source4/torture/rap/rap.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    test suite for various RAP operations
   4    Copyright (C) Volker Lendecke 2004
   5    Copyright (C) Tim Potter 2005
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License as published by
   9    the Free Software Foundation; either version 3 of the License, or
  10    (at your option) any later version.
  11
  12    This program is distributed in the hope that it will be useful,
  13    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15    GNU General Public License for more details.
  16
  17    You should have received a copy of the GNU General Public License
  18    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  19 */
  20
  21 #include "includes.h"
  22 #include "libcli/libcli.h"
  23 #include "torture/torture.h"
  24 #include "torture/util.h"
  25 #include "libcli/rap/rap.h"
  26 #include "libcli/raw/libcliraw.h"
  27 #include "libcli/libcli.h"
  28 #include "librpc/ndr/libndr.h"
  29
  30 struct rap_call {
  31         uint16_t callno;
  32         char *paramdesc;
  33         const char *datadesc;
  34
  35         uint16_t status;
  36         uint16_t convert;
  37
  38         uint16_t rcv_paramlen, rcv_datalen;
  39
  40         struct ndr_push *ndr_push_param;
  41         struct ndr_push *ndr_push_data;
  42         struct ndr_pull *ndr_pull_param;
  43         struct ndr_pull *ndr_pull_data;
  44 };
  45
  46 #define RAPNDR_FLAGS (LIBNDR_FLAG_NOALIGN|LIBNDR_FLAG_STR_ASCII|LIBNDR_FLAG_STR_NULLTERM);
  47
  48 static struct rap_call *new_rap_cli_call(TALLOC_CTX *mem_ctx, uint16_t callno)
  49 {
  50         struct rap_call *call;
  51
  52         call = talloc(mem_ctx, struct rap_call);
  53
  54         if (call == NULL)
  55                 return NULL;
  56
  57         call->callno = callno;
  58         call->rcv_paramlen = 4;
  59
  60         call->paramdesc = NULL;
  61         call->datadesc = NULL;
  62
  63         call->ndr_push_param = ndr_push_init_ctx(mem_ctx);
  64         call->ndr_push_param->flags = RAPNDR_FLAGS;
  65
  66         call->ndr_push_data = ndr_push_init_ctx(mem_ctx);
  67         call->ndr_push_data->flags = RAPNDR_FLAGS;
  68
  69         return call;
  70 }
  71
  72 static void rap_cli_push_paramdesc(struct rap_call *call, char desc)
  73 {
  74         int len = 0;
  75
  76         if (call->paramdesc != NULL)
  77                 len = strlen(call->paramdesc);
  78
  79         call->paramdesc = talloc_realloc(call,
  80                                          call->paramdesc,
  81                                          char,
  82                                          len+2);
  83
  84         call->paramdesc[len] = desc;
  85         call->paramdesc[len+1] = '\0';
  86 }
  87
  88 static void rap_cli_push_word(struct rap_call *call, uint16_t val)
  89 {
  90         rap_cli_push_paramdesc(call, 'W');
  91         ndr_push_uint16(call->ndr_push_param, NDR_SCALARS, val);
  92 }
  93
  94 static void rap_cli_push_dword(struct rap_call *call, uint32_t val)
  95 {
  96         rap_cli_push_paramdesc(call, 'D');
  97         ndr_push_uint32(call->ndr_push_param, NDR_SCALARS, val);
  98 }
  99
 100 static void rap_cli_push_rcvbuf(struct rap_call *call, int len)
 101 {
 102         rap_cli_push_paramdesc(call, 'r');
 103         rap_cli_push_paramdesc(call, 'L');
 104         ndr_push_uint16(call->ndr_push_param, NDR_SCALARS, len);
 105         call->rcv_datalen = len;
 106 }
 107
 108 static void rap_cli_expect_multiple_entries(struct rap_call *call)
 109 {
 110         rap_cli_push_paramdesc(call, 'e');
 111         rap_cli_push_paramdesc(call, 'h');
 112         call->rcv_paramlen += 4; /* uint16_t entry count, uint16_t total */
 113 }
 114
 115 static void rap_cli_expect_word(struct rap_call *call)
 116 {
 117         rap_cli_push_paramdesc(call, 'h');
 118         call->rcv_paramlen += 2;
 119 }
 120
 121 static void rap_cli_push_string(struct rap_call *call, const char *str)
 122 {
 123         if (str == NULL) {
 124                 rap_cli_push_paramdesc(call, 'O');
 125                 return;
 126         }
 127         rap_cli_push_paramdesc(call, 'z');
 128         ndr_push_string(call->ndr_push_param, NDR_SCALARS, str);
 129 }
 130
 131 static void rap_cli_expect_format(struct rap_call *call, const char *format)
 132 {
 133         call->datadesc = format;
 134 }
 135
 136 static NTSTATUS rap_pull_string(TALLOC_CTX *mem_ctx, struct ndr_pull *ndr,
 137                                 uint16_t convert, char **dest)
 138 {
 139         uint16_t string_offset;
 140         uint16_t ignore;
 141         const char *p;
 142         size_t len;
 143
 144         NDR_CHECK(ndr_pull_uint16(ndr, NDR_SCALARS, &string_offset));
 145         NDR_CHECK(ndr_pull_uint16(ndr, NDR_SCALARS, &ignore));
 146
 147         string_offset -= convert;
 148
 149         if (string_offset+1 > ndr->data_size)
 150                 return NT_STATUS_INVALID_PARAMETER;
 151
 152         p = (const char *)(ndr->data + string_offset);
 153         len = strnlen(p, ndr->data_size-string_offset);
 154
 155         if ( string_offset + len + 1 >  ndr->data_size )
 156                 return NT_STATUS_INVALID_PARAMETER;
 157
 158         *dest = talloc_zero_array(mem_ctx, char, len+1);
 159         pull_string(*dest, p, len+1, len, STR_ASCII);
 160
 161         return NT_STATUS_OK;
 162 }
 163
 164 static NTSTATUS rap_cli_do_call(struct smbcli_tree *tree, struct rap_call *call)
 165 {
 166         NTSTATUS result;
 167         DATA_BLOB param_blob;
 168         struct ndr_push *params;
 169         struct smb_trans2 trans;
 170
 171         params = ndr_push_init_ctx(call);
 172
 173         if (params == NULL)
 174                 return NT_STATUS_NO_MEMORY;
 175
 176         params->flags = RAPNDR_FLAGS;
 177
 178         trans.in.max_param = call->rcv_paramlen;
 179         trans.in.max_data = smb_raw_max_trans_data(tree, call->rcv_paramlen);
 180         trans.in.max_setup = 0;
 181         trans.in.flags = 0;
 182         trans.in.timeout = 0;
 183         trans.in.setup_count = 0;
 184         trans.in.setup = NULL;
 185         trans.in.trans_name = "\\PIPE\\LANMAN";
 186
 187         NDR_CHECK(ndr_push_uint16(params, NDR_SCALARS, call->callno));
 188         if (call->paramdesc)
 189                 NDR_CHECK(ndr_push_string(params, NDR_SCALARS, call->paramdesc));
 190         if (call->datadesc)
 191                 NDR_CHECK(ndr_push_string(params, NDR_SCALARS, call->datadesc));
 192
 193         param_blob = ndr_push_blob(call->ndr_push_param);
 194         NDR_CHECK(ndr_push_bytes(params, param_blob.data,
 195                                  param_blob.length));
 196
 197         trans.in.params = ndr_push_blob(params);
 198         trans.in.data = data_blob(NULL, 0);
 199
 200         result = smb_raw_trans(tree, call, &trans);
 201
 202         if (!NT_STATUS_IS_OK(result))
 203                 return result;
 204
 205         call->ndr_pull_param = ndr_pull_init_blob(&trans.out.params, call);
 206         call->ndr_pull_param->flags = RAPNDR_FLAGS;
 207
 208         call->ndr_pull_data = ndr_pull_init_blob(&trans.out.data, call);
 209         call->ndr_pull_data->flags = RAPNDR_FLAGS;
 210
 211         return result;
 212 }
 213
 214 #define NDR_OK(call) do { NTSTATUS _status; \
 215                              _status = call; \
 216                              if (!NT_STATUS_IS_OK(_status)) \
 217                                 goto done; \
 218                         } while (0)
 219
 220 static NTSTATUS smbcli_rap_netshareenum(struct smbcli_tree *tree,
 221                                         TALLOC_CTX *mem_ctx,
 222                                         struct rap_NetShareEnum *r)
 223 {
 224         struct rap_call *call;
 225         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 226         int i;
 227
 228         call = new_rap_cli_call(tree, RAP_WshareEnum);
 229
 230         if (call == NULL)
 231                 return NT_STATUS_NO_MEMORY;
 232
 233         rap_cli_push_word(call, r->in.level); /* Level */
 234         rap_cli_push_rcvbuf(call, r->in.bufsize);
 235         rap_cli_expect_multiple_entries(call);
 236
 237         switch(r->in.level) {
 238         case 0:
 239                 rap_cli_expect_format(call, "B13");
 240                 break;
 241         case 1:
 242                 rap_cli_expect_format(call, "B13BWz");
 243                 break;
 244         }
 245
 246         result = rap_cli_do_call(tree, call);
 247
 248         if (!NT_STATUS_IS_OK(result))
 249                 goto done;
 250
 251         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.status));
 252         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.convert));
 253         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.count));
 254         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.available));
 255
 256         r->out.info = talloc_array(mem_ctx, union rap_shareenum_info, r->out.count);
 257
 258         if (r->out.info == NULL) {
 259                 result = NT_STATUS_NO_MEMORY;
 260                 goto done;
 261         }
 262
 263         for (i=0; i<r->out.count; i++) {
 264                 switch(r->in.level) {
 265                 case 0:
 266                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 267                                               (uint8_t *)r->out.info[i].info0.name, 13));
 268                         break;
 269                 case 1:
 270                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 271                                               (uint8_t *)r->out.info[i].info1.name, 13));
 272                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 273                                               (uint8_t *)&r->out.info[i].info1.pad, 1));
 274                         NDR_OK(ndr_pull_uint16(call->ndr_pull_data,
 275                                                NDR_SCALARS, &r->out.info[i].info1.type));
 276                         NDR_OK(rap_pull_string(mem_ctx, call->ndr_pull_data,
 277                                                r->out.convert,
 278                                                &r->out.info[i].info1.comment));
 279                         break;
 280                 }
 281         }
 282
 283         result = NT_STATUS_OK;
 284
 285  done:
 286         talloc_free(call);
 287         return result;
 288 }
 289
 290 static bool test_netshareenum(struct smbcli_tree *tree)
 291 {
 292         struct rap_NetShareEnum r;
 293         int i;
 294         TALLOC_CTX *tmp_ctx = talloc_new(tree);
 295
 296         r.in.level = 1;
 297         r.in.bufsize = 8192;
 298
 299         if (!NT_STATUS_IS_OK(smbcli_rap_netshareenum(tree, tmp_ctx, &r)))
 300                 return false;
 301
 302         for (i=0; i<r.out.count; i++) {
 303                 printf("%s %d %s\n", r.out.info[i].info1.name,
 304                        r.out.info[i].info1.type,
 305                        r.out.info[i].info1.comment);
 306         }
 307
 308         talloc_free(tmp_ctx);
 309
 310         return true;
 311 }
 312
 313 static NTSTATUS smbcli_rap_netserverenum2(struct smbcli_tree *tree,
 314                                           TALLOC_CTX *mem_ctx,
 315                                           struct rap_NetServerEnum2 *r)
 316 {
 317         struct rap_call *call;
 318         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 319         int i;
 320
 321         call = new_rap_cli_call(mem_ctx, RAP_NetServerEnum2);
 322
 323         if (call == NULL)
 324                 return NT_STATUS_NO_MEMORY;
 325
 326         rap_cli_push_word(call, r->in.level);
 327         rap_cli_push_rcvbuf(call, r->in.bufsize);
 328         rap_cli_expect_multiple_entries(call);
 329         rap_cli_push_dword(call, r->in.servertype);
 330         rap_cli_push_string(call, r->in.domain);
 331
 332         switch(r->in.level) {
 333         case 0:
 334                 rap_cli_expect_format(call, "B16");
 335                 break;
 336         case 1:
 337                 rap_cli_expect_format(call, "B16BBDz");
 338                 break;
 339         }
 340
 341         result = rap_cli_do_call(tree, call);
 342
 343         if (!NT_STATUS_IS_OK(result))
 344                 goto done;
 345
 346         result = NT_STATUS_INVALID_PARAMETER;
 347
 348         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.status));
 349         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.convert));
 350         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.count));
 351         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.available));
 352
 353         r->out.info = talloc_array(mem_ctx, union rap_server_info, r->out.count);
 354
 355         if (r->out.info == NULL) {
 356                 result = NT_STATUS_NO_MEMORY;
 357                 goto done;
 358         }
 359
 360         for (i=0; i<r->out.count; i++) {
 361                 switch(r->in.level) {
 362                 case 0:
 363                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 364                                               (uint8_t *)r->out.info[i].info0.name, 16));
 365                         break;
 366                 case 1:
 367                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 368                                               (uint8_t *)r->out.info[i].info1.name, 16));
 369                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 370                                               &r->out.info[i].info1.version_major, 1));
 371                         NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 372                                               &r->out.info[i].info1.version_minor, 1));
 373                         NDR_OK(ndr_pull_uint32(call->ndr_pull_data,
 374                                                NDR_SCALARS, &r->out.info[i].info1.servertype));
 375                         NDR_OK(rap_pull_string(mem_ctx, call->ndr_pull_data,
 376                                                r->out.convert,
 377                                                &r->out.info[i].info1.comment));
 378                 }
 379         }
 380
 381         result = NT_STATUS_OK;
 382
 383  done:
 384         talloc_free(call);
 385         return result;
 386 }
 387
 388 static bool test_netserverenum(struct smbcli_tree *tree)
 389 {
 390         struct rap_NetServerEnum2 r;
 391         int i;
 392         TALLOC_CTX *tmp_ctx = talloc_new(tree);
 393
 394         r.in.level = 0;
 395         r.in.bufsize = 8192;
 396         r.in.servertype = 0xffffffff;
 397         r.in.servertype = 0x80000000;
 398         r.in.domain = NULL;
 399
 400         if (!NT_STATUS_IS_OK(smbcli_rap_netserverenum2(tree, tmp_ctx, &r)))
 401                 return false;
 402
 403         for (i=0; i<r.out.count; i++) {
 404                 switch (r.in.level) {
 405                 case 0:
 406                         printf("%s\n", r.out.info[i].info0.name);
 407                         break;
 408                 case 1:
 409                         printf("%s %x %s\n", r.out.info[i].info1.name,
 410                                r.out.info[i].info1.servertype,
 411                                r.out.info[i].info1.comment);
 412                         break;
 413                 }
 414         }
 415
 416         talloc_free(tmp_ctx);
 417
 418         return true;
 419 }
 420
 421 _PUBLIC_ NTSTATUS smbcli_rap_netservergetinfo(struct smbcli_tree *tree,
 422                                      TALLOC_CTX *mem_ctx,
 423                                      struct rap_WserverGetInfo *r)
 424 {
 425         struct rap_call *call;
 426         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 427
 428         if (!(call = new_rap_cli_call(mem_ctx, RAP_WserverGetInfo))) {
 429                 return NT_STATUS_NO_MEMORY;
 430         }
 431
 432         rap_cli_push_word(call, r->in.level);
 433         rap_cli_push_rcvbuf(call, r->in.bufsize);
 434         rap_cli_expect_word(call);
 435
 436         switch(r->in.level) {
 437         case 0:
 438                 rap_cli_expect_format(call, "B16");
 439                 break;
 440         case 1:
 441                 rap_cli_expect_format(call, "B16BBDz");
 442                 break;
 443         default:
 444                 result = NT_STATUS_INVALID_PARAMETER;
 445                 goto done;
 446         }
 447
 448         result = rap_cli_do_call(tree, call);
 449
 450         if (!NT_STATUS_IS_OK(result))
 451                 goto done;
 452
 453         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.status));
 454         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.convert));
 455         NDR_OK(ndr_pull_uint16(call->ndr_pull_param, NDR_SCALARS, &r->out.available));
 456
 457         switch(r->in.level) {
 458         case 0:
 459                 NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 460                                       (uint8_t *)r->out.info.info0.name, 16));
 461                 break;
 462         case 1:
 463                 NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 464                                       (uint8_t *)r->out.info.info1.name, 16));
 465                 NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 466                                       &r->out.info.info1.version_major, 1));
 467                 NDR_OK(ndr_pull_bytes(call->ndr_pull_data,
 468                                       &r->out.info.info1.version_minor, 1));
 469                 NDR_OK(ndr_pull_uint32(call->ndr_pull_data,
 470                                        NDR_SCALARS, &r->out.info.info1.servertype));
 471                 NDR_OK(rap_pull_string(mem_ctx, call->ndr_pull_data,
 472                                        r->out.convert,
 473                                        &r->out.info.info1.comment));
 474         }
 475  done:
 476         talloc_free(call);
 477         return result;
 478 }
 479
 480 static bool test_netservergetinfo(struct smbcli_tree *tree)
 481 {
 482         struct rap_WserverGetInfo r;
 483         bool res = true;
 484         TALLOC_CTX *mem_ctx;
 485
 486         if (!(mem_ctx = talloc_new(tree))) {
 487                 return false;
 488         }
 489
 490         r.in.bufsize = 0xffff;
 491
 492         r.in.level = 0;
 493         res &= NT_STATUS_IS_OK(smbcli_rap_netservergetinfo(tree, mem_ctx, &r));
 494         r.in.level = 1;
 495         res &= NT_STATUS_IS_OK(smbcli_rap_netservergetinfo(tree, mem_ctx, &r));
 496
 497         talloc_free(mem_ctx);
 498         return res;
 499 }
 500
 501 static bool test_rap(struct smbcli_tree *tree)
 502 {
 503         bool res = true;
 504
 505         res &= test_netserverenum(tree);
 506         res &= test_netshareenum(tree);
 507         res &= test_netservergetinfo(tree);
 508
 509         return res;
 510 }
 511
 512 bool torture_rap_basic(struct torture_context *torture)
 513 {
 514         struct smbcli_state *cli;
 515         bool ret = true;
 516         TALLOC_CTX *mem_ctx;
 517
 518         if (!torture_open_connection(&cli, 0)) {
 519                 return false;
 520         }
 521
 522         mem_ctx = talloc_init("torture_rap_basic");
 523
 524         if (!test_rap(cli->tree)) {
 525                 ret = false;
 526         }
 527
 528         torture_close_connection(cli);
 529         talloc_free(mem_ctx);
 530
 531         return ret;
 532 }
 533
 534 bool torture_rap_scan(struct torture_context *torture)
 535 {
 536         TALLOC_CTX *mem_ctx;
 537         struct smbcli_state *cli;
 538         int callno;
 539
 540         mem_ctx = talloc_init("torture_rap_scan");
 541
 542         if (!torture_open_connection(&cli, 0)) {
 543                 return false;
 544         }
 545
 546         for (callno = 0; callno < 0xffff; callno++) {
 547                 struct rap_call *call = new_rap_cli_call(mem_ctx, callno);
 548                 NTSTATUS result;
 549
 550                 result = rap_cli_do_call(cli->tree, call);
 551
 552                 if (!NT_STATUS_EQUAL(result, NT_STATUS_INVALID_PARAMETER))
 553                         continue;
 554
 555                 printf("callno %d is RAP call\n", callno);
 556         }
 557
 558         torture_close_connection(cli);
 559
 560         return true;
 561 }
 562
 563 NTSTATUS torture_rap_init(void)
 564 {
 565         struct torture_suite *suite = torture_suite_create(
 566                                                                         talloc_autofree_context(),
 567                                                                         "RAP");
 568
 569         torture_suite_add_simple_test(suite, "BASIC", torture_rap_basic);
 570         torture_suite_add_simple_test(suite, "SCAN", torture_rap_scan);
 571
 572         suite->description = talloc_strdup(suite,
 573                                                 "Remote Administration Protocol tests");
 574
 575         torture_register_suite(suite);
 576
 577         return NT_STATUS_OK;
 578 }