shadow_copy2: Don't implicitly return memory off talloc_tos()
[samba.git] / source3 / modules / vfs_shadow_copy2.c
1 /*
2  * shadow_copy2: a shadow copy module (second implementation)
3  *
4  * Copyright (C) Andrew Tridgell   2007 (portions taken from shadow_copy2)
5  * Copyright (C) Ed Plese          2009
6  * Copyright (C) Volker Lendecke   2011
7  * Copyright (C) Christian Ambach  2011
8  * Copyright (C) Michael Adam      2013
9  * Copyright (C) Rajesh Joseph     2016
10  *
11  * This program is free software; you can redistribute it and/or modify
12  * it under the terms of the GNU General Public License as published by
13  * the Free Software Foundation; either version 2 of the License, or
14  * (at your option) any later version.
15  *
16  * This program is distributed in the hope that it will be useful,
17  * but WITHOUT ANY WARRANTY; without even the implied warranty of
18  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
19  * GNU General Public License for more details.
20  *
21  * You should have received a copy of the GNU General Public License
22  * along with this program; if not, write to the Free Software
23  * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
24  */
25
26 /*
27  * This is a second implemetation of a shadow copy module for exposing
28  * file system snapshots to windows clients as shadow copies.
29  *
30  * See the manual page for documentation.
31  */
32
33 #include "includes.h"
34 #include "smbd/smbd.h"
35 #include "system/filesys.h"
36 #include "include/ntioctl.h"
37 #include "util_tdb.h"
38 #include "lib/util_path.h"
39 #include "libcli/security/security.h"
40 #include "lib/util/tevent_unix.h"
41
42 struct shadow_copy2_config {
43         char *gmt_format;
44         bool use_sscanf;
45         bool use_localtime;
46         char *snapdir;
47         char *delimiter;
48         bool snapdirseverywhere;
49         bool crossmountpoints;
50         bool fixinodes;
51         char *sort_order;
52         bool snapdir_absolute;
53         char *mount_point;
54         char *rel_connectpath; /* share root, relative to a snapshot root */
55         char *snapshot_basepath; /* the absolute version of snapdir */
56 };
57
58 /* Data-structure to hold the list of snap entries */
59 struct shadow_copy2_snapentry {
60         char *snapname;
61         char *time_fmt;
62         struct shadow_copy2_snapentry *next;
63         struct shadow_copy2_snapentry *prev;
64 };
65
66 struct shadow_copy2_snaplist_info {
67         struct shadow_copy2_snapentry *snaplist; /* snapshot list */
68         regex_t *regex; /* Regex to filter snaps */
69         time_t fetch_time; /* snaplist update time */
70 };
71
72 /*
73  * shadow_copy2 private structure. This structure will be
74  * used to keep module specific information
75  */
76 struct shadow_copy2_private {
77         struct shadow_copy2_config *config;
78         struct shadow_copy2_snaplist_info *snaps;
79         char *shadow_cwd; /* Absolute $cwd path. */
80         /* Absolute connectpath - can vary depending on $cwd. */
81         char *shadow_connectpath;
82         /* talloc'ed realpath return. */
83         struct smb_filename *shadow_realpath;
84 };
85
86 static int shadow_copy2_get_shadow_copy_data(
87         vfs_handle_struct *handle, files_struct *fsp,
88         struct shadow_copy_data *shadow_copy2_data,
89         bool labels);
90
91 /**
92  * This function will create a new snapshot list entry and
93  * return to the caller. This entry will also be added to
94  * the global snapshot list.
95  *
96  * @param[in]   priv    shadow_copy2 specific data structure
97  * @return      Newly   created snapshot entry or NULL on failure
98  */
99 static struct shadow_copy2_snapentry *shadow_copy2_create_snapentry(
100                                         struct shadow_copy2_private *priv)
101 {
102         struct shadow_copy2_snapentry *tmpentry = NULL;
103
104         tmpentry = talloc_zero(priv->snaps, struct shadow_copy2_snapentry);
105         if (tmpentry == NULL) {
106                 DBG_ERR("talloc_zero() failed\n");
107                 errno = ENOMEM;
108                 return NULL;
109         }
110
111         DLIST_ADD(priv->snaps->snaplist, tmpentry);
112
113         return tmpentry;
114 }
115
116 /**
117  * This function will delete the entire snaplist and reset
118  * priv->snaps->snaplist to NULL.
119  *
120  * @param[in] priv shadow_copye specific data structure
121  */
122 static void shadow_copy2_delete_snaplist(struct shadow_copy2_private *priv)
123 {
124         struct shadow_copy2_snapentry *tmp = NULL;
125
126         while ((tmp = priv->snaps->snaplist) != NULL) {
127                 DLIST_REMOVE(priv->snaps->snaplist, tmp);
128                 talloc_free(tmp);
129         }
130 }
131
132 /**
133  * Given a timestamp this function searches the global snapshot list
134  * and returns the complete snapshot directory name saved in the entry.
135  *
136  * @param[in]   priv            shadow_copy2 specific structure
137  * @param[in]   timestamp       timestamp corresponding to one of the snapshot
138  * @param[out]  snap_str        buffer to copy the actual snapshot name
139  * @param[in]   len             length of snap_str buffer
140  *
141  * @return      Length of actual snapshot name, and -1 on failure
142  */
143 static ssize_t shadow_copy2_saved_snapname(struct shadow_copy2_private *priv,
144                                           struct tm *timestamp,
145                                           char *snap_str, size_t len)
146 {
147         ssize_t snaptime_len = -1;
148         struct shadow_copy2_snapentry *entry = NULL;
149
150         snaptime_len = strftime(snap_str, len, GMT_FORMAT, timestamp);
151         if (snaptime_len == 0) {
152                 DBG_ERR("strftime failed\n");
153                 return -1;
154         }
155
156         snaptime_len = -1;
157
158         for (entry = priv->snaps->snaplist; entry; entry = entry->next) {
159                 if (strcmp(entry->time_fmt, snap_str) == 0) {
160                         snaptime_len = snprintf(snap_str, len, "%s",
161                                                 entry->snapname);
162                         return snaptime_len;
163                 }
164         }
165
166         snap_str[0] = 0;
167         return snaptime_len;
168 }
169
170
171 /**
172  * This function will check if snaplist is updated or not. If snaplist
173  * is empty then it will create a new list. Each time snaplist is updated
174  * the time is recorded. If the snapshot time is greater than the snaplist
175  * update time then chances are we are working on an older list. Then discard
176  * the old list and fetch a new snaplist.
177  *
178  * @param[in]   handle          VFS handle struct
179  * @param[in]   snap_time       time of snapshot
180  *
181  * @return      true if the list is updated else false
182  */
183 static bool shadow_copy2_update_snaplist(struct vfs_handle_struct *handle,
184                 time_t snap_time)
185 {
186         int ret = -1;
187         bool snaplist_updated = false;
188         struct files_struct fsp = {0};
189         struct smb_filename smb_fname = {0};
190         double seconds = 0.0;
191         struct shadow_copy2_private *priv = NULL;
192
193         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
194                                 return false);
195
196         seconds = difftime(snap_time, priv->snaps->fetch_time);
197
198         /*
199          * Fetch the snapshot list if either the snaplist is empty or the
200          * required snapshot time is greater than the last fetched snaplist
201          * time.
202          */
203         if (seconds > 0 || (priv->snaps->snaplist == NULL)) {
204                 smb_fname.base_name = discard_const_p(char, ".");
205                 fsp.fsp_name = &smb_fname;
206
207                 ret = shadow_copy2_get_shadow_copy_data(handle, &fsp,
208                                                         NULL, false);
209                 if (ret == 0) {
210                         snaplist_updated = true;
211                 } else {
212                         DBG_ERR("Failed to get shadow copy data\n");
213                 }
214
215         }
216
217         return snaplist_updated;
218 }
219
220 static bool shadow_copy2_find_slashes(TALLOC_CTX *mem_ctx, const char *str,
221                                       size_t **poffsets,
222                                       unsigned *pnum_offsets)
223 {
224         unsigned num_offsets;
225         size_t *offsets;
226         const char *p;
227
228         num_offsets = 0;
229
230         p = str;
231         while ((p = strchr(p, '/')) != NULL) {
232                 num_offsets += 1;
233                 p += 1;
234         }
235
236         offsets = talloc_array(mem_ctx, size_t, num_offsets);
237         if (offsets == NULL) {
238                 return false;
239         }
240
241         p = str;
242         num_offsets = 0;
243         while ((p = strchr(p, '/')) != NULL) {
244                 offsets[num_offsets] = p-str;
245                 num_offsets += 1;
246                 p += 1;
247         }
248
249         *poffsets = offsets;
250         *pnum_offsets = num_offsets;
251         return true;
252 }
253
254 /**
255  * Given a timestamp, build the posix level GMT-tag string
256  * based on the configurable format.
257  */
258 static ssize_t shadow_copy2_posix_gmt_string(struct vfs_handle_struct *handle,
259                                             time_t snapshot,
260                                             char *snaptime_string,
261                                             size_t len)
262 {
263         struct tm snap_tm;
264         ssize_t snaptime_len;
265         struct shadow_copy2_config *config;
266         struct shadow_copy2_private *priv;
267
268         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
269                                 return 0);
270
271         config = priv->config;
272
273         if (config->use_sscanf) {
274                 snaptime_len = snprintf(snaptime_string,
275                                         len,
276                                         config->gmt_format,
277                                         (unsigned long)snapshot);
278                 if (snaptime_len <= 0) {
279                         DEBUG(10, ("snprintf failed\n"));
280                         return -1;
281                 }
282         } else {
283                 if (config->use_localtime) {
284                         if (localtime_r(&snapshot, &snap_tm) == 0) {
285                                 DEBUG(10, ("gmtime_r failed\n"));
286                                 return -1;
287                         }
288                 } else {
289                         if (gmtime_r(&snapshot, &snap_tm) == 0) {
290                                 DEBUG(10, ("gmtime_r failed\n"));
291                                 return -1;
292                         }
293                 }
294
295                 if (priv->snaps->regex != NULL) {
296                         snaptime_len = shadow_copy2_saved_snapname(priv,
297                                                 &snap_tm, snaptime_string, len);
298                         if (snaptime_len >= 0)
299                                 return snaptime_len;
300
301                         /*
302                          * If we fail to find the snapshot name, chances are
303                          * that we have not updated our snaplist. Make sure the
304                          * snaplist is updated.
305                          */
306                         if (!shadow_copy2_update_snaplist(handle, snapshot)) {
307                                 DBG_DEBUG("shadow_copy2_update_snaplist "
308                                           "failed\n");
309                                 return -1;
310                         }
311
312                         return shadow_copy2_saved_snapname(priv,
313                                                 &snap_tm, snaptime_string, len);
314                 }
315
316                 snaptime_len = strftime(snaptime_string,
317                                         len,
318                                         config->gmt_format,
319                                         &snap_tm);
320                 if (snaptime_len == 0) {
321                         DEBUG(10, ("strftime failed\n"));
322                         return -1;
323                 }
324         }
325
326         return snaptime_len;
327 }
328
329 /**
330  * Given a timestamp, build the string to insert into a path
331  * as a path component for creating the local path to the
332  * snapshot at the given timestamp of the input path.
333  *
334  * In the case of a parallel snapdir (specified with an
335  * absolute path), this is the initial portion of the
336  * local path of any snapshot file. The complete path is
337  * obtained by appending the portion of the file's path
338  * below the share root's mountpoint.
339  */
340 static char *shadow_copy2_insert_string(TALLOC_CTX *mem_ctx,
341                                         struct vfs_handle_struct *handle,
342                                         time_t snapshot)
343 {
344         fstring snaptime_string;
345         ssize_t snaptime_len = 0;
346         char *result = NULL;
347         struct shadow_copy2_config *config;
348         struct shadow_copy2_private *priv;
349
350         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
351                                 return NULL);
352
353         config = priv->config;
354
355         snaptime_len = shadow_copy2_posix_gmt_string(handle,
356                                                      snapshot,
357                                                      snaptime_string,
358                                                      sizeof(snaptime_string));
359         if (snaptime_len <= 0) {
360                 return NULL;
361         }
362
363         if (config->snapdir_absolute) {
364                 result = talloc_asprintf(mem_ctx, "%s/%s",
365                                          config->snapdir, snaptime_string);
366         } else {
367                 result = talloc_asprintf(mem_ctx, "/%s/%s",
368                                          config->snapdir, snaptime_string);
369         }
370         if (result == NULL) {
371                 DEBUG(1, (__location__ " talloc_asprintf failed\n"));
372         }
373
374         return result;
375 }
376
377 /**
378  * Build the posix snapshot path for the connection
379  * at the given timestamp, i.e. the absolute posix path
380  * that contains the snapshot for this file system.
381  *
382  * This only applies to classical case, i.e. not
383  * to the "snapdirseverywhere" mode.
384  */
385 static char *shadow_copy2_snapshot_path(TALLOC_CTX *mem_ctx,
386                                         struct vfs_handle_struct *handle,
387                                         time_t snapshot)
388 {
389         fstring snaptime_string;
390         ssize_t snaptime_len = 0;
391         char *result = NULL;
392         struct shadow_copy2_private *priv;
393
394         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
395                                 return NULL);
396
397         snaptime_len = shadow_copy2_posix_gmt_string(handle,
398                                                      snapshot,
399                                                      snaptime_string,
400                                                      sizeof(snaptime_string));
401         if (snaptime_len <= 0) {
402                 return NULL;
403         }
404
405         result = talloc_asprintf(mem_ctx, "%s/%s",
406                                  priv->config->snapshot_basepath, snaptime_string);
407         if (result == NULL) {
408                 DEBUG(1, (__location__ " talloc_asprintf failed\n"));
409         }
410
411         return result;
412 }
413
414 static char *make_path_absolute(TALLOC_CTX *mem_ctx,
415                                 struct shadow_copy2_private *priv,
416                                 const char *name)
417 {
418         char *newpath = NULL;
419         char *abs_path = NULL;
420
421         if (name[0] != '/') {
422                 newpath = talloc_asprintf(mem_ctx,
423                                         "%s/%s",
424                                         priv->shadow_cwd,
425                                         name);
426                 if (newpath == NULL) {
427                         return NULL;
428                 }
429                 name = newpath;
430         }
431         abs_path = canonicalize_absolute_path(mem_ctx, name);
432         TALLOC_FREE(newpath);
433         return abs_path;
434 }
435
436 /* Return a $cwd-relative path. */
437 static bool make_relative_path(const char *cwd, char *abs_path)
438 {
439         size_t cwd_len = strlen(cwd);
440         size_t abs_len = strlen(abs_path);
441
442         if (abs_len < cwd_len) {
443                 return false;
444         }
445         if (memcmp(abs_path, cwd, cwd_len) != 0) {
446                 return false;
447         }
448         /* The cwd_len != 1 case is for $cwd == '/' */
449         if (cwd_len != 1 &&
450             abs_path[cwd_len] != '/' &&
451             abs_path[cwd_len] != '\0')
452         {
453                 return false;
454         }
455         if (abs_path[cwd_len] == '/') {
456                 cwd_len++;
457         }
458         memmove(abs_path, &abs_path[cwd_len], abs_len + 1 - cwd_len);
459         return true;
460 }
461
462 static bool shadow_copy2_snapshot_to_gmt(vfs_handle_struct *handle,
463                                         const char *name,
464                                         char *gmt, size_t gmt_len);
465
466 /*
467  * Check if an incoming filename is already a snapshot converted pathname.
468  *
469  * If so, it returns the pathname truncated at the snapshot point which
470  * will be used as the connectpath.
471  */
472
473 static int check_for_converted_path(TALLOC_CTX *mem_ctx,
474                                 struct vfs_handle_struct *handle,
475                                 struct shadow_copy2_private *priv,
476                                 char *abs_path,
477                                 bool *ppath_already_converted,
478                                 char **pconnectpath)
479 {
480         size_t snapdirlen = 0;
481         char *p = strstr_m(abs_path, priv->config->snapdir);
482         char *q = NULL;
483         char *connect_path = NULL;
484         char snapshot[GMT_NAME_LEN+1];
485
486         *ppath_already_converted = false;
487
488         if (p == NULL) {
489                 /* Must at least contain shadow:snapdir. */
490                 return 0;
491         }
492
493         if (priv->config->snapdir[0] == '/' &&
494                         p != abs_path) {
495                 /* Absolute shadow:snapdir must be at the start. */
496                 return 0;
497         }
498
499         snapdirlen = strlen(priv->config->snapdir);
500         if (p[snapdirlen] != '/') {
501                 /* shadow:snapdir must end as a separate component. */
502                 return 0;
503         }
504
505         if (p > abs_path && p[-1] != '/') {
506                 /* shadow:snapdir must start as a separate component. */
507                 return 0;
508         }
509
510         p += snapdirlen;
511         p++; /* Move past the / */
512
513         /*
514          * Need to return up to the next path
515          * component after the time.
516          * This will be used as the connectpath.
517          */
518         q = strchr(p, '/');
519         if (q == NULL) {
520                 /*
521                  * No next path component.
522                  * Use entire string.
523                  */
524                 connect_path = talloc_strdup(mem_ctx,
525                                         abs_path);
526         } else {
527                 connect_path = talloc_strndup(mem_ctx,
528                                         abs_path,
529                                         q - abs_path);
530         }
531         if (connect_path == NULL) {
532                 return ENOMEM;
533         }
534
535         /*
536          * Point p at the same offset in connect_path as
537          * it is in abs_path.
538          */
539
540         p = &connect_path[p - abs_path];
541
542         /*
543          * Now ensure there is a time string at p.
544          * The SMB-format @GMT-token string is returned
545          * in snapshot.
546          */
547
548         if (!shadow_copy2_snapshot_to_gmt(handle,
549                                 p,
550                                 snapshot,
551                                 sizeof(snapshot))) {
552                 TALLOC_FREE(connect_path);
553                 return 0;
554         }
555
556         if (pconnectpath != NULL) {
557                 *pconnectpath = connect_path;
558         }
559
560         *ppath_already_converted = true;
561
562         DBG_DEBUG("path |%s| is already converted. "
563                 "connect path = |%s|\n",
564                 abs_path,
565                 connect_path);
566
567         return 0;
568 }
569
570 /**
571  * This function does two things.
572  *
573  * 1). Checks if an incoming filename is already a
574  *     snapshot converted pathname.
575  *     If so, it returns the pathname truncated
576  *     at the snapshot point which will be used
577  *     as the connectpath, and then does an early return.
578  *
579  * 2). Checks if an incoming filename contains an
580  *     SMB-layer @GMT- style timestamp.
581  *     If so, it strips the timestamp, and returns
582  *     both the timestamp and the stripped path
583  *     (making it cwd-relative).
584  */
585
586 static bool _shadow_copy2_strip_snapshot_internal(TALLOC_CTX *mem_ctx,
587                                         struct vfs_handle_struct *handle,
588                                         const struct smb_filename *smb_fname,
589                                         time_t *ptimestamp,
590                                         char **pstripped,
591                                         char **psnappath,
592                                         bool *_already_converted,
593                                         const char *function)
594 {
595         char *stripped = NULL;
596         struct shadow_copy2_private *priv;
597         char *abs_path = NULL;
598         bool ret = true;
599         bool already_converted = false;
600         int err = 0;
601
602         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
603                                 return false);
604
605         DBG_DEBUG("[from %s()] Path '%s'\n",
606                   function, smb_fname_str_dbg(smb_fname));
607
608         if (_already_converted != NULL) {
609                 *_already_converted = false;
610         }
611
612         abs_path = make_path_absolute(mem_ctx, priv, smb_fname->base_name);
613         if (abs_path == NULL) {
614                 ret = false;
615                 goto out;
616         }
617
618         DBG_DEBUG("abs path '%s'\n", abs_path);
619
620         err = check_for_converted_path(mem_ctx,
621                                         handle,
622                                         priv,
623                                         abs_path,
624                                         &already_converted,
625                                         psnappath);
626         if (err != 0) {
627                 /* error in conversion. */
628                 ret = false;
629                 goto out;
630         }
631
632         if (already_converted) {
633                 if (_already_converted != NULL) {
634                         *_already_converted = true;
635                 }
636                 goto out;
637         }
638
639         if (smb_fname->twrp == 0) {
640                 goto out;
641         }
642
643         if (ptimestamp != NULL) {
644                 *ptimestamp = nt_time_to_unix(smb_fname->twrp);
645         }
646
647         if (pstripped != NULL) {
648                 stripped = talloc_strdup(mem_ctx, abs_path);
649                 if (stripped == NULL) {
650                         ret = false;
651                         goto out;
652                 }
653
654                 if (smb_fname->base_name[0] != '/') {
655                         ret = make_relative_path(priv->shadow_cwd, stripped);
656                         if (!ret) {
657                                 DBG_DEBUG("Path '%s' "
658                                         "doesn't start with cwd '%s'\n",
659                                         stripped, priv->shadow_cwd);
660                                 ret = false;
661                                 errno = ENOENT;
662                                 goto out;
663                         }
664                 }
665                 *pstripped = stripped;
666         }
667
668         ret = true;
669
670   out:
671         TALLOC_FREE(abs_path);
672         return ret;
673 }
674
675 #define shadow_copy2_strip_snapshot_internal(mem_ctx, handle, orig_name, \
676                 ptimestamp, pstripped, psnappath, _already_converted) \
677         _shadow_copy2_strip_snapshot_internal((mem_ctx), (handle), (orig_name), \
678                 (ptimestamp), (pstripped), (psnappath), (_already_converted), \
679                                               __FUNCTION__)
680
681 static bool _shadow_copy2_strip_snapshot(TALLOC_CTX *mem_ctx,
682                                          struct vfs_handle_struct *handle,
683                                          const struct smb_filename *orig_name,
684                                          time_t *ptimestamp,
685                                          char **pstripped,
686                                          const char *function)
687 {
688         return _shadow_copy2_strip_snapshot_internal(mem_ctx,
689                                         handle,
690                                         orig_name,
691                                         ptimestamp,
692                                         pstripped,
693                                         NULL,
694                                         NULL,
695                                         function);
696 }
697
698 #define shadow_copy2_strip_snapshot(mem_ctx, handle, orig_name, \
699                 ptimestamp, pstripped) \
700         _shadow_copy2_strip_snapshot((mem_ctx), (handle), (orig_name), \
701                 (ptimestamp), (pstripped), __FUNCTION__)
702
703 static bool _shadow_copy2_strip_snapshot_converted(TALLOC_CTX *mem_ctx,
704                                         struct vfs_handle_struct *handle,
705                                         const struct smb_filename *orig_name,
706                                         time_t *ptimestamp,
707                                         char **pstripped,
708                                         bool *is_converted,
709                                         const char *function)
710 {
711         return _shadow_copy2_strip_snapshot_internal(mem_ctx,
712                                         handle,
713                                         orig_name,
714                                         ptimestamp,
715                                         pstripped,
716                                         NULL,
717                                         is_converted,
718                                         function);
719 }
720
721 #define shadow_copy2_strip_snapshot_converted(mem_ctx, handle, orig_name, \
722                 ptimestamp, pstripped, is_converted) \
723         _shadow_copy2_strip_snapshot_converted((mem_ctx), (handle), (orig_name), \
724                 (ptimestamp), (pstripped), (is_converted), __FUNCTION__)
725
726 static char *shadow_copy2_find_mount_point(TALLOC_CTX *mem_ctx,
727                                            vfs_handle_struct *handle)
728 {
729         char *path = talloc_strdup(mem_ctx, handle->conn->connectpath);
730         dev_t dev;
731         struct stat st;
732         char *p;
733
734         if (stat(path, &st) != 0) {
735                 talloc_free(path);
736                 return NULL;
737         }
738
739         dev = st.st_dev;
740
741         while ((p = strrchr(path, '/')) && p > path) {
742                 *p = 0;
743                 if (stat(path, &st) != 0) {
744                         talloc_free(path);
745                         return NULL;
746                 }
747                 if (st.st_dev != dev) {
748                         *p = '/';
749                         break;
750                 }
751         }
752
753         return path;
754 }
755
756 /**
757  * Convert from a name as handed in via the SMB layer
758  * and a timestamp into the local path of the snapshot
759  * of the provided file at the provided time.
760  * Also return the path in the snapshot corresponding
761  * to the file's share root.
762  */
763 static char *shadow_copy2_do_convert(TALLOC_CTX *mem_ctx,
764                                      struct vfs_handle_struct *handle,
765                                      const char *name, time_t timestamp,
766                                      size_t *snaproot_len)
767 {
768         struct smb_filename converted_fname;
769         char *result = NULL;
770         size_t *slashes = NULL;
771         unsigned num_slashes;
772         char *path = NULL;
773         size_t pathlen;
774         char *insert = NULL;
775         char *converted = NULL;
776         size_t insertlen, connectlen = 0;
777         int saved_errno = 0;
778         int i;
779         size_t min_offset;
780         struct shadow_copy2_config *config;
781         struct shadow_copy2_private *priv;
782         size_t in_share_offset = 0;
783
784         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
785                                 return NULL);
786
787         config = priv->config;
788
789         DEBUG(10, ("converting '%s'\n", name));
790
791         if (!config->snapdirseverywhere) {
792                 int ret;
793                 char *snapshot_path;
794
795                 snapshot_path = shadow_copy2_snapshot_path(talloc_tos(),
796                                                            handle,
797                                                            timestamp);
798                 if (snapshot_path == NULL) {
799                         goto fail;
800                 }
801
802                 if (config->rel_connectpath == NULL) {
803                         converted = talloc_asprintf(mem_ctx, "%s/%s",
804                                                     snapshot_path, name);
805                 } else {
806                         converted = talloc_asprintf(mem_ctx, "%s/%s/%s",
807                                                     snapshot_path,
808                                                     config->rel_connectpath,
809                                                     name);
810                 }
811                 if (converted == NULL) {
812                         goto fail;
813                 }
814
815                 converted_fname = (struct smb_filename) {
816                         .base_name = converted,
817                 };
818
819                 ret = SMB_VFS_NEXT_LSTAT(handle, &converted_fname);
820                 DEBUG(10, ("Trying[not snapdirseverywhere] %s: %d (%s)\n",
821                            converted,
822                            ret, ret == 0 ? "ok" : strerror(errno)));
823                 if (ret == 0) {
824                         DEBUG(10, ("Found %s\n", converted));
825                         result = converted;
826                         converted = NULL;
827                         if (snaproot_len != NULL) {
828                                 *snaproot_len = strlen(snapshot_path);
829                                 if (config->rel_connectpath != NULL) {
830                                         *snaproot_len +=
831                                             strlen(config->rel_connectpath) + 1;
832                                 }
833                         }
834                         goto fail;
835                 } else {
836                         errno = ENOENT;
837                         goto fail;
838                 }
839                 /* never reached ... */
840         }
841
842         connectlen = strlen(handle->conn->connectpath);
843         if (name[0] == 0) {
844                 path = talloc_strdup(mem_ctx, handle->conn->connectpath);
845         } else {
846                 path = talloc_asprintf(
847                         mem_ctx, "%s/%s", handle->conn->connectpath, name);
848         }
849         if (path == NULL) {
850                 errno = ENOMEM;
851                 goto fail;
852         }
853         pathlen = talloc_get_size(path)-1;
854
855         if (!shadow_copy2_find_slashes(talloc_tos(), path,
856                                        &slashes, &num_slashes)) {
857                 goto fail;
858         }
859
860         insert = shadow_copy2_insert_string(talloc_tos(), handle, timestamp);
861         if (insert == NULL) {
862                 goto fail;
863         }
864         insertlen = talloc_get_size(insert)-1;
865
866         /*
867          * Note: We deliberatly don't expensively initialize the
868          * array with talloc_zero here: Putting zero into
869          * converted[pathlen+insertlen] below is sufficient, because
870          * in the following for loop, the insert string is inserted
871          * at various slash places. So the memory up to position
872          * pathlen+insertlen will always be initialized when the
873          * converted string is used.
874          */
875         converted = talloc_array(mem_ctx, char, pathlen + insertlen + 1);
876         if (converted == NULL) {
877                 goto fail;
878         }
879
880         if (path[pathlen-1] != '/') {
881                 /*
882                  * Append a fake slash to find the snapshot root
883                  */
884                 size_t *tmp;
885                 tmp = talloc_realloc(talloc_tos(), slashes,
886                                      size_t, num_slashes+1);
887                 if (tmp == NULL) {
888                         goto fail;
889                 }
890                 slashes = tmp;
891                 slashes[num_slashes] = pathlen;
892                 num_slashes += 1;
893         }
894
895         min_offset = 0;
896
897         if (!config->crossmountpoints) {
898                 min_offset = strlen(config->mount_point);
899         }
900
901         memcpy(converted, path, pathlen+1);
902         converted[pathlen+insertlen] = '\0';
903
904         converted_fname = (struct smb_filename) {
905                 .base_name = converted,
906         };
907
908         for (i = num_slashes-1; i>=0; i--) {
909                 int ret;
910                 size_t offset;
911
912                 offset = slashes[i];
913
914                 if (offset < min_offset) {
915                         errno = ENOENT;
916                         goto fail;
917                 }
918
919                 if (offset >= connectlen) {
920                         in_share_offset = offset;
921                 }
922
923                 memcpy(converted+offset, insert, insertlen);
924
925                 offset += insertlen;
926                 memcpy(converted+offset, path + slashes[i],
927                        pathlen - slashes[i]);
928
929                 ret = SMB_VFS_NEXT_LSTAT(handle, &converted_fname);
930
931                 DEBUG(10, ("Trying[snapdirseverywhere] %s: %d (%s)\n",
932                            converted,
933                            ret, ret == 0 ? "ok" : strerror(errno)));
934                 if (ret == 0) {
935                         /* success */
936                         if (snaproot_len != NULL) {
937                                 *snaproot_len = in_share_offset + insertlen;
938                         }
939                         break;
940                 }
941                 if (errno == ENOTDIR) {
942                         /*
943                          * This is a valid condition: We appended the
944                          * .snapshots/@GMT.. to a file name. Just try
945                          * with the upper levels.
946                          */
947                         continue;
948                 }
949                 if (errno != ENOENT) {
950                         /* Other problem than "not found" */
951                         goto fail;
952                 }
953         }
954
955         if (i >= 0) {
956                 /*
957                  * Found something
958                  */
959                 DEBUG(10, ("Found %s\n", converted));
960                 result = converted;
961                 converted = NULL;
962         } else {
963                 errno = ENOENT;
964         }
965 fail:
966         if (result == NULL) {
967                 saved_errno = errno;
968         }
969         TALLOC_FREE(converted);
970         TALLOC_FREE(insert);
971         TALLOC_FREE(slashes);
972         TALLOC_FREE(path);
973         if (saved_errno != 0) {
974                 errno = saved_errno;
975         }
976         return result;
977 }
978
979 /**
980  * Convert from a name as handed in via the SMB layer
981  * and a timestamp into the local path of the snapshot
982  * of the provided file at the provided time.
983  */
984 static char *shadow_copy2_convert(TALLOC_CTX *mem_ctx,
985                                   struct vfs_handle_struct *handle,
986                                   const char *name, time_t timestamp)
987 {
988         return shadow_copy2_do_convert(mem_ctx, handle, name, timestamp, NULL);
989 }
990
991 /*
992   modify a sbuf return to ensure that inodes in the shadow directory
993   are different from those in the main directory
994  */
995 static void convert_sbuf(vfs_handle_struct *handle, const char *fname,
996                          SMB_STRUCT_STAT *sbuf)
997 {
998         struct shadow_copy2_private *priv;
999
1000         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
1001                                 return);
1002
1003         if (priv->config->fixinodes) {
1004                 /* some snapshot systems, like GPFS, return the same
1005                    device:inode for the snapshot files as the current
1006                    files. That breaks the 'restore' button in the shadow copy
1007                    GUI, as the client gets a sharing violation.
1008
1009                    This is a crude way of allowing both files to be
1010                    open at once. It has a slight chance of inode
1011                    number collision, but I can't see a better approach
1012                    without significant VFS changes
1013                 */
1014                 TDB_DATA key = { .dptr = discard_const_p(uint8_t, fname),
1015                                  .dsize = strlen(fname) };
1016                 uint32_t shash;
1017
1018                 shash = tdb_jenkins_hash(&key) & 0xFF000000;
1019                 if (shash == 0) {
1020                         shash = 1;
1021                 }
1022                 sbuf->st_ex_ino ^= shash;
1023         }
1024 }
1025
1026 static int shadow_copy2_renameat(vfs_handle_struct *handle,
1027                                 files_struct *srcfsp,
1028                                 const struct smb_filename *smb_fname_src,
1029                                 files_struct *dstfsp,
1030                                 const struct smb_filename *smb_fname_dst)
1031 {
1032         time_t timestamp_src = 0;
1033         time_t timestamp_dst = 0;
1034         char *snappath_src = NULL;
1035         char *snappath_dst = NULL;
1036
1037         if (!shadow_copy2_strip_snapshot_internal(talloc_tos(), handle,
1038                                          smb_fname_src,
1039                                          &timestamp_src, NULL, &snappath_src,
1040                                          NULL)) {
1041                 return -1;
1042         }
1043         if (!shadow_copy2_strip_snapshot_internal(talloc_tos(), handle,
1044                                          smb_fname_dst,
1045                                          &timestamp_dst, NULL, &snappath_dst,
1046                                          NULL)) {
1047                 return -1;
1048         }
1049         if (timestamp_src != 0) {
1050                 errno = EXDEV;
1051                 return -1;
1052         }
1053         if (timestamp_dst != 0) {
1054                 errno = EROFS;
1055                 return -1;
1056         }
1057         /*
1058          * Don't allow rename on already converted paths.
1059          */
1060         if (snappath_src != NULL) {
1061                 errno = EXDEV;
1062                 return -1;
1063         }
1064         if (snappath_dst != NULL) {
1065                 errno = EROFS;
1066                 return -1;
1067         }
1068         return SMB_VFS_NEXT_RENAMEAT(handle,
1069                         srcfsp,
1070                         smb_fname_src,
1071                         dstfsp,
1072                         smb_fname_dst);
1073 }
1074
1075 static int shadow_copy2_symlinkat(vfs_handle_struct *handle,
1076                         const struct smb_filename *link_contents,
1077                         struct files_struct *dirfsp,
1078                         const struct smb_filename *new_smb_fname)
1079 {
1080         time_t timestamp_old = 0;
1081         time_t timestamp_new = 0;
1082         char *snappath_old = NULL;
1083         char *snappath_new = NULL;
1084
1085         if (!shadow_copy2_strip_snapshot_internal(talloc_tos(),
1086                                 handle,
1087                                 link_contents,
1088                                 &timestamp_old,
1089                                 NULL,
1090                                 &snappath_old,
1091                                 NULL)) {
1092                 return -1;
1093         }
1094         if (!shadow_copy2_strip_snapshot_internal(talloc_tos(),
1095                                 handle,
1096                                 new_smb_fname,
1097                                 &timestamp_new,
1098                                 NULL,
1099                                 &snappath_new,
1100                                 NULL)) {
1101                 return -1;
1102         }
1103         if ((timestamp_old != 0) || (timestamp_new != 0)) {
1104                 errno = EROFS;
1105                 return -1;
1106         }
1107         /*
1108          * Don't allow symlinks on already converted paths.
1109          */
1110         if ((snappath_old != NULL) || (snappath_new != NULL)) {
1111                 errno = EROFS;
1112                 return -1;
1113         }
1114         return SMB_VFS_NEXT_SYMLINKAT(handle,
1115                                 link_contents,
1116                                 dirfsp,
1117                                 new_smb_fname);
1118 }
1119
1120 static int shadow_copy2_linkat(vfs_handle_struct *handle,
1121                         files_struct *srcfsp,
1122                         const struct smb_filename *old_smb_fname,
1123                         files_struct *dstfsp,
1124                         const struct smb_filename *new_smb_fname,
1125                         int flags)
1126 {
1127         time_t timestamp_old = 0;
1128         time_t timestamp_new = 0;
1129         char *snappath_old = NULL;
1130         char *snappath_new = NULL;
1131
1132         if (!shadow_copy2_strip_snapshot_internal(talloc_tos(),
1133                                 handle,
1134                                 old_smb_fname,
1135                                 &timestamp_old,
1136                                 NULL,
1137                                 &snappath_old,
1138                                 NULL)) {
1139                 return -1;
1140         }
1141         if (!shadow_copy2_strip_snapshot_internal(talloc_tos(),
1142                                 handle,
1143                                 new_smb_fname,
1144                                 &timestamp_new,
1145                                 NULL,
1146                                 &snappath_new,
1147                                 NULL)) {
1148                 return -1;
1149         }
1150         if ((timestamp_old != 0) || (timestamp_new != 0)) {
1151                 errno = EROFS;
1152                 return -1;
1153         }
1154         /*
1155          * Don't allow links on already converted paths.
1156          */
1157         if ((snappath_old != NULL) || (snappath_new != NULL)) {
1158                 errno = EROFS;
1159                 return -1;
1160         }
1161         return SMB_VFS_NEXT_LINKAT(handle,
1162                         srcfsp,
1163                         old_smb_fname,
1164                         dstfsp,
1165                         new_smb_fname,
1166                         flags);
1167 }
1168
1169 static int shadow_copy2_stat(vfs_handle_struct *handle,
1170                              struct smb_filename *smb_fname)
1171 {
1172         struct shadow_copy2_private *priv = NULL;
1173         time_t timestamp = 0;
1174         char *stripped = NULL;
1175         bool converted = false;
1176         char *abspath = NULL;
1177         char *tmp;
1178         int ret = 0;
1179
1180         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
1181                                 return -1);
1182
1183         if (!shadow_copy2_strip_snapshot_converted(talloc_tos(),
1184                                                    handle,
1185                                                    smb_fname,
1186                                                    &timestamp,
1187                                                    &stripped,
1188                                                    &converted)) {
1189                 return -1;
1190         }
1191         if (timestamp == 0) {
1192                 TALLOC_FREE(stripped);
1193                 ret = SMB_VFS_NEXT_STAT(handle, smb_fname);
1194                 if (ret != 0) {
1195                         return ret;
1196                 }
1197                 if (!converted) {
1198                         return 0;
1199                 }
1200
1201                 abspath = make_path_absolute(talloc_tos(),
1202                                              priv,
1203                                              smb_fname->base_name);
1204                 if (abspath == NULL) {
1205                         return -1;
1206                 }
1207
1208                 convert_sbuf(handle, abspath, &smb_fname->st);
1209                 TALLOC_FREE(abspath);
1210                 return 0;
1211         }
1212
1213         tmp = smb_fname->base_name;
1214         smb_fname->base_name = shadow_copy2_convert(
1215                 talloc_tos(), handle, stripped, timestamp);
1216         TALLOC_FREE(stripped);
1217
1218         if (smb_fname->base_name == NULL) {
1219                 smb_fname->base_name = tmp;
1220                 return -1;
1221         }
1222
1223         ret = SMB_VFS_NEXT_STAT(handle, smb_fname);
1224         if (ret != 0) {
1225                 goto out;
1226         }
1227
1228         abspath = make_path_absolute(talloc_tos(),
1229                                      priv,
1230                                      smb_fname->base_name);
1231         if (abspath == NULL) {
1232                 ret = -1;
1233                 goto out;
1234         }
1235
1236         convert_sbuf(handle, abspath, &smb_fname->st);
1237         TALLOC_FREE(abspath);
1238
1239 out:
1240         TALLOC_FREE(smb_fname->base_name);
1241         smb_fname->base_name = tmp;
1242
1243         return ret;
1244 }
1245
1246 static int shadow_copy2_lstat(vfs_handle_struct *handle,
1247                               struct smb_filename *smb_fname)
1248 {
1249         struct shadow_copy2_private *priv = NULL;
1250         time_t timestamp = 0;
1251         char *stripped = NULL;
1252         bool converted = false;
1253         char *abspath = NULL;
1254         char *tmp;
1255         int ret = 0;
1256
1257         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
1258                                 return -1);
1259
1260         if (!shadow_copy2_strip_snapshot_converted(talloc_tos(),
1261                                                    handle,
1262                                                    smb_fname,
1263                                                    &timestamp,
1264                                                    &stripped,
1265                                                    &converted)) {
1266                 return -1;
1267         }
1268         if (timestamp == 0) {
1269                 TALLOC_FREE(stripped);
1270                 ret = SMB_VFS_NEXT_LSTAT(handle, smb_fname);
1271                 if (ret != 0) {
1272                         return ret;
1273                 }
1274                 if (!converted) {
1275                         return 0;
1276                 }
1277
1278                 abspath = make_path_absolute(talloc_tos(),
1279                                              priv,
1280                                              smb_fname->base_name);
1281                 if (abspath == NULL) {
1282                         return -1;
1283                 }
1284
1285                 convert_sbuf(handle, abspath, &smb_fname->st);
1286                 TALLOC_FREE(abspath);
1287                 return 0;
1288         }
1289
1290         tmp = smb_fname->base_name;
1291         smb_fname->base_name = shadow_copy2_convert(
1292                 talloc_tos(), handle, stripped, timestamp);
1293         TALLOC_FREE(stripped);
1294
1295         if (smb_fname->base_name == NULL) {
1296                 smb_fname->base_name = tmp;
1297                 return -1;
1298         }
1299
1300         ret = SMB_VFS_NEXT_LSTAT(handle, smb_fname);
1301         if (ret != 0) {
1302                 goto out;
1303         }
1304
1305         abspath = make_path_absolute(talloc_tos(),
1306                                      priv,
1307                                      smb_fname->base_name);
1308         if (abspath == NULL) {
1309                 ret = -1;
1310                 goto out;
1311         }
1312
1313         convert_sbuf(handle, abspath, &smb_fname->st);
1314         TALLOC_FREE(abspath);
1315
1316 out:
1317         TALLOC_FREE(smb_fname->base_name);
1318         smb_fname->base_name = tmp;
1319
1320         return ret;
1321 }
1322
1323 static int shadow_copy2_fstat(vfs_handle_struct *handle, files_struct *fsp,
1324                               SMB_STRUCT_STAT *sbuf)
1325 {
1326         struct shadow_copy2_private *priv = NULL;
1327         time_t timestamp = 0;
1328         struct smb_filename *orig_smb_fname = NULL;
1329         struct smb_filename vss_smb_fname;
1330         struct smb_filename *orig_base_smb_fname = NULL;
1331         struct smb_filename vss_base_smb_fname;
1332         char *stripped = NULL;
1333         char *abspath = NULL;
1334         bool converted = false;
1335         bool ok;
1336         int ret;
1337
1338         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
1339                                 return -1);
1340
1341         ok = shadow_copy2_strip_snapshot_converted(talloc_tos(),
1342                                                    handle,
1343                                                    fsp->fsp_name,
1344                                                    &timestamp,
1345                                                    &stripped,
1346                                                    &converted);
1347         if (!ok) {
1348                 return -1;
1349         }
1350
1351         if (timestamp == 0) {
1352                 TALLOC_FREE(stripped);
1353                 ret = SMB_VFS_NEXT_FSTAT(handle, fsp, sbuf);
1354                 if (ret != 0) {
1355                         return ret;
1356                 }
1357                 if (!converted) {
1358                         return 0;
1359                 }
1360
1361                 abspath = make_path_absolute(talloc_tos(),
1362                                              priv,
1363                                              fsp->fsp_name->base_name);
1364                 if (abspath == NULL) {
1365                         return -1;
1366                 }
1367
1368                 convert_sbuf(handle, abspath, sbuf);
1369                 TALLOC_FREE(abspath);
1370                 return 0;
1371         }
1372
1373         vss_smb_fname = *fsp->fsp_name;
1374         vss_smb_fname.base_name = shadow_copy2_convert(talloc_tos(),
1375                                                        handle,
1376                                                        stripped,
1377                                                        timestamp);
1378         TALLOC_FREE(stripped);
1379         if (vss_smb_fname.base_name == NULL) {
1380                 return -1;
1381         }
1382
1383         orig_smb_fname = fsp->fsp_name;
1384         fsp->fsp_name = &vss_smb_fname;
1385
1386         if (fsp_is_alternate_stream(fsp)) {
1387                 vss_base_smb_fname = *fsp->base_fsp->fsp_name;
1388                 vss_base_smb_fname.base_name = vss_smb_fname.base_name;
1389                 orig_base_smb_fname = fsp->base_fsp->fsp_name;
1390                 fsp->base_fsp->fsp_name = &vss_base_smb_fname;
1391         }
1392
1393         ret = SMB_VFS_NEXT_FSTAT(handle, fsp, sbuf);
1394         if (ret != 0) {
1395                 goto out;
1396         }
1397
1398         abspath = make_path_absolute(talloc_tos(),
1399                                      priv,
1400                                      fsp->fsp_name->base_name);
1401         if (abspath == NULL) {
1402                 ret = -1;
1403                 goto out;
1404         }
1405
1406         convert_sbuf(handle, abspath, sbuf);
1407         TALLOC_FREE(abspath);
1408
1409 out:
1410         fsp->fsp_name = orig_smb_fname;
1411         if (fsp_is_alternate_stream(fsp)) {
1412                 fsp->base_fsp->fsp_name = orig_base_smb_fname;
1413         }
1414
1415         return ret;
1416 }
1417
1418 static int shadow_copy2_fstatat(
1419         struct vfs_handle_struct *handle,
1420         const struct files_struct *dirfsp,
1421         const struct smb_filename *smb_fname_in,
1422         SMB_STRUCT_STAT *sbuf,
1423         int flags)
1424 {
1425         struct shadow_copy2_private *priv = NULL;
1426         struct smb_filename *smb_fname = NULL;
1427         time_t timestamp = 0;
1428         char *stripped = NULL;
1429         char *abspath = NULL;
1430         bool converted = false;
1431         int ret;
1432         bool ok;
1433
1434         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
1435                                 return -1);
1436
1437         smb_fname = full_path_from_dirfsp_atname(talloc_tos(),
1438                                                  dirfsp,
1439                                                  smb_fname_in);
1440         if (smb_fname == NULL) {
1441                 errno = ENOMEM;
1442                 return -1;
1443         }
1444
1445         ok = shadow_copy2_strip_snapshot_converted(talloc_tos(),
1446                                                    handle,
1447                                                    smb_fname,
1448                                                    &timestamp,
1449                                                    &stripped,
1450                                                    &converted);
1451         if (!ok) {
1452                 return -1;
1453         }
1454         if (timestamp == 0) {
1455                 TALLOC_FREE(stripped);
1456                 ret = SMB_VFS_NEXT_FSTATAT(
1457                         handle, dirfsp, smb_fname_in, sbuf, flags);
1458                 if (ret != 0) {
1459                         return ret;
1460                 }
1461                 if (!converted) {
1462                         return 0;
1463                 }
1464
1465                 abspath = make_path_absolute(
1466                         talloc_tos(), priv, smb_fname->base_name);
1467                 if (abspath == NULL) {
1468                         errno = ENOMEM;
1469                         return -1;
1470                 }
1471
1472                 convert_sbuf(handle, abspath, sbuf);
1473                 TALLOC_FREE(abspath);
1474                 return 0;
1475         }
1476
1477         smb_fname->base_name = shadow_copy2_convert(
1478                 smb_fname, handle, stripped, timestamp);
1479         TALLOC_FREE(stripped);
1480         if (smb_fname->base_name == NULL) {
1481                 TALLOC_FREE(smb_fname);
1482                 errno = ENOMEM;
1483                 return -1;
1484         }
1485
1486         ret = SMB_VFS_NEXT_FSTATAT(handle,
1487                                    dirfsp,
1488                                    smb_fname,
1489                                    sbuf,
1490                                    flags);
1491         if (ret != 0) {
1492                 int saved_errno = errno;
1493                 TALLOC_FREE(smb_fname);
1494                 errno = saved_errno;
1495                 return -1;
1496         }
1497
1498         abspath = make_path_absolute(
1499                 talloc_tos(), priv, smb_fname->base_name);
1500         if (abspath == NULL) {
1501                 TALLOC_FREE(smb_fname);
1502                 errno = ENOMEM;
1503                 return -1;
1504         }
1505
1506         convert_sbuf(handle, abspath, sbuf);
1507         TALLOC_FREE(abspath);
1508
1509         TALLOC_FREE(smb_fname);
1510
1511         return 0;
1512 }
1513
1514 static struct smb_filename *shadow_copy2_openat_name(
1515         TALLOC_CTX *mem_ctx,
1516         const struct files_struct *dirfsp,
1517         const struct files_struct *fsp,
1518         const struct smb_filename *smb_fname_in)
1519 {
1520         struct smb_filename *result = NULL;
1521
1522         if (fsp->base_fsp != NULL) {
1523                 struct smb_filename *base_fname = fsp->base_fsp->fsp_name;
1524
1525                 SMB_ASSERT(is_named_stream(smb_fname_in));
1526
1527                 result = synthetic_smb_fname(
1528                         mem_ctx,
1529                         base_fname->base_name,
1530                         smb_fname_in->stream_name,
1531                         &smb_fname_in->st,
1532                         smb_fname_in->twrp,
1533                         smb_fname_in->flags);
1534         } else {
1535                 result = full_path_from_dirfsp_atname(
1536                         mem_ctx, dirfsp, smb_fname_in);
1537         }
1538
1539         return result;
1540 }
1541
1542 static int shadow_copy2_openat(vfs_handle_struct *handle,
1543                                const struct files_struct *dirfsp,
1544                                const struct smb_filename *smb_fname_in,
1545                                struct files_struct *fsp,
1546                                const struct vfs_open_how *_how)
1547 {
1548         struct vfs_open_how how = *_how;
1549         struct smb_filename *smb_fname = NULL;
1550         time_t timestamp = 0;
1551         char *stripped = NULL;
1552         bool is_converted = false;
1553         int saved_errno = 0;
1554         int ret;
1555         bool ok;
1556
1557         if (how.resolve != 0) {
1558                 errno = ENOSYS;
1559                 return -1;
1560         }
1561
1562         smb_fname = shadow_copy2_openat_name(
1563                 talloc_tos(), dirfsp, fsp, smb_fname_in);
1564         if (smb_fname == NULL) {
1565                 errno = ENOMEM;
1566                 return -1;
1567         }
1568
1569         ok = shadow_copy2_strip_snapshot_converted(talloc_tos(),
1570                                                    handle,
1571                                                    smb_fname,
1572                                                    &timestamp,
1573                                                    &stripped,
1574                                                    &is_converted);
1575         if (!ok) {
1576                 return -1;
1577         }
1578         if (timestamp == 0) {
1579                 if (is_converted) {
1580                         /*
1581                          * Just pave over the user requested mode and use
1582                          * O_RDONLY. Later attempts by the client to write on
1583                          * the handle will fail in the pwrite() syscall with
1584                          * EINVAL which we carefully map to EROFS. In sum, this
1585                          * matches Windows behaviour.
1586                          */
1587                         how.flags &= ~(O_WRONLY | O_RDWR | O_CREAT);
1588                 }
1589                 return SMB_VFS_NEXT_OPENAT(handle,
1590                                            dirfsp,
1591                                            smb_fname_in,
1592                                            fsp,
1593                                            &how);
1594         }
1595
1596         smb_fname->base_name = shadow_copy2_convert(smb_fname,
1597                                                handle,
1598                                                stripped,
1599                                                timestamp);
1600         if (smb_fname->base_name == NULL) {
1601                 int err = errno;
1602                 TALLOC_FREE(stripped);
1603                 TALLOC_FREE(smb_fname);
1604                 errno = err;
1605                 return -1;
1606         }
1607         TALLOC_FREE(stripped);
1608
1609         /*
1610          * Just pave over the user requested mode and use O_RDONLY. Later
1611          * attempts by the client to write on the handle will fail in the
1612          * pwrite() syscall with EINVAL which we carefully map to EROFS. In sum,
1613          * this matches Windows behaviour.
1614          */
1615         how.flags &= ~(O_WRONLY | O_RDWR | O_CREAT);
1616
1617         ret = SMB_VFS_NEXT_OPENAT(handle,
1618                                   dirfsp,
1619                                   smb_fname,
1620                                   fsp,
1621                                   &how);
1622         if (ret == -1) {
1623                 saved_errno = errno;
1624         }
1625
1626         TALLOC_FREE(smb_fname);
1627
1628         if (saved_errno != 0) {
1629                 errno = saved_errno;
1630         }
1631         return ret;
1632 }
1633
1634 static int shadow_copy2_unlinkat(vfs_handle_struct *handle,
1635                         struct files_struct *dirfsp,
1636                         const struct smb_filename *smb_fname,
1637                         int flags)
1638 {
1639         time_t timestamp = 0;
1640
1641         if (!shadow_copy2_strip_snapshot(talloc_tos(), handle,
1642                                          smb_fname,
1643                                          &timestamp, NULL)) {
1644                 return -1;
1645         }
1646         if (timestamp != 0) {
1647                 errno = EROFS;
1648                 return -1;
1649         }
1650         return SMB_VFS_NEXT_UNLINKAT(handle,
1651                         dirfsp,
1652                         smb_fname,
1653                         flags);
1654 }
1655
1656 static int shadow_copy2_fchmod(vfs_handle_struct *handle,
1657                        struct files_struct *fsp,
1658                        mode_t mode)
1659 {
1660         time_t timestamp = 0;
1661         const struct smb_filename *smb_fname = NULL;
1662
1663         smb_fname = fsp->fsp_name;
1664         if (!shadow_copy2_strip_snapshot(talloc_tos(),
1665                                         handle,
1666                                         smb_fname,
1667                                         &timestamp,
1668                                         NULL)) {
1669                 return -1;
1670         }
1671         if (timestamp != 0) {
1672                 errno = EROFS;
1673                 return -1;
1674         }
1675         return SMB_VFS_NEXT_FCHMOD(handle, fsp, mode);
1676 }
1677
1678 static void store_cwd_data(vfs_handle_struct *handle,
1679                                 const char *connectpath)
1680 {
1681         struct shadow_copy2_private *priv = NULL;
1682         struct smb_filename *cwd_fname = NULL;
1683
1684         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
1685                                 return);
1686
1687         TALLOC_FREE(priv->shadow_cwd);
1688         cwd_fname = SMB_VFS_NEXT_GETWD(handle, talloc_tos());
1689         if (cwd_fname == NULL) {
1690                 smb_panic("getwd failed\n");
1691         }
1692         DBG_DEBUG("shadow cwd = %s\n", cwd_fname->base_name);
1693         priv->shadow_cwd = talloc_strdup(priv, cwd_fname->base_name);
1694         TALLOC_FREE(cwd_fname);
1695         if (priv->shadow_cwd == NULL) {
1696                 smb_panic("talloc failed\n");
1697         }
1698         TALLOC_FREE(priv->shadow_connectpath);
1699         if (connectpath) {
1700                 DBG_DEBUG("shadow connectpath = %s\n", connectpath);
1701                 priv->shadow_connectpath = talloc_strdup(priv, connectpath);
1702                 if (priv->shadow_connectpath == NULL) {
1703                         smb_panic("talloc failed\n");
1704                 }
1705         }
1706 }
1707
1708 static int shadow_copy2_chdir(vfs_handle_struct *handle,
1709                                const struct smb_filename *smb_fname)
1710 {
1711         time_t timestamp = 0;
1712         char *stripped = NULL;
1713         char *snappath = NULL;
1714         int ret = -1;
1715         int saved_errno = 0;
1716         char *conv = NULL;
1717         size_t rootpath_len = 0;
1718         struct smb_filename *conv_smb_fname = NULL;
1719
1720         if (!shadow_copy2_strip_snapshot_internal(talloc_tos(),
1721                                         handle,
1722                                         smb_fname,
1723                                         &timestamp,
1724                                         &stripped,
1725                                         &snappath,
1726                                         NULL)) {
1727                 return -1;
1728         }
1729         if (stripped != NULL) {
1730                 conv = shadow_copy2_do_convert(talloc_tos(),
1731                                                 handle,
1732                                                 stripped,
1733                                                 timestamp,
1734                                                 &rootpath_len);
1735                 TALLOC_FREE(stripped);
1736                 if (conv == NULL) {
1737                         return -1;
1738                 }
1739                 conv_smb_fname = synthetic_smb_fname(talloc_tos(),
1740                                         conv,
1741                                         NULL,
1742                                         NULL,
1743                                         0,
1744                                         smb_fname->flags);
1745         } else {
1746                 conv_smb_fname = cp_smb_filename(talloc_tos(), smb_fname);
1747         }
1748
1749         if (conv_smb_fname == NULL) {
1750                 TALLOC_FREE(conv);
1751                 errno = ENOMEM;
1752                 return -1;
1753         }
1754
1755         ret = SMB_VFS_NEXT_CHDIR(handle, conv_smb_fname);
1756         if (ret == -1) {
1757                 saved_errno = errno;
1758         }
1759
1760         if (ret == 0) {
1761                 if (conv != NULL && rootpath_len != 0) {
1762                         conv[rootpath_len] = '\0';
1763                 } else if (snappath != 0) {
1764                         TALLOC_FREE(conv);
1765                         conv = snappath;
1766                 }
1767                 store_cwd_data(handle, conv);
1768         }
1769
1770         TALLOC_FREE(stripped);
1771         TALLOC_FREE(conv);
1772         TALLOC_FREE(conv_smb_fname);
1773
1774         if (saved_errno != 0) {
1775                 errno = saved_errno;
1776         }
1777         return ret;
1778 }
1779
1780 static int shadow_copy2_fntimes(vfs_handle_struct *handle,
1781                                 files_struct *fsp,
1782                                 struct smb_file_time *ft)
1783 {
1784         time_t timestamp = 0;
1785
1786         if (!shadow_copy2_strip_snapshot(talloc_tos(),
1787                                          handle,
1788                                          fsp->fsp_name,
1789                                          &timestamp,
1790                                          NULL)) {
1791                 return -1;
1792         }
1793         if (timestamp != 0) {
1794                 errno = EROFS;
1795                 return -1;
1796         }
1797         return SMB_VFS_NEXT_FNTIMES(handle, fsp, ft);
1798 }
1799
1800 static int shadow_copy2_readlinkat(vfs_handle_struct *handle,
1801                                 const struct files_struct *dirfsp,
1802                                 const struct smb_filename *smb_fname,
1803                                 char *buf,
1804                                 size_t bufsiz)
1805 {
1806         time_t timestamp = 0;
1807         char *stripped = NULL;
1808         int saved_errno = 0;
1809         int ret;
1810         struct smb_filename *full_fname = NULL;
1811         struct smb_filename *conv = NULL;
1812
1813         full_fname = full_path_from_dirfsp_atname(talloc_tos(),
1814                                                   dirfsp,
1815                                                   smb_fname);
1816         if (full_fname == NULL) {
1817                 errno = ENOMEM;
1818                 return -1;
1819         }
1820
1821         if (!shadow_copy2_strip_snapshot(talloc_tos(),
1822                                         handle,
1823                                         full_fname,
1824                                         &timestamp,
1825                                         &stripped)) {
1826                 TALLOC_FREE(full_fname);
1827                 return -1;
1828         }
1829
1830         if (timestamp == 0) {
1831                 TALLOC_FREE(full_fname);
1832                 TALLOC_FREE(stripped);
1833                 return SMB_VFS_NEXT_READLINKAT(handle,
1834                                 dirfsp,
1835                                 smb_fname,
1836                                 buf,
1837                                 bufsiz);
1838         }
1839         conv = cp_smb_filename(talloc_tos(), full_fname);
1840         if (conv == NULL) {
1841                 TALLOC_FREE(full_fname);
1842                 TALLOC_FREE(stripped);
1843                 errno = ENOMEM;
1844                 return -1;
1845         }
1846         TALLOC_FREE(full_fname);
1847         conv->base_name = shadow_copy2_convert(
1848                 conv, handle, stripped, timestamp);
1849         TALLOC_FREE(stripped);
1850         if (conv->base_name == NULL) {
1851                 return -1;
1852         }
1853         ret = SMB_VFS_NEXT_READLINKAT(handle,
1854                                 handle->conn->cwd_fsp,
1855                                 conv,
1856                                 buf,
1857                                 bufsiz);
1858         if (ret == -1) {
1859                 saved_errno = errno;
1860         }
1861         TALLOC_FREE(conv);
1862         if (saved_errno != 0) {
1863                 errno = saved_errno;
1864         }
1865         return ret;
1866 }
1867
1868 static int shadow_copy2_mknodat(vfs_handle_struct *handle,
1869                         files_struct *dirfsp,
1870                         const struct smb_filename *smb_fname,
1871                         mode_t mode,
1872                         SMB_DEV_T dev)
1873 {
1874         time_t timestamp = 0;
1875
1876         if (!shadow_copy2_strip_snapshot(talloc_tos(), handle,
1877                                          smb_fname,
1878                                          &timestamp, NULL)) {
1879                 return -1;
1880         }
1881         if (timestamp != 0) {
1882                 errno = EROFS;
1883                 return -1;
1884         }
1885         return SMB_VFS_NEXT_MKNODAT(handle,
1886                         dirfsp,
1887                         smb_fname,
1888                         mode,
1889                         dev);
1890 }
1891
1892 static struct smb_filename *shadow_copy2_realpath(vfs_handle_struct *handle,
1893                                 TALLOC_CTX *ctx,
1894                                 const struct smb_filename *smb_fname)
1895 {
1896         time_t timestamp = 0;
1897         char *stripped = NULL;
1898         struct smb_filename *result_fname = NULL;
1899         struct smb_filename *conv_fname = NULL;
1900         int saved_errno = 0;
1901
1902         if (!shadow_copy2_strip_snapshot(talloc_tos(), handle,
1903                                 smb_fname,
1904                                 &timestamp, &stripped)) {
1905                 goto done;
1906         }
1907         if (timestamp == 0) {
1908                 return SMB_VFS_NEXT_REALPATH(handle, ctx, smb_fname);
1909         }
1910
1911         conv_fname = cp_smb_filename(talloc_tos(), smb_fname);
1912         if (conv_fname == NULL) {
1913                 goto done;
1914         }
1915         conv_fname->base_name = shadow_copy2_convert(
1916                 conv_fname, handle, stripped, timestamp);
1917         if (conv_fname->base_name == NULL) {
1918                 goto done;
1919         }
1920
1921         result_fname = SMB_VFS_NEXT_REALPATH(handle, ctx, conv_fname);
1922
1923 done:
1924         if (result_fname == NULL) {
1925                 saved_errno = errno;
1926         }
1927         TALLOC_FREE(conv_fname);
1928         TALLOC_FREE(stripped);
1929         if (saved_errno != 0) {
1930                 errno = saved_errno;
1931         }
1932         return result_fname;
1933 }
1934
1935 /**
1936  * Check whether a given directory contains a
1937  * snapshot directory as direct subdirectory.
1938  * If yes, return the path of the snapshot-subdir,
1939  * otherwise return NULL.
1940  */
1941 static char *have_snapdir(struct vfs_handle_struct *handle,
1942                           TALLOC_CTX *mem_ctx,
1943                           const char *path)
1944 {
1945         struct smb_filename smb_fname;
1946         int ret;
1947         struct shadow_copy2_private *priv;
1948
1949         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
1950                                 return NULL);
1951
1952         smb_fname = (struct smb_filename) {
1953                 .base_name = talloc_asprintf(
1954                         mem_ctx, "%s/%s", path, priv->config->snapdir),
1955         };
1956         if (smb_fname.base_name == NULL) {
1957                 return NULL;
1958         }
1959
1960         ret = SMB_VFS_NEXT_STAT(handle, &smb_fname);
1961         if ((ret == 0) && (S_ISDIR(smb_fname.st.st_ex_mode))) {
1962                 return smb_fname.base_name;
1963         }
1964         TALLOC_FREE(smb_fname.base_name);
1965         return NULL;
1966 }
1967
1968 /**
1969  * Find the snapshot directory (if any) for the given
1970  * filename (which is relative to the share).
1971  */
1972 static const char *shadow_copy2_find_snapdir(TALLOC_CTX *mem_ctx,
1973                                              struct vfs_handle_struct *handle,
1974                                              struct smb_filename *smb_fname)
1975 {
1976         char *path, *p;
1977         const char *snapdir;
1978         struct shadow_copy2_config *config;
1979         struct shadow_copy2_private *priv;
1980
1981         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
1982                                 return NULL);
1983
1984         config = priv->config;
1985
1986         /*
1987          * If the non-snapdisrseverywhere mode, we should not search!
1988          */
1989         if (!config->snapdirseverywhere) {
1990                 return config->snapshot_basepath;
1991         }
1992
1993         path = talloc_asprintf(mem_ctx, "%s/%s",
1994                                handle->conn->connectpath,
1995                                smb_fname->base_name);
1996         if (path == NULL) {
1997                 return NULL;
1998         }
1999
2000         snapdir = have_snapdir(handle, talloc_tos(), path);
2001         if (snapdir != NULL) {
2002                 TALLOC_FREE(path);
2003                 return snapdir;
2004         }
2005
2006         while ((p = strrchr(path, '/')) && (p > path)) {
2007
2008                 p[0] = '\0';
2009
2010                 snapdir = have_snapdir(handle, talloc_tos(), path);
2011                 if (snapdir != NULL) {
2012                         TALLOC_FREE(path);
2013                         return snapdir;
2014                 }
2015         }
2016         TALLOC_FREE(path);
2017         return NULL;
2018 }
2019
2020 static bool shadow_copy2_snapshot_to_gmt(vfs_handle_struct *handle,
2021                                          const char *name,
2022                                          char *gmt, size_t gmt_len)
2023 {
2024         struct tm timestamp = { .tm_sec = 0, };
2025         time_t timestamp_t;
2026         unsigned long int timestamp_long;
2027         const char *fmt;
2028         struct shadow_copy2_config *config;
2029         struct shadow_copy2_private *priv;
2030         char *tmpstr = NULL;
2031         char *tmp = NULL;
2032         bool converted = false;
2033         int ret = -1;
2034
2035         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
2036                                 return NULL);
2037
2038         config = priv->config;
2039
2040         fmt = config->gmt_format;
2041
2042         /*
2043          * If regex is provided, then we will have to parse the
2044          * filename which will contain both the prefix and the time format.
2045          * e.g. <prefix><delimiter><time_format>
2046          */
2047         if (priv->snaps->regex != NULL) {
2048                 tmpstr = talloc_strdup(talloc_tos(), name);
2049                 /* point "name" to the time format */
2050                 name = strstr(name, priv->config->delimiter);
2051                 if (name == NULL) {
2052                         goto done;
2053                 }
2054                 /* Extract the prefix */
2055                 tmp = strstr(tmpstr, priv->config->delimiter);
2056                 if (tmp == NULL) {
2057                         goto done;
2058                 }
2059                 *tmp = '\0';
2060
2061                 /* Parse regex */
2062                 ret = regexec(priv->snaps->regex, tmpstr, 0, NULL, 0);
2063                 if (ret) {
2064                         DBG_DEBUG("shadow_copy2_snapshot_to_gmt: "
2065                                   "no regex match for %s\n", tmpstr);
2066                         goto done;
2067                 }
2068         }
2069
2070         if (config->use_sscanf) {
2071                 if (sscanf(name, fmt, &timestamp_long) != 1) {
2072                         DEBUG(10, ("shadow_copy2_snapshot_to_gmt: "
2073                                    "no sscanf match %s: %s\n",
2074                                    fmt, name));
2075                         goto done;
2076                 }
2077                 timestamp_t = timestamp_long;
2078                 gmtime_r(&timestamp_t, &timestamp);
2079         } else {
2080                 if (strptime(name, fmt, &timestamp) == NULL) {
2081                         DEBUG(10, ("shadow_copy2_snapshot_to_gmt: "
2082                                    "no match %s: %s\n",
2083                                    fmt, name));
2084                         goto done;
2085                 }
2086                 DEBUG(10, ("shadow_copy2_snapshot_to_gmt: match %s: %s\n",
2087                            fmt, name));
2088
2089                 if (config->use_localtime) {
2090                         timestamp.tm_isdst = -1;
2091                         timestamp_t = mktime(&timestamp);
2092                         gmtime_r(&timestamp_t, &timestamp);
2093                 }
2094         }
2095
2096         strftime(gmt, gmt_len, GMT_FORMAT, &timestamp);
2097         converted = true;
2098
2099 done:
2100         TALLOC_FREE(tmpstr);
2101         return converted;
2102 }
2103
2104 static int shadow_copy2_label_cmp_asc(const void *x, const void *y)
2105 {
2106         return strncmp((const char *)x, (const char *)y, sizeof(SHADOW_COPY_LABEL));
2107 }
2108
2109 static int shadow_copy2_label_cmp_desc(const void *x, const void *y)
2110 {
2111         return -strncmp((const char *)x, (const char *)y, sizeof(SHADOW_COPY_LABEL));
2112 }
2113
2114 /*
2115   sort the shadow copy data in ascending or descending order
2116  */
2117 static void shadow_copy2_sort_data(vfs_handle_struct *handle,
2118                                    struct shadow_copy_data *shadow_copy2_data)
2119 {
2120         int (*cmpfunc)(const void *, const void *);
2121         const char *sort;
2122         struct shadow_copy2_private *priv;
2123
2124         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
2125                                 return);
2126
2127         sort = priv->config->sort_order;
2128         if (sort == NULL) {
2129                 return;
2130         }
2131
2132         if (strcmp(sort, "asc") == 0) {
2133                 cmpfunc = shadow_copy2_label_cmp_asc;
2134         } else if (strcmp(sort, "desc") == 0) {
2135                 cmpfunc = shadow_copy2_label_cmp_desc;
2136         } else {
2137                 return;
2138         }
2139
2140         if (shadow_copy2_data && shadow_copy2_data->num_volumes > 0 &&
2141             shadow_copy2_data->labels)
2142         {
2143                 TYPESAFE_QSORT(shadow_copy2_data->labels,
2144                                shadow_copy2_data->num_volumes,
2145                                cmpfunc);
2146         }
2147 }
2148
2149 static int shadow_copy2_get_shadow_copy_data(
2150         vfs_handle_struct *handle, files_struct *fsp,
2151         struct shadow_copy_data *shadow_copy2_data,
2152         bool labels)
2153 {
2154         DIR *p = NULL;
2155         const char *snapdir;
2156         struct smb_filename *snapdir_smb_fname = NULL;
2157         struct files_struct *dirfsp = NULL;
2158         struct files_struct *fspcwd = NULL;
2159         struct dirent *d;
2160         TALLOC_CTX *tmp_ctx = talloc_stackframe();
2161         struct shadow_copy2_private *priv = NULL;
2162         struct shadow_copy2_snapentry *tmpentry = NULL;
2163         bool get_snaplist = false;
2164         struct vfs_open_how how = {
2165                 .flags = O_RDONLY, .mode = 0,
2166         };
2167         int fd;
2168         int ret = -1;
2169         NTSTATUS status;
2170         int saved_errno = 0;
2171
2172         snapdir = shadow_copy2_find_snapdir(tmp_ctx, handle, fsp->fsp_name);
2173         if (snapdir == NULL) {
2174                 DEBUG(0,("shadow:snapdir not found for %s in get_shadow_copy_data\n",
2175                          handle->conn->connectpath));
2176                 errno = EINVAL;
2177                 goto done;
2178         }
2179
2180         snapdir_smb_fname = synthetic_smb_fname(talloc_tos(),
2181                                         snapdir,
2182                                         NULL,
2183                                         NULL,
2184                                         0,
2185                                         fsp->fsp_name->flags);
2186         if (snapdir_smb_fname == NULL) {
2187                 errno = ENOMEM;
2188                 goto done;
2189         }
2190
2191         status = create_internal_dirfsp(handle->conn,
2192                                         snapdir_smb_fname,
2193                                         &dirfsp);
2194         if (!NT_STATUS_IS_OK(status)) {
2195                 DBG_WARNING("create_internal_dir_fsp() failed for '%s'"
2196                             " - %s\n", snapdir, nt_errstr(status));
2197                 errno = ENOSYS;
2198                 goto done;
2199         }
2200
2201         status = vfs_at_fspcwd(talloc_tos(), handle->conn, &fspcwd);
2202         if (!NT_STATUS_IS_OK(status)) {
2203                 errno = ENOMEM;
2204                 goto done;
2205         }
2206
2207 #ifdef O_DIRECTORY
2208         how.flags |= O_DIRECTORY;
2209 #endif
2210
2211         fd = SMB_VFS_NEXT_OPENAT(handle,
2212                                  fspcwd,
2213                                  snapdir_smb_fname,
2214                                  dirfsp,
2215                                  &how);
2216         if (fd == -1) {
2217                 DBG_WARNING("SMB_VFS_NEXT_OPEN failed for '%s'"
2218                             " - %s\n", snapdir, strerror(errno));
2219                 errno = ENOSYS;
2220                 goto done;
2221         }
2222         fsp_set_fd(dirfsp, fd);
2223
2224         /* Now we have the handle, check access here. */
2225         status = smbd_check_access_rights_fsp(fspcwd,
2226                                         dirfsp,
2227                                         false,
2228                                         SEC_DIR_LIST);
2229         if (!NT_STATUS_IS_OK(status)) {
2230                 DBG_ERR("user does not have list permission "
2231                         "on snapdir %s\n",
2232                         fsp_str_dbg(dirfsp));
2233                 errno = EACCES;
2234                 goto done;
2235         }
2236
2237         p = SMB_VFS_NEXT_FDOPENDIR(handle, dirfsp, NULL, 0);
2238         if (!p) {
2239                 DBG_NOTICE("shadow_copy2: SMB_VFS_NEXT_FDOPENDIR() failed for '%s'"
2240                            " - %s\n", snapdir, strerror(errno));
2241                 errno = ENOSYS;
2242                 goto done;
2243         }
2244
2245         if (shadow_copy2_data != NULL) {
2246                 shadow_copy2_data->num_volumes = 0;
2247                 shadow_copy2_data->labels      = NULL;
2248         }
2249
2250         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
2251                                 goto done);
2252
2253         /*
2254          * Normally this function is called twice once with labels = false and
2255          * then with labels = true. When labels is false it will return the
2256          * number of volumes so that the caller can allocate memory for that
2257          * many labels. Therefore to eliminate snaplist both the times it is
2258          * good to check if labels is set or not.
2259          *
2260          * shadow_copy2_data is NULL when we only want to update the list and
2261          * don't want any labels.
2262          */
2263         if ((priv->snaps->regex != NULL) && (labels || shadow_copy2_data == NULL)) {
2264                 get_snaplist = true;
2265                 /* Reset the global snaplist */
2266                 shadow_copy2_delete_snaplist(priv);
2267
2268                 /* Set the current time as snaplist update time */
2269                 time(&(priv->snaps->fetch_time));
2270         }
2271
2272         while ((d = SMB_VFS_NEXT_READDIR(handle, dirfsp, p, NULL))) {
2273                 char snapshot[GMT_NAME_LEN+1];
2274                 SHADOW_COPY_LABEL *tlabels;
2275
2276                 /*
2277                  * ignore names not of the right form in the snapshot
2278                  * directory
2279                  */
2280                 if (!shadow_copy2_snapshot_to_gmt(
2281                             handle, d->d_name,
2282                             snapshot, sizeof(snapshot))) {
2283
2284                         DEBUG(6, ("shadow_copy2_get_shadow_copy_data: "
2285                                   "ignoring %s\n", d->d_name));
2286                         continue;
2287                 }
2288                 DEBUG(6,("shadow_copy2_get_shadow_copy_data: %s -> %s\n",
2289                          d->d_name, snapshot));
2290
2291                 if (get_snaplist) {
2292                         /*
2293                          * Create a snap entry for each successful
2294                          * pattern match.
2295                          */
2296                         tmpentry = shadow_copy2_create_snapentry(priv);
2297                         if (tmpentry == NULL) {
2298                                 DBG_ERR("talloc_zero() failed\n");
2299                                 goto done;
2300                         }
2301                         tmpentry->snapname = talloc_strdup(tmpentry, d->d_name);
2302                         tmpentry->time_fmt = talloc_strdup(tmpentry, snapshot);
2303                 }
2304
2305                 if (shadow_copy2_data == NULL) {
2306                         continue;
2307                 }
2308
2309                 if (!labels) {
2310                         /* the caller doesn't want the labels */
2311                         shadow_copy2_data->num_volumes++;
2312                         continue;
2313                 }
2314
2315                 tlabels = talloc_realloc(shadow_copy2_data,
2316                                          shadow_copy2_data->labels,
2317                                          SHADOW_COPY_LABEL,
2318                                          shadow_copy2_data->num_volumes+1);
2319                 if (tlabels == NULL) {
2320                         DEBUG(0,("shadow_copy2: out of memory\n"));
2321                         goto done;
2322                 }
2323
2324                 strlcpy(tlabels[shadow_copy2_data->num_volumes], snapshot,
2325                         sizeof(*tlabels));
2326
2327                 shadow_copy2_data->num_volumes++;
2328                 shadow_copy2_data->labels = tlabels;
2329         }
2330
2331         shadow_copy2_sort_data(handle, shadow_copy2_data);
2332         ret = 0;
2333
2334 done:
2335         if (ret != 0) {
2336                 saved_errno = errno;
2337         }
2338         TALLOC_FREE(fspcwd );
2339         if (p != NULL) {
2340                 SMB_VFS_NEXT_CLOSEDIR(handle, p);
2341                 p = NULL;
2342                 if (dirfsp != NULL) {
2343                         /*
2344                          * VFS_CLOSEDIR implicitly
2345                          * closed the associated fd.
2346                          */
2347                         fsp_set_fd(dirfsp, -1);
2348                 }
2349         }
2350         if (dirfsp != NULL) {
2351                 fd_close(dirfsp);
2352                 file_free(NULL, dirfsp);
2353         }
2354         TALLOC_FREE(tmp_ctx);
2355         if (saved_errno != 0) {
2356                 errno = saved_errno;
2357         }
2358         return ret;
2359 }
2360
2361 static int shadow_copy2_mkdirat(vfs_handle_struct *handle,
2362                                 struct files_struct *dirfsp,
2363                                 const struct smb_filename *smb_fname,
2364                                 mode_t mode)
2365 {
2366         struct smb_filename *full_fname = NULL;
2367         time_t timestamp = 0;
2368
2369         full_fname = full_path_from_dirfsp_atname(talloc_tos(),
2370                                                   dirfsp,
2371                                                   smb_fname);
2372         if (full_fname == NULL) {
2373                 errno = ENOMEM;
2374                 return -1;
2375         }
2376
2377         if (!shadow_copy2_strip_snapshot(talloc_tos(),
2378                                         handle,
2379                                         full_fname,
2380                                         &timestamp,
2381                                         NULL)) {
2382                 return -1;
2383         }
2384         TALLOC_FREE(full_fname);
2385         if (timestamp != 0) {
2386                 errno = EROFS;
2387                 return -1;
2388         }
2389         return SMB_VFS_NEXT_MKDIRAT(handle,
2390                         dirfsp,
2391                         smb_fname,
2392                         mode);
2393 }
2394
2395 static int shadow_copy2_fchflags(vfs_handle_struct *handle,
2396                                 struct files_struct *fsp,
2397                                 unsigned int flags)
2398 {
2399         time_t timestamp = 0;
2400
2401         if (!shadow_copy2_strip_snapshot(talloc_tos(),
2402                                         handle,
2403                                         fsp->fsp_name,
2404                                         &timestamp,
2405                                         NULL)) {
2406                 return -1;
2407         }
2408         if (timestamp != 0) {
2409                 errno = EROFS;
2410                 return -1;
2411         }
2412         return SMB_VFS_NEXT_FCHFLAGS(handle, fsp, flags);
2413 }
2414
2415 static int shadow_copy2_fsetxattr(struct vfs_handle_struct *handle,
2416                                  struct files_struct *fsp,
2417                                  const char *aname, const void *value,
2418                                  size_t size, int flags)
2419 {
2420         time_t timestamp = 0;
2421         const struct smb_filename *smb_fname = NULL;
2422
2423         smb_fname = fsp->fsp_name;
2424         if (!shadow_copy2_strip_snapshot(talloc_tos(),
2425                                 handle,
2426                                 smb_fname,
2427                                 &timestamp,
2428                                 NULL)) {
2429                 return -1;
2430         }
2431         if (timestamp != 0) {
2432                 errno = EROFS;
2433                 return -1;
2434         }
2435         return SMB_VFS_NEXT_FSETXATTR(handle, fsp,
2436                                 aname, value, size, flags);
2437 }
2438
2439 static NTSTATUS shadow_copy2_create_dfs_pathat(struct vfs_handle_struct *handle,
2440                                 struct files_struct *dirfsp,
2441                                 const struct smb_filename *smb_fname,
2442                                 const struct referral *reflist,
2443                                 size_t referral_count)
2444 {
2445         time_t timestamp = 0;
2446
2447         if (!shadow_copy2_strip_snapshot(talloc_tos(),
2448                                         handle,
2449                                         smb_fname,
2450                                         &timestamp,
2451                                         NULL)) {
2452                 return NT_STATUS_NO_MEMORY;
2453         }
2454         if (timestamp != 0) {
2455                 return NT_STATUS_MEDIA_WRITE_PROTECTED;
2456         }
2457         return SMB_VFS_NEXT_CREATE_DFS_PATHAT(handle,
2458                         dirfsp,
2459                         smb_fname,
2460                         reflist,
2461                         referral_count);
2462 }
2463
2464 static NTSTATUS shadow_copy2_read_dfs_pathat(struct vfs_handle_struct *handle,
2465                                 TALLOC_CTX *mem_ctx,
2466                                 struct files_struct *dirfsp,
2467                                 struct smb_filename *smb_fname,
2468                                 struct referral **ppreflist,
2469                                 size_t *preferral_count)
2470 {
2471         time_t timestamp = 0;
2472         char *stripped = NULL;
2473         struct smb_filename *full_fname = NULL;
2474         struct smb_filename *conv = NULL;
2475         NTSTATUS status;
2476
2477         full_fname = full_path_from_dirfsp_atname(talloc_tos(),
2478                                                   dirfsp,
2479                                                   smb_fname);
2480         if (full_fname == NULL) {
2481                 return NT_STATUS_NO_MEMORY;
2482         }
2483
2484         if (!shadow_copy2_strip_snapshot(mem_ctx,
2485                                         handle,
2486                                         full_fname,
2487                                         &timestamp,
2488                                         &stripped)) {
2489                 TALLOC_FREE(full_fname);
2490                 return NT_STATUS_NO_MEMORY;
2491         }
2492         if (timestamp == 0) {
2493                 TALLOC_FREE(full_fname);
2494                 TALLOC_FREE(stripped);
2495                 return SMB_VFS_NEXT_READ_DFS_PATHAT(handle,
2496                                         mem_ctx,
2497                                         dirfsp,
2498                                         smb_fname,
2499                                         ppreflist,
2500                                         preferral_count);
2501         }
2502
2503         conv = cp_smb_filename(mem_ctx, full_fname);
2504         if (conv == NULL) {
2505                 TALLOC_FREE(full_fname);
2506                 TALLOC_FREE(stripped);
2507                 return NT_STATUS_NO_MEMORY;
2508         }
2509         TALLOC_FREE(full_fname);
2510         conv->base_name = shadow_copy2_convert(conv,
2511                                         handle,
2512                                         stripped,
2513                                         timestamp);
2514         TALLOC_FREE(stripped);
2515         if (conv->base_name == NULL) {
2516                 TALLOC_FREE(conv);
2517                 return NT_STATUS_NO_MEMORY;
2518         }
2519
2520         status = SMB_VFS_NEXT_READ_DFS_PATHAT(handle,
2521                                 mem_ctx,
2522                                 handle->conn->cwd_fsp,
2523                                 conv,
2524                                 ppreflist,
2525                                 preferral_count);
2526
2527         if (NT_STATUS_IS_OK(status)) {
2528                 /* Return any stat(2) info. */
2529                 smb_fname->st = conv->st;
2530         }
2531
2532         TALLOC_FREE(conv);
2533         return status;
2534 }
2535
2536 static NTSTATUS shadow_copy2_get_real_filename_at(
2537         struct vfs_handle_struct *handle,
2538         struct files_struct *dirfsp,
2539         const char *name,
2540         TALLOC_CTX *mem_ctx,
2541         char **found_name)
2542 {
2543         struct shadow_copy2_private *priv = NULL;
2544         time_t timestamp = 0;
2545         char *stripped = NULL;
2546         char *conv;
2547         struct smb_filename *conv_fname = NULL;
2548         NTSTATUS status;
2549         bool ok;
2550
2551         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
2552                                 return NT_STATUS_INTERNAL_ERROR);
2553
2554         DBG_DEBUG("Path=[%s] name=[%s]\n", fsp_str_dbg(dirfsp), name);
2555
2556         ok = shadow_copy2_strip_snapshot(
2557                 talloc_tos(), handle, dirfsp->fsp_name, &timestamp, &stripped);
2558         if (!ok) {
2559                 status = map_nt_error_from_unix(errno);
2560                 DEBUG(10, ("shadow_copy2_strip_snapshot failed\n"));
2561                 return status;
2562         }
2563         if (timestamp == 0) {
2564                 DEBUG(10, ("timestamp == 0\n"));
2565                 return SMB_VFS_NEXT_GET_REAL_FILENAME_AT(
2566                         handle, dirfsp, name, mem_ctx, found_name);
2567         }
2568
2569         /*
2570          * Note that stripped may be an empty string "" if path was ".". As
2571          * shadow_copy2_convert() combines "" with the shadow-copy tree connect
2572          * root fullpath and get_real_filename_full_scan() has an explicit check
2573          * for "" this works.
2574          */
2575         DBG_DEBUG("stripped [%s]\n", stripped);
2576
2577         conv = shadow_copy2_convert(talloc_tos(), handle, stripped, timestamp);
2578         if (conv == NULL) {
2579                 status = map_nt_error_from_unix(errno);
2580                 DBG_DEBUG("shadow_copy2_convert [%s] failed: %s\n",
2581                           stripped,
2582                           strerror(errno));
2583                 return status;
2584         }
2585
2586         status = synthetic_pathref(
2587                 talloc_tos(),
2588                 dirfsp->conn->cwd_fsp,
2589                 conv,
2590                 NULL,
2591                 NULL,
2592                 0,
2593                 0,
2594                 &conv_fname);
2595         if (!NT_STATUS_IS_OK(status)) {
2596                 return status;
2597         }
2598
2599         DEBUG(10, ("Calling NEXT_GET_REAL_FILE_NAME for conv=[%s], "
2600                    "name=[%s]\n", conv, name));
2601         status = SMB_VFS_NEXT_GET_REAL_FILENAME_AT(
2602                 handle, conv_fname->fsp, name, mem_ctx, found_name);
2603         DEBUG(10, ("NEXT_REAL_FILE_NAME returned %s\n", nt_errstr(status)));
2604         if (NT_STATUS_IS_OK(status)) {
2605                 TALLOC_FREE(conv_fname);
2606                 return NT_STATUS_OK;
2607         }
2608         if (!NT_STATUS_EQUAL(status, NT_STATUS_NOT_SUPPORTED)) {
2609                 TALLOC_FREE(conv_fname);
2610                 TALLOC_FREE(conv);
2611                 return NT_STATUS_NOT_SUPPORTED;
2612         }
2613
2614         status = get_real_filename_full_scan_at(
2615                 conv_fname->fsp, name, false, mem_ctx, found_name);
2616         TALLOC_FREE(conv_fname);
2617         if (!NT_STATUS_IS_OK(status)) {
2618                 DBG_DEBUG("Scan [%s] for [%s] failed\n",
2619                           conv, name);
2620                 return status;
2621         }
2622
2623         DBG_DEBUG("Scan [%s] for [%s] returned [%s]\n",
2624                   conv, name, *found_name);
2625
2626         TALLOC_FREE(conv);
2627         return NT_STATUS_OK;
2628 }
2629
2630 static const char *shadow_copy2_connectpath(
2631         struct vfs_handle_struct *handle,
2632         const struct files_struct *dirfsp,
2633         const struct smb_filename *smb_fname_in)
2634 {
2635         time_t timestamp = 0;
2636         char *stripped = NULL;
2637         char *tmp = NULL;
2638         const char *fname = smb_fname_in->base_name;
2639         const struct smb_filename *full = NULL;
2640         struct smb_filename smb_fname = {0};
2641         struct smb_filename *result_fname = NULL;
2642         char *result = NULL;
2643         char *parent_dir = NULL;
2644         int saved_errno = 0;
2645         size_t rootpath_len = 0;
2646         struct shadow_copy2_private *priv = NULL;
2647
2648         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
2649                                 return NULL);
2650
2651         DBG_DEBUG("Calc connect path for [%s]\n", fname);
2652
2653         if (priv->shadow_connectpath != NULL) {
2654                 DBG_DEBUG("cached connect path is [%s]\n",
2655                         priv->shadow_connectpath);
2656                 return priv->shadow_connectpath;
2657         }
2658
2659         full = full_path_from_dirfsp_atname(
2660                 talloc_tos(), dirfsp, smb_fname_in);
2661         if (full == NULL) {
2662                 return NULL;
2663         }
2664
2665         if (!shadow_copy2_strip_snapshot(talloc_tos(), handle, full,
2666                                          &timestamp, &stripped)) {
2667                 goto done;
2668         }
2669         if (timestamp == 0) {
2670                 return SMB_VFS_NEXT_CONNECTPATH(handle, dirfsp, smb_fname_in);
2671         }
2672
2673         tmp = shadow_copy2_do_convert(talloc_tos(), handle, stripped, timestamp,
2674                                       &rootpath_len);
2675         if (tmp == NULL) {
2676                 if (errno != ENOENT) {
2677                         goto done;
2678                 }
2679
2680                 /*
2681                  * If the converted path does not exist, and converting
2682                  * the parent yields something that does exist, then
2683                  * this path refers to something that has not been
2684                  * created yet, relative to the parent path.
2685                  * The snapshot finding is relative to the parent.
2686                  * (usually snapshots are read/only but this is not
2687                  * necessarily true).
2688                  * This code also covers getting a wildcard in the
2689                  * last component, because this function is called
2690                  * prior to sanitizing the path, and in SMB1 we may
2691                  * get wildcards in path names.
2692                  */
2693                 if (!parent_dirname(talloc_tos(), stripped, &parent_dir,
2694                                     NULL)) {
2695                         errno = ENOMEM;
2696                         goto done;
2697                 }
2698
2699                 tmp = shadow_copy2_do_convert(talloc_tos(), handle, parent_dir,
2700                                               timestamp, &rootpath_len);
2701                 if (tmp == NULL) {
2702                         goto done;
2703                 }
2704         }
2705
2706         DBG_DEBUG("converted path is [%s] root path is [%.*s]\n", tmp,
2707                   (int)rootpath_len, tmp);
2708
2709         tmp[rootpath_len] = '\0';
2710         smb_fname = (struct smb_filename) { .base_name = tmp };
2711
2712         result_fname = SMB_VFS_NEXT_REALPATH(handle, priv, &smb_fname);
2713         if (result_fname == NULL) {
2714                 goto done;
2715         }
2716
2717         /*
2718          * SMB_VFS_NEXT_REALPATH returns a talloc'ed string.
2719          * Don't leak memory.
2720          */
2721         TALLOC_FREE(priv->shadow_realpath);
2722         priv->shadow_realpath = result_fname;
2723         result = priv->shadow_realpath->base_name;
2724
2725         DBG_DEBUG("connect path is [%s]\n", result);
2726
2727 done:
2728         if (result == NULL) {
2729                 saved_errno = errno;
2730         }
2731         TALLOC_FREE(tmp);
2732         TALLOC_FREE(stripped);
2733         TALLOC_FREE(parent_dir);
2734         if (saved_errno != 0) {
2735                 errno = saved_errno;
2736         }
2737         return result;
2738 }
2739
2740 static NTSTATUS shadow_copy2_parent_pathname(vfs_handle_struct *handle,
2741                                              TALLOC_CTX *ctx,
2742                                              const struct smb_filename *smb_fname_in,
2743                                              struct smb_filename **parent_dir_out,
2744                                              struct smb_filename **atname_out)
2745 {
2746         time_t timestamp = 0;
2747         char *stripped = NULL;
2748         char *converted_name = NULL;
2749         struct smb_filename *smb_fname = NULL;
2750         struct smb_filename *parent = NULL;
2751         struct smb_filename *atname = NULL;
2752         struct shadow_copy2_private *priv = NULL;
2753         bool ok = false;
2754         bool is_converted = false;
2755         NTSTATUS status = NT_STATUS_OK;
2756         TALLOC_CTX *frame = NULL;
2757
2758         SMB_VFS_HANDLE_GET_DATA(handle,
2759                                 priv,
2760                                 struct shadow_copy2_private,
2761                                 return NT_STATUS_INTERNAL_ERROR);
2762
2763         frame = talloc_stackframe();
2764
2765         smb_fname = cp_smb_filename(frame, smb_fname_in);
2766         if (smb_fname == NULL) {
2767                 status = NT_STATUS_NO_MEMORY;
2768                 goto fail;
2769         }
2770
2771         /* First, call the default PARENT_PATHNAME. */
2772         status = SMB_VFS_NEXT_PARENT_PATHNAME(handle,
2773                                               frame,
2774                                               smb_fname,
2775                                               &parent,
2776                                               &atname);
2777         if (!NT_STATUS_IS_OK(status)) {
2778                 goto fail;
2779         }
2780
2781         if (parent->twrp == 0) {
2782                 /*
2783                  * Parent is not a snapshot path, return
2784                  * the regular result.
2785                  */
2786                 status = NT_STATUS_OK;
2787                 goto out;
2788         }
2789
2790         /* See if we can find a snapshot for the parent. */
2791         ok = shadow_copy2_strip_snapshot_converted(frame,
2792                                                    handle,
2793                                                    parent,
2794                                                    &timestamp,
2795                                                    &stripped,
2796                                                    &is_converted);
2797         if (!ok) {
2798                 status = map_nt_error_from_unix(errno);
2799                 goto fail;
2800         }
2801
2802         if (is_converted) {
2803                 /*
2804                  * Already found snapshot for parent so wipe
2805                  * out the twrp.
2806                  */
2807                 parent->twrp = 0;
2808                 goto out;
2809         }
2810
2811         converted_name = shadow_copy2_convert(frame,
2812                                               handle,
2813                                               stripped,
2814                                               timestamp);
2815
2816         if (converted_name == NULL) {
2817                 /*
2818                  * Can't find snapshot for parent so wipe
2819                  * out the twrp.
2820                  */
2821                 parent->twrp = 0;
2822         }
2823
2824   out:
2825
2826         *parent_dir_out = talloc_move(ctx, &parent);
2827         if (atname_out != NULL) {
2828                 *atname_out = talloc_move(*parent_dir_out, &atname);
2829         }
2830
2831   fail:
2832
2833         TALLOC_FREE(frame);
2834         return status;
2835 }
2836
2837 static uint64_t shadow_copy2_disk_free(vfs_handle_struct *handle,
2838                                 const struct smb_filename *smb_fname,
2839                                 uint64_t *bsize,
2840                                 uint64_t *dfree,
2841                                 uint64_t *dsize)
2842 {
2843         time_t timestamp = 0;
2844         char *stripped = NULL;
2845         int saved_errno = 0;
2846         char *conv = NULL;
2847         struct smb_filename *conv_smb_fname = NULL;
2848         uint64_t ret = (uint64_t)-1;
2849
2850         if (!shadow_copy2_strip_snapshot(talloc_tos(),
2851                                 handle,
2852                                 smb_fname,
2853                                 &timestamp,
2854                                 &stripped)) {
2855                 return (uint64_t)-1;
2856         }
2857         if (timestamp == 0) {
2858                 return SMB_VFS_NEXT_DISK_FREE(handle, smb_fname,
2859                                               bsize, dfree, dsize);
2860         }
2861         conv = shadow_copy2_convert(talloc_tos(), handle, stripped, timestamp);
2862         TALLOC_FREE(stripped);
2863         if (conv == NULL) {
2864                 return (uint64_t)-1;
2865         }
2866         conv_smb_fname = synthetic_smb_fname(talloc_tos(),
2867                                         conv,
2868                                         NULL,
2869                                         NULL,
2870                                         0,
2871                                         smb_fname->flags);
2872         if (conv_smb_fname == NULL) {
2873                 TALLOC_FREE(conv);
2874                 return (uint64_t)-1;
2875         }
2876         ret = SMB_VFS_NEXT_DISK_FREE(handle, conv_smb_fname,
2877                                 bsize, dfree, dsize);
2878         if (ret == (uint64_t)-1) {
2879                 saved_errno = errno;
2880         }
2881         TALLOC_FREE(conv);
2882         TALLOC_FREE(conv_smb_fname);
2883         if (saved_errno != 0) {
2884                 errno = saved_errno;
2885         }
2886         return ret;
2887 }
2888
2889 static int shadow_copy2_get_quota(vfs_handle_struct *handle,
2890                                 const struct smb_filename *smb_fname,
2891                                 enum SMB_QUOTA_TYPE qtype,
2892                                 unid_t id,
2893                                 SMB_DISK_QUOTA *dq)
2894 {
2895         time_t timestamp = 0;
2896         char *stripped = NULL;
2897         int ret;
2898         int saved_errno = 0;
2899         char *conv;
2900         struct smb_filename *conv_smb_fname = NULL;
2901
2902         if (!shadow_copy2_strip_snapshot(talloc_tos(),
2903                                 handle,
2904                                 smb_fname,
2905                                 &timestamp,
2906                                 &stripped)) {
2907                 return -1;
2908         }
2909         if (timestamp == 0) {
2910                 return SMB_VFS_NEXT_GET_QUOTA(handle, smb_fname, qtype, id, dq);
2911         }
2912
2913         conv = shadow_copy2_convert(talloc_tos(), handle, stripped, timestamp);
2914         TALLOC_FREE(stripped);
2915         if (conv == NULL) {
2916                 return -1;
2917         }
2918         conv_smb_fname = synthetic_smb_fname(talloc_tos(),
2919                                         conv,
2920                                         NULL,
2921                                         NULL,
2922                                         0,
2923                                         smb_fname->flags);
2924         if (conv_smb_fname == NULL) {
2925                 TALLOC_FREE(conv);
2926                 return -1;
2927         }
2928         ret = SMB_VFS_NEXT_GET_QUOTA(handle, conv_smb_fname, qtype, id, dq);
2929
2930         if (ret == -1) {
2931                 saved_errno = errno;
2932         }
2933         TALLOC_FREE(conv);
2934         TALLOC_FREE(conv_smb_fname);
2935         if (saved_errno != 0) {
2936                 errno = saved_errno;
2937         }
2938
2939         return ret;
2940 }
2941
2942 static ssize_t shadow_copy2_pwrite(vfs_handle_struct *handle,
2943                                    files_struct *fsp,
2944                                    const void *data,
2945                                    size_t n,
2946                                    off_t offset)
2947 {
2948         ssize_t nwritten;
2949
2950         nwritten = SMB_VFS_NEXT_PWRITE(handle, fsp, data, n, offset);
2951         if (nwritten == -1) {
2952                 if (errno == EBADF && fsp->fsp_flags.can_write) {
2953                         errno = EROFS;
2954                 }
2955         }
2956
2957         return nwritten;
2958 }
2959
2960 struct shadow_copy2_pwrite_state {
2961         vfs_handle_struct *handle;
2962         files_struct *fsp;
2963         ssize_t ret;
2964         struct vfs_aio_state vfs_aio_state;
2965 };
2966
2967 static void shadow_copy2_pwrite_done(struct tevent_req *subreq);
2968
2969 static struct tevent_req *shadow_copy2_pwrite_send(
2970         struct vfs_handle_struct *handle, TALLOC_CTX *mem_ctx,
2971         struct tevent_context *ev, struct files_struct *fsp,
2972         const void *data, size_t n, off_t offset)
2973 {
2974         struct tevent_req *req = NULL, *subreq = NULL;
2975         struct shadow_copy2_pwrite_state *state = NULL;
2976
2977         req = tevent_req_create(mem_ctx, &state,
2978                                 struct shadow_copy2_pwrite_state);
2979         if (req == NULL) {
2980                 return NULL;
2981         }
2982         state->handle = handle;
2983         state->fsp = fsp;
2984
2985         subreq = SMB_VFS_NEXT_PWRITE_SEND(state,
2986                                           ev,
2987                                           handle,
2988                                           fsp,
2989                                           data,
2990                                           n,
2991                                           offset);
2992         if (tevent_req_nomem(subreq, req)) {
2993                 return tevent_req_post(req, ev);
2994         }
2995         tevent_req_set_callback(subreq, shadow_copy2_pwrite_done, req);
2996
2997         return req;
2998 }
2999
3000 static void shadow_copy2_pwrite_done(struct tevent_req *subreq)
3001 {
3002         struct tevent_req *req = tevent_req_callback_data(
3003                 subreq, struct tevent_req);
3004         struct shadow_copy2_pwrite_state *state = tevent_req_data(
3005                 req, struct shadow_copy2_pwrite_state);
3006
3007         state->ret = SMB_VFS_PWRITE_RECV(subreq, &state->vfs_aio_state);
3008         TALLOC_FREE(subreq);
3009         if (state->ret == -1) {
3010                 tevent_req_error(req, state->vfs_aio_state.error);
3011                 return;
3012         }
3013
3014         tevent_req_done(req);
3015 }
3016
3017 static ssize_t shadow_copy2_pwrite_recv(struct tevent_req *req,
3018                                           struct vfs_aio_state *vfs_aio_state)
3019 {
3020         struct shadow_copy2_pwrite_state *state = tevent_req_data(
3021                 req, struct shadow_copy2_pwrite_state);
3022
3023         if (tevent_req_is_unix_error(req, &vfs_aio_state->error)) {
3024                 if ((vfs_aio_state->error == EBADF) &&
3025                     state->fsp->fsp_flags.can_write)
3026                 {
3027                         vfs_aio_state->error = EROFS;
3028                         errno = EROFS;
3029                 }
3030                 return -1;
3031         }
3032
3033         *vfs_aio_state = state->vfs_aio_state;
3034         return state->ret;
3035 }
3036
3037 static int shadow_copy2_connect(struct vfs_handle_struct *handle,
3038                                 const char *service, const char *user)
3039 {
3040         struct shadow_copy2_config *config;
3041         struct shadow_copy2_private *priv;
3042         int ret;
3043         const char *snapdir;
3044         const char *snapprefix = NULL;
3045         const char *delimiter;
3046         const char *gmt_format;
3047         const char *sort_order;
3048         const char *basedir = NULL;
3049         const char *snapsharepath = NULL;
3050         const char *mount_point;
3051
3052         DEBUG(10, (__location__ ": cnum[%u], connectpath[%s]\n",
3053                    (unsigned)handle->conn->cnum,
3054                    handle->conn->connectpath));
3055
3056         ret = SMB_VFS_NEXT_CONNECT(handle, service, user);
3057         if (ret < 0) {
3058                 return ret;
3059         }
3060
3061         priv = talloc_zero(handle->conn, struct shadow_copy2_private);
3062         if (priv == NULL) {
3063                 DBG_ERR("talloc_zero() failed\n");
3064                 errno = ENOMEM;
3065                 return -1;
3066         }
3067
3068         priv->snaps = talloc_zero(priv, struct shadow_copy2_snaplist_info);
3069         if (priv->snaps == NULL) {
3070                 DBG_ERR("talloc_zero() failed\n");
3071                 errno = ENOMEM;
3072                 return -1;
3073         }
3074
3075         config = talloc_zero(priv, struct shadow_copy2_config);
3076         if (config == NULL) {
3077                 DEBUG(0, ("talloc_zero() failed\n"));
3078                 errno = ENOMEM;
3079                 return -1;
3080         }
3081
3082         priv->config = config;
3083
3084         gmt_format = lp_parm_const_string(SNUM(handle->conn),
3085                                           "shadow", "format",
3086                                           GMT_FORMAT);
3087         config->gmt_format = talloc_strdup(config, gmt_format);
3088         if (config->gmt_format == NULL) {
3089                 DEBUG(0, ("talloc_strdup() failed\n"));
3090                 errno = ENOMEM;
3091                 return -1;
3092         }
3093
3094         /* config->gmt_format must not contain a path separator. */
3095         if (strchr(config->gmt_format, '/') != NULL) {
3096                 DEBUG(0, ("shadow:format %s must not contain a /"
3097                         "character. Unable to initialize module.\n",
3098                         config->gmt_format));
3099                 errno = EINVAL;
3100                 return -1;
3101         }
3102
3103         config->use_sscanf = lp_parm_bool(SNUM(handle->conn),
3104                                           "shadow", "sscanf", false);
3105
3106         config->use_localtime = lp_parm_bool(SNUM(handle->conn),
3107                                              "shadow", "localtime",
3108                                              false);
3109
3110         snapdir = lp_parm_const_string(SNUM(handle->conn),
3111                                        "shadow", "snapdir",
3112                                        ".snapshots");
3113         config->snapdir = talloc_strdup(config, snapdir);
3114         if (config->snapdir == NULL) {
3115                 DEBUG(0, ("talloc_strdup() failed\n"));
3116                 errno = ENOMEM;
3117                 return -1;
3118         }
3119
3120         snapprefix = lp_parm_const_string(SNUM(handle->conn),
3121                                        "shadow", "snapprefix",
3122                                        NULL);
3123         if (snapprefix != NULL) {
3124                 priv->snaps->regex = talloc_zero(priv->snaps, regex_t);
3125                 if (priv->snaps->regex == NULL) {
3126                         DBG_ERR("talloc_zero() failed\n");
3127                         errno = ENOMEM;
3128                         return -1;
3129                 }
3130
3131                 /* pre-compute regex rule for matching pattern later */
3132                 ret = regcomp(priv->snaps->regex, snapprefix, 0);
3133                 if (ret) {
3134                         DBG_ERR("Failed to create regex object\n");
3135                         return -1;
3136                 }
3137         }
3138
3139         delimiter = lp_parm_const_string(SNUM(handle->conn),
3140                                        "shadow", "delimiter",
3141                                        "_GMT");
3142         if (delimiter != NULL) {
3143                 priv->config->delimiter = talloc_strdup(priv->config, delimiter);
3144                 if (priv->config->delimiter == NULL) {
3145                         DBG_ERR("talloc_strdup() failed\n");
3146                         errno = ENOMEM;
3147                         return -1;
3148                 }
3149         }
3150
3151         config->snapdirseverywhere = lp_parm_bool(SNUM(handle->conn),
3152                                                   "shadow",
3153                                                   "snapdirseverywhere",
3154                                                   false);
3155
3156         config->crossmountpoints = lp_parm_bool(SNUM(handle->conn),
3157                                                 "shadow", "crossmountpoints",
3158                                                 false);
3159
3160         if (config->crossmountpoints && !config->snapdirseverywhere) {
3161                 DBG_WARNING("Warning: 'crossmountpoints' depends on "
3162                             "'snapdirseverywhere'. Disabling crossmountpoints.\n");
3163         }
3164
3165         config->fixinodes = lp_parm_bool(SNUM(handle->conn),
3166                                          "shadow", "fixinodes",
3167                                          false);
3168
3169         sort_order = lp_parm_const_string(SNUM(handle->conn),
3170                                           "shadow", "sort", "desc");
3171         config->sort_order = talloc_strdup(config, sort_order);
3172         if (config->sort_order == NULL) {
3173                 DEBUG(0, ("talloc_strdup() failed\n"));
3174                 errno = ENOMEM;
3175                 return -1;
3176         }
3177
3178         mount_point = lp_parm_const_string(SNUM(handle->conn),
3179                                            "shadow", "mountpoint", NULL);
3180         if (mount_point != NULL) {
3181                 if (mount_point[0] != '/') {
3182                         DEBUG(1, (__location__ " Warning: 'mountpoint' is "
3183                                   "relative ('%s'), but it has to be an "
3184                                   "absolute path. Ignoring provided value.\n",
3185                                   mount_point));
3186                         mount_point = NULL;
3187                 } else {
3188                         char *p;
3189                         p = strstr(handle->conn->connectpath, mount_point);
3190                         if (p != handle->conn->connectpath) {
3191                                 DBG_WARNING("Warning: the share root (%s) is "
3192                                             "not a subdirectory of the "
3193                                             "specified mountpoint (%s). "
3194                                             "Ignoring provided value.\n",
3195                                             handle->conn->connectpath,
3196                                             mount_point);
3197                                 mount_point = NULL;
3198                         }
3199                 }
3200         }
3201
3202         if (mount_point != NULL) {
3203                 config->mount_point = talloc_strdup(config, mount_point);
3204                 if (config->mount_point == NULL) {
3205                         DEBUG(0, (__location__ " talloc_strdup() failed\n"));
3206                         return -1;
3207                 }
3208         } else {
3209                 config->mount_point = shadow_copy2_find_mount_point(config,
3210                                                                     handle);
3211                 if (config->mount_point == NULL) {
3212                         DBG_WARNING("shadow_copy2_find_mount_point "
3213                                     "of the share root '%s' failed: %s\n",
3214                                     handle->conn->connectpath, strerror(errno));
3215                         return -1;
3216                 }
3217         }
3218
3219         basedir = lp_parm_const_string(SNUM(handle->conn),
3220                                        "shadow", "basedir", NULL);
3221
3222         if (basedir != NULL) {
3223                 if (basedir[0] != '/') {
3224                         DEBUG(1, (__location__ " Warning: 'basedir' is "
3225                                   "relative ('%s'), but it has to be an "
3226                                   "absolute path. Disabling basedir.\n",
3227                                   basedir));
3228                         basedir = NULL;
3229                 } else {
3230                         char *p;
3231                         p = strstr(basedir, config->mount_point);
3232                         if (p != basedir) {
3233                                 DEBUG(1, ("Warning: basedir (%s) is not a "
3234                                           "subdirectory of the share root's "
3235                                           "mount point (%s). "
3236                                           "Disabling basedir\n",
3237                                           basedir, config->mount_point));
3238                                 basedir = NULL;
3239                         }
3240                 }
3241         }
3242
3243         if (config->snapdirseverywhere && basedir != NULL) {
3244                 DEBUG(1, (__location__ " Warning: 'basedir' is incompatible "
3245                           "with 'snapdirseverywhere'. Disabling basedir.\n"));
3246                 basedir = NULL;
3247         }
3248
3249         snapsharepath = lp_parm_const_string(SNUM(handle->conn), "shadow",
3250                                              "snapsharepath", NULL);
3251         if (snapsharepath != NULL) {
3252                 if (snapsharepath[0] == '/') {
3253                         DBG_WARNING("Warning: 'snapsharepath' is "
3254                                     "absolute ('%s'), but it has to be a "
3255                                     "relative path. Disabling snapsharepath.\n",
3256                                     snapsharepath);
3257                         snapsharepath = NULL;
3258                 }
3259                 if (config->snapdirseverywhere && snapsharepath != NULL) {
3260                         DBG_WARNING("Warning: 'snapsharepath' is incompatible "
3261                                     "with 'snapdirseverywhere'. Disabling "
3262                                     "snapsharepath.\n");
3263                         snapsharepath = NULL;
3264                 }
3265         }
3266
3267         if (basedir != NULL && snapsharepath != NULL) {
3268                 DBG_WARNING("Warning: 'snapsharepath' is incompatible with "
3269                             "'basedir'. Disabling snapsharepath\n");
3270                 snapsharepath = NULL;
3271         }
3272
3273         if (snapsharepath != NULL) {
3274                 config->rel_connectpath = talloc_strdup(config, snapsharepath);
3275                 if (config->rel_connectpath == NULL) {
3276                         DBG_ERR("talloc_strdup() failed\n");
3277                         errno = ENOMEM;
3278                         return -1;
3279                 }
3280         }
3281
3282         if (basedir == NULL) {
3283                 basedir = config->mount_point;
3284         }
3285
3286         if (config->rel_connectpath == NULL &&
3287             strlen(basedir) < strlen(handle->conn->connectpath)) {
3288                 config->rel_connectpath = talloc_strdup(config,
3289                         handle->conn->connectpath + strlen(basedir));
3290                 if (config->rel_connectpath == NULL) {
3291                         DEBUG(0, ("talloc_strdup() failed\n"));
3292                         errno = ENOMEM;
3293                         return -1;
3294                 }
3295         }
3296
3297         if (config->snapdir[0] == '/') {
3298                 config->snapdir_absolute = true;
3299
3300                 if (config->snapdirseverywhere == true) {
3301                         DEBUG(1, (__location__ " Warning: An absolute snapdir "
3302                                   "is incompatible with 'snapdirseverywhere', "
3303                                   "setting 'snapdirseverywhere' to false.\n"));
3304                         config->snapdirseverywhere = false;
3305                 }
3306
3307                 if (config->crossmountpoints == true) {
3308                         DEBUG(1, (__location__ " Warning: 'crossmountpoints' "
3309                                   "is not supported with an absolute snapdir. "
3310                                   "Disabling it.\n"));
3311                         config->crossmountpoints = false;
3312                 }
3313
3314                 config->snapshot_basepath = config->snapdir;
3315         } else {
3316                 config->snapshot_basepath = talloc_asprintf(config, "%s/%s",
3317                                 config->mount_point, config->snapdir);
3318                 if (config->snapshot_basepath == NULL) {
3319                         DEBUG(0, ("talloc_asprintf() failed\n"));
3320                         errno = ENOMEM;
3321                         return -1;
3322                 }
3323         }
3324
3325         trim_string(config->mount_point, NULL, "/");
3326         trim_string(config->rel_connectpath, "/", "/");
3327         trim_string(config->snapdir, NULL, "/");
3328         trim_string(config->snapshot_basepath, NULL, "/");
3329
3330         DEBUG(10, ("shadow_copy2_connect: configuration:\n"
3331                    "  share root: '%s'\n"
3332                    "  mountpoint: '%s'\n"
3333                    "  rel share root: '%s'\n"
3334                    "  snapdir: '%s'\n"
3335                    "  snapprefix: '%s'\n"
3336                    "  delimiter: '%s'\n"
3337                    "  snapshot base path: '%s'\n"
3338                    "  format: '%s'\n"
3339                    "  use sscanf: %s\n"
3340                    "  snapdirs everywhere: %s\n"
3341                    "  cross mountpoints: %s\n"
3342                    "  fix inodes: %s\n"
3343                    "  sort order: %s\n"
3344                    "",
3345                    handle->conn->connectpath,
3346                    config->mount_point,
3347                    config->rel_connectpath,
3348                    config->snapdir,
3349                    snapprefix,
3350                    config->delimiter,
3351                    config->snapshot_basepath,
3352                    config->gmt_format,
3353                    config->use_sscanf ? "yes" : "no",
3354                    config->snapdirseverywhere ? "yes" : "no",
3355                    config->crossmountpoints ? "yes" : "no",
3356                    config->fixinodes ? "yes" : "no",
3357                    config->sort_order
3358                    ));
3359
3360
3361         SMB_VFS_HANDLE_SET_DATA(handle, priv,
3362                                 NULL, struct shadow_copy2_private,
3363                                 return -1);
3364
3365         return 0;
3366 }
3367
3368 static struct dirent *shadow_copy2_readdir(vfs_handle_struct *handle,
3369                                            struct files_struct *dirfsp,
3370                                            DIR *dirp,
3371                                            SMB_STRUCT_STAT *sbuf)
3372 {
3373         struct shadow_copy2_private *priv = NULL;
3374         struct dirent *ent = NULL;
3375         struct smb_filename atname;
3376         struct smb_filename *full_fname = NULL;
3377         time_t timestamp = 0;
3378         char *stripped = NULL;
3379         char *conv = NULL;
3380         char *abspath = NULL;
3381         bool converted = false;
3382
3383         SMB_VFS_HANDLE_GET_DATA(handle, priv, struct shadow_copy2_private,
3384                                 return NULL);
3385
3386         ent = SMB_VFS_NEXT_READDIR(handle, dirfsp, dirp, sbuf);
3387         if (ent == NULL) {
3388                 return NULL;
3389         }
3390         if (sbuf == NULL) {
3391                 return ent;
3392         }
3393         if (ISDOT(dirfsp->fsp_name->base_name) && ISDOTDOT(ent->d_name)) {
3394                 return ent;
3395         }
3396
3397         atname = (struct smb_filename) {
3398                 .base_name = ent->d_name,
3399                 .twrp = dirfsp->fsp_name->twrp,
3400                 .flags = dirfsp->fsp_name->flags,
3401         };
3402
3403         full_fname = full_path_from_dirfsp_atname(talloc_tos(),
3404                                                   dirfsp,
3405                                                   &atname);
3406         if (full_fname == NULL) {
3407                 return NULL;
3408         }
3409
3410         if (!shadow_copy2_strip_snapshot_converted(talloc_tos(),
3411                                                    handle,
3412                                                    full_fname,
3413                                                    &timestamp,
3414                                                    &stripped,
3415                                                    &converted)) {
3416                 TALLOC_FREE(full_fname);
3417                 return NULL;
3418         }
3419
3420         if (timestamp == 0 && !converted) {
3421                 /* Not a snapshot path, no need for convert_sbuf() */
3422                 TALLOC_FREE(stripped);
3423                 TALLOC_FREE(full_fname);
3424                 return ent;
3425         }
3426
3427         if (timestamp == 0) {
3428                 abspath = make_path_absolute(talloc_tos(),
3429                                              priv,
3430                                              full_fname->base_name);
3431                 TALLOC_FREE(full_fname);
3432                 if (abspath == NULL) {
3433                         return NULL;
3434                 }
3435         } else {
3436                 conv = shadow_copy2_convert(talloc_tos(),
3437                                             handle,
3438                                             stripped,
3439                                             timestamp);
3440                 TALLOC_FREE(stripped);
3441                 if (conv == NULL) {
3442                         return NULL;
3443                 }
3444
3445                 abspath = make_path_absolute(talloc_tos(), priv, conv);
3446                 TALLOC_FREE(conv);
3447                 if (abspath == NULL) {
3448                         return NULL;
3449                 }
3450         }
3451
3452         convert_sbuf(handle, abspath, sbuf);
3453
3454         TALLOC_FREE(abspath);
3455         return ent;
3456 }
3457
3458 static struct vfs_fn_pointers vfs_shadow_copy2_fns = {
3459         .connect_fn = shadow_copy2_connect,
3460         .disk_free_fn = shadow_copy2_disk_free,
3461         .get_quota_fn = shadow_copy2_get_quota,
3462         .create_dfs_pathat_fn = shadow_copy2_create_dfs_pathat,
3463         .read_dfs_pathat_fn = shadow_copy2_read_dfs_pathat,
3464         .renameat_fn = shadow_copy2_renameat,
3465         .linkat_fn = shadow_copy2_linkat,
3466         .symlinkat_fn = shadow_copy2_symlinkat,
3467         .stat_fn = shadow_copy2_stat,
3468         .lstat_fn = shadow_copy2_lstat,
3469         .fstat_fn = shadow_copy2_fstat,
3470         .fstatat_fn = shadow_copy2_fstatat,
3471         .openat_fn = shadow_copy2_openat,
3472         .unlinkat_fn = shadow_copy2_unlinkat,
3473         .fchmod_fn = shadow_copy2_fchmod,
3474         .chdir_fn = shadow_copy2_chdir,
3475         .fntimes_fn = shadow_copy2_fntimes,
3476         .readlinkat_fn = shadow_copy2_readlinkat,
3477         .mknodat_fn = shadow_copy2_mknodat,
3478         .realpath_fn = shadow_copy2_realpath,
3479         .get_shadow_copy_data_fn = shadow_copy2_get_shadow_copy_data,
3480         .mkdirat_fn = shadow_copy2_mkdirat,
3481         .fsetxattr_fn = shadow_copy2_fsetxattr,
3482         .fchflags_fn = shadow_copy2_fchflags,
3483         .get_real_filename_at_fn = shadow_copy2_get_real_filename_at,
3484         .pwrite_fn = shadow_copy2_pwrite,
3485         .pwrite_send_fn = shadow_copy2_pwrite_send,
3486         .pwrite_recv_fn = shadow_copy2_pwrite_recv,
3487         .connectpath_fn = shadow_copy2_connectpath,
3488         .parent_pathname_fn = shadow_copy2_parent_pathname,
3489         .readdir_fn = shadow_copy2_readdir,
3490 };
3491
3492 static_decl_vfs;
3493 NTSTATUS vfs_shadow_copy2_init(TALLOC_CTX *ctx)
3494 {
3495         return smb_register_vfs(SMB_VFS_INTERFACE_VERSION,
3496                                 "shadow_copy2", &vfs_shadow_copy2_fns);
3497 }