diff options
Diffstat (limited to 'source4/libcli/nbt/nbtname.c')
| -rw-r--r-- | source4/libcli/nbt/nbtname.c | 285 |
1 files changed, 285 insertions, 0 deletions
diff --git a/source4/libcli/nbt/nbtname.c b/source4/libcli/nbt/nbtname.c new file mode 100644 index 0000000000..c2da1a0ab4 --- /dev/null +++ b/source4/libcli/nbt/nbtname.c @@ -0,0 +1,285 @@ +/* + Unix SMB/CIFS implementation. + + manipulate nbt name structures + + Copyright (C) Andrew Tridgell 2005 + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. +*/ + +/* + see rfc1002 for the detailed format of compressed names +*/ + +#include "includes.h" +#include "librpc/gen_ndr/ndr_nbt.h" + +/* don't allow an unlimited number of name components */ +#define MAX_COMPONENTS 10 + +/* + pull one component of a compressed name +*/ +static NTSTATUS ndr_pull_component(struct ndr_pull *ndr, uint8_t **component, + uint32_t *offset, uint32_t *max_offset) +{ + uint8_t len; + uint_t loops = 0; + while (loops < 5) { + if (*offset >= ndr->data_size) { + return NT_STATUS_BAD_NETWORK_NAME; + } + len = ndr->data[*offset]; + if (len == 0) { + *offset += 1; + *max_offset = MAX(*max_offset, *offset); + *component = NULL; + return NT_STATUS_OK; + } + if ((len & 0xC0) == 0xC0) { + /* its a label pointer */ + if (1 + *offset >= ndr->data_size) { + return NT_STATUS_BAD_NETWORK_NAME; + } + *offset = ((len&0x3F)<<8) | ndr->data[1 + *offset]; + *max_offset = MAX(*max_offset, *offset + 1); + loops++; + continue; + } + if ((len & 0xC0) != 0) { + /* its a reserved length field */ + return NT_STATUS_BAD_NETWORK_NAME; + } + if (*offset + len + 2 >= ndr->data_size) { + return NT_STATUS_BAD_NETWORK_NAME; + } + *component = (uint8_t*)talloc_strndup(ndr, &ndr->data[1 + *offset], len); + NT_STATUS_HAVE_NO_MEMORY(*component); + *offset += len + 1; + *max_offset = MAX(*max_offset, *offset); + return NT_STATUS_OK; + } + + /* too many pointers */ + return NT_STATUS_BAD_NETWORK_NAME; +} + +/* + decompress a 'compressed' name component + */ +static NTSTATUS decompress_name(char *name, enum nbt_name_type *type) +{ + int i; + for (i=0;name[2*i];i++) { + uint8_t c1 = name[2*i]; + uint8_t c2 = name[1+(2*i)]; + if (c1 < 'A' || c1 > 'P' || + c2 < 'A' || c2 > 'P') { + return NT_STATUS_BAD_NETWORK_NAME; + } + name[i] = ((c1-'A')<<4) | (c2-'A'); + } + name[i] = 0; + if (i == 16) { + *type = (enum nbt_name_type)(name[15]); + name[15] = 0; + i--; + } else { + *type = NBT_NAME_CLIENT; + } + + /* trim trailing spaces */ + for (;i>0 && name[i-1]==' ';i--) { + name[i-1] = 0; + } + + return NT_STATUS_OK; +} + + +/* + compress a name component + */ +static uint8_t *compress_name(TALLOC_CTX *mem_ctx, + uint8_t *name, enum nbt_name_type type) +{ + uint8_t *cname; + int i; + uint8_t pad_char; + + if (strlen(name) > 15) { + return NULL; + } + + cname = talloc_array(mem_ctx, uint8_t, 33); + if (cname == NULL) return NULL; + + for (i=0;name[i];i++) { + cname[2*i] = 'A' + (name[i]>>4); + cname[1+2*i] = 'A' + (name[i]&0xF); + } + if (name[0] == '*') { + pad_char = 0; + } else { + pad_char = ' '; + } + for (;i<15;i++) { + cname[2*i] = 'A' + (pad_char>>4); + cname[1+2*i] = 'A' + (pad_char&0xF); + } + + pad_char = type; + cname[2*i] = 'A' + (pad_char>>4); + cname[1+2*i] = 'A' + (pad_char&0xF); + + cname[32] = 0; + return cname; +} + +/* + pull a nbt name from the wire +*/ +NTSTATUS ndr_pull_nbt_name(struct ndr_pull *ndr, int ndr_flags, struct nbt_name *r) +{ + NTSTATUS status; + uint_t num_components; + uint32_t offset = ndr->offset; + uint32_t max_offset = offset; + uint8_t *components[MAX_COMPONENTS]; + int i; + ssize_t ret; + void *p; + uint8_t *scope; + + if (!(ndr_flags & NDR_SCALARS)) { + return NT_STATUS_OK; + } + + /* break up name into a list of components */ + for (num_components=0;num_components<MAX_COMPONENTS;num_components++) { + status = ndr_pull_component(ndr, &components[num_components], + &offset, &max_offset); + NT_STATUS_NOT_OK_RETURN(status); + if (components[num_components] == NULL) break; + } + if (num_components == MAX_COMPONENTS || + num_components == 0) { + return NT_STATUS_BAD_NETWORK_NAME; + } + + ndr->offset = max_offset; + + /* the first component is limited to 16 bytes in the DOS charset, + which is 32 in the 'compressed' form */ + if (strlen(components[0]) > 32) { + return NT_STATUS_BAD_NETWORK_NAME; + } + + /* decompress the first component */ + status = decompress_name(components[0], &r->type); + NT_STATUS_NOT_OK_RETURN(status); + + ret = convert_string_talloc(ndr, CH_DOS, CH_UNIX, components[0], + strlen(components[0])+1, &p); + if (ret <= 0) { + return NT_STATUS_BAD_NETWORK_NAME; + } + r->name = p; + + /* combine the remaining components into the scope */ + scope = components[1]; + for (i=2;i<num_components;i++) { + talloc_asprintf_append(scope, ".%s", components[i]); + } + + if (scope) { + ret = convert_string_talloc(ndr, CH_DOS, CH_UNIX, scope, + strlen(r->scope)+1, &p); + if (ret <= 0) { + return NT_STATUS_BAD_NETWORK_NAME; + } + r->scope = p; + } else { + r->scope = NULL; + } + + return NT_STATUS_OK; +} + +/* + push a nbt name to the wire +*/ +NTSTATUS ndr_push_nbt_name(struct ndr_push *ndr, int ndr_flags, struct nbt_name *r) +{ + uint_t num_components; + uint8_t *components[MAX_COMPONENTS]; + void *ptr; + char *dname, *dscope=NULL, *p; + uint8_t *cname; + ssize_t ret; + int i; + + if (!(ndr_flags & NDR_SCALARS)) { + return NT_STATUS_OK; + } + + /* convert to DOS format */ + ret = convert_string_talloc(ndr, CH_UNIX, CH_DOS, r->name, + strlen(r->name)+1, &ptr); + if (ret <= 0) { + return NT_STATUS_BAD_NETWORK_NAME; + } + dname = strupper_talloc(ndr, ptr); + NT_STATUS_HAVE_NO_MEMORY(dname); + if (r->scope) { + ret = convert_string_talloc(ndr, CH_UNIX, CH_DOS, r->scope, + strlen(r->scope)+1, &ptr); + if (ret <= 0) { + return NT_STATUS_BAD_NETWORK_NAME; + } + dscope = strupper_talloc(ndr, ptr); + NT_STATUS_HAVE_NO_MEMORY(dscope); + } + + cname = compress_name(ndr, dname, r->type); + NT_STATUS_HAVE_NO_MEMORY(cname); + + /* form the base components */ + components[0] = cname; + num_components = 1; + + while (dscope && (p=strchr(dscope, '.')) && + num_components < MAX_COMPONENTS) { + *p = 0; + components[num_components] = dscope; + NT_STATUS_HAVE_NO_MEMORY(components[num_components]); + dscope = p+1; + num_components++; + } + if (num_components == MAX_COMPONENTS) { + return NT_STATUS_BAD_NETWORK_NAME; + } + + /* push the components */ + for (i=0;i<num_components;i++) { + uint8_t len = strlen(components[i]); + NDR_CHECK(ndr_push_uint8(ndr, len)); + NDR_CHECK(ndr_push_bytes(ndr, components[i], len)); + } + NDR_CHECK(ndr_push_uint8(ndr, 0)); + + return NT_STATUS_OK; +} |