First part of fix for bug #5903 - vfs_streams_xattr breaks contents of the file.
[jra/samba/.git] / source3 / smbd / pipes.c
index 1da2f0c22f440776e7f0f573a600b7e783f8d06b..b52b1b02d07d7aca1e1962b9418ccd871eb44fbe 100644 (file)
@@ -8,7 +8,7 @@
    
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
-   the Free Software Foundation; either version 2 of the License, or
+   the Free Software Foundation; either version 3 of the License, or
    (at your option) any later version.
    
    This program is distributed in the hope that it will be useful,
@@ -17,8 +17,7 @@
    GNU General Public License for more details.
    
    You should have received a copy of the GNU General Public License
-   along with this program; if not, write to the Free Software
-   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
 /*
    This file handles reply_ calls on named pipes that the server
 
 #define MAX_PIPE_NAME_LEN      24
 
-/* PIPE/<name>/<pid>/<pnum> */
-#define PIPEDB_KEY_FORMAT "PIPE/%s/%u/%d"
-
-struct pipe_dbrec {
-       struct server_id pid;
-       int pnum;
-       uid_t uid;
-
-       char name[MAX_PIPE_NAME_LEN];
-       fstring user;
-};
-
-
-extern struct pipe_id_info pipe_names[];
-
 /****************************************************************************
  Reply to an open and X on a named pipe.
  This code is basically stolen from reply_open_and_X with some
  wrinkles to handle pipes.
 ****************************************************************************/
 
-int reply_open_pipe_and_X(connection_struct *conn,
-                         char *inbuf,char *outbuf,int length,int bufsize)
+void reply_open_pipe_and_X(connection_struct *conn, struct smb_request *req)
 {
-       pstring fname;
-       pstring pipe_name;
-       uint16 vuid = SVAL(inbuf, smb_uid);
-       smb_np_struct *p;
+       const char *fname = NULL;
+       char *pipe_name = NULL;
+       files_struct *fsp;
        int size=0,fmode=0,mtime=0,rmode=0;
-       int i;
+       TALLOC_CTX *ctx = talloc_tos();
+       NTSTATUS status;
 
        /* XXXX we need to handle passed times, sattr and flags */
-       srvstr_pull_buf(inbuf, SVAL(inbuf, smb_flg2), pipe_name,
-                       smb_buf(inbuf), sizeof(pipe_name), STR_TERMINATE);
+       srvstr_pull_req_talloc(ctx, req, &pipe_name, req->buf, STR_TERMINATE);
+       if (!pipe_name) {
+               reply_botherror(req, NT_STATUS_OBJECT_NAME_NOT_FOUND,
+                               ERRDOS, ERRbadpipe);
+               return;
+       }
 
        /* If the name doesn't start \PIPE\ then this is directed */
        /* at a mailslot or something we really, really don't understand, */
        /* not just something we really don't understand. */
        if ( strncmp(pipe_name,PIPE,PIPELEN) != 0 ) {
-               return(ERROR_DOS(ERRSRV,ERRaccess));
+               reply_doserror(req, ERRSRV, ERRaccess);
+               return;
        }
 
        DEBUG(4,("Opening pipe %s.\n", pipe_name));
 
-       /* See if it is one we want to handle. */
-       for( i = 0; pipe_names[i].client_pipe ; i++ ) {
-               if( strequal(pipe_name,pipe_names[i].client_pipe)) {
-                       break;
-               }
-       }
-
-       if (pipe_names[i].client_pipe == NULL) {
-               return(ERROR_BOTH(NT_STATUS_OBJECT_NAME_NOT_FOUND,ERRDOS,ERRbadpipe));
-       }
-
        /* Strip \PIPE\ off the name. */
-       pstrcpy(fname, pipe_name + PIPELEN);
+       fname = pipe_name + PIPELEN;
 
 #if 0
        /*
         * Hack for NT printers... JRA.
         */
-    if(should_fail_next_srvsvc_open(fname))
-      return(ERROR(ERRSRV,ERRaccess));
+       if(should_fail_next_srvsvc_open(fname)) {
+               reply_doserror(req, ERRSRV, ERRaccess);
+               return;
+       }
 #endif
 
-       /* Known pipes arrive with DIR attribs. Remove it so a regular file */
-       /* can be opened and add it in after the open. */
-       DEBUG(3,("Known pipe %s opening.\n",fname));
-
-       p = open_rpc_pipe_p(fname, conn, vuid);
-       if (!p) {
-               return(ERROR_DOS(ERRSRV,ERRnofids));
+       status = np_open(req, conn, fname, &fsp);
+       if (!NT_STATUS_IS_OK(status)) {
+               if (NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
+                       reply_botherror(req, NT_STATUS_OBJECT_NAME_NOT_FOUND,
+                                       ERRDOS, ERRbadpipe);
+                       return;
+               }
+               reply_nterror(req, status);
+               return;
        }
 
        /* Prepare the reply */
-       set_message(inbuf,outbuf,15,0,True);
+       reply_outbuf(req, 15, 0);
 
        /* Mark the opened file as an existing named pipe in message mode. */
-       SSVAL(outbuf,smb_vwv9,2);
-       SSVAL(outbuf,smb_vwv10,0xc700);
+       SSVAL(req->outbuf,smb_vwv9,2);
+       SSVAL(req->outbuf,smb_vwv10,0xc700);
 
        if (rmode == 2) {
                DEBUG(4,("Resetting open result to open from create.\n"));
                rmode = 1;
        }
 
-       SSVAL(outbuf,smb_vwv2, p->pnum);
-       SSVAL(outbuf,smb_vwv3,fmode);
-       srv_put_dos_date3(outbuf,smb_vwv4,mtime);
-       SIVAL(outbuf,smb_vwv6,size);
-       SSVAL(outbuf,smb_vwv8,rmode);
-       SSVAL(outbuf,smb_vwv11,0x0001);
+       SSVAL(req->outbuf,smb_vwv2, fsp->fnum);
+       SSVAL(req->outbuf,smb_vwv3,fmode);
+       srv_put_dos_date3((char *)req->outbuf,smb_vwv4,mtime);
+       SIVAL(req->outbuf,smb_vwv6,size);
+       SSVAL(req->outbuf,smb_vwv8,rmode);
+       SSVAL(req->outbuf,smb_vwv11,0x0001);
 
-       return chain_reply(inbuf,outbuf,length,bufsize);
+       chain_reply(req);
+       return;
 }
 
 /****************************************************************************
  Reply to a write on a pipe.
 ****************************************************************************/
 
-int reply_pipe_write(char *inbuf,char *outbuf,int length,int dum_bufsize)
+void reply_pipe_write(struct smb_request *req)
 {
-       smb_np_struct *p = get_rpc_pipe_p(inbuf,smb_vwv0);
-       uint16 vuid = SVAL(inbuf,smb_uid);
-       size_t numtowrite = SVAL(inbuf,smb_vwv1);
-       int nwritten;
-       int outsize;
-       char *data;
-
-       if (!p) {
-               return(ERROR_DOS(ERRDOS,ERRbadfid));
+       files_struct *fsp = file_fsp(req, SVAL(req->vwv+0, 0));
+       size_t numtowrite = SVAL(req->vwv+1, 0);
+       ssize_t nwritten;
+       const uint8_t *data;
+
+       if (!fsp_is_np(fsp)) {
+               reply_doserror(req, ERRDOS, ERRbadfid);
+               return;
        }
 
-       if (p->vuid != vuid) {
-               return ERROR_NT(NT_STATUS_INVALID_HANDLE);
+       if (fsp->vuid != req->vuid) {
+               reply_nterror(req, NT_STATUS_INVALID_HANDLE);
+               return;
        }
 
-       data = smb_buf(inbuf) + 3;
+       data = req->buf + 3;
 
        if (numtowrite == 0) {
                nwritten = 0;
        } else {
-               nwritten = write_to_pipe(p, data, numtowrite);
+               NTSTATUS status;
+               status = np_write(fsp, data, numtowrite, &nwritten);
+               if (!NT_STATUS_IS_OK(status)) {
+                       reply_nterror(req, status);
+                       return;
+               }
        }
 
        if ((nwritten == 0 && numtowrite != 0) || (nwritten < 0)) {
-               return (UNIXERROR(ERRDOS,ERRnoaccess));
+               reply_unixerror(req, ERRDOS, ERRnoaccess);
+               return;
        }
-  
-       outsize = set_message(inbuf,outbuf,1,0,True);
 
-       SSVAL(outbuf,smb_vwv0,nwritten);
+       reply_outbuf(req, 1, 0);
+
+       SSVAL(req->outbuf,smb_vwv0,nwritten);
   
-       DEBUG(3,("write-IPC pnum=%04x nwritten=%d\n", p->pnum, nwritten));
+       DEBUG(3,("write-IPC pnum=%04x nwritten=%d\n", fsp->fnum,
+                (int)nwritten));
 
-       return(outsize);
+       return;
 }
 
 /****************************************************************************
@@ -179,30 +168,34 @@ int reply_pipe_write(char *inbuf,char *outbuf,int length,int dum_bufsize)
  wrinkles to handle pipes.
 ****************************************************************************/
 
-int reply_pipe_write_and_X(char *inbuf,char *outbuf,int length,int bufsize)
+void reply_pipe_write_and_X(struct smb_request *req)
 {
-       smb_np_struct *p = get_rpc_pipe_p(inbuf,smb_vwv2);
-       uint16 vuid = SVAL(inbuf,smb_uid);
-       size_t numtowrite = SVAL(inbuf,smb_vwv10);
-       int nwritten = -1;
-       int smb_doff = SVAL(inbuf, smb_vwv11);
-       BOOL pipe_start_message_raw = ((SVAL(inbuf, smb_vwv7) & (PIPE_START_MESSAGE|PIPE_RAW_MODE)) ==
-                                                               (PIPE_START_MESSAGE|PIPE_RAW_MODE));
-       char *data;
-
-       if (!p) {
-               return(ERROR_DOS(ERRDOS,ERRbadfid));
+       files_struct *fsp = file_fsp(req, SVAL(req->vwv+2, 0));
+       size_t numtowrite = SVAL(req->vwv+10, 0);
+       ssize_t nwritten;
+       int smb_doff = SVAL(req->vwv+11, 0);
+       bool pipe_start_message_raw =
+               ((SVAL(req->vwv+7, 0) & (PIPE_START_MESSAGE|PIPE_RAW_MODE))
+                == (PIPE_START_MESSAGE|PIPE_RAW_MODE));
+       uint8_t *data;
+
+       if (!fsp_is_np(fsp)) {
+               reply_doserror(req, ERRDOS, ERRbadfid);
+               return;
        }
 
-       if (p->vuid != vuid) {
-               return ERROR_NT(NT_STATUS_INVALID_HANDLE);
+       if (fsp->vuid != req->vuid) {
+               reply_nterror(req, NT_STATUS_INVALID_HANDLE);
+               return;
        }
 
-       data = smb_base(inbuf) + smb_doff;
+       data = (uint8_t *)smb_base(req->inbuf) + smb_doff;
 
        if (numtowrite == 0) {
                nwritten = 0;
        } else {
+               NTSTATUS status;
+
                if(pipe_start_message_raw) {
                        /*
                         * For the start of a message in named pipe byte mode,
@@ -210,29 +203,38 @@ int reply_pipe_write_and_X(char *inbuf,char *outbuf,int length,int bufsize)
                         * them (we don't trust the client). JRA.
                         */
                       if(numtowrite < 2) {
-                               DEBUG(0,("reply_pipe_write_and_X: start of message set and not enough data sent.(%u)\n",
-                                       (unsigned int)numtowrite ));
-                               return (UNIXERROR(ERRDOS,ERRnoaccess));
+                               DEBUG(0,("reply_pipe_write_and_X: start of "
+                                        "message set and not enough data "
+                                        "sent.(%u)\n",
+                                        (unsigned int)numtowrite ));
+                               reply_unixerror(req, ERRDOS, ERRnoaccess);
+                               return;
                        }
 
                        data += 2;
                        numtowrite -= 2;
                }                        
-               nwritten = write_to_pipe(p, data, numtowrite);
+               status = np_write(fsp, data, numtowrite, &nwritten);
+               if (!NT_STATUS_IS_OK(status)) {
+                       reply_nterror(req, status);
+                       return;
+               }
        }
 
        if ((nwritten == 0 && numtowrite != 0) || (nwritten < 0)) {
-               return (UNIXERROR(ERRDOS,ERRnoaccess));
+               reply_unixerror(req, ERRDOS,ERRnoaccess);
+               return;
        }
-  
-       set_message(inbuf,outbuf,6,0,True);
+
+       reply_outbuf(req, 6, 0);
 
        nwritten = (pipe_start_message_raw ? nwritten + 2 : nwritten);
-       SSVAL(outbuf,smb_vwv2,nwritten);
+       SSVAL(req->outbuf,smb_vwv2,nwritten);
   
-       DEBUG(3,("writeX-IPC pnum=%04x nwritten=%d\n", p->pnum, nwritten));
+       DEBUG(3,("writeX-IPC pnum=%04x nwritten=%d\n", fsp->fnum,
+                (int)nwritten));
 
-       return chain_reply(inbuf,outbuf,length,bufsize);
+       chain_reply(req);
 }
 
 /****************************************************************************
@@ -241,67 +243,52 @@ int reply_pipe_write_and_X(char *inbuf,char *outbuf,int length,int bufsize)
  wrinkles to handle pipes.
 ****************************************************************************/
 
-int reply_pipe_read_and_X(char *inbuf,char *outbuf,int length,int bufsize)
+void reply_pipe_read_and_X(struct smb_request *req)
 {
-       smb_np_struct *p = get_rpc_pipe_p(inbuf,smb_vwv2);
-       int smb_maxcnt = SVAL(inbuf,smb_vwv5);
-       int smb_mincnt = SVAL(inbuf,smb_vwv6);
-       int nread = -1;
-       char *data;
-       BOOL unused;
+       files_struct *fsp = file_fsp(req, SVAL(req->vwv+0, 0));
+       int smb_maxcnt = SVAL(req->vwv+5, 0);
+       int smb_mincnt = SVAL(req->vwv+6, 0);
+       ssize_t nread;
+       uint8_t *data;
+       bool unused;
+       NTSTATUS status;
 
        /* we don't use the offset given to use for pipe reads. This
            is deliberate, instead we always return the next lump of
            data on the pipe */
 #if 0
-       uint32 smb_offs = IVAL(inbuf,smb_vwv3);
+       uint32 smb_offs = IVAL(req->vwv+3, 0);
 #endif
 
-       if (!p) {
-               return(ERROR_DOS(ERRDOS,ERRbadfid));
+       if (!fsp_is_np(fsp)) {
+               reply_doserror(req, ERRDOS, ERRbadfid);
+               return;
        }
 
-       set_message(inbuf,outbuf,12,0,True);
-       data = smb_buf(outbuf);
-
-       nread = read_from_pipe(p, data, smb_maxcnt, &unused);
-
-       if (nread < 0) {
-               return(UNIXERROR(ERRDOS,ERRnoaccess));
+       if (fsp->vuid != req->vuid) {
+               reply_nterror(req, NT_STATUS_INVALID_HANDLE);
+               return;
        }
-  
-       SSVAL(outbuf,smb_vwv5,nread);
-       SSVAL(outbuf,smb_vwv6,smb_offset(data,outbuf));
-       SSVAL(smb_buf(outbuf),-2,nread);
-  
-       DEBUG(3,("readX-IPC pnum=%04x min=%d max=%d nread=%d\n",
-                p->pnum, smb_mincnt, smb_maxcnt, nread));
 
-       /* Ensure we set up the message length to include the data length read. */
-       set_message_bcc(inbuf,outbuf,nread);
-       return chain_reply(inbuf,outbuf,length,bufsize);
-}
+       reply_outbuf(req, 12, smb_maxcnt);
 
-/****************************************************************************
- Reply to a close.
-****************************************************************************/
+       data = (uint8_t *)smb_buf(req->outbuf);
 
-int reply_pipe_close(connection_struct *conn, char *inbuf,char *outbuf)
-{
-       smb_np_struct *p = get_rpc_pipe_p(inbuf,smb_vwv0);
-       int outsize = set_message(inbuf,outbuf,0,0,True);
+       status = np_read(fsp, data, smb_maxcnt, &nread, &unused);
 
-       if (!p) {
-               return(ERROR_DOS(ERRDOS,ERRbadfid));
+       if (!NT_STATUS_IS_OK(status)) {
+               reply_doserror(req, ERRDOS, ERRnoaccess);
+               return;
        }
 
-       DEBUG(5,("reply_pipe_close: pnum:%x\n", p->pnum));
-
-       if (!close_rpc_pipe_hnd(p)) {
-               return ERROR_DOS(ERRDOS,ERRbadfid);
-       }
-       
-       /* TODO: REMOVE PIPE FROM DB */
+       srv_set_message((char *)req->outbuf, 12, nread, False);
+  
+       SSVAL(req->outbuf,smb_vwv5,nread);
+       SSVAL(req->outbuf,smb_vwv6,smb_offset(data,req->outbuf));
+       SSVAL(smb_buf(req->outbuf),-2,nread);
+  
+       DEBUG(3,("readX-IPC pnum=%04x min=%d max=%d nread=%d\n",
+                fsp->fnum, smb_mincnt, smb_maxcnt, (int)nread));
 
-       return(outsize);
+       chain_reply(req);
 }