s3: Convert is_visible_file to use talloc_asprintf instead of malloc
[metze/samba/wip.git] / source3 / smbd / dir.c
index a7b1b020b8357b60cd5684e404a4a73fd7478253..fb246cdf8c5755ce7e320e6142c8a45129f09556 100644 (file)
 */
 
 #include "includes.h"
+#include "smbd/globals.h"
 
 /*
    This module implements directory related functions for Samba.
 */
 
-extern struct current_user current_user;
-
 /* "Special" directory offsets. */
 #define END_OF_DIRECTORY_OFFSET ((long)-1)
 #define START_OF_DIRECTORY_OFFSET ((long)0)
@@ -55,17 +54,14 @@ struct dptr_struct {
        uint16 spid;
        struct connection_struct *conn;
        struct smb_Dir *dir_hnd;
-       BOOL expect_close;
+       bool expect_close;
        char *wcard;
        uint32 attr;
        char *path;
-       BOOL has_wild; /* Set to true if the wcard entry has MS wildcard characters in it. */
-       BOOL did_stat; /* Optimisation for non-wcard searches. */
+       bool has_wild; /* Set to true if the wcard entry has MS wildcard characters in it. */
+       bool did_stat; /* Optimisation for non-wcard searches. */
 };
 
-static struct bitmap *dptr_bmap;
-static struct dptr_struct *dirptrs;
-static int dirhandles_open = 0;
 
 #define INVALID_DPTR_KEY (-3)
 
@@ -73,14 +69,14 @@ static int dirhandles_open = 0;
  Make a dir struct.
 ****************************************************************************/
 
-BOOL make_dir_struct(TALLOC_CTX *ctx,
+bool make_dir_struct(TALLOC_CTX *ctx,
                        char *buf,
                        const char *mask,
                        const char *fname,
                        SMB_OFF_T size,
                        uint32 mode,
                        time_t date,
-                       BOOL uc)
+                       bool uc)
 {
        char *p;
        char *mask2 = talloc_strdup(ctx, mask);
@@ -121,17 +117,13 @@ BOOL make_dir_struct(TALLOC_CTX *ctx,
 
 void init_dptrs(void)
 {
-       static BOOL dptrs_init=False;
-
-       if (dptrs_init)
+       if (dptr_bmap)
                return;
 
        dptr_bmap = bitmap_allocate(MAX_DIRECTORY_HANDLES);
 
        if (!dptr_bmap)
                exit_server("out of memory in init_dptrs");
-
-       dptrs_init = True;
 }
 
 /****************************************************************************
@@ -142,8 +134,7 @@ static void dptr_idle(struct dptr_struct *dptr)
 {
        if (dptr->dir_hnd) {
                DEBUG(4,("Idling dptr dnum %d\n",dptr->dnum));
-               CloseDir(dptr->dir_hnd);
-               dptr->dir_hnd = NULL;
+               TALLOC_FREE(dptr->dir_hnd);
        }
 }
 
@@ -182,7 +173,7 @@ static void dptr_idleoldest(void)
  Get the struct dptr_struct for a dir index.
 ****************************************************************************/
 
-static struct dptr_struct *dptr_get(int key, BOOL forclose)
+static struct dptr_struct *dptr_get(int key, bool forclose)
 {
        struct dptr_struct *dptr;
 
@@ -192,7 +183,9 @@ static struct dptr_struct *dptr_get(int key, BOOL forclose)
                                if (dirhandles_open >= MAX_OPEN_DIRECTORIES)
                                        dptr_idleoldest();
                                DEBUG(4,("dptr_get: Reopening dptr key %d\n",key));
-                               if (!(dptr->dir_hnd = OpenDir(dptr->conn, dptr->path, dptr->wcard, dptr->attr))) {
+                               if (!(dptr->dir_hnd = OpenDir(
+                                             NULL, dptr->conn, dptr->path,
+                                             dptr->wcard, dptr->attr))) {
                                        DEBUG(4,("dptr_get: Failed to open %s (%s)\n",dptr->path,
                                                strerror(errno)));
                                        return False;
@@ -263,9 +256,7 @@ static void dptr_close_internal(struct dptr_struct *dptr)
 
        bitmap_clear(dptr_bmap, dptr->dnum - 1);
 
-       if (dptr->dir_hnd) {
-               CloseDir(dptr->dir_hnd);
-       }
+       TALLOC_FREE(dptr->dir_hnd);
 
        /* Lanman 2 specific code */
        SAFE_FREE(dptr->wcard);
@@ -354,7 +345,7 @@ void dptr_closepath(char *path,uint16 spid)
  finished with that one.
 ****************************************************************************/
 
-static void dptr_close_oldest(BOOL old)
+static void dptr_close_oldest(bool old)
 {
        struct dptr_struct *dptr;
 
@@ -393,8 +384,8 @@ static void dptr_close_oldest(BOOL old)
  wcard must not be zero.
 ****************************************************************************/
 
-NTSTATUS dptr_create(connection_struct *conn, const char *path, BOOL old_handle, BOOL expect_close,uint16 spid,
-               const char *wcard, BOOL wcard_has_wild, uint32 attr, struct dptr_struct **dptr_ret)
+NTSTATUS dptr_create(connection_struct *conn, const char *path, bool old_handle, bool expect_close,uint16 spid,
+               const char *wcard, bool wcard_has_wild, uint32 attr, struct dptr_struct **dptr_ret)
 {
        struct dptr_struct *dptr = NULL;
        struct smb_Dir *dir_hnd;
@@ -411,7 +402,7 @@ NTSTATUS dptr_create(connection_struct *conn, const char *path, BOOL old_handle,
                return status;
        }
 
-       dir_hnd = OpenDir(conn, path, wcard, attr);
+       dir_hnd = OpenDir(NULL, conn, path, wcard, attr);
        if (!dir_hnd) {
                return map_nt_error_from_unix(errno);
        }
@@ -425,7 +416,7 @@ NTSTATUS dptr_create(connection_struct *conn, const char *path, BOOL old_handle,
        dptr = SMB_MALLOC_P(struct dptr_struct);
        if(!dptr) {
                DEBUG(0,("malloc fail in dptr_create.\n"));
-               CloseDir(dir_hnd);
+               TALLOC_FREE(dir_hnd);
                return NT_STATUS_NO_MEMORY;
        }
 
@@ -455,7 +446,7 @@ NTSTATUS dptr_create(connection_struct *conn, const char *path, BOOL old_handle,
                        if(dptr->dnum == -1 || dptr->dnum > 254) {
                                DEBUG(0,("dptr_create: returned %d: Error - all old dirptrs in use ?\n", dptr->dnum));
                                SAFE_FREE(dptr);
-                               CloseDir(dir_hnd);
+                               TALLOC_FREE(dir_hnd);
                                return NT_STATUS_TOO_MANY_OPENED_FILES;
                        }
                }
@@ -485,7 +476,7 @@ NTSTATUS dptr_create(connection_struct *conn, const char *path, BOOL old_handle,
                        if(dptr->dnum == -1 || dptr->dnum < 255) {
                                DEBUG(0,("dptr_create: returned %d: Error - all new dirptrs in use ?\n", dptr->dnum));
                                SAFE_FREE(dptr);
-                               CloseDir(dir_hnd);
+                               TALLOC_FREE(dir_hnd);
                                return NT_STATUS_TOO_MANY_OPENED_FILES;
                        }
                }
@@ -504,7 +495,7 @@ NTSTATUS dptr_create(connection_struct *conn, const char *path, BOOL old_handle,
        if (!dptr->wcard) {
                bitmap_clear(dptr_bmap, dptr->dnum - 1);
                SAFE_FREE(dptr);
-               CloseDir(dir_hnd);
+               TALLOC_FREE(dir_hnd);
                return NT_STATUS_NO_MEMORY;
        }
        if (lp_posix_pathnames() || (wcard[0] == '.' && wcard[1] == 0)) {
@@ -533,7 +524,8 @@ NTSTATUS dptr_create(connection_struct *conn, const char *path, BOOL old_handle,
 int dptr_CloseDir(struct dptr_struct *dptr)
 {
        DLIST_REMOVE(dirptrs, dptr);
-       return CloseDir(dptr->dir_hnd);
+       TALLOC_FREE(dptr->dir_hnd);
+       return 0;
 }
 
 void dptr_SeekDir(struct dptr_struct *dptr, long offset)
@@ -546,7 +538,7 @@ long dptr_TellDir(struct dptr_struct *dptr)
        return TellDir(dptr->dir_hnd);
 }
 
-BOOL dptr_has_wild(struct dptr_struct *dptr)
+bool dptr_has_wild(struct dptr_struct *dptr)
 {
        return dptr->has_wild;
 }
@@ -560,11 +552,12 @@ int dptr_dnum(struct dptr_struct *dptr)
  Return the next visible file name, skipping veto'd and invisible files.
 ****************************************************************************/
 
-static const char *dptr_normal_ReadDirName(struct dptr_struct *dptr, long *poffset, SMB_STRUCT_STAT *pst)
+static const char *dptr_normal_ReadDirName(struct dptr_struct *dptr,
+                                          long *poffset, SMB_STRUCT_STAT *pst)
 {
        /* Normal search for the next file. */
        const char *name;
-       while ((name = ReadDirName(dptr->dir_hnd, poffset)) != NULL) {
+       while ((name = ReadDirName(dptr->dir_hnd, poffset, pst)) != NULL) {
                if (is_visible_file(dptr->conn, dptr->path, name, pst, True)) {
                        return name;
                }
@@ -576,94 +569,118 @@ static const char *dptr_normal_ReadDirName(struct dptr_struct *dptr, long *poffs
  Return the next visible file name, skipping veto'd and invisible files.
 ****************************************************************************/
 
-const char *dptr_ReadDirName(TALLOC_CTX *ctx,
+char *dptr_ReadDirName(TALLOC_CTX *ctx,
                        struct dptr_struct *dptr,
                        long *poffset,
                        SMB_STRUCT_STAT *pst)
 {
+       char *name = NULL;
+       char *pathreal = NULL;
+       char *found_name = NULL;
+       int ret;
+       const char *name_temp = NULL;
+
        SET_STAT_INVALID(*pst);
 
-       if (dptr->has_wild) {
-               return dptr_normal_ReadDirName(dptr, poffset, pst);
+       if (dptr->has_wild || dptr->did_stat) {
+               name_temp = dptr_normal_ReadDirName(dptr, poffset, pst);
+               name = talloc_strdup(ctx, name_temp);
+               return name;
        }
 
-       /* If poffset is -1 then we know we returned this name before and we have
-          no wildcards. We're at the end of the directory. */
+       /* If poffset is -1 then we know we returned this name before and we
+        * have no wildcards. We're at the end of the directory. */
        if (*poffset == END_OF_DIRECTORY_OFFSET) {
                return NULL;
        }
 
-       if (!dptr->did_stat) {
-               char *pathreal = NULL;
-
-               /* We know the stored wcard contains no wildcard characters. See if we can match
-                  with a stat call. If we can't, then set did_stat to true to
-                  ensure we only do this once and keep searching. */
+       /* We know the stored wcard contains no wildcard characters.
+        * See if we can match with a stat call. If we can't, then set
+        * did_stat to true to ensure we only do this once and keep
+        * searching. */
 
-               dptr->did_stat = True;
+       dptr->did_stat = true;
 
-               /* First check if it should be visible. */
-               if (!is_visible_file(dptr->conn, dptr->path, dptr->wcard, pst, True)) {
-                       /* This only returns False if the file was found, but
-                          is explicitly not visible. Set us to end of directory,
-                          but return NULL as we know we can't ever find it. */
-                       dptr->dir_hnd->offset = *poffset = END_OF_DIRECTORY_OFFSET;
-                       return NULL;
-               }
+       /* First check if it should be visible. */
+       if (!is_visible_file(dptr->conn, dptr->path, dptr->wcard,
+           pst, true))
+       {
+               /* This only returns false if the file was found, but
+                  is explicitly not visible. Set us to end of
+                  directory, but return NULL as we know we can't ever
+                  find it. */
+               goto ret;
+       }
 
-               if (VALID_STAT(*pst)) {
-                       /* We need to set the underlying dir_hnd offset to -1 also as
-                          this function is usually called with the output from TellDir. */
-                       dptr->dir_hnd->offset = *poffset = END_OF_DIRECTORY_OFFSET;
-                       return dptr->wcard;
-               }
+       if (VALID_STAT(*pst)) {
+               name = talloc_strdup(ctx, dptr->wcard);
+               goto ret;
+       }
 
-               pathreal = talloc_asprintf(ctx,
-                                       "%s/%s",
-                                       dptr->path,
-                                       dptr->wcard);
-               if (!pathreal) {
-                       return NULL;
-               }
+       pathreal = talloc_asprintf(ctx,
+                               "%s/%s",
+                               dptr->path,
+                               dptr->wcard);
+       if (!pathreal)
+               return NULL;
 
-               if (SMB_VFS_STAT(dptr->conn,pathreal,pst) == 0) {
-                       /* We need to set the underlying dir_hnd offset to -1 also as
-                          this function is usually called with the output from TellDir. */
-                       dptr->dir_hnd->offset = *poffset = END_OF_DIRECTORY_OFFSET;
-                       TALLOC_FREE(pathreal);
-                       return dptr->wcard;
-               } else {
-                       /* If we get any other error than ENOENT or ENOTDIR
-                          then the file exists we just can't stat it. */
-                       if (errno != ENOENT && errno != ENOTDIR) {
-                               /* We need to set the underlying dir_hdn offset to -1 also as
-                                  this function is usually called with the output from TellDir. */
-                               dptr->dir_hnd->offset = *poffset = END_OF_DIRECTORY_OFFSET;
-                               TALLOC_FREE(pathreal);
-                               return dptr->wcard;
-                       }
+       if (SMB_VFS_STAT(dptr->conn, pathreal, pst) == 0) {
+               name = talloc_strdup(ctx, dptr->wcard);
+               goto clean;
+       } else {
+               /* If we get any other error than ENOENT or ENOTDIR
+                  then the file exists we just can't stat it. */
+               if (errno != ENOENT && errno != ENOTDIR) {
+                       name = talloc_strdup(ctx, dptr->wcard);
+                       goto clean;
                }
+       }
 
-               TALLOC_FREE(pathreal);
-
-               /* In case sensitive mode we don't search - we know if it doesn't exist 
-                  with a stat we will fail. */
-
-               if (dptr->conn->case_sensitive) {
-                       /* We need to set the underlying dir_hnd offset to -1 also as
-                          this function is usually called with the output from TellDir. */
-                       dptr->dir_hnd->offset = *poffset = END_OF_DIRECTORY_OFFSET;
-                       return NULL;
-               }
+       /* Stat failed. We know this is authoratiative if we are
+        * providing case sensitive semantics or the underlying
+        * filesystem is case sensitive.
+        */
+       if (dptr->conn->case_sensitive ||
+           !(dptr->conn->fs_capabilities & FILE_CASE_SENSITIVE_SEARCH))
+       {
+               goto clean;
        }
-       return dptr_normal_ReadDirName(dptr, poffset, pst);
+
+       /*
+        * Try case-insensitive stat if the fs has the ability. This avoids
+        * scanning the whole directory.
+        */
+       ret = SMB_VFS_GET_REAL_FILENAME(dptr->conn, dptr->path, dptr->wcard,
+                                       ctx, &found_name);
+       if (ret == 0) {
+               name = found_name;
+               goto clean;
+       } else if (errno == ENOENT) {
+               /* The case-insensitive lookup was authoritative. */
+               goto clean;
+       }
+
+       TALLOC_FREE(pathreal);
+
+       name_temp = dptr_normal_ReadDirName(dptr, poffset, pst);
+       name = talloc_strdup(ctx, name_temp);
+       return name;
+
+clean:
+       TALLOC_FREE(pathreal);
+ret:
+       /* We need to set the underlying dir_hnd offset to -1
+        * also as this function is usually called with the
+        * output from TellDir. */
+       dptr->dir_hnd->offset = *poffset = END_OF_DIRECTORY_OFFSET;
+       return name;
 }
 
 /****************************************************************************
  Search for a file by name, skipping veto'ed and not visible files.
 ****************************************************************************/
 
-BOOL dptr_SearchDir(struct dptr_struct *dptr, const char *name, long *poffset, SMB_STRUCT_STAT *pst)
+bool dptr_SearchDir(struct dptr_struct *dptr, const char *name, long *poffset, SMB_STRUCT_STAT *pst)
 {
        SET_STAT_INVALID(*pst);
 
@@ -685,11 +702,19 @@ void dptr_DirCacheAdd(struct dptr_struct *dptr, const char *name, long offset)
        DirCacheAdd(dptr->dir_hnd, name, offset);
 }
 
+/****************************************************************************
+ Initialize variables & state data at the beginning of all search SMB requests.
+****************************************************************************/
+void dptr_init_search_op(struct dptr_struct *dptr)
+{
+       SMB_VFS_INIT_SEARCH_OP(dptr->conn, dptr->dir_hnd->dir);
+}
+
 /****************************************************************************
  Fill the 5 byte server reserved dptr field.
 ****************************************************************************/
 
-BOOL dptr_fill(char *buf1,unsigned int key)
+bool dptr_fill(char *buf1,unsigned int key)
 {
        unsigned char *buf = (unsigned char *)buf1;
        struct dptr_struct *dptr = dptr_get(key, False);
@@ -754,7 +779,7 @@ struct dptr_struct *dptr_fetch_lanman2(int dptr_num)
  Check that a file matches a particular file type.
 ****************************************************************************/
 
-BOOL dir_check_ftype(connection_struct *conn, uint32 mode, uint32 dirtype)
+bool dir_check_ftype(connection_struct *conn, uint32 mode, uint32 dirtype)
 {
        uint32 mask;
 
@@ -776,7 +801,7 @@ BOOL dir_check_ftype(connection_struct *conn, uint32 mode, uint32 dirtype)
        return True;
 }
 
-static BOOL mangle_mask_match(connection_struct *conn,
+static bool mangle_mask_match(connection_struct *conn,
                const char *filename,
                const char *mask)
 {
@@ -792,22 +817,23 @@ static BOOL mangle_mask_match(connection_struct *conn,
  Get an 8.3 directory entry.
 ****************************************************************************/
 
-BOOL get_dir_entry(TALLOC_CTX *ctx,
+bool get_dir_entry(TALLOC_CTX *ctx,
                connection_struct *conn,
                const char *mask,
                uint32 dirtype,
                char **pp_fname_out,
                SMB_OFF_T *size,
                uint32 *mode,
-               time_t *date,
-               BOOL check_descend)
+               struct timespec *date,
+               bool check_descend,
+               bool ask_sharemode)
 {
-       const char *dname = NULL;
-       BOOL found = False;
+       char *dname = NULL;
+       bool found = False;
        SMB_STRUCT_STAT sbuf;
        char *pathreal = NULL;
-       const char *filename = NULL;
-       BOOL needslash;
+       char *filename = NULL;
+       bool needslash;
 
        *pp_fname_out = NULL;
 
@@ -842,9 +868,13 @@ BOOL get_dir_entry(TALLOC_CTX *ctx,
                        if (!mangle_is_8_3(filename, False, conn->params)) {
                                if (!name_to_8_3(filename,mname,False,
                                           conn->params)) {
+                                       TALLOC_FREE(filename);
                                        continue;
                                }
-                               filename = mname;
+                               filename = talloc_strdup(ctx, mname);
+                               if (!filename) {
+                                       return False;
+                               }
                        }
 
                        if (needslash) {
@@ -859,6 +889,7 @@ BOOL get_dir_entry(TALLOC_CTX *ctx,
                                                dname);
                        }
                        if (!pathreal) {
+                               TALLOC_FREE(filename);
                                return False;
                        }
 
@@ -866,6 +897,7 @@ BOOL get_dir_entry(TALLOC_CTX *ctx,
                                DEBUG(5,("Couldn't stat 1 [%s]. Error = %s\n",
                                        pathreal, strerror(errno) ));
                                TALLOC_FREE(pathreal);
+                               TALLOC_FREE(filename);
                                continue;
                        }
 
@@ -874,11 +906,23 @@ BOOL get_dir_entry(TALLOC_CTX *ctx,
                        if (!dir_check_ftype(conn,*mode,dirtype)) {
                                DEBUG(5,("[%s] attribs 0x%x didn't match 0x%x\n",filename,(unsigned int)*mode,(unsigned int)dirtype));
                                TALLOC_FREE(pathreal);
+                               TALLOC_FREE(filename);
                                continue;
                        }
 
-                       *size = sbuf.st_size;
-                       *date = sbuf.st_mtime;
+                       *size = sbuf.st_ex_size;
+                       *date = sbuf.st_ex_mtime;
+
+                       if (ask_sharemode) {
+                               struct timespec write_time_ts;
+                               struct file_id fileid;
+
+                               fileid = vfs_file_id_from_sbuf(conn, &sbuf);
+                               get_file_infos(fileid, NULL, &write_time_ts);
+                               if (!null_timespec(write_time_ts)) {
+                                       *date = write_time_ts;
+                               }
+                       }
 
                        DEBUG(3,("get_dir_entry mask=[%s] found %s "
                                "fname=%s (%s)\n",
@@ -889,14 +933,15 @@ BOOL get_dir_entry(TALLOC_CTX *ctx,
 
                        found = True;
 
-                       *pp_fname_out = talloc_strdup(ctx, filename);
-                       if (!*pp_fname_out) {
-                               return False;
-                       }
+                       SMB_ASSERT(filename != NULL);
+                       *pp_fname_out = filename;
 
                        DirCacheAdd(conn->dirptr->dir_hnd, dname, curoff);
                        TALLOC_FREE(pathreal);
                }
+
+               if (!found)
+                       TALLOC_FREE(filename);
        }
 
        return(found);
@@ -908,14 +953,8 @@ BOOL get_dir_entry(TALLOC_CTX *ctx,
  use it for anything security sensitive.
 ********************************************************************/
 
-static BOOL user_can_read_file(connection_struct *conn, char *name, SMB_STRUCT_STAT *pst)
+static bool user_can_read_file(connection_struct *conn, char *name)
 {
-       SEC_DESC *psd = NULL;
-       size_t sd_size;
-       files_struct *fsp;
-       NTSTATUS status;
-       uint32 access_granted;
-
        /*
         * If user is a member of the Admin group
         * we never hide files from them.
@@ -925,43 +964,7 @@ static BOOL user_can_read_file(connection_struct *conn, char *name, SMB_STRUCT_S
                return True;
        }
 
-       /* If we can't stat it does not show it */
-       if (!VALID_STAT(*pst) && (SMB_VFS_STAT(conn, name, pst) != 0)) {
-               DEBUG(10,("user_can_read_file: SMB_VFS_STAT failed for file %s with error %s\n",
-                       name, strerror(errno) ));
-               return False;
-       }
-
-       /* Pseudo-open the file (note - no fd's created). */
-
-       if(S_ISDIR(pst->st_mode)) {
-                status = open_directory(conn, NULL, name, pst,
-                       READ_CONTROL_ACCESS,
-                       FILE_SHARE_READ|FILE_SHARE_WRITE,
-                       FILE_OPEN,
-                       0, /* no create options. */
-                       FILE_ATTRIBUTE_DIRECTORY,
-                       NULL, &fsp);
-       } else {
-               status = open_file_stat(conn, NULL, name, pst, &fsp);
-       }
-
-       if (!NT_STATUS_IS_OK(status)) {
-               return False;
-       }
-
-       /* Get NT ACL -allocated in main loop talloc context. No free needed here. */
-       sd_size = SMB_VFS_FGET_NT_ACL(fsp, fsp->fh->fd,
-                       (OWNER_SECURITY_INFORMATION|GROUP_SECURITY_INFORMATION|DACL_SECURITY_INFORMATION), &psd);
-       close_file(fsp, NORMAL_CLOSE);
-
-       /* No access if SD get failed. */
-       if (!sd_size) {
-               return False;
-       }
-
-       return se_access_check(psd, current_user.nt_user_token, FILE_READ_DATA,
-                                 &access_granted, &status);
+       return can_access_file_acl(conn, name, FILE_READ_DATA);
 }
 
 /*******************************************************************
@@ -971,15 +974,8 @@ static BOOL user_can_read_file(connection_struct *conn, char *name, SMB_STRUCT_S
  use it for anything security sensitive.
 ********************************************************************/
 
-static BOOL user_can_write_file(connection_struct *conn, char *name, SMB_STRUCT_STAT *pst)
+static bool user_can_write_file(connection_struct *conn, char *name, SMB_STRUCT_STAT *pst)
 {
-       SEC_DESC *psd = NULL;
-       size_t sd_size;
-       files_struct *fsp;
-       int info;
-       NTSTATUS status;
-       uint32 access_granted;
-
        /*
         * If user is a member of the Admin group
         * we never hide files from them.
@@ -989,48 +985,22 @@ static BOOL user_can_write_file(connection_struct *conn, char *name, SMB_STRUCT_
                return True;
        }
 
-       /* If we can't stat it does not show it */
-       if (!VALID_STAT(*pst) && (SMB_VFS_STAT(conn, name, pst) != 0)) {
-               return False;
-       }
+       SMB_ASSERT(VALID_STAT(*pst));
 
        /* Pseudo-open the file */
 
-       if(S_ISDIR(pst->st_mode)) {
+       if(S_ISDIR(pst->st_ex_mode)) {
                return True;
-       } else {
-               status = open_file_ntcreate(conn, NULL, name, pst,
-                       FILE_WRITE_ATTRIBUTES,
-                       FILE_SHARE_READ|FILE_SHARE_WRITE,
-                       FILE_OPEN,
-                       0,
-                       FILE_ATTRIBUTE_NORMAL,
-                       INTERNAL_OPEN_ONLY,
-                       &info, &fsp);
-       }
-
-       if (!NT_STATUS_IS_OK(status)) {
-               return False;
        }
 
-       /* Get NT ACL -allocated in main loop talloc context. No free needed here. */
-       sd_size = SMB_VFS_FGET_NT_ACL(fsp, fsp->fh->fd,
-                       (OWNER_SECURITY_INFORMATION|GROUP_SECURITY_INFORMATION|DACL_SECURITY_INFORMATION), &psd);
-       close_file(fsp, NORMAL_CLOSE);
-
-       /* No access if SD get failed. */
-       if (!sd_size)
-               return False;
-
-       return se_access_check(psd, current_user.nt_user_token, FILE_WRITE_DATA,
-                                 &access_granted, &status);
+       return can_write_to_file(conn, name, pst);
 }
 
 /*******************************************************************
   Is a file a "special" type ?
 ********************************************************************/
 
-static BOOL file_is_special(connection_struct *conn, char *name, SMB_STRUCT_STAT *pst)
+static bool file_is_special(connection_struct *conn, char *name, SMB_STRUCT_STAT *pst)
 {
        /*
         * If user is a member of the Admin group
@@ -1040,27 +1010,25 @@ static BOOL file_is_special(connection_struct *conn, char *name, SMB_STRUCT_STAT
        if (conn->admin_user)
                return False;
 
-       /* If we can't stat it does not show it */
-       if (!VALID_STAT(*pst) && (SMB_VFS_STAT(conn, name, pst) != 0))
-               return True;
+       SMB_ASSERT(VALID_STAT(*pst));
 
-       if (S_ISREG(pst->st_mode) || S_ISDIR(pst->st_mode) || S_ISLNK(pst->st_mode))
+       if (S_ISREG(pst->st_ex_mode) || S_ISDIR(pst->st_ex_mode) || S_ISLNK(pst->st_ex_mode))
                return False;
 
        return True;
 }
 
 /*******************************************************************
- Should the file be seen by the client ?
+ Should the file be seen by the client?
+ NOTE: A successful return is no guarantee of the file's existence.
 ********************************************************************/
 
-BOOL is_visible_file(connection_struct *conn, const char *dir_path, const char *name, SMB_STRUCT_STAT *pst, BOOL use_veto)
+bool is_visible_file(connection_struct *conn, const char *dir_path,
+                    const char *name, SMB_STRUCT_STAT *pst, bool use_veto)
 {
-       BOOL hide_unreadable = lp_hideunreadable(SNUM(conn));
-       BOOL hide_unwriteable = lp_hideunwriteable_files(SNUM(conn));
-       BOOL hide_special = lp_hide_special_files(SNUM(conn));
-
-       SET_STAT_INVALID(*pst);
+       bool hide_unreadable = lp_hideunreadable(SNUM(conn));
+       bool hide_unwriteable = lp_hideunwriteable_files(SNUM(conn));
+       bool hide_special = lp_hide_special_files(SNUM(conn));
 
        if ((strcmp(".",name) == 0) || (strcmp("..",name) == 0)) {
                return True; /* . and .. are always visible. */
@@ -1075,129 +1043,119 @@ BOOL is_visible_file(connection_struct *conn, const char *dir_path, const char *
        if (hide_unreadable || hide_unwriteable || hide_special) {
                char *entry = NULL;
 
-               if (asprintf(&entry, "%s/%s", dir_path, name) == -1) {
-                       return False;
+               entry = talloc_asprintf(talloc_tos(), "%s/%s", dir_path, name);
+               if (!entry)
+                       return false;
                }
 
                /* If it's a dfs symlink, ignore _hide xxxx_ options */
                if (lp_host_msdfs() &&
                                lp_msdfs_root(SNUM(conn)) &&
                                is_msdfs_link(conn, entry, NULL)) {
-                       SAFE_FREE(entry);
-                       return True;
+                       TALLOC_FREE(entry);
+                       return true;
+               }
+
+               /* If the file name does not exist, there's no point checking
+                * the configuration options. We succeed, on the basis that the
+                * checks *might* have passed if the file was present.
+                */
+               if (!VALID_STAT(*pst) && (SMB_VFS_STAT(conn, entry, pst) != 0))
+               {
+                       TALLOC_FREE(entry);
+                       return true;
                }
 
                /* Honour _hide unreadable_ option */
-               if (hide_unreadable && !user_can_read_file(conn, entry, pst)) {
-                       DEBUG(10,("is_visible_file: file %s is unreadable.\n", entry ));
-                       SAFE_FREE(entry);
-                       return False;
+               if (hide_unreadable && !user_can_read_file(conn, entry)) {
+                       DEBUG(10,("is_visible_file: file %s is unreadable.\n",
+                                entry ));
+                       TALLOC_FREE(entry);
+                       return false;
                }
                /* Honour _hide unwriteable_ option */
                if (hide_unwriteable && !user_can_write_file(conn, entry, pst)) {
-                       DEBUG(10,("is_visible_file: file %s is unwritable.\n", entry ));
-                       SAFE_FREE(entry);
-                       return False;
+                       DEBUG(10,("is_visible_file: file %s is unwritable.\n",
+                                entry ));
+                       TALLOC_FREE(entry);
+                       return false;
                }
                /* Honour _hide_special_ option */
                if (hide_special && file_is_special(conn, entry, pst)) {
-                       DEBUG(10,("is_visible_file: file %s is special.\n", entry ));
-                       SAFE_FREE(entry);
-                       return False;
+                       DEBUG(10,("is_visible_file: file %s is special.\n",
+                                entry ));
+                       TALLOC_FREE(entry);
+                       return false;
                }
-               SAFE_FREE(entry);
+               TALLOC_FREE(entry);
        }
-       return True;
+       return true;
+}
+
+static int smb_Dir_destructor(struct smb_Dir *dirp)
+{
+       if (dirp->dir) {
+               SMB_VFS_CLOSEDIR(dirp->conn,dirp->dir);
+       }
+       dirhandles_open--;
+       return 0;
 }
 
 /*******************************************************************
  Open a directory.
 ********************************************************************/
 
-struct smb_Dir *OpenDir(connection_struct *conn, const char *name, const char *mask, uint32 attr)
+struct smb_Dir *OpenDir(TALLOC_CTX *mem_ctx, connection_struct *conn,
+                       const char *name, const char *mask, uint32 attr)
 {
-       struct smb_Dir *dirp = SMB_MALLOC_P(struct smb_Dir);
+       struct smb_Dir *dirp = TALLOC_ZERO_P(mem_ctx, struct smb_Dir);
 
        if (!dirp) {
                return NULL;
        }
-       ZERO_STRUCTP(dirp);
 
        dirp->conn = conn;
        dirp->name_cache_size = lp_directory_name_cache_size(SNUM(conn));
 
-       dirp->dir_path = SMB_STRDUP(name);
+       dirp->dir_path = talloc_strdup(dirp, name);
        if (!dirp->dir_path) {
+               errno = ENOMEM;
                goto fail;
        }
+
+       dirhandles_open++;
+       talloc_set_destructor(dirp, smb_Dir_destructor);
+
        dirp->dir = SMB_VFS_OPENDIR(conn, dirp->dir_path, mask, attr);
        if (!dirp->dir) {
-               DEBUG(5,("OpenDir: Can't open %s. %s\n", dirp->dir_path, strerror(errno) ));
+               DEBUG(5,("OpenDir: Can't open %s. %s\n", dirp->dir_path,
+                        strerror(errno) ));
                goto fail;
        }
 
-       if (dirp->name_cache_size) {
-               dirp->name_cache = SMB_CALLOC_ARRAY(struct name_cache_entry,
-                               dirp->name_cache_size);
-               if (!dirp->name_cache) {
-                       goto fail;
-               }
-       } else {
-               dirp->name_cache = NULL;
-       }
-
-       dirhandles_open++;
        return dirp;
 
   fail:
-
-       if (dirp) {
-               if (dirp->dir) {
-                       SMB_VFS_CLOSEDIR(conn,dirp->dir);
-               }
-               SAFE_FREE(dirp->dir_path);
-               SAFE_FREE(dirp->name_cache);
-               SAFE_FREE(dirp);
-       }
+       TALLOC_FREE(dirp);
        return NULL;
 }
 
-
 /*******************************************************************
- Close a directory.
-********************************************************************/
-
-int CloseDir(struct smb_Dir *dirp)
-{
-       int i, ret = 0;
-
-       if (dirp->dir) {
-               ret = SMB_VFS_CLOSEDIR(dirp->conn,dirp->dir);
-       }
-       SAFE_FREE(dirp->dir_path);
-       if (dirp->name_cache) {
-               for (i = 0; i < dirp->name_cache_size; i++) {
-                       SAFE_FREE(dirp->name_cache[i].name);
-               }
-       }
-       SAFE_FREE(dirp->name_cache);
-       SAFE_FREE(dirp);
-       dirhandles_open--;
-       return ret;
-}
-
-/*******************************************************************
- Read from a directory. Also return current offset.
+ Read from a directory.
+ Return directory entry, current offset, and optional stat information.
  Don't check for veto or invisible files.
 ********************************************************************/
 
-const char *ReadDirName(struct smb_Dir *dirp, long *poffset)
+const char *ReadDirName(struct smb_Dir *dirp, long *poffset,
+                       SMB_STRUCT_STAT *sbuf)
 {
        const char *n;
        connection_struct *conn = dirp->conn;
 
        /* Cheat to allow . and .. to be the first entries returned. */
-       if (((*poffset == START_OF_DIRECTORY_OFFSET) || (*poffset == DOT_DOT_DIRECTORY_OFFSET)) && (dirp->file_number < 2)) {
+       if (((*poffset == START_OF_DIRECTORY_OFFSET) ||
+            (*poffset == DOT_DOT_DIRECTORY_OFFSET)) && (dirp->file_number < 2))
+       {
                if (dirp->file_number == 0) {
                        n = ".";
                        *poffset = dirp->offset = START_OF_DIRECTORY_OFFSET;
@@ -1215,7 +1173,7 @@ const char *ReadDirName(struct smb_Dir *dirp, long *poffset)
                SeekDir(dirp, *poffset);
        }
 
-       while ((n = vfs_readdirname(conn, dirp->dir))) {
+       while ((n = vfs_readdirname(conn, dirp->dir, sbuf))) {
                /* Ignore . and .. - we've already returned them. */
                if (*n == '.') {
                        if ((n[1] == '\0') || (n[1] == '.' && n[2] == '\0')) {
@@ -1292,15 +1250,24 @@ void DirCacheAdd(struct smb_Dir *dirp, const char *name, long offset)
 {
        struct name_cache_entry *e;
 
-       if (!dirp->name_cache_size || !dirp->name_cache) {
+       if (dirp->name_cache_size == 0) {
                return;
        }
 
+       if (dirp->name_cache == NULL) {
+               dirp->name_cache = TALLOC_ZERO_ARRAY(
+                       dirp, struct name_cache_entry, dirp->name_cache_size);
+
+               if (dirp->name_cache == NULL) {
+                       return;
+               }
+       }
+
        dirp->name_cache_index = (dirp->name_cache_index+1) %
                                        dirp->name_cache_size;
        e = &dirp->name_cache[dirp->name_cache_index];
-       SAFE_FREE(e->name);
-       e->name = SMB_STRDUP(name);
+       TALLOC_FREE(e->name);
+       e->name = talloc_strdup(dirp, name);
        e->offset = offset;
 }
 
@@ -1309,7 +1276,7 @@ void DirCacheAdd(struct smb_Dir *dirp, const char *name, long offset)
  Don't check for veto or invisible files.
 ********************************************************************/
 
-BOOL SearchDir(struct smb_Dir *dirp, const char *name, long *poffset)
+bool SearchDir(struct smb_Dir *dirp, const char *name, long *poffset)
 {
        int i;
        const char *entry;
@@ -1339,7 +1306,7 @@ BOOL SearchDir(struct smb_Dir *dirp, const char *name, long *poffset)
        SMB_VFS_REWINDDIR(conn, dirp->dir);
        dirp->file_number = 0;
        *poffset = START_OF_DIRECTORY_OFFSET;
-       while ((entry = ReadDirName(dirp, poffset))) {
+       while ((entry = ReadDirName(dirp, poffset, NULL))) {
                if (conn->case_sensitive ? (strcmp(entry, name) == 0) : strequal(entry, name)) {
                        return True;
                }
@@ -1357,15 +1324,15 @@ NTSTATUS can_delete_directory(struct connection_struct *conn,
        NTSTATUS status = NT_STATUS_OK;
        long dirpos = 0;
        const char *dname;
-       struct smb_Dir *dir_hnd = OpenDir(conn, dirname, NULL, 0);
+       SMB_STRUCT_STAT st;
+       struct smb_Dir *dir_hnd = OpenDir(talloc_tos(), conn, dirname,
+                                         NULL, 0);
 
        if (!dir_hnd) {
                return map_nt_error_from_unix(errno);
        }
 
-       while ((dname = ReadDirName(dir_hnd,&dirpos))) {
-               SMB_STRUCT_STAT st;
-
+       while ((dname = ReadDirName(dir_hnd, &dirpos, &st))) {
                /* Quick check for "." and ".." */
                if (dname[0] == '.') {
                        if (!dname[1] || (dname[1] == '.' && !dname[2])) {
@@ -1377,11 +1344,12 @@ NTSTATUS can_delete_directory(struct connection_struct *conn,
                        continue;
                }
 
-               DEBUG(10,("can_delete_directory: got name %s - can't delete\n", dname ));
+               DEBUG(10,("can_delete_directory: got name %s - can't delete\n",
+                        dname ));
                status = NT_STATUS_DIRECTORY_NOT_EMPTY;
                break;
        }
-       CloseDir(dir_hnd);
+       TALLOC_FREE(dir_hnd);
 
        return status;
 }