13db3f65cSamw /* 23db3f65cSamw * CDDL HEADER START 33db3f65cSamw * 43db3f65cSamw * The contents of this file are subject to the terms of the 53db3f65cSamw * Common Development and Distribution License (the "License"). 63db3f65cSamw * You may not use this file except in compliance with the License. 73db3f65cSamw * 83db3f65cSamw * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 93db3f65cSamw * or http://www.opensolaris.org/os/licensing. 103db3f65cSamw * See the License for the specific language governing permissions 113db3f65cSamw * and limitations under the License. 123db3f65cSamw * 133db3f65cSamw * When distributing Covered Code, include this CDDL HEADER in each 143db3f65cSamw * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 153db3f65cSamw * If applicable, add the following below this CDDL HEADER, with the 163db3f65cSamw * fields enclosed by brackets "[]" replaced with your own identifying 173db3f65cSamw * information: Portions Copyright [yyyy] [name of copyright owner] 183db3f65cSamw * 193db3f65cSamw * CDDL HEADER END 203db3f65cSamw */ 213db3f65cSamw /* 22148c5f43SAlan Wright * Copyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved. 23adee6784SGordon Ross * Copyright 2018 Nexenta Systems, Inc. All rights reserved. 243db3f65cSamw */ 253db3f65cSamw 263db3f65cSamw /* 273db3f65cSamw * This module provides the interface to NDR RPC. 283db3f65cSamw */ 293db3f65cSamw 303db3f65cSamw #include <sys/stat.h> 313db3f65cSamw #include <sys/uio.h> 323db3f65cSamw #include <sys/ksynch.h> 3368b2bbf2SGordon Ross #include <sys/stropts.h> 3468b2bbf2SGordon Ross #include <sys/socket.h> 3568b2bbf2SGordon Ross #include <sys/filio.h> 36bbf6f00cSJordan Brown #include <smbsrv/smb_kproto.h> 373db3f65cSamw #include <smbsrv/smb_xdr.h> 38adee6784SGordon Ross #include <smb/winioctl.h> 39a90cf9f2SGordon Ross 40a90cf9f2SGordon Ross static uint32_t smb_opipe_transceive(smb_request_t *, smb_fsctl_t *); 413db3f65cSamw 4268b2bbf2SGordon Ross /* 4368b2bbf2SGordon Ross * Allocate a new opipe and return it, or NULL, in which case 4468b2bbf2SGordon Ross * the caller will report "internal error". 4568b2bbf2SGordon Ross */ 4668b2bbf2SGordon Ross static smb_opipe_t * 4768b2bbf2SGordon Ross smb_opipe_alloc(smb_request_t *sr) 489fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States { 4968b2bbf2SGordon Ross smb_server_t *sv = sr->sr_server; 509fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_opipe_t *opipe; 5168b2bbf2SGordon Ross ksocket_t sock; 5268b2bbf2SGordon Ross 5368b2bbf2SGordon Ross if (ksocket_socket(&sock, AF_UNIX, SOCK_STREAM, 0, 5468b2bbf2SGordon Ross KSOCKET_SLEEP, sr->user_cr) != 0) 5568b2bbf2SGordon Ross return (NULL); 569fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 578622ec45SGordon Ross opipe = kmem_cache_alloc(smb_cache_opipe, KM_SLEEP); 589fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 599fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States bzero(opipe, sizeof (smb_opipe_t)); 609fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States mutex_init(&opipe->p_mutex, NULL, MUTEX_DEFAULT, NULL); 619fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States cv_init(&opipe->p_cv, NULL, CV_DEFAULT, NULL); 629fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States opipe->p_magic = SMB_OPIPE_MAGIC; 639fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States opipe->p_server = sv; 6468b2bbf2SGordon Ross opipe->p_refcnt = 1; 6568b2bbf2SGordon Ross opipe->p_socket = sock; 669fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 679fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States return (opipe); 689fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States } 699fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 7068b2bbf2SGordon Ross /* 7168b2bbf2SGordon Ross * Destroy an opipe. This is normally called from smb_ofile_delete 7268b2bbf2SGordon Ross * when the ofile has no more references and is about to be free'd. 7368b2bbf2SGordon Ross * This is also called here in error handling code paths, before 7468b2bbf2SGordon Ross * the opipe is installed under an ofile. 7568b2bbf2SGordon Ross */ 769fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States void 779fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_opipe_dealloc(smb_opipe_t *opipe) 789fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States { 799fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_server_t *sv; 809fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 819fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States SMB_OPIPE_VALID(opipe); 829fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States sv = opipe->p_server; 839fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States SMB_SERVER_VALID(sv); 849fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 8568b2bbf2SGordon Ross /* 8668b2bbf2SGordon Ross * This is called in the error path when opening, 8768b2bbf2SGordon Ross * in which case we close the socket here. 8868b2bbf2SGordon Ross */ 8968b2bbf2SGordon Ross if (opipe->p_socket != NULL) 9068b2bbf2SGordon Ross (void) ksocket_close(opipe->p_socket, zone_kcred()); 919fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 929fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States opipe->p_magic = (uint32_t)~SMB_OPIPE_MAGIC; 939fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States cv_destroy(&opipe->p_cv); 949fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States mutex_destroy(&opipe->p_mutex); 959fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 968622ec45SGordon Ross kmem_cache_free(smb_cache_opipe, opipe); 979fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States } 989fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 99b210fedeSGordon Ross /* 100b210fedeSGordon Ross * Unblock a request that might be blocked reading some 101b210fedeSGordon Ross * pipe (AF_UNIX socket). We don't have an easy way to 102b210fedeSGordon Ross * interrupt just the thread servicing this request, so 103b210fedeSGordon Ross * we shutdown(3socket) the socket, waking all readers. 104b210fedeSGordon Ross * That's a bit heavy-handed, making the socket unusable 105b210fedeSGordon Ross * after this, so we do this only when disconnecting a 106b210fedeSGordon Ross * session (i.e. stopping the SMB service), and not when 107b210fedeSGordon Ross * handling an SMB2_cancel or SMB_nt_cancel request. 108b210fedeSGordon Ross */ 109b210fedeSGordon Ross static void 110b210fedeSGordon Ross smb_opipe_cancel(smb_request_t *sr) 111b210fedeSGordon Ross { 112b210fedeSGordon Ross ksocket_t so; 113b210fedeSGordon Ross 114*811599a4SMatt Barden switch (sr->session->s_state) { 115*811599a4SMatt Barden case SMB_SESSION_STATE_DISCONNECTED: 116*811599a4SMatt Barden case SMB_SESSION_STATE_TERMINATED: 117*811599a4SMatt Barden if ((so = sr->cancel_arg2) != NULL) 118*811599a4SMatt Barden (void) ksocket_shutdown(so, SHUT_RDWR, sr->user_cr); 119*811599a4SMatt Barden break; 120b210fedeSGordon Ross } 121b210fedeSGordon Ross } 122b210fedeSGordon Ross 1233db3f65cSamw /* 12468b2bbf2SGordon Ross * Helper for open: build pipe name and connect. 1253db3f65cSamw */ 12668b2bbf2SGordon Ross static int 12768b2bbf2SGordon Ross smb_opipe_connect(smb_request_t *sr, smb_opipe_t *opipe) 1283db3f65cSamw { 12968b2bbf2SGordon Ross struct sockaddr_un saddr; 130148c5f43SAlan Wright smb_arg_open_t *op = &sr->sr_open; 13168b2bbf2SGordon Ross const char *name; 13268b2bbf2SGordon Ross int rc; 1333db3f65cSamw 13468b2bbf2SGordon Ross name = op->fqi.fq_path.pn_path; 13568b2bbf2SGordon Ross name += strspn(name, "\\"); 13668b2bbf2SGordon Ross if (smb_strcasecmp(name, "PIPE", 4) == 0) { 13768b2bbf2SGordon Ross name += 4; 13868b2bbf2SGordon Ross name += strspn(name, "\\"); 13968b2bbf2SGordon Ross } 14068b2bbf2SGordon Ross (void) strlcpy(opipe->p_name, name, SMB_OPIPE_MAXNAME); 14168b2bbf2SGordon Ross (void) smb_strlwr(opipe->p_name); 1423db3f65cSamw 14368b2bbf2SGordon Ross bzero(&saddr, sizeof (saddr)); 14468b2bbf2SGordon Ross saddr.sun_family = AF_UNIX; 14568b2bbf2SGordon Ross (void) snprintf(saddr.sun_path, sizeof (saddr.sun_path), 14668b2bbf2SGordon Ross "%s/%s", SMB_PIPE_DIR, opipe->p_name); 14768b2bbf2SGordon Ross rc = ksocket_connect(opipe->p_socket, (struct sockaddr *)&saddr, 14868b2bbf2SGordon Ross sizeof (saddr), sr->user_cr); 149b7301bf5SGordon Ross 15068b2bbf2SGordon Ross return (rc); 15168b2bbf2SGordon Ross } 152c8ec8eeaSjose borrego 15368b2bbf2SGordon Ross /* 15468b2bbf2SGordon Ross * Helper for open: encode and send the user info. 15568b2bbf2SGordon Ross * 15668b2bbf2SGordon Ross * We send information about this client + user to the 15768b2bbf2SGordon Ross * pipe service so it can use it for access checks. 15868b2bbf2SGordon Ross * The service MAY deny the open based on this info, 15968b2bbf2SGordon Ross * (i.e. anonymous session trying to open a pipe that 16068b2bbf2SGordon Ross * requires authentication) in which case we will read 16168b2bbf2SGordon Ross * an error status from the service and return that. 16268b2bbf2SGordon Ross */ 16368b2bbf2SGordon Ross static void 16468b2bbf2SGordon Ross smb_opipe_send_userinfo(smb_request_t *sr, smb_opipe_t *opipe, 16568b2bbf2SGordon Ross smb_error_t *errp) 16668b2bbf2SGordon Ross { 16768b2bbf2SGordon Ross XDR xdrs; 16868b2bbf2SGordon Ross smb_netuserinfo_t nui; 16968b2bbf2SGordon Ross smb_pipehdr_t phdr; 17068b2bbf2SGordon Ross char *buf; 17168b2bbf2SGordon Ross uint32_t buflen; 17268b2bbf2SGordon Ross uint32_t status; 17368b2bbf2SGordon Ross size_t iocnt = 0; 17468b2bbf2SGordon Ross int rc; 1758b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States 17668b2bbf2SGordon Ross /* 17768b2bbf2SGordon Ross * Any errors building the XDR message etc. 17868b2bbf2SGordon Ross */ 17968b2bbf2SGordon Ross errp->status = NT_STATUS_INTERNAL_ERROR; 1803db3f65cSamw 18168b2bbf2SGordon Ross smb_user_netinfo_init(sr->uid_user, &nui); 18268b2bbf2SGordon Ross phdr.ph_magic = SMB_PIPE_HDR_MAGIC; 18368b2bbf2SGordon Ross phdr.ph_uilen = xdr_sizeof(smb_netuserinfo_xdr, &nui); 1848b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States 18568b2bbf2SGordon Ross buflen = sizeof (phdr) + phdr.ph_uilen; 18668b2bbf2SGordon Ross buf = kmem_alloc(buflen, KM_SLEEP); 1873db3f65cSamw 18868b2bbf2SGordon Ross bcopy(&phdr, buf, sizeof (phdr)); 18968b2bbf2SGordon Ross xdrmem_create(&xdrs, buf + sizeof (phdr), 19068b2bbf2SGordon Ross buflen - (sizeof (phdr)), XDR_ENCODE); 19168b2bbf2SGordon Ross if (!smb_netuserinfo_xdr(&xdrs, &nui)) 19268b2bbf2SGordon Ross goto out; 1933db3f65cSamw 194b210fedeSGordon Ross mutex_enter(&sr->sr_mutex); 195b210fedeSGordon Ross if (sr->sr_state != SMB_REQ_STATE_ACTIVE) { 196b210fedeSGordon Ross mutex_exit(&sr->sr_mutex); 197b210fedeSGordon Ross errp->status = NT_STATUS_CANCELLED; 198b210fedeSGordon Ross goto out; 199b210fedeSGordon Ross } 200b210fedeSGordon Ross sr->sr_state = SMB_REQ_STATE_WAITING_PIPE; 201b210fedeSGordon Ross sr->cancel_method = smb_opipe_cancel; 202b210fedeSGordon Ross sr->cancel_arg2 = opipe->p_socket; 203b210fedeSGordon Ross mutex_exit(&sr->sr_mutex); 20468b2bbf2SGordon Ross 20568b2bbf2SGordon Ross rc = ksocket_send(opipe->p_socket, buf, buflen, 0, 20668b2bbf2SGordon Ross &iocnt, sr->user_cr); 20768b2bbf2SGordon Ross if (rc == 0 && iocnt != buflen) 20868b2bbf2SGordon Ross rc = EIO; 209b210fedeSGordon Ross if (rc == 0) 210b210fedeSGordon Ross rc = ksocket_recv(opipe->p_socket, &status, sizeof (status), 211b210fedeSGordon Ross 0, &iocnt, sr->user_cr); 212b210fedeSGordon Ross if (rc == 0 && iocnt != sizeof (status)) 213b210fedeSGordon Ross rc = EIO; 214b210fedeSGordon Ross 215b210fedeSGordon Ross mutex_enter(&sr->sr_mutex); 216b210fedeSGordon Ross sr->cancel_method = NULL; 217b210fedeSGordon Ross sr->cancel_arg2 = NULL; 218b210fedeSGordon Ross switch (sr->sr_state) { 219b210fedeSGordon Ross case SMB_REQ_STATE_WAITING_PIPE: 220b210fedeSGordon Ross sr->sr_state = SMB_REQ_STATE_ACTIVE; 221b210fedeSGordon Ross break; 222b210fedeSGordon Ross case SMB_REQ_STATE_CANCEL_PENDING: 223b210fedeSGordon Ross sr->sr_state = SMB_REQ_STATE_CANCELLED; 224b210fedeSGordon Ross rc = EINTR; 225b210fedeSGordon Ross break; 226b210fedeSGordon Ross default: 227b210fedeSGordon Ross /* keep rc from above */ 228b210fedeSGordon Ross break; 229b210fedeSGordon Ross } 230b210fedeSGordon Ross mutex_exit(&sr->sr_mutex); 2313db3f65cSamw 2323db3f65cSamw 2333db3f65cSamw /* 23468b2bbf2SGordon Ross * Return the status we read from the pipe service, 23568b2bbf2SGordon Ross * normally NT_STATUS_SUCCESS, but could be something 23668b2bbf2SGordon Ross * else like NT_STATUS_ACCESS_DENIED. 2373db3f65cSamw */ 238b210fedeSGordon Ross switch (rc) { 239b210fedeSGordon Ross case 0: 240b210fedeSGordon Ross errp->status = status; 241b210fedeSGordon Ross break; 242b210fedeSGordon Ross case EINTR: 243b210fedeSGordon Ross errp->status = NT_STATUS_CANCELLED; 244b210fedeSGordon Ross break; 245b210fedeSGordon Ross /* 246b210fedeSGordon Ross * If we fail sending the netuserinfo or recv'ing the 247b210fedeSGordon Ross * status reponse, we have probably run into the limit 248b210fedeSGordon Ross * on the number of open pipes. That's this status: 249b210fedeSGordon Ross */ 250b210fedeSGordon Ross default: 251b210fedeSGordon Ross errp->status = NT_STATUS_PIPE_NOT_AVAILABLE; 252b210fedeSGordon Ross break; 253b210fedeSGordon Ross } 25468b2bbf2SGordon Ross 25568b2bbf2SGordon Ross out: 25668b2bbf2SGordon Ross xdr_destroy(&xdrs); 25768b2bbf2SGordon Ross kmem_free(buf, buflen); 25868b2bbf2SGordon Ross smb_user_netinfo_fini(&nui); 2593db3f65cSamw } 2603db3f65cSamw 2613db3f65cSamw /* 26268b2bbf2SGordon Ross * smb_opipe_open 2633db3f65cSamw * 26468b2bbf2SGordon Ross * Open an RPC named pipe. This routine should be called if 26568b2bbf2SGordon Ross * a file open is requested on a share of type STYPE_IPC. 26668b2bbf2SGordon Ross * If we recognize the pipe, we setup a new ofile. 2673db3f65cSamw * 26868b2bbf2SGordon Ross * Returns 0 on success, Otherwise an NT status code. 2693db3f65cSamw */ 27068b2bbf2SGordon Ross int 27168b2bbf2SGordon Ross smb_opipe_open(smb_request_t *sr, uint32_t uniqid) 2723db3f65cSamw { 27368b2bbf2SGordon Ross smb_arg_open_t *op = &sr->sr_open; 274c5f48fa5SGordon Ross smb_attr_t *ap = &op->fqi.fq_fattr; 27568b2bbf2SGordon Ross smb_ofile_t *ofile; 27668b2bbf2SGordon Ross smb_opipe_t *opipe; 27768b2bbf2SGordon Ross smb_error_t err; 2783db3f65cSamw 27968b2bbf2SGordon Ross opipe = smb_opipe_alloc(sr); 28068b2bbf2SGordon Ross if (opipe == NULL) 28168b2bbf2SGordon Ross return (NT_STATUS_INTERNAL_ERROR); 2823db3f65cSamw 28368b2bbf2SGordon Ross if (smb_opipe_connect(sr, opipe) != 0) { 28468b2bbf2SGordon Ross smb_opipe_dealloc(opipe); 28568b2bbf2SGordon Ross return (NT_STATUS_OBJECT_NAME_NOT_FOUND); 2863db3f65cSamw } 2873db3f65cSamw 28868b2bbf2SGordon Ross smb_opipe_send_userinfo(sr, opipe, &err); 28968b2bbf2SGordon Ross if (err.status != 0) { 29068b2bbf2SGordon Ross smb_opipe_dealloc(opipe); 29168b2bbf2SGordon Ross return (err.status); 2923db3f65cSamw } 2933db3f65cSamw 29468b2bbf2SGordon Ross /* 29568b2bbf2SGordon Ross * Note: If smb_ofile_open succeeds, the new ofile is 29668b2bbf2SGordon Ross * in the FID lists can can be used by I/O requests. 29768b2bbf2SGordon Ross */ 29868b2bbf2SGordon Ross op->create_options = 0; 29968b2bbf2SGordon Ross op->pipe = opipe; 30068b2bbf2SGordon Ross ofile = smb_ofile_open(sr, NULL, op, 30168b2bbf2SGordon Ross SMB_FTYPE_MESG_PIPE, uniqid, &err); 30268b2bbf2SGordon Ross op->pipe = NULL; 30368b2bbf2SGordon Ross if (ofile == NULL) { 30468b2bbf2SGordon Ross smb_opipe_dealloc(opipe); 30568b2bbf2SGordon Ross return (err.status); 30668b2bbf2SGordon Ross } 3073db3f65cSamw 30868b2bbf2SGordon Ross /* An "up" pointer, for debug. */ 30968b2bbf2SGordon Ross opipe->p_ofile = ofile; 3103db3f65cSamw 311c5f48fa5SGordon Ross /* 312c5f48fa5SGordon Ross * Caller expects attributes in op->fqi 313c5f48fa5SGordon Ross */ 314c5f48fa5SGordon Ross (void) smb_opipe_getattr(ofile, &op->fqi.fq_fattr); 315c5f48fa5SGordon Ross 316c5f48fa5SGordon Ross op->dsize = 0; 317c5f48fa5SGordon Ross op->dattr = ap->sa_dosattr; 318c5f48fa5SGordon Ross op->fileid = ap->sa_vattr.va_nodeid; 31968b2bbf2SGordon Ross op->ftype = SMB_FTYPE_MESG_PIPE; 320c5f48fa5SGordon Ross op->action_taken = SMB_OACT_OPLOCK | SMB_OACT_OPENED; 32168b2bbf2SGordon Ross op->devstate = SMB_PIPE_READMODE_MESSAGE 32268b2bbf2SGordon Ross | SMB_PIPE_TYPE_MESSAGE 32368b2bbf2SGordon Ross | SMB_PIPE_UNLIMITED_INSTANCES; /* 0x05ff */ 3243db3f65cSamw 32568b2bbf2SGordon Ross sr->smb_fid = ofile->f_fid; 32668b2bbf2SGordon Ross sr->fid_ofile = ofile; 3273db3f65cSamw 32868b2bbf2SGordon Ross return (NT_STATUS_SUCCESS); 3293db3f65cSamw } 3303db3f65cSamw 3313db3f65cSamw /* 3323db3f65cSamw * smb_opipe_close 3333db3f65cSamw * 33468b2bbf2SGordon Ross * Called by smb_ofile_close for pipes. 33568b2bbf2SGordon Ross * 33668b2bbf2SGordon Ross * Note: ksocket_close may block while waiting for 33768b2bbf2SGordon Ross * any I/O threads with a hold to get out. 3383db3f65cSamw */ 3393db3f65cSamw void 3403db3f65cSamw smb_opipe_close(smb_ofile_t *of) 3413db3f65cSamw { 3423db3f65cSamw smb_opipe_t *opipe; 34368b2bbf2SGordon Ross ksocket_t sock; 3443db3f65cSamw 34568b2bbf2SGordon Ross ASSERT(of->f_state == SMB_OFILE_STATE_CLOSING); 3463db3f65cSamw ASSERT(of->f_ftype == SMB_FTYPE_MESG_PIPE); 3473db3f65cSamw opipe = of->f_pipe; 3489fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States SMB_OPIPE_VALID(opipe); 3499fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 35068b2bbf2SGordon Ross mutex_enter(&opipe->p_mutex); 35168b2bbf2SGordon Ross sock = opipe->p_socket; 35268b2bbf2SGordon Ross opipe->p_socket = NULL; 35368b2bbf2SGordon Ross mutex_exit(&opipe->p_mutex); 3543db3f65cSamw 35568b2bbf2SGordon Ross (void) ksocket_shutdown(sock, SHUT_RDWR, of->f_cr); 35668b2bbf2SGordon Ross (void) ksocket_close(sock, of->f_cr); 3573db3f65cSamw } 3583db3f65cSamw 3593db3f65cSamw /* 3603db3f65cSamw * smb_opipe_write 3613db3f65cSamw * 3623db3f65cSamw * Write RPC request data to the pipe. The client should call smb_opipe_read 3633db3f65cSamw * to complete the exchange and obtain the RPC response. 3643db3f65cSamw * 3653db3f65cSamw * Returns 0 on success or an errno on failure. 3663db3f65cSamw */ 3673db3f65cSamw int 3683db3f65cSamw smb_opipe_write(smb_request_t *sr, struct uio *uio) 3693db3f65cSamw { 37068b2bbf2SGordon Ross struct nmsghdr msghdr; 37168b2bbf2SGordon Ross smb_ofile_t *ofile; 3723db3f65cSamw smb_opipe_t *opipe; 37368b2bbf2SGordon Ross ksocket_t sock; 37468b2bbf2SGordon Ross size_t sent = 0; 37568b2bbf2SGordon Ross int rc = 0; 3763db3f65cSamw 37768b2bbf2SGordon Ross ofile = sr->fid_ofile; 37868b2bbf2SGordon Ross ASSERT(ofile->f_ftype == SMB_FTYPE_MESG_PIPE); 37968b2bbf2SGordon Ross opipe = ofile->f_pipe; 3809fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States SMB_OPIPE_VALID(opipe); 3813db3f65cSamw 38268b2bbf2SGordon Ross mutex_enter(&opipe->p_mutex); 38368b2bbf2SGordon Ross sock = opipe->p_socket; 38468b2bbf2SGordon Ross if (sock != NULL) 38568b2bbf2SGordon Ross ksocket_hold(sock); 38668b2bbf2SGordon Ross mutex_exit(&opipe->p_mutex); 38768b2bbf2SGordon Ross if (sock == NULL) 3883db3f65cSamw return (EBADF); 3893db3f65cSamw 39068b2bbf2SGordon Ross bzero(&msghdr, sizeof (msghdr)); 39168b2bbf2SGordon Ross msghdr.msg_iov = uio->uio_iov; 39268b2bbf2SGordon Ross msghdr.msg_iovlen = uio->uio_iovcnt; 3933db3f65cSamw 39468b2bbf2SGordon Ross /* 39568b2bbf2SGordon Ross * This should block until we've sent it all, 39668b2bbf2SGordon Ross * or given up due to errors (pipe closed). 39768b2bbf2SGordon Ross */ 39868b2bbf2SGordon Ross while (uio->uio_resid > 0) { 39968b2bbf2SGordon Ross rc = ksocket_sendmsg(sock, &msghdr, 0, &sent, ofile->f_cr); 40068b2bbf2SGordon Ross if (rc != 0) 40168b2bbf2SGordon Ross break; 40268b2bbf2SGordon Ross uio->uio_resid -= sent; 40368b2bbf2SGordon Ross } 4043db3f65cSamw 40568b2bbf2SGordon Ross ksocket_rele(sock); 4063db3f65cSamw 40768b2bbf2SGordon Ross return (rc); 4083db3f65cSamw } 4093db3f65cSamw 4103db3f65cSamw /* 4113db3f65cSamw * smb_opipe_read 4123db3f65cSamw * 41368b2bbf2SGordon Ross * This interface may be called from smb_opipe_transact (write, read) 41468b2bbf2SGordon Ross * or from smb_read / smb2_read to get the rest of an RPC response. 41568b2bbf2SGordon Ross * The response data (and length) are returned via the uio. 4163db3f65cSamw */ 4173db3f65cSamw int 4183db3f65cSamw smb_opipe_read(smb_request_t *sr, struct uio *uio) 4193db3f65cSamw { 42068b2bbf2SGordon Ross struct nmsghdr msghdr; 42168b2bbf2SGordon Ross smb_ofile_t *ofile; 4223db3f65cSamw smb_opipe_t *opipe; 42368b2bbf2SGordon Ross ksocket_t sock; 42468b2bbf2SGordon Ross size_t recvcnt = 0; 4253db3f65cSamw int rc; 4263db3f65cSamw 42768b2bbf2SGordon Ross ofile = sr->fid_ofile; 42868b2bbf2SGordon Ross ASSERT(ofile->f_ftype == SMB_FTYPE_MESG_PIPE); 42968b2bbf2SGordon Ross opipe = ofile->f_pipe; 4309fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States SMB_OPIPE_VALID(opipe); 4319fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 43268b2bbf2SGordon Ross mutex_enter(&opipe->p_mutex); 43368b2bbf2SGordon Ross sock = opipe->p_socket; 43468b2bbf2SGordon Ross if (sock != NULL) 43568b2bbf2SGordon Ross ksocket_hold(sock); 43668b2bbf2SGordon Ross mutex_exit(&opipe->p_mutex); 43768b2bbf2SGordon Ross if (sock == NULL) 4383db3f65cSamw return (EBADF); 4393db3f65cSamw 440b210fedeSGordon Ross mutex_enter(&sr->sr_mutex); 441b210fedeSGordon Ross if (sr->sr_state != SMB_REQ_STATE_ACTIVE) { 442b210fedeSGordon Ross mutex_exit(&sr->sr_mutex); 443b210fedeSGordon Ross rc = EINTR; 444b210fedeSGordon Ross goto out; 445b210fedeSGordon Ross } 446b210fedeSGordon Ross sr->sr_state = SMB_REQ_STATE_WAITING_PIPE; 447b210fedeSGordon Ross sr->cancel_method = smb_opipe_cancel; 448b210fedeSGordon Ross sr->cancel_arg2 = sock; 449b210fedeSGordon Ross mutex_exit(&sr->sr_mutex); 4503db3f65cSamw 45168b2bbf2SGordon Ross /* 45268b2bbf2SGordon Ross * This should block only if there's no data. 45368b2bbf2SGordon Ross * A single call to recvmsg does just that. 45468b2bbf2SGordon Ross * (Intentionaly no recv loop here.) 45568b2bbf2SGordon Ross */ 456b210fedeSGordon Ross bzero(&msghdr, sizeof (msghdr)); 457b210fedeSGordon Ross msghdr.msg_iov = uio->uio_iov; 458b210fedeSGordon Ross msghdr.msg_iovlen = uio->uio_iovcnt; 45968b2bbf2SGordon Ross rc = ksocket_recvmsg(sock, &msghdr, 0, 46068b2bbf2SGordon Ross &recvcnt, ofile->f_cr); 461b210fedeSGordon Ross 462b210fedeSGordon Ross mutex_enter(&sr->sr_mutex); 463b210fedeSGordon Ross sr->cancel_method = NULL; 464b210fedeSGordon Ross sr->cancel_arg2 = NULL; 465b210fedeSGordon Ross switch (sr->sr_state) { 466b210fedeSGordon Ross case SMB_REQ_STATE_WAITING_PIPE: 467b210fedeSGordon Ross sr->sr_state = SMB_REQ_STATE_ACTIVE; 468b210fedeSGordon Ross break; 469b210fedeSGordon Ross case SMB_REQ_STATE_CANCEL_PENDING: 470b210fedeSGordon Ross sr->sr_state = SMB_REQ_STATE_CANCELLED; 471b210fedeSGordon Ross rc = EINTR; 472b210fedeSGordon Ross break; 473b210fedeSGordon Ross default: 474b210fedeSGordon Ross /* keep rc from above */ 475b210fedeSGordon Ross break; 476b210fedeSGordon Ross } 477b210fedeSGordon Ross mutex_exit(&sr->sr_mutex); 478b210fedeSGordon Ross 47968b2bbf2SGordon Ross if (rc != 0) 48068b2bbf2SGordon Ross goto out; 48168b2bbf2SGordon Ross 48268b2bbf2SGordon Ross if (recvcnt == 0) { 48368b2bbf2SGordon Ross /* Other side closed. */ 48468b2bbf2SGordon Ross rc = EPIPE; 48568b2bbf2SGordon Ross goto out; 4863db3f65cSamw } 48768b2bbf2SGordon Ross uio->uio_resid -= recvcnt; 4883db3f65cSamw 48968b2bbf2SGordon Ross out: 49068b2bbf2SGordon Ross ksocket_rele(sock); 4919fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 4929fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 4939fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States } 494bce01b59SGordon Ross 495bce01b59SGordon Ross int 496a90cf9f2SGordon Ross smb_opipe_ioctl(smb_request_t *sr, int cmd, void *arg, int *rvalp) 497bce01b59SGordon Ross { 498bce01b59SGordon Ross smb_ofile_t *ofile; 499bce01b59SGordon Ross smb_opipe_t *opipe; 500bce01b59SGordon Ross ksocket_t sock; 501a90cf9f2SGordon Ross int rc; 502bce01b59SGordon Ross 503bce01b59SGordon Ross ofile = sr->fid_ofile; 504bce01b59SGordon Ross ASSERT(ofile->f_ftype == SMB_FTYPE_MESG_PIPE); 505bce01b59SGordon Ross opipe = ofile->f_pipe; 506bce01b59SGordon Ross SMB_OPIPE_VALID(opipe); 507bce01b59SGordon Ross 508bce01b59SGordon Ross mutex_enter(&opipe->p_mutex); 509bce01b59SGordon Ross sock = opipe->p_socket; 510bce01b59SGordon Ross if (sock != NULL) 511bce01b59SGordon Ross ksocket_hold(sock); 512bce01b59SGordon Ross mutex_exit(&opipe->p_mutex); 513bce01b59SGordon Ross if (sock == NULL) 514bce01b59SGordon Ross return (EBADF); 515bce01b59SGordon Ross 516a90cf9f2SGordon Ross rc = ksocket_ioctl(sock, cmd, (intptr_t)arg, rvalp, ofile->f_cr); 517bce01b59SGordon Ross 518bce01b59SGordon Ross ksocket_rele(sock); 519bce01b59SGordon Ross 520bce01b59SGordon Ross return (rc); 521bce01b59SGordon Ross } 522a90cf9f2SGordon Ross 523a90cf9f2SGordon Ross /* 524a90cf9f2SGordon Ross * Get the smb_attr_t for a named pipe. 525a90cf9f2SGordon Ross * Caller has already cleared to zero. 526a90cf9f2SGordon Ross */ 527a90cf9f2SGordon Ross int 528a90cf9f2SGordon Ross smb_opipe_getattr(smb_ofile_t *of, smb_attr_t *ap) 529a90cf9f2SGordon Ross { 530a90cf9f2SGordon Ross 531a90cf9f2SGordon Ross if (of->f_pipe == NULL) 532a90cf9f2SGordon Ross return (EINVAL); 533a90cf9f2SGordon Ross 534a90cf9f2SGordon Ross ap->sa_vattr.va_type = VFIFO; 535a90cf9f2SGordon Ross ap->sa_vattr.va_nlink = 1; 536c5f48fa5SGordon Ross ap->sa_vattr.va_nodeid = (uintptr_t)of->f_pipe; 537a90cf9f2SGordon Ross ap->sa_dosattr = FILE_ATTRIBUTE_NORMAL; 538c5f48fa5SGordon Ross ap->sa_allocsz = SMB_PIPE_MAX_MSGSIZE; 539a90cf9f2SGordon Ross 540a90cf9f2SGordon Ross return (0); 541a90cf9f2SGordon Ross } 542a90cf9f2SGordon Ross 543a90cf9f2SGordon Ross int 544a90cf9f2SGordon Ross smb_opipe_getname(smb_ofile_t *of, char *buf, size_t buflen) 545a90cf9f2SGordon Ross { 546a90cf9f2SGordon Ross smb_opipe_t *opipe; 547a90cf9f2SGordon Ross 548a90cf9f2SGordon Ross if ((opipe = of->f_pipe) == NULL) 549a90cf9f2SGordon Ross return (EINVAL); 550a90cf9f2SGordon Ross 551a90cf9f2SGordon Ross (void) snprintf(buf, buflen, "\\%s", opipe->p_name); 552a90cf9f2SGordon Ross return (0); 553a90cf9f2SGordon Ross } 554a90cf9f2SGordon Ross 555a90cf9f2SGordon Ross /* 556a90cf9f2SGordon Ross * Handler for smb2_ioctl 557a90cf9f2SGordon Ross */ 558a90cf9f2SGordon Ross /* ARGSUSED */ 559a90cf9f2SGordon Ross uint32_t 560a90cf9f2SGordon Ross smb_opipe_fsctl(smb_request_t *sr, smb_fsctl_t *fsctl) 561a90cf9f2SGordon Ross { 562a90cf9f2SGordon Ross uint32_t status; 563a90cf9f2SGordon Ross 564a90cf9f2SGordon Ross switch (fsctl->CtlCode) { 565a90cf9f2SGordon Ross case FSCTL_PIPE_TRANSCEIVE: 566a90cf9f2SGordon Ross status = smb_opipe_transceive(sr, fsctl); 567a90cf9f2SGordon Ross break; 568a90cf9f2SGordon Ross 569a90cf9f2SGordon Ross case FSCTL_PIPE_PEEK: 570a90cf9f2SGordon Ross case FSCTL_PIPE_WAIT: 571a90cf9f2SGordon Ross /* XXX todo */ 572a90cf9f2SGordon Ross status = NT_STATUS_NOT_SUPPORTED; 573a90cf9f2SGordon Ross break; 574a90cf9f2SGordon Ross 575a90cf9f2SGordon Ross default: 576a90cf9f2SGordon Ross ASSERT(!"CtlCode"); 577a90cf9f2SGordon Ross status = NT_STATUS_INTERNAL_ERROR; 578a90cf9f2SGordon Ross break; 579a90cf9f2SGordon Ross } 580a90cf9f2SGordon Ross 581a90cf9f2SGordon Ross return (status); 582a90cf9f2SGordon Ross } 583a90cf9f2SGordon Ross 584a90cf9f2SGordon Ross static uint32_t 585a90cf9f2SGordon Ross smb_opipe_transceive(smb_request_t *sr, smb_fsctl_t *fsctl) 586a90cf9f2SGordon Ross { 587a90cf9f2SGordon Ross smb_vdb_t vdb; 588a90cf9f2SGordon Ross smb_ofile_t *ofile; 589a90cf9f2SGordon Ross struct mbuf *mb; 590a90cf9f2SGordon Ross uint32_t status; 591a90cf9f2SGordon Ross int len, rc; 592a90cf9f2SGordon Ross 593a90cf9f2SGordon Ross /* 594a90cf9f2SGordon Ross * Caller checked that this is the IPC$ share, 595a90cf9f2SGordon Ross * and that this call has a valid open handle. 596a90cf9f2SGordon Ross * Just check the type. 597a90cf9f2SGordon Ross */ 598a90cf9f2SGordon Ross ofile = sr->fid_ofile; 599a90cf9f2SGordon Ross if (ofile->f_ftype != SMB_FTYPE_MESG_PIPE) 600a90cf9f2SGordon Ross return (NT_STATUS_INVALID_HANDLE); 601a90cf9f2SGordon Ross 602a90cf9f2SGordon Ross rc = smb_mbc_decodef(fsctl->in_mbc, "#B", 603a90cf9f2SGordon Ross fsctl->InputCount, &vdb); 604a90cf9f2SGordon Ross if (rc != 0) { 605a90cf9f2SGordon Ross /* Not enough data sent. */ 606a90cf9f2SGordon Ross return (NT_STATUS_INVALID_PARAMETER); 607a90cf9f2SGordon Ross } 608a90cf9f2SGordon Ross 609a90cf9f2SGordon Ross rc = smb_opipe_write(sr, &vdb.vdb_uio); 610a90cf9f2SGordon Ross if (rc != 0) 611a90cf9f2SGordon Ross return (smb_errno2status(rc)); 612a90cf9f2SGordon Ross 613a90cf9f2SGordon Ross vdb.vdb_tag = 0; 614a90cf9f2SGordon Ross vdb.vdb_uio.uio_iov = &vdb.vdb_iovec[0]; 615a90cf9f2SGordon Ross vdb.vdb_uio.uio_iovcnt = MAX_IOVEC; 616a90cf9f2SGordon Ross vdb.vdb_uio.uio_segflg = UIO_SYSSPACE; 617a90cf9f2SGordon Ross vdb.vdb_uio.uio_extflg = UIO_COPY_DEFAULT; 618a90cf9f2SGordon Ross vdb.vdb_uio.uio_loffset = (offset_t)0; 619a90cf9f2SGordon Ross vdb.vdb_uio.uio_resid = fsctl->MaxOutputResp; 620a90cf9f2SGordon Ross mb = smb_mbuf_allocate(&vdb.vdb_uio); 621a90cf9f2SGordon Ross 622a90cf9f2SGordon Ross rc = smb_opipe_read(sr, &vdb.vdb_uio); 623a90cf9f2SGordon Ross if (rc != 0) { 624a90cf9f2SGordon Ross m_freem(mb); 625a90cf9f2SGordon Ross return (smb_errno2status(rc)); 626a90cf9f2SGordon Ross } 627a90cf9f2SGordon Ross 628a90cf9f2SGordon Ross len = fsctl->MaxOutputResp - vdb.vdb_uio.uio_resid; 629a90cf9f2SGordon Ross smb_mbuf_trim(mb, len); 630a90cf9f2SGordon Ross MBC_ATTACH_MBUF(fsctl->out_mbc, mb); 631a90cf9f2SGordon Ross 632a90cf9f2SGordon Ross /* 633a90cf9f2SGordon Ross * If the output buffer holds a partial pipe message, 634a90cf9f2SGordon Ross * we're supposed to return NT_STATUS_BUFFER_OVERFLOW. 635a90cf9f2SGordon Ross * As we don't have message boundary markers, the best 636a90cf9f2SGordon Ross * we can do is return that status when we have ALL of: 637a90cf9f2SGordon Ross * Output buffer was < SMB_PIPE_MAX_MSGSIZE 638a90cf9f2SGordon Ross * We filled the output buffer (resid==0) 639a90cf9f2SGordon Ross * There's more data (ioctl FIONREAD) 640a90cf9f2SGordon Ross */ 641a90cf9f2SGordon Ross status = NT_STATUS_SUCCESS; 642a90cf9f2SGordon Ross if (fsctl->MaxOutputResp < SMB_PIPE_MAX_MSGSIZE && 643a90cf9f2SGordon Ross vdb.vdb_uio.uio_resid == 0) { 644a90cf9f2SGordon Ross int nread = 0, trval; 645a90cf9f2SGordon Ross rc = smb_opipe_ioctl(sr, FIONREAD, &nread, &trval); 646a90cf9f2SGordon Ross if (rc == 0 && nread != 0) 647a90cf9f2SGordon Ross status = NT_STATUS_BUFFER_OVERFLOW; 648a90cf9f2SGordon Ross } 649a90cf9f2SGordon Ross 650a90cf9f2SGordon Ross return (status); 651a90cf9f2SGordon Ross } 652