2 Unix SMB/CIFS implementation.
4 Copyright (C) Volker Lendecke 2011
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
21 #include "locking/proto.h"
22 #include "torture/proto.h"
23 #include "system/filesys.h"
24 #include "system/select.h"
25 #include "libsmb/libsmb.h"
26 #include "libcli/smb/smbXcli_base.h"
27 #include "libcli/security/security.h"
28 #include "librpc/gen_ndr/open_files.h"
30 bool run_cleanup1(int dummy)
32 struct cli_state *cli;
33 const char *fname = "\\cleanup1";
37 printf("CLEANUP1: Checking that a conflicting share mode is cleaned "
40 if (!torture_open_connection(&cli, 0)) {
43 status = cli_openx(cli, fname, O_RDWR|O_CREAT, DENY_ALL, &fnum);
44 if (!NT_STATUS_IS_OK(status)) {
45 printf("open of %s failed (%s)\n", fname, nt_errstr(status));
48 status = smbXcli_conn_samba_suicide(cli->conn, 1);
49 if (!NT_STATUS_IS_OK(status)) {
50 printf("smbXcli_conn_samba_suicide failed: %s\n",
55 if (!torture_open_connection(&cli, 1)) {
58 status = cli_ntcreate(
60 FILE_GENERIC_READ|FILE_GENERIC_WRITE|DELETE_ACCESS,
61 FILE_ATTRIBUTE_NORMAL,
62 FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
63 FILE_OPEN, FILE_DELETE_ON_CLOSE, 0, &fnum, NULL);
64 if (!NT_STATUS_IS_OK(status)) {
65 printf("2nd open of %s failed (%s)\n", fname,
71 torture_close_connection(cli);
72 return NT_STATUS_IS_OK(status);
75 bool run_cleanup2(int dummy)
77 struct cli_state *cli1, *cli2, *cli3;
78 const char *fname = "\\cleanup2";
79 uint16_t fnum1, fnum2, fnum3;
83 printf("CLEANUP2: Checking that a conflicting brlock is cleaned up\n");
85 if (!torture_open_connection(&cli1, 0)) {
88 status = cli_ntcreate(
89 cli1, fname, 0, FILE_GENERIC_READ|FILE_GENERIC_WRITE,
90 FILE_ATTRIBUTE_NORMAL,
91 FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
92 FILE_OVERWRITE_IF, 0, 0, &fnum1, NULL);
93 if (!NT_STATUS_IS_OK(status)) {
94 printf("open of %s failed (%s)\n", fname, nt_errstr(status));
97 status = cli_lock32(cli1, fnum1, 0, 1, 0, WRITE_LOCK);
98 if (!NT_STATUS_IS_OK(status)) {
99 printf("lock failed (%s)\n", nt_errstr(status));
103 if (!torture_open_connection(&cli3, 1)) {
106 status = cli_ntcreate(
107 cli3, fname, 0, FILE_GENERIC_READ|FILE_GENERIC_WRITE,
108 FILE_ATTRIBUTE_NORMAL,
109 FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
110 FILE_OVERWRITE_IF, 0, 0, &fnum3, NULL);
111 if (!NT_STATUS_IS_OK(status)) {
112 printf("open of %s failed (%s)\n", fname, nt_errstr(status));
115 status = cli_lock32(cli3, fnum3, 1, 1, 0, WRITE_LOCK);
116 if (!NT_STATUS_IS_OK(status)) {
117 printf("lock failed (%s)\n", nt_errstr(status));
121 status = cli_lock32(cli1, fnum1, 2, 1, 0, WRITE_LOCK);
122 if (!NT_STATUS_IS_OK(status)) {
123 printf("lock failed (%s)\n", nt_errstr(status));
128 * Check the file is indeed locked
130 if (!torture_open_connection(&cli2, 1)) {
133 status = cli_ntcreate(
134 cli2, fname, 0, FILE_GENERIC_READ|FILE_GENERIC_WRITE,
135 FILE_ATTRIBUTE_NORMAL,
136 FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
137 FILE_OPEN, 0, 0, &fnum2, NULL);
138 if (!NT_STATUS_IS_OK(status)) {
139 printf("open of %s failed (%s)\n", fname, nt_errstr(status));
143 status = cli_smbwrite(cli2, fnum2, &buf, 0, 1, NULL);
144 if (!NT_STATUS_EQUAL(status, NT_STATUS_FILE_LOCK_CONFLICT)) {
145 printf("write succeeded\n");
150 * Kill the lock holder
152 status = smbXcli_conn_samba_suicide(cli1->conn, 1);
153 if (!NT_STATUS_IS_OK(status)) {
154 printf("smbXcli_conn_samba_suicide failed: %s\n",
160 * Give the suicidal smbd a bit of time to really pass away
164 status = cli_smbwrite(cli2, fnum2, &buf, 0, 1, NULL);
165 if (!NT_STATUS_IS_OK(status)) {
166 printf("write failed: %s\n", nt_errstr(status));
172 static bool create_stale_share_mode_entry(const char *fname,
173 struct file_id *p_id)
175 struct cli_state *cli;
178 SMB_STRUCT_STAT sbuf;
181 if (!torture_open_connection(&cli, 0)) {
185 status = torture_setup_unix_extensions(cli);
186 if (!NT_STATUS_IS_OK(status)) {
187 printf("torture_setup_unix_extensions failed: %s\n",
191 status = cli_openx(cli, fname, O_RDWR|O_CREAT, DENY_ALL, &fnum);
192 if (!NT_STATUS_IS_OK(status)) {
193 printf("open of %s failed (%s)\n", fname, nt_errstr(status));
196 status = cli_posix_stat(cli, fname, &sbuf);
197 if (!NT_STATUS_IS_OK(status)) {
198 printf("cli_posix_stat failed: %s\n", nt_errstr(status));
201 status = smbXcli_conn_samba_suicide(cli->conn, 1);
202 if (!NT_STATUS_IS_OK(status)) {
203 printf("smbXcli_conn_samba_suicide failed: %s\n",
208 id.devid = sbuf.st_ex_rdev;
209 id.inode = sbuf.st_ex_ino;
218 static bool corrupt_dummy(struct share_mode_data *d)
223 static bool invalidate_sharemode(struct share_mode_data *d)
225 d->share_modes[0].op_type =
226 OPLOCK_EXCLUSIVE|OPLOCK_BATCH|OPLOCK_LEVEL_II;
231 static bool duplicate_entry(struct share_mode_data *d, int i)
233 struct share_mode_entry *tmp;
235 if (i >= d->num_share_modes) {
239 tmp = talloc_realloc(d, d->share_modes, struct share_mode_entry,
240 d->num_share_modes + 1);
244 d->share_modes = tmp;
245 d->num_share_modes += 1;
246 d->share_modes[d->num_share_modes-1] = d->share_modes[i];
251 static bool create_duplicate_batch(struct share_mode_data *d)
253 if (d->num_share_modes != 1) {
256 d->share_modes[0].op_type = OPLOCK_BATCH;
257 if (!duplicate_entry(d, 0)) {
263 struct corruption_fns {
264 bool (*fn)(struct share_mode_data *d);
268 bool run_cleanup3(int dummy)
270 struct cli_state *cli;
271 const char *fname = "cleanup3";
274 struct share_mode_lock *lck;
278 struct corruption_fns fns[] = {
279 { corrupt_dummy, "no corruption" },
280 { invalidate_sharemode, "invalidate_sharemode" },
281 { create_duplicate_batch, "create_duplicate_batch" },
284 printf("CLEANUP3: Checking that a share mode is cleaned up on "
287 for (i=0; i<ARRAY_SIZE(fns); i++) {
289 printf("testing %s\n", fns[i].descr);
291 if (!create_stale_share_mode_entry(fname, &id)) {
292 printf("create_stale_entry failed\n");
296 printf("%d %d %d\n", (int)id.devid, (int)id.inode,
299 if (!locking_init()) {
300 printf("locking_init failed\n");
303 lck = get_existing_share_mode_lock(talloc_tos(), id);
305 printf("get_existing_share_mode_lock failed\n");
308 if (lck->data->num_share_modes != 1) {
309 printf("get_existing_share_mode_lock did clean up\n");
313 fns[i].fn(lck->data);
317 if (!torture_open_connection(&cli, 0)) {
320 status = cli_openx(cli, fname, O_RDWR|O_CREAT, DENY_ALL,
322 if (!NT_STATUS_IS_OK(status)) {
323 printf("open of %s failed (%s)\n", fname,
327 lck = get_existing_share_mode_lock(talloc_tos(), id);
329 printf("get_existing_share_mode_lock failed\n");
332 if (lck->data->num_share_modes != 1) {
333 printf("conflicting open did not clean up\n");
338 torture_close_connection(cli);
344 bool run_cleanup4(int dummy)
346 struct cli_state *cli1, *cli2;
347 const char *fname = "\\cleanup4";
348 uint16_t fnum1, fnum2;
351 printf("CLEANUP4: Checking that a conflicting share mode is cleaned "
354 if (!torture_open_connection(&cli1, 0)) {
357 if (!torture_open_connection(&cli2, 0)) {
361 status = cli_ntcreate(
363 FILE_GENERIC_READ|DELETE_ACCESS,
364 FILE_ATTRIBUTE_NORMAL,
365 FILE_SHARE_READ|FILE_SHARE_DELETE,
366 FILE_OVERWRITE_IF, 0, 0, &fnum1, NULL);
367 if (!NT_STATUS_IS_OK(status)) {
368 printf("creating file failed: %s\n",
373 status = cli_ntcreate(
375 FILE_GENERIC_READ|DELETE_ACCESS,
376 FILE_ATTRIBUTE_NORMAL,
377 FILE_SHARE_READ|FILE_SHARE_DELETE,
378 FILE_OPEN, 0, 0, &fnum2, NULL);
379 if (!NT_STATUS_IS_OK(status)) {
380 printf("opening file 1st time failed: %s\n",
385 status = smbXcli_conn_samba_suicide(cli1->conn, 1);
386 if (!NT_STATUS_IS_OK(status)) {
387 printf("smbXcli_conn_samba_suicide failed: %s\n",
393 * The next open will conflict with both opens above. The first open
394 * above will be correctly cleaned up. A bug in smbd iterating over
395 * the share mode array made it skip the share conflict check for the
396 * second open. Trigger this bug.
399 status = cli_ntcreate(
401 FILE_GENERIC_WRITE|DELETE_ACCESS,
402 FILE_ATTRIBUTE_NORMAL,
403 FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
404 FILE_OPEN, 0, 0, &fnum2, NULL);
405 if (!NT_STATUS_EQUAL(status, NT_STATUS_SHARING_VIOLATION)) {
406 printf("opening file 2nd time returned: %s\n",