1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
|
/*
* This file and its contents are supplied under the terms of the
* Common Development and Distribution License ("CDDL"), version 1.0.
* You may only use this file in accordance with the terms of version
* 1.0 of the CDDL.
*
* A full copy of the text of the CDDL should have accompanied this
* source. A copy of the CDDL is also available via the Internet at
* http://www.illumos.org/license/CDDL.
*/
/*
* Copyright 2017 Nexenta Systems, Inc. All rights reserved.
* Copyright 2022 RackTop Systems, Inc.
*/
/*
* Dispatch function for SMB2_TREE_CONNECT
*/
#include <smbsrv/smb2_kproto.h>
#define SMB2_SHARE_CAP_CA SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY
#define ANON_OR_GUEST (SMB_USER_FLAG_ANON | SMB_USER_FLAG_GUEST)
smb_sdrc_t
smb2_tree_connect(smb_request_t *sr)
{
smb_arg_tcon_t *tcon = &sr->sr_tcon;
smb_tree_t *tree = NULL;
smb_sdrc_t rv = SDRC_SUCCESS;
uint16_t StructureSize;
uint16_t PathOffset;
uint16_t PathLength;
uint8_t ShareType;
uint32_t ShareFlags;
uint32_t Capabilities;
uint32_t status;
int skip;
int rc;
/*
* SMB2 Tree Connect request
*/
rc = smb_mbc_decodef(
&sr->smb_data, "w..ww",
&StructureSize,
/* reserved */
&PathOffset,
&PathLength);
if (rc)
return (SDRC_ERROR);
/*
* We're normally positioned at the path name now,
* but there could be some padding before it.
*/
skip = (PathOffset + sr->smb2_cmd_hdr) -
sr->smb_data.chain_offset;
if (skip < 0)
return (SDRC_ERROR);
if (skip > 0)
(void) smb_mbc_decodef(&sr->smb_data, "#.", skip);
/*
* Get the path name
*/
rc = smb_mbc_decodef(
&sr->smb_data, "%#U",
sr, (uint_t)PathLength, &tcon->path);
if (rc)
return (SDRC_ERROR);
DTRACE_SMB2_START(op__TreeConnect, smb_request_t *, sr);
/*
* If Connection.Dialect is "3.1.1" and Session.IsAnonymous and
* Session.IsGuest are set to FALSE and the request is not signed
* or encrypted, then the server MUST disconnect the connection.
*/
if (sr->session->dialect >= SMB_VERS_3_11 &&
(sr->uid_user->u_flags & ANON_OR_GUEST) == 0 &&
(sr->smb2_hdr_flags & SMB2_FLAGS_SIGNED) == 0 &&
sr->encrypted == B_FALSE) {
rv = SDRC_DROP_VC;
status = NT_STATUS_ACCESS_DENIED;
goto errout;
}
/*
* [MS-SMB2] 3.3.5.7 Receiving an SMB2 TREE_CONNECT Request
*
* If RejectUnencryptedAccess is TRUE,
* global EncryptData or Share.EncryptData is TRUE,
* we support 3.x, and srv_cap doesn't indicate encryption support,
* return ACCESS_DENIED.
*
* This also applies to SMB1, so do it in smb_tree_connect_core.
*/
status = smb_tree_connect(sr);
errout:
sr->smb2_status = status;
DTRACE_SMB2_DONE(op__TreeConnect, smb_request_t *, sr);
if (status) {
(void) smb2sr_put_error(sr, status);
return (rv);
}
tree = sr->tid_tree;
/*
* Report the share type.
*/
switch (tree->t_res_type & STYPE_MASK) {
case STYPE_IPC:
ShareType = SMB2_SHARE_TYPE_PIPE;
break;
case STYPE_PRINTQ:
ShareType = SMB2_SHARE_TYPE_PRINT;
break;
case STYPE_DISKTREE:
default:
ShareType = SMB2_SHARE_TYPE_DISK;
break;
}
/*
* XXX These need work..
*/
if (tree->t_encrypt != SMB_CONFIG_DISABLED)
ShareFlags = SMB2_SHAREFLAG_ENCRYPT_DATA;
else
ShareFlags = 0;
Capabilities = 0;
if ((tree->t_flags & SMB_TREE_DFSROOT) != 0)
Capabilities |= SMB2_SHARE_CAP_DFS;
if ((tree->t_flags & SMB_TREE_CA) != 0)
Capabilities |= SMB2_SHARE_CAP_CA;
/*
* SMB2 Tree Connect reply
*/
(void) smb_mbc_encodef(
&sr->reply,
"wb.lll",
16, /* StructSize */ /* w */
ShareType, /* b */
ShareFlags, /* l */
Capabilities, /* l */
tree->t_access); /* l */
return (rv);
}
|
