source: vendor/current/source3/smbd/smb2_getinfo.c

Last change on this file was 988, checked in by Silvan Scherrer, 9 years ago

Samba Server: update vendor to version 4.4.3
File size: 15.9 KB
Line 
1/*
2 Unix SMB/CIFS implementation.
3 Core SMB2 server
4
5 Copyright (C) Stefan Metzmacher 2009
6 Copyright (C) Jeremy Allison 2010
7
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
12
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
17
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
20*/
21
22#include "includes.h"
23#include "smbd/smbd.h"
24#include "smbd/globals.h"
25#include "../libcli/smb/smb_common.h"
26#include "trans2.h"
27#include "../lib/util/tevent_ntstatus.h"
28
29static struct tevent_req *smbd_smb2_getinfo_send(TALLOC_CTX *mem_ctx,
30 struct tevent_context *ev,
31 struct smbd_smb2_request *smb2req,
32 struct files_struct *in_fsp,
33 uint8_t in_info_type,
34 uint8_t in_file_info_class,
35 uint32_t in_output_buffer_length,
36 DATA_BLOB in_input_buffer,
37 uint32_t in_additional_information,
38 uint32_t in_flags);
39static NTSTATUS smbd_smb2_getinfo_recv(struct tevent_req *req,
40 TALLOC_CTX *mem_ctx,
41 DATA_BLOB *out_output_buffer,
42 NTSTATUS *p_call_status);
43
44static void smbd_smb2_request_getinfo_done(struct tevent_req *subreq);
45NTSTATUS smbd_smb2_request_process_getinfo(struct smbd_smb2_request *req)
46{
47 struct smbXsrv_connection *xconn = req->xconn;
48 NTSTATUS status;
49 const uint8_t *inbody;
50 uint8_t in_info_type;
51 uint8_t in_file_info_class;
52 uint32_t in_output_buffer_length;
53 uint16_t in_input_buffer_offset;
54 uint32_t in_input_buffer_length;
55 DATA_BLOB in_input_buffer;
56 uint32_t in_additional_information;
57 uint32_t in_flags;
58 uint64_t in_file_id_persistent;
59 uint64_t in_file_id_volatile;
60 struct files_struct *in_fsp;
61 struct tevent_req *subreq;
62
63 status = smbd_smb2_request_verify_sizes(req, 0x29);
64 if (!NT_STATUS_IS_OK(status)) {
65 return smbd_smb2_request_error(req, status);
66 }
67 inbody = SMBD_SMB2_IN_BODY_PTR(req);
68
69 in_info_type = CVAL(inbody, 0x02);
70 in_file_info_class = CVAL(inbody, 0x03);
71 in_output_buffer_length = IVAL(inbody, 0x04);
72 in_input_buffer_offset = SVAL(inbody, 0x08);
73 /* 0x0A 2 bytes reserved */
74 in_input_buffer_length = IVAL(inbody, 0x0C);
75 in_additional_information = IVAL(inbody, 0x10);
76 in_flags = IVAL(inbody, 0x14);
77 in_file_id_persistent = BVAL(inbody, 0x18);
78 in_file_id_volatile = BVAL(inbody, 0x20);
79
80 if (in_input_buffer_offset == 0 && in_input_buffer_length == 0) {
81 /* This is ok */
82 } else if (in_input_buffer_offset !=
83 (SMB2_HDR_BODY + SMBD_SMB2_IN_BODY_LEN(req))) {
84 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
85 }
86
87 if (in_input_buffer_length > SMBD_SMB2_IN_DYN_LEN(req)) {
88 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
89 }
90
91 in_input_buffer.data = SMBD_SMB2_IN_DYN_PTR(req);
92 in_input_buffer.length = in_input_buffer_length;
93
94 if (in_input_buffer.length > xconn->smb2.server.max_trans) {
95 DEBUG(2,("smbd_smb2_request_process_getinfo: "
96 "client ignored max trans: %s: 0x%08X: 0x%08X\n",
97 __location__, (unsigned)in_input_buffer.length,
98 (unsigned)xconn->smb2.server.max_trans));
99 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
100 }
101 if (in_output_buffer_length > xconn->smb2.server.max_trans) {
102 DEBUG(2,("smbd_smb2_request_process_getinfo: "
103 "client ignored max trans: %s: 0x%08X: 0x%08X\n",
104 __location__, in_output_buffer_length,
105 xconn->smb2.server.max_trans));
106 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
107 }
108
109 status = smbd_smb2_request_verify_creditcharge(req,
110 MAX(in_input_buffer.length,in_output_buffer_length));
111 if (!NT_STATUS_IS_OK(status)) {
112 return smbd_smb2_request_error(req, status);
113 }
114
115 in_fsp = file_fsp_smb2(req, in_file_id_persistent, in_file_id_volatile);
116 if (in_fsp == NULL) {
117 return smbd_smb2_request_error(req, NT_STATUS_FILE_CLOSED);
118 }
119
120 subreq = smbd_smb2_getinfo_send(req, req->sconn->ev_ctx,
121 req, in_fsp,
122 in_info_type,
123 in_file_info_class,
124 in_output_buffer_length,
125 in_input_buffer,
126 in_additional_information,
127 in_flags);
128 if (subreq == NULL) {
129 return smbd_smb2_request_error(req, NT_STATUS_NO_MEMORY);
130 }
131 tevent_req_set_callback(subreq, smbd_smb2_request_getinfo_done, req);
132
133 return smbd_smb2_request_pending_queue(req, subreq, 500);
134}
135
136static void smbd_smb2_request_getinfo_done(struct tevent_req *subreq)
137{
138 struct smbd_smb2_request *req = tevent_req_callback_data(subreq,
139 struct smbd_smb2_request);
140 DATA_BLOB outbody;
141 DATA_BLOB outdyn;
142 uint16_t out_output_buffer_offset;
143 DATA_BLOB out_output_buffer = data_blob_null;
144 NTSTATUS status;
145 NTSTATUS call_status = NT_STATUS_OK;
146 NTSTATUS error; /* transport error */
147
148 status = smbd_smb2_getinfo_recv(subreq,
149 req,
150 &out_output_buffer,
151 &call_status);
152 TALLOC_FREE(subreq);
153 if (!NT_STATUS_IS_OK(status)) {
154 error = smbd_smb2_request_error(req, status);
155 if (!NT_STATUS_IS_OK(error)) {
156 smbd_server_connection_terminate(req->xconn,
157 nt_errstr(error));
158 return;
159 }
160 return;
161 }
162
163 /* some GetInfo responses set STATUS_BUFFER_OVERFLOW and return partial,
164 but valid data */
165 if (!(NT_STATUS_IS_OK(call_status) ||
166 NT_STATUS_EQUAL(call_status, STATUS_BUFFER_OVERFLOW))) {
167 /* Return a specific error with data. */
168 error = smbd_smb2_request_error_ex(req,
169 call_status,
170 &out_output_buffer,
171 __location__);
172 if (!NT_STATUS_IS_OK(error)) {
173 smbd_server_connection_terminate(req->xconn,
174 nt_errstr(error));
175 return;
176 }
177 return;
178 }
179
180 out_output_buffer_offset = SMB2_HDR_BODY + 0x08;
181
182 outbody = smbd_smb2_generate_outbody(req, 0x08);
183 if (outbody.data == NULL) {
184 error = smbd_smb2_request_error(req, NT_STATUS_NO_MEMORY);
185 if (!NT_STATUS_IS_OK(error)) {
186 smbd_server_connection_terminate(req->xconn,
187 nt_errstr(error));
188 return;
189 }
190 return;
191 }
192
193 SSVAL(outbody.data, 0x00, 0x08 + 1); /* struct size */
194 SSVAL(outbody.data, 0x02,
195 out_output_buffer_offset); /* output buffer offset */
196 SIVAL(outbody.data, 0x04,
197 out_output_buffer.length); /* output buffer length */
198
199 outdyn = out_output_buffer;
200
201 error = smbd_smb2_request_done_ex(req, call_status, outbody, &outdyn, __location__);
202 if (!NT_STATUS_IS_OK(error)) {
203 smbd_server_connection_terminate(req->xconn,
204 nt_errstr(error));
205 return;
206 }
207}
208
209struct smbd_smb2_getinfo_state {
210 struct smbd_smb2_request *smb2req;
211 NTSTATUS status;
212 DATA_BLOB out_output_buffer;
213};
214
215static void smb2_ipc_getinfo(struct tevent_req *req,
216 struct smbd_smb2_getinfo_state *state,
217 struct tevent_context *ev,
218 uint8_t in_info_type,
219 uint8_t in_file_info_class)
220{
221 /* We want to reply to SMB2_GETINFO_FILE
222 with a class of SMB2_FILE_STANDARD_INFO as
223 otherwise a Win7 client issues this request
224 twice (2xroundtrips) if we return NOT_SUPPORTED.
225 NB. We do the same for SMB1 in call_trans2qpipeinfo() */
226
227 if (in_info_type == 0x01 && /* SMB2_GETINFO_FILE */
228 in_file_info_class == 0x05) { /* SMB2_FILE_STANDARD_INFO */
229 state->out_output_buffer = data_blob_talloc(state,
230 NULL, 24);
231 if (tevent_req_nomem(state->out_output_buffer.data, req)) {
232 return;
233 }
234
235 memset(state->out_output_buffer.data,0,24);
236 SOFF_T(state->out_output_buffer.data,0,4096LL);
237 SIVAL(state->out_output_buffer.data,16,1);
238 SIVAL(state->out_output_buffer.data,20,1);
239 tevent_req_done(req);
240 } else {
241 tevent_req_nterror(req, NT_STATUS_NOT_SUPPORTED);
242 }
243}
244
245static struct tevent_req *smbd_smb2_getinfo_send(TALLOC_CTX *mem_ctx,
246 struct tevent_context *ev,
247 struct smbd_smb2_request *smb2req,
248 struct files_struct *fsp,
249 uint8_t in_info_type,
250 uint8_t in_file_info_class,
251 uint32_t in_output_buffer_length,
252 DATA_BLOB in_input_buffer,
253 uint32_t in_additional_information,
254 uint32_t in_flags)
255{
256 struct tevent_req *req;
257 struct smbd_smb2_getinfo_state *state;
258 struct smb_request *smbreq;
259 connection_struct *conn = smb2req->tcon->compat;
260 NTSTATUS status;
261
262 req = tevent_req_create(mem_ctx, &state,
263 struct smbd_smb2_getinfo_state);
264 if (req == NULL) {
265 return NULL;
266 }
267 state->smb2req = smb2req;
268 state->status = NT_STATUS_OK;
269 state->out_output_buffer = data_blob_null;
270
271 DEBUG(10,("smbd_smb2_getinfo_send: %s - %s\n",
272 fsp_str_dbg(fsp), fsp_fnum_dbg(fsp)));
273
274 smbreq = smbd_smb2_fake_smb_request(smb2req);
275 if (tevent_req_nomem(smbreq, req)) {
276 return tevent_req_post(req, ev);
277 }
278
279 if (IS_IPC(conn)) {
280 smb2_ipc_getinfo(req, state, ev,
281 in_info_type, in_file_info_class);
282 return tevent_req_post(req, ev);
283 }
284
285 switch (in_info_type) {
286 case SMB2_GETINFO_FILE:
287 {
288 uint16_t file_info_level;
289 char *data = NULL;
290 unsigned int data_size = 0;
291 bool delete_pending = false;
292 struct timespec write_time_ts;
293 struct file_id fileid;
294 struct ea_list *ea_list = NULL;
295 int lock_data_count = 0;
296 char *lock_data = NULL;
297 size_t fixed_portion;
298
299 ZERO_STRUCT(write_time_ts);
300
301 switch (in_file_info_class) {
302 case 0x0F:/* RAW_FILEINFO_SMB2_ALL_EAS */
303 file_info_level = 0xFF00 | in_file_info_class;
304 break;
305
306 case 0x12:/* RAW_FILEINFO_SMB2_ALL_INFORMATION */
307 file_info_level = 0xFF00 | in_file_info_class;
308 break;
309
310 default:
311 /* the levels directly map to the passthru levels */
312 file_info_level = in_file_info_class + 1000;
313 break;
314 }
315
316 if (fsp->fake_file_handle) {
317 /*
318 * This is actually for the QUOTA_FAKE_FILE --metze
319 */
320
321 /* We know this name is ok, it's already passed the checks. */
322
323 } else if (fsp->fh->fd == -1) {
324 /*
325 * This is actually a QFILEINFO on a directory
326 * handle (returned from an NT SMB). NT5.0 seems
327 * to do this call. JRA.
328 */
329
330 if (INFO_LEVEL_IS_UNIX(file_info_level)) {
331 /* Always do lstat for UNIX calls. */
332 if (SMB_VFS_LSTAT(conn, fsp->fsp_name)) {
333 DEBUG(3,("smbd_smb2_getinfo_send: "
334 "SMB_VFS_LSTAT of %s failed "
335 "(%s)\n", fsp_str_dbg(fsp),
336 strerror(errno)));
337 status = map_nt_error_from_unix(errno);
338 tevent_req_nterror(req, status);
339 return tevent_req_post(req, ev);
340 }
341 } else if (SMB_VFS_STAT(conn, fsp->fsp_name)) {
342 DEBUG(3,("smbd_smb2_getinfo_send: "
343 "SMB_VFS_STAT of %s failed (%s)\n",
344 fsp_str_dbg(fsp),
345 strerror(errno)));
346 status = map_nt_error_from_unix(errno);
347 tevent_req_nterror(req, status);
348 return tevent_req_post(req, ev);
349 }
350
351 fileid = vfs_file_id_from_sbuf(conn,
352 &fsp->fsp_name->st);
353 get_file_infos(fileid, fsp->name_hash,
354 &delete_pending, &write_time_ts);
355 } else {
356 /*
357 * Original code - this is an open file.
358 */
359
360 if (SMB_VFS_FSTAT(fsp, &fsp->fsp_name->st) != 0) {
361 DEBUG(3, ("smbd_smb2_getinfo_send: "
362 "fstat of %s failed (%s)\n",
363 fsp_fnum_dbg(fsp), strerror(errno)));
364 status = map_nt_error_from_unix(errno);
365 tevent_req_nterror(req, status);
366 return tevent_req_post(req, ev);
367 }
368 fileid = vfs_file_id_from_sbuf(conn,
369 &fsp->fsp_name->st);
370 get_file_infos(fileid, fsp->name_hash,
371 &delete_pending, &write_time_ts);
372 }
373
374 status = smbd_do_qfilepathinfo(conn, state,
375 file_info_level,
376 fsp,
377 fsp->fsp_name,
378 delete_pending,
379 write_time_ts,
380 ea_list,
381 lock_data_count,
382 lock_data,
383 STR_UNICODE,
384 in_output_buffer_length,
385 &fixed_portion,
386 &data,
387 &data_size);
388 if (!NT_STATUS_IS_OK(status)) {
389 SAFE_FREE(data);
390 if (NT_STATUS_EQUAL(status, NT_STATUS_INVALID_LEVEL)) {
391 status = NT_STATUS_INVALID_INFO_CLASS;
392 }
393 tevent_req_nterror(req, status);
394 return tevent_req_post(req, ev);
395 }
396 if (in_output_buffer_length < fixed_portion) {
397 SAFE_FREE(data);
398 tevent_req_nterror(
399 req, NT_STATUS_INFO_LENGTH_MISMATCH);
400 return tevent_req_post(req, ev);
401 }
402 if (data_size > 0) {
403 state->out_output_buffer = data_blob_talloc(state,
404 data,
405 data_size);
406 SAFE_FREE(data);
407 if (tevent_req_nomem(state->out_output_buffer.data, req)) {
408 return tevent_req_post(req, ev);
409 }
410 if (data_size > in_output_buffer_length) {
411 state->out_output_buffer.length =
412 in_output_buffer_length;
413 status = STATUS_BUFFER_OVERFLOW;
414 }
415 }
416 SAFE_FREE(data);
417 break;
418 }
419
420 case SMB2_GETINFO_FS:
421 {
422 uint16_t file_info_level;
423 char *data = NULL;
424 int data_size = 0;
425 size_t fixed_portion;
426
427 /* the levels directly map to the passthru levels */
428 file_info_level = in_file_info_class + 1000;
429
430 status = smbd_do_qfsinfo(smb2req->xconn, conn, state,
431 file_info_level,
432 STR_UNICODE,
433 in_output_buffer_length,
434 &fixed_portion,
435 fsp->fsp_name,
436 &data,
437 &data_size);
438 /* some responses set STATUS_BUFFER_OVERFLOW and return
439 partial, but valid data */
440 if (!(NT_STATUS_IS_OK(status) ||
441 NT_STATUS_EQUAL(status, STATUS_BUFFER_OVERFLOW))) {
442 SAFE_FREE(data);
443 if (NT_STATUS_EQUAL(status, NT_STATUS_INVALID_LEVEL)) {
444 status = NT_STATUS_INVALID_INFO_CLASS;
445 }
446 tevent_req_nterror(req, status);
447 return tevent_req_post(req, ev);
448 }
449 if (in_output_buffer_length < fixed_portion) {
450 SAFE_FREE(data);
451 tevent_req_nterror(
452 req, NT_STATUS_INFO_LENGTH_MISMATCH);
453 return tevent_req_post(req, ev);
454 }
455 if (data_size > 0) {
456 state->out_output_buffer = data_blob_talloc(state,
457 data,
458 data_size);
459 SAFE_FREE(data);
460 if (tevent_req_nomem(state->out_output_buffer.data, req)) {
461 return tevent_req_post(req, ev);
462 }
463 if (data_size > in_output_buffer_length) {
464 state->out_output_buffer.length =
465 in_output_buffer_length;
466 status = STATUS_BUFFER_OVERFLOW;
467 }
468 }
469 SAFE_FREE(data);
470 break;
471 }
472
473 case SMB2_GETINFO_SECURITY:
474 {
475 uint8_t *p_marshalled_sd = NULL;
476 size_t sd_size = 0;
477
478 status = smbd_do_query_security_desc(conn,
479 state,
480 fsp,
481 /* Security info wanted. */
482 in_additional_information &
483 SMB_SUPPORTED_SECINFO_FLAGS,
484 in_output_buffer_length,
485 &p_marshalled_sd,
486 &sd_size);
487
488 if (NT_STATUS_EQUAL(status, NT_STATUS_BUFFER_TOO_SMALL)) {
489 /* Return needed size. */
490 state->out_output_buffer = data_blob_talloc(state,
491 NULL,
492 4);
493 if (tevent_req_nomem(state->out_output_buffer.data, req)) {
494 return tevent_req_post(req, ev);
495 }
496 SIVAL(state->out_output_buffer.data,0,(uint32_t)sd_size);
497 state->status = NT_STATUS_BUFFER_TOO_SMALL;
498 break;
499 }
500 if (!NT_STATUS_IS_OK(status)) {
501 DEBUG(10,("smbd_smb2_getinfo_send: "
502 "smbd_do_query_security_desc of %s failed "
503 "(%s)\n", fsp_str_dbg(fsp),
504 nt_errstr(status)));
505 tevent_req_nterror(req, status);
506 return tevent_req_post(req, ev);
507 }
508
509 if (sd_size > 0) {
510 state->out_output_buffer = data_blob_talloc(state,
511 p_marshalled_sd,
512 sd_size);
513 if (tevent_req_nomem(state->out_output_buffer.data, req)) {
514 return tevent_req_post(req, ev);
515 }
516 }
517 break;
518 }
519
520 case SMB2_GETINFO_QUOTA:
521 tevent_req_nterror(req, NT_STATUS_NOT_SUPPORTED);
522 return tevent_req_post(req, ev);
523
524 default:
525 DEBUG(10,("smbd_smb2_getinfo_send: "
526 "unknown in_info_type of %u "
527 " for file %s\n",
528 (unsigned int)in_info_type,
529 fsp_str_dbg(fsp) ));
530
531 tevent_req_nterror(req, NT_STATUS_INVALID_PARAMETER);
532 return tevent_req_post(req, ev);
533 }
534
535 state->status = status;
536 tevent_req_done(req);
537 return tevent_req_post(req, ev);
538}
539
540static NTSTATUS smbd_smb2_getinfo_recv(struct tevent_req *req,
541 TALLOC_CTX *mem_ctx,
542 DATA_BLOB *out_output_buffer,
543 NTSTATUS *pstatus)
544{
545 NTSTATUS status;
546 struct smbd_smb2_getinfo_state *state = tevent_req_data(req,
547 struct smbd_smb2_getinfo_state);
548
549 if (tevent_req_is_nterror(req, &status)) {
550 tevent_req_received(req);
551 return status;
552 }
553
554 *out_output_buffer = state->out_output_buffer;
555 talloc_steal(mem_ctx, out_output_buffer->data);
556 *pstatus = state->status;
557
558 tevent_req_received(req);
559 return NT_STATUS_OK;
560}
Note: See TracBrowser for help on using the repository browser.