1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
|
/*
* Unix SMB/Netbios implementation.
* Version 1.9.
* RPC Pipe client / server routines
* Copyright (C) Andrew Tridgell 1992-1998
* Copyright (C) Luke Kenneth Casson Leighton 1996-1998,
* Copyright (C) Paul Ashton 1997-1998.
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
*/
/* this module apparently provides an implementation of DCE/RPC over a
* named pipe (IPC$ connection using SMBtrans). details of DCE/RPC
* documentation are available (in on-line form) from the X-Open group.
*
* this module should provide a level of abstraction between SMB
* and DCE/RPC, while minimising the amount of mallocs, unnecessary
* data copies, and network traffic.
*
* in this version, which takes a "let's learn what's going on and
* get something running" approach, there is additional network
* traffic generated, but the code should be easier to understand...
*
* ... if you read the docs. or stare at packets for weeks on end.
*
*/
#include "includes.h"
#include "nterr.h"
extern int DEBUGLEVEL;
/*******************************************************************
entry point from msrpc to smb. adds data received to pdu; checks
pdu; hands pdu off to msrpc, which gets a pdu back (except in the
case of the RPC_BINDCONT pdu).
********************************************************************/
BOOL readwrite_pipe(pipes_struct *p, char *data, int len,
char **rdata, int *rlen)
{
DEBUG(10,("rpc_to_smb_readwrite: len %d\n", len));
if (write(p->m->fd, data, len) != len)
{
return False;
}
if ((*rlen) == 0)
{
return False;
}
(*rdata) = (char*)Realloc((*rdata), (*rlen));
if ((*rdata) == NULL)
{
return False;
}
/* read a minimum of an rpc header, then wait for up to 10 seconds
* to read up to a maximum of the SMBtrans max data size
*/
(*rlen) = read_with_timeout(p->m->fd, (*rdata), 16, (*rlen), 10000);
if ((*rlen) < 0)
{
return False;
}
(*rdata) = (char*)Realloc((*rdata), (*rlen));
if ((*rdata) == NULL)
{
return False;
}
return True;
}
/****************************************************************************
writes data to a pipe.
****************************************************************************/
ssize_t write_pipe(pipes_struct *p, char *data, size_t n)
{
DEBUG(6,("write_pipe: %x", p->pnum));
DEBUG(6,("name: %s open: %s len: %d",
p->name, BOOLSTR(p->open), n));
dump_data(50, data, n);
return write(p->m->fd, data, n);
}
/****************************************************************************
reads data from a pipe.
headers are interspersed with the data at regular intervals. by the time
this function is called, the start of the data could possibly have been
read by an SMBtrans (file_offset != 0).
****************************************************************************/
int read_pipe(pipes_struct *p, char *data, int n)
{
DEBUG(6,("read_pipe: %x name: %s open: %s len: %d",
p->pnum, p->name, BOOLSTR(p->open), n));
if (!p || !p->open)
{
DEBUG(6,("pipe not open\n"));
return -1;
}
return read_data(p->m->fd, data, n);
}
|