TALLOC_FREE happily lives with a NULL ptr. Tim, please check!
[ira/wip.git] / source3 / smbd / reply.c
index 16eb4a7fd7cbd27acdc80a868aaf181bec6594fc..d5ee918b82a69c281c4021f2186c9d291afbddf4 100644 (file)
@@ -407,6 +407,95 @@ bool fsp_belongs_conn(connection_struct *conn, struct smb_request *req,
        return False;
 }
 
+static bool netbios_session_retarget(const char *name, int name_type)
+{
+       char *trim_name;
+       char *trim_name_type;
+       const char *retarget_parm;
+       char *retarget;
+       char *p;
+       int retarget_type = 0x20;
+       int retarget_port = 139;
+       struct sockaddr_storage retarget_addr;
+       struct sockaddr_in *in_addr;
+       bool ret = false;
+       uint8_t outbuf[10];
+
+       if (get_socket_port(smbd_server_fd()) != 139) {
+               return false;
+       }
+
+       trim_name = talloc_strdup(talloc_tos(), name);
+       if (trim_name == NULL) {
+               goto fail;
+       }
+       trim_char(trim_name, ' ', ' ');
+
+       trim_name_type = talloc_asprintf(trim_name, "%s#%2.2x", trim_name,
+                                        name_type);
+       if (trim_name_type == NULL) {
+               goto fail;
+       }
+
+       retarget_parm = lp_parm_const_string(-1, "netbios retarget",
+                                            trim_name_type, NULL);
+       if (retarget_parm == NULL) {
+               retarget_parm = lp_parm_const_string(-1, "netbios retarget",
+                                                    trim_name, NULL);
+       }
+       if (retarget_parm == NULL) {
+               goto fail;
+       }
+
+       retarget = talloc_strdup(trim_name, retarget_parm);
+       if (retarget == NULL) {
+               goto fail;
+       }
+
+       DEBUG(10, ("retargeting %s to %s\n", trim_name_type, retarget));
+
+       p = strchr(retarget, ':');
+       if (p != NULL) {
+               *p++ = '\0';
+               retarget_port = atoi(p);
+       }
+
+       p = strchr_m(retarget, '#');
+       if (p != NULL) {
+               *p++ = '\0';
+               sscanf(p, "%x", &retarget_type);
+       }
+
+       ret = resolve_name(retarget, &retarget_addr, retarget_type);
+       if (!ret) {
+               DEBUG(10, ("could not resolve %s\n", retarget));
+               goto fail;
+       }
+
+       if (retarget_addr.ss_family != AF_INET) {
+               DEBUG(10, ("Retarget target not an IPv4 addr\n"));
+               goto fail;
+       }
+
+       in_addr = (struct sockaddr_in *)(void *)&retarget_addr;
+
+       _smb_setlen(outbuf, 6);
+       SCVAL(outbuf, 0, 0x84);
+       *(uint32_t *)(outbuf+4) = in_addr->sin_addr.s_addr;
+       *(uint16_t *)(outbuf+8) = htons(retarget_port);
+
+       if (!srv_send_smb(smbd_server_fd(), (char *)outbuf, false, 0, false,
+                         NULL)) {
+               exit_server_cleanly("netbios_session_regarget: srv_send_smb "
+                                   "failed.");
+       }
+
+       ret = true;
+ fail:
+       TALLOC_FREE(trim_name);
+       return ret;
+}
+
 /****************************************************************************
  Reply to a (netbios-level) special message.
 ****************************************************************************/
@@ -416,7 +505,7 @@ void reply_special(char *inbuf)
        int msg_type = CVAL(inbuf,0);
        int msg_flags = CVAL(inbuf,1);
        fstring name1,name2;
-       char name_type = 0;
+       char name_type1, name_type2;
 
        /*
         * We only really use 4 bytes of the outbuf, but for the smb_setlen
@@ -445,19 +534,23 @@ void reply_special(char *inbuf)
                        DEBUG(0,("Invalid name length in session request\n"));
                        return;
                }
-               name_extract(inbuf,4,name1);
-               name_type = name_extract(inbuf,4 + name_len(inbuf + 4),name2);
-               DEBUG(2,("netbios connect: name1=%s name2=%s\n",
-                        name1,name2));      
+               name_type1 = name_extract(inbuf,4,name1);
+               name_type2 = name_extract(inbuf,4 + name_len(inbuf + 4),name2);
+               DEBUG(2,("netbios connect: name1=%s0x%x name2=%s0x%x\n",
+                        name1, name_type1, name2, name_type2));
+
+               if (netbios_session_retarget(name1, name_type1)) {
+                       exit_server_cleanly("retargeted client");
+               }
 
                set_local_machine_name(name1, True);
                set_remote_machine_name(name2, True);
 
                DEBUG(2,("netbios connect: local=%s remote=%s, name type = %x\n",
                         get_local_machine_name(), get_remote_machine_name(),
-                        name_type));
+                        name_type2));
 
-               if (name_type == 'R') {
+               if (name_type2 == 'R') {
                        /* We are being asked for a pathworks session --- 
                           no thanks! */
                        SCVAL(outbuf, 0,0x83);
@@ -873,8 +966,8 @@ static NTSTATUS map_checkpath_error(uint16_t flags2, NTSTATUS status)
 void reply_checkpath(struct smb_request *req)
 {
        connection_struct *conn = req->conn;
+       struct smb_filename *smb_fname = NULL;
        char *name = NULL;
-       SMB_STRUCT_STAT sbuf;
        NTSTATUS status;
        TALLOC_CTX *ctx = talloc_tos();
 
@@ -906,7 +999,12 @@ void reply_checkpath(struct smb_request *req)
 
        DEBUG(3,("reply_checkpath %s mode=%d\n", name, (int)SVAL(req->vwv+0, 0)));
 
-       status = unix_convert(ctx, conn, name, False, &name, NULL, &sbuf);
+       status = unix_convert(ctx, conn, name, &smb_fname, 0);
+       if (!NT_STATUS_IS_OK(status)) {
+               goto path_err;
+       }
+
+       status = get_full_smb_filename(ctx, smb_fname, &name);
        if (!NT_STATUS_IS_OK(status)) {
                goto path_err;
        }
@@ -917,25 +1015,28 @@ void reply_checkpath(struct smb_request *req)
                goto path_err;
        }
 
-       if (!VALID_STAT(sbuf) && (SMB_VFS_STAT(conn,name,&sbuf) != 0)) {
+       if (!VALID_STAT(smb_fname->st) &&
+           (SMB_VFS_STAT(conn, name, &smb_fname->st) != 0)) {
                DEBUG(3,("reply_checkpath: stat of %s failed (%s)\n",name,strerror(errno)));
                status = map_nt_error_from_unix(errno);
                goto path_err;
        }
 
-       if (!S_ISDIR(sbuf.st_mode)) {
+       if (!S_ISDIR(smb_fname->st.st_mode)) {
                reply_botherror(req, NT_STATUS_NOT_A_DIRECTORY,
                                ERRDOS, ERRbadpath);
-               END_PROFILE(SMBcheckpath);
-               return;
+               goto out;
        }
 
        reply_outbuf(req, 0, 0);
-
+ out:
+       TALLOC_FREE(smb_fname);
        END_PROFILE(SMBcheckpath);
        return;
 
-  path_err:
+ path_err:
+
+       TALLOC_FREE(smb_fname);
 
        END_PROFILE(SMBcheckpath);
 
@@ -968,8 +1069,8 @@ void reply_checkpath(struct smb_request *req)
 void reply_getatr(struct smb_request *req)
 {
        connection_struct *conn = req->conn;
+       struct smb_filename *smb_fname = NULL;
        char *fname = NULL;
-       SMB_STRUCT_STAT sbuf;
        int mode=0;
        SMB_OFF_T size=0;
        time_t mtime=0;
@@ -983,8 +1084,7 @@ void reply_getatr(struct smb_request *req)
        p += srvstr_get_path_req(ctx, req, &fname, p, STR_TERMINATE, &status);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBgetatr);
-               return;
+               goto out;
        }
 
        status = resolve_dfspath(ctx, conn,
@@ -995,12 +1095,10 @@ void reply_getatr(struct smb_request *req)
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
                        reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
                                        ERRSRV, ERRbadpath);
-                       END_PROFILE(SMBgetatr);
-                       return;
+                       goto out;
                }
                reply_nterror(req, status);
-               END_PROFILE(SMBgetatr);
-               return;
+               goto out;
        }
 
        /* dos smetimes asks for a stat of "" - it returns a "hidden directory"
@@ -1013,29 +1111,32 @@ void reply_getatr(struct smb_request *req)
                size = 0;
                mtime = 0;
        } else {
-               status = unix_convert(ctx, conn, fname, False, &fname, NULL,&sbuf);
+               status = unix_convert(ctx, conn, fname, &smb_fname, 0);
                if (!NT_STATUS_IS_OK(status)) {
                        reply_nterror(req, status);
-                       END_PROFILE(SMBgetatr);
-                       return;
+                       goto out;
+               }
+               status = get_full_smb_filename(ctx, smb_fname, &fname);
+               if (!NT_STATUS_IS_OK(status)) {
+                       reply_nterror(req, status);
+                       goto out;
                }
                status = check_name(conn, fname);
                if (!NT_STATUS_IS_OK(status)) {
                        DEBUG(3,("reply_getatr: check_name of %s failed (%s)\n",fname,nt_errstr(status)));
                        reply_nterror(req, status);
-                       END_PROFILE(SMBgetatr);
-                       return;
+                       goto out;
                }
-               if (!VALID_STAT(sbuf) && (SMB_VFS_STAT(conn,fname,&sbuf) != 0)) {
+               if (!VALID_STAT(smb_fname->st) &&
+                   (SMB_VFS_STAT(conn, fname, &smb_fname->st) != 0)) {
                        DEBUG(3,("reply_getatr: stat of %s failed (%s)\n",fname,strerror(errno)));
                        reply_unixerror(req, ERRDOS,ERRbadfile);
-                       END_PROFILE(SMBgetatr);
-                       return;
+                       goto out;
                }
 
-               mode = dos_mode(conn,fname,&sbuf);
-               size = sbuf.st_size;
-               mtime = sbuf.st_mtime;
+               mode = dos_mode(conn, fname, &smb_fname->st);
+               size = smb_fname->st.st_size;
+               mtime = smb_fname->st.st_mtime;
                if (mode & aDIR) {
                        size = 0;
                }
@@ -1058,6 +1159,8 @@ void reply_getatr(struct smb_request *req)
 
        DEBUG(3,("reply_getatr: name=%s mode=%d size=%u\n", fname, mode, (unsigned int)size ) );
 
+ out:
+       TALLOC_FREE(smb_fname);
        END_PROFILE(SMBgetatr);
        return;
 }
@@ -1070,10 +1173,10 @@ void reply_setatr(struct smb_request *req)
 {
        struct smb_file_time ft;
        connection_struct *conn = req->conn;
+       struct smb_filename *smb_fname = NULL;
        char *fname = NULL;
        int mode;
        time_t mtime;
-       SMB_STRUCT_STAT sbuf;
        const char *p;
        NTSTATUS status;
        TALLOC_CTX *ctx = talloc_tos();
@@ -1084,15 +1187,14 @@ void reply_setatr(struct smb_request *req)
 
        if (req->wct < 2) {
                reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
-               return;
+               goto out;
        }
 
        p = (const char *)req->buf + 1;
        p += srvstr_get_path_req(ctx, req, &fname, p, STR_TERMINATE, &status);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBsetatr);
-               return;
+               goto out;
        }
 
        status = resolve_dfspath(ctx, conn,
@@ -1103,26 +1205,28 @@ void reply_setatr(struct smb_request *req)
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
                        reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
                                        ERRSRV, ERRbadpath);
-                       END_PROFILE(SMBsetatr);
-                       return;
+                       goto out;
                }
                reply_nterror(req, status);
-               END_PROFILE(SMBsetatr);
-               return;
+               goto out;
        }
 
-       status = unix_convert(ctx, conn, fname, False, &fname, NULL, &sbuf);
+       status = unix_convert(ctx, conn, fname, &smb_fname, 0);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBsetatr);
-               return;
+               goto out;
+       }
+
+       status = get_full_smb_filename(ctx, smb_fname, &fname);
+       if (!NT_STATUS_IS_OK(status)) {
+               reply_nterror(req, status);
+               goto out;
        }
 
        status = check_name(conn, fname);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBsetatr);
-               return;
+               goto out;
        }
 
        if (fname[0] == '.' && fname[1] == '\0') {
@@ -1131,8 +1235,7 @@ void reply_setatr(struct smb_request *req)
                 * condition. Might be moved to somewhere else later -- vl
                 */
                reply_nterror(req, NT_STATUS_ACCESS_DENIED);
-               END_PROFILE(SMBsetatr);
-               return;
+               goto out;
        }
 
        mode = SVAL(req->vwv+0, 0);
@@ -1140,30 +1243,30 @@ void reply_setatr(struct smb_request *req)
 
        ft.mtime = convert_time_t_to_timespec(mtime);
        status = smb_set_file_time(conn, NULL, fname,
-                                  &sbuf, &ft, true);
+                                  &smb_fname->st, &ft, true);
        if (!NT_STATUS_IS_OK(status)) {
                reply_unixerror(req, ERRDOS, ERRnoaccess);
-               END_PROFILE(SMBsetatr);
-               return;
+               goto out;
        }
 
        if (mode != FILE_ATTRIBUTE_NORMAL) {
-               if (VALID_STAT_OF_DIR(sbuf))
+               if (VALID_STAT_OF_DIR(smb_fname->st))
                        mode |= aDIR;
                else
                        mode &= ~aDIR;
 
-               if (file_set_dosmode(conn,fname,mode,&sbuf,NULL,false) != 0) {
+               if (file_set_dosmode(conn, fname, mode, &smb_fname->st, NULL,
+                                    false) != 0) {
                        reply_unixerror(req, ERRDOS, ERRnoaccess);
-                       END_PROFILE(SMBsetatr);
-                       return;
+                       goto out;
                }
        }
 
        reply_outbuf(req, 0, 0);
 
        DEBUG( 3, ( "setatr name=%s mode=%d\n", fname, mode ) );
-
+ out:
+       TALLOC_FREE(smb_fname);
        END_PROFILE(SMBsetatr);
        return;
 }
@@ -1306,10 +1409,18 @@ void reply_search(struct smb_request *req)
        /* dirtype &= ~aDIR; */
 
        if (status_len == 0) {
-               SMB_STRUCT_STAT sbuf;
+               struct smb_filename *smb_fname = NULL;
+
+               nt_status = unix_convert(ctx, conn, path, &smb_fname,
+                                        UCF_ALLOW_WCARD_LCOMP);
+               if (!NT_STATUS_IS_OK(nt_status)) {
+                       reply_nterror(req, nt_status);
+                       END_PROFILE(SMBsearch);
+                       return;
+               }
 
-               nt_status = unix_convert(ctx, conn, path, True,
-                               &directory, NULL, &sbuf);
+               nt_status = get_full_smb_filename(ctx, smb_fname, &directory);
+               TALLOC_FREE(smb_fname);
                if (!NT_STATUS_IS_OK(nt_status)) {
                        reply_nterror(req, nt_status);
                        END_PROFILE(SMBsearch);
@@ -2049,12 +2160,12 @@ void reply_mknew(struct smb_request *req)
 void reply_ctemp(struct smb_request *req)
 {
        connection_struct *conn = req->conn;
+       struct smb_filename *smb_fname = NULL;
        char *fname = NULL;
        uint32 fattr;
        files_struct *fsp;
        int oplock_request;
        int tmpfd;
-       SMB_STRUCT_STAT sbuf;
        char *s;
        NTSTATUS status;
        TALLOC_CTX *ctx = talloc_tos();
@@ -2063,8 +2174,7 @@ void reply_ctemp(struct smb_request *req)
 
        if (req->wct < 3) {
                reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
-               END_PROFILE(SMBctemp);
-               return;
+               goto out;
        }
 
        fattr = SVAL(req->vwv+0, 0);
@@ -2074,8 +2184,7 @@ void reply_ctemp(struct smb_request *req)
                            STR_TERMINATE, &status);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBctemp);
-               return;
+               goto out;
        }
        if (*fname) {
                fname = talloc_asprintf(ctx,
@@ -2087,8 +2196,7 @@ void reply_ctemp(struct smb_request *req)
 
        if (!fname) {
                reply_nterror(req, NT_STATUS_NO_MEMORY);
-               END_PROFILE(SMBctemp);
-               return;
+               goto out;
        }
 
        status = resolve_dfspath(ctx, conn,
@@ -2099,37 +2207,38 @@ void reply_ctemp(struct smb_request *req)
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
                        reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
                                        ERRSRV, ERRbadpath);
-                       END_PROFILE(SMBctemp);
-                       return;
+                       goto out;
                }
                reply_nterror(req, status);
-               END_PROFILE(SMBctemp);
-               return;
+               goto out;
        }
 
-       status = unix_convert(ctx, conn, fname, False, &fname, NULL, &sbuf);
+       status = unix_convert(ctx, conn, fname, &smb_fname, 0);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBctemp);
-               return;
+               goto out;
+       }
+
+       status = get_full_smb_filename(ctx, smb_fname, &fname);
+       if (!NT_STATUS_IS_OK(status)) {
+               reply_nterror(req, status);
+               goto out;
        }
 
        status = check_name(conn, fname);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBctemp);
-               return;
+               goto out;
        }
 
-       tmpfd = smb_mkstemp(fname);
+       tmpfd = mkstemp(fname);
        if (tmpfd == -1) {
                reply_unixerror(req, ERRDOS, ERRnoaccess);
-               END_PROFILE(SMBctemp);
-               return;
+               goto out;
        }
 
-       SET_STAT_INVALID(sbuf);
-       SMB_VFS_STAT(conn,fname,&sbuf);
+       SET_STAT_INVALID(smb_fname->st);
+       SMB_VFS_STAT(conn, fname, &smb_fname->st);
 
        /* We should fail if file does not exist. */
        status = SMB_VFS_CREATE_FILE(
@@ -2149,20 +2258,18 @@ void reply_ctemp(struct smb_request *req)
                NULL,                                   /* ea_list */
                &fsp,                                   /* result */
                NULL,                                   /* pinfo */
-               &sbuf);                                 /* psbuf */
+               &smb_fname->st);                        /* psbuf */
 
-       /* close fd from smb_mkstemp() */
+       /* close fd from mkstemp() */
        close(tmpfd);
 
        if (!NT_STATUS_IS_OK(status)) {
                if (open_was_deferred(req->mid)) {
                        /* We have re-scheduled this call. */
-                       END_PROFILE(SMBctemp);
-                       return;
+                       goto out;
                }
                reply_openerror(req, status);
-               END_PROFILE(SMBctemp);
-               return;
+               goto out;
        }
 
        reply_outbuf(req, 1, 0);
@@ -2184,8 +2291,7 @@ void reply_ctemp(struct smb_request *req)
        if (message_push_string(&req->outbuf, s, STR_ASCII|STR_TERMINATE)
            == -1) {
                reply_nterror(req, NT_STATUS_NO_MEMORY);
-               END_PROFILE(SMBctemp);
-               return;
+               goto out;
        }
 
        if (oplock_request && lp_fake_oplocks(SNUM(conn))) {
@@ -2200,8 +2306,9 @@ void reply_ctemp(struct smb_request *req)
 
        DEBUG( 2, ( "reply_ctemp: created temp file %s\n", fsp->fsp_name ) );
        DEBUG( 3, ( "reply_ctemp %s fd=%d umode=0%o\n", fsp->fsp_name,
-                   fsp->fh->fd, (unsigned int)sbuf.st_mode ) );
-
+                   fsp->fh->fd, (unsigned int)smb_fname->st.st_mode));
+ out:
+       TALLOC_FREE(smb_fname);
        END_PROFILE(SMBctemp);
        return;
 }
@@ -2386,17 +2493,25 @@ static NTSTATUS do_unlink(connection_struct *conn,
 NTSTATUS unlink_internals(connection_struct *conn, struct smb_request *req,
                          uint32 dirtype, const char *name_in, bool has_wild)
 {
+       struct smb_filename *smb_fname = NULL;
        const char *directory = NULL;
        char *mask = NULL;
        char *name = NULL;
        char *p = NULL;
        int count=0;
        NTSTATUS status = NT_STATUS_OK;
-       SMB_STRUCT_STAT sbuf, st;
+       SMB_STRUCT_STAT st;
        TALLOC_CTX *ctx = talloc_tos();
 
-       status = unix_convert(ctx, conn, name_in, has_wild, &name, NULL, &sbuf);
+       status = unix_convert(ctx, conn, name_in, &smb_fname,
+                             has_wild ? UCF_ALLOW_WCARD_LCOMP : 0);
+       if (!NT_STATUS_IS_OK(status)) {
+               return status;
+       }
+
+       status = get_full_smb_filename(ctx, smb_fname, &name);
        if (!NT_STATUS_IS_OK(status)) {
+               TALLOC_FREE(smb_fname);
                return status;
        }
 
@@ -2404,6 +2519,7 @@ NTSTATUS unlink_internals(connection_struct *conn, struct smb_request *req,
        if (!p) {
                directory = talloc_strdup(ctx, ".");
                if (!directory) {
+                       TALLOC_FREE(smb_fname);
                        return NT_STATUS_NO_MEMORY;
                }
                mask = name;
@@ -2422,7 +2538,7 @@ NTSTATUS unlink_internals(connection_struct *conn, struct smb_request *req,
         * Tine Smukavec <valentin.smukavec@hermes.si>.
         */
 
-       if (!VALID_STAT(sbuf) && mangle_is_mangled(mask,conn->params)) {
+       if (!VALID_STAT(smb_fname->st) && mangle_is_mangled(mask,conn->params)) {
                char *new_mask = NULL;
                mangle_lookup_name_from_8_3(ctx,
                                mask,
@@ -2432,6 +2548,7 @@ NTSTATUS unlink_internals(connection_struct *conn, struct smb_request *req,
                        mask = new_mask;
                }
        }
+       TALLOC_FREE(smb_fname);
 
        if (!has_wild) {
                directory = talloc_asprintf(ctx,
@@ -2664,7 +2781,7 @@ static ssize_t fake_sendfile(files_struct *fsp, SMB_OFF_T startpos,
 
                /* If we had a short read, fill with zeros. */
                if (ret < cur_read) {
-                       memset(buf, '\0', cur_read - ret);
+                       memset(buf + ret, '\0', cur_read - ret);
                }
 
                if (write_data(smbd_server_fd(),buf,cur_read) != cur_read) {
@@ -2679,6 +2796,7 @@ static ssize_t fake_sendfile(files_struct *fsp, SMB_OFF_T startpos,
        return (ssize_t)nread;
 }
 
+#if defined(WITH_SENDFILE)
 /****************************************************************************
  Deal with the case of sendfile reading less bytes from the file than
  requested. Fill with zeros (all we can do).
@@ -2689,6 +2807,7 @@ static void sendfile_short_send(files_struct *fsp,
                                size_t headersize,
                                size_t smb_maxcnt)
 {
+#define SHORT_SEND_BUFSIZE 1024
        if (nread < headersize) {
                DEBUG(0,("sendfile_short_send: sendfile failed to send "
                        "header for file %s (%s). Terminating\n",
@@ -2699,7 +2818,7 @@ static void sendfile_short_send(files_struct *fsp,
        nread -= headersize;
 
        if (nread < smb_maxcnt) {
-               char *buf = SMB_CALLOC_ARRAY(char, 1024);
+               char *buf = SMB_CALLOC_ARRAY(char, SHORT_SEND_BUFSIZE);
                if (!buf) {
                        exit_server_cleanly("sendfile_short_send: "
                                "malloc failed");
@@ -2725,7 +2844,7 @@ static void sendfile_short_send(files_struct *fsp,
                         */
                        size_t to_write;
 
-                       to_write = MIN(sizeof(buf), smb_maxcnt - nread);
+                       to_write = MIN(SHORT_SEND_BUFSIZE, smb_maxcnt - nread);
                        if (write_data(smbd_server_fd(), buf, to_write) != to_write) {
                                exit_server_cleanly("sendfile_short_send: "
                                        "write_data failed");
@@ -2735,6 +2854,7 @@ static void sendfile_short_send(files_struct *fsp,
                SAFE_FREE(buf);
        }
 }
+#endif /* defined WITH_SENDFILE */
 
 /****************************************************************************
  Return a readbraw error (4 bytes of zero).
@@ -3257,20 +3377,29 @@ static void send_file_readX(connection_struct *conn, struct smb_request *req,
 {
        SMB_STRUCT_STAT sbuf;
        ssize_t nread = -1;
+       struct lock_struct lock;
 
        if(SMB_VFS_FSTAT(fsp, &sbuf) == -1) {
                reply_unixerror(req, ERRDOS, ERRnoaccess);
                return;
        }
 
-       if (startpos > sbuf.st_size) {
-               smb_maxcnt = 0;
-       } else if (smb_maxcnt > (sbuf.st_size - startpos)) {
-               smb_maxcnt = (sbuf.st_size - startpos);
+       init_strict_lock_struct(fsp, (uint32)req->smbpid,
+           (uint64_t)startpos, (uint64_t)smb_maxcnt, READ_LOCK,
+           &lock);
+
+       if (!SMB_VFS_STRICT_LOCK(conn, fsp, &lock)) {
+               reply_doserror(req, ERRDOS, ERRlock);
+               return;
        }
 
-       if (smb_maxcnt == 0) {
-               goto normal_read;
+       if (!S_ISREG(sbuf.st_mode) || (startpos > sbuf.st_size)
+           || (smb_maxcnt > (sbuf.st_size - startpos))) {
+               /*
+                * We already know that we would do a short read, so don't
+                * try the sendfile() path.
+                */
+               goto nosendfile_read;
        }
 
 #if defined(WITH_SENDFILE)
@@ -3325,8 +3454,7 @@ static void send_file_readX(connection_struct *conn, struct smb_request *req,
                                DEBUG( 3, ( "send_file_readX: fake_sendfile fnum=%d max=%d nread=%d\n",
                                        fsp->fnum, (int)smb_maxcnt, (int)nread ) );
                                /* No outbuf here means successful sendfile. */
-                               TALLOC_FREE(req->outbuf);
-                               return;
+                               goto strict_unlock;
                        }
 
                        DEBUG(0,("send_file_readX: sendfile failed for file %s (%s). Terminating\n",
@@ -3353,17 +3481,16 @@ static void send_file_readX(connection_struct *conn, struct smb_request *req,
                if (nread != smb_maxcnt + sizeof(headerbuf)) {
                        sendfile_short_send(fsp, nread, sizeof(headerbuf), smb_maxcnt);
                }
-
                /* No outbuf here means successful sendfile. */
-               TALLOC_FREE(req->outbuf);
                SMB_PERFCOUNT_SET_MSGLEN_OUT(&req->pcd, nread);
                SMB_PERFCOUNT_END(&req->pcd);
-               return;
+               goto strict_unlock;
        }
-#endif
 
 normal_read:
 
+#endif
+
        if ((smb_maxcnt & 0xFF0000) > 0x10000) {
                uint8 headerbuf[smb_size + 2*12];
 
@@ -3383,13 +3510,17 @@ normal_read:
                                fsp->fsp_name, strerror(errno) ));
                        exit_server_cleanly("send_file_readX: fake_sendfile failed");
                }
-               TALLOC_FREE(req->outbuf);
-               return;
+               goto strict_unlock;
        }
 
+nosendfile_read:
+
        reply_outbuf(req, 12, smb_maxcnt);
 
        nread = read_file(fsp, smb_buf(req->outbuf), startpos, smb_maxcnt);
+
+       SMB_VFS_STRICT_UNLOCK(conn, fsp, &lock);
+
        if (nread < 0) {
                reply_unixerror(req, ERRDOS, ERRnoaccess);
                return;
@@ -3401,6 +3532,12 @@ normal_read:
                    fsp->fnum, (int)smb_maxcnt, (int)nread ) );
 
        chain_reply(req);
+       return;
+
+ strict_unlock:
+       SMB_VFS_STRICT_UNLOCK(conn, fsp, &lock);
+       TALLOC_FREE(req->outbuf);
+       return;
 }
 
 /****************************************************************************
@@ -3413,7 +3550,6 @@ void reply_read_and_X(struct smb_request *req)
        files_struct *fsp;
        SMB_OFF_T startpos;
        size_t smb_maxcnt;
-       struct lock_struct lock;
        bool big_readX = False;
 #if 0
        size_t smb_mincnt = SVAL(req->vwv+6, 0);
@@ -3502,26 +3638,14 @@ void reply_read_and_X(struct smb_request *req)
 
        }
 
-       init_strict_lock_struct(fsp, (uint32)req->smbpid,
-           (uint64_t)startpos, (uint64_t)smb_maxcnt, READ_LOCK,
-           &lock);
-
-       if (!SMB_VFS_STRICT_LOCK(conn, fsp, &lock)) {
-               END_PROFILE(SMBreadX);
-               reply_doserror(req, ERRDOS, ERRlock);
-               return;
-       }
-
        if (!big_readX &&
            schedule_aio_read_and_X(conn, req, fsp, startpos, smb_maxcnt)) {
-               goto strict_unlock;
+               goto out;
        }
 
        send_file_readX(conn, req, fsp, startpos, smb_maxcnt);
 
-strict_unlock:
-       SMB_VFS_STRICT_UNLOCK(conn, fsp, &lock);
-
+ out:
        END_PROFILE(SMBreadX);
        return;
 }
@@ -5041,9 +5165,9 @@ void reply_printwrite(struct smb_request *req)
 void reply_mkdir(struct smb_request *req)
 {
        connection_struct *conn = req->conn;
+       struct smb_filename *smb_dname = NULL;
        char *directory = NULL;
        NTSTATUS status;
-       SMB_STRUCT_STAT sbuf;
        TALLOC_CTX *ctx = talloc_tos();
 
        START_PROFILE(SMBmkdir);
@@ -5052,8 +5176,7 @@ void reply_mkdir(struct smb_request *req)
                            STR_TERMINATE, &status);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBmkdir);
-               return;
+               goto out;
        }
 
        status = resolve_dfspath(ctx, conn,
@@ -5064,26 +5187,28 @@ void reply_mkdir(struct smb_request *req)
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
                        reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
                                        ERRSRV, ERRbadpath);
-                       END_PROFILE(SMBmkdir);
-                       return;
+                       goto out;
                }
                reply_nterror(req, status);
-               END_PROFILE(SMBmkdir);
-               return;
+               goto out;
        }
 
-       status = unix_convert(ctx, conn, directory, False, &directory, NULL, &sbuf);
+       status = unix_convert(ctx, conn, directory, &smb_dname, 0);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBmkdir);
-               return;
+               goto out;
+       }
+
+       status = get_full_smb_filename(ctx, smb_dname, &directory);
+       if (!NT_STATUS_IS_OK(status)) {
+               reply_nterror(req, status);
+               goto out;
        }
 
        status = check_name(conn, directory);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBmkdir);
-               return;
+               goto out;
        }
 
        status = create_directory(conn, req, directory);
@@ -5104,14 +5229,14 @@ void reply_mkdir(struct smb_request *req)
                }
 
                reply_nterror(req, status);
-               END_PROFILE(SMBmkdir);
-               return;
+               goto out;
        }
 
        reply_outbuf(req, 0, 0);
 
        DEBUG( 3, ( "mkdir %s\n", directory ) );
-
+ out:
+       TALLOC_FREE(smb_dname);
        END_PROFILE(SMBmkdir);
        return;
 }
@@ -5318,8 +5443,8 @@ NTSTATUS rmdir_internals(TALLOC_CTX *ctx,
 void reply_rmdir(struct smb_request *req)
 {
        connection_struct *conn = req->conn;
+       struct smb_filename *smb_dname = NULL;
        char *directory = NULL;
-       SMB_STRUCT_STAT sbuf;
        NTSTATUS status;
        TALLOC_CTX *ctx = talloc_tos();
 
@@ -5329,8 +5454,7 @@ void reply_rmdir(struct smb_request *req)
                            STR_TERMINATE, &status);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBrmdir);
-               return;
+               goto out;
        }
 
        status = resolve_dfspath(ctx, conn,
@@ -5341,41 +5465,42 @@ void reply_rmdir(struct smb_request *req)
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
                        reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
                                        ERRSRV, ERRbadpath);
-                       END_PROFILE(SMBrmdir);
-                       return;
+                       goto out;
                }
                reply_nterror(req, status);
-               END_PROFILE(SMBrmdir);
-               return;
+               goto out;
        }
 
-       status = unix_convert(ctx, conn, directory, False, &directory,
-                       NULL, &sbuf);
+       status = unix_convert(ctx, conn, directory, &smb_dname, 0);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBrmdir);
-               return;
+               goto out;
+       }
+
+       status = get_full_smb_filename(ctx, smb_dname, &directory);
+       if (!NT_STATUS_IS_OK(status)) {
+               reply_nterror(req, status);
+               goto out;
        }
 
        status = check_name(conn, directory);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBrmdir);
-               return;
+               goto out;
        }
 
        dptr_closepath(directory, req->smbpid);
        status = rmdir_internals(ctx, conn, directory);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBrmdir);
-               return;
+               goto out;
        }
 
        reply_outbuf(req, 0, 0);
 
        DEBUG( 3, ( "rmdir %s\n", directory ) );
-
+ out:
+       TALLOC_FREE(smb_dname);
        END_PROFILE(SMBrmdir);
        return;
 }
@@ -5836,35 +5961,42 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                        bool dest_has_wild,
                        uint32_t access_mask)
 {
+       struct smb_filename *smb_fname = NULL;
+       struct smb_filename *smb_fname_new = NULL;
        char *directory = NULL;
        char *mask = NULL;
-       char *last_component_src = NULL;
-       char *last_component_dest = NULL;
        char *name = NULL;
        char *newname = NULL;
        char *p;
        int count=0;
        NTSTATUS status = NT_STATUS_OK;
-       SMB_STRUCT_STAT sbuf1, sbuf2;
        struct smb_Dir *dir_hnd = NULL;
        const char *dname;
        long offset = 0;
        int create_options = 0;
        bool posix_pathnames = lp_posix_pathnames();
 
-       ZERO_STRUCT(sbuf1);
-       ZERO_STRUCT(sbuf2);
+       status = unix_convert(ctx, conn, name_in, &smb_fname,
+                             src_has_wild ? UCF_ALLOW_WCARD_LCOMP : 0);
+       if (!NT_STATUS_IS_OK(status)) {
+               goto out;
+       }
 
-       status = unix_convert(ctx, conn, name_in, src_has_wild, &name,
-                       &last_component_src, &sbuf1);
+       status = get_full_smb_filename(ctx, smb_fname, &name);
        if (!NT_STATUS_IS_OK(status)) {
-               return status;
+               goto out;
        }
 
-       status = unix_convert(ctx, conn, newname_in, dest_has_wild, &newname,
-                       &last_component_dest, &sbuf2);
+       status = unix_convert(ctx, conn, newname_in, &smb_fname_new,
+                             (UCF_SAVE_LCOMP |
+                              (dest_has_wild ? UCF_ALLOW_WCARD_LCOMP : 0)));
        if (!NT_STATUS_IS_OK(status)) {
-               return status;
+               goto out;
+       }
+
+       status = get_full_smb_filename(ctx, smb_fname_new, &newname);
+       if (!NT_STATUS_IS_OK(status)) {
+               goto out;
        }
 
        /*
@@ -5880,14 +6012,16 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
        if (!p) {
                directory = talloc_strdup(ctx, ".");
                if (!directory) {
-                       return NT_STATUS_NO_MEMORY;
+                       status = NT_STATUS_NO_MEMORY;
+                       goto out;
                }
                mask = name;
        } else {
                *p = 0;
                directory = talloc_strdup(ctx, name);
                if (!directory) {
-                       return NT_STATUS_NO_MEMORY;
+                       status = NT_STATUS_NO_MEMORY;
+                       goto out;
                }
                mask = p+1;
                *p = '/'; /* Replace needed for exceptional test below. */
@@ -5902,7 +6036,7 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
         * Tine Smukavec <valentin.smukavec@hermes.si>.
         */
 
-       if (!VALID_STAT(sbuf1) && mangle_is_mangled(mask, conn->params)) {
+       if (!VALID_STAT(smb_fname->st) && mangle_is_mangled(mask, conn->params)) {
                char *new_mask = NULL;
                mangle_lookup_name_from_8_3(ctx,
                                        mask,
@@ -5919,14 +6053,13 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                /*
                 * No wildcards - just process the one file.
                 */
-               bool is_short_name = mangle_is_8_3(name, True, conn->params);
-
                /* Add a terminating '/' to the directory name. */
                directory = talloc_asprintf_append(directory,
                                "/%s",
                                mask);
                if (!directory) {
-                       return NT_STATUS_NO_MEMORY;
+                       status = NT_STATUS_NO_MEMORY;
+                       goto out;
                }
 
                /* Ensure newname contains a '/' also */
@@ -5935,17 +6068,18 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                                                "./%s",
                                                newname);
                        if (!newname) {
-                               return NT_STATUS_NO_MEMORY;
+                               status = NT_STATUS_NO_MEMORY;
+                               goto out;
                        }
                }
 
                DEBUG(3, ("rename_internals: case_sensitive = %d, "
                          "case_preserve = %d, short case preserve = %d, "
                          "directory = %s, newname = %s, "
-                         "last_component_dest = %s, is_8_3 = %d\n",
+                         "last_component_dest = %s\n",
                          conn->case_sensitive, conn->case_preserve,
                          conn->short_case_preserve, directory,
-                         newname, last_component_dest, is_short_name));
+                         newname, smb_fname_new->original_lcomp));
 
                /* The dest name still may have wildcards. */
                if (dest_has_wild) {
@@ -5956,19 +6090,20 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                                        "%s %s failed\n",
                                        directory,
                                        newname));
-                               return NT_STATUS_NO_MEMORY;
+                               status = NT_STATUS_NO_MEMORY;
+                               goto out;
                        }
                        newname = mod_newname;
                }
 
-               ZERO_STRUCT(sbuf1);
+               ZERO_STRUCT(smb_fname->st);
                if (posix_pathnames) {
-                       SMB_VFS_LSTAT(conn, directory, &sbuf1);
+                       SMB_VFS_LSTAT(conn, directory, &smb_fname->st);
                } else {
-                       SMB_VFS_STAT(conn, directory, &sbuf1);
+                       SMB_VFS_STAT(conn, directory, &smb_fname->st);
                }
 
-               if (S_ISDIR(sbuf1.st_mode)) {
+               if (S_ISDIR(smb_fname->st.st_mode)) {
                        create_options |= FILE_DIRECTORY_FILE;
                }
 
@@ -5990,16 +6125,16 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                        NULL,                           /* ea_list */
                        &fsp,                           /* result */
                        NULL,                           /* pinfo */
-                       &sbuf1);                        /* psbuf */
+                       &smb_fname->st);                /* psbuf */
 
                if (!NT_STATUS_IS_OK(status)) {
                        DEBUG(3, ("Could not open rename source %s: %s\n",
                                  directory, nt_errstr(status)));
-                       return status;
+                       goto out;
                }
 
                status = rename_internals_fsp(conn, fsp, newname,
-                                             last_component_dest,
+                                             smb_fname_new->original_lcomp,
                                              attrs, replace_if_exists);
 
                close_file(req, fsp, NORMAL_CLOSE);
@@ -6007,7 +6142,7 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                DEBUG(3, ("rename_internals: Error %s rename %s -> %s\n",
                          nt_errstr(status), directory,newname));
 
-               return status;
+               goto out;
        }
 
        /*
@@ -6020,12 +6155,13 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
 
        status = check_name(conn, directory);
        if (!NT_STATUS_IS_OK(status)) {
-               return status;
+               goto out;
        }
 
        dir_hnd = OpenDir(talloc_tos(), conn, directory, mask, attrs);
        if (dir_hnd == NULL) {
-               return map_nt_error_from_unix(errno);
+               status = map_nt_error_from_unix(errno);
+               goto out;
        }
 
        status = NT_STATUS_NO_SUCH_FILE;
@@ -6034,7 +6170,7 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
         * - gentest fix. JRA
         */
 
-       while ((dname = ReadDirName(dir_hnd, &offset, &sbuf1))) {
+       while ((dname = ReadDirName(dir_hnd, &offset, &smb_fname->st))) {
                files_struct *fsp = NULL;
                char *fname = NULL;
                char *destname = NULL;
@@ -6049,7 +6185,8 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                        }
                }
 
-               if (!is_visible_file(conn, directory, dname, &sbuf1, False)) {
+               if (!is_visible_file(conn, directory, dname, &smb_fname->st,
+                                    False)) {
                        continue;
                }
 
@@ -6067,7 +6204,8 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                                directory,
                                dname);
                if (!fname) {
-                       return NT_STATUS_NO_MEMORY;
+                       status = NT_STATUS_NO_MEMORY;
+                       goto out;
                }
 
                if (!resolve_wildcards(ctx,
@@ -6078,19 +6216,20 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                        continue;
                }
                if (!destname) {
-                       return NT_STATUS_NO_MEMORY;
+                       status = NT_STATUS_NO_MEMORY;
+                       goto out;
                }
 
-               ZERO_STRUCT(sbuf1);
+               ZERO_STRUCT(smb_fname->st);
                if (posix_pathnames) {
-                       SMB_VFS_LSTAT(conn, fname, &sbuf1);
+                       SMB_VFS_LSTAT(conn, fname, &smb_fname->st);
                } else {
-                       SMB_VFS_STAT(conn, fname, &sbuf1);
+                       SMB_VFS_STAT(conn, fname, &smb_fname->st);
                }
 
                create_options = 0;
 
-               if (S_ISDIR(sbuf1.st_mode)) {
+               if (S_ISDIR(smb_fname->st.st_mode)) {
                        create_options |= FILE_DIRECTORY_FILE;
                }
 
@@ -6112,7 +6251,7 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                        NULL,                           /* ea_list */
                        &fsp,                           /* result */
                        NULL,                           /* pinfo */
-                       &sbuf1);                        /* psbuf */
+                       &smb_fname->st);                /* psbuf */
 
                if (!NT_STATUS_IS_OK(status)) {
                        DEBUG(3,("rename_internals: SMB_VFS_CREATE_FILE "
@@ -6147,6 +6286,9 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                status = map_nt_error_from_unix(errno);
        }
 
+ out:
+       TALLOC_FREE(smb_fname);
+       TALLOC_FREE(smb_fname_new);
        return status;
 }
 
@@ -6407,6 +6549,8 @@ NTSTATUS copy_file(TALLOC_CTX *ctx,
 void reply_copy(struct smb_request *req)
 {
        connection_struct *conn = req->conn;
+       struct smb_filename *smb_fname = NULL;
+       struct smb_filename *smb_fname_new = NULL;
        char *name = NULL;
        char *newname = NULL;
        char *directory = NULL;
@@ -6422,7 +6566,6 @@ void reply_copy(struct smb_request *req)
        bool target_is_directory=False;
        bool source_has_wild = False;
        bool dest_has_wild = False;
-       SMB_STRUCT_STAT sbuf1, sbuf2;
        NTSTATUS status;
        TALLOC_CTX *ctx = talloc_tos();
 
@@ -6430,8 +6573,7 @@ void reply_copy(struct smb_request *req)
 
        if (req->wct < 3) {
                reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
-               END_PROFILE(SMBcopy);
-               return;
+               goto out;
        }
 
        tid2 = SVAL(req->vwv+0, 0);
@@ -6443,15 +6585,13 @@ void reply_copy(struct smb_request *req)
                                       &status, &source_has_wild);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBcopy);
-               return;
+               goto out;
        }
        p += srvstr_get_path_req_wcard(ctx, req, &newname, p, STR_TERMINATE,
                                       &status, &dest_has_wild);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBcopy);
-               return;
+               goto out;
        }
 
        DEBUG(3,("reply_copy : %s -> %s\n",name,newname));
@@ -6460,8 +6600,7 @@ void reply_copy(struct smb_request *req)
                /* can't currently handle inter share copies XXXX */
                DEBUG(3,("Rejecting inter-share copy\n"));
                reply_doserror(req, ERRSRV, ERRinvdevice);
-               END_PROFILE(SMBcopy);
-               return;
+               goto out;
        }
 
        status = resolve_dfspath_wcard(ctx, conn,
@@ -6473,12 +6612,10 @@ void reply_copy(struct smb_request *req)
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
                        reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
                                        ERRSRV, ERRbadpath);
-                       END_PROFILE(SMBcopy);
-                       return;
+                       goto out;
                }
                reply_nterror(req, status);
-               END_PROFILE(SMBcopy);
-               return;
+               goto out;
        }
 
        status = resolve_dfspath_wcard(ctx, conn,
@@ -6490,50 +6627,55 @@ void reply_copy(struct smb_request *req)
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
                        reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
                                        ERRSRV, ERRbadpath);
-                       END_PROFILE(SMBcopy);
-                       return;
+                       goto out;
                }
                reply_nterror(req, status);
-               END_PROFILE(SMBcopy);
-               return;
+               goto out;
        }
 
-       status = unix_convert(ctx, conn, name, source_has_wild,
-                       &name, NULL, &sbuf1);
+       status = unix_convert(ctx, conn, name, &smb_fname,
+                             source_has_wild ? UCF_ALLOW_WCARD_LCOMP : 0);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBcopy);
-               return;
+               goto out;
        }
 
-       status = unix_convert(ctx, conn, newname, dest_has_wild,
-                       &newname, NULL, &sbuf2);
+       status = get_full_smb_filename(ctx, smb_fname, &name);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBcopy);
-               return;
+               goto out;
+       }
+
+       status = unix_convert(ctx, conn, newname, &smb_fname_new,
+                             dest_has_wild ? UCF_ALLOW_WCARD_LCOMP : 0);
+       if (!NT_STATUS_IS_OK(status)) {
+               reply_nterror(req, status);
+               goto out;
        }
 
-       target_is_directory = VALID_STAT_OF_DIR(sbuf2);
+       status = get_full_smb_filename(ctx, smb_fname_new, &newname);
+       if (!NT_STATUS_IS_OK(status)) {
+               reply_nterror(req, status);
+               goto out;
+       }
+
+       target_is_directory = VALID_STAT_OF_DIR(smb_fname_new->st);
 
        if ((flags&1) && target_is_directory) {
                reply_doserror(req, ERRDOS, ERRbadfile);
-               END_PROFILE(SMBcopy);
-               return;
+               goto out;
        }
 
        if ((flags&2) && !target_is_directory) {
                reply_doserror(req, ERRDOS, ERRbadpath);
-               END_PROFILE(SMBcopy);
-               return;
+               goto out;
        }
 
-       if ((flags&(1<<5)) && VALID_STAT_OF_DIR(sbuf1)) {
+       if ((flags&(1<<5)) && VALID_STAT_OF_DIR(smb_fname->st)) {
                /* wants a tree copy! XXXX */
                DEBUG(3,("Rejecting tree copy\n"));
                reply_doserror(req, ERRSRV, ERRerror);
-               END_PROFILE(SMBcopy);
-               return;
+               goto out;
        }
 
        p = strrchr_m(name,'/');
@@ -6547,8 +6689,7 @@ void reply_copy(struct smb_request *req)
 
        if (!directory) {
                reply_nterror(req, NT_STATUS_NO_MEMORY);
-               END_PROFILE(SMBcopy);
-               return;
+               goto out;
        }
 
        /*
@@ -6560,7 +6701,8 @@ void reply_copy(struct smb_request *req)
         * Tine Smukavec <valentin.smukavec@hermes.si>.
         */
 
-       if (!VALID_STAT(sbuf1) && mangle_is_mangled(mask, conn->params)) {
+       if (!VALID_STAT(smb_fname->st) &&
+           mangle_is_mangled(mask, conn->params)) {
                char *new_mask = NULL;
                mangle_lookup_name_from_8_3(ctx,
                                        mask,
@@ -6580,8 +6722,7 @@ void reply_copy(struct smb_request *req)
                        if (!resolve_wildcards(ctx,
                                        directory,newname,&mod_newname)) {
                                reply_nterror(req, NT_STATUS_NO_MEMORY);
-                               END_PROFILE(SMBcopy);
-                               return;
+                               goto out;
                        }
                        newname = mod_newname;
                }
@@ -6589,15 +6730,13 @@ void reply_copy(struct smb_request *req)
                status = check_name(conn, directory);
                if (!NT_STATUS_IS_OK(status)) {
                        reply_nterror(req, status);
-                       END_PROFILE(SMBcopy);
-                       return;
+                       goto out;
                }
 
                status = check_name(conn, newname);
                if (!NT_STATUS_IS_OK(status)) {
                        reply_nterror(req, status);
-                       END_PROFILE(SMBcopy);
-                       return;
+                       goto out;
                }
 
                status = copy_file(ctx,conn,directory,newname,ofun,
@@ -6605,8 +6744,7 @@ void reply_copy(struct smb_request *req)
 
                if(!NT_STATUS_IS_OK(status)) {
                        reply_nterror(req, status);
-                       END_PROFILE(SMBcopy);
-                       return;
+                       goto out;
                } else {
                        count++;
                }
@@ -6622,21 +6760,20 @@ void reply_copy(struct smb_request *req)
                status = check_name(conn, directory);
                if (!NT_STATUS_IS_OK(status)) {
                        reply_nterror(req, status);
-                       END_PROFILE(SMBcopy);
-                       return;
+                       goto out;
                }
 
                dir_hnd = OpenDir(talloc_tos(), conn, directory, mask, 0);
                if (dir_hnd == NULL) {
                        status = map_nt_error_from_unix(errno);
                        reply_nterror(req, status);
-                       END_PROFILE(SMBcopy);
-                       return;
+                       goto out;
                }
 
                error = ERRbadfile;
 
-               while ((dname = ReadDirName(dir_hnd, &offset, &sbuf1))) {
+               while ((dname = ReadDirName(dir_hnd, &offset,
+                                           &smb_fname->st))) {
                        char *destname = NULL;
                        char *fname = NULL;
 
@@ -6644,7 +6781,8 @@ void reply_copy(struct smb_request *req)
                                continue;
                        }
 
-                       if (!is_visible_file(conn, directory, dname, &sbuf1, False)) {
+                       if (!is_visible_file(conn, directory, dname,
+                                            &smb_fname->st, False)) {
                                continue;
                        }
 
@@ -6660,8 +6798,7 @@ void reply_copy(struct smb_request *req)
                        if (!fname) {
                                TALLOC_FREE(dir_hnd);
                                reply_nterror(req, NT_STATUS_NO_MEMORY);
-                               END_PROFILE(SMBcopy);
-                               return;
+                               goto out;
                        }
 
                        if (!resolve_wildcards(ctx,
@@ -6671,24 +6808,21 @@ void reply_copy(struct smb_request *req)
                        if (!destname) {
                                TALLOC_FREE(dir_hnd);
                                reply_nterror(req, NT_STATUS_NO_MEMORY);
-                               END_PROFILE(SMBcopy);
-                               return;
+                               goto out;
                        }
 
                        status = check_name(conn, fname);
                        if (!NT_STATUS_IS_OK(status)) {
                                TALLOC_FREE(dir_hnd);
                                reply_nterror(req, status);
-                               END_PROFILE(SMBcopy);
-                               return;
+                               goto out;
                        }
 
                        status = check_name(conn, destname);
                        if (!NT_STATUS_IS_OK(status)) {
                                TALLOC_FREE(dir_hnd);
                                reply_nterror(req, status);
-                               END_PROFILE(SMBcopy);
-                               return;
+                               goto out;
                        }
 
                        DEBUG(3,("reply_copy : doing copy on %s -> %s\n",fname, destname));
@@ -6709,18 +6843,18 @@ void reply_copy(struct smb_request *req)
                        /* Error on close... */
                        errno = err;
                        reply_unixerror(req, ERRHRD, ERRgeneral);
-                       END_PROFILE(SMBcopy);
-                       return;
+                       goto out;
                }
 
                reply_doserror(req, ERRDOS, error);
-               END_PROFILE(SMBcopy);
-               return;
+               goto out;
        }
 
        reply_outbuf(req, 1, 0);
        SSVAL(req->outbuf,smb_vwv0,count);
-
+ out:
+       TALLOC_FREE(smb_fname);
+       TALLOC_FREE(smb_fname_new);
        END_PROFILE(SMBcopy);
        return;
 }