summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--source3/Makefile.in1
-rw-r--r--source3/smbd/globals.h1
-rw-r--r--source3/smbd/smb2_create.c274
-rw-r--r--source3/smbd/smb2_server.c2
4 files changed, 277 insertions, 1 deletions
diff --git a/source3/Makefile.in b/source3/Makefile.in
index eb3761d49c..0430656382 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -752,6 +752,7 @@ SMBD_OBJ_SRV = smbd/files.o smbd/chgpasswd.o smbd/connection.o \
smbd/dnsregister.o smbd/globals.o \
smbd/smb2_server.o smbd/smb2_negprot.o \
smbd/smb2_sesssetup.o smbd/smb2_tcon.o smbd/smb2_glue.o \
+ smbd/smb2_create.o \
smbd/smb2_keepalive.o smbd/smb2_signing.o \
$(MANGLE_OBJ) @VFS_STATIC@
diff --git a/source3/smbd/globals.h b/source3/smbd/globals.h
index 6cf5439a3f..d377dc129b 100644
--- a/source3/smbd/globals.h
+++ b/source3/smbd/globals.h
@@ -196,6 +196,7 @@ NTSTATUS smbd_smb2_request_process_sesssetup(struct smbd_smb2_request *req);
NTSTATUS smbd_smb2_request_process_logoff(struct smbd_smb2_request *req);
NTSTATUS smbd_smb2_request_process_tcon(struct smbd_smb2_request *req);
NTSTATUS smbd_smb2_request_process_tdis(struct smbd_smb2_request *req);
+NTSTATUS smbd_smb2_request_process_create(struct smbd_smb2_request *req);
NTSTATUS smbd_smb2_request_process_keepalive(struct smbd_smb2_request *req);
struct smbd_smb2_request {
diff --git a/source3/smbd/smb2_create.c b/source3/smbd/smb2_create.c
new file mode 100644
index 0000000000..8cd0c3bb38
--- /dev/null
+++ b/source3/smbd/smb2_create.c
@@ -0,0 +1,274 @@
+/*
+ Unix SMB/CIFS implementation.
+ Core SMB2 server
+
+ Copyright (C) Stefan Metzmacher 2009
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+#include "includes.h"
+#include "smbd/globals.h"
+#include "../source4/libcli/smb2/smb2_constants.h"
+
+static NTSTATUS smbd_smb2_create(struct smbd_smb2_request *req,
+ uint8_t in_oplock_level,
+ uint32_t in_impersonation_level,
+ uint32_t in_desired_access,
+ uint32_t in_file_attributes,
+ uint32_t in_share_access,
+ uint32_t in_create_disposition,
+ uint32_t in_create_options,
+ const char *in_name,
+ uint8_t *out_oplock_level,
+ uint32_t *out_create_action,
+ NTTIME *out_creation_time,
+ NTTIME *out_last_access_time,
+ NTTIME *out_last_write_time,
+ NTTIME *out_change_time,
+ uint64_t *out_allocation_size,
+ uint64_t *out_end_of_file,
+ uint32_t *out_file_attributes,
+ uint64_t *out_file_id_volatile);
+
+NTSTATUS smbd_smb2_request_process_create(struct smbd_smb2_request *req)
+{
+ const uint8_t *inbody;
+ int i = req->current_idx;
+ uint8_t *outhdr;
+ DATA_BLOB outbody;
+ DATA_BLOB outdyn;
+ size_t expected_body_size = 0x39;
+ size_t body_size;
+ uint8_t in_oplock_level;
+ uint32_t in_impersonation_level;
+ uint32_t in_desired_access;
+ uint32_t in_file_attributes;
+ uint32_t in_share_access;
+ uint32_t in_create_disposition;
+ uint32_t in_create_options;
+ uint16_t in_name_offset;
+ uint16_t in_name_length;
+ DATA_BLOB in_name_buffer;
+ char *in_name_string;
+ size_t in_name_string_size;
+ uint8_t out_oplock_level;
+ uint32_t out_create_action;
+ NTTIME out_creation_time;
+ NTTIME out_last_access_time;
+ NTTIME out_last_write_time;
+ NTTIME out_change_time;
+ uint64_t out_allocation_size;
+ uint64_t out_end_of_file;
+ uint32_t out_file_attributes;
+ uint64_t out_file_id_volatile;
+ NTSTATUS status;
+ bool ok;
+
+ if (req->in.vector[i+1].iov_len != (expected_body_size & 0xFFFFFFFE)) {
+ return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
+ }
+
+ inbody = (const uint8_t *)req->in.vector[i+1].iov_base;
+
+ body_size = SVAL(inbody, 0x00);
+ if (body_size != expected_body_size) {
+ return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
+ }
+
+ in_oplock_level = CVAL(inbody, 0x03);
+ in_impersonation_level = IVAL(inbody, 0x04);
+ in_desired_access = IVAL(inbody, 0x18);
+ in_file_attributes = IVAL(inbody, 0x1C);
+ in_share_access = IVAL(inbody, 0x20);
+ in_create_disposition = IVAL(inbody, 0x24);
+ in_create_options = IVAL(inbody, 0x28);
+ in_name_offset = SVAL(inbody, 0x2C);
+ in_name_length = SVAL(inbody, 0x2E);
+
+ if (in_name_offset != (SMB2_HDR_BODY + (body_size & 0xFFFFFFFE))) {
+ return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
+ }
+
+ if (in_name_length > req->in.vector[i+2].iov_len) {
+ return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
+ }
+
+ in_name_buffer.data = (uint8_t *)req->in.vector[i+2].iov_base;
+ in_name_buffer.length = in_name_length;
+
+ ok = convert_string_talloc(req, CH_UTF16, CH_UNIX,
+ in_name_buffer.data,
+ in_name_buffer.length,
+ &in_name_string,
+ &in_name_string_size, false);
+ if (!ok) {
+ return smbd_smb2_request_error(req, NT_STATUS_ILLEGAL_CHARACTER);
+ }
+
+ status = smbd_smb2_create(req,
+ in_oplock_level,
+ in_impersonation_level,
+ in_desired_access,
+ in_file_attributes,
+ in_share_access,
+ in_create_disposition,
+ in_create_options,
+ in_name_string,
+ &out_oplock_level,
+ &out_create_action,
+ &out_creation_time,
+ &out_last_access_time,
+ &out_last_write_time,
+ &out_change_time,
+ &out_allocation_size,
+ &out_end_of_file,
+ &out_file_attributes,
+ &out_file_id_volatile);
+ if (!NT_STATUS_IS_OK(status)) {
+ return smbd_smb2_request_error(req, status);
+ }
+
+ outhdr = (uint8_t *)req->out.vector[i].iov_base;
+
+ outbody = data_blob_talloc(req->out.vector, NULL, 0x58);
+ if (outbody.data == NULL) {
+ return smbd_smb2_request_error(req, NT_STATUS_NO_MEMORY);
+ }
+
+ SSVAL(outbody.data, 0x00, 0x58 + 1); /* struct size */
+ SCVAL(outbody.data, 0x02,
+ out_oplock_level); /* oplock level */
+ SCVAL(outbody.data, 0x03, 0); /* reserved */
+ SIVAL(outbody.data, 0x04,
+ out_create_action); /* create action */
+ SBVAL(outbody.data, 0x08,
+ out_creation_time); /* creation time */
+ SBVAL(outbody.data, 0x10,
+ out_last_access_time); /* last access time */
+ SBVAL(outbody.data, 0x18,
+ out_last_write_time); /* last write time */
+ SBVAL(outbody.data, 0x20,
+ out_change_time); /* change time */
+ SBVAL(outbody.data, 0x28,
+ out_allocation_size); /* allocation size */
+ SBVAL(outbody.data, 0x30,
+ out_end_of_file); /* end of file */
+ SIVAL(outbody.data, 0x38,
+ out_file_attributes); /* file attributes */
+ SIVAL(outbody.data, 0x3C, 0); /* reserved */
+ SBVAL(outbody.data, 0x40, 0); /* file id (persistent) */
+ SBVAL(outbody.data, 0x48,
+ out_file_id_volatile); /* file id (volatile) */
+ SIVAL(outbody.data, 0x50, 0); /* create contexts offset */
+ SIVAL(outbody.data, 0x54, 0); /* create contexts length */
+
+ outdyn = data_blob_const(NULL, 0);
+
+ return smbd_smb2_request_done(req, outbody, &outdyn);
+}
+
+static NTSTATUS smbd_smb2_create(struct smbd_smb2_request *req,
+ uint8_t in_oplock_level,
+ uint32_t in_impersonation_level,
+ uint32_t in_desired_access,
+ uint32_t in_file_attributes,
+ uint32_t in_share_access,
+ uint32_t in_create_disposition,
+ uint32_t in_create_options,
+ const char *in_name,
+ uint8_t *out_oplock_level,
+ uint32_t *out_create_action,
+ NTTIME *out_creation_time,
+ NTTIME *out_last_access_time,
+ NTTIME *out_last_write_time,
+ NTTIME *out_change_time,
+ uint64_t *out_allocation_size,
+ uint64_t *out_end_of_file,
+ uint32_t *out_file_attributes,
+ uint64_t *out_file_id_volatile)
+{
+ NTSTATUS status;
+ struct smb_request *smbreq;
+ files_struct *result;
+ int info;
+ SMB_STRUCT_STAT sbuf;
+
+ DEBUG(10,("smbd_smb2_create: name[%s]\n",
+ in_name));
+
+ smbreq = smbd_smb2_fake_smb_request(req);
+ if (smbreq == NULL) {
+ return NT_STATUS_NO_MEMORY;
+ }
+
+ /* If it's an IPC, pass off the pipe handler. */
+ if (IS_IPC(req->tcon->compat_conn)) {
+ return NT_STATUS_NOT_IMPLEMENTED;
+ }
+
+ if (CAN_PRINT(req->tcon->compat_conn)) {
+ return NT_STATUS_NOT_IMPLEMENTED;
+ }
+
+ switch (in_oplock_level) {
+ case SMB2_OPLOCK_LEVEL_BATCH:
+ break;
+ case SMB2_OPLOCK_LEVEL_EXCLUSIVE:
+ break;
+ default:
+ break;
+ }
+
+ status = SMB_VFS_CREATE_FILE(req->tcon->compat_conn,
+ smbreq,
+ 0, /* root_dir_fid */
+ in_name,
+ CFF_DOS_PATH, /* create_file_flags */
+ in_desired_access,
+ in_share_access,
+ in_create_disposition,
+ in_create_options,
+ in_file_attributes,
+ 0, /* oplock_request */
+ 0, /* allocation_size */
+ NULL, /* security_descriptor */
+ NULL, /* ea_list */
+ &result,
+ &info,
+ &sbuf);
+ if (!NT_STATUS_IS_OK(status)) {
+ return status;
+ }
+
+ *out_oplock_level = 0;
+ if ((in_create_disposition == FILE_SUPERSEDE)
+ && (info == FILE_WAS_OVERWRITTEN)) {
+ *out_create_action = FILE_WAS_SUPERSEDED;
+ } else {
+ *out_create_action = info;
+ }
+ unix_timespec_to_nt_time(out_creation_time, sbuf.st_ex_btime);
+ unix_timespec_to_nt_time(out_last_access_time, sbuf.st_ex_atime);
+ unix_timespec_to_nt_time(out_last_write_time,sbuf.st_ex_mtime);
+ unix_timespec_to_nt_time(out_change_time, sbuf.st_ex_ctime);
+ *out_allocation_size = sbuf.st_ex_blksize * sbuf.st_ex_blocks;
+ *out_end_of_file = sbuf.st_ex_size;
+ *out_file_attributes = dos_mode(result->conn,result->fsp_name,&sbuf);
+ if (*out_file_attributes == 0) {
+ *out_file_attributes = FILE_ATTRIBUTE_NORMAL;
+ }
+ *out_file_id_volatile = result->fnum;
+ return NT_STATUS_OK;
+}
diff --git a/source3/smbd/smb2_server.c b/source3/smbd/smb2_server.c
index 2be2828a13..75e86e0d31 100644
--- a/source3/smbd/smb2_server.c
+++ b/source3/smbd/smb2_server.c
@@ -368,7 +368,7 @@ static NTSTATUS smbd_smb2_request_dispatch(struct smbd_smb2_request *req)
if (!NT_STATUS_IS_OK(status)) {
return smbd_smb2_request_error(req, status);
}
- return smbd_smb2_request_error(req, NT_STATUS_NOT_IMPLEMENTED);
+ return smbd_smb2_request_process_create(req);
case SMB2_OP_CLOSE:
if (!NT_STATUS_IS_OK(session_status)) {