source3/libsmb/clitrans.c

   1 /*
   2    Unix SMB/Netbios implementation.
   3    Version 3.0
   4    client transaction calls
   5    Copyright (C) Andrew Tridgell 1994-1998
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License as published by
   9    the Free Software Foundation; either version 2 of the License, or
  10    (at your option) any later version.
  11
  12    This program is distributed in the hope that it will be useful,
  13    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15    GNU General Public License for more details.
  16
  17    You should have received a copy of the GNU General Public License
  18    along with this program; if not, write to the Free Software
  19    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  20 */
  21
  22 #define NO_SYSLOG
  23
  24 #include "includes.h"
  25
  26
  27 /****************************************************************************
  28   send a SMB trans or trans2 request
  29   ****************************************************************************/
  30 BOOL cli_send_trans(struct cli_state *cli, int trans,
  31                     const char *pipe_name,
  32                     int fid, int flags,
  33                     uint16 *setup, int lsetup, int msetup,
  34                     char *param, int lparam, int mparam,
  35                     char *data, int ldata, int mdata)
  36 {
  37         int i;
  38         int this_ldata,this_lparam;
  39         int tot_data=0,tot_param=0;
  40         char *outdata,*outparam;
  41         char *p;
  42         int pipe_name_len=0;
  43
  44         this_lparam = MIN(lparam,cli->max_xmit - (500+lsetup*2)); /* hack */
  45         this_ldata = MIN(ldata,cli->max_xmit - (500+lsetup*2+this_lparam));
  46
  47         memset(cli->outbuf,'\0',smb_size);
  48         set_message(cli->outbuf,14+lsetup,0,True);
  49         CVAL(cli->outbuf,smb_com) = trans;
  50         SSVAL(cli->outbuf,smb_tid, cli->cnum);
  51         cli_setup_packet(cli);
  52
  53         if (pipe_name) {
  54                 pipe_name_len = clistr_push(cli, smb_buf(cli->outbuf), pipe_name, -1, STR_TERMINATE);
  55         }
  56
  57         outparam = smb_buf(cli->outbuf)+(trans==SMBtrans ? pipe_name_len : 3);
  58         outdata = outparam+this_lparam;
  59
  60         /* primary request */
  61         SSVAL(cli->outbuf,smb_tpscnt,lparam);   /* tpscnt */
  62         SSVAL(cli->outbuf,smb_tdscnt,ldata);    /* tdscnt */
  63         SSVAL(cli->outbuf,smb_mprcnt,mparam);   /* mprcnt */
  64         SSVAL(cli->outbuf,smb_mdrcnt,mdata);    /* mdrcnt */
  65         SCVAL(cli->outbuf,smb_msrcnt,msetup);   /* msrcnt */
  66         SSVAL(cli->outbuf,smb_flags,flags);     /* flags */
  67         SIVAL(cli->outbuf,smb_timeout,0);               /* timeout */
  68         SSVAL(cli->outbuf,smb_pscnt,this_lparam);       /* pscnt */
  69         SSVAL(cli->outbuf,smb_psoff,smb_offset(outparam,cli->outbuf)); /* psoff */
  70         SSVAL(cli->outbuf,smb_dscnt,this_ldata);        /* dscnt */
  71         SSVAL(cli->outbuf,smb_dsoff,smb_offset(outdata,cli->outbuf)); /* dsoff */
  72         SCVAL(cli->outbuf,smb_suwcnt,lsetup);   /* suwcnt */
  73         for (i=0;i<lsetup;i++)          /* setup[] */
  74                 SSVAL(cli->outbuf,smb_setup+i*2,setup[i]);
  75         p = smb_buf(cli->outbuf);
  76         if (trans != SMBtrans) {
  77                 *p++ = 0;  /* put in a null smb_name */
  78                 *p++ = 'D'; *p++ = ' '; /* observed in OS/2 */
  79         }
  80         if (this_lparam)                        /* param[] */
  81                 memcpy(outparam,param,this_lparam);
  82         if (this_ldata)                 /* data[] */
  83                 memcpy(outdata,data,this_ldata);
  84         cli_setup_bcc(cli, outdata+this_ldata);
  85
  86         show_msg(cli->outbuf);
  87         cli_send_smb(cli);
  88
  89         if (this_ldata < ldata || this_lparam < lparam) {
  90                 /* receive interim response */
  91                 if (!cli_receive_smb(cli) ||
  92                     CVAL(cli->inbuf,smb_rcls) != 0) {
  93                         return(False);
  94                 }
  95
  96                 tot_data = this_ldata;
  97                 tot_param = this_lparam;
  98
  99                 while (tot_data < ldata || tot_param < lparam)  {
 100                         this_lparam = MIN(lparam-tot_param,cli->max_xmit - 500); /* hack */
 101                         this_ldata = MIN(ldata-tot_data,cli->max_xmit - (500+this_lparam));
 102
 103                         set_message(cli->outbuf,trans==SMBtrans?8:9,0,True);
 104                         CVAL(cli->outbuf,smb_com) = trans==SMBtrans ? SMBtranss : SMBtranss2;
 105
 106                         outparam = smb_buf(cli->outbuf);
 107                         outdata = outparam+this_lparam;
 108
 109                         /* secondary request */
 110                         SSVAL(cli->outbuf,smb_tpscnt,lparam);   /* tpscnt */
 111                         SSVAL(cli->outbuf,smb_tdscnt,ldata);    /* tdscnt */
 112                         SSVAL(cli->outbuf,smb_spscnt,this_lparam);      /* pscnt */
 113                         SSVAL(cli->outbuf,smb_spsoff,smb_offset(outparam,cli->outbuf)); /* psoff */
 114                         SSVAL(cli->outbuf,smb_spsdisp,tot_param);       /* psdisp */
 115                         SSVAL(cli->outbuf,smb_sdscnt,this_ldata);       /* dscnt */
 116                         SSVAL(cli->outbuf,smb_sdsoff,smb_offset(outdata,cli->outbuf)); /* dsoff */
 117                         SSVAL(cli->outbuf,smb_sdsdisp,tot_data);        /* dsdisp */
 118                         if (trans==SMBtrans2)
 119                                 SSVALS(cli->outbuf,smb_sfid,fid);               /* fid */
 120                         if (this_lparam)                        /* param[] */
 121                                 memcpy(outparam,param+tot_param,this_lparam);
 122                         if (this_ldata)                 /* data[] */
 123                                 memcpy(outdata,data+tot_data,this_ldata);
 124                         cli_setup_bcc(cli, outdata+this_ldata);
 125
 126                         show_msg(cli->outbuf);
 127                         cli_send_smb(cli);
 128
 129                         tot_data += this_ldata;
 130                         tot_param += this_lparam;
 131                 }
 132         }
 133
 134         return(True);
 135 }
 136
 137
 138 /****************************************************************************
 139   receive a SMB trans or trans2 response allocating the necessary memory
 140   ****************************************************************************/
 141 BOOL cli_receive_trans(struct cli_state *cli,int trans,
 142                               char **param, int *param_len,
 143                               char **data, int *data_len)
 144 {
 145         int total_data=0;
 146         int total_param=0;
 147         int this_data,this_param;
 148         uint8 eclass;
 149         uint32 ecode;
 150         char *tdata;
 151         char *tparam;
 152
 153         *data_len = *param_len = 0;
 154
 155         if (!cli_receive_smb(cli))
 156                 return False;
 157
 158         show_msg(cli->inbuf);
 159
 160         /* sanity check */
 161         if (CVAL(cli->inbuf,smb_com) != trans) {
 162                 DEBUG(0,("Expected %s response, got command 0x%02x\n",
 163                          trans==SMBtrans?"SMBtrans":"SMBtrans2",
 164                          CVAL(cli->inbuf,smb_com)));
 165                 return(False);
 166         }
 167
 168         /*
 169          * An NT RPC pipe call can return ERRDOS, ERRmoredata
 170          * to a trans call. This is not an error and should not
 171          * be treated as such.
 172          */
 173
 174         if (cli_is_dos_error(cli)) {
 175                 cli_dos_error(cli, &eclass, &ecode);
 176
 177                 if(cli->nt_pipe_fnum == 0)
 178                         return(False);
 179
 180                 if(!(eclass == ERRDOS && ecode == ERRmoredata)) {
 181                         if (eclass != 0 && (ecode != (0x80000000 | STATUS_BUFFER_OVERFLOW)))
 182                                 return(False);
 183                 }
 184         }
 185
 186         /* parse out the lengths */
 187         total_data = SVAL(cli->inbuf,smb_tdrcnt);
 188         total_param = SVAL(cli->inbuf,smb_tprcnt);
 189
 190         /* allocate it */
 191         if (total_data!=0) {
 192                 tdata = Realloc(*data,total_data);
 193                 if (!tdata) {
 194                         DEBUG(0,("cli_receive_trans: failed to enlarge data buffer\n"));
 195                         return False;
 196                 }
 197                 else
 198                         *data = tdata;
 199         }
 200
 201         if (total_param!=0) {
 202                 tparam = Realloc(*param,total_param);
 203                 if (!tparam) {
 204                         DEBUG(0,("cli_receive_trans: failed to enlarge param buffer\n"));
 205                         return False;
 206                 }
 207                 else
 208                         *param = tparam;
 209         }
 210
 211         while (1)  {
 212                 this_data = SVAL(cli->inbuf,smb_drcnt);
 213                 this_param = SVAL(cli->inbuf,smb_prcnt);
 214
 215                 if (this_data + *data_len > total_data ||
 216                     this_param + *param_len > total_param) {
 217                         DEBUG(1,("Data overflow in cli_receive_trans\n"));
 218                         return False;
 219                 }
 220
 221                 if (this_data)
 222                         memcpy(*data + SVAL(cli->inbuf,smb_drdisp),
 223                                smb_base(cli->inbuf) + SVAL(cli->inbuf,smb_droff),
 224                                this_data);
 225                 if (this_param)
 226                         memcpy(*param + SVAL(cli->inbuf,smb_prdisp),
 227                                smb_base(cli->inbuf) + SVAL(cli->inbuf,smb_proff),
 228                                this_param);
 229                 *data_len += this_data;
 230                 *param_len += this_param;
 231
 232                 /* parse out the total lengths again - they can shrink! */
 233                 total_data = SVAL(cli->inbuf,smb_tdrcnt);
 234                 total_param = SVAL(cli->inbuf,smb_tprcnt);
 235
 236                 if (total_data <= *data_len && total_param <= *param_len)
 237                         break;
 238
 239                 if (!cli_receive_smb(cli))
 240                         return False;
 241
 242                 show_msg(cli->inbuf);
 243
 244                 /* sanity check */
 245                 if (CVAL(cli->inbuf,smb_com) != trans) {
 246                         DEBUG(0,("Expected %s response, got command 0x%02x\n",
 247                                  trans==SMBtrans?"SMBtrans":"SMBtrans2",
 248                                  CVAL(cli->inbuf,smb_com)));
 249                         return(False);
 250                 }
 251                 if (cli_is_dos_error(cli)) {
 252                         cli_dos_error(cli, &eclass, &ecode);
 253                         if(cli->nt_pipe_fnum == 0 ||
 254                            !(eclass == ERRDOS && ecode == ERRmoredata))
 255                                 return(False);
 256                 }
 257         }
 258
 259         return(True);
 260 }
 261
 262
 263
 264
 265 /****************************************************************************
 266   send a SMB nttrans request
 267   ****************************************************************************/
 268 BOOL cli_send_nt_trans(struct cli_state *cli,
 269                        int function,
 270                        int flags,
 271                        uint16 *setup, int lsetup, int msetup,
 272                        char *param, int lparam, int mparam,
 273                        char *data, int ldata, int mdata)
 274 {
 275         int i;
 276         int this_ldata,this_lparam;
 277         int tot_data=0,tot_param=0;
 278         char *outdata,*outparam;
 279
 280         this_lparam = MIN(lparam,cli->max_xmit - (500+lsetup*2)); /* hack */
 281         this_ldata = MIN(ldata,cli->max_xmit - (500+lsetup*2+this_lparam));
 282
 283         memset(cli->outbuf,'\0',smb_size);
 284         set_message(cli->outbuf,19+lsetup,0,True);
 285         CVAL(cli->outbuf,smb_com) = SMBnttrans;
 286         SSVAL(cli->outbuf,smb_tid, cli->cnum);
 287         cli_setup_packet(cli);
 288
 289         outparam = smb_buf(cli->outbuf)+3;
 290         outdata = outparam+this_lparam;
 291
 292         /* primary request */
 293         SCVAL(cli->outbuf,smb_nt_MaxSetupCount,msetup);
 294         SCVAL(cli->outbuf,smb_nt_Flags,flags);
 295         SIVAL(cli->outbuf,smb_nt_TotalParameterCount, lparam);
 296         SIVAL(cli->outbuf,smb_nt_TotalDataCount, ldata);
 297         SIVAL(cli->outbuf,smb_nt_MaxParameterCount, mparam);
 298         SIVAL(cli->outbuf,smb_nt_MaxDataCount, mdata);
 299         SIVAL(cli->outbuf,smb_nt_ParameterCount, this_lparam);
 300         SIVAL(cli->outbuf,smb_nt_ParameterOffset, smb_offset(outparam,cli->outbuf));
 301         SIVAL(cli->outbuf,smb_nt_DataCount, this_ldata);
 302         SIVAL(cli->outbuf,smb_nt_DataOffset, smb_offset(outdata,cli->outbuf));
 303         SIVAL(cli->outbuf,smb_nt_SetupCount, lsetup);
 304         SIVAL(cli->outbuf,smb_nt_Function, function);
 305         for (i=0;i<lsetup;i++)          /* setup[] */
 306                 SSVAL(cli->outbuf,smb_nt_SetupStart+i*2,setup[i]);
 307
 308         if (this_lparam)                        /* param[] */
 309                 memcpy(outparam,param,this_lparam);
 310         if (this_ldata)                 /* data[] */
 311                 memcpy(outdata,data,this_ldata);
 312
 313         cli_setup_bcc(cli, outdata+this_ldata);
 314
 315         show_msg(cli->outbuf);
 316         cli_send_smb(cli);
 317
 318         if (this_ldata < ldata || this_lparam < lparam) {
 319                 /* receive interim response */
 320                 if (!cli_receive_smb(cli) ||
 321                     CVAL(cli->inbuf,smb_rcls) != 0) {
 322                         return(False);
 323                 }
 324
 325                 tot_data = this_ldata;
 326                 tot_param = this_lparam;
 327
 328                 while (tot_data < ldata || tot_param < lparam)  {
 329                         this_lparam = MIN(lparam-tot_param,cli->max_xmit - 500); /* hack */
 330                         this_ldata = MIN(ldata-tot_data,cli->max_xmit - (500+this_lparam));
 331
 332                         set_message(cli->outbuf,18,0,True);
 333                         CVAL(cli->outbuf,smb_com) = SMBnttranss;
 334
 335                         /* XXX - these should probably be aligned */
 336                         outparam = smb_buf(cli->outbuf);
 337                         outdata = outparam+this_lparam;
 338
 339                         /* secondary request */
 340                         SIVAL(cli->outbuf,smb_nts_TotalParameterCount,lparam);
 341                         SIVAL(cli->outbuf,smb_nts_TotalDataCount,ldata);
 342                         SIVAL(cli->outbuf,smb_nts_ParameterCount,this_lparam);
 343                         SIVAL(cli->outbuf,smb_nts_ParameterOffset,smb_offset(outparam,cli->outbuf));
 344                         SIVAL(cli->outbuf,smb_nts_ParameterDisplacement,tot_param);
 345                         SIVAL(cli->outbuf,smb_nts_DataCount,this_ldata);
 346                         SIVAL(cli->outbuf,smb_nts_DataOffset,smb_offset(outdata,cli->outbuf));
 347                         SIVAL(cli->outbuf,smb_nts_DataDisplacement,tot_data);
 348                         if (this_lparam)                        /* param[] */
 349                                 memcpy(outparam,param+tot_param,this_lparam);
 350                         if (this_ldata)                 /* data[] */
 351                                 memcpy(outdata,data+tot_data,this_ldata);
 352                         cli_setup_bcc(cli, outdata+this_ldata);
 353
 354                         show_msg(cli->outbuf);
 355                         cli_send_smb(cli);
 356
 357                         tot_data += this_ldata;
 358                         tot_param += this_lparam;
 359                 }
 360         }
 361
 362         return(True);
 363 }
 364
 365
 366
 367 /****************************************************************************
 368   receive a SMB nttrans response allocating the necessary memory
 369   ****************************************************************************/
 370 BOOL cli_receive_nt_trans(struct cli_state *cli,
 371                           char **param, int *param_len,
 372                           char **data, int *data_len)
 373 {
 374         int total_data=0;
 375         int total_param=0;
 376         int this_data,this_param;
 377         uint8 eclass;
 378         uint32 ecode;
 379         char *tdata;
 380         char *tparam;
 381
 382         *data_len = *param_len = 0;
 383
 384         if (!cli_receive_smb(cli))
 385                 return False;
 386
 387         show_msg(cli->inbuf);
 388
 389         /* sanity check */
 390         if (CVAL(cli->inbuf,smb_com) != SMBnttrans) {
 391                 DEBUG(0,("Expected SMBnttrans response, got command 0x%02x\n",
 392                          CVAL(cli->inbuf,smb_com)));
 393                 return(False);
 394         }
 395
 396         /*
 397          * An NT RPC pipe call can return ERRDOS, ERRmoredata
 398          * to a trans call. This is not an error and should not
 399          * be treated as such.
 400          */
 401         if (cli_is_dos_error(cli)) {
 402                 cli_dos_error(cli, &eclass, &ecode);
 403                 if (cli->nt_pipe_fnum == 0 || !(eclass == ERRDOS && ecode == ERRmoredata))
 404                         return(False);
 405         }
 406
 407         /* parse out the lengths */
 408         total_data = SVAL(cli->inbuf,smb_ntr_TotalDataCount);
 409         total_param = SVAL(cli->inbuf,smb_ntr_TotalParameterCount);
 410
 411         /* allocate it */
 412         tdata = Realloc(*data,total_data);
 413         if (!tdata) {
 414                 DEBUG(0,("cli_receive_nt_trans: failed to enlarge buffer"));
 415                 return False;
 416         }
 417         else
 418                 *data = tdata;
 419         tparam = Realloc(*param,total_param);
 420         if (!tparam) {
 421                 DEBUG(0,("cli_receive_nt_trans: failed to enlarge buffer"));
 422                 return False;
 423         }
 424         else
 425                 *param = tparam;
 426
 427         while (1)  {
 428                 this_data = SVAL(cli->inbuf,smb_ntr_DataCount);
 429                 this_param = SVAL(cli->inbuf,smb_ntr_ParameterCount);
 430
 431                 if (this_data + *data_len > total_data ||
 432                     this_param + *param_len > total_param) {
 433                         DEBUG(1,("Data overflow in cli_receive_trans\n"));
 434                         return False;
 435                 }
 436
 437                 if (this_data)
 438                         memcpy(*data + SVAL(cli->inbuf,smb_ntr_DataDisplacement),
 439                                smb_base(cli->inbuf) + SVAL(cli->inbuf,smb_ntr_DataOffset),
 440                                this_data);
 441                 if (this_param)
 442                         memcpy(*param + SVAL(cli->inbuf,smb_ntr_ParameterDisplacement),
 443                                smb_base(cli->inbuf) + SVAL(cli->inbuf,smb_ntr_ParameterOffset),
 444                                this_param);
 445                 *data_len += this_data;
 446                 *param_len += this_param;
 447
 448                 /* parse out the total lengths again - they can shrink! */
 449                 total_data = SVAL(cli->inbuf,smb_ntr_TotalDataCount);
 450                 total_param = SVAL(cli->inbuf,smb_ntr_TotalParameterCount);
 451
 452                 if (total_data <= *data_len && total_param <= *param_len)
 453                         break;
 454
 455                 if (!cli_receive_smb(cli))
 456                         return False;
 457
 458                 show_msg(cli->inbuf);
 459
 460                 /* sanity check */
 461                 if (CVAL(cli->inbuf,smb_com) != SMBnttrans) {
 462                         DEBUG(0,("Expected SMBnttrans response, got command 0x%02x\n",
 463                                  CVAL(cli->inbuf,smb_com)));
 464                         return(False);
 465                 }
 466                 if (cli_is_dos_error(cli)) {
 467                         cli_dos_error(cli, &eclass, &ecode);
 468                         if(cli->nt_pipe_fnum == 0 ||
 469                            !(eclass == ERRDOS && ecode == ERRmoredata))
 470                                 return(False);
 471                 }
 472         }
 473
 474         return(True);
 475 }