s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used()
[samba.git] / source3 / smbd / conn.c
index b41467f02c7514706903df5776b4ade436476550..8a96e880538efb67e1d02c3c049e2fdbf5e38198 100644 (file)
-/* 
+/*
    Unix SMB/CIFS implementation.
    Manage connections_struct structures
    Copyright (C) Andrew Tridgell 1998
    Copyright (C) Alexander Bokovoy 2002
-   
+   Copyright (C) Jeremy Allison 2010
+
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
-   the Free Software Foundation; either version 2 of the License, or
+   the Free Software Foundation; either version 3 of the License, or
    (at your option) any later version.
-   
+
    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.
-   
+
    You should have received a copy of the GNU General Public License
-   along with this program; if not, write to the Free Software
-   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
 
 #include "includes.h"
+#include "smbd/smbd.h"
+#include "smbd/globals.h"
+#include "rpc_server/rpc_ncacn_np.h"
 
 /* The connections bitmap is expanded in increments of BITMAP_BLOCK_SZ. The
  * maximum size of the bitmap is the largest positive integer, but you will hit
  * the "max connections" limit, looong before that.
  */
-#define BITMAP_BLOCK_SZ 128
-
-static connection_struct *Connections;
 
-/* number of open connections */
-static struct bitmap *bmap;
-static int num_open;
+#define BITMAP_BLOCK_SZ 128
 
 /****************************************************************************
-init the conn structures
+ Init the conn structures.
 ****************************************************************************/
-void conn_init(void)
+
+void conn_init(struct smbd_server_connection *sconn)
 {
-       bmap = bitmap_allocate(BITMAP_BLOCK_SZ);
+       sconn->smb1.tcons.Connections = NULL;
+       sconn->smb1.tcons.bmap = bitmap_talloc(sconn, BITMAP_BLOCK_SZ);
 }
 
 /****************************************************************************
-return the number of open connections
+ Return the number of open connections.
 ****************************************************************************/
-int conn_num_open(void)
+
+int conn_num_open(struct smbd_server_connection *sconn)
 {
-       return num_open;
+       return sconn->num_tcons_open;
 }
 
-
 /****************************************************************************
-check if a snum is in use
+ Check if a snum is in use.
 ****************************************************************************/
-BOOL conn_snum_used(int snum)
+
+bool conn_snum_used(int snum)
 {
-       connection_struct *conn;
-       for (conn=Connections;conn;conn=conn->next) {
-               if (conn->service == snum) {
-                       return(True);
+       struct smbd_server_connection *sconn = smbd_server_conn;
+
+       if (sconn->using_smb2) {
+               /* SMB2 */
+               struct smbd_smb2_session *sess;
+               for (sess = sconn->smb2.sessions.list; sess; sess = sess->next) {
+                       struct smbd_smb2_tcon *ptcon;
+
+                       for (ptcon = sess->tcons.list; ptcon; ptcon = ptcon->next) {
+                               if (ptcon->compat_conn &&
+                                               ptcon->compat_conn->params &&
+                                               (ptcon->compat_conn->params->service == snum)) {
+                                       return true;
+                               }
+                       }
+               }
+       } else {
+               /* SMB1 */
+               connection_struct *conn;
+               for (conn=sconn->smb1.tcons.Connections;conn;conn=conn->next) {
+                       if (conn->params->service == snum) {
+                               return true;
+                       }
                }
        }
-       return(False);
+       return false;
 }
 
-
 /****************************************************************************
-find a conn given a cnum
+ Find a conn given a cnum.
 ****************************************************************************/
-connection_struct *conn_find(unsigned cnum)
-{
-       int count=0;
-       connection_struct *conn;
 
-       for (conn=Connections;conn;conn=conn->next,count++) {
-               if (conn->cnum == cnum) {
-                       if (count > 10) {
-                               DLIST_PROMOTE(Connections, conn);
+connection_struct *conn_find(struct smbd_server_connection *sconn,unsigned cnum)
+{
+       if (sconn->using_smb2) {
+               /* SMB2 */
+               struct smbd_smb2_session *sess;
+               for (sess = sconn->smb2.sessions.list; sess; sess = sess->next) {
+                       struct smbd_smb2_tcon *ptcon;
+
+                       for (ptcon = sess->tcons.list; ptcon; ptcon = ptcon->next) {
+                               if (ptcon->compat_conn &&
+                                               ptcon->compat_conn->cnum == cnum) {
+                                       return ptcon->compat_conn;
+                               }
+                       }
+               }
+       } else {
+               /* SMB1 */
+               int count=0;
+               connection_struct *conn;
+               for (conn=sconn->smb1.tcons.Connections;conn;conn=conn->next,count++) {
+                       if (conn->cnum == cnum) {
+                               if (count > 10) {
+                                       DLIST_PROMOTE(sconn->smb1.tcons.Connections,
+                                               conn);
+                               }
+                               return conn;
                        }
-                       return conn;
                }
        }
 
        return NULL;
 }
 
-
 /****************************************************************************
 find first available connection slot, starting from a random position.
-The randomisation stops problems with the server dieing and clients
-thinking the server is still available.
Find first available connection slot, starting from a random position.
+ The randomisation stops problems with the server dieing and clients
+ thinking the server is still available.
 ****************************************************************************/
-connection_struct *conn_new(void)
+
+connection_struct *conn_new(struct smbd_server_connection *sconn)
 {
-       TALLOC_CTX *mem_ctx;
        connection_struct *conn;
        int i;
         int find_offset = 1;
 
+       if (sconn->using_smb2) {
+               /* SMB2 */
+               if (!(conn=TALLOC_ZERO_P(NULL, connection_struct)) ||
+                   !(conn->params = TALLOC_P(conn, struct share_params))) {
+                       DEBUG(0,("TALLOC_ZERO() failed!\n"));
+                       TALLOC_FREE(conn);
+                       return NULL;
+               }
+               conn->sconn = sconn;
+               return conn;
+       }
+
+       /* SMB1 */
 find_again:
-       i = bitmap_find(bmap, find_offset);
-       
+       i = bitmap_find(sconn->smb1.tcons.bmap, find_offset);
+
        if (i == -1) {
                 /* Expand the connections bitmap. */
-                int             oldsz = bmap->n;
-                int             newsz = bmap->n + BITMAP_BLOCK_SZ;
+                int             oldsz = sconn->smb1.tcons.bmap->n;
+                int             newsz = sconn->smb1.tcons.bmap->n +
+                                       BITMAP_BLOCK_SZ;
                 struct bitmap * nbmap;
 
-                if (newsz <= 0) {
+                if (newsz <= oldsz) {
                         /* Integer wrap. */
                        DEBUG(0,("ERROR! Out of connection structures\n"));
                         return NULL;
@@ -116,53 +165,118 @@ find_again:
                DEBUG(4,("resizing connections bitmap from %d to %d\n",
                         oldsz, newsz));
 
-                nbmap = bitmap_allocate(newsz);
+                nbmap = bitmap_talloc(sconn, newsz);
+               if (!nbmap) {
+                       DEBUG(0,("ERROR! malloc fail.\n"));
+                       return NULL;
+               }
 
-                bitmap_copy(nbmap, bmap);
-                bitmap_free(bmap);
+                bitmap_copy(nbmap, sconn->smb1.tcons.bmap);
+               TALLOC_FREE(sconn->smb1.tcons.bmap);
 
-                bmap = nbmap;
+                sconn->smb1.tcons.bmap = nbmap;
                 find_offset = oldsz; /* Start next search in the new portion. */
 
                 goto find_again;
        }
 
-       if ((mem_ctx=talloc_init("connection_struct"))==NULL) {
-               DEBUG(0,("talloc_init(connection_struct) failed!\n"));
+       /* The bitmap position is used below as the connection number
+        * conn->cnum). This ends up as the TID field in the SMB header,
+        * which is limited to 16 bits (we skip 0xffff which is the
+        * NULL TID).
+        */
+       if (i > 65534) {
+               DEBUG(0, ("Maximum connection limit reached\n"));
                return NULL;
        }
 
-       if ((conn=TALLOC_ZERO_P(mem_ctx, connection_struct))==NULL) {
-               DEBUG(0,("talloc_zero() failed!\n"));
+       if (!(conn=TALLOC_ZERO_P(NULL, connection_struct)) ||
+           !(conn->params = TALLOC_P(conn, struct share_params))) {
+               DEBUG(0,("TALLOC_ZERO() failed!\n"));
+               TALLOC_FREE(conn);
                return NULL;
        }
-       conn->mem_ctx = mem_ctx;
+       conn->sconn = sconn;
        conn->cnum = i;
+       conn->force_group_gid = (gid_t)-1;
 
-       bitmap_set(bmap, i);
+       bitmap_set(sconn->smb1.tcons.bmap, i);
 
-       num_open++;
+       sconn->num_tcons_open++;
 
-       string_set(&conn->user,"");
-       string_set(&conn->dirpath,"");
        string_set(&conn->connectpath,"");
        string_set(&conn->origpath,"");
-       
-       DLIST_ADD(Connections, conn);
+
+       DLIST_ADD(sconn->smb1.tcons.Connections, conn);
 
        return conn;
 }
 
 /****************************************************************************
-close all conn structures
+ Close all conn structures.
+ Return true if any were closed.
 ****************************************************************************/
-void conn_close_all(void)
+
+bool conn_close_all(struct smbd_server_connection *sconn)
 {
-       connection_struct *conn, *next;
-       for (conn=Connections;conn;conn=next) {
-               next=conn->next;
-               set_current_service(conn, 0, True);
-               close_cnum(conn, conn->vuid);
+       bool ret = false;
+       if (sconn->using_smb2) {
+               /* SMB2 */
+               struct smbd_smb2_session *sess;
+               for (sess = sconn->smb2.sessions.list; sess; sess = sess->next) {
+                       struct smbd_smb2_tcon *tcon, *tc_next;
+
+                       for (tcon = sess->tcons.list; tcon; tcon = tc_next) {
+                               tc_next = tcon->next;
+                               TALLOC_FREE(tcon);
+                               ret = true;
+                       }
+               }
+       } else {
+               /* SMB1 */
+               connection_struct *conn, *next;
+
+               for (conn=sconn->smb1.tcons.Connections;conn;conn=next) {
+                       next=conn->next;
+                       set_current_service(conn, 0, True);
+                       close_cnum(conn, conn->vuid);
+                       ret = true;
+               }
+       }
+       return ret;
+}
+
+/****************************************************************************
+ Update last used timestamps.
+****************************************************************************/
+
+static void conn_lastused_update(struct smbd_server_connection *sconn,time_t t)
+{
+       if (sconn->using_smb2) {
+               /* SMB2 */
+               struct smbd_smb2_session *sess;
+               for (sess = sconn->smb2.sessions.list; sess; sess = sess->next) {
+                       struct smbd_smb2_tcon *ptcon;
+
+                       for (ptcon = sess->tcons.list; ptcon; ptcon = ptcon->next) {
+                               connection_struct *conn = ptcon->compat_conn;
+                               /* Update if connection wasn't idle. */
+                               if (conn && conn->lastused != conn->lastused_count) {
+                                       conn->lastused = t;
+                                       conn->lastused_count = t;
+                               }
+                       }
+               }
+       } else {
+               /* SMB1 */
+               connection_struct *conn;
+               for (conn=sconn->smb1.tcons.Connections;conn;conn=conn->next) {
+                       /* Update if connection wasn't idle. */
+                       if (conn->lastused != conn->lastused_count) {
+                               conn->lastused = t;
+                               conn->lastused_count = t;
+                       }
+               }
        }
 }
 
@@ -170,56 +284,99 @@ void conn_close_all(void)
  Idle inactive connections.
 ****************************************************************************/
 
-BOOL conn_idle_all(time_t t, int deadtime)
+bool conn_idle_all(struct smbd_server_connection *sconn, time_t t)
 {
-       pipes_struct *plist = NULL;
-       BOOL allidle = True;
-       connection_struct *conn, *next;
+       int deadtime = lp_deadtime()*60;
+
+       conn_lastused_update(sconn, t);
+
+       if (deadtime <= 0) {
+               deadtime = DEFAULT_SMBD_TIMEOUT;
+       }
 
-       for (conn=Connections;conn;conn=next) {
-               next=conn->next;
-               /* close dirptrs on connections that are idle */
-               if ((t-conn->lastused) > DPTR_IDLE_TIMEOUT)
-                       dptr_idlecnum(conn);
+       if (sconn->using_smb2) {
+               /* SMB2 */
+               struct smbd_smb2_session *sess;
+               for (sess = sconn->smb2.sessions.list; sess; sess = sess->next) {
+                       struct smbd_smb2_tcon *ptcon;
+
+                       for (ptcon = sess->tcons.list; ptcon; ptcon = ptcon->next) {
+                               time_t age;
+                               connection_struct *conn = ptcon->compat_conn;
+
+                               if (conn == NULL) {
+                                       continue;
+                               }
+
+                               age = t - conn->lastused;
+                               /* close dirptrs on connections that are idle */
+                               if (age > DPTR_IDLE_TIMEOUT) {
+                                       dptr_idlecnum(conn);
+                               }
+
+                               if (conn->num_files_open > 0 || age < deadtime) {
+                                       return false;
+                               }
+                       }
+               }
+       } else {
+               /* SMB1 */
+               connection_struct *conn;
+               for (conn=sconn->smb1.tcons.Connections;conn;conn=conn->next) {
+                       time_t age = t - conn->lastused;
+
+                       /* close dirptrs on connections that are idle */
+                       if (age > DPTR_IDLE_TIMEOUT) {
+                               dptr_idlecnum(conn);
+                       }
 
-               if (conn->num_files_open > 0 || 
-                   (t-conn->lastused)<deadtime)
-                       allidle = False;
+                       if (conn->num_files_open > 0 || age < deadtime) {
+                               return false;
+                       }
+               }
        }
 
        /*
         * Check all pipes for any open handles. We cannot
         * idle with a handle open.
         */
+       if (check_open_pipes()) {
+               return false;
+       }
 
-       for (plist = get_first_internal_pipe(); plist; plist = get_next_internal_pipe(plist))
-               if (plist->pipe_handles && plist->pipe_handles->count)
-                       allidle = False;
-       
-       return allidle;
+       return true;
 }
 
 /****************************************************************************
  Clear a vuid out of the validity cache, and as the 'owner' of a connection.
 ****************************************************************************/
 
-void conn_clear_vuid_cache(uint16 vuid)
+void conn_clear_vuid_caches(struct smbd_server_connection *sconn,uint16_t vuid)
 {
        connection_struct *conn;
-       unsigned int i;
 
-       for (conn=Connections;conn;conn=conn->next) {
-               if (conn->vuid == vuid) {
-                       conn->vuid = UID_FIELD_INVALID;
+       if (sconn->using_smb2) {
+               /* SMB2 */
+               struct smbd_smb2_session *sess;
+               for (sess = sconn->smb2.sessions.list; sess; sess = sess->next) {
+                       struct smbd_smb2_tcon *ptcon;
+
+                       for (ptcon = sess->tcons.list; ptcon; ptcon = ptcon->next) {
+                               if (ptcon->compat_conn) {
+                                       if (ptcon->compat_conn->vuid == vuid) {
+                                               ptcon->compat_conn->vuid = UID_FIELD_INVALID;
+                                       }
+                                       conn_clear_vuid_cache(ptcon->compat_conn, vuid);
+                               }
+                       }
                }
-
-               for (i=0;i<conn->vuid_cache.entries && i< VUID_CACHE_SIZE;i++) {
-                       if (conn->vuid_cache.array[i].vuid == vuid) {
-                               struct vuid_cache_entry *ent = &conn->vuid_cache.array[i];
-                               ent->vuid = UID_FIELD_INVALID;
-                               ent->read_only = False;
-                               ent->admin_user = False;
+       } else {
+               /* SMB1 */
+               for (conn=sconn->smb1.tcons.Connections;conn;conn=conn->next) {
+                       if (conn->vuid == vuid) {
+                               conn->vuid = UID_FIELD_INVALID;
                        }
+                       conn_clear_vuid_cache(conn, vuid);
                }
        }
 }
@@ -228,43 +385,38 @@ void conn_clear_vuid_cache(uint16 vuid)
  Free a conn structure - internal part.
 ****************************************************************************/
 
-void conn_free_internal(connection_struct *conn)
+static void conn_free_internal(connection_struct *conn)
 {
-       vfs_handle_struct *handle = NULL, *thandle = NULL;
-       TALLOC_CTX *mem_ctx = NULL;
+       vfs_handle_struct *handle = NULL, *thandle = NULL;
+       struct trans_state *state = NULL;
 
        /* Free vfs_connection_struct */
        handle = conn->vfs_handles;
        while(handle) {
-               DLIST_REMOVE(conn->vfs_handles, handle);
                thandle = handle->next;
+               DLIST_REMOVE(conn->vfs_handles, handle);
                if (handle->free_data)
                        handle->free_data(&handle->data);
                handle = thandle;
        }
 
-       if (conn->ngroups && conn->groups) {
-               SAFE_FREE(conn->groups);
-               conn->ngroups = 0;
-       }
-
-       if (conn->nt_user_token) {
-               TALLOC_FREE(conn->nt_user_token);
+       /* Free any pending transactions stored on this conn. */
+       for (state = conn->pending_trans; state; state = state->next) {
+               /* state->setup is a talloc child of state. */
+               SAFE_FREE(state->param);
+               SAFE_FREE(state->data);
        }
 
        free_namearray(conn->veto_list);
        free_namearray(conn->hide_list);
        free_namearray(conn->veto_oplock_list);
        free_namearray(conn->aio_write_behind_list);
-       
-       string_free(&conn->user);
-       string_free(&conn->dirpath);
+
        string_free(&conn->connectpath);
        string_free(&conn->origpath);
 
-       mem_ctx = conn->mem_ctx;
        ZERO_STRUCTP(conn);
-       talloc_destroy(mem_ctx);
+       talloc_destroy(conn);
 }
 
 /****************************************************************************
@@ -273,39 +425,91 @@ void conn_free_internal(connection_struct *conn)
 
 void conn_free(connection_struct *conn)
 {
-       DLIST_REMOVE(Connections, conn);
+       if (conn->sconn == NULL) {
+               conn_free_internal(conn);
+               return;
+       }
 
-       bitmap_clear(bmap, conn->cnum);
-       num_open--;
+       if (conn->sconn->using_smb2) {
+               /* SMB2 */
+               conn_free_internal(conn);
+               return;
+       }
+
+       /* SMB1 */
+       DLIST_REMOVE(conn->sconn->smb1.tcons.Connections, conn);
+
+       if (conn->sconn->smb1.tcons.bmap != NULL) {
+               /*
+                * Can be NULL for fake connections created by
+                * create_conn_struct()
+                */
+               bitmap_clear(conn->sconn->smb1.tcons.bmap, conn->cnum);
+       }
+
+       SMB_ASSERT(conn->sconn->num_tcons_open > 0);
+       conn->sconn->num_tcons_open--;
 
        conn_free_internal(conn);
 }
+
 /****************************************************************************
-receive a smbcontrol message to forcibly unmount a share
-the message contains just a share name and all instances of that
-share are unmounted
-the special sharename '*' forces unmount of all shares
+ Receive a smbcontrol message to forcibly unmount a share.
+ The message contains just a share name and all instances of that
+ share are unmounted.
+ The special sharename '*' forces unmount of all shares.
 ****************************************************************************/
-void msg_force_tdis(int msg_type, struct process_id pid, void *buf, size_t len)
+
+void msg_force_tdis(struct messaging_context *msg,
+                   void *private_data,
+                   uint32_t msg_type,
+                   struct server_id server_id,
+                   DATA_BLOB *data)
 {
+       struct smbd_server_connection *sconn;
        connection_struct *conn, *next;
        fstring sharename;
 
-       fstrcpy(sharename, (const char *)buf);
+       sconn = msg_ctx_to_sconn(msg);
+       if (sconn == NULL) {
+               DEBUG(1, ("could not find sconn\n"));
+               return;
+       }
+
+       fstrcpy(sharename, (const char *)data->data);
 
        if (strcmp(sharename, "*") == 0) {
                DEBUG(1,("Forcing close of all shares\n"));
-               conn_close_all();
+               conn_close_all(sconn);
                return;
        }
 
-       for (conn=Connections;conn;conn=next) {
-               next=conn->next;
-               if (strequal(lp_servicename(conn->service), sharename)) {
-                       DEBUG(1,("Forcing close of share %s cnum=%d\n",
-                                sharename, conn->cnum));
-                       close_cnum(conn, (uint16)-1);
+       if (sconn->using_smb2) {
+               /* SMB2 */
+               struct smbd_smb2_session *sess;
+               for (sess = sconn->smb2.sessions.list; sess; sess = sess->next) {
+                       struct smbd_smb2_tcon *tcon, *tc_next;
+
+                       for (tcon = sess->tcons.list; tcon; tcon = tc_next) {
+                               tc_next = tcon->next;
+                               if (tcon->compat_conn &&
+                                               strequal(lp_servicename(SNUM(tcon->compat_conn)),
+                                                               sharename)) {
+                                       DEBUG(1,("Forcing close of share %s cnum=%d\n",
+                                               sharename, tcon->compat_conn->cnum));
+                                       TALLOC_FREE(tcon);
+                               }
+                       }
+               }
+       } else {
+               /* SMB1 */
+               for (conn=sconn->smb1.tcons.Connections;conn;conn=next) {
+                       next=conn->next;
+                       if (strequal(lp_servicename(SNUM(conn)), sharename)) {
+                               DEBUG(1,("Forcing close of share %s cnum=%d\n",
+                                       sharename, conn->cnum));
+                               close_cnum(conn, (uint16)-1);
+                       }
                }
        }
 }