2 Unix SMB/CIFS implementation.
3 client transaction calls
4 Copyright (C) Andrew Tridgell 1994-1998
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 2 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program; if not, write to the Free Software
18 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
24 /****************************************************************************
25 Send a SMB trans or trans2 request.
26 ****************************************************************************/
28 BOOL cli_send_trans(struct cli_state *cli, int trans,
29 const char *pipe_name,
31 uint16 *setup, unsigned int lsetup, unsigned int msetup,
32 const char *param, unsigned int lparam, unsigned int mparam,
33 const char *data, unsigned int ldata, unsigned int mdata)
36 unsigned int this_ldata,this_lparam;
37 unsigned int tot_data=0,tot_param=0;
38 char *outdata,*outparam;
43 this_lparam = MIN(lparam,cli->max_xmit - (500+lsetup*2)); /* hack */
44 this_ldata = MIN(ldata,cli->max_xmit - (500+lsetup*2+this_lparam));
46 memset(cli->outbuf,'\0',smb_size);
47 set_message(cli->outbuf,14+lsetup,0,True);
48 SCVAL(cli->outbuf,smb_com,trans);
49 SSVAL(cli->outbuf,smb_tid, cli->cnum);
50 cli_setup_packet(cli);
53 * Save the mid we're using. We need this for finding
60 pipe_name_len = clistr_push(cli, smb_buf(cli->outbuf), pipe_name, -1, STR_TERMINATE);
63 outparam = smb_buf(cli->outbuf)+(trans==SMBtrans ? pipe_name_len : 3);
64 outdata = outparam+this_lparam;
67 SSVAL(cli->outbuf,smb_tpscnt,lparam); /* tpscnt */
68 SSVAL(cli->outbuf,smb_tdscnt,ldata); /* tdscnt */
69 SSVAL(cli->outbuf,smb_mprcnt,mparam); /* mprcnt */
70 SSVAL(cli->outbuf,smb_mdrcnt,mdata); /* mdrcnt */
71 SCVAL(cli->outbuf,smb_msrcnt,msetup); /* msrcnt */
72 SSVAL(cli->outbuf,smb_flags,flags); /* flags */
73 SIVAL(cli->outbuf,smb_timeout,0); /* timeout */
74 SSVAL(cli->outbuf,smb_pscnt,this_lparam); /* pscnt */
75 SSVAL(cli->outbuf,smb_psoff,smb_offset(outparam,cli->outbuf)); /* psoff */
76 SSVAL(cli->outbuf,smb_dscnt,this_ldata); /* dscnt */
77 SSVAL(cli->outbuf,smb_dsoff,smb_offset(outdata,cli->outbuf)); /* dsoff */
78 SCVAL(cli->outbuf,smb_suwcnt,lsetup); /* suwcnt */
79 for (i=0;i<lsetup;i++) /* setup[] */
80 SSVAL(cli->outbuf,smb_setup+i*2,setup[i]);
81 p = smb_buf(cli->outbuf);
82 if (trans != SMBtrans) {
83 *p++ = 0; /* put in a null smb_name */
84 *p++ = 'D'; *p++ = ' '; /* observed in OS/2 */
86 if (this_lparam) /* param[] */
87 memcpy(outparam,param,this_lparam);
88 if (this_ldata) /* data[] */
89 memcpy(outdata,data,this_ldata);
90 cli_setup_bcc(cli, outdata+this_ldata);
92 show_msg(cli->outbuf);
94 if (!cli_send_smb(cli)) {
98 if (this_ldata < ldata || this_lparam < lparam) {
99 /* receive interim response */
100 if (!cli_receive_smb(cli) || cli_is_error(cli)) {
104 tot_data = this_ldata;
105 tot_param = this_lparam;
107 while (tot_data < ldata || tot_param < lparam) {
108 this_lparam = MIN(lparam-tot_param,cli->max_xmit - 500); /* hack */
109 this_ldata = MIN(ldata-tot_data,cli->max_xmit - (500+this_lparam));
111 set_message(cli->outbuf,trans==SMBtrans?8:9,0,True);
112 SCVAL(cli->outbuf,smb_com,(trans==SMBtrans ? SMBtranss : SMBtranss2));
114 outparam = smb_buf(cli->outbuf);
115 outdata = outparam+this_lparam;
117 /* secondary request */
118 SSVAL(cli->outbuf,smb_tpscnt,lparam); /* tpscnt */
119 SSVAL(cli->outbuf,smb_tdscnt,ldata); /* tdscnt */
120 SSVAL(cli->outbuf,smb_spscnt,this_lparam); /* pscnt */
121 SSVAL(cli->outbuf,smb_spsoff,smb_offset(outparam,cli->outbuf)); /* psoff */
122 SSVAL(cli->outbuf,smb_spsdisp,tot_param); /* psdisp */
123 SSVAL(cli->outbuf,smb_sdscnt,this_ldata); /* dscnt */
124 SSVAL(cli->outbuf,smb_sdsoff,smb_offset(outdata,cli->outbuf)); /* dsoff */
125 SSVAL(cli->outbuf,smb_sdsdisp,tot_data); /* dsdisp */
126 if (trans==SMBtrans2)
127 SSVALS(cli->outbuf,smb_sfid,fid); /* fid */
128 if (this_lparam) /* param[] */
129 memcpy(outparam,param+tot_param,this_lparam);
130 if (this_ldata) /* data[] */
131 memcpy(outdata,data+tot_data,this_ldata);
132 cli_setup_bcc(cli, outdata+this_ldata);
135 * Save the mid we're using. We need this for finding
140 show_msg(cli->outbuf);
141 if (!cli_send_smb(cli)) {
145 /* Ensure we use the same mid for the secondaries. */
148 tot_data += this_ldata;
149 tot_param += this_lparam;
153 /* Note we're in a trans state. Save the sequence
154 * numbers for replies. */
156 cli_signing_trans_start(cli, mid);
160 /****************************************************************************
161 Receive a SMB trans or trans2 response allocating the necessary memory.
162 ****************************************************************************/
164 BOOL cli_receive_trans(struct cli_state *cli,int trans,
165 char **param, unsigned int *param_len,
166 char **data, unsigned int *data_len)
168 unsigned int total_data=0;
169 unsigned int total_param=0;
170 unsigned int this_data,this_param;
173 *data_len = *param_len = 0;
175 if (!cli_receive_smb(cli)) {
176 cli_signing_trans_stop(cli);
180 show_msg(cli->inbuf);
183 if (CVAL(cli->inbuf,smb_com) != trans) {
184 DEBUG(0,("Expected %s response, got command 0x%02x\n",
185 trans==SMBtrans?"SMBtrans":"SMBtrans2",
186 CVAL(cli->inbuf,smb_com)));
187 cli_signing_trans_stop(cli);
192 * An NT RPC pipe call can return ERRDOS, ERRmoredata
193 * to a trans call. This is not an error and should not
194 * be treated as such. Note that STATUS_NO_MORE_FILES is
195 * returned when a trans2 findfirst/next finishes.
197 status = cli_nt_error(cli);
199 if (NT_STATUS_IS_ERR(status) || NT_STATUS_EQUAL(status,STATUS_NO_MORE_FILES)) {
200 cli_signing_trans_stop(cli);
204 /* parse out the lengths */
205 total_data = SVAL(cli->inbuf,smb_tdrcnt);
206 total_param = SVAL(cli->inbuf,smb_tprcnt);
210 *data = SMB_REALLOC(*data,total_data);
212 DEBUG(0,("cli_receive_trans: failed to enlarge data buffer\n"));
213 cli_signing_trans_stop(cli);
218 if (total_param!=0) {
219 *param = SMB_REALLOC(*param,total_param);
221 DEBUG(0,("cli_receive_trans: failed to enlarge param buffer\n"));
222 cli_signing_trans_stop(cli);
228 this_data = SVAL(cli->inbuf,smb_drcnt);
229 this_param = SVAL(cli->inbuf,smb_prcnt);
231 if (this_data + *data_len > total_data ||
232 this_param + *param_len > total_param) {
233 DEBUG(1,("Data overflow in cli_receive_trans\n"));
234 cli_signing_trans_stop(cli);
238 if (this_data + *data_len < this_data ||
239 this_data + *data_len < *data_len ||
240 this_param + *param_len < this_param ||
241 this_param + *param_len < *param_len) {
242 DEBUG(1,("Data overflow in cli_receive_trans\n"));
243 cli_signing_trans_stop(cli);
248 unsigned int data_offset_out = SVAL(cli->inbuf,smb_drdisp);
249 unsigned int data_offset_in = SVAL(cli->inbuf,smb_droff);
251 if (data_offset_out > total_data ||
252 data_offset_out + this_data > total_data ||
253 data_offset_out + this_data < data_offset_out ||
254 data_offset_out + this_data < this_data) {
255 DEBUG(1,("Data overflow in cli_receive_trans\n"));
256 cli_signing_trans_stop(cli);
259 if (data_offset_in > cli->bufsize ||
260 data_offset_in + this_data > cli->bufsize ||
261 data_offset_in + this_data < data_offset_in ||
262 data_offset_in + this_data < this_data) {
263 DEBUG(1,("Data overflow in cli_receive_trans\n"));
264 cli_signing_trans_stop(cli);
268 memcpy(*data + data_offset_out, smb_base(cli->inbuf) + data_offset_in, this_data);
271 unsigned int param_offset_out = SVAL(cli->inbuf,smb_prdisp);
272 unsigned int param_offset_in = SVAL(cli->inbuf,smb_proff);
274 if (param_offset_out > total_param ||
275 param_offset_out + this_param > total_param ||
276 param_offset_out + this_param < param_offset_out ||
277 param_offset_out + this_param < this_param) {
278 DEBUG(1,("Param overflow in cli_receive_trans\n"));
279 cli_signing_trans_stop(cli);
282 if (param_offset_in > cli->bufsize ||
283 param_offset_in + this_param > cli->bufsize ||
284 param_offset_in + this_param < param_offset_in ||
285 param_offset_in + this_param < this_param) {
286 DEBUG(1,("Param overflow in cli_receive_trans\n"));
287 cli_signing_trans_stop(cli);
291 memcpy(*param + param_offset_out, smb_base(cli->inbuf) + param_offset_in, this_param);
293 *data_len += this_data;
294 *param_len += this_param;
296 if (total_data <= *data_len && total_param <= *param_len)
299 if (!cli_receive_smb(cli)) {
300 cli_signing_trans_stop(cli);
304 show_msg(cli->inbuf);
307 if (CVAL(cli->inbuf,smb_com) != trans) {
308 DEBUG(0,("Expected %s response, got command 0x%02x\n",
309 trans==SMBtrans?"SMBtrans":"SMBtrans2",
310 CVAL(cli->inbuf,smb_com)));
311 cli_signing_trans_stop(cli);
314 if (NT_STATUS_IS_ERR(cli_nt_error(cli))) {
315 cli_signing_trans_stop(cli);
319 /* parse out the total lengths again - they can shrink! */
320 if (SVAL(cli->inbuf,smb_tdrcnt) < total_data)
321 total_data = SVAL(cli->inbuf,smb_tdrcnt);
322 if (SVAL(cli->inbuf,smb_tprcnt) < total_param)
323 total_param = SVAL(cli->inbuf,smb_tprcnt);
325 if (total_data <= *data_len && total_param <= *param_len)
330 cli_signing_trans_stop(cli);
334 /****************************************************************************
335 Send a SMB nttrans request.
336 ****************************************************************************/
338 BOOL cli_send_nt_trans(struct cli_state *cli,
341 uint16 *setup, unsigned int lsetup, unsigned int msetup,
342 char *param, unsigned int lparam, unsigned int mparam,
343 char *data, unsigned int ldata, unsigned int mdata)
346 unsigned int this_ldata,this_lparam;
347 unsigned int tot_data=0,tot_param=0;
349 char *outdata,*outparam;
351 this_lparam = MIN(lparam,cli->max_xmit - (500+lsetup*2)); /* hack */
352 this_ldata = MIN(ldata,cli->max_xmit - (500+lsetup*2+this_lparam));
354 memset(cli->outbuf,'\0',smb_size);
355 set_message(cli->outbuf,19+lsetup,0,True);
356 SCVAL(cli->outbuf,smb_com,SMBnttrans);
357 SSVAL(cli->outbuf,smb_tid, cli->cnum);
358 cli_setup_packet(cli);
361 * Save the mid we're using. We need this for finding
367 outparam = smb_buf(cli->outbuf)+3;
368 outdata = outparam+this_lparam;
370 /* primary request */
371 SCVAL(cli->outbuf,smb_nt_MaxSetupCount,msetup);
372 SCVAL(cli->outbuf,smb_nt_Flags,flags);
373 SIVAL(cli->outbuf,smb_nt_TotalParameterCount, lparam);
374 SIVAL(cli->outbuf,smb_nt_TotalDataCount, ldata);
375 SIVAL(cli->outbuf,smb_nt_MaxParameterCount, mparam);
376 SIVAL(cli->outbuf,smb_nt_MaxDataCount, mdata);
377 SIVAL(cli->outbuf,smb_nt_ParameterCount, this_lparam);
378 SIVAL(cli->outbuf,smb_nt_ParameterOffset, smb_offset(outparam,cli->outbuf));
379 SIVAL(cli->outbuf,smb_nt_DataCount, this_ldata);
380 SIVAL(cli->outbuf,smb_nt_DataOffset, smb_offset(outdata,cli->outbuf));
381 SIVAL(cli->outbuf,smb_nt_SetupCount, lsetup);
382 SIVAL(cli->outbuf,smb_nt_Function, function);
383 for (i=0;i<lsetup;i++) /* setup[] */
384 SSVAL(cli->outbuf,smb_nt_SetupStart+i*2,setup[i]);
386 if (this_lparam) /* param[] */
387 memcpy(outparam,param,this_lparam);
388 if (this_ldata) /* data[] */
389 memcpy(outdata,data,this_ldata);
391 cli_setup_bcc(cli, outdata+this_ldata);
393 show_msg(cli->outbuf);
394 if (!cli_send_smb(cli)) {
398 if (this_ldata < ldata || this_lparam < lparam) {
399 /* receive interim response */
400 if (!cli_receive_smb(cli) || cli_is_error(cli)) {
404 tot_data = this_ldata;
405 tot_param = this_lparam;
407 while (tot_data < ldata || tot_param < lparam) {
408 this_lparam = MIN(lparam-tot_param,cli->max_xmit - 500); /* hack */
409 this_ldata = MIN(ldata-tot_data,cli->max_xmit - (500+this_lparam));
411 set_message(cli->outbuf,18,0,True);
412 SCVAL(cli->outbuf,smb_com,SMBnttranss);
414 /* XXX - these should probably be aligned */
415 outparam = smb_buf(cli->outbuf);
416 outdata = outparam+this_lparam;
418 /* secondary request */
419 SIVAL(cli->outbuf,smb_nts_TotalParameterCount,lparam);
420 SIVAL(cli->outbuf,smb_nts_TotalDataCount,ldata);
421 SIVAL(cli->outbuf,smb_nts_ParameterCount,this_lparam);
422 SIVAL(cli->outbuf,smb_nts_ParameterOffset,smb_offset(outparam,cli->outbuf));
423 SIVAL(cli->outbuf,smb_nts_ParameterDisplacement,tot_param);
424 SIVAL(cli->outbuf,smb_nts_DataCount,this_ldata);
425 SIVAL(cli->outbuf,smb_nts_DataOffset,smb_offset(outdata,cli->outbuf));
426 SIVAL(cli->outbuf,smb_nts_DataDisplacement,tot_data);
427 if (this_lparam) /* param[] */
428 memcpy(outparam,param+tot_param,this_lparam);
429 if (this_ldata) /* data[] */
430 memcpy(outdata,data+tot_data,this_ldata);
431 cli_setup_bcc(cli, outdata+this_ldata);
434 * Save the mid we're using. We need this for finding
439 show_msg(cli->outbuf);
441 if (!cli_send_smb(cli)) {
445 /* Ensure we use the same mid for the secondaries. */
448 tot_data += this_ldata;
449 tot_param += this_lparam;
453 /* Note we're in a trans state. Save the sequence
454 * numbers for replies. */
456 cli_signing_trans_start(cli, mid);
460 /****************************************************************************
461 Receive a SMB nttrans response allocating the necessary memory.
462 ****************************************************************************/
464 BOOL cli_receive_nt_trans(struct cli_state *cli,
465 char **param, unsigned int *param_len,
466 char **data, unsigned int *data_len)
468 unsigned int total_data=0;
469 unsigned int total_param=0;
470 unsigned int this_data,this_param;
474 *data_len = *param_len = 0;
476 if (!cli_receive_smb(cli)) {
477 cli_signing_trans_stop(cli);
481 show_msg(cli->inbuf);
484 if (CVAL(cli->inbuf,smb_com) != SMBnttrans) {
485 DEBUG(0,("Expected SMBnttrans response, got command 0x%02x\n",
486 CVAL(cli->inbuf,smb_com)));
487 cli_signing_trans_stop(cli);
492 * An NT RPC pipe call can return ERRDOS, ERRmoredata
493 * to a trans call. This is not an error and should not
494 * be treated as such.
496 if (cli_is_dos_error(cli)) {
497 cli_dos_error(cli, &eclass, &ecode);
498 if (!(eclass == ERRDOS && ecode == ERRmoredata)) {
499 cli_signing_trans_stop(cli);
505 * Likewise for NT_STATUS_BUFFER_TOO_SMALL
507 if (cli_is_nt_error(cli)) {
508 if (!NT_STATUS_EQUAL(cli_nt_error(cli),
509 NT_STATUS_BUFFER_TOO_SMALL)) {
510 cli_signing_trans_stop(cli);
515 /* parse out the lengths */
516 total_data = SVAL(cli->inbuf,smb_ntr_TotalDataCount);
517 total_param = SVAL(cli->inbuf,smb_ntr_TotalParameterCount);
521 *data = SMB_REALLOC(*data,total_data);
523 DEBUG(0,("cli_receive_nt_trans: failed to enlarge data buffer to %d\n",total_data));
524 cli_signing_trans_stop(cli);
530 *param = SMB_REALLOC(*param,total_param);
532 DEBUG(0,("cli_receive_nt_trans: failed to enlarge param buffer to %d\n", total_param));
533 cli_signing_trans_stop(cli);
539 this_data = SVAL(cli->inbuf,smb_ntr_DataCount);
540 this_param = SVAL(cli->inbuf,smb_ntr_ParameterCount);
542 if (this_data + *data_len > total_data ||
543 this_param + *param_len > total_param) {
544 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
545 cli_signing_trans_stop(cli);
549 if (this_data + *data_len < this_data ||
550 this_data + *data_len < *data_len ||
551 this_param + *param_len < this_param ||
552 this_param + *param_len < *param_len) {
553 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
554 cli_signing_trans_stop(cli);
559 unsigned int data_offset_out = SVAL(cli->inbuf,smb_ntr_DataDisplacement);
560 unsigned int data_offset_in = SVAL(cli->inbuf,smb_ntr_DataOffset);
562 if (data_offset_out > total_data ||
563 data_offset_out + this_data > total_data ||
564 data_offset_out + this_data < data_offset_out ||
565 data_offset_out + this_data < this_data) {
566 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
567 cli_signing_trans_stop(cli);
570 if (data_offset_in > cli->bufsize ||
571 data_offset_in + this_data > cli->bufsize ||
572 data_offset_in + this_data < data_offset_in ||
573 data_offset_in + this_data < this_data) {
574 DEBUG(1,("Data overflow in cli_receive_nt_trans\n"));
575 cli_signing_trans_stop(cli);
579 memcpy(*data + data_offset_out, smb_base(cli->inbuf) + data_offset_in, this_data);
583 unsigned int param_offset_out = SVAL(cli->inbuf,smb_ntr_ParameterDisplacement);
584 unsigned int param_offset_in = SVAL(cli->inbuf,smb_ntr_ParameterOffset);
586 if (param_offset_out > total_param ||
587 param_offset_out + this_param > total_param ||
588 param_offset_out + this_param < param_offset_out ||
589 param_offset_out + this_param < this_param) {
590 DEBUG(1,("Param overflow in cli_receive_nt_trans\n"));
591 cli_signing_trans_stop(cli);
594 if (param_offset_in > cli->bufsize ||
595 param_offset_in + this_param > cli->bufsize ||
596 param_offset_in + this_param < param_offset_in ||
597 param_offset_in + this_param < this_param) {
598 DEBUG(1,("Param overflow in cli_receive_nt_trans\n"));
599 cli_signing_trans_stop(cli);
603 memcpy(*param + param_offset_out, smb_base(cli->inbuf) + param_offset_in, this_param);
606 *data_len += this_data;
607 *param_len += this_param;
609 if (total_data <= *data_len && total_param <= *param_len)
612 if (!cli_receive_smb(cli)) {
613 cli_signing_trans_stop(cli);
617 show_msg(cli->inbuf);
620 if (CVAL(cli->inbuf,smb_com) != SMBnttrans) {
621 DEBUG(0,("Expected SMBnttrans response, got command 0x%02x\n",
622 CVAL(cli->inbuf,smb_com)));
623 cli_signing_trans_stop(cli);
626 if (cli_is_dos_error(cli)) {
627 cli_dos_error(cli, &eclass, &ecode);
628 if(!(eclass == ERRDOS && ecode == ERRmoredata)) {
629 cli_signing_trans_stop(cli);
634 * Likewise for NT_STATUS_BUFFER_TOO_SMALL
636 if (cli_is_nt_error(cli)) {
637 if (!NT_STATUS_EQUAL(cli_nt_error(cli),
638 NT_STATUS_BUFFER_TOO_SMALL)) {
639 cli_signing_trans_stop(cli);
644 /* parse out the total lengths again - they can shrink! */
645 if (SVAL(cli->inbuf,smb_ntr_TotalDataCount) < total_data)
646 total_data = SVAL(cli->inbuf,smb_ntr_TotalDataCount);
647 if (SVAL(cli->inbuf,smb_ntr_TotalParameterCount) < total_param)
648 total_param = SVAL(cli->inbuf,smb_ntr_TotalParameterCount);
650 if (total_data <= *data_len && total_param <= *param_len)
654 cli_signing_trans_stop(cli);