1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 /* 22 * Copyright 2009 Sun Microsystems, Inc. All rights reserved. 23 * Use is subject to license terms. 24 */ 25 26 #include <smbsrv/smb_vops.h> 27 #include <smbsrv/smb_incl.h> 28 29 int smb_open_dsize_check = 0; 30 31 /* 32 * Client Request Description 33 * ================================== ================================= 34 * 35 * UCHAR WordCount; Count of parameter words = 15 36 * UCHAR AndXCommand; Secondary (X) command; 0xFF = 37 * none 38 * UCHAR AndXReserved; Reserved (must be 0) 39 * USHORT AndXOffset; Offset to next command WordCount 40 * USHORT Flags; Additional information: bit set- 41 * 0 - return additional info 42 * 1 - exclusive oplock requested 43 * 2 - batch oplock requested 44 * USHORT DesiredAccess; File open mode 45 * USHORT SearchAttributes; 46 * USHORT FileAttributes; 47 * UTIME CreationTime; Creation timestamp for file if it 48 * gets created 49 * USHORT OpenFunction; Action to take if file exists 50 * ULONG AllocationSize; Bytes to reserve on create or 51 * truncate 52 * ULONG Reserved[2]; Must be 0 53 * USHORT ByteCount; Count of data bytes; min = 1 54 * UCHAR BufferFormat 0x04 55 * STRING FileName; 56 * 57 * Server Response Description 58 * ================================== ================================= 59 * 60 * UCHAR WordCount; Count of parameter words = 15 61 * UCHAR AndXCommand; Secondary (X) command; 0xFF = 62 * none 63 * UCHAR AndXReserved; Reserved (must be 0) 64 * USHORT AndXOffset; Offset to next command WordCount 65 * USHORT Fid; File handle 66 * USHORT FileAttributes; 67 * UTIME LastWriteTime; 68 * ULONG DataSize; Current file size 69 * USHORT GrantedAccess; Access permissions actually 70 * allowed 71 * USHORT FileType; Type of file opened 72 * USHORT DeviceState; State of the named pipe 73 * USHORT Action; Action taken 74 * ULONG ServerFid; Server unique file id 75 * USHORT Reserved; Reserved (must be 0) 76 * USHORT ByteCount; Count of data bytes = 0 77 * 78 * DesiredAccess describes the access the client desires for the file (see 79 * section 3.6 - Access Mode Encoding). 80 * 81 * OpenFunction specifies the action to be taken depending on whether or 82 * not the file exists (see section 3.8 - Open Function Encoding). Action 83 * 84 * in the response specifies the action as a result of the Open request 85 * (see section 3.9 - Open Action Encoding). 86 * 87 * SearchAttributes indicates the attributes that the file must have to be 88 * found while searching to see if it exists. The encoding of this field 89 * is described in the "File Attribute Encoding" section elsewhere in this 90 * document. If SearchAttributes is zero then only normal files are 91 * returned. If the system file, hidden or directory attributes are 92 * specified then the search is inclusive -- both the specified type(s) of 93 * files and normal files are returned. 94 * 95 * FileType returns the kind of resource actually opened: 96 * 97 * Name Value Description 98 * ========================== ====== ================================== 99 * 100 * FileTypeDisk 0 Disk file or directory as defined 101 * in the attribute field 102 * FileTypeByteModePipe 1 Named pipe in byte mode 103 * FileTypeMessageModePipe 2 Named pipe in message mode 104 * FileTypePrinter 3 Spooled printer 105 * FileTypeUnknown 0xFFFF Unrecognized resource type 106 * 107 * If bit0 of Flags is clear, the FileAttributes, LastWriteTime, DataSize, 108 * FileType, and DeviceState have indeterminate values in the response. 109 * 110 * This SMB can request an oplock on the opened file. Oplocks are fully 111 * described in the "Oplocks" section elsewhere in this document, and there 112 * is also discussion of oplocks in the SMB_COM_LOCKING_ANDX SMB 113 * description. Bit1 and bit2 of the Flags field are used to request 114 * oplocks during open. 115 * 116 * The following SMBs may follow SMB_COM_OPEN_ANDX: 117 * 118 * SMB_COM_READ SMB_COM_READ_ANDX 119 * SMB_COM_IOCTL 120 */ 121 122 /* 123 * This message is sent to obtain a file handle for a data file. This 124 * returned Fid is used in subsequent client requests such as read, write, 125 * close, etc. 126 * 127 * Client Request Description 128 * ================================== ================================= 129 * 130 * UCHAR WordCount; Count of parameter words = 2 131 * USHORT DesiredAccess; Mode - read/write/share 132 * USHORT SearchAttributes; 133 * USHORT ByteCount; Count of data bytes; min = 2 134 * UCHAR BufferFormat; 0x04 135 * STRING FileName[]; File name 136 * 137 * FileName is the fully qualified file name, relative to the root of the 138 * share specified in the Tid field of the SMB header. If Tid in the SMB 139 * header refers to a print share, this SMB creates a new file which will 140 * be spooled to the printer when closed. In this case, FileName is 141 * ignored. 142 * 143 * SearchAttributes specifies the type of file desired. The encoding is 144 * described in the "File Attribute Encoding" section. 145 * 146 * DesiredAccess controls the mode under which the file is opened, and the 147 * file will be opened only if the client has the appropriate permissions. 148 * The encoding of DesiredAccess is discussed in the section entitled 149 * "Access Mode Encoding". 150 * 151 * Server Response Description 152 * ================================== ================================= 153 * 154 * UCHAR WordCount; Count of parameter words = 7 155 * USHORT Fid; File handle 156 * USHORT FileAttributes; Attributes of opened file 157 * UTIME LastWriteTime; Time file was last written 158 * ULONG DataSize; File size 159 * USHORT GrantedAccess; Access allowed 160 * USHORT ByteCount; Count of data bytes = 0 161 * 162 * Fid is the handle value which should be used for subsequent file 163 * operations. 164 * 165 * FileAttributes specifies the type of file obtained. The encoding is 166 * described in the "File Attribute Encoding" section. 167 * 168 * GrantedAccess indicates the access permissions actually allowed, and may 169 * have one of the following values: 170 * 171 * 0 read-only 172 * 1 write-only 173 * 2 read/write 174 * 175 * File Handles (Fids) are scoped per client. A Pid may reference any Fid 176 * established by itself or any other Pid on the client (so far as the 177 * server is concerned). The actual accesses allowed through the Fid 178 * depends on the open and deny modes specified when the file was opened 179 * (see below). 180 * 181 * The MS-DOS compatibility mode of file open provides exclusion at the 182 * client level. A file open in compatibility mode may be opened (also in 183 * compatibility mode) any number of times for any combination of reading 184 * and writing (subject to the user's permissions) by any Pid on the same 185 * client. If the first client has the file open for writing, then the 186 * file may not be opened in any way by any other client. If the first 187 * client has the file open only for reading, then other clients may open 188 * the file, in compatibility mode, for reading.. The above 189 * notwithstanding, if the filename has an extension of .EXE, .DLL, .SYM, 190 * or .COM other clients are permitted to open the file regardless of 191 * read/write open modes of other compatibility mode opens. However, once 192 * multiple clients have the file open for reading, no client is permitted 193 * to open the file for writing and no other client may open the file in 194 * any mode other than compatibility mode. 195 * 196 * The other file exclusion modes (Deny read/write, Deny write, Deny read, 197 * Deny none) provide exclusion at the file level. A file opened in any 198 * "Deny" mode may be opened again only for the accesses allowed by the 199 * Deny mode (subject to the user's permissions). This is true regardless 200 * of the identity of the second opener -a different client, a Pid from the 201 * same client, or the Pid that already has the file open. For example, if 202 * a file is open in "Deny write" mode a second open may only obtain read 203 * permission to the file. 204 * 205 * Although Fids are available to all Pids on a client, Pids other than the 206 * owner may not have the full access rights specified in the open mode by 207 * the Fid's creator. If the open creating the Fid specified a deny mode, 208 * then any Pid using the Fid, other than the creating Pid, will have only 209 * those access rights determined by "anding" the open mode rights and the 210 * deny mode rights, i.e., the deny mode is checked on all file accesses. 211 * For example, if a file is opened for Read/Write in Deny write mode, then 212 * other clients may only read the file and cannot write; if a file is 213 * opened for Read in Deny read mode, then the other clients can neither 214 * read nor write the file. 215 */ 216 217 smb_sdrc_t 218 smb_pre_open(smb_request_t *sr) 219 { 220 struct open_param *op = &sr->arg.open; 221 int rc; 222 223 bzero(op, sizeof (sr->arg.open)); 224 225 rc = smbsr_decode_vwv(sr, "ww", &op->omode, &op->fqi.srch_attr); 226 if (rc == 0) 227 rc = smbsr_decode_data(sr, "%S", sr, &op->fqi.path); 228 229 DTRACE_SMB_2(op__Open__start, smb_request_t *, sr, 230 struct open_param *, op); 231 232 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 233 } 234 235 void 236 smb_post_open(smb_request_t *sr) 237 { 238 DTRACE_SMB_1(op__Open__done, smb_request_t *, sr); 239 } 240 241 smb_sdrc_t 242 smb_com_open(smb_request_t *sr) 243 { 244 struct open_param *op = &sr->arg.open; 245 smb_node_t *node; 246 uint16_t file_attr; 247 int rc; 248 249 op->desired_access = smb_omode_to_amask(op->omode); 250 op->share_access = smb_denymode_to_sharemode(op->omode, op->fqi.path); 251 op->crtime.tv_sec = op->crtime.tv_nsec = 0; 252 op->create_disposition = FILE_OPEN; 253 op->create_options = FILE_NON_DIRECTORY_FILE; 254 if (op->omode & SMB_DA_WRITE_THROUGH) 255 op->create_options |= FILE_WRITE_THROUGH; 256 257 if (sr->smb_flg & SMB_FLAGS_OPLOCK) { 258 if (sr->smb_flg & SMB_FLAGS_OPLOCK_NOTIFY_ANY) 259 op->op_oplock_level = SMB_OPLOCK_BATCH; 260 else 261 op->op_oplock_level = SMB_OPLOCK_EXCLUSIVE; 262 } else { 263 op->op_oplock_level = SMB_OPLOCK_NONE; 264 } 265 266 if (smb_common_open(sr) != NT_STATUS_SUCCESS) 267 return (SDRC_ERROR); 268 269 if (op->op_oplock_level == SMB_OPLOCK_NONE) { 270 sr->smb_flg &= 271 ~(SMB_FLAGS_OPLOCK | SMB_FLAGS_OPLOCK_NOTIFY_ANY); 272 } 273 274 if (smb_open_dsize_check && op->dsize > UINT_MAX) { 275 smbsr_error(sr, 0, ERRDOS, ERRbadaccess); 276 return (SDRC_ERROR); 277 } 278 279 file_attr = op->dattr & FILE_ATTRIBUTE_MASK; 280 node = sr->fid_ofile->f_node; 281 282 rc = smbsr_encode_result(sr, 7, 0, "bwwllww", 283 7, 284 sr->smb_fid, 285 file_attr, 286 smb_gmt2local(sr, node->attr.sa_vattr.va_mtime.tv_sec), 287 (uint32_t)op->dsize, 288 op->omode, 289 (uint16_t)0); /* bcc */ 290 291 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 292 } 293 294 /* 295 * smb_pre_open_andx 296 * For compatibility with windows servers, the search attributes 297 * specified in the request are ignored. 298 */ 299 smb_sdrc_t 300 smb_pre_open_andx(smb_request_t *sr) 301 { 302 struct open_param *op = &sr->arg.open; 303 uint16_t flags; 304 uint32_t creation_time; 305 uint16_t file_attr, sattr; 306 int rc; 307 308 bzero(op, sizeof (sr->arg.open)); 309 310 rc = smbsr_decode_vwv(sr, "b.wwwwwlwll4.", &sr->andx_com, 311 &sr->andx_off, &flags, &op->omode, &sattr, 312 &file_attr, &creation_time, &op->ofun, &op->dsize, &op->timeo); 313 314 if (rc == 0) { 315 rc = smbsr_decode_data(sr, "%u", sr, &op->fqi.path); 316 317 op->dattr = file_attr; 318 319 if (flags & 2) 320 op->op_oplock_level = SMB_OPLOCK_EXCLUSIVE; 321 else if (flags & 4) 322 op->op_oplock_level = SMB_OPLOCK_BATCH; 323 else 324 op->op_oplock_level = SMB_OPLOCK_NONE; 325 326 if ((creation_time != 0) && (creation_time != UINT_MAX)) 327 op->crtime.tv_sec = smb_local2gmt(sr, creation_time); 328 op->crtime.tv_nsec = 0; 329 330 op->create_disposition = smb_ofun_to_crdisposition(op->ofun); 331 } 332 333 DTRACE_SMB_2(op__OpenX__start, smb_request_t *, sr, 334 struct open_param *, op); 335 336 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 337 } 338 339 void 340 smb_post_open_andx(smb_request_t *sr) 341 { 342 DTRACE_SMB_1(op__OpenX__done, smb_request_t *, sr); 343 } 344 345 smb_sdrc_t 346 smb_com_open_andx(smb_request_t *sr) 347 { 348 struct open_param *op = &sr->arg.open; 349 uint16_t file_attr; 350 int rc; 351 352 op->desired_access = smb_omode_to_amask(op->omode); 353 op->share_access = smb_denymode_to_sharemode(op->omode, op->fqi.path); 354 355 if (op->create_disposition > FILE_MAXIMUM_DISPOSITION) { 356 smbsr_error(sr, 0, ERRDOS, ERRbadaccess); 357 return (SDRC_ERROR); 358 } 359 360 op->create_options = FILE_NON_DIRECTORY_FILE; 361 if (op->omode & SMB_DA_WRITE_THROUGH) 362 op->create_options |= FILE_WRITE_THROUGH; 363 364 if (smb_common_open(sr) != NT_STATUS_SUCCESS) 365 return (SDRC_ERROR); 366 367 if (smb_open_dsize_check && op->dsize > UINT_MAX) { 368 smbsr_error(sr, 0, ERRDOS, ERRbadaccess); 369 return (SDRC_ERROR); 370 } 371 372 if (op->op_oplock_level != SMB_OPLOCK_NONE) 373 op->action_taken |= SMB_OACT_LOCK; 374 else 375 op->action_taken &= ~SMB_OACT_LOCK; 376 377 file_attr = op->dattr & FILE_ATTRIBUTE_MASK; 378 if (STYPE_ISDSK(sr->tid_tree->t_res_type)) { 379 smb_node_t *node = sr->fid_ofile->f_node; 380 rc = smbsr_encode_result(sr, 15, 0, 381 "bb.wwwllwwwwl2.w", 382 15, 383 sr->andx_com, VAR_BCC, 384 sr->smb_fid, 385 file_attr, 386 smb_gmt2local(sr, node->attr.sa_vattr.va_mtime.tv_sec), 387 (uint32_t)op->dsize, 388 op->omode, op->ftype, 389 op->devstate, 390 op->action_taken, op->fileid, 391 0); 392 } else { 393 rc = smbsr_encode_result(sr, 15, 0, 394 "bb.wwwllwwwwl2.w", 395 15, 396 sr->andx_com, VAR_BCC, 397 sr->smb_fid, 398 file_attr, 399 0L, 400 0L, 401 op->omode, op->ftype, 402 op->devstate, 403 op->action_taken, op->fileid, 404 0); 405 } 406 407 return ((rc == 0) ? SDRC_SUCCESS : SDRC_ERROR); 408 } 409 410 smb_sdrc_t 411 smb_com_trans2_open2(smb_request_t *sr, smb_xa_t *xa) 412 { 413 struct open_param *op = &sr->arg.open; 414 uint32_t creation_time; 415 uint32_t alloc_size; 416 uint16_t flags; 417 uint16_t file_attr; 418 int rc; 419 420 bzero(op, sizeof (sr->arg.open)); 421 422 rc = smb_mbc_decodef(&xa->req_param_mb, "%wwwwlwl10.u", 423 sr, &flags, &op->omode, &op->fqi.srch_attr, &file_attr, 424 &creation_time, &op->ofun, &alloc_size, &op->fqi.path); 425 if (rc != 0) 426 return (SDRC_ERROR); 427 428 if ((creation_time != 0) && (creation_time != UINT_MAX)) 429 op->crtime.tv_sec = smb_local2gmt(sr, creation_time); 430 op->crtime.tv_nsec = 0; 431 432 op->dattr = file_attr; 433 op->dsize = alloc_size; 434 op->create_options = FILE_NON_DIRECTORY_FILE; 435 436 op->desired_access = smb_omode_to_amask(op->omode); 437 op->share_access = smb_denymode_to_sharemode(op->omode, op->fqi.path); 438 439 op->create_disposition = smb_ofun_to_crdisposition(op->ofun); 440 if (op->create_disposition > FILE_MAXIMUM_DISPOSITION) 441 op->create_disposition = FILE_CREATE; 442 443 if (op->omode & SMB_DA_WRITE_THROUGH) 444 op->create_options |= FILE_WRITE_THROUGH; 445 446 if (sr->smb_flg & SMB_FLAGS_OPLOCK) { 447 if (sr->smb_flg & SMB_FLAGS_OPLOCK_NOTIFY_ANY) 448 op->op_oplock_level = SMB_OPLOCK_BATCH; 449 else 450 op->op_oplock_level = SMB_OPLOCK_EXCLUSIVE; 451 } else { 452 op->op_oplock_level = SMB_OPLOCK_NONE; 453 } 454 455 if (smb_common_open(sr) != NT_STATUS_SUCCESS) 456 return (SDRC_ERROR); 457 458 if (op->op_oplock_level != SMB_OPLOCK_NONE) 459 op->action_taken |= SMB_OACT_LOCK; 460 else 461 op->action_taken &= ~SMB_OACT_LOCK; 462 463 file_attr = op->dattr & FILE_ATTRIBUTE_MASK; 464 465 if (!STYPE_ISDSK(sr->tid_tree->t_res_type)) 466 op->dsize = 0; 467 468 (void) smb_mbc_encodef(&xa->rep_param_mb, "wwllwwwwlwl", 469 sr->smb_fid, 470 file_attr, 471 (uint32_t)0, /* creation time */ 472 (uint32_t)op->dsize, 473 op->omode, 474 op->ftype, 475 op->devstate, 476 op->action_taken, 477 op->fileid, 478 (uint16_t)0, /* EA error offset */ 479 (uint32_t)0); /* EA list length */ 480 481 return (SDRC_SUCCESS); 482 } 483