NTCreateHelper.cs 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212
  1. /* Copyright (C) 2014-2017 Tal Aloni <tal.aloni.il@gmail.com>. All rights reserved.
  2. *
  3. * You can redistribute this program and/or modify it under the terms of
  4. * the GNU Lesser Public License as published by the Free Software Foundation,
  5. * either version 3 of the License, or (at your option) any later version.
  6. */
  7. using System;
  8. using System.Collections.Generic;
  9. using System.IO;
  10. using System.Text;
  11. using SMBLibrary.Services;
  12. using SMBLibrary.SMB1;
  13. using Utilities;
  14. namespace SMBLibrary.Server.SMB1
  15. {
  16. internal class NTCreateHelper
  17. {
  18. internal static SMB1Command GetNTCreateResponse(SMB1Header header, NTCreateAndXRequest request, ISMBShare share, SMB1ConnectionState state)
  19. {
  20. SMB1Session session = state.GetSession(header.UID);
  21. bool isExtended = (request.Flags & NTCreateFlags.NT_CREATE_REQUEST_EXTENDED_RESPONSE) > 0;
  22. string path = request.FileName;
  23. if (!path.StartsWith(@"\"))
  24. {
  25. path = @"\" + path;
  26. }
  27. FileAccess createAccess = NTFileStoreHelper.ToCreateFileAccess(request.DesiredAccess, request.CreateDisposition);
  28. if (share is FileSystemShare)
  29. {
  30. if (!((FileSystemShare)share).HasAccess(session.SecurityContext, path, createAccess))
  31. {
  32. state.LogToServer(Severity.Verbose, "Create: Opening '{0}{1}' failed. User '{2}' was denied access.", share.Name, request.FileName, session.UserName);
  33. header.Status = NTStatus.STATUS_ACCESS_DENIED;
  34. return new ErrorResponse(request.CommandName);
  35. }
  36. }
  37. object handle;
  38. FileStatus fileStatus;
  39. FileAttributes fileAttributes = ToFileAttributes(request.ExtFileAttributes);
  40. // GetFileInformation/FileNetworkOpenInformation requires FILE_READ_ATTRIBUTES
  41. FileAccessMask desiredAccess = request.DesiredAccess | FileAccessMask.FILE_READ_ATTRIBUTES;
  42. NTStatus createStatus = share.FileStore.CreateFile(out handle, out fileStatus, path, desiredAccess, fileAttributes, request.ShareAccess, request.CreateDisposition, request.CreateOptions, session.SecurityContext);
  43. if (createStatus != NTStatus.STATUS_SUCCESS)
  44. {
  45. state.LogToServer(Severity.Verbose, "Create: Opening '{0}{1}' failed. NTStatus: {2}.", share.Name, path, createStatus);
  46. header.Status = createStatus;
  47. return new ErrorResponse(request.CommandName);
  48. }
  49. state.LogToServer(Severity.Verbose, "Create: Opened '{0}{1}'.", share.Name, path);
  50. ushort? fileID = session.AddOpenFile(header.TID, path, handle);
  51. if (!fileID.HasValue)
  52. {
  53. share.FileStore.CloseFile(handle);
  54. header.Status = NTStatus.STATUS_TOO_MANY_OPENED_FILES;
  55. return new ErrorResponse(request.CommandName);
  56. }
  57. if (share is NamedPipeShare)
  58. {
  59. if (isExtended)
  60. {
  61. return CreateResponseExtendedForNamedPipe(fileID.Value, FileStatus.FILE_OPENED);
  62. }
  63. else
  64. {
  65. return CreateResponseForNamedPipe(fileID.Value, FileStatus.FILE_OPENED);
  66. }
  67. }
  68. else // FileSystemShare
  69. {
  70. FileNetworkOpenInformation fileInfo = NTFileStoreHelper.GetNetworkOpenInformation(share.FileStore, handle);
  71. if (isExtended)
  72. {
  73. NTCreateAndXResponseExtended response = CreateResponseExtendedFromFileInformation(fileInfo, fileID.Value, fileStatus);
  74. if ((request.Flags & NTCreateFlags.NT_CREATE_REQUEST_OPBATCH) > 0)
  75. {
  76. response.OpLockLevel = OpLockLevel.BatchOpLockGranted;
  77. }
  78. return response;
  79. }
  80. else
  81. {
  82. NTCreateAndXResponse response = CreateResponseFromFileInformation(fileInfo, fileID.Value, fileStatus);
  83. if ((request.Flags & NTCreateFlags.NT_CREATE_REQUEST_OPBATCH) > 0)
  84. {
  85. response.OpLockLevel = OpLockLevel.BatchOpLockGranted;
  86. }
  87. return response;
  88. }
  89. }
  90. }
  91. private static NTCreateAndXResponse CreateResponseForNamedPipe(ushort fileID, FileStatus fileStatus)
  92. {
  93. NTCreateAndXResponse response = new NTCreateAndXResponse();
  94. response.FID = fileID;
  95. response.CreateDisposition = ToCreateDisposition(fileStatus);
  96. response.ExtFileAttributes = ExtendedFileAttributes.Normal;
  97. response.ResourceType = ResourceType.FileTypeMessageModePipe;
  98. response.NMPipeStatus.ICount = 255;
  99. response.NMPipeStatus.ReadMode = ReadMode.MessageMode;
  100. response.NMPipeStatus.NamedPipeType = NamedPipeType.MessageModePipe;
  101. return response;
  102. }
  103. private static NTCreateAndXResponseExtended CreateResponseExtendedForNamedPipe(ushort fileID, FileStatus fileStatus)
  104. {
  105. NTCreateAndXResponseExtended response = new NTCreateAndXResponseExtended();
  106. response.FID = fileID;
  107. response.CreateDisposition = ToCreateDisposition(fileStatus);
  108. response.ExtFileAttributes = ExtendedFileAttributes.Normal;
  109. response.ResourceType = ResourceType.FileTypeMessageModePipe;
  110. NamedPipeStatus status = new NamedPipeStatus();
  111. status.ICount = 255;
  112. status.ReadMode = ReadMode.MessageMode;
  113. status.NamedPipeType = NamedPipeType.MessageModePipe;
  114. response.NMPipeStatus = status;
  115. response.MaximalAccessRights.File = FileAccessMask.FILE_READ_DATA | FileAccessMask.FILE_WRITE_DATA | FileAccessMask.FILE_APPEND_DATA |
  116. FileAccessMask.FILE_READ_EA | FileAccessMask.FILE_WRITE_EA |
  117. FileAccessMask.FILE_EXECUTE |
  118. FileAccessMask.FILE_READ_ATTRIBUTES | FileAccessMask.FILE_WRITE_ATTRIBUTES |
  119. FileAccessMask.DELETE | FileAccessMask.READ_CONTROL | FileAccessMask.WRITE_DAC | FileAccessMask.WRITE_OWNER | FileAccessMask.SYNCHRONIZE;
  120. response.GuestMaximalAccessRights.File = FileAccessMask.FILE_READ_DATA | FileAccessMask.FILE_WRITE_DATA |
  121. FileAccessMask.FILE_READ_EA | FileAccessMask.FILE_WRITE_EA |
  122. FileAccessMask.FILE_READ_ATTRIBUTES | FileAccessMask.FILE_WRITE_ATTRIBUTES |
  123. FileAccessMask.READ_CONTROL | FileAccessMask.SYNCHRONIZE;
  124. return response;
  125. }
  126. private static NTCreateAndXResponse CreateResponseFromFileInformation(FileNetworkOpenInformation fileInfo, ushort fileID, FileStatus fileStatus)
  127. {
  128. NTCreateAndXResponse response = new NTCreateAndXResponse();
  129. response.FID = fileID;
  130. response.CreateDisposition = ToCreateDisposition(fileStatus);
  131. response.CreateTime = fileInfo.CreationTime;
  132. response.LastAccessTime = fileInfo.LastAccessTime;
  133. response.LastWriteTime = fileInfo.LastWriteTime;
  134. response.LastChangeTime = fileInfo.LastWriteTime;
  135. response.AllocationSize = fileInfo.AllocationSize;
  136. response.EndOfFile = fileInfo.EndOfFile;
  137. response.ExtFileAttributes = (ExtendedFileAttributes)fileInfo.FileAttributes;
  138. response.ResourceType = ResourceType.FileTypeDisk;
  139. response.Directory = fileInfo.IsDirectory;
  140. return response;
  141. }
  142. private static NTCreateAndXResponseExtended CreateResponseExtendedFromFileInformation(FileNetworkOpenInformation fileInfo, ushort fileID, FileStatus fileStatus)
  143. {
  144. NTCreateAndXResponseExtended response = new NTCreateAndXResponseExtended();
  145. response.FID = fileID;
  146. response.CreateDisposition = ToCreateDisposition(fileStatus);
  147. response.CreateTime = fileInfo.CreationTime;
  148. response.LastAccessTime = fileInfo.LastAccessTime;
  149. response.LastWriteTime = fileInfo.LastWriteTime;
  150. response.LastChangeTime = fileInfo.LastWriteTime;
  151. response.ExtFileAttributes = (ExtendedFileAttributes)fileInfo.FileAttributes;
  152. response.AllocationSize = fileInfo.AllocationSize;
  153. response.EndOfFile = fileInfo.EndOfFile;
  154. response.ResourceType = ResourceType.FileTypeDisk;
  155. response.FileStatusFlags = FileStatusFlags.NO_EAS | FileStatusFlags.NO_SUBSTREAMS | FileStatusFlags.NO_REPARSETAG;
  156. response.Directory = fileInfo.IsDirectory;
  157. response.MaximalAccessRights.File = FileAccessMask.FILE_READ_DATA | FileAccessMask.FILE_WRITE_DATA | FileAccessMask.FILE_APPEND_DATA |
  158. FileAccessMask.FILE_READ_EA | FileAccessMask.FILE_WRITE_EA |
  159. FileAccessMask.FILE_EXECUTE |
  160. FileAccessMask.FILE_READ_ATTRIBUTES | FileAccessMask.FILE_WRITE_ATTRIBUTES |
  161. FileAccessMask.DELETE | FileAccessMask.READ_CONTROL | FileAccessMask.WRITE_DAC | FileAccessMask.WRITE_OWNER | FileAccessMask.SYNCHRONIZE;
  162. response.GuestMaximalAccessRights.File = FileAccessMask.FILE_READ_DATA | FileAccessMask.FILE_WRITE_DATA |
  163. FileAccessMask.FILE_READ_EA | FileAccessMask.FILE_WRITE_EA |
  164. FileAccessMask.FILE_READ_ATTRIBUTES | FileAccessMask.FILE_WRITE_ATTRIBUTES |
  165. FileAccessMask.READ_CONTROL | FileAccessMask.SYNCHRONIZE;
  166. return response;
  167. }
  168. private static CreateDisposition ToCreateDisposition(FileStatus fileStatus)
  169. {
  170. if (fileStatus == FileStatus.FILE_SUPERSEDED)
  171. {
  172. return CreateDisposition.FILE_SUPERSEDE;
  173. }
  174. else if (fileStatus == FileStatus.FILE_CREATED)
  175. {
  176. return CreateDisposition.FILE_CREATE;
  177. }
  178. else if (fileStatus == FileStatus.FILE_OVERWRITTEN)
  179. {
  180. return CreateDisposition.FILE_OVERWRITE;
  181. }
  182. else
  183. {
  184. return CreateDisposition.FILE_OPEN;
  185. }
  186. }
  187. private static FileAttributes ToFileAttributes(ExtendedFileAttributes extendedFileAttributes)
  188. {
  189. // We only return flags that can be used with NtCreateFile
  190. FileAttributes fileAttributes = FileAttributes.ReadOnly |
  191. FileAttributes.Hidden |
  192. FileAttributes.System |
  193. FileAttributes.Archive |
  194. FileAttributes.Normal |
  195. FileAttributes.Temporary |
  196. FileAttributes.Offline |
  197. FileAttributes.Encrypted;
  198. return (fileAttributes & (FileAttributes)extendedFileAttributes);
  199. }
  200. }
  201. }