2 Unix SMB/CIFS implementation.
3 SMB torture tester - scanning functions
4 Copyright (C) Andrew Tridgell 2001
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
26 /****************************************************************************
27 look for a partial hit
28 ****************************************************************************/
29 static void trans2_check_hit(const char *format, int op, int level, NTSTATUS status)
31 if (NT_STATUS_V(status) == NT_STATUS_V(NT_STATUS_INVALID_LEVEL) ||
32 NT_STATUS_V(status) == NT_STATUS_V(NT_STATUS_NOT_IMPLEMENTED) ||
33 NT_STATUS_V(status) == NT_STATUS_V(NT_STATUS_NOT_SUPPORTED) ||
34 NT_STATUS_V(status) == NT_STATUS_V(NT_STATUS_UNSUCCESSFUL) ||
35 NT_STATUS_V(status) == NT_STATUS_V(NT_STATUS_INVALID_INFO_CLASS)) {
39 printf("possible %s hit op=%3d level=%5d status=%s\n",
40 format, op, level, nt_errstr(status));
44 /****************************************************************************
45 check for existance of a trans2 call
46 ****************************************************************************/
47 static NTSTATUS try_trans2(struct cli_state *cli,
49 char *param, char *data,
50 int param_len, int data_len,
51 unsigned int *rparam_len, unsigned int *rdata_len)
54 char *rparam=NULL, *rdata=NULL;
56 if (!cli_send_trans(cli, SMBtrans2,
58 -1, 0, /* fid, flags */
59 &setup, 1, 0, /* setup, length, max */
60 param, param_len, 2, /* param, length, max */
61 data, data_len, cli->max_xmit /* data, length, max */
63 return cli_nt_error(cli);
66 cli_receive_trans(cli, SMBtrans2,
73 return cli_nt_error(cli);
77 static NTSTATUS try_trans2_len(struct cli_state *cli,
80 char *param, char *data,
81 int param_len, int *data_len,
82 unsigned int *rparam_len, unsigned int *rdata_len)
84 NTSTATUS ret=NT_STATUS_OK;
86 ret = try_trans2(cli, op, param, data, param_len,
87 sizeof(pstring), rparam_len, rdata_len);
89 printf("op=%d level=%d ret=%s\n", op, level, nt_errstr(ret));
91 if (!NT_STATUS_IS_OK(ret)) return ret;
94 while (*data_len < sizeof(pstring)) {
95 ret = try_trans2(cli, op, param, data, param_len,
96 *data_len, rparam_len, rdata_len);
97 if (NT_STATUS_IS_OK(ret)) break;
100 if (NT_STATUS_IS_OK(ret)) {
101 printf("found %s level=%d data_len=%d rparam_len=%d rdata_len=%d\n",
102 format, level, *data_len, *rparam_len, *rdata_len);
104 trans2_check_hit(format, op, level, ret);
109 /****************************************************************************
110 check for existance of a trans2 call
111 ****************************************************************************/
112 static BOOL scan_trans2(struct cli_state *cli, int op, int level,
113 int fnum, int dnum, const char *fname)
117 unsigned int rparam_len, rdata_len;
121 memset(data, 0, sizeof(data));
124 /* try with a info level only */
126 SSVAL(param, 0, level);
127 status = try_trans2_len(cli, "void", op, level, param, data, param_len, &data_len,
128 &rparam_len, &rdata_len);
129 if (NT_STATUS_IS_OK(status)) return True;
131 /* try with a file descriptor */
133 SSVAL(param, 0, fnum);
134 SSVAL(param, 2, level);
136 status = try_trans2_len(cli, "fnum", op, level, param, data, param_len, &data_len,
137 &rparam_len, &rdata_len);
138 if (NT_STATUS_IS_OK(status)) return True;
141 /* try with a notify style */
143 SSVAL(param, 0, dnum);
144 SSVAL(param, 2, dnum);
145 SSVAL(param, 4, level);
146 status = try_trans2_len(cli, "notify", op, level, param, data, param_len, &data_len,
147 &rparam_len, &rdata_len);
148 if (NT_STATUS_IS_OK(status)) return True;
150 /* try with a file name */
152 SSVAL(param, 0, level);
155 param_len += clistr_push(cli, ¶m[6], fname, -1, STR_TERMINATE);
157 status = try_trans2_len(cli, "fname", op, level, param, data, param_len, &data_len,
158 &rparam_len, &rdata_len);
159 if (NT_STATUS_IS_OK(status)) return True;
161 /* try with a new file name */
163 SSVAL(param, 0, level);
166 param_len += clistr_push(cli, ¶m[6], "\\newfile.dat", -1, STR_TERMINATE);
168 status = try_trans2_len(cli, "newfile", op, level, param, data, param_len, &data_len,
169 &rparam_len, &rdata_len);
170 cli_unlink(cli, "\\newfile.dat");
171 cli_rmdir(cli, "\\newfile.dat");
172 if (NT_STATUS_IS_OK(status)) return True;
175 cli_mkdir(cli, "\\testdir");
177 SSVAL(param, 0, level);
178 param_len += clistr_push(cli, ¶m[2], "\\testdir", -1, STR_TERMINATE);
180 status = try_trans2_len(cli, "dfs", op, level, param, data, param_len, &data_len,
181 &rparam_len, &rdata_len);
182 cli_rmdir(cli, "\\testdir");
183 if (NT_STATUS_IS_OK(status)) return True;
189 BOOL torture_trans2_scan(int dummy)
191 static struct cli_state *cli;
193 const char *fname = "\\scanner.dat";
196 printf("starting trans2 scan test\n");
198 if (!torture_open_connection(&cli, 0)) {
202 fnum = cli_open(cli, fname, O_RDWR | O_CREAT | O_TRUNC,
204 dnum = cli_open(cli, "\\", O_RDONLY, DENY_NONE);
206 for (op=OP_MIN; op<=OP_MAX; op++) {
207 printf("Scanning op=%d\n", op);
208 for (level = 0; level <= 50; level++) {
209 scan_trans2(cli, op, level, fnum, dnum, fname);
212 for (level = 0x100; level <= 0x130; level++) {
213 scan_trans2(cli, op, level, fnum, dnum, fname);
216 for (level = 1000; level < 1050; level++) {
217 scan_trans2(cli, op, level, fnum, dnum, fname);
221 torture_close_connection(cli);
223 printf("trans2 scan finished\n");
230 /****************************************************************************
231 look for a partial hit
232 ****************************************************************************/
233 static void nttrans_check_hit(const char *format, int op, int level, NTSTATUS status)
235 if (NT_STATUS_V(status) == NT_STATUS_V(NT_STATUS_INVALID_LEVEL) ||
236 NT_STATUS_V(status) == NT_STATUS_V(NT_STATUS_NOT_IMPLEMENTED) ||
237 NT_STATUS_V(status) == NT_STATUS_V(NT_STATUS_NOT_SUPPORTED) ||
238 NT_STATUS_V(status) == NT_STATUS_V(NT_STATUS_UNSUCCESSFUL) ||
239 NT_STATUS_V(status) == NT_STATUS_V(NT_STATUS_INVALID_INFO_CLASS)) {
243 printf("possible %s hit op=%3d level=%5d status=%s\n",
244 format, op, level, nt_errstr(status));
248 /****************************************************************************
249 check for existance of a nttrans call
250 ****************************************************************************/
251 static NTSTATUS try_nttrans(struct cli_state *cli,
253 char *param, char *data,
254 int param_len, int data_len,
255 unsigned int *rparam_len, unsigned int *rdata_len)
257 char *rparam=NULL, *rdata=NULL;
259 if (!cli_send_nt_trans(cli, op,
262 param, param_len, 2, /* param, length, max */
263 data, data_len, cli->max_xmit /* data, length, max */
265 return cli_nt_error(cli);
268 cli_receive_nt_trans(cli,
275 return cli_nt_error(cli);
279 static NTSTATUS try_nttrans_len(struct cli_state *cli,
282 char *param, char *data,
283 int param_len, int *data_len,
284 unsigned int *rparam_len, unsigned int *rdata_len)
286 NTSTATUS ret=NT_STATUS_OK;
288 ret = try_nttrans(cli, op, param, data, param_len,
289 sizeof(pstring), rparam_len, rdata_len);
291 printf("op=%d level=%d ret=%s\n", op, level, nt_errstr(ret));
293 if (!NT_STATUS_IS_OK(ret)) return ret;
296 while (*data_len < sizeof(pstring)) {
297 ret = try_nttrans(cli, op, param, data, param_len,
298 *data_len, rparam_len, rdata_len);
299 if (NT_STATUS_IS_OK(ret)) break;
302 if (NT_STATUS_IS_OK(ret)) {
303 printf("found %s level=%d data_len=%d rparam_len=%d rdata_len=%d\n",
304 format, level, *data_len, *rparam_len, *rdata_len);
306 nttrans_check_hit(format, op, level, ret);
311 /****************************************************************************
312 check for existance of a nttrans call
313 ****************************************************************************/
314 static BOOL scan_nttrans(struct cli_state *cli, int op, int level,
315 int fnum, int dnum, const char *fname)
319 unsigned int rparam_len, rdata_len;
323 memset(data, 0, sizeof(data));
326 /* try with a info level only */
328 SSVAL(param, 0, level);
329 status = try_nttrans_len(cli, "void", op, level, param, data, param_len, &data_len,
330 &rparam_len, &rdata_len);
331 if (NT_STATUS_IS_OK(status)) return True;
333 /* try with a file descriptor */
335 SSVAL(param, 0, fnum);
336 SSVAL(param, 2, level);
338 status = try_nttrans_len(cli, "fnum", op, level, param, data, param_len, &data_len,
339 &rparam_len, &rdata_len);
340 if (NT_STATUS_IS_OK(status)) return True;
343 /* try with a notify style */
345 SSVAL(param, 0, dnum);
346 SSVAL(param, 2, dnum);
347 SSVAL(param, 4, level);
348 status = try_nttrans_len(cli, "notify", op, level, param, data, param_len, &data_len,
349 &rparam_len, &rdata_len);
350 if (NT_STATUS_IS_OK(status)) return True;
352 /* try with a file name */
354 SSVAL(param, 0, level);
357 param_len += clistr_push(cli, ¶m[6], fname, -1, STR_TERMINATE);
359 status = try_nttrans_len(cli, "fname", op, level, param, data, param_len, &data_len,
360 &rparam_len, &rdata_len);
361 if (NT_STATUS_IS_OK(status)) return True;
363 /* try with a new file name */
365 SSVAL(param, 0, level);
368 param_len += clistr_push(cli, ¶m[6], "\\newfile.dat", -1, STR_TERMINATE);
370 status = try_nttrans_len(cli, "newfile", op, level, param, data, param_len, &data_len,
371 &rparam_len, &rdata_len);
372 cli_unlink(cli, "\\newfile.dat");
373 cli_rmdir(cli, "\\newfile.dat");
374 if (NT_STATUS_IS_OK(status)) return True;
377 cli_mkdir(cli, "\\testdir");
379 SSVAL(param, 0, level);
380 param_len += clistr_push(cli, ¶m[2], "\\testdir", -1, STR_TERMINATE);
382 status = try_nttrans_len(cli, "dfs", op, level, param, data, param_len, &data_len,
383 &rparam_len, &rdata_len);
384 cli_rmdir(cli, "\\testdir");
385 if (NT_STATUS_IS_OK(status)) return True;
391 BOOL torture_nttrans_scan(int dummy)
393 static struct cli_state *cli;
395 const char *fname = "\\scanner.dat";
398 printf("starting nttrans scan test\n");
400 if (!torture_open_connection(&cli, 0)) {
404 fnum = cli_open(cli, fname, O_RDWR | O_CREAT | O_TRUNC,
406 dnum = cli_open(cli, "\\", O_RDONLY, DENY_NONE);
408 for (op=OP_MIN; op<=OP_MAX; op++) {
409 printf("Scanning op=%d\n", op);
410 for (level = 0; level <= 50; level++) {
411 scan_nttrans(cli, op, level, fnum, dnum, fname);
414 for (level = 0x100; level <= 0x130; level++) {
415 scan_nttrans(cli, op, level, fnum, dnum, fname);
418 for (level = 1000; level < 1050; level++) {
419 scan_nttrans(cli, op, level, fnum, dnum, fname);
423 torture_close_connection(cli);
425 printf("nttrans scan finished\n");