1 /* SPDX-License-Identifier: GPL-2.0-or-later */
2 /*
3 * Copyright (C) 2016 Namjae Jeon <linkinjeon@kernel.org>
4 * Copyright (C) 2018 Samsung Electronics Co., Ltd.
5 */
6
7 #ifndef _SMB2PDU_H
8 #define _SMB2PDU_H
9
10 #include "ntlmssp.h"
11 #include "smbacl.h"
12
13 /*Create Action Flags*/
14 #define FILE_SUPERSEDED 0x00000000
15 #define FILE_OPENED 0x00000001
16 #define FILE_CREATED 0x00000002
17 #define FILE_OVERWRITTEN 0x00000003
18
19 /* SMB2 Max Credits */
20 #define SMB2_MAX_CREDITS 8192
21
22 /* BB FIXME - analyze following length BB */
23 #define MAX_SMB2_HDR_SIZE 0x78 /* 4 len + 64 hdr + (2*24 wct) + 2 bct + 2 pad */
24
25 #define SMB21_DEFAULT_IOSIZE (1024 * 1024)
26 #define SMB3_DEFAULT_TRANS_SIZE (1024 * 1024)
27 #define SMB3_MIN_IOSIZE (64 * 1024)
28 #define SMB3_MAX_IOSIZE (8 * 1024 * 1024)
29
30 /*
31 * Definitions for SMB2 Protocol Data Units (network frames)
32 *
33 * See MS-SMB2.PDF specification for protocol details.
34 * The Naming convention is the lower case version of the SMB2
35 * command code name for the struct. Note that structures must be packed.
36 *
37 */
38
39 struct preauth_integrity_info {
40 /* PreAuth integrity Hash ID */
41 __le16 Preauth_HashId;
42 /* PreAuth integrity Hash Value */
43 __u8 Preauth_HashValue[SMB2_PREAUTH_HASH_SIZE];
44 };
45
46 /* offset is sizeof smb2_negotiate_rsp but rounded up to 8 bytes. */
47 #ifdef CONFIG_SMB_SERVER_KERBEROS5
48 /* sizeof(struct smb2_negotiate_rsp) =
49 * header(64) + response(64) + GSS_LENGTH(96) + GSS_PADDING(0)
50 */
51 #define OFFSET_OF_NEG_CONTEXT 0xe0
52 #else
53 /* sizeof(struct smb2_negotiate_rsp) =
54 * header(64) + response(64) + GSS_LENGTH(74) + GSS_PADDING(6)
55 */
56 #define OFFSET_OF_NEG_CONTEXT 0xd0
57 #endif
58
59 #define SMB2_SESSION_EXPIRED (0)
60 #define SMB2_SESSION_IN_PROGRESS BIT(0)
61 #define SMB2_SESSION_VALID BIT(1)
62
63 struct create_durable_req_v2 {
64 struct create_context ccontext;
65 __u8 Name[8];
66 __le32 Timeout;
67 __le32 Flags;
68 __u8 Reserved[8];
69 __u8 CreateGuid[16];
70 } __packed;
71
72 struct create_durable_reconn_req {
73 struct create_context ccontext;
74 __u8 Name[8];
75 union {
76 __u8 Reserved[16];
77 struct {
78 __u64 PersistentFileId;
79 __u64 VolatileFileId;
80 } Fid;
81 } Data;
82 } __packed;
83
84 struct create_durable_reconn_v2_req {
85 struct create_context ccontext;
86 __u8 Name[8];
87 struct {
88 __u64 PersistentFileId;
89 __u64 VolatileFileId;
90 } Fid;
91 __u8 CreateGuid[16];
92 __le32 Flags;
93 } __packed;
94
95 struct create_app_inst_id {
96 struct create_context ccontext;
97 __u8 Name[8];
98 __u8 Reserved[8];
99 __u8 AppInstanceId[16];
100 } __packed;
101
102 struct create_app_inst_id_vers {
103 struct create_context ccontext;
104 __u8 Name[8];
105 __u8 Reserved[2];
106 __u8 Padding[4];
107 __le64 AppInstanceVersionHigh;
108 __le64 AppInstanceVersionLow;
109 } __packed;
110
111 struct create_mxac_req {
112 struct create_context ccontext;
113 __u8 Name[8];
114 __le64 Timestamp;
115 } __packed;
116
117 struct create_alloc_size_req {
118 struct create_context ccontext;
119 __u8 Name[8];
120 __le64 AllocationSize;
121 } __packed;
122
123 struct create_durable_rsp {
124 struct create_context ccontext;
125 __u8 Name[8];
126 union {
127 __u8 Reserved[8];
128 __u64 data;
129 } Data;
130 } __packed;
131
132 struct create_durable_v2_rsp {
133 struct create_context ccontext;
134 __u8 Name[8];
135 __le32 Timeout;
136 __le32 Flags;
137 } __packed;
138
139 struct create_mxac_rsp {
140 struct create_context ccontext;
141 __u8 Name[8];
142 __le32 QueryStatus;
143 __le32 MaximalAccess;
144 } __packed;
145
146 struct create_disk_id_rsp {
147 struct create_context ccontext;
148 __u8 Name[8];
149 __le64 DiskFileId;
150 __le64 VolumeId;
151 __u8 Reserved[16];
152 } __packed;
153
154 /* equivalent of the contents of SMB3.1.1 POSIX open context response */
155 struct create_posix_rsp {
156 struct create_context ccontext;
157 __u8 Name[16];
158 __le32 nlink;
159 __le32 reparse_tag;
160 __le32 mode;
161 /* SidBuffer contain two sids(Domain sid(28), UNIX group sid(16)) */
162 u8 SidBuffer[44];
163 } __packed;
164
165 struct smb2_buffer_desc_v1 {
166 __le64 offset;
167 __le32 token;
168 __le32 length;
169 } __packed;
170
171 #define SMB2_0_IOCTL_IS_FSCTL 0x00000001
172
173 struct smb_sockaddr_in {
174 __be16 Port;
175 __be32 IPv4address;
176 __u8 Reserved[8];
177 } __packed;
178
179 struct smb_sockaddr_in6 {
180 __be16 Port;
181 __be32 FlowInfo;
182 __u8 IPv6address[16];
183 __be32 ScopeId;
184 } __packed;
185
186 #define INTERNETWORK 0x0002
187 #define INTERNETWORKV6 0x0017
188
189 struct sockaddr_storage_rsp {
190 __le16 Family;
191 union {
192 struct smb_sockaddr_in addr4;
193 struct smb_sockaddr_in6 addr6;
194 };
195 } __packed;
196
197 #define RSS_CAPABLE 0x00000001
198 #define RDMA_CAPABLE 0x00000002
199
200 struct network_interface_info_ioctl_rsp {
201 __le32 Next; /* next interface. zero if this is last one */
202 __le32 IfIndex;
203 __le32 Capability; /* RSS or RDMA Capable */
204 __le32 Reserved;
205 __le64 LinkSpeed;
206 char SockAddr_Storage[128];
207 } __packed;
208
209 struct file_object_buf_type1_ioctl_rsp {
210 __u8 ObjectId[16];
211 __u8 BirthVolumeId[16];
212 __u8 BirthObjectId[16];
213 __u8 DomainId[16];
214 } __packed;
215
216 struct resume_key_ioctl_rsp {
217 __u64 ResumeKey[3];
218 __le32 ContextLength;
219 __u8 Context[4]; /* ignored, Windows sets to 4 bytes of zero */
220 } __packed;
221
222 struct copychunk_ioctl_req {
223 __le64 ResumeKey[3];
224 __le32 ChunkCount;
225 __le32 Reserved;
226 __u8 Chunks[1]; /* array of srv_copychunk */
227 } __packed;
228
229 struct srv_copychunk {
230 __le64 SourceOffset;
231 __le64 TargetOffset;
232 __le32 Length;
233 __le32 Reserved;
234 } __packed;
235
236 struct copychunk_ioctl_rsp {
237 __le32 ChunksWritten;
238 __le32 ChunkBytesWritten;
239 __le32 TotalBytesWritten;
240 } __packed;
241
242 struct file_sparse {
243 __u8 SetSparse;
244 } __packed;
245
246 /* FILE Info response size */
247 #define FILE_DIRECTORY_INFORMATION_SIZE 1
248 #define FILE_FULL_DIRECTORY_INFORMATION_SIZE 2
249 #define FILE_BOTH_DIRECTORY_INFORMATION_SIZE 3
250 #define FILE_BASIC_INFORMATION_SIZE 40
251 #define FILE_STANDARD_INFORMATION_SIZE 24
252 #define FILE_INTERNAL_INFORMATION_SIZE 8
253 #define FILE_EA_INFORMATION_SIZE 4
254 #define FILE_ACCESS_INFORMATION_SIZE 4
255 #define FILE_NAME_INFORMATION_SIZE 9
256 #define FILE_RENAME_INFORMATION_SIZE 10
257 #define FILE_LINK_INFORMATION_SIZE 11
258 #define FILE_NAMES_INFORMATION_SIZE 12
259 #define FILE_DISPOSITION_INFORMATION_SIZE 13
260 #define FILE_POSITION_INFORMATION_SIZE 14
261 #define FILE_FULL_EA_INFORMATION_SIZE 15
262 #define FILE_MODE_INFORMATION_SIZE 4
263 #define FILE_ALIGNMENT_INFORMATION_SIZE 4
264 #define FILE_ALL_INFORMATION_SIZE 104
265 #define FILE_ALLOCATION_INFORMATION_SIZE 19
266 #define FILE_END_OF_FILE_INFORMATION_SIZE 20
267 #define FILE_ALTERNATE_NAME_INFORMATION_SIZE 8
268 #define FILE_STREAM_INFORMATION_SIZE 32
269 #define FILE_PIPE_INFORMATION_SIZE 23
270 #define FILE_PIPE_LOCAL_INFORMATION_SIZE 24
271 #define FILE_PIPE_REMOTE_INFORMATION_SIZE 25
272 #define FILE_MAILSLOT_QUERY_INFORMATION_SIZE 26
273 #define FILE_MAILSLOT_SET_INFORMATION_SIZE 27
274 #define FILE_COMPRESSION_INFORMATION_SIZE 16
275 #define FILE_OBJECT_ID_INFORMATION_SIZE 29
276 /* Number 30 not defined in documents */
277 #define FILE_MOVE_CLUSTER_INFORMATION_SIZE 31
278 #define FILE_QUOTA_INFORMATION_SIZE 32
279 #define FILE_REPARSE_POINT_INFORMATION_SIZE 33
280 #define FILE_NETWORK_OPEN_INFORMATION_SIZE 56
281 #define FILE_ATTRIBUTE_TAG_INFORMATION_SIZE 8
282
283 /* FS Info response size */
284 #define FS_DEVICE_INFORMATION_SIZE 8
285 #define FS_ATTRIBUTE_INFORMATION_SIZE 16
286 #define FS_VOLUME_INFORMATION_SIZE 24
287 #define FS_SIZE_INFORMATION_SIZE 24
288 #define FS_FULL_SIZE_INFORMATION_SIZE 32
289 #define FS_SECTOR_SIZE_INFORMATION_SIZE 28
290 #define FS_OBJECT_ID_INFORMATION_SIZE 64
291 #define FS_CONTROL_INFORMATION_SIZE 48
292 #define FS_POSIX_INFORMATION_SIZE 56
293
294 /* FS_ATTRIBUTE_File_System_Name */
295 #define FS_TYPE_SUPPORT_SIZE 44
296 struct fs_type_info {
297 char *fs_name;
298 long magic_number;
299 } __packed;
300
301 /*
302 * PDU query infolevel structure definitions
303 * BB consider moving to a different header
304 */
305
306 struct smb2_file_access_info {
307 __le32 AccessFlags;
308 } __packed;
309
310 struct smb2_file_alignment_info {
311 __le32 AlignmentRequirement;
312 } __packed;
313
314 struct smb2_file_basic_info { /* data block encoding of response to level 18 */
315 __le64 CreationTime; /* Beginning of FILE_BASIC_INFO equivalent */
316 __le64 LastAccessTime;
317 __le64 LastWriteTime;
318 __le64 ChangeTime;
319 __le32 Attributes;
320 __u32 Pad1; /* End of FILE_BASIC_INFO_INFO equivalent */
321 } __packed;
322
323 struct smb2_file_alt_name_info {
324 __le32 FileNameLength;
325 char FileName[];
326 } __packed;
327
328 struct smb2_file_stream_info {
329 __le32 NextEntryOffset;
330 __le32 StreamNameLength;
331 __le64 StreamSize;
332 __le64 StreamAllocationSize;
333 char StreamName[];
334 } __packed;
335
336 struct smb2_file_ntwrk_info {
337 __le64 CreationTime;
338 __le64 LastAccessTime;
339 __le64 LastWriteTime;
340 __le64 ChangeTime;
341 __le64 AllocationSize;
342 __le64 EndOfFile;
343 __le32 Attributes;
344 __le32 Reserved;
345 } __packed;
346
347 struct smb2_file_standard_info {
348 __le64 AllocationSize;
349 __le64 EndOfFile;
350 __le32 NumberOfLinks; /* hard links */
351 __u8 DeletePending;
352 __u8 Directory;
353 __le16 Reserved;
354 } __packed; /* level 18 Query */
355
356 struct smb2_file_ea_info {
357 __le32 EASize;
358 } __packed;
359
360 struct smb2_file_alloc_info {
361 __le64 AllocationSize;
362 } __packed;
363
364 struct smb2_file_disposition_info {
365 __u8 DeletePending;
366 } __packed;
367
368 struct smb2_file_pos_info {
369 __le64 CurrentByteOffset;
370 } __packed;
371
372 #define FILE_MODE_INFO_MASK cpu_to_le32(0x0000100e)
373
374 struct smb2_file_mode_info {
375 __le32 Mode;
376 } __packed;
377
378 #define COMPRESSION_FORMAT_NONE 0x0000
379 #define COMPRESSION_FORMAT_LZNT1 0x0002
380
381 struct smb2_file_comp_info {
382 __le64 CompressedFileSize;
383 __le16 CompressionFormat;
384 __u8 CompressionUnitShift;
385 __u8 ChunkShift;
386 __u8 ClusterShift;
387 __u8 Reserved[3];
388 } __packed;
389
390 struct smb2_file_attr_tag_info {
391 __le32 FileAttributes;
392 __le32 ReparseTag;
393 } __packed;
394
395 #define SL_RESTART_SCAN 0x00000001
396 #define SL_RETURN_SINGLE_ENTRY 0x00000002
397 #define SL_INDEX_SPECIFIED 0x00000004
398
399 struct smb2_ea_info_req {
400 __le32 NextEntryOffset;
401 __u8 EaNameLength;
402 char name[1];
403 } __packed; /* level 15 Query */
404
405 struct smb2_ea_info {
406 __le32 NextEntryOffset;
407 __u8 Flags;
408 __u8 EaNameLength;
409 __le16 EaValueLength;
410 char name[1];
411 /* optionally followed by value */
412 } __packed; /* level 15 Query */
413
414 struct create_ea_buf_req {
415 struct create_context ccontext;
416 __u8 Name[8];
417 struct smb2_ea_info ea;
418 } __packed;
419
420 struct create_sd_buf_req {
421 struct create_context ccontext;
422 __u8 Name[8];
423 struct smb_ntsd ntsd;
424 } __packed;
425
426 struct smb2_posix_info {
427 __le32 NextEntryOffset;
428 __u32 Ignored;
429 __le64 CreationTime;
430 __le64 LastAccessTime;
431 __le64 LastWriteTime;
432 __le64 ChangeTime;
433 __le64 EndOfFile;
434 __le64 AllocationSize;
435 __le32 DosAttributes;
436 __le64 Inode;
437 __le32 DeviceId;
438 __le32 Zero;
439 /* beginning of POSIX Create Context Response */
440 __le32 HardLinks;
441 __le32 ReparseTag;
442 __le32 Mode;
443 /* SidBuffer contain two sids (UNIX user sid(16), UNIX group sid(16)) */
444 u8 SidBuffer[32];
445 __le32 name_len;
446 u8 name[1];
447 /*
448 * var sized owner SID
449 * var sized group SID
450 * le32 filenamelength
451 * u8 filename[]
452 */
453 } __packed;
454
455 /* functions */
456 void init_smb2_1_server(struct ksmbd_conn *conn);
457 void init_smb3_0_server(struct ksmbd_conn *conn);
458 void init_smb3_02_server(struct ksmbd_conn *conn);
459 int init_smb3_11_server(struct ksmbd_conn *conn);
460
461 void init_smb2_max_read_size(unsigned int sz);
462 void init_smb2_max_write_size(unsigned int sz);
463 void init_smb2_max_trans_size(unsigned int sz);
464 void init_smb2_max_credits(unsigned int sz);
465
466 bool is_smb2_neg_cmd(struct ksmbd_work *work);
467 bool is_smb2_rsp(struct ksmbd_work *work);
468
469 u16 get_smb2_cmd_val(struct ksmbd_work *work);
470 void set_smb2_rsp_status(struct ksmbd_work *work, __le32 err);
471 int init_smb2_rsp_hdr(struct ksmbd_work *work);
472 int smb2_allocate_rsp_buf(struct ksmbd_work *work);
473 bool is_chained_smb2_message(struct ksmbd_work *work);
474 int init_smb2_neg_rsp(struct ksmbd_work *work);
475 void smb2_set_err_rsp(struct ksmbd_work *work);
476 int smb2_check_user_session(struct ksmbd_work *work);
477 int smb2_get_ksmbd_tcon(struct ksmbd_work *work);
478 bool smb2_is_sign_req(struct ksmbd_work *work, unsigned int command);
479 int smb2_check_sign_req(struct ksmbd_work *work);
480 void smb2_set_sign_rsp(struct ksmbd_work *work);
481 int smb3_check_sign_req(struct ksmbd_work *work);
482 void smb3_set_sign_rsp(struct ksmbd_work *work);
483 int find_matching_smb2_dialect(int start_index, __le16 *cli_dialects,
484 __le16 dialects_count);
485 struct file_lock *smb_flock_init(struct file *f);
486 int setup_async_work(struct ksmbd_work *work, void (*fn)(void **),
487 void **arg);
488 void smb2_send_interim_resp(struct ksmbd_work *work, __le32 status);
489 struct channel *lookup_chann_list(struct ksmbd_session *sess,
490 struct ksmbd_conn *conn);
491 void smb3_preauth_hash_rsp(struct ksmbd_work *work);
492 bool smb3_is_transform_hdr(void *buf);
493 int smb3_decrypt_req(struct ksmbd_work *work);
494 int smb3_encrypt_resp(struct ksmbd_work *work);
495 bool smb3_11_final_sess_setup_resp(struct ksmbd_work *work);
496 int smb2_set_rsp_credits(struct ksmbd_work *work);
497 bool smb3_encryption_negotiated(struct ksmbd_conn *conn);
498
499 /* smb2 misc functions */
500 int ksmbd_smb2_check_message(struct ksmbd_work *work);
501
502 /* smb2 command handlers */
503 int smb2_handle_negotiate(struct ksmbd_work *work);
504 int smb2_negotiate_request(struct ksmbd_work *work);
505 int smb2_sess_setup(struct ksmbd_work *work);
506 int smb2_tree_connect(struct ksmbd_work *work);
507 int smb2_tree_disconnect(struct ksmbd_work *work);
508 int smb2_session_logoff(struct ksmbd_work *work);
509 int smb2_open(struct ksmbd_work *work);
510 int smb2_query_info(struct ksmbd_work *work);
511 int smb2_query_dir(struct ksmbd_work *work);
512 int smb2_close(struct ksmbd_work *work);
513 int smb2_echo(struct ksmbd_work *work);
514 int smb2_set_info(struct ksmbd_work *work);
515 int smb2_read(struct ksmbd_work *work);
516 int smb2_write(struct ksmbd_work *work);
517 int smb2_flush(struct ksmbd_work *work);
518 int smb2_cancel(struct ksmbd_work *work);
519 int smb2_lock(struct ksmbd_work *work);
520 int smb2_ioctl(struct ksmbd_work *work);
521 int smb2_oplock_break(struct ksmbd_work *work);
522 int smb2_notify(struct ksmbd_work *ksmbd_work);
523
524 /*
525 * Get the body of the smb2 message excluding the 4 byte rfc1002 headers
526 * from request/response buffer.
527 */
smb2_get_msg(void * buf)528 static inline void *smb2_get_msg(void *buf)
529 {
530 return buf + 4;
531 }
532
533 #endif /* _SMB2PDU_H */
534