sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Code

forgot to commit the scanner code

Browse Source 
(This used to be commit 591308f388)
This commit is contained in:
Andrew Tridgell 2001-08-27 18:01:05 +00:00
parent ee5f7237de
commit 05c0ca2355
1 changed files with 435 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

435
source3/torture/scanner.c Normal file
View File

@ -0,0 +1,435 @@
/*
Unix SMB/Netbios implementation.
Version 3.0
SMB torture tester - scanning functions
Copyright (C) Andrew Tridgell 2001
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
*/
#define NO_SYSLOG
#include "includes.h"
#define VERBOSE 0
#define OP_MIN 0
#define OP_MAX 20
/****************************************************************************
look for a partial hit
****************************************************************************/
static void trans2_check_hit(char *format, int op, int level, uint32 status)
{
switch (status) {
case NT_STATUS_INVALID_LEVEL:
case NT_STATUS_NOT_IMPLEMENTED:
case NT_STATUS_NOT_SUPPORTED:
case NT_STATUS_UNSUCCESSFUL:
case NT_STATUS_INVALID_INFO_CLASS:
break;
default:
#if VERBOSE
printf("possible %s hit op=%3d level=%5d status=%s\n",
format, op, level, get_nt_error_msg(status));
#endif
}
}
/****************************************************************************
check for existance of a trans2 call
****************************************************************************/
static uint32 try_trans2(struct cli_state *cli,
int op,
char *param, char *data,
int param_len, int data_len,
int *rparam_len, int *rdata_len)
{
uint16 setup = op;
char *rparam=NULL, *rdata=NULL;
if (!cli_send_trans(cli, SMBtrans2,
NULL, /* name */
-1, 0, /* fid, flags */
&setup, 1, 0, /* setup, length, max */
param, param_len, 2, /* param, length, max */
data, data_len, cli->max_xmit /* data, length, max */
)) {
return cli_nt_error(cli);
}
cli_receive_trans(cli, SMBtrans2,
&rparam, rparam_len,
&rdata, rdata_len);
if (rdata) free(rdata);
if (rparam) free(rparam);
return cli_nt_error(cli);
}
static uint32 try_trans2_len(struct cli_state *cli,
char *format,
int op, int level,
char *param, char *data,
int param_len, int *data_len,
int *rparam_len, int *rdata_len)
{
uint32 ret=0;
ret = try_trans2(cli, op, param, data, param_len,
sizeof(pstring), rparam_len, rdata_len);
#if VERBOSE
printf("op=%d level=%d ret=%s\n", op, level, get_nt_error_msg(ret));
#endif
if (ret != 0) return ret;
*data_len = 0;
while (*data_len < sizeof(pstring)) {
ret = try_trans2(cli, op, param, data, param_len,
*data_len, rparam_len, rdata_len);
if (ret == 0) break;
*data_len += 2;
}
if (ret == NT_STATUS_NOPROBLEMO) {
printf("found %s level=%d data_len=%d rparam_len=%d rdata_len=%d\n",
format, level, *data_len, *rparam_len, *rdata_len);
} else {
trans2_check_hit(format, op, level, ret);
}
return ret;
}
/****************************************************************************
check for existance of a trans2 call
****************************************************************************/
static BOOL scan_trans2(struct cli_state *cli, int op, int level,
int fnum, int dnum, char *fname)
{
int data_len = 0;
int param_len = 0;
int rparam_len, rdata_len;
pstring param, data;
uint32 status;
memset(data, 0, sizeof(data));
data_len = 4;
/* try with a info level only */
param_len = 2;
SSVAL(param, 0, level);
status = try_trans2_len(cli, "void", op, level, param, data, param_len, &data_len,
&rparam_len, &rdata_len);
if (status == 0) return True;
/* try with a file descriptor */
param_len = 6;
SSVAL(param, 0, fnum);
SSVAL(param, 2, level);
SSVAL(param, 4, 0);
status = try_trans2_len(cli, "fnum", op, level, param, data, param_len, &data_len,
&rparam_len, &rdata_len);
if (status == 0) return True;
/* try with a notify style */
param_len = 6;
SSVAL(param, 0, dnum);
SSVAL(param, 2, dnum);
SSVAL(param, 4, level);
status = try_trans2_len(cli, "notify", op, level, param, data, param_len, &data_len,
&rparam_len, &rdata_len);
if (status == 0) return True;
/* try with a file name */
param_len = 6;
SSVAL(param, 0, level);
SSVAL(param, 2, 0);
SSVAL(param, 4, 0);
param_len += clistr_push(cli, &param[6], fname, -1, STR_TERMINATE);
status = try_trans2_len(cli, "fname", op, level, param, data, param_len, &data_len,
&rparam_len, &rdata_len);
if (status == 0) return True;
/* try with a new file name */
param_len = 6;
SSVAL(param, 0, level);
SSVAL(param, 2, 0);
SSVAL(param, 4, 0);
param_len += clistr_push(cli, &param[6], "\\newfile.dat", -1, STR_TERMINATE);
status = try_trans2_len(cli, "newfile", op, level, param, data, param_len, &data_len,
&rparam_len, &rdata_len);
cli_unlink(cli, "\\newfile.dat");
cli_rmdir(cli, "\\newfile.dat");
if (status == 0) return True;
/* try dfs style */
cli_mkdir(cli, "\\testdir");
param_len = 2;
SSVAL(param, 0, level);
param_len += clistr_push(cli, &param[2], "\\testdir", -1, STR_TERMINATE);
status = try_trans2_len(cli, "dfs", op, level, param, data, param_len, &data_len,
&rparam_len, &rdata_len);
cli_rmdir(cli, "\\testdir");
if (status == 0) return True;
return False;
}
BOOL torture_trans2_scan(int dummy)
{
static struct cli_state cli;
int op, level;
char *fname = "\\scanner.dat";
int fnum, dnum;
printf("starting trans2 scan test\n");
if (!torture_open_connection(&cli)) {
return False;
}
fnum = cli_open(&cli, fname, O_RDWR | O_CREAT | O_TRUNC,
DENY_NONE);
dnum = cli_open(&cli, "\\", O_RDONLY, DENY_NONE);
for (op=OP_MIN; op<=OP_MAX; op++) {
printf("Scanning op=%d\n", op);
for (level = 0; level <= 50; level++) {
scan_trans2(&cli, op, level, fnum, dnum, fname);
}
for (level = 0x100; level <= 0x130; level++) {
scan_trans2(&cli, op, level, fnum, dnum, fname);
}
for (level = 1000; level < 1050; level++) {
scan_trans2(&cli, op, level, fnum, dnum, fname);
}
}
torture_close_connection(&cli);
printf("trans2 scan finished\n");
return True;
}
/****************************************************************************
look for a partial hit
****************************************************************************/
static void nttrans_check_hit(char *format, int op, int level, uint32 status)
{
switch (status) {
case NT_STATUS_INVALID_LEVEL:
case NT_STATUS_NOT_IMPLEMENTED:
case NT_STATUS_NOT_SUPPORTED:
case NT_STATUS_UNSUCCESSFUL:
case NT_STATUS_INVALID_INFO_CLASS:
break;
default:
#if VERBOSE
printf("possible %s hit op=%3d level=%5d status=%s\n",
format, op, level, get_nt_error_msg(status));
#endif
}
}
/****************************************************************************
check for existance of a nttrans call
****************************************************************************/
static uint32 try_nttrans(struct cli_state *cli,
int op,
char *param, char *data,
int param_len, int data_len,
int *rparam_len, int *rdata_len)
{
char *rparam=NULL, *rdata=NULL;
if (!cli_send_nt_trans(cli, op,
0,
NULL, 0, 0,
param, param_len, 2, /* param, length, max */
data, data_len, cli->max_xmit /* data, length, max */
)) {
return cli_nt_error(cli);
}
cli_receive_nt_trans(cli,
&rparam, rparam_len,
&rdata, rdata_len);
if (rdata) free(rdata);
if (rparam) free(rparam);
return cli_nt_error(cli);
}
static uint32 try_nttrans_len(struct cli_state *cli,
char *format,
int op, int level,
char *param, char *data,
int param_len, int *data_len,
int *rparam_len, int *rdata_len)
{
uint32 ret=0;
ret = try_nttrans(cli, op, param, data, param_len,
sizeof(pstring), rparam_len, rdata_len);
#if VERBOSE
printf("op=%d level=%d ret=%s\n", op, level, get_nt_error_msg(ret));
#endif
if (ret != 0) return ret;
*data_len = 0;
while (*data_len < sizeof(pstring)) {
ret = try_nttrans(cli, op, param, data, param_len,
*data_len, rparam_len, rdata_len);
if (ret == 0) break;
*data_len += 2;
}
if (ret == NT_STATUS_NOPROBLEMO) {
printf("found %s level=%d data_len=%d rparam_len=%d rdata_len=%d\n",
format, level, *data_len, *rparam_len, *rdata_len);
} else {
nttrans_check_hit(format, op, level, ret);
}
return ret;
}
/****************************************************************************
check for existance of a nttrans call
****************************************************************************/
static BOOL scan_nttrans(struct cli_state *cli, int op, int level,
int fnum, int dnum, char *fname)
{
int data_len = 0;
int param_len = 0;
int rparam_len, rdata_len;
pstring param, data;
uint32 status;
memset(data, 0, sizeof(data));
data_len = 4;
/* try with a info level only */
param_len = 2;
SSVAL(param, 0, level);
status = try_nttrans_len(cli, "void", op, level, param, data, param_len, &data_len,
&rparam_len, &rdata_len);
if (status == 0) return True;
/* try with a file descriptor */
param_len = 6;
SSVAL(param, 0, fnum);
SSVAL(param, 2, level);
SSVAL(param, 4, 0);
status = try_nttrans_len(cli, "fnum", op, level, param, data, param_len, &data_len,
&rparam_len, &rdata_len);
if (status == 0) return True;
/* try with a notify style */
param_len = 6;
SSVAL(param, 0, dnum);
SSVAL(param, 2, dnum);
SSVAL(param, 4, level);
status = try_nttrans_len(cli, "notify", op, level, param, data, param_len, &data_len,
&rparam_len, &rdata_len);
if (status == 0) return True;
/* try with a file name */
param_len = 6;
SSVAL(param, 0, level);
SSVAL(param, 2, 0);
SSVAL(param, 4, 0);
param_len += clistr_push(cli, &param[6], fname, -1, STR_TERMINATE);
status = try_nttrans_len(cli, "fname", op, level, param, data, param_len, &data_len,
&rparam_len, &rdata_len);
if (status == 0) return True;
/* try with a new file name */
param_len = 6;
SSVAL(param, 0, level);
SSVAL(param, 2, 0);
SSVAL(param, 4, 0);
param_len += clistr_push(cli, &param[6], "\\newfile.dat", -1, STR_TERMINATE);
status = try_nttrans_len(cli, "newfile", op, level, param, data, param_len, &data_len,
&rparam_len, &rdata_len);
cli_unlink(cli, "\\newfile.dat");
cli_rmdir(cli, "\\newfile.dat");
if (status == 0) return True;
/* try dfs style */
cli_mkdir(cli, "\\testdir");
param_len = 2;
SSVAL(param, 0, level);
param_len += clistr_push(cli, &param[2], "\\testdir", -1, STR_TERMINATE);
status = try_nttrans_len(cli, "dfs", op, level, param, data, param_len, &data_len,
&rparam_len, &rdata_len);
cli_rmdir(cli, "\\testdir");
if (status == 0) return True;
return False;
}
BOOL torture_nttrans_scan(int dummy)
{
static struct cli_state cli;
int op, level;
char *fname = "\\scanner.dat";
int fnum, dnum;
printf("starting nttrans scan test\n");
if (!torture_open_connection(&cli)) {
return False;
}
fnum = cli_open(&cli, fname, O_RDWR | O_CREAT | O_TRUNC,
DENY_NONE);
dnum = cli_open(&cli, "\\", O_RDONLY, DENY_NONE);
for (op=OP_MIN; op<=OP_MAX; op++) {
printf("Scanning op=%d\n", op);
for (level = 0; level <= 50; level++) {
scan_nttrans(&cli, op, level, fnum, dnum, fname);
}
for (level = 0x100; level <= 0x130; level++) {
scan_nttrans(&cli, op, level, fnum, dnum, fname);
}
for (level = 1000; level < 1050; level++) {
scan_nttrans(&cli, op, level, fnum, dnum, fname);
}
}
torture_close_connection(&cli);
printf("nttrans scan finished\n");
return True;
}