📄 receive.c
字号:
opcode = SVAL(req->in.hdr, SMB2_HDR_OPCODE); req->chain_offset = IVAL(req->in.hdr, SMB2_HDR_NEXT_COMMAND); req->seqnum = BVAL(req->in.hdr, SMB2_HDR_MESSAGE_ID); tid = IVAL(req->in.hdr, SMB2_HDR_TID); uid = BVAL(req->in.hdr, SMB2_HDR_SESSION_ID); req->session = smbsrv_session_find(req->smb_conn, uid, req->request_time); req->tcon = smbsrv_smb2_tcon_find(req->session, tid, req->request_time); errno = 0; /* TODO: check the seqnum */ switch (opcode) { case SMB2_OP_NEGPROT: smb2srv_negprot_recv(req); return NT_STATUS_OK; case SMB2_OP_SESSSETUP: smb2srv_sesssetup_recv(req); return NT_STATUS_OK; case SMB2_OP_LOGOFF: if (!req->session) goto nosession; smb2srv_logoff_recv(req); return NT_STATUS_OK; case SMB2_OP_TCON: if (!req->session) goto nosession; smb2srv_tcon_recv(req); return NT_STATUS_OK; case SMB2_OP_TDIS: if (!req->session) goto nosession; if (!req->tcon) goto notcon; smb2srv_tdis_recv(req); return NT_STATUS_OK; case SMB2_OP_CREATE: if (!req->session) goto nosession; if (!req->tcon) goto notcon; smb2srv_create_recv(req); return NT_STATUS_OK; case SMB2_OP_CLOSE: if (!req->session) goto nosession; if (!req->tcon) goto notcon; smb2srv_close_recv(req); return NT_STATUS_OK; case SMB2_OP_FLUSH: if (!req->session) goto nosession; if (!req->tcon) goto notcon; smb2srv_flush_recv(req); return NT_STATUS_OK; case SMB2_OP_READ: if (!req->session) goto nosession; if (!req->tcon) goto notcon; smb2srv_read_recv(req); return NT_STATUS_OK; case SMB2_OP_WRITE: if (!req->session) goto nosession; if (!req->tcon) goto notcon; smb2srv_write_recv(req); return NT_STATUS_OK; case SMB2_OP_LOCK: if (!req->session) goto nosession; if (!req->tcon) goto notcon; smb2srv_lock_recv(req); return NT_STATUS_OK; case SMB2_OP_IOCTL: if (!req->session) goto nosession; if (!req->tcon) goto notcon; smb2srv_ioctl_recv(req); return NT_STATUS_OK; case SMB2_OP_CANCEL: smb2srv_cancel_recv(req); return NT_STATUS_OK; case SMB2_OP_KEEPALIVE: smb2srv_keepalive_recv(req); return NT_STATUS_OK; case SMB2_OP_FIND: if (!req->session) goto nosession; if (!req->tcon) goto notcon; smb2srv_find_recv(req); return NT_STATUS_OK; case SMB2_OP_NOTIFY: if (!req->session) goto nosession; if (!req->tcon) goto notcon; smb2srv_notify_recv(req); return NT_STATUS_OK; case SMB2_OP_GETINFO: if (!req->session) goto nosession; if (!req->tcon) goto notcon; smb2srv_getinfo_recv(req); return NT_STATUS_OK; case SMB2_OP_SETINFO: if (!req->session) goto nosession; if (!req->tcon) goto notcon; smb2srv_setinfo_recv(req); return NT_STATUS_OK; case SMB2_OP_BREAK: if (!req->session) goto nosession; if (!req->tcon) goto notcon; smb2srv_break_recv(req); return NT_STATUS_OK; } DEBUG(1,("Invalid SMB2 opcode: 0x%04X\n", opcode)); smbsrv_terminate_connection(req->smb_conn, "Invalid SMB2 opcode"); return NT_STATUS_OK;nosession: smb2srv_send_error(req, NT_STATUS_USER_SESSION_DELETED); return NT_STATUS_OK;notcon: smb2srv_send_error(req, NT_STATUS_NETWORK_NAME_DELETED); return NT_STATUS_OK;}NTSTATUS smbsrv_recv_smb2_request(void *private, DATA_BLOB blob){ struct smbsrv_connection *smb_conn = talloc_get_type(private, struct smbsrv_connection); struct smb2srv_request *req; struct timeval cur_time = timeval_current(); uint32_t protocol_version; uint16_t buffer_code; uint32_t dynamic_size; smb_conn->statistics.last_request_time = cur_time; /* see if its a special NBT packet */ if (CVAL(blob.data,0) != 0) { DEBUG(2,("Special NBT packet on SMB2 connection")); smbsrv_terminate_connection(smb_conn, "Special NBT packet on SMB2 connection"); return NT_STATUS_OK; } if (blob.length < (NBT_HDR_SIZE + SMB2_MIN_SIZE)) { DEBUG(2,("Invalid SMB2 packet length count %ld\n", (long)blob.length)); smbsrv_terminate_connection(smb_conn, "Invalid SMB2 packet"); return NT_STATUS_OK; } protocol_version = IVAL(blob.data, NBT_HDR_SIZE); if (protocol_version != SMB2_MAGIC) { DEBUG(2,("Invalid SMB packet: protocol prefix: 0x%08X\n", protocol_version)); smbsrv_terminate_connection(smb_conn, "NON-SMB2 packet"); return NT_STATUS_OK; } req = smb2srv_init_request(smb_conn); NT_STATUS_HAVE_NO_MEMORY(req); req->in.buffer = talloc_steal(req, blob.data); req->in.size = blob.length; req->request_time = cur_time; req->in.allocated = req->in.size; req->in.hdr = req->in.buffer+ NBT_HDR_SIZE; req->in.body = req->in.hdr + SMB2_HDR_BODY; req->in.body_size = req->in.size - (SMB2_HDR_BODY+NBT_HDR_SIZE); req->in.dynamic = NULL; buffer_code = SVAL(req->in.body, 0); req->in.body_fixed = (buffer_code & ~1); dynamic_size = req->in.body_size - req->in.body_fixed; if (dynamic_size != 0 && (buffer_code & 1)) { req->in.dynamic = req->in.body + req->in.body_fixed; if (smb2_oob(&req->in, req->in.dynamic, dynamic_size)) { DEBUG(1,("SMB2 request invalid dynamic size 0x%x\n", dynamic_size)); smb2srv_send_error(req, NT_STATUS_INVALID_PARAMETER); return NT_STATUS_OK; } } smb2srv_setup_bufinfo(req); /* * TODO: - make sure the length field is 64 * - make sure it's a request */ return smb2srv_reply(req);}static NTSTATUS smb2srv_init_pending(struct smbsrv_connection *smb_conn){ smb_conn->requests2.idtree_req = idr_init(smb_conn); NT_STATUS_HAVE_NO_MEMORY(smb_conn->requests2.idtree_req); smb_conn->requests2.idtree_limit = 0x00FFFFFF & (UINT32_MAX - 1); smb_conn->requests2.list = NULL; return NT_STATUS_OK;}NTSTATUS smb2srv_queue_pending(struct smb2srv_request *req){ int id; if (req->pending_id) { return NT_STATUS_INTERNAL_ERROR; } id = idr_get_new_above(req->smb_conn->requests2.idtree_req, req, 1, req->smb_conn->requests2.idtree_limit); if (id == -1) { return NT_STATUS_INSUFFICIENT_RESOURCES; } DLIST_ADD_END(req->smb_conn->requests2.list, req, struct smb2srv_request *); req->pending_id = id; talloc_set_destructor(req, smb2srv_request_deny_destructor); smb2srv_send_error(req, STATUS_PENDING); talloc_set_destructor(req, smb2srv_request_destructor); return NT_STATUS_OK;}void smb2srv_cancel_recv(struct smb2srv_request *req){ uint32_t pending_id; uint32_t flags; void *p; struct smb2srv_request *r; if (!req->session) goto done; flags = IVAL(req->in.hdr, SMB2_HDR_FLAGS); pending_id = IVAL(req->in.hdr, SMB2_HDR_PID); if (!(flags & 0x00000002)) { /* TODO: what to do here? */ goto done; } p = idr_find(req->smb_conn->requests2.idtree_req, pending_id); if (!p) goto done; r = talloc_get_type(p, struct smb2srv_request); if (!r) goto done; if (!r->ntvfs) goto done; ntvfs_cancel(r->ntvfs);done: /* we never generate a reply for a SMB2 Cancel */ talloc_free(req);}/* * init the SMB2 protocol related stuff */NTSTATUS smbsrv_init_smb2_connection(struct smbsrv_connection *smb_conn){ NTSTATUS status; /* now initialise a few default values associated with this smb socket */ smb_conn->negotiate.max_send = 0xFFFF; /* this is the size that w2k uses, and it appears to be important for good performance */ smb_conn->negotiate.max_recv = lp_max_xmit(smb_conn->lp_ctx); smb_conn->negotiate.zone_offset = get_time_zone(time(NULL)); smb_conn->config.security = SEC_USER; smb_conn->config.nt_status_support = true; status = smbsrv_init_sessions(smb_conn, UINT64_MAX); NT_STATUS_NOT_OK_RETURN(status); status = smb2srv_init_pending(smb_conn); NT_STATUS_NOT_OK_RETURN(status); return NT_STATUS_OK; }
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -