sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-13 13:18:06 +03:00
Code

s3: smb2 - Check supplied impersonation level on SMB2_CREATE.

Browse Source 
MS-SMB2: 2.2.13 SMB2 CREATE Request
ImpersonationLevel ... MUST contain one of the following values.
The server MUST validate this field, but otherwise ignore it.

NB. source4/torture/smb2/durable_open.c shows that
this check is only done on real opens, not on durable
handle reopens.

Found and fix confirmed by Microsoft test tool.

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Ira Cooper <ira@samba.org>
This commit is contained in:
Jeremy Allison 2014-06-16 14:13:02 -07:00
parent 37b4c9e08f
commit 1c44d9a3e1
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
source3/smbd/smb2_create.c
View File

@ -904,6 +904,24 @@ static struct tevent_req *smbd_smb2_create_send(TALLOC_CTX *mem_ctx,
return tevent_req_post(req, ev);
}
/*
* MS-SMB2: 2.2.13 SMB2 CREATE Request
* ImpersonationLevel ... MUST contain one of the
* following values. The server MUST validate this
* field, but otherwise ignore it.
*
* NB. The source4/torture/smb2/durable_open.c test
* shows this check is only done on real opens, not
* on durable handle-reopens.
*/
if (in_impersonation_level >
SMB2_IMPERSONATION_DELEGATE) {
tevent_req_nterror(req,
NT_STATUS_BAD_IMPERSONATION_LEVEL);
return tevent_req_post(req, ev);
}
status = SMB_VFS_CREATE_FILE(smb1req->conn,
smb1req,
0, /* root_dir_fid */