source3/smbd/filename.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    filename handling routines
   4    Copyright (C) Andrew Tridgell 1992-1998
   5    Copyright (C) Jeremy Allison 1999-2007
   6    Copyright (C) Ying Chen 2000
   7    Copyright (C) Volker Lendecke 2007
   8
   9    This program is free software; you can redistribute it and/or modify
  10    it under the terms of the GNU General Public License as published by
  11    the Free Software Foundation; either version 3 of the License, or
  12    (at your option) any later version.
  13
  14    This program is distributed in the hope that it will be useful,
  15    but WITHOUT ANY WARRANTY; without even the implied warranty of
  16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17    GNU General Public License for more details.
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21 */
  22
  23 /*
  24  * New hash table stat cache code added by Ying Chen.
  25  */
  26
  27 #include "includes.h"
  28 #include "system/filesys.h"
  29 #include "fake_file.h"
  30 #include "smbd/smbd.h"
  31
  32 static NTSTATUS build_stream_path(TALLOC_CTX *mem_ctx,
  33                                   connection_struct *conn,
  34                                   const char *orig_path,
  35                                   struct smb_filename *smb_fname);
  36
  37 /****************************************************************************
  38  Mangle the 2nd name and check if it is then equal to the first name.
  39 ****************************************************************************/
  40
  41 static bool mangled_equal(const char *name1,
  42                         const char *name2,
  43                         const struct share_params *p)
  44 {
  45         char mname[13];
  46
  47         if (!name_to_8_3(name2, mname, False, p)) {
  48                 return False;
  49         }
  50         return strequal(name1, mname);
  51 }
  52
  53 /****************************************************************************
  54  Cope with the differing wildcard and non-wildcard error cases.
  55 ****************************************************************************/
  56
  57 static NTSTATUS determine_path_error(const char *name,
  58                         bool allow_wcard_last_component)
  59 {
  60         const char *p;
  61
  62         if (!allow_wcard_last_component) {
  63                 /* Error code within a pathname. */
  64                 return NT_STATUS_OBJECT_PATH_NOT_FOUND;
  65         }
  66
  67         /* We're terminating here so we
  68          * can be a little slower and get
  69          * the error code right. Windows
  70          * treats the last part of the pathname
  71          * separately I think, so if the last
  72          * component is a wildcard then we treat
  73          * this ./ as "end of component" */
  74
  75         p = strchr(name, '/');
  76
  77         if (!p && (ms_has_wild(name) || ISDOT(name))) {
  78                 /* Error code at the end of a pathname. */
  79                 return NT_STATUS_OBJECT_NAME_INVALID;
  80         } else {
  81                 /* Error code within a pathname. */
  82                 return NT_STATUS_OBJECT_PATH_NOT_FOUND;
  83         }
  84 }
  85
  86 static NTSTATUS check_for_dot_component(const struct smb_filename *smb_fname)
  87 {
  88         /* Ensure we catch all names with in "/."
  89            this is disallowed under Windows and
  90            in POSIX they've already been removed. */
  91         const char *p = strstr(smb_fname->base_name, "/."); /*mb safe*/
  92         if (p) {
  93                 if (p[2] == '/') {
  94                         /* Error code within a pathname. */
  95                         return NT_STATUS_OBJECT_PATH_NOT_FOUND;
  96                 } else if (p[2] == '\0') {
  97                         /* Error code at the end of a pathname. */
  98                         return NT_STATUS_OBJECT_NAME_INVALID;
  99                 }
 100         }
 101         return NT_STATUS_OK;
 102 }
 103
 104 /****************************************************************************
 105  Optimization for common case where the missing part
 106  is in the last component and the client already
 107  sent the correct case.
 108  Returns NT_STATUS_OK to mean continue the tree walk
 109  (possibly with modified start pointer).
 110  Any other NT_STATUS_XXX error means terminate the path
 111  lookup here.
 112 ****************************************************************************/
 113
 114 static NTSTATUS check_parent_exists(TALLOC_CTX *ctx,
 115                                 connection_struct *conn,
 116                                 bool posix_pathnames,
 117                                 const struct smb_filename *smb_fname,
 118                                 char **pp_dirpath,
 119                                 char **pp_start)
 120 {
 121         struct smb_filename parent_fname;
 122         const char *last_component = NULL;
 123         NTSTATUS status;
 124         int ret;
 125
 126         ZERO_STRUCT(parent_fname);
 127         if (!parent_dirname(ctx, smb_fname->base_name,
 128                                 &parent_fname.base_name,
 129                                 &last_component)) {
 130                 return NT_STATUS_NO_MEMORY;
 131         }
 132
 133         /*
 134          * If there was no parent component in
 135          * smb_fname->base_name of the parent name
 136          * contained a wildcard then don't do this
 137          * optimization.
 138          */
 139         if ((smb_fname->base_name == last_component) ||
 140                         ms_has_wild(parent_fname.base_name)) {
 141                 return NT_STATUS_OK;
 142         }
 143
 144         if (posix_pathnames) {
 145                 ret = SMB_VFS_LSTAT(conn, &parent_fname);
 146         } else {
 147                 ret = SMB_VFS_STAT(conn, &parent_fname);
 148         }
 149
 150         /* If the parent stat failed, just continue
 151            with the normal tree walk. */
 152
 153         if (ret == -1) {
 154                 return NT_STATUS_OK;
 155         }
 156
 157         status = check_for_dot_component(&parent_fname);
 158         if (!NT_STATUS_IS_OK(status)) {
 159                 return status;
 160         }
 161
 162         /* Parent exists - set "start" to be the
 163          * last compnent to shorten the tree walk. */
 164
 165         /*
 166          * Safe to use CONST_DISCARD
 167          * here as last_component points
 168          * into our smb_fname->base_name.
 169          */
 170         *pp_start = CONST_DISCARD(char *,last_component);
 171
 172         /* Update dirpath. */
 173         TALLOC_FREE(*pp_dirpath);
 174         *pp_dirpath = talloc_strdup(ctx, parent_fname.base_name);
 175         if (!*pp_dirpath) {
 176                 return NT_STATUS_NO_MEMORY;
 177         }
 178
 179         DEBUG(5,("check_parent_exists: name "
 180                 "= %s, dirpath = %s, "
 181                 "start = %s\n",
 182                 smb_fname->base_name,
 183                 *pp_dirpath,
 184                 *pp_start));
 185
 186         return NT_STATUS_OK;
 187 }
 188
 189 /****************************************************************************
 190 This routine is called to convert names from the dos namespace to unix
 191 namespace. It needs to handle any case conversions, mangling, format changes,
 192 streams etc.
 193
 194 We assume that we have already done a chdir() to the right "root" directory
 195 for this service.
 196
 197 The function will return an NTSTATUS error if some part of the name except for
 198 the last part cannot be resolved, else NT_STATUS_OK.
 199
 200 Note NT_STATUS_OK doesn't mean the name exists or is valid, just that we
 201 didn't get any fatal errors that should immediately terminate the calling SMB
 202 processing whilst resolving.
 203
 204 If the UCF_SAVE_LCOMP flag is passed in, then the unmodified last component
 205 of the pathname is set in smb_filename->original_lcomp.
 206
 207 If UCF_ALWAYS_ALLOW_WCARD_LCOMP is passed in, then a MS wildcard was detected
 208 and should be allowed in the last component of the path only.
 209
 210 If the orig_path was a stream, smb_filename->base_name will point to the base
 211 filename, and smb_filename->stream_name will point to the stream name.  If
 212 orig_path was not a stream, then smb_filename->stream_name will be NULL.
 213
 214 On exit from unix_convert, the smb_filename->st stat struct will be populated
 215 if the file exists and was found, if not this stat struct will be filled with
 216 zeros (and this can be detected by checking for nlinks = 0, which can never be
 217 true for any file).
 218 ****************************************************************************/
 219
 220 NTSTATUS unix_convert(TALLOC_CTX *ctx,
 221                       connection_struct *conn,
 222                       const char *orig_path,
 223                       struct smb_filename **smb_fname_out,
 224                       uint32_t ucf_flags)
 225 {
 226         struct smb_filename *smb_fname = NULL;
 227         char *start, *end;
 228         char *dirpath = NULL;
 229         char *stream = NULL;
 230         bool component_was_mangled = False;
 231         bool name_has_wildcard = False;
 232         bool posix_pathnames = false;
 233         bool allow_wcard_last_component =
 234             (ucf_flags & UCF_ALWAYS_ALLOW_WCARD_LCOMP);
 235         bool save_last_component = ucf_flags & UCF_SAVE_LCOMP;
 236         NTSTATUS status;
 237         int ret = -1;
 238
 239         *smb_fname_out = NULL;
 240
 241         smb_fname = talloc_zero(ctx, struct smb_filename);
 242         if (smb_fname == NULL) {
 243                 return NT_STATUS_NO_MEMORY;
 244         }
 245
 246         if (conn->printer) {
 247                 /* we don't ever use the filenames on a printer share as a
 248                         filename - so don't convert them */
 249                 if (!(smb_fname->base_name = talloc_strdup(smb_fname,
 250                                                            orig_path))) {
 251                         status = NT_STATUS_NO_MEMORY;
 252                         goto err;
 253                 }
 254                 goto done;
 255         }
 256
 257         DEBUG(5, ("unix_convert called on file \"%s\"\n", orig_path));
 258
 259         /*
 260          * Conversion to basic unix format is already done in
 261          * check_path_syntax().
 262          */
 263
 264         /*
 265          * Names must be relative to the root of the service - any leading /.
 266          * and trailing /'s should have been trimmed by check_path_syntax().
 267          */
 268
 269 #ifdef DEVELOPER
 270         SMB_ASSERT(*orig_path != '/');
 271 #endif
 272
 273         /*
 274          * If we trimmed down to a single '\0' character
 275          * then we should use the "." directory to avoid
 276          * searching the cache, but not if we are in a
 277          * printing share.
 278          * As we know this is valid we can return true here.
 279          */
 280
 281         if (!*orig_path) {
 282                 if (!(smb_fname->base_name = talloc_strdup(smb_fname, "."))) {
 283                         status = NT_STATUS_NO_MEMORY;
 284                         goto err;
 285                 }
 286                 if (SMB_VFS_STAT(conn, smb_fname) != 0) {
 287                         status = map_nt_error_from_unix(errno);
 288                         goto err;
 289                 }
 290                 DEBUG(5, ("conversion finished \"\" -> %s\n",
 291                           smb_fname->base_name));
 292                 goto done;
 293         }
 294
 295         if (orig_path[0] == '.' && (orig_path[1] == '/' ||
 296                                 orig_path[1] == '\0')) {
 297                 /* Start of pathname can't be "." only. */
 298                 if (orig_path[1] == '\0' || orig_path[2] == '\0') {
 299                         status = NT_STATUS_OBJECT_NAME_INVALID;
 300                 } else {
 301                         status =determine_path_error(&orig_path[2],
 302                             allow_wcard_last_component);
 303                 }
 304                 goto err;
 305         }
 306
 307         /* Start with the full orig_path as given by the caller. */
 308         if (!(smb_fname->base_name = talloc_strdup(smb_fname, orig_path))) {
 309                 DEBUG(0, ("talloc_strdup failed\n"));
 310                 status = NT_STATUS_NO_MEMORY;
 311                 goto err;
 312         }
 313
 314         /*
 315          * Large directory fix normalization. If we're case sensitive, and
 316          * the case preserving parameters are set to "no", normalize the case of
 317          * the incoming filename from the client WHETHER IT EXISTS OR NOT !
 318          * This is in conflict with the current (3.0.20) man page, but is
 319          * what people expect from the "large directory howto". I'll update
 320          * the man page. Thanks to jht@samba.org for finding this. JRA.
 321          */
 322
 323         if (conn->case_sensitive && !conn->case_preserve &&
 324                         !conn->short_case_preserve) {
 325                 strnorm(smb_fname->base_name, lp_defaultcase(SNUM(conn)));
 326         }
 327
 328         /*
 329          * Ensure saved_last_component is valid even if file exists.
 330          */
 331
 332         if(save_last_component) {
 333                 end = strrchr_m(smb_fname->base_name, '/');
 334                 if (end) {
 335                         smb_fname->original_lcomp = talloc_strdup(smb_fname,
 336                                                                   end + 1);
 337                 } else {
 338                         smb_fname->original_lcomp =
 339                             talloc_strdup(smb_fname, smb_fname->base_name);
 340                 }
 341                 if (smb_fname->original_lcomp == NULL) {
 342                         status = NT_STATUS_NO_MEMORY;
 343                         goto err;
 344                 }
 345         }
 346
 347         posix_pathnames = (lp_posix_pathnames() ||
 348                                 (ucf_flags & UCF_POSIX_PATHNAMES));
 349
 350         /*
 351          * Strip off the stream, and add it back when we're done with the
 352          * base_name.
 353          */
 354         if (!posix_pathnames) {
 355                 stream = strchr_m(smb_fname->base_name, ':');
 356
 357                 if (stream != NULL) {
 358                         char *tmp = talloc_strdup(smb_fname, stream);
 359                         if (tmp == NULL) {
 360                                 status = NT_STATUS_NO_MEMORY;
 361                                 goto err;
 362                         }
 363                         /*
 364                          * Since this is actually pointing into
 365                          * smb_fname->base_name this truncates base_name.
 366                          */
 367                         *stream = '\0';
 368                         stream = tmp;
 369                 }
 370         }
 371
 372         start = smb_fname->base_name;
 373
 374         /*
 375          * If we're providing case insensitive semantics or
 376          * the underlying filesystem is case insensitive,
 377          * then a case-normalized hit in the stat-cache is
 378          * authoratitive. JRA.
 379          *
 380          * Note: We're only checking base_name.  The stream_name will be
 381          * added and verified in build_stream_path().
 382          */
 383
 384         if((!conn->case_sensitive || !(conn->fs_capabilities &
 385                                        FILE_CASE_SENSITIVE_SEARCH)) &&
 386             stat_cache_lookup(conn, posix_pathnames, &smb_fname->base_name, &dirpath, &start,
 387                               &smb_fname->st)) {
 388                 goto done;
 389         }
 390
 391         /*
 392          * Make sure "dirpath" is an allocated string, we use this for
 393          * building the directories with talloc_asprintf and free it.
 394          */
 395
 396         if ((dirpath == NULL) && (!(dirpath = talloc_strdup(ctx,"")))) {
 397                 DEBUG(0, ("talloc_strdup failed\n"));
 398                 status = NT_STATUS_NO_MEMORY;
 399                 goto err;
 400         }
 401
 402         /*
 403          * If we have a wildcard we must walk the path to
 404          * find where the error is, even if case sensitive
 405          * is true.
 406          */
 407
 408         name_has_wildcard = ms_has_wild(smb_fname->base_name);
 409         if (name_has_wildcard && !allow_wcard_last_component) {
 410                 /* Wildcard not valid anywhere. */
 411                 status = NT_STATUS_OBJECT_NAME_INVALID;
 412                 goto fail;
 413         }
 414
 415         DEBUG(5,("unix_convert begin: name = %s, dirpath = %s, start = %s\n",
 416                  smb_fname->base_name, dirpath, start));
 417
 418         if (!name_has_wildcard) {
 419                 /*
 420                  * stat the name - if it exists then we can add the stream back (if
 421                  * there was one) and be done!
 422                  */
 423
 424                 if (posix_pathnames) {
 425                         ret = SMB_VFS_LSTAT(conn, smb_fname);
 426                 } else {
 427                         ret = SMB_VFS_STAT(conn, smb_fname);
 428                 }
 429
 430                 if (ret == 0) {
 431                         status = check_for_dot_component(smb_fname);
 432                         if (!NT_STATUS_IS_OK(status)) {
 433                                 goto fail;
 434                         }
 435                         /* Add the path (not including the stream) to the cache. */
 436                         stat_cache_add(orig_path, smb_fname->base_name,
 437                                        conn->case_sensitive);
 438                         DEBUG(5,("conversion of base_name finished %s -> %s\n",
 439                                  orig_path, smb_fname->base_name));
 440                         goto done;
 441                 }
 442
 443                 /* Stat failed - ensure we don't use it. */
 444                 SET_STAT_INVALID(smb_fname->st);
 445
 446                 if (errno == ENOENT) {
 447                         /* Optimization when creating a new file - only
 448                            the last component doesn't exist.
 449                            NOTE : check_parent_exists() doesn't preserve errno.
 450                         */
 451                         int saved_errno = errno;
 452                         status = check_parent_exists(ctx,
 453                                                 conn,
 454                                                 posix_pathnames,
 455                                                 smb_fname,
 456                                                 &dirpath,
 457                                                 &start);
 458                         errno = saved_errno;
 459                         if (!NT_STATUS_IS_OK(status)) {
 460                                 goto fail;
 461                         }
 462                 }
 463
 464                 /*
 465                  * A special case - if we don't have any wildcards or mangling chars and are case
 466                  * sensitive or the underlying filesystem is case insensitive then searching
 467                  * won't help.
 468                  */
 469
 470                 if ((conn->case_sensitive || !(conn->fs_capabilities &
 471                                         FILE_CASE_SENSITIVE_SEARCH)) &&
 472                                 !mangle_is_mangled(smb_fname->base_name, conn->params)) {
 473
 474                         status = check_for_dot_component(smb_fname);
 475                         if (!NT_STATUS_IS_OK(status)) {
 476                                 goto fail;
 477                         }
 478
 479                         /*
 480                          * The stat failed. Could be ok as it could be
 481                          * a new file.
 482                          */
 483
 484                         if (errno == ENOTDIR || errno == ELOOP) {
 485                                 status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
 486                                 goto fail;
 487                         } else if (errno == ENOENT) {
 488                                 /*
 489                                  * Was it a missing last component ?
 490                                  * or a missing intermediate component ?
 491                                  */
 492                                 struct smb_filename parent_fname;
 493                                 const char *last_component = NULL;
 494
 495                                 ZERO_STRUCT(parent_fname);
 496                                 if (!parent_dirname(ctx, smb_fname->base_name,
 497                                                         &parent_fname.base_name,
 498                                                         &last_component)) {
 499                                         status = NT_STATUS_NO_MEMORY;
 500                                         goto fail;
 501                                 }
 502                                 if (posix_pathnames) {
 503                                         ret = SMB_VFS_LSTAT(conn, &parent_fname);
 504                                 } else {
 505                                         ret = SMB_VFS_STAT(conn, &parent_fname);
 506                                 }
 507                                 if (ret == -1) {
 508                                         if (errno == ENOTDIR ||
 509                                                         errno == ENOENT ||
 510                                                         errno == ELOOP) {
 511                                                 status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
 512                                                 goto fail;
 513                                         }
 514                                 }
 515
 516                                 /*
 517                                  * Missing last component is ok - new file.
 518                                  * Also deal with permission denied elsewhere.
 519                                  * Just drop out to done.
 520                                  */
 521                                 goto done;
 522                         }
 523                 }
 524         } else {
 525                 /*
 526                  * We have a wildcard in the pathname.
 527                  *
 528                  * Optimization for common case where the wildcard
 529                  * is in the last component and the client already
 530                  * sent the correct case.
 531                  * NOTE : check_parent_exists() doesn't preserve errno.
 532                  */
 533                 int saved_errno = errno;
 534                 status = check_parent_exists(ctx,
 535                                         conn,
 536                                         posix_pathnames,
 537                                         smb_fname,
 538                                         &dirpath,
 539                                         &start);
 540                 errno = saved_errno;
 541                 if (!NT_STATUS_IS_OK(status)) {
 542                         goto fail;
 543                 }
 544         }
 545
 546         /*
 547          * is_mangled() was changed to look at an entire pathname, not
 548          * just a component. JRA.
 549          */
 550
 551         if (mangle_is_mangled(start, conn->params)) {
 552                 component_was_mangled = True;
 553         }
 554
 555         /*
 556          * Now we need to recursively match the name against the real
 557          * directory structure.
 558          */
 559
 560         /*
 561          * Match each part of the path name separately, trying the names
 562          * as is first, then trying to scan the directory for matching names.
 563          */
 564
 565         for (; start ; start = (end?end+1:(char *)NULL)) {
 566                 /*
 567                  * Pinpoint the end of this section of the filename.
 568                  */
 569                 /* mb safe. '/' can't be in any encoded char. */
 570                 end = strchr(start, '/');
 571
 572                 /*
 573                  * Chop the name at this point.
 574                  */
 575                 if (end) {
 576                         *end = 0;
 577                 }
 578
 579                 if (save_last_component) {
 580                         TALLOC_FREE(smb_fname->original_lcomp);
 581                         smb_fname->original_lcomp = talloc_strdup(smb_fname,
 582                                                         end ? end + 1 : start);
 583                         if (!smb_fname->original_lcomp) {
 584                                 DEBUG(0, ("talloc failed\n"));
 585                                 status = NT_STATUS_NO_MEMORY;
 586                                 goto err;
 587                         }
 588                 }
 589
 590                 /* The name cannot have a component of "." */
 591
 592                 if (ISDOT(start)) {
 593                         if (!end)  {
 594                                 /* Error code at the end of a pathname. */
 595                                 status = NT_STATUS_OBJECT_NAME_INVALID;
 596                         } else {
 597                                 status = determine_path_error(end+1,
 598                                                 allow_wcard_last_component);
 599                         }
 600                         goto fail;
 601                 }
 602
 603                 /* The name cannot have a wildcard if it's not
 604                    the last component. */
 605
 606                 name_has_wildcard = ms_has_wild(start);
 607
 608                 /* Wildcards never valid within a pathname. */
 609                 if (name_has_wildcard && end) {
 610                         status = NT_STATUS_OBJECT_NAME_INVALID;
 611                         goto fail;
 612                 }
 613
 614                 /* Skip the stat call if it's a wildcard end. */
 615                 if (name_has_wildcard) {
 616                         DEBUG(5,("Wildcard %s\n",start));
 617                         goto done;
 618                 }
 619
 620                 /*
 621                  * Check if the name exists up to this point.
 622                  */
 623
 624                 if (posix_pathnames) {
 625                         ret = SMB_VFS_LSTAT(conn, smb_fname);
 626                 } else {
 627                         ret = SMB_VFS_STAT(conn, smb_fname);
 628                 }
 629
 630                 if (ret == 0) {
 631                         /*
 632                          * It exists. it must either be a directory or this must
 633                          * be the last part of the path for it to be OK.
 634                          */
 635                         if (end && !S_ISDIR(smb_fname->st.st_ex_mode)) {
 636                                 /*
 637                                  * An intermediate part of the name isn't
 638                                  * a directory.
 639                                  */
 640                                 DEBUG(5,("Not a dir %s\n",start));
 641                                 *end = '/';
 642                                 /*
 643                                  * We need to return the fact that the
 644                                  * intermediate name resolution failed. This
 645                                  * is used to return an error of ERRbadpath
 646                                  * rather than ERRbadfile. Some Windows
 647                                  * applications depend on the difference between
 648                                  * these two errors.
 649                                  */
 650                                 status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
 651                                 goto fail;
 652                         }
 653
 654                 } else {
 655                         char *found_name = NULL;
 656
 657                         /* Stat failed - ensure we don't use it. */
 658                         SET_STAT_INVALID(smb_fname->st);
 659
 660                         /*
 661                          * Reset errno so we can detect
 662                          * directory open errors.
 663                          */
 664                         errno = 0;
 665
 666                         /*
 667                          * Try to find this part of the path in the directory.
 668                          */
 669
 670                         if (name_has_wildcard ||
 671                             (get_real_filename(conn, dirpath, start,
 672                                                talloc_tos(),
 673                                                &found_name) == -1)) {
 674                                 char *unmangled;
 675
 676                                 if (end) {
 677                                         /*
 678                                          * An intermediate part of the name
 679                                          * can't be found.
 680                                          */
 681                                         DEBUG(5,("Intermediate not found %s\n",
 682                                                         start));
 683                                         *end = '/';
 684
 685                                         /*
 686                                          * We need to return the fact that the
 687                                          * intermediate name resolution failed.
 688                                          * This is used to return an error of
 689                                          * ERRbadpath rather than ERRbadfile.
 690                                          * Some Windows applications depend on
 691                                          * the difference between these two
 692                                          * errors.
 693                                          */
 694
 695                                         /*
 696                                          * ENOENT, ENOTDIR and ELOOP all map
 697                                          * to NT_STATUS_OBJECT_PATH_NOT_FOUND
 698                                          * in the filename walk.
 699                                          */
 700
 701                                         if (errno == ENOENT ||
 702                                                         errno == ENOTDIR ||
 703                                                         errno == ELOOP) {
 704                                                 status =
 705                                                 NT_STATUS_OBJECT_PATH_NOT_FOUND;
 706                                         }
 707                                         else {
 708                                                 status =
 709                                                 map_nt_error_from_unix(errno);
 710                                         }
 711                                         goto fail;
 712                                 }
 713
 714                                 /*
 715                                  * ENOENT/EACCESS are the only valid errors
 716                                  * here. EACCESS needs handling here for
 717                                  * "dropboxes", i.e. directories where users
 718                                  * can only put stuff with permission -wx.
 719                                  */
 720                                 if ((errno != 0) && (errno != ENOENT)
 721                                     && ((ucf_flags & UCF_CREATING_FILE) &&
 722                                     (errno != EACCES))) {
 723                                         /*
 724                                          * ENOTDIR and ELOOP both map to
 725                                          * NT_STATUS_OBJECT_PATH_NOT_FOUND
 726                                          * in the filename walk.
 727                                          */
 728                                         if (errno == ENOTDIR ||
 729                                                         errno == ELOOP) {
 730                                                 status =
 731                                                 NT_STATUS_OBJECT_PATH_NOT_FOUND;
 732                                         } else {
 733                                                 status =
 734                                                 map_nt_error_from_unix(errno);
 735                                         }
 736                                         goto fail;
 737                                 }
 738
 739                                 /*
 740                                  * Just the last part of the name doesn't exist.
 741                                  * We need to strupper() or strlower() it as
 742                                  * this conversion may be used for file creation
 743                                  * purposes. Fix inspired by
 744                                  * Thomas Neumann <t.neumann@iku-ag.de>.
 745                                  */
 746                                 if (!conn->case_preserve ||
 747                                     (mangle_is_8_3(start, False,
 748                                                    conn->params) &&
 749                                                  !conn->short_case_preserve)) {
 750                                         strnorm(start,
 751                                                 lp_defaultcase(SNUM(conn)));
 752                                 }
 753
 754                                 /*
 755                                  * check on the mangled stack to see if we can
 756                                  * recover the base of the filename.
 757                                  */
 758
 759                                 if (mangle_is_mangled(start, conn->params)
 760                                     && mangle_lookup_name_from_8_3(ctx,
 761                                                         start,
 762                                                         &unmangled,
 763                                                         conn->params)) {
 764                                         char *tmp;
 765                                         size_t start_ofs =
 766                                             start - smb_fname->base_name;
 767
 768                                         if (*dirpath != '\0') {
 769                                                 tmp = talloc_asprintf(
 770                                                         smb_fname, "%s/%s",
 771                                                         dirpath, unmangled);
 772                                                 TALLOC_FREE(unmangled);
 773                                         }
 774                                         else {
 775                                                 tmp = unmangled;
 776                                         }
 777                                         if (tmp == NULL) {
 778                                                 DEBUG(0, ("talloc failed\n"));
 779                                                 status = NT_STATUS_NO_MEMORY;
 780                                                 goto err;
 781                                         }
 782                                         TALLOC_FREE(smb_fname->base_name);
 783                                         smb_fname->base_name = tmp;
 784                                         start =
 785                                             smb_fname->base_name + start_ofs;
 786                                         end = start + strlen(start);
 787                                 }
 788
 789                                 DEBUG(5,("New file %s\n",start));
 790                                 goto done;
 791                         }
 792
 793
 794                         /*
 795                          * Restore the rest of the string. If the string was
 796                          * mangled the size may have changed.
 797                          */
 798                         if (end) {
 799                                 char *tmp;
 800                                 size_t start_ofs =
 801                                     start - smb_fname->base_name;
 802
 803                                 if (*dirpath != '\0') {
 804                                         tmp = talloc_asprintf(smb_fname,
 805                                                 "%s/%s/%s", dirpath,
 806                                                 found_name, end+1);
 807                                 }
 808                                 else {
 809                                         tmp = talloc_asprintf(smb_fname,
 810                                                 "%s/%s", found_name,
 811                                                 end+1);
 812                                 }
 813                                 if (tmp == NULL) {
 814                                         DEBUG(0, ("talloc_asprintf failed\n"));
 815                                         status = NT_STATUS_NO_MEMORY;
 816                                         goto err;
 817                                 }
 818                                 TALLOC_FREE(smb_fname->base_name);
 819                                 smb_fname->base_name = tmp;
 820                                 start = smb_fname->base_name + start_ofs;
 821                                 end = start + strlen(found_name);
 822                                 *end = '\0';
 823                         } else {
 824                                 char *tmp;
 825                                 size_t start_ofs =
 826                                     start - smb_fname->base_name;
 827
 828                                 if (*dirpath != '\0') {
 829                                         tmp = talloc_asprintf(smb_fname,
 830                                                 "%s/%s", dirpath,
 831                                                 found_name);
 832                                 } else {
 833                                         tmp = talloc_strdup(smb_fname,
 834                                                 found_name);
 835                                 }
 836                                 if (tmp == NULL) {
 837                                         DEBUG(0, ("talloc failed\n"));
 838                                         status = NT_STATUS_NO_MEMORY;
 839                                         goto err;
 840                                 }
 841                                 TALLOC_FREE(smb_fname->base_name);
 842                                 smb_fname->base_name = tmp;
 843                                 start = smb_fname->base_name + start_ofs;
 844
 845                                 /*
 846                                  * We just scanned for, and found the end of
 847                                  * the path. We must return a valid stat struct
 848                                  * if it exists. JRA.
 849                                  */
 850
 851                                 if (posix_pathnames) {
 852                                         ret = SMB_VFS_LSTAT(conn, smb_fname);
 853                                 } else {
 854                                         ret = SMB_VFS_STAT(conn, smb_fname);
 855                                 }
 856
 857                                 if (ret != 0) {
 858                                         SET_STAT_INVALID(smb_fname->st);
 859                                 }
 860                         }
 861
 862                         TALLOC_FREE(found_name);
 863                 } /* end else */
 864
 865 #ifdef DEVELOPER
 866                 /*
 867                  * This sucks!
 868                  * We should never provide different behaviors
 869                  * depending on DEVELOPER!!!
 870                  */
 871                 if (VALID_STAT(smb_fname->st)) {
 872                         bool delete_pending;
 873                         uint32_t name_hash;
 874
 875                         status = file_name_hash(conn,
 876                                         smb_fname_str_dbg(smb_fname),
 877                                         &name_hash);
 878                         if (!NT_STATUS_IS_OK(status)) {
 879                                 goto fail;
 880                         }
 881
 882                         get_file_infos(vfs_file_id_from_sbuf(conn,
 883                                                              &smb_fname->st),
 884                                        name_hash,
 885                                        &delete_pending, NULL);
 886                         if (delete_pending) {
 887                                 status = NT_STATUS_DELETE_PENDING;
 888                                 goto fail;
 889                         }
 890                 }
 891 #endif
 892
 893                 /*
 894                  * Add to the dirpath that we have resolved so far.
 895                  */
 896
 897                 if (*dirpath != '\0') {
 898                         char *tmp = talloc_asprintf(ctx,
 899                                         "%s/%s", dirpath, start);
 900                         if (!tmp) {
 901                                 DEBUG(0, ("talloc_asprintf failed\n"));
 902                                 status = NT_STATUS_NO_MEMORY;
 903                                 goto err;
 904                         }
 905                         TALLOC_FREE(dirpath);
 906                         dirpath = tmp;
 907                 }
 908                 else {
 909                         TALLOC_FREE(dirpath);
 910                         if (!(dirpath = talloc_strdup(ctx,start))) {
 911                                 DEBUG(0, ("talloc_strdup failed\n"));
 912                                 status = NT_STATUS_NO_MEMORY;
 913                                 goto err;
 914                         }
 915                 }
 916
 917                 /*
 918                  * Cache the dirpath thus far. Don't cache a name with mangled
 919                  * or wildcard components as this can change the size.
 920                  */
 921                 if(!component_was_mangled && !name_has_wildcard) {
 922                         stat_cache_add(orig_path, dirpath,
 923                                         conn->case_sensitive);
 924                 }
 925
 926                 /*
 927                  * Restore the / that we wiped out earlier.
 928                  */
 929                 if (end) {
 930                         *end = '/';
 931                 }
 932         }
 933
 934         /*
 935          * Cache the full path. Don't cache a name with mangled or wildcard
 936          * components as this can change the size.
 937          */
 938
 939         if(!component_was_mangled && !name_has_wildcard) {
 940                 stat_cache_add(orig_path, smb_fname->base_name,
 941                                conn->case_sensitive);
 942         }
 943
 944         /*
 945          * The name has been resolved.
 946          */
 947
 948         DEBUG(5,("conversion finished %s -> %s\n", orig_path,
 949                  smb_fname->base_name));
 950
 951  done:
 952         /* Add back the stream if one was stripped off originally. */
 953         if (stream != NULL) {
 954                 smb_fname->stream_name = stream;
 955
 956                 /* Check path now that the base_name has been converted. */
 957                 status = build_stream_path(ctx, conn, orig_path, smb_fname);
 958                 if (!NT_STATUS_IS_OK(status)) {
 959                         goto fail;
 960                 }
 961         }
 962         TALLOC_FREE(dirpath);
 963         *smb_fname_out = smb_fname;
 964         return NT_STATUS_OK;
 965  fail:
 966         DEBUG(10, ("dirpath = [%s] start = [%s]\n", dirpath, start));
 967         if (*dirpath != '\0') {
 968                 smb_fname->base_name = talloc_asprintf(smb_fname, "%s/%s",
 969                                                        dirpath, start);
 970         } else {
 971                 smb_fname->base_name = talloc_strdup(smb_fname, start);
 972         }
 973         if (!smb_fname->base_name) {
 974                 DEBUG(0, ("talloc_asprintf failed\n"));
 975                 status = NT_STATUS_NO_MEMORY;
 976                 goto err;
 977         }
 978
 979         *smb_fname_out = smb_fname;
 980         TALLOC_FREE(dirpath);
 981         return status;
 982  err:
 983         TALLOC_FREE(smb_fname);
 984         return status;
 985 }
 986
 987 /****************************************************************************
 988  Ensure a path is not vetod.
 989 ****************************************************************************/
 990
 991 NTSTATUS check_veto_path(connection_struct *conn, const char *name)
 992 {
 993         if (IS_VETO_PATH(conn, name))  {
 994                 /* Is it not dot or dot dot. */
 995                 if (!(ISDOT(name) || ISDOTDOT(name))) {
 996                         DEBUG(5,("check_veto_path: file path name %s vetoed\n",
 997                                                 name));
 998                         return map_nt_error_from_unix(ENOENT);
 999                 }
1000         }
1001         return NT_STATUS_OK;
1002 }
1003
1004 /****************************************************************************
1005  Check a filename - possibly calling check_reduced_name.
1006  This is called by every routine before it allows an operation on a filename.
1007  It does any final confirmation necessary to ensure that the filename is
1008  a valid one for the user to access.
1009 ****************************************************************************/
1010
1011 NTSTATUS check_name(connection_struct *conn, const char *name)
1012 {
1013         NTSTATUS status = check_veto_path(conn, name);
1014
1015         if (!NT_STATUS_IS_OK(status)) {
1016                 return status;
1017         }
1018
1019         if (!lp_widelinks(SNUM(conn)) || !lp_symlinks(SNUM(conn))) {
1020                 status = check_reduced_name(conn,name);
1021                 if (!NT_STATUS_IS_OK(status)) {
1022                         DEBUG(5,("check_name: name %s failed with %s\n",name,
1023                                                 nt_errstr(status)));
1024                         return status;
1025                 }
1026         }
1027
1028         return NT_STATUS_OK;
1029 }
1030
1031 /****************************************************************************
1032  Check if two filenames are equal.
1033  This needs to be careful about whether we are case sensitive.
1034 ****************************************************************************/
1035
1036 static bool fname_equal(const char *name1, const char *name2,
1037                 bool case_sensitive)
1038 {
1039         /* Normal filename handling */
1040         if (case_sensitive) {
1041                 return(strcmp(name1,name2) == 0);
1042         }
1043
1044         return(strequal(name1,name2));
1045 }
1046
1047 /****************************************************************************
1048  Scan a directory to find a filename, matching without case sensitivity.
1049  If the name looks like a mangled name then try via the mangling functions
1050 ****************************************************************************/
1051
1052 static int get_real_filename_full_scan(connection_struct *conn,
1053                                        const char *path, const char *name,
1054                                        bool mangled,
1055                                        TALLOC_CTX *mem_ctx, char **found_name)
1056 {
1057         struct smb_Dir *cur_dir;
1058         const char *dname = NULL;
1059         char *talloced = NULL;
1060         char *unmangled_name = NULL;
1061         long curpos;
1062
1063         /* handle null paths */
1064         if ((path == NULL) || (*path == 0)) {
1065                 path = ".";
1066         }
1067
1068         /* If we have a case-sensitive filesystem, it doesn't do us any
1069          * good to search for a name. If a case variation of the name was
1070          * there, then the original stat(2) would have found it.
1071          */
1072         if (!mangled && !(conn->fs_capabilities & FILE_CASE_SENSITIVE_SEARCH)) {
1073                 errno = ENOENT;
1074                 return -1;
1075         }
1076
1077         /*
1078          * The incoming name can be mangled, and if we de-mangle it
1079          * here it will not compare correctly against the filename (name2)
1080          * read from the directory and then mangled by the name_to_8_3()
1081          * call. We need to mangle both names or neither.
1082          * (JRA).
1083          *
1084          * Fix for bug found by Dina Fine. If in case sensitive mode then
1085          * the mangle cache is no good (3 letter extension could be wrong
1086          * case - so don't demangle in this case - leave as mangled and
1087          * allow the mangling of the directory entry read (which is done
1088          * case insensitively) to match instead. This will lead to more
1089          * false positive matches but we fail completely without it. JRA.
1090          */
1091
1092         if (mangled && !conn->case_sensitive) {
1093                 mangled = !mangle_lookup_name_from_8_3(talloc_tos(), name,
1094                                                        &unmangled_name,
1095                                                        conn->params);
1096                 if (!mangled) {
1097                         /* Name is now unmangled. */
1098                         name = unmangled_name;
1099                 }
1100         }
1101
1102         /* open the directory */
1103         if (!(cur_dir = OpenDir(talloc_tos(), conn, path, NULL, 0))) {
1104                 DEBUG(3,("scan dir didn't open dir [%s]\n",path));
1105                 TALLOC_FREE(unmangled_name);
1106                 return -1;
1107         }
1108
1109         /* now scan for matching names */
1110         curpos = 0;
1111         while ((dname = ReadDirName(cur_dir, &curpos, NULL, &talloced))) {
1112
1113                 /* Is it dot or dot dot. */
1114                 if (ISDOT(dname) || ISDOTDOT(dname)) {
1115                         TALLOC_FREE(talloced);
1116                         continue;
1117                 }
1118
1119                 /*
1120                  * At this point dname is the unmangled name.
1121                  * name is either mangled or not, depending on the state
1122                  * of the "mangled" variable. JRA.
1123                  */
1124
1125                 /*
1126                  * Check mangled name against mangled name, or unmangled name
1127                  * against unmangled name.
1128                  */
1129
1130                 if ((mangled && mangled_equal(name,dname,conn->params)) ||
1131                         fname_equal(name, dname, conn->case_sensitive)) {
1132                         /* we've found the file, change it's name and return */
1133                         *found_name = talloc_strdup(mem_ctx, dname);
1134                         TALLOC_FREE(unmangled_name);
1135                         TALLOC_FREE(cur_dir);
1136                         if (!*found_name) {
1137                                 errno = ENOMEM;
1138                                 TALLOC_FREE(talloced);
1139                                 return -1;
1140                         }
1141                         TALLOC_FREE(talloced);
1142                         return 0;
1143                 }
1144                 TALLOC_FREE(talloced);
1145         }
1146
1147         TALLOC_FREE(unmangled_name);
1148         TALLOC_FREE(cur_dir);
1149         errno = ENOENT;
1150         return -1;
1151 }
1152
1153 /****************************************************************************
1154  Wrapper around the vfs get_real_filename and the full directory scan
1155  fallback.
1156 ****************************************************************************/
1157
1158 int get_real_filename(connection_struct *conn, const char *path,
1159                       const char *name, TALLOC_CTX *mem_ctx,
1160                       char **found_name)
1161 {
1162         int ret;
1163         bool mangled;
1164
1165         mangled = mangle_is_mangled(name, conn->params);
1166
1167         if (mangled) {
1168                 return get_real_filename_full_scan(conn, path, name, mangled,
1169                                                    mem_ctx, found_name);
1170         }
1171
1172         /* Try the vfs first to take advantage of case-insensitive stat. */
1173         ret = SMB_VFS_GET_REAL_FILENAME(conn, path, name, mem_ctx, found_name);
1174
1175         /*
1176          * If the case-insensitive stat was successful, or returned an error
1177          * other than EOPNOTSUPP then there is no need to fall back on the
1178          * full directory scan.
1179          */
1180         if (ret == 0 || (ret == -1 && errno != EOPNOTSUPP)) {
1181                 return ret;
1182         }
1183
1184         return get_real_filename_full_scan(conn, path, name, mangled, mem_ctx,
1185                                            found_name);
1186 }
1187
1188 static NTSTATUS build_stream_path(TALLOC_CTX *mem_ctx,
1189                                   connection_struct *conn,
1190                                   const char *orig_path,
1191                                   struct smb_filename *smb_fname)
1192 {
1193         NTSTATUS status;
1194         unsigned int i, num_streams = 0;
1195         struct stream_struct *streams = NULL;
1196
1197         if (SMB_VFS_STAT(conn, smb_fname) == 0) {
1198                 DEBUG(10, ("'%s' exists\n", smb_fname_str_dbg(smb_fname)));
1199                 return NT_STATUS_OK;
1200         }
1201
1202         if (errno != ENOENT) {
1203                 DEBUG(10, ("vfs_stat failed: %s\n", strerror(errno)));
1204                 status = map_nt_error_from_unix(errno);
1205                 goto fail;
1206         }
1207
1208         /* Fall back to a case-insensitive scan of all streams on the file. */
1209         status = vfs_streaminfo(conn, NULL, smb_fname->base_name, mem_ctx,
1210                                 &num_streams, &streams);
1211
1212         if (NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
1213                 SET_STAT_INVALID(smb_fname->st);
1214                 return NT_STATUS_OK;
1215         }
1216
1217         if (!NT_STATUS_IS_OK(status)) {
1218                 DEBUG(10, ("vfs_streaminfo failed: %s\n", nt_errstr(status)));
1219                 goto fail;
1220         }
1221
1222         for (i=0; i<num_streams; i++) {
1223                 DEBUG(10, ("comparing [%s] and [%s]: ",
1224                            smb_fname->stream_name, streams[i].name));
1225                 if (fname_equal(smb_fname->stream_name, streams[i].name,
1226                                 conn->case_sensitive)) {
1227                         DEBUGADD(10, ("equal\n"));
1228                         break;
1229                 }
1230                 DEBUGADD(10, ("not equal\n"));
1231         }
1232
1233         /* Couldn't find the stream. */
1234         if (i == num_streams) {
1235                 SET_STAT_INVALID(smb_fname->st);
1236                 TALLOC_FREE(streams);
1237                 return NT_STATUS_OK;
1238         }
1239
1240         DEBUG(10, ("case insensitive stream. requested: %s, actual: %s\n",
1241                 smb_fname->stream_name, streams[i].name));
1242
1243
1244         TALLOC_FREE(smb_fname->stream_name);
1245         smb_fname->stream_name = talloc_strdup(smb_fname, streams[i].name);
1246         if (smb_fname->stream_name == NULL) {
1247                 status = NT_STATUS_NO_MEMORY;
1248                 goto fail;
1249         }
1250
1251         SET_STAT_INVALID(smb_fname->st);
1252
1253         if (SMB_VFS_STAT(conn, smb_fname) == 0) {
1254                 DEBUG(10, ("'%s' exists\n", smb_fname_str_dbg(smb_fname)));
1255         }
1256         status = NT_STATUS_OK;
1257  fail:
1258         TALLOC_FREE(streams);
1259         return status;
1260 }
1261
1262 /**
1263  * Go through all the steps to validate a filename.
1264  *
1265  * @param ctx           talloc_ctx to allocate memory with.
1266  * @param conn          connection struct for vfs calls.
1267  * @param dfs_path      Whether this path requires dfs resolution.
1268  * @param name_in       The unconverted name.
1269  * @param ucf_flags     flags to pass through to unix_convert().
1270  *                      UCF_ALWAYS_ALLOW_WCARD_LCOMP will be OR'd in if
1271  *                      p_cont_wcard != NULL and is true and
1272  *                      UCF_COND_ALLOW_WCARD_LCOMP.
1273  * @param p_cont_wcard  If not NULL, will be set to true if the dfs path
1274  *                      resolution detects a wildcard.
1275  * @param pp_smb_fname  The final converted name will be allocated if the
1276  *                      return is NT_STATUS_OK.
1277  *
1278  * @return NT_STATUS_OK if all operations completed succesfully, appropriate
1279  *         error otherwise.
1280  */
1281 NTSTATUS filename_convert(TALLOC_CTX *ctx,
1282                                 connection_struct *conn,
1283                                 bool dfs_path,
1284                                 const char *name_in,
1285                                 uint32_t ucf_flags,
1286                                 bool *ppath_contains_wcard,
1287                                 struct smb_filename **pp_smb_fname)
1288 {
1289         NTSTATUS status;
1290         bool allow_wcards = (ucf_flags & (UCF_COND_ALLOW_WCARD_LCOMP|UCF_ALWAYS_ALLOW_WCARD_LCOMP));
1291         char *fname = NULL;
1292
1293         *pp_smb_fname = NULL;
1294
1295         status = resolve_dfspath_wcard(ctx, conn,
1296                                 dfs_path,
1297                                 name_in,
1298                                 allow_wcards,
1299                                 &fname,
1300                                 ppath_contains_wcard);
1301         if (!NT_STATUS_IS_OK(status)) {
1302                 DEBUG(10,("filename_convert: resolve_dfspath failed "
1303                         "for name %s with %s\n",
1304                         name_in,
1305                         nt_errstr(status) ));
1306                 return status;
1307         }
1308
1309         if (is_fake_file_path(name_in)) {
1310                 SMB_STRUCT_STAT st;
1311                 ZERO_STRUCT(st);
1312                 st.st_ex_nlink = 1;
1313                 status = create_synthetic_smb_fname_split(ctx,
1314                                                           name_in,
1315                                                           &st,
1316                                                           pp_smb_fname);
1317                 return status;
1318         }
1319
1320         /*
1321          * If the caller conditionally allows wildcard lookups, only add the
1322          * always allow if the path actually does contain a wildcard.
1323          */
1324         if (ucf_flags & UCF_COND_ALLOW_WCARD_LCOMP &&
1325             ppath_contains_wcard != NULL && *ppath_contains_wcard) {
1326                 ucf_flags |= UCF_ALWAYS_ALLOW_WCARD_LCOMP;
1327         }
1328
1329         status = unix_convert(ctx, conn, fname, pp_smb_fname, ucf_flags);
1330         if (!NT_STATUS_IS_OK(status)) {
1331                 DEBUG(10,("filename_convert: unix_convert failed "
1332                         "for name %s with %s\n",
1333                         fname,
1334                         nt_errstr(status) ));
1335                 return status;
1336         }
1337
1338         if ((ucf_flags & UCF_UNIX_NAME_LOOKUP) &&
1339                         VALID_STAT((*pp_smb_fname)->st) &&
1340                         S_ISLNK((*pp_smb_fname)->st.st_ex_mode)) {
1341                 return check_veto_path(conn, (*pp_smb_fname)->base_name);
1342         }
1343
1344         status = check_name(conn, (*pp_smb_fname)->base_name);
1345         if (!NT_STATUS_IS_OK(status)) {
1346                 DEBUG(3,("filename_convert: check_name failed "
1347                         "for name %s with %s\n",
1348                         smb_fname_str_dbg(*pp_smb_fname),
1349                         nt_errstr(status) ));
1350                 TALLOC_FREE(*pp_smb_fname);
1351                 return status;
1352         }
1353
1354         return status;
1355 }