source/torture/rap/rap.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    test suite for various RAP operations
   4    Copyright (C) Volker Lendecke 2004
   5    Copyright (C) Tim Potter 2005
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License as published by
   9    the Free Software Foundation; either version 2 of the License, or
  10    (at your option) any later version.
  11
  12    This program is distributed in the hope that it will be useful,
  13    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15    GNU General Public License for more details.
  16
  17    You should have received a copy of the GNU General Public License
  18    along with this program; if not, write to the Free Software
  19    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  20 */
  21
  22 #include "includes.h"
  23 #include "rap.h"
  24
  25 struct rap_call {
  26         uint16_t callno;
  27         char *paramdesc;
  28         const char *datadesc;
  29
  30         uint16_t status;
  31         uint16_t convert;
  32
  33         uint16_t rcv_paramlen, rcv_datalen;
  34
  35         struct ndr_push *ndr_push_param;
  36         struct ndr_push *ndr_push_data;
  37         struct ndr_pull *ndr_pull_param;
  38         struct ndr_pull *ndr_pull_data;
  39 };
  40
  41 #define RAPNDR_FLAGS (LIBNDR_FLAG_NOALIGN|LIBNDR_FLAG_STR_ASCII|LIBNDR_FLAG_STR_NULLTERM);
  42
  43 static struct rap_call *new_rap_cli_call(TALLOC_CTX *mem_ctx, uint16_t callno)
  44 {
  45         struct rap_call *call;
  46
  47         call = talloc(mem_ctx, struct rap_call);
  48
  49         if (call == NULL)
  50                 return NULL;
  51
  52         call->callno = callno;
  53         call->rcv_paramlen = 4;
  54
  55         call->paramdesc = NULL;
  56         call->datadesc = NULL;
  57
  58         call->ndr_push_param = ndr_push_init_ctx(mem_ctx);
  59         call->ndr_push_param->flags = RAPNDR_FLAGS;
  60
  61         call->ndr_push_data = ndr_push_init_ctx(mem_ctx);
  62         call->ndr_push_data->flags = RAPNDR_FLAGS;
  63
  64         return call;
  65 }
  66
  67 static void rap_cli_push_paramdesc(struct rap_call *call, char desc)
  68 {
  69         int len = 0;
  70
  71         if (call->paramdesc != NULL)
  72                 len = strlen(call->paramdesc);
  73
  74         call->paramdesc = talloc_realloc(call,
  75                                          call->paramdesc,
  76                                          uint8_t,
  77                                          len+2);
  78
  79         call->paramdesc[len] = desc;
  80         call->paramdesc[len+1] = '\0';
  81 }
  82
  83 static void rap_cli_push_word(struct rap_call *call, uint16_t val)
  84 {
  85         rap_cli_push_paramdesc(call, 'W');
  86         ndr_push_uint16(call->ndr_push_param, NDR_SCALARS, val);
  87 }
  88
  89 static void rap_cli_push_dword(struct rap_call *call, uint32_t val)
  90 {
  91         rap_cli_push_paramdesc(call, 'D');
  92         ndr_push_uint32(call->ndr_push_param, NDR_SCALARS, val);
  93 }
  94
  95 static void rap_cli_push_rcvbuf(struct rap_call *call, int len)
  96 {
  97         rap_cli_push_paramdesc(call, 'r');
  98         rap_cli_push_paramdesc(call, 'L');
  99         ndr_push_uint16(call->ndr_push_param, NDR_SCALARS, len);
 100         call->rcv_datalen = len;
 101 }
 102
 103 static void rap_cli_expect_multiple_entries(struct rap_call *call)
 104 {
 105         rap_cli_push_paramdesc(call, 'e');
 106         rap_cli_push_paramdesc(call, 'h');
 107         call->rcv_paramlen += 4; /* uint16_t entry count, uint16_t total */
 108 }
 109
 110 static void rap_cli_push_string(struct rap_call *call, const char *str)
 111 {
 112         if (str == NULL) {
 113                 rap_cli_push_paramdesc(call, 'O');
 114                 return;
 115         }
 116         rap_cli_push_paramdesc(call, 'z');
 117         ndr_push_string(call->ndr_push_param, NDR_SCALARS, str);
 118 }
 119
 120 static void rap_cli_expect_format(struct rap_call *call, const char *format)
 121 {
 122         call->datadesc = format;
 123 }
 124
 125 static NTSTATUS rap_pull_string(TALLOC_CTX *mem_ctx, struct ndr_pull *ndr,
 126                                 uint16_t convert, char **dest)
 127 {
 128         uint16_t string_offset;
 129         uint16_t ignore;
 130         const char *p;
 131         size_t len;
 132
 133         NDR_CHECK(ndr_pull_uint16(ndr, NDR_SCALARS, &string_offset));
 134         NDR_CHECK(ndr_pull_uint16(ndr, NDR_SCALARS, &ignore));
 135
 136         string_offset -= convert;
 137
 138         if (string_offset+1 > ndr->data_size)
 139                 return NT_STATUS_INVALID_PARAMETER;
 140
 141         p = (const char *)(ndr->data + string_offset);
 142         len = strnlen(p, ndr->data_size-string_offset);
 143
 144         if ( string_offset + len + 1 >  ndr->data_size )
 145                 return NT_STATUS_INVALID_PARAMETER;
 146
 147         *dest = talloc_zero_size(mem_ctx, len+1);
 148         pull_ascii(*dest, p, len+1, len, 0);
 149
 150         return NT_STATUS_OK;
 151 }
 152
 153 static NTSTATUS rap_cli_do_call(struct smbcli_state *cli, struct rap_call *call)
 154 {
 155         NTSTATUS result;
 156         DATA_BLOB param_blob;
 157         struct ndr_push *params;
 158         struct smb_trans2 trans;
 159
 160         params = ndr_push_init_ctx(call);
 161
 162         if (params == NULL)
 163                 return NT_STATUS_NO_MEMORY;
 164
 165         params->flags = RAPNDR_FLAGS;
 166
 167         trans.in.max_param = call->rcv_paramlen;
 168         trans.in.max_data = smb_raw_max_trans_data(cli->tree, call->rcv_paramlen);
 169         trans.in.max_setup = 0;
 170         trans.in.flags = 0;
 171         trans.in.timeout = 0;
 172         trans.in.setup_count = 0;
 173         trans.in.setup = NULL;
 174         trans.in.trans_name = "\\PIPE\\LANMAN";
 175
 176         NDR_CHECK(ndr_push_uint16(params, NDR_SCALARS, call->callno));
 177         if (call->paramdesc)
 178                 NDR_CHECK(ndr_push_string(params, NDR_SCALARS, call->paramdesc));
 179         if (call->datadesc)
 180                 NDR_CHECK(ndr_push_string(params, NDR_SCALARS, call->datadesc));
 181
 182         param_blob = ndr_push_blob(call->ndr_push_param);
 183         NDR_CHECK(ndr_push_bytes(params, param_blob.data,
 184                                  param_blob.length));
 185
 186         trans.in.params = ndr_push_blob(params);
 187         trans.in.data = data_blob(NULL, 0);
 188
 189         result = smb_raw_trans(cli->tree, call, &trans);
 190
 191         if (!NT_STATUS_IS_OK(result))
 192                 return result;
 193
 194         call->ndr_pull_param = ndr_pull_init_blob(&trans.out.params, call);
 195         call->ndr_pull_param->flags = RAPNDR_FLAGS;
 196
 197         call->ndr_pull_data = ndr_pull_init_blob(&trans.out.data, call);
 198         call->ndr_pull_data->flags = RAPNDR_FLAGS;
 199
 200         return result;
 201 }
 202
 203 #define NDR_OK(call) do { NTSTATUS _status; \
 204                              _status = call; \
 205                              if (!NT_STATUS_IS_OK(_status)) \
 206                                 goto done; \
 207                         } while (0)
 208
 209 static NTSTATUS smbcli_rap_netshareenum(struct smbcli_state *cli,
 210                                         struct rap_NetShareEnum *r)
 211 {
 212         struct rap_call *call;
 213         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 214         int i;
 215
 216         call = new_rap_cli_call(NULL, RAP_WshareEnum);
 217
 218         if (call == NULL)
 219                 return NT_STATUS_NO_MEMORY;
 220
 221         rap_cli_push_word(call, r->in.level); /* Level */
 222         rap_cli_push_rcvbuf(call, r->in.bufsize);
 223         rap_cli_expect_multiple_entries(call);
 224
 225         switch(r->in.level) {
 226         case 0:
 227                 rap_cli_expect_format(call, "B13");
 228                 break;
 229         case 1:
 230                 rap_cli_expect_format(call, "B13BWz");
 231                 break;
 232         }
 233
 234         result = rap_cli_do_call(cli, call);
 235
 236         if (!NT_STATUS_IS_OK(result))
 237                 goto done;
 238
 239         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.status));
 240         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.convert));
 241         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.count));
 242         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.available));
 243
 244         r->out.info = talloc_array(call, union rap_shareenum_info,
 245                                      r->out.count);
 246
 247         if (r->out.info == NULL) {
 248                 result = NT_STATUS_NO_MEMORY;
 249                 goto done;
 250         }
 251
 252         for (i=0; i<r->out.count; i++) {
 253                 switch(r->in.level) {
 254                 case 0:
 255                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 256                                               (uint8_t *)r->out.info[i].info0.name, 13));
 257                         break;
 258                 case 1:
 259                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 260                                               (uint8_t *)r->out.info[i].info1.name, 13));
 261                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 262                                               (uint8_t *)&r->out.info[i].info1.pad, 1));
 263                         NDR_OK(ndr_pull_uint16(call->ndr_pull_data,
 264                                                NDR_SCALARS, &r->out.info[i].info1.type));
 265                         NDR_OK(rap_pull_string(call, call->ndr_pull_data,
 266                                                r->out.convert,
 267                                                &r->out.info[i].info1.comment));
 268                         break;
 269                 }
 270         }
 271
 272         result = NT_STATUS_OK;
 273
 274  done:
 275         talloc_free(call);
 276         return result;
 277 }
 278
 279 static BOOL test_netshareenum(struct smbcli_state *cli)
 280 {
 281         struct rap_NetShareEnum r;
 282         int i;
 283
 284         r.in.level = 1;
 285         r.in.bufsize = 8192;
 286
 287         if (!NT_STATUS_IS_OK(smbcli_rap_netshareenum(cli, &r)))
 288                 return False;
 289
 290         for (i=0; i<r.out.count; i++) {
 291                 printf("%s %d %s\n", r.out.info[i].info1.name,
 292                        r.out.info[i].info1.type,
 293                        r.out.info[i].info1.comment);
 294         }
 295
 296         return True;
 297 }
 298
 299 static NTSTATUS smbcli_rap_netserverenum2(struct smbcli_state *cli,
 300                                           struct rap_NetServerEnum2 *r)
 301 {
 302         struct rap_call *call;
 303         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 304         int i;
 305
 306         call = new_rap_cli_call(NULL, RAP_NetServerEnum2);
 307
 308         if (call == NULL)
 309                 return NT_STATUS_NO_MEMORY;
 310
 311         rap_cli_push_word(call, r->in.level);
 312         rap_cli_push_rcvbuf(call, r->in.bufsize);
 313         rap_cli_expect_multiple_entries(call);
 314         rap_cli_push_dword(call, r->in.servertype);
 315         rap_cli_push_string(call, r->in.domain);
 316
 317         switch(r->in.level) {
 318         case 0:
 319                 rap_cli_expect_format(call, "B16");
 320                 break;
 321         case 1:
 322                 rap_cli_expect_format(call, "B16BBDz");
 323                 break;
 324         }
 325
 326         result = rap_cli_do_call(cli, call);
 327
 328         if (!NT_STATUS_IS_OK(result))
 329                 goto done;
 330
 331         result = NT_STATUS_INVALID_PARAMETER;
 332
 333         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.status));
 334         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.convert));
 335         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.count));
 336         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.available));
 337
 338         r->out.info = talloc_array(call, union rap_server_info,
 339                                      r->out.count);
 340
 341         if (r->out.info == NULL) {
 342                 result = NT_STATUS_NO_MEMORY;
 343                 goto done;
 344         }
 345
 346         for (i=0; i<r->out.count; i++) {
 347                 switch(r->in.level) {
 348                 case 0:
 349                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 350                                               (uint8_t *)r->out.info[i].info0.name, 16));
 351                         break;
 352                 case 1:
 353                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 354                                               (uint8_t *)r->out.info[i].info1.name, 16));
 355                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 356                                               &r->out.info[i].info1.version_major, 1));
 357                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 358                                               &r->out.info[i].info1.version_minor, 1));
 359                         NDR_OK(ndr_pull_uint32(call->ndr_pull_data,
 360                                                NDR_SCALARS, &r->out.info[i].info1.servertype));
 361                         NDR_OK(rap_pull_string(call, call->ndr_pull_data,
 362                                                r->out.convert,
 363                                                &r->out.info[i].info1.comment));
 364                 }
 365         }
 366
 367         result = NT_STATUS_OK;
 368
 369  done:
 370         talloc_free(call);
 371         return result;
 372 }
 373
 374 static BOOL test_netserverenum(struct smbcli_state *cli)
 375 {
 376         struct rap_NetServerEnum2 r;
 377         int i;
 378
 379         r.in.level = 0;
 380         r.in.bufsize = 8192;
 381         r.in.servertype = 0xffffffff;
 382         r.in.servertype = 0x80000000;
 383         r.in.domain = NULL;
 384
 385         if (!NT_STATUS_IS_OK(smbcli_rap_netserverenum2(cli, &r)))
 386                 return False;
 387
 388         for (i=0; i<r.out.count; i++) {
 389                 switch (r.in.level) {
 390                 case 0:
 391                         printf("%s\n", r.out.info[i].info0.name);
 392                         break;
 393                 case 1:
 394                         printf("%s %x %s\n", r.out.info[i].info1.name,
 395                                r.out.info[i].info1.servertype,
 396                                r.out.info[i].info1.comment);
 397                         break;
 398                 }
 399         }
 400
 401         return True;
 402 }
 403
 404
 405
 406 static BOOL test_rap(struct smbcli_state *cli)
 407 {
 408         BOOL res = True;
 409
 410         if (!test_netserverenum(cli))
 411                 res = False;
 412
 413         if (!test_netshareenum(cli))
 414                 res = False;
 415
 416         return res;
 417 }
 418
 419 BOOL torture_raw_rap(void)
 420 {
 421         struct smbcli_state *cli;
 422         BOOL ret = True;
 423         TALLOC_CTX *mem_ctx;
 424
 425         if (!torture_open_connection(&cli)) {
 426                 return False;
 427         }
 428
 429         mem_ctx = talloc_init("torture_raw_rap");
 430
 431         if (!test_rap(cli)) {
 432                 ret = False;
 433         }
 434
 435         torture_close_connection(cli);
 436         talloc_free(mem_ctx);
 437
 438         return ret;
 439 }
 440
 441 BOOL torture_rap_scan(void)
 442 {
 443         TALLOC_CTX *mem_ctx;
 444         struct smbcli_state *cli;
 445         int callno;
 446
 447         mem_ctx = talloc_init("torture_rap_scan");
 448
 449         if (!torture_open_connection(&cli)) {
 450                 return False;
 451         }
 452
 453         for (callno = 0; callno < 0xffff; callno++) {
 454                 struct rap_call *call = new_rap_cli_call(mem_ctx, callno);
 455                 NTSTATUS result;
 456
 457                 result = rap_cli_do_call(cli, call);
 458
 459                 if (!NT_STATUS_EQUAL(result, NT_STATUS_INVALID_PARAMETER))
 460                         continue;
 461
 462                 printf("callno %d is RAP call\n", callno);
 463         }
 464
 465         torture_close_connection(cli);
 466
 467         return True;
 468 }