1da6c28aaSamw /* 2da6c28aaSamw * CDDL HEADER START 3da6c28aaSamw * 4da6c28aaSamw * The contents of this file are subject to the terms of the 5da6c28aaSamw * Common Development and Distribution License (the "License"). 6da6c28aaSamw * You may not use this file except in compliance with the License. 7da6c28aaSamw * 8da6c28aaSamw * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9da6c28aaSamw * or http://www.opensolaris.org/os/licensing. 10da6c28aaSamw * See the License for the specific language governing permissions 11da6c28aaSamw * and limitations under the License. 12da6c28aaSamw * 13da6c28aaSamw * When distributing Covered Code, include this CDDL HEADER in each 14da6c28aaSamw * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15da6c28aaSamw * If applicable, add the following below this CDDL HEADER, with the 16da6c28aaSamw * fields enclosed by brackets "[]" replaced with your own identifying 17da6c28aaSamw * information: Portions Copyright [yyyy] [name of copyright owner] 18da6c28aaSamw * 19da6c28aaSamw * CDDL HEADER END 20da6c28aaSamw */ 21da6c28aaSamw /* 22*c5866007SKeyur Desai * Copyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved. 23da6c28aaSamw */ 24da6c28aaSamw 25bbf6f00cSJordan Brown #include <smbsrv/smb_kproto.h> 26da6c28aaSamw #include <smbsrv/smb_fsops.h> 273db3f65cSamw #include <smbsrv/smb_share.h> 28bbf6f00cSJordan Brown #include <smbsrv/string.h> 29da6c28aaSamw #include <smbsrv/nmpipes.h> 30da6c28aaSamw #include <smbsrv/mailslot.h> 31da6c28aaSamw #include <smbsrv/lmerr.h> 32da6c28aaSamw 33da6c28aaSamw /* 34da6c28aaSamw * count of bytes in server response packet 35da6c28aaSamw * except parameters and data. Note that setup 36da6c28aaSamw * word count is zero. 37da6c28aaSamw */ 38da6c28aaSamw #define RESP_HEADER_LEN 24 39da6c28aaSamw 40da6c28aaSamw /* 41b1352070SAlan Wright * We started by using common functions for transaction/transaction2 42da6c28aaSamw * and transaction_secondary/transaction2_secondary because they 43da6c28aaSamw * are respectively so similar. However, it turned out to be a bad 44da6c28aaSamw * idea because of quirky differences. Be sure if you modify one 45da6c28aaSamw * of these four functions to check and see if the modification should 46da6c28aaSamw * be applied to its peer. 47da6c28aaSamw */ 48da6c28aaSamw 499fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States static int smb_trans_ready(smb_xa_t *); 509fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States static smb_sdrc_t smb_trans_dispatch(smb_request_t *, smb_xa_t *); 519fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States static smb_sdrc_t smb_trans2_dispatch(smb_request_t *, smb_xa_t *); 52da6c28aaSamw 537b59d02dSjb150015 smb_sdrc_t 54faa1795aSjb150015 smb_pre_transaction(smb_request_t *sr) 55faa1795aSjb150015 { 56faa1795aSjb150015 DTRACE_SMB_1(op__Transaction__start, smb_request_t *, sr); 57faa1795aSjb150015 return (SDRC_SUCCESS); 58faa1795aSjb150015 } 59faa1795aSjb150015 60faa1795aSjb150015 void 61faa1795aSjb150015 smb_post_transaction(smb_request_t *sr) 62faa1795aSjb150015 { 63faa1795aSjb150015 DTRACE_SMB_1(op__Transaction__done, smb_request_t *, sr); 64faa1795aSjb150015 } 65faa1795aSjb150015 66faa1795aSjb150015 smb_sdrc_t 67faa1795aSjb150015 smb_com_transaction(smb_request_t *sr) 68da6c28aaSamw { 69da6c28aaSamw int rc; 70da6c28aaSamw unsigned char msrcnt, suwcnt; 71da6c28aaSamw uint16_t tpscnt, tdscnt, mprcnt, mdrcnt, flags; 72da6c28aaSamw uint16_t pscnt, psoff, dscnt, dsoff; 73da6c28aaSamw uint32_t timeo; 74da6c28aaSamw struct smb_xa *xa; 75da6c28aaSamw char *stn; 76da6c28aaSamw int ready; 77da6c28aaSamw 78da6c28aaSamw rc = smbsr_decode_vwv(sr, SMB_TRANSHDR_ED_FMT, 79da6c28aaSamw &tpscnt, &tdscnt, &mprcnt, &mdrcnt, &msrcnt, &flags, 80da6c28aaSamw &timeo, &pscnt, &psoff, &dscnt, &dsoff, &suwcnt); 81da6c28aaSamw 827b59d02dSjb150015 if (rc != 0) 83faa1795aSjb150015 return (SDRC_ERROR); 84da6c28aaSamw 85da6c28aaSamw xa = smb_xa_create(sr->session, sr, tpscnt, tdscnt, mprcnt, mdrcnt, 86da6c28aaSamw msrcnt, suwcnt); 87da6c28aaSamw if (xa == NULL) { 88dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRnoroom); 89faa1795aSjb150015 return (SDRC_ERROR); 90da6c28aaSamw } 91da6c28aaSamw 92da6c28aaSamw /* Should be some alignment stuff here in SMB? */ 93da6c28aaSamw if (sr->smb_flg2 & SMB_FLAGS2_UNICODE) { 94da6c28aaSamw rc = smbsr_decode_data(sr, "%.U", sr, &stn); 95da6c28aaSamw } else { 96da6c28aaSamw rc = smbsr_decode_data(sr, "%s", sr, &stn); 97da6c28aaSamw } 98da6c28aaSamw if (rc != 0) { 99da6c28aaSamw smb_xa_rele(sr->session, xa); 100faa1795aSjb150015 return (SDRC_ERROR); 101da6c28aaSamw } 102da6c28aaSamw 1039fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States xa->xa_pipe_name = smb_mem_strdup(stn); 104da6c28aaSamw xa->smb_flags = flags; 105da6c28aaSamw xa->smb_timeout = timeo; 106da6c28aaSamw xa->req_disp_param = pscnt; 107da6c28aaSamw xa->req_disp_data = dscnt; 108da6c28aaSamw 109da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_setup_mb, &sr->smb_vwv, 110da6c28aaSamw sr->smb_vwv.chain_offset, suwcnt * 2)) { 111da6c28aaSamw smb_xa_rele(sr->session, xa); 112dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 113faa1795aSjb150015 return (SDRC_ERROR); 114da6c28aaSamw } 115da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_param_mb, &sr->command, psoff, pscnt)) { 116da6c28aaSamw smb_xa_rele(sr->session, xa); 117dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 118faa1795aSjb150015 return (SDRC_ERROR); 119da6c28aaSamw } 120da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_data_mb, &sr->command, dsoff, dscnt)) { 121da6c28aaSamw smb_xa_rele(sr->session, xa); 122dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 123faa1795aSjb150015 return (SDRC_ERROR); 124da6c28aaSamw } 125da6c28aaSamw 126da6c28aaSamw ready = smb_trans_ready(xa); 127da6c28aaSamw 128da6c28aaSamw if (smb_xa_open(xa)) { 129da6c28aaSamw smb_xa_rele(sr->session, xa); 130dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRsrverror); 131faa1795aSjb150015 return (SDRC_ERROR); 132da6c28aaSamw } 133da6c28aaSamw sr->r_xa = xa; 134da6c28aaSamw 135da6c28aaSamw if (!ready) { 1367b59d02dSjb150015 rc = smbsr_encode_empty_result(sr); 137faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 138da6c28aaSamw } 139da6c28aaSamw 140da6c28aaSamw if (!smb_xa_complete(xa)) { 141da6c28aaSamw smb_xa_close(xa); 142dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 143faa1795aSjb150015 return (SDRC_ERROR); 144da6c28aaSamw } 145da6c28aaSamw 146da6c28aaSamw return (smb_trans_dispatch(sr, xa)); 147da6c28aaSamw } 148da6c28aaSamw 1497b59d02dSjb150015 smb_sdrc_t 150faa1795aSjb150015 smb_pre_transaction_secondary(smb_request_t *sr) 151faa1795aSjb150015 { 152faa1795aSjb150015 DTRACE_SMB_1(op__TransactionSecondary__start, smb_request_t *, sr); 153faa1795aSjb150015 return (SDRC_SUCCESS); 154faa1795aSjb150015 } 155faa1795aSjb150015 156faa1795aSjb150015 void 157faa1795aSjb150015 smb_post_transaction_secondary(smb_request_t *sr) 158faa1795aSjb150015 { 159faa1795aSjb150015 DTRACE_SMB_1(op__TransactionSecondary__done, smb_request_t *, sr); 160faa1795aSjb150015 } 161faa1795aSjb150015 162faa1795aSjb150015 smb_sdrc_t 163faa1795aSjb150015 smb_com_transaction_secondary(smb_request_t *sr) 164da6c28aaSamw { 165da6c28aaSamw uint16_t tpscnt, tdscnt, pscnt, psdisp; 166da6c28aaSamw uint16_t dscnt, dsoff, dsdisp, psoff; 167da6c28aaSamw smb_xa_t *xa; 168da6c28aaSamw int rc; 169da6c28aaSamw 170da6c28aaSamw if ((xa = smbsr_lookup_xa(sr)) == 0) { 171dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRsrverror); 172faa1795aSjb150015 return (SDRC_ERROR); 173da6c28aaSamw } 174da6c28aaSamw 175da6c28aaSamw if (sr->session->signing.flags & SMB_SIGNING_ENABLED) { 176da6c28aaSamw if (smb_sign_check_secondary(sr, xa->reply_seqnum) != 0) { 177dc20a302Sas200622 smbsr_error(sr, NT_STATUS_ACCESS_DENIED, 178da6c28aaSamw ERRDOS, ERRnoaccess); 179faa1795aSjb150015 return (SDRC_ERROR); 180da6c28aaSamw } 181da6c28aaSamw } 182da6c28aaSamw 183da6c28aaSamw if (xa->smb_com != SMB_COM_TRANSACTION) { 184da6c28aaSamw return (SDRC_DROP_VC); 185da6c28aaSamw } 186da6c28aaSamw 187da6c28aaSamw rc = smbsr_decode_vwv(sr, SMB_TRANSSHDR_ED_FMT, &tpscnt, &tdscnt, 188da6c28aaSamw &pscnt, &psoff, &psdisp, &dscnt, &dsoff, &dsdisp); 189da6c28aaSamw 1907b59d02dSjb150015 if (rc != 0) 191faa1795aSjb150015 return (SDRC_ERROR); 192da6c28aaSamw 193da6c28aaSamw mutex_enter(&xa->xa_mutex); 194da6c28aaSamw xa->smb_tpscnt = tpscnt; /* might have shrunk */ 195da6c28aaSamw xa->smb_tdscnt = tdscnt; /* might have shrunk */ 196da6c28aaSamw xa->req_disp_param = psdisp+pscnt; 197da6c28aaSamw xa->req_disp_data = dsdisp+dscnt; 198da6c28aaSamw 199da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_param_mb, &sr->command, psoff, pscnt)) { 200da6c28aaSamw mutex_exit(&xa->xa_mutex); 201da6c28aaSamw smb_xa_close(xa); 202dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 203faa1795aSjb150015 return (SDRC_ERROR); 204da6c28aaSamw } 205da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_data_mb, &sr->command, dsoff, dscnt)) { 206da6c28aaSamw mutex_exit(&xa->xa_mutex); 207da6c28aaSamw smb_xa_close(xa); 208dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 209faa1795aSjb150015 return (SDRC_ERROR); 210da6c28aaSamw } 211da6c28aaSamw mutex_exit(&xa->xa_mutex); 212da6c28aaSamw 213da6c28aaSamw if (!smb_trans_ready(xa)) 214da6c28aaSamw return (SDRC_NO_REPLY); 215da6c28aaSamw 216da6c28aaSamw if (!smb_xa_complete(xa)) 217da6c28aaSamw return (SDRC_NO_REPLY); 218da6c28aaSamw 219da6c28aaSamw return (smb_trans_dispatch(sr, xa)); 220da6c28aaSamw } 221da6c28aaSamw 2227b59d02dSjb150015 smb_sdrc_t 223faa1795aSjb150015 smb_pre_ioctl(smb_request_t *sr) 224faa1795aSjb150015 { 225faa1795aSjb150015 DTRACE_SMB_1(op__Ioctl__start, smb_request_t *, sr); 226faa1795aSjb150015 return (SDRC_SUCCESS); 227faa1795aSjb150015 } 228faa1795aSjb150015 229faa1795aSjb150015 void 230faa1795aSjb150015 smb_post_ioctl(smb_request_t *sr) 231faa1795aSjb150015 { 232faa1795aSjb150015 DTRACE_SMB_1(op__Ioctl__done, smb_request_t *, sr); 233faa1795aSjb150015 } 234faa1795aSjb150015 235faa1795aSjb150015 smb_sdrc_t 236faa1795aSjb150015 smb_com_ioctl(smb_request_t *sr) 237da6c28aaSamw { 238da6c28aaSamw uint16_t fid, category, function, tpscnt, tdscnt, mprcnt; 239da6c28aaSamw uint16_t mdrcnt, pscnt, pdoff, dscnt, dsoff; 240da6c28aaSamw uint32_t timeout; 241da6c28aaSamw int rc; 242da6c28aaSamw 243da6c28aaSamw rc = smbsr_decode_vwv(sr, "wwwwwwwl2.wwww", &fid, &category, &function, 244da6c28aaSamw &tpscnt, &tdscnt, &mprcnt, &mdrcnt, &timeout, &pscnt, 245da6c28aaSamw &pdoff, &dscnt, &dsoff); 246da6c28aaSamw 2477b59d02dSjb150015 if (rc != 0) 248faa1795aSjb150015 return (SDRC_ERROR); 249da6c28aaSamw 250faa1795aSjb150015 return (SDRC_NOT_IMPLEMENTED); 251da6c28aaSamw } 252da6c28aaSamw 253faa1795aSjb150015 smb_sdrc_t 254faa1795aSjb150015 smb_pre_transaction2(smb_request_t *sr) 255da6c28aaSamw { 256faa1795aSjb150015 DTRACE_SMB_1(op__Transaction2__start, smb_request_t *, sr); 257faa1795aSjb150015 return (SDRC_SUCCESS); 258faa1795aSjb150015 } 259faa1795aSjb150015 260faa1795aSjb150015 void 261faa1795aSjb150015 smb_post_transaction2(smb_request_t *sr) 262faa1795aSjb150015 { 263faa1795aSjb150015 DTRACE_SMB_1(op__Transaction2__done, smb_request_t *, sr); 264da6c28aaSamw } 265da6c28aaSamw 2667b59d02dSjb150015 smb_sdrc_t 267da6c28aaSamw smb_com_transaction2(struct smb_request *sr) 268da6c28aaSamw { 269da6c28aaSamw unsigned char msrcnt, suwcnt; 270da6c28aaSamw uint16_t tpscnt, tdscnt, mprcnt, mdrcnt, flags; 271da6c28aaSamw uint16_t pscnt, psoff, dscnt, dsoff; 272da6c28aaSamw uint32_t timeo; 273da6c28aaSamw smb_xa_t *xa; 274da6c28aaSamw int ready; 275da6c28aaSamw int rc; 276da6c28aaSamw 277da6c28aaSamw rc = smbsr_decode_vwv(sr, SMB_TRANSHDR_ED_FMT, &tpscnt, &tdscnt, 278da6c28aaSamw &mprcnt, &mdrcnt, &msrcnt, &flags, &timeo, &pscnt, &psoff, &dscnt, 279da6c28aaSamw &dsoff, &suwcnt); 280da6c28aaSamw 2817b59d02dSjb150015 if (rc != 0) 282faa1795aSjb150015 return (SDRC_ERROR); 283da6c28aaSamw 284da6c28aaSamw xa = smb_xa_create(sr->session, sr, tpscnt, tdscnt, mprcnt, mdrcnt, 285da6c28aaSamw msrcnt, suwcnt); 286da6c28aaSamw if (xa == 0) { 287dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRnoroom); 288faa1795aSjb150015 return (SDRC_ERROR); 289da6c28aaSamw } 290da6c28aaSamw 291da6c28aaSamw xa->smb_flags = flags; 292da6c28aaSamw xa->smb_timeout = timeo; 293da6c28aaSamw xa->req_disp_param = pscnt; 294da6c28aaSamw xa->req_disp_data = dscnt; 295da6c28aaSamw 296da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_setup_mb, &sr->smb_vwv, 297da6c28aaSamw sr->smb_vwv.chain_offset, suwcnt*2)) { 298da6c28aaSamw smb_xa_rele(sr->session, xa); 299dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 300faa1795aSjb150015 return (SDRC_ERROR); 301da6c28aaSamw } 302da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_param_mb, &sr->command, psoff, pscnt)) { 303da6c28aaSamw smb_xa_rele(sr->session, xa); 304dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 305faa1795aSjb150015 return (SDRC_ERROR); 306da6c28aaSamw } 307da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_data_mb, &sr->command, dsoff, dscnt)) { 308da6c28aaSamw smb_xa_rele(sr->session, xa); 309dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 310faa1795aSjb150015 return (SDRC_ERROR); 311da6c28aaSamw } 312da6c28aaSamw 313da6c28aaSamw ready = smb_trans_ready(xa); 314da6c28aaSamw 315da6c28aaSamw if (smb_xa_open(xa)) { 316da6c28aaSamw smb_xa_rele(sr->session, xa); 317dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRsrverror); 318faa1795aSjb150015 return (SDRC_ERROR); 319da6c28aaSamw } 320da6c28aaSamw sr->r_xa = xa; 321da6c28aaSamw 322da6c28aaSamw if (!ready) { 3237b59d02dSjb150015 rc = smbsr_encode_empty_result(sr); 324faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 325da6c28aaSamw } 326da6c28aaSamw 327da6c28aaSamw if (!smb_xa_complete(xa)) { 328da6c28aaSamw smb_xa_close(xa); 329dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 330faa1795aSjb150015 return (SDRC_ERROR); 331da6c28aaSamw } 332da6c28aaSamw 333da6c28aaSamw return (smb_trans2_dispatch(sr, xa)); 334da6c28aaSamw } 335da6c28aaSamw 3367b59d02dSjb150015 smb_sdrc_t 337faa1795aSjb150015 smb_pre_transaction2_secondary(smb_request_t *sr) 338faa1795aSjb150015 { 339faa1795aSjb150015 DTRACE_SMB_1(op__Transaction2Secondary__start, smb_request_t *, sr); 340faa1795aSjb150015 return (SDRC_SUCCESS); 341faa1795aSjb150015 } 342faa1795aSjb150015 343faa1795aSjb150015 void 344faa1795aSjb150015 smb_post_transaction2_secondary(smb_request_t *sr) 345faa1795aSjb150015 { 346faa1795aSjb150015 DTRACE_SMB_1(op__Transaction2Secondary__done, smb_request_t *, sr); 347faa1795aSjb150015 } 348faa1795aSjb150015 349faa1795aSjb150015 smb_sdrc_t 350faa1795aSjb150015 smb_com_transaction2_secondary(smb_request_t *sr) 351da6c28aaSamw { 352da6c28aaSamw uint16_t tpscnt, tdscnt, fid; 353da6c28aaSamw uint16_t pscnt, psoff, psdisp, dscnt, dsoff, dsdisp; 354da6c28aaSamw smb_xa_t *xa; 355da6c28aaSamw int rc; 356da6c28aaSamw 357da6c28aaSamw if ((xa = smbsr_lookup_xa(sr)) == 0) { 358dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRsrverror); 359faa1795aSjb150015 return (SDRC_ERROR); 360da6c28aaSamw } 361da6c28aaSamw 362da6c28aaSamw if (sr->session->signing.flags & SMB_SIGNING_ENABLED) { 363da6c28aaSamw if (smb_sign_check_secondary(sr, xa->reply_seqnum) != 0) { 364dc20a302Sas200622 smbsr_error(sr, NT_STATUS_ACCESS_DENIED, 365da6c28aaSamw ERRDOS, ERRnoaccess); 366faa1795aSjb150015 return (SDRC_ERROR); 367da6c28aaSamw } 368da6c28aaSamw } 369da6c28aaSamw 370da6c28aaSamw if (xa->smb_com != SMB_COM_TRANSACTION2) { 371da6c28aaSamw return (SDRC_DROP_VC); 372da6c28aaSamw } 373da6c28aaSamw 374da6c28aaSamw rc = smbsr_decode_vwv(sr, SMB_TRANS2SHDR_ED_FMT, &tpscnt, &tdscnt, 375da6c28aaSamw &pscnt, &psoff, &psdisp, &dscnt, &dsoff, &dsdisp, &fid); 376da6c28aaSamw 3777b59d02dSjb150015 if (rc != 0) 378faa1795aSjb150015 return (SDRC_ERROR); 379da6c28aaSamw 380da6c28aaSamw mutex_enter(&xa->xa_mutex); 381da6c28aaSamw xa->smb_tpscnt = tpscnt; /* might have shrunk */ 382da6c28aaSamw xa->smb_tdscnt = tdscnt; /* might have shrunk */ 383da6c28aaSamw xa->xa_smb_fid = fid; /* overwrite rules? */ 384da6c28aaSamw xa->req_disp_param = psdisp + pscnt; 385da6c28aaSamw xa->req_disp_data = dsdisp + dscnt; 386da6c28aaSamw 387da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_param_mb, &sr->command, psoff, pscnt)) { 388da6c28aaSamw mutex_exit(&xa->xa_mutex); 389da6c28aaSamw smb_xa_close(xa); 390dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 391faa1795aSjb150015 return (SDRC_ERROR); 392da6c28aaSamw } 393da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_data_mb, &sr->command, dsoff, dscnt)) { 394da6c28aaSamw mutex_exit(&xa->xa_mutex); 395da6c28aaSamw smb_xa_close(xa); 396dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 397faa1795aSjb150015 return (SDRC_ERROR); 398da6c28aaSamw } 399da6c28aaSamw mutex_exit(&xa->xa_mutex); 400da6c28aaSamw 401da6c28aaSamw if (!smb_trans_ready(xa)) 402da6c28aaSamw return (SDRC_NO_REPLY); 403da6c28aaSamw 404da6c28aaSamw if (!smb_xa_complete(xa)) 405da6c28aaSamw return (SDRC_NO_REPLY); 406da6c28aaSamw 407da6c28aaSamw return (smb_trans2_dispatch(sr, xa)); 408da6c28aaSamw } 409da6c28aaSamw 4107b59d02dSjb150015 static smb_sdrc_t 411da6c28aaSamw smb_nt_trans_dispatch(struct smb_request *sr, struct smb_xa *xa) 412da6c28aaSamw { 413da6c28aaSamw int rc; 414da6c28aaSamw int total_bytes, n_setup, n_param, n_data; 415da6c28aaSamw int param_off, param_pad, data_off, data_pad; 416da6c28aaSamw 417da6c28aaSamw n_setup = (xa->smb_msrcnt < 200) ? xa->smb_msrcnt : 200; 418da6c28aaSamw n_setup++; 419da6c28aaSamw n_setup = n_setup & ~0x0001; 420da6c28aaSamw n_param = (xa->smb_mprcnt < smb_maxbufsize) 421da6c28aaSamw ? xa->smb_mprcnt : smb_maxbufsize; 422da6c28aaSamw n_param++; 423da6c28aaSamw n_param = n_param & ~0x0001; 424da6c28aaSamw rc = smb_maxbufsize - (SMBHEADERSIZE + 28 + n_setup + n_param); 425da6c28aaSamw n_data = (xa->smb_mdrcnt < rc) ? xa->smb_mdrcnt : rc; 426da6c28aaSamw MBC_INIT(&xa->rep_setup_mb, n_setup * 2); 427da6c28aaSamw MBC_INIT(&xa->rep_param_mb, n_param); 428da6c28aaSamw MBC_INIT(&xa->rep_data_mb, n_data); 429da6c28aaSamw 430da6c28aaSamw switch (xa->smb_func) { 431da6c28aaSamw case NT_TRANSACT_CREATE: 432faa1795aSjb150015 if ((rc = smb_pre_nt_transact_create(sr, xa)) == 0) 433da6c28aaSamw rc = smb_nt_transact_create(sr, xa); 434faa1795aSjb150015 smb_post_nt_transact_create(sr, xa); 435da6c28aaSamw break; 436da6c28aaSamw case NT_TRANSACT_NOTIFY_CHANGE: 437da6c28aaSamw rc = smb_nt_transact_notify_change(sr, xa); 438da6c28aaSamw break; 439da6c28aaSamw case NT_TRANSACT_QUERY_SECURITY_DESC: 440da6c28aaSamw rc = smb_nt_transact_query_security_info(sr, xa); 441da6c28aaSamw break; 442da6c28aaSamw case NT_TRANSACT_SET_SECURITY_DESC: 443da6c28aaSamw rc = smb_nt_transact_set_security_info(sr, xa); 444da6c28aaSamw break; 445da6c28aaSamw case NT_TRANSACT_IOCTL: 446da6c28aaSamw rc = smb_nt_transact_ioctl(sr, xa); 447da6c28aaSamw break; 448da6c28aaSamw case NT_TRANSACT_QUERY_QUOTA: 4499fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_nt_transact_query_quota(sr, xa); 450b1352070SAlan Wright break; 451da6c28aaSamw case NT_TRANSACT_SET_QUOTA: 4529fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_nt_transact_set_quota(sr, xa); 4539fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States break; 454bbf6f00cSJordan Brown case NT_TRANSACT_RENAME: 455bbf6f00cSJordan Brown rc = smb_nt_transact_rename(sr, xa); 456bbf6f00cSJordan Brown break; 457bbf6f00cSJordan Brown 458da6c28aaSamw default: 459dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRsmbcmd); 460faa1795aSjb150015 return (SDRC_ERROR); 461da6c28aaSamw } 462da6c28aaSamw 463da6c28aaSamw switch (rc) { 464faa1795aSjb150015 case SDRC_SUCCESS: 465da6c28aaSamw break; 466da6c28aaSamw 467da6c28aaSamw case SDRC_DROP_VC: 468da6c28aaSamw case SDRC_NO_REPLY: 469faa1795aSjb150015 case SDRC_ERROR: 47059229f98Sjose borrego case SDRC_SR_KEPT: 471da6c28aaSamw return (rc); 472da6c28aaSamw 473faa1795aSjb150015 case SDRC_NOT_IMPLEMENTED: 474dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRsmbcmd); 475faa1795aSjb150015 return (SDRC_ERROR); 476da6c28aaSamw 477da6c28aaSamw default: 478da6c28aaSamw break; 479da6c28aaSamw } 480da6c28aaSamw 481da6c28aaSamw n_setup = MBC_LENGTH(&xa->rep_setup_mb); 482da6c28aaSamw n_param = MBC_LENGTH(&xa->rep_param_mb); 483da6c28aaSamw n_data = MBC_LENGTH(&xa->rep_data_mb); 484da6c28aaSamw 485da6c28aaSamw if (xa->smb_msrcnt < n_setup || 486da6c28aaSamw xa->smb_mprcnt < n_param || 487da6c28aaSamw xa->smb_mdrcnt < n_data) { 488dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRsmbcmd); 489faa1795aSjb150015 return (SDRC_ERROR); 490da6c28aaSamw } 491da6c28aaSamw 492da6c28aaSamw /* neato, blast it over there */ 493da6c28aaSamw 494da6c28aaSamw n_setup = (n_setup + 1) / 2; /* Conver to setup words */ 495da6c28aaSamw param_pad = 1; /* must be one */ 496da6c28aaSamw param_off = param_pad + 32 + 37 + (n_setup << 1) + 2; 497da6c28aaSamw data_pad = (4 - ((param_off + n_param) & 3)) % 4; /* Pad to 4 byte */ 498da6c28aaSamw data_off = param_off + n_param + data_pad; /* Param off from hdr */ 499da6c28aaSamw total_bytes = param_pad + n_param + data_pad + n_data; 500da6c28aaSamw 5017b59d02dSjb150015 rc = smbsr_encode_result(sr, 18+n_setup, total_bytes, 502da6c28aaSamw "b3.llllllllbCw#.C#.C", 503da6c28aaSamw 18 + n_setup, /* wct */ 504da6c28aaSamw n_param, /* Total Parameter Bytes */ 505da6c28aaSamw n_data, /* Total Data Bytes */ 506da6c28aaSamw n_param, /* Total Parameter Bytes this buffer */ 507da6c28aaSamw param_off, /* Param offset from header start */ 508da6c28aaSamw 0, /* Param displacement */ 509da6c28aaSamw n_data, /* Total Data Bytes this buffer */ 510da6c28aaSamw data_off, /* Data offset from header start */ 511da6c28aaSamw 0, /* Data displacement */ 512da6c28aaSamw n_setup, /* suwcnt */ 513da6c28aaSamw &xa->rep_setup_mb, /* setup[] */ 514da6c28aaSamw total_bytes, /* Total data bytes */ 515da6c28aaSamw param_pad, 516da6c28aaSamw &xa->rep_param_mb, 517da6c28aaSamw data_pad, 518da6c28aaSamw &xa->rep_data_mb); 519faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 520da6c28aaSamw } 521da6c28aaSamw 522faa1795aSjb150015 smb_sdrc_t 523faa1795aSjb150015 smb_pre_nt_transact(smb_request_t *sr) 524faa1795aSjb150015 { 525faa1795aSjb150015 DTRACE_SMB_1(op__NtTransact__start, smb_request_t *, sr); 526faa1795aSjb150015 return (SDRC_SUCCESS); 527faa1795aSjb150015 } 528faa1795aSjb150015 529faa1795aSjb150015 void 530faa1795aSjb150015 smb_post_nt_transact(smb_request_t *sr) 531faa1795aSjb150015 { 532faa1795aSjb150015 DTRACE_SMB_1(op__NtTransact__done, smb_request_t *, sr); 533faa1795aSjb150015 } 534da6c28aaSamw 5357b59d02dSjb150015 smb_sdrc_t 536da6c28aaSamw smb_com_nt_transact(struct smb_request *sr) 537da6c28aaSamw { 538da6c28aaSamw uint16_t Function; 539da6c28aaSamw unsigned char MaxSetupCount, SetupCount; 540da6c28aaSamw uint32_t TotalParameterCount, TotalDataCount; 541da6c28aaSamw uint32_t MaxParameterCount, MaxDataCount, pscnt; 542da6c28aaSamw uint32_t psoff, dscnt, dsoff; 543da6c28aaSamw smb_xa_t *xa; 544da6c28aaSamw int ready; 545da6c28aaSamw int rc; 546da6c28aaSamw 547da6c28aaSamw rc = smbsr_decode_vwv(sr, SMB_NT_TRANSHDR_ED_FMT, &MaxSetupCount, 548da6c28aaSamw &TotalParameterCount, &TotalDataCount, &MaxParameterCount, 549da6c28aaSamw &MaxDataCount, &pscnt, &psoff, &dscnt, 550da6c28aaSamw &dsoff, &SetupCount, &Function); 551da6c28aaSamw 5527b59d02dSjb150015 if (rc != 0) 553faa1795aSjb150015 return (SDRC_ERROR); 554da6c28aaSamw 555da6c28aaSamw xa = smb_xa_create(sr->session, sr, TotalParameterCount, TotalDataCount, 556da6c28aaSamw MaxParameterCount, MaxDataCount, MaxSetupCount, SetupCount); 557da6c28aaSamw if (xa == 0) { 558dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRnoroom); 559faa1795aSjb150015 return (SDRC_ERROR); 560da6c28aaSamw } 561da6c28aaSamw 562da6c28aaSamw xa->smb_flags = 0; 563da6c28aaSamw xa->smb_timeout = 0; 564da6c28aaSamw xa->smb_func = Function; 565da6c28aaSamw xa->req_disp_param = pscnt; 566da6c28aaSamw xa->req_disp_data = dscnt; 567da6c28aaSamw 568da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_setup_mb, &sr->smb_vwv, 569da6c28aaSamw sr->smb_vwv.chain_offset, SetupCount * 2)) { 570da6c28aaSamw smb_xa_rele(sr->session, xa); 571dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 572faa1795aSjb150015 return (SDRC_ERROR); 573da6c28aaSamw } 574da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_param_mb, &sr->command, psoff, pscnt)) { 575da6c28aaSamw smb_xa_rele(sr->session, xa); 576dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 577faa1795aSjb150015 return (SDRC_ERROR); 578da6c28aaSamw } 579da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_data_mb, &sr->command, dsoff, dscnt)) { 580da6c28aaSamw smb_xa_rele(sr->session, xa); 581dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 582faa1795aSjb150015 return (SDRC_ERROR); 583da6c28aaSamw } 584da6c28aaSamw 585da6c28aaSamw ready = smb_trans_ready(xa); 586da6c28aaSamw 587da6c28aaSamw if (smb_xa_open(xa)) { 588da6c28aaSamw smb_xa_rele(sr->session, xa); 589dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRsrverror); 590faa1795aSjb150015 return (SDRC_ERROR); 591da6c28aaSamw } 592da6c28aaSamw sr->r_xa = xa; 593da6c28aaSamw 594da6c28aaSamw if (!ready) { 5957b59d02dSjb150015 rc = smbsr_encode_empty_result(sr); 596faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 597da6c28aaSamw } 598da6c28aaSamw 599da6c28aaSamw if (!smb_xa_complete(xa)) { 600da6c28aaSamw smb_xa_close(xa); 601dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 602faa1795aSjb150015 return (SDRC_ERROR); 603da6c28aaSamw } 604da6c28aaSamw 605da6c28aaSamw return (smb_nt_trans_dispatch(sr, xa)); 606da6c28aaSamw } 607da6c28aaSamw 608faa1795aSjb150015 smb_sdrc_t 609faa1795aSjb150015 smb_pre_nt_transact_secondary(smb_request_t *sr) 610faa1795aSjb150015 { 611faa1795aSjb150015 DTRACE_SMB_1(op__NtTransactSecondary__start, smb_request_t *, sr); 612faa1795aSjb150015 return (SDRC_SUCCESS); 613faa1795aSjb150015 } 614faa1795aSjb150015 615faa1795aSjb150015 void 616faa1795aSjb150015 smb_post_nt_transact_secondary(smb_request_t *sr) 617faa1795aSjb150015 { 618faa1795aSjb150015 DTRACE_SMB_1(op__NtTransactSecondary__done, smb_request_t *, sr); 619faa1795aSjb150015 } 620da6c28aaSamw 6217b59d02dSjb150015 smb_sdrc_t 622da6c28aaSamw smb_com_nt_transact_secondary(struct smb_request *sr) 623da6c28aaSamw { 624da6c28aaSamw uint16_t tpscnt, tdscnt, fid; 625da6c28aaSamw uint16_t pscnt, psoff, psdisp, dscnt, dsoff, dsdisp; 626da6c28aaSamw smb_xa_t *xa; 627da6c28aaSamw int rc; 628da6c28aaSamw 629da6c28aaSamw if ((xa = smbsr_lookup_xa(sr)) == 0) { 630dc20a302Sas200622 smbsr_error(sr, 0, ERRSRV, ERRsrverror); 631faa1795aSjb150015 return (SDRC_ERROR); 632da6c28aaSamw } 633da6c28aaSamw 634da6c28aaSamw if (sr->session->signing.flags & SMB_SIGNING_ENABLED) { 635da6c28aaSamw if (smb_sign_check_secondary(sr, xa->reply_seqnum) != 0) { 636dc20a302Sas200622 smbsr_error(sr, NT_STATUS_ACCESS_DENIED, 637da6c28aaSamw ERRDOS, ERRnoaccess); 638faa1795aSjb150015 return (SDRC_ERROR); 639da6c28aaSamw } 640da6c28aaSamw } 641da6c28aaSamw 642da6c28aaSamw if (xa->smb_com != SMB_COM_TRANSACTION2) { 643da6c28aaSamw return (SDRC_DROP_VC); 644da6c28aaSamw } 645da6c28aaSamw 646da6c28aaSamw rc = smbsr_decode_vwv(sr, SMB_TRANS2SHDR_ED_FMT, &tpscnt, &tdscnt, 647da6c28aaSamw &pscnt, &psoff, &psdisp, &dscnt, &dsoff, &dsdisp, &fid); 648da6c28aaSamw 6497b59d02dSjb150015 if (rc != 0) 650faa1795aSjb150015 return (SDRC_ERROR); 651da6c28aaSamw 652da6c28aaSamw mutex_enter(&xa->xa_mutex); 653da6c28aaSamw xa->smb_tpscnt = tpscnt; /* might have shrunk */ 654da6c28aaSamw xa->smb_tdscnt = tdscnt; /* might have shrunk */ 655da6c28aaSamw xa->xa_smb_fid = fid; /* overwrite rules? */ 656da6c28aaSamw xa->req_disp_param = psdisp+pscnt; 657da6c28aaSamw xa->req_disp_data = dsdisp+dscnt; 658da6c28aaSamw 659da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_param_mb, &sr->command, psoff, pscnt)) { 660da6c28aaSamw mutex_exit(&xa->xa_mutex); 661da6c28aaSamw smb_xa_close(xa); 662dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 663faa1795aSjb150015 return (SDRC_ERROR); 664da6c28aaSamw } 665da6c28aaSamw if (MBC_SHADOW_CHAIN(&xa->req_data_mb, &sr->command, dsoff, dscnt)) { 666da6c28aaSamw mutex_exit(&xa->xa_mutex); 667da6c28aaSamw smb_xa_close(xa); 668dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadformat); 669faa1795aSjb150015 return (SDRC_ERROR); 670da6c28aaSamw } 671da6c28aaSamw mutex_exit(&xa->xa_mutex); 672da6c28aaSamw 673da6c28aaSamw if (!smb_trans_ready(xa)) 674da6c28aaSamw return (SDRC_NO_REPLY); 675da6c28aaSamw 676da6c28aaSamw if (!smb_xa_complete(xa)) 677da6c28aaSamw return (SDRC_NO_REPLY); 678da6c28aaSamw 679da6c28aaSamw return (smb_nt_trans_dispatch(sr, xa)); 680da6c28aaSamw } 681da6c28aaSamw 6827b59d02dSjb150015 static int 6839fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_trans_ready(smb_xa_t *xa) 684da6c28aaSamw { 685da6c28aaSamw int rc; 686da6c28aaSamw 687da6c28aaSamw mutex_enter(&xa->xa_mutex); 688da6c28aaSamw rc = xa->req_disp_data >= xa->smb_tdscnt && 689da6c28aaSamw xa->req_disp_param >= xa->smb_tpscnt; 690da6c28aaSamw mutex_exit(&xa->xa_mutex); 691da6c28aaSamw 692da6c28aaSamw return (rc); 693da6c28aaSamw } 694da6c28aaSamw 6953ad684d6Sjb150015 static void 6963ad684d6Sjb150015 smb_encode_SHARE_INFO_1(struct mbuf_chain *output, struct mbuf_chain *text, 6973ad684d6Sjb150015 char *oem_name, uint16_t type, char *comment) 698da6c28aaSamw { 6993db3f65cSamw (void) smb_mbc_encodef(output, "13c.wl", oem_name, 7003ad684d6Sjb150015 type, MBC_LENGTH(text)); 701da6c28aaSamw 7023db3f65cSamw (void) smb_mbc_encodef(text, "s", comment ? comment : ""); 7036537f381Sas200622 } 704da6c28aaSamw 7053ad684d6Sjb150015 static void 7063ad684d6Sjb150015 smb_encode_SHARE_INFO_2(struct mbuf_chain *output, struct mbuf_chain *text, 7073ad684d6Sjb150015 smb_request_t *sr, char *oem_name, uint16_t type, 7083ad684d6Sjb150015 char *comment, uint16_t access, char *path, char *password) 709da6c28aaSamw { 710da6c28aaSamw unsigned char pword[9]; 711da6c28aaSamw 712da6c28aaSamw bzero(pword, sizeof (pword)); 713da6c28aaSamw (void) strncpy((char *)pword, password, sizeof (pword)); 7143ad684d6Sjb150015 smb_encode_SHARE_INFO_1(output, text, oem_name, type, comment); 7153db3f65cSamw (void) smb_mbc_encodef(output, "wwwl9c.", 716da6c28aaSamw access, 717faa1795aSjb150015 sr->sr_cfg->skc_maxconnections, 718faa1795aSjb150015 smb_server_get_session_count(), 719da6c28aaSamw MBC_LENGTH(text), 7203ad684d6Sjb150015 pword); 7213db3f65cSamw (void) smb_mbc_encodef(text, "s", path); 722da6c28aaSamw } 723da6c28aaSamw 724da6c28aaSamw int 725da6c28aaSamw smb_trans_net_share_enum(struct smb_request *sr, struct smb_xa *xa) 726da6c28aaSamw { 727faa1795aSjb150015 door_handle_t dhdl = sr->sr_server->sv_lmshrd; 728da6c28aaSamw 729da6c28aaSamw /* 730da6c28aaSamw * Number of data bytes that will 731da6c28aaSamw * be sent in the current response 732da6c28aaSamw */ 733da6c28aaSamw uint16_t data_scnt; 734da6c28aaSamw 735da6c28aaSamw /* 736da6c28aaSamw * Total number of data bytes that 737da6c28aaSamw * are sent till now. This is only 738da6c28aaSamw * used for calculating current data 739da6c28aaSamw * displacement 740da6c28aaSamw */ 741da6c28aaSamw uint16_t tot_data_scnt; 742da6c28aaSamw 743da6c28aaSamw /* 744da6c28aaSamw * Number of parameter bytes should 745da6c28aaSamw * be sent for the current response. 746da6c28aaSamw * It is 8 for the 1st response and 747da6c28aaSamw * 0 for others 748da6c28aaSamw */ 749da6c28aaSamw uint16_t param_scnt; 750da6c28aaSamw 751da6c28aaSamw /* number of setup and parameter bytes */ 752da6c28aaSamw uint16_t n_setup, n_param; 753da6c28aaSamw 754da6c28aaSamw /* data and parameter displacement */ 755da6c28aaSamw uint16_t data_disp, param_disp; 756da6c28aaSamw 757da6c28aaSamw /* parameter and data offset and pad */ 758da6c28aaSamw int param_off, param_pad, data_off, data_pad; 759da6c28aaSamw 760da6c28aaSamw /* 761da6c28aaSamw * total bytes of parameters and data 762da6c28aaSamw * in the packet, plus the pad bytes. 763da6c28aaSamw */ 764da6c28aaSamw int tot_packet_bytes; 765da6c28aaSamw 7663ad684d6Sjb150015 boolean_t first_resp; 767da6c28aaSamw 7683ad684d6Sjb150015 char fmt[16]; 7693ad684d6Sjb150015 struct mbuf_chain reply; 7703ad684d6Sjb150015 7713ad684d6Sjb150015 uint16_t level; 7723ad684d6Sjb150015 uint16_t pkt_bufsize; 7733ad684d6Sjb150015 smb_enumshare_info_t esi; 7743ad684d6Sjb150015 char *sent_buf; 7753ad684d6Sjb150015 7763ad684d6Sjb150015 ASSERT(sr->uid_user); 777da6c28aaSamw 778da6c28aaSamw /* 779da6c28aaSamw * Initialize the mbuf chain of reply to zero. If it is not 780da6c28aaSamw * zero, code inside the while loop will try to free the chain. 781da6c28aaSamw */ 782da6c28aaSamw bzero(&reply, sizeof (struct mbuf_chain)); 783da6c28aaSamw 7843db3f65cSamw if (smb_mbc_decodef(&xa->req_param_mb, "ww", &level, 7853ad684d6Sjb150015 &esi.es_bufsize) != 0) 786faa1795aSjb150015 return (SDRC_NOT_IMPLEMENTED); 787da6c28aaSamw 788da6c28aaSamw if (level != 1) { 7893ad684d6Sjb150015 /* 7903ad684d6Sjb150015 * Only level 1 is valid for NetShareEnum 7913ad684d6Sjb150015 * None of the error codes in the spec are meaningful 7923ad684d6Sjb150015 * here. This error code is returned by Windows. 7933ad684d6Sjb150015 */ 7943db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 7953ad684d6Sjb150015 ERROR_INVALID_LEVEL, 0, 0, 0); 796faa1795aSjb150015 return (SDRC_SUCCESS); 797da6c28aaSamw } 798da6c28aaSamw 7993ad684d6Sjb150015 esi.es_buf = kmem_zalloc(esi.es_bufsize, KM_SLEEP); 800*c5866007SKeyur Desai esi.es_posix_uid = crgetuid(sr->uid_user->u_cred); 8013ad684d6Sjb150015 (void) smb_kshare_enum(dhdl, &esi); 802da6c28aaSamw 8033ad684d6Sjb150015 /* client buffer size is not big enough to hold any shares */ 8043ad684d6Sjb150015 if (esi.es_nsent == 0) { 8053db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 8063ad684d6Sjb150015 ERROR_MORE_DATA, 0, esi.es_nsent, esi.es_ntotal); 8073ad684d6Sjb150015 kmem_free(esi.es_buf, esi.es_bufsize); 808faa1795aSjb150015 return (SDRC_SUCCESS); 809da6c28aaSamw } 810da6c28aaSamw 811da6c28aaSamw /* 812da6c28aaSamw * The rep_setup_mb is already initialized in smb_trans_dispatch(). 813da6c28aaSamw * Calling MBC_INIT() will initialized the structure and so the 814da6c28aaSamw * pointer to the mbuf chains will be lost. Therefore, we need 815da6c28aaSamw * to free the resources before calling MBC_INIT() again. 816da6c28aaSamw */ 8173ad684d6Sjb150015 n_setup = 0; /* Setup count for NetShareEnum SMB is 0 */ 818da6c28aaSamw m_freem(xa->rep_setup_mb.chain); 819da6c28aaSamw MBC_INIT(&xa->rep_setup_mb, n_setup * 2); 820da6c28aaSamw 8213ad684d6Sjb150015 n_param = 8; 8223ad684d6Sjb150015 pkt_bufsize = sr->session->smb_msg_size - 8233ad684d6Sjb150015 (SMB_HEADER_ED_LEN + RESP_HEADER_LEN + n_param); 824da6c28aaSamw 8253ad684d6Sjb150015 tot_data_scnt = 0; 8263ad684d6Sjb150015 sent_buf = esi.es_buf; 8273ad684d6Sjb150015 first_resp = B_TRUE; 8283ad684d6Sjb150015 8293ad684d6Sjb150015 while (tot_data_scnt < esi.es_datasize) { 8303ad684d6Sjb150015 data_scnt = esi.es_datasize - tot_data_scnt; 8313ad684d6Sjb150015 if (data_scnt > pkt_bufsize) 8323ad684d6Sjb150015 data_scnt = pkt_bufsize; 833da6c28aaSamw m_freem(xa->rep_data_mb.chain); 8343ad684d6Sjb150015 MBC_INIT(&xa->rep_data_mb, data_scnt); 8353ad684d6Sjb150015 8363ad684d6Sjb150015 (void) sprintf(fmt, "%dc", data_scnt); 8373db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, fmt, sent_buf); 8383ad684d6Sjb150015 8393ad684d6Sjb150015 sent_buf += data_scnt; 840da6c28aaSamw tot_data_scnt += data_scnt; 841da6c28aaSamw 842da6c28aaSamw /* Only the 1st response packet contains parameters */ 843da6c28aaSamw param_scnt = (first_resp) ? n_param : 0; 844da6c28aaSamw param_pad = 1; /* always one */ 845da6c28aaSamw param_off = SMB_HEADER_ED_LEN + RESP_HEADER_LEN; 846da6c28aaSamw param_disp = (first_resp) ? 0 : n_param; 847da6c28aaSamw 848da6c28aaSamw m_freem(xa->rep_param_mb.chain); 849da6c28aaSamw MBC_INIT(&xa->rep_param_mb, param_scnt); 8503ad684d6Sjb150015 851da6c28aaSamw if (first_resp) { 8523ad684d6Sjb150015 first_resp = B_FALSE; 8533db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 8543ad684d6Sjb150015 (esi.es_ntotal > esi.es_nsent) 8553ad684d6Sjb150015 ? ERROR_MORE_DATA : 0, 8563ad684d6Sjb150015 0, esi.es_nsent, esi.es_ntotal); 857da6c28aaSamw } 858da6c28aaSamw 859da6c28aaSamw data_pad = (param_off + n_param) & 1; /* Pad to short */ 860da6c28aaSamw 861da6c28aaSamw /* data off from hdr start */ 862da6c28aaSamw data_off = param_off + param_scnt + data_pad; 863da6c28aaSamw data_disp = tot_data_scnt - data_scnt; 864da6c28aaSamw tot_packet_bytes = param_pad + param_scnt + data_pad + 865da6c28aaSamw data_scnt; 866da6c28aaSamw 867da6c28aaSamw /* 868da6c28aaSamw * Calling MBC_INIT() will initialized the structure and so the 869da6c28aaSamw * pointer to the mbuf chains will be lost. Therefore, we need 870da6c28aaSamw * to free the resources if any before calling MBC_INIT(). 871da6c28aaSamw */ 872da6c28aaSamw m_freem(reply.chain); 873da6c28aaSamw MBC_INIT(&reply, SMB_HEADER_ED_LEN 8743ad684d6Sjb150015 + sizeof (uint8_t) /* word parameters count */ 8753ad684d6Sjb150015 + 10*sizeof (uint16_t) /* word parameters */ 8763ad684d6Sjb150015 + n_setup*sizeof (uint16_t) /* setup parameters */ 8773ad684d6Sjb150015 + sizeof (uint16_t) /* total data byte count */ 878da6c28aaSamw + tot_packet_bytes); 879da6c28aaSamw 8803db3f65cSamw (void) smb_mbc_encodef(&reply, SMB_HEADER_ED_FMT, 881da6c28aaSamw sr->first_smb_com, 882da6c28aaSamw sr->smb_rcls, 883da6c28aaSamw sr->smb_reh, 884da6c28aaSamw sr->smb_err, 885da6c28aaSamw sr->smb_flg | SMB_FLAGS_REPLY, 886da6c28aaSamw sr->smb_flg2, 887da6c28aaSamw sr->smb_pid_high, 888da6c28aaSamw sr->smb_sig, 889da6c28aaSamw sr->smb_tid, 890da6c28aaSamw sr->smb_pid, 891da6c28aaSamw sr->smb_uid, 892da6c28aaSamw sr->smb_mid); 893da6c28aaSamw 8943db3f65cSamw (void) smb_mbc_encodef(&reply, 895da6c28aaSamw "bww2.wwwwwwb.Cw#.C#.C", 896da6c28aaSamw 10 + n_setup, /* wct */ 897da6c28aaSamw n_param, /* Total Parameter Bytes */ 8983ad684d6Sjb150015 esi.es_datasize, /* Total Data Bytes */ 899da6c28aaSamw param_scnt, /* Total Parameter Bytes this buffer */ 900da6c28aaSamw param_off, /* Param offset from header start */ 901da6c28aaSamw param_disp, /* Param displacement */ 902da6c28aaSamw data_scnt, /* Total Data Bytes this buffer */ 903da6c28aaSamw data_off, /* Data offset from header start */ 904da6c28aaSamw data_disp, /* Data displacement */ 905da6c28aaSamw n_setup, /* suwcnt */ 906da6c28aaSamw &xa->rep_setup_mb, /* setup[] */ 907da6c28aaSamw tot_packet_bytes, /* Total data bytes */ 908da6c28aaSamw param_pad, 909da6c28aaSamw &xa->rep_param_mb, 910da6c28aaSamw data_pad, 911da6c28aaSamw &xa->rep_data_mb); 912da6c28aaSamw 913da6c28aaSamw if (sr->session->signing.flags & SMB_SIGNING_ENABLED) 914b89a8333Snatalie li - Sun Microsystems - Irvine United States smb_sign_reply(sr, &reply); 915da6c28aaSamw 916da6c28aaSamw (void) smb_session_send(sr->session, 0, &reply); 917da6c28aaSamw } 918da6c28aaSamw 9193ad684d6Sjb150015 kmem_free(esi.es_buf, esi.es_bufsize); 920da6c28aaSamw return (SDRC_NO_REPLY); 921da6c28aaSamw } 922da6c28aaSamw 923da6c28aaSamw int 9243ad684d6Sjb150015 smb_trans_net_share_getinfo(smb_request_t *sr, struct smb_xa *xa) 925da6c28aaSamw { 9263ad684d6Sjb150015 uint16_t level, max_bytes, access; 927da6c28aaSamw struct mbuf_chain str_mb; 928da6c28aaSamw char *share; 929da6c28aaSamw char *password; 9303db3f65cSamw smb_share_t si; 9313ad684d6Sjb150015 int rc; 932da6c28aaSamw 9333db3f65cSamw if (smb_mbc_decodef(&xa->req_param_mb, "%sww", sr, 9343ad684d6Sjb150015 &share, &level, &max_bytes) != 0) 935faa1795aSjb150015 return (SDRC_NOT_IMPLEMENTED); 936da6c28aaSamw 937bbf6f00cSJordan Brown (void) smb_strlwr(share); 938b89a8333Snatalie li - Sun Microsystems - Irvine United States rc = smb_kshare_getinfo(sr->sr_server->sv_lmshrd, share, &si, NULL); 9393db3f65cSamw if ((rc != NERR_Success) || (si.shr_flags & SMB_SHRF_LONGNAME)) { 9403db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", 941da6c28aaSamw NERR_NetNameNotFound, 0, 0); 942faa1795aSjb150015 return (SDRC_SUCCESS); 943da6c28aaSamw } 944da6c28aaSamw 9453ad684d6Sjb150015 access = SHARE_ACCESS_ALL; 946da6c28aaSamw password = ""; 947da6c28aaSamw 948da6c28aaSamw MBC_INIT(&str_mb, max_bytes); 949da6c28aaSamw 950da6c28aaSamw switch (level) { 951da6c28aaSamw case 0 : 9523db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "13c", si.shr_oemname); 953da6c28aaSamw break; 954da6c28aaSamw 955da6c28aaSamw case 1 : 9563ad684d6Sjb150015 smb_encode_SHARE_INFO_1(&xa->rep_data_mb, &str_mb, 9573db3f65cSamw si.shr_oemname, si.shr_type, si.shr_cmnt); 958da6c28aaSamw break; 959da6c28aaSamw 960da6c28aaSamw case 2 : 9613ad684d6Sjb150015 smb_encode_SHARE_INFO_2(&xa->rep_data_mb, &str_mb, sr, 9623db3f65cSamw si.shr_oemname, si.shr_type, si.shr_cmnt, access, 9633db3f65cSamw si.shr_path, password); 9643ad684d6Sjb150015 break; 9653ad684d6Sjb150015 966da6c28aaSamw default: 9673db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", 9683ad684d6Sjb150015 ERROR_INVALID_LEVEL, 0, 0); 969da6c28aaSamw m_freem(str_mb.chain); 970faa1795aSjb150015 return (SDRC_NOT_IMPLEMENTED); 971da6c28aaSamw } 972da6c28aaSamw 9733db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", NERR_Success, 974da6c28aaSamw -MBC_LENGTH(&xa->rep_data_mb), 975da6c28aaSamw MBC_LENGTH(&xa->rep_data_mb) + MBC_LENGTH(&str_mb)); 9763db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "C", &str_mb); 977da6c28aaSamw m_freem(str_mb.chain); 978faa1795aSjb150015 return (SDRC_SUCCESS); 979da6c28aaSamw } 980da6c28aaSamw 981da6c28aaSamw int 9823ad684d6Sjb150015 smb_trans_net_workstation_getinfo(struct smb_request *sr, struct smb_xa *xa) 983da6c28aaSamw { 9843ad684d6Sjb150015 uint16_t level, max_bytes; 985da6c28aaSamw struct mbuf_chain str_mb; 986da6c28aaSamw char *domain; 987da6c28aaSamw char *hostname; 988da6c28aaSamw 9893db3f65cSamw if ((smb_mbc_decodef(&xa->req_param_mb, "ww", 9903ad684d6Sjb150015 &level, &max_bytes) != 0) || 991da6c28aaSamw (level != 10)) { 9923db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 993da6c28aaSamw NERR_BadTransactConfig, 0, 0, 0); 994faa1795aSjb150015 return (SDRC_SUCCESS); 995da6c28aaSamw } 996da6c28aaSamw 997b89a8333Snatalie li - Sun Microsystems - Irvine United States domain = sr->sr_cfg->skc_nbdomain; 998faa1795aSjb150015 hostname = sr->sr_cfg->skc_hostname; 999da6c28aaSamw 1000da6c28aaSamw MBC_INIT(&str_mb, max_bytes); 1001da6c28aaSamw 10023db3f65cSamw (void) smb_mbc_encodef(&str_mb, "."); /* Prevent NULL pointers */ 1003da6c28aaSamw 10043db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "l", MBC_LENGTH(&str_mb)); 10053db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", hostname); 10063db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "l", MBC_LENGTH(&str_mb)); 10073db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", "nobody"); 10083db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "l", MBC_LENGTH(&str_mb)); 10093db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", domain); 10103db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "bbl", 10119fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States sr->sr_cfg->skc_version.sv_major, sr->sr_cfg->skc_version.sv_minor, 10129fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States MBC_LENGTH(&str_mb)); 10133db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", domain); 10143db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "l", MBC_LENGTH(&str_mb)); 10153db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", domain); 1016da6c28aaSamw 10173db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", 0, 1018da6c28aaSamw -MBC_LENGTH(&xa->rep_data_mb), 1019da6c28aaSamw MBC_LENGTH(&xa->rep_data_mb) + MBC_LENGTH(&str_mb)); 10203db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "C", &str_mb); 1021da6c28aaSamw m_freem(str_mb.chain); 1022faa1795aSjb150015 return (SDRC_SUCCESS); 1023da6c28aaSamw } 1024da6c28aaSamw 1025da6c28aaSamw int 10263ad684d6Sjb150015 smb_trans_net_user_getinfo(struct smb_request *sr, struct smb_xa *xa) 1027da6c28aaSamw { 10283ad684d6Sjb150015 uint16_t level, max_bytes; 1029da6c28aaSamw unsigned char *user; 1030da6c28aaSamw int rc; 1031da6c28aaSamw 10323db3f65cSamw rc = smb_mbc_decodef(&xa->req_param_mb, "%sww", sr, 1033da6c28aaSamw &user, 1034da6c28aaSamw &level, 1035da6c28aaSamw &max_bytes); 1036da6c28aaSamw 1037da6c28aaSamw if (rc != 0) 1038faa1795aSjb150015 return (SDRC_NOT_IMPLEMENTED); 1039da6c28aaSamw 10403db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", 1041da6c28aaSamw NERR_UserNotFound, 0, 0); 1042faa1795aSjb150015 return (SDRC_SUCCESS); 1043da6c28aaSamw } 1044da6c28aaSamw 10457b59d02dSjb150015 smb_sdrc_t 10463ad684d6Sjb150015 smb_trans_net_server_getinfo(struct smb_request *sr, struct smb_xa *xa) 1047da6c28aaSamw { 10483ad684d6Sjb150015 uint16_t level, buf_size; 10493ad684d6Sjb150015 uint16_t avail_data, max_data; 1050da6c28aaSamw char server_name[16]; 1051da6c28aaSamw struct mbuf_chain str_mb; 1052da6c28aaSamw 10533db3f65cSamw if (smb_mbc_decodef(&xa->req_param_mb, "ww", &level, &buf_size) != 0) 1054faa1795aSjb150015 return (SDRC_ERROR); 1055da6c28aaSamw 10563ad684d6Sjb150015 max_data = MBC_MAXBYTES(&xa->rep_data_mb); 1057da6c28aaSamw 1058da6c28aaSamw MBC_INIT(&str_mb, buf_size); 1059da6c28aaSamw 1060da6c28aaSamw bzero(server_name, sizeof (server_name)); 10613ad684d6Sjb150015 (void) strncpy(server_name, sr->sr_cfg->skc_hostname, 10623ad684d6Sjb150015 sizeof (server_name)); 1063da6c28aaSamw 10643ad684d6Sjb150015 /* valid levels are 0 and 1 */ 1065da6c28aaSamw switch (level) { 1066da6c28aaSamw case 0: 10673db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "16c", server_name); 1068da6c28aaSamw break; 10693ad684d6Sjb150015 1070da6c28aaSamw case 1: 10713db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", 10723ad684d6Sjb150015 sr->sr_cfg->skc_system_comment); 10733db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "16cbbll", server_name, 10749fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States sr->sr_cfg->skc_version.sv_major, 10759fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States sr->sr_cfg->skc_version.sv_minor, 10763ad684d6Sjb150015 MY_SERVER_TYPE, max_data - MBC_LENGTH(&str_mb)); 1077da6c28aaSamw break; 10783ad684d6Sjb150015 1079da6c28aaSamw default: 10803db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", 10813ad684d6Sjb150015 ERROR_INVALID_LEVEL, 0, 0); 1082da6c28aaSamw m_freem(str_mb.chain); 10833ad684d6Sjb150015 return (SDRC_SUCCESS); 1084da6c28aaSamw } 1085da6c28aaSamw 10863ad684d6Sjb150015 avail_data = MBC_LENGTH(&xa->rep_data_mb) + MBC_LENGTH(&str_mb); 10873db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "www", 10883ad684d6Sjb150015 NERR_Success, max_data - avail_data, avail_data); 10893db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "C", &str_mb); 1090da6c28aaSamw m_freem(str_mb.chain); 1091faa1795aSjb150015 return (SDRC_SUCCESS); 1092da6c28aaSamw } 1093da6c28aaSamw 1094da6c28aaSamw /* 1095da6c28aaSamw * 6.4 The NetServerEnum2 RAP Service 1096da6c28aaSamw * 1097da6c28aaSamw * The NetServerEnum2 RAP service lists all computers of the specified type 1098da6c28aaSamw * or types that are visible in the specified domains. It may also 1099da6c28aaSamw * enumerate domains. 1100da6c28aaSamw * 1101da6c28aaSamw * The following definition uses the notation and terminology defined in 1102da6c28aaSamw * the CIFS Remote Administration Protocol specification, which is required 1103da6c28aaSamw * in order to make it well-defined. The definition is: 1104da6c28aaSamw * 1105da6c28aaSamw * uint16_t NetServerEnum2 ( 1106da6c28aaSamw * uint16_t sLevel, 1107da6c28aaSamw * RCVBUF pbBuffer, 1108da6c28aaSamw * RCVBUFLEN cbBuffer, 1109da6c28aaSamw * ENTCOUNT pcEntriesRead, 1110da6c28aaSamw * uint16_t *pcTotalAvail, 1111da6c28aaSamw * uint32_t fServerType, 1112da6c28aaSamw * char *pszDomain, 1113da6c28aaSamw * ); 1114da6c28aaSamw * 1115da6c28aaSamw * where: 1116da6c28aaSamw * 1117da6c28aaSamw * sLevel specifies the level of detail (0 or 1) requested. 1118da6c28aaSamw * 1119da6c28aaSamw * pbBuffer points to the buffer to receive the returned data. If the 1120da6c28aaSamw * function is successful, the buffer contains a sequence of 1121da6c28aaSamw * server_info_x structures, where x is 0 or 1, depending on the 1122da6c28aaSamw * level of detail requested. 1123da6c28aaSamw * 1124da6c28aaSamw * cbBuffer specifies the size, in bytes, of the buffer pointed to by 1125da6c28aaSamw * the pbBuffer parameter. 1126da6c28aaSamw * 1127da6c28aaSamw * pcEntriesRead points to a 16 bit variable that receives a count of 1128da6c28aaSamw * the number of servers enumerated in the buffer. This count is 1129da6c28aaSamw * valid only if NetServerEnum2 returns the NERR_Success or 1130da6c28aaSamw * ERROR_MORE_DATA values. 1131da6c28aaSamw * 1132da6c28aaSamw * pcTotal Avail points to a 16 bit variable that receives a count of 1133da6c28aaSamw * the total number of available entries. This count is valid only if 1134da6c28aaSamw * NetServerEnum2 returns the NERR_Success or ERROR_MORE_DATA values. 1135da6c28aaSamw * 1136da6c28aaSamw * fServerType specifies the type or types of computers to enumerate. 1137da6c28aaSamw * Computers that match at least one of the specified types are 1138da6c28aaSamw * returned in the buffer. Possible values are defined in the request 1139da6c28aaSamw * parameters section. 1140da6c28aaSamw * 1141da6c28aaSamw * pszDomain points to a null-terminated string that contains the 1142da6c28aaSamw * name of the workgroup in which to enumerate computers of the 1143da6c28aaSamw * specified type or types. If the pszDomain parameter is a null 1144da6c28aaSamw * string or a null pointer, servers are enumerated for the current 1145da6c28aaSamw * domain of the computer. 1146da6c28aaSamw * 1147da6c28aaSamw * 6.4.1 Transaction Request Parameters section 1148da6c28aaSamw * 1149da6c28aaSamw * The Transaction request parameters section in this instance contains: 1150da6c28aaSamw * . The 16 bit function number for NetServerEnum2 which is 104. 1151da6c28aaSamw * . The parameter descriptor string which is "WrLehDz". 1152da6c28aaSamw * . The data descriptor string for the (returned) data which is "B16" for 1153da6c28aaSamw * level detail 0 or "B16BBDz" for level detail 1. 1154da6c28aaSamw * . The actual parameters as described by the parameter descriptor 1155da6c28aaSamw * string. 1156da6c28aaSamw * 1157da6c28aaSamw * The parameters are: 1158da6c28aaSamw * . A 16 bit integer with a value of 0 or 1 (corresponding to the "W" in 1159da6c28aaSamw * the parameter descriptor string. This represents the level of detail 1160da6c28aaSamw * the server is expected to return 1161da6c28aaSamw * . A 16 bit integer that contains the size of the receive buffer. 1162da6c28aaSamw * . A 32 bit integer that represents the type of servers the function 1163da6c28aaSamw * should enumerate. The possible values may be any of the following or 1164da6c28aaSamw * a combination of the following: 1165da6c28aaSamw * 1166da6c28aaSamw * SV_TYPE_WORKSTATION 0x00000001 All workstations 1167da6c28aaSamw * SV_TYPE_SERVER 0x00000002 All servers 1168da6c28aaSamw * SV_TYPE_SQLSERVER 0x00000004 Any server running with SQL 1169da6c28aaSamw * server 1170da6c28aaSamw * SV_TYPE_DOMAIN_CTRL 0x00000008 Primary domain controller 1171da6c28aaSamw * SV_TYPE_DOMAIN_BAKCTRL 0x00000010 Backup domain controller 1172da6c28aaSamw * SV_TYPE_TIME_SOURCE 0x00000020 Server running the timesource 1173da6c28aaSamw * service 1174da6c28aaSamw * SV_TYPE_AFP 0x00000040 Apple File Protocol servers 1175da6c28aaSamw * SV_TYPE_NOVELL 0x00000080 Novell servers 1176da6c28aaSamw * SV_TYPE_DOMAIN_MEMBER 0x00000100 Domain Member 1177da6c28aaSamw * SV_TYPE_PRINTQ_SERVER 0x00000200 Server sharing print queue 1178da6c28aaSamw * SV_TYPE_DIALIN_SERVER 0x00000400 Server running dialin service. 1179da6c28aaSamw * SV_TYPE_XENIX_SERVER 0x00000800 Xenix server 1180da6c28aaSamw * SV_TYPE_NT 0x00001000 NT server 1181da6c28aaSamw * SV_TYPE_WFW 0x00002000 Server running Windows for 1182da6c28aaSamw * Workgroups 1183da6c28aaSamw * SV_TYPE_SERVER_NT 0x00008000 Windows NT non DC server 1184da6c28aaSamw * SV_TYPE_POTENTIAL_BROWSER 0x00010000 Server that can run the browser 1185da6c28aaSamw * service 1186da6c28aaSamw * SV_TYPE_BACKUP_BROWSER 0x00020000 Backup browser server 1187da6c28aaSamw * SV_TYPE_MASTER_BROWSER 0x00040000 Master browser server 1188da6c28aaSamw * SV_TYPE_DOMAIN_MASTER 0x00080000 Domain Master Browser server 1189da6c28aaSamw * SV_TYPE_LOCAL_LIST_ONLY 0x40000000 Enumerate only entries marked 1190da6c28aaSamw * "local" 1191da6c28aaSamw * SV_TYPE_DOMAIN_ENUM 0x80000000 Enumerate Domains. The pszDomain 1192da6c28aaSamw * parameter must be NULL. 1193da6c28aaSamw * 1194da6c28aaSamw * . A null terminated ASCII string representing the pszDomain parameter 1195da6c28aaSamw * described above 1196da6c28aaSamw * 1197da6c28aaSamw * 6.4.2 Transaction Request Data section 1198da6c28aaSamw * 1199da6c28aaSamw * There is no data or auxiliary data to send as part of the request. 1200da6c28aaSamw * 1201da6c28aaSamw * 6.4.3 Transaction Response Parameters section 1202da6c28aaSamw * 1203da6c28aaSamw * The transaction response parameters section consists of: 1204da6c28aaSamw * . A 16 bit word indicating the return status. The possible values are: 1205da6c28aaSamw * 1206da6c28aaSamw * Code Value Description 1207da6c28aaSamw * NERR_Success 0 No errors encountered 1208da6c28aaSamw * ERROR_MORE_DATA 234 Additional data is available 1209da6c28aaSamw * NERR_ServerNotStarted 2114 The RAP service on the remote computer 1210da6c28aaSamw * is not running 1211da6c28aaSamw * NERR_BadTransactConfig 2141 The server is not configured for 1212da6c28aaSamw * transactions, IPC$ is not shared 1213da6c28aaSamw * 1214da6c28aaSamw * . A 16 bit "converter" word. 1215da6c28aaSamw * . A 16 bit number representing the number of entries returned. 1216da6c28aaSamw * . A 16 bit number representing the total number of available entries. 1217da6c28aaSamw * If the supplied buffer is large enough, this will equal the number of 1218da6c28aaSamw * entries returned. 1219da6c28aaSamw * 1220da6c28aaSamw * 6.4.4 Transaction Response Data section 1221da6c28aaSamw * 1222da6c28aaSamw * The return data section consists of a number of SERVER_INFO_1 structures. 1223da6c28aaSamw * The number of such structures present is determined by the third entry 1224da6c28aaSamw * (described above) in the return parameters section. 1225da6c28aaSamw * 1226da6c28aaSamw * At level detail 0, the Transaction response data section contains a 1227da6c28aaSamw * number of SERVER_INFO_0 data structure. The number of such structures is 1228da6c28aaSamw * equal to the 16 bit number returned by the server in the third parameter 1229da6c28aaSamw * in the Transaction response parameter section. The SERVER_INFO_0 data 1230da6c28aaSamw * structure is defined as: 1231da6c28aaSamw * 1232da6c28aaSamw * struct SERVER_INFO_0 { 1233da6c28aaSamw * char sv0_name[16]; 1234da6c28aaSamw * }; 1235da6c28aaSamw * 1236da6c28aaSamw * where: 1237da6c28aaSamw * 1238da6c28aaSamw * sv0_name is a null-terminated string that specifies the name of a 1239da6c28aaSamw * computer or domain . 1240da6c28aaSamw * 1241da6c28aaSamw * At level detail 1, the Transaction response data section contains a 1242da6c28aaSamw * number of SERVER_INFO_1 data structure. The number of such structures is 1243da6c28aaSamw * equal to the 16 bit number returned by the server in the third parameter 1244da6c28aaSamw * in the Transaction response parameter section. The SERVER_INFO_1 data 1245da6c28aaSamw * structure is defined as: 1246da6c28aaSamw * 1247da6c28aaSamw * struct SERVER_INFO_1 { 1248da6c28aaSamw * char sv1_name[16]; 1249da6c28aaSamw * char sv1_version_major; 1250da6c28aaSamw * char sv1_version_minor; 1251da6c28aaSamw * uint32_t sv1_type; 1252da6c28aaSamw * char *sv1_comment_or_master_browser; 1253da6c28aaSamw * }; 1254da6c28aaSamw * 1255da6c28aaSamw * sv1_name contains a null-terminated string that specifies the name 1256da6c28aaSamw * of a computer, or a domain name if SV_TYPE_DOMAIN_ENUM is set in 1257da6c28aaSamw * sv1_type. 1258da6c28aaSamw * 1259da6c28aaSamw * sv1_version_major whatever was specified in the HostAnnouncement 1260da6c28aaSamw * or DomainAnnouncement frame with which the entry was registered. 1261da6c28aaSamw * 1262da6c28aaSamw * sv1_version_minor whatever was specified in the HostAnnouncement 1263da6c28aaSamw * or DomainAnnouncement frame with which the entry was registered. 1264da6c28aaSamw * 1265da6c28aaSamw * sv1_type specifies the type of software the computer is running. 1266da6c28aaSamw * The member can be one or a combination of the values defined above 1267da6c28aaSamw * in the Transaction request parameters section for fServerType. 1268da6c28aaSamw * 1269da6c28aaSamw * 1270da6c28aaSamw * sv1_comment_or_master_browser points to a null-terminated string. If 1271da6c28aaSamw * the sv1_type indicates that the entry is for a domain, this 1272da6c28aaSamw * specifies the name of server running the domain master browser; 1273da6c28aaSamw * otherwise, it specifies a comment describing the server. The comment 1274da6c28aaSamw * can be a null string or the pointer may be a null pointer. 1275da6c28aaSamw * 1276da6c28aaSamw * In case there are multiple SERVER_INFO_1 data structures to 1277da6c28aaSamw * return, the server may put all these fixed length structures in 1278da6c28aaSamw * the return buffer, leave some space and then put all the variable 1279da6c28aaSamw * length data (the actual value of the sv1_comment strings) at the 1280da6c28aaSamw * end of the buffer. 1281da6c28aaSamw * 1282da6c28aaSamw * There is no auxiliary data to receive. 1283da6c28aaSamw */ 1284da6c28aaSamw 1285da6c28aaSamw int 1286da6c28aaSamw smb_trans_net_server_enum2(struct smb_request *sr, struct smb_xa *xa) 1287da6c28aaSamw { 1288da6c28aaSamw uint16_t opcode, level, max_bytes; 1289da6c28aaSamw uint32_t server_type; 1290da6c28aaSamw unsigned char *domain; 1291da6c28aaSamw struct mbuf_chain str_mb; 1292da6c28aaSamw char *hostname, *s; 1293da6c28aaSamw smb_kmod_cfg_t *si; 1294da6c28aaSamw 12953db3f65cSamw if (smb_mbc_decodef(&xa->req_param_mb, 12963db3f65cSamw "%wsswwls", sr, &opcode, &s, &s, 1297da6c28aaSamw &level, &max_bytes, &server_type, &domain) != 0) 1298faa1795aSjb150015 return (SDRC_NOT_IMPLEMENTED); 1299da6c28aaSamw 1300faa1795aSjb150015 si = sr->sr_cfg; 1301da6c28aaSamw 1302bbf6f00cSJordan Brown if (smb_strcasecmp(si->skc_nbdomain, (char *)domain, 0) != 0) { 13033db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 0, 0, 0, 0); 1304faa1795aSjb150015 return (SDRC_SUCCESS); 1305da6c28aaSamw } 1306da6c28aaSamw 1307da6c28aaSamw if ((server_type & MY_SERVER_TYPE) == 0) { 13083db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 0, 0, 0, 0); 1309faa1795aSjb150015 return (SDRC_SUCCESS); 1310da6c28aaSamw } 1311da6c28aaSamw 1312da6c28aaSamw MBC_INIT(&str_mb, max_bytes); 1313da6c28aaSamw 1314da6c28aaSamw hostname = si->skc_hostname; 1315da6c28aaSamw 13163db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "16c", hostname); 1317da6c28aaSamw if (level == 1) { 13183db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "bbll", 13199fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States sr->sr_cfg->skc_version.sv_major, 13209fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States sr->sr_cfg->skc_version.sv_minor, 1321da6c28aaSamw MY_SERVER_TYPE, MBC_LENGTH(&str_mb)); 13223db3f65cSamw (void) smb_mbc_encodef(&str_mb, "s", si->skc_system_comment); 1323da6c28aaSamw } 1324da6c28aaSamw 13253db3f65cSamw (void) smb_mbc_encodef(&xa->rep_param_mb, "wwww", 0, 1326da6c28aaSamw -MBC_LENGTH(&xa->rep_data_mb), 1, 1); 13273db3f65cSamw (void) smb_mbc_encodef(&xa->rep_data_mb, "m", str_mb.chain); 1328faa1795aSjb150015 return (SDRC_SUCCESS); 1329da6c28aaSamw } 1330da6c28aaSamw 1331bbf6f00cSJordan Brown static boolean_t 1332bbf6f00cSJordan Brown is_supported_mailslot(const char *mailslot) 1333da6c28aaSamw { 1334bbf6f00cSJordan Brown static char *mailslots[] = { 1335bbf6f00cSJordan Brown PIPE_LANMAN, 1336bbf6f00cSJordan Brown MAILSLOT_LANMAN, 1337bbf6f00cSJordan Brown MAILSLOT_BROWSE, 1338bbf6f00cSJordan Brown MAILSLOT_MSBROWSE 1339bbf6f00cSJordan Brown }; 1340da6c28aaSamw 1341bbf6f00cSJordan Brown int i; 1342bbf6f00cSJordan Brown 1343bbf6f00cSJordan Brown for (i = 0; i < sizeof (mailslots)/sizeof (mailslots[0]); ++i) 1344bbf6f00cSJordan Brown if (smb_strcasecmp(mailslot, mailslots[i], 0) == 0) 1345bbf6f00cSJordan Brown return (B_TRUE); 1346bbf6f00cSJordan Brown 1347bbf6f00cSJordan Brown return (B_FALSE); 1348bbf6f00cSJordan Brown } 1349bbf6f00cSJordan Brown 1350bbf6f00cSJordan Brown /* 1351bbf6f00cSJordan Brown * Currently, just return false if the pipe is \\PIPE\repl. 1352bbf6f00cSJordan Brown * Otherwise, return true. 1353bbf6f00cSJordan Brown */ 1354bbf6f00cSJordan Brown static boolean_t 1355bbf6f00cSJordan Brown is_supported_pipe(const char *pname) 1356bbf6f00cSJordan Brown { 1357bbf6f00cSJordan Brown if (smb_strcasecmp(pname, PIPE_REPL, 0) == 0) 1358bbf6f00cSJordan Brown return (B_FALSE); 1359bbf6f00cSJordan Brown 1360bbf6f00cSJordan Brown return (B_TRUE); 1361da6c28aaSamw } 1362da6c28aaSamw 13637b59d02dSjb150015 static smb_sdrc_t 13649fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_trans_dispatch(smb_request_t *sr, smb_xa_t *xa) 1365da6c28aaSamw { 1366da6c28aaSamw int rc, pos; 1367da6c28aaSamw int total_bytes, n_setup, n_param, n_data; 1368da6c28aaSamw int param_off, param_pad, data_off, data_pad; 1369da6c28aaSamw uint16_t opcode; 1370da6c28aaSamw uint16_t devstate; 1371da6c28aaSamw char *req_fmt; 1372da6c28aaSamw char *rep_fmt; 13732c2961f8Sjose borrego smb_vdb_t vdb; 1374da6c28aaSamw 1375da6c28aaSamw n_setup = (xa->smb_msrcnt < 200) ? xa->smb_msrcnt : 200; 1376da6c28aaSamw n_setup++; 1377da6c28aaSamw n_setup = n_setup & ~0x0001; 1378da6c28aaSamw n_param = (xa->smb_mprcnt < smb_maxbufsize) 1379da6c28aaSamw ? xa->smb_mprcnt : smb_maxbufsize; 1380da6c28aaSamw n_param++; 1381da6c28aaSamw n_param = n_param & ~0x0001; 1382da6c28aaSamw rc = smb_maxbufsize - (SMBHEADERSIZE + 28 + n_setup + n_param); 1383da6c28aaSamw n_data = (xa->smb_mdrcnt < rc) ? xa->smb_mdrcnt : rc; 1384da6c28aaSamw MBC_INIT(&xa->rep_setup_mb, n_setup * 2); 1385da6c28aaSamw MBC_INIT(&xa->rep_param_mb, n_param); 1386da6c28aaSamw MBC_INIT(&xa->rep_data_mb, n_data); 1387da6c28aaSamw 1388da6c28aaSamw if (xa->smb_suwcnt > 0 && STYPE_ISIPC(sr->tid_tree->t_res_type)) { 13893db3f65cSamw rc = smb_mbc_decodef(&xa->req_setup_mb, "ww", &opcode, 1390da6c28aaSamw &sr->smb_fid); 1391da6c28aaSamw if (rc != 0) 1392da6c28aaSamw goto trans_err_not_supported; 1393da6c28aaSamw switch (opcode) { 1394da6c28aaSamw case TRANS_SET_NMPIPE_STATE: 13953db3f65cSamw if ((rc = smb_mbc_decodef(&xa->req_param_mb, "w", 1396da6c28aaSamw &devstate)) != 0) 1397da6c28aaSamw goto trans_err_not_supported; 1398da6c28aaSamw 1399faa1795aSjb150015 rc = SDRC_SUCCESS; 1400da6c28aaSamw break; 1401da6c28aaSamw 1402da6c28aaSamw case TRANS_TRANSACT_NMPIPE: 14032c2961f8Sjose borrego smbsr_lookup_file(sr); 1404da6c28aaSamw if (sr->fid_ofile == NULL) { 1405dc20a302Sas200622 smbsr_error(sr, NT_STATUS_INVALID_HANDLE, 1406da6c28aaSamw ERRDOS, ERRbadfid); 1407faa1795aSjb150015 return (SDRC_ERROR); 1408da6c28aaSamw } 1409da6c28aaSamw 14103db3f65cSamw rc = smb_mbc_decodef(&xa->req_data_mb, "#B", 1411da6c28aaSamw xa->smb_tdscnt, &vdb); 1412da6c28aaSamw if (rc != 0) 1413da6c28aaSamw goto trans_err_not_supported; 1414da6c28aaSamw 14152c2961f8Sjose borrego rc = smb_opipe_transact(sr, &vdb.vdb_uio); 1416da6c28aaSamw break; 1417da6c28aaSamw 1418da6c28aaSamw case TRANS_WAIT_NMPIPE: 1419bbf6f00cSJordan Brown if (!is_supported_pipe(xa->xa_pipe_name)) { 1420dc20a302Sas200622 smbsr_error(sr, 0, ERRDOS, ERRbadfile); 1421faa1795aSjb150015 return (SDRC_ERROR); 1422da6c28aaSamw } 1423faa1795aSjb150015 rc = SDRC_SUCCESS; 1424da6c28aaSamw break; 1425da6c28aaSamw 1426da6c28aaSamw default: 1427da6c28aaSamw goto trans_err_not_supported; 1428da6c28aaSamw } 1429da6c28aaSamw } else { 1430bbf6f00cSJordan Brown if (!is_supported_mailslot(xa->xa_pipe_name)) 1431da6c28aaSamw goto trans_err_not_supported; 1432da6c28aaSamw 14333db3f65cSamw if ((rc = smb_mbc_decodef(&xa->req_param_mb, "%wss", sr, 1434da6c28aaSamw &opcode, &req_fmt, &rep_fmt)) != 0) 1435da6c28aaSamw goto trans_err_not_supported; 1436da6c28aaSamw 1437da6c28aaSamw switch (opcode) { 1438da6c28aaSamw case API_WshareEnum: 1439da6c28aaSamw rc = smb_trans_net_share_enum(sr, xa); 1440da6c28aaSamw break; 1441da6c28aaSamw 1442da6c28aaSamw case API_WshareGetInfo: 14433ad684d6Sjb150015 rc = smb_trans_net_share_getinfo(sr, xa); 1444da6c28aaSamw break; 1445da6c28aaSamw 1446da6c28aaSamw case API_WserverGetInfo: 14473ad684d6Sjb150015 rc = smb_trans_net_server_getinfo(sr, xa); 1448da6c28aaSamw break; 1449da6c28aaSamw 1450da6c28aaSamw case API_WUserGetInfo: 14513ad684d6Sjb150015 rc = smb_trans_net_user_getinfo(sr, xa); 1452da6c28aaSamw break; 1453da6c28aaSamw 1454da6c28aaSamw case API_WWkstaGetInfo: 14553ad684d6Sjb150015 rc = smb_trans_net_workstation_getinfo(sr, xa); 1456da6c28aaSamw break; 1457da6c28aaSamw 1458da6c28aaSamw case API_NetServerEnum2: 1459da6c28aaSamw rc = smb_trans_net_server_enum2(sr, xa); 1460da6c28aaSamw break; 1461da6c28aaSamw 1462da6c28aaSamw default: 1463da6c28aaSamw goto trans_err_not_supported; 1464da6c28aaSamw } 1465da6c28aaSamw } 1466da6c28aaSamw 1467da6c28aaSamw switch (rc) { 1468faa1795aSjb150015 case SDRC_SUCCESS: 1469da6c28aaSamw break; 1470da6c28aaSamw 1471da6c28aaSamw case SDRC_DROP_VC: 1472da6c28aaSamw case SDRC_NO_REPLY: 1473faa1795aSjb150015 case SDRC_ERROR: 1474da6c28aaSamw return (rc); 1475da6c28aaSamw 1476faa1795aSjb150015 case SDRC_NOT_IMPLEMENTED: 1477da6c28aaSamw goto trans_err_not_supported; 1478da6c28aaSamw 1479da6c28aaSamw default: 1480da6c28aaSamw break; 1481da6c28aaSamw } 1482da6c28aaSamw 1483da6c28aaSamw n_setup = MBC_LENGTH(&xa->rep_setup_mb); 1484da6c28aaSamw n_param = MBC_LENGTH(&xa->rep_param_mb); 1485da6c28aaSamw n_data = MBC_LENGTH(&xa->rep_data_mb); 1486da6c28aaSamw 1487da6c28aaSamw if (xa->smb_msrcnt < n_setup || 1488da6c28aaSamw xa->smb_mprcnt < n_param || 1489da6c28aaSamw xa->smb_mdrcnt < n_data) { 1490da6c28aaSamw goto trans_err_too_small; 1491da6c28aaSamw } 1492da6c28aaSamw 1493da6c28aaSamw /* neato, blast it over there */ 1494da6c28aaSamw 1495da6c28aaSamw n_setup = (n_setup + 1) / 2; /* Convert to setup words */ 1496da6c28aaSamw param_pad = 1; /* always one */ 1497da6c28aaSamw param_off = param_pad + 32 + 21 + (n_setup << 1) + 2; 1498da6c28aaSamw data_pad = (param_off + n_param) & 1; /* Pad to short */ 1499da6c28aaSamw /* Param off from hdr start */ 1500da6c28aaSamw data_off = param_off + n_param + data_pad; 1501da6c28aaSamw total_bytes = param_pad + n_param + data_pad + n_data; 1502da6c28aaSamw 15037b59d02dSjb150015 rc = smbsr_encode_result(sr, 10+n_setup, total_bytes, 1504da6c28aaSamw "bww2.wwwwwwb.Cw#.C#.C", 1505da6c28aaSamw 10 + n_setup, /* wct */ 1506da6c28aaSamw n_param, /* Total Parameter Bytes */ 1507da6c28aaSamw n_data, /* Total Data Bytes */ 1508da6c28aaSamw n_param, /* Total Parameter Bytes this buffer */ 1509da6c28aaSamw param_off, /* Param offset from header start */ 1510da6c28aaSamw 0, /* Param displacement */ 1511da6c28aaSamw n_data, /* Total Data Bytes this buffer */ 1512da6c28aaSamw data_off, /* Data offset from header start */ 1513da6c28aaSamw 0, /* Data displacement */ 1514da6c28aaSamw n_setup, /* suwcnt */ 1515da6c28aaSamw &xa->rep_setup_mb, /* setup[] */ 1516da6c28aaSamw total_bytes, /* Total data bytes */ 1517da6c28aaSamw param_pad, 1518da6c28aaSamw &xa->rep_param_mb, 1519da6c28aaSamw data_pad, 1520da6c28aaSamw &xa->rep_data_mb); 1521faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 1522da6c28aaSamw 1523da6c28aaSamw trans_err_too_small: 1524da6c28aaSamw rc = NERR_BufTooSmall; 1525da6c28aaSamw goto trans_err; 1526da6c28aaSamw 1527da6c28aaSamw trans_err_not_supported: 1528da6c28aaSamw rc = ERROR_NOT_SUPPORTED; 1529da6c28aaSamw goto trans_err; 1530da6c28aaSamw 1531da6c28aaSamw trans_err: 1532da6c28aaSamw pos = MBC_LENGTH(&sr->reply) + 23; 15337b59d02dSjb150015 rc = smbsr_encode_result(sr, 10, 4, "bww2.wwwwwwb.www", 1534da6c28aaSamw 10, /* wct */ 1535da6c28aaSamw 4, 0, /* tpscnt tdscnt */ 1536da6c28aaSamw 4, pos, 0, /* pscnt psoff psdisp */ 1537da6c28aaSamw 0, 0, 0, /* dscnt dsoff dsdisp */ 1538da6c28aaSamw 0, /* suwcnt */ 1539da6c28aaSamw 4, /* bcc */ 1540da6c28aaSamw rc, 1541da6c28aaSamw 0); /* converter word? */ 1542faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 1543da6c28aaSamw } 1544da6c28aaSamw 15457b59d02dSjb150015 static smb_sdrc_t 15469fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_trans2_dispatch(smb_request_t *sr, smb_xa_t *xa) 1547da6c28aaSamw { 1548da6c28aaSamw int rc, pos; 1549da6c28aaSamw int total_bytes, n_setup, n_param, n_data; 1550da6c28aaSamw int param_off, param_pad, data_off, data_pad; 1551da6c28aaSamw uint16_t opcode; 1552da6c28aaSamw uint16_t nt_unknown_secret = 0x0100; 1553da6c28aaSamw char *fmt; 1554da6c28aaSamw 1555da6c28aaSamw n_setup = (xa->smb_msrcnt < 200) ? xa->smb_msrcnt : 200; 1556da6c28aaSamw n_setup++; 1557da6c28aaSamw n_setup = n_setup & ~0x0001; 1558da6c28aaSamw n_param = (xa->smb_mprcnt < smb_maxbufsize) 1559da6c28aaSamw ? xa->smb_mprcnt : smb_maxbufsize; 1560da6c28aaSamw n_param++; 1561da6c28aaSamw n_param = n_param & ~0x0001; 1562da6c28aaSamw rc = smb_maxbufsize - (SMBHEADERSIZE + 28 + n_setup + n_param); 1563da6c28aaSamw n_data = (xa->smb_mdrcnt < rc) ? xa->smb_mdrcnt : rc; 1564da6c28aaSamw MBC_INIT(&xa->rep_setup_mb, n_setup * 2); 1565da6c28aaSamw MBC_INIT(&xa->rep_param_mb, n_param); 1566da6c28aaSamw MBC_INIT(&xa->rep_data_mb, n_data); 1567da6c28aaSamw 15683db3f65cSamw if (smb_mbc_decodef(&xa->req_setup_mb, "w", &opcode) != 0) 1569da6c28aaSamw goto trans_err_not_supported; 1570da6c28aaSamw 1571da6c28aaSamw /* 1572da6c28aaSamw * Save this for /proc to read later. 1573da6c28aaSamw */ 1574da6c28aaSamw xa->smb_func = opcode; 1575da6c28aaSamw 1576da6c28aaSamw /* for now, only respond to the */ 1577da6c28aaSamw switch (opcode) { 15782c2961f8Sjose borrego case TRANS2_OPEN2: 15792c2961f8Sjose borrego rc = smb_com_trans2_open2(sr, xa); 15802c2961f8Sjose borrego break; 15812c2961f8Sjose borrego 1582da6c28aaSamw case TRANS2_CREATE_DIRECTORY: 1583da6c28aaSamw rc = smb_com_trans2_create_directory(sr, xa); 1584da6c28aaSamw break; 1585da6c28aaSamw 1586da6c28aaSamw case TRANS2_FIND_FIRST2: 1587da6c28aaSamw /* 1588da6c28aaSamw * Should have enough room to send the response 1589da6c28aaSamw * data back to client. 1590da6c28aaSamw */ 1591da6c28aaSamw if (n_data == 0) { 1592dc20a302Sas200622 smbsr_error(sr, NT_STATUS_INFO_LENGTH_MISMATCH, 1593da6c28aaSamw ERRDOS, ERROR_BAD_LENGTH); 1594faa1795aSjb150015 return (SDRC_ERROR); 1595da6c28aaSamw } 1596da6c28aaSamw rc = smb_com_trans2_find_first2(sr, xa); 1597da6c28aaSamw break; 1598da6c28aaSamw 1599da6c28aaSamw case TRANS2_FIND_NEXT2: 1600da6c28aaSamw /* 1601da6c28aaSamw * Should have enough room to send the response 1602da6c28aaSamw * data back to client. 1603da6c28aaSamw */ 1604da6c28aaSamw if (n_data == 0) { 1605dc20a302Sas200622 smbsr_error(sr, NT_STATUS_INFO_LENGTH_MISMATCH, 1606da6c28aaSamw ERRDOS, ERROR_BAD_LENGTH); 1607faa1795aSjb150015 return (SDRC_ERROR); 1608da6c28aaSamw } 1609da6c28aaSamw rc = smb_com_trans2_find_next2(sr, xa); 1610da6c28aaSamw break; 1611da6c28aaSamw 1612da6c28aaSamw case TRANS2_QUERY_FS_INFORMATION: 1613da6c28aaSamw /* 1614da6c28aaSamw * Should have enough room to send the response 1615da6c28aaSamw * data back to client. 1616da6c28aaSamw */ 1617da6c28aaSamw if (n_data == 0) { 1618dc20a302Sas200622 smbsr_error(sr, NT_STATUS_INFO_LENGTH_MISMATCH, 1619da6c28aaSamw ERRDOS, ERROR_BAD_LENGTH); 1620faa1795aSjb150015 return (SDRC_ERROR); 1621da6c28aaSamw } 1622da6c28aaSamw rc = smb_com_trans2_query_fs_information(sr, xa); 1623da6c28aaSamw break; 1624da6c28aaSamw 16259fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States case TRANS2_SET_FS_INFORMATION: 16269fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_com_trans2_set_fs_information(sr, xa); 16279fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States break; 16289fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 1629da6c28aaSamw case TRANS2_QUERY_PATH_INFORMATION: 1630da6c28aaSamw /* 1631da6c28aaSamw * Should have enough room to send the response 1632da6c28aaSamw * data back to client. 1633da6c28aaSamw */ 1634da6c28aaSamw if (n_data == 0) { 1635dc20a302Sas200622 smbsr_error(sr, NT_STATUS_INFO_LENGTH_MISMATCH, 1636da6c28aaSamw ERRDOS, ERROR_BAD_LENGTH); 1637faa1795aSjb150015 return (SDRC_ERROR); 1638da6c28aaSamw } 1639da6c28aaSamw rc = smb_com_trans2_query_path_information(sr, xa); 1640da6c28aaSamw break; 1641da6c28aaSamw 1642da6c28aaSamw case TRANS2_QUERY_FILE_INFORMATION: 1643da6c28aaSamw /* 1644da6c28aaSamw * Should have enough room to send the response 1645da6c28aaSamw * data back to client. 1646da6c28aaSamw */ 1647da6c28aaSamw if (n_data == 0) { 1648dc20a302Sas200622 smbsr_error(sr, NT_STATUS_INFO_LENGTH_MISMATCH, 1649da6c28aaSamw ERRDOS, ERROR_BAD_LENGTH); 1650faa1795aSjb150015 return (SDRC_ERROR); 1651da6c28aaSamw } 1652da6c28aaSamw rc = smb_com_trans2_query_file_information(sr, xa); 1653da6c28aaSamw break; 1654da6c28aaSamw 1655da6c28aaSamw case TRANS2_SET_PATH_INFORMATION: 1656da6c28aaSamw rc = smb_com_trans2_set_path_information(sr, xa); 1657da6c28aaSamw break; 1658da6c28aaSamw 1659da6c28aaSamw case TRANS2_SET_FILE_INFORMATION: 1660da6c28aaSamw rc = smb_com_trans2_set_file_information(sr, xa); 1661da6c28aaSamw break; 16629fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 16639fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States case TRANS2_GET_DFS_REFERRAL: 16649fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_com_trans2_get_dfs_referral(sr, xa); 16659fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States break; 16669fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 1667da6c28aaSamw default: 16682c2961f8Sjose borrego (void) smb_mbc_encodef(&xa->rep_param_mb, "w", 0); 1669da6c28aaSamw goto trans_err_not_supported; 1670da6c28aaSamw } 1671da6c28aaSamw 1672da6c28aaSamw switch (rc) { 1673faa1795aSjb150015 case SDRC_SUCCESS: 1674da6c28aaSamw break; 1675da6c28aaSamw 1676da6c28aaSamw case SDRC_DROP_VC: 1677da6c28aaSamw case SDRC_NO_REPLY: 1678faa1795aSjb150015 case SDRC_ERROR: 1679da6c28aaSamw return (rc); 1680da6c28aaSamw 1681faa1795aSjb150015 case SDRC_NOT_IMPLEMENTED: 1682da6c28aaSamw goto trans_err_not_supported; 1683da6c28aaSamw 1684da6c28aaSamw default: 1685da6c28aaSamw break; 1686da6c28aaSamw } 1687da6c28aaSamw 1688da6c28aaSamw n_setup = MBC_LENGTH(&xa->rep_setup_mb); 1689da6c28aaSamw n_param = MBC_LENGTH(&xa->rep_param_mb); 1690da6c28aaSamw n_data = MBC_LENGTH(&xa->rep_data_mb); 1691da6c28aaSamw 1692da6c28aaSamw if (xa->smb_msrcnt < n_setup || 1693da6c28aaSamw xa->smb_mprcnt < n_param || 1694da6c28aaSamw xa->smb_mdrcnt < n_data) { 1695da6c28aaSamw goto trans_err_too_small; 1696da6c28aaSamw } 1697da6c28aaSamw 1698da6c28aaSamw /* neato, blast it over there */ 1699da6c28aaSamw 1700da6c28aaSamw n_setup = (n_setup + 1) / 2; /* Conver to setup words */ 1701da6c28aaSamw param_pad = 1; /* must be one */ 1702da6c28aaSamw param_off = param_pad + 32 + 21 + (n_setup << 1) + 2; 1703da6c28aaSamw 1704da6c28aaSamw /* 1705da6c28aaSamw * Including the nt_unknown_secret value persuades netmon to 1706da6c28aaSamw * display the correct data format for QueryPathInfo and 1707da6c28aaSamw * QueryFileInfo. 1708da6c28aaSamw */ 1709da6c28aaSamw if (opcode == TRANS2_QUERY_FILE_INFORMATION || 1710da6c28aaSamw opcode == TRANS2_QUERY_PATH_INFORMATION) { 1711da6c28aaSamw data_pad = sizeof (uint16_t); 1712da6c28aaSamw data_off = param_off + n_param + data_pad; 1713da6c28aaSamw fmt = "bww2.wwwwwwb.Cw#.CwC"; 1714da6c28aaSamw nt_unknown_secret = 0x0100; 1715da6c28aaSamw } 1716da6c28aaSamw else 1717da6c28aaSamw { 1718da6c28aaSamw data_pad = (param_off + n_param) & 1; /* Pad to short */ 1719da6c28aaSamw /* Param off from hdr start */ 1720da6c28aaSamw data_off = param_off + n_param + data_pad; 1721da6c28aaSamw fmt = "bww2.wwwwwwb.Cw#.C#.C"; 1722da6c28aaSamw /*LINTED E_ASSIGN_NARROW_CONV*/ 1723da6c28aaSamw nt_unknown_secret = data_pad; 1724da6c28aaSamw } 1725da6c28aaSamw 1726da6c28aaSamw total_bytes = param_pad + n_param + data_pad + n_data; 1727da6c28aaSamw 17287b59d02dSjb150015 rc = smbsr_encode_result(sr, 10+n_setup, total_bytes, 1729da6c28aaSamw fmt, 1730da6c28aaSamw 10 + n_setup, /* wct */ 1731da6c28aaSamw n_param, /* Total Parameter Bytes */ 1732da6c28aaSamw n_data /* + data_pad */, /* Total Data Bytes */ 1733da6c28aaSamw n_param, /* Total Parameter Bytes this buffer */ 1734da6c28aaSamw param_off, /* Param offset from header start */ 1735da6c28aaSamw 0, /* Param displacement */ 1736da6c28aaSamw n_data /* + data_pad */, /* Total Data Bytes this buffer */ 1737da6c28aaSamw data_off, /* Data offset from header start */ 1738da6c28aaSamw 0, /* Data displacement */ 1739da6c28aaSamw n_setup, /* suwcnt */ 1740da6c28aaSamw &xa->rep_setup_mb, /* setup[] */ 1741da6c28aaSamw total_bytes, /* Total data bytes */ 1742da6c28aaSamw param_pad, 1743da6c28aaSamw &xa->rep_param_mb, 1744da6c28aaSamw nt_unknown_secret, 1745da6c28aaSamw &xa->rep_data_mb); 1746faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 1747da6c28aaSamw 1748da6c28aaSamw trans_err_too_small: 1749da6c28aaSamw rc = NERR_BufTooSmall; 1750da6c28aaSamw goto trans_err; 1751da6c28aaSamw 1752da6c28aaSamw trans_err_not_supported: 1753da6c28aaSamw rc = ERROR_NOT_SUPPORTED; 1754da6c28aaSamw goto trans_err; 1755da6c28aaSamw 1756da6c28aaSamw trans_err: 1757da6c28aaSamw pos = MBC_LENGTH(&sr->reply) + 23; 17587b59d02dSjb150015 rc = smbsr_encode_result(sr, 10, 4, "bww2.wwwwwwb.www", 1759da6c28aaSamw 10, /* wct */ 1760da6c28aaSamw 4, 0, /* tpscnt tdscnt */ 1761da6c28aaSamw 4, pos, 0, /* pscnt psoff psdisp */ 1762da6c28aaSamw 0, 0, 0, /* dscnt dsoff dsdisp */ 1763da6c28aaSamw 0, /* suwcnt */ 1764da6c28aaSamw 4, /* bcc */ 1765da6c28aaSamw rc, 1766da6c28aaSamw 0); /* converter word? */ 1767faa1795aSjb150015 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 1768da6c28aaSamw } 1769da6c28aaSamw 1770da6c28aaSamw smb_xa_t * 1771da6c28aaSamw smb_xa_create( 1772da6c28aaSamw smb_session_t *session, 1773da6c28aaSamw smb_request_t *sr, 1774da6c28aaSamw uint32_t total_parameter_count, 1775da6c28aaSamw uint32_t total_data_count, 1776da6c28aaSamw uint32_t max_parameter_count, 1777da6c28aaSamw uint32_t max_data_count, 1778da6c28aaSamw uint32_t max_setup_count, 1779da6c28aaSamw uint32_t setup_word_count) 1780da6c28aaSamw { 1781da6c28aaSamw smb_xa_t *xa, *nxa; 1782da6c28aaSamw smb_llist_t *xlist; 1783da6c28aaSamw 1784bbf6f00cSJordan Brown xa = kmem_zalloc(sizeof (smb_xa_t), KM_SLEEP); 1785da6c28aaSamw xa->xa_refcnt = 1; 1786da6c28aaSamw xa->smb_com = sr->smb_com; 1787da6c28aaSamw xa->smb_flg = sr->smb_flg; 1788da6c28aaSamw xa->smb_flg2 = sr->smb_flg2; 1789da6c28aaSamw xa->smb_tid = sr->smb_tid; 1790da6c28aaSamw xa->smb_pid = sr->smb_pid; 1791da6c28aaSamw xa->smb_uid = sr->smb_uid; 1792da6c28aaSamw xa->xa_smb_mid = sr->smb_mid; 1793da6c28aaSamw xa->reply_seqnum = sr->reply_seqnum; 1794da6c28aaSamw xa->smb_tpscnt = total_parameter_count; 1795da6c28aaSamw xa->smb_tdscnt = total_data_count; 1796da6c28aaSamw xa->smb_mprcnt = max_parameter_count; 1797da6c28aaSamw xa->smb_mdrcnt = max_data_count; 1798da6c28aaSamw xa->smb_msrcnt = max_setup_count; 1799da6c28aaSamw xa->smb_suwcnt = setup_word_count; 1800da6c28aaSamw xa->xa_session = session; 1801da6c28aaSamw xa->xa_magic = SMB_XA_MAGIC; 1802da6c28aaSamw 1803da6c28aaSamw /* 1804da6c28aaSamw * The new xa structure is checked against the current list to see 1805da6c28aaSamw * if it exists already. 1806da6c28aaSamw */ 1807da6c28aaSamw xlist = &session->s_xa_list; 1808da6c28aaSamw smb_llist_enter(xlist, RW_WRITER); 1809da6c28aaSamw nxa = smb_llist_head(xlist); 1810da6c28aaSamw while (nxa) { 1811da6c28aaSamw ASSERT(nxa->xa_magic == SMB_XA_MAGIC); 1812da6c28aaSamw if (nxa->xa_smb_mid == xa->xa_smb_mid && 1813da6c28aaSamw nxa->smb_pid == xa->smb_pid && 1814da6c28aaSamw !SMB_XA_CLOSED(nxa) && 1815da6c28aaSamw !(nxa->xa_flags & SMB_XA_FLAG_COMPLETE)) { 1816da6c28aaSamw smb_llist_exit(xlist); 1817bbf6f00cSJordan Brown kmem_free(xa, sizeof (smb_xa_t)); 1818da6c28aaSamw return (NULL); 1819da6c28aaSamw } 1820da6c28aaSamw nxa = smb_llist_next(xlist, nxa); 1821da6c28aaSamw } 1822da6c28aaSamw smb_llist_insert_tail(xlist, xa); 1823da6c28aaSamw smb_llist_exit(xlist); 1824da6c28aaSamw return (xa); 1825da6c28aaSamw } 1826da6c28aaSamw 1827da6c28aaSamw void 1828da6c28aaSamw smb_xa_delete(smb_xa_t *xa) 1829da6c28aaSamw { 1830da6c28aaSamw ASSERT(xa->xa_refcnt == 0); 1831da6c28aaSamw ASSERT(SMB_XA_CLOSED(xa)); 1832da6c28aaSamw 1833bbf6f00cSJordan Brown if (xa->xa_pipe_name) 18349fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_mem_free(xa->xa_pipe_name); 1835da6c28aaSamw 1836da6c28aaSamw if (xa->rep_setup_mb.chain != NULL) 1837da6c28aaSamw m_freem(xa->rep_setup_mb.chain); 1838da6c28aaSamw if (xa->rep_param_mb.chain != NULL) 1839da6c28aaSamw m_freem(xa->rep_param_mb.chain); 1840da6c28aaSamw if (xa->rep_data_mb.chain != NULL) 1841da6c28aaSamw m_freem(xa->rep_data_mb.chain); 1842da6c28aaSamw 1843da6c28aaSamw xa->xa_magic = (uint32_t)~SMB_XA_MAGIC; 1844bbf6f00cSJordan Brown kmem_free(xa, sizeof (smb_xa_t)); 1845da6c28aaSamw } 1846da6c28aaSamw 1847da6c28aaSamw smb_xa_t * 1848da6c28aaSamw smb_xa_hold(smb_xa_t *xa) 1849da6c28aaSamw { 1850da6c28aaSamw mutex_enter(&xa->xa_mutex); 1851da6c28aaSamw xa->xa_refcnt++; 1852da6c28aaSamw ASSERT(xa->xa_refcnt); 1853da6c28aaSamw mutex_exit(&xa->xa_mutex); 1854da6c28aaSamw return (xa); 1855da6c28aaSamw } 1856da6c28aaSamw 1857da6c28aaSamw void 1858da6c28aaSamw smb_xa_rele(smb_session_t *session, smb_xa_t *xa) 1859da6c28aaSamw { 1860da6c28aaSamw mutex_enter(&xa->xa_mutex); 1861da6c28aaSamw ASSERT(xa->xa_refcnt); 1862da6c28aaSamw xa->xa_refcnt--; 1863da6c28aaSamw if (SMB_XA_CLOSED(xa) && (xa->xa_refcnt == 0)) { 1864da6c28aaSamw mutex_exit(&xa->xa_mutex); 1865da6c28aaSamw smb_llist_enter(&session->s_xa_list, RW_WRITER); 1866da6c28aaSamw smb_llist_remove(&session->s_xa_list, xa); 1867da6c28aaSamw smb_llist_exit(&session->s_xa_list); 1868da6c28aaSamw smb_xa_delete(xa); 1869da6c28aaSamw return; 1870da6c28aaSamw } 1871da6c28aaSamw mutex_exit(&xa->xa_mutex); 1872da6c28aaSamw } 1873da6c28aaSamw 1874da6c28aaSamw int 1875da6c28aaSamw smb_xa_open(smb_xa_t *xa) 1876da6c28aaSamw { 1877da6c28aaSamw int rc; 1878da6c28aaSamw 1879da6c28aaSamw mutex_enter(&xa->xa_mutex); 1880da6c28aaSamw 1881da6c28aaSamw ASSERT((xa->xa_flags & SMB_XA_FLAG_OPEN) == 0); 1882da6c28aaSamw 1883da6c28aaSamw if ((xa->xa_flags & SMB_XA_FLAG_CLOSE) == 0) { 1884da6c28aaSamw xa->xa_flags |= SMB_XA_FLAG_OPEN; 1885da6c28aaSamw rc = 0; 1886da6c28aaSamw } else { 1887da6c28aaSamw rc = ERROR_INVALID_HANDLE; 1888da6c28aaSamw } 1889da6c28aaSamw 1890da6c28aaSamw mutex_exit(&xa->xa_mutex); 1891da6c28aaSamw 1892da6c28aaSamw return (rc); 1893da6c28aaSamw } 1894da6c28aaSamw 1895da6c28aaSamw void 1896da6c28aaSamw smb_xa_close(smb_xa_t *xa) 1897da6c28aaSamw { 1898da6c28aaSamw mutex_enter(&xa->xa_mutex); 1899da6c28aaSamw xa->xa_flags |= SMB_XA_FLAG_CLOSE; 1900da6c28aaSamw xa->xa_flags &= ~SMB_XA_FLAG_OPEN; 1901da6c28aaSamw 1902da6c28aaSamw if (xa->xa_refcnt == 0) { 1903da6c28aaSamw mutex_exit(&xa->xa_mutex); 1904da6c28aaSamw smb_llist_enter(&xa->xa_session->s_xa_list, RW_WRITER); 1905da6c28aaSamw smb_llist_remove(&xa->xa_session->s_xa_list, xa); 1906da6c28aaSamw smb_llist_exit(&xa->xa_session->s_xa_list); 1907da6c28aaSamw smb_xa_delete(xa); 1908da6c28aaSamw return; 1909da6c28aaSamw } 1910da6c28aaSamw 1911da6c28aaSamw mutex_exit(&xa->xa_mutex); 1912da6c28aaSamw } 1913da6c28aaSamw 1914da6c28aaSamw int 1915da6c28aaSamw smb_xa_complete(smb_xa_t *xa) 1916da6c28aaSamw { 1917da6c28aaSamw int rc; 1918da6c28aaSamw 1919da6c28aaSamw mutex_enter(&xa->xa_mutex); 1920da6c28aaSamw if (xa->xa_flags & (SMB_XA_FLAG_COMPLETE | SMB_XA_FLAG_CLOSE)) { 1921da6c28aaSamw rc = 0; 1922da6c28aaSamw } else { 1923da6c28aaSamw rc = 1; 1924da6c28aaSamw xa->xa_flags |= SMB_XA_FLAG_COMPLETE; 1925da6c28aaSamw } 1926da6c28aaSamw mutex_exit(&xa->xa_mutex); 1927da6c28aaSamw return (rc); 1928da6c28aaSamw } 1929da6c28aaSamw 1930da6c28aaSamw smb_xa_t * 1931da6c28aaSamw smb_xa_find( 1932da6c28aaSamw smb_session_t *session, 1933da6c28aaSamw uint16_t pid, 1934da6c28aaSamw uint16_t mid) 1935da6c28aaSamw { 1936da6c28aaSamw smb_xa_t *xa; 1937da6c28aaSamw smb_llist_t *xlist; 1938da6c28aaSamw 1939da6c28aaSamw xlist = &session->s_xa_list; 1940da6c28aaSamw smb_llist_enter(xlist, RW_READER); 1941da6c28aaSamw xa = smb_llist_head(xlist); 1942da6c28aaSamw while (xa) { 1943da6c28aaSamw mutex_enter(&xa->xa_mutex); 1944da6c28aaSamw if (xa->xa_smb_mid == mid && 1945da6c28aaSamw xa->smb_pid == pid && 1946da6c28aaSamw !SMB_XA_CLOSED(xa) && 1947da6c28aaSamw !(xa->xa_flags & SMB_XA_FLAG_COMPLETE)) { 1948da6c28aaSamw xa->xa_refcnt++; 1949da6c28aaSamw ASSERT(xa->xa_refcnt); 1950da6c28aaSamw mutex_exit(&xa->xa_mutex); 1951da6c28aaSamw break; 1952da6c28aaSamw } 1953da6c28aaSamw mutex_exit(&xa->xa_mutex); 1954da6c28aaSamw xa = smb_llist_next(xlist, xa); 1955da6c28aaSamw } 1956da6c28aaSamw smb_llist_exit(xlist); 1957da6c28aaSamw return (xa); 1958da6c28aaSamw } 1959