Coverage Report

Created: 2025-07-23 07:04

/src/samba/source3/smbd/conn.c
Line
Count
Source (jump to first uncovered line)
1
/*
2
   Unix SMB/CIFS implementation.
3
   Manage connections_struct structures
4
   Copyright (C) Andrew Tridgell 1998
5
   Copyright (C) Alexander Bokovoy 2002
6
   Copyright (C) Jeremy Allison 2010
7
8
   This program is free software; you can redistribute it and/or modify
9
   it under the terms of the GNU General Public License as published by
10
   the Free Software Foundation; either version 3 of the License, or
11
   (at your option) any later version.
12
13
   This program is distributed in the hope that it will be useful,
14
   but WITHOUT ANY WARRANTY; without even the implied warranty of
15
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16
   GNU General Public License for more details.
17
18
   You should have received a copy of the GNU General Public License
19
   along with this program.  If not, see <http://www.gnu.org/licenses/>.
20
*/
21
22
#include "includes.h"
23
#include "smbd/smbd.h"
24
#include "smbd/globals.h"
25
#include "lib/util/bitmap.h"
26
27
static void conn_free_internal(connection_struct *conn);
28
29
/****************************************************************************
30
 * Remove a conn struct from conn->sconn->connections
31
 * if not already done.
32
****************************************************************************/
33
34
static int conn_struct_destructor(connection_struct *conn)
35
0
{
36
0
        if (conn->sconn != NULL) {
37
0
    DLIST_REMOVE(conn->sconn->connections, conn);
38
0
    SMB_ASSERT(conn->sconn->num_connections > 0);
39
0
    conn->sconn->num_connections--;
40
0
    conn->sconn = NULL;
41
0
  }
42
0
  conn_free_internal(conn);
43
0
  return 0;
44
0
}
45
46
/****************************************************************************
47
 Return the number of open connections.
48
****************************************************************************/
49
50
int conn_num_open(struct smbd_server_connection *sconn)
51
0
{
52
0
  return sconn->num_connections;
53
0
}
54
55
/****************************************************************************
56
 Check if a snum is in use.
57
****************************************************************************/
58
59
bool conn_snum_used(struct smbd_server_connection *sconn,
60
        int snum)
61
0
{
62
0
  struct connection_struct *conn;
63
64
0
  for (conn=sconn->connections; conn; conn=conn->next) {
65
0
    if (conn->params->service == snum) {
66
0
      return true;
67
0
    }
68
0
  }
69
70
0
  return false;
71
0
}
72
73
enum protocol_types conn_protocol(struct smbd_server_connection *sconn)
74
0
{
75
0
  if ((sconn != NULL) &&
76
0
      (sconn->client != NULL) &&
77
0
      (sconn->client->connections != NULL)) {
78
0
    return sconn->client->connections->protocol;
79
0
  }
80
  /*
81
   * Default to what source3/lib/util.c has as default for the
82
   * static Protocol variable to not change behaviour.
83
   */
84
0
  return PROTOCOL_COREPLUS;
85
0
}
86
87
bool conn_using_smb2(struct smbd_server_connection *sconn)
88
0
{
89
0
  enum protocol_types proto = conn_protocol(sconn);
90
0
  return (proto >= PROTOCOL_SMB2_02);
91
0
}
92
93
/****************************************************************************
94
 Find first available connection slot, starting from a random position.
95
 The randomisation stops problems with the server dying and clients
96
 thinking the server is still available.
97
****************************************************************************/
98
99
connection_struct *conn_new(struct smbd_server_connection *sconn)
100
0
{
101
0
  connection_struct *conn = NULL;
102
103
0
  conn = talloc_zero(NULL, connection_struct);
104
0
  if (conn == NULL) {
105
0
    DBG_ERR("talloc_zero failed\n");
106
0
    return NULL;
107
0
  }
108
0
  conn->params = talloc(conn, struct share_params);
109
0
  if (conn->params == NULL) {
110
0
    DBG_ERR("talloc_zero failed\n");
111
0
    TALLOC_FREE(conn);
112
0
    return NULL;
113
0
  }
114
0
  conn->vuid_cache = talloc_zero(conn, struct vuid_cache);
115
0
  if (conn->vuid_cache == NULL) {
116
0
    DBG_ERR("talloc_zero failed\n");
117
0
    TALLOC_FREE(conn);
118
0
    return NULL;
119
0
  }
120
0
  conn->connectpath = talloc_strdup(conn, "");
121
0
  if (conn->connectpath == NULL) {
122
0
    DBG_ERR("talloc_zero failed\n");
123
0
    TALLOC_FREE(conn);
124
0
    return NULL;
125
0
  }
126
0
  conn->cwd_fsp = talloc_zero(conn, struct files_struct);
127
0
  if (conn->cwd_fsp == NULL) {
128
0
    DBG_ERR("talloc_zero failed\n");
129
0
    TALLOC_FREE(conn);
130
0
    return NULL;
131
0
  }
132
0
  conn->cwd_fsp->fsp_name = synthetic_smb_fname(conn->cwd_fsp,
133
0
                  ".",
134
0
                  NULL,
135
0
                  NULL,
136
0
                  0,
137
0
                  0);
138
0
  if (conn->cwd_fsp->fsp_name == NULL) {
139
0
    TALLOC_FREE(conn);
140
0
    return NULL;
141
0
  }
142
0
  conn->cwd_fsp->fh = fd_handle_create(conn->cwd_fsp);
143
0
  if (conn->cwd_fsp->fh == NULL) {
144
0
    DBG_ERR("talloc_zero failed\n");
145
0
    TALLOC_FREE(conn);
146
0
    return NULL;
147
0
  }
148
0
  conn->sconn = sconn;
149
0
  conn->force_group_gid = (gid_t)-1;
150
0
  fsp_set_fd(conn->cwd_fsp, -1);
151
0
  conn->cwd_fsp->fnum = FNUM_FIELD_INVALID;
152
0
  conn->cwd_fsp->conn = conn;
153
154
0
  DLIST_ADD(sconn->connections, conn);
155
0
  sconn->num_connections++;
156
157
  /*
158
   * Catches the case where someone forgets to call
159
   * conn_free().
160
   */
161
0
  talloc_set_destructor(conn, conn_struct_destructor);
162
0
  return conn;
163
0
}
164
165
/****************************************************************************
166
 Clear a vuid out of the connection's vuid cache
167
****************************************************************************/
168
169
static void conn_clear_vuid_cache(connection_struct *conn, uint64_t vuid)
170
0
{
171
0
  struct vuid_cache_entry *ent = NULL;
172
0
  int i;
173
174
0
  for (i=0; i<VUID_CACHE_SIZE; i++) {
175
0
    ent = &conn->vuid_cache->array[i];
176
0
    if (ent->vuid == vuid) {
177
0
      break;
178
0
    }
179
0
  }
180
0
  if (i == VUID_CACHE_SIZE) {
181
0
    return;
182
0
  }
183
184
0
  ent->vuid = UID_FIELD_INVALID;
185
186
  /*
187
   * We need to keep conn->session_info around
188
   * if it's equal to ent->session_info as a SMBulogoff
189
   * is often followed by a SMBtdis (with an invalid
190
   * vuid). The debug code (or regular code in
191
   * vfs_full_audit) wants to refer to the
192
   * conn->session_info pointer to print debug
193
   * statements. Theoretically this is a bug,
194
   * as once the vuid is gone the session_info
195
   * on the conn struct isn't valid any more,
196
   * but there's enough code that assumes
197
   * conn->session_info is never null that
198
   * it's easier to hold onto the old pointer
199
   * until we get a new sessionsetupX.
200
   * As everything is hung off the
201
   * conn pointer as a talloc context we're not
202
   * leaking memory here. See bug #6315. JRA.
203
   */
204
0
  if (conn->session_info == ent->session_info) {
205
0
    ent->session_info = NULL;
206
0
  } else {
207
0
    TALLOC_FREE(ent->session_info);
208
0
  }
209
0
  ent->read_only = False;
210
0
  ent->share_access = 0;
211
0
  TALLOC_FREE(ent->veto_list);
212
0
  TALLOC_FREE(ent->hide_list);
213
0
}
214
215
/****************************************************************************
216
 Clear a vuid out of the validity cache, and as the 'owner' of a connection.
217
218
 Called from invalidate_vuid()
219
****************************************************************************/
220
221
void conn_clear_vuid_caches(struct smbd_server_connection *sconn, uint64_t vuid)
222
0
{
223
0
  connection_struct *conn;
224
225
0
  for (conn=sconn->connections; conn;conn=conn->next) {
226
0
    if (conn->vuid == vuid) {
227
0
      conn->vuid = UID_FIELD_INVALID;
228
0
    }
229
0
    conn_clear_vuid_cache(conn, vuid);
230
0
  }
231
0
}
232
233
/****************************************************************************
234
 Free a conn structure - internal part.
235
****************************************************************************/
236
237
static void conn_free_internal(connection_struct *conn)
238
0
{
239
0
  vfs_handle_struct *handle = NULL, *thandle = NULL;
240
0
  struct trans_state *state = NULL;
241
242
  /* Free vfs_connection_struct */
243
0
  handle = conn->vfs_handles;
244
0
  while(handle) {
245
0
    thandle = handle->next;
246
0
    DLIST_REMOVE(conn->vfs_handles, handle);
247
0
    if (handle->free_data)
248
0
      handle->free_data(&handle->data);
249
0
    handle = thandle;
250
0
  }
251
252
  /* Free any pending transactions stored on this conn. */
253
0
  for (state = conn->pending_trans; state; state = state->next) {
254
    /* state->setup is a talloc child of state. */
255
0
    SAFE_FREE(state->param);
256
0
    SAFE_FREE(state->data);
257
0
  }
258
259
0
  ZERO_STRUCTP(conn);
260
0
}
261
262
/****************************************************************************
263
 Free a conn structure.
264
****************************************************************************/
265
266
void conn_free(connection_struct *conn)
267
0
{
268
0
  TALLOC_FREE(conn);
269
0
}
270
271
/*
272
 * Correctly initialize a share with case options.
273
 */
274
void conn_setup_case_options(connection_struct *conn)
275
0
{
276
0
  int snum = conn->params->service;
277
278
0
  if (lp_case_sensitive(snum) == Auto) {
279
    /* We will be setting this per packet. Set to be case
280
    * insensitive for now. */
281
0
    conn->case_sensitive = false;
282
0
  } else {
283
0
    conn->case_sensitive = (bool)lp_case_sensitive(snum);
284
0
  }
285
286
0
  conn->case_preserve = lp_preserve_case(snum);
287
0
  conn->short_case_preserve = lp_short_preserve_case(snum);
288
0
}