public void ProcessCurrentBuffer(byte[] currentBuffer, StateObject state) { Socket clientSocket = state.ClientSocket; if (state.ConnectionBuffer.Length == 0) { state.ConnectionBuffer = currentBuffer; } else { byte[] oldConnectionBuffer = state.ConnectionBuffer; state.ConnectionBuffer = new byte[oldConnectionBuffer.Length + currentBuffer.Length]; Array.Copy(oldConnectionBuffer, state.ConnectionBuffer, oldConnectionBuffer.Length); Array.Copy(currentBuffer, 0, state.ConnectionBuffer, oldConnectionBuffer.Length, currentBuffer.Length); } // we now have all SMB message bytes received so far in state.ConnectionBuffer int bytesLeftInBuffer = state.ConnectionBuffer.Length; while (bytesLeftInBuffer >= 4) { // The packet is either Direct TCP transport packet (which is an NBT Session Message // Packet) or an NBT packet. int bufferOffset = state.ConnectionBuffer.Length - bytesLeftInBuffer; byte flags = ByteReader.ReadByte(state.ConnectionBuffer, bufferOffset + 1); int trailerLength = (flags & 0x01) << 16 | BigEndianConverter.ToUInt16(state.ConnectionBuffer, bufferOffset + 2); int packetLength = 4 + trailerLength; if (flags > 0x01) { #if DEBUG Log("[{0}] Invalid NBT flags", DateTime.Now.ToString("HH:mm:ss:ffff")); #endif state.ClientSocket.Close(); return; } if (packetLength > bytesLeftInBuffer) { break; } else { byte[] packetBytes = new byte[packetLength]; Array.Copy(state.ConnectionBuffer, bufferOffset, packetBytes, 0, packetLength); ProcessPacket(packetBytes, state); bytesLeftInBuffer -= packetLength; if (!clientSocket.Connected) { // Do not continue to process the buffer if the other side closed the connection return; } } } if (bytesLeftInBuffer > 0) { byte[] newReceiveBuffer = new byte[bytesLeftInBuffer]; Array.Copy(state.ConnectionBuffer, state.ConnectionBuffer.Length - bytesLeftInBuffer, newReceiveBuffer, 0, bytesLeftInBuffer); state.ConnectionBuffer = newReceiveBuffer; } else { state.ConnectionBuffer = new byte[0]; } }
/// <summary> /// May return null /// </summary> public SMBCommand ProcessCommand(SMBHeader header, SMBCommand command, StateObject state, List <SMBCommand> sendQueue) { if (command is NegotiateRequest) { NegotiateRequest request = (NegotiateRequest)command; if (request.Dialects.Contains(SMBServer.NTLanManagerDialect)) { if (EnableExtendedSecurity && header.ExtendedSecurityFlag) { return(NegotiateHelper.GetNegotiateResponseExtended(request, m_serverGuid)); } else { return(new NegotiateResponseNotSupported()); } } else { return(new NegotiateResponseNotSupported()); } } else if (command is SessionSetupAndXRequest) { SessionSetupAndXRequest request = (SessionSetupAndXRequest)command; state.MaxBufferSize = request.MaxBufferSize; //this probably won't work return(NegotiateHelper.GetSessionSetupResponse(header, request, state)); } else if (command is SessionSetupAndXRequestExtended) { SessionSetupAndXRequestExtended request = (SessionSetupAndXRequestExtended)command; state.MaxBufferSize = request.MaxBufferSize; return(NegotiateHelper.GetSessionSetupResponseExtended(header, request, state)); } else if (command is EchoRequest) { return(ServerResponseHelper.GetEchoResponse((EchoRequest)command, sendQueue)); } else if (state.IsAuthenticated(header.UID)) { if (command is TreeConnectAndXRequest) { TreeConnectAndXRequest request = (TreeConnectAndXRequest)command; return(TreeConnectHelper.GetTreeConnectResponse(header, request, state, m_shares)); } else if (command is LogoffAndXRequest) { return(new LogoffAndXResponse()); } else if (state.IsTreeConnected(header.TID)) { string rootPath = state.GetConnectedTreePath(header.TID); object share; if (state.IsIPC(header.TID)) { share = m_services; } else { share = m_shares.GetShareFromRelativePath(rootPath); } if (command is CreateDirectoryRequest) { if (!(share is FileSystemShare)) { header.Status = NTStatus.STATUS_SMB_BAD_COMMAND; return(new ErrorResponse(command.CommandName)); } CreateDirectoryRequest request = (CreateDirectoryRequest)command; return(FileSystemResponseHelper.GetCreateDirectoryResponse(header, request, (FileSystemShare)share, state)); } else if (command is DeleteDirectoryRequest) { if (!(share is FileSystemShare)) { header.Status = NTStatus.STATUS_SMB_BAD_COMMAND; return(new ErrorResponse(command.CommandName)); } DeleteDirectoryRequest request = (DeleteDirectoryRequest)command; return(FileSystemResponseHelper.GetDeleteDirectoryResponse(header, request, (FileSystemShare)share, state)); } else if (command is CloseRequest) { CloseRequest request = (CloseRequest)command; return(ServerResponseHelper.GetCloseResponse(header, request, state)); } else if (command is FlushRequest) { return(new FlushResponse()); } else if (command is DeleteRequest) { if (!(share is FileSystemShare)) { header.Status = NTStatus.STATUS_SMB_BAD_COMMAND; return(new ErrorResponse(command.CommandName)); } DeleteRequest request = (DeleteRequest)command; return(FileSystemResponseHelper.GetDeleteResponse(header, request, (FileSystemShare)share, state)); } else if (command is RenameRequest) { if (!(share is FileSystemShare)) { header.Status = NTStatus.STATUS_SMB_BAD_COMMAND; return(new ErrorResponse(command.CommandName)); } RenameRequest request = (RenameRequest)command; return(FileSystemResponseHelper.GetRenameResponse(header, request, (FileSystemShare)share, state)); } else if (command is QueryInformationRequest) { if (!(share is FileSystemShare)) { header.Status = NTStatus.STATUS_SMB_BAD_COMMAND; return(new ErrorResponse(command.CommandName)); } QueryInformationRequest request = (QueryInformationRequest)command; return(FileSystemResponseHelper.GetQueryInformationResponse(header, request, (FileSystemShare)share)); } else if (command is SetInformationRequest) { if (!(share is FileSystemShare)) { header.Status = NTStatus.STATUS_SMB_BAD_COMMAND; return(new ErrorResponse(command.CommandName)); } SetInformationRequest request = (SetInformationRequest)command; return(FileSystemResponseHelper.GetSetInformationResponse(header, request, (FileSystemShare)share, state)); } else if (command is ReadRequest) { ReadRequest request = (ReadRequest)command; return(ReadWriteResponseHelper.GetReadResponse(header, request, share, state)); } else if (command is WriteRequest) { string userName = state.GetConnectedUserName(header.UID); if (share is FileSystemShare && !((FileSystemShare)share).HasWriteAccess(userName)) { header.Status = NTStatus.STATUS_ACCESS_DENIED; return(new ErrorResponse(command.CommandName)); } WriteRequest request = (WriteRequest)command; return(ReadWriteResponseHelper.GetWriteResponse(header, request, share, state)); } else if (command is CheckDirectoryRequest) { if (!(share is FileSystemShare)) { header.Status = NTStatus.STATUS_SMB_BAD_COMMAND; return(new ErrorResponse(command.CommandName)); } CheckDirectoryRequest request = (CheckDirectoryRequest)command; return(FileSystemResponseHelper.GetCheckDirectoryResponse(header, request, (FileSystemShare)share)); } else if (command is WriteRawRequest) { // [MS-CIFS] 3.3.5.26 - Receiving an SMB_COM_WRITE_RAW Request: // the server MUST verify that the Server.Capabilities include CAP_RAW_MODE, // If an error is detected [..] the Write Raw operation MUST fail and // the server MUST return a Final Server Response [..] with the Count field set to zero. return(new WriteRawFinalResponse()); } else if (command is SetInformation2Request) { if (!(share is FileSystemShare)) { header.Status = NTStatus.STATUS_SMB_BAD_COMMAND; return(new ErrorResponse(command.CommandName)); } SetInformation2Request request = (SetInformation2Request)command; return(FileSystemResponseHelper.GetSetInformation2Response(header, request, (FileSystemShare)share, state)); } else if (command is LockingAndXRequest) { header.Status = NTStatus.STATUS_ACCESS_DENIED; return(new ErrorResponse(CommandName.SMB_COM_LOCKING_ANDX)); } else if (command is OpenAndXRequest) { OpenAndXRequest request = (OpenAndXRequest)command; return(OpenAndXHelper.GetOpenAndXResponse(header, request, share, state)); } else if (command is ReadAndXRequest) { ReadAndXRequest request = (ReadAndXRequest)command; return(ReadWriteResponseHelper.GetReadResponse(header, request, share, state)); } else if (command is WriteAndXRequest) { string userName = state.GetConnectedUserName(header.UID); if (share is FileSystemShare && !((FileSystemShare)share).HasWriteAccess(userName)) { header.Status = NTStatus.STATUS_ACCESS_DENIED; return(new ErrorResponse(command.CommandName)); } WriteAndXRequest request = (WriteAndXRequest)command; return(ReadWriteResponseHelper.GetWriteResponse(header, request, share, state)); } else if (command is FindClose2Request) { return(ServerResponseHelper.GetFindClose2Request(header, (FindClose2Request)command, state)); } else if (command is TreeDisconnectRequest) { TreeDisconnectRequest request = (TreeDisconnectRequest)command; return(TreeConnectHelper.GetTreeDisconnectResponse(header, request, state)); } else if (command is TransactionRequest) // Both TransactionRequest and Transaction2Request { TransactionRequest request = (TransactionRequest)command; try { return(TransactionHelper.GetTransactionResponse(header, request, share, state, sendQueue)); } catch (UnsupportedInformationLevelException) { header.Status = NTStatus.STATUS_INVALID_PARAMETER; return(new ErrorResponse(command.CommandName)); } } else if (command is TransactionSecondaryRequest) // Both TransactionSecondaryRequest and Transaction2SecondaryRequest { TransactionSecondaryRequest request = (TransactionSecondaryRequest)command; try { return(TransactionHelper.GetTransactionResponse(header, request, share, state, sendQueue)); } catch (UnsupportedInformationLevelException) { header.Status = NTStatus.STATUS_INVALID_PARAMETER; return(new ErrorResponse(command.CommandName)); } } else if (command is NTTransactRequest) { NTTransactRequest request = (NTTransactRequest)command; return(NTTransactHelper.GetNTTransactResponse(header, request, share, state, sendQueue)); } else if (command is NTTransactSecondaryRequest) { NTTransactSecondaryRequest request = (NTTransactSecondaryRequest)command; return(NTTransactHelper.GetNTTransactResponse(header, request, share, state, sendQueue)); } else if (command is NTCreateAndXRequest) { NTCreateAndXRequest request = (NTCreateAndXRequest)command; return(NTCreateHelper.GetNTCreateResponse(header, request, share, state)); } } else { header.Status = NTStatus.STATUS_SMB_BAD_TID; return(new ErrorResponse(command.CommandName)); } } header.Status = NTStatus.STATUS_SMB_BAD_COMMAND; return(new ErrorResponse(command.CommandName)); }
internal static SMBCommand GetOpenAndXResponse(SMBHeader header, OpenAndXRequest request, object share, StateObject state) { bool isExtended = (request.Flags & OpenFlags.SMB_OPEN_EXTENDED_RESPONSE) > 0; string path = request.FileName; if (share is NamedPipeShare) { RemoteService service = ((NamedPipeShare)share).GetService(path); if (service != null) { ushort fileID = state.AddOpenedFile(path); if (isExtended) { return(CreateResponseExtendedForNamedPipe(fileID)); } else { CreateResponseForNamedPipe(fileID); } } header.Status = NTStatus.STATUS_OBJECT_PATH_NOT_FOUND; return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX)); } else // FileSystemShare { FileSystemShare fileSystemShare = (FileSystemShare)share; string userName = state.GetConnectedUserName(header.UID); bool hasWriteAccess = fileSystemShare.HasWriteAccess(userName); IFileSystem fileSystem = fileSystemShare.FileSystem; OpenResult openResult; FileSystemEntry entry = fileSystem.GetEntry(path); if (entry != null) { if (!hasWriteAccess && request.AccessMode.AccessMode == AccessMode.Write || request.AccessMode.AccessMode == AccessMode.ReadWrite) { header.Status = NTStatus.STATUS_ACCESS_DENIED; return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX)); } if (request.OpenMode.FileExistsOpts == FileExistsOpts.ReturnError) { header.Status = NTStatus.STATUS_OBJECT_NAME_COLLISION; return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX)); } else if (request.OpenMode.FileExistsOpts == FileExistsOpts.TruncateToZero) { try { Stream stream = fileSystem.OpenFile(path, FileMode.Truncate, FileAccess.ReadWrite, FileShare.ReadWrite); stream.Close(); } catch (IOException ex) { ushort errorCode = IOExceptionHelper.GetWin32ErrorCode(ex); if (errorCode == (ushort)Win32Error.ERROR_SHARING_VIOLATION) { header.Status = NTStatus.STATUS_SHARING_VIOLATION; return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX)); } else { header.Status = NTStatus.STATUS_DATA_ERROR; return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX)); } } catch (UnauthorizedAccessException) { header.Status = NTStatus.STATUS_ACCESS_DENIED; return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX)); } openResult = OpenResult.FileExistedAndWasTruncated; } else // FileExistsOpts.Append { openResult = OpenResult.FileExistedAndWasOpened; } } else { if (request.OpenMode.CreateFile == CreateFile.ReturnErrorIfNotExist) { header.Status = NTStatus.STATUS_NO_SUCH_FILE; return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX)); } entry = fileSystem.CreateFile(path); openResult = OpenResult.NotExistedAndWasCreated; } ushort fileID = state.AddOpenedFile(path, true); if (isExtended) { return(CreateResponseFromFileSystemEntry(entry, fileID, openResult)); } else { return(CreateResponseExtendedFromFileSystemEntry(entry, fileID, openResult)); } } }