source3/smbd/filename.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    filename handling routines
   4    Copyright (C) Andrew Tridgell 1992-1998
   5    Copyright (C) Jeremy Allison 1999-2007
   6    Copyright (C) Ying Chen 2000
   7    Copyright (C) Volker Lendecke 2007
   8
   9    This program is free software; you can redistribute it and/or modify
  10    it under the terms of the GNU General Public License as published by
  11    the Free Software Foundation; either version 3 of the License, or
  12    (at your option) any later version.
  13
  14    This program is distributed in the hope that it will be useful,
  15    but WITHOUT ANY WARRANTY; without even the implied warranty of
  16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17    GNU General Public License for more details.
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21 */
  22
  23 /*
  24  * New hash table stat cache code added by Ying Chen.
  25  */
  26
  27 #include "includes.h"
  28
  29 static NTSTATUS build_stream_path(TALLOC_CTX *mem_ctx,
  30                                   connection_struct *conn,
  31                                   const char *orig_path,
  32                                   struct smb_filename *smb_fname);
  33
  34 /****************************************************************************
  35  Mangle the 2nd name and check if it is then equal to the first name.
  36 ****************************************************************************/
  37
  38 static bool mangled_equal(const char *name1,
  39                         const char *name2,
  40                         const struct share_params *p)
  41 {
  42         char mname[13];
  43
  44         if (!name_to_8_3(name2, mname, False, p)) {
  45                 return False;
  46         }
  47         return strequal(name1, mname);
  48 }
  49
  50 /****************************************************************************
  51  Cope with the differing wildcard and non-wildcard error cases.
  52 ****************************************************************************/
  53
  54 static NTSTATUS determine_path_error(const char *name,
  55                         bool allow_wcard_last_component)
  56 {
  57         const char *p;
  58
  59         if (!allow_wcard_last_component) {
  60                 /* Error code within a pathname. */
  61                 return NT_STATUS_OBJECT_PATH_NOT_FOUND;
  62         }
  63
  64         /* We're terminating here so we
  65          * can be a little slower and get
  66          * the error code right. Windows
  67          * treats the last part of the pathname
  68          * separately I think, so if the last
  69          * component is a wildcard then we treat
  70          * this ./ as "end of component" */
  71
  72         p = strchr(name, '/');
  73
  74         if (!p && (ms_has_wild(name) || ISDOT(name))) {
  75                 /* Error code at the end of a pathname. */
  76                 return NT_STATUS_OBJECT_NAME_INVALID;
  77         } else {
  78                 /* Error code within a pathname. */
  79                 return NT_STATUS_OBJECT_PATH_NOT_FOUND;
  80         }
  81 }
  82
  83 static NTSTATUS check_for_dot_component(const struct smb_filename *smb_fname)
  84 {
  85         /* Ensure we catch all names with in "/."
  86            this is disallowed under Windows and
  87            in POSIX they've already been removed. */
  88         const char *p = strstr(smb_fname->base_name, "/."); /*mb safe*/
  89         if (p) {
  90                 if (p[2] == '/') {
  91                         /* Error code within a pathname. */
  92                         return NT_STATUS_OBJECT_PATH_NOT_FOUND;
  93                 } else if (p[2] == '\0') {
  94                         /* Error code at the end of a pathname. */
  95                         return NT_STATUS_OBJECT_NAME_INVALID;
  96                 }
  97         }
  98         return NT_STATUS_OK;
  99 }
 100
 101 /****************************************************************************
 102 This routine is called to convert names from the dos namespace to unix
 103 namespace. It needs to handle any case conversions, mangling, format changes,
 104 streams etc.
 105
 106 We assume that we have already done a chdir() to the right "root" directory
 107 for this service.
 108
 109 The function will return an NTSTATUS error if some part of the name except for
 110 the last part cannot be resolved, else NT_STATUS_OK.
 111
 112 Note NT_STATUS_OK doesn't mean the name exists or is valid, just that we
 113 didn't get any fatal errors that should immediately terminate the calling SMB
 114 processing whilst resolving.
 115
 116 If the UCF_SAVE_LCOMP flag is passed in, then the unmodified last component
 117 of the pathname is set in smb_filename->original_lcomp.
 118
 119 If UCF_ALWAYS_ALLOW_WCARD_LCOMP is passed in, then a MS wildcard was detected
 120 and should be allowed in the last component of the path only.
 121
 122 If the orig_path was a stream, smb_filename->base_name will point to the base
 123 filename, and smb_filename->stream_name will point to the stream name.  If
 124 orig_path was not a stream, then smb_filename->stream_name will be NULL.
 125
 126 On exit from unix_convert, the smb_filename->st stat struct will be populated
 127 if the file exists and was found, if not this stat struct will be filled with
 128 zeros (and this can be detected by checking for nlinks = 0, which can never be
 129 true for any file).
 130 ****************************************************************************/
 131
 132 NTSTATUS unix_convert(TALLOC_CTX *ctx,
 133                       connection_struct *conn,
 134                       const char *orig_path,
 135                       struct smb_filename **smb_fname_out,
 136                       uint32_t ucf_flags)
 137 {
 138         struct smb_filename *smb_fname = NULL;
 139         char *start, *end;
 140         char *dirpath = NULL;
 141         char *stream = NULL;
 142         bool component_was_mangled = False;
 143         bool name_has_wildcard = False;
 144         bool posix_pathnames = false;
 145         bool allow_wcard_last_component =
 146             (ucf_flags & UCF_ALWAYS_ALLOW_WCARD_LCOMP);
 147         bool save_last_component = ucf_flags & UCF_SAVE_LCOMP;
 148         NTSTATUS status;
 149         int ret = -1;
 150
 151         *smb_fname_out = NULL;
 152
 153         smb_fname = talloc_zero(ctx, struct smb_filename);
 154         if (smb_fname == NULL) {
 155                 return NT_STATUS_NO_MEMORY;
 156         }
 157
 158         if (conn->printer) {
 159                 /* we don't ever use the filenames on a printer share as a
 160                         filename - so don't convert them */
 161                 if (!(smb_fname->base_name = talloc_strdup(smb_fname,
 162                                                            orig_path))) {
 163                         status = NT_STATUS_NO_MEMORY;
 164                         goto err;
 165                 }
 166                 goto done;
 167         }
 168
 169         DEBUG(5, ("unix_convert called on file \"%s\"\n", orig_path));
 170
 171         /*
 172          * Conversion to basic unix format is already done in
 173          * check_path_syntax().
 174          */
 175
 176         /*
 177          * Names must be relative to the root of the service - any leading /.
 178          * and trailing /'s should have been trimmed by check_path_syntax().
 179          */
 180
 181 #ifdef DEVELOPER
 182         SMB_ASSERT(*orig_path != '/');
 183 #endif
 184
 185         /*
 186          * If we trimmed down to a single '\0' character
 187          * then we should use the "." directory to avoid
 188          * searching the cache, but not if we are in a
 189          * printing share.
 190          * As we know this is valid we can return true here.
 191          */
 192
 193         if (!*orig_path) {
 194                 if (!(smb_fname->base_name = talloc_strdup(smb_fname, "."))) {
 195                         status = NT_STATUS_NO_MEMORY;
 196                         goto err;
 197                 }
 198                 if (SMB_VFS_STAT(conn, smb_fname) != 0) {
 199                         status = map_nt_error_from_unix(errno);
 200                         goto err;
 201                 }
 202                 DEBUG(5, ("conversion finished \"\" -> %s\n",
 203                           smb_fname->base_name));
 204                 goto done;
 205         }
 206
 207         if (orig_path[0] == '.' && (orig_path[1] == '/' ||
 208                                 orig_path[1] == '\0')) {
 209                 /* Start of pathname can't be "." only. */
 210                 if (orig_path[1] == '\0' || orig_path[2] == '\0') {
 211                         status = NT_STATUS_OBJECT_NAME_INVALID;
 212                 } else {
 213                         status =determine_path_error(&orig_path[2],
 214                             allow_wcard_last_component);
 215                 }
 216                 goto err;
 217         }
 218
 219         /* Start with the full orig_path as given by the caller. */
 220         if (!(smb_fname->base_name = talloc_strdup(smb_fname, orig_path))) {
 221                 DEBUG(0, ("talloc_strdup failed\n"));
 222                 status = NT_STATUS_NO_MEMORY;
 223                 goto err;
 224         }
 225
 226         /*
 227          * Large directory fix normalization. If we're case sensitive, and
 228          * the case preserving parameters are set to "no", normalize the case of
 229          * the incoming filename from the client WHETHER IT EXISTS OR NOT !
 230          * This is in conflict with the current (3.0.20) man page, but is
 231          * what people expect from the "large directory howto". I'll update
 232          * the man page. Thanks to jht@samba.org for finding this. JRA.
 233          */
 234
 235         if (conn->case_sensitive && !conn->case_preserve &&
 236                         !conn->short_case_preserve) {
 237                 strnorm(smb_fname->base_name, lp_defaultcase(SNUM(conn)));
 238         }
 239
 240         /*
 241          * Ensure saved_last_component is valid even if file exists.
 242          */
 243
 244         if(save_last_component) {
 245                 end = strrchr_m(smb_fname->base_name, '/');
 246                 if (end) {
 247                         smb_fname->original_lcomp = talloc_strdup(smb_fname,
 248                                                                   end + 1);
 249                 } else {
 250                         smb_fname->original_lcomp =
 251                             talloc_strdup(smb_fname, smb_fname->base_name);
 252                 }
 253                 if (smb_fname->original_lcomp == NULL) {
 254                         status = NT_STATUS_NO_MEMORY;
 255                         goto err;
 256                 }
 257         }
 258
 259         posix_pathnames = (lp_posix_pathnames() ||
 260                                 (ucf_flags & UCF_POSIX_PATHNAMES));
 261
 262         /*
 263          * Strip off the stream, and add it back when we're done with the
 264          * base_name.
 265          */
 266         if (!posix_pathnames) {
 267                 stream = strchr_m(smb_fname->base_name, ':');
 268
 269                 if (stream != NULL) {
 270                         char *tmp = talloc_strdup(smb_fname, stream);
 271                         if (tmp == NULL) {
 272                                 status = NT_STATUS_NO_MEMORY;
 273                                 goto err;
 274                         }
 275                         /*
 276                          * Since this is actually pointing into
 277                          * smb_fname->base_name this truncates base_name.
 278                          */
 279                         *stream = '\0';
 280                         stream = tmp;
 281                 }
 282         }
 283
 284         start = smb_fname->base_name;
 285
 286         /*
 287          * If we're providing case insentive semantics or
 288          * the underlying filesystem is case insensitive,
 289          * then a case-normalized hit in the stat-cache is
 290          * authoratitive. JRA.
 291          *
 292          * Note: We're only checking base_name.  The stream_name will be
 293          * added and verified in build_stream_path().
 294          */
 295
 296         if((!conn->case_sensitive || !(conn->fs_capabilities &
 297                                        FILE_CASE_SENSITIVE_SEARCH)) &&
 298             stat_cache_lookup(conn, &smb_fname->base_name, &dirpath, &start,
 299                               &smb_fname->st)) {
 300                 goto done;
 301         }
 302
 303         /*
 304          * Make sure "dirpath" is an allocated string, we use this for
 305          * building the directories with asprintf and free it.
 306          */
 307
 308         if ((dirpath == NULL) && (!(dirpath = talloc_strdup(ctx,"")))) {
 309                 DEBUG(0, ("talloc_strdup failed\n"));
 310                 status = NT_STATUS_NO_MEMORY;
 311                 goto err;
 312         }
 313
 314         /*
 315          * If we have a wildcard we must walk the path to
 316          * find where the error is, even if case sensitive
 317          * is true.
 318          */
 319
 320         name_has_wildcard = ms_has_wild(smb_fname->base_name);
 321         if (name_has_wildcard && !allow_wcard_last_component) {
 322                 /* Wildcard not valid anywhere. */
 323                 status = NT_STATUS_OBJECT_NAME_INVALID;
 324                 goto fail;
 325         }
 326
 327         DEBUG(5,("unix_convert begin: name = %s, dirpath = %s, start = %s\n",
 328                  smb_fname->base_name, dirpath, start));
 329
 330         if (!name_has_wildcard) {
 331                 /*
 332                  * stat the name - if it exists then we can add the stream back (if
 333                  * there was one) and be done!
 334                  */
 335
 336                 if (posix_pathnames) {
 337                         ret = SMB_VFS_LSTAT(conn, smb_fname);
 338                 } else {
 339                         ret = SMB_VFS_STAT(conn, smb_fname);
 340                 }
 341
 342                 if (ret == 0) {
 343                         status = check_for_dot_component(smb_fname);
 344                         if (!NT_STATUS_IS_OK(status)) {
 345                                 goto fail;
 346                         }
 347                         /* Add the path (not including the stream) to the cache. */
 348                         stat_cache_add(orig_path, smb_fname->base_name,
 349                                        conn->case_sensitive);
 350                         DEBUG(5,("conversion of base_name finished %s -> %s\n",
 351                                  orig_path, smb_fname->base_name));
 352                         goto done;
 353                 }
 354
 355                 /* Stat failed - ensure we don't use it. */
 356                 SET_STAT_INVALID(smb_fname->st);
 357
 358                 /*
 359                  * A special case - if we don't have any wildcards or mangling chars and are case
 360                  * sensitive or the underlying filesystem is case insentive then searching
 361                  * won't help.
 362                  */
 363
 364                 if ((conn->case_sensitive || !(conn->fs_capabilities &
 365                                         FILE_CASE_SENSITIVE_SEARCH)) &&
 366                                 !mangle_is_mangled(smb_fname->base_name, conn->params)) {
 367
 368                         status = check_for_dot_component(smb_fname);
 369                         if (!NT_STATUS_IS_OK(status)) {
 370                                 goto fail;
 371                         }
 372
 373                         /*
 374                          * The stat failed. Could be ok as it could be
 375                          * a new file.
 376                          */
 377
 378                         if (errno == ENOTDIR || errno == ELOOP) {
 379                                 status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
 380                                 goto fail;
 381                         } else if (errno == ENOENT) {
 382                                 /*
 383                                  * Was it a missing last component ?
 384                                  * or a missing intermediate component ?
 385                                  */
 386                                 struct smb_filename parent_fname;
 387                                 ZERO_STRUCT(parent_fname);
 388                                 if (!parent_dirname(ctx, smb_fname->base_name,
 389                                                         &parent_fname.base_name,
 390                                                         NULL)) {
 391                                         status = NT_STATUS_NO_MEMORY;
 392                                         goto fail;
 393                                 }
 394                                 if (posix_pathnames) {
 395                                         ret = SMB_VFS_LSTAT(conn, &parent_fname);
 396                                 } else {
 397                                         ret = SMB_VFS_STAT(conn, &parent_fname);
 398                                 }
 399                                 if (ret == -1) {
 400                                         if (errno == ENOTDIR ||
 401                                                         errno == ENOENT ||
 402                                                         errno == ELOOP) {
 403                                                 status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
 404                                                 goto fail;
 405                                         }
 406                                 }
 407                                 /*
 408                                  * Missing last component is ok - new file.
 409                                  * Also deal with permission denied elsewhere.
 410                                  * Just drop out to done.
 411                                  */
 412                                 goto done;
 413                         }
 414                 }
 415         }
 416
 417         /*
 418          * is_mangled() was changed to look at an entire pathname, not
 419          * just a component. JRA.
 420          */
 421
 422         if (mangle_is_mangled(start, conn->params)) {
 423                 component_was_mangled = True;
 424         }
 425
 426         /*
 427          * Now we need to recursively match the name against the real
 428          * directory structure.
 429          */
 430
 431         /*
 432          * Match each part of the path name separately, trying the names
 433          * as is first, then trying to scan the directory for matching names.
 434          */
 435
 436         for (; start ; start = (end?end+1:(char *)NULL)) {
 437                 /*
 438                  * Pinpoint the end of this section of the filename.
 439                  */
 440                 /* mb safe. '/' can't be in any encoded char. */
 441                 end = strchr(start, '/');
 442
 443                 /*
 444                  * Chop the name at this point.
 445                  */
 446                 if (end) {
 447                         *end = 0;
 448                 }
 449
 450                 if (save_last_component) {
 451                         TALLOC_FREE(smb_fname->original_lcomp);
 452                         smb_fname->original_lcomp = talloc_strdup(smb_fname,
 453                                                         end ? end + 1 : start);
 454                         if (!smb_fname->original_lcomp) {
 455                                 DEBUG(0, ("talloc failed\n"));
 456                                 status = NT_STATUS_NO_MEMORY;
 457                                 goto err;
 458                         }
 459                 }
 460
 461                 /* The name cannot have a component of "." */
 462
 463                 if (ISDOT(start)) {
 464                         if (!end)  {
 465                                 /* Error code at the end of a pathname. */
 466                                 status = NT_STATUS_OBJECT_NAME_INVALID;
 467                         } else {
 468                                 status = determine_path_error(end+1,
 469                                                 allow_wcard_last_component);
 470                         }
 471                         goto fail;
 472                 }
 473
 474                 /* The name cannot have a wildcard if it's not
 475                    the last component. */
 476
 477                 name_has_wildcard = ms_has_wild(start);
 478
 479                 /* Wildcards never valid within a pathname. */
 480                 if (name_has_wildcard && end) {
 481                         status = NT_STATUS_OBJECT_NAME_INVALID;
 482                         goto fail;
 483                 }
 484
 485                 /*
 486                  * Check if the name exists up to this point.
 487                  */
 488
 489                 if (posix_pathnames) {
 490                         ret = SMB_VFS_LSTAT(conn, smb_fname);
 491                 } else {
 492                         ret = SMB_VFS_STAT(conn, smb_fname);
 493                 }
 494
 495                 if (ret == 0) {
 496                         /*
 497                          * It exists. it must either be a directory or this must
 498                          * be the last part of the path for it to be OK.
 499                          */
 500                         if (end && !S_ISDIR(smb_fname->st.st_ex_mode)) {
 501                                 /*
 502                                  * An intermediate part of the name isn't
 503                                  * a directory.
 504                                  */
 505                                 DEBUG(5,("Not a dir %s\n",start));
 506                                 *end = '/';
 507                                 /*
 508                                  * We need to return the fact that the
 509                                  * intermediate name resolution failed. This
 510                                  * is used to return an error of ERRbadpath
 511                                  * rather than ERRbadfile. Some Windows
 512                                  * applications depend on the difference between
 513                                  * these two errors.
 514                                  */
 515                                 status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
 516                                 goto fail;
 517                         }
 518
 519                 } else {
 520                         char *found_name = NULL;
 521
 522                         /* Stat failed - ensure we don't use it. */
 523                         SET_STAT_INVALID(smb_fname->st);
 524
 525                         /*
 526                          * Reset errno so we can detect
 527                          * directory open errors.
 528                          */
 529                         errno = 0;
 530
 531                         /*
 532                          * Try to find this part of the path in the directory.
 533                          */
 534
 535                         if (name_has_wildcard ||
 536                             (get_real_filename(conn, dirpath, start,
 537                                                talloc_tos(),
 538                                                &found_name) == -1)) {
 539                                 char *unmangled;
 540
 541                                 if (end) {
 542                                         /*
 543                                          * An intermediate part of the name
 544                                          * can't be found.
 545                                          */
 546                                         DEBUG(5,("Intermediate not found %s\n",
 547                                                         start));
 548                                         *end = '/';
 549
 550                                         /*
 551                                          * We need to return the fact that the
 552                                          * intermediate name resolution failed.
 553                                          * This is used to return an error of
 554                                          * ERRbadpath rather than ERRbadfile.
 555                                          * Some Windows applications depend on
 556                                          * the difference between these two
 557                                          * errors.
 558                                          */
 559
 560                                         /*
 561                                          * ENOENT, ENOTDIR and ELOOP all map
 562                                          * to NT_STATUS_OBJECT_PATH_NOT_FOUND
 563                                          * in the filename walk.
 564                                          */
 565
 566                                         if (errno == ENOENT ||
 567                                                         errno == ENOTDIR ||
 568                                                         errno == ELOOP) {
 569                                                 status =
 570                                                 NT_STATUS_OBJECT_PATH_NOT_FOUND;
 571                                         }
 572                                         else {
 573                                                 status =
 574                                                 map_nt_error_from_unix(errno);
 575                                         }
 576                                         goto fail;
 577                                 }
 578
 579                                 /*
 580                                  * ENOENT/EACCESS are the only valid errors
 581                                  * here. EACCESS needs handling here for
 582                                  * "dropboxes", i.e. directories where users
 583                                  * can only put stuff with permission -wx.
 584                                  */
 585                                 if ((errno != 0) && (errno != ENOENT)
 586                                     && (errno != EACCES)) {
 587                                         /*
 588                                          * ENOTDIR and ELOOP both map to
 589                                          * NT_STATUS_OBJECT_PATH_NOT_FOUND
 590                                          * in the filename walk.
 591                                          */
 592                                         if (errno == ENOTDIR ||
 593                                                         errno == ELOOP) {
 594                                                 status =
 595                                                 NT_STATUS_OBJECT_PATH_NOT_FOUND;
 596                                         } else {
 597                                                 status =
 598                                                 map_nt_error_from_unix(errno);
 599                                         }
 600                                         goto fail;
 601                                 }
 602
 603                                 /*
 604                                  * Just the last part of the name doesn't exist.
 605                                  * We need to strupper() or strlower() it as
 606                                  * this conversion may be used for file creation
 607                                  * purposes. Fix inspired by
 608                                  * Thomas Neumann <t.neumann@iku-ag.de>.
 609                                  */
 610                                 if (!conn->case_preserve ||
 611                                     (mangle_is_8_3(start, False,
 612                                                    conn->params) &&
 613                                                  !conn->short_case_preserve)) {
 614                                         strnorm(start,
 615                                                 lp_defaultcase(SNUM(conn)));
 616                                 }
 617
 618                                 /*
 619                                  * check on the mangled stack to see if we can
 620                                  * recover the base of the filename.
 621                                  */
 622
 623                                 if (mangle_is_mangled(start, conn->params)
 624                                     && mangle_lookup_name_from_8_3(ctx,
 625                                                         start,
 626                                                         &unmangled,
 627                                                         conn->params)) {
 628                                         char *tmp;
 629                                         size_t start_ofs =
 630                                             start - smb_fname->base_name;
 631
 632                                         if (*dirpath != '\0') {
 633                                                 tmp = talloc_asprintf(
 634                                                         smb_fname, "%s/%s",
 635                                                         dirpath, unmangled);
 636                                                 TALLOC_FREE(unmangled);
 637                                         }
 638                                         else {
 639                                                 tmp = unmangled;
 640                                         }
 641                                         if (tmp == NULL) {
 642                                                 DEBUG(0, ("talloc failed\n"));
 643                                                 status = NT_STATUS_NO_MEMORY;
 644                                                 goto err;
 645                                         }
 646                                         TALLOC_FREE(smb_fname->base_name);
 647                                         smb_fname->base_name = tmp;
 648                                         start =
 649                                             smb_fname->base_name + start_ofs;
 650                                         end = start + strlen(start);
 651                                 }
 652
 653                                 DEBUG(5,("New file %s\n",start));
 654                                 goto done;
 655                         }
 656
 657
 658                         /*
 659                          * Restore the rest of the string. If the string was
 660                          * mangled the size may have changed.
 661                          */
 662                         if (end) {
 663                                 char *tmp;
 664                                 size_t start_ofs =
 665                                     start - smb_fname->base_name;
 666
 667                                 if (*dirpath != '\0') {
 668                                         tmp = talloc_asprintf(smb_fname,
 669                                                 "%s/%s/%s", dirpath,
 670                                                 found_name, end+1);
 671                                 }
 672                                 else {
 673                                         tmp = talloc_asprintf(smb_fname,
 674                                                 "%s/%s", found_name,
 675                                                 end+1);
 676                                 }
 677                                 if (tmp == NULL) {
 678                                         DEBUG(0, ("talloc_asprintf failed\n"));
 679                                         status = NT_STATUS_NO_MEMORY;
 680                                         goto err;
 681                                 }
 682                                 TALLOC_FREE(smb_fname->base_name);
 683                                 smb_fname->base_name = tmp;
 684                                 start = smb_fname->base_name + start_ofs;
 685                                 end = start + strlen(found_name);
 686                                 *end = '\0';
 687                         } else {
 688                                 char *tmp;
 689                                 size_t start_ofs =
 690                                     start - smb_fname->base_name;
 691
 692                                 if (*dirpath != '\0') {
 693                                         tmp = talloc_asprintf(smb_fname,
 694                                                 "%s/%s", dirpath,
 695                                                 found_name);
 696                                 } else {
 697                                         tmp = talloc_strdup(smb_fname,
 698                                                 found_name);
 699                                 }
 700                                 if (tmp == NULL) {
 701                                         DEBUG(0, ("talloc failed\n"));
 702                                         status = NT_STATUS_NO_MEMORY;
 703                                         goto err;
 704                                 }
 705                                 TALLOC_FREE(smb_fname->base_name);
 706                                 smb_fname->base_name = tmp;
 707                                 start = smb_fname->base_name + start_ofs;
 708
 709                                 /*
 710                                  * We just scanned for, and found the end of
 711                                  * the path. We must return a valid stat struct
 712                                  * if it exists. JRA.
 713                                  */
 714
 715                                 if (posix_pathnames) {
 716                                         ret = SMB_VFS_LSTAT(conn, smb_fname);
 717                                 } else {
 718                                         ret = SMB_VFS_STAT(conn, smb_fname);
 719                                 }
 720
 721                                 if (ret != 0) {
 722                                         SET_STAT_INVALID(smb_fname->st);
 723                                 }
 724                         }
 725
 726                         TALLOC_FREE(found_name);
 727                 } /* end else */
 728
 729 #ifdef DEVELOPER
 730                 /*
 731                  * This sucks!
 732                  * We should never provide different behaviors
 733                  * depending on DEVELOPER!!!
 734                  */
 735                 if (VALID_STAT(smb_fname->st)) {
 736                         bool delete_pending;
 737                         get_file_infos(vfs_file_id_from_sbuf(conn,
 738                                                              &smb_fname->st),
 739                                        &delete_pending, NULL);
 740                         if (delete_pending) {
 741                                 status = NT_STATUS_DELETE_PENDING;
 742                                 goto fail;
 743                         }
 744                 }
 745 #endif
 746
 747                 /*
 748                  * Add to the dirpath that we have resolved so far.
 749                  */
 750
 751                 if (*dirpath != '\0') {
 752                         char *tmp = talloc_asprintf(ctx,
 753                                         "%s/%s", dirpath, start);
 754                         if (!tmp) {
 755                                 DEBUG(0, ("talloc_asprintf failed\n"));
 756                                 status = NT_STATUS_NO_MEMORY;
 757                                 goto err;
 758                         }
 759                         TALLOC_FREE(dirpath);
 760                         dirpath = tmp;
 761                 }
 762                 else {
 763                         TALLOC_FREE(dirpath);
 764                         if (!(dirpath = talloc_strdup(ctx,start))) {
 765                                 DEBUG(0, ("talloc_strdup failed\n"));
 766                                 status = NT_STATUS_NO_MEMORY;
 767                                 goto err;
 768                         }
 769                 }
 770
 771                 /*
 772                  * Cache the dirpath thus far. Don't cache a name with mangled
 773                  * or wildcard components as this can change the size.
 774                  */
 775                 if(!component_was_mangled && !name_has_wildcard) {
 776                         stat_cache_add(orig_path, dirpath,
 777                                         conn->case_sensitive);
 778                 }
 779
 780                 /*
 781                  * Restore the / that we wiped out earlier.
 782                  */
 783                 if (end) {
 784                         *end = '/';
 785                 }
 786         }
 787
 788         /*
 789          * Cache the full path. Don't cache a name with mangled or wildcard
 790          * components as this can change the size.
 791          */
 792
 793         if(!component_was_mangled && !name_has_wildcard) {
 794                 stat_cache_add(orig_path, smb_fname->base_name,
 795                                conn->case_sensitive);
 796         }
 797
 798         /*
 799          * The name has been resolved.
 800          */
 801
 802         DEBUG(5,("conversion finished %s -> %s\n", orig_path,
 803                  smb_fname->base_name));
 804
 805  done:
 806         /* Add back the stream if one was stripped off originally. */
 807         if (stream != NULL) {
 808                 smb_fname->stream_name = stream;
 809
 810                 /* Check path now that the base_name has been converted. */
 811                 status = build_stream_path(ctx, conn, orig_path, smb_fname);
 812                 if (!NT_STATUS_IS_OK(status)) {
 813                         goto fail;
 814                 }
 815         }
 816         TALLOC_FREE(dirpath);
 817         *smb_fname_out = smb_fname;
 818         return NT_STATUS_OK;
 819  fail:
 820         DEBUG(10, ("dirpath = [%s] start = [%s]\n", dirpath, start));
 821         if (*dirpath != '\0') {
 822                 smb_fname->base_name = talloc_asprintf(smb_fname, "%s/%s",
 823                                                        dirpath, start);
 824         } else {
 825                 smb_fname->base_name = talloc_strdup(smb_fname, start);
 826         }
 827         if (!smb_fname->base_name) {
 828                 DEBUG(0, ("talloc_asprintf failed\n"));
 829                 status = NT_STATUS_NO_MEMORY;
 830                 goto err;
 831         }
 832
 833         *smb_fname_out = smb_fname;
 834         TALLOC_FREE(dirpath);
 835         return status;
 836  err:
 837         TALLOC_FREE(smb_fname);
 838         return status;
 839 }
 840
 841 /****************************************************************************
 842  Check a filename - possibly calling check_reduced_name.
 843  This is called by every routine before it allows an operation on a filename.
 844  It does any final confirmation necessary to ensure that the filename is
 845  a valid one for the user to access.
 846 ****************************************************************************/
 847
 848 NTSTATUS check_name(connection_struct *conn, const char *name)
 849 {
 850         if (IS_VETO_PATH(conn, name))  {
 851                 /* Is it not dot or dot dot. */
 852                 if (!((name[0] == '.') && (!name[1] ||
 853                                         (name[1] == '.' && !name[2])))) {
 854                         DEBUG(5,("check_name: file path name %s vetoed\n",
 855                                                 name));
 856                         return map_nt_error_from_unix(ENOENT);
 857                 }
 858         }
 859
 860         if (!lp_widelinks(SNUM(conn)) || !lp_symlinks(SNUM(conn))) {
 861                 NTSTATUS status = check_reduced_name(conn,name);
 862                 if (!NT_STATUS_IS_OK(status)) {
 863                         DEBUG(5,("check_name: name %s failed with %s\n",name,
 864                                                 nt_errstr(status)));
 865                         return status;
 866                 }
 867         }
 868
 869         return NT_STATUS_OK;
 870 }
 871
 872 /****************************************************************************
 873  Check if two filenames are equal.
 874  This needs to be careful about whether we are case sensitive.
 875 ****************************************************************************/
 876
 877 static bool fname_equal(const char *name1, const char *name2,
 878                 bool case_sensitive)
 879 {
 880         /* Normal filename handling */
 881         if (case_sensitive) {
 882                 return(strcmp(name1,name2) == 0);
 883         }
 884
 885         return(strequal(name1,name2));
 886 }
 887
 888 /****************************************************************************
 889  Scan a directory to find a filename, matching without case sensitivity.
 890  If the name looks like a mangled name then try via the mangling functions
 891 ****************************************************************************/
 892
 893 static int get_real_filename_full_scan(connection_struct *conn,
 894                                        const char *path, const char *name,
 895                                        bool mangled,
 896                                        TALLOC_CTX *mem_ctx, char **found_name)
 897 {
 898         struct smb_Dir *cur_dir;
 899         const char *dname = NULL;
 900         char *talloced = NULL;
 901         char *unmangled_name = NULL;
 902         long curpos;
 903
 904         /* handle null paths */
 905         if ((path == NULL) || (*path == 0)) {
 906                 path = ".";
 907         }
 908
 909         /* If we have a case-sensitive filesystem, it doesn't do us any
 910          * good to search for a name. If a case variation of the name was
 911          * there, then the original stat(2) would have found it.
 912          */
 913         if (!mangled && !(conn->fs_capabilities & FILE_CASE_SENSITIVE_SEARCH)) {
 914                 errno = ENOENT;
 915                 return -1;
 916         }
 917
 918         /*
 919          * The incoming name can be mangled, and if we de-mangle it
 920          * here it will not compare correctly against the filename (name2)
 921          * read from the directory and then mangled by the name_to_8_3()
 922          * call. We need to mangle both names or neither.
 923          * (JRA).
 924          *
 925          * Fix for bug found by Dina Fine. If in case sensitive mode then
 926          * the mangle cache is no good (3 letter extension could be wrong
 927          * case - so don't demangle in this case - leave as mangled and
 928          * allow the mangling of the directory entry read (which is done
 929          * case insensitively) to match instead. This will lead to more
 930          * false positive matches but we fail completely without it. JRA.
 931          */
 932
 933         if (mangled && !conn->case_sensitive) {
 934                 mangled = !mangle_lookup_name_from_8_3(talloc_tos(), name,
 935                                                        &unmangled_name,
 936                                                        conn->params);
 937                 if (!mangled) {
 938                         /* Name is now unmangled. */
 939                         name = unmangled_name;
 940                 }
 941         }
 942
 943         /* open the directory */
 944         if (!(cur_dir = OpenDir(talloc_tos(), conn, path, NULL, 0))) {
 945                 DEBUG(3,("scan dir didn't open dir [%s]\n",path));
 946                 TALLOC_FREE(unmangled_name);
 947                 return -1;
 948         }
 949
 950         /* now scan for matching names */
 951         curpos = 0;
 952         while ((dname = ReadDirName(cur_dir, &curpos, NULL, &talloced))) {
 953
 954                 /* Is it dot or dot dot. */
 955                 if (ISDOT(dname) || ISDOTDOT(dname)) {
 956                         TALLOC_FREE(talloced);
 957                         continue;
 958                 }
 959
 960                 /*
 961                  * At this point dname is the unmangled name.
 962                  * name is either mangled or not, depending on the state
 963                  * of the "mangled" variable. JRA.
 964                  */
 965
 966                 /*
 967                  * Check mangled name against mangled name, or unmangled name
 968                  * against unmangled name.
 969                  */
 970
 971                 if ((mangled && mangled_equal(name,dname,conn->params)) ||
 972                         fname_equal(name, dname, conn->case_sensitive)) {
 973                         /* we've found the file, change it's name and return */
 974                         *found_name = talloc_strdup(mem_ctx, dname);
 975                         TALLOC_FREE(unmangled_name);
 976                         TALLOC_FREE(cur_dir);
 977                         if (!*found_name) {
 978                                 errno = ENOMEM;
 979                                 TALLOC_FREE(talloced);
 980                                 return -1;
 981                         }
 982                         TALLOC_FREE(talloced);
 983                         return 0;
 984                 }
 985                 TALLOC_FREE(talloced);
 986         }
 987
 988         TALLOC_FREE(unmangled_name);
 989         TALLOC_FREE(cur_dir);
 990         errno = ENOENT;
 991         return -1;
 992 }
 993
 994 /****************************************************************************
 995  Wrapper around the vfs get_real_filename and the full directory scan
 996  fallback.
 997 ****************************************************************************/
 998
 999 int get_real_filename(connection_struct *conn, const char *path,
1000                       const char *name, TALLOC_CTX *mem_ctx,
1001                       char **found_name)
1002 {
1003         int ret;
1004         bool mangled;
1005
1006         mangled = mangle_is_mangled(name, conn->params);
1007
1008         if (mangled) {
1009                 return get_real_filename_full_scan(conn, path, name, mangled,
1010                                                    mem_ctx, found_name);
1011         }
1012
1013         /* Try the vfs first to take advantage of case-insensitive stat. */
1014         ret = SMB_VFS_GET_REAL_FILENAME(conn, path, name, mem_ctx, found_name);
1015
1016         /*
1017          * If the case-insensitive stat was successful, or returned an error
1018          * other than EOPNOTSUPP then there is no need to fall back on the
1019          * full directory scan.
1020          */
1021         if (ret == 0 || (ret == -1 && errno != EOPNOTSUPP)) {
1022                 return ret;
1023         }
1024
1025         return get_real_filename_full_scan(conn, path, name, mangled, mem_ctx,
1026                                            found_name);
1027 }
1028
1029 static NTSTATUS build_stream_path(TALLOC_CTX *mem_ctx,
1030                                   connection_struct *conn,
1031                                   const char *orig_path,
1032                                   struct smb_filename *smb_fname)
1033 {
1034         NTSTATUS status;
1035         unsigned int i, num_streams;
1036         struct stream_struct *streams = NULL;
1037
1038         if (SMB_VFS_STAT(conn, smb_fname) == 0) {
1039                 DEBUG(10, ("'%s' exists\n", smb_fname_str_dbg(smb_fname)));
1040                 return NT_STATUS_OK;
1041         }
1042
1043         if (errno != ENOENT) {
1044                 DEBUG(10, ("vfs_stat failed: %s\n", strerror(errno)));
1045                 status = map_nt_error_from_unix(errno);
1046                 goto fail;
1047         }
1048
1049         /* Fall back to a case-insensitive scan of all streams on the file. */
1050         status = SMB_VFS_STREAMINFO(conn, NULL, smb_fname->base_name, mem_ctx,
1051                                     &num_streams, &streams);
1052
1053         if (NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
1054                 SET_STAT_INVALID(smb_fname->st);
1055                 return NT_STATUS_OK;
1056         }
1057
1058         if (!NT_STATUS_IS_OK(status)) {
1059                 DEBUG(10, ("vfs_streaminfo failed: %s\n", nt_errstr(status)));
1060                 goto fail;
1061         }
1062
1063         for (i=0; i<num_streams; i++) {
1064                 DEBUG(10, ("comparing [%s] and [%s]: ",
1065                            smb_fname->stream_name, streams[i].name));
1066                 if (fname_equal(smb_fname->stream_name, streams[i].name,
1067                                 conn->case_sensitive)) {
1068                         DEBUGADD(10, ("equal\n"));
1069                         break;
1070                 }
1071                 DEBUGADD(10, ("not equal\n"));
1072         }
1073
1074         /* Couldn't find the stream. */
1075         if (i == num_streams) {
1076                 SET_STAT_INVALID(smb_fname->st);
1077                 TALLOC_FREE(streams);
1078                 return NT_STATUS_OK;
1079         }
1080
1081         DEBUG(10, ("case insensitive stream. requested: %s, actual: %s\n",
1082                 smb_fname->stream_name, streams[i].name));
1083
1084
1085         TALLOC_FREE(smb_fname->stream_name);
1086         smb_fname->stream_name = talloc_strdup(smb_fname, streams[i].name);
1087         if (smb_fname->stream_name == NULL) {
1088                 status = NT_STATUS_NO_MEMORY;
1089                 goto fail;
1090         }
1091
1092         SET_STAT_INVALID(smb_fname->st);
1093
1094         if (SMB_VFS_STAT(conn, smb_fname) == 0) {
1095                 DEBUG(10, ("'%s' exists\n", smb_fname_str_dbg(smb_fname)));
1096         }
1097         status = NT_STATUS_OK;
1098  fail:
1099         TALLOC_FREE(streams);
1100         return status;
1101 }
1102
1103 /**
1104  * Go through all the steps to validate a filename.
1105  *
1106  * @param ctx           talloc_ctx to allocate memory with.
1107  * @param conn          connection struct for vfs calls.
1108  * @param dfs_path      Whether this path requires dfs resolution.
1109  * @param name_in       The unconverted name.
1110  * @param ucf_flags     flags to pass through to unix_convert().
1111  *                      UCF_ALWAYS_ALLOW_WCARD_LCOMP will be OR'd in if
1112  *                      p_cont_wcard != NULL and is true and
1113  *                      UCF_COND_ALLOW_WCARD_LCOMP.
1114  * @param p_cont_wcard  If not NULL, will be set to true if the dfs path
1115  *                      resolution detects a wildcard.
1116  * @param pp_smb_fname  The final converted name will be allocated if the
1117  *                      return is NT_STATUS_OK.
1118  *
1119  * @return NT_STATUS_OK if all operations completed succesfully, appropriate
1120  *         error otherwise.
1121  */
1122 NTSTATUS filename_convert(TALLOC_CTX *ctx,
1123                                 connection_struct *conn,
1124                                 bool dfs_path,
1125                                 const char *name_in,
1126                                 uint32_t ucf_flags,
1127                                 bool *ppath_contains_wcard,
1128                                 struct smb_filename **pp_smb_fname)
1129 {
1130         NTSTATUS status;
1131         bool allow_wcards = (ucf_flags & (UCF_COND_ALLOW_WCARD_LCOMP|UCF_ALWAYS_ALLOW_WCARD_LCOMP));
1132         char *fname = NULL;
1133
1134         *pp_smb_fname = NULL;
1135
1136         status = resolve_dfspath_wcard(ctx, conn,
1137                                 dfs_path,
1138                                 name_in,
1139                                 allow_wcards,
1140                                 &fname,
1141                                 ppath_contains_wcard);
1142         if (!NT_STATUS_IS_OK(status)) {
1143                 DEBUG(10,("filename_convert: resolve_dfspath failed "
1144                         "for name %s with %s\n",
1145                         name_in,
1146                         nt_errstr(status) ));
1147                 return status;
1148         }
1149
1150         if (is_fake_file_path(name_in)) {
1151                 SMB_STRUCT_STAT st;
1152                 ZERO_STRUCT(st);
1153                 st.st_ex_nlink = 1;
1154                 status = create_synthetic_smb_fname_split(ctx,
1155                                                           name_in,
1156                                                           &st,
1157                                                           pp_smb_fname);
1158                 return status;
1159         }
1160
1161         /*
1162          * If the caller conditionally allows wildcard lookups, only add the
1163          * always allow if the path actually does contain a wildcard.
1164          */
1165         if (ucf_flags & UCF_COND_ALLOW_WCARD_LCOMP &&
1166             ppath_contains_wcard != NULL && *ppath_contains_wcard) {
1167                 ucf_flags |= UCF_ALWAYS_ALLOW_WCARD_LCOMP;
1168         }
1169
1170         status = unix_convert(ctx, conn, fname, pp_smb_fname, ucf_flags);
1171         if (!NT_STATUS_IS_OK(status)) {
1172                 DEBUG(10,("filename_convert: unix_convert failed "
1173                         "for name %s with %s\n",
1174                         fname,
1175                         nt_errstr(status) ));
1176                 return status;
1177         }
1178
1179         status = check_name(conn, (*pp_smb_fname)->base_name);
1180         if (!NT_STATUS_IS_OK(status)) {
1181                 DEBUG(3,("filename_convert: check_name failed "
1182                         "for name %s with %s\n",
1183                         smb_fname_str_dbg(*pp_smb_fname),
1184                         nt_errstr(status) ));
1185                 TALLOC_FREE(*pp_smb_fname);
1186                 return status;
1187         }
1188
1189         return status;
1190 }