source4/torture/rap/rap.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    test suite for various RAP operations
   4    Copyright (C) Volker Lendecke 2004
   5    Copyright (C) Tim Potter 2005
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License as published by
   9    the Free Software Foundation; either version 2 of the License, or
  10    (at your option) any later version.
  11
  12    This program is distributed in the hope that it will be useful,
  13    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15    GNU General Public License for more details.
  16
  17    You should have received a copy of the GNU General Public License
  18    along with this program; if not, write to the Free Software
  19    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  20 */
  21
  22 #include "includes.h"
  23 #include "rap.h"
  24 #include "libcli/raw/libcliraw.h"
  25
  26 struct rap_call {
  27         uint16_t callno;
  28         char *paramdesc;
  29         const char *datadesc;
  30
  31         uint16_t status;
  32         uint16_t convert;
  33
  34         uint16_t rcv_paramlen, rcv_datalen;
  35
  36         struct ndr_push *ndr_push_param;
  37         struct ndr_push *ndr_push_data;
  38         struct ndr_pull *ndr_pull_param;
  39         struct ndr_pull *ndr_pull_data;
  40 };
  41
  42 #define RAPNDR_FLAGS (LIBNDR_FLAG_NOALIGN|LIBNDR_FLAG_STR_ASCII|LIBNDR_FLAG_STR_NULLTERM);
  43
  44 static struct rap_call *new_rap_cli_call(TALLOC_CTX *mem_ctx, uint16_t callno)
  45 {
  46         struct rap_call *call;
  47
  48         call = talloc(mem_ctx, struct rap_call);
  49
  50         if (call == NULL)
  51                 return NULL;
  52
  53         call->callno = callno;
  54         call->rcv_paramlen = 4;
  55
  56         call->paramdesc = NULL;
  57         call->datadesc = NULL;
  58
  59         call->ndr_push_param = ndr_push_init_ctx(mem_ctx);
  60         call->ndr_push_param->flags = RAPNDR_FLAGS;
  61
  62         call->ndr_push_data = ndr_push_init_ctx(mem_ctx);
  63         call->ndr_push_data->flags = RAPNDR_FLAGS;
  64
  65         return call;
  66 }
  67
  68 static void rap_cli_push_paramdesc(struct rap_call *call, char desc)
  69 {
  70         int len = 0;
  71
  72         if (call->paramdesc != NULL)
  73                 len = strlen(call->paramdesc);
  74
  75         call->paramdesc = talloc_realloc(call,
  76                                          call->paramdesc,
  77                                          uint8_t,
  78                                          len+2);
  79
  80         call->paramdesc[len] = desc;
  81         call->paramdesc[len+1] = '\0';
  82 }
  83
  84 static void rap_cli_push_word(struct rap_call *call, uint16_t val)
  85 {
  86         rap_cli_push_paramdesc(call, 'W');
  87         ndr_push_uint16(call->ndr_push_param, NDR_SCALARS, val);
  88 }
  89
  90 static void rap_cli_push_dword(struct rap_call *call, uint32_t val)
  91 {
  92         rap_cli_push_paramdesc(call, 'D');
  93         ndr_push_uint32(call->ndr_push_param, NDR_SCALARS, val);
  94 }
  95
  96 static void rap_cli_push_rcvbuf(struct rap_call *call, int len)
  97 {
  98         rap_cli_push_paramdesc(call, 'r');
  99         rap_cli_push_paramdesc(call, 'L');
 100         ndr_push_uint16(call->ndr_push_param, NDR_SCALARS, len);
 101         call->rcv_datalen = len;
 102 }
 103
 104 static void rap_cli_expect_multiple_entries(struct rap_call *call)
 105 {
 106         rap_cli_push_paramdesc(call, 'e');
 107         rap_cli_push_paramdesc(call, 'h');
 108         call->rcv_paramlen += 4; /* uint16_t entry count, uint16_t total */
 109 }
 110
 111 static void rap_cli_push_string(struct rap_call *call, const char *str)
 112 {
 113         if (str == NULL) {
 114                 rap_cli_push_paramdesc(call, 'O');
 115                 return;
 116         }
 117         rap_cli_push_paramdesc(call, 'z');
 118         ndr_push_string(call->ndr_push_param, NDR_SCALARS, str);
 119 }
 120
 121 static void rap_cli_expect_format(struct rap_call *call, const char *format)
 122 {
 123         call->datadesc = format;
 124 }
 125
 126 static NTSTATUS rap_pull_string(TALLOC_CTX *mem_ctx, struct ndr_pull *ndr,
 127                                 uint16_t convert, char **dest)
 128 {
 129         uint16_t string_offset;
 130         uint16_t ignore;
 131         const char *p;
 132         size_t len;
 133
 134         NDR_CHECK(ndr_pull_uint16(ndr, NDR_SCALARS, &string_offset));
 135         NDR_CHECK(ndr_pull_uint16(ndr, NDR_SCALARS, &ignore));
 136
 137         string_offset -= convert;
 138
 139         if (string_offset+1 > ndr->data_size)
 140                 return NT_STATUS_INVALID_PARAMETER;
 141
 142         p = (const char *)(ndr->data + string_offset);
 143         len = strnlen(p, ndr->data_size-string_offset);
 144
 145         if ( string_offset + len + 1 >  ndr->data_size )
 146                 return NT_STATUS_INVALID_PARAMETER;
 147
 148         *dest = talloc_zero_size(mem_ctx, len+1);
 149         pull_ascii(*dest, p, len+1, len, 0);
 150
 151         return NT_STATUS_OK;
 152 }
 153
 154 static NTSTATUS rap_cli_do_call(struct smbcli_state *cli, struct rap_call *call)
 155 {
 156         NTSTATUS result;
 157         DATA_BLOB param_blob;
 158         struct ndr_push *params;
 159         struct smb_trans2 trans;
 160
 161         params = ndr_push_init_ctx(call);
 162
 163         if (params == NULL)
 164                 return NT_STATUS_NO_MEMORY;
 165
 166         params->flags = RAPNDR_FLAGS;
 167
 168         trans.in.max_param = call->rcv_paramlen;
 169         trans.in.max_data = smb_raw_max_trans_data(cli->tree, call->rcv_paramlen);
 170         trans.in.max_setup = 0;
 171         trans.in.flags = 0;
 172         trans.in.timeout = 0;
 173         trans.in.setup_count = 0;
 174         trans.in.setup = NULL;
 175         trans.in.trans_name = "\\PIPE\\LANMAN";
 176
 177         NDR_CHECK(ndr_push_uint16(params, NDR_SCALARS, call->callno));
 178         if (call->paramdesc)
 179                 NDR_CHECK(ndr_push_string(params, NDR_SCALARS, call->paramdesc));
 180         if (call->datadesc)
 181                 NDR_CHECK(ndr_push_string(params, NDR_SCALARS, call->datadesc));
 182
 183         param_blob = ndr_push_blob(call->ndr_push_param);
 184         NDR_CHECK(ndr_push_bytes(params, param_blob.data,
 185                                  param_blob.length));
 186
 187         trans.in.params = ndr_push_blob(params);
 188         trans.in.data = data_blob(NULL, 0);
 189
 190         result = smb_raw_trans(cli->tree, call, &trans);
 191
 192         if (!NT_STATUS_IS_OK(result))
 193                 return result;
 194
 195         call->ndr_pull_param = ndr_pull_init_blob(&trans.out.params, call);
 196         call->ndr_pull_param->flags = RAPNDR_FLAGS;
 197
 198         call->ndr_pull_data = ndr_pull_init_blob(&trans.out.data, call);
 199         call->ndr_pull_data->flags = RAPNDR_FLAGS;
 200
 201         return result;
 202 }
 203
 204 #define NDR_OK(call) do { NTSTATUS _status; \
 205                              _status = call; \
 206                              if (!NT_STATUS_IS_OK(_status)) \
 207                                 goto done; \
 208                         } while (0)
 209
 210 static NTSTATUS smbcli_rap_netshareenum(struct smbcli_state *cli,
 211                                         TALLOC_CTX *mem_ctx,
 212                                         struct rap_NetShareEnum *r)
 213 {
 214         struct rap_call *call;
 215         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 216         int i;
 217
 218         call = new_rap_cli_call(NULL, RAP_WshareEnum);
 219
 220         if (call == NULL)
 221                 return NT_STATUS_NO_MEMORY;
 222
 223         rap_cli_push_word(call, r->in.level); /* Level */
 224         rap_cli_push_rcvbuf(call, r->in.bufsize);
 225         rap_cli_expect_multiple_entries(call);
 226
 227         switch(r->in.level) {
 228         case 0:
 229                 rap_cli_expect_format(call, "B13");
 230                 break;
 231         case 1:
 232                 rap_cli_expect_format(call, "B13BWz");
 233                 break;
 234         }
 235
 236         result = rap_cli_do_call(cli, call);
 237
 238         if (!NT_STATUS_IS_OK(result))
 239                 goto done;
 240
 241         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.status));
 242         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.convert));
 243         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.count));
 244         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.available));
 245
 246         r->out.info = talloc_array(mem_ctx, union rap_shareenum_info, r->out.count);
 247
 248         if (r->out.info == NULL) {
 249                 result = NT_STATUS_NO_MEMORY;
 250                 goto done;
 251         }
 252
 253         for (i=0; i<r->out.count; i++) {
 254                 switch(r->in.level) {
 255                 case 0:
 256                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 257                                               (uint8_t *)r->out.info[i].info0.name, 13));
 258                         break;
 259                 case 1:
 260                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 261                                               (uint8_t *)r->out.info[i].info1.name, 13));
 262                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 263                                               (uint8_t *)&r->out.info[i].info1.pad, 1));
 264                         NDR_OK(ndr_pull_uint16(call->ndr_pull_data,
 265                                                NDR_SCALARS, &r->out.info[i].info1.type));
 266                         NDR_OK(rap_pull_string(mem_ctx, call->ndr_pull_data,
 267                                                r->out.convert,
 268                                                &r->out.info[i].info1.comment));
 269                         break;
 270                 }
 271         }
 272
 273         result = NT_STATUS_OK;
 274
 275  done:
 276         talloc_free(call);
 277         return result;
 278 }
 279
 280 static BOOL test_netshareenum(struct smbcli_state *cli)
 281 {
 282         struct rap_NetShareEnum r;
 283         int i;
 284         TALLOC_CTX *tmp_ctx = talloc_new(cli);
 285
 286         r.in.level = 1;
 287         r.in.bufsize = 8192;
 288
 289         if (!NT_STATUS_IS_OK(smbcli_rap_netshareenum(cli, tmp_ctx, &r)))
 290                 return False;
 291
 292         for (i=0; i<r.out.count; i++) {
 293                 printf("%s %d %s\n", r.out.info[i].info1.name,
 294                        r.out.info[i].info1.type,
 295                        r.out.info[i].info1.comment);
 296         }
 297
 298         talloc_free(tmp_ctx);
 299
 300         return True;
 301 }
 302
 303 static NTSTATUS smbcli_rap_netserverenum2(struct smbcli_state *cli,
 304                                           TALLOC_CTX *mem_ctx,
 305                                           struct rap_NetServerEnum2 *r)
 306 {
 307         struct rap_call *call;
 308         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 309         int i;
 310
 311         call = new_rap_cli_call(NULL, RAP_NetServerEnum2);
 312
 313         if (call == NULL)
 314                 return NT_STATUS_NO_MEMORY;
 315
 316         rap_cli_push_word(call, r->in.level);
 317         rap_cli_push_rcvbuf(call, r->in.bufsize);
 318         rap_cli_expect_multiple_entries(call);
 319         rap_cli_push_dword(call, r->in.servertype);
 320         rap_cli_push_string(call, r->in.domain);
 321
 322         switch(r->in.level) {
 323         case 0:
 324                 rap_cli_expect_format(call, "B16");
 325                 break;
 326         case 1:
 327                 rap_cli_expect_format(call, "B16BBDz");
 328                 break;
 329         }
 330
 331         result = rap_cli_do_call(cli, call);
 332
 333         if (!NT_STATUS_IS_OK(result))
 334                 goto done;
 335
 336         result = NT_STATUS_INVALID_PARAMETER;
 337
 338         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.status));
 339         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.convert));
 340         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.count));
 341         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.available));
 342
 343         r->out.info = talloc_array(mem_ctx, union rap_server_info, r->out.count);
 344
 345         if (r->out.info == NULL) {
 346                 result = NT_STATUS_NO_MEMORY;
 347                 goto done;
 348         }
 349
 350         for (i=0; i<r->out.count; i++) {
 351                 switch(r->in.level) {
 352                 case 0:
 353                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 354                                               (uint8_t *)r->out.info[i].info0.name, 16));
 355                         break;
 356                 case 1:
 357                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 358                                               (uint8_t *)r->out.info[i].info1.name, 16));
 359                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 360                                               &r->out.info[i].info1.version_major, 1));
 361                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 362                                               &r->out.info[i].info1.version_minor, 1));
 363                         NDR_OK(ndr_pull_uint32(call->ndr_pull_data,
 364                                                NDR_SCALARS, &r->out.info[i].info1.servertype));
 365                         NDR_OK(rap_pull_string(mem_ctx, call->ndr_pull_data,
 366                                                r->out.convert,
 367                                                &r->out.info[i].info1.comment));
 368                 }
 369         }
 370
 371         result = NT_STATUS_OK;
 372
 373  done:
 374         talloc_free(call);
 375         return result;
 376 }
 377
 378 static BOOL test_netserverenum(struct smbcli_state *cli)
 379 {
 380         struct rap_NetServerEnum2 r;
 381         int i;
 382         TALLOC_CTX *tmp_ctx = talloc_new(cli);
 383
 384         r.in.level = 0;
 385         r.in.bufsize = 8192;
 386         r.in.servertype = 0xffffffff;
 387         r.in.servertype = 0x80000000;
 388         r.in.domain = NULL;
 389
 390         if (!NT_STATUS_IS_OK(smbcli_rap_netserverenum2(cli, tmp_ctx, &r)))
 391                 return False;
 392
 393         for (i=0; i<r.out.count; i++) {
 394                 switch (r.in.level) {
 395                 case 0:
 396                         printf("%s\n", r.out.info[i].info0.name);
 397                         break;
 398                 case 1:
 399                         printf("%s %x %s\n", r.out.info[i].info1.name,
 400                                r.out.info[i].info1.servertype,
 401                                r.out.info[i].info1.comment);
 402                         break;
 403                 }
 404         }
 405
 406         talloc_free(tmp_ctx);
 407
 408         return True;
 409 }
 410
 411
 412
 413 static BOOL test_rap(struct smbcli_state *cli)
 414 {
 415         BOOL res = True;
 416
 417         if (!test_netserverenum(cli))
 418                 res = False;
 419
 420         if (!test_netshareenum(cli))
 421                 res = False;
 422
 423         return res;
 424 }
 425
 426 BOOL torture_raw_rap(void)
 427 {
 428         struct smbcli_state *cli;
 429         BOOL ret = True;
 430         TALLOC_CTX *mem_ctx;
 431
 432         if (!torture_open_connection(&cli)) {
 433                 return False;
 434         }
 435
 436         mem_ctx = talloc_init("torture_raw_rap");
 437
 438         if (!test_rap(cli)) {
 439                 ret = False;
 440         }
 441
 442         torture_close_connection(cli);
 443         talloc_free(mem_ctx);
 444
 445         return ret;
 446 }
 447
 448 BOOL torture_rap_scan(void)
 449 {
 450         TALLOC_CTX *mem_ctx;
 451         struct smbcli_state *cli;
 452         int callno;
 453
 454         mem_ctx = talloc_init("torture_rap_scan");
 455
 456         if (!torture_open_connection(&cli)) {
 457                 return False;
 458         }
 459
 460         for (callno = 0; callno < 0xffff; callno++) {
 461                 struct rap_call *call = new_rap_cli_call(mem_ctx, callno);
 462                 NTSTATUS result;
 463
 464                 result = rap_cli_do_call(cli, call);
 465
 466                 if (!NT_STATUS_EQUAL(result, NT_STATUS_INVALID_PARAMETER))
 467                         continue;
 468
 469                 printf("callno %d is RAP call\n", callno);
 470         }
 471
 472         torture_close_connection(cli);
 473
 474         return True;
 475 }