source4/torture/rap/rap.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    test suite for various RAP operations
   4    Copyright (C) Volker Lendecke 2004
   5    Copyright (C) Tim Potter 2005
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License as published by
   9    the Free Software Foundation; either version 2 of the License, or
  10    (at your option) any later version.
  11
  12    This program is distributed in the hope that it will be useful,
  13    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15    GNU General Public License for more details.
  16
  17    You should have received a copy of the GNU General Public License
  18    along with this program; if not, write to the Free Software
  19    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  20 */
  21
  22 #include "includes.h"
  23 #include "torture/torture.h"
  24 #include "rap.h"
  25 #include "libcli/raw/libcliraw.h"
  26 #include "libcli/libcli.h"
  27
  28 struct rap_call {
  29         uint16_t callno;
  30         char *paramdesc;
  31         const char *datadesc;
  32
  33         uint16_t status;
  34         uint16_t convert;
  35
  36         uint16_t rcv_paramlen, rcv_datalen;
  37
  38         struct ndr_push *ndr_push_param;
  39         struct ndr_push *ndr_push_data;
  40         struct ndr_pull *ndr_pull_param;
  41         struct ndr_pull *ndr_pull_data;
  42 };
  43
  44 #define RAPNDR_FLAGS (LIBNDR_FLAG_NOALIGN|LIBNDR_FLAG_STR_ASCII|LIBNDR_FLAG_STR_NULLTERM);
  45
  46 static struct rap_call *new_rap_cli_call(TALLOC_CTX *mem_ctx, uint16_t callno)
  47 {
  48         struct rap_call *call;
  49
  50         call = talloc(mem_ctx, struct rap_call);
  51
  52         if (call == NULL)
  53                 return NULL;
  54
  55         call->callno = callno;
  56         call->rcv_paramlen = 4;
  57
  58         call->paramdesc = NULL;
  59         call->datadesc = NULL;
  60
  61         call->ndr_push_param = ndr_push_init_ctx(mem_ctx);
  62         call->ndr_push_param->flags = RAPNDR_FLAGS;
  63
  64         call->ndr_push_data = ndr_push_init_ctx(mem_ctx);
  65         call->ndr_push_data->flags = RAPNDR_FLAGS;
  66
  67         return call;
  68 }
  69
  70 static void rap_cli_push_paramdesc(struct rap_call *call, char desc)
  71 {
  72         int len = 0;
  73
  74         if (call->paramdesc != NULL)
  75                 len = strlen(call->paramdesc);
  76
  77         call->paramdesc = talloc_realloc(call,
  78                                          call->paramdesc,
  79                                          uint8_t,
  80                                          len+2);
  81
  82         call->paramdesc[len] = desc;
  83         call->paramdesc[len+1] = '\0';
  84 }
  85
  86 static void rap_cli_push_word(struct rap_call *call, uint16_t val)
  87 {
  88         rap_cli_push_paramdesc(call, 'W');
  89         ndr_push_uint16(call->ndr_push_param, NDR_SCALARS, val);
  90 }
  91
  92 static void rap_cli_push_dword(struct rap_call *call, uint32_t val)
  93 {
  94         rap_cli_push_paramdesc(call, 'D');
  95         ndr_push_uint32(call->ndr_push_param, NDR_SCALARS, val);
  96 }
  97
  98 static void rap_cli_push_rcvbuf(struct rap_call *call, int len)
  99 {
 100         rap_cli_push_paramdesc(call, 'r');
 101         rap_cli_push_paramdesc(call, 'L');
 102         ndr_push_uint16(call->ndr_push_param, NDR_SCALARS, len);
 103         call->rcv_datalen = len;
 104 }
 105
 106 static void rap_cli_expect_multiple_entries(struct rap_call *call)
 107 {
 108         rap_cli_push_paramdesc(call, 'e');
 109         rap_cli_push_paramdesc(call, 'h');
 110         call->rcv_paramlen += 4; /* uint16_t entry count, uint16_t total */
 111 }
 112
 113 static void rap_cli_push_string(struct rap_call *call, const char *str)
 114 {
 115         if (str == NULL) {
 116                 rap_cli_push_paramdesc(call, 'O');
 117                 return;
 118         }
 119         rap_cli_push_paramdesc(call, 'z');
 120         ndr_push_string(call->ndr_push_param, NDR_SCALARS, str);
 121 }
 122
 123 static void rap_cli_expect_format(struct rap_call *call, const char *format)
 124 {
 125         call->datadesc = format;
 126 }
 127
 128 static NTSTATUS rap_pull_string(TALLOC_CTX *mem_ctx, struct ndr_pull *ndr,
 129                                 uint16_t convert, char **dest)
 130 {
 131         uint16_t string_offset;
 132         uint16_t ignore;
 133         const char *p;
 134         size_t len;
 135
 136         NDR_CHECK(ndr_pull_uint16(ndr, NDR_SCALARS, &string_offset));
 137         NDR_CHECK(ndr_pull_uint16(ndr, NDR_SCALARS, &ignore));
 138
 139         string_offset -= convert;
 140
 141         if (string_offset+1 > ndr->data_size)
 142                 return NT_STATUS_INVALID_PARAMETER;
 143
 144         p = (const char *)(ndr->data + string_offset);
 145         len = strnlen(p, ndr->data_size-string_offset);
 146
 147         if ( string_offset + len + 1 >  ndr->data_size )
 148                 return NT_STATUS_INVALID_PARAMETER;
 149
 150         *dest = talloc_zero_size(mem_ctx, len+1);
 151         pull_ascii(*dest, p, len+1, len, 0);
 152
 153         return NT_STATUS_OK;
 154 }
 155
 156 static NTSTATUS rap_cli_do_call(struct smbcli_state *cli, struct rap_call *call)
 157 {
 158         NTSTATUS result;
 159         DATA_BLOB param_blob;
 160         struct ndr_push *params;
 161         struct smb_trans2 trans;
 162
 163         params = ndr_push_init_ctx(call);
 164
 165         if (params == NULL)
 166                 return NT_STATUS_NO_MEMORY;
 167
 168         params->flags = RAPNDR_FLAGS;
 169
 170         trans.in.max_param = call->rcv_paramlen;
 171         trans.in.max_data = smb_raw_max_trans_data(cli->tree, call->rcv_paramlen);
 172         trans.in.max_setup = 0;
 173         trans.in.flags = 0;
 174         trans.in.timeout = 0;
 175         trans.in.setup_count = 0;
 176         trans.in.setup = NULL;
 177         trans.in.trans_name = "\\PIPE\\LANMAN";
 178
 179         NDR_CHECK(ndr_push_uint16(params, NDR_SCALARS, call->callno));
 180         if (call->paramdesc)
 181                 NDR_CHECK(ndr_push_string(params, NDR_SCALARS, call->paramdesc));
 182         if (call->datadesc)
 183                 NDR_CHECK(ndr_push_string(params, NDR_SCALARS, call->datadesc));
 184
 185         param_blob = ndr_push_blob(call->ndr_push_param);
 186         NDR_CHECK(ndr_push_bytes(params, param_blob.data,
 187                                  param_blob.length));
 188
 189         trans.in.params = ndr_push_blob(params);
 190         trans.in.data = data_blob(NULL, 0);
 191
 192         result = smb_raw_trans(cli->tree, call, &trans);
 193
 194         if (!NT_STATUS_IS_OK(result))
 195                 return result;
 196
 197         call->ndr_pull_param = ndr_pull_init_blob(&trans.out.params, call);
 198         call->ndr_pull_param->flags = RAPNDR_FLAGS;
 199
 200         call->ndr_pull_data = ndr_pull_init_blob(&trans.out.data, call);
 201         call->ndr_pull_data->flags = RAPNDR_FLAGS;
 202
 203         return result;
 204 }
 205
 206 #define NDR_OK(call) do { NTSTATUS _status; \
 207                              _status = call; \
 208                              if (!NT_STATUS_IS_OK(_status)) \
 209                                 goto done; \
 210                         } while (0)
 211
 212 static NTSTATUS smbcli_rap_netshareenum(struct smbcli_state *cli,
 213                                         TALLOC_CTX *mem_ctx,
 214                                         struct rap_NetShareEnum *r)
 215 {
 216         struct rap_call *call;
 217         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 218         int i;
 219
 220         call = new_rap_cli_call(NULL, RAP_WshareEnum);
 221
 222         if (call == NULL)
 223                 return NT_STATUS_NO_MEMORY;
 224
 225         rap_cli_push_word(call, r->in.level); /* Level */
 226         rap_cli_push_rcvbuf(call, r->in.bufsize);
 227         rap_cli_expect_multiple_entries(call);
 228
 229         switch(r->in.level) {
 230         case 0:
 231                 rap_cli_expect_format(call, "B13");
 232                 break;
 233         case 1:
 234                 rap_cli_expect_format(call, "B13BWz");
 235                 break;
 236         }
 237
 238         result = rap_cli_do_call(cli, call);
 239
 240         if (!NT_STATUS_IS_OK(result))
 241                 goto done;
 242
 243         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.status));
 244         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.convert));
 245         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.count));
 246         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.available));
 247
 248         r->out.info = talloc_array(mem_ctx, union rap_shareenum_info, r->out.count);
 249
 250         if (r->out.info == NULL) {
 251                 result = NT_STATUS_NO_MEMORY;
 252                 goto done;
 253         }
 254
 255         for (i=0; i<r->out.count; i++) {
 256                 switch(r->in.level) {
 257                 case 0:
 258                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 259                                               (uint8_t *)r->out.info[i].info0.name, 13));
 260                         break;
 261                 case 1:
 262                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 263                                               (uint8_t *)r->out.info[i].info1.name, 13));
 264                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 265                                               (uint8_t *)&r->out.info[i].info1.pad, 1));
 266                         NDR_OK(ndr_pull_uint16(call->ndr_pull_data,
 267                                                NDR_SCALARS, &r->out.info[i].info1.type));
 268                         NDR_OK(rap_pull_string(mem_ctx, call->ndr_pull_data,
 269                                                r->out.convert,
 270                                                &r->out.info[i].info1.comment));
 271                         break;
 272                 }
 273         }
 274
 275         result = NT_STATUS_OK;
 276
 277  done:
 278         talloc_free(call);
 279         return result;
 280 }
 281
 282 static BOOL test_netshareenum(struct smbcli_state *cli)
 283 {
 284         struct rap_NetShareEnum r;
 285         int i;
 286         TALLOC_CTX *tmp_ctx = talloc_new(cli);
 287
 288         r.in.level = 1;
 289         r.in.bufsize = 8192;
 290
 291         if (!NT_STATUS_IS_OK(smbcli_rap_netshareenum(cli, tmp_ctx, &r)))
 292                 return False;
 293
 294         for (i=0; i<r.out.count; i++) {
 295                 printf("%s %d %s\n", r.out.info[i].info1.name,
 296                        r.out.info[i].info1.type,
 297                        r.out.info[i].info1.comment);
 298         }
 299
 300         talloc_free(tmp_ctx);
 301
 302         return True;
 303 }
 304
 305 static NTSTATUS smbcli_rap_netserverenum2(struct smbcli_state *cli,
 306                                           TALLOC_CTX *mem_ctx,
 307                                           struct rap_NetServerEnum2 *r)
 308 {
 309         struct rap_call *call;
 310         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 311         int i;
 312
 313         call = new_rap_cli_call(NULL, RAP_NetServerEnum2);
 314
 315         if (call == NULL)
 316                 return NT_STATUS_NO_MEMORY;
 317
 318         rap_cli_push_word(call, r->in.level);
 319         rap_cli_push_rcvbuf(call, r->in.bufsize);
 320         rap_cli_expect_multiple_entries(call);
 321         rap_cli_push_dword(call, r->in.servertype);
 322         rap_cli_push_string(call, r->in.domain);
 323
 324         switch(r->in.level) {
 325         case 0:
 326                 rap_cli_expect_format(call, "B16");
 327                 break;
 328         case 1:
 329                 rap_cli_expect_format(call, "B16BBDz");
 330                 break;
 331         }
 332
 333         result = rap_cli_do_call(cli, call);
 334
 335         if (!NT_STATUS_IS_OK(result))
 336                 goto done;
 337
 338         result = NT_STATUS_INVALID_PARAMETER;
 339
 340         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.status));
 341         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.convert));
 342         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.count));
 343         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.available));
 344
 345         r->out.info = talloc_array(mem_ctx, union rap_server_info, r->out.count);
 346
 347         if (r->out.info == NULL) {
 348                 result = NT_STATUS_NO_MEMORY;
 349                 goto done;
 350         }
 351
 352         for (i=0; i<r->out.count; i++) {
 353                 switch(r->in.level) {
 354                 case 0:
 355                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 356                                               (uint8_t *)r->out.info[i].info0.name, 16));
 357                         break;
 358                 case 1:
 359                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 360                                               (uint8_t *)r->out.info[i].info1.name, 16));
 361                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 362                                               &r->out.info[i].info1.version_major, 1));
 363                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 364                                               &r->out.info[i].info1.version_minor, 1));
 365                         NDR_OK(ndr_pull_uint32(call->ndr_pull_data,
 366                                                NDR_SCALARS, &r->out.info[i].info1.servertype));
 367                         NDR_OK(rap_pull_string(mem_ctx, call->ndr_pull_data,
 368                                                r->out.convert,
 369                                                &r->out.info[i].info1.comment));
 370                 }
 371         }
 372
 373         result = NT_STATUS_OK;
 374
 375  done:
 376         talloc_free(call);
 377         return result;
 378 }
 379
 380 static BOOL test_netserverenum(struct smbcli_state *cli)
 381 {
 382         struct rap_NetServerEnum2 r;
 383         int i;
 384         TALLOC_CTX *tmp_ctx = talloc_new(cli);
 385
 386         r.in.level = 0;
 387         r.in.bufsize = 8192;
 388         r.in.servertype = 0xffffffff;
 389         r.in.servertype = 0x80000000;
 390         r.in.domain = NULL;
 391
 392         if (!NT_STATUS_IS_OK(smbcli_rap_netserverenum2(cli, tmp_ctx, &r)))
 393                 return False;
 394
 395         for (i=0; i<r.out.count; i++) {
 396                 switch (r.in.level) {
 397                 case 0:
 398                         printf("%s\n", r.out.info[i].info0.name);
 399                         break;
 400                 case 1:
 401                         printf("%s %x %s\n", r.out.info[i].info1.name,
 402                                r.out.info[i].info1.servertype,
 403                                r.out.info[i].info1.comment);
 404                         break;
 405                 }
 406         }
 407
 408         talloc_free(tmp_ctx);
 409
 410         return True;
 411 }
 412
 413
 414
 415 static BOOL test_rap(struct smbcli_state *cli)
 416 {
 417         BOOL res = True;
 418
 419         if (!test_netserverenum(cli))
 420                 res = False;
 421
 422         if (!test_netshareenum(cli))
 423                 res = False;
 424
 425         return res;
 426 }
 427
 428 BOOL torture_raw_rap(void)
 429 {
 430         struct smbcli_state *cli;
 431         BOOL ret = True;
 432         TALLOC_CTX *mem_ctx;
 433
 434         if (!torture_open_connection(&cli)) {
 435                 return False;
 436         }
 437
 438         mem_ctx = talloc_init("torture_raw_rap");
 439
 440         if (!test_rap(cli)) {
 441                 ret = False;
 442         }
 443
 444         torture_close_connection(cli);
 445         talloc_free(mem_ctx);
 446
 447         return ret;
 448 }
 449
 450 BOOL torture_rap_scan(void)
 451 {
 452         TALLOC_CTX *mem_ctx;
 453         struct smbcli_state *cli;
 454         int callno;
 455
 456         mem_ctx = talloc_init("torture_rap_scan");
 457
 458         if (!torture_open_connection(&cli)) {
 459                 return False;
 460         }
 461
 462         for (callno = 0; callno < 0xffff; callno++) {
 463                 struct rap_call *call = new_rap_cli_call(mem_ctx, callno);
 464                 NTSTATUS result;
 465
 466                 result = rap_cli_do_call(cli, call);
 467
 468                 if (!NT_STATUS_EQUAL(result, NT_STATUS_INVALID_PARAMETER))
 469                         continue;
 470
 471                 printf("callno %d is RAP call\n", callno);
 472         }
 473
 474         torture_close_connection(cli);
 475
 476         return True;
 477 }