librpc/ndr/ndr_dns.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    manipulate dns name structures
   5
   6    Copyright (C) 2010 Kai Blin  <kai@samba.org>
   7
   8    Heavily based on nbtname.c which is:
   9
  10    Copyright (C) Andrew Tridgell 2005
  11
  12    This program is free software; you can redistribute it and/or modify
  13    it under the terms of the GNU General Public License as published by
  14    the Free Software Foundation; either version 3 of the License, or
  15    (at your option) any later version.
  16
  17    This program is distributed in the hope that it will be useful,
  18    but WITHOUT ANY WARRANTY; without even the implied warranty of
  19    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  20    GNU General Public License for more details.
  21
  22    You should have received a copy of the GNU General Public License
  23    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  24 */
  25
  26 /*
  27   see rfc1002 for the detailed format of compressed names
  28 */
  29
  30 #include "includes.h"
  31 #include "librpc/gen_ndr/ndr_dns.h"
  32 #include "librpc/gen_ndr/ndr_misc.h"
  33 #include "librpc/gen_ndr/ndr_dnsp.h"
  34 #include "system/locale.h"
  35 #include "lib/util/util_net.h"
  36
  37 /* don't allow an unlimited number of name components */
  38 #define MAX_COMPONENTS 128
  39
  40 /**
  41   print a dns string
  42 */
  43 _PUBLIC_ void ndr_print_dns_string(struct ndr_print *ndr,
  44                                    const char *name,
  45                                    const char *s)
  46 {
  47         ndr_print_string(ndr, name, s);
  48 }
  49
  50 /*
  51   pull one component of a dns_string
  52 */
  53 static enum ndr_err_code ndr_pull_component(struct ndr_pull *ndr,
  54                                             uint8_t **component,
  55                                             uint32_t *offset,
  56                                             uint32_t *max_offset)
  57 {
  58         uint8_t len;
  59         unsigned int loops = 0;
  60         while (loops < 5) {
  61                 if (*offset >= ndr->data_size) {
  62                         return ndr_pull_error(ndr, NDR_ERR_STRING,
  63                                         "BAD DNS NAME component, bad offset");
  64                 }
  65                 len = ndr->data[*offset];
  66                 if (len == 0) {
  67                         *offset += 1;
  68                         *max_offset = MAX(*max_offset, *offset);
  69                         *component = NULL;
  70                         return NDR_ERR_SUCCESS;
  71                 }
  72                 if ((len & 0xC0) == 0xC0) {
  73                         /* its a label pointer */
  74                         if (1 + *offset >= ndr->data_size) {
  75                                 return ndr_pull_error(ndr, NDR_ERR_STRING,
  76                                                 "BAD DNS NAME component, " \
  77                                                 "bad label offset");
  78                         }
  79                         *max_offset = MAX(*max_offset, *offset + 2);
  80                         *offset = ((len&0x3F)<<8) | ndr->data[1 + *offset];
  81                         *max_offset = MAX(*max_offset, *offset);
  82                         loops++;
  83                         continue;
  84                 }
  85                 if ((len & 0xC0) != 0) {
  86                         /* its a reserved length field */
  87                         return ndr_pull_error(ndr, NDR_ERR_STRING,
  88                                               "BAD DNS NAME component, " \
  89                                               "reserved length field: 0x%02x",
  90                                               (len &0xC));
  91                 }
  92                 if (*offset + len + 1 > ndr->data_size) {
  93                         return ndr_pull_error(ndr, NDR_ERR_STRING,
  94                                               "BAD DNS NAME component, "\
  95                                               "length too long");
  96                 }
  97                 *component = (uint8_t*)talloc_strndup(ndr,
  98                                 (const char *)&ndr->data[1 + *offset], len);
  99                 NDR_ERR_HAVE_NO_MEMORY(*component);
 100                 *offset += len + 1;
 101                 *max_offset = MAX(*max_offset, *offset);
 102                 return NDR_ERR_SUCCESS;
 103         }
 104
 105         /* too many pointers */
 106         return ndr_pull_error(ndr, NDR_ERR_STRING,
 107                               "BAD DNS NAME component, too many pointers");
 108 }
 109
 110 /**
 111   pull a dns_string from the wire
 112 */
 113 _PUBLIC_ enum ndr_err_code ndr_pull_dns_string(struct ndr_pull *ndr,
 114                                                int ndr_flags,
 115                                                const char **s)
 116 {
 117         uint32_t offset = ndr->offset;
 118         uint32_t max_offset = offset;
 119         unsigned num_components;
 120         char *name;
 121
 122         if (!(ndr_flags & NDR_SCALARS)) {
 123                 return NDR_ERR_SUCCESS;
 124         }
 125
 126         name = talloc_strdup(ndr->current_mem_ctx, "");
 127
 128         /* break up name into a list of components */
 129         for (num_components=0; num_components<MAX_COMPONENTS;
 130              num_components++) {
 131                 uint8_t *component = NULL;
 132                 NDR_CHECK(ndr_pull_component(ndr, &component, &offset,
 133                                              &max_offset));
 134                 if (component == NULL) break;
 135                 if (num_components > 0) {
 136                         name = talloc_asprintf_append_buffer(name, ".%s",
 137                                                              component);
 138                 } else {
 139                         name = talloc_asprintf_append_buffer(name, "%s",
 140                                                              component);
 141                 }
 142                 NDR_ERR_HAVE_NO_MEMORY(name);
 143         }
 144         if (num_components == MAX_COMPONENTS) {
 145                 return ndr_pull_error(ndr, NDR_ERR_STRING,
 146                                       "BAD DNS NAME too many components");
 147         }
 148
 149         (*s) = name;
 150         ndr->offset = max_offset;
 151
 152         return NDR_ERR_SUCCESS;
 153 }
 154
 155 /**
 156   push a dns string to the wire
 157 */
 158 _PUBLIC_ enum ndr_err_code ndr_push_dns_string(struct ndr_push *ndr,
 159                                                int ndr_flags,
 160                                                const char *s)
 161 {
 162         if (!(ndr_flags & NDR_SCALARS)) {
 163                 return NDR_ERR_SUCCESS;
 164         }
 165
 166         while (s && *s) {
 167                 enum ndr_err_code ndr_err;
 168                 char *compname;
 169                 size_t complen;
 170                 uint32_t offset;
 171
 172                 if (!(ndr->flags & LIBNDR_FLAG_NO_COMPRESSION)) {
 173                         /* see if we have pushed the remaining string already,
 174                          * if so we use a label pointer to this string
 175                          */
 176                         ndr_err = ndr_token_retrieve_cmp_fn(&ndr->dns_string_list, s,
 177                                                             &offset,
 178                                                             (comparison_fn_t)strcmp,
 179                                                             false);
 180                         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
 181                                 uint8_t b[2];
 182
 183                                 if (offset > 0x3FFF) {
 184                                         return ndr_push_error(ndr, NDR_ERR_STRING,
 185                                                               "offset for dns string " \
 186                                                               "label pointer " \
 187                                                               "%u[%08X] > 0x00003FFF",
 188                                                               offset, offset);
 189                                 }
 190
 191                                 b[0] = 0xC0 | (offset>>8);
 192                                 b[1] = (offset & 0xFF);
 193
 194                                 return ndr_push_bytes(ndr, b, 2);
 195                         }
 196                 }
 197
 198                 complen = strcspn(s, ".");
 199
 200                 /* we need to make sure the length fits into 6 bytes */
 201                 if (complen > 0x3F) {
 202                         return ndr_push_error(ndr, NDR_ERR_STRING,
 203                                               "component length %u[%08X] > " \
 204                                               "0x0000003F",
 205                                               (unsigned)complen,
 206                                               (unsigned)complen);
 207                 }
 208
 209                 compname = talloc_asprintf(ndr, "%c%*.*s",
 210                                                 (unsigned char)complen,
 211                                                 (unsigned char)complen,
 212                                                 (unsigned char)complen, s);
 213                 NDR_ERR_HAVE_NO_MEMORY(compname);
 214
 215                 /* remember the current componemt + the rest of the string
 216                  * so it can be reused later
 217                  */
 218                 if (!(ndr->flags & LIBNDR_FLAG_NO_COMPRESSION)) {
 219                         NDR_CHECK(ndr_token_store(ndr, &ndr->dns_string_list, s,
 220                                                   ndr->offset));
 221                 }
 222
 223                 /* push just this component into the blob */
 224                 NDR_CHECK(ndr_push_bytes(ndr, (const uint8_t *)compname,
 225                                          complen+1));
 226                 talloc_free(compname);
 227
 228                 s += complen;
 229                 if (*s == '.') s++;
 230         }
 231
 232         /* if we reach the end of the string and have pushed the last component
 233          * without using a label pointer, we need to terminate the string
 234          */
 235         return ndr_push_bytes(ndr, (const uint8_t *)"", 1);
 236 }
 237
 238 _PUBLIC_ enum ndr_err_code ndr_pull_dns_txt_record(struct ndr_pull *ndr, int ndr_flags, struct dns_txt_record *r)
 239 {
 240         NDR_PULL_CHECK_FLAGS(ndr, ndr_flags);
 241         if (ndr_flags & NDR_SCALARS) {
 242                 enum ndr_err_code ndr_err;
 243                 uint32_t data_size = ndr->data_size;
 244                 uint32_t record_size = 0;
 245                 ndr_err = ndr_token_retrieve(&ndr->array_size_list, r,
 246                                              &record_size);
 247                 if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
 248                         NDR_PULL_NEED_BYTES(ndr, record_size);
 249                         ndr->data_size = ndr->offset + record_size;
 250                 }
 251                 NDR_CHECK(ndr_pull_align(ndr, 1));
 252                 NDR_CHECK(ndr_pull_dnsp_string_list(ndr, NDR_SCALARS, &r->txt));
 253                 NDR_CHECK(ndr_pull_trailer_align(ndr, 1));
 254                 ndr->data_size = data_size;
 255         }
 256         if (ndr_flags & NDR_BUFFERS) {
 257         }
 258         return NDR_ERR_SUCCESS;
 259 }
 260
 261 _PUBLIC_ enum ndr_err_code ndr_push_dns_res_rec(struct ndr_push *ndr,
 262                                                 int ndr_flags,
 263                                                 const struct dns_res_rec *r)
 264 {
 265         uint32_t _flags_save_STRUCT = ndr->flags;
 266         uint32_t _saved_offset1, _saved_offset2;
 267         uint16_t length;
 268         ndr_set_flags(&ndr->flags, LIBNDR_PRINT_ARRAY_HEX |
 269                                    LIBNDR_FLAG_NOALIGN);
 270         if (ndr_flags & NDR_SCALARS) {
 271                 uint32_t _flags_save_name = ndr->flags;
 272
 273                 NDR_CHECK(ndr_push_align(ndr, 4));
 274
 275                 switch (r->rr_type) {
 276                 case DNS_QTYPE_TKEY:
 277                 case DNS_QTYPE_TSIG:
 278                         ndr_set_flags(&ndr->flags, LIBNDR_FLAG_NO_COMPRESSION);
 279                         break;
 280                 default:
 281                         break;
 282                 }
 283                 NDR_CHECK(ndr_push_dns_string(ndr, NDR_SCALARS, r->name));
 284                 ndr->flags = _flags_save_name;
 285
 286                 NDR_CHECK(ndr_push_dns_qtype(ndr, NDR_SCALARS, r->rr_type));
 287                 NDR_CHECK(ndr_push_dns_qclass(ndr, NDR_SCALARS, r->rr_class));
 288                 NDR_CHECK(ndr_push_uint32(ndr, NDR_SCALARS, r->ttl));
 289                 _saved_offset1 = ndr->offset;
 290                 NDR_CHECK(ndr_push_uint16(ndr, NDR_SCALARS, 0));
 291                 if (r->length > 0) {
 292                         NDR_CHECK(ndr_push_set_switch_value(ndr, &r->rdata,
 293                                                             r->rr_type));
 294                         NDR_CHECK(ndr_push_dns_rdata(ndr, NDR_SCALARS,
 295                                                      &r->rdata));
 296                         if (r->unexpected.length > 0) {
 297                                 return ndr_push_error(ndr,
 298                                                       NDR_ERR_LENGTH,
 299                                                       "Invalid...Unexpected " \
 300                                                       "blob length is too " \
 301                                                       "large");
 302                         }
 303                 }
 304                 if (r->unexpected.length > UINT16_MAX) {
 305                         return ndr_push_error(ndr, NDR_ERR_LENGTH,
 306                                               "Unexpected blob length "\
 307                                               "is too large");
 308                 }
 309
 310                 NDR_CHECK(ndr_push_bytes(ndr, r->unexpected.data,
 311                                          r->unexpected.length));
 312                 NDR_CHECK(ndr_push_trailer_align(ndr, 4));
 313                 length = ndr->offset - (_saved_offset1 + 2);
 314                 _saved_offset2 = ndr->offset;
 315                 ndr->offset = _saved_offset1;
 316                 NDR_CHECK(ndr_push_uint16(ndr, NDR_SCALARS, length));
 317                 ndr->offset = _saved_offset2;
 318         }
 319         if (ndr_flags & NDR_BUFFERS) {
 320                 NDR_CHECK(ndr_push_dns_rdata(ndr, NDR_BUFFERS,
 321                                              &r->rdata));
 322         }
 323         ndr->flags = _flags_save_STRUCT;
 324         return NDR_ERR_SUCCESS;
 325 }
 326
 327 _PUBLIC_ enum ndr_err_code ndr_pull_dns_res_rec(struct ndr_pull *ndr,
 328                                                 int ndr_flags,
 329                                                 struct dns_res_rec *r)
 330 {
 331         uint32_t _flags_save_STRUCT = ndr->flags;
 332         uint32_t _saved_offset1;
 333         uint32_t pad, length;
 334
 335         ndr_set_flags(&ndr->flags, LIBNDR_PRINT_ARRAY_HEX |
 336                                    LIBNDR_FLAG_NOALIGN);
 337         if (ndr_flags & NDR_SCALARS) {
 338                 NDR_CHECK(ndr_pull_align(ndr, 4));
 339                 NDR_CHECK(ndr_pull_dns_string(ndr, NDR_SCALARS, &r->name));
 340                 NDR_CHECK(ndr_pull_dns_qtype(ndr, NDR_SCALARS, &r->rr_type));
 341                 NDR_CHECK(ndr_pull_dns_qclass(ndr, NDR_SCALARS, &r->rr_class));
 342                 NDR_CHECK(ndr_pull_uint32(ndr, NDR_SCALARS, &r->ttl));
 343                 NDR_CHECK(ndr_pull_uint16(ndr, NDR_SCALARS, &r->length));
 344                 _saved_offset1 = ndr->offset;
 345                 if (r->length > 0) {
 346                         NDR_CHECK(ndr_token_store(ndr, &ndr->array_size_list,
 347                                                   &r->rdata,
 348                                                   r->length));
 349                         NDR_CHECK(ndr_pull_set_switch_value(ndr, &r->rdata,
 350                                                             r->rr_type));
 351                         NDR_CHECK(ndr_pull_dns_rdata(ndr, NDR_SCALARS,
 352                                                      &r->rdata));
 353                 } else {
 354                         ZERO_STRUCT(r->rdata);
 355                 }
 356                 length = ndr->offset - _saved_offset1;
 357                 if (length > r->length) {
 358                         return ndr_pull_error(ndr, NDR_ERR_LENGTH, "TODO");
 359                 }
 360
 361                 r->unexpected = data_blob_null;
 362                 pad = r->length - length;
 363                 if (pad > 0) {
 364                         NDR_PULL_NEED_BYTES(ndr, pad);
 365                         r->unexpected = data_blob_talloc(ndr->current_mem_ctx,
 366                                                          ndr->data +
 367                                                          ndr->offset,
 368                                                          pad);
 369                         if (r->unexpected.data == NULL) {
 370                                 return ndr_pull_error(ndr,
 371                                                       NDR_ERR_ALLOC,
 372                                                       "Failed to allocate a " \
 373                                                       "data blob");
 374                         }
 375                         ndr->offset += pad;
 376                 }
 377
 378
 379                 NDR_CHECK(ndr_pull_trailer_align(ndr, 4));
 380         }
 381         if (ndr_flags & NDR_BUFFERS) {
 382                 NDR_CHECK(ndr_pull_dns_rdata(ndr, NDR_BUFFERS, &r->rdata));
 383         }
 384         ndr->flags = _flags_save_STRUCT;
 385         return NDR_ERR_SUCCESS;
 386 }