1da6c28aaSamw /* 2da6c28aaSamw * CDDL HEADER START 3da6c28aaSamw * 4da6c28aaSamw * The contents of this file are subject to the terms of the 5da6c28aaSamw * Common Development and Distribution License (the "License"). 6da6c28aaSamw * You may not use this file except in compliance with the License. 7da6c28aaSamw * 8da6c28aaSamw * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9da6c28aaSamw * or http://www.opensolaris.org/os/licensing. 10da6c28aaSamw * See the License for the specific language governing permissions 11da6c28aaSamw * and limitations under the License. 12da6c28aaSamw * 13da6c28aaSamw * When distributing Covered Code, include this CDDL HEADER in each 14da6c28aaSamw * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15da6c28aaSamw * If applicable, add the following below this CDDL HEADER, with the 16da6c28aaSamw * fields enclosed by brackets "[]" replaced with your own identifying 17da6c28aaSamw * information: Portions Copyright [yyyy] [name of copyright owner] 18da6c28aaSamw * 19da6c28aaSamw * CDDL HEADER END 20da6c28aaSamw */ 21148c5f43SAlan Wright 22da6c28aaSamw /* 23c5866007SKeyur Desai * Copyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved. 24adee6784SGordon Ross * Copyright 2018 Nexenta Systems, Inc. All rights reserved. 25da6c28aaSamw */ 26da6c28aaSamw 27bbf6f00cSJordan Brown #include <smbsrv/smb_kproto.h> 28da6c28aaSamw #include <smbsrv/smb_fsops.h> 293db3f65cSamw #include <smbsrv/smb_share.h> 30bbf6f00cSJordan Brown #include <smbsrv/string.h> 31da6c28aaSamw #include <smbsrv/nmpipes.h> 32da6c28aaSamw #include <smbsrv/mailslot.h> 33adee6784SGordon Ross #include <smb/winioctl.h> 34da6c28aaSamw 35da6c28aaSamw /* 36da6c28aaSamw * count of bytes in server response packet 37da6c28aaSamw * except parameters and data. Note that setup 38da6c28aaSamw * word count is zero. 39da6c28aaSamw */ 40da6c28aaSamw #define RESP_HEADER_LEN 24 41da6c28aaSamw 42da6c28aaSamw /* 43b1352070SAlan Wright * We started by using common functions for transaction/transaction2 44da6c28aaSamw * and transaction_secondary/transaction2_secondary because they 45da6c28aaSamw * are respectively so similar. However, it turned out to be a bad 46da6c28aaSamw * idea because of quirky differences. Be sure if you modify one 47da6c28aaSamw * of these four functions to check and see if the modification should 48da6c28aaSamw * be applied to its peer. 49da6c28aaSamw */ 50da6c28aaSamw 519fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States static int smb_trans_ready(smb_xa_t *); 529fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States static smb_sdrc_t smb_trans_dispatch(smb_request_t *, smb_xa_t *); 539fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States static smb_sdrc_t smb_trans2_dispatch(smb_request_t *, smb_xa_t *); 54da6c28aaSamw 557b59d02dSjb150015 smb_sdrc_t 56faa1795aSjb150015 smb_pre_transaction(smb_request_t *sr) 57faa1795aSjb150015 { 5893bc28dbSGordon Ross DTRACE_SMB_START(op__Transaction, smb_request_t *, sr); 59faa1795aSjb150015 return (SDRC_SUCCESS); 60faa1795aSjb150015 } 61faa1795aSjb150015 62faa1795aSjb150015 void 63faa1795aSjb150015 smb_post_transaction(smb_request_t *sr) 64faa1795aSjb150015 { 6593bc28dbSGordon Ross DTRACE_SMB_DONE(op__Transaction, smb_request_t *, sr); 66faa1795aSjb150015 } 67faa1795aSjb150015 68faa1795aSjb150015 smb_sdrc_t 69faa1795aSjb150015 smb_com_transaction(smb_request_t *sr) 70da6c28aaSamw { 71da6c28aaSamw int rc; 72da6c28aaSamw unsigned char msrcnt, suwcnt; 73da6c28aaSamw uint16_t tpscnt, tdscnt, mprcnt, mdrcnt, flags; 74da6c28aaSamw uint16_t pscnt, psoff, dscnt, dsoff; 75da6c28aaSamw uint32_t timeo; 76da6c28aaSamw struct smb_xa *xa; 77da6c28aaSamw char *stn; 78da6c28aaSamw int ready; 79da6c28aaSamw 80a90cf9f2SGordon Ross if (!STYPE_ISIPC(sr->tid_tree->t_res_type)) { 81a90cf9f2SGordon Ross smbsr_error(sr, 0, ERRDOS, ERRnoaccess); 82a90cf9f2SGordon Ross return (SDRC_ERROR); 83a90cf9f2SGordon Ross } 84a90cf9f2SGordon Ross 85da6c28aaSamw rc = smbsr_decode_vwv(sr, SMB_TRANSHDR_ED_FMT, 86da6c28aaSamw &tpscnt, &tdscnt, &mprcnt, &mdrcnt, &msrcnt, &flags, 87da6c28aaSamw &timeo, &pscnt, &psoff, &dscnt, &dsoff, &suwcnt); 88da6c28aaSamw 897b59d02dSjb150015 if (rc != 0) 90faa1795aSjb150015 return (SDRC_ERROR); 91da6c28aaSamw 92da6c28aaSamw xa = smb_xa_create(sr->session, sr, tpscnt, tdscnt, mprcnt, mdrcnt, 93da6c28aaSamw msrcnt, suwcnt); 94da6c28aaSamw if (xa == NULL) { 95dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRnoroom); 96faa1795aSjb150015 return (SDRC_ERROR); 97da6c28aaSamw } 98da6c28aaSamw 99da6c28aaSamw /* Should be some alignment stuff here in SMB? */ 100da6c28aaSamw if (sr->smb_flg2 & SMB_FLAGS2_UNICODE) { 101da6c28aaSamw rc = smbsr_decode_data(sr, "%.U", sr, &stn); 102da6c28aaSamw } else { 103da6c28aaSamw rc = smbsr_decode_data(sr, "%s", sr, &stn); 104da6c28aaSamw } 105da6c28aaSamw if (rc != 0) { 106da6c28aaSamw smb_xa_rele(sr->session, xa); 107faa1795aSjb150015 return (SDRC_ERROR); 108da6c28aaSamw } 109da6c28aaSamw 1109fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States xa->xa_pipe_name = smb_mem_strdup(stn); 111da6c28aaSamw xa->smb_flags = flags; 112da6c28aaSamw xa->smb_timeout = timeo; 113da6c28aaSamw xa->req_disp_param = pscnt; 114da6c28aaSamw xa->req_disp_data = dscnt; 115da6c28aaSamw 1167f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_setup_mb, &sr->smb_vwv, 117da6c28aaSamw sr->smb_vwv.chain_offset, suwcnt * 2)) { 118da6c28aaSamw smb_xa_rele(sr->session, xa); 119dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 120faa1795aSjb150015 return (SDRC_ERROR); 121da6c28aaSamw } 1227f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_param_mb, &sr->command, psoff, pscnt)) { 123da6c28aaSamw smb_xa_rele(sr->session, xa); 124dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 125faa1795aSjb150015 return (SDRC_ERROR); 126da6c28aaSamw } 1277f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_data_mb, &sr->command, dsoff, dscnt)) { 128da6c28aaSamw smb_xa_rele(sr->session, xa); 129dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 130faa1795aSjb150015 return (SDRC_ERROR); 131da6c28aaSamw } 132da6c28aaSamw 133da6c28aaSamw ready = smb_trans_ready(xa); 134da6c28aaSamw 135da6c28aaSamw if (smb_xa_open(xa)) { 136da6c28aaSamw smb_xa_rele(sr->session, xa); 137ccc71be5SGordon Ross smbsr_error(sr, 0, ERRSRV, ERRsrverror); 138faa1795aSjb150015 return (SDRC_ERROR); 139da6c28aaSamw } 140da6c28aaSamw sr->r_xa = xa; 141da6c28aaSamw 142da6c28aaSamw if (!ready) { 1437b59d02dSjb150015 rc = smbsr_encode_empty_result(sr); 144faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 145da6c28aaSamw } 146da6c28aaSamw 147da6c28aaSamw if (!smb_xa_complete(xa)) { 148da6c28aaSamw smb_xa_close(xa); 149dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 150faa1795aSjb150015 return (SDRC_ERROR); 151da6c28aaSamw } 152da6c28aaSamw 153da6c28aaSamw return (smb_trans_dispatch(sr, xa)); 154da6c28aaSamw } 155da6c28aaSamw 1567b59d02dSjb150015 smb_sdrc_t 157faa1795aSjb150015 smb_pre_transaction_secondary(smb_request_t *sr) 158faa1795aSjb150015 { 15993bc28dbSGordon Ross DTRACE_SMB_START(op__TransactionSecondary, smb_request_t *, sr); 160faa1795aSjb150015 return (SDRC_SUCCESS); 161faa1795aSjb150015 } 162faa1795aSjb150015 163faa1795aSjb150015 void 164faa1795aSjb150015 smb_post_transaction_secondary(smb_request_t *sr) 165faa1795aSjb150015 { 16693bc28dbSGordon Ross DTRACE_SMB_DONE(op__TransactionSecondary, smb_request_t *, sr); 167faa1795aSjb150015 } 168faa1795aSjb150015 169faa1795aSjb150015 smb_sdrc_t 170faa1795aSjb150015 smb_com_transaction_secondary(smb_request_t *sr) 171da6c28aaSamw { 172da6c28aaSamw uint16_t tpscnt, tdscnt, pscnt, psdisp; 173da6c28aaSamw uint16_t dscnt, dsoff, dsdisp, psoff; 174da6c28aaSamw smb_xa_t *xa; 175da6c28aaSamw int rc; 176da6c28aaSamw 177da6c28aaSamw if ((xa = smbsr_lookup_xa(sr)) == 0) { 178dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRsrverror); 179faa1795aSjb150015 return (SDRC_ERROR); 180da6c28aaSamw } 181da6c28aaSamw 182da6c28aaSamw if (sr->session->signing.flags & SMB_SIGNING_ENABLED) { 183da6c28aaSamw if (smb_sign_check_secondary(sr, xa->reply_seqnum) != 0) { 184dc20a302Sas200622 smbsr_error(sr, NT_STATUS_ACCESS_DENIED, 185da6c28aaSamw ERRDOS, ERRnoaccess); 186faa1795aSjb150015 return (SDRC_ERROR); 187da6c28aaSamw } 188da6c28aaSamw } 189da6c28aaSamw 190da6c28aaSamw if (xa->smb_com != SMB_COM_TRANSACTION) { 191da6c28aaSamw return (SDRC_DROP_VC); 192da6c28aaSamw } 193da6c28aaSamw 194da6c28aaSamw rc = smbsr_decode_vwv(sr, SMB_TRANSSHDR_ED_FMT, &tpscnt, &tdscnt, 195da6c28aaSamw &pscnt, &psoff, &psdisp, &dscnt, &dsoff, &dsdisp); 196da6c28aaSamw 1977b59d02dSjb150015 if (rc != 0) 198faa1795aSjb150015 return (SDRC_ERROR); 199da6c28aaSamw 200da6c28aaSamw mutex_enter(&xa->xa_mutex); 2017f3ef643SGordon Ross if (xa->smb_tpscnt > tpscnt) 2027f3ef643SGordon Ross xa->smb_tpscnt = tpscnt; 2037f3ef643SGordon Ross if (xa->smb_tdscnt > tdscnt) 2047f3ef643SGordon Ross xa->smb_tdscnt = tdscnt; 205da6c28aaSamw xa->req_disp_param = psdisp + pscnt; 206da6c28aaSamw xa->req_disp_data = dsdisp + dscnt; 207da6c28aaSamw 2087f3ef643SGordon Ross /* 2097f3ef643SGordon Ross * The words psdisp, dsdisp, tell us what displacement 2107f3ef643SGordon Ross * into the entire trans parameter and data buffers 2117f3ef643SGordon Ross * where we should put the params & data that are 2127f3ef643SGordon Ross * delivered by this request. [MS-CIFS] says all the 2137f3ef643SGordon Ross * parameters and data SHOULD be sent sequentially, so 2147f3ef643SGordon Ross * so we can normally reassemble by simply appending. 2157f3ef643SGordon Ross * However, the components MAY come out of order, so 2167f3ef643SGordon Ross * check and set the current offset. This is rare, 2177f3ef643SGordon Ross * and we might like to know when this happens, so 2187f3ef643SGordon Ross * fire some static dtrace probes when it does. 2197f3ef643SGordon Ross */ 2207f3ef643SGordon Ross if (xa->req_param_mb.chain_offset != psdisp) { 2217f3ef643SGordon Ross DTRACE_PROBE2(trans_param_disp, 2227f3ef643SGordon Ross smb_xa_t *, xa, uint16_t, psdisp); 2237f3ef643SGordon Ross xa->req_param_mb.chain_offset = psdisp; 2247f3ef643SGordon Ross } 2257f3ef643SGordon Ross if (xa->req_data_mb.chain_offset != dsdisp) { 2267f3ef643SGordon Ross DTRACE_PROBE2(trans_data_disp, 2277f3ef643SGordon Ross smb_xa_t *, xa, uint16_t, dsdisp); 2287f3ef643SGordon Ross xa->req_data_mb.chain_offset = dsdisp; 2297f3ef643SGordon Ross } 2307f3ef643SGordon Ross 2317f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_param_mb, &sr->command, psoff, pscnt)) { 232da6c28aaSamw mutex_exit(&xa->xa_mutex); 233da6c28aaSamw smb_xa_close(xa); 234dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 235faa1795aSjb150015 return (SDRC_ERROR); 236da6c28aaSamw } 2377f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_data_mb, &sr->command, dsoff, dscnt)) { 238da6c28aaSamw mutex_exit(&xa->xa_mutex); 239da6c28aaSamw smb_xa_close(xa); 240dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 241faa1795aSjb150015 return (SDRC_ERROR); 242da6c28aaSamw } 243da6c28aaSamw mutex_exit(&xa->xa_mutex); 244da6c28aaSamw 245da6c28aaSamw if (!smb_trans_ready(xa)) 246da6c28aaSamw return (SDRC_NO_REPLY); 247da6c28aaSamw 248da6c28aaSamw if (!smb_xa_complete(xa)) 249da6c28aaSamw return (SDRC_NO_REPLY); 250da6c28aaSamw 251da6c28aaSamw return (smb_trans_dispatch(sr, xa)); 252da6c28aaSamw } 253da6c28aaSamw 2547b59d02dSjb150015 smb_sdrc_t 255faa1795aSjb150015 smb_pre_ioctl(smb_request_t *sr) 256faa1795aSjb150015 { 25793bc28dbSGordon Ross DTRACE_SMB_START(op__Ioctl, smb_request_t *, sr); 258faa1795aSjb150015 return (SDRC_SUCCESS); 259faa1795aSjb150015 } 260faa1795aSjb150015 261faa1795aSjb150015 void 262faa1795aSjb150015 smb_post_ioctl(smb_request_t *sr) 263faa1795aSjb150015 { 26493bc28dbSGordon Ross DTRACE_SMB_DONE(op__Ioctl, smb_request_t *, sr); 265faa1795aSjb150015 } 266faa1795aSjb150015 267faa1795aSjb150015 smb_sdrc_t 268faa1795aSjb150015 smb_com_ioctl(smb_request_t *sr) 269da6c28aaSamw { 270da6c28aaSamw uint16_t fid, category, function, tpscnt, tdscnt, mprcnt; 271da6c28aaSamw uint16_t mdrcnt, pscnt, pdoff, dscnt, dsoff; 272da6c28aaSamw uint32_t timeout; 273da6c28aaSamw int rc; 274da6c28aaSamw 275da6c28aaSamw rc = smbsr_decode_vwv(sr, "wwwwwwwl2.wwww", &fid, &category, &function, 276da6c28aaSamw &tpscnt, &tdscnt, &mprcnt, &mdrcnt, &timeout, &pscnt, 277da6c28aaSamw &pdoff, &dscnt, &dsoff); 278da6c28aaSamw 2797b59d02dSjb150015 if (rc != 0) 280faa1795aSjb150015 return (SDRC_ERROR); 281da6c28aaSamw 282faa1795aSjb150015 return (SDRC_NOT_IMPLEMENTED); 283da6c28aaSamw } 284da6c28aaSamw 285faa1795aSjb150015 smb_sdrc_t 286faa1795aSjb150015 smb_pre_transaction2(smb_request_t *sr) 287da6c28aaSamw { 28893bc28dbSGordon Ross DTRACE_SMB_START(op__Transaction2, smb_request_t *, sr); 289faa1795aSjb150015 return (SDRC_SUCCESS); 290faa1795aSjb150015 } 291faa1795aSjb150015 292faa1795aSjb150015 void 293faa1795aSjb150015 smb_post_transaction2(smb_request_t *sr) 294faa1795aSjb150015 { 29593bc28dbSGordon Ross DTRACE_SMB_DONE(op__Transaction2, smb_request_t *, sr); 296da6c28aaSamw } 297da6c28aaSamw 2987b59d02dSjb150015 smb_sdrc_t 299da6c28aaSamw smb_com_transaction2(struct smb_request *sr) 300da6c28aaSamw { 301da6c28aaSamw unsigned char msrcnt, suwcnt; 302da6c28aaSamw uint16_t tpscnt, tdscnt, mprcnt, mdrcnt, flags; 303da6c28aaSamw uint16_t pscnt, psoff, dscnt, dsoff; 304da6c28aaSamw uint32_t timeo; 305da6c28aaSamw smb_xa_t *xa; 306da6c28aaSamw int ready; 307da6c28aaSamw int rc; 308da6c28aaSamw 309da6c28aaSamw rc = smbsr_decode_vwv(sr, SMB_TRANSHDR_ED_FMT, &tpscnt, &tdscnt, 310da6c28aaSamw &mprcnt, &mdrcnt, &msrcnt, &flags, &timeo, &pscnt, &psoff, &dscnt, 311da6c28aaSamw &dsoff, &suwcnt); 312da6c28aaSamw 3137b59d02dSjb150015 if (rc != 0) 314faa1795aSjb150015 return (SDRC_ERROR); 315da6c28aaSamw 316da6c28aaSamw xa = smb_xa_create(sr->session, sr, tpscnt, tdscnt, mprcnt, mdrcnt, 317da6c28aaSamw msrcnt, suwcnt); 318da6c28aaSamw if (xa == 0) { 319dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRnoroom); 320faa1795aSjb150015 return (SDRC_ERROR); 321da6c28aaSamw } 322da6c28aaSamw 323da6c28aaSamw xa->smb_flags = flags; 324da6c28aaSamw xa->smb_timeout = timeo; 325da6c28aaSamw xa->req_disp_param = pscnt; 326da6c28aaSamw xa->req_disp_data = dscnt; 327da6c28aaSamw 3287f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_setup_mb, &sr->smb_vwv, 329da6c28aaSamw sr->smb_vwv.chain_offset, suwcnt*2)) { 330da6c28aaSamw smb_xa_rele(sr->session, xa); 331dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 332faa1795aSjb150015 return (SDRC_ERROR); 333da6c28aaSamw } 3347f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_param_mb, &sr->command, psoff, pscnt)) { 335da6c28aaSamw smb_xa_rele(sr->session, xa); 336dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 337faa1795aSjb150015 return (SDRC_ERROR); 338da6c28aaSamw } 3397f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_data_mb, &sr->command, dsoff, dscnt)) { 340da6c28aaSamw smb_xa_rele(sr->session, xa); 341dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 342faa1795aSjb150015 return (SDRC_ERROR); 343da6c28aaSamw } 344da6c28aaSamw 345da6c28aaSamw ready = smb_trans_ready(xa); 346da6c28aaSamw 347da6c28aaSamw if (smb_xa_open(xa)) { 348da6c28aaSamw smb_xa_rele(sr->session, xa); 349ccc71be5SGordon Ross smbsr_error(sr, 0, ERRSRV, ERRsrverror); 350faa1795aSjb150015 return (SDRC_ERROR); 351da6c28aaSamw } 352da6c28aaSamw sr->r_xa = xa; 353da6c28aaSamw 354da6c28aaSamw if (!ready) { 3557b59d02dSjb150015 rc = smbsr_encode_empty_result(sr); 356faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 357da6c28aaSamw } 358da6c28aaSamw 359da6c28aaSamw if (!smb_xa_complete(xa)) { 360da6c28aaSamw smb_xa_close(xa); 361dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 362faa1795aSjb150015 return (SDRC_ERROR); 363da6c28aaSamw } 364da6c28aaSamw 365da6c28aaSamw return (smb_trans2_dispatch(sr, xa)); 366da6c28aaSamw } 367da6c28aaSamw 3687b59d02dSjb150015 smb_sdrc_t 369faa1795aSjb150015 smb_pre_transaction2_secondary(smb_request_t *sr) 370faa1795aSjb150015 { 37193bc28dbSGordon Ross DTRACE_SMB_START(op__Transaction2Secondary, smb_request_t *, sr); 372faa1795aSjb150015 return (SDRC_SUCCESS); 373faa1795aSjb150015 } 374faa1795aSjb150015 375faa1795aSjb150015 void 376faa1795aSjb150015 smb_post_transaction2_secondary(smb_request_t *sr) 377faa1795aSjb150015 { 37893bc28dbSGordon Ross DTRACE_SMB_DONE(op__Transaction2Secondary, smb_request_t *, sr); 379faa1795aSjb150015 } 380faa1795aSjb150015 381faa1795aSjb150015 smb_sdrc_t 382faa1795aSjb150015 smb_com_transaction2_secondary(smb_request_t *sr) 383da6c28aaSamw { 384da6c28aaSamw uint16_t tpscnt, tdscnt, fid; 385da6c28aaSamw uint16_t pscnt, psoff, psdisp, dscnt, dsoff, dsdisp; 386da6c28aaSamw smb_xa_t *xa; 387da6c28aaSamw int rc; 388da6c28aaSamw 389da6c28aaSamw if ((xa = smbsr_lookup_xa(sr)) == 0) { 390dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRsrverror); 391faa1795aSjb150015 return (SDRC_ERROR); 392da6c28aaSamw } 393da6c28aaSamw 394da6c28aaSamw if (sr->session->signing.flags & SMB_SIGNING_ENABLED) { 395da6c28aaSamw if (smb_sign_check_secondary(sr, xa->reply_seqnum) != 0) { 396dc20a302Sas200622 smbsr_error(sr, NT_STATUS_ACCESS_DENIED, 397da6c28aaSamw ERRDOS, ERRnoaccess); 398faa1795aSjb150015 return (SDRC_ERROR); 399da6c28aaSamw } 400da6c28aaSamw } 401da6c28aaSamw 402da6c28aaSamw if (xa->smb_com != SMB_COM_TRANSACTION2) { 403da6c28aaSamw return (SDRC_DROP_VC); 404da6c28aaSamw } 405da6c28aaSamw 406da6c28aaSamw rc = smbsr_decode_vwv(sr, SMB_TRANS2SHDR_ED_FMT, &tpscnt, &tdscnt, 407da6c28aaSamw &pscnt, &psoff, &psdisp, &dscnt, &dsoff, &dsdisp, &fid); 408da6c28aaSamw 4097b59d02dSjb150015 if (rc != 0) 410faa1795aSjb150015 return (SDRC_ERROR); 411da6c28aaSamw 412da6c28aaSamw mutex_enter(&xa->xa_mutex); 4137f3ef643SGordon Ross if (xa->smb_tpscnt > tpscnt) 4147f3ef643SGordon Ross xa->smb_tpscnt = tpscnt; 4157f3ef643SGordon Ross if (xa->smb_tdscnt > tdscnt) 4167f3ef643SGordon Ross xa->smb_tdscnt = tdscnt; 4177f3ef643SGordon Ross if (fid != 0xFFFF) 4187f3ef643SGordon Ross xa->xa_smb_fid = fid; 419da6c28aaSamw xa->req_disp_param = psdisp + pscnt; 420da6c28aaSamw xa->req_disp_data = dsdisp + dscnt; 421da6c28aaSamw 4227f3ef643SGordon Ross /* 4237f3ef643SGordon Ross * See comment in smb_com_transaction_secondary 4247f3ef643SGordon Ross */ 4257f3ef643SGordon Ross if (xa->req_param_mb.chain_offset != psdisp) { 4267f3ef643SGordon Ross DTRACE_PROBE2(trans_param_disp, 4277f3ef643SGordon Ross smb_xa_t *, xa, uint16_t, psdisp); 4287f3ef643SGordon Ross xa->req_param_mb.chain_offset = psdisp; 4297f3ef643SGordon Ross } 4307f3ef643SGordon Ross if (xa->req_data_mb.chain_offset != dsdisp) { 4317f3ef643SGordon Ross DTRACE_PROBE2(trans_data_disp, 4327f3ef643SGordon Ross smb_xa_t *, xa, uint16_t, dsdisp); 4337f3ef643SGordon Ross xa->req_data_mb.chain_offset = dsdisp; 4347f3ef643SGordon Ross } 4357f3ef643SGordon Ross 4367f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_param_mb, &sr->command, psoff, pscnt)) { 437da6c28aaSamw mutex_exit(&xa->xa_mutex); 438da6c28aaSamw smb_xa_close(xa); 439dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 440faa1795aSjb150015 return (SDRC_ERROR); 441da6c28aaSamw } 4427f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_data_mb, &sr->command, dsoff, dscnt)) { 443da6c28aaSamw mutex_exit(&xa->xa_mutex); 444da6c28aaSamw smb_xa_close(xa); 445dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 446faa1795aSjb150015 return (SDRC_ERROR); 447da6c28aaSamw } 448da6c28aaSamw mutex_exit(&xa->xa_mutex); 449da6c28aaSamw 450da6c28aaSamw if (!smb_trans_ready(xa)) 451da6c28aaSamw return (SDRC_NO_REPLY); 452da6c28aaSamw 453da6c28aaSamw if (!smb_xa_complete(xa)) 454da6c28aaSamw return (SDRC_NO_REPLY); 455da6c28aaSamw 456da6c28aaSamw return (smb_trans2_dispatch(sr, xa)); 457da6c28aaSamw } 458da6c28aaSamw 4597b59d02dSjb150015 static smb_sdrc_t 460da6c28aaSamw smb_nt_trans_dispatch(struct smb_request *sr, struct smb_xa *xa) 461da6c28aaSamw { 462da6c28aaSamw int rc; 463da6c28aaSamw int total_bytes, n_setup, n_param, n_data; 464da6c28aaSamw int param_off, param_pad, data_off, data_pad; 465da6c28aaSamw 466da6c28aaSamw switch (xa->smb_func) { 467da6c28aaSamw case NT_TRANSACT_CREATE: 468faa1795aSjb150015 if ((rc = smb_pre_nt_transact_create(sr, xa)) == 0) 469da6c28aaSamw rc = smb_nt_transact_create(sr, xa); 470faa1795aSjb150015 smb_post_nt_transact_create(sr, xa); 471da6c28aaSamw break; 472da6c28aaSamw case NT_TRANSACT_NOTIFY_CHANGE: 473da6c28aaSamw rc = smb_nt_transact_notify_change(sr, xa); 474da6c28aaSamw break; 475da6c28aaSamw case NT_TRANSACT_QUERY_SECURITY_DESC: 476da6c28aaSamw rc = smb_nt_transact_query_security_info(sr, xa); 477da6c28aaSamw break; 478da6c28aaSamw case NT_TRANSACT_SET_SECURITY_DESC: 479da6c28aaSamw rc = smb_nt_transact_set_security_info(sr, xa); 480da6c28aaSamw break; 481da6c28aaSamw case NT_TRANSACT_IOCTL: 482da6c28aaSamw rc = smb_nt_transact_ioctl(sr, xa); 483da6c28aaSamw break; 484da6c28aaSamw case NT_TRANSACT_QUERY_QUOTA: 4859fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_nt_transact_query_quota(sr, xa); 486b1352070SAlan Wright break; 487da6c28aaSamw case NT_TRANSACT_SET_QUOTA: 4889fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_nt_transact_set_quota(sr, xa); 4899fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States break; 490bbf6f00cSJordan Brown case NT_TRANSACT_RENAME: 491bbf6f00cSJordan Brown rc = smb_nt_transact_rename(sr, xa); 492bbf6f00cSJordan Brown break; 493bbf6f00cSJordan Brown 494da6c28aaSamw default: 495dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRsmbcmd); 496faa1795aSjb150015 return (SDRC_ERROR); 497da6c28aaSamw } 498da6c28aaSamw 499da6c28aaSamw switch (rc) { 500faa1795aSjb150015 case SDRC_SUCCESS: 501da6c28aaSamw break; 502da6c28aaSamw 503da6c28aaSamw case SDRC_DROP_VC: 504da6c28aaSamw case SDRC_NO_REPLY: 505faa1795aSjb150015 case SDRC_ERROR: 50659229f98Sjose borrego case SDRC_SR_KEPT: 507da6c28aaSamw return (rc); 508da6c28aaSamw 509faa1795aSjb150015 case SDRC_NOT_IMPLEMENTED: 510dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRsmbcmd); 511faa1795aSjb150015 return (SDRC_ERROR); 512da6c28aaSamw 513da6c28aaSamw default: 514da6c28aaSamw break; 515da6c28aaSamw } 516da6c28aaSamw 517da6c28aaSamw n_setup = MBC_LENGTH(&xa->rep_setup_mb); 518da6c28aaSamw n_param = MBC_LENGTH(&xa->rep_param_mb); 519da6c28aaSamw n_data = MBC_LENGTH(&xa->rep_data_mb); 520da6c28aaSamw 521da6c28aaSamw if (xa->smb_msrcnt < n_setup || 522da6c28aaSamw xa->smb_mprcnt < n_param || 523da6c28aaSamw xa->smb_mdrcnt < n_data) { 524dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRsmbcmd); 525faa1795aSjb150015 return (SDRC_ERROR); 526da6c28aaSamw } 527da6c28aaSamw 528da6c28aaSamw /* neato, blast it over there */ 529da6c28aaSamw 530da6c28aaSamw n_setup = (n_setup + 1) / 2; /* Conver to setup words */ 531da6c28aaSamw param_pad = 1; /* must be one */ 532da6c28aaSamw param_off = param_pad + 32 + 37 + (n_setup << 1) + 2; 533da6c28aaSamw data_pad = (4 - ((param_off + n_param) & 3)) % 4; /* Pad to 4 byte */ 534da6c28aaSamw data_off = param_off + n_param + data_pad; /* Param off from hdr */ 535da6c28aaSamw total_bytes = param_pad + n_param + data_pad + n_data; 536da6c28aaSamw 5377b59d02dSjb150015 rc = smbsr_encode_result(sr, 18+n_setup, total_bytes, 538da6c28aaSamw "b3.llllllllbCw#.C#.C", 539da6c28aaSamw 18 + n_setup, /* wct */ 540da6c28aaSamw n_param, /* Total Parameter Bytes */ 541da6c28aaSamw n_data, /* Total Data Bytes */ 542da6c28aaSamw n_param, /* Total Parameter Bytes this buffer */ 543da6c28aaSamw param_off, /* Param offset from header start */ 544da6c28aaSamw 0, /* Param displacement */ 545da6c28aaSamw n_data, /* Total Data Bytes this buffer */ 546da6c28aaSamw data_off, /* Data offset from header start */ 547da6c28aaSamw 0, /* Data displacement */ 548da6c28aaSamw n_setup, /* suwcnt */ 549da6c28aaSamw &xa->rep_setup_mb, /* setup[] */ 550da6c28aaSamw total_bytes, /* Total data bytes */ 551da6c28aaSamw param_pad, 552da6c28aaSamw &xa->rep_param_mb, 553da6c28aaSamw data_pad, 554da6c28aaSamw &xa->rep_data_mb); 555faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 556da6c28aaSamw } 557da6c28aaSamw 558faa1795aSjb150015 smb_sdrc_t 559faa1795aSjb150015 smb_pre_nt_transact(smb_request_t *sr) 560faa1795aSjb150015 { 56193bc28dbSGordon Ross DTRACE_SMB_START(op__NtTransact, smb_request_t *, sr); 562faa1795aSjb150015 return (SDRC_SUCCESS); 563faa1795aSjb150015 } 564faa1795aSjb150015 565faa1795aSjb150015 void 566faa1795aSjb150015 smb_post_nt_transact(smb_request_t *sr) 567faa1795aSjb150015 { 56893bc28dbSGordon Ross DTRACE_SMB_DONE(op__NtTransact, smb_request_t *, sr); 569faa1795aSjb150015 } 570da6c28aaSamw 5717b59d02dSjb150015 smb_sdrc_t 572da6c28aaSamw smb_com_nt_transact(struct smb_request *sr) 573da6c28aaSamw { 574da6c28aaSamw uint16_t Function; 575da6c28aaSamw unsigned char MaxSetupCount, SetupCount; 576da6c28aaSamw uint32_t TotalParameterCount, TotalDataCount; 577da6c28aaSamw uint32_t MaxParameterCount, MaxDataCount, pscnt; 578da6c28aaSamw uint32_t psoff, dscnt, dsoff; 579da6c28aaSamw smb_xa_t *xa; 580da6c28aaSamw int ready; 581da6c28aaSamw int rc; 582da6c28aaSamw 583da6c28aaSamw rc = smbsr_decode_vwv(sr, SMB_NT_TRANSHDR_ED_FMT, &MaxSetupCount, 584da6c28aaSamw &TotalParameterCount, &TotalDataCount, &MaxParameterCount, 585da6c28aaSamw &MaxDataCount, &pscnt, &psoff, &dscnt, 586da6c28aaSamw &dsoff, &SetupCount, &Function); 587da6c28aaSamw 5887b59d02dSjb150015 if (rc != 0) 589faa1795aSjb150015 return (SDRC_ERROR); 590da6c28aaSamw 591da6c28aaSamw xa = smb_xa_create(sr->session, sr, TotalParameterCount, TotalDataCount, 592da6c28aaSamw MaxParameterCount, MaxDataCount, MaxSetupCount, SetupCount); 593da6c28aaSamw if (xa == 0) { 594dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRnoroom); 595faa1795aSjb150015 return (SDRC_ERROR); 596da6c28aaSamw } 597da6c28aaSamw 598da6c28aaSamw xa->smb_flags = 0; 599da6c28aaSamw xa->smb_timeout = 0; 600da6c28aaSamw xa->smb_func = Function; 601da6c28aaSamw xa->req_disp_param = pscnt; 602da6c28aaSamw xa->req_disp_data = dscnt; 603da6c28aaSamw 6047f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_setup_mb, &sr->smb_vwv, 605da6c28aaSamw sr->smb_vwv.chain_offset, SetupCount * 2)) { 606da6c28aaSamw smb_xa_rele(sr->session, xa); 607dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 608faa1795aSjb150015 return (SDRC_ERROR); 609da6c28aaSamw } 6107f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_param_mb, &sr->command, psoff, pscnt)) { 611da6c28aaSamw smb_xa_rele(sr->session, xa); 612dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 613faa1795aSjb150015 return (SDRC_ERROR); 614da6c28aaSamw } 6157f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_data_mb, &sr->command, dsoff, dscnt)) { 616da6c28aaSamw smb_xa_rele(sr->session, xa); 617dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 618faa1795aSjb150015 return (SDRC_ERROR); 619da6c28aaSamw } 620da6c28aaSamw 621da6c28aaSamw ready = smb_trans_ready(xa); 622da6c28aaSamw 623da6c28aaSamw if (smb_xa_open(xa)) { 624da6c28aaSamw smb_xa_rele(sr->session, xa); 625ccc71be5SGordon Ross smbsr_error(sr, 0, ERRSRV, ERRsrverror); 626faa1795aSjb150015 return (SDRC_ERROR); 627da6c28aaSamw } 628da6c28aaSamw sr->r_xa = xa; 629da6c28aaSamw 630da6c28aaSamw if (!ready) { 6317b59d02dSjb150015 rc = smbsr_encode_empty_result(sr); 632faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 633da6c28aaSamw } 634da6c28aaSamw 635da6c28aaSamw if (!smb_xa_complete(xa)) { 636da6c28aaSamw smb_xa_close(xa); 637dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 638faa1795aSjb150015 return (SDRC_ERROR); 639da6c28aaSamw } 640da6c28aaSamw 641da6c28aaSamw return (smb_nt_trans_dispatch(sr, xa)); 642da6c28aaSamw } 643da6c28aaSamw 644faa1795aSjb150015 smb_sdrc_t 645faa1795aSjb150015 smb_pre_nt_transact_secondary(smb_request_t *sr) 646faa1795aSjb150015 { 64793bc28dbSGordon Ross DTRACE_SMB_START(op__NtTransactSecondary, smb_request_t *, sr); 648faa1795aSjb150015 return (SDRC_SUCCESS); 649faa1795aSjb150015 } 650faa1795aSjb150015 651faa1795aSjb150015 void 652faa1795aSjb150015 smb_post_nt_transact_secondary(smb_request_t *sr) 653faa1795aSjb150015 { 65493bc28dbSGordon Ross DTRACE_SMB_DONE(op__NtTransactSecondary, smb_request_t *, sr); 655faa1795aSjb150015 } 656da6c28aaSamw 6577b59d02dSjb150015 smb_sdrc_t 658da6c28aaSamw smb_com_nt_transact_secondary(struct smb_request *sr) 659da6c28aaSamw { 660da6c28aaSamw uint16_t tpscnt, tdscnt, fid; 661da6c28aaSamw uint16_t pscnt, psoff, psdisp, dscnt, dsoff, dsdisp; 662da6c28aaSamw smb_xa_t *xa; 663da6c28aaSamw int rc; 664da6c28aaSamw 665da6c28aaSamw if ((xa = smbsr_lookup_xa(sr)) == 0) { 666dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRsrverror); 667faa1795aSjb150015 return (SDRC_ERROR); 668da6c28aaSamw } 669da6c28aaSamw 670da6c28aaSamw if (sr->session->signing.flags & SMB_SIGNING_ENABLED) { 671da6c28aaSamw if (smb_sign_check_secondary(sr, xa->reply_seqnum) != 0) { 672dc20a302Sas200622 smbsr_error(sr, NT_STATUS_ACCESS_DENIED, 673da6c28aaSamw ERRDOS, ERRnoaccess); 674faa1795aSjb150015 return (SDRC_ERROR); 675da6c28aaSamw } 676da6c28aaSamw } 677da6c28aaSamw 678da6c28aaSamw if (xa->smb_com != SMB_COM_TRANSACTION2) { 679da6c28aaSamw return (SDRC_DROP_VC); 680da6c28aaSamw } 681da6c28aaSamw 682da6c28aaSamw rc = smbsr_decode_vwv(sr, SMB_TRANS2SHDR_ED_FMT, &tpscnt, &tdscnt, 683da6c28aaSamw &pscnt, &psoff, &psdisp, &dscnt, &dsoff, &dsdisp, &fid); 684da6c28aaSamw 6857b59d02dSjb150015 if (rc != 0) 686faa1795aSjb150015 return (SDRC_ERROR); 687da6c28aaSamw 688da6c28aaSamw mutex_enter(&xa->xa_mutex); 6897f3ef643SGordon Ross if (xa->smb_tpscnt > tpscnt) 6907f3ef643SGordon Ross xa->smb_tpscnt = tpscnt; 6917f3ef643SGordon Ross if (xa->smb_tdscnt > tdscnt) 6927f3ef643SGordon Ross xa->smb_tdscnt = tdscnt; 6937f3ef643SGordon Ross if (fid != 0xFFFF) 6947f3ef643SGordon Ross xa->xa_smb_fid = fid; 695da6c28aaSamw xa->req_disp_param = psdisp + pscnt; 696da6c28aaSamw xa->req_disp_data = dsdisp + dscnt; 697da6c28aaSamw 6987f3ef643SGordon Ross /* 6997f3ef643SGordon Ross * See comment in smb_com_transaction_secondary 7007f3ef643SGordon Ross */ 7017f3ef643SGordon Ross if (xa->req_param_mb.chain_offset != psdisp) { 7027f3ef643SGordon Ross DTRACE_PROBE2(trans_param_disp, 7037f3ef643SGordon Ross smb_xa_t *, xa, uint16_t, psdisp); 7047f3ef643SGordon Ross xa->req_param_mb.chain_offset = psdisp; 7057f3ef643SGordon Ross } 7067f3ef643SGordon Ross if (xa->req_data_mb.chain_offset != dsdisp) { 7077f3ef643SGordon Ross DTRACE_PROBE2(trans_data_disp, 7087f3ef643SGordon Ross smb_xa_t *, xa, uint16_t, dsdisp); 7097f3ef643SGordon Ross xa->req_data_mb.chain_offset = dsdisp; 7107f3ef643SGordon Ross } 7117f3ef643SGordon Ross 7127f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_param_mb, &sr->command, psoff, pscnt)) { 713da6c28aaSamw mutex_exit(&xa->xa_mutex); 714da6c28aaSamw smb_xa_close(xa); 715dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 716faa1795aSjb150015 return (SDRC_ERROR); 717da6c28aaSamw } 7187f3ef643SGordon Ross if (smb_mbc_copy(&xa->req_data_mb, &sr->command, dsoff, dscnt)) { 719da6c28aaSamw mutex_exit(&xa->xa_mutex); 720da6c28aaSamw smb_xa_close(xa); 721dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 722faa1795aSjb150015 return (SDRC_ERROR); 723da6c28aaSamw } 724da6c28aaSamw mutex_exit(&xa->xa_mutex); 725da6c28aaSamw 726da6c28aaSamw if (!smb_trans_ready(xa)) 727da6c28aaSamw return (SDRC_NO_REPLY); 728da6c28aaSamw 729da6c28aaSamw if (!smb_xa_complete(xa)) 730da6c28aaSamw return (SDRC_NO_REPLY); 731da6c28aaSamw 732da6c28aaSamw return (smb_nt_trans_dispatch(sr, xa)); 733da6c28aaSamw } 734da6c28aaSamw 7357b59d02dSjb150015 static int 7369fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_trans_ready(smb_xa_t *xa) 737da6c28aaSamw { 738da6c28aaSamw int rc; 739da6c28aaSamw 740da6c28aaSamw mutex_enter(&xa->xa_mutex); 741da6c28aaSamw rc = xa->req_disp_data >= xa->smb_tdscnt && 742da6c28aaSamw xa->req_disp_param >= xa->smb_tpscnt; 743da6c28aaSamw mutex_exit(&xa->xa_mutex); 744da6c28aaSamw 745da6c28aaSamw return (rc); 746da6c28aaSamw } 747da6c28aaSamw 7483ad684d6Sjb150015 static void 7493ad684d6Sjb150015 smb_encode_SHARE_INFO_1(struct mbuf_chain *output, struct mbuf_chain *text, 7503ad684d6Sjb150015 char *oem_name, uint16_t type, char *comment) 751da6c28aaSamw { 7523db3f65cSamw (void) smb_mbc_encodef(output, "13c.wl", oem_name, 7533ad684d6Sjb150015 type, MBC_LENGTH(text)); 754da6c28aaSamw 7553db3f65cSamw (void) smb_mbc_encodef(text, "s", comment ? comment : ""); 7566537f381Sas200622 } 757da6c28aaSamw 7583ad684d6Sjb150015 static void 7593ad684d6Sjb150015 smb_encode_SHARE_INFO_2(struct mbuf_chain *output, struct mbuf_chain *text, 7603ad684d6Sjb150015 smb_request_t *sr, char *oem_name, uint16_t type, 7613ad684d6Sjb150015 char *comment, uint16_t access, char *path, char *password) 762da6c28aaSamw { 763da6c28aaSamw unsigned char pword[9]; 764da6c28aaSamw 765da6c28aaSamw bzero(pword, sizeof (pword)); 766da6c28aaSamw (void) strncpy((char *)pword, password, sizeof (pword)); 7673ad684d6Sjb150015 smb_encode_SHARE_INFO_1(output, text, oem_name, type, comment); 7683db3f65cSamw (void) smb_mbc_encodef(output, "wwwl9c.", 769da6c28aaSamw access, 770faa1795aSjb150015 sr->sr_cfg->skc_maxconnections, 7718622ec45SGordon Ross smb_server_get_session_count(sr->sr_server), 772da6c28aaSamw MBC_LENGTH(text), 7733ad684d6Sjb150015 pword); 7743db3f65cSamw (void) smb_mbc_encodef(text, "s", path); 775da6c28aaSamw } 776da6c28aaSamw 777da6c28aaSamw int 778da6c28aaSamw smb_trans_net_share_enum(struct smb_request *sr, struct smb_xa *xa) 779da6c28aaSamw { 780a90cf9f2SGordon Ross uint16_t pid_hi, pid_lo; 781a90cf9f2SGordon Ross 782da6c28aaSamw /* 783da6c28aaSamw * Number of data bytes that will 784da6c28aaSamw * be sent in the current response 785da6c28aaSamw */ 786da6c28aaSamw uint16_t data_scnt; 787da6c28aaSamw 788da6c28aaSamw /* 789da6c28aaSamw * Total number of data bytes that 790da6c28aaSamw * are sent till now. This is only 791da6c28aaSamw * used for calculating current data 792da6c28aaSamw * displacement 793da6c28aaSamw */ 794da6c28aaSamw uint16_t tot_data_scnt; 795da6c28aaSamw 796da6c28aaSamw /* 797da6c28aaSamw * Number of parameter bytes should 798da6c28aaSamw * be sent for the current response. 799da6c28aaSamw * It is 8 for the 1st response and 800da6c28aaSamw * 0 for others 801da6c28aaSamw */ 802da6c28aaSamw uint16_t param_scnt; 803da6c28aaSamw 804da6c28aaSamw /* number of setup and parameter bytes */ 805da6c28aaSamw uint16_t n_setup, n_param; 806da6c28aaSamw 807da6c28aaSamw /* data and parameter displacement */ 808da6c28aaSamw uint16_t data_disp, param_disp; 809da6c28aaSamw 810da6c28aaSamw /* parameter and data offset and pad */ 811da6c28aaSamw int param_off, param_pad, data_off, data_pad; 812da6c28aaSamw 813da6c28aaSamw /* 814da6c28aaSamw * total bytes of parameters and data 815da6c28aaSamw * in the packet, plus the pad bytes. 816da6c28aaSamw */ 817da6c28aaSamw int tot_packet_bytes; 818da6c28aaSamw 8193ad684d6Sjb150015 boolean_t first_resp; 820da6c28aaSamw 8213ad684d6Sjb150015 char fmt[16]; 8223ad684d6Sjb150015 struct mbuf_chain reply; 8233ad684d6Sjb150015 8243ad684d6Sjb150015 uint16_t level; 8253ad684d6Sjb150015 uint16_t pkt_bufsize; 8263ad684d6Sjb150015 smb_enumshare_info_t esi; 8273ad684d6Sjb150015 char *sent_buf; 8283ad684d6Sjb150015 8293ad684d6Sjb150015 ASSERT(sr->uid_user); 830da6c28aaSamw 8313db3f65cSamw if (smb_mbc_decodef(&xa->req_param_mb, "ww", &level, 8323ad684d6Sjb150015 &esi.es_bufsize) != 0) 833faa1795aSjb150015 return (SDRC_NOT_IMPLEMENTED); 834da6c28aaSamw 835da6c28aaSamw if (level != 1) { 8363ad684d6Sjb150015 /* 8373ad684d6Sjb150015 * Only level 1 is valid for NetShareEnum 8383ad684d6Sjb150015 * None of the error codes in the spec are meaningful 8393ad684d6Sjb150015 * here. This error code is returned by Windows. 8403ad684d6Sjb150015 */ 8413db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 8423ad684d6Sjb150015 ERROR_INVALID_LEVEL, 0, 0, 0); 843faa1795aSjb150015 return (SDRC_SUCCESS); 844da6c28aaSamw } 845da6c28aaSamw 846148c5f43SAlan Wright esi.es_buf = smb_srm_zalloc(sr, esi.es_bufsize); 847c5866007SKeyur Desai esi.es_posix_uid = crgetuid(sr->uid_user->u_cred); 8488622ec45SGordon Ross smb_kshare_enum(sr->sr_server, &esi); 849da6c28aaSamw 8503ad684d6Sjb150015 /* client buffer size is not big enough to hold any shares */ 8513ad684d6Sjb150015 if (esi.es_nsent == 0) { 8523db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 8533ad684d6Sjb150015 ERROR_MORE_DATA, 0, esi.es_nsent, esi.es_ntotal); 854faa1795aSjb150015 return (SDRC_SUCCESS); 855da6c28aaSamw } 856da6c28aaSamw 857da6c28aaSamw /* 8587f3ef643SGordon Ross * Initialize the reply mbuf chain. Note that we re-initialize 8597f3ef643SGordon Ross * this on each pass through the loop below. 8607f3ef643SGordon Ross */ 8617f3ef643SGordon Ross MBC_SETUP(&reply, smb_maxbufsize); 8627f3ef643SGordon Ross 8637f3ef643SGordon Ross /* 864da6c28aaSamw * The rep_setup_mb is already initialized in smb_trans_dispatch(). 865da6c28aaSamw * Calling MBC_INIT() will initialized the structure and so the 866da6c28aaSamw * pointer to the mbuf chains will be lost. Therefore, we need 867da6c28aaSamw * to free the resources before calling MBC_INIT() again. 868da6c28aaSamw */ 8693ad684d6Sjb150015 n_setup = 0; /* Setup count for NetShareEnum SMB is 0 */ 8707f3ef643SGordon Ross MBC_FLUSH(&xa->rep_setup_mb); 871da6c28aaSamw 8723ad684d6Sjb150015 n_param = 8; 8733ad684d6Sjb150015 pkt_bufsize = sr->session->smb_msg_size - 8743ad684d6Sjb150015 (SMB_HEADER_ED_LEN + RESP_HEADER_LEN + n_param); 875da6c28aaSamw 8763ad684d6Sjb150015 tot_data_scnt = 0; 8773ad684d6Sjb150015 sent_buf = esi.es_buf; 8783ad684d6Sjb150015 first_resp = B_TRUE; 8793ad684d6Sjb150015 8803ad684d6Sjb150015 while (tot_data_scnt < esi.es_datasize) { 8813ad684d6Sjb150015 data_scnt = esi.es_datasize - tot_data_scnt; 8823ad684d6Sjb150015 if (data_scnt > pkt_bufsize) 8833ad684d6Sjb150015 data_scnt = pkt_bufsize; 8847f3ef643SGordon Ross MBC_FLUSH(&xa->rep_data_mb); 8853ad684d6Sjb150015 8863ad684d6Sjb150015 (void) sprintf(fmt, "%dc", data_scnt); 8873db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, fmt, sent_buf); 8883ad684d6Sjb150015 8893ad684d6Sjb150015 sent_buf += data_scnt; 890da6c28aaSamw tot_data_scnt += data_scnt; 891da6c28aaSamw 892da6c28aaSamw /* Only the 1st response packet contains parameters */ 893da6c28aaSamw param_scnt = (first_resp) ? n_param : 0; 894da6c28aaSamw param_pad = 1; /* always one */ 895da6c28aaSamw param_off = SMB_HEADER_ED_LEN + RESP_HEADER_LEN; 896da6c28aaSamw param_disp = (first_resp) ? 0 : n_param; 897da6c28aaSamw 8987f3ef643SGordon Ross MBC_FLUSH(&xa->rep_param_mb); 8993ad684d6Sjb150015 900da6c28aaSamw if (first_resp) { 9013ad684d6Sjb150015 first_resp = B_FALSE; 9023db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 9033ad684d6Sjb150015 (esi.es_ntotal > esi.es_nsent) 9043ad684d6Sjb150015 ? ERROR_MORE_DATA : 0, 9053ad684d6Sjb150015 0, esi.es_nsent, esi.es_ntotal); 906da6c28aaSamw } 907da6c28aaSamw 908da6c28aaSamw data_pad = (param_off + n_param) & 1; /* Pad to short */ 909da6c28aaSamw 910da6c28aaSamw /* data off from hdr start */ 911da6c28aaSamw data_off = param_off + param_scnt + data_pad; 912da6c28aaSamw data_disp = tot_data_scnt - data_scnt; 913da6c28aaSamw tot_packet_bytes = param_pad + param_scnt + data_pad + 914da6c28aaSamw data_scnt; 915da6c28aaSamw 916a90cf9f2SGordon Ross pid_hi = sr->smb_pid >> 16; 917a90cf9f2SGordon Ross pid_lo = (uint16_t)sr->smb_pid; 918a90cf9f2SGordon Ross 9197f3ef643SGordon Ross MBC_FLUSH(&reply); 9203db3f65cSamw (void) smb_mbc_encodef(&reply, SMB_HEADER_ED_FMT, 921da6c28aaSamw sr->first_smb_com, 922da6c28aaSamw sr->smb_rcls, 923da6c28aaSamw sr->smb_reh, 924da6c28aaSamw sr->smb_err, 925da6c28aaSamw sr->smb_flg | SMB_FLAGS_REPLY, 926da6c28aaSamw sr->smb_flg2, 927a90cf9f2SGordon Ross pid_hi, 928da6c28aaSamw sr->smb_sig, 929da6c28aaSamw sr->smb_tid, 930a90cf9f2SGordon Ross pid_lo, 931da6c28aaSamw sr->smb_uid, 932da6c28aaSamw sr->smb_mid); 933da6c28aaSamw 9343db3f65cSamw (void) smb_mbc_encodef(&reply, 935da6c28aaSamw "bww2.wwwwwwb.Cw#.C#.C", 936da6c28aaSamw 10 + n_setup, /* wct */ 937da6c28aaSamw n_param, /* Total Parameter Bytes */ 9383ad684d6Sjb150015 esi.es_datasize, /* Total Data Bytes */ 939da6c28aaSamw param_scnt, /* Total Parameter Bytes this buffer */ 940da6c28aaSamw param_off, /* Param offset from header start */ 941da6c28aaSamw param_disp, /* Param displacement */ 942da6c28aaSamw data_scnt, /* Total Data Bytes this buffer */ 943da6c28aaSamw data_off, /* Data offset from header start */ 944da6c28aaSamw data_disp, /* Data displacement */ 945da6c28aaSamw n_setup, /* suwcnt */ 946da6c28aaSamw &xa->rep_setup_mb, /* setup[] */ 947da6c28aaSamw tot_packet_bytes, /* Total data bytes */ 948da6c28aaSamw param_pad, 949da6c28aaSamw &xa->rep_param_mb, 950da6c28aaSamw data_pad, 951da6c28aaSamw &xa->rep_data_mb); 952da6c28aaSamw 953da6c28aaSamw if (sr->session->signing.flags & SMB_SIGNING_ENABLED) 954b89a8333Snatalie li - Sun Microsystems - Irvine United States smb_sign_reply(sr, &reply); 955da6c28aaSamw 956da6c28aaSamw (void) smb_session_send(sr->session, 0, &reply); 9577f3ef643SGordon Ross 958da6c28aaSamw } 959da6c28aaSamw 9607f3ef643SGordon Ross m_freem(reply.chain); 9617f3ef643SGordon Ross 962da6c28aaSamw return (SDRC_NO_REPLY); 963da6c28aaSamw } 964da6c28aaSamw 965da6c28aaSamw int 9663ad684d6Sjb150015 smb_trans_net_share_getinfo(smb_request_t *sr, struct smb_xa *xa) 967da6c28aaSamw { 9683ad684d6Sjb150015 uint16_t level, max_bytes, access; 969da6c28aaSamw struct mbuf_chain str_mb; 970da6c28aaSamw char *share; 971da6c28aaSamw char *password; 972148c5f43SAlan Wright smb_kshare_t *si; 973da6c28aaSamw 9743db3f65cSamw if (smb_mbc_decodef(&xa->req_param_mb, "%sww", sr, 9753ad684d6Sjb150015 &share, &level, &max_bytes) != 0) 976faa1795aSjb150015 return (SDRC_NOT_IMPLEMENTED); 977da6c28aaSamw 9788622ec45SGordon Ross si = smb_kshare_lookup(sr->sr_server, share); 979148c5f43SAlan Wright if ((si == NULL) || (si->shr_oemname == NULL)) { 9803db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", 981da6c28aaSamw NERR_NetNameNotFound, 0, 0); 982148c5f43SAlan Wright if (si) 9838622ec45SGordon Ross smb_kshare_release(sr->sr_server, si); 984faa1795aSjb150015 return (SDRC_SUCCESS); 985da6c28aaSamw } 986da6c28aaSamw 9873ad684d6Sjb150015 access = SHARE_ACCESS_ALL; 988da6c28aaSamw password = ""; 989da6c28aaSamw 990da6c28aaSamw MBC_INIT(&str_mb, max_bytes); 991da6c28aaSamw 992da6c28aaSamw switch (level) { 993da6c28aaSamw case 0 : 994148c5f43SAlan Wright (void) smb_mbc_encodef(&xa->rep_data_mb, "13c", 995148c5f43SAlan Wright si->shr_oemname); 996da6c28aaSamw break; 997da6c28aaSamw 998da6c28aaSamw case 1 : 9993ad684d6Sjb150015 smb_encode_SHARE_INFO_1(&xa->rep_data_mb, &str_mb, 1000148c5f43SAlan Wright si->shr_oemname, si->shr_type, si->shr_cmnt); 1001da6c28aaSamw break; 1002da6c28aaSamw 1003da6c28aaSamw case 2 : 10043ad684d6Sjb150015 smb_encode_SHARE_INFO_2(&xa->rep_data_mb, &str_mb, sr, 1005148c5f43SAlan Wright si->shr_oemname, si->shr_type, si->shr_cmnt, access, 1006148c5f43SAlan Wright si->shr_path, password); 10073ad684d6Sjb150015 break; 10083ad684d6Sjb150015 1009da6c28aaSamw default: 10108622ec45SGordon Ross smb_kshare_release(sr->sr_server, si); 10113db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", 10123ad684d6Sjb150015 ERROR_INVALID_LEVEL, 0, 0); 1013da6c28aaSamw m_freem(str_mb.chain); 1014faa1795aSjb150015 return (SDRC_NOT_IMPLEMENTED); 1015da6c28aaSamw } 1016da6c28aaSamw 10178622ec45SGordon Ross smb_kshare_release(sr->sr_server, si); 10183db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", NERR_Success, 1019da6c28aaSamw -MBC_LENGTH(&xa->rep_data_mb), 1020da6c28aaSamw MBC_LENGTH(&xa->rep_data_mb) + MBC_LENGTH(&str_mb)); 10213db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "C", &str_mb); 1022da6c28aaSamw m_freem(str_mb.chain); 1023faa1795aSjb150015 return (SDRC_SUCCESS); 1024da6c28aaSamw } 1025da6c28aaSamw 1026da6c28aaSamw int 10273ad684d6Sjb150015 smb_trans_net_workstation_getinfo(struct smb_request *sr, struct smb_xa *xa) 1028da6c28aaSamw { 10293ad684d6Sjb150015 uint16_t level, max_bytes; 1030da6c28aaSamw struct mbuf_chain str_mb; 1031da6c28aaSamw char *domain; 1032da6c28aaSamw char *hostname; 1033da6c28aaSamw 10343db3f65cSamw if ((smb_mbc_decodef(&xa->req_param_mb, "ww", 10353ad684d6Sjb150015 &level, &max_bytes) != 0) || 1036da6c28aaSamw (level != 10)) { 10373db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 1038da6c28aaSamw NERR_BadTransactConfig, 0, 0, 0); 1039faa1795aSjb150015 return (SDRC_SUCCESS); 1040da6c28aaSamw } 1041da6c28aaSamw 1042b89a8333Snatalie li - Sun Microsystems - Irvine United States domain = sr->sr_cfg->skc_nbdomain; 1043faa1795aSjb150015 hostname = sr->sr_cfg->skc_hostname; 1044da6c28aaSamw 1045da6c28aaSamw MBC_INIT(&str_mb, max_bytes); 1046da6c28aaSamw 10473db3f65cSamw (void) smb_mbc_encodef(&str_mb, "."); /* Prevent NULL pointers */ 1048da6c28aaSamw 10493db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "l", MBC_LENGTH(&str_mb)); 10503db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", hostname); 10513db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "l", MBC_LENGTH(&str_mb)); 10523db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", "nobody"); 10533db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "l", MBC_LENGTH(&str_mb)); 10543db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", domain); 10553db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "bbl", 1056fd9ee8b5Sjoyce mcintosh (uint8_t)sr->sr_cfg->skc_version.sv_major, 1057fd9ee8b5Sjoyce mcintosh (uint8_t)sr->sr_cfg->skc_version.sv_minor, 10589fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States MBC_LENGTH(&str_mb)); 10593db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", domain); 10603db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "l", MBC_LENGTH(&str_mb)); 10613db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", domain); 1062da6c28aaSamw 10633db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", 0, 1064da6c28aaSamw -MBC_LENGTH(&xa->rep_data_mb), 1065da6c28aaSamw MBC_LENGTH(&xa->rep_data_mb) + MBC_LENGTH(&str_mb)); 10663db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "C", &str_mb); 1067da6c28aaSamw m_freem(str_mb.chain); 1068faa1795aSjb150015 return (SDRC_SUCCESS); 1069da6c28aaSamw } 1070da6c28aaSamw 1071da6c28aaSamw int 10723ad684d6Sjb150015 smb_trans_net_user_getinfo(struct smb_request *sr, struct smb_xa *xa) 1073da6c28aaSamw { 10743ad684d6Sjb150015 uint16_t level, max_bytes; 1075da6c28aaSamw unsigned char *user; 1076da6c28aaSamw int rc; 1077da6c28aaSamw 10783db3f65cSamw rc = smb_mbc_decodef(&xa->req_param_mb, "%sww", sr, 1079da6c28aaSamw &user, 1080da6c28aaSamw &level, 1081da6c28aaSamw &max_bytes); 1082da6c28aaSamw 1083da6c28aaSamw if (rc != 0) 1084faa1795aSjb150015 return (SDRC_NOT_IMPLEMENTED); 1085da6c28aaSamw 10863db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", 1087da6c28aaSamw NERR_UserNotFound, 0, 0); 1088faa1795aSjb150015 return (SDRC_SUCCESS); 1089da6c28aaSamw } 1090da6c28aaSamw 10917b59d02dSjb150015 smb_sdrc_t 10923ad684d6Sjb150015 smb_trans_net_server_getinfo(struct smb_request *sr, struct smb_xa *xa) 1093da6c28aaSamw { 10943ad684d6Sjb150015 uint16_t level, buf_size; 10953ad684d6Sjb150015 uint16_t avail_data, max_data; 1096da6c28aaSamw char server_name[16]; 1097da6c28aaSamw struct mbuf_chain str_mb; 1098da6c28aaSamw 10993db3f65cSamw if (smb_mbc_decodef(&xa->req_param_mb, "ww", &level, &buf_size) != 0) 1100faa1795aSjb150015 return (SDRC_ERROR); 1101da6c28aaSamw 11023ad684d6Sjb150015 max_data = MBC_MAXBYTES(&xa->rep_data_mb); 1103da6c28aaSamw 1104da6c28aaSamw MBC_INIT(&str_mb, buf_size); 1105da6c28aaSamw 1106da6c28aaSamw bzero(server_name, sizeof (server_name)); 11073ad684d6Sjb150015 (void) strncpy(server_name, sr->sr_cfg->skc_hostname, 11083ad684d6Sjb150015 sizeof (server_name)); 1109da6c28aaSamw 11103ad684d6Sjb150015 /* valid levels are 0 and 1 */ 1111da6c28aaSamw switch (level) { 1112da6c28aaSamw case 0: 11133db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "16c", server_name); 1114da6c28aaSamw break; 11153ad684d6Sjb150015 1116da6c28aaSamw case 1: 11173db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", 11183ad684d6Sjb150015 sr->sr_cfg->skc_system_comment); 11193db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "16cbbll", server_name, 1120fd9ee8b5Sjoyce mcintosh (uint8_t)sr->sr_cfg->skc_version.sv_major, 1121fd9ee8b5Sjoyce mcintosh (uint8_t)sr->sr_cfg->skc_version.sv_minor, 11223ad684d6Sjb150015 MY_SERVER_TYPE, max_data - MBC_LENGTH(&str_mb)); 1123da6c28aaSamw break; 11243ad684d6Sjb150015 1125da6c28aaSamw default: 11263db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", 11273ad684d6Sjb150015 ERROR_INVALID_LEVEL, 0, 0); 1128da6c28aaSamw m_freem(str_mb.chain); 11293ad684d6Sjb150015 return (SDRC_SUCCESS); 1130da6c28aaSamw } 1131da6c28aaSamw 11323ad684d6Sjb150015 avail_data = MBC_LENGTH(&xa->rep_data_mb) + MBC_LENGTH(&str_mb); 11333db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", 11343ad684d6Sjb150015 NERR_Success, max_data - avail_data, avail_data); 11353db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "C", &str_mb); 1136da6c28aaSamw m_freem(str_mb.chain); 1137faa1795aSjb150015 return (SDRC_SUCCESS); 1138da6c28aaSamw } 1139da6c28aaSamw 1140da6c28aaSamw /* 1141da6c28aaSamw * 6.4 The NetServerEnum2 RAP Service 1142da6c28aaSamw * 1143da6c28aaSamw * The NetServerEnum2 RAP service lists all computers of the specified type 1144da6c28aaSamw * or types that are visible in the specified domains. It may also 1145da6c28aaSamw * enumerate domains. 1146da6c28aaSamw * 1147da6c28aaSamw * The following definition uses the notation and terminology defined in 1148da6c28aaSamw * the CIFS Remote Administration Protocol specification, which is required 1149da6c28aaSamw * in order to make it well-defined. The definition is: 1150da6c28aaSamw * 1151da6c28aaSamw * uint16_t NetServerEnum2 ( 1152da6c28aaSamw * uint16_t sLevel, 1153da6c28aaSamw * RCVBUF pbBuffer, 1154da6c28aaSamw * RCVBUFLEN cbBuffer, 1155da6c28aaSamw * ENTCOUNT pcEntriesRead, 1156da6c28aaSamw * uint16_t *pcTotalAvail, 1157da6c28aaSamw * uint32_t fServerType, 1158da6c28aaSamw * char *pszDomain, 1159da6c28aaSamw * ); 1160da6c28aaSamw * 1161da6c28aaSamw * where: 1162da6c28aaSamw * 1163da6c28aaSamw * sLevel specifies the level of detail (0 or 1) requested. 1164da6c28aaSamw * 1165da6c28aaSamw * pbBuffer points to the buffer to receive the returned data. If the 1166da6c28aaSamw * function is successful, the buffer contains a sequence of 1167da6c28aaSamw * server_info_x structures, where x is 0 or 1, depending on the 1168da6c28aaSamw * level of detail requested. 1169da6c28aaSamw * 1170da6c28aaSamw * cbBuffer specifies the size, in bytes, of the buffer pointed to by 1171da6c28aaSamw * the pbBuffer parameter. 1172da6c28aaSamw * 1173da6c28aaSamw * pcEntriesRead points to a 16 bit variable that receives a count of 1174da6c28aaSamw * the number of servers enumerated in the buffer. This count is 1175da6c28aaSamw * valid only if NetServerEnum2 returns the NERR_Success or 1176da6c28aaSamw * ERROR_MORE_DATA values. 1177da6c28aaSamw * 1178da6c28aaSamw * pcTotal Avail points to a 16 bit variable that receives a count of 1179da6c28aaSamw * the total number of available entries. This count is valid only if 1180da6c28aaSamw * NetServerEnum2 returns the NERR_Success or ERROR_MORE_DATA values. 1181da6c28aaSamw * 1182da6c28aaSamw * fServerType specifies the type or types of computers to enumerate. 1183da6c28aaSamw * Computers that match at least one of the specified types are 1184da6c28aaSamw * returned in the buffer. Possible values are defined in the request 1185da6c28aaSamw * parameters section. 1186da6c28aaSamw * 1187da6c28aaSamw * pszDomain points to a null-terminated string that contains the 1188da6c28aaSamw * name of the workgroup in which to enumerate computers of the 1189da6c28aaSamw * specified type or types. If the pszDomain parameter is a null 1190da6c28aaSamw * string or a null pointer, servers are enumerated for the current 1191da6c28aaSamw * domain of the computer. 1192da6c28aaSamw * 1193da6c28aaSamw * 6.4.1 Transaction Request Parameters section 1194da6c28aaSamw * 1195da6c28aaSamw * The Transaction request parameters section in this instance contains: 1196da6c28aaSamw * . The 16 bit function number for NetServerEnum2 which is 104. 1197da6c28aaSamw * . The parameter descriptor string which is "WrLehDz". 1198da6c28aaSamw * . The data descriptor string for the (returned) data which is "B16" for 1199da6c28aaSamw * level detail 0 or "B16BBDz" for level detail 1. 1200da6c28aaSamw * . The actual parameters as described by the parameter descriptor 1201da6c28aaSamw * string. 1202da6c28aaSamw * 1203da6c28aaSamw * The parameters are: 1204da6c28aaSamw * . A 16 bit integer with a value of 0 or 1 (corresponding to the "W" in 1205da6c28aaSamw * the parameter descriptor string. This represents the level of detail 1206da6c28aaSamw * the server is expected to return 1207da6c28aaSamw * . A 16 bit integer that contains the size of the receive buffer. 1208da6c28aaSamw * . A 32 bit integer that represents the type of servers the function 1209da6c28aaSamw * should enumerate. The possible values may be any of the following or 1210da6c28aaSamw * a combination of the following: 1211da6c28aaSamw * 1212da6c28aaSamw * SV_TYPE_WORKSTATION 0x00000001 All workstations 1213da6c28aaSamw * SV_TYPE_SERVER 0x00000002 All servers 1214da6c28aaSamw * SV_TYPE_SQLSERVER 0x00000004 Any server running with SQL 1215da6c28aaSamw * server 1216da6c28aaSamw * SV_TYPE_DOMAIN_CTRL 0x00000008 Primary domain controller 1217da6c28aaSamw * SV_TYPE_DOMAIN_BAKCTRL 0x00000010 Backup domain controller 1218da6c28aaSamw * SV_TYPE_TIME_SOURCE 0x00000020 Server running the timesource 1219da6c28aaSamw * service 1220da6c28aaSamw * SV_TYPE_AFP 0x00000040 Apple File Protocol servers 1221da6c28aaSamw * SV_TYPE_NOVELL 0x00000080 Novell servers 1222da6c28aaSamw * SV_TYPE_DOMAIN_MEMBER 0x00000100 Domain Member 1223da6c28aaSamw * SV_TYPE_PRINTQ_SERVER 0x00000200 Server sharing print queue 1224da6c28aaSamw * SV_TYPE_DIALIN_SERVER 0x00000400 Server running dialin service. 1225da6c28aaSamw * SV_TYPE_XENIX_SERVER 0x00000800 Xenix server 1226da6c28aaSamw * SV_TYPE_NT 0x00001000 NT server 1227da6c28aaSamw * SV_TYPE_WFW 0x00002000 Server running Windows for 1228da6c28aaSamw * Workgroups 1229da6c28aaSamw * SV_TYPE_SERVER_NT 0x00008000 Windows NT non DC server 1230da6c28aaSamw * SV_TYPE_POTENTIAL_BROWSER 0x00010000 Server that can run the browser 1231da6c28aaSamw * service 1232da6c28aaSamw * SV_TYPE_BACKUP_BROWSER 0x00020000 Backup browser server 1233da6c28aaSamw * SV_TYPE_MASTER_BROWSER 0x00040000 Master browser server 1234da6c28aaSamw * SV_TYPE_DOMAIN_MASTER 0x00080000 Domain Master Browser server 1235da6c28aaSamw * SV_TYPE_LOCAL_LIST_ONLY 0x40000000 Enumerate only entries marked 1236da6c28aaSamw * "local" 1237da6c28aaSamw * SV_TYPE_DOMAIN_ENUM 0x80000000 Enumerate Domains. The pszDomain 1238da6c28aaSamw * parameter must be NULL. 1239da6c28aaSamw * 1240da6c28aaSamw * . A null terminated ASCII string representing the pszDomain parameter 1241da6c28aaSamw * described above 1242da6c28aaSamw * 1243da6c28aaSamw * 6.4.2 Transaction Request Data section 1244da6c28aaSamw * 1245da6c28aaSamw * There is no data or auxiliary data to send as part of the request. 1246da6c28aaSamw * 1247da6c28aaSamw * 6.4.3 Transaction Response Parameters section 1248da6c28aaSamw * 1249da6c28aaSamw * The transaction response parameters section consists of: 1250da6c28aaSamw * . A 16 bit word indicating the return status. The possible values are: 1251da6c28aaSamw * 1252da6c28aaSamw * Code Value Description 1253da6c28aaSamw * NERR_Success 0 No errors encountered 1254da6c28aaSamw * ERROR_MORE_DATA 234 Additional data is available 1255da6c28aaSamw * NERR_ServerNotStarted 2114 The RAP service on the remote computer 1256da6c28aaSamw * is not running 1257da6c28aaSamw * NERR_BadTransactConfig 2141 The server is not configured for 1258da6c28aaSamw * transactions, IPC$ is not shared 1259da6c28aaSamw * 1260da6c28aaSamw * . A 16 bit "converter" word. 1261da6c28aaSamw * . A 16 bit number representing the number of entries returned. 1262da6c28aaSamw * . A 16 bit number representing the total number of available entries. 1263da6c28aaSamw * If the supplied buffer is large enough, this will equal the number of 1264da6c28aaSamw * entries returned. 1265da6c28aaSamw * 1266da6c28aaSamw * 6.4.4 Transaction Response Data section 1267da6c28aaSamw * 1268da6c28aaSamw * The return data section consists of a number of SERVER_INFO_1 structures. 1269da6c28aaSamw * The number of such structures present is determined by the third entry 1270da6c28aaSamw * (described above) in the return parameters section. 1271da6c28aaSamw * 1272da6c28aaSamw * At level detail 0, the Transaction response data section contains a 1273da6c28aaSamw * number of SERVER_INFO_0 data structure. The number of such structures is 1274da6c28aaSamw * equal to the 16 bit number returned by the server in the third parameter 1275da6c28aaSamw * in the Transaction response parameter section. The SERVER_INFO_0 data 1276da6c28aaSamw * structure is defined as: 1277da6c28aaSamw * 1278da6c28aaSamw * struct SERVER_INFO_0 { 1279da6c28aaSamw * char sv0_name[16]; 1280da6c28aaSamw * }; 1281da6c28aaSamw * 1282da6c28aaSamw * where: 1283da6c28aaSamw * 1284da6c28aaSamw * sv0_name is a null-terminated string that specifies the name of a 1285da6c28aaSamw * computer or domain . 1286da6c28aaSamw * 1287da6c28aaSamw * At level detail 1, the Transaction response data section contains a 1288da6c28aaSamw * number of SERVER_INFO_1 data structure. The number of such structures is 1289da6c28aaSamw * equal to the 16 bit number returned by the server in the third parameter 1290da6c28aaSamw * in the Transaction response parameter section. The SERVER_INFO_1 data 1291da6c28aaSamw * structure is defined as: 1292da6c28aaSamw * 1293da6c28aaSamw * struct SERVER_INFO_1 { 1294da6c28aaSamw * char sv1_name[16]; 1295da6c28aaSamw * char sv1_version_major; 1296da6c28aaSamw * char sv1_version_minor; 1297da6c28aaSamw * uint32_t sv1_type; 1298da6c28aaSamw * char *sv1_comment_or_master_browser; 1299da6c28aaSamw * }; 1300da6c28aaSamw * 1301da6c28aaSamw * sv1_name contains a null-terminated string that specifies the name 1302da6c28aaSamw * of a computer, or a domain name if SV_TYPE_DOMAIN_ENUM is set in 1303da6c28aaSamw * sv1_type. 1304da6c28aaSamw * 1305da6c28aaSamw * sv1_version_major whatever was specified in the HostAnnouncement 1306da6c28aaSamw * or DomainAnnouncement frame with which the entry was registered. 1307da6c28aaSamw * 1308da6c28aaSamw * sv1_version_minor whatever was specified in the HostAnnouncement 1309da6c28aaSamw * or DomainAnnouncement frame with which the entry was registered. 1310da6c28aaSamw * 1311da6c28aaSamw * sv1_type specifies the type of software the computer is running. 1312da6c28aaSamw * The member can be one or a combination of the values defined above 1313da6c28aaSamw * in the Transaction request parameters section for fServerType. 1314da6c28aaSamw * 1315da6c28aaSamw * 1316da6c28aaSamw * sv1_comment_or_master_browser points to a null-terminated string. If 1317da6c28aaSamw * the sv1_type indicates that the entry is for a domain, this 1318da6c28aaSamw * specifies the name of server running the domain master browser; 1319da6c28aaSamw * otherwise, it specifies a comment describing the server. The comment 1320da6c28aaSamw * can be a null string or the pointer may be a null pointer. 1321da6c28aaSamw * 1322da6c28aaSamw * In case there are multiple SERVER_INFO_1 data structures to 1323da6c28aaSamw * return, the server may put all these fixed length structures in 1324da6c28aaSamw * the return buffer, leave some space and then put all the variable 1325da6c28aaSamw * length data (the actual value of the sv1_comment strings) at the 1326da6c28aaSamw * end of the buffer. 1327da6c28aaSamw * 1328da6c28aaSamw * There is no auxiliary data to receive. 1329da6c28aaSamw */ 1330da6c28aaSamw 1331da6c28aaSamw int 1332da6c28aaSamw smb_trans_net_server_enum2(struct smb_request *sr, struct smb_xa *xa) 1333da6c28aaSamw { 1334da6c28aaSamw uint16_t opcode, level, max_bytes; 1335da6c28aaSamw uint32_t server_type; 1336da6c28aaSamw unsigned char *domain; 1337da6c28aaSamw struct mbuf_chain str_mb; 1338da6c28aaSamw char *hostname, *s; 1339da6c28aaSamw smb_kmod_cfg_t *si; 1340da6c28aaSamw 13413db3f65cSamw if (smb_mbc_decodef(&xa->req_param_mb, 13423db3f65cSamw "%wsswwls", sr, &opcode, &s, &s, 1343da6c28aaSamw &level, &max_bytes, &server_type, &domain) != 0) 1344faa1795aSjb150015 return (SDRC_NOT_IMPLEMENTED); 1345da6c28aaSamw 1346faa1795aSjb150015 si = sr->sr_cfg; 1347da6c28aaSamw 1348bbf6f00cSJordan Brown if (smb_strcasecmp(si->skc_nbdomain, (char *)domain, 0) != 0) { 13493db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 0, 0, 0, 0); 1350faa1795aSjb150015 return (SDRC_SUCCESS); 1351da6c28aaSamw } 1352da6c28aaSamw 1353da6c28aaSamw if ((server_type & MY_SERVER_TYPE) == 0) { 13543db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 0, 0, 0, 0); 1355faa1795aSjb150015 return (SDRC_SUCCESS); 1356da6c28aaSamw } 1357da6c28aaSamw 1358da6c28aaSamw MBC_INIT(&str_mb, max_bytes); 1359da6c28aaSamw 1360da6c28aaSamw hostname = si->skc_hostname; 1361da6c28aaSamw 13623db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "16c", hostname); 1363da6c28aaSamw if (level == 1) { 13643db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "bbll", 1365fd9ee8b5Sjoyce mcintosh (uint8_t)sr->sr_cfg->skc_version.sv_major, 1366fd9ee8b5Sjoyce mcintosh (uint8_t)sr->sr_cfg->skc_version.sv_minor, 1367da6c28aaSamw MY_SERVER_TYPE, MBC_LENGTH(&str_mb)); 13683db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", si->skc_system_comment); 1369da6c28aaSamw } 1370da6c28aaSamw 13713db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 0, 1372da6c28aaSamw -MBC_LENGTH(&xa->rep_data_mb), 1, 1); 13733db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "m", str_mb.chain); 1374faa1795aSjb150015 return (SDRC_SUCCESS); 1375da6c28aaSamw } 1376da6c28aaSamw 1377bbf6f00cSJordan Brown static boolean_t 1378bbf6f00cSJordan Brown is_supported_mailslot(const char *mailslot) 1379da6c28aaSamw { 1380bbf6f00cSJordan Brown static char *mailslots[] = { 1381bbf6f00cSJordan Brown PIPE_LANMAN, 1382bbf6f00cSJordan Brown MAILSLOT_LANMAN, 1383bbf6f00cSJordan Brown MAILSLOT_BROWSE, 1384bbf6f00cSJordan Brown MAILSLOT_MSBROWSE 1385bbf6f00cSJordan Brown }; 1386da6c28aaSamw 1387bbf6f00cSJordan Brown int i; 1388bbf6f00cSJordan Brown 1389bbf6f00cSJordan Brown for (i = 0; i < sizeof (mailslots)/sizeof (mailslots[0]); ++i) 1390bbf6f00cSJordan Brown if (smb_strcasecmp(mailslot, mailslots[i], 0) == 0) 1391bbf6f00cSJordan Brown return (B_TRUE); 1392bbf6f00cSJordan Brown 1393bbf6f00cSJordan Brown return (B_FALSE); 1394bbf6f00cSJordan Brown } 1395bbf6f00cSJordan Brown 1396bbf6f00cSJordan Brown /* 139768b2bbf2SGordon Ross * smb_trans_nmpipe 139868b2bbf2SGordon Ross * 139968b2bbf2SGordon Ross * This is used for RPC bind and request transactions. 140068b2bbf2SGordon Ross * 140168b2bbf2SGordon Ross * If the data available from the pipe is larger than the maximum 140268b2bbf2SGordon Ross * data size requested by the client, return as much as requested. 140368b2bbf2SGordon Ross * The residual data remains in the pipe until the client comes back 140468b2bbf2SGordon Ross * with a read request or closes the pipe. 140568b2bbf2SGordon Ross * 140668b2bbf2SGordon Ross * When we read less than what's available, we MUST return the 140768b2bbf2SGordon Ross * status NT_STATUS_BUFFER_OVERFLOW (or ERRDOS/ERROR_MORE_DATA) 1408bbf6f00cSJordan Brown */ 140968b2bbf2SGordon Ross static smb_sdrc_t 141068b2bbf2SGordon Ross smb_trans_nmpipe(smb_request_t *sr, smb_xa_t *xa) 1411bbf6f00cSJordan Brown { 1412a90cf9f2SGordon Ross smb_fsctl_t fsctl; 1413a90cf9f2SGordon Ross uint32_t status; 1414bbf6f00cSJordan Brown 141568b2bbf2SGordon Ross smbsr_lookup_file(sr); 141668b2bbf2SGordon Ross if (sr->fid_ofile == NULL) { 141768b2bbf2SGordon Ross smbsr_error(sr, NT_STATUS_INVALID_HANDLE, 141868b2bbf2SGordon Ross ERRDOS, ERRbadfid); 141968b2bbf2SGordon Ross return (SDRC_ERROR); 142068b2bbf2SGordon Ross } 142168b2bbf2SGordon Ross 1422bce01b59SGordon Ross /* 1423a90cf9f2SGordon Ross * A little confusing perhaps, but the fsctl "input" is what we 1424a90cf9f2SGordon Ross * write to the pipe (from the transaction "send" data), and the 1425a90cf9f2SGordon Ross * fsctl "output" is what we read from the pipe (and becomes the 1426a90cf9f2SGordon Ross * transaction receive data). 1427bce01b59SGordon Ross */ 1428a90cf9f2SGordon Ross fsctl.CtlCode = FSCTL_PIPE_TRANSCEIVE; 1429a90cf9f2SGordon Ross fsctl.InputCount = xa->smb_tdscnt; /* write count */ 1430a90cf9f2SGordon Ross fsctl.OutputCount = 0; /* minimum to read from the pipe */ 1431a90cf9f2SGordon Ross fsctl.MaxOutputResp = xa->smb_mdrcnt; /* max to read */ 1432a90cf9f2SGordon Ross fsctl.in_mbc = &xa->req_data_mb; /* write from here */ 1433a90cf9f2SGordon Ross fsctl.out_mbc = &xa->rep_data_mb; /* read into here */ 1434a90cf9f2SGordon Ross 1435*55f0a249SGordon Ross status = smb_opipe_transceive(sr, &fsctl); 1436a90cf9f2SGordon Ross if (status) { 1437a90cf9f2SGordon Ross smbsr_status(sr, status, 0, 0); 1438a90cf9f2SGordon Ross if (NT_SC_SEVERITY(status) == NT_STATUS_SEVERITY_ERROR) 1439a90cf9f2SGordon Ross return (SDRC_ERROR); 1440a90cf9f2SGordon Ross /* Warnings like NT_STATUS_BUFFER_OVERFLOW are OK */ 1441bce01b59SGordon Ross } 1442bce01b59SGordon Ross 144368b2bbf2SGordon Ross return (SDRC_SUCCESS); 1444da6c28aaSamw } 1445da6c28aaSamw 14467b59d02dSjb150015 static smb_sdrc_t 14479fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_trans_dispatch(smb_request_t *sr, smb_xa_t *xa) 1448da6c28aaSamw { 1449da6c28aaSamw int rc, pos; 1450da6c28aaSamw int total_bytes, n_setup, n_param, n_data; 1451da6c28aaSamw int param_off, param_pad, data_off, data_pad; 1452da6c28aaSamw uint16_t opcode; 1453da6c28aaSamw uint16_t devstate; 1454da6c28aaSamw char *req_fmt; 1455da6c28aaSamw char *rep_fmt; 1456da6c28aaSamw 1457a90cf9f2SGordon Ross if (xa->smb_suwcnt > 0) { 14583db3f65cSamw rc = smb_mbc_decodef(&xa->req_setup_mb, "ww", &opcode, 1459da6c28aaSamw &sr->smb_fid); 1460da6c28aaSamw if (rc != 0) 1461da6c28aaSamw goto trans_err_not_supported; 1462da6c28aaSamw switch (opcode) { 1463da6c28aaSamw case TRANS_SET_NMPIPE_STATE: 14643db3f65cSamw if ((rc = smb_mbc_decodef(&xa->req_param_mb, "w", 1465da6c28aaSamw &devstate)) != 0) 1466da6c28aaSamw goto trans_err_not_supported; 1467da6c28aaSamw 1468faa1795aSjb150015 rc = SDRC_SUCCESS; 1469da6c28aaSamw break; 1470da6c28aaSamw 1471da6c28aaSamw case TRANS_TRANSACT_NMPIPE: 147268b2bbf2SGordon Ross rc = smb_trans_nmpipe(sr, xa); 1473da6c28aaSamw break; 1474da6c28aaSamw 1475da6c28aaSamw case TRANS_WAIT_NMPIPE: 147668b2bbf2SGordon Ross delay(SEC_TO_TICK(1)); 1477faa1795aSjb150015 rc = SDRC_SUCCESS; 1478da6c28aaSamw break; 1479da6c28aaSamw 1480da6c28aaSamw default: 1481da6c28aaSamw goto trans_err_not_supported; 1482da6c28aaSamw } 1483da6c28aaSamw } else { 1484bbf6f00cSJordan Brown if (!is_supported_mailslot(xa->xa_pipe_name)) 1485da6c28aaSamw goto trans_err_not_supported; 1486da6c28aaSamw 14873db3f65cSamw if ((rc = smb_mbc_decodef(&xa->req_param_mb, "%wss", sr, 1488da6c28aaSamw &opcode, &req_fmt, &rep_fmt)) != 0) 1489da6c28aaSamw goto trans_err_not_supported; 1490da6c28aaSamw 1491da6c28aaSamw switch (opcode) { 1492da6c28aaSamw case API_WshareEnum: 1493da6c28aaSamw rc = smb_trans_net_share_enum(sr, xa); 1494da6c28aaSamw break; 1495da6c28aaSamw 1496da6c28aaSamw case API_WshareGetInfo: 14973ad684d6Sjb150015 rc = smb_trans_net_share_getinfo(sr, xa); 1498da6c28aaSamw break; 1499da6c28aaSamw 1500da6c28aaSamw case API_WserverGetInfo: 15013ad684d6Sjb150015 rc = smb_trans_net_server_getinfo(sr, xa); 1502da6c28aaSamw break; 1503da6c28aaSamw 1504da6c28aaSamw case API_WUserGetInfo: 15053ad684d6Sjb150015 rc = smb_trans_net_user_getinfo(sr, xa); 1506da6c28aaSamw break; 1507da6c28aaSamw 1508da6c28aaSamw case API_WWkstaGetInfo: 15093ad684d6Sjb150015 rc = smb_trans_net_workstation_getinfo(sr, xa); 1510da6c28aaSamw break; 1511da6c28aaSamw 1512da6c28aaSamw case API_NetServerEnum2: 1513da6c28aaSamw rc = smb_trans_net_server_enum2(sr, xa); 1514da6c28aaSamw break; 1515da6c28aaSamw 1516da6c28aaSamw default: 1517da6c28aaSamw goto trans_err_not_supported; 1518da6c28aaSamw } 1519da6c28aaSamw } 1520da6c28aaSamw 1521da6c28aaSamw switch (rc) { 1522faa1795aSjb150015 case SDRC_SUCCESS: 1523da6c28aaSamw break; 1524da6c28aaSamw 1525da6c28aaSamw case SDRC_DROP_VC: 1526da6c28aaSamw case SDRC_NO_REPLY: 1527faa1795aSjb150015 case SDRC_ERROR: 1528da6c28aaSamw return (rc); 1529da6c28aaSamw 1530faa1795aSjb150015 case SDRC_NOT_IMPLEMENTED: 1531da6c28aaSamw goto trans_err_not_supported; 1532da6c28aaSamw 1533da6c28aaSamw default: 1534da6c28aaSamw break; 1535da6c28aaSamw } 1536da6c28aaSamw 1537da6c28aaSamw n_setup = MBC_LENGTH(&xa->rep_setup_mb); 1538da6c28aaSamw n_param = MBC_LENGTH(&xa->rep_param_mb); 1539da6c28aaSamw n_data = MBC_LENGTH(&xa->rep_data_mb); 1540da6c28aaSamw 1541da6c28aaSamw if (xa->smb_msrcnt < n_setup || 1542da6c28aaSamw xa->smb_mprcnt < n_param || 1543da6c28aaSamw xa->smb_mdrcnt < n_data) { 1544da6c28aaSamw goto trans_err_too_small; 1545da6c28aaSamw } 1546da6c28aaSamw 1547da6c28aaSamw /* neato, blast it over there */ 1548da6c28aaSamw 1549da6c28aaSamw n_setup = (n_setup + 1) / 2; /* Convert to setup words */ 1550da6c28aaSamw param_pad = 1; /* always one */ 1551da6c28aaSamw param_off = param_pad + 32 + 21 + (n_setup << 1) + 2; 1552da6c28aaSamw data_pad = (param_off + n_param) & 1; /* Pad to short */ 1553da6c28aaSamw /* Param off from hdr start */ 1554da6c28aaSamw data_off = param_off + n_param + data_pad; 1555da6c28aaSamw total_bytes = param_pad + n_param + data_pad + n_data; 1556da6c28aaSamw 15577b59d02dSjb150015 rc = smbsr_encode_result(sr, 10+n_setup, total_bytes, 1558da6c28aaSamw "bww2.wwwwwwb.Cw#.C#.C", 1559da6c28aaSamw 10 + n_setup, /* wct */ 1560da6c28aaSamw n_param, /* Total Parameter Bytes */ 1561da6c28aaSamw n_data, /* Total Data Bytes */ 1562da6c28aaSamw n_param, /* Total Parameter Bytes this buffer */ 1563da6c28aaSamw param_off, /* Param offset from header start */ 1564da6c28aaSamw 0, /* Param displacement */ 1565da6c28aaSamw n_data, /* Total Data Bytes this buffer */ 1566da6c28aaSamw data_off, /* Data offset from header start */ 1567da6c28aaSamw 0, /* Data displacement */ 1568da6c28aaSamw n_setup, /* suwcnt */ 1569da6c28aaSamw &xa->rep_setup_mb, /* setup[] */ 1570da6c28aaSamw total_bytes, /* Total data bytes */ 1571da6c28aaSamw param_pad, 1572da6c28aaSamw &xa->rep_param_mb, 1573da6c28aaSamw data_pad, 1574da6c28aaSamw &xa->rep_data_mb); 1575faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 1576da6c28aaSamw 1577da6c28aaSamw trans_err_too_small: 1578da6c28aaSamw rc = NERR_BufTooSmall; 1579da6c28aaSamw goto trans_err; 1580da6c28aaSamw 1581da6c28aaSamw trans_err_not_supported: 1582da6c28aaSamw rc = ERROR_NOT_SUPPORTED; 1583da6c28aaSamw goto trans_err; 1584da6c28aaSamw 1585da6c28aaSamw trans_err: 1586da6c28aaSamw pos = MBC_LENGTH(&sr->reply) + 23; 15877b59d02dSjb150015 rc = smbsr_encode_result(sr, 10, 4, "bww2.wwwwwwb.www", 1588da6c28aaSamw 10, /* wct */ 1589da6c28aaSamw 4, 0, /* tpscnt tdscnt */ 1590da6c28aaSamw 4, pos, 0, /* pscnt psoff psdisp */ 1591da6c28aaSamw 0, 0, 0, /* dscnt dsoff dsdisp */ 1592da6c28aaSamw 0, /* suwcnt */ 1593da6c28aaSamw 4, /* bcc */ 1594da6c28aaSamw rc, 1595da6c28aaSamw 0); /* converter word? */ 1596faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 1597da6c28aaSamw } 1598da6c28aaSamw 15997b59d02dSjb150015 static smb_sdrc_t 16009fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_trans2_dispatch(smb_request_t *sr, smb_xa_t *xa) 1601da6c28aaSamw { 1602da6c28aaSamw int rc, pos; 1603da6c28aaSamw int total_bytes, n_setup, n_param, n_data; 1604b819cea2SGordon Ross int param_off, param_pad, data_off; 1605b819cea2SGordon Ross uint16_t data_pad; 1606da6c28aaSamw uint16_t opcode; 1607da6c28aaSamw uint16_t nt_unknown_secret = 0x0100; 1608da6c28aaSamw char *fmt; 1609da6c28aaSamw 16107f3ef643SGordon Ross n_data = xa->smb_mdrcnt; 1611da6c28aaSamw 16123db3f65cSamw if (smb_mbc_decodef(&xa->req_setup_mb, "w", &opcode) != 0) 1613da6c28aaSamw goto trans_err_not_supported; 1614da6c28aaSamw 1615da6c28aaSamw /* 1616da6c28aaSamw * Save this for /proc to read later. 1617da6c28aaSamw */ 1618da6c28aaSamw xa->smb_func = opcode; 1619da6c28aaSamw 1620da6c28aaSamw /* for now, only respond to the */ 1621da6c28aaSamw switch (opcode) { 16222c2961f8Sjose borrego case TRANS2_OPEN2: 16232c2961f8Sjose borrego rc = smb_com_trans2_open2(sr, xa); 16242c2961f8Sjose borrego break; 16252c2961f8Sjose borrego 1626da6c28aaSamw case TRANS2_CREATE_DIRECTORY: 1627da6c28aaSamw rc = smb_com_trans2_create_directory(sr, xa); 1628da6c28aaSamw break; 1629da6c28aaSamw 1630da6c28aaSamw case TRANS2_FIND_FIRST2: 1631da6c28aaSamw /* 1632da6c28aaSamw * Should have enough room to send the response 1633da6c28aaSamw * data back to client. 1634da6c28aaSamw */ 1635da6c28aaSamw if (n_data == 0) { 1636dc20a302Sas200622 smbsr_error(sr, NT_STATUS_INFO_LENGTH_MISMATCH, 1637da6c28aaSamw ERRDOS, ERROR_BAD_LENGTH); 1638faa1795aSjb150015 return (SDRC_ERROR); 1639da6c28aaSamw } 1640da6c28aaSamw rc = smb_com_trans2_find_first2(sr, xa); 1641da6c28aaSamw break; 1642da6c28aaSamw 1643da6c28aaSamw case TRANS2_FIND_NEXT2: 1644da6c28aaSamw /* 1645da6c28aaSamw * Should have enough room to send the response 1646da6c28aaSamw * data back to client. 1647da6c28aaSamw */ 1648da6c28aaSamw if (n_data == 0) { 1649dc20a302Sas200622 smbsr_error(sr, NT_STATUS_INFO_LENGTH_MISMATCH, 1650da6c28aaSamw ERRDOS, ERROR_BAD_LENGTH); 1651faa1795aSjb150015 return (SDRC_ERROR); 1652da6c28aaSamw } 1653da6c28aaSamw rc = smb_com_trans2_find_next2(sr, xa); 1654da6c28aaSamw break; 1655da6c28aaSamw 1656da6c28aaSamw case TRANS2_QUERY_FS_INFORMATION: 1657da6c28aaSamw /* 1658da6c28aaSamw * Should have enough room to send the response 1659da6c28aaSamw * data back to client. 1660da6c28aaSamw */ 1661da6c28aaSamw if (n_data == 0) { 1662dc20a302Sas200622 smbsr_error(sr, NT_STATUS_INFO_LENGTH_MISMATCH, 1663da6c28aaSamw ERRDOS, ERROR_BAD_LENGTH); 1664faa1795aSjb150015 return (SDRC_ERROR); 1665da6c28aaSamw } 1666da6c28aaSamw rc = smb_com_trans2_query_fs_information(sr, xa); 1667da6c28aaSamw break; 1668da6c28aaSamw 16699fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States case TRANS2_SET_FS_INFORMATION: 16709fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_com_trans2_set_fs_information(sr, xa); 16719fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States break; 16729fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 1673da6c28aaSamw case TRANS2_QUERY_PATH_INFORMATION: 1674da6c28aaSamw /* 1675da6c28aaSamw * Should have enough room to send the response 1676da6c28aaSamw * data back to client. 1677da6c28aaSamw */ 1678da6c28aaSamw if (n_data == 0) { 1679dc20a302Sas200622 smbsr_error(sr, NT_STATUS_INFO_LENGTH_MISMATCH, 1680da6c28aaSamw ERRDOS, ERROR_BAD_LENGTH); 1681faa1795aSjb150015 return (SDRC_ERROR); 1682da6c28aaSamw } 1683da6c28aaSamw rc = smb_com_trans2_query_path_information(sr, xa); 1684da6c28aaSamw break; 1685da6c28aaSamw 1686da6c28aaSamw case TRANS2_QUERY_FILE_INFORMATION: 1687da6c28aaSamw /* 1688da6c28aaSamw * Should have enough room to send the response 1689da6c28aaSamw * data back to client. 1690da6c28aaSamw */ 1691da6c28aaSamw if (n_data == 0) { 1692dc20a302Sas200622 smbsr_error(sr, NT_STATUS_INFO_LENGTH_MISMATCH, 1693da6c28aaSamw ERRDOS, ERROR_BAD_LENGTH); 1694faa1795aSjb150015 return (SDRC_ERROR); 1695da6c28aaSamw } 1696da6c28aaSamw rc = smb_com_trans2_query_file_information(sr, xa); 1697da6c28aaSamw break; 1698da6c28aaSamw 1699da6c28aaSamw case TRANS2_SET_PATH_INFORMATION: 1700da6c28aaSamw rc = smb_com_trans2_set_path_information(sr, xa); 1701da6c28aaSamw break; 1702da6c28aaSamw 1703da6c28aaSamw case TRANS2_SET_FILE_INFORMATION: 1704da6c28aaSamw rc = smb_com_trans2_set_file_information(sr, xa); 1705da6c28aaSamw break; 17069fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 17079fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States case TRANS2_GET_DFS_REFERRAL: 17089fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_com_trans2_get_dfs_referral(sr, xa); 17099fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States break; 17109fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 1711da6c28aaSamw default: 17122c2961f8Sjose borrego (void) smb_mbc_encodef(&xa->rep_param_mb, "w", 0); 1713da6c28aaSamw goto trans_err_not_supported; 1714da6c28aaSamw } 1715da6c28aaSamw 1716da6c28aaSamw switch (rc) { 1717faa1795aSjb150015 case SDRC_SUCCESS: 1718da6c28aaSamw break; 1719da6c28aaSamw 1720da6c28aaSamw case SDRC_DROP_VC: 1721da6c28aaSamw case SDRC_NO_REPLY: 1722faa1795aSjb150015 case SDRC_ERROR: 1723da6c28aaSamw return (rc); 1724da6c28aaSamw 1725faa1795aSjb150015 case SDRC_NOT_IMPLEMENTED: 1726da6c28aaSamw goto trans_err_not_supported; 1727da6c28aaSamw 1728da6c28aaSamw default: 1729da6c28aaSamw break; 1730da6c28aaSamw } 1731da6c28aaSamw 1732da6c28aaSamw n_setup = MBC_LENGTH(&xa->rep_setup_mb); 1733da6c28aaSamw n_param = MBC_LENGTH(&xa->rep_param_mb); 1734da6c28aaSamw n_data = MBC_LENGTH(&xa->rep_data_mb); 1735da6c28aaSamw 1736da6c28aaSamw if (xa->smb_msrcnt < n_setup || 1737da6c28aaSamw xa->smb_mprcnt < n_param || 1738da6c28aaSamw xa->smb_mdrcnt < n_data) { 1739da6c28aaSamw goto trans_err_too_small; 1740da6c28aaSamw } 1741da6c28aaSamw 1742da6c28aaSamw /* neato, blast it over there */ 1743da6c28aaSamw 1744da6c28aaSamw n_setup = (n_setup + 1) / 2; /* Conver to setup words */ 1745da6c28aaSamw param_pad = 1; /* must be one */ 1746da6c28aaSamw param_off = param_pad + 32 + 21 + (n_setup << 1) + 2; 1747da6c28aaSamw 1748da6c28aaSamw /* 1749da6c28aaSamw * Including the nt_unknown_secret value persuades netmon to 1750da6c28aaSamw * display the correct data format for QueryPathInfo and 1751da6c28aaSamw * QueryFileInfo. 1752da6c28aaSamw */ 1753da6c28aaSamw if (opcode == TRANS2_QUERY_FILE_INFORMATION || 1754da6c28aaSamw opcode == TRANS2_QUERY_PATH_INFORMATION) { 1755da6c28aaSamw data_pad = sizeof (uint16_t); 1756da6c28aaSamw data_off = param_off + n_param + data_pad; 1757da6c28aaSamw fmt = "bww2.wwwwwwb.Cw#.CwC"; 1758da6c28aaSamw nt_unknown_secret = 0x0100; 1759da6c28aaSamw } 1760da6c28aaSamw else 1761da6c28aaSamw { 1762da6c28aaSamw data_pad = (param_off + n_param) & 1; /* Pad to short */ 1763da6c28aaSamw /* Param off from hdr start */ 1764da6c28aaSamw data_off = param_off + n_param + data_pad; 1765da6c28aaSamw fmt = "bww2.wwwwwwb.Cw#.C#.C"; 1766da6c28aaSamw nt_unknown_secret = data_pad; 1767da6c28aaSamw } 1768da6c28aaSamw 1769da6c28aaSamw total_bytes = param_pad + n_param + data_pad + n_data; 1770da6c28aaSamw 17717b59d02dSjb150015 rc = smbsr_encode_result(sr, 10+n_setup, total_bytes, 1772da6c28aaSamw fmt, 1773da6c28aaSamw 10 + n_setup, /* wct */ 1774da6c28aaSamw n_param, /* Total Parameter Bytes */ 1775da6c28aaSamw n_data /* + data_pad */, /* Total Data Bytes */ 1776da6c28aaSamw n_param, /* Total Parameter Bytes this buffer */ 1777da6c28aaSamw param_off, /* Param offset from header start */ 1778da6c28aaSamw 0, /* Param displacement */ 1779da6c28aaSamw n_data /* + data_pad */, /* Total Data Bytes this buffer */ 1780da6c28aaSamw data_off, /* Data offset from header start */ 1781da6c28aaSamw 0, /* Data displacement */ 1782da6c28aaSamw n_setup, /* suwcnt */ 1783da6c28aaSamw &xa->rep_setup_mb, /* setup[] */ 1784da6c28aaSamw total_bytes, /* Total data bytes */ 1785da6c28aaSamw param_pad, 1786da6c28aaSamw &xa->rep_param_mb, 1787da6c28aaSamw nt_unknown_secret, 1788da6c28aaSamw &xa->rep_data_mb); 1789faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 1790da6c28aaSamw 1791da6c28aaSamw trans_err_too_small: 1792da6c28aaSamw rc = NERR_BufTooSmall; 1793da6c28aaSamw goto trans_err; 1794da6c28aaSamw 1795da6c28aaSamw trans_err_not_supported: 1796da6c28aaSamw rc = ERROR_NOT_SUPPORTED; 1797da6c28aaSamw goto trans_err; 1798da6c28aaSamw 1799da6c28aaSamw trans_err: 1800da6c28aaSamw pos = MBC_LENGTH(&sr->reply) + 23; 18017b59d02dSjb150015 rc = smbsr_encode_result(sr, 10, 4, "bww2.wwwwwwb.www", 1802da6c28aaSamw 10, /* wct */ 1803da6c28aaSamw 4, 0, /* tpscnt tdscnt */ 1804da6c28aaSamw 4, pos, 0, /* pscnt psoff psdisp */ 1805da6c28aaSamw 0, 0, 0, /* dscnt dsoff dsdisp */ 1806da6c28aaSamw 0, /* suwcnt */ 1807da6c28aaSamw 4, /* bcc */ 1808da6c28aaSamw rc, 1809da6c28aaSamw 0); /* converter word? */ 1810faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 1811da6c28aaSamw } 1812da6c28aaSamw 18137f3ef643SGordon Ross static uint32_t smb_xa_max_setup_count = 200; 18147f3ef643SGordon Ross static uint32_t smb_xa_max_param_count = 32 * 1024; 18157f3ef643SGordon Ross static uint32_t smb_xa_max_data_count = 64 * 1024; 18167f3ef643SGordon Ross 1817da6c28aaSamw smb_xa_t * 1818da6c28aaSamw smb_xa_create( 1819da6c28aaSamw smb_session_t *session, 1820da6c28aaSamw smb_request_t *sr, 1821da6c28aaSamw uint32_t total_parameter_count, 1822da6c28aaSamw uint32_t total_data_count, 1823da6c28aaSamw uint32_t max_parameter_count, 1824da6c28aaSamw uint32_t max_data_count, 1825da6c28aaSamw uint32_t max_setup_count, 1826da6c28aaSamw uint32_t setup_word_count) 1827da6c28aaSamw { 1828da6c28aaSamw smb_xa_t *xa, *nxa; 1829da6c28aaSamw smb_llist_t *xlist; 1830da6c28aaSamw 18317f3ef643SGordon Ross /* 18327f3ef643SGordon Ross * Sanity check what the client says it will send. 18337f3ef643SGordon Ross * Caller handles NULL return as ERRnoroom. 18347f3ef643SGordon Ross */ 18357f3ef643SGordon Ross if (setup_word_count > smb_xa_max_setup_count) 18367f3ef643SGordon Ross return (NULL); 18377f3ef643SGordon Ross if (total_parameter_count > smb_xa_max_param_count) 18387f3ef643SGordon Ross return (NULL); 18397f3ef643SGordon Ross if (total_data_count > smb_xa_max_data_count) 18407f3ef643SGordon Ross return (NULL); 18417f3ef643SGordon Ross 18427f3ef643SGordon Ross /* 18437f3ef643SGordon Ross * Limit what the client asks us to allocate for 18447f3ef643SGordon Ross * returned setup, params, data. 18457f3ef643SGordon Ross */ 18467f3ef643SGordon Ross if (max_setup_count > smb_xa_max_setup_count) 18477f3ef643SGordon Ross max_setup_count = smb_xa_max_setup_count; 18487f3ef643SGordon Ross if (max_parameter_count > smb_xa_max_param_count) 18497f3ef643SGordon Ross max_parameter_count = smb_xa_max_param_count; 18507f3ef643SGordon Ross if (max_data_count > smb_xa_max_data_count) 18517f3ef643SGordon Ross max_data_count = smb_xa_max_data_count; 18527f3ef643SGordon Ross 1853bbf6f00cSJordan Brown xa = kmem_zalloc(sizeof (smb_xa_t), KM_SLEEP); 1854da6c28aaSamw xa->xa_refcnt = 1; 1855da6c28aaSamw xa->smb_com = sr->smb_com; 1856da6c28aaSamw xa->smb_flg = sr->smb_flg; 1857da6c28aaSamw xa->smb_flg2 = sr->smb_flg2; 1858da6c28aaSamw xa->smb_tid = sr->smb_tid; 1859da6c28aaSamw xa->smb_pid = sr->smb_pid; 1860da6c28aaSamw xa->smb_uid = sr->smb_uid; 1861da6c28aaSamw xa->xa_smb_mid = sr->smb_mid; 18627f3ef643SGordon Ross xa->xa_smb_fid = 0xFFFF; 1863da6c28aaSamw xa->reply_seqnum = sr->reply_seqnum; 1864da6c28aaSamw xa->smb_tpscnt = total_parameter_count; 1865da6c28aaSamw xa->smb_tdscnt = total_data_count; 1866da6c28aaSamw xa->smb_mprcnt = max_parameter_count; 1867da6c28aaSamw xa->smb_mdrcnt = max_data_count; 1868da6c28aaSamw xa->smb_msrcnt = max_setup_count; 1869da6c28aaSamw xa->smb_suwcnt = setup_word_count; 1870da6c28aaSamw xa->xa_session = session; 1871da6c28aaSamw xa->xa_magic = SMB_XA_MAGIC; 1872da6c28aaSamw 18737f3ef643SGordon Ross /* request parts */ 18747f3ef643SGordon Ross xa->req_setup_mb.max_bytes = setup_word_count * 2; 18757f3ef643SGordon Ross xa->req_param_mb.max_bytes = total_parameter_count; 18767f3ef643SGordon Ross xa->req_data_mb.max_bytes = total_data_count; 18777f3ef643SGordon Ross 18787f3ef643SGordon Ross /* reply parts */ 18797f3ef643SGordon Ross xa->rep_setup_mb.max_bytes = max_setup_count * 2; 18807f3ef643SGordon Ross xa->rep_param_mb.max_bytes = max_parameter_count; 18817f3ef643SGordon Ross xa->rep_data_mb.max_bytes = max_data_count; 18827f3ef643SGordon Ross 1883da6c28aaSamw /* 1884da6c28aaSamw * The new xa structure is checked against the current list to see 1885da6c28aaSamw * if it exists already. 1886da6c28aaSamw */ 1887da6c28aaSamw xlist = &session->s_xa_list; 1888da6c28aaSamw smb_llist_enter(xlist, RW_WRITER); 1889da6c28aaSamw nxa = smb_llist_head(xlist); 1890da6c28aaSamw while (nxa) { 1891da6c28aaSamw ASSERT(nxa->xa_magic == SMB_XA_MAGIC); 1892da6c28aaSamw if (nxa->xa_smb_mid == xa->xa_smb_mid && 1893da6c28aaSamw nxa->smb_pid == xa->smb_pid && 1894da6c28aaSamw !SMB_XA_CLOSED(nxa) && 1895da6c28aaSamw !(nxa->xa_flags & SMB_XA_FLAG_COMPLETE)) { 1896da6c28aaSamw smb_llist_exit(xlist); 1897bbf6f00cSJordan Brown kmem_free(xa, sizeof (smb_xa_t)); 1898da6c28aaSamw return (NULL); 1899da6c28aaSamw } 1900da6c28aaSamw nxa = smb_llist_next(xlist, nxa); 1901da6c28aaSamw } 1902da6c28aaSamw smb_llist_insert_tail(xlist, xa); 1903da6c28aaSamw smb_llist_exit(xlist); 1904da6c28aaSamw return (xa); 1905da6c28aaSamw } 1906da6c28aaSamw 1907da6c28aaSamw void 1908da6c28aaSamw smb_xa_delete(smb_xa_t *xa) 1909da6c28aaSamw { 1910da6c28aaSamw ASSERT(xa->xa_refcnt == 0); 1911da6c28aaSamw ASSERT(SMB_XA_CLOSED(xa)); 1912da6c28aaSamw 1913bbf6f00cSJordan Brown if (xa->xa_pipe_name) 19149fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_mem_free(xa->xa_pipe_name); 1915da6c28aaSamw 19167f3ef643SGordon Ross /* request parts */ 19177f3ef643SGordon Ross if (xa->req_setup_mb.chain != NULL) 19187f3ef643SGordon Ross m_freem(xa->req_setup_mb.chain); 19197f3ef643SGordon Ross if (xa->req_param_mb.chain != NULL) 19207f3ef643SGordon Ross m_freem(xa->req_param_mb.chain); 19217f3ef643SGordon Ross if (xa->req_data_mb.chain != NULL) 19227f3ef643SGordon Ross m_freem(xa->req_data_mb.chain); 19237f3ef643SGordon Ross 19247f3ef643SGordon Ross /* reply parts */ 1925da6c28aaSamw if (xa->rep_setup_mb.chain != NULL) 1926da6c28aaSamw m_freem(xa->rep_setup_mb.chain); 1927da6c28aaSamw if (xa->rep_param_mb.chain != NULL) 1928da6c28aaSamw m_freem(xa->rep_param_mb.chain); 1929da6c28aaSamw if (xa->rep_data_mb.chain != NULL) 1930da6c28aaSamw m_freem(xa->rep_data_mb.chain); 1931da6c28aaSamw 1932da6c28aaSamw xa->xa_magic = (uint32_t)~SMB_XA_MAGIC; 1933bbf6f00cSJordan Brown kmem_free(xa, sizeof (smb_xa_t)); 1934da6c28aaSamw } 1935da6c28aaSamw 1936da6c28aaSamw smb_xa_t * 1937da6c28aaSamw smb_xa_hold(smb_xa_t *xa) 1938da6c28aaSamw { 1939da6c28aaSamw mutex_enter(&xa->xa_mutex); 1940da6c28aaSamw xa->xa_refcnt++; 1941da6c28aaSamw ASSERT(xa->xa_refcnt); 1942da6c28aaSamw mutex_exit(&xa->xa_mutex); 1943da6c28aaSamw return (xa); 1944da6c28aaSamw } 1945da6c28aaSamw 1946da6c28aaSamw void 1947da6c28aaSamw smb_xa_rele(smb_session_t *session, smb_xa_t *xa) 1948da6c28aaSamw { 1949da6c28aaSamw mutex_enter(&xa->xa_mutex); 1950da6c28aaSamw ASSERT(xa->xa_refcnt); 1951da6c28aaSamw xa->xa_refcnt--; 1952da6c28aaSamw if (SMB_XA_CLOSED(xa) && (xa->xa_refcnt == 0)) { 1953da6c28aaSamw mutex_exit(&xa->xa_mutex); 1954da6c28aaSamw smb_llist_enter(&session->s_xa_list, RW_WRITER); 1955da6c28aaSamw smb_llist_remove(&session->s_xa_list, xa); 1956da6c28aaSamw smb_llist_exit(&session->s_xa_list); 1957da6c28aaSamw smb_xa_delete(xa); 1958da6c28aaSamw return; 1959da6c28aaSamw } 1960da6c28aaSamw mutex_exit(&xa->xa_mutex); 1961da6c28aaSamw } 1962da6c28aaSamw 1963da6c28aaSamw int 1964da6c28aaSamw smb_xa_open(smb_xa_t *xa) 1965da6c28aaSamw { 1966da6c28aaSamw int rc; 1967da6c28aaSamw 1968da6c28aaSamw mutex_enter(&xa->xa_mutex); 1969da6c28aaSamw 1970da6c28aaSamw ASSERT((xa->xa_flags & SMB_XA_FLAG_OPEN) == 0); 1971da6c28aaSamw 1972da6c28aaSamw if ((xa->xa_flags & SMB_XA_FLAG_CLOSE) == 0) { 1973da6c28aaSamw xa->xa_flags |= SMB_XA_FLAG_OPEN; 1974da6c28aaSamw rc = 0; 1975da6c28aaSamw } else { 1976da6c28aaSamw rc = ERROR_INVALID_HANDLE; 1977da6c28aaSamw } 1978da6c28aaSamw 1979da6c28aaSamw mutex_exit(&xa->xa_mutex); 1980da6c28aaSamw 1981da6c28aaSamw return (rc); 1982da6c28aaSamw } 1983da6c28aaSamw 1984da6c28aaSamw void 1985da6c28aaSamw smb_xa_close(smb_xa_t *xa) 1986da6c28aaSamw { 1987da6c28aaSamw mutex_enter(&xa->xa_mutex); 1988da6c28aaSamw xa->xa_flags |= SMB_XA_FLAG_CLOSE; 1989da6c28aaSamw xa->xa_flags &= ~SMB_XA_FLAG_OPEN; 1990da6c28aaSamw 1991da6c28aaSamw if (xa->xa_refcnt == 0) { 1992da6c28aaSamw mutex_exit(&xa->xa_mutex); 1993da6c28aaSamw smb_llist_enter(&xa->xa_session->s_xa_list, RW_WRITER); 1994da6c28aaSamw smb_llist_remove(&xa->xa_session->s_xa_list, xa); 1995da6c28aaSamw smb_llist_exit(&xa->xa_session->s_xa_list); 1996da6c28aaSamw smb_xa_delete(xa); 1997da6c28aaSamw return; 1998da6c28aaSamw } 1999da6c28aaSamw 2000da6c28aaSamw mutex_exit(&xa->xa_mutex); 2001da6c28aaSamw } 2002da6c28aaSamw 2003da6c28aaSamw int 2004da6c28aaSamw smb_xa_complete(smb_xa_t *xa) 2005da6c28aaSamw { 2006da6c28aaSamw int rc; 2007da6c28aaSamw 2008da6c28aaSamw mutex_enter(&xa->xa_mutex); 2009da6c28aaSamw if (xa->xa_flags & (SMB_XA_FLAG_COMPLETE | SMB_XA_FLAG_CLOSE)) { 20107f3ef643SGordon Ross rc = 0; /* error ("not complete") */ 2011da6c28aaSamw } else { 20127f3ef643SGordon Ross rc = 1; /* Yes, "complete" */ 2013da6c28aaSamw xa->xa_flags |= SMB_XA_FLAG_COMPLETE; 20147f3ef643SGordon Ross 20157f3ef643SGordon Ross /* 20167f3ef643SGordon Ross * During trans & trans-secondary processing, 20177f3ef643SGordon Ross * we copied the request data into these. 20187f3ef643SGordon Ross * Now we want to parse them, so we need to 20197f3ef643SGordon Ross * move the "finger" back to the beginning. 20207f3ef643SGordon Ross */ 20217f3ef643SGordon Ross xa->req_setup_mb.chain_offset = 0; 20227f3ef643SGordon Ross xa->req_param_mb.chain_offset = 0; 20237f3ef643SGordon Ross xa->req_data_mb.chain_offset = 0; 2024da6c28aaSamw } 20257f3ef643SGordon Ross 2026da6c28aaSamw mutex_exit(&xa->xa_mutex); 2027da6c28aaSamw return (rc); 2028da6c28aaSamw } 2029da6c28aaSamw 2030da6c28aaSamw smb_xa_t * 2031da6c28aaSamw smb_xa_find( 2032da6c28aaSamw smb_session_t *session, 2033a90cf9f2SGordon Ross uint32_t pid, 2034da6c28aaSamw uint16_t mid) 2035da6c28aaSamw { 2036da6c28aaSamw smb_xa_t *xa; 2037da6c28aaSamw smb_llist_t *xlist; 2038da6c28aaSamw 2039da6c28aaSamw xlist = &session->s_xa_list; 2040da6c28aaSamw smb_llist_enter(xlist, RW_READER); 2041da6c28aaSamw xa = smb_llist_head(xlist); 2042da6c28aaSamw while (xa) { 2043da6c28aaSamw mutex_enter(&xa->xa_mutex); 2044da6c28aaSamw if (xa->xa_smb_mid == mid && 2045da6c28aaSamw xa->smb_pid == pid && 2046da6c28aaSamw !SMB_XA_CLOSED(xa) && 2047da6c28aaSamw !(xa->xa_flags & SMB_XA_FLAG_COMPLETE)) { 2048da6c28aaSamw xa->xa_refcnt++; 2049da6c28aaSamw ASSERT(xa->xa_refcnt); 2050da6c28aaSamw mutex_exit(&xa->xa_mutex); 2051da6c28aaSamw break; 2052da6c28aaSamw } 2053da6c28aaSamw mutex_exit(&xa->xa_mutex); 2054da6c28aaSamw xa = smb_llist_next(xlist, xa); 2055da6c28aaSamw } 2056da6c28aaSamw smb_llist_exit(xlist); 2057da6c28aaSamw return (xa); 2058da6c28aaSamw } 2059