Annotation of embedaddon/curl/lib/smb.c, revision 1.1

1.1     ! misho       1: /***************************************************************************
        !             2:  *                                  _   _ ____  _
        !             3:  *  Project                     ___| | | |  _ \| |
        !             4:  *                             / __| | | | |_) | |
        !             5:  *                            | (__| |_| |  _ <| |___
        !             6:  *                             \___|\___/|_| \_\_____|
        !             7:  *
        !             8:  * Copyright (C) 2014, Bill Nagel <wnagel@tycoint.com>, Exacq Technologies
        !             9:  * Copyright (C) 2016-2019, Daniel Stenberg, <daniel@haxx.se>, et al.
        !            10:  *
        !            11:  * This software is licensed as described in the file COPYING, which
        !            12:  * you should have received as part of this distribution. The terms
        !            13:  * are also available at https://curl.haxx.se/docs/copyright.html.
        !            14:  *
        !            15:  * You may opt to use, copy, modify, merge, publish, distribute and/or sell
        !            16:  * copies of the Software, and permit persons to whom the Software is
        !            17:  * furnished to do so, under the terms of the COPYING file.
        !            18:  *
        !            19:  * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
        !            20:  * KIND, either express or implied.
        !            21:  *
        !            22:  ***************************************************************************/
        !            23: 
        !            24: #include "curl_setup.h"
        !            25: 
        !            26: #if !defined(CURL_DISABLE_SMB) && defined(USE_NTLM) &&  \
        !            27:   (CURL_SIZEOF_CURL_OFF_T > 4)
        !            28: 
        !            29: #if !defined(USE_WINDOWS_SSPI) || defined(USE_WIN32_CRYPTO)
        !            30: 
        !            31: #define BUILDING_CURL_SMB_C
        !            32: 
        !            33: #ifdef HAVE_PROCESS_H
        !            34: #include <process.h>
        !            35: #ifdef CURL_WINDOWS_APP
        !            36: #define getpid GetCurrentProcessId
        !            37: #elif !defined(MSDOS)
        !            38: #define getpid _getpid
        !            39: #endif
        !            40: #endif
        !            41: 
        !            42: #include "smb.h"
        !            43: #include "urldata.h"
        !            44: #include "sendf.h"
        !            45: #include "multiif.h"
        !            46: #include "connect.h"
        !            47: #include "progress.h"
        !            48: #include "transfer.h"
        !            49: #include "vtls/vtls.h"
        !            50: #include "curl_ntlm_core.h"
        !            51: #include "escape.h"
        !            52: #include "curl_endian.h"
        !            53: 
        !            54: /* The last #include files should be: */
        !            55: #include "curl_memory.h"
        !            56: #include "memdebug.h"
        !            57: 
        !            58: /* Local API functions */
        !            59: static CURLcode smb_setup_connection(struct connectdata *conn);
        !            60: static CURLcode smb_connect(struct connectdata *conn, bool *done);
        !            61: static CURLcode smb_connection_state(struct connectdata *conn, bool *done);
        !            62: static CURLcode smb_do(struct connectdata *conn, bool *done);
        !            63: static CURLcode smb_request_state(struct connectdata *conn, bool *done);
        !            64: static CURLcode smb_done(struct connectdata *conn, CURLcode status,
        !            65:                          bool premature);
        !            66: static CURLcode smb_disconnect(struct connectdata *conn, bool dead);
        !            67: static int smb_getsock(struct connectdata *conn, curl_socket_t *socks);
        !            68: static CURLcode smb_parse_url_path(struct connectdata *conn);
        !            69: 
        !            70: /*
        !            71:  * SMB handler interface
        !            72:  */
        !            73: const struct Curl_handler Curl_handler_smb = {
        !            74:   "SMB",                                /* scheme */
        !            75:   smb_setup_connection,                 /* setup_connection */
        !            76:   smb_do,                               /* do_it */
        !            77:   smb_done,                             /* done */
        !            78:   ZERO_NULL,                            /* do_more */
        !            79:   smb_connect,                          /* connect_it */
        !            80:   smb_connection_state,                 /* connecting */
        !            81:   smb_request_state,                    /* doing */
        !            82:   smb_getsock,                          /* proto_getsock */
        !            83:   smb_getsock,                          /* doing_getsock */
        !            84:   ZERO_NULL,                            /* domore_getsock */
        !            85:   ZERO_NULL,                            /* perform_getsock */
        !            86:   smb_disconnect,                       /* disconnect */
        !            87:   ZERO_NULL,                            /* readwrite */
        !            88:   ZERO_NULL,                            /* connection_check */
        !            89:   PORT_SMB,                             /* defport */
        !            90:   CURLPROTO_SMB,                        /* protocol */
        !            91:   PROTOPT_NONE                          /* flags */
        !            92: };
        !            93: 
        !            94: #ifdef USE_SSL
        !            95: /*
        !            96:  * SMBS handler interface
        !            97:  */
        !            98: const struct Curl_handler Curl_handler_smbs = {
        !            99:   "SMBS",                               /* scheme */
        !           100:   smb_setup_connection,                 /* setup_connection */
        !           101:   smb_do,                               /* do_it */
        !           102:   smb_done,                             /* done */
        !           103:   ZERO_NULL,                            /* do_more */
        !           104:   smb_connect,                          /* connect_it */
        !           105:   smb_connection_state,                 /* connecting */
        !           106:   smb_request_state,                    /* doing */
        !           107:   smb_getsock,                          /* proto_getsock */
        !           108:   smb_getsock,                          /* doing_getsock */
        !           109:   ZERO_NULL,                            /* domore_getsock */
        !           110:   ZERO_NULL,                            /* perform_getsock */
        !           111:   smb_disconnect,                       /* disconnect */
        !           112:   ZERO_NULL,                            /* readwrite */
        !           113:   ZERO_NULL,                            /* connection_check */
        !           114:   PORT_SMBS,                            /* defport */
        !           115:   CURLPROTO_SMBS,                       /* protocol */
        !           116:   PROTOPT_SSL                           /* flags */
        !           117: };
        !           118: #endif
        !           119: 
        !           120: #define MAX_PAYLOAD_SIZE  0x8000
        !           121: #define MAX_MESSAGE_SIZE  (MAX_PAYLOAD_SIZE + 0x1000)
        !           122: #define CLIENTNAME        "curl"
        !           123: #define SERVICENAME       "?????"
        !           124: 
        !           125: /* Append a string to an SMB message */
        !           126: #define MSGCAT(str)                             \
        !           127:   strcpy(p, (str));                             \
        !           128:   p += strlen(str);
        !           129: 
        !           130: /* Append a null-terminated string to an SMB message */
        !           131: #define MSGCATNULL(str)                         \
        !           132:   strcpy(p, (str));                             \
        !           133:   p += strlen(str) + 1;
        !           134: 
        !           135: /* SMB is mostly little endian */
        !           136: #if (defined(__BYTE_ORDER__) && __BYTE_ORDER__ == __ORDER_BIG_ENDIAN__) || \
        !           137:   defined(__OS400__)
        !           138: static unsigned short smb_swap16(unsigned short x)
        !           139: {
        !           140:   return (unsigned short) ((x << 8) | ((x >> 8) & 0xff));
        !           141: }
        !           142: 
        !           143: static unsigned int smb_swap32(unsigned int x)
        !           144: {
        !           145:   return (x << 24) | ((x << 8) & 0xff0000) | ((x >> 8) & 0xff00) |
        !           146:     ((x >> 24) & 0xff);
        !           147: }
        !           148: 
        !           149: static curl_off_t smb_swap64(curl_off_t x)
        !           150: {
        !           151:   return ((curl_off_t) smb_swap32((unsigned int) x) << 32) |
        !           152:     smb_swap32((unsigned int) (x >> 32));
        !           153: }
        !           154: 
        !           155: #else
        !           156: #  define smb_swap16(x) (x)
        !           157: #  define smb_swap32(x) (x)
        !           158: #  define smb_swap64(x) (x)
        !           159: #endif
        !           160: 
        !           161: /* SMB request state */
        !           162: enum smb_req_state {
        !           163:   SMB_REQUESTING,
        !           164:   SMB_TREE_CONNECT,
        !           165:   SMB_OPEN,
        !           166:   SMB_DOWNLOAD,
        !           167:   SMB_UPLOAD,
        !           168:   SMB_CLOSE,
        !           169:   SMB_TREE_DISCONNECT,
        !           170:   SMB_DONE
        !           171: };
        !           172: 
        !           173: /* SMB request data */
        !           174: struct smb_request {
        !           175:   enum smb_req_state state;
        !           176:   char *path;
        !           177:   unsigned short tid; /* Even if we connect to the same tree as another */
        !           178:   unsigned short fid; /* request, the tid will be different */
        !           179:   CURLcode result;
        !           180: };
        !           181: 
        !           182: static void conn_state(struct connectdata *conn, enum smb_conn_state newstate)
        !           183: {
        !           184:   struct smb_conn *smbc = &conn->proto.smbc;
        !           185: #if defined(DEBUGBUILD) && !defined(CURL_DISABLE_VERBOSE_STRINGS)
        !           186:   /* For debug purposes */
        !           187:   static const char * const names[] = {
        !           188:     "SMB_NOT_CONNECTED",
        !           189:     "SMB_CONNECTING",
        !           190:     "SMB_NEGOTIATE",
        !           191:     "SMB_SETUP",
        !           192:     "SMB_CONNECTED",
        !           193:     /* LAST */
        !           194:   };
        !           195: 
        !           196:   if(smbc->state != newstate)
        !           197:     infof(conn->data, "SMB conn %p state change from %s to %s\n",
        !           198:           (void *)smbc, names[smbc->state], names[newstate]);
        !           199: #endif
        !           200: 
        !           201:   smbc->state = newstate;
        !           202: }
        !           203: 
        !           204: static void request_state(struct connectdata *conn,
        !           205:                           enum smb_req_state newstate)
        !           206: {
        !           207:   struct smb_request *req = conn->data->req.protop;
        !           208: #if defined(DEBUGBUILD) && !defined(CURL_DISABLE_VERBOSE_STRINGS)
        !           209:   /* For debug purposes */
        !           210:   static const char * const names[] = {
        !           211:     "SMB_REQUESTING",
        !           212:     "SMB_TREE_CONNECT",
        !           213:     "SMB_OPEN",
        !           214:     "SMB_DOWNLOAD",
        !           215:     "SMB_UPLOAD",
        !           216:     "SMB_CLOSE",
        !           217:     "SMB_TREE_DISCONNECT",
        !           218:     "SMB_DONE",
        !           219:     /* LAST */
        !           220:   };
        !           221: 
        !           222:   if(req->state != newstate)
        !           223:     infof(conn->data, "SMB request %p state change from %s to %s\n",
        !           224:           (void *)req, names[req->state], names[newstate]);
        !           225: #endif
        !           226: 
        !           227:   req->state = newstate;
        !           228: }
        !           229: 
        !           230: /* this should setup things in the connection, not in the easy
        !           231:    handle */
        !           232: static CURLcode smb_setup_connection(struct connectdata *conn)
        !           233: {
        !           234:   struct smb_request *req;
        !           235: 
        !           236:   /* Initialize the request state */
        !           237:   conn->data->req.protop = req = calloc(1, sizeof(struct smb_request));
        !           238:   if(!req)
        !           239:     return CURLE_OUT_OF_MEMORY;
        !           240: 
        !           241:   /* Parse the URL path */
        !           242:   return smb_parse_url_path(conn);
        !           243: }
        !           244: 
        !           245: static CURLcode smb_connect(struct connectdata *conn, bool *done)
        !           246: {
        !           247:   struct smb_conn *smbc = &conn->proto.smbc;
        !           248:   char *slash;
        !           249: 
        !           250:   (void) done;
        !           251: 
        !           252:   /* Check we have a username and password to authenticate with */
        !           253:   if(!conn->bits.user_passwd)
        !           254:     return CURLE_LOGIN_DENIED;
        !           255: 
        !           256:   /* Initialize the connection state */
        !           257:   smbc->state = SMB_CONNECTING;
        !           258:   smbc->recv_buf = malloc(MAX_MESSAGE_SIZE);
        !           259:   if(!smbc->recv_buf)
        !           260:     return CURLE_OUT_OF_MEMORY;
        !           261: 
        !           262:   /* Multiple requests are allowed with this connection */
        !           263:   connkeep(conn, "SMB default");
        !           264: 
        !           265:   /* Parse the username, domain, and password */
        !           266:   slash = strchr(conn->user, '/');
        !           267:   if(!slash)
        !           268:     slash = strchr(conn->user, '\\');
        !           269: 
        !           270:   if(slash) {
        !           271:     smbc->user = slash + 1;
        !           272:     smbc->domain = strdup(conn->user);
        !           273:     if(!smbc->domain)
        !           274:       return CURLE_OUT_OF_MEMORY;
        !           275:     smbc->domain[slash - conn->user] = 0;
        !           276:   }
        !           277:   else {
        !           278:     smbc->user = conn->user;
        !           279:     smbc->domain = strdup(conn->host.name);
        !           280:     if(!smbc->domain)
        !           281:       return CURLE_OUT_OF_MEMORY;
        !           282:   }
        !           283: 
        !           284:   return CURLE_OK;
        !           285: }
        !           286: 
        !           287: static CURLcode smb_recv_message(struct connectdata *conn, void **msg)
        !           288: {
        !           289:   struct smb_conn *smbc = &conn->proto.smbc;
        !           290:   char *buf = smbc->recv_buf;
        !           291:   ssize_t bytes_read;
        !           292:   size_t nbt_size;
        !           293:   size_t msg_size;
        !           294:   size_t len = MAX_MESSAGE_SIZE - smbc->got;
        !           295:   CURLcode result;
        !           296: 
        !           297:   result = Curl_read(conn, FIRSTSOCKET, buf + smbc->got, len, &bytes_read);
        !           298:   if(result)
        !           299:     return result;
        !           300: 
        !           301:   if(!bytes_read)
        !           302:     return CURLE_OK;
        !           303: 
        !           304:   smbc->got += bytes_read;
        !           305: 
        !           306:   /* Check for a 32-bit nbt header */
        !           307:   if(smbc->got < sizeof(unsigned int))
        !           308:     return CURLE_OK;
        !           309: 
        !           310:   nbt_size = Curl_read16_be((const unsigned char *)
        !           311:                             (buf + sizeof(unsigned short))) +
        !           312:     sizeof(unsigned int);
        !           313:   if(smbc->got < nbt_size)
        !           314:     return CURLE_OK;
        !           315: 
        !           316:   msg_size = sizeof(struct smb_header);
        !           317:   if(nbt_size >= msg_size + 1) {
        !           318:     /* Add the word count */
        !           319:     msg_size += 1 + ((unsigned char) buf[msg_size]) * sizeof(unsigned short);
        !           320:     if(nbt_size >= msg_size + sizeof(unsigned short)) {
        !           321:       /* Add the byte count */
        !           322:       msg_size += sizeof(unsigned short) +
        !           323:         Curl_read16_le((const unsigned char *)&buf[msg_size]);
        !           324:       if(nbt_size < msg_size)
        !           325:         return CURLE_READ_ERROR;
        !           326:     }
        !           327:   }
        !           328: 
        !           329:   *msg = buf;
        !           330: 
        !           331:   return CURLE_OK;
        !           332: }
        !           333: 
        !           334: static void smb_pop_message(struct connectdata *conn)
        !           335: {
        !           336:   struct smb_conn *smbc = &conn->proto.smbc;
        !           337: 
        !           338:   smbc->got = 0;
        !           339: }
        !           340: 
        !           341: static void smb_format_message(struct connectdata *conn, struct smb_header *h,
        !           342:                                unsigned char cmd, size_t len)
        !           343: {
        !           344:   struct smb_conn *smbc = &conn->proto.smbc;
        !           345:   struct smb_request *req = conn->data->req.protop;
        !           346:   unsigned int pid;
        !           347: 
        !           348:   memset(h, 0, sizeof(*h));
        !           349:   h->nbt_length = htons((unsigned short) (sizeof(*h) - sizeof(unsigned int) +
        !           350:                                           len));
        !           351:   memcpy((char *)h->magic, "\xffSMB", 4);
        !           352:   h->command = cmd;
        !           353:   h->flags = SMB_FLAGS_CANONICAL_PATHNAMES | SMB_FLAGS_CASELESS_PATHNAMES;
        !           354:   h->flags2 = smb_swap16(SMB_FLAGS2_IS_LONG_NAME | SMB_FLAGS2_KNOWS_LONG_NAME);
        !           355:   h->uid = smb_swap16(smbc->uid);
        !           356:   h->tid = smb_swap16(req->tid);
        !           357:   pid = getpid();
        !           358:   h->pid_high = smb_swap16((unsigned short)(pid >> 16));
        !           359:   h->pid = smb_swap16((unsigned short) pid);
        !           360: }
        !           361: 
        !           362: static CURLcode smb_send(struct connectdata *conn, ssize_t len,
        !           363:                          size_t upload_size)
        !           364: {
        !           365:   struct smb_conn *smbc = &conn->proto.smbc;
        !           366:   ssize_t bytes_written;
        !           367:   CURLcode result;
        !           368: 
        !           369:   result = Curl_write(conn, FIRSTSOCKET, conn->data->state.ulbuf,
        !           370:                       len, &bytes_written);
        !           371:   if(result)
        !           372:     return result;
        !           373: 
        !           374:   if(bytes_written != len) {
        !           375:     smbc->send_size = len;
        !           376:     smbc->sent = bytes_written;
        !           377:   }
        !           378: 
        !           379:   smbc->upload_size = upload_size;
        !           380: 
        !           381:   return CURLE_OK;
        !           382: }
        !           383: 
        !           384: static CURLcode smb_flush(struct connectdata *conn)
        !           385: {
        !           386:   struct smb_conn *smbc = &conn->proto.smbc;
        !           387:   ssize_t bytes_written;
        !           388:   ssize_t len = smbc->send_size - smbc->sent;
        !           389:   CURLcode result;
        !           390: 
        !           391:   if(!smbc->send_size)
        !           392:     return CURLE_OK;
        !           393: 
        !           394:   result = Curl_write(conn, FIRSTSOCKET,
        !           395:                       conn->data->state.ulbuf + smbc->sent,
        !           396:                       len, &bytes_written);
        !           397:   if(result)
        !           398:     return result;
        !           399: 
        !           400:   if(bytes_written != len)
        !           401:     smbc->sent += bytes_written;
        !           402:   else
        !           403:     smbc->send_size = 0;
        !           404: 
        !           405:   return CURLE_OK;
        !           406: }
        !           407: 
        !           408: static CURLcode smb_send_message(struct connectdata *conn, unsigned char cmd,
        !           409:                                  const void *msg, size_t msg_len)
        !           410: {
        !           411:   CURLcode result = Curl_get_upload_buffer(conn->data);
        !           412:   if(result)
        !           413:     return result;
        !           414:   smb_format_message(conn, (struct smb_header *)conn->data->state.ulbuf,
        !           415:                      cmd, msg_len);
        !           416:   memcpy(conn->data->state.ulbuf + sizeof(struct smb_header),
        !           417:          msg, msg_len);
        !           418: 
        !           419:   return smb_send(conn, sizeof(struct smb_header) + msg_len, 0);
        !           420: }
        !           421: 
        !           422: static CURLcode smb_send_negotiate(struct connectdata *conn)
        !           423: {
        !           424:   const char *msg = "\x00\x0c\x00\x02NT LM 0.12";
        !           425: 
        !           426:   return smb_send_message(conn, SMB_COM_NEGOTIATE, msg, 15);
        !           427: }
        !           428: 
        !           429: static CURLcode smb_send_setup(struct connectdata *conn)
        !           430: {
        !           431:   struct smb_conn *smbc = &conn->proto.smbc;
        !           432:   struct smb_setup msg;
        !           433:   char *p = msg.bytes;
        !           434:   unsigned char lm_hash[21];
        !           435:   unsigned char lm[24];
        !           436:   unsigned char nt_hash[21];
        !           437:   unsigned char nt[24];
        !           438: 
        !           439:   size_t byte_count = sizeof(lm) + sizeof(nt);
        !           440:   byte_count += strlen(smbc->user) + strlen(smbc->domain);
        !           441:   byte_count += strlen(OS) + strlen(CLIENTNAME) + 4; /* 4 null chars */
        !           442:   if(byte_count > sizeof(msg.bytes))
        !           443:     return CURLE_FILESIZE_EXCEEDED;
        !           444: 
        !           445:   Curl_ntlm_core_mk_lm_hash(conn->data, conn->passwd, lm_hash);
        !           446:   Curl_ntlm_core_lm_resp(lm_hash, smbc->challenge, lm);
        !           447: #ifdef USE_NTRESPONSES
        !           448:   Curl_ntlm_core_mk_nt_hash(conn->data, conn->passwd, nt_hash);
        !           449:   Curl_ntlm_core_lm_resp(nt_hash, smbc->challenge, nt);
        !           450: #else
        !           451:   memset(nt, 0, sizeof(nt));
        !           452: #endif
        !           453: 
        !           454:   memset(&msg, 0, sizeof(msg));
        !           455:   msg.word_count = SMB_WC_SETUP_ANDX;
        !           456:   msg.andx.command = SMB_COM_NO_ANDX_COMMAND;
        !           457:   msg.max_buffer_size = smb_swap16(MAX_MESSAGE_SIZE);
        !           458:   msg.max_mpx_count = smb_swap16(1);
        !           459:   msg.vc_number = smb_swap16(1);
        !           460:   msg.session_key = smb_swap32(smbc->session_key);
        !           461:   msg.capabilities = smb_swap32(SMB_CAP_LARGE_FILES);
        !           462:   msg.lengths[0] = smb_swap16(sizeof(lm));
        !           463:   msg.lengths[1] = smb_swap16(sizeof(nt));
        !           464:   memcpy(p, lm, sizeof(lm));
        !           465:   p += sizeof(lm);
        !           466:   memcpy(p, nt, sizeof(nt));
        !           467:   p += sizeof(nt);
        !           468:   MSGCATNULL(smbc->user);
        !           469:   MSGCATNULL(smbc->domain);
        !           470:   MSGCATNULL(OS);
        !           471:   MSGCATNULL(CLIENTNAME);
        !           472:   byte_count = p - msg.bytes;
        !           473:   msg.byte_count = smb_swap16((unsigned short)byte_count);
        !           474: 
        !           475:   return smb_send_message(conn, SMB_COM_SETUP_ANDX, &msg,
        !           476:                           sizeof(msg) - sizeof(msg.bytes) + byte_count);
        !           477: }
        !           478: 
        !           479: static CURLcode smb_send_tree_connect(struct connectdata *conn)
        !           480: {
        !           481:   struct smb_tree_connect msg;
        !           482:   struct smb_conn *smbc = &conn->proto.smbc;
        !           483:   char *p = msg.bytes;
        !           484: 
        !           485:   size_t byte_count = strlen(conn->host.name) + strlen(smbc->share);
        !           486:   byte_count += strlen(SERVICENAME) + 5; /* 2 nulls and 3 backslashes */
        !           487:   if(byte_count > sizeof(msg.bytes))
        !           488:     return CURLE_FILESIZE_EXCEEDED;
        !           489: 
        !           490:   memset(&msg, 0, sizeof(msg));
        !           491:   msg.word_count = SMB_WC_TREE_CONNECT_ANDX;
        !           492:   msg.andx.command = SMB_COM_NO_ANDX_COMMAND;
        !           493:   msg.pw_len = 0;
        !           494:   MSGCAT("\\\\");
        !           495:   MSGCAT(conn->host.name);
        !           496:   MSGCAT("\\");
        !           497:   MSGCATNULL(smbc->share);
        !           498:   MSGCATNULL(SERVICENAME); /* Match any type of service */
        !           499:   byte_count = p - msg.bytes;
        !           500:   msg.byte_count = smb_swap16((unsigned short)byte_count);
        !           501: 
        !           502:   return smb_send_message(conn, SMB_COM_TREE_CONNECT_ANDX, &msg,
        !           503:                           sizeof(msg) - sizeof(msg.bytes) + byte_count);
        !           504: }
        !           505: 
        !           506: static CURLcode smb_send_open(struct connectdata *conn)
        !           507: {
        !           508:   struct smb_request *req = conn->data->req.protop;
        !           509:   struct smb_nt_create msg;
        !           510:   size_t byte_count;
        !           511: 
        !           512:   if((strlen(req->path) + 1) > sizeof(msg.bytes))
        !           513:     return CURLE_FILESIZE_EXCEEDED;
        !           514: 
        !           515:   memset(&msg, 0, sizeof(msg));
        !           516:   msg.word_count = SMB_WC_NT_CREATE_ANDX;
        !           517:   msg.andx.command = SMB_COM_NO_ANDX_COMMAND;
        !           518:   byte_count = strlen(req->path);
        !           519:   msg.name_length = smb_swap16((unsigned short)byte_count);
        !           520:   msg.share_access = smb_swap32(SMB_FILE_SHARE_ALL);
        !           521:   if(conn->data->set.upload) {
        !           522:     msg.access = smb_swap32(SMB_GENERIC_READ | SMB_GENERIC_WRITE);
        !           523:     msg.create_disposition = smb_swap32(SMB_FILE_OVERWRITE_IF);
        !           524:   }
        !           525:   else {
        !           526:     msg.access = smb_swap32(SMB_GENERIC_READ);
        !           527:     msg.create_disposition = smb_swap32(SMB_FILE_OPEN);
        !           528:   }
        !           529:   msg.byte_count = smb_swap16((unsigned short) ++byte_count);
        !           530:   strcpy(msg.bytes, req->path);
        !           531: 
        !           532:   return smb_send_message(conn, SMB_COM_NT_CREATE_ANDX, &msg,
        !           533:                           sizeof(msg) - sizeof(msg.bytes) + byte_count);
        !           534: }
        !           535: 
        !           536: static CURLcode smb_send_close(struct connectdata *conn)
        !           537: {
        !           538:   struct smb_request *req = conn->data->req.protop;
        !           539:   struct smb_close msg;
        !           540: 
        !           541:   memset(&msg, 0, sizeof(msg));
        !           542:   msg.word_count = SMB_WC_CLOSE;
        !           543:   msg.fid = smb_swap16(req->fid);
        !           544: 
        !           545:   return smb_send_message(conn, SMB_COM_CLOSE, &msg, sizeof(msg));
        !           546: }
        !           547: 
        !           548: static CURLcode smb_send_tree_disconnect(struct connectdata *conn)
        !           549: {
        !           550:   struct smb_tree_disconnect msg;
        !           551: 
        !           552:   memset(&msg, 0, sizeof(msg));
        !           553: 
        !           554:   return smb_send_message(conn, SMB_COM_TREE_DISCONNECT, &msg, sizeof(msg));
        !           555: }
        !           556: 
        !           557: static CURLcode smb_send_read(struct connectdata *conn)
        !           558: {
        !           559:   struct smb_request *req = conn->data->req.protop;
        !           560:   curl_off_t offset = conn->data->req.offset;
        !           561:   struct smb_read msg;
        !           562: 
        !           563:   memset(&msg, 0, sizeof(msg));
        !           564:   msg.word_count = SMB_WC_READ_ANDX;
        !           565:   msg.andx.command = SMB_COM_NO_ANDX_COMMAND;
        !           566:   msg.fid = smb_swap16(req->fid);
        !           567:   msg.offset = smb_swap32((unsigned int) offset);
        !           568:   msg.offset_high = smb_swap32((unsigned int) (offset >> 32));
        !           569:   msg.min_bytes = smb_swap16(MAX_PAYLOAD_SIZE);
        !           570:   msg.max_bytes = smb_swap16(MAX_PAYLOAD_SIZE);
        !           571: 
        !           572:   return smb_send_message(conn, SMB_COM_READ_ANDX, &msg, sizeof(msg));
        !           573: }
        !           574: 
        !           575: static CURLcode smb_send_write(struct connectdata *conn)
        !           576: {
        !           577:   struct smb_write *msg;
        !           578:   struct smb_request *req = conn->data->req.protop;
        !           579:   curl_off_t offset = conn->data->req.offset;
        !           580:   curl_off_t upload_size = conn->data->req.size - conn->data->req.bytecount;
        !           581:   CURLcode result = Curl_get_upload_buffer(conn->data);
        !           582:   if(result)
        !           583:     return result;
        !           584:   msg = (struct smb_write *)conn->data->state.ulbuf;
        !           585: 
        !           586:   if(upload_size >= MAX_PAYLOAD_SIZE - 1) /* There is one byte of padding */
        !           587:     upload_size = MAX_PAYLOAD_SIZE - 1;
        !           588: 
        !           589:   memset(msg, 0, sizeof(*msg));
        !           590:   msg->word_count = SMB_WC_WRITE_ANDX;
        !           591:   msg->andx.command = SMB_COM_NO_ANDX_COMMAND;
        !           592:   msg->fid = smb_swap16(req->fid);
        !           593:   msg->offset = smb_swap32((unsigned int) offset);
        !           594:   msg->offset_high = smb_swap32((unsigned int) (offset >> 32));
        !           595:   msg->data_length = smb_swap16((unsigned short) upload_size);
        !           596:   msg->data_offset = smb_swap16(sizeof(*msg) - sizeof(unsigned int));
        !           597:   msg->byte_count = smb_swap16((unsigned short) (upload_size + 1));
        !           598: 
        !           599:   smb_format_message(conn, &msg->h, SMB_COM_WRITE_ANDX,
        !           600:                      sizeof(*msg) - sizeof(msg->h) + (size_t) upload_size);
        !           601: 
        !           602:   return smb_send(conn, sizeof(*msg), (size_t) upload_size);
        !           603: }
        !           604: 
        !           605: static CURLcode smb_send_and_recv(struct connectdata *conn, void **msg)
        !           606: {
        !           607:   struct smb_conn *smbc = &conn->proto.smbc;
        !           608:   CURLcode result;
        !           609:   *msg = NULL; /* if it returns early */
        !           610: 
        !           611:   /* Check if there is data in the transfer buffer */
        !           612:   if(!smbc->send_size && smbc->upload_size) {
        !           613:     size_t nread = smbc->upload_size > conn->data->set.upload_buffer_size ?
        !           614:       conn->data->set.upload_buffer_size :
        !           615:       smbc->upload_size;
        !           616:     conn->data->req.upload_fromhere = conn->data->state.ulbuf;
        !           617:     result = Curl_fillreadbuffer(conn, nread, &nread);
        !           618:     if(result && result != CURLE_AGAIN)
        !           619:       return result;
        !           620:     if(!nread)
        !           621:       return CURLE_OK;
        !           622: 
        !           623:     smbc->upload_size -= nread;
        !           624:     smbc->send_size = nread;
        !           625:     smbc->sent = 0;
        !           626:   }
        !           627: 
        !           628:   /* Check if there is data to send */
        !           629:   if(smbc->send_size) {
        !           630:     result = smb_flush(conn);
        !           631:     if(result)
        !           632:       return result;
        !           633:   }
        !           634: 
        !           635:   /* Check if there is still data to be sent */
        !           636:   if(smbc->send_size || smbc->upload_size)
        !           637:     return CURLE_AGAIN;
        !           638: 
        !           639:   return smb_recv_message(conn, msg);
        !           640: }
        !           641: 
        !           642: static CURLcode smb_connection_state(struct connectdata *conn, bool *done)
        !           643: {
        !           644:   struct smb_conn *smbc = &conn->proto.smbc;
        !           645:   struct smb_negotiate_response *nrsp;
        !           646:   struct smb_header *h;
        !           647:   CURLcode result;
        !           648:   void *msg = NULL;
        !           649: 
        !           650:   if(smbc->state == SMB_CONNECTING) {
        !           651: #ifdef USE_SSL
        !           652:     if((conn->handler->flags & PROTOPT_SSL)) {
        !           653:       bool ssl_done = FALSE;
        !           654:       result = Curl_ssl_connect_nonblocking(conn, FIRSTSOCKET, &ssl_done);
        !           655:       if(result && result != CURLE_AGAIN)
        !           656:         return result;
        !           657:       if(!ssl_done)
        !           658:         return CURLE_OK;
        !           659:     }
        !           660: #endif
        !           661: 
        !           662:     result = smb_send_negotiate(conn);
        !           663:     if(result) {
        !           664:       connclose(conn, "SMB: failed to send negotiate message");
        !           665:       return result;
        !           666:     }
        !           667: 
        !           668:     conn_state(conn, SMB_NEGOTIATE);
        !           669:   }
        !           670: 
        !           671:   /* Send the previous message and check for a response */
        !           672:   result = smb_send_and_recv(conn, &msg);
        !           673:   if(result && result != CURLE_AGAIN) {
        !           674:     connclose(conn, "SMB: failed to communicate");
        !           675:     return result;
        !           676:   }
        !           677: 
        !           678:   if(!msg)
        !           679:     return CURLE_OK;
        !           680: 
        !           681:   h = msg;
        !           682: 
        !           683:   switch(smbc->state) {
        !           684:   case SMB_NEGOTIATE:
        !           685:     if((smbc->got < sizeof(*nrsp) + sizeof(smbc->challenge) - 1) ||
        !           686:        h->status) {
        !           687:       connclose(conn, "SMB: negotiation failed");
        !           688:       return CURLE_COULDNT_CONNECT;
        !           689:     }
        !           690:     nrsp = msg;
        !           691:     memcpy(smbc->challenge, nrsp->bytes, sizeof(smbc->challenge));
        !           692:     smbc->session_key = smb_swap32(nrsp->session_key);
        !           693:     result = smb_send_setup(conn);
        !           694:     if(result) {
        !           695:       connclose(conn, "SMB: failed to send setup message");
        !           696:       return result;
        !           697:     }
        !           698:     conn_state(conn, SMB_SETUP);
        !           699:     break;
        !           700: 
        !           701:   case SMB_SETUP:
        !           702:     if(h->status) {
        !           703:       connclose(conn, "SMB: authentication failed");
        !           704:       return CURLE_LOGIN_DENIED;
        !           705:     }
        !           706:     smbc->uid = smb_swap16(h->uid);
        !           707:     conn_state(conn, SMB_CONNECTED);
        !           708:     *done = true;
        !           709:     break;
        !           710: 
        !           711:   default:
        !           712:     smb_pop_message(conn);
        !           713:     return CURLE_OK; /* ignore */
        !           714:   }
        !           715: 
        !           716:   smb_pop_message(conn);
        !           717: 
        !           718:   return CURLE_OK;
        !           719: }
        !           720: 
        !           721: /*
        !           722:  * Convert a timestamp from the Windows world (100 nsec units from 1 Jan 1601)
        !           723:  * to Posix time. Cap the output to fit within a time_t.
        !           724:  */
        !           725: static void get_posix_time(time_t *out, curl_off_t timestamp)
        !           726: {
        !           727:   timestamp -= 116444736000000000;
        !           728:   timestamp /= 10000000;
        !           729: #if SIZEOF_TIME_T < SIZEOF_CURL_OFF_T
        !           730:   if(timestamp > TIME_T_MAX)
        !           731:     *out = TIME_T_MAX;
        !           732:   else if(timestamp < TIME_T_MIN)
        !           733:     *out = TIME_T_MIN;
        !           734:   else
        !           735: #endif
        !           736:     *out = (time_t) timestamp;
        !           737: }
        !           738: 
        !           739: static CURLcode smb_request_state(struct connectdata *conn, bool *done)
        !           740: {
        !           741:   struct smb_request *req = conn->data->req.protop;
        !           742:   struct smb_header *h;
        !           743:   struct smb_conn *smbc = &conn->proto.smbc;
        !           744:   enum smb_req_state next_state = SMB_DONE;
        !           745:   unsigned short len;
        !           746:   unsigned short off;
        !           747:   CURLcode result;
        !           748:   void *msg = NULL;
        !           749:   const struct smb_nt_create_response *smb_m;
        !           750: 
        !           751:   /* Start the request */
        !           752:   if(req->state == SMB_REQUESTING) {
        !           753:     result = smb_send_tree_connect(conn);
        !           754:     if(result) {
        !           755:       connclose(conn, "SMB: failed to send tree connect message");
        !           756:       return result;
        !           757:     }
        !           758: 
        !           759:     request_state(conn, SMB_TREE_CONNECT);
        !           760:   }
        !           761: 
        !           762:   /* Send the previous message and check for a response */
        !           763:   result = smb_send_and_recv(conn, &msg);
        !           764:   if(result && result != CURLE_AGAIN) {
        !           765:     connclose(conn, "SMB: failed to communicate");
        !           766:     return result;
        !           767:   }
        !           768: 
        !           769:   if(!msg)
        !           770:     return CURLE_OK;
        !           771: 
        !           772:   h = msg;
        !           773: 
        !           774:   switch(req->state) {
        !           775:   case SMB_TREE_CONNECT:
        !           776:     if(h->status) {
        !           777:       req->result = CURLE_REMOTE_FILE_NOT_FOUND;
        !           778:       if(h->status == smb_swap32(SMB_ERR_NOACCESS))
        !           779:         req->result = CURLE_REMOTE_ACCESS_DENIED;
        !           780:       break;
        !           781:     }
        !           782:     req->tid = smb_swap16(h->tid);
        !           783:     next_state = SMB_OPEN;
        !           784:     break;
        !           785: 
        !           786:   case SMB_OPEN:
        !           787:     if(h->status || smbc->got < sizeof(struct smb_nt_create_response)) {
        !           788:       req->result = CURLE_REMOTE_FILE_NOT_FOUND;
        !           789:       if(h->status == smb_swap32(SMB_ERR_NOACCESS))
        !           790:         req->result = CURLE_REMOTE_ACCESS_DENIED;
        !           791:       next_state = SMB_TREE_DISCONNECT;
        !           792:       break;
        !           793:     }
        !           794:     smb_m = (const struct smb_nt_create_response*) msg;
        !           795:     req->fid = smb_swap16(smb_m->fid);
        !           796:     conn->data->req.offset = 0;
        !           797:     if(conn->data->set.upload) {
        !           798:       conn->data->req.size = conn->data->state.infilesize;
        !           799:       Curl_pgrsSetUploadSize(conn->data, conn->data->req.size);
        !           800:       next_state = SMB_UPLOAD;
        !           801:     }
        !           802:     else {
        !           803:       smb_m = (const struct smb_nt_create_response*) msg;
        !           804:       conn->data->req.size = smb_swap64(smb_m->end_of_file);
        !           805:       if(conn->data->req.size < 0) {
        !           806:         req->result = CURLE_WEIRD_SERVER_REPLY;
        !           807:         next_state = SMB_CLOSE;
        !           808:       }
        !           809:       else {
        !           810:         Curl_pgrsSetDownloadSize(conn->data, conn->data->req.size);
        !           811:         if(conn->data->set.get_filetime)
        !           812:           get_posix_time(&conn->data->info.filetime, smb_m->last_change_time);
        !           813:         next_state = SMB_DOWNLOAD;
        !           814:       }
        !           815:     }
        !           816:     break;
        !           817: 
        !           818:   case SMB_DOWNLOAD:
        !           819:     if(h->status || smbc->got < sizeof(struct smb_header) + 14) {
        !           820:       req->result = CURLE_RECV_ERROR;
        !           821:       next_state = SMB_CLOSE;
        !           822:       break;
        !           823:     }
        !           824:     len = Curl_read16_le(((const unsigned char *) msg) +
        !           825:                          sizeof(struct smb_header) + 11);
        !           826:     off = Curl_read16_le(((const unsigned char *) msg) +
        !           827:                          sizeof(struct smb_header) + 13);
        !           828:     if(len > 0) {
        !           829:       if(off + sizeof(unsigned int) + len > smbc->got) {
        !           830:         failf(conn->data, "Invalid input packet");
        !           831:         result = CURLE_RECV_ERROR;
        !           832:       }
        !           833:       else
        !           834:         result = Curl_client_write(conn, CLIENTWRITE_BODY,
        !           835:                                    (char *)msg + off + sizeof(unsigned int),
        !           836:                                    len);
        !           837:       if(result) {
        !           838:         req->result = result;
        !           839:         next_state = SMB_CLOSE;
        !           840:         break;
        !           841:       }
        !           842:     }
        !           843:     conn->data->req.bytecount += len;
        !           844:     conn->data->req.offset += len;
        !           845:     Curl_pgrsSetDownloadCounter(conn->data, conn->data->req.bytecount);
        !           846:     next_state = (len < MAX_PAYLOAD_SIZE) ? SMB_CLOSE : SMB_DOWNLOAD;
        !           847:     break;
        !           848: 
        !           849:   case SMB_UPLOAD:
        !           850:     if(h->status || smbc->got < sizeof(struct smb_header) + 6) {
        !           851:       req->result = CURLE_UPLOAD_FAILED;
        !           852:       next_state = SMB_CLOSE;
        !           853:       break;
        !           854:     }
        !           855:     len = Curl_read16_le(((const unsigned char *) msg) +
        !           856:                          sizeof(struct smb_header) + 5);
        !           857:     conn->data->req.bytecount += len;
        !           858:     conn->data->req.offset += len;
        !           859:     Curl_pgrsSetUploadCounter(conn->data, conn->data->req.bytecount);
        !           860:     if(conn->data->req.bytecount >= conn->data->req.size)
        !           861:       next_state = SMB_CLOSE;
        !           862:     else
        !           863:       next_state = SMB_UPLOAD;
        !           864:     break;
        !           865: 
        !           866:   case SMB_CLOSE:
        !           867:     /* We don't care if the close failed, proceed to tree disconnect anyway */
        !           868:     next_state = SMB_TREE_DISCONNECT;
        !           869:     break;
        !           870: 
        !           871:   case SMB_TREE_DISCONNECT:
        !           872:     next_state = SMB_DONE;
        !           873:     break;
        !           874: 
        !           875:   default:
        !           876:     smb_pop_message(conn);
        !           877:     return CURLE_OK; /* ignore */
        !           878:   }
        !           879: 
        !           880:   smb_pop_message(conn);
        !           881: 
        !           882:   switch(next_state) {
        !           883:   case SMB_OPEN:
        !           884:     result = smb_send_open(conn);
        !           885:     break;
        !           886: 
        !           887:   case SMB_DOWNLOAD:
        !           888:     result = smb_send_read(conn);
        !           889:     break;
        !           890: 
        !           891:   case SMB_UPLOAD:
        !           892:     result = smb_send_write(conn);
        !           893:     break;
        !           894: 
        !           895:   case SMB_CLOSE:
        !           896:     result = smb_send_close(conn);
        !           897:     break;
        !           898: 
        !           899:   case SMB_TREE_DISCONNECT:
        !           900:     result = smb_send_tree_disconnect(conn);
        !           901:     break;
        !           902: 
        !           903:   case SMB_DONE:
        !           904:     result = req->result;
        !           905:     *done = true;
        !           906:     break;
        !           907: 
        !           908:   default:
        !           909:     break;
        !           910:   }
        !           911: 
        !           912:   if(result) {
        !           913:     connclose(conn, "SMB: failed to send message");
        !           914:     return result;
        !           915:   }
        !           916: 
        !           917:   request_state(conn, next_state);
        !           918: 
        !           919:   return CURLE_OK;
        !           920: }
        !           921: 
        !           922: static CURLcode smb_done(struct connectdata *conn, CURLcode status,
        !           923:                          bool premature)
        !           924: {
        !           925:   (void) premature;
        !           926:   Curl_safefree(conn->data->req.protop);
        !           927:   return status;
        !           928: }
        !           929: 
        !           930: static CURLcode smb_disconnect(struct connectdata *conn, bool dead)
        !           931: {
        !           932:   struct smb_conn *smbc = &conn->proto.smbc;
        !           933:   (void) dead;
        !           934:   Curl_safefree(smbc->share);
        !           935:   Curl_safefree(smbc->domain);
        !           936:   Curl_safefree(smbc->recv_buf);
        !           937:   return CURLE_OK;
        !           938: }
        !           939: 
        !           940: static int smb_getsock(struct connectdata *conn, curl_socket_t *socks)
        !           941: {
        !           942:   socks[0] = conn->sock[FIRSTSOCKET];
        !           943:   return GETSOCK_READSOCK(0) | GETSOCK_WRITESOCK(0);
        !           944: }
        !           945: 
        !           946: static CURLcode smb_do(struct connectdata *conn, bool *done)
        !           947: {
        !           948:   struct smb_conn *smbc = &conn->proto.smbc;
        !           949: 
        !           950:   *done = FALSE;
        !           951:   if(smbc->share) {
        !           952:     return CURLE_OK;
        !           953:   }
        !           954:   return CURLE_URL_MALFORMAT;
        !           955: }
        !           956: 
        !           957: static CURLcode smb_parse_url_path(struct connectdata *conn)
        !           958: {
        !           959:   struct Curl_easy *data = conn->data;
        !           960:   struct smb_request *req = data->req.protop;
        !           961:   struct smb_conn *smbc = &conn->proto.smbc;
        !           962:   char *path;
        !           963:   char *slash;
        !           964: 
        !           965:   /* URL decode the path */
        !           966:   CURLcode result = Curl_urldecode(data, data->state.up.path, 0, &path, NULL,
        !           967:                                    TRUE);
        !           968:   if(result)
        !           969:     return result;
        !           970: 
        !           971:   /* Parse the path for the share */
        !           972:   smbc->share = strdup((*path == '/' || *path == '\\') ? path + 1 : path);
        !           973:   free(path);
        !           974:   if(!smbc->share)
        !           975:     return CURLE_OUT_OF_MEMORY;
        !           976: 
        !           977:   slash = strchr(smbc->share, '/');
        !           978:   if(!slash)
        !           979:     slash = strchr(smbc->share, '\\');
        !           980: 
        !           981:   /* The share must be present */
        !           982:   if(!slash) {
        !           983:     Curl_safefree(smbc->share);
        !           984:     return CURLE_URL_MALFORMAT;
        !           985:   }
        !           986: 
        !           987:   /* Parse the path for the file path converting any forward slashes into
        !           988:      backslashes */
        !           989:   *slash++ = 0;
        !           990:   req->path = slash;
        !           991: 
        !           992:   for(; *slash; slash++) {
        !           993:     if(*slash == '/')
        !           994:       *slash = '\\';
        !           995:   }
        !           996:   return CURLE_OK;
        !           997: }
        !           998: 
        !           999: #endif /* !USE_WINDOWS_SSPI || USE_WIN32_CRYPTO */
        !          1000: 
        !          1001: #endif /* CURL_DISABLE_SMB && USE_NTLM && CURL_SIZEOF_CURL_OFF_T > 4 */

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>