Leaked source code of windows server 2003
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

715 lines
21 KiB

/*++
Copyright (c) 1993 Microsoft Corporation
Module Name:
exchange.c
Abstract:
Contains routine which packages the request buffer, makes
the NCP request, and unpackages the response buffer.
Author:
Hans Hurvig (hanshu) Aug-1992 Created
Colin Watson (colinw) 19-Dec-1992
Rita Wong (ritaw) 11-Mar-1993 FSCtl version
Environment:
Revision History:
--*/
#include <procs.h>
NTSTATUS
GetFileServerVersionInfo(
HANDLE DeviceHandle,
VERSION_INFO NWFAR *lpVerInfo
)
{
NTSTATUS NtStatus ;
NtStatus = NwlibMakeNcp(
DeviceHandle, // Connection Handle
FSCTL_NWR_NCP_E3H, // Bindery function
3, // Max request packet size
130, // Max response packet size
"b|r", // Format string
// === REQUEST ================================
0x11, // b Get File Server Information
// === REPLY ==================================
lpVerInfo, // r File Version Structure
sizeof(VERSION_INFO)
);
// Convert HI-LO words to LO-HI
// ===========================================================
lpVerInfo->ConnsSupported = wSWAP( lpVerInfo->ConnsSupported );
lpVerInfo->connsInUse = wSWAP( lpVerInfo->connsInUse );
lpVerInfo->maxVolumes = wSWAP( lpVerInfo->maxVolumes );
lpVerInfo->PeakConns = wSWAP( lpVerInfo->PeakConns );
return NtStatus;
}
NTSTATUS
NwlibMakeNcp(
IN HANDLE DeviceHandle,
IN ULONG FsControlCode,
IN ULONG RequestBufferSize,
IN ULONG ResponseBufferSize,
IN PCHAR FormatString,
... // Arguments to FormatString
)
/*++
Routine Description:
This function converts the input arguments into an NCP request buffer
based on the format specified in FormatString (e.g. takes a word
and writes it in hi-lo format in the request buffer as required by
an NCP).
It then makes the NCP call via the NtFsControlFile API.
The FormatString also specifies how to convert the fields in the
response buffer from the completed NCP call into the output
arguments.
The FormatString takes the form of "xxxx|yyyy" where each 'x'
indicates an input argument to convert from, and each 'y' indicates
an output argument to convert into. The '|' character separates
the input format from the output format specifications.
Arguments:
DeviceHandle - Supplies a handle to the network file system driver
which will be making the network request. This function
assumes that the handle was opened for synchronouse I/O access.
FsControlCode - Supplies the control code which determines the
NCP.
RequestBufferSize - Supplies the size of the request buffer in
bytes to be allocated by this routine.
ResponseBufferSize - Supplies the size of the response buffer in
bytes to be allocated by this routine.
FormatString - Supplies an ANSI string which describes how to
convert from the input arguments into NCP request fields, and
from the NCP response fields into the output arguments.
Field types, request/response:
'b' byte ( byte / byte* )
'w' hi-lo word ( word / word* )
'd' hi-lo dword ( dword / dword* )
'-' zero/skip byte ( void )
'=' zero/skip word ( void )
._. zero/skip string ( word )
'p' pstring ( char* )
'P' DBCS pstring ( char* )
'c' cstring ( char* )
'C' cstring followed skip word ( char*, word )
'r' raw bytes ( byte*, word )
'R' DBCS raw bytes ( byte*, word )
'u' p unicode string ( UNICODE_STRING * )
'U' p uppercase string( UNICODE_STRING * )
'W' word n followed by an array of word[n] ( word, word* )
Return Value:
Return code from the NCP call.
--*/
{
NTSTATUS status = STATUS_SUCCESS;
va_list Arguments;
PCHAR z;
WORD t = 1;
ULONG data_size;
LPBYTE RequestBuffer = NULL;
LPBYTE ResponseBuffer;
IO_STATUS_BLOCK IoStatusBlock;
DWORD ReturnedDataSize;
BOOL SpecialCaseChangePass = FALSE;
BOOL DontFreeBuffer = FALSE;
BOOL GetVersionInfo = TRUE;
BOOL DoMapSpecialJapaneseCharThing = TRUE;
VERSION_INFO VerInfo;
//
// Allocate memory for request and response buffers.
//
RequestBuffer = LocalAlloc(
LMEM_ZEROINIT,
RequestBufferSize + ResponseBufferSize + 0x20
);
if (RequestBuffer == NULL) {
KdPrint(("NWLIB: NwlibMakeNcp LocalAlloc failed %lu\n", GetLastError()));
return STATUS_NO_MEMORY;
}
ResponseBuffer = (LPBYTE) ((ULONG_PTR) RequestBuffer + RequestBufferSize);
va_start( Arguments, FormatString );
//
// Convert the input arguments into request packet.
//
z = FormatString;
data_size = 0;
while ( *z && *z != '|')
{
switch ( *z )
{
case '=':
RequestBuffer[data_size++] = 0;
case '-':
RequestBuffer[data_size++] = 0;
break;
case '_':
{
WORD l = va_arg ( Arguments, WORD );
if (data_size + l > RequestBufferSize)
{
KdPrint(("NWLIB: NwlibMakeNcp case '_' request buffer too small\n"));
status = STATUS_BUFFER_TOO_SMALL;
goto CleanExit;
}
while ( l-- )
RequestBuffer[data_size++] = 0;
break;
}
case 'b':
RequestBuffer[data_size] = va_arg ( Arguments, BYTE );
//
// We know the first va_arg is the subfunction. If the function
// is FSCTL_NWR_NCP_E3H and the subfunctions are those related
// the Challenge/SetPass then we need do this special case
// workaround.
//
if ( (z == FormatString) &&
(FsControlCode == FSCTL_NWR_NCP_E3H) &&
( (RequestBuffer[data_size] == 0x17) ||
(RequestBuffer[data_size] == 0x4B) ) ) {
SpecialCaseChangePass = TRUE ;
}
++data_size ;
break;
case 'w':
{
WORD w = va_arg ( Arguments, WORD );
RequestBuffer[data_size++] = (BYTE) (w >> 8);
RequestBuffer[data_size++] = (BYTE) (w >> 0);
break;
}
case 'd':
{
DWORD d = va_arg ( Arguments, DWORD );
RequestBuffer[data_size++] = (BYTE) (d >> 24);
RequestBuffer[data_size++] = (BYTE) (d >> 16);
RequestBuffer[data_size++] = (BYTE) (d >> 8);
RequestBuffer[data_size++] = (BYTE) (d >> 0);
break;
}
case 'c':
{
char* c = va_arg ( Arguments, char* );
WORD l = (WORD)strlen( c );
if (data_size + l > RequestBufferSize)
{
KdPrint(("NWLIB: NwlibMakeNcp case 'c' request buffer too small\n"));
status = STATUS_BUFFER_TOO_SMALL;
goto CleanExit;
}
RtlCopyMemory( &RequestBuffer[data_size], c, l+1 );
data_size += l + 1;
break;
}
case 'C':
{
char* c = va_arg ( Arguments, char* );
WORD l = va_arg ( Arguments, WORD );
WORD len = strlen( c ) + 1;
if (data_size + l > RequestBufferSize)
{
KdPrint(("NWLIB: NwlibMakeNcp case 'C' request buffer too small\n"));
status = STATUS_BUFFER_TOO_SMALL;
goto CleanExit;
}
RtlCopyMemory( &RequestBuffer[data_size], c, len > l? l : len);
data_size += l;
RequestBuffer[data_size-1] = 0;
break;
}
case 'P':
case 'p':
{
char* c = va_arg ( Arguments, char* );
BYTE l = (BYTE)strlen( c );
char* p;
if (data_size + l > RequestBufferSize)
{
KdPrint(("NWLIB: NwlibMakeNcp case 'p' request buffer too small\n"));
status = STATUS_BUFFER_TOO_SMALL;
goto CleanExit;
}
RequestBuffer[data_size++] = l;
RtlCopyMemory( (p=(char*)&RequestBuffer[data_size]), c, l );
data_size += l;
//
// Map Japanese special chars
//
if (*z == 'P')
{
if ( GetVersionInfo )
{
status = GetFileServerVersionInfo( DeviceHandle,
&VerInfo );
GetVersionInfo = FALSE;
if ( status == STATUS_SUCCESS )
{
if ( VerInfo.Version > 3 )
{
DoMapSpecialJapaneseCharThing = FALSE;
}
}
}
if ( DoMapSpecialJapaneseCharThing )
{
MapSpecialJapaneseChars(p, (WORD)l);
}
}
break;
}
case 'u':
{
PUNICODE_STRING pUString = va_arg ( Arguments, PUNICODE_STRING );
OEM_STRING OemString;
ULONG Length;
//
// Calculate required string length, excluding trailing NUL.
//
Length = RtlUnicodeStringToOemSize( pUString ) - 1;
ASSERT( Length < 0x100 );
if ( data_size + Length > RequestBufferSize ) {
KdPrint(("NWLIB: NwlibMakeNcp case 'u' request buffer too small\n"));
status = STATUS_BUFFER_TOO_SMALL;
goto CleanExit;
}
RequestBuffer[data_size++] = (UCHAR)Length;
OemString.Buffer = &RequestBuffer[data_size];
OemString.MaximumLength = (USHORT)Length + 1;
status = RtlUnicodeStringToOemString( &OemString, pUString, FALSE );
ASSERT( NT_SUCCESS( status ));
data_size += (USHORT)Length;
break;
}
case 'U':
{
//
// UPPERCASE the string, copy it from unicode to the packet
//
PUNICODE_STRING pUString = va_arg ( Arguments, PUNICODE_STRING );
UNICODE_STRING UUppercaseString;
OEM_STRING OemString;
ULONG Length;
status = RtlUpcaseUnicodeString(&UUppercaseString, pUString, TRUE);
if ( status )
{
goto CleanExit;
}
pUString = &UUppercaseString;
//
// Calculate required string length, excluding trailing NUL.
//
Length = RtlUnicodeStringToOemSize( pUString ) - 1;
ASSERT( Length < 0x100 );
if ( data_size + Length > RequestBufferSize ) {
KdPrint(("NWLIB: NwlibMakeNcp case 'U' request buffer too small\n"));
status = STATUS_BUFFER_TOO_SMALL;
goto CleanExit;
}
RequestBuffer[data_size++] = (UCHAR)Length;
OemString.Buffer = &RequestBuffer[data_size];
OemString.MaximumLength = (USHORT)Length + 1;
status = RtlUnicodeStringToOemString( &OemString, pUString, FALSE );
ASSERT( NT_SUCCESS( status ));
RtlFreeUnicodeString( &UUppercaseString );
data_size += (USHORT)Length;
break;
}
case 'R':
case 'r':
{
BYTE* b = va_arg ( Arguments, BYTE* );
WORD l = va_arg ( Arguments, WORD );
char* c;
if ( data_size + l > RequestBufferSize )
{
KdPrint(("NWLIB: NwlibMakeNcp case 'r' request buffer too small\n"));
status = STATUS_BUFFER_TOO_SMALL;
goto CleanExit;
}
RtlCopyMemory( (c=(char*)&RequestBuffer[data_size]), b, l );
data_size += l;
//
// Map Japanese special chars
//
if (*z == 'R')
{
if ( GetVersionInfo )
{
status = GetFileServerVersionInfo( DeviceHandle,
&VerInfo );
GetVersionInfo = FALSE;
if ( status == STATUS_SUCCESS )
{
if ( VerInfo.Version > 3 )
{
DoMapSpecialJapaneseCharThing = FALSE;
}
}
}
if ( DoMapSpecialJapaneseCharThing )
{
MapSpecialJapaneseChars(c, (WORD)l);
}
}
break;
}
default:
KdPrint(("NWLIB: NwlibMakeNcp invalid request field, %x\n", *z));
ASSERT(FALSE);
}
if ( data_size > RequestBufferSize )
{
KdPrint(("NWLIB: NwlibMakeNcp too much request data\n"));
status = STATUS_BUFFER_TOO_SMALL;
goto CleanExit;
}
z++;
}
//
// Make the NCP request
//
status = NtFsControlFile(
DeviceHandle,
NULL,
NULL,
NULL,
&IoStatusBlock,
FsControlCode,
(PVOID) RequestBuffer,
RequestBufferSize,
(PVOID) ResponseBuffer,
ResponseBufferSize
);
if ( (status == STATUS_PENDING) && SpecialCaseChangePass ) {
//
// TRACKING - remove this when bug 99008 is fixed in NwRdr.
// The NwRdr fix is nontrivial.
//
// This call is supposed to be synchronous. For some reason, if
// supplemental credentials are used, it is NOT. Since the redir
// is already shipped, we workaround it. We do so as follows:
//
// a) give the redir a chance to fill in the buffer (not a real fix)
// b) dont free the buffer. its better to leak in this case (not
// common) than to trash the heap.
// c) set result to success so we will continue.
//
Sleep(200) ;
DontFreeBuffer = TRUE ;
status = STATUS_SUCCESS ;
}
if (status == STATUS_SUCCESS) {
status = IoStatusBlock.Status;
}
if (status != STATUS_SUCCESS) {
#if 0
if (! NT_SUCCESS(status)) {
KdPrint(("NWLIB: NwlibMakeNcp: NtFsControlFile returns x%08lx\n", status));
}
#endif
goto CleanExit;
}
ReturnedDataSize = (DWORD) IoStatusBlock.Information; // Number of bytes returned
// in ResponseBuffer
//
// Convert the response packet into output arguments.
//
data_size = 0;
if (*z && *z == '|') {
z++;
}
while ( *z )
{
switch ( *z )
{
case '-':
data_size += 1;
break;
case '=':
data_size += 2;
break;
case '_':
{
WORD l = va_arg ( Arguments, WORD );
data_size += l;
break;
}
case 'b':
{
BYTE* b = va_arg ( Arguments, BYTE* );
*b = ResponseBuffer[data_size++];
break;
}
case 'w':
{
BYTE* b = va_arg ( Arguments, BYTE* );
b[1] = ResponseBuffer[data_size++];
b[0] = ResponseBuffer[data_size++];
break;
}
case 'd':
{
BYTE* b = va_arg ( Arguments, BYTE* );
b[3] = ResponseBuffer[data_size++];
b[2] = ResponseBuffer[data_size++];
b[1] = ResponseBuffer[data_size++];
b[0] = ResponseBuffer[data_size++];
break;
}
case 'c':
{
char* c = va_arg ( Arguments, char* );
WORD l = (WORD)strlen( &ResponseBuffer[data_size] );
if ( data_size+l+1 < ReturnedDataSize ) {
RtlCopyMemory( c, &ResponseBuffer[data_size], l+1 );
}
data_size += l+1;
break;
}
case 'C':
{
char* c = va_arg ( Arguments, char* );
WORD l = va_arg ( Arguments, WORD );
WORD len = strlen( &ResponseBuffer[data_size] ) + 1;
if ( data_size + l < ReturnedDataSize ) {
RtlCopyMemory( c, &ResponseBuffer[data_size], len > l ? l :len);
}
c[l-1] = 0;
data_size += l;
break;
}
case 'P':
case 'p':
{
char* c = va_arg ( Arguments, char* );
BYTE l = ResponseBuffer[data_size++];
if ( data_size+l <= ReturnedDataSize ) {
RtlCopyMemory( c, &ResponseBuffer[data_size], l );
c[l] = 0;
}
data_size += l;
//
// Unmap Japanese special chars
//
if (*z == 'P')
{
if ( GetVersionInfo )
{
status = GetFileServerVersionInfo( DeviceHandle,
&VerInfo );
GetVersionInfo = FALSE;
if ( status == STATUS_SUCCESS )
{
if ( VerInfo.Version > 3 )
{
DoMapSpecialJapaneseCharThing = FALSE;
}
}
}
if ( DoMapSpecialJapaneseCharThing )
{
UnmapSpecialJapaneseChars(c, l);
}
}
break;
}
case 'R':
case 'r':
{
BYTE* b = va_arg ( Arguments, BYTE* );
WORD l = va_arg ( Arguments, WORD );
RtlCopyMemory( b, &ResponseBuffer[data_size], l );
data_size += l;
//
// Unmap Japanese special chars
//
if (*z == 'R')
{
if ( GetVersionInfo )
{
status = GetFileServerVersionInfo( DeviceHandle,
&VerInfo );
GetVersionInfo = FALSE;
if ( status == STATUS_SUCCESS )
{
if ( VerInfo.Version > 3 )
{
DoMapSpecialJapaneseCharThing = FALSE;
}
}
}
if ( DoMapSpecialJapaneseCharThing )
{
UnmapSpecialJapaneseChars(b, l);
}
}
break;
}
case 'W':
{
BYTE* b = va_arg ( Arguments, BYTE* );
BYTE* w = va_arg ( Arguments, BYTE* );
WORD i;
b[1] = ResponseBuffer[data_size++];
b[0] = ResponseBuffer[data_size++];
for ( i = 0; i < ((WORD) *b); i++, w += sizeof(WORD) )
{
w[1] = ResponseBuffer[data_size++];
w[0] = ResponseBuffer[data_size++];
}
break;
}
default:
KdPrint(("NWLIB: NwlibMakeNcp invalid response field, %x\n", *z));
ASSERT(FALSE);
}
if ( data_size > ReturnedDataSize )
{
KdPrint(("NWLIB: NwlibMakeNcp not enough response data\n"));
status = STATUS_UNSUCCESSFUL;
goto CleanExit;
}
z++;
}
status = STATUS_SUCCESS;
CleanExit:
if ((RequestBuffer != NULL) && !DontFreeBuffer) {
(void) LocalFree((HLOCAL) RequestBuffer);
}
va_end( Arguments );
return status;
}