source4/torture/rap/rap.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    test suite for various RAP operations
   4    Copyright (C) Volker Lendecke 2004
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 2 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program; if not, write to the Free Software
  18    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  19 */
  20
  21 #include "includes.h"
  22
  23 struct rap_call {
  24         TALLOC_CTX *mem_ctx;
  25         uint16 callno;
  26         char *paramdesc;
  27         const char *datadesc;
  28
  29         uint16 status;
  30         uint16 convert;
  31
  32         uint16 rcv_paramlen, rcv_datalen;
  33
  34         struct ndr_push *ndr_push_param;
  35         struct ndr_push *ndr_push_data;
  36         struct ndr_pull *ndr_pull_param;
  37         struct ndr_pull *ndr_pull_data;
  38 };
  39
  40 #define RAPNDR_FLAGS (LIBNDR_FLAG_NOALIGN|LIBNDR_FLAG_STR_ASCII|LIBNDR_FLAG_STR_NULLTERM);
  41
  42 static struct rap_call *new_rap_cli_call(uint16 callno)
  43 {
  44         struct rap_call *call;
  45         TALLOC_CTX *mem_ctx = talloc_init("rap_call");
  46
  47         if (mem_ctx == NULL)
  48                 return NULL;
  49
  50         call = talloc_p(mem_ctx, struct rap_call);
  51
  52         if (call == NULL)
  53                 return NULL;
  54
  55         ZERO_STRUCTP(call);
  56
  57         call->callno = callno;
  58         call->rcv_paramlen = 4;
  59         call->mem_ctx = mem_ctx;
  60
  61         call->ndr_push_param = ndr_push_init_ctx(mem_ctx);
  62         call->ndr_push_param->flags = RAPNDR_FLAGS;
  63
  64         call->ndr_push_data = ndr_push_init_ctx(mem_ctx);
  65         call->ndr_push_data->flags = RAPNDR_FLAGS;
  66
  67         return call;
  68 }
  69
  70 static void destroy_rap_call(struct rap_call *call)
  71 {
  72         talloc_destroy(call->mem_ctx);
  73 }
  74
  75 static void rap_cli_push_paramdesc(struct rap_call *call, char desc)
  76 {
  77         int len = 0;
  78
  79         if (call->paramdesc != NULL)
  80                 len = strlen(call->paramdesc);
  81
  82         call->paramdesc = talloc_realloc(call->mem_ctx,
  83                                          call->paramdesc,
  84                                          len+2);
  85         call->paramdesc[len] = desc;
  86         call->paramdesc[len+1] = '\0';
  87 }
  88
  89 static void rap_cli_push_word(struct rap_call *call, uint16 val)
  90 {
  91         rap_cli_push_paramdesc(call, 'W');
  92         ndr_push_uint16(call->ndr_push_param, val);
  93 }
  94
  95 static void rap_cli_push_dword(struct rap_call *call, uint32 val)
  96 {
  97         rap_cli_push_paramdesc(call, 'D');
  98         ndr_push_uint32(call->ndr_push_param, val);
  99 }
 100
 101 static void rap_cli_push_rcvbuf(struct rap_call *call, int len)
 102 {
 103         rap_cli_push_paramdesc(call, 'r');
 104         rap_cli_push_paramdesc(call, 'L');
 105         ndr_push_uint16(call->ndr_push_param, len);
 106         call->rcv_datalen = len;
 107 }
 108
 109 static void rap_cli_expect_multiple_entries(struct rap_call *call)
 110 {
 111         rap_cli_push_paramdesc(call, 'e');
 112         rap_cli_push_paramdesc(call, 'h');
 113         call->rcv_paramlen += 4; /* uint16 entry count, uint16 total */
 114 }
 115
 116 static void rap_cli_push_string(struct rap_call *call, const char *str)
 117 {
 118         if (str == NULL) {
 119                 rap_cli_push_paramdesc(call, 'O');
 120                 return;
 121         }
 122         rap_cli_push_paramdesc(call, 'z');
 123         ndr_push_string(call->ndr_push_param, NDR_SCALARS, str);
 124 }
 125
 126 static void rap_cli_expect_format(struct rap_call *call, const char *format)
 127 {
 128         call->datadesc = format;
 129 }
 130
 131 static NTSTATUS rap_pull_string(TALLOC_CTX *mem_ctx, struct ndr_pull *ndr,
 132                                 uint16 convert, char **dest)
 133 {
 134         uint16 string_offset;
 135         uint16 ignore;
 136         char *p;
 137         size_t len;
 138
 139         NDR_CHECK(ndr_pull_uint16(ndr, &string_offset));
 140         NDR_CHECK(ndr_pull_uint16(ndr, &ignore));
 141
 142         string_offset -= convert;
 143
 144         if (string_offset+1 > ndr->data_size)
 145                 return NT_STATUS_INVALID_PARAMETER;
 146
 147         p = ndr->data + string_offset;
 148         len = strnlen(p, ndr->data_size-string_offset);
 149
 150         if ( string_offset + len + 1 >  ndr->data_size )
 151                 return NT_STATUS_INVALID_PARAMETER;
 152
 153         *dest = talloc_zero(mem_ctx, len+1);
 154         pull_ascii(*dest, p, len+1, len, 0);
 155
 156         return NT_STATUS_OK;
 157 }
 158
 159 static NTSTATUS rap_cli_do_call(struct smbcli_state *cli, TALLOC_CTX *mem_ctx,
 160                                 struct rap_call *call)
 161 {
 162         NTSTATUS result;
 163         DATA_BLOB param_blob;
 164         struct ndr_push *params;
 165         struct smb_trans2 trans;
 166
 167         params = ndr_push_init_ctx(mem_ctx);
 168
 169         if (params == NULL)
 170                 return NT_STATUS_NO_MEMORY;
 171
 172         params->flags = RAPNDR_FLAGS;
 173
 174         trans.in.max_param = call->rcv_paramlen;
 175         trans.in.max_data = call->rcv_datalen;
 176         trans.in.max_setup = 0;
 177         trans.in.flags = 0;
 178         trans.in.timeout = 0;
 179         trans.in.setup_count = 0;
 180         trans.in.setup = NULL;
 181         trans.in.trans_name = "\\PIPE\\LANMAN";
 182
 183         NDR_CHECK(ndr_push_uint16(params, call->callno));
 184         NDR_CHECK(ndr_push_string(params, NDR_SCALARS, call->paramdesc));
 185         NDR_CHECK(ndr_push_string(params, NDR_SCALARS, call->datadesc));
 186
 187         param_blob = ndr_push_blob(call->ndr_push_param);
 188         NDR_CHECK(ndr_push_bytes(params, param_blob.data,
 189                                  param_blob.length));
 190
 191         trans.in.params = ndr_push_blob(params);
 192         trans.in.data = data_blob(NULL, 0);
 193
 194         result = smb_raw_trans(cli->tree, call->mem_ctx, &trans);
 195
 196         if (!NT_STATUS_IS_OK(result))
 197                 return result;
 198
 199         call->ndr_pull_param = ndr_pull_init_blob(&trans.out.params,
 200                                                   call->mem_ctx);
 201         call->ndr_pull_param->flags = RAPNDR_FLAGS;
 202
 203         call->ndr_pull_data = ndr_pull_init_blob(&trans.out.data,
 204                                                  call->mem_ctx);
 205         call->ndr_pull_data->flags = RAPNDR_FLAGS;
 206
 207         return result;
 208 }
 209
 210 #define NDR_OK(call) do { NTSTATUS _status; \
 211                              _status = call; \
 212                              if (!NT_STATUS_IS_OK(_status)) \
 213                                 goto done; \
 214                         } while (0)
 215
 216 static NTSTATUS smbcli_rap_netshareenum(struct smbcli_state *cli,
 217                                      TALLOC_CTX *mem_ctx,
 218                                      struct rap_NetShareEnum *r)
 219 {
 220         struct rap_call *call;
 221         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 222         int i;
 223
 224         call = new_rap_cli_call(0);
 225
 226         if (call == NULL)
 227                 return NT_STATUS_NO_MEMORY;
 228
 229         rap_cli_push_word(call, r->in.level); /* Level */
 230         rap_cli_push_rcvbuf(call, r->in.bufsize);
 231         rap_cli_expect_multiple_entries(call);
 232
 233         switch(r->in.level) {
 234         case 0:
 235                 rap_cli_expect_format(call, "B13");
 236                 break;
 237         case 1:
 238                 rap_cli_expect_format(call, "B13BWz");
 239                 break;
 240         }
 241
 242         result = rap_cli_do_call(cli, mem_ctx, call);
 243
 244         if (!NT_STATUS_IS_OK(result))
 245                 goto done;
 246
 247         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, &r->out.status));
 248         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, &r->out.convert));
 249         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, &r->out.count));
 250         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, &r->out.available));
 251
 252         r->out.info = talloc_array_p(mem_ctx, union rap_shareenum_info,
 253                                      r->out.count);
 254
 255         if (r->out.info == NULL)
 256                 return NT_STATUS_NO_MEMORY;
 257
 258         for (i=0; i<r->out.count; i++) {
 259                 switch(r->in.level) {
 260                 case 0:
 261                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 262                                               r->out.info[i].info0.name, 13));
 263                         break;
 264                 case 1:
 265                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 266                                               r->out.info[i].info1.name, 13));
 267                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 268                                               &r->out.info[i].info1.pad, 1));
 269                         NDR_OK(ndr_pull_uint16(call->ndr_pull_data,
 270                                                &r->out.info[i].info1.type));
 271                         NDR_OK(rap_pull_string(mem_ctx, call->ndr_pull_data,
 272                                                r->out.convert,
 273                                                &r->out.info[i].info1.comment));
 274                         break;
 275                 }
 276         }
 277
 278         result = NT_STATUS_OK;
 279
 280  done:
 281         destroy_rap_call(call);
 282
 283         return result;
 284 }
 285
 286 static BOOL test_netshareenum(struct smbcli_state *cli, TALLOC_CTX *mem_ctx)
 287 {
 288         struct rap_NetShareEnum r;
 289         int i;
 290
 291         r.in.level = 1;
 292         r.in.bufsize = 8192;
 293
 294         if (!NT_STATUS_IS_OK(smbcli_rap_netshareenum(cli, mem_ctx, &r)))
 295                 return False;
 296
 297         for (i=0; i<r.out.count; i++) {
 298                 printf("%s %d %s\n", r.out.info[i].info1.name,
 299                        r.out.info[i].info1.type,
 300                        r.out.info[i].info1.comment);
 301         }
 302
 303         return True;
 304 }
 305
 306 static NTSTATUS smbcli_rap_netserverenum2(struct smbcli_state *cli,
 307                                        TALLOC_CTX *mem_ctx,
 308                                        struct rap_NetServerEnum2 *r)
 309 {
 310         struct rap_call *call;
 311         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 312         int i;
 313
 314         call = new_rap_cli_call(104);
 315
 316         if (call == NULL)
 317                 return NT_STATUS_NO_MEMORY;
 318
 319         rap_cli_push_word(call, r->in.level);
 320         rap_cli_push_rcvbuf(call, r->in.bufsize);
 321         rap_cli_expect_multiple_entries(call);
 322         rap_cli_push_dword(call, r->in.servertype);
 323         rap_cli_push_string(call, r->in.domain);
 324
 325         switch(r->in.level) {
 326         case 0:
 327                 rap_cli_expect_format(call, "B16");
 328                 break;
 329         case 1:
 330                 rap_cli_expect_format(call, "B16BBDz");
 331                 break;
 332         }
 333
 334         result = rap_cli_do_call(cli, mem_ctx, call);
 335
 336         if (!NT_STATUS_IS_OK(result))
 337                 goto done;
 338
 339         result = NT_STATUS_INVALID_PARAMETER;
 340
 341         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, &r->out.status));
 342         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, &r->out.convert));
 343         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, &r->out.count));
 344         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, &r->out.available));
 345
 346         r->out.info = talloc_array_p(mem_ctx, union rap_server_info,
 347                                      r->out.count);
 348
 349         if (r->out.info == NULL)
 350                 return NT_STATUS_NO_MEMORY;
 351
 352         for (i=0; i<r->out.count; i++) {
 353                 switch(r->in.level) {
 354                 case 0:
 355                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 356                                               r->out.info[i].info0.name, 16));
 357                         break;
 358                 case 1:
 359                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 360                                               r->out.info[i].info1.name, 16));
 361                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 362                                               &r->out.info[i].info1.version_major, 1));
 363                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 364                                               &r->out.info[i].info1.version_minor, 1));
 365                         NDR_OK(ndr_pull_uint32(call->ndr_pull_data,
 366                                                &r->out.info[i].info1.servertype));
 367                         NDR_OK(rap_pull_string(mem_ctx, call->ndr_pull_data,
 368                                                r->out.convert,
 369                                                &r->out.info[i].info1.comment));
 370                 }
 371         }
 372
 373         result = NT_STATUS_OK;
 374
 375  done:
 376         destroy_rap_call(call);
 377
 378         return result;
 379 }
 380
 381 static BOOL test_netserverenum(struct smbcli_state *cli, TALLOC_CTX *mem_ctx)
 382 {
 383         struct rap_NetServerEnum2 r;
 384         int i;
 385
 386         r.in.level = 0;
 387         r.in.bufsize = 8192;
 388         r.in.servertype = 0xffffffff;
 389         r.in.servertype = 0x80000000;
 390         r.in.domain = NULL;
 391
 392         if (!NT_STATUS_IS_OK(smbcli_rap_netserverenum2(cli, mem_ctx, &r)))
 393                 return False;
 394
 395         for (i=0; i<r.out.count; i++) {
 396                 switch (r.in.level) {
 397                 case 0:
 398                         printf("%s\n", r.out.info[i].info0.name);
 399                         break;
 400                 case 1:
 401                         printf("%s %x %s\n", r.out.info[i].info1.name,
 402                                r.out.info[i].info1.servertype,
 403                                r.out.info[i].info1.comment);
 404                         break;
 405                 }
 406         }
 407
 408         return True;
 409 }
 410
 411
 412
 413 static BOOL test_rap(struct smbcli_state *cli, TALLOC_CTX *mem_ctx)
 414 {
 415         BOOL res = True;
 416
 417         if (!test_netserverenum(cli, mem_ctx))
 418                 res = False;
 419
 420         if (!test_netshareenum(cli, mem_ctx))
 421                 res = False;
 422
 423         return res;
 424 }
 425
 426 BOOL torture_raw_rap(int dummy)
 427 {
 428         struct smbcli_state *cli;
 429         BOOL ret = True;
 430         TALLOC_CTX *mem_ctx;
 431
 432         if (!torture_open_connection(&cli)) {
 433                 return False;
 434         }
 435
 436         mem_ctx = talloc_init("torture_raw_rap");
 437
 438         if (!test_rap(cli, mem_ctx)) {
 439                 ret = False;
 440         }
 441
 442         torture_close_connection(cli);
 443         talloc_destroy(mem_ctx);
 444         return ret;
 445 }