
|
---|
55 |
|
---|
56 | typedef struct {
|
---|
57 | uint16 result;
|
---|
58 | uint16 reason;
|
---|
59 | ndr_syntax_id syntax;
|
---|
60 | } dcerpc_ack_ctx;
|
---|
61 |
|
---|
62 | typedef struct {
|
---|
63 | uint16 max_xmit_frag;
|
---|
64 | uint16 max_recv_frag;
|
---|
65 | uint32 assoc_group_id;
|
---|
66 | [value(strlen(secondary_address)+1)] uint16 secondary_address_size;
|
---|
67 | [charset(DOS)] uint8 secondary_address[secondary_address_size];
|
---|
68 | [flag(NDR_ALIGN4)] DATA_BLOB _pad1;
|
---|
69 | uint8 num_results;
|
---|
70 | dcerpc_ack_ctx ctx_list[num_results];
|
---|
71 | [flag(NDR_REMAINING)] DATA_BLOB auth_info;
|
---|
72 | } dcerpc_bind_ack;
|
---|
73 |
|
---|
74 | typedef struct {
|
---|
75 | uint32 num_versions;
|
---|
76 | uint32 versions[num_versions];
|
---|
77 | } dcerpc_bind_nak_versions;
|
---|
78 |
|
---|
79 | typedef [nodiscriminant] union {
|
---|
80 | [case(DECRPC_BIND_PROTOCOL_VERSION_NOT_SUPPORTED)] dcerpc_bind_nak_versions v;
|
---|
81 | [default] ;
|
---|
82 | } dcerpc_bind_nak_versions_ctr;
|
---|
83 |
|
---|
84 | typedef struct {
|
---|
85 | uint16 reject_reason;
|
---|
86 | [switch_is(reject_reason)] dcerpc_bind_nak_versions_ctr versions;
|
---|
87 | } dcerpc_bind_nak;
|
---|
88 |
|
---|
89 | const uint8 DCERPC_RESPONSE_LENGTH = 24;
|
---|
90 |
|
---|
91 | typedef struct {
|
---|
92 | uint32 alloc_hint;
|
---|
93 | uint16 context_id;
|
---|
94 | uint8 cancel_count;
|
---|
95 | [flag(NDR_ALIGN8)] DATA_BLOB _pad;
|
---|
96 | [flag(NDR_REMAINING)] DATA_BLOB stub_and_verifier;
|
---|
97 | } dcerpc_response;
|
---|
98 |
|
---|
99 |
|
---|
100 | const int DCERPC_FAULT_OP_RNG_ERROR = 0x1c010002;
|
---|
101 | const int DCERPC_FAULT_UNK_IF = 0x1c010003;
|
---|
102 | const int DCERPC_FAULT_NDR = 0x000006f7;
|
---|
103 | const int DCERPC_FAULT_INVALID_TAG = 0x1c000006;
|
---|
104 | const int DCERPC_FAULT_CONTEXT_MISMATCH = 0x1c00001a;
|
---|
105 | const int DCERPC_FAULT_OTHER = 0x00000001;
|
---|
106 | const int DCERPC_FAULT_ACCESS_DENIED = 0x00000005;
|
---|
107 | const int DCERPC_FAULT_CANT_PERFORM = 0x000006d8;
|
---|
108 | const int DCERPC_FAULT_SEC_PKG_ERROR = 0x00000721;
|
---|
109 |
|
---|
110 | /* we return this fault when we haven't yet run the test
|
---|
111 | to see what fault w2k3 returns in this case */
|
---|
112 | const int DCERPC_FAULT_TODO = 0x00000042;
|
---|
113 |
|
---|
114 | typedef struct {
|
---|
115 | uint32 alloc_hint;
|
---|
116 | uint16 context_id;
|
---|
117 | uint8 cancel_count;
|
---|
118 | uint32 status;
|
---|
119 | [flag(NDR_REMAINING)] DATA_BLOB _pad;
|
---|
120 | } dcerpc_fault;
|
---|
121 |
|
---|
122 | /* the auth types we know about */
|
---|
123 | typedef [enum8bit] enum {
|
---|
124 | DCERPC_AUTH_TYPE_NONE = 0,
|
---|
125 | /* this seems to be not krb5! */
|
---|
126 | DCERPC_AUTH_TYPE_KRB5_1 = 1,
|
---|
127 | DCERPC_AUTH_TYPE_SPNEGO = 9,
|
---|
128 | DCERPC_AUTH_TYPE_NTLMSSP = 10,
|
---|
129 | DCERPC_AUTH_TYPE_KRB5 = 16,
|
---|
130 | DCERPC_AUTH_TYPE_DPA = 17,
|
---|
131 | DCERPC_AUTH_TYPE_MSN = 18,
|
---|
132 | DCERPC_AUTH_TYPE_DIGEST = 21,
|
---|
133 | DCERPC_AUTH_TYPE_SCHANNEL = 68,
|
---|
134 | DCERPC_AUTH_TYPE_MSMQ = 100
|
---|
135 | } dcerpc_AuthType;
|
---|
136 |
|
---|
137 | typedef [enum8bit] enum {
|
---|
138 | DCERPC_AUTH_LEVEL_NONE = 1,
|
---|
139 | DCERPC_AUTH_LEVEL_CONNECT = 2,
|
---|
140 | DCERPC_AUTH_LEVEL_CALL = 3,
|
---|
141 | DCERPC_AUTH_LEVEL_PACKET = 4,
|
---|
142 | DCERPC_AUTH_LEVEL_INTEGRITY = 5,
|
---|
143 | DCERPC_AUTH_LEVEL_PRIVACY = 6
|
---|
144 | } dcerpc_AuthLevel;
|
---|
145 |
|
---|
146 | const uint8 DCERPC_AUTH_LEVEL_DEFAULT = DCERPC_AUTH_LEVEL_CONNECT;
|
---|
147 |
|
---|
148 | typedef [public] struct {
|
---|
149 | dcerpc_AuthType auth_type;
|
---|
150 | dcerpc_AuthLevel auth_level;
|
---|
151 | uint8 auth_pad_length;
|
---|
152 | uint8 auth_reserved;
|
---|
153 | uint32 auth_context_id;
|
---|
154 | [flag(NDR_REMAINING)] DATA_BLOB credentials;
|
---|
155 | } dcerpc_auth;
|
---|
156 |
|
---|
157 | const uint8 DCERPC_AUTH_TRAILER_LENGTH = 8;
|
---|
158 |
|
---|
159 | typedef [public] struct {
|
---|
160 | uint32 _pad;
|
---|
161 | [flag(NDR_REMAINING)] DATA_BLOB auth_info;
|
---|
162 | } dcerpc_auth3;
|
---|
163 |
|
---|
164 | typedef [public] struct {
|
---|
165 | uint32 _pad;
|
---|
166 | [flag(NDR_REMAINING)] DATA_BLOB auth_info;
|
---|
167 | } dcerpc_orphaned;
|
---|
168 |
|
---|
169 | typedef [public] struct {
|
---|
170 | uint32 _pad;
|
---|
171 | [flag(NDR_REMAINING)] DATA_BLOB auth_info;
|
---|
172 | } dcerpc_co_cancel;
|
---|
173 |
|
---|
174 | typedef [public] struct {
|
---|
175 | uint32 version;
|
---|
176 | uint32 id;
|
---|
177 | } dcerpc_cl_cancel;
|
---|
178 |
|
---|
179 | typedef [public] struct {
|
---|
180 | uint32 version;
|
---|
181 | uint32 id;
|
---|
182 | boolean32 server_is_accepting;
|
---|
183 | } dcerpc_cancel_ack;
|
---|
184 |
|
---|
185 | typedef [public] struct {
|
---|
186 | uint32 version;
|
---|
187 | uint8 _pad1;
|
---|
188 | uint16 window_size;
|
---|
189 | uint32 max_tdsu;
|
---|
190 | uint32 max_frag_size;
|
---|
191 | uint16 serial_no;
|
---|
192 | uint16 selack_size;
|
---|
193 | uint32 selack[selack_size];
|
---|
194 | } dcerpc_fack;
|
---|
195 |
|
---|
196 | typedef [public] struct {
|
---|
197 | } dcerpc_ack;
|
---|
198 |
|
---|
199 | typedef [public] struct {
|
---|
200 | } dcerpc_ping;
|
---|
201 |
|
---|
202 | typedef [public] struct {
|
---|
203 | } dcerpc_shutdown;
|
---|
204 |
|
---|
205 | typedef [public] struct {
|
---|
206 | } dcerpc_working;
|
---|
207 |
|
---|
208 | typedef [enum8bit] enum {
|
---|
209 | DCERPC_PKT_REQUEST = 0, /* Ordinary request. */
|
---|
210 | DCERPC_PKT_PING = 1, /* Connectionless is server alive ? */
|
---|
211 | DCERPC_PKT_RESPONSE = 2, /* Ordinary reply. */
|
---|
212 | DCERPC_PKT_FAULT = 3, /* Fault in processing of call. */
|
---|
213 | DCERPC_PKT_WORKING = 4, /* Connectionless reply to a ping when server busy. */
|
---|
214 | DCERPC_PKT_NOCALL = 5, /* Connectionless reply to a ping when server has lost part of clients call. */
|
---|
215 | DCERPC_PKT_REJECT = 6, /* Refuse a request with a code. */
|
---|
216 | DCERPC_PKT_ACK = 7, /* Connectionless client to server code. */
|
---|
217 | DCERPC_PKT_CL_CANCEL = 8, /* Connectionless cancel. */
|
---|
218 | DCERPC_PKT_FACK = 9, /* Connectionless fragment ack. Both client and server send. */
|
---|
219 | DCERPC_PKT_CANCEL_ACK = 10, /* Server ACK to client cancel request. */
|
---|
220 | DCERPC_PKT_BIND = 11, /* Bind to interface. */
|
---|
221 | DCERPC_PKT_BIND_ACK = 12, /* Server ack of bind. */
|
---|
222 | DCERPC_PKT_BIND_NAK = 13, /* Server nack of bind. */
|
---|
223 | DCERPC_PKT_ALTER = 14, /* Alter auth. */
|
---|
224 | DCERPC_PKT_ALTER_RESP = 15, /* Reply to alter auth. */
|
---|
225 | DCERPC_PKT_AUTH3 = 16, /* not the real name! this is undocumented! */
|
---|
226 | DCERPC_PKT_SHUTDOWN = 17, /* Server to client request to shutdown. */
|
---|
227 | DCERPC_PKT_CO_CANCEL = 18, /* Connection-oriented cancel request. */
|
---|
228 | DCERPC_PKT_ORPHANED = 19 /* Client telling server it's aborting a partially sent request or telling server to stop sending replies. */
|
---|
229 | } dcerpc_pkt_type;
|
---|
230 |
|
---|
231 | typedef [nodiscriminant] union {
|
---|
232 | [case(DCERPC_PKT_REQUEST)] dcerpc_request request;
|
---|
233 | [case(DCERPC_PKT_PING)] dcerpc_ping ping;
|
---|
234 | [case(DCERPC_PKT_RESPONSE)] dcerpc_response response;
|
---|
235 | [case(DCERPC_PKT_FAULT)] dcerpc_fault fault;
|
---|
236 | [case(DCERPC_PKT_WORKING)] dcerpc_working working;
|
---|
237 | [case(DCERPC_PKT_NOCALL)] dcerpc_fack nocall;
|
---|
238 | [case(DCERPC_PKT_REJECT)] dcerpc_fault reject;
|
---|
239 | [case(DCERPC_PKT_ACK)] dcerpc_ack ack;
|
---|
240 | [case(DCERPC_PKT_CL_CANCEL)] dcerpc_cl_cancel cl_cancel;
|
---|
241 | [case(DCERPC_PKT_FACK)] dcerpc_fack fack;
|
---|
242 | [case(DCERPC_PKT_CANCEL_ACK)] dcerpc_cancel_ack cancel_ack;
|
---|
243 | [case(DCERPC_PKT_BIND)] dcerpc_bind bind;
|
---|
244 | [case(DCERPC_PKT_BIND_ACK)] dcerpc_bind_ack bind_ack;
|
---|
245 | [case(DCERPC_PKT_BIND_NAK)] dcerpc_bind_nak bind_nak;
|
---|
246 | [case(DCERPC_PKT_ALTER)] dcerpc_bind alter;
|
---|
247 | [case(DCERPC_PKT_ALTER_RESP)] dcerpc_bind_ack alter_resp;
|
---|
248 | [case(DCERPC_PKT_SHUTDOWN)] dcerpc_shutdown shutdown;
|
---|
249 | [case(DCERPC_PKT_CO_CANCEL)] dcerpc_co_cancel co_cancel;
|
---|
250 | [case(DCERPC_PKT_ORPHANED)] dcerpc_orphaned orphaned;
|
---|
251 | [case(DCERPC_PKT_AUTH3)] dcerpc_auth3 auth3;
|
---|
252 | } dcerpc_payload;
|
---|
253 |
|
---|
254 | /* pfc_flags values */
|
---|
255 | const uint8 DCERPC_PFC_FLAG_FIRST = 0x01; /* First fragment */
|
---|
256 | const uint8 DCERPC_PFC_FLAG_LAST = 0x02; /* Last fragment */
|
---|
257 | const uint8 DCERPC_PFC_FLAG_PENDING_CANCEL = 0x04; /* Cancel was pending at sender */
|
---|
258 | const uint8 DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGN = DCERPC_PFC_FLAG_PENDING_CANCEL; /* depends on the pdu type */
|
---|
259 | const uint8 DCERPC_PFC_FLAG_CONC_MPX = 0x10; /* supports concurrent multiplexing of a single connection. */
|
---|
260 | const uint8 DCERPC_PFC_FLAG_DID_NOT_EXECUTE = 0x20; /* on a fault it means the server hasn't done anything */
|
---|
261 | const uint8 DCERPC_PFC_FLAG_MAYBE = 0x40; /* `maybe' call semantics requested */
|
---|
262 | const uint8 DCERPC_PFC_FLAG_OBJECT_UUID = 0x80; /* on valid guid is in the optional object field */
|
---|
263 |
|
---|
264 | /* these offsets are needed by the signing code */
|
---|
265 | const uint8 DCERPC_PFC_OFFSET = 3;
|
---|
266 | const uint8 DCERPC_DREP_OFFSET = 4;
|
---|
267 | const uint8 DCERPC_FRAG_LEN_OFFSET = 8;
|
---|
268 | const uint8 DCERPC_AUTH_LEN_OFFSET = 10;
|
---|
269 |
|
---|
270 | /* little-endian flag */
|
---|
271 | const uint8 DCERPC_DREP_LE = 0x10;
|
---|
272 |
|
---|
273 | typedef [public] struct {
|
---|
274 | uint8 rpc_vers; /* RPC version */
|
---|
275 | uint8 rpc_vers_minor; /* Minor version */
|
---|
276 | dcerpc_pkt_type ptype; /* Packet type */
|
---|
277 | uint8 pfc_flags; /* Fragmentation flags */
|
---|
278 | uint8 drep[4]; /* NDR data representation */
|
---|
279 | uint16 frag_length; /* Total length of fragment */
|
---|
280 | uint16 auth_length; /* authenticator length */
|
---|
281 | uint32 call_id; /* Call identifier */
|
---|
282 | [switch_is(ptype)] dcerpc_payload u;
|
---|
283 | } ncacn_packet;
|
---|
284 |
|
---|
285 | typedef [public] struct {
|
---|
286 | uint8 rpc_vers; /* RPC version (4) */
|
---|
287 | uint8 ptype;
|
---|
288 | uint8 pfc_flags;
|
---|
289 | uint8 ncadg_flags;
|
---|
290 | uint8 drep[3];
|
---|
291 | uint8 serial_high;
|
---|
292 | GUID object;
|
---|
293 | GUID iface;
|
---|
294 | GUID activity;
|
---|
295 | uint32 server_boot; /* Server boot time */
|
---|
296 | uint32 iface_version;
|
---|
297 | uint32 seq_num;
|
---|
298 | uint16 opnum;
|
---|
299 | uint16 ihint;
|
---|
300 | uint16 ahint;
|
---|
301 | uint16 len;
|
---|
302 | uint16 fragnum;
|
---|
303 | uint8 auth_proto;
|
---|
304 | uint8 serial_low;
|
---|
305 | [switch_is(ptype)] dcerpc_payload u;
|
---|
306 | } ncadg_packet;
|
---|
307 | }
|
---|