1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
|
/*
* Unix SMB/CIFS implementation.
* Registry helper routines
* Copyright (C) Volker Lendecke 2006
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the Free
* Software Foundation; either version 3 of the License, or (at your option)
* any later version.
*
* This program is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
* more details.
*
* You should have received a copy of the GNU General Public License along with
* this program; if not, see <http://www.gnu.org/licenses/>.
*/
#include "includes.h"
#include "registry.h"
#undef DBGC_CLASS
#define DBGC_CLASS DBGC_REGISTRY
WERROR registry_pull_value(TALLOC_CTX *mem_ctx,
struct registry_value **pvalue,
enum winreg_Type type, uint8 *data,
uint32 size, uint32 length)
{
struct registry_value *value;
WERROR err;
if (!(value = TALLOC_ZERO_P(mem_ctx, struct registry_value))) {
return WERR_NOMEM;
}
value->type = type;
switch (type) {
case REG_DWORD:
case REG_DWORD_BIG_ENDIAN:
if ((size != 4) || (length != 4)) {
err = WERR_INVALID_PARAM;
goto error;
}
value->v.dword = IVAL(data, 0);
break;
case REG_QWORD:
if ((size != 8) || (length != 8)) {
err = WERR_INVALID_PARAM;
goto error;
}
value->v.qword = BVAL(data, 0);
break;
case REG_SZ:
case REG_EXPAND_SZ:
{
/*
* Make sure we get a NULL terminated string for
* convert_string_talloc().
*/
smb_ucs2_t *tmp;
if (length == 1) {
/* win2k regedit gives us a string of 1 byte when
* creating a new value of type REG_SZ. this workaround
* replaces the input by using the same string as
* winxp delivers. */
length = 2;
if (!(tmp = SMB_MALLOC_ARRAY(smb_ucs2_t, 2))) {
err = WERR_NOMEM;
goto error;
}
tmp[0] = 0;
tmp[1] = 0;
DEBUG(10, ("got REG_SZ value of length 1 - workaround "
"activated.\n"));
}
else if ((length % 2) != 0) {
err = WERR_INVALID_PARAM;
goto error;
}
else {
uint32 num_ucs2 = length / 2;
if (!(tmp = SMB_MALLOC_ARRAY(smb_ucs2_t, num_ucs2+1))) {
err = WERR_NOMEM;
goto error;
}
memcpy((void *)tmp, (const void *)data, length);
tmp[num_ucs2] = 0;
}
if (length + 2 < length) {
/* Integer wrap. */
SAFE_FREE(tmp);
err = WERR_INVALID_PARAM;
goto error;
}
if (!convert_string_talloc(value, CH_UTF16LE, CH_UNIX, tmp,
length+2, (void *)&value->v.sz.str,
&value->v.sz.len, False)) {
SAFE_FREE(tmp);
err = WERR_INVALID_PARAM;
goto error;
}
SAFE_FREE(tmp);
break;
}
case REG_MULTI_SZ: {
int i;
const char **vals;
DATA_BLOB blob;
blob = data_blob_const(data, length);
if (!pull_reg_multi_sz(mem_ctx, &blob, &vals)) {
err = WERR_NOMEM;
goto error;
}
for (i=0; vals[i]; i++) {
;;
}
value->v.multi_sz.num_strings = i;
value->v.multi_sz.strings = (char **)vals;
break;
}
case REG_BINARY:
value->v.binary = data_blob_talloc(mem_ctx, data, length);
break;
default:
err = WERR_INVALID_PARAM;
goto error;
}
*pvalue = value;
return WERR_OK;
error:
TALLOC_FREE(value);
return err;
}
WERROR registry_push_value(TALLOC_CTX *mem_ctx,
const struct registry_value *value,
DATA_BLOB *presult)
{
switch (value->type) {
case REG_DWORD:
case REG_DWORD_BIG_ENDIAN: {
char buf[4];
SIVAL(buf, 0, value->v.dword);
*presult = data_blob_talloc(mem_ctx, (void *)buf, 4);
if (presult->data == NULL) {
return WERR_NOMEM;
}
break;
}
case REG_QWORD: {
char buf[8];
SBVAL(buf, 0, value->v.qword);
*presult = data_blob_talloc(mem_ctx, (void *)buf, 8);
if (presult->data == NULL) {
return WERR_NOMEM;
}
break;
}
case REG_SZ:
case REG_EXPAND_SZ: {
if (!push_reg_sz(mem_ctx, presult, value->v.sz.str))
{
return WERR_NOMEM;
}
break;
}
case REG_MULTI_SZ: {
/* handle the case where we don't get a NULL terminated array */
const char **array;
int i;
array = talloc_array(mem_ctx, const char *,
value->v.multi_sz.num_strings + 1);
if (!array) {
return WERR_NOMEM;
}
for (i=0; i < value->v.multi_sz.num_strings; i++) {
array[i] = value->v.multi_sz.strings[i];
}
array[i] = NULL;
if (!push_reg_multi_sz(mem_ctx, presult, array)) {
talloc_free(array);
return WERR_NOMEM;
}
talloc_free(array);
break;
}
case REG_BINARY:
*presult = data_blob_talloc(mem_ctx,
value->v.binary.data,
value->v.binary.length);
break;
default:
return WERR_INVALID_PARAM;
}
return WERR_OK;
}
|
