s4:torture/smb2: smb2.lease.breaking6 test

The client is allowed to downgrade a lease to a lower value
than required.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

diff --git a/source4/torture/smb2/lease.c b/source4/torture/smb2/lease.c
index ff10d5c7595f4914b2ff3f89e0aa5daab9808936..5e788e10d490fc8471b37875f6a475a959c73f0f 100644 (file)
--- a/source4/torture/smb2/lease.c
+++ b/source4/torture/smb2/lease.c
@@ -2488,6 +2488,113 @@ done:
        return ret;
 }
 
+static bool test_lease_breaking6(struct torture_context *tctx,
+                                struct smb2_tree *tree)
+{
+       TALLOC_CTX *mem_ctx = talloc_new(tctx);
+       struct smb2_create io1 = {};
+       struct smb2_create io2 = {};
+       struct smb2_lease ls1 = {};
+       struct smb2_handle h1a = {};
+       struct smb2_handle h1b = {};
+       struct smb2_handle h2 = {};
+       struct smb2_request *req2 = NULL;
+       struct smb2_lease_break_ack ack = {};
+       const char *fname = "lease_breaking6.dat";
+       bool ret = true;
+       NTSTATUS status;
+       uint32_t caps;
+
+       caps = smb2cli_conn_server_capabilities(tree->session->transport->conn);
+       if (!(caps & SMB2_CAP_LEASING)) {
+               torture_skip(tctx, "leases are not supported");
+       }
+
+       smb2_util_unlink(tree, fname);
+
+       tree->session->transport->lease.handler = torture_lease_handler;
+       tree->session->transport->lease.private_data = tree;
+       tree->session->transport->oplock.handler = torture_oplock_handler;
+       tree->session->transport->oplock.private_data = tree;
+
+       /*
+        * we defer acking the lease break.
+        */
+       ZERO_STRUCT(break_info);
+       break_info.lease_skip_ack = true;
+
+       smb2_lease_create_share(&io1, &ls1, false, fname,
+                               smb2_util_share_access("RWD"),
+                               LEASE1,
+                               smb2_util_lease_state("RWH"));
+       status = smb2_create(tree, mem_ctx, &io1);
+       CHECK_STATUS(status, NT_STATUS_OK);
+       h1a = io1.out.file.handle;
+       CHECK_CREATED(&io1, CREATED, FILE_ATTRIBUTE_ARCHIVE);
+       CHECK_LEASE(&io1, "RWH", true, LEASE1, 0);
+
+       /*
+        * a conflicting open is blocked until we ack the
+        * lease break
+        */
+       smb2_oplock_create(&io2, fname, SMB2_OPLOCK_LEVEL_NONE);
+       req2 = smb2_create_send(tree, &io2);
+       torture_assert(tctx, req2 != NULL, "smb2_create_send");
+
+       /*
+        * we got the lease break, but defer the ack.
+        */
+       CHECK_BREAK_INFO("RWH", "RH", LEASE1);
+
+       torture_assert(tctx, req2->state == SMB2_REQUEST_RECV, "req2 pending");
+
+       ack.in.lease.lease_key =
+               break_info.lease_break.current_lease.lease_key;
+       ZERO_STRUCT(break_info);
+
+       /*
+        * a open using the same lease key is still works,
+        * but reports SMB2_LEASE_FLAG_BREAK_IN_PROGRESS
+        */
+       status = smb2_create(tree, mem_ctx, &io1);
+       CHECK_STATUS(status, NT_STATUS_OK);
+       h1b = io1.out.file.handle;
+       CHECK_CREATED(&io1, EXISTED, FILE_ATTRIBUTE_ARCHIVE);
+       CHECK_LEASE(&io1, "RWH", true, LEASE1, SMB2_LEASE_FLAG_BREAK_IN_PROGRESS);
+       smb2_util_close(tree, h1b);
+
+       CHECK_NO_BREAK(tctx);
+
+       torture_assert(tctx, req2->state == SMB2_REQUEST_RECV, "req2 pending");
+
+       /*
+        * We are asked to break to "RH", but we are allowed to
+        * break to any of "RH", "R" or NONE.
+        */
+       ack.in.lease.lease_state = SMB2_LEASE_NONE;
+       status = smb2_lease_break_ack(tree, &ack);
+       CHECK_STATUS(status, NT_STATUS_OK);
+       CHECK_LEASE_BREAK_ACK(&ack, "", LEASE1);
+
+       torture_assert(tctx, req2->cancel.can_cancel,
+                      "req2 can_cancel");
+
+       status = smb2_create_recv(req2, tctx, &io2);
+       CHECK_STATUS(status, NT_STATUS_OK);
+       h2 = io2.out.file.handle;
+       CHECK_CREATED(&io2, EXISTED, FILE_ATTRIBUTE_ARCHIVE);
+       CHECK_VAL(io2.out.oplock_level, SMB2_OPLOCK_LEVEL_NONE);
+
+       CHECK_NO_BREAK(tctx);
+done:
+       smb2_util_close(tree, h1a);
+       smb2_util_close(tree, h1b);
+       smb2_util_close(tree, h2);
+       smb2_util_unlink(tree, fname);
+       talloc_free(mem_ctx);
+       return ret;
+}
+
 static bool test_lease_complex1(struct torture_context *tctx,
                                struct smb2_tree *tree1a)
 {
@@ -2780,6 +2887,7 @@ struct torture_suite *torture_smb2_lease_init(void)
        torture_suite_add_1smb2_test(suite, "breaking3", test_lease_breaking3);
        torture_suite_add_1smb2_test(suite, "breaking4", test_lease_breaking4);
        torture_suite_add_1smb2_test(suite, "breaking5", test_lease_breaking5);
+       torture_suite_add_1smb2_test(suite, "breaking6", test_lease_breaking6);
        torture_suite_add_1smb2_test(suite, "complex1", test_lease_complex1);
        torture_suite_add_1smb2_test(suite, "v2_request_parent",
                                     test_lease_v2_request_parent);