2 Unix SMB/CIFS implementation.
3 client transaction calls
4 Copyright (C) Andrew Tridgell 1994-1998
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program; if not, write to the Free Software
18 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
24 /****************************************************************************
25 Send a SMB trans or trans2 request.
26 ****************************************************************************/
28 BOOL cli_send_trans(struct cli_state *cli, int trans,
29 const char *pipe_name,
31 uint16 *setup, unsigned int lsetup, unsigned int msetup,
32 const char *param, unsigned int lparam, unsigned int mparam,
33 const char *data, unsigned int ldata, unsigned int mdata)
36 unsigned int this_ldata,this_lparam;
37 unsigned int tot_data=0,tot_param=0;
38 char *outdata,*outparam;
43 this_lparam = MIN(lparam,cli->max_xmit - (500+lsetup*2)); /* hack */
44 this_ldata = MIN(ldata,cli->max_xmit - (500+lsetup*2+this_lparam));
46 memset(cli->outbuf,'\0',smb_size);
47 set_message(NULL,cli->outbuf,14+lsetup,0,True);
48 SCVAL(cli->outbuf,smb_com,trans);
49 SSVAL(cli->outbuf,smb_tid, cli->cnum);
50 cli_setup_packet(cli);
53 * Save the mid we're using. We need this for finding
60 pipe_name_len = clistr_push(cli, smb_buf(cli->outbuf), pipe_name, -1, STR_TERMINATE);
63 outparam = smb_buf(cli->outbuf)+(trans==SMBtrans ? pipe_name_len : 3);
64 outdata = outparam+this_lparam;
67 SSVAL(cli->outbuf,smb_tpscnt,lparam); /* tpscnt */
68 SSVAL(cli->outbuf,smb_tdscnt,ldata); /* tdscnt */
69 SSVAL(cli->outbuf,smb_mprcnt,mparam); /* mprcnt */
70 SSVAL(cli->outbuf,smb_mdrcnt,mdata); /* mdrcnt */
71 SCVAL(cli->outbuf,smb_msrcnt,msetup); /* msrcnt */
72 SSVAL(cli->outbuf,smb_flags,flags); /* flags */
73 SIVAL(cli->outbuf,smb_timeout,0); /* timeout */
74 SSVAL(cli->outbuf,smb_pscnt,this_lparam); /* pscnt */
75 SSVAL(cli->outbuf,smb_psoff,smb_offset(outparam,cli->outbuf)); /* psoff */
76 SSVAL(cli->outbuf,smb_dscnt,this_ldata); /* dscnt */
77 SSVAL(cli->outbuf,smb_dsoff,smb_offset(outdata,cli->outbuf)); /* dsoff */
78 SCVAL(cli->outbuf,smb_suwcnt,lsetup); /* suwcnt */
79 for (i=0;i<lsetup;i++) /* setup[] */
80 SSVAL(cli->outbuf,smb_setup+i*2,setup[i]);
81 p = smb_buf(cli->outbuf);
82 if (trans != SMBtrans) {
83 *p++ = 0; /* put in a null smb_name */
84 *p++ = 'D'; *p++ = ' '; /* observed in OS/2 */
86 if (this_lparam) /* param[] */
87 memcpy(outparam,param,this_lparam);
88 if (this_ldata) /* data[] */
89 memcpy(outdata,data,this_ldata);
90 cli_setup_bcc(cli, outdata+this_ldata);
92 show_msg(cli->outbuf);
94 if (!cli_send_smb(cli)) {
98 /* Note we're in a trans state. Save the sequence
99 * numbers for replies. */
100 client_set_trans_sign_state_on(cli, mid);
102 if (this_ldata < ldata || this_lparam < lparam) {
103 /* receive interim response */
104 if (!cli_receive_smb(cli) || cli_is_error(cli)) {
105 client_set_trans_sign_state_off(cli, mid);
109 tot_data = this_ldata;
110 tot_param = this_lparam;
112 while (tot_data < ldata || tot_param < lparam) {
113 this_lparam = MIN(lparam-tot_param,cli->max_xmit - 500); /* hack */
114 this_ldata = MIN(ldata-tot_data,cli->max_xmit - (500+this_lparam));
116 set_message(NULL,cli->outbuf,trans==SMBtrans?8:9,0,True);
117 SCVAL(cli->outbuf,smb_com,(trans==SMBtrans ? SMBtranss : SMBtranss2));
119 outparam = smb_buf(cli->outbuf);
120 outdata = outparam+this_lparam;
122 /* secondary request */
123 SSVAL(cli->outbuf,smb_tpscnt,lparam); /* tpscnt */
124 SSVAL(cli->outbuf,smb_tdscnt,ldata); /* tdscnt */
125 SSVAL(cli->outbuf,smb_spscnt,this_lparam); /* pscnt */
126 SSVAL(cli->outbuf,smb_spsoff,smb_offset(outparam,cli->outbuf)); /* psoff */
127 SSVAL(cli->outbuf,smb_spsdisp,tot_param); /* psdisp */
128 SSVAL(cli->outbuf,smb_sdscnt,this_ldata); /* dscnt */
129 SSVAL(cli->outbuf,smb_sdsoff,smb_offset(outdata,cli->outbuf)); /* dsoff */
130 SSVAL(cli->outbuf,smb_sdsdisp,tot_data); /* dsdisp */
131 if (trans==SMBtrans2)
132 SSVALS(cli->outbuf,smb_sfid,fid); /* fid */
133 if (this_lparam) /* param[] */
134 memcpy(outparam,param+tot_param,this_lparam);
135 if (this_ldata) /* data[] */
136 memcpy(outdata,data+tot_data,this_ldata);
137 cli_setup_bcc(cli, outdata+this_ldata);
140 * Save the mid we're using. We need this for finding
145 show_msg(cli->outbuf);
146 if (!cli_send_smb(cli)) {
147 client_set_trans_sign_state_off(cli, mid);
151 /* Ensure we use the same mid for the secondaries. */
154 tot_data += this_ldata;
155 tot_param += this_lparam;
162 /****************************************************************************
163 Receive a SMB trans or trans2 response allocating the necessary memory.
164 ****************************************************************************/
166 BOOL cli_receive_trans(struct cli_state *cli,int trans,
167 char **param, unsigned int *param_len,
168 char **data, unsigned int *data_len)
170 unsigned int total_data=0;
171 unsigned int total_param=0;
172 unsigned int this_data,this_param;
176 *data_len = *param_len = 0;
178 if (!cli_receive_smb(cli)) {
182 show_msg(cli->inbuf);
185 if (CVAL(cli->inbuf,smb_com) != trans) {
186 DEBUG(0,("Expected %s response, got command 0x%02x\n",
187 trans==SMBtrans?"SMBtrans":"SMBtrans2",
188 CVAL(cli->inbuf,smb_com)));
193 * An NT RPC pipe call can return ERRDOS, ERRmoredata
194 * to a trans call. This is not an error and should not
195 * be treated as such. Note that STATUS_NO_MORE_FILES is
196 * returned when a trans2 findfirst/next finishes.
197 * When setting up an encrypted transport we can also
198 * see NT_STATUS_MORE_PROCESSING_REQUIRED here.
200 * Vista returns NT_STATUS_INACCESSIBLE_SYSTEM_SHORTCUT if the folder
201 * "<share>/Users/All Users" is enumerated. This is a special pseudo
202 * folder, and the response does not have parameters (nor a parameter
205 status = cli_nt_error(cli);
207 if (!NT_STATUS_EQUAL(status, NT_STATUS_MORE_PROCESSING_REQUIRED)) {
208 if (NT_STATUS_IS_ERR(status) ||
209 NT_STATUS_EQUAL(status,STATUS_NO_MORE_FILES) ||
210 NT_STATUS_EQUAL(status,NT_STATUS_INACCESSIBLE_SYSTEM_SHORTCUT)) {
215 /* parse out the lengths */
216 total_data = SVAL(cli->inbuf,smb_tdrcnt);
217 total_param = SVAL(cli->inbuf,smb_tprcnt);
221 *data = (char *)SMB_REALLOC(*data,total_data);
223 DEBUG(0,("cli_receive_trans: failed to enlarge data buffer\n"));
228 if (total_param!=0) {
229 *param = (char *)SMB_REALLOC(*param,total_param);
231 DEBUG(0,("cli_receive_trans: failed to enlarge param buffer\n"));
237 this_data = SVAL(cli->inbuf,smb_drcnt);
238 this_param = SVAL(cli->inbuf,smb_prcnt);
240 if (this_data + *data_len > total_data ||
241 this_param + *param_len > total_param) {
242 DEBUG(1,("Data overflow in cli_receive_trans\n"));
246 if (this_data + *data_len < this_data ||
247 this_data + *data_len < *data_len ||
248 this_param + *param_len < this_param ||
249 this_param + *param_len < *param_len) {
250 DEBUG(1,("Data overflow in cli_receive_trans\n"));
255 unsigned int data_offset_out = SVAL(cli->inbuf,smb_drdisp);
256 unsigned int data_offset_in = SVAL(cli->inbuf,smb_droff);
258 if (data_offset_out > total_data ||
259 data_offset_out + this_data > total_data ||
260 data_offset_out + this_data < data_offset_out ||
261 data_offset_out + this_data < this_data) {
262 DEBUG(1,("Data overflow in cli_receive_trans\n"));
265 if (data_offset_in > cli->bufsize ||
266 data_offset_in + this_data > cli->bufsize ||
267 data_offset_in + this_data < data_offset_in ||
268 data_offset_in + this_data < this_data) {
269 DEBUG(1,("Data overflow in cli_receive_trans\n"));
273 memcpy(*data + data_offset_out, smb_base(cli->inbuf) + data_offset_in, this_data);
276 unsigned int param_offset_out = SVAL(cli->inbuf,smb_prdisp);
277 unsigned int param_offset_in = SVAL(cli->inbuf,smb_proff);
279 if (param_offset_out > total_param ||
280 param_offset_out + this_param > total_param ||
281 param_offset_out + this_param < param_offset_out ||
282 param_offset_out + this_param < this_param) {
283 DEBUG(1,("Param overflow in cli_receive_trans\n"));
286 if (param_offset_in > cli->bufsize ||
287 param_offset_in + this_param > cli->bufsize ||
288 param_offset_in + this_param < param_offset_in ||
289 param_offset_in + this_param < this_param) {
290 DEBUG(1,("Param overflow in cli_receive_trans\n"));
294 memcpy(*param + param_offset_out, smb_base(cli->inbuf) + param_offset_in, this_param);
296 *data_len += this_data;
297 *param_len += this_param;
299 if (total_data <= *data_len && total_param <= *param_len) {
304 if (!cli_receive_smb(cli)) {
308 show_msg(cli->inbuf);
311 if (CVAL(cli->inbuf,smb_com) != trans) {
312 DEBUG(0,("Expected %s response, got command 0x%02x\n",
313 trans==SMBtrans?"SMBtrans":"SMBtrans2",
314 CVAL(cli->inbuf,smb_com)));
317 if (!NT_STATUS_EQUAL(status, NT_STATUS_MORE_PROCESSING_REQUIRED)) {
318 if (NT_STATUS_IS_ERR(cli_nt_error(cli))) {
323 /* parse out the total lengths again - they can shrink! */
324 if (SVAL(cli->inbuf,smb_tdrcnt) < total_data)
325 total_data = SVAL(cli->inbuf,smb_tdrcnt);
326 if (SVAL(cli->inbuf,smb_tprcnt) < total_param)
327 total_param = SVAL(cli->inbuf,smb_tprcnt);
329 if (total_data <= *data_len && total_param <= *param_len) {
337 client_set_trans_sign_state_off(cli, SVAL(cli->inbuf,smb_mid));
341 /****************************************************************************
342 Send a SMB nttrans request.
343 ****************************************************************************/
345 BOOL cli_send_nt_trans(struct cli_state *cli,
348 uint16 *setup, unsigned int lsetup, unsigned int msetup,
349 char *param, unsigned int lparam, unsigned int mparam,
350 char *data, unsigned int ldata, unsigned int mdata)
353 unsigned int this_ldata,this_lparam;
354 unsigned int tot_data=0,tot_param=0;
356 char *outdata,*outparam;
358 this_lparam = MIN(lparam,cli->max_xmit - (500+lsetup*2)); /* hack */
359 this_ldata = MIN(ldata,cli->max_xmit - (500+lsetup*2+this_lparam));
361 memset(cli->outbuf,'\0',smb_size);
362 set_message(NULL,cli->outbuf,19+lsetup,0,True);
363 SCVAL(cli->outbuf,smb_com,SMBnttrans);
364 SSVAL(cli->outbuf,smb_tid, cli->cnum);
365 cli_setup_packet(cli);
368 * Save the mid we're using. We need this for finding
374 outparam = smb_buf(cli->outbuf)+3;
375 outdata = outparam+this_lparam;
377 /* primary request */
378 SCVAL(cli->outbuf,smb_nt_MaxSetupCount,msetup);
379 SCVAL(cli->outbuf,smb_nt_Flags,flags);
380 SIVAL(cli->outbuf,smb_nt_TotalParameterCount, lparam);
381 SIVAL(cli->outbuf,smb_nt_TotalDataCount, ldata);
382 SIVAL(cli->outbuf,smb_nt_MaxParameterCount, mparam);
383 SIVAL(cli->outbuf,smb_nt_MaxDataCount, mdata);
384 SIVAL(cli->outbuf,smb_nt_ParameterCount, this_lparam);
385 SIVAL(cli->outbuf,smb_nt_ParameterOffset, smb_offset(outparam,cli->outbuf));
386 SIVAL(cli->outbuf,smb_nt_DataCount, this_ldata);
387 SIVAL(cli->outbuf,smb_nt_DataOffset, smb_offset(outdata,cli->outbuf));
388 SIVAL(cli->outbuf,smb_nt_SetupCount, lsetup);
389 SIVAL(cli->outbuf,smb_nt_Function, function);
390 for (i=0;i<lsetup;i++) /* setup[] */
391 SSVAL(cli->outbuf,smb_nt_SetupStart+i*2,setup[i]);
393 if (this_lparam) /* param[] */
394 memcpy(outparam,param,this_lparam);
395 if (this_ldata) /* data[] */
396 memcpy(outdata,data,this_ldata);
398 cli_setup_bcc(cli, outdata+this_ldata);
400 show_msg(cli->outbuf);
401 if (!cli_send_smb(cli)) {
405 /* Note we're in a trans state. Save the sequence
406 * numbers for replies. */
407 client_set_trans_sign_state_on(cli, mid);
409 if (this_ldata < ldata || this_lparam < lparam) {
410 /* receive interim response */
411 if (!cli_receive_smb(cli) || cli_is_error(cli)) {
412 client_set_trans_sign_state_off(cli, mid);
416 tot_data = this_ldata;
417 tot_param = this_lparam;
419 while (tot_data < ldata || tot_param < lparam) {
420 this_lparam = MIN(lparam-tot_param,cli->max_xmit - 500); /* hack */
421 this_ldata = MIN(ldata-tot_data,cli->max_xmit - (500+this_lparam));
423 set_message(NULL,cli->outbuf,18,0,True);
424 SCVAL(cli->outbuf,smb_com,SMBnttranss);
426 /* XXX - these should probably be aligned */
427 outparam = smb_buf(cli->outbuf);
428 outdata = outparam+this_lparam;
430 /* secondary request */
431 SIVAL(cli->outbuf,smb_nts_TotalParameterCount,lparam);
432 SIVAL(cli->outbuf,smb_nts_TotalDataCount,ldata);
433 SIVAL(cli->outbuf,smb_nts_ParameterCount,this_lparam);
434 SIVAL(cli->outbuf,smb_nts_ParameterOffset,smb_offset(outparam,cli->outbuf));
435 SIVAL(cli->outbuf,smb_nts_ParameterDisplacement,tot_param);
436 SIVAL(cli->outbuf,smb_nts_DataCount,this_ldata);
437 SIVAL(cli->outbuf,smb_nts_DataOffset,smb_offset(outdata,cli->outbuf));
438 SIVAL(cli->outbuf,smb_nts_DataDisplacement,tot_data);
439 if (this_lparam) /* param[] */
440 memcpy(outparam,param+tot_param,this_lparam);
441 if (this_ldata) /* data[] */
442 memcpy(outdata,data+tot_data,this_ldata);
443 cli_setup_bcc(cli, outdata+this_ldata);
446 * Save the mid we're using. We need this for finding
451 show_msg(cli->outbuf);
453 if (!cli_send_smb(cli)) {
454 client_set_trans_sign_state_off(cli, mid);
458 /* Ensure we use the same mid for the secondaries. */
461 tot_data += this_ldata;
462 tot_param += this_lparam;
469 /****************************************************************************
470 Receive a SMB nttrans response allocating the necessary memory.
471 ****************************************************************************/
473 BOOL cli_receive_nt_trans(struct cli_state *cli,
474 char **param, unsigned int *param_len,
475 char **data, unsigned int *data_len)
477 unsigned int total_data=0;
478 unsigned int total_param=0;
479 unsigned int this_data,this_param;
484 *data_len = *param_len = 0;
486 if (!cli_receive_smb(cli)) {
490 show_msg(cli->inbuf);
493 if (CVAL(cli->inbuf,smb_com) != SMBnttrans) {
494 DEBUG(0,("Expected SMBnttrans response, got command 0x%02x\n",
495 CVAL(cli->inbuf,smb_com)));
500 * An NT RPC pipe call can return ERRDOS, ERRmoredata
501 * to a trans call. This is not an error and should not
502 * be treated as such.
504 if (cli_is_dos_error(cli)) {
505 cli_dos_error(cli, &eclass, &ecode);
506 if (!(eclass == ERRDOS && ecode == ERRmoredata)) {
512 * Likewise for NT_STATUS_BUFFER_TOO_SMALL
514 if (cli_is_nt_error(cli)) {
515 if (!NT_STATUS_EQUAL(cli_nt_error(cli),
516 NT_STATUS_BUFFER_TOO_SMALL)) {
521 /* parse out the lengths */
522 total_data = SVAL(cli->inbuf,smb_ntr_TotalDataCount);
523 total_param = SVAL(cli->inbuf,smb_ntr_TotalParameterCount);
527 *data = (char *)SMB_REALLOC(*data,total_data);
529 DEBUG(0,("cli_receive_nt_trans: failed to enlarge data buffer to %d\n",total_data));
535 *param = (char *)SMB_REALLOC(*param,total_param);
537 DEBUG(0,("cli_receive_nt_trans: failed to enlarge param buffer to %d\n", total_param));
543 this_data = SVAL(cli->inbuf,smb_ntr_DataCount);
544 this_param = SVAL(cli->inbuf,smb_ntr_ParameterCount);
546 if (this_data + *data_len > total_data ||
547 this_param + *param_len > total_param) {
548 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
552 if (this_data + *data_len < this_data ||
553 this_data + *data_len < *data_len ||
554 this_param + *param_len < this_param ||
555 this_param + *param_len < *param_len) {
556 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
561 unsigned int data_offset_out = SVAL(cli->inbuf,smb_ntr_DataDisplacement);
562 unsigned int data_offset_in = SVAL(cli->inbuf,smb_ntr_DataOffset);
564 if (data_offset_out > total_data ||
565 data_offset_out + this_data > total_data ||
566 data_offset_out + this_data < data_offset_out ||
567 data_offset_out + this_data < this_data) {
568 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
571 if (data_offset_in > cli->bufsize ||
572 data_offset_in + this_data > cli->bufsize ||
573 data_offset_in + this_data < data_offset_in ||
574 data_offset_in + this_data < this_data) {
575 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
579 memcpy(*data + data_offset_out, smb_base(cli->inbuf) + data_offset_in, this_data);
583 unsigned int param_offset_out = SVAL(cli->inbuf,smb_ntr_ParameterDisplacement);
584 unsigned int param_offset_in = SVAL(cli->inbuf,smb_ntr_ParameterOffset);
586 if (param_offset_out > total_param ||
587 param_offset_out + this_param > total_param ||
588 param_offset_out + this_param < param_offset_out ||
589 param_offset_out + this_param < this_param) {
590 DEBUG(1,("Param overflow in cli_receive_nt_trans\n"));
593 if (param_offset_in > cli->bufsize ||
594 param_offset_in + this_param > cli->bufsize ||
595 param_offset_in + this_param < param_offset_in ||
596 param_offset_in + this_param < this_param) {
597 DEBUG(1,("Param overflow in cli_receive_nt_trans\n"));
601 memcpy(*param + param_offset_out, smb_base(cli->inbuf) + param_offset_in, this_param);
604 *data_len += this_data;
605 *param_len += this_param;
607 if (total_data <= *data_len && total_param <= *param_len) {
612 if (!cli_receive_smb(cli)) {
616 show_msg(cli->inbuf);
619 if (CVAL(cli->inbuf,smb_com) != SMBnttrans) {
620 DEBUG(0,("Expected SMBnttrans response, got command 0x%02x\n",
621 CVAL(cli->inbuf,smb_com)));
624 if (cli_is_dos_error(cli)) {
625 cli_dos_error(cli, &eclass, &ecode);
626 if(!(eclass == ERRDOS && ecode == ERRmoredata)) {
631 * Likewise for NT_STATUS_BUFFER_TOO_SMALL
633 if (cli_is_nt_error(cli)) {
634 if (!NT_STATUS_EQUAL(cli_nt_error(cli),
635 NT_STATUS_BUFFER_TOO_SMALL)) {
640 /* parse out the total lengths again - they can shrink! */
641 if (SVAL(cli->inbuf,smb_ntr_TotalDataCount) < total_data)
642 total_data = SVAL(cli->inbuf,smb_ntr_TotalDataCount);
643 if (SVAL(cli->inbuf,smb_ntr_TotalParameterCount) < total_param)
644 total_param = SVAL(cli->inbuf,smb_ntr_TotalParameterCount);
646 if (total_data <= *data_len && total_param <= *param_len) {
654 client_set_trans_sign_state_off(cli, SVAL(cli->inbuf,smb_mid));