source3/smbd/trans2.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    SMB transaction2 handling
   4    Copyright (C) Jeremy Allison                 1994-2007
   5    Copyright (C) Stefan (metze) Metzmacher      2003
   6    Copyright (C) Volker Lendecke                2005-2007
   7    Copyright (C) Steve French                   2005
   8    Copyright (C) James Peach                    2006-2007
   9
  10    Extensively modified by Andrew Tridgell, 1995
  11
  12    This program is free software; you can redistribute it and/or modify
  13    it under the terms of the GNU General Public License as published by
  14    the Free Software Foundation; either version 3 of the License, or
  15    (at your option) any later version.
  16
  17    This program is distributed in the hope that it will be useful,
  18    but WITHOUT ANY WARRANTY; without even the implied warranty of
  19    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  20    GNU General Public License for more details.
  21
  22    You should have received a copy of the GNU General Public License
  23    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  24 */
  25
  26 #include "includes.h"
  27 #include "system/filesys.h"
  28 #include "version.h"
  29 #include "smbd/smbd.h"
  30 #include "smbd/globals.h"
  31 #include "../libcli/auth/libcli_auth.h"
  32 #include "../librpc/gen_ndr/xattr.h"
  33 #include "../librpc/gen_ndr/ndr_security.h"
  34 #include "libcli/security/security.h"
  35 #include "trans2.h"
  36 #include "auth.h"
  37 #include "smbprofile.h"
  38 #include "rpc_server/srv_pipe_hnd.h"
  39
  40 #define DIR_ENTRY_SAFETY_MARGIN 4096
  41
  42 static char *store_file_unix_basic(connection_struct *conn,
  43                                 char *pdata,
  44                                 files_struct *fsp,
  45                                 const SMB_STRUCT_STAT *psbuf);
  46
  47 static char *store_file_unix_basic_info2(connection_struct *conn,
  48                                 char *pdata,
  49                                 files_struct *fsp,
  50                                 const SMB_STRUCT_STAT *psbuf);
  51
  52 /********************************************************************
  53  Roundup a value to the nearest allocation roundup size boundary.
  54  Only do this for Windows clients.
  55 ********************************************************************/
  56
  57 uint64_t smb_roundup(connection_struct *conn, uint64_t val)
  58 {
  59         uint64_t rval = lp_allocation_roundup_size(SNUM(conn));
  60
  61         /* Only roundup for Windows clients. */
  62         enum remote_arch_types ra_type = get_remote_arch();
  63         if (rval && (ra_type != RA_SAMBA) && (ra_type != RA_CIFSFS)) {
  64                 val = SMB_ROUNDUP(val,rval);
  65         }
  66         return val;
  67 }
  68
  69 /********************************************************************
  70  Create a 64 bit FileIndex. If the file is on the same device as
  71  the root of the share, just return the 64-bit inode. If it isn't,
  72  mangle as we used to do.
  73 ********************************************************************/
  74
  75 uint64_t get_FileIndex(connection_struct *conn, const SMB_STRUCT_STAT *psbuf)
  76 {
  77         uint64_t file_index;
  78         if (conn->base_share_dev == psbuf->st_ex_dev) {
  79                 return (uint64_t)psbuf->st_ex_ino;
  80         }
  81         file_index = ((psbuf->st_ex_ino) & UINT32_MAX); /* FileIndexLow */
  82         file_index |= ((uint64_t)((psbuf->st_ex_dev) & UINT32_MAX)) << 32; /* FileIndexHigh */
  83         return file_index;
  84 }
  85
  86 /****************************************************************************
  87  Utility functions for dealing with extended attributes.
  88 ****************************************************************************/
  89
  90 /****************************************************************************
  91  Refuse to allow clients to overwrite our private xattrs.
  92 ****************************************************************************/
  93
  94 static bool samba_private_attr_name(const char *unix_ea_name)
  95 {
  96         static const char * const prohibited_ea_names[] = {
  97                 SAMBA_POSIX_INHERITANCE_EA_NAME,
  98                 SAMBA_XATTR_DOS_ATTRIB,
  99                 SAMBA_XATTR_MARKER,
 100                 XATTR_NTACL_NAME,
 101                 NULL
 102         };
 103
 104         int i;
 105
 106         for (i = 0; prohibited_ea_names[i]; i++) {
 107                 if (strequal( prohibited_ea_names[i], unix_ea_name))
 108                         return true;
 109         }
 110         if (strncasecmp_m(unix_ea_name, SAMBA_XATTR_DOSSTREAM_PREFIX,
 111                         strlen(SAMBA_XATTR_DOSSTREAM_PREFIX)) == 0) {
 112                 return true;
 113         }
 114         return false;
 115 }
 116
 117 /****************************************************************************
 118  Get one EA value. Fill in a struct ea_struct.
 119 ****************************************************************************/
 120
 121 NTSTATUS get_ea_value(TALLOC_CTX *mem_ctx, connection_struct *conn,
 122                       files_struct *fsp, const char *fname,
 123                       const char *ea_name, struct ea_struct *pea)
 124 {
 125         /* Get the value of this xattr. Max size is 64k. */
 126         size_t attr_size = 256;
 127         char *val = NULL;
 128         ssize_t sizeret;
 129
 130  again:
 131
 132         val = talloc_realloc(mem_ctx, val, char, attr_size);
 133         if (!val) {
 134                 return NT_STATUS_NO_MEMORY;
 135         }
 136
 137         if (fsp && fsp->fh->fd != -1) {
 138                 sizeret = SMB_VFS_FGETXATTR(fsp, ea_name, val, attr_size);
 139         } else {
 140                 sizeret = SMB_VFS_GETXATTR(conn, fname, ea_name, val, attr_size);
 141         }
 142
 143         if (sizeret == -1 && errno == ERANGE && attr_size != 65536) {
 144                 attr_size = 65536;
 145                 goto again;
 146         }
 147
 148         if (sizeret == -1) {
 149                 return map_nt_error_from_unix(errno);
 150         }
 151
 152         DEBUG(10,("get_ea_value: EA %s is of length %u\n", ea_name, (unsigned int)sizeret));
 153         dump_data(10, (uint8 *)val, sizeret);
 154
 155         pea->flags = 0;
 156         if (strnequal(ea_name, "user.", 5)) {
 157                 pea->name = talloc_strdup(mem_ctx, &ea_name[5]);
 158         } else {
 159                 pea->name = talloc_strdup(mem_ctx, ea_name);
 160         }
 161         if (pea->name == NULL) {
 162                 TALLOC_FREE(val);
 163                 return NT_STATUS_NO_MEMORY;
 164         }
 165         pea->value.data = (unsigned char *)val;
 166         pea->value.length = (size_t)sizeret;
 167         return NT_STATUS_OK;
 168 }
 169
 170 NTSTATUS get_ea_names_from_file(TALLOC_CTX *mem_ctx, connection_struct *conn,
 171                                 files_struct *fsp, const char *fname,
 172                                 char ***pnames, size_t *pnum_names)
 173 {
 174         /* Get a list of all xattrs. Max namesize is 64k. */
 175         size_t ea_namelist_size = 1024;
 176         char *ea_namelist = NULL;
 177
 178         char *p;
 179         char **names, **tmp;
 180         size_t num_names;
 181         ssize_t sizeret = -1;
 182
 183         if (!lp_ea_support(SNUM(conn))) {
 184                 if (pnames) {
 185                         *pnames = NULL;
 186                 }
 187                 *pnum_names = 0;
 188                 return NT_STATUS_OK;
 189         }
 190
 191         /*
 192          * TALLOC the result early to get the talloc hierarchy right.
 193          */
 194
 195         names = talloc_array(mem_ctx, char *, 1);
 196         if (names == NULL) {
 197                 DEBUG(0, ("talloc failed\n"));
 198                 return NT_STATUS_NO_MEMORY;
 199         }
 200
 201         while (ea_namelist_size <= 65536) {
 202
 203                 ea_namelist = talloc_realloc(
 204                         names, ea_namelist, char, ea_namelist_size);
 205                 if (ea_namelist == NULL) {
 206                         DEBUG(0, ("talloc failed\n"));
 207                         TALLOC_FREE(names);
 208                         return NT_STATUS_NO_MEMORY;
 209                 }
 210
 211                 if (fsp && fsp->fh->fd != -1) {
 212                         sizeret = SMB_VFS_FLISTXATTR(fsp, ea_namelist,
 213                                                      ea_namelist_size);
 214                 } else {
 215                         sizeret = SMB_VFS_LISTXATTR(conn, fname, ea_namelist,
 216                                                     ea_namelist_size);
 217                 }
 218
 219                 if ((sizeret == -1) && (errno == ERANGE)) {
 220                         ea_namelist_size *= 2;
 221                 }
 222                 else {
 223                         break;
 224                 }
 225         }
 226
 227         if (sizeret == -1) {
 228                 TALLOC_FREE(names);
 229                 return map_nt_error_from_unix(errno);
 230         }
 231
 232         DEBUG(10, ("get_ea_list_from_file: ea_namelist size = %u\n",
 233                    (unsigned int)sizeret));
 234
 235         if (sizeret == 0) {
 236                 TALLOC_FREE(names);
 237                 if (pnames) {
 238                         *pnames = NULL;
 239                 }
 240                 *pnum_names = 0;
 241                 return NT_STATUS_OK;
 242         }
 243
 244         /*
 245          * Ensure the result is 0-terminated
 246          */
 247
 248         if (ea_namelist[sizeret-1] != '\0') {
 249                 TALLOC_FREE(names);
 250                 return NT_STATUS_INTERNAL_ERROR;
 251         }
 252
 253         /*
 254          * count the names
 255          */
 256         num_names = 0;
 257
 258         for (p = ea_namelist; p - ea_namelist < sizeret; p += strlen(p)+1) {
 259                 num_names += 1;
 260         }
 261
 262         tmp = talloc_realloc(mem_ctx, names, char *, num_names);
 263         if (tmp == NULL) {
 264                 DEBUG(0, ("talloc failed\n"));
 265                 TALLOC_FREE(names);
 266                 return NT_STATUS_NO_MEMORY;
 267         }
 268
 269         names = tmp;
 270         num_names = 0;
 271
 272         for (p = ea_namelist; p - ea_namelist < sizeret; p += strlen(p)+1) {
 273                 names[num_names++] = p;
 274         }
 275
 276         if (pnames) {
 277                 *pnames = names;
 278         } else {
 279                 TALLOC_FREE(names);
 280         }
 281         *pnum_names = num_names;
 282         return NT_STATUS_OK;
 283 }
 284
 285 /****************************************************************************
 286  Return a linked list of the total EA's. Plus the total size
 287 ****************************************************************************/
 288
 289 static struct ea_list *get_ea_list_from_file(TALLOC_CTX *mem_ctx, connection_struct *conn, files_struct *fsp,
 290                                         const char *fname, size_t *pea_total_len)
 291 {
 292         /* Get a list of all xattrs. Max namesize is 64k. */
 293         size_t i, num_names;
 294         char **names;
 295         struct ea_list *ea_list_head = NULL;
 296         NTSTATUS status;
 297
 298         *pea_total_len = 0;
 299
 300         if (!lp_ea_support(SNUM(conn))) {
 301                 return NULL;
 302         }
 303
 304         status = get_ea_names_from_file(talloc_tos(), conn, fsp, fname,
 305                                         &names, &num_names);
 306
 307         if (!NT_STATUS_IS_OK(status) || (num_names == 0)) {
 308                 return NULL;
 309         }
 310
 311         for (i=0; i<num_names; i++) {
 312                 struct ea_list *listp;
 313                 fstring dos_ea_name;
 314
 315                 if (strnequal(names[i], "system.", 7)
 316                     || samba_private_attr_name(names[i]))
 317                         continue;
 318
 319                 listp = talloc(mem_ctx, struct ea_list);
 320                 if (listp == NULL) {
 321                         return NULL;
 322                 }
 323
 324                 if (!NT_STATUS_IS_OK(get_ea_value(mem_ctx, conn, fsp,
 325                                                   fname, names[i],
 326                                                   &listp->ea))) {
 327                         return NULL;
 328                 }
 329
 330                 push_ascii_fstring(dos_ea_name, listp->ea.name);
 331
 332                 *pea_total_len +=
 333                         4 + strlen(dos_ea_name) + 1 + listp->ea.value.length;
 334
 335                 DEBUG(10,("get_ea_list_from_file: total_len = %u, %s, val len "
 336                           "= %u\n", (unsigned int)*pea_total_len, dos_ea_name,
 337                           (unsigned int)listp->ea.value.length));
 338
 339                 DLIST_ADD_END(ea_list_head, listp, struct ea_list *);
 340
 341         }
 342
 343         /* Add on 4 for total length. */
 344         if (*pea_total_len) {
 345                 *pea_total_len += 4;
 346         }
 347
 348         DEBUG(10, ("get_ea_list_from_file: total_len = %u\n",
 349                    (unsigned int)*pea_total_len));
 350
 351         return ea_list_head;
 352 }
 353
 354 /****************************************************************************
 355  Fill a qfilepathinfo buffer with EA's. Returns the length of the buffer
 356  that was filled.
 357 ****************************************************************************/
 358
 359 static unsigned int fill_ea_buffer(TALLOC_CTX *mem_ctx, char *pdata, unsigned int total_data_size,
 360         connection_struct *conn, struct ea_list *ea_list)
 361 {
 362         unsigned int ret_data_size = 4;
 363         char *p = pdata;
 364
 365         SMB_ASSERT(total_data_size >= 4);
 366
 367         if (!lp_ea_support(SNUM(conn))) {
 368                 SIVAL(pdata,4,0);
 369                 return 4;
 370         }
 371
 372         for (p = pdata + 4; ea_list; ea_list = ea_list->next) {
 373                 size_t dos_namelen;
 374                 fstring dos_ea_name;
 375                 push_ascii_fstring(dos_ea_name, ea_list->ea.name);
 376                 dos_namelen = strlen(dos_ea_name);
 377                 if (dos_namelen > 255 || dos_namelen == 0) {
 378                         break;
 379                 }
 380                 if (ea_list->ea.value.length > 65535) {
 381                         break;
 382                 }
 383                 if (4 + dos_namelen + 1 + ea_list->ea.value.length > total_data_size) {
 384                         break;
 385                 }
 386
 387                 /* We know we have room. */
 388                 SCVAL(p,0,ea_list->ea.flags);
 389                 SCVAL(p,1,dos_namelen);
 390                 SSVAL(p,2,ea_list->ea.value.length);
 391                 strlcpy(p+4, dos_ea_name, dos_namelen+1);
 392                 memcpy( p + 4 + dos_namelen + 1, ea_list->ea.value.data, ea_list->ea.value.length);
 393
 394                 total_data_size -= 4 + dos_namelen + 1 + ea_list->ea.value.length;
 395                 p += 4 + dos_namelen + 1 + ea_list->ea.value.length;
 396         }
 397
 398         ret_data_size = PTR_DIFF(p, pdata);
 399         DEBUG(10,("fill_ea_buffer: data_size = %u\n", ret_data_size ));
 400         SIVAL(pdata,0,ret_data_size);
 401         return ret_data_size;
 402 }
 403
 404 static NTSTATUS fill_ea_chained_buffer(TALLOC_CTX *mem_ctx,
 405                                        char *pdata,
 406                                        unsigned int total_data_size,
 407                                        unsigned int *ret_data_size,
 408                                        connection_struct *conn,
 409                                        struct ea_list *ea_list)
 410 {
 411         uint8_t *p = (uint8_t *)pdata;
 412         uint8_t *last_start = NULL;
 413
 414         *ret_data_size = 0;
 415
 416         if (!lp_ea_support(SNUM(conn))) {
 417                 return NT_STATUS_NO_EAS_ON_FILE;
 418         }
 419
 420         for (; ea_list; ea_list = ea_list->next) {
 421                 size_t dos_namelen;
 422                 fstring dos_ea_name;
 423                 size_t this_size;
 424
 425                 if (last_start) {
 426                         SIVAL(last_start, 0, PTR_DIFF(p, last_start));
 427                 }
 428                 last_start = p;
 429
 430                 push_ascii_fstring(dos_ea_name, ea_list->ea.name);
 431                 dos_namelen = strlen(dos_ea_name);
 432                 if (dos_namelen > 255 || dos_namelen == 0) {
 433                         return NT_STATUS_INTERNAL_ERROR;
 434                 }
 435                 if (ea_list->ea.value.length > 65535) {
 436                         return NT_STATUS_INTERNAL_ERROR;
 437                 }
 438
 439                 this_size = 0x08 + dos_namelen + 1 + ea_list->ea.value.length;
 440
 441                 if (ea_list->next) {
 442                         size_t pad = 4 - (this_size % 4);
 443                         this_size += pad;
 444                 }
 445
 446                 if (this_size > total_data_size) {
 447                         return NT_STATUS_INFO_LENGTH_MISMATCH;
 448                 }
 449
 450                 /* We know we have room. */
 451                 SIVAL(p, 0x00, 0); /* next offset */
 452                 SCVAL(p, 0x04, ea_list->ea.flags);
 453                 SCVAL(p, 0x05, dos_namelen);
 454                 SSVAL(p, 0x06, ea_list->ea.value.length);
 455                 strlcpy((char *)(p+0x08), dos_ea_name, dos_namelen+1);
 456                 memcpy(p + 0x08 + dos_namelen + 1, ea_list->ea.value.data, ea_list->ea.value.length);
 457
 458                 total_data_size -= this_size;
 459                 p += this_size;
 460         }
 461
 462         *ret_data_size = PTR_DIFF(p, pdata);
 463         DEBUG(10,("fill_ea_chained_buffer: data_size = %u\n", *ret_data_size));
 464         return NT_STATUS_OK;
 465 }
 466
 467 static unsigned int estimate_ea_size(connection_struct *conn, files_struct *fsp, const char *fname)
 468 {
 469         size_t total_ea_len = 0;
 470         TALLOC_CTX *mem_ctx = NULL;
 471
 472         if (!lp_ea_support(SNUM(conn))) {
 473                 return 0;
 474         }
 475         mem_ctx = talloc_tos();
 476         (void)get_ea_list_from_file(mem_ctx, conn, fsp, fname, &total_ea_len);
 477         return total_ea_len;
 478 }
 479
 480 /****************************************************************************
 481  Ensure the EA name is case insensitive by matching any existing EA name.
 482 ****************************************************************************/
 483
 484 static void canonicalize_ea_name(connection_struct *conn, files_struct *fsp, const char *fname, fstring unix_ea_name)
 485 {
 486         size_t total_ea_len;
 487         TALLOC_CTX *mem_ctx = talloc_tos();
 488         struct ea_list *ea_list = get_ea_list_from_file(mem_ctx, conn, fsp, fname, &total_ea_len);
 489
 490         for (; ea_list; ea_list = ea_list->next) {
 491                 if (strequal(&unix_ea_name[5], ea_list->ea.name)) {
 492                         DEBUG(10,("canonicalize_ea_name: %s -> %s\n",
 493                                 &unix_ea_name[5], ea_list->ea.name));
 494                         strlcpy(&unix_ea_name[5], ea_list->ea.name, sizeof(fstring)-5);
 495                         break;
 496                 }
 497         }
 498 }
 499
 500 /****************************************************************************
 501  Set or delete an extended attribute.
 502 ****************************************************************************/
 503
 504 NTSTATUS set_ea(connection_struct *conn, files_struct *fsp,
 505                 const struct smb_filename *smb_fname, struct ea_list *ea_list)
 506 {
 507         char *fname = NULL;
 508
 509         if (!lp_ea_support(SNUM(conn))) {
 510                 return NT_STATUS_EAS_NOT_SUPPORTED;
 511         }
 512
 513         if (fsp && !(fsp->access_mask & FILE_WRITE_EA)) {
 514                 return NT_STATUS_ACCESS_DENIED;
 515         }
 516
 517         /* For now setting EAs on streams isn't supported. */
 518         fname = smb_fname->base_name;
 519
 520         for (;ea_list; ea_list = ea_list->next) {
 521                 int ret;
 522                 fstring unix_ea_name;
 523
 524                 fstrcpy(unix_ea_name, "user."); /* All EA's must start with user. */
 525                 fstrcat(unix_ea_name, ea_list->ea.name);
 526
 527                 canonicalize_ea_name(conn, fsp, fname, unix_ea_name);
 528
 529                 DEBUG(10,("set_ea: ea_name %s ealen = %u\n", unix_ea_name, (unsigned int)ea_list->ea.value.length));
 530
 531                 if (samba_private_attr_name(unix_ea_name)) {
 532                         DEBUG(10,("set_ea: ea name %s is a private Samba name.\n", unix_ea_name));
 533                         return NT_STATUS_ACCESS_DENIED;
 534                 }
 535
 536                 if (ea_list->ea.value.length == 0) {
 537                         /* Remove the attribute. */
 538                         if (fsp && (fsp->fh->fd != -1)) {
 539                                 DEBUG(10,("set_ea: deleting ea name %s on "
 540                                           "file %s by file descriptor.\n",
 541                                           unix_ea_name, fsp_str_dbg(fsp)));
 542                                 ret = SMB_VFS_FREMOVEXATTR(fsp, unix_ea_name);
 543                         } else {
 544                                 DEBUG(10,("set_ea: deleting ea name %s on file %s.\n",
 545                                         unix_ea_name, fname));
 546                                 ret = SMB_VFS_REMOVEXATTR(conn, fname, unix_ea_name);
 547                         }
 548 #ifdef ENOATTR
 549                         /* Removing a non existent attribute always succeeds. */
 550                         if (ret == -1 && errno == ENOATTR) {
 551                                 DEBUG(10,("set_ea: deleting ea name %s didn't exist - succeeding by default.\n",
 552                                                 unix_ea_name));
 553                                 ret = 0;
 554                         }
 555 #endif
 556                 } else {
 557                         if (fsp && (fsp->fh->fd != -1)) {
 558                                 DEBUG(10,("set_ea: setting ea name %s on file "
 559                                           "%s by file descriptor.\n",
 560                                           unix_ea_name, fsp_str_dbg(fsp)));
 561                                 ret = SMB_VFS_FSETXATTR(fsp, unix_ea_name,
 562                                                         ea_list->ea.value.data, ea_list->ea.value.length, 0);
 563                         } else {
 564                                 DEBUG(10,("set_ea: setting ea name %s on file %s.\n",
 565                                         unix_ea_name, fname));
 566                                 ret = SMB_VFS_SETXATTR(conn, fname, unix_ea_name,
 567                                                         ea_list->ea.value.data, ea_list->ea.value.length, 0);
 568                         }
 569                 }
 570
 571                 if (ret == -1) {
 572 #ifdef ENOTSUP
 573                         if (errno == ENOTSUP) {
 574                                 return NT_STATUS_EAS_NOT_SUPPORTED;
 575                         }
 576 #endif
 577                         return map_nt_error_from_unix(errno);
 578                 }
 579
 580         }
 581         return NT_STATUS_OK;
 582 }
 583 /****************************************************************************
 584  Read a list of EA names from an incoming data buffer. Create an ea_list with them.
 585 ****************************************************************************/
 586
 587 static struct ea_list *read_ea_name_list(TALLOC_CTX *ctx, const char *pdata, size_t data_size)
 588 {
 589         struct ea_list *ea_list_head = NULL;
 590         size_t converted_size, offset = 0;
 591
 592         while (offset + 2 < data_size) {
 593                 struct ea_list *eal = talloc_zero(ctx, struct ea_list);
 594                 unsigned int namelen = CVAL(pdata,offset);
 595
 596                 offset++; /* Go past the namelen byte. */
 597
 598                 /* integer wrap paranioa. */
 599                 if ((offset + namelen < offset) || (offset + namelen < namelen) ||
 600                                 (offset > data_size) || (namelen > data_size) ||
 601                                 (offset + namelen >= data_size)) {
 602                         break;
 603                 }
 604                 /* Ensure the name is null terminated. */
 605                 if (pdata[offset + namelen] != '\0') {
 606                         return NULL;
 607                 }
 608                 if (!pull_ascii_talloc(ctx, &eal->ea.name, &pdata[offset],
 609                                        &converted_size)) {
 610                         DEBUG(0,("read_ea_name_list: pull_ascii_talloc "
 611                                  "failed: %s", strerror(errno)));
 612                 }
 613                 if (!eal->ea.name) {
 614                         return NULL;
 615                 }
 616
 617                 offset += (namelen + 1); /* Go past the name + terminating zero. */
 618                 DLIST_ADD_END(ea_list_head, eal, struct ea_list *);
 619                 DEBUG(10,("read_ea_name_list: read ea name %s\n", eal->ea.name));
 620         }
 621
 622         return ea_list_head;
 623 }
 624
 625 /****************************************************************************
 626  Read one EA list entry from the buffer.
 627 ****************************************************************************/
 628
 629 struct ea_list *read_ea_list_entry(TALLOC_CTX *ctx, const char *pdata, size_t data_size, size_t *pbytes_used)
 630 {
 631         struct ea_list *eal = talloc_zero(ctx, struct ea_list);
 632         uint16 val_len;
 633         unsigned int namelen;
 634         size_t converted_size;
 635
 636         if (!eal) {
 637                 return NULL;
 638         }
 639
 640         if (data_size < 6) {
 641                 return NULL;
 642         }
 643
 644         eal->ea.flags = CVAL(pdata,0);
 645         namelen = CVAL(pdata,1);
 646         val_len = SVAL(pdata,2);
 647
 648         if (4 + namelen + 1 + val_len > data_size) {
 649                 return NULL;
 650         }
 651
 652         /* Ensure the name is null terminated. */
 653         if (pdata[namelen + 4] != '\0') {
 654                 return NULL;
 655         }
 656         if (!pull_ascii_talloc(ctx, &eal->ea.name, pdata + 4, &converted_size)) {
 657                 DEBUG(0,("read_ea_list_entry: pull_ascii_talloc failed: %s",
 658                          strerror(errno)));
 659         }
 660         if (!eal->ea.name) {
 661                 return NULL;
 662         }
 663
 664         eal->ea.value = data_blob_talloc(eal, NULL, (size_t)val_len + 1);
 665         if (!eal->ea.value.data) {
 666                 return NULL;
 667         }
 668
 669         memcpy(eal->ea.value.data, pdata + 4 + namelen + 1, val_len);
 670
 671         /* Ensure we're null terminated just in case we print the value. */
 672         eal->ea.value.data[val_len] = '\0';
 673         /* But don't count the null. */
 674         eal->ea.value.length--;
 675
 676         if (pbytes_used) {
 677                 *pbytes_used = 4 + namelen + 1 + val_len;
 678         }
 679
 680         DEBUG(10,("read_ea_list_entry: read ea name %s\n", eal->ea.name));
 681         dump_data(10, eal->ea.value.data, eal->ea.value.length);
 682
 683         return eal;
 684 }
 685
 686 /****************************************************************************
 687  Read a list of EA names and data from an incoming data buffer. Create an ea_list with them.
 688 ****************************************************************************/
 689
 690 static struct ea_list *read_ea_list(TALLOC_CTX *ctx, const char *pdata, size_t data_size)
 691 {
 692         struct ea_list *ea_list_head = NULL;
 693         size_t offset = 0;
 694         size_t bytes_used = 0;
 695
 696         while (offset < data_size) {
 697                 struct ea_list *eal = read_ea_list_entry(ctx, pdata + offset, data_size - offset, &bytes_used);
 698
 699                 if (!eal) {
 700                         return NULL;
 701                 }
 702
 703                 DLIST_ADD_END(ea_list_head, eal, struct ea_list *);
 704                 offset += bytes_used;
 705         }
 706
 707         return ea_list_head;
 708 }
 709
 710 /****************************************************************************
 711  Count the total EA size needed.
 712 ****************************************************************************/
 713
 714 static size_t ea_list_size(struct ea_list *ealist)
 715 {
 716         fstring dos_ea_name;
 717         struct ea_list *listp;
 718         size_t ret = 0;
 719
 720         for (listp = ealist; listp; listp = listp->next) {
 721                 push_ascii_fstring(dos_ea_name, listp->ea.name);
 722                 ret += 4 + strlen(dos_ea_name) + 1 + listp->ea.value.length;
 723         }
 724         /* Add on 4 for total length. */
 725         if (ret) {
 726                 ret += 4;
 727         }
 728
 729         return ret;
 730 }
 731
 732 /****************************************************************************
 733  Return a union of EA's from a file list and a list of names.
 734  The TALLOC context for the two lists *MUST* be identical as we steal
 735  memory from one list to add to another. JRA.
 736 ****************************************************************************/
 737
 738 static struct ea_list *ea_list_union(struct ea_list *name_list, struct ea_list *file_list, size_t *total_ea_len)
 739 {
 740         struct ea_list *nlistp, *flistp;
 741
 742         for (nlistp = name_list; nlistp; nlistp = nlistp->next) {
 743                 for (flistp = file_list; flistp; flistp = flistp->next) {
 744                         if (strequal(nlistp->ea.name, flistp->ea.name)) {
 745                                 break;
 746                         }
 747                 }
 748
 749                 if (flistp) {
 750                         /* Copy the data from this entry. */
 751                         nlistp->ea.flags = flistp->ea.flags;
 752                         nlistp->ea.value = flistp->ea.value;
 753                 } else {
 754                         /* Null entry. */
 755                         nlistp->ea.flags = 0;
 756                         ZERO_STRUCT(nlistp->ea.value);
 757                 }
 758         }
 759
 760         *total_ea_len = ea_list_size(name_list);
 761         return name_list;
 762 }
 763
 764 /****************************************************************************
 765   Send the required number of replies back.
 766   We assume all fields other than the data fields are
 767   set correctly for the type of call.
 768   HACK ! Always assumes smb_setup field is zero.
 769 ****************************************************************************/
 770
 771 void send_trans2_replies(connection_struct *conn,
 772                         struct smb_request *req,
 773                          const char *params,
 774                          int paramsize,
 775                          const char *pdata,
 776                          int datasize,
 777                          int max_data_bytes)
 778 {
 779         /* As we are using a protocol > LANMAN1 then the max_send
 780          variable must have been set in the sessetupX call.
 781          This takes precedence over the max_xmit field in the
 782          global struct. These different max_xmit variables should
 783          be merged as this is now too confusing */
 784
 785         int data_to_send = datasize;
 786         int params_to_send = paramsize;
 787         int useable_space;
 788         const char *pp = params;
 789         const char *pd = pdata;
 790         int params_sent_thistime, data_sent_thistime, total_sent_thistime;
 791         int alignment_offset = 1; /* JRA. This used to be 3. Set to 1 to make netmon parse ok. */
 792         int data_alignment_offset = 0;
 793         bool overflow = False;
 794         struct smbd_server_connection *sconn = req->sconn;
 795         int max_send = sconn->smb1.sessions.max_send;
 796
 797         /* Modify the data_to_send and datasize and set the error if
 798            we're trying to send more than max_data_bytes. We still send
 799            the part of the packet(s) that fit. Strange, but needed
 800            for OS/2. */
 801
 802         if (max_data_bytes > 0 && datasize > max_data_bytes) {
 803                 DEBUG(5,("send_trans2_replies: max_data_bytes %d exceeded by data %d\n",
 804                         max_data_bytes, datasize ));
 805                 datasize = data_to_send = max_data_bytes;
 806                 overflow = True;
 807         }
 808
 809         /* If there genuinely are no parameters or data to send just send the empty packet */
 810
 811         if(params_to_send == 0 && data_to_send == 0) {
 812                 reply_outbuf(req, 10, 0);
 813                 show_msg((char *)req->outbuf);
 814                 if (!srv_send_smb(sconn,
 815                                 (char *)req->outbuf,
 816                                 true, req->seqnum+1,
 817                                 IS_CONN_ENCRYPTED(conn),
 818                                 &req->pcd)) {
 819                         exit_server_cleanly("send_trans2_replies: srv_send_smb failed.");
 820                 }
 821                 TALLOC_FREE(req->outbuf);
 822                 return;
 823         }
 824
 825         /* When sending params and data ensure that both are nicely aligned */
 826         /* Only do this alignment when there is also data to send - else
 827                 can cause NT redirector problems. */
 828
 829         if (((params_to_send % 4) != 0) && (data_to_send != 0))
 830                 data_alignment_offset = 4 - (params_to_send % 4);
 831
 832         /* Space is bufsize minus Netbios over TCP header minus SMB header */
 833         /* The alignment_offset is to align the param bytes on an even byte
 834                 boundary. NT 4.0 Beta needs this to work correctly. */
 835
 836         useable_space = max_send - (smb_size
 837                                     + 2 * 10 /* wct */
 838                                     + alignment_offset
 839                                     + data_alignment_offset);
 840
 841         if (useable_space < 0) {
 842                 DEBUG(0, ("send_trans2_replies failed sanity useable_space "
 843                           "= %d!!!", useable_space));
 844                 exit_server_cleanly("send_trans2_replies: Not enough space");
 845         }
 846
 847         while (params_to_send || data_to_send) {
 848                 /* Calculate whether we will totally or partially fill this packet */
 849
 850                 total_sent_thistime = params_to_send + data_to_send;
 851
 852                 /* We can never send more than useable_space */
 853                 /*
 854                  * Note that 'useable_space' does not include the alignment offsets,
 855                  * but we must include the alignment offsets in the calculation of
 856                  * the length of the data we send over the wire, as the alignment offsets
 857                  * are sent here. Fix from Marc_Jacobsen@hp.com.
 858                  */
 859
 860                 total_sent_thistime = MIN(total_sent_thistime, useable_space);
 861
 862                 reply_outbuf(req, 10, total_sent_thistime + alignment_offset
 863                              + data_alignment_offset);
 864
 865                 /*
 866                  * We might have SMBtrans2s in req which was transferred to
 867                  * the outbuf, fix that.
 868                  */
 869                 SCVAL(req->outbuf, smb_com, SMBtrans2);
 870
 871                 /* Set total params and data to be sent */
 872                 SSVAL(req->outbuf,smb_tprcnt,paramsize);
 873                 SSVAL(req->outbuf,smb_tdrcnt,datasize);
 874
 875                 /* Calculate how many parameters and data we can fit into
 876                  * this packet. Parameters get precedence
 877                  */
 878
 879                 params_sent_thistime = MIN(params_to_send,useable_space);
 880                 data_sent_thistime = useable_space - params_sent_thistime;
 881                 data_sent_thistime = MIN(data_sent_thistime,data_to_send);
 882
 883                 SSVAL(req->outbuf,smb_prcnt, params_sent_thistime);
 884
 885                 /* smb_proff is the offset from the start of the SMB header to the
 886                         parameter bytes, however the first 4 bytes of outbuf are
 887                         the Netbios over TCP header. Thus use smb_base() to subtract
 888                         them from the calculation */
 889
 890                 SSVAL(req->outbuf,smb_proff,
 891                       ((smb_buf(req->outbuf)+alignment_offset)
 892                        - smb_base(req->outbuf)));
 893
 894                 if(params_sent_thistime == 0)
 895                         SSVAL(req->outbuf,smb_prdisp,0);
 896                 else
 897                         /* Absolute displacement of param bytes sent in this packet */
 898                         SSVAL(req->outbuf,smb_prdisp,pp - params);
 899
 900                 SSVAL(req->outbuf,smb_drcnt, data_sent_thistime);
 901                 if(data_sent_thistime == 0) {
 902                         SSVAL(req->outbuf,smb_droff,0);
 903                         SSVAL(req->outbuf,smb_drdisp, 0);
 904                 } else {
 905                         /* The offset of the data bytes is the offset of the
 906                                 parameter bytes plus the number of parameters being sent this time */
 907                         SSVAL(req->outbuf, smb_droff,
 908                               ((smb_buf(req->outbuf)+alignment_offset)
 909                                - smb_base(req->outbuf))
 910                               + params_sent_thistime + data_alignment_offset);
 911                         SSVAL(req->outbuf,smb_drdisp, pd - pdata);
 912                 }
 913
 914                 /* Initialize the padding for alignment */
 915
 916                 if (alignment_offset != 0) {
 917                         memset(smb_buf(req->outbuf), 0, alignment_offset);
 918                 }
 919
 920                 /* Copy the param bytes into the packet */
 921
 922                 if(params_sent_thistime) {
 923                         memcpy((smb_buf(req->outbuf)+alignment_offset), pp,
 924                                params_sent_thistime);
 925                 }
 926
 927                 /* Copy in the data bytes */
 928                 if(data_sent_thistime) {
 929                         if (data_alignment_offset != 0) {
 930                                 memset((smb_buf(req->outbuf)+alignment_offset+
 931                                         params_sent_thistime), 0,
 932                                        data_alignment_offset);
 933                         }
 934                         memcpy(smb_buf(req->outbuf)+alignment_offset
 935                                +params_sent_thistime+data_alignment_offset,
 936                                pd,data_sent_thistime);
 937                 }
 938
 939                 DEBUG(9,("t2_rep: params_sent_thistime = %d, data_sent_thistime = %d, useable_space = %d\n",
 940                         params_sent_thistime, data_sent_thistime, useable_space));
 941                 DEBUG(9,("t2_rep: params_to_send = %d, data_to_send = %d, paramsize = %d, datasize = %d\n",
 942                         params_to_send, data_to_send, paramsize, datasize));
 943
 944                 if (overflow) {
 945                         error_packet_set((char *)req->outbuf,
 946                                          ERRDOS,ERRbufferoverflow,
 947                                          STATUS_BUFFER_OVERFLOW,
 948                                          __LINE__,__FILE__);
 949                 }
 950
 951                 /* Send the packet */
 952                 show_msg((char *)req->outbuf);
 953                 if (!srv_send_smb(sconn,
 954                                 (char *)req->outbuf,
 955                                 true, req->seqnum+1,
 956                                 IS_CONN_ENCRYPTED(conn),
 957                                 &req->pcd))
 958                         exit_server_cleanly("send_trans2_replies: srv_send_smb failed.");
 959
 960                 TALLOC_FREE(req->outbuf);
 961
 962                 pp += params_sent_thistime;
 963                 pd += data_sent_thistime;
 964
 965                 params_to_send -= params_sent_thistime;
 966                 data_to_send -= data_sent_thistime;
 967
 968                 /* Sanity check */
 969                 if(params_to_send < 0 || data_to_send < 0) {
 970                         DEBUG(0,("send_trans2_replies failed sanity check pts = %d, dts = %d\n!!!",
 971                                 params_to_send, data_to_send));
 972                         return;
 973                 }
 974         }
 975
 976         return;
 977 }
 978
 979 /****************************************************************************
 980  Reply to a TRANSACT2_OPEN.
 981 ****************************************************************************/
 982
 983 static void call_trans2open(connection_struct *conn,
 984                             struct smb_request *req,
 985                             char **pparams, int total_params,
 986                             char **ppdata, int total_data,
 987                             unsigned int max_data_bytes)
 988 {
 989         struct smb_filename *smb_fname = NULL;
 990         char *params = *pparams;
 991         char *pdata = *ppdata;
 992         int deny_mode;
 993         int32 open_attr;
 994         bool oplock_request;
 995 #if 0
 996         bool return_additional_info;
 997         int16 open_sattr;
 998         time_t open_time;
 999 #endif
1000         int open_ofun;
1001         uint32 open_size;
1002         char *pname;
1003         char *fname = NULL;
1004         SMB_OFF_T size=0;
1005         int fattr=0,mtime=0;
1006         SMB_INO_T inode = 0;
1007         int smb_action = 0;
1008         files_struct *fsp;
1009         struct ea_list *ea_list = NULL;
1010         uint16 flags = 0;
1011         NTSTATUS status;
1012         uint32 access_mask;
1013         uint32 share_mode;
1014         uint32 create_disposition;
1015         uint32 create_options = 0;
1016         uint32_t private_flags = 0;
1017         TALLOC_CTX *ctx = talloc_tos();
1018
1019         /*
1020          * Ensure we have enough parameters to perform the operation.
1021          */
1022
1023         if (total_params < 29) {
1024                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
1025                 goto out;
1026         }
1027
1028         flags = SVAL(params, 0);
1029         deny_mode = SVAL(params, 2);
1030         open_attr = SVAL(params,6);
1031         oplock_request = (flags & REQUEST_OPLOCK) ? EXCLUSIVE_OPLOCK : 0;
1032         if (oplock_request) {
1033                 oplock_request |= (flags & REQUEST_BATCH_OPLOCK) ? BATCH_OPLOCK : 0;
1034         }
1035
1036 #if 0
1037         return_additional_info = BITSETW(params,0);
1038         open_sattr = SVAL(params, 4);
1039         open_time = make_unix_date3(params+8);
1040 #endif
1041         open_ofun = SVAL(params,12);
1042         open_size = IVAL(params,14);
1043         pname = &params[28];
1044
1045         if (IS_IPC(conn)) {
1046                 reply_nterror(req, NT_STATUS_NETWORK_ACCESS_DENIED);
1047                 goto out;
1048         }
1049
1050         srvstr_get_path(ctx, params, req->flags2, &fname, pname,
1051                         total_params - 28, STR_TERMINATE,
1052                         &status);
1053         if (!NT_STATUS_IS_OK(status)) {
1054                 reply_nterror(req, status);
1055                 goto out;
1056         }
1057
1058         DEBUG(3,("call_trans2open %s deny_mode=0x%x attr=%d ofun=0x%x size=%d\n",
1059                 fname, (unsigned int)deny_mode, (unsigned int)open_attr,
1060                 (unsigned int)open_ofun, open_size));
1061
1062         status = filename_convert(ctx,
1063                                 conn,
1064                                 req->flags2 & FLAGS2_DFS_PATHNAMES,
1065                                 fname,
1066                                 0,
1067                                 NULL,
1068                                 &smb_fname);
1069         if (!NT_STATUS_IS_OK(status)) {
1070                 if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
1071                         reply_botherror(req,
1072                                 NT_STATUS_PATH_NOT_COVERED,
1073                                 ERRSRV, ERRbadpath);
1074                         goto out;
1075                 }
1076                 reply_nterror(req, status);
1077                 goto out;
1078         }
1079
1080         if (open_ofun == 0) {
1081                 reply_nterror(req, NT_STATUS_OBJECT_NAME_COLLISION);
1082                 goto out;
1083         }
1084
1085         if (!map_open_params_to_ntcreate(smb_fname->base_name, deny_mode,
1086                                          open_ofun,
1087                                          &access_mask, &share_mode,
1088                                          &create_disposition,
1089                                          &create_options,
1090                                          &private_flags)) {
1091                 reply_nterror(req, NT_STATUS_ACCESS_DENIED);
1092                 goto out;
1093         }
1094
1095         /* Any data in this call is an EA list. */
1096         if (total_data && (total_data != 4)) {
1097                 if (total_data < 10) {
1098                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
1099                         goto out;
1100                 }
1101
1102                 if (IVAL(pdata,0) > total_data) {
1103                         DEBUG(10,("call_trans2open: bad total data size (%u) > %u\n",
1104                                 IVAL(pdata,0), (unsigned int)total_data));
1105                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
1106                         goto out;
1107                 }
1108
1109                 ea_list = read_ea_list(talloc_tos(), pdata + 4,
1110                                        total_data - 4);
1111                 if (!ea_list) {
1112                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
1113                         goto out;
1114                 }
1115
1116                 if (!lp_ea_support(SNUM(conn))) {
1117                         reply_nterror(req, NT_STATUS_EAS_NOT_SUPPORTED);
1118                         goto out;
1119                 }
1120         }
1121
1122         status = SMB_VFS_CREATE_FILE(
1123                 conn,                                   /* conn */
1124                 req,                                    /* req */
1125                 0,                                      /* root_dir_fid */
1126                 smb_fname,                              /* fname */
1127                 access_mask,                            /* access_mask */
1128                 share_mode,                             /* share_access */
1129                 create_disposition,                     /* create_disposition*/
1130                 create_options,                         /* create_options */
1131                 open_attr,                              /* file_attributes */
1132                 oplock_request,                         /* oplock_request */
1133                 open_size,                              /* allocation_size */
1134                 private_flags,
1135                 NULL,                                   /* sd */
1136                 ea_list,                                /* ea_list */
1137                 &fsp,                                   /* result */
1138                 &smb_action);                           /* psbuf */
1139
1140         if (!NT_STATUS_IS_OK(status)) {
1141                 if (open_was_deferred(req->sconn, req->mid)) {
1142                         /* We have re-scheduled this call. */
1143                         goto out;
1144                 }
1145                 reply_openerror(req, status);
1146                 goto out;
1147         }
1148
1149         size = get_file_size_stat(&smb_fname->st);
1150         fattr = dos_mode(conn, smb_fname);
1151         mtime = convert_timespec_to_time_t(smb_fname->st.st_ex_mtime);
1152         inode = smb_fname->st.st_ex_ino;
1153         if (fattr & FILE_ATTRIBUTE_DIRECTORY) {
1154                 close_file(req, fsp, ERROR_CLOSE);
1155                 reply_nterror(req, NT_STATUS_ACCESS_DENIED);
1156                 goto out;
1157         }
1158
1159         /* Realloc the size of parameters and data we will return */
1160         *pparams = (char *)SMB_REALLOC(*pparams, 30);
1161         if(*pparams == NULL ) {
1162                 reply_nterror(req, NT_STATUS_NO_MEMORY);
1163                 goto out;
1164         }
1165         params = *pparams;
1166
1167         SSVAL(params,0,fsp->fnum);
1168         SSVAL(params,2,fattr);
1169         srv_put_dos_date2(params,4, mtime);
1170         SIVAL(params,8, (uint32)size);
1171         SSVAL(params,12,deny_mode);
1172         SSVAL(params,14,0); /* open_type - file or directory. */
1173         SSVAL(params,16,0); /* open_state - only valid for IPC device. */
1174
1175         if (oplock_request && lp_fake_oplocks(SNUM(conn))) {
1176                 smb_action |= EXTENDED_OPLOCK_GRANTED;
1177         }
1178
1179         SSVAL(params,18,smb_action);
1180
1181         /*
1182          * WARNING - this may need to be changed if SMB_INO_T <> 4 bytes.
1183          */
1184         SIVAL(params,20,inode);
1185         SSVAL(params,24,0); /* Padding. */
1186         if (flags & 8) {
1187                 uint32 ea_size = estimate_ea_size(conn, fsp,
1188                                                   fsp->fsp_name->base_name);
1189                 SIVAL(params, 26, ea_size);
1190         } else {
1191                 SIVAL(params, 26, 0);
1192         }
1193
1194         /* Send the required number of replies */
1195         send_trans2_replies(conn, req, params, 30, *ppdata, 0, max_data_bytes);
1196  out:
1197         TALLOC_FREE(smb_fname);
1198 }
1199
1200 /*********************************************************
1201  Routine to check if a given string matches exactly.
1202  as a special case a mask of "." does NOT match. That
1203  is required for correct wildcard semantics
1204  Case can be significant or not.
1205 **********************************************************/
1206
1207 static bool exact_match(bool has_wild,
1208                         bool case_sensitive,
1209                         const char *str,
1210                         const char *mask)
1211 {
1212         if (mask[0] == '.' && mask[1] == 0) {
1213                 return false;
1214         }
1215
1216         if (has_wild) {
1217                 return false;
1218         }
1219
1220         if (case_sensitive) {
1221                 return strcmp(str,mask)==0;
1222         } else {
1223                 return strcasecmp_m(str,mask) == 0;
1224         }
1225 }
1226
1227 /****************************************************************************
1228  Return the filetype for UNIX extensions.
1229 ****************************************************************************/
1230
1231 static uint32 unix_filetype(mode_t mode)
1232 {
1233         if(S_ISREG(mode))
1234                 return UNIX_TYPE_FILE;
1235         else if(S_ISDIR(mode))
1236                 return UNIX_TYPE_DIR;
1237 #ifdef S_ISLNK
1238         else if(S_ISLNK(mode))
1239                 return UNIX_TYPE_SYMLINK;
1240 #endif
1241 #ifdef S_ISCHR
1242         else if(S_ISCHR(mode))
1243                 return UNIX_TYPE_CHARDEV;
1244 #endif
1245 #ifdef S_ISBLK
1246         else if(S_ISBLK(mode))
1247                 return UNIX_TYPE_BLKDEV;
1248 #endif
1249 #ifdef S_ISFIFO
1250         else if(S_ISFIFO(mode))
1251                 return UNIX_TYPE_FIFO;
1252 #endif
1253 #ifdef S_ISSOCK
1254         else if(S_ISSOCK(mode))
1255                 return UNIX_TYPE_SOCKET;
1256 #endif
1257
1258         DEBUG(0,("unix_filetype: unknown filetype %u\n", (unsigned)mode));
1259         return UNIX_TYPE_UNKNOWN;
1260 }
1261
1262 /****************************************************************************
1263  Map wire perms onto standard UNIX permissions. Obey share restrictions.
1264 ****************************************************************************/
1265
1266 enum perm_type { PERM_NEW_FILE, PERM_NEW_DIR, PERM_EXISTING_FILE, PERM_EXISTING_DIR};
1267
1268 static NTSTATUS unix_perms_from_wire( connection_struct *conn,
1269                                 const SMB_STRUCT_STAT *psbuf,
1270                                 uint32 perms,
1271                                 enum perm_type ptype,
1272                                 mode_t *ret_perms)
1273 {
1274         mode_t ret = 0;
1275
1276         if (perms == SMB_MODE_NO_CHANGE) {
1277                 if (!VALID_STAT(*psbuf)) {
1278                         return NT_STATUS_INVALID_PARAMETER;
1279                 } else {
1280                         *ret_perms = psbuf->st_ex_mode;
1281                         return NT_STATUS_OK;
1282                 }
1283         }
1284
1285         ret |= ((perms & UNIX_X_OTH ) ? S_IXOTH : 0);
1286         ret |= ((perms & UNIX_W_OTH ) ? S_IWOTH : 0);
1287         ret |= ((perms & UNIX_R_OTH ) ? S_IROTH : 0);
1288         ret |= ((perms & UNIX_X_GRP ) ? S_IXGRP : 0);
1289         ret |= ((perms & UNIX_W_GRP ) ? S_IWGRP : 0);
1290         ret |= ((perms & UNIX_R_GRP ) ? S_IRGRP : 0);
1291         ret |= ((perms & UNIX_X_USR ) ? S_IXUSR : 0);
1292         ret |= ((perms & UNIX_W_USR ) ? S_IWUSR : 0);
1293         ret |= ((perms & UNIX_R_USR ) ? S_IRUSR : 0);
1294 #ifdef S_ISVTX
1295         ret |= ((perms & UNIX_STICKY ) ? S_ISVTX : 0);
1296 #endif
1297 #ifdef S_ISGID
1298         ret |= ((perms & UNIX_SET_GID ) ? S_ISGID : 0);
1299 #endif
1300 #ifdef S_ISUID
1301         ret |= ((perms & UNIX_SET_UID ) ? S_ISUID : 0);
1302 #endif
1303
1304         switch (ptype) {
1305         case PERM_NEW_FILE:
1306                 /* Apply mode mask */
1307                 ret &= lp_create_mask(SNUM(conn));
1308                 /* Add in force bits */
1309                 ret |= lp_force_create_mode(SNUM(conn));
1310                 break;
1311         case PERM_NEW_DIR:
1312                 ret &= lp_dir_mask(SNUM(conn));
1313                 /* Add in force bits */
1314                 ret |= lp_force_dir_mode(SNUM(conn));
1315                 break;
1316         case PERM_EXISTING_FILE:
1317                 /* Apply mode mask */
1318                 ret &= lp_security_mask(SNUM(conn));
1319                 /* Add in force bits */
1320                 ret |= lp_force_security_mode(SNUM(conn));
1321                 break;
1322         case PERM_EXISTING_DIR:
1323                 /* Apply mode mask */
1324                 ret &= lp_dir_security_mask(SNUM(conn));
1325                 /* Add in force bits */
1326                 ret |= lp_force_dir_security_mode(SNUM(conn));
1327                 break;
1328         }
1329
1330         *ret_perms = ret;
1331         return NT_STATUS_OK;
1332 }
1333
1334 /****************************************************************************
1335  Needed to show the msdfs symlinks as directories. Modifies psbuf
1336  to be a directory if it's a msdfs link.
1337 ****************************************************************************/
1338
1339 static bool check_msdfs_link(connection_struct *conn,
1340                                 const char *pathname,
1341                                 SMB_STRUCT_STAT *psbuf)
1342 {
1343         int saved_errno = errno;
1344         if(lp_host_msdfs() &&
1345                 lp_msdfs_root(SNUM(conn)) &&
1346                 is_msdfs_link(conn, pathname, psbuf)) {
1347
1348                 DEBUG(5,("check_msdfs_link: Masquerading msdfs link %s "
1349                         "as a directory\n",
1350                         pathname));
1351                 psbuf->st_ex_mode = (psbuf->st_ex_mode & 0xFFF) | S_IFDIR;
1352                 errno = saved_errno;
1353                 return true;
1354         }
1355         errno = saved_errno;
1356         return false;
1357 }
1358
1359
1360 /****************************************************************************
1361  Get a level dependent lanman2 dir entry.
1362 ****************************************************************************/
1363
1364 struct smbd_dirptr_lanman2_state {
1365         connection_struct *conn;
1366         uint32_t info_level;
1367         bool check_mangled_names;
1368         bool has_wild;
1369         bool got_exact_match;
1370 };
1371
1372 static bool smbd_dirptr_lanman2_match_fn(TALLOC_CTX *ctx,
1373                                          void *private_data,
1374                                          const char *dname,
1375                                          const char *mask,
1376                                          char **_fname)
1377 {
1378         struct smbd_dirptr_lanman2_state *state =
1379                 (struct smbd_dirptr_lanman2_state *)private_data;
1380         bool ok;
1381         char mangled_name[13]; /* mangled 8.3 name. */
1382         bool got_match;
1383         const char *fname;
1384
1385         /* Mangle fname if it's an illegal name. */
1386         if (mangle_must_mangle(dname, state->conn->params)) {
1387                 ok = name_to_8_3(dname, mangled_name,
1388                                  true, state->conn->params);
1389                 if (!ok) {
1390                         return false;
1391                 }
1392                 fname = mangled_name;
1393         } else {
1394                 fname = dname;
1395         }
1396
1397         got_match = exact_match(state->has_wild,
1398                                 state->conn->case_sensitive,
1399                                 fname, mask);
1400         state->got_exact_match = got_match;
1401         if (!got_match) {
1402                 got_match = mask_match(fname, mask,
1403                                        state->conn->case_sensitive);
1404         }
1405
1406         if(!got_match && state->check_mangled_names &&
1407            !mangle_is_8_3(fname, false, state->conn->params)) {
1408                 /*
1409                  * It turns out that NT matches wildcards against
1410                  * both long *and* short names. This may explain some
1411                  * of the wildcard wierdness from old DOS clients
1412                  * that some people have been seeing.... JRA.
1413                  */
1414                 /* Force the mangling into 8.3. */
1415                 ok = name_to_8_3(fname, mangled_name,
1416                                  false, state->conn->params);
1417                 if (!ok) {
1418                         return false;
1419                 }
1420
1421                 got_match = exact_match(state->has_wild,
1422                                         state->conn->case_sensitive,
1423                                         mangled_name, mask);
1424                 state->got_exact_match = got_match;
1425                 if (!got_match) {
1426                         got_match = mask_match(mangled_name, mask,
1427                                                state->conn->case_sensitive);
1428                 }
1429         }
1430
1431         if (!got_match) {
1432                 return false;
1433         }
1434
1435         *_fname = talloc_strdup(ctx, fname);
1436         if (*_fname == NULL) {
1437                 return false;
1438         }
1439
1440         return true;
1441 }
1442
1443 static bool smbd_dirptr_lanman2_mode_fn(TALLOC_CTX *ctx,
1444                                         void *private_data,
1445                                         struct smb_filename *smb_fname,
1446                                         uint32_t *_mode)
1447 {
1448         struct smbd_dirptr_lanman2_state *state =
1449                 (struct smbd_dirptr_lanman2_state *)private_data;
1450         bool ms_dfs_link = false;
1451         uint32_t mode = 0;
1452
1453         if (INFO_LEVEL_IS_UNIX(state->info_level)) {
1454                 if (SMB_VFS_LSTAT(state->conn, smb_fname) != 0) {
1455                         DEBUG(5,("smbd_dirptr_lanman2_mode_fn: "
1456                                  "Couldn't lstat [%s] (%s)\n",
1457                                  smb_fname_str_dbg(smb_fname),
1458                                  strerror(errno)));
1459                         return false;
1460                 }
1461         } else if (!VALID_STAT(smb_fname->st) &&
1462                    SMB_VFS_STAT(state->conn, smb_fname) != 0) {
1463                 /* Needed to show the msdfs symlinks as
1464                  * directories */
1465
1466                 ms_dfs_link = check_msdfs_link(state->conn,
1467                                                smb_fname->base_name,
1468                                                &smb_fname->st);
1469                 if (!ms_dfs_link) {
1470                         DEBUG(5,("smbd_dirptr_lanman2_mode_fn: "
1471                                  "Couldn't stat [%s] (%s)\n",
1472                                  smb_fname_str_dbg(smb_fname),
1473                                  strerror(errno)));
1474                         return false;
1475                 }
1476         }
1477
1478         if (ms_dfs_link) {
1479                 mode = dos_mode_msdfs(state->conn, smb_fname);
1480         } else {
1481                 mode = dos_mode(state->conn, smb_fname);
1482         }
1483
1484         *_mode = mode;
1485         return true;
1486 }
1487
1488 static bool smbd_marshall_dir_entry(TALLOC_CTX *ctx,
1489                                     connection_struct *conn,
1490                                     uint16_t flags2,
1491                                     uint32_t info_level,
1492                                     struct ea_list *name_list,
1493                                     bool check_mangled_names,
1494                                     bool requires_resume_key,
1495                                     uint32_t mode,
1496                                     const char *fname,
1497                                     const struct smb_filename *smb_fname,
1498                                     int space_remaining,
1499                                     uint8_t align,
1500                                     bool do_pad,
1501                                     char *base_data,
1502                                     char **ppdata,
1503                                     char *end_data,
1504                                     bool *out_of_space,
1505                                     uint64_t *last_entry_off)
1506 {
1507         char *p, *q, *pdata = *ppdata;
1508         uint32_t reskey=0;
1509         uint64_t file_size = 0;
1510         uint64_t allocation_size = 0;
1511         uint64_t file_index = 0;
1512         uint32_t len;
1513         struct timespec mdate_ts, adate_ts, cdate_ts, create_date_ts;
1514         time_t mdate = (time_t)0, adate = (time_t)0, create_date = (time_t)0;
1515         time_t c_date = (time_t)0;
1516         char *nameptr;
1517         char *last_entry_ptr;
1518         bool was_8_3;
1519         int off;
1520         int pad = 0;
1521
1522         *out_of_space = false;
1523
1524         ZERO_STRUCT(mdate_ts);
1525         ZERO_STRUCT(adate_ts);
1526         ZERO_STRUCT(create_date_ts);
1527         ZERO_STRUCT(cdate_ts);
1528
1529         if (!(mode & FILE_ATTRIBUTE_DIRECTORY)) {
1530                 file_size = get_file_size_stat(&smb_fname->st);
1531         }
1532         allocation_size = SMB_VFS_GET_ALLOC_SIZE(conn, NULL, &smb_fname->st);
1533
1534         file_index = get_FileIndex(conn, &smb_fname->st);
1535
1536         mdate_ts = smb_fname->st.st_ex_mtime;
1537         adate_ts = smb_fname->st.st_ex_atime;
1538         create_date_ts = get_create_timespec(conn, NULL, smb_fname);
1539         cdate_ts = get_change_timespec(conn, NULL, smb_fname);
1540
1541         if (lp_dos_filetime_resolution(SNUM(conn))) {
1542                 dos_filetime_timespec(&create_date_ts);
1543                 dos_filetime_timespec(&mdate_ts);
1544                 dos_filetime_timespec(&adate_ts);
1545                 dos_filetime_timespec(&cdate_ts);
1546         }
1547
1548         create_date = convert_timespec_to_time_t(create_date_ts);
1549         mdate = convert_timespec_to_time_t(mdate_ts);
1550         adate = convert_timespec_to_time_t(adate_ts);
1551         c_date = convert_timespec_to_time_t(cdate_ts);
1552
1553         /* align the record */
1554         SMB_ASSERT(align >= 1);
1555
1556         off = (int)PTR_DIFF(pdata, base_data);
1557         pad = (off + (align-1)) & ~(align-1);
1558         pad -= off;
1559
1560         if (pad && pad > space_remaining) {
1561                 *out_of_space = true;
1562                 DEBUG(9,("smbd_marshall_dir_entry: out of space "
1563                         "for padding (wanted %u, had %d)\n",
1564                         (unsigned int)pad,
1565                         space_remaining ));
1566                 return false; /* Not finished - just out of space */
1567         }
1568
1569         off += pad;
1570         /* initialize padding to 0 */
1571         if (pad) {
1572                 memset(pdata, 0, pad);
1573         }
1574         space_remaining -= pad;
1575
1576         DEBUG(10,("smbd_marshall_dir_entry: space_remaining = %d\n",
1577                 space_remaining ));
1578
1579         pdata += pad;
1580         p = pdata;
1581         last_entry_ptr = p;
1582
1583         pad = 0;
1584         off = 0;
1585
1586         switch (info_level) {
1587         case SMB_FIND_INFO_STANDARD:
1588                 DEBUG(10,("smbd_marshall_dir_entry: SMB_FIND_INFO_STANDARD\n"));
1589                 if(requires_resume_key) {
1590                         SIVAL(p,0,reskey);
1591                         p += 4;
1592                 }
1593                 srv_put_dos_date2(p,0,create_date);
1594                 srv_put_dos_date2(p,4,adate);
1595                 srv_put_dos_date2(p,8,mdate);
1596                 SIVAL(p,12,(uint32)file_size);
1597                 SIVAL(p,16,(uint32)allocation_size);
1598                 SSVAL(p,20,mode);
1599                 p += 23;
1600                 nameptr = p;
1601                 if (flags2 & FLAGS2_UNICODE_STRINGS) {
1602                         p += ucs2_align(base_data, p, 0);
1603                 }
1604                 len = srvstr_push(base_data, flags2, p,
1605                                   fname, PTR_DIFF(end_data, p),
1606                                   STR_TERMINATE);
1607                 if (flags2 & FLAGS2_UNICODE_STRINGS) {
1608                         if (len > 2) {
1609                                 SCVAL(nameptr, -1, len - 2);
1610                         } else {
1611                                 SCVAL(nameptr, -1, 0);
1612                         }
1613                 } else {
1614                         if (len > 1) {
1615                                 SCVAL(nameptr, -1, len - 1);
1616                         } else {
1617                                 SCVAL(nameptr, -1, 0);
1618                         }
1619                 }
1620                 p += len;
1621                 break;
1622
1623         case SMB_FIND_EA_SIZE:
1624                 DEBUG(10,("smbd_marshall_dir_entry: SMB_FIND_EA_SIZE\n"));
1625                 if (requires_resume_key) {
1626                         SIVAL(p,0,reskey);
1627                         p += 4;
1628                 }
1629                 srv_put_dos_date2(p,0,create_date);
1630                 srv_put_dos_date2(p,4,adate);
1631                 srv_put_dos_date2(p,8,mdate);
1632                 SIVAL(p,12,(uint32)file_size);
1633                 SIVAL(p,16,(uint32)allocation_size);
1634                 SSVAL(p,20,mode);
1635                 {
1636                         unsigned int ea_size = estimate_ea_size(conn, NULL,
1637                                                                 smb_fname->base_name);
1638                         SIVAL(p,22,ea_size); /* Extended attributes */
1639                 }
1640                 p += 27;
1641                 nameptr = p - 1;
1642                 len = srvstr_push(base_data, flags2,
1643                                   p, fname, PTR_DIFF(end_data, p),
1644                                   STR_TERMINATE | STR_NOALIGN);
1645                 if (flags2 & FLAGS2_UNICODE_STRINGS) {
1646                         if (len > 2) {
1647                                 len -= 2;
1648                         } else {
1649                                 len = 0;
1650                         }
1651                 } else {
1652                         if (len > 1) {
1653                                 len -= 1;
1654                         } else {
1655                                 len = 0;
1656                         }
1657                 }
1658                 SCVAL(nameptr,0,len);
1659                 p += len;
1660                 SCVAL(p,0,0); p += 1; /* Extra zero byte ? - why.. */
1661                 break;
1662
1663         case SMB_FIND_EA_LIST:
1664         {
1665                 struct ea_list *file_list = NULL;
1666                 size_t ea_len = 0;
1667
1668                 DEBUG(10,("smbd_marshall_dir_entry: SMB_FIND_EA_LIST\n"));
1669                 if (!name_list) {
1670                         return false;
1671                 }
1672                 if (requires_resume_key) {
1673                         SIVAL(p,0,reskey);
1674                         p += 4;
1675                 }
1676                 srv_put_dos_date2(p,0,create_date);
1677                 srv_put_dos_date2(p,4,adate);
1678                 srv_put_dos_date2(p,8,mdate);
1679                 SIVAL(p,12,(uint32)file_size);
1680                 SIVAL(p,16,(uint32)allocation_size);
1681                 SSVAL(p,20,mode);
1682                 p += 22; /* p now points to the EA area. */
1683
1684                 file_list = get_ea_list_from_file(ctx, conn, NULL,
1685                                                   smb_fname->base_name,
1686                                                   &ea_len);
1687                 name_list = ea_list_union(name_list, file_list, &ea_len);
1688
1689                 /* We need to determine if this entry will fit in the space available. */
1690                 /* Max string size is 255 bytes. */
1691                 if (PTR_DIFF(p + 255 + ea_len,pdata) > space_remaining) {
1692                         *out_of_space = true;
1693                         DEBUG(9,("smbd_marshall_dir_entry: out of space "
1694                                 "(wanted %u, had %d)\n",
1695                                 (unsigned int)PTR_DIFF(p + 255 + ea_len,pdata),
1696                                 space_remaining ));
1697                         return False; /* Not finished - just out of space */
1698                 }
1699
1700                 /* Push the ea_data followed by the name. */
1701                 p += fill_ea_buffer(ctx, p, space_remaining, conn, name_list);
1702                 nameptr = p;
1703                 len = srvstr_push(base_data, flags2,
1704                                   p + 1, fname, PTR_DIFF(end_data, p+1),
1705                                   STR_TERMINATE | STR_NOALIGN);
1706                 if (flags2 & FLAGS2_UNICODE_STRINGS) {
1707                         if (len > 2) {
1708                                 len -= 2;
1709                         } else {
1710                                 len = 0;
1711                         }
1712                 } else {
1713                         if (len > 1) {
1714                                 len -= 1;
1715                         } else {
1716                                 len = 0;
1717                         }
1718                 }
1719                 SCVAL(nameptr,0,len);
1720                 p += len + 1;
1721                 SCVAL(p,0,0); p += 1; /* Extra zero byte ? - why.. */
1722                 break;
1723         }
1724
1725         case SMB_FIND_FILE_BOTH_DIRECTORY_INFO:
1726                 DEBUG(10,("smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO\n"));
1727                 was_8_3 = mangle_is_8_3(fname, True, conn->params);
1728                 p += 4;
1729                 SIVAL(p,0,reskey); p += 4;
1730                 put_long_date_timespec(conn->ts_res,p,create_date_ts); p += 8;
1731                 put_long_date_timespec(conn->ts_res,p,adate_ts); p += 8;
1732                 put_long_date_timespec(conn->ts_res,p,mdate_ts); p += 8;
1733                 put_long_date_timespec(conn->ts_res,p,cdate_ts); p += 8;
1734                 SOFF_T(p,0,file_size); p += 8;
1735                 SOFF_T(p,0,allocation_size); p += 8;
1736                 SIVAL(p,0,mode); p += 4;
1737                 q = p; p += 4; /* q is placeholder for name length. */
1738                 {
1739                         unsigned int ea_size = estimate_ea_size(conn, NULL,
1740                                                                 smb_fname->base_name);
1741                         SIVAL(p,0,ea_size); /* Extended attributes */
1742                         p += 4;
1743                 }
1744                 /* Clear the short name buffer. This is
1745                  * IMPORTANT as not doing so will trigger
1746                  * a Win2k client bug. JRA.
1747                  */
1748                 if (!was_8_3 && check_mangled_names) {
1749                         char mangled_name[13]; /* mangled 8.3 name. */
1750                         if (!name_to_8_3(fname,mangled_name,True,
1751                                            conn->params)) {
1752                                 /* Error - mangle failed ! */
1753                                 memset(mangled_name,'\0',12);
1754                         }
1755                         mangled_name[12] = 0;
1756                         len = srvstr_push(base_data, flags2,
1757                                           p+2, mangled_name, 24,
1758                                           STR_UPPER|STR_UNICODE);
1759                         if (len < 24) {
1760                                 memset(p + 2 + len,'\0',24 - len);
1761                         }
1762                         SSVAL(p, 0, len);
1763                 } else {
1764                         memset(p,'\0',26);
1765                 }
1766                 p += 2 + 24;
1767                 len = srvstr_push(base_data, flags2, p,
1768                                   fname, PTR_DIFF(end_data, p),
1769                                   STR_TERMINATE_ASCII);
1770                 SIVAL(q,0,len);
1771                 p += len;
1772
1773                 len = PTR_DIFF(p, pdata);
1774                 pad = (len + (align-1)) & ~(align-1);
1775                 /*
1776                  * offset to the next entry, the caller
1777                  * will overwrite it for the last entry
1778                  * that's why we always include the padding
1779                  */
1780                 SIVAL(pdata,0,pad);
1781                 /*
1782                  * set padding to zero
1783                  */
1784                 if (do_pad) {
1785                         memset(p, 0, pad - len);
1786                         p = pdata + pad;
1787                 } else {
1788                         p = pdata + len;
1789                 }
1790                 break;
1791
1792         case SMB_FIND_FILE_DIRECTORY_INFO:
1793                 DEBUG(10,("smbd_marshall_dir_entry: SMB_FIND_FILE_DIRECTORY_INFO\n"));
1794                 p += 4;
1795                 SIVAL(p,0,reskey); p += 4;
1796                 put_long_date_timespec(conn->ts_res,p,create_date_ts); p += 8;
1797                 put_long_date_timespec(conn->ts_res,p,adate_ts); p += 8;
1798                 put_long_date_timespec(conn->ts_res,p,mdate_ts); p += 8;
1799                 put_long_date_timespec(conn->ts_res,p,cdate_ts); p += 8;
1800                 SOFF_T(p,0,file_size); p += 8;
1801                 SOFF_T(p,0,allocation_size); p += 8;
1802                 SIVAL(p,0,mode); p += 4;
1803                 len = srvstr_push(base_data, flags2,
1804                                   p + 4, fname, PTR_DIFF(end_data, p+4),
1805                                   STR_TERMINATE_ASCII);
1806                 SIVAL(p,0,len);
1807                 p += 4 + len;
1808
1809                 len = PTR_DIFF(p, pdata);
1810                 pad = (len + (align-1)) & ~(align-1);
1811                 /*
1812                  * offset to the next entry, the caller
1813                  * will overwrite it for the last entry
1814                  * that's why we always include the padding
1815                  */
1816                 SIVAL(pdata,0,pad);
1817                 /*
1818                  * set padding to zero
1819                  */
1820                 if (do_pad) {
1821                         memset(p, 0, pad - len);
1822                         p = pdata + pad;
1823                 } else {
1824                         p = pdata + len;
1825                 }
1826                 break;
1827
1828         case SMB_FIND_FILE_FULL_DIRECTORY_INFO:
1829                 DEBUG(10,("smbd_marshall_dir_entry: SMB_FIND_FILE_FULL_DIRECTORY_INFO\n"));
1830                 p += 4;
1831                 SIVAL(p,0,reskey); p += 4;
1832                 put_long_date_timespec(conn->ts_res,p,create_date_ts); p += 8;
1833                 put_long_date_timespec(conn->ts_res,p,adate_ts); p += 8;
1834                 put_long_date_timespec(conn->ts_res,p,mdate_ts); p += 8;
1835                 put_long_date_timespec(conn->ts_res,p,cdate_ts); p += 8;
1836                 SOFF_T(p,0,file_size); p += 8;
1837                 SOFF_T(p,0,allocation_size); p += 8;
1838                 SIVAL(p,0,mode); p += 4;
1839                 q = p; p += 4; /* q is placeholder for name length. */
1840                 {
1841                         unsigned int ea_size = estimate_ea_size(conn, NULL,
1842                                                                 smb_fname->base_name);
1843                         SIVAL(p,0,ea_size); /* Extended attributes */
1844                         p +=4;
1845                 }
1846                 len = srvstr_push(base_data, flags2, p,
1847                                   fname, PTR_DIFF(end_data, p),
1848                                   STR_TERMINATE_ASCII);
1849                 SIVAL(q, 0, len);
1850                 p += len;
1851
1852                 len = PTR_DIFF(p, pdata);
1853                 pad = (len + (align-1)) & ~(align-1);
1854                 /*
1855                  * offset to the next entry, the caller
1856                  * will overwrite it for the last entry
1857                  * that's why we always include the padding
1858                  */
1859                 SIVAL(pdata,0,pad);
1860                 /*
1861                  * set padding to zero
1862                  */
1863                 if (do_pad) {
1864                         memset(p, 0, pad - len);
1865                         p = pdata + pad;
1866                 } else {
1867                         p = pdata + len;
1868                 }
1869                 break;
1870
1871         case SMB_FIND_FILE_NAMES_INFO:
1872                 DEBUG(10,("smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO\n"));
1873                 p += 4;
1874                 SIVAL(p,0,reskey); p += 4;
1875                 p += 4;
1876                 /* this must *not* be null terminated or w2k gets in a loop trying to set an
1877                    acl on a dir (tridge) */
1878                 len = srvstr_push(base_data, flags2, p,
1879                                   fname, PTR_DIFF(end_data, p),
1880                                   STR_TERMINATE_ASCII);
1881                 SIVAL(p, -4, len);
1882                 p += len;
1883
1884                 len = PTR_DIFF(p, pdata);
1885                 pad = (len + (align-1)) & ~(align-1);
1886                 /*
1887                  * offset to the next entry, the caller
1888                  * will overwrite it for the last entry
1889                  * that's why we always include the padding
1890                  */
1891                 SIVAL(pdata,0,pad);
1892                 /*
1893                  * set padding to zero
1894                  */
1895                 if (do_pad) {
1896                         memset(p, 0, pad - len);
1897                         p = pdata + pad;
1898                 } else {
1899                         p = pdata + len;
1900                 }
1901                 break;
1902
1903         case SMB_FIND_ID_FULL_DIRECTORY_INFO:
1904                 DEBUG(10,("smbd_marshall_dir_entry: SMB_FIND_ID_FULL_DIRECTORY_INFO\n"));
1905                 p += 4;
1906                 SIVAL(p,0,reskey); p += 4;
1907                 put_long_date_timespec(conn->ts_res,p,create_date_ts); p += 8;
1908                 put_long_date_timespec(conn->ts_res,p,adate_ts); p += 8;
1909                 put_long_date_timespec(conn->ts_res,p,mdate_ts); p += 8;
1910                 put_long_date_timespec(conn->ts_res,p,cdate_ts); p += 8;
1911                 SOFF_T(p,0,file_size); p += 8;
1912                 SOFF_T(p,0,allocation_size); p += 8;
1913                 SIVAL(p,0,mode); p += 4;
1914                 q = p; p += 4; /* q is placeholder for name length. */
1915                 {
1916                         unsigned int ea_size = estimate_ea_size(conn, NULL,
1917                                                                 smb_fname->base_name);
1918                         SIVAL(p,0,ea_size); /* Extended attributes */
1919                         p +=4;
1920                 }
1921                 SIVAL(p,0,0); p += 4; /* Unknown - reserved ? */
1922                 SBVAL(p,0,file_index); p += 8;
1923                 len = srvstr_push(base_data, flags2, p,
1924                                   fname, PTR_DIFF(end_data, p),
1925                                   STR_TERMINATE_ASCII);
1926                 SIVAL(q, 0, len);
1927                 p += len;
1928
1929                 len = PTR_DIFF(p, pdata);
1930                 pad = (len + (align-1)) & ~(align-1);
1931                 /*
1932                  * offset to the next entry, the caller
1933                  * will overwrite it for the last entry
1934                  * that's why we always include the padding
1935                  */
1936                 SIVAL(pdata,0,pad);
1937                 /*
1938                  * set padding to zero
1939                  */
1940                 if (do_pad) {
1941                         memset(p, 0, pad - len);
1942                         p = pdata + pad;
1943                 } else {
1944                         p = pdata + len;
1945                 }
1946                 break;
1947
1948         case SMB_FIND_ID_BOTH_DIRECTORY_INFO:
1949                 DEBUG(10,("smbd_marshall_dir_entry: SMB_FIND_ID_BOTH_DIRECTORY_INFO\n"));
1950                 was_8_3 = mangle_is_8_3(fname, True, conn->params);
1951                 p += 4;
1952                 SIVAL(p,0,reskey); p += 4;
1953                 put_long_date_timespec(conn->ts_res,p,create_date_ts); p += 8;
1954                 put_long_date_timespec(conn->ts_res,p,adate_ts); p += 8;
1955                 put_long_date_timespec(conn->ts_res,p,mdate_ts); p += 8;
1956                 put_long_date_timespec(conn->ts_res,p,cdate_ts); p += 8;
1957                 SOFF_T(p,0,file_size); p += 8;
1958                 SOFF_T(p,0,allocation_size); p += 8;
1959                 SIVAL(p,0,mode); p += 4;
1960                 q = p; p += 4; /* q is placeholder for name length */
1961                 {
1962                         unsigned int ea_size = estimate_ea_size(conn, NULL,
1963                                                                 smb_fname->base_name);
1964                         SIVAL(p,0,ea_size); /* Extended attributes */
1965                         p +=4;
1966                 }
1967                 /* Clear the short name buffer. This is
1968                  * IMPORTANT as not doing so will trigger
1969                  * a Win2k client bug. JRA.
1970                  */
1971                 if (!was_8_3 && check_mangled_names) {
1972                         char mangled_name[13]; /* mangled 8.3 name. */
1973                         if (!name_to_8_3(fname,mangled_name,True,
1974                                         conn->params)) {
1975                                 /* Error - mangle failed ! */
1976                                 memset(mangled_name,'\0',12);
1977                         }
1978                         mangled_name[12] = 0;
1979                         len = srvstr_push(base_data, flags2,
1980                                           p+2, mangled_name, 24,
1981                                           STR_UPPER|STR_UNICODE);
1982                         SSVAL(p, 0, len);
1983                         if (len < 24) {
1984                                 memset(p + 2 + len,'\0',24 - len);
1985                         }
1986                         SSVAL(p, 0, len);
1987                 } else {
1988                         memset(p,'\0',26);
1989                 }
1990                 p += 26;
1991                 SSVAL(p,0,0); p += 2; /* Reserved ? */
1992                 SBVAL(p,0,file_index); p += 8;
1993                 len = srvstr_push(base_data, flags2, p,
1994                                   fname, PTR_DIFF(end_data, p),
1995                                   STR_TERMINATE_ASCII);
1996                 SIVAL(q,0,len);
1997                 p += len;
1998
1999                 len = PTR_DIFF(p, pdata);
2000                 pad = (len + (align-1)) & ~(align-1);
2001                 /*
2002                  * offset to the next entry, the caller
2003                  * will overwrite it for the last entry
2004                  * that's why we always include the padding
2005                  */
2006                 SIVAL(pdata,0,pad);
2007                 /*
2008                  * set padding to zero
2009                  */
2010                 if (do_pad) {
2011                         memset(p, 0, pad - len);
2012                         p = pdata + pad;
2013                 } else {
2014                         p = pdata + len;
2015                 }
2016                 break;
2017
2018         /* CIFS UNIX Extension. */
2019
2020         case SMB_FIND_FILE_UNIX:
2021         case SMB_FIND_FILE_UNIX_INFO2:
2022                 p+= 4;
2023                 SIVAL(p,0,reskey); p+= 4;    /* Used for continuing search. */
2024
2025                 /* Begin of SMB_QUERY_FILE_UNIX_BASIC */
2026
2027                 if (info_level == SMB_FIND_FILE_UNIX) {
2028                         DEBUG(10,("smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX\n"));
2029                         p = store_file_unix_basic(conn, p,
2030                                                 NULL, &smb_fname->st);
2031                         len = srvstr_push(base_data, flags2, p,
2032                                           fname, PTR_DIFF(end_data, p),
2033                                           STR_TERMINATE);
2034                 } else {
2035                         DEBUG(10,("smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX_INFO2\n"));
2036                         p = store_file_unix_basic_info2(conn, p,
2037                                                 NULL, &smb_fname->st);
2038                         nameptr = p;
2039                         p += 4;
2040                         len = srvstr_push(base_data, flags2, p, fname,
2041                                           PTR_DIFF(end_data, p), 0);
2042                         SIVAL(nameptr, 0, len);
2043                 }
2044
2045                 p += len;
2046
2047                 len = PTR_DIFF(p, pdata);
2048                 pad = (len + (align-1)) & ~(align-1);
2049                 /*
2050                  * offset to the next entry, the caller
2051                  * will overwrite it for the last entry
2052                  * that's why we always include the padding
2053                  */
2054                 SIVAL(pdata,0,pad);
2055                 /*
2056                  * set padding to zero
2057                  */
2058                 if (do_pad) {
2059                         memset(p, 0, pad - len);
2060                         p = pdata + pad;
2061                 } else {
2062                         p = pdata + len;
2063                 }
2064                 /* End of SMB_QUERY_FILE_UNIX_BASIC */
2065
2066                 break;
2067
2068         default:
2069                 return false;
2070         }
2071
2072         if (PTR_DIFF(p,pdata) > space_remaining) {
2073                 *out_of_space = true;
2074                 DEBUG(9,("smbd_marshall_dir_entry: out of space "
2075                         "(wanted %u, had %d)\n",
2076                         (unsigned int)PTR_DIFF(p,pdata),
2077                         space_remaining ));
2078                 return false; /* Not finished - just out of space */
2079         }
2080
2081         /* Setup the last entry pointer, as an offset from base_data */
2082         *last_entry_off = PTR_DIFF(last_entry_ptr,base_data);
2083         /* Advance the data pointer to the next slot */
2084         *ppdata = p;
2085
2086         return true;
2087 }
2088
2089 bool smbd_dirptr_lanman2_entry(TALLOC_CTX *ctx,
2090                                connection_struct *conn,
2091                                struct dptr_struct *dirptr,
2092                                uint16 flags2,
2093                                const char *path_mask,
2094                                uint32 dirtype,
2095                                int info_level,
2096                                int requires_resume_key,
2097                                bool dont_descend,
2098                                bool ask_sharemode,
2099                                uint8_t align,
2100                                bool do_pad,
2101                                char **ppdata,
2102                                char *base_data,
2103                                char *end_data,
2104                                int space_remaining,
2105                                bool *out_of_space,
2106                                bool *got_exact_match,
2107                                int *_last_entry_off,
2108                                struct ea_list *name_list)
2109 {
2110         const char *p;
2111         const char *mask = NULL;
2112         long prev_dirpos = 0;
2113         uint32_t mode = 0;
2114         char *fname = NULL;
2115         struct smb_filename *smb_fname = NULL;
2116         struct smbd_dirptr_lanman2_state state;
2117         bool ok;
2118         uint64_t last_entry_off = 0;
2119
2120         ZERO_STRUCT(state);
2121         state.conn = conn;
2122         state.info_level = info_level;
2123         state.check_mangled_names = lp_manglednames(conn->params);
2124         state.has_wild = dptr_has_wild(dirptr);
2125         state.got_exact_match = false;
2126
2127         *out_of_space = false;
2128         *got_exact_match = false;
2129
2130         p = strrchr_m(path_mask,'/');
2131         if(p != NULL) {
2132                 if(p[1] == '\0') {
2133                         mask = "*.*";
2134                 } else {
2135                         mask = p+1;
2136                 }
2137         } else {
2138                 mask = path_mask;
2139         }
2140
2141         ok = smbd_dirptr_get_entry(ctx,
2142                                    dirptr,
2143                                    mask,
2144                                    dirtype,
2145                                    dont_descend,
2146                                    ask_sharemode,
2147                                    smbd_dirptr_lanman2_match_fn,
2148                                    smbd_dirptr_lanman2_mode_fn,
2149                                    &state,
2150                                    &fname,
2151                                    &smb_fname,
2152                                    &mode,
2153                                    &prev_dirpos);
2154         if (!ok) {
2155                 return false;
2156         }
2157
2158         *got_exact_match = state.got_exact_match;
2159
2160         ok = smbd_marshall_dir_entry(ctx,
2161                                      conn,
2162                                      flags2,
2163                                      info_level,
2164                                      name_list,
2165                                      state.check_mangled_names,
2166                                      requires_resume_key,
2167                                      mode,
2168                                      fname,
2169                                      smb_fname,
2170                                      space_remaining,
2171                                      align,
2172                                      do_pad,
2173                                      base_data,
2174                                      ppdata,
2175                                      end_data,
2176                                      out_of_space,
2177                                      &last_entry_off);
2178         TALLOC_FREE(fname);
2179         TALLOC_FREE(smb_fname);
2180         if (*out_of_space) {
2181                 dptr_SeekDir(dirptr, prev_dirpos);
2182                 return false;
2183         }
2184         if (!ok) {
2185                 return false;
2186         }
2187
2188         *_last_entry_off = last_entry_off;
2189         return true;
2190 }
2191
2192 static bool get_lanman2_dir_entry(TALLOC_CTX *ctx,
2193                                 connection_struct *conn,
2194                                 struct dptr_struct *dirptr,
2195                                 uint16 flags2,
2196                                 const char *path_mask,
2197                                 uint32 dirtype,
2198                                 int info_level,
2199                                 bool requires_resume_key,
2200                                 bool dont_descend,
2201                                 bool ask_sharemode,
2202                                 char **ppdata,
2203                                 char *base_data,
2204                                 char *end_data,
2205                                 int space_remaining,
2206                                 bool *out_of_space,
2207                                 bool *got_exact_match,
2208                                 int *last_entry_off,
2209                                 struct ea_list *name_list)
2210 {
2211         uint8_t align = 4;
2212         const bool do_pad = true;
2213
2214         if (info_level >= 1 && info_level <= 3) {
2215                 /* No alignment on earlier info levels. */
2216                 align = 1;
2217         }
2218
2219         return smbd_dirptr_lanman2_entry(ctx, conn, dirptr, flags2,
2220                                          path_mask, dirtype, info_level,
2221                                          requires_resume_key, dont_descend, ask_sharemode,
2222                                          align, do_pad,
2223                                          ppdata, base_data, end_data,
2224                                          space_remaining,
2225                                          out_of_space, got_exact_match,
2226                                          last_entry_off, name_list);
2227 }
2228
2229 /****************************************************************************
2230  Reply to a TRANS2_FINDFIRST.
2231 ****************************************************************************/
2232
2233 static void call_trans2findfirst(connection_struct *conn,
2234                                  struct smb_request *req,
2235                                  char **pparams, int total_params,
2236                                  char **ppdata, int total_data,
2237                                  unsigned int max_data_bytes)
2238 {
2239         /* We must be careful here that we don't return more than the
2240                 allowed number of data bytes. If this means returning fewer than
2241                 maxentries then so be it. We assume that the redirector has
2242                 enough room for the fixed number of parameter bytes it has
2243                 requested. */
2244         struct smb_filename *smb_dname = NULL;
2245         char *params = *pparams;
2246         char *pdata = *ppdata;
2247         char *data_end;
2248         uint32 dirtype;
2249         int maxentries;
2250         uint16 findfirst_flags;
2251         bool close_after_first;
2252         bool close_if_end;
2253         bool requires_resume_key;
2254         int info_level;
2255         char *directory = NULL;
2256         char *mask = NULL;
2257         char *p;
2258         int last_entry_off=0;
2259         int dptr_num = -1;
2260         int numentries = 0;
2261         int i;
2262         bool finished = False;
2263         bool dont_descend = False;
2264         bool out_of_space = False;
2265         int space_remaining;
2266         bool mask_contains_wcard = False;
2267         struct ea_list *ea_list = NULL;
2268         NTSTATUS ntstatus = NT_STATUS_OK;
2269         bool ask_sharemode = lp_parm_bool(SNUM(conn), "smbd", "search ask sharemode", true);
2270         TALLOC_CTX *ctx = talloc_tos();
2271         struct dptr_struct *dirptr = NULL;
2272         struct smbd_server_connection *sconn = req->sconn;
2273         uint32_t ucf_flags = (UCF_SAVE_LCOMP | UCF_ALWAYS_ALLOW_WCARD_LCOMP);
2274
2275         if (total_params < 13) {
2276                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2277                 goto out;
2278         }
2279
2280         dirtype = SVAL(params,0);
2281         maxentries = SVAL(params,2);
2282         findfirst_flags = SVAL(params,4);
2283         close_after_first = (findfirst_flags & FLAG_TRANS2_FIND_CLOSE);
2284         close_if_end = (findfirst_flags & FLAG_TRANS2_FIND_CLOSE_IF_END);
2285         requires_resume_key = (findfirst_flags & FLAG_TRANS2_FIND_REQUIRE_RESUME);
2286         info_level = SVAL(params,6);
2287
2288         DEBUG(3,("call_trans2findfirst: dirtype = %x, maxentries = %d, close_after_first=%d, \
2289 close_if_end = %d requires_resume_key = %d level = 0x%x, max_data_bytes = %d\n",
2290                 (unsigned int)dirtype, maxentries, close_after_first, close_if_end, requires_resume_key,
2291                 info_level, max_data_bytes));
2292
2293         if (!maxentries) {
2294                 /* W2K3 seems to treat zero as 1. */
2295                 maxentries = 1;
2296         }
2297
2298         switch (info_level) {
2299                 case SMB_FIND_INFO_STANDARD:
2300                 case SMB_FIND_EA_SIZE:
2301                 case SMB_FIND_EA_LIST:
2302                 case SMB_FIND_FILE_DIRECTORY_INFO:
2303                 case SMB_FIND_FILE_FULL_DIRECTORY_INFO:
2304                 case SMB_FIND_FILE_NAMES_INFO:
2305                 case SMB_FIND_FILE_BOTH_DIRECTORY_INFO:
2306                 case SMB_FIND_ID_FULL_DIRECTORY_INFO:
2307                 case SMB_FIND_ID_BOTH_DIRECTORY_INFO:
2308                         break;
2309                 case SMB_FIND_FILE_UNIX:
2310                 case SMB_FIND_FILE_UNIX_INFO2:
2311                         /* Always use filesystem for UNIX mtime query. */
2312                         ask_sharemode = false;
2313                         if (!lp_unix_extensions()) {
2314                                 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
2315                                 goto out;
2316                         }
2317                         ucf_flags |= UCF_UNIX_NAME_LOOKUP;
2318                         break;
2319                 default:
2320                         reply_nterror(req, NT_STATUS_INVALID_LEVEL);
2321                         goto out;
2322         }
2323
2324         srvstr_get_path_wcard(ctx, params, req->flags2, &directory,
2325                               params+12, total_params - 12,
2326                               STR_TERMINATE, &ntstatus, &mask_contains_wcard);
2327         if (!NT_STATUS_IS_OK(ntstatus)) {
2328                 reply_nterror(req, ntstatus);
2329                 goto out;
2330         }
2331
2332         ntstatus = filename_convert(ctx, conn,
2333                                     req->flags2 & FLAGS2_DFS_PATHNAMES,
2334                                     directory,
2335                                     ucf_flags,
2336                                     &mask_contains_wcard,
2337                                     &smb_dname);
2338         if (!NT_STATUS_IS_OK(ntstatus)) {
2339                 if (NT_STATUS_EQUAL(ntstatus,NT_STATUS_PATH_NOT_COVERED)) {
2340                         reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
2341                                         ERRSRV, ERRbadpath);
2342                         goto out;
2343                 }
2344                 reply_nterror(req, ntstatus);
2345                 goto out;
2346         }
2347
2348         mask = smb_dname->original_lcomp;
2349
2350         directory = smb_dname->base_name;
2351
2352         p = strrchr_m(directory,'/');
2353         if(p == NULL) {
2354                 /* Windows and OS/2 systems treat search on the root '\' as if it were '\*' */
2355                 if((directory[0] == '.') && (directory[1] == '\0')) {
2356                         mask = talloc_strdup(ctx,"*");
2357                         if (!mask) {
2358                                 reply_nterror(req, NT_STATUS_NO_MEMORY);
2359                                 goto out;
2360                         }
2361                         mask_contains_wcard = True;
2362                 }
2363         } else {
2364                 *p = 0;
2365         }
2366
2367         if (p == NULL || p == directory) {
2368                 /* Ensure we don't have a directory name of "". */
2369                 directory = talloc_strdup(talloc_tos(), ".");
2370                 if (!directory) {
2371                         reply_nterror(req, NT_STATUS_NO_MEMORY);
2372                         goto out;
2373                 }
2374         }
2375
2376         DEBUG(5,("dir=%s, mask = %s\n",directory, mask));
2377
2378         if (info_level == SMB_FIND_EA_LIST) {
2379                 uint32 ea_size;
2380
2381                 if (total_data < 4) {
2382                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2383                         goto out;
2384                 }
2385
2386                 ea_size = IVAL(pdata,0);
2387                 if (ea_size != total_data) {
2388                         DEBUG(4,("call_trans2findfirst: Rejecting EA request with incorrect \
2389 total_data=%u (should be %u)\n", (unsigned int)total_data, (unsigned int)IVAL(pdata,0) ));
2390                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2391                         goto out;
2392                 }
2393
2394                 if (!lp_ea_support(SNUM(conn))) {
2395                         reply_nterror(req, NT_STATUS_EAS_NOT_SUPPORTED);
2396                         goto out;
2397                 }
2398
2399                 /* Pull out the list of names. */
2400                 ea_list = read_ea_name_list(ctx, pdata + 4, ea_size - 4);
2401                 if (!ea_list) {
2402                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2403                         goto out;
2404                 }
2405         }
2406
2407         *ppdata = (char *)SMB_REALLOC(
2408                 *ppdata, max_data_bytes + DIR_ENTRY_SAFETY_MARGIN);
2409         if(*ppdata == NULL ) {
2410                 reply_nterror(req, NT_STATUS_NO_MEMORY);
2411                 goto out;
2412         }
2413         pdata = *ppdata;
2414         data_end = pdata + max_data_bytes + DIR_ENTRY_SAFETY_MARGIN - 1;
2415
2416         /* Realloc the params space */
2417         *pparams = (char *)SMB_REALLOC(*pparams, 10);
2418         if (*pparams == NULL) {
2419                 reply_nterror(req, NT_STATUS_NO_MEMORY);
2420                 goto out;
2421         }
2422         params = *pparams;
2423
2424         /* Save the wildcard match and attribs we are using on this directory -
2425                 needed as lanman2 assumes these are being saved between calls */
2426
2427         ntstatus = dptr_create(conn,
2428                                 NULL, /* fsp */
2429                                 directory,
2430                                 False,
2431                                 True,
2432                                 req->smbpid,
2433                                 mask,
2434                                 mask_contains_wcard,
2435                                 dirtype,
2436                                 &dirptr);
2437
2438         if (!NT_STATUS_IS_OK(ntstatus)) {
2439                 reply_nterror(req, ntstatus);
2440                 goto out;
2441         }
2442
2443         dptr_num = dptr_dnum(dirptr);
2444         DEBUG(4,("dptr_num is %d, wcard = %s, attr = %d\n", dptr_num, mask, dirtype));
2445
2446         /* Initialize per TRANS2_FIND_FIRST operation data */
2447         dptr_init_search_op(dirptr);
2448
2449         /* We don't need to check for VOL here as this is returned by
2450                 a different TRANS2 call. */
2451
2452         DEBUG(8,("dirpath=<%s> dontdescend=<%s>\n",
2453                 directory,lp_dontdescend(SNUM(conn))));
2454         if (in_list(directory,lp_dontdescend(SNUM(conn)),conn->case_sensitive))
2455                 dont_descend = True;
2456
2457         p = pdata;
2458         space_remaining = max_data_bytes;
2459         out_of_space = False;
2460
2461         for (i=0;(i<maxentries) && !finished && !out_of_space;i++) {
2462                 bool got_exact_match = False;
2463
2464                 /* this is a heuristic to avoid seeking the dirptr except when
2465                         absolutely necessary. It allows for a filename of about 40 chars */
2466                 if (space_remaining < DIRLEN_GUESS && numentries > 0) {
2467                         out_of_space = True;
2468                         finished = False;
2469                 } else {
2470                         finished = !get_lanman2_dir_entry(ctx,
2471                                         conn,
2472                                         dirptr,
2473                                         req->flags2,
2474                                         mask,dirtype,info_level,
2475                                         requires_resume_key,dont_descend,
2476                                         ask_sharemode,
2477                                         &p,pdata,data_end,
2478                                         space_remaining, &out_of_space,
2479                                         &got_exact_match,
2480                                         &last_entry_off, ea_list);
2481                 }
2482
2483                 if (finished && out_of_space)
2484                         finished = False;
2485
2486                 if (!finished && !out_of_space)
2487                         numentries++;
2488
2489                 /*
2490                  * As an optimisation if we know we aren't looking
2491                  * for a wildcard name (ie. the name matches the wildcard exactly)
2492                  * then we can finish on any (first) match.
2493                  * This speeds up large directory searches. JRA.
2494                  */
2495
2496                 if(got_exact_match)
2497                         finished = True;
2498
2499                 /* Ensure space_remaining never goes -ve. */
2500                 if (PTR_DIFF(p,pdata) > max_data_bytes) {
2501                         space_remaining = 0;
2502                         out_of_space = true;
2503                 } else {
2504                         space_remaining = max_data_bytes - PTR_DIFF(p,pdata);
2505                 }
2506         }
2507
2508         /* Check if we can close the dirptr */
2509         if(close_after_first || (finished && close_if_end)) {
2510                 DEBUG(5,("call_trans2findfirst - (2) closing dptr_num %d\n", dptr_num));
2511                 dptr_close(sconn, &dptr_num);
2512         }
2513
2514         /*
2515          * If there are no matching entries we must return ERRDOS/ERRbadfile -
2516          * from observation of NT. NB. This changes to ERRDOS,ERRnofiles if
2517          * the protocol level is less than NT1. Tested with smbclient. JRA.
2518          * This should fix the OS/2 client bug #2335.
2519          */
2520
2521         if(numentries == 0) {
2522                 dptr_close(sconn, &dptr_num);
2523                 if (get_Protocol() < PROTOCOL_NT1) {
2524                         reply_force_doserror(req, ERRDOS, ERRnofiles);
2525                         goto out;
2526                 } else {
2527                         reply_botherror(req, NT_STATUS_NO_SUCH_FILE,
2528                                         ERRDOS, ERRbadfile);
2529                         goto out;
2530                 }
2531         }
2532
2533         /* At this point pdata points to numentries directory entries. */
2534
2535         /* Set up the return parameter block */
2536         SSVAL(params,0,dptr_num);
2537         SSVAL(params,2,numentries);
2538         SSVAL(params,4,finished);
2539         SSVAL(params,6,0); /* Never an EA error */
2540         SSVAL(params,8,last_entry_off);
2541
2542         send_trans2_replies(conn, req, params, 10, pdata, PTR_DIFF(p,pdata),
2543                             max_data_bytes);
2544
2545         if ((! *directory) && dptr_path(sconn, dptr_num)) {
2546                 directory = talloc_strdup(talloc_tos(),dptr_path(sconn, dptr_num));
2547                 if (!directory) {
2548                         reply_nterror(req, NT_STATUS_NO_MEMORY);
2549                 }
2550         }
2551
2552         DEBUG( 4, ( "%s mask=%s directory=%s dirtype=%d numentries=%d\n",
2553                 smb_fn_name(req->cmd),
2554                 mask, directory, dirtype, numentries ) );
2555
2556         /*
2557          * Force a name mangle here to ensure that the
2558          * mask as an 8.3 name is top of the mangled cache.
2559          * The reasons for this are subtle. Don't remove
2560          * this code unless you know what you are doing
2561          * (see PR#13758). JRA.
2562          */
2563
2564         if(!mangle_is_8_3_wildcards( mask, False, conn->params)) {
2565                 char mangled_name[13];
2566                 name_to_8_3(mask, mangled_name, True, conn->params);
2567         }
2568  out:
2569         TALLOC_FREE(smb_dname);
2570         return;
2571 }
2572
2573 /****************************************************************************
2574  Reply to a TRANS2_FINDNEXT.
2575 ****************************************************************************/
2576
2577 static void call_trans2findnext(connection_struct *conn,
2578                                 struct smb_request *req,
2579                                 char **pparams, int total_params,
2580                                 char **ppdata, int total_data,
2581                                 unsigned int max_data_bytes)
2582 {
2583         /* We must be careful here that we don't return more than the
2584                 allowed number of data bytes. If this means returning fewer than
2585                 maxentries then so be it. We assume that the redirector has
2586                 enough room for the fixed number of parameter bytes it has
2587                 requested. */
2588         char *params = *pparams;
2589         char *pdata = *ppdata;
2590         char *data_end;
2591         int dptr_num;
2592         int maxentries;
2593         uint16 info_level;
2594         uint32 resume_key;
2595         uint16 findnext_flags;
2596         bool close_after_request;
2597         bool close_if_end;
2598         bool requires_resume_key;
2599         bool continue_bit;
2600         bool mask_contains_wcard = False;
2601         char *resume_name = NULL;
2602         const char *mask = NULL;
2603         const char *directory = NULL;
2604         char *p = NULL;
2605         uint16 dirtype;
2606         int numentries = 0;
2607         int i, last_entry_off=0;
2608         bool finished = False;
2609         bool dont_descend = False;
2610         bool out_of_space = False;
2611         int space_remaining;
2612         struct ea_list *ea_list = NULL;
2613         NTSTATUS ntstatus = NT_STATUS_OK;
2614         bool ask_sharemode = lp_parm_bool(SNUM(conn), "smbd", "search ask sharemode", true);
2615         TALLOC_CTX *ctx = talloc_tos();
2616         struct dptr_struct *dirptr;
2617         struct smbd_server_connection *sconn = req->sconn;
2618
2619         if (total_params < 13) {
2620                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2621                 return;
2622         }
2623
2624         dptr_num = SVAL(params,0);
2625         maxentries = SVAL(params,2);
2626         info_level = SVAL(params,4);
2627         resume_key = IVAL(params,6);
2628         findnext_flags = SVAL(params,10);
2629         close_after_request = (findnext_flags & FLAG_TRANS2_FIND_CLOSE);
2630         close_if_end = (findnext_flags & FLAG_TRANS2_FIND_CLOSE_IF_END);
2631         requires_resume_key = (findnext_flags & FLAG_TRANS2_FIND_REQUIRE_RESUME);
2632         continue_bit = (findnext_flags & FLAG_TRANS2_FIND_CONTINUE);
2633
2634         if (!continue_bit) {
2635                 /* We only need resume_name if continue_bit is zero. */
2636                 srvstr_get_path_wcard(ctx, params, req->flags2, &resume_name,
2637                               params+12,
2638                               total_params - 12, STR_TERMINATE, &ntstatus,
2639                               &mask_contains_wcard);
2640                 if (!NT_STATUS_IS_OK(ntstatus)) {
2641                         /* Win9x or OS/2 can send a resume name of ".." or ".". This will cause the parser to
2642                            complain (it thinks we're asking for the directory above the shared
2643                            path or an invalid name). Catch this as the resume name is only compared, never used in
2644                            a file access. JRA. */
2645                         srvstr_pull_talloc(ctx, params, req->flags2,
2646                                 &resume_name, params+12,
2647                                 total_params - 12,
2648                                 STR_TERMINATE);
2649
2650                         if (!resume_name || !(ISDOT(resume_name) || ISDOTDOT(resume_name))) {
2651                                 reply_nterror(req, ntstatus);
2652                                 return;
2653                         }
2654                 }
2655         }
2656
2657         DEBUG(3,("call_trans2findnext: dirhandle = %d, max_data_bytes = %d, maxentries = %d, \
2658 close_after_request=%d, close_if_end = %d requires_resume_key = %d \
2659 resume_key = %d resume name = %s continue=%d level = %d\n",
2660                 dptr_num, max_data_bytes, maxentries, close_after_request, close_if_end,
2661                 requires_resume_key, resume_key,
2662                 resume_name ? resume_name : "(NULL)", continue_bit, info_level));
2663
2664         if (!maxentries) {
2665                 /* W2K3 seems to treat zero as 1. */
2666                 maxentries = 1;
2667         }
2668
2669         switch (info_level) {
2670                 case SMB_FIND_INFO_STANDARD:
2671                 case SMB_FIND_EA_SIZE:
2672                 case SMB_FIND_EA_LIST:
2673                 case SMB_FIND_FILE_DIRECTORY_INFO:
2674                 case SMB_FIND_FILE_FULL_DIRECTORY_INFO:
2675                 case SMB_FIND_FILE_NAMES_INFO:
2676                 case SMB_FIND_FILE_BOTH_DIRECTORY_INFO:
2677                 case SMB_FIND_ID_FULL_DIRECTORY_INFO:
2678                 case SMB_FIND_ID_BOTH_DIRECTORY_INFO:
2679                         break;
2680                 case SMB_FIND_FILE_UNIX:
2681                 case SMB_FIND_FILE_UNIX_INFO2:
2682                         /* Always use filesystem for UNIX mtime query. */
2683                         ask_sharemode = false;
2684                         if (!lp_unix_extensions()) {
2685                                 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
2686                                 return;
2687                         }
2688                         break;
2689                 default:
2690                         reply_nterror(req, NT_STATUS_INVALID_LEVEL);
2691                         return;
2692         }
2693
2694         if (info_level == SMB_FIND_EA_LIST) {
2695                 uint32 ea_size;
2696
2697                 if (total_data < 4) {
2698                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2699                         return;
2700                 }
2701
2702                 ea_size = IVAL(pdata,0);
2703                 if (ea_size != total_data) {
2704                         DEBUG(4,("call_trans2findnext: Rejecting EA request with incorrect \
2705 total_data=%u (should be %u)\n", (unsigned int)total_data, (unsigned int)IVAL(pdata,0) ));
2706                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2707                         return;
2708                 }
2709
2710                 if (!lp_ea_support(SNUM(conn))) {
2711                         reply_nterror(req, NT_STATUS_EAS_NOT_SUPPORTED);
2712                         return;
2713                 }
2714
2715                 /* Pull out the list of names. */
2716                 ea_list = read_ea_name_list(ctx, pdata + 4, ea_size - 4);
2717                 if (!ea_list) {
2718                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
2719                         return;
2720                 }
2721         }
2722
2723         *ppdata = (char *)SMB_REALLOC(
2724                 *ppdata, max_data_bytes + DIR_ENTRY_SAFETY_MARGIN);
2725         if(*ppdata == NULL) {
2726                 reply_nterror(req, NT_STATUS_NO_MEMORY);
2727                 return;
2728         }
2729
2730         pdata = *ppdata;
2731         data_end = pdata + max_data_bytes + DIR_ENTRY_SAFETY_MARGIN - 1;
2732
2733         /* Realloc the params space */
2734         *pparams = (char *)SMB_REALLOC(*pparams, 6*SIZEOFWORD);
2735         if(*pparams == NULL ) {
2736                 reply_nterror(req, NT_STATUS_NO_MEMORY);
2737                 return;
2738         }
2739
2740         params = *pparams;
2741
2742         /* Check that the dptr is valid */
2743         if(!(dirptr = dptr_fetch_lanman2(sconn, dptr_num))) {
2744                 reply_nterror(req, STATUS_NO_MORE_FILES);
2745                 return;
2746         }
2747
2748         directory = dptr_path(sconn, dptr_num);
2749
2750         /* Get the wildcard mask from the dptr */
2751         if((p = dptr_wcard(sconn, dptr_num))== NULL) {
2752                 DEBUG(2,("dptr_num %d has no wildcard\n", dptr_num));
2753                 reply_nterror(req, STATUS_NO_MORE_FILES);
2754                 return;
2755         }
2756
2757         mask = p;
2758
2759         /* Get the attr mask from the dptr */
2760         dirtype = dptr_attr(sconn, dptr_num);
2761
2762         DEBUG(3,("dptr_num is %d, mask = %s, attr = %x, dirptr=(0x%lX,%ld)\n",
2763                 dptr_num, mask, dirtype,
2764                 (long)dirptr,
2765                 dptr_TellDir(dirptr)));
2766
2767         /* Initialize per TRANS2_FIND_NEXT operation data */
2768         dptr_init_search_op(dirptr);
2769
2770         /* We don't need to check for VOL here as this is returned by
2771                 a different TRANS2 call. */
2772
2773         DEBUG(8,("dirpath=<%s> dontdescend=<%s>\n",
2774                  directory,lp_dontdescend(SNUM(conn))));
2775         if (in_list(directory,lp_dontdescend(SNUM(conn)),conn->case_sensitive))
2776                 dont_descend = True;
2777
2778         p = pdata;
2779         space_remaining = max_data_bytes;
2780         out_of_space = False;
2781
2782         /*
2783          * Seek to the correct position. We no longer use the resume key but
2784          * depend on the last file name instead.
2785          */
2786
2787         if(!continue_bit && resume_name && *resume_name) {
2788                 SMB_STRUCT_STAT st;
2789
2790                 long current_pos = 0;
2791                 /*
2792                  * Remember, name_to_8_3 is called by
2793                  * get_lanman2_dir_entry(), so the resume name
2794                  * could be mangled. Ensure we check the unmangled name.
2795                  */
2796
2797                 if (mangle_is_mangled(resume_name, conn->params)) {
2798                         char *new_resume_name = NULL;
2799                         mangle_lookup_name_from_8_3(ctx,
2800                                                 resume_name,
2801                                                 &new_resume_name,
2802                                                 conn->params);
2803                         if (new_resume_name) {
2804                                 resume_name = new_resume_name;
2805                         }
2806                 }
2807
2808                 /*
2809                  * Fix for NT redirector problem triggered by resume key indexes
2810                  * changing between directory scans. We now return a resume key of 0
2811                  * and instead look for the filename to continue from (also given
2812                  * to us by NT/95/smbfs/smbclient). If no other scans have been done between the
2813                  * findfirst/findnext (as is usual) then the directory pointer
2814                  * should already be at the correct place.
2815                  */
2816
2817                 finished = !dptr_SearchDir(dirptr, resume_name, &current_pos, &st);
2818         } /* end if resume_name && !continue_bit */
2819
2820         for (i=0;(i<(int)maxentries) && !finished && !out_of_space ;i++) {
2821                 bool got_exact_match = False;
2822
2823                 /* this is a heuristic to avoid seeking the dirptr except when
2824                         absolutely necessary. It allows for a filename of about 40 chars */
2825                 if (space_remaining < DIRLEN_GUESS && numentries > 0) {
2826                         out_of_space = True;
2827                         finished = False;
2828                 } else {
2829                         finished = !get_lanman2_dir_entry(ctx,
2830                                                 conn,
2831                                                 dirptr,
2832                                                 req->flags2,
2833                                                 mask,dirtype,info_level,
2834                                                 requires_resume_key,dont_descend,
2835                                                 ask_sharemode,
2836                                                 &p,pdata,data_end,
2837                                                 space_remaining, &out_of_space,
2838                                                 &got_exact_match,
2839                                                 &last_entry_off, ea_list);
2840                 }
2841
2842                 if (finished && out_of_space)
2843                         finished = False;
2844
2845                 if (!finished && !out_of_space)
2846                         numentries++;
2847
2848                 /*
2849                  * As an optimisation if we know we aren't looking
2850                  * for a wildcard name (ie. the name matches the wildcard exactly)
2851                  * then we can finish on any (first) match.
2852                  * This speeds up large directory searches. JRA.
2853                  */
2854
2855                 if(got_exact_match)
2856                         finished = True;
2857
2858                 space_remaining = max_data_bytes - PTR_DIFF(p,pdata);
2859         }
2860
2861         DEBUG( 3, ( "%s mask=%s directory=%s dirtype=%d numentries=%d\n",
2862                 smb_fn_name(req->cmd),
2863                 mask, directory, dirtype, numentries ) );
2864
2865         /* Check if we can close the dirptr */
2866         if(close_after_request || (finished && close_if_end)) {
2867                 DEBUG(5,("call_trans2findnext: closing dptr_num = %d\n", dptr_num));
2868                 dptr_close(sconn, &dptr_num); /* This frees up the saved mask */
2869         }
2870
2871         /* Set up the return parameter block */
2872         SSVAL(params,0,numentries);
2873         SSVAL(params,2,finished);
2874         SSVAL(params,4,0); /* Never an EA error */
2875         SSVAL(params,6,last_entry_off);
2876
2877         send_trans2_replies(conn, req, params, 8, pdata, PTR_DIFF(p,pdata),
2878                             max_data_bytes);
2879
2880         return;
2881 }
2882
2883 unsigned char *create_volume_objectid(connection_struct *conn, unsigned char objid[16])
2884 {
2885         E_md4hash(lp_servicename(SNUM(conn)),objid);
2886         return objid;
2887 }
2888
2889 static void samba_extended_info_version(struct smb_extended_info *extended_info)
2890 {
2891         SMB_ASSERT(extended_info != NULL);
2892
2893         extended_info->samba_magic = SAMBA_EXTENDED_INFO_MAGIC;
2894         extended_info->samba_version = ((SAMBA_VERSION_MAJOR & 0xff) << 24)
2895                                        | ((SAMBA_VERSION_MINOR & 0xff) << 16)
2896                                        | ((SAMBA_VERSION_RELEASE & 0xff) << 8);
2897 #ifdef SAMBA_VERSION_REVISION
2898         extended_info->samba_version |= (tolower(*SAMBA_VERSION_REVISION) - 'a' + 1) & 0xff;
2899 #endif
2900         extended_info->samba_subversion = 0;
2901 #ifdef SAMBA_VERSION_RC_RELEASE
2902         extended_info->samba_subversion |= (SAMBA_VERSION_RC_RELEASE & 0xff) << 24;
2903 #else
2904 #ifdef SAMBA_VERSION_PRE_RELEASE
2905         extended_info->samba_subversion |= (SAMBA_VERSION_PRE_RELEASE & 0xff) << 16;
2906 #endif
2907 #endif
2908 #ifdef SAMBA_VERSION_VENDOR_PATCH
2909         extended_info->samba_subversion |= (SAMBA_VERSION_VENDOR_PATCH & 0xffff);
2910 #endif
2911         extended_info->samba_gitcommitdate = 0;
2912 #ifdef SAMBA_VERSION_COMMIT_TIME
2913         unix_to_nt_time(&extended_info->samba_gitcommitdate, SAMBA_VERSION_COMMIT_TIME);
2914 #endif
2915
2916         memset(extended_info->samba_version_string, 0,
2917                sizeof(extended_info->samba_version_string));
2918
2919         snprintf (extended_info->samba_version_string,
2920                   sizeof(extended_info->samba_version_string),
2921                   "%s", samba_version_string());
2922 }
2923
2924 NTSTATUS smbd_do_qfsinfo(connection_struct *conn,
2925                          TALLOC_CTX *mem_ctx,
2926                          uint16_t info_level,
2927                          uint16_t flags2,
2928                          unsigned int max_data_bytes,
2929                          char **ppdata,
2930                          int *ret_data_len)
2931 {
2932         char *pdata, *end_data;
2933         int data_len = 0, len;
2934         const char *vname = volume_label(SNUM(conn));
2935         int snum = SNUM(conn);
2936         char *fstype = lp_fstype(SNUM(conn));
2937         uint32 additional_flags = 0;
2938         struct smb_filename smb_fname_dot;
2939         SMB_STRUCT_STAT st;
2940
2941         if (IS_IPC(conn)) {
2942                 if (info_level != SMB_QUERY_CIFS_UNIX_INFO) {
2943                         DEBUG(0,("smbd_do_qfsinfo: not an allowed "
2944                                 "info level (0x%x) on IPC$.\n",
2945                                 (unsigned int)info_level));
2946                         return NT_STATUS_ACCESS_DENIED;
2947                 }
2948         }
2949
2950         DEBUG(3,("smbd_do_qfsinfo: level = %d\n", info_level));
2951
2952         ZERO_STRUCT(smb_fname_dot);
2953         smb_fname_dot.base_name = discard_const_p(char, ".");
2954
2955         if(SMB_VFS_STAT(conn, &smb_fname_dot) != 0) {
2956                 DEBUG(2,("stat of . failed (%s)\n", strerror(errno)));
2957                 return map_nt_error_from_unix(errno);
2958         }
2959
2960         st = smb_fname_dot.st;
2961
2962         *ppdata = (char *)SMB_REALLOC(
2963                 *ppdata, max_data_bytes + DIR_ENTRY_SAFETY_MARGIN);
2964         if (*ppdata == NULL) {
2965                 return NT_STATUS_NO_MEMORY;
2966         }
2967
2968         pdata = *ppdata;
2969         memset((char *)pdata,'\0',max_data_bytes + DIR_ENTRY_SAFETY_MARGIN);
2970         end_data = pdata + max_data_bytes + DIR_ENTRY_SAFETY_MARGIN - 1;
2971
2972         switch (info_level) {
2973                 case SMB_INFO_ALLOCATION:
2974                 {
2975                         uint64_t dfree,dsize,bsize,block_size,sectors_per_unit,bytes_per_sector;
2976                         data_len = 18;
2977                         if (get_dfree_info(conn,".",False,&bsize,&dfree,&dsize) == (uint64_t)-1) {
2978                                 return map_nt_error_from_unix(errno);
2979                         }
2980
2981                         block_size = lp_block_size(snum);
2982                         if (bsize < block_size) {
2983                                 uint64_t factor = block_size/bsize;
2984                                 bsize = block_size;
2985                                 dsize /= factor;
2986                                 dfree /= factor;
2987                         }
2988                         if (bsize > block_size) {
2989                                 uint64_t factor = bsize/block_size;
2990                                 bsize = block_size;
2991                                 dsize *= factor;
2992                                 dfree *= factor;
2993                         }
2994                         bytes_per_sector = 512;
2995                         sectors_per_unit = bsize/bytes_per_sector;
2996
2997                         DEBUG(5,("smbd_do_qfsinfo : SMB_INFO_ALLOCATION id=%x, bsize=%u, cSectorUnit=%u, \
2998 cBytesSector=%u, cUnitTotal=%u, cUnitAvail=%d\n", (unsigned int)st.st_ex_dev, (unsigned int)bsize, (unsigned int)sectors_per_unit,
2999                                 (unsigned int)bytes_per_sector, (unsigned int)dsize, (unsigned int)dfree));
3000
3001                         SIVAL(pdata,l1_idFileSystem,st.st_ex_dev);
3002                         SIVAL(pdata,l1_cSectorUnit,sectors_per_unit);
3003                         SIVAL(pdata,l1_cUnit,dsize);
3004                         SIVAL(pdata,l1_cUnitAvail,dfree);
3005                         SSVAL(pdata,l1_cbSector,bytes_per_sector);
3006                         break;
3007                 }
3008
3009                 case SMB_INFO_VOLUME:
3010                         /* Return volume name */
3011                         /*
3012                          * Add volume serial number - hash of a combination of
3013                          * the called hostname and the service name.
3014                          */
3015                         SIVAL(pdata,0,str_checksum(lp_servicename(snum)) ^ (str_checksum(get_local_machine_name())<<16) );
3016                         /*
3017                          * Win2k3 and previous mess this up by sending a name length
3018                          * one byte short. I believe only older clients (OS/2 Win9x) use
3019                          * this call so try fixing this by adding a terminating null to
3020                          * the pushed string. The change here was adding the STR_TERMINATE. JRA.
3021                          */
3022                         len = srvstr_push(
3023                                 pdata, flags2,
3024                                 pdata+l2_vol_szVolLabel, vname,
3025                                 PTR_DIFF(end_data, pdata+l2_vol_szVolLabel),
3026                                 STR_NOALIGN|STR_TERMINATE);
3027                         SCVAL(pdata,l2_vol_cch,len);
3028                         data_len = l2_vol_szVolLabel + len;
3029                         DEBUG(5,("smbd_do_qfsinfo : time = %x, namelen = %d, name = %s\n",
3030                                  (unsigned)convert_timespec_to_time_t(st.st_ex_ctime),
3031                                  len, vname));
3032                         break;
3033
3034                 case SMB_QUERY_FS_ATTRIBUTE_INFO:
3035                 case SMB_FS_ATTRIBUTE_INFORMATION:
3036
3037                         additional_flags = 0;
3038 #if defined(HAVE_SYS_QUOTAS)
3039                         additional_flags |= FILE_VOLUME_QUOTAS;
3040 #endif
3041
3042                         if(lp_nt_acl_support(SNUM(conn))) {
3043                                 additional_flags |= FILE_PERSISTENT_ACLS;
3044                         }
3045
3046                         /* Capabilities are filled in at connection time through STATVFS call */
3047                         additional_flags |= conn->fs_capabilities;
3048                         additional_flags |= lp_parm_int(conn->params->service,
3049                                                         "share", "fake_fscaps",
3050                                                         0);
3051
3052                         SIVAL(pdata,0,FILE_CASE_PRESERVED_NAMES|FILE_CASE_SENSITIVE_SEARCH|
3053                                 FILE_SUPPORTS_OBJECT_IDS|FILE_UNICODE_ON_DISK|
3054                                 additional_flags); /* FS ATTRIBUTES */
3055
3056                         SIVAL(pdata,4,255); /* Max filename component length */
3057                         /* NOTE! the fstype must *not* be null terminated or win98 won't recognise it
3058                                 and will think we can't do long filenames */
3059                         len = srvstr_push(pdata, flags2, pdata+12, fstype,
3060                                           PTR_DIFF(end_data, pdata+12),
3061                                           STR_UNICODE);
3062                         SIVAL(pdata,8,len);
3063                         data_len = 12 + len;
3064                         break;
3065
3066                 case SMB_QUERY_FS_LABEL_INFO:
3067                 case SMB_FS_LABEL_INFORMATION:
3068                         len = srvstr_push(pdata, flags2, pdata+4, vname,
3069                                           PTR_DIFF(end_data, pdata+4), 0);
3070                         data_len = 4 + len;
3071                         SIVAL(pdata,0,len);
3072                         break;
3073
3074                 case SMB_QUERY_FS_VOLUME_INFO:
3075                 case SMB_FS_VOLUME_INFORMATION:
3076
3077                         /*
3078                          * Add volume serial number - hash of a combination of
3079                          * the called hostname and the service name.
3080                          */
3081                         SIVAL(pdata,8,str_checksum(lp_servicename(snum)) ^
3082                                 (str_checksum(get_local_machine_name())<<16));
3083
3084                         /* Max label len is 32 characters. */
3085                         len = srvstr_push(pdata, flags2, pdata+18, vname,
3086                                           PTR_DIFF(end_data, pdata+18),
3087                                           STR_UNICODE);
3088                         SIVAL(pdata,12,len);
3089                         data_len = 18+len;
3090
3091                         DEBUG(5,("smbd_do_qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = %d, vol=%s serv=%s\n",
3092                                 (int)strlen(vname),vname, lp_servicename(snum)));
3093                         break;
3094
3095                 case SMB_QUERY_FS_SIZE_INFO:
3096                 case SMB_FS_SIZE_INFORMATION:
3097                 {
3098                         uint64_t dfree,dsize,bsize,block_size,sectors_per_unit,bytes_per_sector;
3099                         data_len = 24;
3100                         if (get_dfree_info(conn,".",False,&bsize,&dfree,&dsize) == (uint64_t)-1) {
3101                                 return map_nt_error_from_unix(errno);
3102                         }
3103                         block_size = lp_block_size(snum);
3104                         if (bsize < block_size) {
3105                                 uint64_t factor = block_size/bsize;
3106                                 bsize = block_size;
3107                                 dsize /= factor;
3108                                 dfree /= factor;
3109                         }
3110                         if (bsize > block_size) {
3111                                 uint64_t factor = bsize/block_size;
3112                                 bsize = block_size;
3113                                 dsize *= factor;
3114                                 dfree *= factor;
3115                         }
3116                         bytes_per_sector = 512;
3117                         sectors_per_unit = bsize/bytes_per_sector;
3118                         DEBUG(5,("smbd_do_qfsinfo : SMB_QUERY_FS_SIZE_INFO bsize=%u, cSectorUnit=%u, \
3119 cBytesSector=%u, cUnitTotal=%u, cUnitAvail=%d\n", (unsigned int)bsize, (unsigned int)sectors_per_unit,
3120                                 (unsigned int)bytes_per_sector, (unsigned int)dsize, (unsigned int)dfree));
3121                         SBIG_UINT(pdata,0,dsize);
3122                         SBIG_UINT(pdata,8,dfree);
3123                         SIVAL(pdata,16,sectors_per_unit);
3124                         SIVAL(pdata,20,bytes_per_sector);
3125                         break;
3126                 }
3127
3128                 case SMB_FS_FULL_SIZE_INFORMATION:
3129                 {
3130                         uint64_t dfree,dsize,bsize,block_size,sectors_per_unit,bytes_per_sector;
3131                         data_len = 32;
3132                         if (get_dfree_info(conn,".",False,&bsize,&dfree,&dsize) == (uint64_t)-1) {
3133                                 return map_nt_error_from_unix(errno);
3134                         }
3135                         block_size = lp_block_size(snum);
3136                         if (bsize < block_size) {
3137                                 uint64_t factor = block_size/bsize;
3138                                 bsize = block_size;
3139                                 dsize /= factor;
3140                                 dfree /= factor;
3141                         }
3142                         if (bsize > block_size) {
3143                                 uint64_t factor = bsize/block_size;
3144                                 bsize = block_size;
3145                                 dsize *= factor;
3146                                 dfree *= factor;
3147                         }
3148                         bytes_per_sector = 512;
3149                         sectors_per_unit = bsize/bytes_per_sector;
3150                         DEBUG(5,("smbd_do_qfsinfo : SMB_QUERY_FS_FULL_SIZE_INFO bsize=%u, cSectorUnit=%u, \
3151 cBytesSector=%u, cUnitTotal=%u, cUnitAvail=%d\n", (unsigned int)bsize, (unsigned int)sectors_per_unit,
3152                                 (unsigned int)bytes_per_sector, (unsigned int)dsize, (unsigned int)dfree));
3153                         SBIG_UINT(pdata,0,dsize); /* Total Allocation units. */
3154                         SBIG_UINT(pdata,8,dfree); /* Caller available allocation units. */
3155                         SBIG_UINT(pdata,16,dfree); /* Actual available allocation units. */
3156                         SIVAL(pdata,24,sectors_per_unit); /* Sectors per allocation unit. */
3157                         SIVAL(pdata,28,bytes_per_sector); /* Bytes per sector. */
3158                         break;
3159                 }
3160
3161                 case SMB_QUERY_FS_DEVICE_INFO:
3162                 case SMB_FS_DEVICE_INFORMATION:
3163                 {
3164                         uint32_t characteristics = FILE_DEVICE_IS_MOUNTED;
3165
3166                         if (!CAN_WRITE(conn)) {
3167                                 characteristics |= FILE_READ_ONLY_DEVICE;
3168                         }
3169                         data_len = 8;
3170                         SIVAL(pdata,0,FILE_DEVICE_DISK); /* dev type */
3171                         SIVAL(pdata,4,characteristics);
3172                         break;
3173                 }
3174
3175 #ifdef HAVE_SYS_QUOTAS
3176                 case SMB_FS_QUOTA_INFORMATION:
3177                 /*
3178                  * what we have to send --metze:
3179                  *
3180                  * Unknown1:            24 NULL bytes
3181                  * Soft Quota Treshold: 8 bytes seems like uint64_t or so
3182                  * Hard Quota Limit:    8 bytes seems like uint64_t or so
3183                  * Quota Flags:         2 byte :
3184                  * Unknown3:            6 NULL bytes
3185                  *
3186                  * 48 bytes total
3187                  *
3188                  * details for Quota Flags:
3189                  *
3190                  * 0x0020 Log Limit: log if the user exceeds his Hard Quota
3191                  * 0x0010 Log Warn:  log if the user exceeds his Soft Quota
3192                  * 0x0002 Deny Disk: deny disk access when the user exceeds his Hard Quota
3193                  * 0x0001 Enable Quotas: enable quota for this fs
3194                  *
3195                  */
3196                 {
3197                         /* we need to fake up a fsp here,
3198                          * because its not send in this call
3199                          */
3200                         files_struct fsp;
3201                         SMB_NTQUOTA_STRUCT quotas;
3202
3203                         ZERO_STRUCT(fsp);
3204                         ZERO_STRUCT(quotas);
3205
3206                         fsp.conn = conn;
3207                         fsp.fnum = -1;
3208
3209                         /* access check */
3210                         if (get_current_uid(conn) != 0) {
3211                                 DEBUG(0,("set_user_quota: access_denied "
3212                                          "service [%s] user [%s]\n",
3213                                          lp_servicename(SNUM(conn)),
3214                                          conn->session_info->unix_info->unix_name));
3215                                 return NT_STATUS_ACCESS_DENIED;
3216                         }
3217
3218                         if (vfs_get_ntquota(&fsp, SMB_USER_FS_QUOTA_TYPE, NULL, &quotas)!=0) {
3219                                 DEBUG(0,("vfs_get_ntquota() failed for service [%s]\n",lp_servicename(SNUM(conn))));
3220                                 return map_nt_error_from_unix(errno);
3221                         }
3222
3223                         data_len = 48;
3224
3225                         DEBUG(10,("SMB_FS_QUOTA_INFORMATION: for service [%s]\n",
3226                                   lp_servicename(SNUM(conn))));
3227
3228                         /* Unknown1 24 NULL bytes*/
3229                         SBIG_UINT(pdata,0,(uint64_t)0);
3230                         SBIG_UINT(pdata,8,(uint64_t)0);
3231                         SBIG_UINT(pdata,16,(uint64_t)0);
3232
3233                         /* Default Soft Quota 8 bytes */
3234                         SBIG_UINT(pdata,24,quotas.softlim);
3235
3236                         /* Default Hard Quota 8 bytes */
3237                         SBIG_UINT(pdata,32,quotas.hardlim);
3238
3239                         /* Quota flag 2 bytes */
3240                         SSVAL(pdata,40,quotas.qflags);
3241
3242                         /* Unknown3 6 NULL bytes */
3243                         SSVAL(pdata,42,0);
3244                         SIVAL(pdata,44,0);
3245
3246                         break;
3247                 }
3248 #endif /* HAVE_SYS_QUOTAS */
3249                 case SMB_FS_OBJECTID_INFORMATION:
3250                 {
3251                         unsigned char objid[16];
3252                         struct smb_extended_info extended_info;
3253                         memcpy(pdata,create_volume_objectid(conn, objid),16);
3254                         samba_extended_info_version (&extended_info);
3255                         SIVAL(pdata,16,extended_info.samba_magic);
3256                         SIVAL(pdata,20,extended_info.samba_version);
3257                         SIVAL(pdata,24,extended_info.samba_subversion);
3258                         SBIG_UINT(pdata,28,extended_info.samba_gitcommitdate);
3259                         memcpy(pdata+36,extended_info.samba_version_string,28);
3260                         data_len = 64;
3261                         break;
3262                 }
3263
3264                 /*
3265                  * Query the version and capabilities of the CIFS UNIX extensions
3266                  * in use.
3267                  */
3268
3269                 case SMB_QUERY_CIFS_UNIX_INFO:
3270                 {
3271                         bool large_write = lp_min_receive_file_size() &&
3272                                         !srv_is_signing_active(conn->sconn);
3273                         bool large_read = !srv_is_signing_active(conn->sconn);
3274                         int encrypt_caps = 0;
3275
3276                         if (!lp_unix_extensions()) {
3277                                 return NT_STATUS_INVALID_LEVEL;
3278                         }
3279
3280                         switch (conn->encrypt_level) {
3281                         case 0:
3282                                 encrypt_caps = 0;
3283                                 break;
3284                         case 1:
3285                         case Auto:
3286                                 encrypt_caps = CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP;
3287                                 break;
3288                         case Required:
3289                                 encrypt_caps = CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP|
3290                                                 CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP;
3291                                 large_write = false;
3292                                 large_read = false;
3293                                 break;
3294                         }
3295
3296                         data_len = 12;
3297                         SSVAL(pdata,0,CIFS_UNIX_MAJOR_VERSION);
3298                         SSVAL(pdata,2,CIFS_UNIX_MINOR_VERSION);
3299
3300                         /* We have POSIX ACLs, pathname, encryption,
3301                          * large read/write, and locking capability. */
3302
3303                         SBIG_UINT(pdata,4,((uint64_t)(
3304                                         CIFS_UNIX_POSIX_ACLS_CAP|
3305                                         CIFS_UNIX_POSIX_PATHNAMES_CAP|
3306                                         CIFS_UNIX_FCNTL_LOCKS_CAP|
3307                                         CIFS_UNIX_EXTATTR_CAP|
3308                                         CIFS_UNIX_POSIX_PATH_OPERATIONS_CAP|
3309                                         encrypt_caps|
3310                                         (large_read ? CIFS_UNIX_LARGE_READ_CAP : 0) |
3311                                         (large_write ?
3312                                         CIFS_UNIX_LARGE_WRITE_CAP : 0))));
3313                         break;
3314                 }
3315
3316                 case SMB_QUERY_POSIX_FS_INFO:
3317                 {
3318                         int rc;
3319                         vfs_statvfs_struct svfs;
3320
3321                         if (!lp_unix_extensions()) {
3322                                 return NT_STATUS_INVALID_LEVEL;
3323                         }
3324
3325                         rc = SMB_VFS_STATVFS(conn, ".", &svfs);
3326
3327                         if (!rc) {
3328                                 data_len = 56;
3329                                 SIVAL(pdata,0,svfs.OptimalTransferSize);
3330                                 SIVAL(pdata,4,svfs.BlockSize);
3331                                 SBIG_UINT(pdata,8,svfs.TotalBlocks);
3332                                 SBIG_UINT(pdata,16,svfs.BlocksAvail);
3333                                 SBIG_UINT(pdata,24,svfs.UserBlocksAvail);
3334                                 SBIG_UINT(pdata,32,svfs.TotalFileNodes);
3335                                 SBIG_UINT(pdata,40,svfs.FreeFileNodes);
3336                                 SBIG_UINT(pdata,48,svfs.FsIdentifier);
3337                                 DEBUG(5,("smbd_do_qfsinfo : SMB_QUERY_POSIX_FS_INFO succsessful\n"));
3338 #ifdef EOPNOTSUPP
3339                         } else if (rc == EOPNOTSUPP) {
3340                                 return NT_STATUS_INVALID_LEVEL;
3341 #endif /* EOPNOTSUPP */
3342                         } else {
3343                                 DEBUG(0,("vfs_statvfs() failed for service [%s]\n",lp_servicename(SNUM(conn))));
3344                                 return NT_STATUS_DOS(ERRSRV, ERRerror);
3345                         }
3346                         break;
3347                 }
3348
3349                 case SMB_QUERY_POSIX_WHOAMI:
3350                 {
3351                         uint32_t flags = 0;
3352                         uint32_t sid_bytes;
3353                         int i;
3354
3355                         if (!lp_unix_extensions()) {
3356                                 return NT_STATUS_INVALID_LEVEL;
3357                         }
3358
3359                         if (max_data_bytes < 40) {
3360                                 return NT_STATUS_BUFFER_TOO_SMALL;
3361                         }
3362
3363                         /* We ARE guest if global_sid_Builtin_Guests is
3364                          * in our list of SIDs.
3365                          */
3366                         if (nt_token_check_sid(&global_sid_Builtin_Guests,
3367                                                conn->session_info->security_token)) {
3368                                 flags |= SMB_WHOAMI_GUEST;
3369                         }
3370
3371                         /* We are NOT guest if global_sid_Authenticated_Users
3372                          * is in our list of SIDs.
3373                          */
3374                         if (nt_token_check_sid(&global_sid_Authenticated_Users,
3375                                                conn->session_info->security_token)) {
3376                                 flags &= ~SMB_WHOAMI_GUEST;
3377                         }
3378
3379                         /* NOTE: 8 bytes for UID/GID, irrespective of native
3380                          * platform size. This matches
3381                          * SMB_QUERY_FILE_UNIX_BASIC and friends.
3382                          */
3383                         data_len = 4 /* flags */
3384                             + 4 /* flag mask */
3385                             + 8 /* uid */
3386                             + 8 /* gid */
3387                             + 4 /* ngroups */
3388                             + 4 /* num_sids */
3389                             + 4 /* SID bytes */
3390                             + 4 /* pad/reserved */
3391                             + (conn->session_info->unix_token->ngroups * 8)
3392                                 /* groups list */
3393                             + (conn->session_info->security_token->num_sids *
3394                                     SID_MAX_SIZE)
3395                                 /* SID list */;
3396
3397                         SIVAL(pdata, 0, flags);
3398                         SIVAL(pdata, 4, SMB_WHOAMI_MASK);
3399                         SBIG_UINT(pdata, 8,
3400                                   (uint64_t)conn->session_info->unix_token->uid);
3401                         SBIG_UINT(pdata, 16,
3402                                   (uint64_t)conn->session_info->unix_token->gid);
3403
3404
3405                         if (data_len >= max_data_bytes) {
3406                                 /* Potential overflow, skip the GIDs and SIDs. */
3407
3408                                 SIVAL(pdata, 24, 0); /* num_groups */
3409                                 SIVAL(pdata, 28, 0); /* num_sids */
3410                                 SIVAL(pdata, 32, 0); /* num_sid_bytes */
3411                                 SIVAL(pdata, 36, 0); /* reserved */
3412
3413                                 data_len = 40;
3414                                 break;
3415                         }
3416
3417                         SIVAL(pdata, 24, conn->session_info->unix_token->ngroups);
3418                         SIVAL(pdata, 28, conn->session_info->security_token->num_sids);
3419
3420                         /* We walk the SID list twice, but this call is fairly
3421                          * infrequent, and I don't expect that it's performance
3422                          * sensitive -- jpeach
3423                          */
3424                         for (i = 0, sid_bytes = 0;
3425                              i < conn->session_info->security_token->num_sids; ++i) {
3426                                 sid_bytes += ndr_size_dom_sid(
3427                                         &conn->session_info->security_token->sids[i],
3428                                         0);
3429                         }
3430
3431                         /* SID list byte count */
3432                         SIVAL(pdata, 32, sid_bytes);
3433
3434                         /* 4 bytes pad/reserved - must be zero */
3435                         SIVAL(pdata, 36, 0);
3436                         data_len = 40;
3437
3438                         /* GID list */
3439                         for (i = 0; i < conn->session_info->unix_token->ngroups; ++i) {
3440                                 SBIG_UINT(pdata, data_len,
3441                                           (uint64_t)conn->session_info->unix_token->groups[i]);
3442                                 data_len += 8;
3443                         }
3444
3445                         /* SID list */
3446                         for (i = 0;
3447                             i < conn->session_info->security_token->num_sids; ++i) {
3448                                 int sid_len = ndr_size_dom_sid(
3449                                         &conn->session_info->security_token->sids[i],
3450                                         0);
3451
3452                                 sid_linearize(pdata + data_len, sid_len,
3453                                     &conn->session_info->security_token->sids[i]);
3454                                 data_len += sid_len;
3455                         }
3456
3457                         break;
3458                 }
3459
3460                 case SMB_MAC_QUERY_FS_INFO:
3461                         /*
3462                          * Thursby MAC extension... ONLY on NTFS filesystems
3463                          * once we do streams then we don't need this
3464                          */
3465                         if (strequal(lp_fstype(SNUM(conn)),"NTFS")) {
3466                                 data_len = 88;
3467                                 SIVAL(pdata,84,0x100); /* Don't support mac... */
3468                                 break;
3469                         }
3470                         /* drop through */
3471                 default:
3472                         return NT_STATUS_INVALID_LEVEL;
3473         }
3474
3475         *ret_data_len = data_len;
3476         return NT_STATUS_OK;
3477 }
3478
3479 /****************************************************************************
3480  Reply to a TRANS2_QFSINFO (query filesystem info).
3481 ****************************************************************************/
3482
3483 static void call_trans2qfsinfo(connection_struct *conn,
3484                                struct smb_request *req,
3485                                char **pparams, int total_params,
3486                                char **ppdata, int total_data,
3487                                unsigned int max_data_bytes)
3488 {
3489         char *params = *pparams;
3490         uint16_t info_level;
3491         int data_len = 0;
3492         NTSTATUS status;
3493
3494         if (total_params < 2) {
3495                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
3496                 return;
3497         }
3498
3499         info_level = SVAL(params,0);
3500
3501         if (ENCRYPTION_REQUIRED(conn) && !req->encrypted) {
3502                 if (info_level != SMB_QUERY_CIFS_UNIX_INFO) {
3503                         DEBUG(0,("call_trans2qfsinfo: encryption required "
3504                                 "and info level 0x%x sent.\n",
3505                                 (unsigned int)info_level));
3506                         exit_server_cleanly("encryption required "
3507                                 "on connection");
3508                         return;
3509                 }
3510         }
3511
3512         DEBUG(3,("call_trans2qfsinfo: level = %d\n", info_level));
3513
3514         status = smbd_do_qfsinfo(conn, req,
3515                                  info_level,
3516                                  req->flags2,
3517                                  max_data_bytes,
3518                                  ppdata, &data_len);
3519         if (!NT_STATUS_IS_OK(status)) {
3520                 reply_nterror(req, status);
3521                 return;
3522         }
3523
3524         send_trans2_replies(conn, req, params, 0, *ppdata, data_len,
3525                             max_data_bytes);
3526
3527         DEBUG( 4, ( "%s info_level = %d\n",
3528                     smb_fn_name(req->cmd), info_level) );
3529
3530         return;
3531 }
3532
3533 /****************************************************************************
3534  Reply to a TRANS2_SETFSINFO (set filesystem info).
3535 ****************************************************************************/
3536
3537 static void call_trans2setfsinfo(connection_struct *conn,
3538                                  struct smb_request *req,
3539                                  char **pparams, int total_params,
3540                                  char **ppdata, int total_data,
3541                                  unsigned int max_data_bytes)
3542 {
3543         struct smbd_server_connection *sconn = req->sconn;
3544         char *pdata = *ppdata;
3545         char *params = *pparams;
3546         uint16 info_level;
3547
3548         DEBUG(10,("call_trans2setfsinfo: for service [%s]\n",lp_servicename(SNUM(conn))));
3549
3550         /*  */
3551         if (total_params < 4) {
3552                 DEBUG(0,("call_trans2setfsinfo: requires total_params(%d) >= 4 bytes!\n",
3553                         total_params));
3554                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
3555                 return;
3556         }
3557
3558         info_level = SVAL(params,2);
3559
3560         if (IS_IPC(conn)) {
3561                 if (info_level != SMB_REQUEST_TRANSPORT_ENCRYPTION &&
3562                                 info_level != SMB_SET_CIFS_UNIX_INFO) {
3563                         DEBUG(0,("call_trans2setfsinfo: not an allowed "
3564                                 "info level (0x%x) on IPC$.\n",
3565                                 (unsigned int)info_level));
3566                         reply_nterror(req, NT_STATUS_ACCESS_DENIED);
3567                         return;
3568                 }
3569         }
3570
3571         if (ENCRYPTION_REQUIRED(conn) && !req->encrypted) {
3572                 if (info_level != SMB_REQUEST_TRANSPORT_ENCRYPTION) {
3573                         DEBUG(0,("call_trans2setfsinfo: encryption required "
3574                                 "and info level 0x%x sent.\n",
3575                                 (unsigned int)info_level));
3576                         exit_server_cleanly("encryption required "
3577                                 "on connection");
3578                         return;
3579                 }
3580         }
3581
3582         switch(info_level) {
3583                 case SMB_SET_CIFS_UNIX_INFO:
3584                         if (!lp_unix_extensions()) {
3585                                 reply_nterror(req,
3586                                               NT_STATUS_INVALID_LEVEL);
3587                                 return;
3588                         }
3589
3590                         /* There should be 12 bytes of capabilities set. */
3591                         if (total_data < 8) {
3592                                 reply_nterror(
3593                                         req,
3594                                         NT_STATUS_INVALID_PARAMETER);
3595                                 return;
3596                         }
3597                         sconn->smb1.unix_info.client_major = SVAL(pdata,0);
3598                         sconn->smb1.unix_info.client_minor = SVAL(pdata,2);
3599                         sconn->smb1.unix_info.client_cap_low = IVAL(pdata,4);
3600                         sconn->smb1.unix_info.client_cap_high = IVAL(pdata,8);
3601                         /* Just print these values for now. */
3602                         DEBUG(10, ("call_trans2setfsinfo: set unix_info info. "
3603                                    "major = %u, minor = %u cap_low = 0x%x, "
3604                                    "cap_high = 0x%xn",
3605                                    (unsigned int)sconn->
3606                                    smb1.unix_info.client_major,
3607                                    (unsigned int)sconn->
3608                                    smb1.unix_info.client_minor,
3609                                    (unsigned int)sconn->
3610                                    smb1.unix_info.client_cap_low,
3611                                    (unsigned int)sconn->
3612                                    smb1.unix_info.client_cap_high));
3613
3614                         /* Here is where we must switch to posix pathname processing... */
3615                         if (sconn->smb1.unix_info.client_cap_low & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
3616                                 lp_set_posix_pathnames();
3617                                 mangle_change_to_posix();
3618                         }
3619
3620                         if ((sconn->smb1.unix_info.client_cap_low & CIFS_UNIX_FCNTL_LOCKS_CAP) &&
3621                             !(sconn->smb1.unix_info.client_cap_low & CIFS_UNIX_POSIX_PATH_OPERATIONS_CAP)) {
3622                                 /* Client that knows how to do posix locks,
3623                                  * but not posix open/mkdir operations. Set a
3624                                  * default type for read/write checks. */
3625
3626                                 lp_set_posix_default_cifsx_readwrite_locktype(POSIX_LOCK);
3627
3628                         }
3629                         break;
3630
3631                 case SMB_REQUEST_TRANSPORT_ENCRYPTION:
3632                         {
3633                                 NTSTATUS status;
3634                                 size_t param_len = 0;
3635                                 size_t data_len = total_data;
3636
3637                                 if (!lp_unix_extensions()) {
3638                                         reply_nterror(
3639                                                 req,
3640                                                 NT_STATUS_INVALID_LEVEL);
3641                                         return;
3642                                 }
3643
3644                                 if (lp_smb_encrypt(SNUM(conn)) == false) {
3645                                         reply_nterror(
3646                                                 req,
3647                                                 NT_STATUS_NOT_SUPPORTED);
3648                                         return;
3649                                 }
3650
3651                                 if (req->sconn->smb1.echo_handler.trusted_fde) {
3652                                         DEBUG( 2,("call_trans2setfsinfo: "
3653                                                 "request transport encryption disabled"
3654                                                 "with 'fork echo handler = yes'\n"));
3655                                         reply_nterror(
3656                                                 req,
3657                                                 NT_STATUS_NOT_SUPPORTED);
3658                                         return;
3659                                 }
3660
3661                                 DEBUG( 4,("call_trans2setfsinfo: "
3662                                         "request transport encryption.\n"));
3663
3664                                 status = srv_request_encryption_setup(conn,
3665                                                                 (unsigned char **)ppdata,
3666                                                                 &data_len,
3667                                                                 (unsigned char **)pparams,
3668                                                                 &param_len);
3669
3670                                 if (!NT_STATUS_EQUAL(status, NT_STATUS_MORE_PROCESSING_REQUIRED) &&
3671                                                 !NT_STATUS_IS_OK(status)) {
3672                                         reply_nterror(req, status);
3673                                         return;
3674                                 }
3675
3676                                 send_trans2_replies(conn, req,
3677                                                 *pparams,
3678                                                 param_len,
3679                                                 *ppdata,
3680                                                 data_len,
3681                                                 max_data_bytes);
3682
3683                                 if (NT_STATUS_IS_OK(status)) {
3684                                         /* Server-side transport
3685                                          * encryption is now *on*. */
3686                                         status = srv_encryption_start(conn);
3687                                         if (!NT_STATUS_IS_OK(status)) {
3688                                                 char *reason = talloc_asprintf(talloc_tos(),
3689                                                                                "Failure in setting "
3690                                                                                "up encrypted transport: %s",
3691                                                                                nt_errstr(status));
3692                                                 exit_server_cleanly(reason);
3693                                         }
3694                                 }
3695                                 return;
3696                         }
3697
3698                 case SMB_FS_QUOTA_INFORMATION:
3699                         {
3700                                 files_struct *fsp = NULL;
3701                                 SMB_NTQUOTA_STRUCT quotas;
3702
3703                                 ZERO_STRUCT(quotas);
3704
3705                                 /* access check */
3706                                 if ((get_current_uid(conn) != 0) || !CAN_WRITE(conn)) {
3707                                         DEBUG(0,("set_user_quota: access_denied service [%s] user [%s]\n",
3708                                                  lp_servicename(SNUM(conn)),
3709                                                  conn->session_info->unix_info->unix_name));
3710                                         reply_nterror(req, NT_STATUS_ACCESS_DENIED);
3711                                         return;
3712                                 }
3713
3714                                 /* note: normaly there're 48 bytes,
3715                                  * but we didn't use the last 6 bytes for now
3716                                  * --metze
3717                                  */
3718                                 fsp = file_fsp(req, SVAL(params,0));
3719
3720                                 if (!check_fsp_ntquota_handle(conn, req,
3721                                                               fsp)) {
3722                                         DEBUG(3,("TRANSACT_GET_USER_QUOTA: no valid QUOTA HANDLE\n"));
3723                                         reply_nterror(
3724                                                 req, NT_STATUS_INVALID_HANDLE);
3725                                         return;
3726                                 }
3727
3728                                 if (total_data < 42) {
3729                                         DEBUG(0,("call_trans2setfsinfo: SET_FS_QUOTA: requires total_data(%d) >= 42 bytes!\n",
3730                                                 total_data));
3731                                         reply_nterror(
3732                                                 req,
3733                                                 NT_STATUS_INVALID_PARAMETER);
3734                                         return;
3735                                 }
3736
3737                                 /* unknown_1 24 NULL bytes in pdata*/
3738
3739                                 /* the soft quotas 8 bytes (uint64_t)*/
3740                                 quotas.softlim = BVAL(pdata,24);
3741
3742                                 /* the hard quotas 8 bytes (uint64_t)*/
3743                                 quotas.hardlim = BVAL(pdata,32);
3744
3745                                 /* quota_flags 2 bytes **/
3746                                 quotas.qflags = SVAL(pdata,40);
3747
3748                                 /* unknown_2 6 NULL bytes follow*/
3749
3750                                 /* now set the quotas */
3751                                 if (vfs_set_ntquota(fsp, SMB_USER_FS_QUOTA_TYPE, NULL, &quotas)!=0) {
3752                                         DEBUG(0,("vfs_set_ntquota() failed for service [%s]\n",lp_servicename(SNUM(conn))));
3753                                         reply_nterror(req, map_nt_error_from_unix(errno));
3754                                         return;
3755                                 }
3756
3757                                 break;
3758                         }
3759                 default:
3760                         DEBUG(3,("call_trans2setfsinfo: unknown level (0x%X) not implemented yet.\n",
3761                                 info_level));
3762                         reply_nterror(req, NT_STATUS_INVALID_LEVEL);
3763                         return;
3764                         break;
3765         }
3766
3767         /*
3768          * sending this reply works fine,
3769          * but I'm not sure it's the same
3770          * like windows do...
3771          * --metze
3772          */
3773         reply_outbuf(req, 10, 0);
3774 }
3775
3776 #if defined(HAVE_POSIX_ACLS)
3777 /****************************************************************************
3778  Utility function to count the number of entries in a POSIX acl.
3779 ****************************************************************************/
3780
3781 static unsigned int count_acl_entries(connection_struct *conn, SMB_ACL_T posix_acl)
3782 {
3783         unsigned int ace_count = 0;
3784         int entry_id = SMB_ACL_FIRST_ENTRY;
3785         SMB_ACL_ENTRY_T entry;
3786
3787         while ( posix_acl && (SMB_VFS_SYS_ACL_GET_ENTRY(conn, posix_acl, entry_id, &entry) == 1)) {
3788                 /* get_next... */
3789                 if (entry_id == SMB_ACL_FIRST_ENTRY) {
3790                         entry_id = SMB_ACL_NEXT_ENTRY;
3791                 }
3792                 ace_count++;
3793         }
3794         return ace_count;
3795 }
3796
3797 /****************************************************************************
3798  Utility function to marshall a POSIX acl into wire format.
3799 ****************************************************************************/
3800
3801 static bool marshall_posix_acl(connection_struct *conn, char *pdata, SMB_STRUCT_STAT *pst, SMB_ACL_T posix_acl)
3802 {
3803         int entry_id = SMB_ACL_FIRST_ENTRY;
3804         SMB_ACL_ENTRY_T entry;
3805
3806         while ( posix_acl && (SMB_VFS_SYS_ACL_GET_ENTRY(conn, posix_acl, entry_id, &entry) == 1)) {
3807                 SMB_ACL_TAG_T tagtype;
3808                 SMB_ACL_PERMSET_T permset;
3809                 unsigned char perms = 0;
3810                 unsigned int own_grp;
3811
3812                 /* get_next... */
3813                 if (entry_id == SMB_ACL_FIRST_ENTRY) {
3814                         entry_id = SMB_ACL_NEXT_ENTRY;
3815                 }
3816
3817                 if (SMB_VFS_SYS_ACL_GET_TAG_TYPE(conn, entry, &tagtype) == -1) {
3818                         DEBUG(0,("marshall_posix_acl: SMB_VFS_SYS_ACL_GET_TAG_TYPE failed.\n"));
3819                         return False;
3820                 }
3821
3822                 if (SMB_VFS_SYS_ACL_GET_PERMSET(conn, entry, &permset) == -1) {
3823                         DEBUG(0,("marshall_posix_acl: SMB_VFS_SYS_ACL_GET_PERMSET failed.\n"));
3824                         return False;
3825                 }
3826
3827                 perms |= (SMB_VFS_SYS_ACL_GET_PERM(conn, permset, SMB_ACL_READ) ? SMB_POSIX_ACL_READ : 0);
3828                 perms |= (SMB_VFS_SYS_ACL_GET_PERM(conn, permset, SMB_ACL_WRITE) ? SMB_POSIX_ACL_WRITE : 0);
3829                 perms |= (SMB_VFS_SYS_ACL_GET_PERM(conn, permset, SMB_ACL_EXECUTE) ? SMB_POSIX_ACL_EXECUTE : 0);
3830
3831                 SCVAL(pdata,1,perms);
3832
3833                 switch (tagtype) {
3834                         case SMB_ACL_USER_OBJ:
3835                                 SCVAL(pdata,0,SMB_POSIX_ACL_USER_OBJ);
3836                                 own_grp = (unsigned int)pst->st_ex_uid;
3837                                 SIVAL(pdata,2,own_grp);
3838                                 SIVAL(pdata,6,0);
3839                                 break;
3840                         case SMB_ACL_USER:
3841                                 {
3842                                         uid_t *puid = (uid_t *)SMB_VFS_SYS_ACL_GET_QUALIFIER(conn, entry);
3843                                         if (!puid) {
3844                                                 DEBUG(0,("marshall_posix_acl: SMB_VFS_SYS_ACL_GET_QUALIFIER failed.\n"));
3845                                                 return False;
3846                                         }
3847                                         own_grp = (unsigned int)*puid;
3848                                         SMB_VFS_SYS_ACL_FREE_QUALIFIER(conn, (void *)puid,tagtype);
3849                                         SCVAL(pdata,0,SMB_POSIX_ACL_USER);
3850                                         SIVAL(pdata,2,own_grp);
3851                                         SIVAL(pdata,6,0);
3852                                         break;
3853                                 }
3854                         case SMB_ACL_GROUP_OBJ:
3855                                 SCVAL(pdata,0,SMB_POSIX_ACL_GROUP_OBJ);
3856                                 own_grp = (unsigned int)pst->st_ex_gid;
3857                                 SIVAL(pdata,2,own_grp);
3858                                 SIVAL(pdata,6,0);
3859                                 break;
3860                         case SMB_ACL_GROUP:
3861                                 {
3862                                         gid_t *pgid= (gid_t *)SMB_VFS_SYS_ACL_GET_QUALIFIER(conn, entry);
3863                                         if (!pgid) {
3864                                                 DEBUG(0,("marshall_posix_acl: SMB_VFS_SYS_ACL_GET_QUALIFIER failed.\n"));
3865                                                 return False;
3866                                         }
3867                                         own_grp = (unsigned int)*pgid;
3868                                         SMB_VFS_SYS_ACL_FREE_QUALIFIER(conn, (void *)pgid,tagtype);
3869                                         SCVAL(pdata,0,SMB_POSIX_ACL_GROUP);
3870                                         SIVAL(pdata,2,own_grp);
3871                                         SIVAL(pdata,6,0);
3872                                         break;
3873                                 }
3874                         case SMB_ACL_MASK:
3875                                 SCVAL(pdata,0,SMB_POSIX_ACL_MASK);
3876                                 SIVAL(pdata,2,0xFFFFFFFF);
3877                                 SIVAL(pdata,6,0xFFFFFFFF);
3878                                 break;
3879                         case SMB_ACL_OTHER:
3880                                 SCVAL(pdata,0,SMB_POSIX_ACL_OTHER);
3881                                 SIVAL(pdata,2,0xFFFFFFFF);
3882                                 SIVAL(pdata,6,0xFFFFFFFF);
3883                                 break;
3884                         default:
3885                                 DEBUG(0,("marshall_posix_acl: unknown tagtype.\n"));
3886                                 return False;
3887                 }
3888                 pdata += SMB_POSIX_ACL_ENTRY_SIZE;
3889         }
3890
3891         return True;
3892 }
3893 #endif
3894
3895 /****************************************************************************
3896  Store the FILE_UNIX_BASIC info.
3897 ****************************************************************************/
3898
3899 static char *store_file_unix_basic(connection_struct *conn,
3900                                 char *pdata,
3901                                 files_struct *fsp,
3902                                 const SMB_STRUCT_STAT *psbuf)
3903 {
3904         uint64_t file_index = get_FileIndex(conn, psbuf);
3905
3906         DEBUG(10,("store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC\n"));
3907         DEBUG(4,("store_file_unix_basic: st_mode=%o\n",(int)psbuf->st_ex_mode));
3908
3909         SOFF_T(pdata,0,get_file_size_stat(psbuf));             /* File size 64 Bit */
3910         pdata += 8;
3911
3912         SOFF_T(pdata,0,SMB_VFS_GET_ALLOC_SIZE(conn,fsp,psbuf)); /* Number of bytes used on disk - 64 Bit */
3913         pdata += 8;
3914
3915         put_long_date_timespec(TIMESTAMP_SET_NT_OR_BETTER, pdata, psbuf->st_ex_ctime);       /* Change Time 64 Bit */
3916         put_long_date_timespec(TIMESTAMP_SET_NT_OR_BETTER ,pdata+8, psbuf->st_ex_atime);     /* Last access time 64 Bit */
3917         put_long_date_timespec(TIMESTAMP_SET_NT_OR_BETTER, pdata+16, psbuf->st_ex_mtime);    /* Last modification time 64 Bit */
3918         pdata += 24;
3919
3920         SIVAL(pdata,0,psbuf->st_ex_uid);               /* user id for the owner */
3921         SIVAL(pdata,4,0);
3922         pdata += 8;
3923
3924         SIVAL(pdata,0,psbuf->st_ex_gid);               /* group id of owner */
3925         SIVAL(pdata,4,0);
3926         pdata += 8;
3927
3928         SIVAL(pdata,0,unix_filetype(psbuf->st_ex_mode));
3929         pdata += 4;
3930
3931         SIVAL(pdata,0,unix_dev_major(psbuf->st_ex_rdev));   /* Major device number if type is device */
3932         SIVAL(pdata,4,0);
3933         pdata += 8;
3934
3935         SIVAL(pdata,0,unix_dev_minor(psbuf->st_ex_rdev));   /* Minor device number if type is device */
3936         SIVAL(pdata,4,0);
3937         pdata += 8;
3938
3939         SINO_T_VAL(pdata,0,(SMB_INO_T)file_index);   /* inode number */
3940         pdata += 8;
3941
3942         SIVAL(pdata,0, unix_perms_to_wire(psbuf->st_ex_mode));     /* Standard UNIX file permissions */
3943         SIVAL(pdata,4,0);
3944         pdata += 8;
3945
3946         SIVAL(pdata,0,psbuf->st_ex_nlink);             /* number of hard links */
3947         SIVAL(pdata,4,0);
3948         pdata += 8;
3949
3950         return pdata;
3951 }
3952
3953 /* Forward and reverse mappings from the UNIX_INFO2 file flags field and
3954  * the chflags(2) (or equivalent) flags.
3955  *
3956  * XXX: this really should be behind the VFS interface. To do this, we would
3957  * need to alter SMB_STRUCT_STAT so that it included a flags and a mask field.
3958  * Each VFS module could then implement its own mapping as appropriate for the
3959  * platform. We would then pass the SMB flags into SMB_VFS_CHFLAGS.
3960  */
3961 static const struct {unsigned stat_fflag; unsigned smb_fflag;}
3962         info2_flags_map[] =
3963 {
3964 #ifdef UF_NODUMP
3965     { UF_NODUMP, EXT_DO_NOT_BACKUP },
3966 #endif
3967
3968 #ifdef UF_IMMUTABLE
3969     { UF_IMMUTABLE, EXT_IMMUTABLE },
3970 #endif
3971
3972 #ifdef UF_APPEND
3973     { UF_APPEND, EXT_OPEN_APPEND_ONLY },
3974 #endif
3975
3976 #ifdef UF_HIDDEN
3977     { UF_HIDDEN, EXT_HIDDEN },
3978 #endif
3979
3980     /* Do not remove. We need to guarantee that this array has at least one
3981      * entry to build on HP-UX.
3982      */
3983     { 0, 0 }
3984
3985 };
3986
3987 static void map_info2_flags_from_sbuf(const SMB_STRUCT_STAT *psbuf,
3988                                 uint32 *smb_fflags, uint32 *smb_fmask)
3989 {
3990         int i;
3991
3992         for (i = 0; i < ARRAY_SIZE(info2_flags_map); ++i) {
3993             *smb_fmask |= info2_flags_map[i].smb_fflag;
3994             if (psbuf->st_ex_flags & info2_flags_map[i].stat_fflag) {
3995                     *smb_fflags |= info2_flags_map[i].smb_fflag;
3996             }
3997         }
3998 }
3999
4000 static bool map_info2_flags_to_sbuf(const SMB_STRUCT_STAT *psbuf,
4001                                 const uint32 smb_fflags,
4002                                 const uint32 smb_fmask,
4003                                 int *stat_fflags)
4004 {
4005         uint32 max_fmask = 0;
4006         int i;
4007
4008         *stat_fflags = psbuf->st_ex_flags;
4009
4010         /* For each flags requested in smb_fmask, check the state of the
4011          * corresponding flag in smb_fflags and set or clear the matching
4012          * stat flag.
4013          */
4014
4015         for (i = 0; i < ARRAY_SIZE(info2_flags_map); ++i) {
4016             max_fmask |= info2_flags_map[i].smb_fflag;
4017             if (smb_fmask & info2_flags_map[i].smb_fflag) {
4018                     if (smb_fflags & info2_flags_map[i].smb_fflag) {
4019                             *stat_fflags |= info2_flags_map[i].stat_fflag;
4020                     } else {
4021                             *stat_fflags &= ~info2_flags_map[i].stat_fflag;
4022                     }
4023             }
4024         }
4025
4026         /* If smb_fmask is asking to set any bits that are not supported by
4027          * our flag mappings, we should fail.
4028          */
4029         if ((smb_fmask & max_fmask) != smb_fmask) {
4030                 return False;
4031         }
4032
4033         return True;
4034 }
4035
4036
4037 /* Just like SMB_QUERY_FILE_UNIX_BASIC, but with the addition
4038  * of file flags and birth (create) time.
4039  */
4040 static char *store_file_unix_basic_info2(connection_struct *conn,
4041                                 char *pdata,
4042                                 files_struct *fsp,
4043                                 const SMB_STRUCT_STAT *psbuf)
4044 {
4045         uint32 file_flags = 0;
4046         uint32 flags_mask = 0;
4047
4048         pdata = store_file_unix_basic(conn, pdata, fsp, psbuf);
4049
4050         /* Create (birth) time 64 bit */
4051         put_long_date_timespec(TIMESTAMP_SET_NT_OR_BETTER,pdata, psbuf->st_ex_btime);
4052         pdata += 8;
4053
4054         map_info2_flags_from_sbuf(psbuf, &file_flags, &flags_mask);
4055         SIVAL(pdata, 0, file_flags); /* flags */
4056         SIVAL(pdata, 4, flags_mask); /* mask */
4057         pdata += 8;
4058
4059         return pdata;
4060 }
4061
4062 static NTSTATUS marshall_stream_info(unsigned int num_streams,
4063                                      const struct stream_struct *streams,
4064                                      char *data,
4065                                      unsigned int max_data_bytes,
4066                                      unsigned int *data_size)
4067 {
4068         unsigned int i;
4069         unsigned int ofs = 0;
4070
4071         for (i = 0; i < num_streams && ofs <= max_data_bytes; i++) {
4072                 unsigned int next_offset;
4073                 size_t namelen;
4074                 smb_ucs2_t *namebuf;
4075
4076                 if (!push_ucs2_talloc(talloc_tos(), &namebuf,
4077                                       streams[i].name, &namelen) ||
4078                     namelen <= 2)
4079                 {
4080                         return NT_STATUS_INVALID_PARAMETER;
4081                 }
4082
4083                 /*
4084                  * name_buf is now null-terminated, we need to marshall as not
4085                  * terminated
4086                  */
4087
4088                 namelen -= 2;
4089
4090                 SIVAL(data, ofs+4, namelen);
4091                 SOFF_T(data, ofs+8, streams[i].size);
4092                 SOFF_T(data, ofs+16, streams[i].alloc_size);
4093                 memcpy(data+ofs+24, namebuf, namelen);
4094                 TALLOC_FREE(namebuf);
4095
4096                 next_offset = ofs + 24 + namelen;
4097
4098                 if (i == num_streams-1) {
4099                         SIVAL(data, ofs, 0);
4100                 }
4101                 else {
4102                         unsigned int align = ndr_align_size(next_offset, 8);
4103
4104                         memset(data+next_offset, 0, align);
4105                         next_offset += align;
4106
4107                         SIVAL(data, ofs, next_offset - ofs);
4108                         ofs = next_offset;
4109                 }
4110
4111                 ofs = next_offset;
4112         }
4113
4114         *data_size = ofs;
4115
4116         return NT_STATUS_OK;
4117 }
4118
4119 /****************************************************************************
4120  Reply to a TRANSACT2_QFILEINFO on a PIPE !
4121 ****************************************************************************/
4122
4123 static void call_trans2qpipeinfo(connection_struct *conn,
4124                                  struct smb_request *req,
4125                                  unsigned int tran_call,
4126                                  char **pparams, int total_params,
4127                                  char **ppdata, int total_data,
4128                                  unsigned int max_data_bytes)
4129 {
4130         char *params = *pparams;
4131         char *pdata = *ppdata;
4132         unsigned int data_size = 0;
4133         unsigned int param_size = 2;
4134         uint16 info_level;
4135         files_struct *fsp;
4136
4137         if (!params) {
4138                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
4139                 return;
4140         }
4141
4142         if (total_params < 4) {
4143                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
4144                 return;
4145         }
4146
4147         fsp = file_fsp(req, SVAL(params,0));
4148         if (!fsp_is_np(fsp)) {
4149                 reply_nterror(req, NT_STATUS_INVALID_HANDLE);
4150                 return;
4151         }
4152
4153         info_level = SVAL(params,2);
4154
4155         *pparams = (char *)SMB_REALLOC(*pparams,2);
4156         if (*pparams == NULL) {
4157                 reply_nterror(req, NT_STATUS_NO_MEMORY);
4158                 return;
4159         }
4160         params = *pparams;
4161         SSVAL(params,0,0);
4162         data_size = max_data_bytes + DIR_ENTRY_SAFETY_MARGIN;
4163         *ppdata = (char *)SMB_REALLOC(*ppdata, data_size);
4164         if (*ppdata == NULL ) {
4165                 reply_nterror(req, NT_STATUS_NO_MEMORY);
4166                 return;
4167         }
4168         pdata = *ppdata;
4169
4170         switch (info_level) {
4171                 case SMB_FILE_STANDARD_INFORMATION:
4172                         memset(pdata,0,24);
4173                         SOFF_T(pdata,0,4096LL);
4174                         SIVAL(pdata,16,1);
4175                         SIVAL(pdata,20,1);
4176                         data_size = 24;
4177                         break;
4178
4179                 default:
4180                         reply_nterror(req, NT_STATUS_INVALID_LEVEL);
4181                         return;
4182         }
4183
4184         send_trans2_replies(conn, req, params, param_size, *ppdata, data_size,
4185                             max_data_bytes);
4186
4187         return;
4188 }
4189
4190 NTSTATUS smbd_do_qfilepathinfo(connection_struct *conn,
4191                                TALLOC_CTX *mem_ctx,
4192                                uint16_t info_level,
4193                                files_struct *fsp,
4194                                struct smb_filename *smb_fname,
4195                                bool delete_pending,
4196                                struct timespec write_time_ts,
4197                                struct ea_list *ea_list,
4198                                int lock_data_count,
4199                                char *lock_data,
4200                                uint16_t flags2,
4201                                unsigned int max_data_bytes,
4202                                char **ppdata,
4203                                unsigned int *pdata_size)
4204 {
4205         char *pdata = *ppdata;
4206         char *dstart, *dend;
4207         unsigned int data_size;
4208         struct timespec create_time_ts, mtime_ts, atime_ts, ctime_ts;
4209         time_t create_time, mtime, atime, c_time;
4210         SMB_STRUCT_STAT *psbuf = &smb_fname->st;
4211         char *p;
4212         char *base_name;
4213         char *dos_fname;
4214         int mode;
4215         int nlink;
4216         NTSTATUS status;
4217         uint64_t file_size = 0;
4218         uint64_t pos = 0;
4219         uint64_t allocation_size = 0;
4220         uint64_t file_index = 0;
4221         uint32_t access_mask = 0;
4222
4223         if (INFO_LEVEL_IS_UNIX(info_level) && !lp_unix_extensions()) {
4224                 return NT_STATUS_INVALID_LEVEL;
4225         }
4226
4227         DEBUG(5,("smbd_do_qfilepathinfo: %s (fnum = %d) level=%d max_data=%u\n",
4228                  smb_fname_str_dbg(smb_fname), fsp ? fsp->fnum : -1,
4229                  info_level, max_data_bytes));
4230
4231         mode = dos_mode(conn, smb_fname);
4232         nlink = psbuf->st_ex_nlink;
4233
4234         if (nlink && (mode&FILE_ATTRIBUTE_DIRECTORY)) {
4235                 nlink = 1;
4236         }
4237
4238         if ((nlink > 0) && delete_pending) {
4239                 nlink -= 1;
4240         }
4241
4242         data_size = max_data_bytes + DIR_ENTRY_SAFETY_MARGIN;
4243         *ppdata = (char *)SMB_REALLOC(*ppdata, data_size);
4244         if (*ppdata == NULL) {
4245                 return NT_STATUS_NO_MEMORY;
4246         }
4247         pdata = *ppdata;
4248         dstart = pdata;
4249         dend = dstart + data_size - 1;
4250
4251         if (!null_timespec(write_time_ts) && !INFO_LEVEL_IS_UNIX(info_level)) {
4252                 update_stat_ex_mtime(psbuf, write_time_ts);
4253         }
4254
4255         create_time_ts = get_create_timespec(conn, fsp, smb_fname);
4256         mtime_ts = psbuf->st_ex_mtime;
4257         atime_ts = psbuf->st_ex_atime;
4258         ctime_ts = get_change_timespec(conn, fsp, smb_fname);
4259
4260         if (lp_dos_filetime_resolution(SNUM(conn))) {
4261                 dos_filetime_timespec(&create_time_ts);
4262                 dos_filetime_timespec(&mtime_ts);
4263                 dos_filetime_timespec(&atime_ts);
4264                 dos_filetime_timespec(&ctime_ts);
4265         }
4266
4267         create_time = convert_timespec_to_time_t(create_time_ts);
4268         mtime = convert_timespec_to_time_t(mtime_ts);
4269         atime = convert_timespec_to_time_t(atime_ts);
4270         c_time = convert_timespec_to_time_t(ctime_ts);
4271
4272         p = strrchr_m(smb_fname->base_name,'/');
4273         if (!p)
4274                 base_name = smb_fname->base_name;
4275         else
4276                 base_name = p+1;
4277
4278         /* NT expects the name to be in an exact form of the *full*
4279            filename. See the trans2 torture test */
4280         if (ISDOT(base_name)) {
4281                 dos_fname = talloc_strdup(mem_ctx, "\\");
4282                 if (!dos_fname) {
4283                         return NT_STATUS_NO_MEMORY;
4284                 }
4285         } else {
4286                 dos_fname = talloc_asprintf(mem_ctx,
4287                                 "\\%s",
4288                                 smb_fname->base_name);
4289                 if (!dos_fname) {
4290                         return NT_STATUS_NO_MEMORY;
4291                 }
4292                 if (is_ntfs_stream_smb_fname(smb_fname)) {
4293                         dos_fname = talloc_asprintf(dos_fname, "%s",
4294                                                     smb_fname->stream_name);
4295                         if (!dos_fname) {
4296                                 return NT_STATUS_NO_MEMORY;
4297                         }
4298                 }
4299
4300                 string_replace(dos_fname, '/', '\\');
4301         }
4302
4303         allocation_size = SMB_VFS_GET_ALLOC_SIZE(conn, fsp, psbuf);
4304
4305         if (!fsp) {
4306                 /* Do we have this path open ? */
4307                 files_struct *fsp1;
4308                 struct file_id fileid = vfs_file_id_from_sbuf(conn, psbuf);
4309                 fsp1 = file_find_di_first(conn->sconn, fileid);
4310                 if (fsp1 && fsp1->initial_allocation_size) {
4311                         allocation_size = SMB_VFS_GET_ALLOC_SIZE(conn, fsp1, psbuf);
4312                 }
4313         }
4314
4315         if (!(mode & FILE_ATTRIBUTE_DIRECTORY)) {
4316                 file_size = get_file_size_stat(psbuf);
4317         }
4318
4319         if (fsp) {
4320                 pos = fsp->fh->position_information;
4321         }
4322
4323         if (fsp) {
4324                 access_mask = fsp->access_mask;
4325         } else {
4326                 /* GENERIC_EXECUTE mapping from Windows */
4327                 access_mask = 0x12019F;
4328         }
4329
4330         /* This should be an index number - looks like
4331            dev/ino to me :-)
4332
4333            I think this causes us to fail the IFSKIT
4334            BasicFileInformationTest. -tpot */
4335         file_index = get_FileIndex(conn, psbuf);
4336
4337         switch (info_level) {
4338                 case SMB_INFO_STANDARD:
4339                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_INFO_STANDARD\n"));
4340                         data_size = 22;
4341                         srv_put_dos_date2(pdata,l1_fdateCreation,create_time);
4342                         srv_put_dos_date2(pdata,l1_fdateLastAccess,atime);
4343                         srv_put_dos_date2(pdata,l1_fdateLastWrite,mtime); /* write time */
4344                         SIVAL(pdata,l1_cbFile,(uint32)file_size);
4345                         SIVAL(pdata,l1_cbFileAlloc,(uint32)allocation_size);
4346                         SSVAL(pdata,l1_attrFile,mode);
4347                         break;
4348
4349                 case SMB_INFO_QUERY_EA_SIZE:
4350                 {
4351                         unsigned int ea_size =
4352                             estimate_ea_size(conn, fsp,
4353                                              smb_fname->base_name);
4354                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_INFO_QUERY_EA_SIZE\n"));
4355                         data_size = 26;
4356                         srv_put_dos_date2(pdata,0,create_time);
4357                         srv_put_dos_date2(pdata,4,atime);
4358                         srv_put_dos_date2(pdata,8,mtime); /* write time */
4359                         SIVAL(pdata,12,(uint32)file_size);
4360                         SIVAL(pdata,16,(uint32)allocation_size);
4361                         SSVAL(pdata,20,mode);
4362                         SIVAL(pdata,22,ea_size);
4363                         break;
4364                 }
4365
4366                 case SMB_INFO_IS_NAME_VALID:
4367                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_INFO_IS_NAME_VALID\n"));
4368                         if (fsp) {
4369                                 /* os/2 needs this ? really ?*/
4370                                 return NT_STATUS_DOS(ERRDOS, ERRbadfunc);
4371                         }
4372                         /* This is only reached for qpathinfo */
4373                         data_size = 0;
4374                         break;
4375
4376                 case SMB_INFO_QUERY_EAS_FROM_LIST:
4377                 {
4378                         size_t total_ea_len = 0;
4379                         struct ea_list *ea_file_list = NULL;
4380
4381                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_INFO_QUERY_EAS_FROM_LIST\n"));
4382
4383                         ea_file_list =
4384                             get_ea_list_from_file(mem_ctx, conn, fsp,
4385                                                   smb_fname->base_name,
4386                                                   &total_ea_len);
4387                         ea_list = ea_list_union(ea_list, ea_file_list, &total_ea_len);
4388
4389                         if (!ea_list || (total_ea_len > data_size)) {
4390                                 data_size = 4;
4391                                 SIVAL(pdata,0,4);   /* EA List Length must be set to 4 if no EA's. */
4392                                 break;
4393                         }
4394
4395                         data_size = fill_ea_buffer(mem_ctx, pdata, data_size, conn, ea_list);
4396                         break;
4397                 }
4398
4399                 case SMB_INFO_QUERY_ALL_EAS:
4400                 {
4401                         /* We have data_size bytes to put EA's into. */
4402                         size_t total_ea_len = 0;
4403
4404                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_INFO_QUERY_ALL_EAS\n"));
4405
4406                         ea_list = get_ea_list_from_file(mem_ctx, conn, fsp,
4407                                                         smb_fname->base_name,
4408                                                         &total_ea_len);
4409                         if (!ea_list || (total_ea_len > data_size)) {
4410                                 data_size = 4;
4411                                 SIVAL(pdata,0,4);   /* EA List Length must be set to 4 if no EA's. */
4412                                 break;
4413                         }
4414
4415                         data_size = fill_ea_buffer(mem_ctx, pdata, data_size, conn, ea_list);
4416                         break;
4417                 }
4418
4419                 case 0xFF0F:/*SMB2_INFO_QUERY_ALL_EAS*/
4420                 {
4421                         /* This is FileFullEaInformation - 0xF which maps to
4422                          * 1015 (decimal) in smbd_do_setfilepathinfo. */
4423
4424                         /* We have data_size bytes to put EA's into. */
4425                         size_t total_ea_len = 0;
4426                         struct ea_list *ea_file_list = NULL;
4427
4428                         DEBUG(10,("smbd_do_qfilepathinfo: SMB2_INFO_QUERY_ALL_EAS\n"));
4429
4430                         /*TODO: add filtering and index handling */
4431
4432                         ea_file_list =
4433                             get_ea_list_from_file(mem_ctx, conn, fsp,
4434                                                   smb_fname->base_name,
4435                                                   &total_ea_len);
4436                         if (!ea_file_list) {
4437                                 return NT_STATUS_NO_EAS_ON_FILE;
4438                         }
4439
4440                         status = fill_ea_chained_buffer(mem_ctx,
4441                                                         pdata,
4442                                                         data_size,
4443                                                         &data_size,
4444                                                         conn, ea_file_list);
4445                         if (!NT_STATUS_IS_OK(status)) {
4446                                 return status;
4447                         }
4448                         break;
4449                 }
4450
4451                 case SMB_FILE_BASIC_INFORMATION:
4452                 case SMB_QUERY_FILE_BASIC_INFO:
4453
4454                         if (info_level == SMB_QUERY_FILE_BASIC_INFO) {
4455                                 DEBUG(10,("smbd_do_qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO\n"));
4456                                 data_size = 36; /* w95 returns 40 bytes not 36 - why ?. */
4457                         } else {
4458                                 DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_BASIC_INFORMATION\n"));
4459                                 data_size = 40;
4460                                 SIVAL(pdata,36,0);
4461                         }
4462                         put_long_date_timespec(conn->ts_res,pdata,create_time_ts);
4463                         put_long_date_timespec(conn->ts_res,pdata+8,atime_ts);
4464                         put_long_date_timespec(conn->ts_res,pdata+16,mtime_ts); /* write time */
4465                         put_long_date_timespec(conn->ts_res,pdata+24,ctime_ts); /* change time */
4466                         SIVAL(pdata,32,mode);
4467
4468                         DEBUG(5,("SMB_QFBI - "));
4469                         DEBUG(5,("create: %s ", ctime(&create_time)));
4470                         DEBUG(5,("access: %s ", ctime(&atime)));
4471                         DEBUG(5,("write: %s ", ctime(&mtime)));
4472                         DEBUG(5,("change: %s ", ctime(&c_time)));
4473                         DEBUG(5,("mode: %x\n", mode));
4474                         break;
4475
4476                 case SMB_FILE_STANDARD_INFORMATION:
4477                 case SMB_QUERY_FILE_STANDARD_INFO:
4478
4479                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_STANDARD_INFORMATION\n"));
4480                         data_size = 24;
4481                         SOFF_T(pdata,0,allocation_size);
4482                         SOFF_T(pdata,8,file_size);
4483                         SIVAL(pdata,16,nlink);
4484                         SCVAL(pdata,20,delete_pending?1:0);
4485                         SCVAL(pdata,21,(mode&FILE_ATTRIBUTE_DIRECTORY)?1:0);
4486                         SSVAL(pdata,22,0); /* Padding. */
4487                         break;
4488
4489                 case SMB_FILE_EA_INFORMATION:
4490                 case SMB_QUERY_FILE_EA_INFO:
4491                 {
4492                         unsigned int ea_size =
4493                             estimate_ea_size(conn, fsp, smb_fname->base_name);
4494                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_EA_INFORMATION\n"));
4495                         data_size = 4;
4496                         SIVAL(pdata,0,ea_size);
4497                         break;
4498                 }
4499
4500                 /* Get the 8.3 name - used if NT SMB was negotiated. */
4501                 case SMB_QUERY_FILE_ALT_NAME_INFO:
4502                 case SMB_FILE_ALTERNATE_NAME_INFORMATION:
4503                 {
4504                         int len;
4505                         char mangled_name[13];
4506                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_ALTERNATE_NAME_INFORMATION\n"));
4507                         if (!name_to_8_3(base_name,mangled_name,
4508                                                 True,conn->params)) {
4509                                 return NT_STATUS_NO_MEMORY;
4510                         }
4511                         len = srvstr_push(dstart, flags2,
4512                                           pdata+4, mangled_name,
4513                                           PTR_DIFF(dend, pdata+4),
4514                                           STR_UNICODE);
4515                         data_size = 4 + len;
4516                         SIVAL(pdata,0,len);
4517                         break;
4518                 }
4519
4520                 case SMB_QUERY_FILE_NAME_INFO:
4521                 {
4522                         int len;
4523                         /*
4524                           this must be *exactly* right for ACLs on mapped drives to work
4525                          */
4526                         len = srvstr_push(dstart, flags2,
4527                                           pdata+4, dos_fname,
4528                                           PTR_DIFF(dend, pdata+4),
4529                                           STR_UNICODE);
4530                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_QUERY_FILE_NAME_INFO\n"));
4531                         data_size = 4 + len;
4532                         SIVAL(pdata,0,len);
4533                         break;
4534                 }
4535
4536                 case SMB_FILE_ALLOCATION_INFORMATION:
4537                 case SMB_QUERY_FILE_ALLOCATION_INFO:
4538                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_ALLOCATION_INFORMATION\n"));
4539                         data_size = 8;
4540                         SOFF_T(pdata,0,allocation_size);
4541                         break;
4542
4543                 case SMB_FILE_END_OF_FILE_INFORMATION:
4544                 case SMB_QUERY_FILE_END_OF_FILEINFO:
4545                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_END_OF_FILE_INFORMATION\n"));
4546                         data_size = 8;
4547                         SOFF_T(pdata,0,file_size);
4548                         break;
4549
4550                 case SMB_QUERY_FILE_ALL_INFO:
4551                 case SMB_FILE_ALL_INFORMATION:
4552                 {
4553                         int len;
4554                         unsigned int ea_size =
4555                             estimate_ea_size(conn, fsp, smb_fname->base_name);
4556                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_ALL_INFORMATION\n"));
4557                         put_long_date_timespec(conn->ts_res,pdata,create_time_ts);
4558                         put_long_date_timespec(conn->ts_res,pdata+8,atime_ts);
4559                         put_long_date_timespec(conn->ts_res,pdata+16,mtime_ts); /* write time */
4560                         put_long_date_timespec(conn->ts_res,pdata+24,ctime_ts); /* change time */
4561                         SIVAL(pdata,32,mode);
4562                         SIVAL(pdata,36,0); /* padding. */
4563                         pdata += 40;
4564                         SOFF_T(pdata,0,allocation_size);
4565                         SOFF_T(pdata,8,file_size);
4566                         SIVAL(pdata,16,nlink);
4567                         SCVAL(pdata,20,delete_pending);
4568                         SCVAL(pdata,21,(mode&FILE_ATTRIBUTE_DIRECTORY)?1:0);
4569                         SSVAL(pdata,22,0);
4570                         pdata += 24;
4571                         SIVAL(pdata,0,ea_size);
4572                         pdata += 4; /* EA info */
4573                         len = srvstr_push(dstart, flags2,
4574                                           pdata+4, dos_fname,
4575                                           PTR_DIFF(dend, pdata+4),
4576                                           STR_UNICODE);
4577                         SIVAL(pdata,0,len);
4578                         pdata += 4 + len;
4579                         data_size = PTR_DIFF(pdata,(*ppdata));
4580                         break;
4581                 }
4582
4583                 case 0xFF12:/*SMB2_FILE_ALL_INFORMATION*/
4584                 {
4585                         int len;
4586                         unsigned int ea_size =
4587                             estimate_ea_size(conn, fsp, smb_fname->base_name);
4588                         DEBUG(10,("smbd_do_qfilepathinfo: SMB2_FILE_ALL_INFORMATION\n"));
4589                         put_long_date_timespec(conn->ts_res,pdata+0x00,create_time_ts);
4590                         put_long_date_timespec(conn->ts_res,pdata+0x08,atime_ts);
4591                         put_long_date_timespec(conn->ts_res,pdata+0x10,mtime_ts); /* write time */
4592                         put_long_date_timespec(conn->ts_res,pdata+0x18,ctime_ts); /* change time */
4593                         SIVAL(pdata,    0x20, mode);
4594                         SIVAL(pdata,    0x24, 0); /* padding. */
4595                         SBVAL(pdata,    0x28, allocation_size);
4596                         SBVAL(pdata,    0x30, file_size);
4597                         SIVAL(pdata,    0x38, nlink);
4598                         SCVAL(pdata,    0x3C, delete_pending);
4599                         SCVAL(pdata,    0x3D, (mode&FILE_ATTRIBUTE_DIRECTORY)?1:0);
4600                         SSVAL(pdata,    0x3E, 0); /* padding */
4601                         SBVAL(pdata,    0x40, file_index);
4602                         SIVAL(pdata,    0x48, ea_size);
4603                         SIVAL(pdata,    0x4C, access_mask);
4604                         SBVAL(pdata,    0x50, pos);
4605                         SIVAL(pdata,    0x58, mode); /*TODO: mode != mode fix this!!! */
4606                         SIVAL(pdata,    0x5C, 0); /* No alignment needed. */
4607
4608                         pdata += 0x60;
4609
4610                         len = srvstr_push(dstart, flags2,
4611                                           pdata+4, dos_fname,
4612                                           PTR_DIFF(dend, pdata+4),
4613                                           STR_UNICODE);
4614                         SIVAL(pdata,0,len);
4615                         pdata += 4 + len;
4616                         data_size = PTR_DIFF(pdata,(*ppdata));
4617                         break;
4618                 }
4619                 case SMB_FILE_INTERNAL_INFORMATION:
4620
4621                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION\n"));
4622                         SBVAL(pdata, 0, file_index);
4623                         data_size = 8;
4624                         break;
4625
4626                 case SMB_FILE_ACCESS_INFORMATION:
4627                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_ACCESS_INFORMATION\n"));
4628                         SIVAL(pdata, 0, access_mask);
4629                         data_size = 4;
4630                         break;
4631
4632                 case SMB_FILE_NAME_INFORMATION:
4633                         /* Pathname with leading '\'. */
4634                         {
4635                                 size_t byte_len;
4636                                 byte_len = dos_PutUniCode(pdata+4,dos_fname,(size_t)max_data_bytes,False);
4637                                 DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_NAME_INFORMATION\n"));
4638                                 SIVAL(pdata,0,byte_len);
4639                                 data_size = 4 + byte_len;
4640                                 break;
4641                         }
4642
4643                 case SMB_FILE_DISPOSITION_INFORMATION:
4644                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_DISPOSITION_INFORMATION\n"));
4645                         data_size = 1;
4646                         SCVAL(pdata,0,delete_pending);
4647                         break;
4648
4649                 case SMB_FILE_POSITION_INFORMATION:
4650                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_POSITION_INFORMATION\n"));
4651                         data_size = 8;
4652                         SOFF_T(pdata,0,pos);
4653                         break;
4654
4655                 case SMB_FILE_MODE_INFORMATION:
4656                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_MODE_INFORMATION\n"));
4657                         SIVAL(pdata,0,mode);
4658                         data_size = 4;
4659                         break;
4660
4661                 case SMB_FILE_ALIGNMENT_INFORMATION:
4662                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_ALIGNMENT_INFORMATION\n"));
4663                         SIVAL(pdata,0,0); /* No alignment needed. */
4664                         data_size = 4;
4665                         break;
4666
4667                 /*
4668                  * NT4 server just returns "invalid query" to this - if we try
4669                  * to answer it then NTws gets a BSOD! (tridge).  W2K seems to
4670                  * want this. JRA.
4671                  */
4672                 /* The first statement above is false - verified using Thursby
4673                  * client against NT4 -- gcolley.
4674                  */
4675                 case SMB_QUERY_FILE_STREAM_INFO:
4676                 case SMB_FILE_STREAM_INFORMATION: {
4677                         unsigned int num_streams = 0;
4678                         struct stream_struct *streams = NULL;
4679
4680                         DEBUG(10,("smbd_do_qfilepathinfo: "
4681                                   "SMB_FILE_STREAM_INFORMATION\n"));
4682
4683                         if (is_ntfs_stream_smb_fname(smb_fname)) {
4684                                 return NT_STATUS_INVALID_PARAMETER;
4685                         }
4686
4687                         status = vfs_streaminfo(conn, fsp, smb_fname->base_name,
4688                                                 talloc_tos(), &num_streams, &streams);
4689
4690                         if (!NT_STATUS_IS_OK(status)) {
4691                                 DEBUG(10, ("could not get stream info: %s\n",
4692                                            nt_errstr(status)));
4693                                 return status;
4694                         }
4695
4696                         status = marshall_stream_info(num_streams, streams,
4697                                                       pdata, max_data_bytes,
4698                                                       &data_size);
4699
4700                         if (!NT_STATUS_IS_OK(status)) {
4701                                 DEBUG(10, ("marshall_stream_info failed: %s\n",
4702                                            nt_errstr(status)));
4703                                 return status;
4704                         }
4705
4706                         TALLOC_FREE(streams);
4707
4708                         break;
4709                 }
4710                 case SMB_QUERY_COMPRESSION_INFO:
4711                 case SMB_FILE_COMPRESSION_INFORMATION:
4712                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_COMPRESSION_INFORMATION\n"));
4713                         SOFF_T(pdata,0,file_size);
4714                         SIVAL(pdata,8,0); /* ??? */
4715                         SIVAL(pdata,12,0); /* ??? */
4716                         data_size = 16;
4717                         break;
4718
4719                 case SMB_FILE_NETWORK_OPEN_INFORMATION:
4720                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_NETWORK_OPEN_INFORMATION\n"));
4721                         put_long_date_timespec(conn->ts_res,pdata,create_time_ts);
4722                         put_long_date_timespec(conn->ts_res,pdata+8,atime_ts);
4723                         put_long_date_timespec(conn->ts_res,pdata+16,mtime_ts); /* write time */
4724                         put_long_date_timespec(conn->ts_res,pdata+24,ctime_ts); /* change time */
4725                         SOFF_T(pdata,32,allocation_size);
4726                         SOFF_T(pdata,40,file_size);
4727                         SIVAL(pdata,48,mode);
4728                         SIVAL(pdata,52,0); /* ??? */
4729                         data_size = 56;
4730                         break;
4731
4732                 case SMB_FILE_ATTRIBUTE_TAG_INFORMATION:
4733                         DEBUG(10,("smbd_do_qfilepathinfo: SMB_FILE_ATTRIBUTE_TAG_INFORMATION\n"));
4734                         SIVAL(pdata,0,mode);
4735                         SIVAL(pdata,4,0);
4736                         data_size = 8;
4737                         break;
4738
4739                 /*
4740                  * CIFS UNIX Extensions.
4741                  */
4742
4743                 case SMB_QUERY_FILE_UNIX_BASIC:
4744
4745                         pdata = store_file_unix_basic(conn, pdata, fsp, psbuf);
4746                         data_size = PTR_DIFF(pdata,(*ppdata));
4747
4748                         DEBUG(4,("smbd_do_qfilepathinfo: "
4749                                  "SMB_QUERY_FILE_UNIX_BASIC\n"));
4750                         dump_data(4, (uint8_t *)(*ppdata), data_size);
4751
4752                         break;
4753
4754                 case SMB_QUERY_FILE_UNIX_INFO2:
4755
4756                         pdata = store_file_unix_basic_info2(conn, pdata, fsp, psbuf);
4757                         data_size = PTR_DIFF(pdata,(*ppdata));
4758
4759                         {
4760                                 int i;
4761                                 DEBUG(4,("smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_INFO2 "));
4762
4763                                 for (i=0; i<100; i++)
4764                                         DEBUG(4,("%d=%x, ",i, (*ppdata)[i]));
4765                                 DEBUG(4,("\n"));
4766                         }
4767
4768                         break;
4769
4770                 case SMB_QUERY_FILE_UNIX_LINK:
4771                         {
4772                                 int len;
4773                                 char *buffer = talloc_array(mem_ctx, char, PATH_MAX+1);
4774
4775                                 if (!buffer) {
4776                                         return NT_STATUS_NO_MEMORY;
4777                                 }
4778
4779                                 DEBUG(10,("smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_LINK\n"));
4780 #ifdef S_ISLNK
4781                                 if(!S_ISLNK(psbuf->st_ex_mode)) {
4782                                         return NT_STATUS_DOS(ERRSRV, ERRbadlink);
4783                                 }
4784 #else
4785                                 return NT_STATUS_DOS(ERRDOS, ERRbadlink);
4786 #endif
4787                                 len = SMB_VFS_READLINK(conn,
4788                                                        smb_fname->base_name,
4789                                                        buffer, PATH_MAX);
4790                                 if (len == -1) {
4791                                         return map_nt_error_from_unix(errno);
4792                                 }
4793                                 buffer[len] = 0;
4794                                 len = srvstr_push(dstart, flags2,
4795                                                   pdata, buffer,
4796                                                   PTR_DIFF(dend, pdata),
4797                                                   STR_TERMINATE);
4798                                 pdata += len;
4799                                 data_size = PTR_DIFF(pdata,(*ppdata));
4800
4801                                 break;
4802                         }
4803
4804 #if defined(HAVE_POSIX_ACLS)
4805                 case SMB_QUERY_POSIX_ACL:
4806                         {
4807                                 SMB_ACL_T file_acl = NULL;
4808                                 SMB_ACL_T def_acl = NULL;
4809                                 uint16 num_file_acls = 0;
4810                                 uint16 num_def_acls = 0;
4811
4812                                 if (fsp && fsp->fh->fd != -1) {
4813                                         file_acl = SMB_VFS_SYS_ACL_GET_FD(fsp);
4814                                 } else {
4815                                         file_acl =
4816                                             SMB_VFS_SYS_ACL_GET_FILE(conn,
4817                                                 smb_fname->base_name,
4818                                                 SMB_ACL_TYPE_ACCESS);
4819                                 }
4820
4821                                 if (file_acl == NULL && no_acl_syscall_error(errno)) {
4822                                         DEBUG(5,("smbd_do_qfilepathinfo: ACLs "
4823                                                  "not implemented on "
4824                                                  "filesystem containing %s\n",
4825                                                  smb_fname->base_name));
4826                                         return NT_STATUS_NOT_IMPLEMENTED;
4827                                 }
4828
4829                                 if (S_ISDIR(psbuf->st_ex_mode)) {
4830                                         if (fsp && fsp->is_directory) {
4831                                                 def_acl =
4832                                                     SMB_VFS_SYS_ACL_GET_FILE(
4833                                                             conn,
4834                                                             fsp->fsp_name->base_name,
4835                                                             SMB_ACL_TYPE_DEFAULT);
4836                                         } else {
4837                                                 def_acl =
4838                                                     SMB_VFS_SYS_ACL_GET_FILE(
4839                                                             conn,
4840                                                             smb_fname->base_name,
4841                                                             SMB_ACL_TYPE_DEFAULT);
4842                                         }
4843                                         def_acl = free_empty_sys_acl(conn, def_acl);
4844                                 }
4845
4846                                 num_file_acls = count_acl_entries(conn, file_acl);
4847                                 num_def_acls = count_acl_entries(conn, def_acl);
4848
4849                                 if ( data_size < (num_file_acls + num_def_acls)*SMB_POSIX_ACL_ENTRY_SIZE + SMB_POSIX_ACL_HEADER_SIZE) {
4850                                         DEBUG(5,("smbd_do_qfilepathinfo: data_size too small (%u) need %u\n",
4851                                                 data_size,
4852                                                 (unsigned int)((num_file_acls + num_def_acls)*SMB_POSIX_ACL_ENTRY_SIZE +
4853                                                         SMB_POSIX_ACL_HEADER_SIZE) ));
4854                                         if (file_acl) {
4855                                                 SMB_VFS_SYS_ACL_FREE_ACL(conn, file_acl);
4856                                         }
4857                                         if (def_acl) {
4858                                                 SMB_VFS_SYS_ACL_FREE_ACL(conn, def_acl);
4859                                         }
4860                                         return NT_STATUS_BUFFER_TOO_SMALL;
4861                                 }
4862
4863                                 SSVAL(pdata,0,SMB_POSIX_ACL_VERSION);
4864                                 SSVAL(pdata,2,num_file_acls);
4865                                 SSVAL(pdata,4,num_def_acls);
4866                                 if (!marshall_posix_acl(conn, pdata + SMB_POSIX_ACL_HEADER_SIZE, psbuf, file_acl)) {
4867                                         if (file_acl) {
4868                                                 SMB_VFS_SYS_ACL_FREE_ACL(conn, file_acl);
4869                                         }
4870                                         if (def_acl) {
4871                                                 SMB_VFS_SYS_ACL_FREE_ACL(conn, def_acl);
4872                                         }
4873                                         return NT_STATUS_INTERNAL_ERROR;
4874                                 }
4875                                 if (!marshall_posix_acl(conn, pdata + SMB_POSIX_ACL_HEADER_SIZE + (num_file_acls*SMB_POSIX_ACL_ENTRY_SIZE), psbuf, def_acl)) {
4876                                         if (file_acl) {
4877                                                 SMB_VFS_SYS_ACL_FREE_ACL(conn, file_acl);
4878                                         }
4879                                         if (def_acl) {
4880                                                 SMB_VFS_SYS_ACL_FREE_ACL(conn, def_acl);
4881                                         }
4882                                         return NT_STATUS_INTERNAL_ERROR;
4883                                 }
4884
4885                                 if (file_acl) {
4886                                         SMB_VFS_SYS_ACL_FREE_ACL(conn, file_acl);
4887                                 }
4888                                 if (def_acl) {
4889                                         SMB_VFS_SYS_ACL_FREE_ACL(conn, def_acl);
4890                                 }
4891                                 data_size = (num_file_acls + num_def_acls)*SMB_POSIX_ACL_ENTRY_SIZE + SMB_POSIX_ACL_HEADER_SIZE;
4892                                 break;
4893                         }
4894 #endif
4895
4896
4897                 case SMB_QUERY_POSIX_LOCK:
4898                 {
4899                         uint64_t count;
4900                         uint64_t offset;
4901                         uint64_t smblctx;
4902                         enum brl_type lock_type;
4903
4904                         /* We need an open file with a real fd for this. */
4905                         if (!fsp || fsp->fh->fd == -1) {
4906                                 return NT_STATUS_INVALID_LEVEL;
4907                         }
4908
4909                         if (lock_data_count != POSIX_LOCK_DATA_SIZE) {
4910                                 return NT_STATUS_INVALID_PARAMETER;
4911                         }
4912
4913                         switch (SVAL(pdata, POSIX_LOCK_TYPE_OFFSET)) {
4914                                 case POSIX_LOCK_TYPE_READ:
4915                                         lock_type = READ_LOCK;
4916                                         break;
4917                                 case POSIX_LOCK_TYPE_WRITE:
4918                                         lock_type = WRITE_LOCK;
4919                                         break;
4920                                 case POSIX_LOCK_TYPE_UNLOCK:
4921                                 default:
4922                                         /* There's no point in asking for an unlock... */
4923                                         return NT_STATUS_INVALID_PARAMETER;
4924                         }
4925
4926                         smblctx = (uint64_t)IVAL(pdata, POSIX_LOCK_PID_OFFSET);
4927 #if defined(HAVE_LONGLONG)
4928                         offset = (((uint64_t) IVAL(pdata,(POSIX_LOCK_START_OFFSET+4))) << 32) |
4929                                         ((uint64_t) IVAL(pdata,POSIX_LOCK_START_OFFSET));
4930                         count = (((uint64_t) IVAL(pdata,(POSIX_LOCK_LEN_OFFSET+4))) << 32) |
4931                                         ((uint64_t) IVAL(pdata,POSIX_LOCK_LEN_OFFSET));
4932 #else /* HAVE_LONGLONG */
4933                         offset = (uint64_t)IVAL(pdata,POSIX_LOCK_START_OFFSET);
4934                         count = (uint64_t)IVAL(pdata,POSIX_LOCK_LEN_OFFSET);
4935 #endif /* HAVE_LONGLONG */
4936
4937                         status = query_lock(fsp,
4938                                         &smblctx,
4939                                         &count,
4940                                         &offset,
4941                                         &lock_type,
4942                                         POSIX_LOCK);
4943
4944                         if (ERROR_WAS_LOCK_DENIED(status)) {
4945                                 /* Here we need to report who has it locked... */
4946                                 data_size = POSIX_LOCK_DATA_SIZE;
4947
4948                                 SSVAL(pdata, POSIX_LOCK_TYPE_OFFSET, lock_type);
4949                                 SSVAL(pdata, POSIX_LOCK_FLAGS_OFFSET, 0);
4950                                 SIVAL(pdata, POSIX_LOCK_PID_OFFSET, (uint32_t)smblctx);
4951 #if defined(HAVE_LONGLONG)
4952                                 SIVAL(pdata, POSIX_LOCK_START_OFFSET, (uint32)(offset & 0xFFFFFFFF));
4953                                 SIVAL(pdata, POSIX_LOCK_START_OFFSET + 4, (uint32)((offset >> 32) & 0xFFFFFFFF));
4954                                 SIVAL(pdata, POSIX_LOCK_LEN_OFFSET, (uint32)(count & 0xFFFFFFFF));
4955                                 SIVAL(pdata, POSIX_LOCK_LEN_OFFSET + 4, (uint32)((count >> 32) & 0xFFFFFFFF));
4956 #else /* HAVE_LONGLONG */
4957                                 SIVAL(pdata, POSIX_LOCK_START_OFFSET, offset);
4958                                 SIVAL(pdata, POSIX_LOCK_LEN_OFFSET, count);
4959 #endif /* HAVE_LONGLONG */
4960
4961                         } else if (NT_STATUS_IS_OK(status)) {
4962                                 /* For success we just return a copy of what we sent
4963                                    with the lock type set to POSIX_LOCK_TYPE_UNLOCK. */
4964                                 data_size = POSIX_LOCK_DATA_SIZE;
4965                                 memcpy(pdata, lock_data, POSIX_LOCK_DATA_SIZE);
4966                                 SSVAL(pdata, POSIX_LOCK_TYPE_OFFSET, POSIX_LOCK_TYPE_UNLOCK);
4967                         } else {
4968                                 return status;
4969                         }
4970                         break;
4971                 }
4972
4973                 default:
4974                         return NT_STATUS_INVALID_LEVEL;
4975         }
4976
4977         *pdata_size = data_size;
4978         return NT_STATUS_OK;
4979 }
4980
4981 /****************************************************************************
4982  Reply to a TRANS2_QFILEPATHINFO or TRANSACT2_QFILEINFO (query file info by
4983  file name or file id).
4984 ****************************************************************************/
4985
4986 static void call_trans2qfilepathinfo(connection_struct *conn,
4987                                      struct smb_request *req,
4988                                      unsigned int tran_call,
4989                                      char **pparams, int total_params,
4990                                      char **ppdata, int total_data,
4991                                      unsigned int max_data_bytes)
4992 {
4993         char *params = *pparams;
4994         char *pdata = *ppdata;
4995         uint16 info_level;
4996         unsigned int data_size = 0;
4997         unsigned int param_size = 2;
4998         struct smb_filename *smb_fname = NULL;
4999         bool delete_pending = False;
5000         struct timespec write_time_ts;
5001         files_struct *fsp = NULL;
5002         struct file_id fileid;
5003         struct ea_list *ea_list = NULL;
5004         int lock_data_count = 0;
5005         char *lock_data = NULL;
5006         NTSTATUS status = NT_STATUS_OK;
5007
5008         if (!params) {
5009                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
5010                 return;
5011         }
5012
5013         ZERO_STRUCT(write_time_ts);
5014
5015         if (tran_call == TRANSACT2_QFILEINFO) {
5016                 if (total_params < 4) {
5017                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
5018                         return;
5019                 }
5020
5021                 if (IS_IPC(conn)) {
5022                         call_trans2qpipeinfo(conn, req, tran_call,
5023                                              pparams, total_params,
5024                                              ppdata, total_data,
5025                                              max_data_bytes);
5026                         return;
5027                 }
5028
5029                 fsp = file_fsp(req, SVAL(params,0));
5030                 info_level = SVAL(params,2);
5031
5032                 DEBUG(3,("call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = %d\n", info_level));
5033
5034                 if (INFO_LEVEL_IS_UNIX(info_level) && !lp_unix_extensions()) {
5035                         reply_nterror(req, NT_STATUS_INVALID_LEVEL);
5036                         return;
5037                 }
5038
5039                 /* Initial check for valid fsp ptr. */
5040                 if (!check_fsp_open(conn, req, fsp)) {
5041                         return;
5042                 }
5043
5044                 status = copy_smb_filename(talloc_tos(), fsp->fsp_name,
5045                                            &smb_fname);
5046                 if (!NT_STATUS_IS_OK(status)) {
5047                         reply_nterror(req, status);
5048                         return;
5049                 }
5050
5051                 if(fsp->fake_file_handle) {
5052                         /*
5053                          * This is actually for the QUOTA_FAKE_FILE --metze
5054                          */
5055
5056                         /* We know this name is ok, it's already passed the checks. */
5057
5058                 } else if(fsp->fh->fd == -1) {
5059                         /*
5060                          * This is actually a QFILEINFO on a directory
5061                          * handle (returned from an NT SMB). NT5.0 seems
5062                          * to do this call. JRA.
5063                          */
5064
5065                         if (INFO_LEVEL_IS_UNIX(info_level)) {
5066                                 /* Always do lstat for UNIX calls. */
5067                                 if (SMB_VFS_LSTAT(conn, smb_fname)) {
5068                                         DEBUG(3,("call_trans2qfilepathinfo: "
5069                                                  "SMB_VFS_LSTAT of %s failed "
5070                                                  "(%s)\n",
5071                                                  smb_fname_str_dbg(smb_fname),
5072                                                  strerror(errno)));
5073                                         reply_nterror(req,
5074                                                 map_nt_error_from_unix(errno));
5075                                         return;
5076                                 }
5077                         } else if (SMB_VFS_STAT(conn, smb_fname)) {
5078                                 DEBUG(3,("call_trans2qfilepathinfo: "
5079                                          "SMB_VFS_STAT of %s failed (%s)\n",
5080                                          smb_fname_str_dbg(smb_fname),
5081                                          strerror(errno)));
5082                                 reply_nterror(req,
5083                                         map_nt_error_from_unix(errno));
5084                                 return;
5085                         }
5086
5087                         fileid = vfs_file_id_from_sbuf(conn, &smb_fname->st);
5088                         get_file_infos(fileid, fsp->name_hash, &delete_pending, &write_time_ts);
5089                 } else {
5090                         /*
5091                          * Original code - this is an open file.
5092                          */
5093                         if (SMB_VFS_FSTAT(fsp, &smb_fname->st) != 0) {
5094                                 DEBUG(3, ("fstat of fnum %d failed (%s)\n",
5095                                           fsp->fnum, strerror(errno)));
5096                                 reply_nterror(req,
5097                                         map_nt_error_from_unix(errno));
5098                                 return;
5099                         }
5100                         fileid = vfs_file_id_from_sbuf(conn, &smb_fname->st);
5101                         get_file_infos(fileid, fsp->name_hash, &delete_pending, &write_time_ts);
5102                 }
5103
5104         } else {
5105                 uint32_t name_hash;
5106                 char *fname = NULL;
5107                 uint32_t ucf_flags = 0;
5108
5109                 /* qpathinfo */
5110                 if (total_params < 7) {
5111                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
5112                         return;
5113                 }
5114
5115                 info_level = SVAL(params,0);
5116
5117                 DEBUG(3,("call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = %d\n", info_level));
5118
5119                 if (INFO_LEVEL_IS_UNIX(info_level)) {
5120                         if (!lp_unix_extensions()) {
5121                                 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
5122                                 return;
5123                         }
5124                         if (info_level == SMB_QUERY_FILE_UNIX_BASIC ||
5125                                         info_level == SMB_QUERY_FILE_UNIX_INFO2 ||
5126                                         info_level == SMB_QUERY_FILE_UNIX_LINK) {
5127                                 ucf_flags |= UCF_UNIX_NAME_LOOKUP;
5128                         }
5129                 }
5130
5131                 srvstr_get_path(req, params, req->flags2, &fname, &params[6],
5132                                 total_params - 6,
5133                                 STR_TERMINATE, &status);
5134                 if (!NT_STATUS_IS_OK(status)) {
5135                         reply_nterror(req, status);
5136                         return;
5137                 }
5138
5139                 status = filename_convert(req,
5140                                         conn,
5141                                         req->flags2 & FLAGS2_DFS_PATHNAMES,
5142                                         fname,
5143                                         ucf_flags,
5144                                         NULL,
5145                                         &smb_fname);
5146                 if (!NT_STATUS_IS_OK(status)) {
5147                         if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
5148                                 reply_botherror(req,
5149                                                 NT_STATUS_PATH_NOT_COVERED,
5150                                                 ERRSRV, ERRbadpath);
5151                                 return;
5152                         }
5153                         reply_nterror(req, status);
5154                         return;
5155                 }
5156
5157                 /* If this is a stream, check if there is a delete_pending. */
5158                 if ((conn->fs_capabilities & FILE_NAMED_STREAMS)
5159                     && is_ntfs_stream_smb_fname(smb_fname)) {
5160                         struct smb_filename *smb_fname_base = NULL;
5161
5162                         /* Create an smb_filename with stream_name == NULL. */
5163                         status =
5164                             create_synthetic_smb_fname(talloc_tos(),
5165                                                        smb_fname->base_name,
5166                                                        NULL, NULL,
5167                                                        &smb_fname_base);
5168                         if (!NT_STATUS_IS_OK(status)) {
5169                                 reply_nterror(req, status);
5170                                 return;
5171                         }
5172
5173                         if (INFO_LEVEL_IS_UNIX(info_level)) {
5174                                 /* Always do lstat for UNIX calls. */
5175                                 if (SMB_VFS_LSTAT(conn, smb_fname_base) != 0) {
5176                                         DEBUG(3,("call_trans2qfilepathinfo: "
5177                                                  "SMB_VFS_LSTAT of %s failed "
5178                                                  "(%s)\n",
5179                                                  smb_fname_str_dbg(smb_fname_base),
5180                                                  strerror(errno)));
5181                                         TALLOC_FREE(smb_fname_base);
5182                                         reply_nterror(req,
5183                                                 map_nt_error_from_unix(errno));
5184                                         return;
5185                                 }
5186                         } else {
5187                                 if (SMB_VFS_STAT(conn, smb_fname_base) != 0) {
5188                                         DEBUG(3,("call_trans2qfilepathinfo: "
5189                                                  "fileinfo of %s failed "
5190                                                  "(%s)\n",
5191                                                  smb_fname_str_dbg(smb_fname_base),
5192                                                  strerror(errno)));
5193                                         TALLOC_FREE(smb_fname_base);
5194                                         reply_nterror(req,
5195                                                 map_nt_error_from_unix(errno));
5196                                         return;
5197                                 }
5198                         }
5199
5200                         status = file_name_hash(conn,
5201                                         smb_fname_str_dbg(smb_fname_base),
5202                                         &name_hash);
5203                         if (!NT_STATUS_IS_OK(status)) {
5204                                 TALLOC_FREE(smb_fname_base);
5205                                 reply_nterror(req, status);
5206                                 return;
5207                         }
5208
5209                         fileid = vfs_file_id_from_sbuf(conn,
5210                                                        &smb_fname_base->st);
5211                         TALLOC_FREE(smb_fname_base);
5212                         get_file_infos(fileid, name_hash, &delete_pending, NULL);
5213                         if (delete_pending) {
5214                                 reply_nterror(req, NT_STATUS_DELETE_PENDING);
5215                                 return;
5216                         }
5217                 }
5218
5219                 if (INFO_LEVEL_IS_UNIX(info_level)) {
5220                         /* Always do lstat for UNIX calls. */
5221                         if (SMB_VFS_LSTAT(conn, smb_fname)) {
5222                                 DEBUG(3,("call_trans2qfilepathinfo: "
5223                                          "SMB_VFS_LSTAT of %s failed (%s)\n",
5224                                          smb_fname_str_dbg(smb_fname),
5225                                          strerror(errno)));
5226                                 reply_nterror(req,
5227                                         map_nt_error_from_unix(errno));
5228                                 return;
5229                         }
5230
5231                 } else {
5232                         if (SMB_VFS_STAT(conn, smb_fname) != 0) {
5233                                 DEBUG(3,("call_trans2qfilepathinfo: "
5234                                          "SMB_VFS_STAT of %s failed (%s)\n",
5235                                          smb_fname_str_dbg(smb_fname),
5236                                          strerror(errno)));
5237                                 reply_nterror(req,
5238                                         map_nt_error_from_unix(errno));
5239                                 return;
5240                         }
5241                 }
5242
5243                 status = file_name_hash(conn,
5244                                 smb_fname_str_dbg(smb_fname),
5245                                 &name_hash);
5246                 if (!NT_STATUS_IS_OK(status)) {
5247                         reply_nterror(req, status);
5248                         return;
5249                 }
5250
5251                 fileid = vfs_file_id_from_sbuf(conn, &smb_fname->st);
5252                 get_file_infos(fileid, name_hash, &delete_pending, &write_time_ts);
5253                 if (delete_pending) {
5254                         reply_nterror(req, NT_STATUS_DELETE_PENDING);
5255                         return;
5256                 }
5257         }
5258
5259         DEBUG(3,("call_trans2qfilepathinfo %s (fnum = %d) level=%d call=%d "
5260                  "total_data=%d\n", smb_fname_str_dbg(smb_fname),
5261                  fsp ? fsp->fnum : -1, info_level,tran_call,total_data));
5262
5263         /* Pull out any data sent here before we realloc. */
5264         switch (info_level) {
5265                 case SMB_INFO_QUERY_EAS_FROM_LIST:
5266                 {
5267                         /* Pull any EA list from the data portion. */
5268                         uint32 ea_size;
5269
5270                         if (total_data < 4) {
5271                                 reply_nterror(
5272                                         req, NT_STATUS_INVALID_PARAMETER);
5273                                 return;
5274                         }
5275                         ea_size = IVAL(pdata,0);
5276
5277                         if (total_data > 0 && ea_size != total_data) {
5278                                 DEBUG(4,("call_trans2qfilepathinfo: Rejecting EA request with incorrect \
5279 total_data=%u (should be %u)\n", (unsigned int)total_data, (unsigned int)IVAL(pdata,0) ));
5280                                 reply_nterror(
5281                                         req, NT_STATUS_INVALID_PARAMETER);
5282                                 return;
5283                         }
5284
5285                         if (!lp_ea_support(SNUM(conn))) {
5286                                 reply_nterror(req, NT_STATUS_EAS_NOT_SUPPORTED);
5287                                 return;
5288                         }
5289
5290                         /* Pull out the list of names. */
5291                         ea_list = read_ea_name_list(req, pdata + 4, ea_size - 4);
5292                         if (!ea_list) {
5293                                 reply_nterror(
5294                                         req, NT_STATUS_INVALID_PARAMETER);
5295                                 return;
5296                         }
5297                         break;
5298                 }
5299
5300                 case SMB_QUERY_POSIX_LOCK:
5301                 {
5302                         if (fsp == NULL || fsp->fh->fd == -1) {
5303                                 reply_nterror(req, NT_STATUS_INVALID_HANDLE);
5304                                 return;
5305                         }
5306
5307                         if (total_data != POSIX_LOCK_DATA_SIZE) {
5308                                 reply_nterror(
5309                                         req, NT_STATUS_INVALID_PARAMETER);
5310                                 return;
5311                         }
5312
5313                         /* Copy the lock range data. */
5314                         lock_data = (char *)talloc_memdup(
5315                                 req, pdata, total_data);
5316                         if (!lock_data) {
5317                                 reply_nterror(req, NT_STATUS_NO_MEMORY);
5318                                 return;
5319                         }
5320                         lock_data_count = total_data;
5321                 }
5322                 default:
5323                         break;
5324         }
5325
5326         *pparams = (char *)SMB_REALLOC(*pparams,2);
5327         if (*pparams == NULL) {
5328                 reply_nterror(req, NT_STATUS_NO_MEMORY);
5329                 return;
5330         }
5331         params = *pparams;
5332         SSVAL(params,0,0);
5333
5334         /*
5335          * draft-leach-cifs-v1-spec-02.txt
5336          * 4.2.14 TRANS2_QUERY_PATH_INFORMATION: Get File Attributes given Path
5337          * says:
5338          *
5339          *  The requested information is placed in the Data portion of the
5340          *  transaction response. For the information levels greater than 0x100,
5341          *  the transaction response has 1 parameter word which should be
5342          *  ignored by the client.
5343          *
5344          * However Windows only follows this rule for the IS_NAME_VALID call.
5345          */
5346         switch (info_level) {
5347         case SMB_INFO_IS_NAME_VALID:
5348                 param_size = 0;
5349                 break;
5350         }
5351
5352         if ((info_level & 0xFF00) == 0xFF00) {
5353                 /*
5354                  * We use levels that start with 0xFF00
5355                  * internally to represent SMB2 specific levels
5356                  */
5357                 reply_nterror(req, NT_STATUS_INVALID_LEVEL);
5358                 return;
5359         }
5360
5361         status = smbd_do_qfilepathinfo(conn, req, info_level,
5362                                        fsp, smb_fname,
5363                                        delete_pending, write_time_ts,
5364                                        ea_list,
5365                                        lock_data_count, lock_data,
5366                                        req->flags2, max_data_bytes,
5367                                        ppdata, &data_size);
5368         if (!NT_STATUS_IS_OK(status)) {
5369                 reply_nterror(req, status);
5370                 return;
5371         }
5372
5373         send_trans2_replies(conn, req, params, param_size, *ppdata, data_size,
5374                             max_data_bytes);
5375
5376         return;
5377 }
5378
5379 /****************************************************************************
5380  Set a hard link (called by UNIX extensions and by NT rename with HARD link
5381  code.
5382 ****************************************************************************/
5383
5384 NTSTATUS hardlink_internals(TALLOC_CTX *ctx,
5385                 connection_struct *conn,
5386                 struct smb_request *req,
5387                 bool overwrite_if_exists,
5388                 const struct smb_filename *smb_fname_old,
5389                 struct smb_filename *smb_fname_new)
5390 {
5391         NTSTATUS status = NT_STATUS_OK;
5392
5393         /* source must already exist. */
5394         if (!VALID_STAT(smb_fname_old->st)) {
5395                 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
5396         }
5397
5398         if (VALID_STAT(smb_fname_new->st)) {
5399                 if (overwrite_if_exists) {
5400                         if (S_ISDIR(smb_fname_new->st.st_ex_mode)) {
5401                                 return NT_STATUS_FILE_IS_A_DIRECTORY;
5402                         }
5403                         status = unlink_internals(conn,
5404                                                 req,
5405                                                 FILE_ATTRIBUTE_NORMAL,
5406                                                 smb_fname_new,
5407                                                 false);
5408                         if (!NT_STATUS_IS_OK(status)) {
5409                                 return status;
5410                         }
5411                 } else {
5412                         /* Disallow if newname already exists. */
5413                         return NT_STATUS_OBJECT_NAME_COLLISION;
5414                 }
5415         }
5416
5417         /* No links from a directory. */
5418         if (S_ISDIR(smb_fname_old->st.st_ex_mode)) {
5419                 return NT_STATUS_FILE_IS_A_DIRECTORY;
5420         }
5421
5422         /* Setting a hardlink to/from a stream isn't currently supported. */
5423         if (is_ntfs_stream_smb_fname(smb_fname_old) ||
5424             is_ntfs_stream_smb_fname(smb_fname_new)) {
5425                 return NT_STATUS_INVALID_PARAMETER;
5426         }
5427
5428         DEBUG(10,("hardlink_internals: doing hard link %s -> %s\n",
5429                   smb_fname_old->base_name, smb_fname_new->base_name));
5430
5431         if (SMB_VFS_LINK(conn, smb_fname_old->base_name,
5432                          smb_fname_new->base_name) != 0) {
5433                 status = map_nt_error_from_unix(errno);
5434                 DEBUG(3,("hardlink_internals: Error %s hard link %s -> %s\n",
5435                          nt_errstr(status), smb_fname_old->base_name,
5436                          smb_fname_new->base_name));
5437         }
5438         return status;
5439 }
5440
5441 /****************************************************************************
5442  Deal with setting the time from any of the setfilepathinfo functions.
5443 ****************************************************************************/
5444
5445 NTSTATUS smb_set_file_time(connection_struct *conn,
5446                            files_struct *fsp,
5447                            const struct smb_filename *smb_fname,
5448                            struct smb_file_time *ft,
5449                            bool setting_write_time)
5450 {
5451         struct smb_filename smb_fname_base;
5452         uint32 action =
5453                 FILE_NOTIFY_CHANGE_LAST_ACCESS
5454                 |FILE_NOTIFY_CHANGE_LAST_WRITE
5455                 |FILE_NOTIFY_CHANGE_CREATION;
5456
5457         if (!VALID_STAT(smb_fname->st)) {
5458                 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
5459         }
5460
5461         if (fsp && !(fsp->access_mask & FILE_WRITE_ATTRIBUTES)) {
5462                 return NT_STATUS_ACCESS_DENIED;
5463         }
5464
5465         /* get some defaults (no modifications) if any info is zero or -1. */
5466         if (null_timespec(ft->create_time)) {
5467                 action &= ~FILE_NOTIFY_CHANGE_CREATION;
5468         }
5469
5470         if (null_timespec(ft->atime)) {
5471                 action &= ~FILE_NOTIFY_CHANGE_LAST_ACCESS;
5472         }
5473
5474         if (null_timespec(ft->mtime)) {
5475                 action &= ~FILE_NOTIFY_CHANGE_LAST_WRITE;
5476         }
5477
5478         if (!setting_write_time) {
5479                 /* ft->mtime comes from change time, not write time. */
5480                 action &= ~FILE_NOTIFY_CHANGE_LAST_WRITE;
5481         }
5482
5483         /* Ensure the resolution is the correct for
5484          * what we can store on this filesystem. */
5485
5486         round_timespec(conn->ts_res, &ft->create_time);
5487         round_timespec(conn->ts_res, &ft->ctime);
5488         round_timespec(conn->ts_res, &ft->atime);
5489         round_timespec(conn->ts_res, &ft->mtime);
5490
5491         DEBUG(5,("smb_set_filetime: actime: %s\n ",
5492                 time_to_asc(convert_timespec_to_time_t(ft->atime))));
5493         DEBUG(5,("smb_set_filetime: modtime: %s\n ",
5494                 time_to_asc(convert_timespec_to_time_t(ft->mtime))));
5495         DEBUG(5,("smb_set_filetime: ctime: %s\n ",
5496                 time_to_asc(convert_timespec_to_time_t(ft->ctime))));
5497         DEBUG(5,("smb_set_file_time: createtime: %s\n ",
5498                 time_to_asc(convert_timespec_to_time_t(ft->create_time))));
5499
5500         if (setting_write_time) {
5501                 /*
5502                  * This was a Windows setfileinfo on an open file.
5503                  * NT does this a lot. We also need to
5504                  * set the time here, as it can be read by
5505                  * FindFirst/FindNext and with the patch for bug #2045
5506                  * in smbd/fileio.c it ensures that this timestamp is
5507                  * kept sticky even after a write. We save the request
5508                  * away and will set it on file close and after a write. JRA.
5509                  */
5510
5511                 DEBUG(10,("smb_set_file_time: setting pending modtime to %s\n",
5512                           time_to_asc(convert_timespec_to_time_t(ft->mtime))));
5513
5514                 if (fsp != NULL) {
5515                         if (fsp->base_fsp) {
5516                                 set_sticky_write_time_fsp(fsp->base_fsp,
5517                                                           ft->mtime);
5518                         } else {
5519                                 set_sticky_write_time_fsp(fsp, ft->mtime);
5520                         }
5521                 } else {
5522                         set_sticky_write_time_path(
5523                                 vfs_file_id_from_sbuf(conn, &smb_fname->st),
5524                                 ft->mtime);
5525                 }
5526         }
5527
5528         DEBUG(10,("smb_set_file_time: setting utimes to modified values.\n"));
5529
5530         /* Always call ntimes on the base, even if a stream was passed in. */
5531         smb_fname_base = *smb_fname;
5532         smb_fname_base.stream_name = NULL;
5533
5534         if(file_ntimes(conn, &smb_fname_base, ft)!=0) {
5535                 return map_nt_error_from_unix(errno);
5536         }
5537
5538         notify_fname(conn, NOTIFY_ACTION_MODIFIED, action,
5539                      smb_fname->base_name);
5540         return NT_STATUS_OK;
5541 }
5542
5543 /****************************************************************************
5544  Deal with setting the dosmode from any of the setfilepathinfo functions.
5545 ****************************************************************************/
5546
5547 static NTSTATUS smb_set_file_dosmode(connection_struct *conn,
5548                                      const struct smb_filename *smb_fname,
5549                                      uint32 dosmode)
5550 {
5551         struct smb_filename *smb_fname_base = NULL;
5552         NTSTATUS status;
5553
5554         if (!VALID_STAT(smb_fname->st)) {
5555                 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
5556         }
5557
5558         /* Always operate on the base_name, even if a stream was passed in. */
5559         status = create_synthetic_smb_fname(talloc_tos(), smb_fname->base_name,
5560                                             NULL, &smb_fname->st,
5561                                             &smb_fname_base);
5562         if (!NT_STATUS_IS_OK(status)) {
5563                 return status;
5564         }
5565
5566         if (dosmode) {
5567                 if (S_ISDIR(smb_fname_base->st.st_ex_mode)) {
5568                         dosmode |= FILE_ATTRIBUTE_DIRECTORY;
5569                 } else {
5570                         dosmode &= ~FILE_ATTRIBUTE_DIRECTORY;
5571                 }
5572         }
5573
5574         DEBUG(6,("smb_set_file_dosmode: dosmode: 0x%x\n", (unsigned int)dosmode));
5575
5576         /* check the mode isn't different, before changing it */
5577         if ((dosmode != 0) && (dosmode != dos_mode(conn, smb_fname_base))) {
5578                 DEBUG(10,("smb_set_file_dosmode: file %s : setting dos mode "
5579                           "0x%x\n", smb_fname_str_dbg(smb_fname_base),
5580                           (unsigned int)dosmode));
5581
5582                 if(file_set_dosmode(conn, smb_fname_base, dosmode, NULL,
5583                                     false)) {
5584                         DEBUG(2,("smb_set_file_dosmode: file_set_dosmode of "
5585                                  "%s failed (%s)\n",
5586                                  smb_fname_str_dbg(smb_fname_base),
5587                                  strerror(errno)));
5588                         status = map_nt_error_from_unix(errno);
5589                         goto out;
5590                 }
5591         }
5592         status = NT_STATUS_OK;
5593  out:
5594         TALLOC_FREE(smb_fname_base);
5595         return status;
5596 }
5597
5598 /****************************************************************************
5599  Deal with setting the size from any of the setfilepathinfo functions.
5600 ****************************************************************************/
5601
5602 static NTSTATUS smb_set_file_size(connection_struct *conn,
5603                                   struct smb_request *req,
5604                                   files_struct *fsp,
5605                                   const struct smb_filename *smb_fname,
5606                                   const SMB_STRUCT_STAT *psbuf,
5607                                   SMB_OFF_T size,
5608                                   bool fail_after_createfile)
5609 {
5610         NTSTATUS status = NT_STATUS_OK;
5611         struct smb_filename *smb_fname_tmp = NULL;
5612         files_struct *new_fsp = NULL;
5613
5614         if (!VALID_STAT(*psbuf)) {
5615                 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
5616         }
5617
5618         if (fsp && !(fsp->access_mask & FILE_WRITE_DATA)) {
5619                 return NT_STATUS_ACCESS_DENIED;
5620         }
5621
5622         DEBUG(6,("smb_set_file_size: size: %.0f ", (double)size));
5623
5624         if (size == get_file_size_stat(psbuf)) {
5625                 return NT_STATUS_OK;
5626         }
5627
5628         DEBUG(10,("smb_set_file_size: file %s : setting new size to %.0f\n",
5629                   smb_fname_str_dbg(smb_fname), (double)size));
5630
5631         if (fsp && fsp->fh->fd != -1) {
5632                 /* Handle based call. */
5633                 if (vfs_set_filelen(fsp, size) == -1) {
5634                         return map_nt_error_from_unix(errno);
5635                 }
5636                 trigger_write_time_update_immediate(fsp);
5637                 return NT_STATUS_OK;
5638         }
5639
5640         status = copy_smb_filename(talloc_tos(), smb_fname, &smb_fname_tmp);
5641         if (!NT_STATUS_IS_OK(status)) {
5642                 return status;
5643         }
5644
5645         smb_fname_tmp->st = *psbuf;
5646
5647         status = SMB_VFS_CREATE_FILE(
5648                 conn,                                   /* conn */
5649                 req,                                    /* req */
5650                 0,                                      /* root_dir_fid */
5651                 smb_fname_tmp,                          /* fname */
5652                 FILE_WRITE_DATA,                        /* access_mask */
5653                 (FILE_SHARE_READ | FILE_SHARE_WRITE |   /* share_access */
5654                     FILE_SHARE_DELETE),
5655                 FILE_OPEN,                              /* create_disposition*/
5656                 0,                                      /* create_options */
5657                 FILE_ATTRIBUTE_NORMAL,                  /* file_attributes */
5658                 FORCE_OPLOCK_BREAK_TO_NONE,             /* oplock_request */
5659                 0,                                      /* allocation_size */
5660                 0,                                      /* private_flags */
5661                 NULL,                                   /* sd */
5662                 NULL,                                   /* ea_list */
5663                 &new_fsp,                               /* result */
5664                 NULL);                                  /* pinfo */
5665
5666         TALLOC_FREE(smb_fname_tmp);
5667
5668         if (!NT_STATUS_IS_OK(status)) {
5669                 /* NB. We check for open_was_deferred in the caller. */
5670                 return status;
5671         }
5672
5673         /* See RAW-SFILEINFO-END-OF-FILE */
5674         if (fail_after_createfile) {
5675                 close_file(req, new_fsp,NORMAL_CLOSE);
5676                 return NT_STATUS_INVALID_LEVEL;
5677         }
5678
5679         if (vfs_set_filelen(new_fsp, size) == -1) {
5680                 status = map_nt_error_from_unix(errno);
5681                 close_file(req, new_fsp,NORMAL_CLOSE);
5682                 return status;
5683         }
5684
5685         trigger_write_time_update_immediate(new_fsp);
5686         close_file(req, new_fsp,NORMAL_CLOSE);
5687         return NT_STATUS_OK;
5688 }
5689
5690 /****************************************************************************
5691  Deal with SMB_INFO_SET_EA.
5692 ****************************************************************************/
5693
5694 static NTSTATUS smb_info_set_ea(connection_struct *conn,
5695                                 const char *pdata,
5696                                 int total_data,
5697                                 files_struct *fsp,
5698                                 const struct smb_filename *smb_fname)
5699 {
5700         struct ea_list *ea_list = NULL;
5701         TALLOC_CTX *ctx = NULL;
5702         NTSTATUS status = NT_STATUS_OK;
5703
5704         if (total_data < 10) {
5705
5706                 /* OS/2 workplace shell seems to send SET_EA requests of "null"
5707                    length. They seem to have no effect. Bug #3212. JRA */
5708
5709                 if ((total_data == 4) && (IVAL(pdata,0) == 4)) {
5710                         /* We're done. We only get EA info in this call. */
5711                         return NT_STATUS_OK;
5712                 }
5713
5714                 return NT_STATUS_INVALID_PARAMETER;
5715         }
5716
5717         if (IVAL(pdata,0) > total_data) {
5718                 DEBUG(10,("smb_info_set_ea: bad total data size (%u) > %u\n",
5719                         IVAL(pdata,0), (unsigned int)total_data));
5720                 return NT_STATUS_INVALID_PARAMETER;
5721         }
5722
5723         ctx = talloc_tos();
5724         ea_list = read_ea_list(ctx, pdata + 4, total_data - 4);
5725         if (!ea_list) {
5726                 return NT_STATUS_INVALID_PARAMETER;
5727         }
5728
5729         if (fsp && !(fsp->access_mask & FILE_WRITE_EA)) {
5730                 return NT_STATUS_ACCESS_DENIED;
5731         }
5732
5733         status = set_ea(conn, fsp, smb_fname, ea_list);
5734
5735         return status;
5736 }
5737
5738 /****************************************************************************
5739  Deal with SMB_FILE_FULL_EA_INFORMATION set.
5740 ****************************************************************************/
5741
5742 static NTSTATUS smb_set_file_full_ea_info(connection_struct *conn,
5743                                 const char *pdata,
5744                                 int total_data,
5745                                 files_struct *fsp)
5746 {
5747         struct ea_list *ea_list = NULL;
5748         NTSTATUS status;
5749
5750         if (!fsp) {
5751                 return NT_STATUS_INVALID_HANDLE;
5752         }
5753
5754         if (!lp_ea_support(SNUM(conn))) {
5755                 DEBUG(10, ("smb_set_file_full_ea_info - ea_len = %u but "
5756                         "EA's not supported.\n",
5757                         (unsigned int)total_data));
5758                 return NT_STATUS_EAS_NOT_SUPPORTED;
5759         }
5760
5761         if (total_data < 10) {
5762                 DEBUG(10, ("smb_set_file_full_ea_info - ea_len = %u "
5763                         "too small.\n",
5764                         (unsigned int)total_data));
5765                 return NT_STATUS_INVALID_PARAMETER;
5766         }
5767
5768         ea_list = read_nttrans_ea_list(talloc_tos(),
5769                                 pdata,
5770                                 total_data);
5771
5772         if (!ea_list) {
5773                 return NT_STATUS_INVALID_PARAMETER;
5774         }
5775
5776         if (fsp && !(fsp->access_mask & FILE_WRITE_EA)) {
5777                 return NT_STATUS_ACCESS_DENIED;
5778         }
5779
5780         status = set_ea(conn, fsp, fsp->fsp_name, ea_list);
5781
5782         DEBUG(10, ("smb_set_file_full_ea_info on file %s returned %s\n",
5783                 smb_fname_str_dbg(fsp->fsp_name),
5784                 nt_errstr(status) ));
5785
5786         return status;
5787 }
5788
5789
5790 /****************************************************************************
5791  Deal with SMB_SET_FILE_DISPOSITION_INFO.
5792 ****************************************************************************/
5793
5794 static NTSTATUS smb_set_file_disposition_info(connection_struct *conn,
5795                                 const char *pdata,
5796                                 int total_data,
5797                                 files_struct *fsp,
5798                                 struct smb_filename *smb_fname)
5799 {
5800         NTSTATUS status = NT_STATUS_OK;
5801         bool delete_on_close;
5802         uint32 dosmode = 0;
5803
5804         if (total_data < 1) {
5805                 return NT_STATUS_INVALID_PARAMETER;
5806         }
5807
5808         if (fsp == NULL) {
5809                 return NT_STATUS_INVALID_HANDLE;
5810         }
5811
5812         delete_on_close = (CVAL(pdata,0) ? True : False);
5813         dosmode = dos_mode(conn, smb_fname);
5814
5815         DEBUG(10,("smb_set_file_disposition_info: file %s, dosmode = %u, "
5816                 "delete_on_close = %u\n",
5817                 smb_fname_str_dbg(smb_fname),
5818                 (unsigned int)dosmode,
5819                 (unsigned int)delete_on_close ));
5820
5821         if (delete_on_close) {
5822                 status = can_set_delete_on_close(fsp, dosmode);
5823                 if (!NT_STATUS_IS_OK(status)) {
5824                         return status;
5825                 }
5826         }
5827
5828         /* The set is across all open files on this dev/inode pair. */
5829         if (!set_delete_on_close(fsp, delete_on_close,
5830                                  conn->session_info->unix_token)) {
5831                 return NT_STATUS_ACCESS_DENIED;
5832         }
5833         return NT_STATUS_OK;
5834 }
5835
5836 /****************************************************************************
5837  Deal with SMB_FILE_POSITION_INFORMATION.
5838 ****************************************************************************/
5839
5840 static NTSTATUS smb_file_position_information(connection_struct *conn,
5841                                 const char *pdata,
5842                                 int total_data,
5843                                 files_struct *fsp)
5844 {
5845         uint64_t position_information;
5846
5847         if (total_data < 8) {
5848                 return NT_STATUS_INVALID_PARAMETER;
5849         }
5850
5851         if (fsp == NULL) {
5852                 /* Ignore on pathname based set. */
5853                 return NT_STATUS_OK;
5854         }
5855
5856         position_information = (uint64_t)IVAL(pdata,0);
5857 #ifdef LARGE_SMB_OFF_T
5858         position_information |= (((uint64_t)IVAL(pdata,4)) << 32);
5859 #else /* LARGE_SMB_OFF_T */
5860         if (IVAL(pdata,4) != 0) {
5861                 /* more than 32 bits? */
5862                 return NT_STATUS_INVALID_PARAMETER;
5863         }
5864 #endif /* LARGE_SMB_OFF_T */
5865
5866         DEBUG(10,("smb_file_position_information: Set file position "
5867                   "information for file %s to %.0f\n", fsp_str_dbg(fsp),
5868                   (double)position_information));
5869         fsp->fh->position_information = position_information;
5870         return NT_STATUS_OK;
5871 }
5872
5873 /****************************************************************************
5874  Deal with SMB_FILE_MODE_INFORMATION.
5875 ****************************************************************************/
5876
5877 static NTSTATUS smb_file_mode_information(connection_struct *conn,
5878                                 const char *pdata,
5879                                 int total_data)
5880 {
5881         uint32 mode;
5882
5883         if (total_data < 4) {
5884                 return NT_STATUS_INVALID_PARAMETER;
5885         }
5886         mode = IVAL(pdata,0);
5887         if (mode != 0 && mode != 2 && mode != 4 && mode != 6) {
5888                 return NT_STATUS_INVALID_PARAMETER;
5889         }
5890         return NT_STATUS_OK;
5891 }
5892
5893 /****************************************************************************
5894  Deal with SMB_SET_FILE_UNIX_LINK (create a UNIX symlink).
5895 ****************************************************************************/
5896
5897 static NTSTATUS smb_set_file_unix_link(connection_struct *conn,
5898                                        struct smb_request *req,
5899                                        const char *pdata,
5900                                        int total_data,
5901                                        const struct smb_filename *smb_fname)
5902 {
5903         char *link_target = NULL;
5904         const char *newname = smb_fname->base_name;
5905         TALLOC_CTX *ctx = talloc_tos();
5906
5907         /* Set a symbolic link. */
5908         /* Don't allow this if follow links is false. */
5909
5910         if (total_data == 0) {
5911                 return NT_STATUS_INVALID_PARAMETER;
5912         }
5913
5914         if (!lp_symlinks(SNUM(conn))) {
5915                 return NT_STATUS_ACCESS_DENIED;
5916         }
5917
5918         srvstr_pull_talloc(ctx, pdata, req->flags2, &link_target, pdata,
5919                     total_data, STR_TERMINATE);
5920
5921         if (!link_target) {
5922                 return NT_STATUS_INVALID_PARAMETER;
5923         }
5924
5925         DEBUG(10,("smb_set_file_unix_link: SMB_SET_FILE_UNIX_LINK doing symlink %s -> %s\n",
5926                         newname, link_target ));
5927
5928         if (SMB_VFS_SYMLINK(conn,link_target,newname) != 0) {
5929                 return map_nt_error_from_unix(errno);
5930         }
5931
5932         return NT_STATUS_OK;
5933 }
5934
5935 /****************************************************************************
5936  Deal with SMB_SET_FILE_UNIX_HLINK (create a UNIX hard link).
5937 ****************************************************************************/
5938
5939 static NTSTATUS smb_set_file_unix_hlink(connection_struct *conn,
5940                                         struct smb_request *req,
5941                                         const char *pdata, int total_data,
5942                                         struct smb_filename *smb_fname_new)
5943 {
5944         char *oldname = NULL;
5945         struct smb_filename *smb_fname_old = NULL;
5946         TALLOC_CTX *ctx = talloc_tos();
5947         NTSTATUS status = NT_STATUS_OK;
5948
5949         /* Set a hard link. */
5950         if (total_data == 0) {
5951                 return NT_STATUS_INVALID_PARAMETER;
5952         }
5953
5954         srvstr_get_path(ctx, pdata, req->flags2, &oldname, pdata,
5955                         total_data, STR_TERMINATE, &status);
5956         if (!NT_STATUS_IS_OK(status)) {
5957                 return status;
5958         }
5959
5960         DEBUG(10,("smb_set_file_unix_hlink: SMB_SET_FILE_UNIX_LINK doing hard link %s -> %s\n",
5961                 smb_fname_str_dbg(smb_fname_new), oldname));
5962
5963         status = filename_convert(ctx,
5964                                 conn,
5965                                 req->flags2 & FLAGS2_DFS_PATHNAMES,
5966                                 oldname,
5967                                 0,
5968                                 NULL,
5969                                 &smb_fname_old);
5970         if (!NT_STATUS_IS_OK(status)) {
5971                 return status;
5972         }
5973
5974         return hardlink_internals(ctx, conn, req, false,
5975                         smb_fname_old, smb_fname_new);
5976 }
5977
5978 /****************************************************************************
5979  Deal with SMB2_FILE_RENAME_INFORMATION_INTERNAL
5980 ****************************************************************************/
5981
5982 static NTSTATUS smb2_file_rename_information(connection_struct *conn,
5983                                             struct smb_request *req,
5984                                             const char *pdata,
5985                                             int total_data,
5986                                             files_struct *fsp,
5987                                             struct smb_filename *smb_fname_src)
5988 {
5989         bool overwrite;
5990         uint32_t len;
5991         char *newname = NULL;
5992         struct smb_filename *smb_fname_dst = NULL;
5993         NTSTATUS status = NT_STATUS_OK;
5994         TALLOC_CTX *ctx = talloc_tos();
5995
5996         if (!fsp) {
5997                 return NT_STATUS_INVALID_HANDLE;
5998         }
5999
6000         if (total_data < 20) {
6001                 return NT_STATUS_INVALID_PARAMETER;
6002         }
6003
6004         overwrite = (CVAL(pdata,0) ? True : False);
6005         len = IVAL(pdata,16);
6006
6007         if (len > (total_data - 20) || (len == 0)) {
6008                 return NT_STATUS_INVALID_PARAMETER;
6009         }
6010
6011         srvstr_get_path(ctx, pdata, req->flags2, &newname,
6012                                 &pdata[20], len, STR_TERMINATE,
6013                                 &status);
6014         if (!NT_STATUS_IS_OK(status)) {
6015                 return status;
6016         }
6017
6018         DEBUG(10,("smb2_file_rename_information: got name |%s|\n",
6019                                 newname));
6020
6021         status = filename_convert(ctx,
6022                                 conn,
6023                                 req->flags2 & FLAGS2_DFS_PATHNAMES,
6024                                 newname,
6025                                 UCF_SAVE_LCOMP,
6026                                 NULL,
6027                                 &smb_fname_dst);
6028         if (!NT_STATUS_IS_OK(status)) {
6029                 return status;
6030         }
6031
6032         if (fsp->base_fsp) {
6033                 /* newname must be a stream name. */
6034                 if (newname[0] != ':') {
6035                         return NT_STATUS_NOT_SUPPORTED;
6036                 }
6037
6038                 /* Create an smb_fname to call rename_internals_fsp() with. */
6039                 status = create_synthetic_smb_fname(talloc_tos(),
6040                     fsp->base_fsp->fsp_name->base_name, newname, NULL,
6041                     &smb_fname_dst);
6042                 if (!NT_STATUS_IS_OK(status)) {
6043                         goto out;
6044                 }
6045
6046                 /*
6047                  * Set the original last component, since
6048                  * rename_internals_fsp() requires it.
6049                  */
6050                 smb_fname_dst->original_lcomp = talloc_strdup(smb_fname_dst,
6051                                                               newname);
6052                 if (smb_fname_dst->original_lcomp == NULL) {
6053                         status = NT_STATUS_NO_MEMORY;
6054                         goto out;
6055                 }
6056
6057         }
6058
6059         DEBUG(10,("smb2_file_rename_information: "
6060                   "SMB_FILE_RENAME_INFORMATION (fnum %d) %s -> %s\n",
6061                   fsp->fnum, fsp_str_dbg(fsp),
6062                   smb_fname_str_dbg(smb_fname_dst)));
6063         status = rename_internals_fsp(conn, fsp, smb_fname_dst,
6064                                 (FILE_ATTRIBUTE_HIDDEN|FILE_ATTRIBUTE_SYSTEM),
6065                                 overwrite);
6066
6067  out:
6068         TALLOC_FREE(smb_fname_dst);
6069         return status;
6070 }
6071
6072 static NTSTATUS smb_file_link_information(connection_struct *conn,
6073                                             struct smb_request *req,
6074                                             const char *pdata,
6075                                             int total_data,
6076                                             files_struct *fsp,
6077                                             struct smb_filename *smb_fname_src)
6078 {
6079         bool overwrite;
6080         uint32_t len;
6081         char *newname = NULL;
6082         struct smb_filename *smb_fname_dst = NULL;
6083         NTSTATUS status = NT_STATUS_OK;
6084         TALLOC_CTX *ctx = talloc_tos();
6085
6086         if (!fsp) {
6087                 return NT_STATUS_INVALID_HANDLE;
6088         }
6089
6090         if (total_data < 20) {
6091                 return NT_STATUS_INVALID_PARAMETER;
6092         }
6093
6094         overwrite = (CVAL(pdata,0) ? true : false);
6095         len = IVAL(pdata,16);
6096
6097         if (len > (total_data - 20) || (len == 0)) {
6098                 return NT_STATUS_INVALID_PARAMETER;
6099         }
6100
6101         srvstr_get_path(ctx, pdata, req->flags2, &newname,
6102                                 &pdata[20], len, STR_TERMINATE,
6103                                 &status);
6104         if (!NT_STATUS_IS_OK(status)) {
6105                 return status;
6106         }
6107
6108         DEBUG(10,("smb_file_link_information: got name |%s|\n",
6109                                 newname));
6110
6111         status = filename_convert(ctx,
6112                                 conn,
6113                                 req->flags2 & FLAGS2_DFS_PATHNAMES,
6114                                 newname,
6115                                 UCF_SAVE_LCOMP,
6116                                 NULL,
6117                                 &smb_fname_dst);
6118         if (!NT_STATUS_IS_OK(status)) {
6119                 return status;
6120         }
6121
6122         if (fsp->base_fsp) {
6123                 /* No stream names. */
6124                 return NT_STATUS_NOT_SUPPORTED;
6125         }
6126
6127         DEBUG(10,("smb_file_link_information: "
6128                   "SMB_FILE_LINK_INFORMATION (fnum %d) %s -> %s\n",
6129                   fsp->fnum, fsp_str_dbg(fsp),
6130                   smb_fname_str_dbg(smb_fname_dst)));
6131         status = hardlink_internals(ctx,
6132                                 conn,
6133                                 req,
6134                                 overwrite,
6135                                 fsp->fsp_name,
6136                                 smb_fname_dst);
6137
6138         TALLOC_FREE(smb_fname_dst);
6139         return status;
6140 }
6141
6142 /****************************************************************************
6143  Deal with SMB_FILE_RENAME_INFORMATION.
6144 ****************************************************************************/
6145
6146 static NTSTATUS smb_file_rename_information(connection_struct *conn,
6147                                             struct smb_request *req,
6148                                             const char *pdata,
6149                                             int total_data,
6150                                             files_struct *fsp,
6151                                             struct smb_filename *smb_fname_src)
6152 {
6153         bool overwrite;
6154         uint32 root_fid;
6155         uint32 len;
6156         char *newname = NULL;
6157         struct smb_filename *smb_fname_dst = NULL;
6158         bool dest_has_wcard = False;
6159         NTSTATUS status = NT_STATUS_OK;
6160         char *p;
6161         TALLOC_CTX *ctx = talloc_tos();
6162
6163         if (total_data < 13) {
6164                 return NT_STATUS_INVALID_PARAMETER;
6165         }
6166
6167         overwrite = (CVAL(pdata,0) ? True : False);
6168         root_fid = IVAL(pdata,4);
6169         len = IVAL(pdata,8);
6170
6171         if (len > (total_data - 12) || (len == 0) || (root_fid != 0)) {
6172                 return NT_STATUS_INVALID_PARAMETER;
6173         }
6174
6175         srvstr_get_path_wcard(ctx, pdata, req->flags2, &newname, &pdata[12],
6176                               len, 0, &status,
6177                               &dest_has_wcard);
6178         if (!NT_STATUS_IS_OK(status)) {
6179                 return status;
6180         }
6181
6182         DEBUG(10,("smb_file_rename_information: got name |%s|\n",
6183                                 newname));
6184
6185         status = resolve_dfspath_wcard(ctx, conn,
6186                                        req->flags2 & FLAGS2_DFS_PATHNAMES,
6187                                        newname,
6188                                        true,
6189                                        &newname,
6190                                        &dest_has_wcard);
6191         if (!NT_STATUS_IS_OK(status)) {
6192                 return status;
6193         }
6194
6195         /* Check the new name has no '/' characters. */
6196         if (strchr_m(newname, '/')) {
6197                 return NT_STATUS_NOT_SUPPORTED;
6198         }
6199
6200         if (fsp && fsp->base_fsp) {
6201                 /* newname must be a stream name. */
6202                 if (newname[0] != ':') {
6203                         return NT_STATUS_NOT_SUPPORTED;
6204                 }
6205
6206                 /* Create an smb_fname to call rename_internals_fsp() with. */
6207                 status = create_synthetic_smb_fname(talloc_tos(),
6208                     fsp->base_fsp->fsp_name->base_name, newname, NULL,
6209                     &smb_fname_dst);
6210                 if (!NT_STATUS_IS_OK(status)) {
6211                         goto out;
6212                 }
6213
6214                 /*
6215                  * Set the original last component, since
6216                  * rename_internals_fsp() requires it.
6217                  */
6218                 smb_fname_dst->original_lcomp = talloc_strdup(smb_fname_dst,
6219                                                               newname);
6220                 if (smb_fname_dst->original_lcomp == NULL) {
6221                         status = NT_STATUS_NO_MEMORY;
6222                         goto out;
6223                 }
6224
6225         } else {
6226                 /*
6227                  * Build up an smb_fname_dst based on the filename passed in.
6228                  * We basically just strip off the last component, and put on
6229                  * the newname instead.
6230                  */
6231                 char *base_name = NULL;
6232
6233                 /* newname must *not* be a stream name. */
6234                 if (newname[0] == ':') {
6235                         return NT_STATUS_NOT_SUPPORTED;
6236                 }
6237
6238                 /*
6239                  * Strip off the last component (filename) of the path passed
6240                  * in.
6241                  */
6242                 base_name = talloc_strdup(ctx, smb_fname_src->base_name);
6243                 if (!base_name) {
6244                         return NT_STATUS_NO_MEMORY;
6245                 }
6246                 p = strrchr_m(base_name, '/');
6247                 if (p) {
6248                         p[1] = '\0';
6249                 } else {
6250                         base_name = talloc_strdup(ctx, "");
6251                         if (!base_name) {
6252                                 return NT_STATUS_NO_MEMORY;
6253                         }
6254                 }
6255                 /* Append the new name. */
6256                 base_name = talloc_asprintf_append(base_name,
6257                                 "%s",
6258                                 newname);
6259                 if (!base_name) {
6260                         return NT_STATUS_NO_MEMORY;
6261                 }
6262
6263                 status = unix_convert(ctx, conn, base_name, &smb_fname_dst,
6264                                       (UCF_SAVE_LCOMP |
6265                                           (dest_has_wcard ?
6266                                               UCF_ALWAYS_ALLOW_WCARD_LCOMP :
6267                                               0)));
6268
6269                 /* If an error we expect this to be
6270                  * NT_STATUS_OBJECT_PATH_NOT_FOUND */
6271
6272                 if (!NT_STATUS_IS_OK(status)) {
6273                         if(!NT_STATUS_EQUAL(NT_STATUS_OBJECT_PATH_NOT_FOUND,
6274                                             status)) {
6275                                 goto out;
6276                         }
6277                         /* Create an smb_fname to call rename_internals_fsp() */
6278                         status = create_synthetic_smb_fname(ctx,
6279                                                             base_name, NULL,
6280                                                             NULL,
6281                                                             &smb_fname_dst);
6282                         if (!NT_STATUS_IS_OK(status)) {
6283                                 goto out;
6284                         }
6285                 }
6286         }
6287
6288         if (fsp) {
6289                 DEBUG(10,("smb_file_rename_information: "
6290                           "SMB_FILE_RENAME_INFORMATION (fnum %d) %s -> %s\n",
6291                           fsp->fnum, fsp_str_dbg(fsp),
6292                           smb_fname_str_dbg(smb_fname_dst)));
6293                 status = rename_internals_fsp(conn, fsp, smb_fname_dst, 0,
6294                                               overwrite);
6295         } else {
6296                 DEBUG(10,("smb_file_rename_information: "
6297                           "SMB_FILE_RENAME_INFORMATION %s -> %s\n",
6298                           smb_fname_str_dbg(smb_fname_src),
6299                           smb_fname_str_dbg(smb_fname_dst)));
6300                 status = rename_internals(ctx, conn, req, smb_fname_src,
6301                                           smb_fname_dst, 0, overwrite, false,
6302                                           dest_has_wcard,
6303                                           FILE_WRITE_ATTRIBUTES);
6304         }
6305  out:
6306         TALLOC_FREE(smb_fname_dst);
6307         return status;
6308 }
6309
6310 /****************************************************************************
6311  Deal with SMB_SET_POSIX_ACL.
6312 ****************************************************************************/
6313
6314 #if defined(HAVE_POSIX_ACLS)
6315 static NTSTATUS smb_set_posix_acl(connection_struct *conn,
6316                                 const char *pdata,
6317                                 int total_data,
6318                                 files_struct *fsp,
6319                                 const struct smb_filename *smb_fname)
6320 {
6321         uint16 posix_acl_version;
6322         uint16 num_file_acls;
6323         uint16 num_def_acls;
6324         bool valid_file_acls = True;
6325         bool valid_def_acls = True;
6326
6327         if (total_data < SMB_POSIX_ACL_HEADER_SIZE) {
6328                 return NT_STATUS_INVALID_PARAMETER;
6329         }
6330         posix_acl_version = SVAL(pdata,0);
6331         num_file_acls = SVAL(pdata,2);
6332         num_def_acls = SVAL(pdata,4);
6333
6334         if (num_file_acls == SMB_POSIX_IGNORE_ACE_ENTRIES) {
6335                 valid_file_acls = False;
6336                 num_file_acls = 0;
6337         }
6338
6339         if (num_def_acls == SMB_POSIX_IGNORE_ACE_ENTRIES) {
6340                 valid_def_acls = False;
6341                 num_def_acls = 0;
6342         }
6343
6344         if (posix_acl_version != SMB_POSIX_ACL_VERSION) {
6345                 return NT_STATUS_INVALID_PARAMETER;
6346         }
6347
6348         if (total_data < SMB_POSIX_ACL_HEADER_SIZE +
6349                         (num_file_acls+num_def_acls)*SMB_POSIX_ACL_ENTRY_SIZE) {
6350                 return NT_STATUS_INVALID_PARAMETER;
6351         }
6352
6353         DEBUG(10,("smb_set_posix_acl: file %s num_file_acls = %u, num_def_acls = %u\n",
6354                 smb_fname ? smb_fname_str_dbg(smb_fname) : fsp_str_dbg(fsp),
6355                 (unsigned int)num_file_acls,
6356                 (unsigned int)num_def_acls));
6357
6358         if (valid_file_acls && !set_unix_posix_acl(conn, fsp,
6359                 smb_fname->base_name, num_file_acls,
6360                 pdata + SMB_POSIX_ACL_HEADER_SIZE)) {
6361                 return map_nt_error_from_unix(errno);
6362         }
6363
6364         if (valid_def_acls && !set_unix_posix_default_acl(conn,
6365                 smb_fname->base_name, &smb_fname->st, num_def_acls,
6366                 pdata + SMB_POSIX_ACL_HEADER_SIZE +
6367                 (num_file_acls*SMB_POSIX_ACL_ENTRY_SIZE))) {
6368                 return map_nt_error_from_unix(errno);
6369         }
6370         return NT_STATUS_OK;
6371 }
6372 #endif
6373
6374 /****************************************************************************
6375  Deal with SMB_SET_POSIX_LOCK.
6376 ****************************************************************************/
6377
6378 static NTSTATUS smb_set_posix_lock(connection_struct *conn,
6379                                 struct smb_request *req,
6380                                 const char *pdata,
6381                                 int total_data,
6382                                 files_struct *fsp)
6383 {
6384         uint64_t count;
6385         uint64_t offset;
6386         uint64_t smblctx;
6387         bool blocking_lock = False;
6388         enum brl_type lock_type;
6389
6390         NTSTATUS status = NT_STATUS_OK;
6391
6392         if (fsp == NULL || fsp->fh->fd == -1) {
6393                 return NT_STATUS_INVALID_HANDLE;
6394         }
6395
6396         if (total_data != POSIX_LOCK_DATA_SIZE) {
6397                 return NT_STATUS_INVALID_PARAMETER;
6398         }
6399
6400         switch (SVAL(pdata, POSIX_LOCK_TYPE_OFFSET)) {
6401                 case POSIX_LOCK_TYPE_READ:
6402                         lock_type = READ_LOCK;
6403                         break;
6404                 case POSIX_LOCK_TYPE_WRITE:
6405                         /* Return the right POSIX-mappable error code for files opened read-only. */
6406                         if (!fsp->can_write) {
6407                                 return NT_STATUS_INVALID_HANDLE;
6408                         }
6409                         lock_type = WRITE_LOCK;
6410                         break;
6411                 case POSIX_LOCK_TYPE_UNLOCK:
6412                         lock_type = UNLOCK_LOCK;
6413                         break;
6414                 default:
6415                         return NT_STATUS_INVALID_PARAMETER;
6416         }
6417
6418         if (SVAL(pdata,POSIX_LOCK_FLAGS_OFFSET) == POSIX_LOCK_FLAG_NOWAIT) {
6419                 blocking_lock = False;
6420         } else if (SVAL(pdata,POSIX_LOCK_FLAGS_OFFSET) == POSIX_LOCK_FLAG_WAIT) {
6421                 blocking_lock = True;
6422         } else {
6423                 return NT_STATUS_INVALID_PARAMETER;
6424         }
6425
6426         if (!lp_blocking_locks(SNUM(conn))) {
6427                 blocking_lock = False;
6428         }
6429
6430         smblctx = (uint64_t)IVAL(pdata, POSIX_LOCK_PID_OFFSET);
6431 #if defined(HAVE_LONGLONG)
6432         offset = (((uint64_t) IVAL(pdata,(POSIX_LOCK_START_OFFSET+4))) << 32) |
6433                         ((uint64_t) IVAL(pdata,POSIX_LOCK_START_OFFSET));
6434         count = (((uint64_t) IVAL(pdata,(POSIX_LOCK_LEN_OFFSET+4))) << 32) |
6435                         ((uint64_t) IVAL(pdata,POSIX_LOCK_LEN_OFFSET));
6436 #else /* HAVE_LONGLONG */
6437         offset = (uint64_t)IVAL(pdata,POSIX_LOCK_START_OFFSET);
6438         count = (uint64_t)IVAL(pdata,POSIX_LOCK_LEN_OFFSET);
6439 #endif /* HAVE_LONGLONG */
6440
6441         DEBUG(10,("smb_set_posix_lock: file %s, lock_type = %u,"
6442                         "smblctx = %llu, count = %.0f, offset = %.0f\n",
6443                 fsp_str_dbg(fsp),
6444                 (unsigned int)lock_type,
6445                 (unsigned long long)smblctx,
6446                 (double)count,
6447                 (double)offset ));
6448
6449         if (lock_type == UNLOCK_LOCK) {
6450                 status = do_unlock(req->sconn->msg_ctx,
6451                                 fsp,
6452                                 smblctx,
6453                                 count,
6454                                 offset,
6455                                 POSIX_LOCK);
6456         } else {
6457                 uint64_t block_smblctx;
6458
6459                 struct byte_range_lock *br_lck = do_lock(req->sconn->msg_ctx,
6460                                                         fsp,
6461                                                         smblctx,
6462                                                         count,
6463                                                         offset,
6464                                                         lock_type,
6465                                                         POSIX_LOCK,
6466                                                         blocking_lock,
6467                                                         &status,
6468                                                         &block_smblctx,
6469                                                         NULL);
6470
6471                 if (br_lck && blocking_lock && ERROR_WAS_LOCK_DENIED(status)) {
6472                         /*
6473                          * A blocking lock was requested. Package up
6474                          * this smb into a queued request and push it
6475                          * onto the blocking lock queue.
6476                          */
6477                         if(push_blocking_lock_request(br_lck,
6478                                                 req,
6479                                                 fsp,
6480                                                 -1, /* infinite timeout. */
6481                                                 0,
6482                                                 smblctx,
6483                                                 lock_type,
6484                                                 POSIX_LOCK,
6485                                                 offset,
6486                                                 count,
6487                                                 block_smblctx)) {
6488                                 TALLOC_FREE(br_lck);
6489                                 return status;
6490                         }
6491                 }
6492                 TALLOC_FREE(br_lck);
6493         }
6494
6495         return status;
6496 }
6497
6498 /****************************************************************************
6499  Deal with SMB_SET_FILE_BASIC_INFO.
6500 ****************************************************************************/
6501
6502 static NTSTATUS smb_set_file_basic_info(connection_struct *conn,
6503                                         const char *pdata,
6504                                         int total_data,
6505                                         files_struct *fsp,
6506                                         const struct smb_filename *smb_fname)
6507 {
6508         /* Patch to do this correctly from Paul Eggert <eggert@twinsun.com>. */
6509         struct smb_file_time ft;
6510         uint32 dosmode = 0;
6511         NTSTATUS status = NT_STATUS_OK;
6512
6513         ZERO_STRUCT(ft);
6514
6515         if (total_data < 36) {
6516                 return NT_STATUS_INVALID_PARAMETER;
6517         }
6518
6519         if (fsp && !(fsp->access_mask & FILE_WRITE_ATTRIBUTES)) {
6520                 return NT_STATUS_ACCESS_DENIED;
6521         }
6522
6523         /* Set the attributes */
6524         dosmode = IVAL(pdata,32);
6525         status = smb_set_file_dosmode(conn, smb_fname, dosmode);
6526         if (!NT_STATUS_IS_OK(status)) {
6527                 return status;
6528         }
6529
6530         /* create time */
6531         ft.create_time = interpret_long_date(pdata);
6532
6533         /* access time */
6534         ft.atime = interpret_long_date(pdata+8);
6535
6536         /* write time. */
6537         ft.mtime = interpret_long_date(pdata+16);
6538
6539         /* change time. */
6540         ft.ctime = interpret_long_date(pdata+24);
6541
6542         DEBUG(10, ("smb_set_file_basic_info: file %s\n",
6543                    smb_fname_str_dbg(smb_fname)));
6544
6545         return smb_set_file_time(conn, fsp, smb_fname, &ft,
6546                                  true);
6547 }
6548
6549 /****************************************************************************
6550  Deal with SMB_INFO_STANDARD.
6551 ****************************************************************************/
6552
6553 static NTSTATUS smb_set_info_standard(connection_struct *conn,
6554                                         const char *pdata,
6555                                         int total_data,
6556                                         files_struct *fsp,
6557                                         const struct smb_filename *smb_fname)
6558 {
6559         struct smb_file_time ft;
6560
6561         ZERO_STRUCT(ft);
6562
6563         if (total_data < 12) {
6564                 return NT_STATUS_INVALID_PARAMETER;
6565         }
6566
6567         /* create time */
6568         ft.create_time = convert_time_t_to_timespec(srv_make_unix_date2(pdata));
6569         /* access time */
6570         ft.atime = convert_time_t_to_timespec(srv_make_unix_date2(pdata+4));
6571         /* write time */
6572         ft.mtime = convert_time_t_to_timespec(srv_make_unix_date2(pdata+8));
6573
6574         DEBUG(10,("smb_set_info_standard: file %s\n",
6575                 smb_fname_str_dbg(smb_fname)));
6576
6577         return smb_set_file_time(conn,
6578                                 fsp,
6579                                 smb_fname,
6580                                 &ft,
6581                                 true);
6582 }
6583
6584 /****************************************************************************
6585  Deal with SMB_SET_FILE_ALLOCATION_INFO.
6586 ****************************************************************************/
6587
6588 static NTSTATUS smb_set_file_allocation_info(connection_struct *conn,
6589                                              struct smb_request *req,
6590                                         const char *pdata,
6591                                         int total_data,
6592                                         files_struct *fsp,
6593                                         struct smb_filename *smb_fname)
6594 {
6595         uint64_t allocation_size = 0;
6596         NTSTATUS status = NT_STATUS_OK;
6597         files_struct *new_fsp = NULL;
6598
6599         if (!VALID_STAT(smb_fname->st)) {
6600                 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
6601         }
6602
6603         if (total_data < 8) {
6604                 return NT_STATUS_INVALID_PARAMETER;
6605         }
6606
6607         allocation_size = (uint64_t)IVAL(pdata,0);
6608 #ifdef LARGE_SMB_OFF_T
6609         allocation_size |= (((uint64_t)IVAL(pdata,4)) << 32);
6610 #else /* LARGE_SMB_OFF_T */
6611         if (IVAL(pdata,4) != 0) {
6612                 /* more than 32 bits? */
6613                 return NT_STATUS_INVALID_PARAMETER;
6614         }
6615 #endif /* LARGE_SMB_OFF_T */
6616
6617         DEBUG(10,("smb_set_file_allocation_info: Set file allocation info for "
6618                   "file %s to %.0f\n", smb_fname_str_dbg(smb_fname),
6619                   (double)allocation_size));
6620
6621         if (allocation_size) {
6622                 allocation_size = smb_roundup(conn, allocation_size);
6623         }
6624
6625         DEBUG(10,("smb_set_file_allocation_info: file %s : setting new "
6626                   "allocation size to %.0f\n", smb_fname_str_dbg(smb_fname),
6627                   (double)allocation_size));
6628
6629         if (fsp && fsp->fh->fd != -1) {
6630                 /* Open file handle. */
6631                 if (!(fsp->access_mask & FILE_WRITE_DATA)) {
6632                         return NT_STATUS_ACCESS_DENIED;
6633                 }
6634
6635                 /* Only change if needed. */
6636                 if (allocation_size != get_file_size_stat(&smb_fname->st)) {
6637                         if (vfs_allocate_file_space(fsp, allocation_size) == -1) {
6638                                 return map_nt_error_from_unix(errno);
6639                         }
6640                 }
6641                 /* But always update the time. */
6642                 /*
6643                  * This is equivalent to a write. Ensure it's seen immediately
6644                  * if there are no pending writes.
6645                  */
6646                 trigger_write_time_update_immediate(fsp);
6647                 return NT_STATUS_OK;
6648         }
6649
6650         /* Pathname or stat or directory file. */
6651         status = SMB_VFS_CREATE_FILE(
6652                 conn,                                   /* conn */
6653                 req,                                    /* req */
6654                 0,                                      /* root_dir_fid */
6655                 smb_fname,                              /* fname */
6656                 FILE_WRITE_DATA,                        /* access_mask */
6657                 (FILE_SHARE_READ | FILE_SHARE_WRITE |   /* share_access */
6658                     FILE_SHARE_DELETE),
6659                 FILE_OPEN,                              /* create_disposition*/
6660                 0,                                      /* create_options */
6661                 FILE_ATTRIBUTE_NORMAL,                  /* file_attributes */
6662                 FORCE_OPLOCK_BREAK_TO_NONE,             /* oplock_request */
6663                 0,                                      /* allocation_size */
6664                 0,                                      /* private_flags */
6665                 NULL,                                   /* sd */
6666                 NULL,                                   /* ea_list */
6667                 &new_fsp,                               /* result */
6668                 NULL);                                  /* pinfo */
6669
6670         if (!NT_STATUS_IS_OK(status)) {
6671                 /* NB. We check for open_was_deferred in the caller. */
6672                 return status;
6673         }
6674
6675         /* Only change if needed. */
6676         if (allocation_size != get_file_size_stat(&smb_fname->st)) {
6677                 if (vfs_allocate_file_space(new_fsp, allocation_size) == -1) {
6678                         status = map_nt_error_from_unix(errno);
6679                         close_file(req, new_fsp, NORMAL_CLOSE);
6680                         return status;
6681                 }
6682         }
6683
6684         /* Changing the allocation size should set the last mod time. */
6685         /*
6686          * This is equivalent to a write. Ensure it's seen immediately
6687          * if there are no pending writes.
6688          */
6689         trigger_write_time_update_immediate(new_fsp);
6690
6691         close_file(req, new_fsp, NORMAL_CLOSE);
6692         return NT_STATUS_OK;
6693 }
6694
6695 /****************************************************************************
6696  Deal with SMB_SET_FILE_END_OF_FILE_INFO.
6697 ****************************************************************************/
6698
6699 static NTSTATUS smb_set_file_end_of_file_info(connection_struct *conn,
6700                                               struct smb_request *req,
6701                                         const char *pdata,
6702                                         int total_data,
6703                                         files_struct *fsp,
6704                                         const struct smb_filename *smb_fname,
6705                                         bool fail_after_createfile)
6706 {
6707         SMB_OFF_T size;
6708
6709         if (total_data < 8) {
6710                 return NT_STATUS_INVALID_PARAMETER;
6711         }
6712
6713         size = IVAL(pdata,0);
6714 #ifdef LARGE_SMB_OFF_T
6715         size |= (((SMB_OFF_T)IVAL(pdata,4)) << 32);
6716 #else /* LARGE_SMB_OFF_T */
6717         if (IVAL(pdata,4) != 0) {
6718                 /* more than 32 bits? */
6719                 return NT_STATUS_INVALID_PARAMETER;
6720         }
6721 #endif /* LARGE_SMB_OFF_T */
6722         DEBUG(10,("smb_set_file_end_of_file_info: Set end of file info for "
6723                   "file %s to %.0f\n", smb_fname_str_dbg(smb_fname),
6724                   (double)size));
6725
6726         return smb_set_file_size(conn, req,
6727                                 fsp,
6728                                 smb_fname,
6729                                 &smb_fname->st,
6730                                 size,
6731                                 fail_after_createfile);
6732 }
6733
6734 /****************************************************************************
6735  Allow a UNIX info mknod.
6736 ****************************************************************************/
6737
6738 static NTSTATUS smb_unix_mknod(connection_struct *conn,
6739                                         const char *pdata,
6740                                         int total_data,
6741                                         const struct smb_filename *smb_fname)
6742 {
6743         uint32 file_type = IVAL(pdata,56);
6744 #if defined(HAVE_MAKEDEV)
6745         uint32 dev_major = IVAL(pdata,60);
6746         uint32 dev_minor = IVAL(pdata,68);
6747 #endif
6748         SMB_DEV_T dev = (SMB_DEV_T)0;
6749         uint32 raw_unixmode = IVAL(pdata,84);
6750         NTSTATUS status;
6751         mode_t unixmode;
6752
6753         if (total_data < 100) {
6754                 return NT_STATUS_INVALID_PARAMETER;
6755         }
6756
6757         status = unix_perms_from_wire(conn, &smb_fname->st, raw_unixmode,
6758                                       PERM_NEW_FILE, &unixmode);
6759         if (!NT_STATUS_IS_OK(status)) {
6760                 return status;
6761         }
6762
6763 #if defined(HAVE_MAKEDEV)
6764         dev = makedev(dev_major, dev_minor);
6765 #endif
6766
6767         switch (file_type) {
6768 #if defined(S_IFIFO)
6769                 case UNIX_TYPE_FIFO:
6770                         unixmode |= S_IFIFO;
6771                         break;
6772 #endif
6773 #if defined(S_IFSOCK)
6774                 case UNIX_TYPE_SOCKET:
6775                         unixmode |= S_IFSOCK;
6776                         break;
6777 #endif
6778 #if defined(S_IFCHR)
6779                 case UNIX_TYPE_CHARDEV:
6780                         unixmode |= S_IFCHR;
6781                         break;
6782 #endif
6783 #if defined(S_IFBLK)
6784                 case UNIX_TYPE_BLKDEV:
6785                         unixmode |= S_IFBLK;
6786                         break;
6787 #endif
6788                 default:
6789                         return NT_STATUS_INVALID_PARAMETER;
6790         }
6791
6792         DEBUG(10,("smb_unix_mknod: SMB_SET_FILE_UNIX_BASIC doing mknod dev "
6793                   "%.0f mode 0%o for file %s\n", (double)dev,
6794                   (unsigned int)unixmode, smb_fname_str_dbg(smb_fname)));
6795
6796         /* Ok - do the mknod. */
6797         if (SMB_VFS_MKNOD(conn, smb_fname->base_name, unixmode, dev) != 0) {
6798                 return map_nt_error_from_unix(errno);
6799         }
6800
6801         /* If any of the other "set" calls fail we
6802          * don't want to end up with a half-constructed mknod.
6803          */
6804
6805         if (lp_inherit_perms(SNUM(conn))) {
6806                 char *parent;
6807                 if (!parent_dirname(talloc_tos(), smb_fname->base_name,
6808                                     &parent, NULL)) {
6809                         return NT_STATUS_NO_MEMORY;
6810                 }
6811                 inherit_access_posix_acl(conn, parent, smb_fname->base_name,
6812                                          unixmode);
6813                 TALLOC_FREE(parent);
6814         }
6815
6816         return NT_STATUS_OK;
6817 }
6818
6819 /****************************************************************************
6820  Deal with SMB_SET_FILE_UNIX_BASIC.
6821 ****************************************************************************/
6822
6823 static NTSTATUS smb_set_file_unix_basic(connection_struct *conn,
6824                                         struct smb_request *req,
6825                                         const char *pdata,
6826                                         int total_data,
6827                                         files_struct *fsp,
6828                                         const struct smb_filename *smb_fname)
6829 {
6830         struct smb_file_time ft;
6831         uint32 raw_unixmode;
6832         mode_t unixmode;
6833         SMB_OFF_T size = 0;
6834         uid_t set_owner = (uid_t)SMB_UID_NO_CHANGE;
6835         gid_t set_grp = (uid_t)SMB_GID_NO_CHANGE;
6836         NTSTATUS status = NT_STATUS_OK;
6837         bool delete_on_fail = False;
6838         enum perm_type ptype;
6839         files_struct *all_fsps = NULL;
6840         bool modify_mtime = true;
6841         struct file_id id;
6842         struct smb_filename *smb_fname_tmp = NULL;
6843         SMB_STRUCT_STAT sbuf;
6844
6845         ZERO_STRUCT(ft);
6846
6847         if (total_data < 100) {
6848                 return NT_STATUS_INVALID_PARAMETER;
6849         }
6850
6851         if(IVAL(pdata, 0) != SMB_SIZE_NO_CHANGE_LO &&
6852            IVAL(pdata, 4) != SMB_SIZE_NO_CHANGE_HI) {
6853                 size=IVAL(pdata,0); /* first 8 Bytes are size */
6854 #ifdef LARGE_SMB_OFF_T
6855                 size |= (((SMB_OFF_T)IVAL(pdata,4)) << 32);
6856 #else /* LARGE_SMB_OFF_T */
6857                 if (IVAL(pdata,4) != 0) {
6858                         /* more than 32 bits? */
6859                         return NT_STATUS_INVALID_PARAMETER;
6860                 }
6861 #endif /* LARGE_SMB_OFF_T */
6862         }
6863
6864         ft.atime = interpret_long_date(pdata+24); /* access_time */
6865         ft.mtime = interpret_long_date(pdata+32); /* modification_time */
6866         set_owner = (uid_t)IVAL(pdata,40);
6867         set_grp = (gid_t)IVAL(pdata,48);
6868         raw_unixmode = IVAL(pdata,84);
6869
6870         if (VALID_STAT(smb_fname->st)) {
6871                 if (S_ISDIR(smb_fname->st.st_ex_mode)) {
6872                         ptype = PERM_EXISTING_DIR;
6873                 } else {
6874                         ptype = PERM_EXISTING_FILE;
6875                 }
6876         } else {
6877                 ptype = PERM_NEW_FILE;
6878         }
6879
6880         status = unix_perms_from_wire(conn, &smb_fname->st, raw_unixmode,
6881                                       ptype, &unixmode);
6882         if (!NT_STATUS_IS_OK(status)) {
6883                 return status;
6884         }
6885
6886         DEBUG(10,("smb_set_file_unix_basic: SMB_SET_FILE_UNIX_BASIC: name = "
6887                   "%s size = %.0f, uid = %u, gid = %u, raw perms = 0%o\n",
6888                   smb_fname_str_dbg(smb_fname), (double)size,
6889                   (unsigned int)set_owner, (unsigned int)set_grp,
6890                   (int)raw_unixmode));
6891
6892         sbuf = smb_fname->st;
6893
6894         if (!VALID_STAT(sbuf)) {
6895                 /*
6896                  * The only valid use of this is to create character and block
6897                  * devices, and named pipes. This is deprecated (IMHO) and
6898                  * a new info level should be used for mknod. JRA.
6899                  */
6900
6901                 status = smb_unix_mknod(conn,
6902                                         pdata,
6903                                         total_data,
6904                                         smb_fname);
6905                 if (!NT_STATUS_IS_OK(status)) {
6906                         return status;
6907                 }
6908
6909                 status = copy_smb_filename(talloc_tos(), smb_fname,
6910                                            &smb_fname_tmp);
6911                 if (!NT_STATUS_IS_OK(status)) {
6912                         return status;
6913                 }
6914
6915                 if (SMB_VFS_STAT(conn, smb_fname_tmp) != 0) {
6916                         status = map_nt_error_from_unix(errno);
6917                         TALLOC_FREE(smb_fname_tmp);
6918                         SMB_VFS_UNLINK(conn, smb_fname);
6919                         return status;
6920                 }
6921
6922                 sbuf = smb_fname_tmp->st;
6923                 smb_fname = smb_fname_tmp;
6924
6925                 /* Ensure we don't try and change anything else. */
6926                 raw_unixmode = SMB_MODE_NO_CHANGE;
6927                 size = get_file_size_stat(&sbuf);
6928                 ft.atime = sbuf.st_ex_atime;
6929                 ft.mtime = sbuf.st_ex_mtime;
6930                 /*
6931                  * We continue here as we might want to change the
6932                  * owner uid/gid.
6933                  */
6934                 delete_on_fail = True;
6935         }
6936
6937 #if 1
6938         /* Horrible backwards compatibility hack as an old server bug
6939          * allowed a CIFS client bug to remain unnoticed :-(. JRA.
6940          * */
6941
6942         if (!size) {
6943                 size = get_file_size_stat(&sbuf);
6944         }
6945 #endif
6946
6947         /*
6948          * Deal with the UNIX specific mode set.
6949          */
6950
6951         if (raw_unixmode != SMB_MODE_NO_CHANGE) {
6952                 DEBUG(10,("smb_set_file_unix_basic: SMB_SET_FILE_UNIX_BASIC "
6953                           "setting mode 0%o for file %s\n",
6954                           (unsigned int)unixmode,
6955                           smb_fname_str_dbg(smb_fname)));
6956                 if (SMB_VFS_CHMOD(conn, smb_fname->base_name, unixmode) != 0) {
6957                         return map_nt_error_from_unix(errno);
6958                 }
6959         }
6960
6961         /*
6962          * Deal with the UNIX specific uid set.
6963          */
6964
6965         if ((set_owner != (uid_t)SMB_UID_NO_CHANGE) &&
6966             (sbuf.st_ex_uid != set_owner)) {
6967                 int ret;
6968
6969                 DEBUG(10,("smb_set_file_unix_basic: SMB_SET_FILE_UNIX_BASIC "
6970                           "changing owner %u for path %s\n",
6971                           (unsigned int)set_owner,
6972                           smb_fname_str_dbg(smb_fname)));
6973
6974                 if (S_ISLNK(sbuf.st_ex_mode)) {
6975                         ret = SMB_VFS_LCHOWN(conn, smb_fname->base_name,
6976                                              set_owner, (gid_t)-1);
6977                 } else {
6978                         ret = SMB_VFS_CHOWN(conn, smb_fname->base_name,
6979                                             set_owner, (gid_t)-1);
6980                 }
6981
6982                 if (ret != 0) {
6983                         status = map_nt_error_from_unix(errno);
6984                         if (delete_on_fail) {
6985                                 SMB_VFS_UNLINK(conn, smb_fname);
6986                         }
6987                         return status;
6988                 }
6989         }
6990
6991         /*
6992          * Deal with the UNIX specific gid set.
6993          */
6994
6995         if ((set_grp != (uid_t)SMB_GID_NO_CHANGE) &&
6996             (sbuf.st_ex_gid != set_grp)) {
6997                 DEBUG(10,("smb_set_file_unix_basic: SMB_SET_FILE_UNIX_BASIC "
6998                           "changing group %u for file %s\n",
6999                           (unsigned int)set_owner,
7000                           smb_fname_str_dbg(smb_fname)));
7001                 if (SMB_VFS_CHOWN(conn, smb_fname->base_name, (uid_t)-1,
7002                                   set_grp) != 0) {
7003                         status = map_nt_error_from_unix(errno);
7004                         if (delete_on_fail) {
7005                                 SMB_VFS_UNLINK(conn, smb_fname);
7006                         }
7007                         return status;
7008                 }
7009         }
7010
7011         /* Deal with any size changes. */
7012
7013         status = smb_set_file_size(conn, req,
7014                                    fsp,
7015                                    smb_fname,
7016                                    &sbuf,
7017                                    size,
7018                                    false);
7019         if (!NT_STATUS_IS_OK(status)) {
7020                 return status;
7021         }
7022
7023         /* Deal with any time changes. */
7024         if (null_timespec(ft.mtime) && null_timespec(ft.atime)) {
7025                 /* No change, don't cancel anything. */
7026                 return status;
7027         }
7028
7029         id = vfs_file_id_from_sbuf(conn, &sbuf);
7030         for(all_fsps = file_find_di_first(conn->sconn, id); all_fsps;
7031                         all_fsps = file_find_di_next(all_fsps)) {
7032                 /*
7033                  * We're setting the time explicitly for UNIX.
7034                  * Cancel any pending changes over all handles.
7035                  */
7036                 all_fsps->update_write_time_on_close = false;
7037                 TALLOC_FREE(all_fsps->update_write_time_event);
7038         }
7039
7040         /*
7041          * Override the "setting_write_time"
7042          * parameter here as it almost does what
7043          * we need. Just remember if we modified
7044          * mtime and send the notify ourselves.
7045          */
7046         if (null_timespec(ft.mtime)) {
7047                 modify_mtime = false;
7048         }
7049
7050         status = smb_set_file_time(conn,
7051                                 fsp,
7052                                 smb_fname,
7053                                 &ft,
7054                                 false);
7055         if (modify_mtime) {
7056                 notify_fname(conn, NOTIFY_ACTION_MODIFIED,
7057                         FILE_NOTIFY_CHANGE_LAST_WRITE, smb_fname->base_name);
7058         }
7059         return status;
7060 }
7061
7062 /****************************************************************************
7063  Deal with SMB_SET_FILE_UNIX_INFO2.
7064 ****************************************************************************/
7065
7066 static NTSTATUS smb_set_file_unix_info2(connection_struct *conn,
7067                                         struct smb_request *req,
7068                                         const char *pdata,
7069                                         int total_data,
7070                                         files_struct *fsp,
7071                                         const struct smb_filename *smb_fname)
7072 {
7073         NTSTATUS status;
7074         uint32 smb_fflags;
7075         uint32 smb_fmask;
7076
7077         if (total_data < 116) {
7078                 return NT_STATUS_INVALID_PARAMETER;
7079         }
7080
7081         /* Start by setting all the fields that are common between UNIX_BASIC
7082          * and UNIX_INFO2.
7083          */
7084         status = smb_set_file_unix_basic(conn, req, pdata, total_data,
7085                                          fsp, smb_fname);
7086         if (!NT_STATUS_IS_OK(status)) {
7087                 return status;
7088         }
7089
7090         smb_fflags = IVAL(pdata, 108);
7091         smb_fmask = IVAL(pdata, 112);
7092
7093         /* NB: We should only attempt to alter the file flags if the client
7094          * sends a non-zero mask.
7095          */
7096         if (smb_fmask != 0) {
7097                 int stat_fflags = 0;
7098
7099                 if (!map_info2_flags_to_sbuf(&smb_fname->st, smb_fflags,
7100                                              smb_fmask, &stat_fflags)) {
7101                         /* Client asked to alter a flag we don't understand. */
7102                         return NT_STATUS_INVALID_PARAMETER;
7103                 }
7104
7105                 if (fsp && fsp->fh->fd != -1) {
7106                         /* XXX: we should be  using SMB_VFS_FCHFLAGS here. */
7107                         return NT_STATUS_NOT_SUPPORTED;
7108                 } else {
7109                         if (SMB_VFS_CHFLAGS(conn, smb_fname->base_name,
7110                                             stat_fflags) != 0) {
7111                                 return map_nt_error_from_unix(errno);
7112                         }
7113                 }
7114         }
7115
7116         /* XXX: need to add support for changing the create_time here. You
7117          * can do this for paths on Darwin with setattrlist(2). The right way
7118          * to hook this up is probably by extending the VFS utimes interface.
7119          */
7120
7121         return NT_STATUS_OK;
7122 }
7123
7124 /****************************************************************************
7125  Create a directory with POSIX semantics.
7126 ****************************************************************************/
7127
7128 static NTSTATUS smb_posix_mkdir(connection_struct *conn,
7129                                 struct smb_request *req,
7130                                 char **ppdata,
7131                                 int total_data,
7132                                 struct smb_filename *smb_fname,
7133                                 int *pdata_return_size)
7134 {
7135         NTSTATUS status = NT_STATUS_OK;
7136         uint32 raw_unixmode = 0;
7137         uint32 mod_unixmode = 0;
7138         mode_t unixmode = (mode_t)0;
7139         files_struct *fsp = NULL;
7140         uint16 info_level_return = 0;
7141         int info;
7142         char *pdata = *ppdata;
7143
7144         if (total_data < 18) {
7145                 return NT_STATUS_INVALID_PARAMETER;
7146         }
7147
7148         raw_unixmode = IVAL(pdata,8);
7149         /* Next 4 bytes are not yet defined. */
7150
7151         status = unix_perms_from_wire(conn, &smb_fname->st, raw_unixmode,
7152                                       PERM_NEW_DIR, &unixmode);
7153         if (!NT_STATUS_IS_OK(status)) {
7154                 return status;
7155         }
7156
7157         mod_unixmode = (uint32)unixmode | FILE_FLAG_POSIX_SEMANTICS;
7158
7159         DEBUG(10,("smb_posix_mkdir: file %s, mode 0%o\n",
7160                   smb_fname_str_dbg(smb_fname), (unsigned int)unixmode));
7161
7162         status = SMB_VFS_CREATE_FILE(
7163                 conn,                                   /* conn */
7164                 req,                                    /* req */
7165                 0,                                      /* root_dir_fid */
7166                 smb_fname,                              /* fname */
7167                 FILE_READ_ATTRIBUTES,                   /* access_mask */
7168                 FILE_SHARE_NONE,                        /* share_access */
7169                 FILE_CREATE,                            /* create_disposition*/
7170                 FILE_DIRECTORY_FILE,                    /* create_options */
7171                 mod_unixmode,                           /* file_attributes */
7172                 0,                                      /* oplock_request */
7173                 0,                                      /* allocation_size */
7174                 0,                                      /* private_flags */
7175                 NULL,                                   /* sd */
7176                 NULL,                                   /* ea_list */
7177                 &fsp,                                   /* result */
7178                 &info);                                 /* pinfo */
7179
7180         if (NT_STATUS_IS_OK(status)) {
7181                 close_file(req, fsp, NORMAL_CLOSE);
7182         }
7183
7184         info_level_return = SVAL(pdata,16);
7185
7186         if (info_level_return == SMB_QUERY_FILE_UNIX_BASIC) {
7187                 *pdata_return_size = 12 + SMB_FILE_UNIX_BASIC_SIZE;
7188         } else if (info_level_return ==  SMB_QUERY_FILE_UNIX_INFO2) {
7189                 *pdata_return_size = 12 + SMB_FILE_UNIX_INFO2_SIZE;
7190         } else {
7191                 *pdata_return_size = 12;
7192         }
7193
7194         /* Realloc the data size */
7195         *ppdata = (char *)SMB_REALLOC(*ppdata,*pdata_return_size);
7196         if (*ppdata == NULL) {
7197                 *pdata_return_size = 0;
7198                 return NT_STATUS_NO_MEMORY;
7199         }
7200         pdata = *ppdata;
7201
7202         SSVAL(pdata,0,NO_OPLOCK_RETURN);
7203         SSVAL(pdata,2,0); /* No fnum. */
7204         SIVAL(pdata,4,info); /* Was directory created. */
7205
7206         switch (info_level_return) {
7207                 case SMB_QUERY_FILE_UNIX_BASIC:
7208                         SSVAL(pdata,8,SMB_QUERY_FILE_UNIX_BASIC);
7209                         SSVAL(pdata,10,0); /* Padding. */
7210                         store_file_unix_basic(conn, pdata + 12, fsp,
7211                                               &smb_fname->st);
7212                         break;
7213                 case SMB_QUERY_FILE_UNIX_INFO2:
7214                         SSVAL(pdata,8,SMB_QUERY_FILE_UNIX_INFO2);
7215                         SSVAL(pdata,10,0); /* Padding. */
7216                         store_file_unix_basic_info2(conn, pdata + 12, fsp,
7217                                                     &smb_fname->st);
7218                         break;
7219                 default:
7220                         SSVAL(pdata,8,SMB_NO_INFO_LEVEL_RETURNED);
7221                         SSVAL(pdata,10,0); /* Padding. */
7222                         break;
7223         }
7224
7225         return status;
7226 }
7227
7228 /****************************************************************************
7229  Open/Create a file with POSIX semantics.
7230 ****************************************************************************/
7231
7232 #define SMB_O_RDONLY_MAPPING (FILE_READ_DATA|FILE_READ_ATTRIBUTES|FILE_READ_EA)
7233 #define SMB_O_WRONLY_MAPPING (FILE_WRITE_DATA|FILE_WRITE_ATTRIBUTES|FILE_WRITE_EA)
7234
7235 static NTSTATUS smb_posix_open(connection_struct *conn,
7236                                struct smb_request *req,
7237                                 char **ppdata,
7238                                 int total_data,
7239                                 struct smb_filename *smb_fname,
7240                                 int *pdata_return_size)
7241 {
7242         bool extended_oplock_granted = False;
7243         char *pdata = *ppdata;
7244         uint32 flags = 0;
7245         uint32 wire_open_mode = 0;
7246         uint32 raw_unixmode = 0;
7247         uint32 mod_unixmode = 0;
7248         uint32 create_disp = 0;
7249         uint32 access_mask = 0;
7250         uint32 create_options = FILE_NON_DIRECTORY_FILE;
7251         NTSTATUS status = NT_STATUS_OK;
7252         mode_t unixmode = (mode_t)0;
7253         files_struct *fsp = NULL;
7254         int oplock_request = 0;
7255         int info = 0;
7256         uint16 info_level_return = 0;
7257
7258         if (total_data < 18) {
7259                 return NT_STATUS_INVALID_PARAMETER;
7260         }
7261
7262         flags = IVAL(pdata,0);
7263         oplock_request = (flags & REQUEST_OPLOCK) ? EXCLUSIVE_OPLOCK : 0;
7264         if (oplock_request) {
7265                 oplock_request |= (flags & REQUEST_BATCH_OPLOCK) ? BATCH_OPLOCK : 0;
7266         }
7267
7268         wire_open_mode = IVAL(pdata,4);
7269
7270         if (wire_open_mode == (SMB_O_CREAT|SMB_O_DIRECTORY)) {
7271                 return smb_posix_mkdir(conn, req,
7272                                         ppdata,
7273                                         total_data,
7274                                         smb_fname,
7275                                         pdata_return_size);
7276         }
7277
7278         switch (wire_open_mode & SMB_ACCMODE) {
7279                 case SMB_O_RDONLY:
7280                         access_mask = SMB_O_RDONLY_MAPPING;
7281                         break;
7282                 case SMB_O_WRONLY:
7283                         access_mask = SMB_O_WRONLY_MAPPING;
7284                         break;
7285                 case SMB_O_RDWR:
7286                         access_mask = (SMB_O_RDONLY_MAPPING|
7287                                         SMB_O_WRONLY_MAPPING);
7288                         break;
7289                 default:
7290                         DEBUG(5,("smb_posix_open: invalid open mode 0x%x\n",
7291                                 (unsigned int)wire_open_mode ));
7292                         return NT_STATUS_INVALID_PARAMETER;
7293         }
7294
7295         wire_open_mode &= ~SMB_ACCMODE;
7296
7297         /* First take care of O_CREAT|O_EXCL interactions. */
7298         switch (wire_open_mode & (SMB_O_CREAT | SMB_O_EXCL)) {
7299                 case (SMB_O_CREAT | SMB_O_EXCL):
7300                         /* File exists fail. File not exist create. */
7301                         create_disp = FILE_CREATE;
7302                         break;
7303                 case SMB_O_CREAT:
7304                         /* File exists open. File not exist create. */
7305                         create_disp = FILE_OPEN_IF;
7306                         break;
7307                 case 0:
7308                         /* File exists open. File not exist fail. */
7309                         create_disp = FILE_OPEN;
7310                         break;
7311                 case SMB_O_EXCL:
7312                         /* O_EXCL on its own without O_CREAT is undefined. */
7313                 default:
7314                         DEBUG(5,("smb_posix_open: invalid create mode 0x%x\n",
7315                                 (unsigned int)wire_open_mode ));
7316                         return NT_STATUS_INVALID_PARAMETER;
7317         }
7318
7319         /* Next factor in the effects of O_TRUNC. */
7320         wire_open_mode &= ~(SMB_O_CREAT | SMB_O_EXCL);
7321
7322         if (wire_open_mode & SMB_O_TRUNC) {
7323                 switch (create_disp) {
7324                         case FILE_CREATE:
7325                                 /* (SMB_O_CREAT | SMB_O_EXCL | O_TRUNC) */
7326                                 /* Leave create_disp alone as
7327                                    (O_CREAT|O_EXCL|O_TRUNC) == (O_CREAT|O_EXCL)
7328                                 */
7329                                 /* File exists fail. File not exist create. */
7330                                 break;
7331                         case FILE_OPEN_IF:
7332                                 /* SMB_O_CREAT | SMB_O_TRUNC */
7333                                 /* File exists overwrite. File not exist create. */
7334                                 create_disp = FILE_OVERWRITE_IF;
7335                                 break;
7336                         case FILE_OPEN:
7337                                 /* SMB_O_TRUNC */
7338                                 /* File exists overwrite. File not exist fail. */
7339                                 create_disp = FILE_OVERWRITE;
7340                                 break;
7341                         default:
7342                                 /* Cannot get here. */
7343                                 smb_panic("smb_posix_open: logic error");
7344                                 return NT_STATUS_INVALID_PARAMETER;
7345                 }
7346         }
7347
7348         raw_unixmode = IVAL(pdata,8);
7349         /* Next 4 bytes are not yet defined. */
7350
7351         status = unix_perms_from_wire(conn, &smb_fname->st, raw_unixmode,
7352                                       (VALID_STAT(smb_fname->st) ?
7353                                           PERM_EXISTING_FILE : PERM_NEW_FILE),
7354                                       &unixmode);
7355
7356         if (!NT_STATUS_IS_OK(status)) {
7357                 return status;
7358         }
7359
7360         mod_unixmode = (uint32)unixmode | FILE_FLAG_POSIX_SEMANTICS;
7361
7362         if (wire_open_mode & SMB_O_SYNC) {
7363                 create_options |= FILE_WRITE_THROUGH;
7364         }
7365         if (wire_open_mode & SMB_O_APPEND) {
7366                 access_mask |= FILE_APPEND_DATA;
7367         }
7368         if (wire_open_mode & SMB_O_DIRECT) {
7369                 mod_unixmode |= FILE_FLAG_NO_BUFFERING;
7370         }
7371
7372         if ((wire_open_mode & SMB_O_DIRECTORY) ||
7373                         VALID_STAT_OF_DIR(smb_fname->st)) {
7374                 if (access_mask != SMB_O_RDONLY_MAPPING) {
7375                         return NT_STATUS_FILE_IS_A_DIRECTORY;
7376                 }
7377                 create_options &= ~FILE_NON_DIRECTORY_FILE;
7378                 create_options |= FILE_DIRECTORY_FILE;
7379         }
7380
7381         DEBUG(10,("smb_posix_open: file %s, smb_posix_flags = %u, mode 0%o\n",
7382                 smb_fname_str_dbg(smb_fname),
7383                 (unsigned int)wire_open_mode,
7384                 (unsigned int)unixmode ));
7385
7386         status = SMB_VFS_CREATE_FILE(
7387                 conn,                                   /* conn */
7388                 req,                                    /* req */
7389                 0,                                      /* root_dir_fid */
7390                 smb_fname,                              /* fname */
7391                 access_mask,                            /* access_mask */
7392                 (FILE_SHARE_READ | FILE_SHARE_WRITE |   /* share_access */
7393                     FILE_SHARE_DELETE),
7394                 create_disp,                            /* create_disposition*/
7395                 create_options,                         /* create_options */
7396                 mod_unixmode,                           /* file_attributes */
7397                 oplock_request,                         /* oplock_request */
7398                 0,                                      /* allocation_size */
7399                 0,                                      /* private_flags */
7400                 NULL,                                   /* sd */
7401                 NULL,                                   /* ea_list */
7402                 &fsp,                                   /* result */
7403                 &info);                                 /* pinfo */
7404
7405         if (!NT_STATUS_IS_OK(status)) {
7406                 return status;
7407         }
7408
7409         if (oplock_request && lp_fake_oplocks(SNUM(conn))) {
7410                 extended_oplock_granted = True;
7411         }
7412
7413         if(oplock_request && EXCLUSIVE_OPLOCK_TYPE(fsp->oplock_type)) {
7414                 extended_oplock_granted = True;
7415         }
7416
7417         info_level_return = SVAL(pdata,16);
7418
7419         /* Allocate the correct return size. */
7420
7421         if (info_level_return == SMB_QUERY_FILE_UNIX_BASIC) {
7422                 *pdata_return_size = 12 + SMB_FILE_UNIX_BASIC_SIZE;
7423         } else if (info_level_return ==  SMB_QUERY_FILE_UNIX_INFO2) {
7424                 *pdata_return_size = 12 + SMB_FILE_UNIX_INFO2_SIZE;
7425         } else {
7426                 *pdata_return_size = 12;
7427         }
7428
7429         /* Realloc the data size */
7430         *ppdata = (char *)SMB_REALLOC(*ppdata,*pdata_return_size);
7431         if (*ppdata == NULL) {
7432                 close_file(req, fsp, ERROR_CLOSE);
7433                 *pdata_return_size = 0;
7434                 return NT_STATUS_NO_MEMORY;
7435         }
7436         pdata = *ppdata;
7437
7438         if (extended_oplock_granted) {
7439                 if (flags & REQUEST_BATCH_OPLOCK) {
7440                         SSVAL(pdata,0, BATCH_OPLOCK_RETURN);
7441                 } else {
7442                         SSVAL(pdata,0, EXCLUSIVE_OPLOCK_RETURN);
7443                 }
7444         } else if (fsp->oplock_type == LEVEL_II_OPLOCK) {
7445                 SSVAL(pdata,0, LEVEL_II_OPLOCK_RETURN);
7446         } else {
7447                 SSVAL(pdata,0,NO_OPLOCK_RETURN);
7448         }
7449
7450         SSVAL(pdata,2,fsp->fnum);
7451         SIVAL(pdata,4,info); /* Was file created etc. */
7452
7453         switch (info_level_return) {
7454                 case SMB_QUERY_FILE_UNIX_BASIC:
7455                         SSVAL(pdata,8,SMB_QUERY_FILE_UNIX_BASIC);
7456                         SSVAL(pdata,10,0); /* padding. */
7457                         store_file_unix_basic(conn, pdata + 12, fsp,
7458                                               &smb_fname->st);
7459                         break;
7460                 case SMB_QUERY_FILE_UNIX_INFO2:
7461                         SSVAL(pdata,8,SMB_QUERY_FILE_UNIX_INFO2);
7462                         SSVAL(pdata,10,0); /* padding. */
7463                         store_file_unix_basic_info2(conn, pdata + 12, fsp,
7464                                                     &smb_fname->st);
7465                         break;
7466                 default:
7467                         SSVAL(pdata,8,SMB_NO_INFO_LEVEL_RETURNED);
7468                         SSVAL(pdata,10,0); /* padding. */
7469                         break;
7470         }
7471         return NT_STATUS_OK;
7472 }
7473
7474 /****************************************************************************
7475  Delete a file with POSIX semantics.
7476 ****************************************************************************/
7477
7478 static NTSTATUS smb_posix_unlink(connection_struct *conn,
7479                                  struct smb_request *req,
7480                                 const char *pdata,
7481                                 int total_data,
7482                                 struct smb_filename *smb_fname)
7483 {
7484         NTSTATUS status = NT_STATUS_OK;
7485         files_struct *fsp = NULL;
7486         uint16 flags = 0;
7487         char del = 1;
7488         int info = 0;
7489         int create_options = 0;
7490         int i;
7491         struct share_mode_lock *lck = NULL;
7492
7493         if (total_data < 2) {
7494                 return NT_STATUS_INVALID_PARAMETER;
7495         }
7496
7497         flags = SVAL(pdata,0);
7498
7499         if (!VALID_STAT(smb_fname->st)) {
7500                 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
7501         }
7502
7503         if ((flags == SMB_POSIX_UNLINK_DIRECTORY_TARGET) &&
7504                         !VALID_STAT_OF_DIR(smb_fname->st)) {
7505                 return NT_STATUS_NOT_A_DIRECTORY;
7506         }
7507
7508         DEBUG(10,("smb_posix_unlink: %s %s\n",
7509                 (flags == SMB_POSIX_UNLINK_DIRECTORY_TARGET) ? "directory" : "file",
7510                 smb_fname_str_dbg(smb_fname)));
7511
7512         if (VALID_STAT_OF_DIR(smb_fname->st)) {
7513                 create_options |= FILE_DIRECTORY_FILE;
7514         }
7515
7516         status = SMB_VFS_CREATE_FILE(
7517                 conn,                                   /* conn */
7518                 req,                                    /* req */
7519                 0,                                      /* root_dir_fid */
7520                 smb_fname,                              /* fname */
7521                 DELETE_ACCESS,                          /* access_mask */
7522                 (FILE_SHARE_READ | FILE_SHARE_WRITE |   /* share_access */
7523                     FILE_SHARE_DELETE),
7524                 FILE_OPEN,                              /* create_disposition*/
7525                 create_options,                         /* create_options */
7526                 FILE_FLAG_POSIX_SEMANTICS|0777,         /* file_attributes */
7527                 0,                                      /* oplock_request */
7528                 0,                                      /* allocation_size */
7529                 0,                                      /* private_flags */
7530                 NULL,                                   /* sd */
7531                 NULL,                                   /* ea_list */
7532                 &fsp,                                   /* result */
7533                 &info);                                 /* pinfo */
7534
7535         if (!NT_STATUS_IS_OK(status)) {
7536                 return status;
7537         }
7538
7539         /*
7540          * Don't lie to client. If we can't really delete due to
7541          * non-POSIX opens return SHARING_VIOLATION.
7542          */
7543
7544         lck = get_share_mode_lock(talloc_tos(), fsp->file_id, NULL, NULL,
7545                                   NULL);
7546         if (lck == NULL) {
7547                 DEBUG(0, ("smb_posix_unlink: Could not get share mode "
7548                           "lock for file %s\n", fsp_str_dbg(fsp)));
7549                 close_file(req, fsp, NORMAL_CLOSE);
7550                 return NT_STATUS_INVALID_PARAMETER;
7551         }
7552
7553         /*
7554          * See if others still have the file open. If this is the case, then
7555          * don't delete. If all opens are POSIX delete we can set the delete
7556          * on close disposition.
7557          */
7558         for (i=0; i<lck->num_share_modes; i++) {
7559                 struct share_mode_entry *e = &lck->share_modes[i];
7560                 if (is_valid_share_mode_entry(e)) {
7561                         if (e->flags & SHARE_MODE_FLAG_POSIX_OPEN) {
7562                                 continue;
7563                         }
7564                         /* Fail with sharing violation. */
7565                         close_file(req, fsp, NORMAL_CLOSE);
7566                         TALLOC_FREE(lck);
7567                         return NT_STATUS_SHARING_VIOLATION;
7568                 }
7569         }
7570
7571         /*
7572          * Set the delete on close.
7573          */
7574         status = smb_set_file_disposition_info(conn,
7575                                                 &del,
7576                                                 1,
7577                                                 fsp,
7578                                                 smb_fname);
7579
7580         if (!NT_STATUS_IS_OK(status)) {
7581                 close_file(req, fsp, NORMAL_CLOSE);
7582                 TALLOC_FREE(lck);
7583                 return status;
7584         }
7585         TALLOC_FREE(lck);
7586         return close_file(req, fsp, NORMAL_CLOSE);
7587 }
7588
7589 NTSTATUS smbd_do_setfilepathinfo(connection_struct *conn,
7590                                 struct smb_request *req,
7591                                 TALLOC_CTX *mem_ctx,
7592                                 uint16_t info_level,
7593                                 files_struct *fsp,
7594                                 struct smb_filename *smb_fname,
7595                                 char **ppdata, int total_data,
7596                                 int *ret_data_size)
7597 {
7598         char *pdata = *ppdata;
7599         NTSTATUS status = NT_STATUS_OK;
7600         int data_return_size = 0;
7601
7602         *ret_data_size = 0;
7603
7604         if (INFO_LEVEL_IS_UNIX(info_level) && !lp_unix_extensions()) {
7605                 return NT_STATUS_INVALID_LEVEL;
7606         }
7607
7608         if (!CAN_WRITE(conn)) {
7609                 /* Allow POSIX opens. The open path will deny
7610                  * any non-readonly opens. */
7611                 if (info_level != SMB_POSIX_PATH_OPEN) {
7612                         return NT_STATUS_DOS(ERRSRV, ERRaccess);
7613                 }
7614         }
7615
7616         DEBUG(3,("smbd_do_setfilepathinfo: %s (fnum %d) info_level=%d "
7617                  "totdata=%d\n", smb_fname_str_dbg(smb_fname),
7618                  fsp ? fsp->fnum : -1, info_level, total_data));
7619
7620         switch (info_level) {
7621
7622                 case SMB_INFO_STANDARD:
7623                 {
7624                         status = smb_set_info_standard(conn,
7625                                         pdata,
7626                                         total_data,
7627                                         fsp,
7628                                         smb_fname);
7629                         break;
7630                 }
7631
7632                 case SMB_INFO_SET_EA:
7633                 {
7634                         status = smb_info_set_ea(conn,
7635                                                 pdata,
7636                                                 total_data,
7637                                                 fsp,
7638                                                 smb_fname);
7639                         break;
7640                 }
7641
7642                 case SMB_SET_FILE_BASIC_INFO:
7643                 case SMB_FILE_BASIC_INFORMATION:
7644                 {
7645                         status = smb_set_file_basic_info(conn,
7646                                                         pdata,
7647                                                         total_data,
7648                                                         fsp,
7649                                                         smb_fname);
7650                         break;
7651                 }
7652
7653                 case SMB_FILE_ALLOCATION_INFORMATION:
7654                 case SMB_SET_FILE_ALLOCATION_INFO:
7655                 {
7656                         status = smb_set_file_allocation_info(conn, req,
7657                                                                 pdata,
7658                                                                 total_data,
7659                                                                 fsp,
7660                                                                 smb_fname);
7661                         break;
7662                 }
7663
7664                 case SMB_FILE_END_OF_FILE_INFORMATION:
7665                 case SMB_SET_FILE_END_OF_FILE_INFO:
7666                 {
7667                         /*
7668                          * XP/Win7 both fail after the createfile with
7669                          * SMB_SET_FILE_END_OF_FILE_INFO but not
7670                          * SMB_FILE_END_OF_FILE_INFORMATION (pass-through).
7671                          * The level is known here, so pass it down
7672                          * appropriately.
7673                          */
7674                         bool should_fail =
7675                             (info_level == SMB_SET_FILE_END_OF_FILE_INFO);
7676
7677                         status = smb_set_file_end_of_file_info(conn, req,
7678                                                                 pdata,
7679                                                                 total_data,
7680                                                                 fsp,
7681                                                                 smb_fname,
7682                                                                 should_fail);
7683                         break;
7684                 }
7685
7686                 case SMB_FILE_DISPOSITION_INFORMATION:
7687                 case SMB_SET_FILE_DISPOSITION_INFO: /* Set delete on close for open file. */
7688                 {
7689 #if 0
7690                         /* JRA - We used to just ignore this on a path ?
7691                          * Shouldn't this be invalid level on a pathname
7692                          * based call ?
7693                          */
7694                         if (tran_call != TRANSACT2_SETFILEINFO) {
7695                                 return ERROR_NT(NT_STATUS_INVALID_LEVEL);
7696                         }
7697 #endif
7698                         status = smb_set_file_disposition_info(conn,
7699                                                 pdata,
7700                                                 total_data,
7701                                                 fsp,
7702                                                 smb_fname);
7703                         break;
7704                 }
7705
7706                 case SMB_FILE_POSITION_INFORMATION:
7707                 {
7708                         status = smb_file_position_information(conn,
7709                                                 pdata,
7710                                                 total_data,
7711                                                 fsp);
7712                         break;
7713                 }
7714
7715                 case SMB_FILE_FULL_EA_INFORMATION:
7716                 {
7717                         status = smb_set_file_full_ea_info(conn,
7718                                                 pdata,
7719                                                 total_data,
7720                                                 fsp);
7721                         break;
7722                 }
7723
7724                 /* From tridge Samba4 :
7725                  * MODE_INFORMATION in setfileinfo (I have no
7726                  * idea what "mode information" on a file is - it takes a value of 0,
7727                  * 2, 4 or 6. What could it be?).
7728                  */
7729
7730                 case SMB_FILE_MODE_INFORMATION:
7731                 {
7732                         status = smb_file_mode_information(conn,
7733                                                 pdata,
7734                                                 total_data);
7735                         break;
7736                 }
7737
7738                 /*
7739                  * CIFS UNIX extensions.
7740                  */
7741
7742                 case SMB_SET_FILE_UNIX_BASIC:
7743                 {
7744                         status = smb_set_file_unix_basic(conn, req,
7745                                                         pdata,
7746                                                         total_data,
7747                                                         fsp,
7748                                                         smb_fname);
7749                         break;
7750                 }
7751
7752                 case SMB_SET_FILE_UNIX_INFO2:
7753                 {
7754                         status = smb_set_file_unix_info2(conn, req,
7755                                                         pdata,
7756                                                         total_data,
7757                                                         fsp,
7758                                                         smb_fname);
7759                         break;
7760                 }
7761
7762                 case SMB_SET_FILE_UNIX_LINK:
7763                 {
7764                         if (fsp) {
7765                                 /* We must have a pathname for this. */
7766                                 return NT_STATUS_INVALID_LEVEL;
7767                         }
7768                         status = smb_set_file_unix_link(conn, req, pdata,
7769                                                         total_data, smb_fname);
7770                         break;
7771                 }
7772
7773                 case SMB_SET_FILE_UNIX_HLINK:
7774                 {
7775                         if (fsp) {
7776                                 /* We must have a pathname for this. */
7777                                 return NT_STATUS_INVALID_LEVEL;
7778                         }
7779                         status = smb_set_file_unix_hlink(conn, req,
7780                                                          pdata, total_data,
7781                                                          smb_fname);
7782                         break;
7783                 }
7784
7785                 case SMB_FILE_RENAME_INFORMATION:
7786                 {
7787                         status = smb_file_rename_information(conn, req,
7788                                                              pdata, total_data,
7789                                                              fsp, smb_fname);
7790                         break;
7791                 }
7792
7793                 case SMB2_FILE_RENAME_INFORMATION_INTERNAL:
7794                 {
7795                         /* SMB2 rename information. */
7796                         status = smb2_file_rename_information(conn, req,
7797                                                              pdata, total_data,
7798                                                              fsp, smb_fname);
7799                         break;
7800                 }
7801
7802                 case SMB_FILE_LINK_INFORMATION:
7803                 {
7804                         status = smb_file_link_information(conn, req,
7805                                                         pdata, total_data,
7806                                                         fsp, smb_fname);
7807                         break;
7808                 }
7809
7810 #if defined(HAVE_POSIX_ACLS)
7811                 case SMB_SET_POSIX_ACL:
7812                 {
7813                         status = smb_set_posix_acl(conn,
7814                                                 pdata,
7815                                                 total_data,
7816                                                 fsp,
7817                                                 smb_fname);
7818                         break;
7819                 }
7820 #endif
7821
7822                 case SMB_SET_POSIX_LOCK:
7823                 {
7824                         if (!fsp) {
7825                                 return NT_STATUS_INVALID_LEVEL;
7826                         }
7827                         status = smb_set_posix_lock(conn, req,
7828                                                     pdata, total_data, fsp);
7829                         break;
7830                 }
7831
7832                 case SMB_POSIX_PATH_OPEN:
7833                 {
7834                         if (fsp) {
7835                                 /* We must have a pathname for this. */
7836                                 return NT_STATUS_INVALID_LEVEL;
7837                         }
7838
7839                         status = smb_posix_open(conn, req,
7840                                                 ppdata,
7841                                                 total_data,
7842                                                 smb_fname,
7843                                                 &data_return_size);
7844                         break;
7845                 }
7846
7847                 case SMB_POSIX_PATH_UNLINK:
7848                 {
7849                         if (fsp) {
7850                                 /* We must have a pathname for this. */
7851                                 return NT_STATUS_INVALID_LEVEL;
7852                         }
7853
7854                         status = smb_posix_unlink(conn, req,
7855                                                 pdata,
7856                                                 total_data,
7857                                                 smb_fname);
7858                         break;
7859                 }
7860
7861                 default:
7862                         return NT_STATUS_INVALID_LEVEL;
7863         }
7864
7865         if (!NT_STATUS_IS_OK(status)) {
7866                 return status;
7867         }
7868
7869         *ret_data_size = data_return_size;
7870         return NT_STATUS_OK;
7871 }
7872
7873 /****************************************************************************
7874  Reply to a TRANS2_SETFILEINFO (set file info by fileid or pathname).
7875 ****************************************************************************/
7876
7877 static void call_trans2setfilepathinfo(connection_struct *conn,
7878                                        struct smb_request *req,
7879                                        unsigned int tran_call,
7880                                        char **pparams, int total_params,
7881                                        char **ppdata, int total_data,
7882                                        unsigned int max_data_bytes)
7883 {
7884         char *params = *pparams;
7885         char *pdata = *ppdata;
7886         uint16 info_level;
7887         struct smb_filename *smb_fname = NULL;
7888         files_struct *fsp = NULL;
7889         NTSTATUS status = NT_STATUS_OK;
7890         int data_return_size = 0;
7891
7892         if (!params) {
7893                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7894                 return;
7895         }
7896
7897         if (tran_call == TRANSACT2_SETFILEINFO) {
7898                 if (total_params < 4) {
7899                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7900                         return;
7901                 }
7902
7903                 fsp = file_fsp(req, SVAL(params,0));
7904                 /* Basic check for non-null fsp. */
7905                 if (!check_fsp_open(conn, req, fsp)) {
7906                         return;
7907                 }
7908                 info_level = SVAL(params,2);
7909
7910                 status = copy_smb_filename(talloc_tos(), fsp->fsp_name,
7911                                            &smb_fname);
7912                 if (!NT_STATUS_IS_OK(status)) {
7913                         reply_nterror(req, status);
7914                         return;
7915                 }
7916
7917                 if(fsp->fh->fd == -1) {
7918                         /*
7919                          * This is actually a SETFILEINFO on a directory
7920                          * handle (returned from an NT SMB). NT5.0 seems
7921                          * to do this call. JRA.
7922                          */
7923                         if (INFO_LEVEL_IS_UNIX(info_level)) {
7924                                 /* Always do lstat for UNIX calls. */
7925                                 if (SMB_VFS_LSTAT(conn, smb_fname)) {
7926                                         DEBUG(3,("call_trans2setfilepathinfo: "
7927                                                  "SMB_VFS_LSTAT of %s failed "
7928                                                  "(%s)\n",
7929                                                  smb_fname_str_dbg(smb_fname),
7930                                                  strerror(errno)));
7931                                         reply_nterror(req, map_nt_error_from_unix(errno));
7932                                         return;
7933                                 }
7934                         } else {
7935                                 if (SMB_VFS_STAT(conn, smb_fname) != 0) {
7936                                         DEBUG(3,("call_trans2setfilepathinfo: "
7937                                                  "fileinfo of %s failed (%s)\n",
7938                                                  smb_fname_str_dbg(smb_fname),
7939                                                  strerror(errno)));
7940                                         reply_nterror(req, map_nt_error_from_unix(errno));
7941                                         return;
7942                                 }
7943                         }
7944                 } else if (fsp->print_file) {
7945                         /*
7946                          * Doing a DELETE_ON_CLOSE should cancel a print job.
7947                          */
7948                         if ((info_level == SMB_SET_FILE_DISPOSITION_INFO) && CVAL(pdata,0)) {
7949                                 fsp->fh->private_options |= NTCREATEX_OPTIONS_PRIVATE_DELETE_ON_CLOSE;
7950
7951                                 DEBUG(3,("call_trans2setfilepathinfo: "
7952                                          "Cancelling print job (%s)\n",
7953                                          fsp_str_dbg(fsp)));
7954
7955                                 SSVAL(params,0,0);
7956                                 send_trans2_replies(conn, req, params, 2,
7957                                                     *ppdata, 0,
7958                                                     max_data_bytes);
7959                                 return;
7960                         } else {
7961                                 reply_nterror(req,
7962                                         NT_STATUS_OBJECT_PATH_NOT_FOUND);
7963                                 return;
7964                         }
7965                 } else {
7966                         /*
7967                          * Original code - this is an open file.
7968                          */
7969                         if (SMB_VFS_FSTAT(fsp, &smb_fname->st) != 0) {
7970                                 DEBUG(3,("call_trans2setfilepathinfo: fstat "
7971                                          "of fnum %d failed (%s)\n", fsp->fnum,
7972                                          strerror(errno)));
7973                                 reply_nterror(req, map_nt_error_from_unix(errno));
7974                                 return;
7975                         }
7976                 }
7977         } else {
7978                 char *fname = NULL;
7979
7980                 /* set path info */
7981                 if (total_params < 7) {
7982                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
7983                         return;
7984                 }
7985
7986                 info_level = SVAL(params,0);
7987                 srvstr_get_path(req, params, req->flags2, &fname, &params[6],
7988                                 total_params - 6, STR_TERMINATE,
7989                                 &status);
7990                 if (!NT_STATUS_IS_OK(status)) {
7991                         reply_nterror(req, status);
7992                         return;
7993                 }
7994
7995                 status = filename_convert(req, conn,
7996                                          req->flags2 & FLAGS2_DFS_PATHNAMES,
7997                                          fname,
7998                                          0,
7999                                          NULL,
8000                                          &smb_fname);
8001                 if (!NT_STATUS_IS_OK(status)) {
8002                         if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
8003                                 reply_botherror(req,
8004                                                 NT_STATUS_PATH_NOT_COVERED,
8005                                                 ERRSRV, ERRbadpath);
8006                                 return;
8007                         }
8008                         reply_nterror(req, status);
8009                         return;
8010                 }
8011
8012                 if (INFO_LEVEL_IS_UNIX(info_level)) {
8013                         /*
8014                          * For CIFS UNIX extensions the target name may not exist.
8015                          */
8016
8017                         /* Always do lstat for UNIX calls. */
8018                         SMB_VFS_LSTAT(conn, smb_fname);
8019
8020                 } else if (!VALID_STAT(smb_fname->st) &&
8021                            SMB_VFS_STAT(conn, smb_fname)) {
8022                         DEBUG(3,("call_trans2setfilepathinfo: SMB_VFS_STAT of "
8023                                  "%s failed (%s)\n",
8024                                  smb_fname_str_dbg(smb_fname),
8025                                  strerror(errno)));
8026                         reply_nterror(req, map_nt_error_from_unix(errno));
8027                         return;
8028                 }
8029         }
8030
8031         DEBUG(3,("call_trans2setfilepathinfo(%d) %s (fnum %d) info_level=%d "
8032                  "totdata=%d\n", tran_call, smb_fname_str_dbg(smb_fname),
8033                  fsp ? fsp->fnum : -1, info_level,total_data));
8034
8035         /* Realloc the parameter size */
8036         *pparams = (char *)SMB_REALLOC(*pparams,2);
8037         if (*pparams == NULL) {
8038                 reply_nterror(req, NT_STATUS_NO_MEMORY);
8039                 return;
8040         }
8041         params = *pparams;
8042
8043         SSVAL(params,0,0);
8044
8045         status = smbd_do_setfilepathinfo(conn, req, req,
8046                                          info_level,
8047                                          fsp,
8048                                          smb_fname,
8049                                          ppdata, total_data,
8050                                          &data_return_size);
8051         if (!NT_STATUS_IS_OK(status)) {
8052                 if (open_was_deferred(req->sconn, req->mid)) {
8053                         /* We have re-scheduled this call. */
8054                         return;
8055                 }
8056                 if (blocking_lock_was_deferred_smb1(req->sconn, req->mid)) {
8057                         /* We have re-scheduled this call. */
8058                         return;
8059                 }
8060                 if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
8061                         reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
8062                                         ERRSRV, ERRbadpath);
8063                         return;
8064                 }
8065                 if (info_level == SMB_POSIX_PATH_OPEN) {
8066                         reply_openerror(req, status);
8067                         return;
8068                 }
8069
8070                 reply_nterror(req, status);
8071                 return;
8072         }
8073
8074         send_trans2_replies(conn, req, params, 2, *ppdata, data_return_size,
8075                             max_data_bytes);
8076
8077         return;
8078 }
8079
8080 /****************************************************************************
8081  Reply to a TRANS2_MKDIR (make directory with extended attributes).
8082 ****************************************************************************/
8083
8084 static void call_trans2mkdir(connection_struct *conn, struct smb_request *req,
8085                              char **pparams, int total_params,
8086                              char **ppdata, int total_data,
8087                              unsigned int max_data_bytes)
8088 {
8089         struct smb_filename *smb_dname = NULL;
8090         char *params = *pparams;
8091         char *pdata = *ppdata;
8092         char *directory = NULL;
8093         NTSTATUS status = NT_STATUS_OK;
8094         struct ea_list *ea_list = NULL;
8095         TALLOC_CTX *ctx = talloc_tos();
8096
8097         if (!CAN_WRITE(conn)) {
8098                 reply_nterror(req, NT_STATUS_ACCESS_DENIED);
8099                 return;
8100         }
8101
8102         if (total_params < 5) {
8103                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8104                 return;
8105         }
8106
8107         srvstr_get_path(ctx, params, req->flags2, &directory, &params[4],
8108                         total_params - 4, STR_TERMINATE,
8109                         &status);
8110         if (!NT_STATUS_IS_OK(status)) {
8111                 reply_nterror(req, status);
8112                 return;
8113         }
8114
8115         DEBUG(3,("call_trans2mkdir : name = %s\n", directory));
8116
8117         status = filename_convert(ctx,
8118                                 conn,
8119                                 req->flags2 & FLAGS2_DFS_PATHNAMES,
8120                                 directory,
8121                                 0,
8122                                 NULL,
8123                                 &smb_dname);
8124
8125         if (!NT_STATUS_IS_OK(status)) {
8126                 if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
8127                         reply_botherror(req,
8128                                 NT_STATUS_PATH_NOT_COVERED,
8129                                 ERRSRV, ERRbadpath);
8130                         return;
8131                 }
8132                 reply_nterror(req, status);
8133                 return;
8134         }
8135
8136         /*
8137          * OS/2 workplace shell seems to send SET_EA requests of "null"
8138          * length (4 bytes containing IVAL 4).
8139          * They seem to have no effect. Bug #3212. JRA.
8140          */
8141
8142         if (total_data && (total_data != 4)) {
8143                 /* Any data in this call is an EA list. */
8144                 if (total_data < 10) {
8145                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8146                         goto out;
8147                 }
8148
8149                 if (IVAL(pdata,0) > total_data) {
8150                         DEBUG(10,("call_trans2mkdir: bad total data size (%u) > %u\n",
8151                                 IVAL(pdata,0), (unsigned int)total_data));
8152                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8153                         goto out;
8154                 }
8155
8156                 ea_list = read_ea_list(talloc_tos(), pdata + 4,
8157                                        total_data - 4);
8158                 if (!ea_list) {
8159                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8160                         goto out;
8161                 }
8162
8163                 if (!lp_ea_support(SNUM(conn))) {
8164                         reply_nterror(req, NT_STATUS_EAS_NOT_SUPPORTED);
8165                         goto out;
8166                 }
8167         }
8168         /* If total_data == 4 Windows doesn't care what values
8169          * are placed in that field, it just ignores them.
8170          * The System i QNTC IBM SMB client puts bad values here,
8171          * so ignore them. */
8172
8173         status = create_directory(conn, req, smb_dname);
8174
8175         if (!NT_STATUS_IS_OK(status)) {
8176                 reply_nterror(req, status);
8177                 goto out;
8178         }
8179
8180         /* Try and set any given EA. */
8181         if (ea_list) {
8182                 status = set_ea(conn, NULL, smb_dname, ea_list);
8183                 if (!NT_STATUS_IS_OK(status)) {
8184                         reply_nterror(req, status);
8185                         goto out;
8186                 }
8187         }
8188
8189         /* Realloc the parameter and data sizes */
8190         *pparams = (char *)SMB_REALLOC(*pparams,2);
8191         if(*pparams == NULL) {
8192                 reply_nterror(req, NT_STATUS_NO_MEMORY);
8193                 goto out;
8194         }
8195         params = *pparams;
8196
8197         SSVAL(params,0,0);
8198
8199         send_trans2_replies(conn, req, params, 2, *ppdata, 0, max_data_bytes);
8200
8201  out:
8202         TALLOC_FREE(smb_dname);
8203         return;
8204 }
8205
8206 /****************************************************************************
8207  Reply to a TRANS2_FINDNOTIFYFIRST (start monitoring a directory for changes).
8208  We don't actually do this - we just send a null response.
8209 ****************************************************************************/
8210
8211 static void call_trans2findnotifyfirst(connection_struct *conn,
8212                                        struct smb_request *req,
8213                                        char **pparams, int total_params,
8214                                        char **ppdata, int total_data,
8215                                        unsigned int max_data_bytes)
8216 {
8217         char *params = *pparams;
8218         uint16 info_level;
8219
8220         if (total_params < 6) {
8221                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8222                 return;
8223         }
8224
8225         info_level = SVAL(params,4);
8226         DEBUG(3,("call_trans2findnotifyfirst - info_level %d\n", info_level));
8227
8228         switch (info_level) {
8229                 case 1:
8230                 case 2:
8231                         break;
8232                 default:
8233                         reply_nterror(req, NT_STATUS_INVALID_LEVEL);
8234                         return;
8235         }
8236
8237         /* Realloc the parameter and data sizes */
8238         *pparams = (char *)SMB_REALLOC(*pparams,6);
8239         if (*pparams == NULL) {
8240                 reply_nterror(req, NT_STATUS_NO_MEMORY);
8241                 return;
8242         }
8243         params = *pparams;
8244
8245         SSVAL(params,0,fnf_handle);
8246         SSVAL(params,2,0); /* No changes */
8247         SSVAL(params,4,0); /* No EA errors */
8248
8249         fnf_handle++;
8250
8251         if(fnf_handle == 0)
8252                 fnf_handle = 257;
8253
8254         send_trans2_replies(conn, req, params, 6, *ppdata, 0, max_data_bytes);
8255
8256         return;
8257 }
8258
8259 /****************************************************************************
8260  Reply to a TRANS2_FINDNOTIFYNEXT (continue monitoring a directory for
8261  changes). Currently this does nothing.
8262 ****************************************************************************/
8263
8264 static void call_trans2findnotifynext(connection_struct *conn,
8265                                       struct smb_request *req,
8266                                       char **pparams, int total_params,
8267                                       char **ppdata, int total_data,
8268                                       unsigned int max_data_bytes)
8269 {
8270         char *params = *pparams;
8271
8272         DEBUG(3,("call_trans2findnotifynext\n"));
8273
8274         /* Realloc the parameter and data sizes */
8275         *pparams = (char *)SMB_REALLOC(*pparams,4);
8276         if (*pparams == NULL) {
8277                 reply_nterror(req, NT_STATUS_NO_MEMORY);
8278                 return;
8279         }
8280         params = *pparams;
8281
8282         SSVAL(params,0,0); /* No changes */
8283         SSVAL(params,2,0); /* No EA errors */
8284
8285         send_trans2_replies(conn, req, params, 4, *ppdata, 0, max_data_bytes);
8286
8287         return;
8288 }
8289
8290 /****************************************************************************
8291  Reply to a TRANS2_GET_DFS_REFERRAL - Shirish Kalele <kalele@veritas.com>.
8292 ****************************************************************************/
8293
8294 static void call_trans2getdfsreferral(connection_struct *conn,
8295                                       struct smb_request *req,
8296                                       char **pparams, int total_params,
8297                                       char **ppdata, int total_data,
8298                                       unsigned int max_data_bytes)
8299 {
8300         char *params = *pparams;
8301         char *pathname = NULL;
8302         int reply_size = 0;
8303         int max_referral_level;
8304         NTSTATUS status = NT_STATUS_OK;
8305         TALLOC_CTX *ctx = talloc_tos();
8306
8307         DEBUG(10,("call_trans2getdfsreferral\n"));
8308
8309         if (total_params < 3) {
8310                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8311                 return;
8312         }
8313
8314         max_referral_level = SVAL(params,0);
8315
8316         if(!lp_host_msdfs()) {
8317                 reply_nterror(req, NT_STATUS_NOT_IMPLEMENTED);
8318                 return;
8319         }
8320
8321         srvstr_pull_talloc(ctx, params, req->flags2, &pathname, &params[2],
8322                     total_params - 2, STR_TERMINATE);
8323         if (!pathname) {
8324                 reply_nterror(req, NT_STATUS_NOT_FOUND);
8325                 return;
8326         }
8327         if((reply_size = setup_dfs_referral(conn, pathname, max_referral_level,
8328                                             ppdata,&status)) < 0) {
8329                 reply_nterror(req, status);
8330                 return;
8331         }
8332
8333         SSVAL((discard_const_p(uint8_t, req->inbuf)), smb_flg2,
8334               SVAL(req->inbuf,smb_flg2) | FLAGS2_DFS_PATHNAMES);
8335         send_trans2_replies(conn, req,0,0,*ppdata,reply_size, max_data_bytes);
8336
8337         return;
8338 }
8339
8340 #define LMCAT_SPL       0x53
8341 #define LMFUNC_GETJOBID 0x60
8342
8343 /****************************************************************************
8344  Reply to a TRANS2_IOCTL - used for OS/2 printing.
8345 ****************************************************************************/
8346
8347 static void call_trans2ioctl(connection_struct *conn,
8348                              struct smb_request *req,
8349                              char **pparams, int total_params,
8350                              char **ppdata, int total_data,
8351                              unsigned int max_data_bytes)
8352 {
8353         char *pdata = *ppdata;
8354         files_struct *fsp = file_fsp(req, SVAL(req->vwv+15, 0));
8355
8356         /* check for an invalid fid before proceeding */
8357
8358         if (!fsp) {
8359                 reply_nterror(req, NT_STATUS_INVALID_HANDLE);
8360                 return;
8361         }
8362
8363         if ((SVAL(req->vwv+16, 0) == LMCAT_SPL)
8364             && (SVAL(req->vwv+17, 0) == LMFUNC_GETJOBID)) {
8365                 *ppdata = (char *)SMB_REALLOC(*ppdata, 32);
8366                 if (*ppdata == NULL) {
8367                         reply_nterror(req, NT_STATUS_NO_MEMORY);
8368                         return;
8369                 }
8370                 pdata = *ppdata;
8371
8372                 /* NOTE - THIS IS ASCII ONLY AT THE MOMENT - NOT SURE IF OS/2
8373                         CAN ACCEPT THIS IN UNICODE. JRA. */
8374
8375                 /* Job number */
8376                 if (fsp->print_file) {
8377                         SSVAL(pdata, 0, fsp->print_file->rap_jobid);
8378                 } else {
8379                         SSVAL(pdata, 0, 0);
8380                 }
8381                 srvstr_push(pdata, req->flags2, pdata + 2,
8382                             lp_netbios_name(), 15,
8383                             STR_ASCII|STR_TERMINATE); /* Our NetBIOS name */
8384                 srvstr_push(pdata, req->flags2, pdata+18,
8385                             lp_servicename(SNUM(conn)), 13,
8386                             STR_ASCII|STR_TERMINATE); /* Service name */
8387                 send_trans2_replies(conn, req, *pparams, 0, *ppdata, 32,
8388                                     max_data_bytes);
8389                 return;
8390         }
8391
8392         DEBUG(2,("Unknown TRANS2_IOCTL\n"));
8393         reply_nterror(req, NT_STATUS_NOT_IMPLEMENTED);
8394 }
8395
8396 /****************************************************************************
8397  Reply to a SMBfindclose (stop trans2 directory search).
8398 ****************************************************************************/
8399
8400 void reply_findclose(struct smb_request *req)
8401 {
8402         int dptr_num;
8403         struct smbd_server_connection *sconn = req->sconn;
8404
8405         START_PROFILE(SMBfindclose);
8406
8407         if (req->wct < 1) {
8408                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8409                 END_PROFILE(SMBfindclose);
8410                 return;
8411         }
8412
8413         dptr_num = SVALS(req->vwv+0, 0);
8414
8415         DEBUG(3,("reply_findclose, dptr_num = %d\n", dptr_num));
8416
8417         dptr_close(sconn, &dptr_num);
8418
8419         reply_outbuf(req, 0, 0);
8420
8421         DEBUG(3,("SMBfindclose dptr_num = %d\n", dptr_num));
8422
8423         END_PROFILE(SMBfindclose);
8424         return;
8425 }
8426
8427 /****************************************************************************
8428  Reply to a SMBfindnclose (stop FINDNOTIFYFIRST directory search).
8429 ****************************************************************************/
8430
8431 void reply_findnclose(struct smb_request *req)
8432 {
8433         int dptr_num;
8434
8435         START_PROFILE(SMBfindnclose);
8436
8437         if (req->wct < 1) {
8438                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8439                 END_PROFILE(SMBfindnclose);
8440                 return;
8441         }
8442
8443         dptr_num = SVAL(req->vwv+0, 0);
8444
8445         DEBUG(3,("reply_findnclose, dptr_num = %d\n", dptr_num));
8446
8447         /* We never give out valid handles for a
8448            findnotifyfirst - so any dptr_num is ok here.
8449            Just ignore it. */
8450
8451         reply_outbuf(req, 0, 0);
8452
8453         DEBUG(3,("SMB_findnclose dptr_num = %d\n", dptr_num));
8454
8455         END_PROFILE(SMBfindnclose);
8456         return;
8457 }
8458
8459 static void handle_trans2(connection_struct *conn, struct smb_request *req,
8460                           struct trans_state *state)
8461 {
8462         if (get_Protocol() >= PROTOCOL_NT1) {
8463                 req->flags2 |= 0x40; /* IS_LONG_NAME */
8464                 SSVAL((discard_const_p(uint8_t, req->inbuf)),smb_flg2,req->flags2);
8465         }
8466
8467         if (conn->encrypt_level == Required && !req->encrypted) {
8468                 if (state->call != TRANSACT2_QFSINFO &&
8469                                 state->call != TRANSACT2_SETFSINFO) {
8470                         DEBUG(0,("handle_trans2: encryption required "
8471                                 "with call 0x%x\n",
8472                                 (unsigned int)state->call));
8473                         reply_nterror(req, NT_STATUS_ACCESS_DENIED);
8474                         return;
8475                 }
8476         }
8477
8478         SMB_PERFCOUNT_SET_SUBOP(&req->pcd, state->call);
8479
8480         /* Now we must call the relevant TRANS2 function */
8481         switch(state->call)  {
8482         case TRANSACT2_OPEN:
8483         {
8484                 START_PROFILE(Trans2_open);
8485                 call_trans2open(conn, req,
8486                                 &state->param, state->total_param,
8487                                 &state->data, state->total_data,
8488                                 state->max_data_return);
8489                 END_PROFILE(Trans2_open);
8490                 break;
8491         }
8492
8493         case TRANSACT2_FINDFIRST:
8494         {
8495                 START_PROFILE(Trans2_findfirst);
8496                 call_trans2findfirst(conn, req,
8497                                      &state->param, state->total_param,
8498                                      &state->data, state->total_data,
8499                                      state->max_data_return);
8500                 END_PROFILE(Trans2_findfirst);
8501                 break;
8502         }
8503
8504         case TRANSACT2_FINDNEXT:
8505         {
8506                 START_PROFILE(Trans2_findnext);
8507                 call_trans2findnext(conn, req,
8508                                     &state->param, state->total_param,
8509                                     &state->data, state->total_data,
8510                                     state->max_data_return);
8511                 END_PROFILE(Trans2_findnext);
8512                 break;
8513         }
8514
8515         case TRANSACT2_QFSINFO:
8516         {
8517                 START_PROFILE(Trans2_qfsinfo);
8518                 call_trans2qfsinfo(conn, req,
8519                                    &state->param, state->total_param,
8520                                    &state->data, state->total_data,
8521                                    state->max_data_return);
8522                 END_PROFILE(Trans2_qfsinfo);
8523             break;
8524         }
8525
8526         case TRANSACT2_SETFSINFO:
8527         {
8528                 START_PROFILE(Trans2_setfsinfo);
8529                 call_trans2setfsinfo(conn, req,
8530                                      &state->param, state->total_param,
8531                                      &state->data, state->total_data,
8532                                      state->max_data_return);
8533                 END_PROFILE(Trans2_setfsinfo);
8534                 break;
8535         }
8536
8537         case TRANSACT2_QPATHINFO:
8538         case TRANSACT2_QFILEINFO:
8539         {
8540                 START_PROFILE(Trans2_qpathinfo);
8541                 call_trans2qfilepathinfo(conn, req, state->call,
8542                                          &state->param, state->total_param,
8543                                          &state->data, state->total_data,
8544                                          state->max_data_return);
8545                 END_PROFILE(Trans2_qpathinfo);
8546                 break;
8547         }
8548
8549         case TRANSACT2_SETPATHINFO:
8550         case TRANSACT2_SETFILEINFO:
8551         {
8552                 START_PROFILE(Trans2_setpathinfo);
8553                 call_trans2setfilepathinfo(conn, req, state->call,
8554                                            &state->param, state->total_param,
8555                                            &state->data, state->total_data,
8556                                            state->max_data_return);
8557                 END_PROFILE(Trans2_setpathinfo);
8558                 break;
8559         }
8560
8561         case TRANSACT2_FINDNOTIFYFIRST:
8562         {
8563                 START_PROFILE(Trans2_findnotifyfirst);
8564                 call_trans2findnotifyfirst(conn, req,
8565                                            &state->param, state->total_param,
8566                                            &state->data, state->total_data,
8567                                            state->max_data_return);
8568                 END_PROFILE(Trans2_findnotifyfirst);
8569                 break;
8570         }
8571
8572         case TRANSACT2_FINDNOTIFYNEXT:
8573         {
8574                 START_PROFILE(Trans2_findnotifynext);
8575                 call_trans2findnotifynext(conn, req,
8576                                           &state->param, state->total_param,
8577                                           &state->data, state->total_data,
8578                                           state->max_data_return);
8579                 END_PROFILE(Trans2_findnotifynext);
8580                 break;
8581         }
8582
8583         case TRANSACT2_MKDIR:
8584         {
8585                 START_PROFILE(Trans2_mkdir);
8586                 call_trans2mkdir(conn, req,
8587                                  &state->param, state->total_param,
8588                                  &state->data, state->total_data,
8589                                  state->max_data_return);
8590                 END_PROFILE(Trans2_mkdir);
8591                 break;
8592         }
8593
8594         case TRANSACT2_GET_DFS_REFERRAL:
8595         {
8596                 START_PROFILE(Trans2_get_dfs_referral);
8597                 call_trans2getdfsreferral(conn, req,
8598                                           &state->param, state->total_param,
8599                                           &state->data, state->total_data,
8600                                           state->max_data_return);
8601                 END_PROFILE(Trans2_get_dfs_referral);
8602                 break;
8603         }
8604
8605         case TRANSACT2_IOCTL:
8606         {
8607                 START_PROFILE(Trans2_ioctl);
8608                 call_trans2ioctl(conn, req,
8609                                  &state->param, state->total_param,
8610                                  &state->data, state->total_data,
8611                                  state->max_data_return);
8612                 END_PROFILE(Trans2_ioctl);
8613                 break;
8614         }
8615
8616         default:
8617                 /* Error in request */
8618                 DEBUG(2,("Unknown request %d in trans2 call\n", state->call));
8619                 reply_nterror(req, NT_STATUS_NOT_IMPLEMENTED);
8620         }
8621 }
8622
8623 /****************************************************************************
8624  Reply to a SMBtrans2.
8625  ****************************************************************************/
8626
8627 void reply_trans2(struct smb_request *req)
8628 {
8629         connection_struct *conn = req->conn;
8630         unsigned int dsoff;
8631         unsigned int dscnt;
8632         unsigned int psoff;
8633         unsigned int pscnt;
8634         unsigned int tran_call;
8635         struct trans_state *state;
8636         NTSTATUS result;
8637
8638         START_PROFILE(SMBtrans2);
8639
8640         if (req->wct < 14) {
8641                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8642                 END_PROFILE(SMBtrans2);
8643                 return;
8644         }
8645
8646         dsoff = SVAL(req->vwv+12, 0);
8647         dscnt = SVAL(req->vwv+11, 0);
8648         psoff = SVAL(req->vwv+10, 0);
8649         pscnt = SVAL(req->vwv+9, 0);
8650         tran_call = SVAL(req->vwv+14, 0);
8651
8652         result = allow_new_trans(conn->pending_trans, req->mid);
8653         if (!NT_STATUS_IS_OK(result)) {
8654                 DEBUG(2, ("Got invalid trans2 request: %s\n",
8655                           nt_errstr(result)));
8656                 reply_nterror(req, result);
8657                 END_PROFILE(SMBtrans2);
8658                 return;
8659         }
8660
8661         if (IS_IPC(conn)) {
8662                 switch (tran_call) {
8663                 /* List the allowed trans2 calls on IPC$ */
8664                 case TRANSACT2_OPEN:
8665                 case TRANSACT2_GET_DFS_REFERRAL:
8666                 case TRANSACT2_QFILEINFO:
8667                 case TRANSACT2_QFSINFO:
8668                 case TRANSACT2_SETFSINFO:
8669                         break;
8670                 default:
8671                         reply_nterror(req, NT_STATUS_ACCESS_DENIED);
8672                         END_PROFILE(SMBtrans2);
8673                         return;
8674                 }
8675         }
8676
8677         if ((state = talloc(conn, struct trans_state)) == NULL) {
8678                 DEBUG(0, ("talloc failed\n"));
8679                 reply_nterror(req, NT_STATUS_NO_MEMORY);
8680                 END_PROFILE(SMBtrans2);
8681                 return;
8682         }
8683
8684         state->cmd = SMBtrans2;
8685
8686         state->mid = req->mid;
8687         state->vuid = req->vuid;
8688         state->setup_count = SVAL(req->vwv+13, 0);
8689         state->setup = NULL;
8690         state->total_param = SVAL(req->vwv+0, 0);
8691         state->param = NULL;
8692         state->total_data =  SVAL(req->vwv+1, 0);
8693         state->data = NULL;
8694         state->max_param_return = SVAL(req->vwv+2, 0);
8695         state->max_data_return  = SVAL(req->vwv+3, 0);
8696         state->max_setup_return = SVAL(req->vwv+4, 0);
8697         state->close_on_completion = BITSETW(req->vwv+5, 0);
8698         state->one_way = BITSETW(req->vwv+5, 1);
8699
8700         state->call = tran_call;
8701
8702         /* All trans2 messages we handle have smb_sucnt == 1 - ensure this
8703            is so as a sanity check */
8704         if (state->setup_count != 1) {
8705                 /*
8706                  * Need to have rc=0 for ioctl to get job id for OS/2.
8707                  *  Network printing will fail if function is not successful.
8708                  *  Similar function in reply.c will be used if protocol
8709                  *  is LANMAN1.0 instead of LM1.2X002.
8710                  *  Until DosPrintSetJobInfo with PRJINFO3 is supported,
8711                  *  outbuf doesn't have to be set(only job id is used).
8712                  */
8713                 if ( (state->setup_count == 4)
8714                      && (tran_call == TRANSACT2_IOCTL)
8715                      && (SVAL(req->vwv+16, 0) == LMCAT_SPL)
8716                      && (SVAL(req->vwv+17, 0) == LMFUNC_GETJOBID)) {
8717                         DEBUG(2,("Got Trans2 DevIOctl jobid\n"));
8718                 } else {
8719                         DEBUG(2,("Invalid smb_sucnt in trans2 call(%u)\n",state->setup_count));
8720                         DEBUG(2,("Transaction is %d\n",tran_call));
8721                         TALLOC_FREE(state);
8722                         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8723                         END_PROFILE(SMBtrans2);
8724                         return;
8725                 }
8726         }
8727
8728         if ((dscnt > state->total_data) || (pscnt > state->total_param))
8729                 goto bad_param;
8730
8731         if (state->total_data) {
8732
8733                 if (trans_oob(state->total_data, 0, dscnt)
8734                     || trans_oob(smb_len(req->inbuf), dsoff, dscnt)) {
8735                         goto bad_param;
8736                 }
8737
8738                 /* Can't use talloc here, the core routines do realloc on the
8739                  * params and data. */
8740                 state->data = (char *)SMB_MALLOC(state->total_data);
8741                 if (state->data == NULL) {
8742                         DEBUG(0,("reply_trans2: data malloc fail for %u "
8743                                  "bytes !\n", (unsigned int)state->total_data));
8744                         TALLOC_FREE(state);
8745                         reply_nterror(req, NT_STATUS_NO_MEMORY);
8746                         END_PROFILE(SMBtrans2);
8747                         return;
8748                 }
8749
8750                 memcpy(state->data,smb_base(req->inbuf)+dsoff,dscnt);
8751         }
8752
8753         if (state->total_param) {
8754
8755                 if (trans_oob(state->total_param, 0, pscnt)
8756                     || trans_oob(smb_len(req->inbuf), psoff, pscnt)) {
8757                         goto bad_param;
8758                 }
8759
8760                 /* Can't use talloc here, the core routines do realloc on the
8761                  * params and data. */
8762                 state->param = (char *)SMB_MALLOC(state->total_param);
8763                 if (state->param == NULL) {
8764                         DEBUG(0,("reply_trans: param malloc fail for %u "
8765                                  "bytes !\n", (unsigned int)state->total_param));
8766                         SAFE_FREE(state->data);
8767                         TALLOC_FREE(state);
8768                         reply_nterror(req, NT_STATUS_NO_MEMORY);
8769                         END_PROFILE(SMBtrans2);
8770                         return;
8771                 }
8772
8773                 memcpy(state->param,smb_base(req->inbuf)+psoff,pscnt);
8774         }
8775
8776         state->received_data  = dscnt;
8777         state->received_param = pscnt;
8778
8779         if ((state->received_param == state->total_param) &&
8780             (state->received_data == state->total_data)) {
8781
8782                 handle_trans2(conn, req, state);
8783
8784                 SAFE_FREE(state->data);
8785                 SAFE_FREE(state->param);
8786                 TALLOC_FREE(state);
8787                 END_PROFILE(SMBtrans2);
8788                 return;
8789         }
8790
8791         DLIST_ADD(conn->pending_trans, state);
8792
8793         /* We need to send an interim response then receive the rest
8794            of the parameter/data bytes */
8795         reply_outbuf(req, 0, 0);
8796         show_msg((char *)req->outbuf);
8797         END_PROFILE(SMBtrans2);
8798         return;
8799
8800   bad_param:
8801
8802         DEBUG(0,("reply_trans2: invalid trans parameters\n"));
8803         SAFE_FREE(state->data);
8804         SAFE_FREE(state->param);
8805         TALLOC_FREE(state);
8806         END_PROFILE(SMBtrans2);
8807         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8808 }
8809
8810
8811 /****************************************************************************
8812  Reply to a SMBtranss2
8813  ****************************************************************************/
8814
8815 void reply_transs2(struct smb_request *req)
8816 {
8817         connection_struct *conn = req->conn;
8818         unsigned int pcnt,poff,dcnt,doff,pdisp,ddisp;
8819         struct trans_state *state;
8820
8821         START_PROFILE(SMBtranss2);
8822
8823         show_msg((const char *)req->inbuf);
8824
8825         if (req->wct < 8) {
8826                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8827                 END_PROFILE(SMBtranss2);
8828                 return;
8829         }
8830
8831         for (state = conn->pending_trans; state != NULL;
8832              state = state->next) {
8833                 if (state->mid == req->mid) {
8834                         break;
8835                 }
8836         }
8837
8838         if ((state == NULL) || (state->cmd != SMBtrans2)) {
8839                 reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8840                 END_PROFILE(SMBtranss2);
8841                 return;
8842         }
8843
8844         /* Revise state->total_param and state->total_data in case they have
8845            changed downwards */
8846
8847         if (SVAL(req->vwv+0, 0) < state->total_param)
8848                 state->total_param = SVAL(req->vwv+0, 0);
8849         if (SVAL(req->vwv+1, 0) < state->total_data)
8850                 state->total_data = SVAL(req->vwv+1, 0);
8851
8852         pcnt = SVAL(req->vwv+2, 0);
8853         poff = SVAL(req->vwv+3, 0);
8854         pdisp = SVAL(req->vwv+4, 0);
8855
8856         dcnt = SVAL(req->vwv+5, 0);
8857         doff = SVAL(req->vwv+6, 0);
8858         ddisp = SVAL(req->vwv+7, 0);
8859
8860         state->received_param += pcnt;
8861         state->received_data += dcnt;
8862
8863         if ((state->received_data > state->total_data) ||
8864             (state->received_param > state->total_param))
8865                 goto bad_param;
8866
8867         if (pcnt) {
8868                 if (trans_oob(state->total_param, pdisp, pcnt)
8869                     || trans_oob(smb_len(req->inbuf), poff, pcnt)) {
8870                         goto bad_param;
8871                 }
8872                 memcpy(state->param+pdisp,smb_base(req->inbuf)+poff,pcnt);
8873         }
8874
8875         if (dcnt) {
8876                 if (trans_oob(state->total_data, ddisp, dcnt)
8877                     || trans_oob(smb_len(req->inbuf), doff, dcnt)) {
8878                         goto bad_param;
8879                 }
8880                 memcpy(state->data+ddisp, smb_base(req->inbuf)+doff,dcnt);
8881         }
8882
8883         if ((state->received_param < state->total_param) ||
8884             (state->received_data < state->total_data)) {
8885                 END_PROFILE(SMBtranss2);
8886                 return;
8887         }
8888
8889         handle_trans2(conn, req, state);
8890
8891         DLIST_REMOVE(conn->pending_trans, state);
8892         SAFE_FREE(state->data);
8893         SAFE_FREE(state->param);
8894         TALLOC_FREE(state);
8895
8896         END_PROFILE(SMBtranss2);
8897         return;
8898
8899   bad_param:
8900
8901         DEBUG(0,("reply_transs2: invalid trans parameters\n"));
8902         DLIST_REMOVE(conn->pending_trans, state);
8903         SAFE_FREE(state->data);
8904         SAFE_FREE(state->param);
8905         TALLOC_FREE(state);
8906         reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
8907         END_PROFILE(SMBtranss2);
8908         return;
8909 }