-/*
+/*
Unix SMB/CIFS implementation.
filename handling routines
Copyright (C) Andrew Tridgell 1992-1998
- Copyright (C) Jeremy Allison 1999-2004
+ Copyright (C) Jeremy Allison 1999-2007
Copyright (C) Ying Chen 2000
-
+ Copyright (C) Volker Lendecke 2007
+
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
+ the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
-
+
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
-
+
You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+ along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
/*
#include "includes.h"
-static BOOL scan_directory(const char *path, char *name,size_t maxlength,
- connection_struct *conn,BOOL docache);
+static NTSTATUS build_stream_path(TALLOC_CTX *mem_ctx,
+ connection_struct *conn,
+ const char *orig_path,
+ struct smb_filename *smb_fname);
/****************************************************************************
- Check if two filenames are equal.
- This needs to be careful about whether we are case sensitive.
+ Mangle the 2nd name and check if it is then equal to the first name.
****************************************************************************/
-static BOOL fname_equal(const char *name1, const char *name2, BOOL case_sensitive)
+static bool mangled_equal(const char *name1,
+ const char *name2,
+ const struct share_params *p)
{
- /* Normal filename handling */
- if (case_sensitive)
- return(strcmp(name1,name2) == 0);
+ char mname[13];
- return(strequal(name1,name2));
+ if (!name_to_8_3(name2, mname, False, p)) {
+ return False;
+ }
+ return strequal(name1, mname);
}
/****************************************************************************
- Mangle the 2nd name and check if it is then equal to the first name.
+ Cope with the differing wildcard and non-wildcard error cases.
****************************************************************************/
-static BOOL mangled_equal(const char *name1, const char *name2, int snum)
+static NTSTATUS determine_path_error(const char *name,
+ bool allow_wcard_last_component)
{
- pstring tmpname;
-
- pstrcpy(tmpname, name2);
- mangle_map(tmpname, True, False, snum);
- return strequal(name1, tmpname);
+ const char *p;
+
+ if (!allow_wcard_last_component) {
+ /* Error code within a pathname. */
+ return NT_STATUS_OBJECT_PATH_NOT_FOUND;
+ }
+
+ /* We're terminating here so we
+ * can be a little slower and get
+ * the error code right. Windows
+ * treats the last part of the pathname
+ * separately I think, so if the last
+ * component is a wildcard then we treat
+ * this ./ as "end of component" */
+
+ p = strchr(name, '/');
+
+ if (!p && (ms_has_wild(name) || ISDOT(name))) {
+ /* Error code at the end of a pathname. */
+ return NT_STATUS_OBJECT_NAME_INVALID;
+ } else {
+ /* Error code within a pathname. */
+ return NT_STATUS_OBJECT_PATH_NOT_FOUND;
+ }
}
/****************************************************************************
This routine is called to convert names from the dos namespace to unix
-namespace. It needs to handle any case conversions, mangling, format
-changes etc.
+namespace. It needs to handle any case conversions, mangling, format changes,
+streams etc.
We assume that we have already done a chdir() to the right "root" directory
for this service.
-The function will return False if some part of the name except for the last
-part cannot be resolved
+The function will return an NTSTATUS error if some part of the name except for
+the last part cannot be resolved, else NT_STATUS_OK.
+
+Note NT_STATUS_OK doesn't mean the name exists or is valid, just that we
+didn't get any fatal errors that should immediately terminate the calling SMB
+processing whilst resolving.
+
+If the UCF_SAVE_LCOMP flag is passed in, then the unmodified last component
+of the pathname is set in smb_filename->original_lcomp.
-If the saved_last_component != 0, then the unmodified last component
-of the pathname is returned there. This is used in an exceptional
-case in reply_mv (so far). If saved_last_component == 0 then nothing
-is returned there.
+If UCF_ALLOW_WCARD_LCOMP is passed in, then a MS wildcard was detected and
+should be allowed in the last component of the path only.
-The bad_path arg is set to True if the filename walk failed. This is
-used to pick the correct error code to return between ENOENT and ENOTDIR
-as Windows applications depend on ERRbadpath being returned if a component
-of a pathname does not exist.
+If the orig_path was a stream, smb_filename->base_name will point to the base
+filename, and smb_filename->stream_name will point to the stream name. If
+orig_path was not a stream, then smb_filename->stream_name will be NULL.
-On exit from unix_convert, if *pst was not null, then the file stat
-struct will be returned if the file exists and was found, if not this
-stat struct will be filled with zeros (and this can be detected by checking
-for nlinks = 0, which can never be true for any file).
+On exit from unix_convert, the smb_filename->st stat struct will be populated
+if the file exists and was found, if not this stat struct will be filled with
+zeros (and this can be detected by checking for nlinks = 0, which can never be
+true for any file).
****************************************************************************/
-BOOL unix_convert(pstring name,connection_struct *conn,char *saved_last_component,
- BOOL *bad_path, SMB_STRUCT_STAT *pst)
+NTSTATUS unix_convert(TALLOC_CTX *ctx,
+ connection_struct *conn,
+ const char *orig_path,
+ struct smb_filename **smb_fname_out,
+ uint32_t ucf_flags)
{
- SMB_STRUCT_STAT st;
+ struct smb_filename *smb_fname = NULL;
char *start, *end;
- pstring dirpath;
- pstring orig_path;
- BOOL component_was_mangled = False;
- BOOL name_has_wildcard = False;
-
- ZERO_STRUCTP(pst);
-
- *dirpath = 0;
- *bad_path = False;
- if(saved_last_component)
- *saved_last_component = 0;
+ char *dirpath = NULL;
+ char *stream = NULL;
+ bool component_was_mangled = False;
+ bool name_has_wildcard = False;
+ bool posix_pathnames = false;
+ bool allow_wcard_last_component = ucf_flags & UCF_ALLOW_WCARD_LCOMP;
+ bool save_last_component = ucf_flags & UCF_SAVE_LCOMP;
+ NTSTATUS status;
+ int ret = -1;
+
+ *smb_fname_out = NULL;
+
+ smb_fname = talloc_zero(ctx, struct smb_filename);
+ if (smb_fname == NULL) {
+ return NT_STATUS_NO_MEMORY;
+ }
if (conn->printer) {
/* we don't ever use the filenames on a printer share as a
filename - so don't convert them */
- return True;
+ if (!(smb_fname->base_name = talloc_strdup(smb_fname,
+ orig_path))) {
+ status = NT_STATUS_NO_MEMORY;
+ goto err;
+ }
+ goto done;
}
- DEBUG(5, ("unix_convert called on file \"%s\"\n", name));
+ DEBUG(5, ("unix_convert called on file \"%s\"\n", orig_path));
- /*
- * Conversion to basic unix format is already done in check_path_syntax().
+ /*
+ * Conversion to basic unix format is already done in
+ * check_path_syntax().
*/
- /*
+ /*
* Names must be relative to the root of the service - any leading /.
* and trailing /'s should have been trimmed by check_path_syntax().
*/
#ifdef DEVELOPER
- SMB_ASSERT(*name != '/');
+ SMB_ASSERT(*orig_path != '/');
#endif
/*
* As we know this is valid we can return true here.
*/
- if (!*name) {
- name[0] = '.';
- name[1] = '\0';
- return(True);
+ if (!*orig_path) {
+ if (!(smb_fname->base_name = talloc_strdup(smb_fname, "."))) {
+ status = NT_STATUS_NO_MEMORY;
+ goto err;
+ }
+ if (SMB_VFS_STAT(conn, smb_fname) != 0) {
+ status = map_nt_error_from_unix(errno);
+ goto err;
+ }
+ DEBUG(5, ("conversion finished \"\" -> %s\n",
+ smb_fname->base_name));
+ goto done;
+ }
+
+ if (orig_path[0] == '.' && (orig_path[1] == '/' ||
+ orig_path[1] == '\0')) {
+ /* Start of pathname can't be "." only. */
+ if (orig_path[1] == '\0' || orig_path[2] == '\0') {
+ status = NT_STATUS_OBJECT_NAME_INVALID;
+ } else {
+ status =determine_path_error(&orig_path[2],
+ allow_wcard_last_component);
+ }
+ goto err;
+ }
+
+ /* Start with the full orig_path as given by the caller. */
+ if (!(smb_fname->base_name = talloc_strdup(smb_fname, orig_path))) {
+ DEBUG(0, ("talloc_strdup failed\n"));
+ status = NT_STATUS_NO_MEMORY;
+ goto err;
+ }
+
+ /*
+ * Large directory fix normalization. If we're case sensitive, and
+ * the case preserving parameters are set to "no", normalize the case of
+ * the incoming filename from the client WHETHER IT EXISTS OR NOT !
+ * This is in conflict with the current (3.0.20) man page, but is
+ * what people expect from the "large directory howto". I'll update
+ * the man page. Thanks to jht@samba.org for finding this. JRA.
+ */
+
+ if (conn->case_sensitive && !conn->case_preserve &&
+ !conn->short_case_preserve) {
+ strnorm(smb_fname->base_name, lp_defaultcase(SNUM(conn)));
}
/*
* Ensure saved_last_component is valid even if file exists.
*/
- if(saved_last_component) {
- end = strrchr_m(name, '/');
- if(end)
- pstrcpy(saved_last_component, end + 1);
- else
- pstrcpy(saved_last_component, name);
+ if(save_last_component) {
+ end = strrchr_m(smb_fname->base_name, '/');
+ if (end) {
+ smb_fname->original_lcomp = talloc_strdup(smb_fname,
+ end + 1);
+ } else {
+ smb_fname->original_lcomp =
+ talloc_strdup(smb_fname, smb_fname->base_name);
+ }
+ if (smb_fname->original_lcomp == NULL) {
+ status = NT_STATUS_NO_MEMORY;
+ goto err;
+ }
}
-#if 1
- if (!conn->case_preserve || (mangle_is_8_3(name, False) && !conn->short_case_preserve))
-#else
- if (!conn->case_sensitive && (!conn->case_preserve || (mangle_is_8_3(name, False) && !conn->short_case_preserve)))
-#endif
- strnorm(name, lp_defaultcase(SNUM(conn)));
+ posix_pathnames = lp_posix_pathnames();
+
+ /*
+ * Strip off the stream, and add it back when we're done with the
+ * base_name.
+ */
+ if (!posix_pathnames) {
+ stream = strchr_m(smb_fname->base_name, ':');
+
+ if (stream != NULL) {
+ char *tmp = talloc_strdup(smb_fname, stream);
+ if (tmp == NULL) {
+ status = NT_STATUS_NO_MEMORY;
+ goto err;
+ }
+ /*
+ * Since this is actually pointing into
+ * smb_fname->base_name this truncates base_name.
+ */
+ *stream = '\0';
+ stream = tmp;
+ }
+ }
- start = name;
- pstrcpy(orig_path, name);
+ start = smb_fname->base_name;
+
+ /*
+ * If we're providing case insentive semantics or
+ * the underlying filesystem is case insensitive,
+ * then a case-normalized hit in the stat-cache is
+ * authoratitive. JRA.
+ *
+ * Note: We're only checking base_name. The stream_name will be
+ * added and verified in build_stream_path().
+ */
+
+ if((!conn->case_sensitive || !(conn->fs_capabilities &
+ FILE_CASE_SENSITIVE_SEARCH)) &&
+ stat_cache_lookup(conn, &smb_fname->base_name, &dirpath, &start,
+ &smb_fname->st)) {
+ goto done;
+ }
+
+ /*
+ * Make sure "dirpath" is an allocated string, we use this for
+ * building the directories with asprintf and free it.
+ */
- if(!conn->case_sensitive && stat_cache_lookup(conn, name, dirpath, &start, &st)) {
- *pst = st;
- return True;
+ if ((dirpath == NULL) && (!(dirpath = talloc_strdup(ctx,"")))) {
+ DEBUG(0, ("talloc_strdup failed\n"));
+ status = NT_STATUS_NO_MEMORY;
+ goto err;
}
- /*
- * stat the name - if it exists then we are all done!
+ /*
+ * stat the name - if it exists then we can add the stream back (if
+ * there was one) and be done!
*/
- if (SMB_VFS_STAT(conn,name,&st) == 0) {
- stat_cache_add(orig_path, name, conn->case_sensitive);
- DEBUG(5,("conversion finished %s -> %s\n",orig_path, name));
- *pst = st;
- return(True);
+ if (posix_pathnames) {
+ ret = SMB_VFS_LSTAT(conn, smb_fname);
+ } else {
+ ret = SMB_VFS_STAT(conn, smb_fname);
}
- DEBUG(5,("unix_convert begin: name = %s, dirpath = %s, start = %s\n", name, dirpath, start));
+ if (ret == 0) {
+ /* Ensure we catch all names with in "/."
+ this is disallowed under Windows. */
+ const char *p = strstr(smb_fname->base_name, "/."); /*mb safe*/
+ if (p) {
+ if (p[2] == '/') {
+ /* Error code within a pathname. */
+ status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
+ goto fail;
+ } else if (p[2] == '\0') {
+ /* Error code at the end of a pathname. */
+ status = NT_STATUS_OBJECT_NAME_INVALID;
+ goto fail;
+ }
+ }
+ /* Add the path (not including the stream) to the cache. */
+ stat_cache_add(orig_path, smb_fname->base_name,
+ conn->case_sensitive);
+ DEBUG(5,("conversion of base_name finished %s -> %s\n",
+ orig_path, smb_fname->base_name));
+ goto done;
+ }
+
+ DEBUG(5,("unix_convert begin: name = %s, dirpath = %s, start = %s\n",
+ smb_fname->base_name, dirpath, start));
- /*
+ /*
* A special case - if we don't have any mangling chars and are case
- * sensitive then searching won't help.
+ * sensitive or the underlying filesystem is case insentive then searching
+ * won't help.
*/
- if (conn->case_sensitive && !mangle_is_mangled(name) && !*lp_mangled_map(SNUM(conn)))
- return(False);
-
- name_has_wildcard = ms_has_wild(start);
+ if ((conn->case_sensitive || !(conn->fs_capabilities &
+ FILE_CASE_SENSITIVE_SEARCH)) &&
+ !mangle_is_mangled(smb_fname->base_name, conn->params)) {
+ goto done;
+ }
- /*
- * is_mangled() was changed to look at an entire pathname, not
+ /*
+ * is_mangled() was changed to look at an entire pathname, not
* just a component. JRA.
*/
- if (mangle_is_mangled(start))
+ if (mangle_is_mangled(start, conn->params)) {
component_was_mangled = True;
+ }
- /*
- * Now we need to recursively match the name against the real
+ /*
+ * Now we need to recursively match the name against the real
* directory structure.
*/
- /*
+ /*
* Match each part of the path name separately, trying the names
* as is first, then trying to scan the directory for matching names.
*/
for (; start ; start = (end?end+1:(char *)NULL)) {
- /*
+ /*
* Pinpoint the end of this section of the filename.
*/
- end = strchr_m(start, '/');
+ /* mb safe. '/' can't be in any encoded char. */
+ end = strchr(start, '/');
- /*
+ /*
* Chop the name at this point.
*/
- if (end)
+ if (end) {
*end = 0;
+ }
+
+ if (save_last_component) {
+ TALLOC_FREE(smb_fname->original_lcomp);
+ smb_fname->original_lcomp = talloc_strdup(smb_fname,
+ end ? end + 1 : start);
+ if (!smb_fname->original_lcomp) {
+ DEBUG(0, ("talloc failed\n"));
+ status = NT_STATUS_NO_MEMORY;
+ goto err;
+ }
+ }
+
+ /* The name cannot have a component of "." */
+
+ if (ISDOT(start)) {
+ if (!end) {
+ /* Error code at the end of a pathname. */
+ status = NT_STATUS_OBJECT_NAME_INVALID;
+ } else {
+ status = determine_path_error(end+1,
+ allow_wcard_last_component);
+ }
+ goto fail;
+ }
+
+ /* The name cannot have a wildcard if it's not
+ the last component. */
+
+ name_has_wildcard = ms_has_wild(start);
+
+ /* Wildcard not valid anywhere. */
+ if (name_has_wildcard && !allow_wcard_last_component) {
+ status = NT_STATUS_OBJECT_NAME_INVALID;
+ goto fail;
+ }
- if(saved_last_component != 0)
- pstrcpy(saved_last_component, end ? end + 1 : start);
+ /* Wildcards never valid within a pathname. */
+ if (name_has_wildcard && end) {
+ status = NT_STATUS_OBJECT_NAME_INVALID;
+ goto fail;
+ }
- /*
+ /*
* Check if the name exists up to this point.
*/
- if (SMB_VFS_STAT(conn,name, &st) == 0) {
+ if (posix_pathnames) {
+ ret = SMB_VFS_LSTAT(conn, smb_fname);
+ } else {
+ ret = SMB_VFS_STAT(conn, smb_fname);
+ }
+
+ if (ret == 0) {
/*
- * It exists. it must either be a directory or this must be
- * the last part of the path for it to be OK.
+ * It exists. it must either be a directory or this must
+ * be the last part of the path for it to be OK.
*/
- if (end && !(st.st_mode & S_IFDIR)) {
+ if (end && !S_ISDIR(smb_fname->st.st_ex_mode)) {
/*
- * An intermediate part of the name isn't a directory.
+ * An intermediate part of the name isn't
+ * a directory.
*/
DEBUG(5,("Not a dir %s\n",start));
*end = '/';
- return(False);
- }
-
- if (!end) {
/*
- * We just scanned for, and found the end of the path.
- * We must return the valid stat struct.
- * JRA.
+ * We need to return the fact that the
+ * intermediate name resolution failed. This
+ * is used to return an error of ERRbadpath
+ * rather than ERRbadfile. Some Windows
+ * applications depend on the difference between
+ * these two errors.
*/
-
- *pst = st;
+ status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
+ goto fail;
}
} else {
- pstring rest;
+ char *found_name = NULL;
/* Stat failed - ensure we don't use it. */
- ZERO_STRUCT(st);
- *rest = 0;
+ SET_STAT_INVALID(smb_fname->st);
/*
- * Remember the rest of the pathname so it can be restored
- * later.
+ * Reset errno so we can detect
+ * directory open errors.
*/
-
- if (end)
- pstrcpy(rest,end+1);
+ errno = 0;
/*
* Try to find this part of the path in the directory.
*/
- if (ms_has_wild(start) ||
- !scan_directory(dirpath, start,
- sizeof(pstring) - 1 - (start - name),
- conn,
- end?True:False)) {
+ if (name_has_wildcard ||
+ (get_real_filename(conn, dirpath, start,
+ talloc_tos(),
+ &found_name) == -1)) {
+ char *unmangled;
+
if (end) {
/*
- * An intermediate part of the name can't be found.
+ * An intermediate part of the name
+ * can't be found.
*/
- DEBUG(5,("Intermediate not found %s\n",start));
+ DEBUG(5,("Intermediate not found %s\n",
+ start));
*end = '/';
- /*
- * We need to return the fact that the intermediate
- * name resolution failed. This is used to return an
- * error of ERRbadpath rather than ERRbadfile. Some
- * Windows applications depend on the difference between
- * these two errors.
+ /*
+ * We need to return the fact that the
+ * intermediate name resolution failed.
+ * This is used to return an error of
+ * ERRbadpath rather than ERRbadfile.
+ * Some Windows applications depend on
+ * the difference between these two
+ * errors.
+ */
+
+ /*
+ * ENOENT, ENOTDIR and ELOOP all map
+ * to NT_STATUS_OBJECT_PATH_NOT_FOUND
+ * in the filename walk.
+ */
+
+ if (errno == ENOENT ||
+ errno == ENOTDIR ||
+ errno == ELOOP) {
+ status =
+ NT_STATUS_OBJECT_PATH_NOT_FOUND;
+ }
+ else {
+ status =
+ map_nt_error_from_unix(errno);
+ }
+ goto fail;
+ }
+
+ /*
+ * ENOENT/EACCESS are the only valid errors
+ * here. EACCESS needs handling here for
+ * "dropboxes", i.e. directories where users
+ * can only put stuff with permission -wx.
+ */
+ if ((errno != 0) && (errno != ENOENT)
+ && (errno != EACCES)) {
+ /*
+ * ENOTDIR and ELOOP both map to
+ * NT_STATUS_OBJECT_PATH_NOT_FOUND
+ * in the filename walk.
*/
- *bad_path = True;
- return(False);
+ if (errno == ENOTDIR ||
+ errno == ELOOP) {
+ status =
+ NT_STATUS_OBJECT_PATH_NOT_FOUND;
+ } else {
+ status =
+ map_nt_error_from_unix(errno);
+ }
+ goto fail;
}
-
- /*
+
+ /*
* Just the last part of the name doesn't exist.
- * We may need to strupper() or strlower() it in case
- * this conversion is being used for file creation
- * purposes. If the filename is of mixed case then
- * don't normalise it.
+ * We need to strupper() or strlower() it as
+ * this conversion may be used for file creation
+ * purposes. Fix inspired by
+ * Thomas Neumann <t.neumann@iku-ag.de>.
*/
-
- if (!conn->case_preserve && (!strhasupper(start) || !strhaslower(start)))
- strnorm(start, lp_defaultcase(SNUM(conn)));
+ if (!conn->case_preserve ||
+ (mangle_is_8_3(start, False,
+ conn->params) &&
+ !conn->short_case_preserve)) {
+ strnorm(start,
+ lp_defaultcase(SNUM(conn)));
+ }
/*
- * check on the mangled stack to see if we can recover the
- * base of the filename.
+ * check on the mangled stack to see if we can
+ * recover the base of the filename.
*/
- if (mangle_is_mangled(start)) {
- mangle_check_cache( start );
+ if (mangle_is_mangled(start, conn->params)
+ && mangle_lookup_name_from_8_3(ctx,
+ start,
+ &unmangled,
+ conn->params)) {
+ char *tmp;
+ size_t start_ofs =
+ start - smb_fname->base_name;
+
+ if (*dirpath != '\0') {
+ tmp = talloc_asprintf(
+ smb_fname, "%s/%s",
+ dirpath, unmangled);
+ TALLOC_FREE(unmangled);
+ }
+ else {
+ tmp = unmangled;
+ }
+ if (tmp == NULL) {
+ DEBUG(0, ("talloc failed\n"));
+ status = NT_STATUS_NO_MEMORY;
+ goto err;
+ }
+ TALLOC_FREE(smb_fname->base_name);
+ smb_fname->base_name = tmp;
+ start =
+ smb_fname->base_name + start_ofs;
+ end = start + strlen(start);
}
DEBUG(5,("New file %s\n",start));
- return(True);
+ goto done;
}
- /*
- * Restore the rest of the string. If the string was mangled the size
- * may have changed.
+
+ /*
+ * Restore the rest of the string. If the string was
+ * mangled the size may have changed.
*/
if (end) {
- end = start + strlen(start);
- if (!safe_strcat(start, "/", sizeof(pstring) - 1 - (start - name)) ||
- !safe_strcat(start, rest, sizeof(pstring) - 1 - (start - name))) {
- return False;
+ char *tmp;
+ size_t start_ofs =
+ start - smb_fname->base_name;
+
+ if (*dirpath != '\0') {
+ tmp = talloc_asprintf(smb_fname,
+ "%s/%s/%s", dirpath,
+ found_name, end+1);
+ }
+ else {
+ tmp = talloc_asprintf(smb_fname,
+ "%s/%s", found_name,
+ end+1);
}
+ if (tmp == NULL) {
+ DEBUG(0, ("talloc_asprintf failed\n"));
+ status = NT_STATUS_NO_MEMORY;
+ goto err;
+ }
+ TALLOC_FREE(smb_fname->base_name);
+ smb_fname->base_name = tmp;
+ start = smb_fname->base_name + start_ofs;
+ end = start + strlen(found_name);
*end = '\0';
} else {
+ char *tmp;
+ size_t start_ofs =
+ start - smb_fname->base_name;
+
+ if (*dirpath != '\0') {
+ tmp = talloc_asprintf(smb_fname,
+ "%s/%s", dirpath,
+ found_name);
+ } else {
+ tmp = talloc_strdup(smb_fname,
+ found_name);
+ }
+ if (tmp == NULL) {
+ DEBUG(0, ("talloc failed\n"));
+ status = NT_STATUS_NO_MEMORY;
+ goto err;
+ }
+ TALLOC_FREE(smb_fname->base_name);
+ smb_fname->base_name = tmp;
+ start = smb_fname->base_name + start_ofs;
+
/*
- * We just scanned for, and found the end of the path.
- * We must return a valid stat struct if it exists.
- * JRA.
+ * We just scanned for, and found the end of
+ * the path. We must return a valid stat struct
+ * if it exists. JRA.
*/
- if (SMB_VFS_STAT(conn,name, &st) == 0) {
- *pst = st;
+ if (posix_pathnames) {
+ ret = SMB_VFS_LSTAT(conn, smb_fname);
} else {
- ZERO_STRUCT(st);
+ ret = SMB_VFS_STAT(conn, smb_fname);
+ }
+
+ if (ret != 0) {
+ SET_STAT_INVALID(smb_fname->st);
}
}
+
+ TALLOC_FREE(found_name);
} /* end else */
- /*
+#ifdef DEVELOPER
+ /*
+ * This sucks!
+ * We should never provide different behaviors
+ * depending on DEVELOPER!!!
+ */
+ if (VALID_STAT(smb_fname->st)) {
+ bool delete_pending;
+ get_file_infos(vfs_file_id_from_sbuf(conn,
+ &smb_fname->st),
+ &delete_pending, NULL);
+ if (delete_pending) {
+ status = NT_STATUS_DELETE_PENDING;
+ goto fail;
+ }
+ }
+#endif
+
+ /*
* Add to the dirpath that we have resolved so far.
*/
- if (*dirpath)
- pstrcat(dirpath,"/");
- pstrcat(dirpath,start);
+ if (*dirpath != '\0') {
+ char *tmp = talloc_asprintf(ctx,
+ "%s/%s", dirpath, start);
+ if (!tmp) {
+ DEBUG(0, ("talloc_asprintf failed\n"));
+ status = NT_STATUS_NO_MEMORY;
+ goto err;
+ }
+ TALLOC_FREE(dirpath);
+ dirpath = tmp;
+ }
+ else {
+ TALLOC_FREE(dirpath);
+ if (!(dirpath = talloc_strdup(ctx,start))) {
+ DEBUG(0, ("talloc_strdup failed\n"));
+ status = NT_STATUS_NO_MEMORY;
+ goto err;
+ }
+ }
/*
- * Don't cache a name with mangled or wildcard components
- * as this can change the size.
+ * Cache the dirpath thus far. Don't cache a name with mangled
+ * or wildcard components as this can change the size.
*/
-
- if(!component_was_mangled && !name_has_wildcard)
- stat_cache_add(orig_path, dirpath, conn->case_sensitive);
-
- /*
+ if(!component_was_mangled && !name_has_wildcard) {
+ stat_cache_add(orig_path, dirpath,
+ conn->case_sensitive);
+ }
+
+ /*
* Restore the / that we wiped out earlier.
*/
- if (end)
+ if (end) {
*end = '/';
+ }
}
-
+
/*
- * Don't cache a name with mangled or wildcard components
- * as this can change the size.
+ * Cache the full path. Don't cache a name with mangled or wildcard
+ * components as this can change the size.
*/
- if(!component_was_mangled && !name_has_wildcard)
- stat_cache_add(orig_path, name, conn->case_sensitive);
+ if(!component_was_mangled && !name_has_wildcard) {
+ stat_cache_add(orig_path, smb_fname->base_name,
+ conn->case_sensitive);
+ }
- /*
+ /*
* The name has been resolved.
*/
- DEBUG(5,("conversion finished %s -> %s\n",orig_path, name));
- return(True);
+ DEBUG(5,("conversion finished %s -> %s\n", orig_path,
+ smb_fname->base_name));
+
+ done:
+ /* Add back the stream if one was stripped off originally. */
+ if (stream != NULL) {
+ smb_fname->stream_name = stream;
+
+ /* Check path now that the base_name has been converted. */
+ status = build_stream_path(ctx, conn, orig_path, smb_fname);
+ if (!NT_STATUS_IS_OK(status)) {
+ goto fail;
+ }
+ }
+ TALLOC_FREE(dirpath);
+ *smb_fname_out = smb_fname;
+ return NT_STATUS_OK;
+ fail:
+ DEBUG(10, ("dirpath = [%s] start = [%s]\n", dirpath, start));
+ if (*dirpath != '\0') {
+ smb_fname->base_name = talloc_asprintf(smb_fname, "%s/%s",
+ dirpath, start);
+ } else {
+ smb_fname->base_name = talloc_strdup(smb_fname, start);
+ }
+ if (!smb_fname->base_name) {
+ DEBUG(0, ("talloc_asprintf failed\n"));
+ status = NT_STATUS_NO_MEMORY;
+ goto err;
+ }
+
+ *smb_fname_out = smb_fname;
+ TALLOC_FREE(dirpath);
+ return status;
+ err:
+ TALLOC_FREE(smb_fname);
+ return status;
}
/****************************************************************************
- Check a filename - possibly caling reducename.
+ Check a filename - possibly calling check_reduced_name.
This is called by every routine before it allows an operation on a filename.
It does any final confirmation necessary to ensure that the filename is
a valid one for the user to access.
****************************************************************************/
-BOOL check_name(pstring name,connection_struct *conn)
+NTSTATUS check_name(connection_struct *conn, const char *name)
{
- BOOL ret = True;
-
- errno = 0;
-
if (IS_VETO_PATH(conn, name)) {
/* Is it not dot or dot dot. */
- if (!((name[0] == '.') && (!name[1] || (name[1] == '.' && !name[2])))) {
- DEBUG(5,("file path name %s vetoed\n",name));
- return False;
+ if (!((name[0] == '.') && (!name[1] ||
+ (name[1] == '.' && !name[2])))) {
+ DEBUG(5,("check_name: file path name %s vetoed\n",
+ name));
+ return map_nt_error_from_unix(ENOENT);
}
}
- if (!lp_widelinks(SNUM(conn))) {
- ret = reduce_name(conn,name,conn->connectpath);
+ if (!lp_widelinks(SNUM(conn)) || !lp_symlinks(SNUM(conn))) {
+ NTSTATUS status = check_reduced_name(conn,name);
+ if (!NT_STATUS_IS_OK(status)) {
+ DEBUG(5,("check_name: name %s failed with %s\n",name,
+ nt_errstr(status)));
+ return status;
+ }
}
- /* Check if we are allowing users to follow symlinks */
- /* Patch from David Clerc <David.Clerc@cui.unige.ch>
- University of Geneva */
+ return NT_STATUS_OK;
+}
-#ifdef S_ISLNK
- if (!lp_symlinks(SNUM(conn))) {
- SMB_STRUCT_STAT statbuf;
- if ( (SMB_VFS_LSTAT(conn,name,&statbuf) != -1) &&
- (S_ISLNK(statbuf.st_mode)) ) {
- DEBUG(3,("check_name: denied: file path name %s is a symlink\n",name));
- ret = False;
- }
- }
-#endif
+/****************************************************************************
+ Check if two filenames are equal.
+ This needs to be careful about whether we are case sensitive.
+****************************************************************************/
- if (!ret)
- DEBUG(5,("check_name on %s failed\n",name));
+static bool fname_equal(const char *name1, const char *name2,
+ bool case_sensitive)
+{
+ /* Normal filename handling */
+ if (case_sensitive) {
+ return(strcmp(name1,name2) == 0);
+ }
- return(ret);
+ return(strequal(name1,name2));
}
/****************************************************************************
If the name looks like a mangled name then try via the mangling functions
****************************************************************************/
-static BOOL scan_directory(const char *path, char *name, size_t maxlength,
- connection_struct *conn,BOOL docache)
+static int get_real_filename_full_scan(connection_struct *conn,
+ const char *path, const char *name,
+ bool mangled,
+ TALLOC_CTX *mem_ctx, char **found_name)
{
- void *cur_dir;
+ struct smb_Dir *cur_dir;
const char *dname;
- BOOL mangled;
-
- mangled = mangle_is_mangled(name);
+ char *unmangled_name = NULL;
+ long curpos;
/* handle null paths */
- if (*path == 0)
+ if ((path == NULL) || (*path == 0)) {
path = ".";
+ }
- if (docache && (dname = DirCacheCheck(path,name,SNUM(conn)))) {
- safe_strcpy(name, dname, maxlength);
- return(True);
- }
+ /* If we have a case-sensitive filesystem, it doesn't do us any
+ * good to search for a name. If a case variation of the name was
+ * there, then the original stat(2) would have found it.
+ */
+ if (!mangled && !(conn->fs_capabilities & FILE_CASE_SENSITIVE_SEARCH)) {
+ errno = ENOENT;
+ return -1;
+ }
/*
* The incoming name can be mangled, and if we de-mangle it
* here it will not compare correctly against the filename (name2)
- * read from the directory and then mangled by the mangle_map()
+ * read from the directory and then mangled by the name_to_8_3()
* call. We need to mangle both names or neither.
* (JRA).
+ *
+ * Fix for bug found by Dina Fine. If in case sensitive mode then
+ * the mangle cache is no good (3 letter extension could be wrong
+ * case - so don't demangle in this case - leave as mangled and
+ * allow the mangling of the directory entry read (which is done
+ * case insensitively) to match instead. This will lead to more
+ * false positive matches but we fail completely without it. JRA.
*/
- if (mangled)
- mangled = !mangle_check_cache( name );
+
+ if (mangled && !conn->case_sensitive) {
+ mangled = !mangle_lookup_name_from_8_3(talloc_tos(), name,
+ &unmangled_name,
+ conn->params);
+ if (!mangled) {
+ /* Name is now unmangled. */
+ name = unmangled_name;
+ }
+ }
/* open the directory */
- if (!(cur_dir = OpenDir(conn, path, True))) {
+ if (!(cur_dir = OpenDir(talloc_tos(), conn, path, NULL, 0))) {
DEBUG(3,("scan dir didn't open dir [%s]\n",path));
- return(False);
+ TALLOC_FREE(unmangled_name);
+ return -1;
}
/* now scan for matching names */
- while ((dname = ReadDirName(cur_dir))) {
+ curpos = 0;
+ while ((dname = ReadDirName(cur_dir, &curpos, NULL))) {
/* Is it dot or dot dot. */
- if ((dname[0] == '.') && (!dname[1] || (dname[1] == '.' && !dname[2]))) {
+ if (ISDOT(dname) || ISDOTDOT(dname)) {
continue;
}
/*
* At this point dname is the unmangled name.
- * name is either mangled or not, depending on the state of the "mangled"
- * variable. JRA.
+ * name is either mangled or not, depending on the state
+ * of the "mangled" variable. JRA.
*/
/*
* against unmangled name.
*/
- if ((mangled && mangled_equal(name,dname,SNUM(conn))) || fname_equal(name, dname, conn->case_sensitive)) {
+ if ((mangled && mangled_equal(name,dname,conn->params)) ||
+ fname_equal(name, dname, conn->case_sensitive)) {
/* we've found the file, change it's name and return */
- if (docache)
- DirCacheAdd(path,name,dname,SNUM(conn));
- safe_strcpy(name, dname, maxlength);
- CloseDir(cur_dir);
- return(True);
+ *found_name = talloc_strdup(mem_ctx, dname);
+ TALLOC_FREE(unmangled_name);
+ TALLOC_FREE(cur_dir);
+ if (!*found_name) {
+ errno = ENOMEM;
+ return -1;
+ }
+ return 0;
}
}
- CloseDir(cur_dir);
- return(False);
+ TALLOC_FREE(unmangled_name);
+ TALLOC_FREE(cur_dir);
+ errno = ENOENT;
+ return -1;
+}
+
+/****************************************************************************
+ Wrapper around the vfs get_real_filename and the full directory scan
+ fallback.
+****************************************************************************/
+
+int get_real_filename(connection_struct *conn, const char *path,
+ const char *name, TALLOC_CTX *mem_ctx,
+ char **found_name)
+{
+ int ret;
+ bool mangled;
+
+ mangled = mangle_is_mangled(name, conn->params);
+
+ if (mangled) {
+ return get_real_filename_full_scan(conn, path, name, mangled,
+ mem_ctx, found_name);
+ }
+
+ /* Try the vfs first to take advantage of case-insensitive stat. */
+ ret = SMB_VFS_GET_REAL_FILENAME(conn, path, name, mem_ctx, found_name);
+
+ /*
+ * If the case-insensitive stat was successful, or returned an error
+ * other than EOPNOTSUPP then there is no need to fall back on the
+ * full directory scan.
+ */
+ if (ret == 0 || (ret == -1 && errno != EOPNOTSUPP)) {
+ return ret;
+ }
+
+ return get_real_filename_full_scan(conn, path, name, mangled, mem_ctx,
+ found_name);
+}
+
+static NTSTATUS build_stream_path(TALLOC_CTX *mem_ctx,
+ connection_struct *conn,
+ const char *orig_path,
+ struct smb_filename *smb_fname)
+{
+ NTSTATUS status;
+ unsigned int i, num_streams;
+ struct stream_struct *streams = NULL;
+
+ if (SMB_VFS_STAT(conn, smb_fname) == 0) {
+ DEBUG(10, ("'%s' exists\n", smb_fname_str_dbg(smb_fname)));
+ return NT_STATUS_OK;
+ }
+
+ if (errno != ENOENT) {
+ status = map_nt_error_from_unix(errno);
+ DEBUG(10, ("vfs_stat failed: %s\n", nt_errstr(status)));
+ goto fail;
+ }
+
+ /* Fall back to a case-insensitive scan of all streams on the file. */
+ status = SMB_VFS_STREAMINFO(conn, NULL, smb_fname->base_name, mem_ctx,
+ &num_streams, &streams);
+
+ if (NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
+ SET_STAT_INVALID(smb_fname->st);
+ return NT_STATUS_OK;
+ }
+
+ if (!NT_STATUS_IS_OK(status)) {
+ DEBUG(10, ("vfs_streaminfo failed: %s\n", nt_errstr(status)));
+ goto fail;
+ }
+
+ for (i=0; i<num_streams; i++) {
+ DEBUG(10, ("comparing [%s] and [%s]: ",
+ smb_fname->stream_name, streams[i].name));
+ if (fname_equal(smb_fname->stream_name, streams[i].name,
+ conn->case_sensitive)) {
+ DEBUGADD(10, ("equal\n"));
+ break;
+ }
+ DEBUGADD(10, ("not equal\n"));
+ }
+
+ /* Couldn't find the stream. */
+ if (i == num_streams) {
+ SET_STAT_INVALID(smb_fname->st);
+ TALLOC_FREE(streams);
+ return NT_STATUS_OK;
+ }
+
+ DEBUG(10, ("case insensitive stream. requested: %s, actual: %s\n",
+ smb_fname->stream_name, streams[i].name));
+
+
+ TALLOC_FREE(smb_fname->stream_name);
+ smb_fname->stream_name = talloc_strdup(smb_fname, streams[i].name);
+ if (smb_fname->stream_name == NULL) {
+ status = NT_STATUS_NO_MEMORY;
+ goto fail;
+ }
+
+ SET_STAT_INVALID(smb_fname->st);
+
+ if (SMB_VFS_STAT(conn, smb_fname) == 0) {
+ DEBUG(10, ("'%s' exists\n", smb_fname_str_dbg(smb_fname)));
+ }
+ status = NT_STATUS_OK;
+ fail:
+ TALLOC_FREE(streams);
+ return status;
+}
+
+/**
+ * Go through all the steps to validate a filename.
+ *
+ * @param ctx talloc_ctx to allocate memory with.
+ * @param conn connection struct for vfs calls.
+ * @param dfs_path Whether this path requires dfs resolution.
+ * @param name_in The unconverted name.
+ * @param ucf_flags flags to pass through to unix_convert().
+ * UCF_ALLOW_WCARD_LCOMP will be stripped out if
+ * p_cont_wcard == NULL or is false.
+ * @param p_cont_wcard If not NULL, will be set to true if the dfs path
+ * resolution detects a wildcard.
+ * @param pp_smb_fname The final converted name will be allocated if the
+ * return is NT_STATUS_OK.
+ *
+ * @return NT_STATUS_OK if all operations completed succesfully, appropriate
+ * error otherwise.
+ */
+NTSTATUS filename_convert(TALLOC_CTX *ctx,
+ connection_struct *conn,
+ bool dfs_path,
+ const char *name_in,
+ uint32_t ucf_flags,
+ bool *ppath_contains_wcard,
+ struct smb_filename **pp_smb_fname)
+{
+ NTSTATUS status;
+ char *fname = NULL;
+
+ *pp_smb_fname = NULL;
+
+ status = resolve_dfspath_wcard(ctx, conn,
+ dfs_path,
+ name_in,
+ &fname,
+ ppath_contains_wcard);
+ if (!NT_STATUS_IS_OK(status)) {
+ DEBUG(10,("filename_convert: resolve_dfspath failed "
+ "for name %s with %s\n",
+ name_in,
+ nt_errstr(status) ));
+ return status;
+ }
+
+ /*
+ * Strip out the UCF_ALLOW_WCARD_LCOMP if the path doesn't contain a
+ * wildcard.
+ */
+ if (ppath_contains_wcard != NULL && !*ppath_contains_wcard &&
+ ucf_flags & UCF_ALLOW_WCARD_LCOMP) {
+ ucf_flags &= ~UCF_ALLOW_WCARD_LCOMP;
+ }
+
+ status = unix_convert(ctx, conn, fname, pp_smb_fname, ucf_flags);
+ if (!NT_STATUS_IS_OK(status)) {
+ DEBUG(10,("filename_convert: unix_convert failed "
+ "for name %s with %s\n",
+ fname,
+ nt_errstr(status) ));
+ return status;
+ }
+
+ status = check_name(conn, (*pp_smb_fname)->base_name);
+ if (!NT_STATUS_IS_OK(status)) {
+ DEBUG(3,("filename_convert: check_name failed "
+ "for name %s with %s\n",
+ smb_fname_str_dbg(*pp_smb_fname),
+ nt_errstr(status) ));
+ TALLOC_FREE(*pp_smb_fname);
+ return status;
+ }
+
+ return status;
}