source4/torture/rap/rap.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    test suite for various RAP operations
   4    Copyright (C) Volker Lendecke 2004
   5    Copyright (C) Tim Potter 2005
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License as published by
   9    the Free Software Foundation; either version 3 of the License, or
  10    (at your option) any later version.
  11
  12    This program is distributed in the hope that it will be useful,
  13    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15    GNU General Public License for more details.
  16
  17    You should have received a copy of the GNU General Public License
  18    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  19 */
  20
  21 #include "includes.h"
  22 #include "libcli/libcli.h"
  23 #include "torture/torture.h"
  24 #include "torture/util.h"
  25 #include "libcli/rap/rap.h"
  26 #include "libcli/raw/libcliraw.h"
  27 #include "libcli/libcli.h"
  28 #include "librpc/ndr/libndr.h"
  29 #include "param/param.h"
  30
  31 #define RAP_GOTO(call) do { \
  32         NTSTATUS _status; \
  33         _status = call; \
  34         if (!NT_STATUS_IS_OK(_status)) { \
  35                 result = _status; \
  36                 goto done; \
  37         } \
  38 } while (0)
  39
  40 #define NDR_GOTO(call) do { \
  41         enum ndr_err_code _ndr_err; \
  42         _ndr_err = call; \
  43         if (!NDR_ERR_CODE_IS_SUCCESS(_ndr_err)) { \
  44                 result = ndr_map_error2ntstatus(_ndr_err); \
  45                 goto done; \
  46         } \
  47 } while (0)
  48
  49 #define NDR_RETURN(call) do { \
  50         enum ndr_err_code _ndr_err; \
  51         _ndr_err = call; \
  52         if (!NDR_ERR_CODE_IS_SUCCESS(_ndr_err)) { \
  53                 return ndr_map_error2ntstatus(_ndr_err); \
  54         } \
  55 } while (0)
  56
  57 struct rap_call {
  58         uint16_t callno;
  59         char *paramdesc;
  60         const char *datadesc;
  61
  62         uint16_t status;
  63         uint16_t convert;
  64
  65         uint16_t rcv_paramlen, rcv_datalen;
  66
  67         struct ndr_push *ndr_push_param;
  68         struct ndr_push *ndr_push_data;
  69         struct ndr_pull *ndr_pull_param;
  70         struct ndr_pull *ndr_pull_data;
  71 };
  72
  73 #define RAPNDR_FLAGS (LIBNDR_FLAG_NOALIGN|LIBNDR_FLAG_STR_ASCII|LIBNDR_FLAG_STR_NULLTERM);
  74
  75 static struct rap_call *new_rap_cli_call(TALLOC_CTX *mem_ctx, uint16_t callno)
  76 {
  77         struct rap_call *call;
  78
  79         call = talloc(mem_ctx, struct rap_call);
  80
  81         if (call == NULL)
  82                 return NULL;
  83
  84         call->callno = callno;
  85         call->rcv_paramlen = 4;
  86
  87         call->paramdesc = NULL;
  88         call->datadesc = NULL;
  89
  90         call->ndr_push_param = ndr_push_init_ctx(mem_ctx, lp_iconv_convenience(global_loadparm));
  91         call->ndr_push_param->flags = RAPNDR_FLAGS;
  92
  93         call->ndr_push_data = ndr_push_init_ctx(mem_ctx, lp_iconv_convenience(global_loadparm));
  94         call->ndr_push_data->flags = RAPNDR_FLAGS;
  95
  96         return call;
  97 }
  98
  99 static void rap_cli_push_paramdesc(struct rap_call *call, char desc)
 100 {
 101         int len = 0;
 102
 103         if (call->paramdesc != NULL)
 104                 len = strlen(call->paramdesc);
 105
 106         call->paramdesc = talloc_realloc(call,
 107                                          call->paramdesc,
 108                                          char,
 109                                          len+2);
 110
 111         call->paramdesc[len] = desc;
 112         call->paramdesc[len+1] = '\0';
 113 }
 114
 115 static void rap_cli_push_word(struct rap_call *call, uint16_t val)
 116 {
 117         rap_cli_push_paramdesc(call, 'W');
 118         ndr_push_uint16(call->ndr_push_param, NDR_SCALARS, val);
 119 }
 120
 121 static void rap_cli_push_dword(struct rap_call *call, uint32_t val)
 122 {
 123         rap_cli_push_paramdesc(call, 'D');
 124         ndr_push_uint32(call->ndr_push_param, NDR_SCALARS, val);
 125 }
 126
 127 static void rap_cli_push_rcvbuf(struct rap_call *call, int len)
 128 {
 129         rap_cli_push_paramdesc(call, 'r');
 130         rap_cli_push_paramdesc(call, 'L');
 131         ndr_push_uint16(call->ndr_push_param, NDR_SCALARS, len);
 132         call->rcv_datalen = len;
 133 }
 134
 135 static void rap_cli_expect_multiple_entries(struct rap_call *call)
 136 {
 137         rap_cli_push_paramdesc(call, 'e');
 138         rap_cli_push_paramdesc(call, 'h');
 139         call->rcv_paramlen += 4; /* uint16_t entry count, uint16_t total */
 140 }
 141
 142 static void rap_cli_expect_word(struct rap_call *call)
 143 {
 144         rap_cli_push_paramdesc(call, 'h');
 145         call->rcv_paramlen += 2;
 146 }
 147
 148 static void rap_cli_push_string(struct rap_call *call, const char *str)
 149 {
 150         if (str == NULL) {
 151                 rap_cli_push_paramdesc(call, 'O');
 152                 return;
 153         }
 154         rap_cli_push_paramdesc(call, 'z');
 155         ndr_push_string(call->ndr_push_param, NDR_SCALARS, str);
 156 }
 157
 158 static void rap_cli_expect_format(struct rap_call *call, const char *format)
 159 {
 160         call->datadesc = format;
 161 }
 162
 163 static NTSTATUS rap_pull_string(TALLOC_CTX *mem_ctx, struct ndr_pull *ndr,
 164                                 uint16_t convert, char **dest)
 165 {
 166         uint16_t string_offset;
 167         uint16_t ignore;
 168         const char *p;
 169         size_t len;
 170
 171         NDR_RETURN(ndr_pull_uint16(ndr, NDR_SCALARS, &string_offset));
 172         NDR_RETURN(ndr_pull_uint16(ndr, NDR_SCALARS, &ignore));
 173
 174         string_offset -= convert;
 175
 176         if (string_offset+1 > ndr->data_size)
 177                 return NT_STATUS_INVALID_PARAMETER;
 178
 179         p = (const char *)(ndr->data + string_offset);
 180         len = strnlen(p, ndr->data_size-string_offset);
 181
 182         if ( string_offset + len + 1 >  ndr->data_size )
 183                 return NT_STATUS_INVALID_PARAMETER;
 184
 185         *dest = talloc_zero_array(mem_ctx, char, len+1);
 186         pull_string(ndr->iconv_convenience, *dest, p, len+1, len, STR_ASCII);
 187
 188         return NT_STATUS_OK;
 189 }
 190
 191 static NTSTATUS rap_cli_do_call(struct smbcli_tree *tree, struct rap_call *call)
 192 {
 193         NTSTATUS result;
 194         DATA_BLOB param_blob;
 195         struct ndr_push *params;
 196         struct smb_trans2 trans;
 197
 198         params = ndr_push_init_ctx(call, lp_iconv_convenience(global_loadparm));
 199
 200         if (params == NULL)
 201                 return NT_STATUS_NO_MEMORY;
 202
 203         params->flags = RAPNDR_FLAGS;
 204
 205         trans.in.max_param = call->rcv_paramlen;
 206         trans.in.max_data = smb_raw_max_trans_data(tree, call->rcv_paramlen);
 207         trans.in.max_setup = 0;
 208         trans.in.flags = 0;
 209         trans.in.timeout = 0;
 210         trans.in.setup_count = 0;
 211         trans.in.setup = NULL;
 212         trans.in.trans_name = "\\PIPE\\LANMAN";
 213
 214         NDR_RETURN(ndr_push_uint16(params, NDR_SCALARS, call->callno));
 215         if (call->paramdesc)
 216                 NDR_RETURN(ndr_push_string(params, NDR_SCALARS, call->paramdesc));
 217         if (call->datadesc)
 218                 NDR_RETURN(ndr_push_string(params, NDR_SCALARS, call->datadesc));
 219
 220         param_blob = ndr_push_blob(call->ndr_push_param);
 221         NDR_RETURN(ndr_push_bytes(params, param_blob.data,
 222                                  param_blob.length));
 223
 224         trans.in.params = ndr_push_blob(params);
 225         trans.in.data = data_blob(NULL, 0);
 226
 227         result = smb_raw_trans(tree, call, &trans);
 228
 229         if (!NT_STATUS_IS_OK(result))
 230                 return result;
 231
 232         call->ndr_pull_param = ndr_pull_init_blob(&trans.out.params, call,
 233                                                   lp_iconv_convenience(global_loadparm));
 234         call->ndr_pull_param->flags = RAPNDR_FLAGS;
 235
 236         call->ndr_pull_data = ndr_pull_init_blob(&trans.out.data, call,
 237                                                  lp_iconv_convenience(global_loadparm));
 238         call->ndr_pull_data->flags = RAPNDR_FLAGS;
 239
 240         return result;
 241 }
 242
 243
 244 static NTSTATUS smbcli_rap_netshareenum(struct smbcli_tree *tree,
 245                                         TALLOC_CTX *mem_ctx,
 246                                         struct rap_NetShareEnum *r)
 247 {
 248         struct rap_call *call;
 249         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 250         int i;
 251
 252         call = new_rap_cli_call(tree, RAP_WshareEnum);
 253
 254         if (call == NULL)
 255                 return NT_STATUS_NO_MEMORY;
 256
 257         rap_cli_push_word(call, r->in.level); /* Level */
 258         rap_cli_push_rcvbuf(call, r->in.bufsize);
 259         rap_cli_expect_multiple_entries(call);
 260
 261         switch(r->in.level) {
 262         case 0:
 263                 rap_cli_expect_format(call, "B13");
 264                 break;
 265         case 1:
 266                 rap_cli_expect_format(call, "B13BWz");
 267                 break;
 268         }
 269
 270         result = rap_cli_do_call(tree, call);
 271
 272         if (!NT_STATUS_IS_OK(result))
 273                 goto done;
 274
 275         NDR_GOTO(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.status));
 276         NDR_GOTO(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.convert));
 277         NDR_GOTO(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.count));
 278         NDR_GOTO(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.available));
 279
 280         r->out.info = talloc_array(mem_ctx, union rap_shareenum_info, r->out.count);
 281
 282         if (r->out.info == NULL) {
 283                 result = NT_STATUS_NO_MEMORY;
 284                 goto done;
 285         }
 286
 287         for (i=0; i<r->out.count; i++) {
 288                 switch(r->in.level) {
 289                 case 0:
 290                         NDR_GOTO(ndr_pull_bytes(call->ndr_pull_data,
 291                                               (uint8_t *)r->out.info[i].info0.name, 13));
 292                         break;
 293                 case 1:
 294                         NDR_GOTO(ndr_pull_bytes(call->ndr_pull_data,
 295                                               (uint8_t *)r->out.info[i].info1.name, 13));
 296                         NDR_GOTO(ndr_pull_bytes(call->ndr_pull_data,
 297                                               (uint8_t *)&r->out.info[i].info1.pad, 1));
 298                         NDR_GOTO(ndr_pull_uint16(call->ndr_pull_data,
 299                                                NDR_SCALARS, &r->out.info[i].info1.type));
 300                         RAP_GOTO(rap_pull_string(mem_ctx, call->ndr_pull_data,
 301                                                r->out.convert,
 302                                                &r->out.info[i].info1.comment));
 303                         break;
 304                 }
 305         }
 306
 307         result = NT_STATUS_OK;
 308
 309  done:
 310         talloc_free(call);
 311         return result;
 312 }
 313
 314 static bool test_netshareenum(struct smbcli_tree *tree)
 315 {
 316         struct rap_NetShareEnum r;
 317         int i;
 318         TALLOC_CTX *tmp_ctx = talloc_new(tree);
 319
 320         r.in.level = 1;
 321         r.in.bufsize = 8192;
 322
 323         if (!NT_STATUS_IS_OK(smbcli_rap_netshareenum(tree, tmp_ctx, &r)))
 324                 return false;
 325
 326         for (i=0; i<r.out.count; i++) {
 327                 printf("%s %d %s\n", r.out.info[i].info1.name,
 328                        r.out.info[i].info1.type,
 329                        r.out.info[i].info1.comment);
 330         }
 331
 332         talloc_free(tmp_ctx);
 333
 334         return true;
 335 }
 336
 337 static NTSTATUS smbcli_rap_netserverenum2(struct smbcli_tree *tree,
 338                                           TALLOC_CTX *mem_ctx,
 339                                           struct rap_NetServerEnum2 *r)
 340 {
 341         struct rap_call *call;
 342         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 343         int i;
 344
 345         call = new_rap_cli_call(mem_ctx, RAP_NetServerEnum2);
 346
 347         if (call == NULL)
 348                 return NT_STATUS_NO_MEMORY;
 349
 350         rap_cli_push_word(call, r->in.level);
 351         rap_cli_push_rcvbuf(call, r->in.bufsize);
 352         rap_cli_expect_multiple_entries(call);
 353         rap_cli_push_dword(call, r->in.servertype);
 354         rap_cli_push_string(call, r->in.domain);
 355
 356         switch(r->in.level) {
 357         case 0:
 358                 rap_cli_expect_format(call, "B16");
 359                 break;
 360         case 1:
 361                 rap_cli_expect_format(call, "B16BBDz");
 362                 break;
 363         }
 364
 365         result = rap_cli_do_call(tree, call);
 366
 367         if (!NT_STATUS_IS_OK(result))
 368                 goto done;
 369
 370         result = NT_STATUS_INVALID_PARAMETER;
 371
 372         NDR_GOTO(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.status));
 373         NDR_GOTO(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.convert));
 374         NDR_GOTO(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.count));
 375         NDR_GOTO(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.available));
 376
 377         r->out.info = talloc_array(mem_ctx, union rap_server_info, r->out.count);
 378
 379         if (r->out.info == NULL) {
 380                 result = NT_STATUS_NO_MEMORY;
 381                 goto done;
 382         }
 383
 384         for (i=0; i<r->out.count; i++) {
 385                 switch(r->in.level) {
 386                 case 0:
 387                         NDR_GOTO(ndr_pull_bytes(call->ndr_pull_data,
 388                                               (uint8_t *)r->out.info[i].info0.name, 16));
 389                         break;
 390                 case 1:
 391                         NDR_GOTO(ndr_pull_bytes(call->ndr_pull_data,
 392                                               (uint8_t *)r->out.info[i].info1.name, 16));
 393                         NDR_GOTO(ndr_pull_bytes(call->ndr_pull_data,
 394                                               &r->out.info[i].info1.version_major, 1));
 395                         NDR_GOTO(ndr_pull_bytes(call->ndr_pull_data,
 396                                               &r->out.info[i].info1.version_minor, 1));
 397                         NDR_GOTO(ndr_pull_uint32(call->ndr_pull_data,
 398                                                NDR_SCALARS, &r->out.info[i].info1.servertype));
 399                         RAP_GOTO(rap_pull_string(mem_ctx, call->ndr_pull_data,
 400                                                r->out.convert,
 401                                                &r->out.info[i].info1.comment));
 402                 }
 403         }
 404
 405         result = NT_STATUS_OK;
 406
 407  done:
 408         talloc_free(call);
 409         return result;
 410 }
 411
 412 static bool test_netserverenum(struct smbcli_tree *tree)
 413 {
 414         struct rap_NetServerEnum2 r;
 415         int i;
 416         TALLOC_CTX *tmp_ctx = talloc_new(tree);
 417
 418         r.in.level = 0;
 419         r.in.bufsize = 8192;
 420         r.in.servertype = 0xffffffff;
 421         r.in.servertype = 0x80000000;
 422         r.in.domain = NULL;
 423
 424         if (!NT_STATUS_IS_OK(smbcli_rap_netserverenum2(tree, tmp_ctx, &r)))
 425                 return false;
 426
 427         for (i=0; i<r.out.count; i++) {
 428                 switch (r.in.level) {
 429                 case 0:
 430                         printf("%s\n", r.out.info[i].info0.name);
 431                         break;
 432                 case 1:
 433                         printf("%s %x %s\n", r.out.info[i].info1.name,
 434                                r.out.info[i].info1.servertype,
 435                                r.out.info[i].info1.comment);
 436                         break;
 437                 }
 438         }
 439
 440         talloc_free(tmp_ctx);
 441
 442         return true;
 443 }
 444
 445 _PUBLIC_ NTSTATUS smbcli_rap_netservergetinfo(struct smbcli_tree *tree,
 446                                      TALLOC_CTX *mem_ctx,
 447                                      struct rap_WserverGetInfo *r)
 448 {
 449         struct rap_call *call;
 450         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 451
 452         if (!(call = new_rap_cli_call(mem_ctx, RAP_WserverGetInfo))) {
 453                 return NT_STATUS_NO_MEMORY;
 454         }
 455
 456         rap_cli_push_word(call, r->in.level);
 457         rap_cli_push_rcvbuf(call, r->in.bufsize);
 458         rap_cli_expect_word(call);
 459
 460         switch(r->in.level) {
 461         case 0:
 462                 rap_cli_expect_format(call, "B16");
 463                 break;
 464         case 1:
 465                 rap_cli_expect_format(call, "B16BBDz");
 466                 break;
 467         default:
 468                 result = NT_STATUS_INVALID_PARAMETER;
 469                 goto done;
 470         }
 471
 472         result = rap_cli_do_call(tree, call);
 473
 474         if (!NT_STATUS_IS_OK(result))
 475                 goto done;
 476
 477         NDR_GOTO(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.status));
 478         NDR_GOTO(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.convert));
 479         NDR_GOTO(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.available));
 480
 481         switch(r->in.level) {
 482         case 0:
 483                 NDR_GOTO(ndr_pull_bytes(call->ndr_pull_data,
 484                                       (uint8_t *)r->out.info.info0.name, 16));
 485                 break;
 486         case 1:
 487                 NDR_GOTO(ndr_pull_bytes(call->ndr_pull_data,
 488                                       (uint8_t *)r->out.info.info1.name, 16));
 489                 NDR_GOTO(ndr_pull_bytes(call->ndr_pull_data,
 490                                       &r->out.info.info1.version_major, 1));
 491                 NDR_GOTO(ndr_pull_bytes(call->ndr_pull_data,
 492                                       &r->out.info.info1.version_minor, 1));
 493                 NDR_GOTO(ndr_pull_uint32(call->ndr_pull_data,
 494                                        NDR_SCALARS, &r->out.info.info1.servertype));
 495                 RAP_GOTO(rap_pull_string(mem_ctx, call->ndr_pull_data,
 496                                        r->out.convert,
 497                                        &r->out.info.info1.comment));
 498         }
 499  done:
 500         talloc_free(call);
 501         return result;
 502 }
 503
 504 static bool test_netservergetinfo(struct smbcli_tree *tree)
 505 {
 506         struct rap_WserverGetInfo r;
 507         bool res = true;
 508         TALLOC_CTX *mem_ctx;
 509
 510         if (!(mem_ctx = talloc_new(tree))) {
 511                 return false;
 512         }
 513
 514         r.in.bufsize = 0xffff;
 515
 516         r.in.level = 0;
 517         res &= NT_STATUS_IS_OK(smbcli_rap_netservergetinfo(tree, mem_ctx, &r));
 518         r.in.level = 1;
 519         res &= NT_STATUS_IS_OK(smbcli_rap_netservergetinfo(tree, mem_ctx, &r));
 520
 521         talloc_free(mem_ctx);
 522         return res;
 523 }
 524
 525 static bool test_rap(struct smbcli_tree *tree)
 526 {
 527         bool res = true;
 528
 529         res &= test_netserverenum(tree);
 530         res &= test_netshareenum(tree);
 531         res &= test_netservergetinfo(tree);
 532
 533         return res;
 534 }
 535
 536 bool torture_rap_basic(struct torture_context *torture)
 537 {
 538         struct smbcli_state *cli;
 539         bool ret = true;
 540         TALLOC_CTX *mem_ctx;
 541
 542         if (!torture_open_connection(&cli, torture, 0)) {
 543                 return false;
 544         }
 545
 546         mem_ctx = talloc_init("torture_rap_basic");
 547
 548         if (!test_rap(cli->tree)) {
 549                 ret = false;
 550         }
 551
 552         torture_close_connection(cli);
 553         talloc_free(mem_ctx);
 554
 555         return ret;
 556 }
 557
 558 bool torture_rap_scan(struct torture_context *torture)
 559 {
 560         TALLOC_CTX *mem_ctx;
 561         struct smbcli_state *cli;
 562         int callno;
 563
 564         mem_ctx = talloc_init("torture_rap_scan");
 565
 566         if (!torture_open_connection(&cli, torture, 0)) {
 567                 return false;
 568         }
 569
 570         for (callno = 0; callno < 0xffff; callno++) {
 571                 struct rap_call *call = new_rap_cli_call(mem_ctx, callno);
 572                 NTSTATUS result;
 573
 574                 result = rap_cli_do_call(cli->tree, call);
 575
 576                 if (!NT_STATUS_EQUAL(result, NT_STATUS_INVALID_PARAMETER))
 577                         continue;
 578
 579                 printf("callno %d is RAP call\n", callno);
 580         }
 581
 582         torture_close_connection(cli);
 583
 584         return true;
 585 }
 586
 587 NTSTATUS torture_rap_init(void)
 588 {
 589         struct torture_suite *suite = torture_suite_create(
 590                                                                         talloc_autofree_context(),
 591                                                                         "RAP");
 592
 593         torture_suite_add_simple_test(suite, "BASIC", torture_rap_basic);
 594         torture_suite_add_simple_test(suite, "SCAN", torture_rap_scan);
 595
 596         suite->description = talloc_strdup(suite,
 597                                                 "Remote Administration Protocol tests");
 598
 599         torture_register_suite(suite);
 600
 601         return NT_STATUS_OK;
 602 }