public void ProcessCurrentBuffer(byte[] currentBuffer, StateObject state)
{
Socket clientSocket = state.ClientSocket;
if (state.ConnectionBuffer.Length == 0)
{
state.ConnectionBuffer = currentBuffer;
}
else
{
byte[] oldConnectionBuffer = state.ConnectionBuffer;
state.ConnectionBuffer = new byte[oldConnectionBuffer.Length + currentBuffer.Length];
Array.Copy(oldConnectionBuffer, state.ConnectionBuffer, oldConnectionBuffer.Length);
Array.Copy(currentBuffer, 0, state.ConnectionBuffer, oldConnectionBuffer.Length, currentBuffer.Length);
}
// we now have all SMB message bytes received so far in state.ConnectionBuffer
int bytesLeftInBuffer = state.ConnectionBuffer.Length;
while (bytesLeftInBuffer >= 4)
{
// The packet is either Direct TCP transport packet (which is an NBT Session Message
// Packet) or an NBT packet.
int bufferOffset = state.ConnectionBuffer.Length - bytesLeftInBuffer;
byte flags = ByteReader.ReadByte(state.ConnectionBuffer, bufferOffset + 1);
int trailerLength = (flags & 0x01) << 16 | BigEndianConverter.ToUInt16(state.ConnectionBuffer, bufferOffset + 2);
int packetLength = 4 + trailerLength;
if (flags > 0x01)
{
#if DEBUG
Log("[{0}] Invalid NBT flags", DateTime.Now.ToString("HH:mm:ss:ffff"));
#endif
state.ClientSocket.Close();
return;
}
if (packetLength > bytesLeftInBuffer)
{
break;
}
else
{
byte[] packetBytes = new byte[packetLength];
Array.Copy(state.ConnectionBuffer, bufferOffset, packetBytes, 0, packetLength);
ProcessPacket(packetBytes, state);
bytesLeftInBuffer -= packetLength;
if (!clientSocket.Connected)
{
// Do not continue to process the buffer if the other side closed the connection
return;
}
}
}
if (bytesLeftInBuffer > 0)
{
byte[] newReceiveBuffer = new byte[bytesLeftInBuffer];
Array.Copy(state.ConnectionBuffer, state.ConnectionBuffer.Length - bytesLeftInBuffer, newReceiveBuffer, 0, bytesLeftInBuffer);
state.ConnectionBuffer = newReceiveBuffer;
}
else
{
state.ConnectionBuffer = new byte[0];
}
}
/// <summary>
/// May return null
/// </summary>
public SMBCommand ProcessCommand(SMBHeader header, SMBCommand command, StateObject state, List <SMBCommand> sendQueue)
{
if (command is NegotiateRequest)
{
NegotiateRequest request = (NegotiateRequest)command;
if (request.Dialects.Contains(SMBServer.NTLanManagerDialect))
{
if (EnableExtendedSecurity && header.ExtendedSecurityFlag)
{
return(NegotiateHelper.GetNegotiateResponseExtended(request, m_serverGuid));
}
else
{
return(new NegotiateResponseNotSupported());
}
}
else
{
return(new NegotiateResponseNotSupported());
}
}
else if (command is SessionSetupAndXRequest)
{
SessionSetupAndXRequest request = (SessionSetupAndXRequest)command;
state.MaxBufferSize = request.MaxBufferSize;
//this probably won't work
return(NegotiateHelper.GetSessionSetupResponse(header, request, state));
}
else if (command is SessionSetupAndXRequestExtended)
{
SessionSetupAndXRequestExtended request = (SessionSetupAndXRequestExtended)command;
state.MaxBufferSize = request.MaxBufferSize;
return(NegotiateHelper.GetSessionSetupResponseExtended(header, request, state));
}
else if (command is EchoRequest)
{
return(ServerResponseHelper.GetEchoResponse((EchoRequest)command, sendQueue));
}
else if (state.IsAuthenticated(header.UID))
{
if (command is TreeConnectAndXRequest)
{
TreeConnectAndXRequest request = (TreeConnectAndXRequest)command;
return(TreeConnectHelper.GetTreeConnectResponse(header, request, state, m_shares));
}
else if (command is LogoffAndXRequest)
{
return(new LogoffAndXResponse());
}
else if (state.IsTreeConnected(header.TID))
{
string rootPath = state.GetConnectedTreePath(header.TID);
object share;
if (state.IsIPC(header.TID))
{
share = m_services;
}
else
{
share = m_shares.GetShareFromRelativePath(rootPath);
}
if (command is CreateDirectoryRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
CreateDirectoryRequest request = (CreateDirectoryRequest)command;
return(FileSystemResponseHelper.GetCreateDirectoryResponse(header, request, (FileSystemShare)share, state));
}
else if (command is DeleteDirectoryRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
DeleteDirectoryRequest request = (DeleteDirectoryRequest)command;
return(FileSystemResponseHelper.GetDeleteDirectoryResponse(header, request, (FileSystemShare)share, state));
}
else if (command is CloseRequest)
{
CloseRequest request = (CloseRequest)command;
return(ServerResponseHelper.GetCloseResponse(header, request, state));
}
else if (command is FlushRequest)
{
return(new FlushResponse());
}
else if (command is DeleteRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
DeleteRequest request = (DeleteRequest)command;
return(FileSystemResponseHelper.GetDeleteResponse(header, request, (FileSystemShare)share, state));
}
else if (command is RenameRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
RenameRequest request = (RenameRequest)command;
return(FileSystemResponseHelper.GetRenameResponse(header, request, (FileSystemShare)share, state));
}
else if (command is QueryInformationRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
QueryInformationRequest request = (QueryInformationRequest)command;
return(FileSystemResponseHelper.GetQueryInformationResponse(header, request, (FileSystemShare)share));
}
else if (command is SetInformationRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
SetInformationRequest request = (SetInformationRequest)command;
return(FileSystemResponseHelper.GetSetInformationResponse(header, request, (FileSystemShare)share, state));
}
else if (command is ReadRequest)
{
ReadRequest request = (ReadRequest)command;
return(ReadWriteResponseHelper.GetReadResponse(header, request, share, state));
}
else if (command is WriteRequest)
{
string userName = state.GetConnectedUserName(header.UID);
if (share is FileSystemShare && !((FileSystemShare)share).HasWriteAccess(userName))
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(command.CommandName));
}
WriteRequest request = (WriteRequest)command;
return(ReadWriteResponseHelper.GetWriteResponse(header, request, share, state));
}
else if (command is CheckDirectoryRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
CheckDirectoryRequest request = (CheckDirectoryRequest)command;
return(FileSystemResponseHelper.GetCheckDirectoryResponse(header, request, (FileSystemShare)share));
}
else if (command is WriteRawRequest)
{
// [MS-CIFS] 3.3.5.26 - Receiving an SMB_COM_WRITE_RAW Request:
// the server MUST verify that the Server.Capabilities include CAP_RAW_MODE,
// If an error is detected [..] the Write Raw operation MUST fail and
// the server MUST return a Final Server Response [..] with the Count field set to zero.
return(new WriteRawFinalResponse());
}
else if (command is SetInformation2Request)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
SetInformation2Request request = (SetInformation2Request)command;
return(FileSystemResponseHelper.GetSetInformation2Response(header, request, (FileSystemShare)share, state));
}
else if (command is LockingAndXRequest)
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(CommandName.SMB_COM_LOCKING_ANDX));
}
else if (command is OpenAndXRequest)
{
OpenAndXRequest request = (OpenAndXRequest)command;
return(OpenAndXHelper.GetOpenAndXResponse(header, request, share, state));
}
else if (command is ReadAndXRequest)
{
ReadAndXRequest request = (ReadAndXRequest)command;
return(ReadWriteResponseHelper.GetReadResponse(header, request, share, state));
}
else if (command is WriteAndXRequest)
{
string userName = state.GetConnectedUserName(header.UID);
if (share is FileSystemShare && !((FileSystemShare)share).HasWriteAccess(userName))
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(command.CommandName));
}
WriteAndXRequest request = (WriteAndXRequest)command;
return(ReadWriteResponseHelper.GetWriteResponse(header, request, share, state));
}
else if (command is FindClose2Request)
{
return(ServerResponseHelper.GetFindClose2Request(header, (FindClose2Request)command, state));
}
else if (command is TreeDisconnectRequest)
{
TreeDisconnectRequest request = (TreeDisconnectRequest)command;
return(TreeConnectHelper.GetTreeDisconnectResponse(header, request, state));
}
else if (command is TransactionRequest) // Both TransactionRequest and Transaction2Request
{
TransactionRequest request = (TransactionRequest)command;
try
{
return(TransactionHelper.GetTransactionResponse(header, request, share, state, sendQueue));
}
catch (UnsupportedInformationLevelException)
{
header.Status = NTStatus.STATUS_INVALID_PARAMETER;
return(new ErrorResponse(command.CommandName));
}
}
else if (command is TransactionSecondaryRequest) // Both TransactionSecondaryRequest and Transaction2SecondaryRequest
{
TransactionSecondaryRequest request = (TransactionSecondaryRequest)command;
try
{
return(TransactionHelper.GetTransactionResponse(header, request, share, state, sendQueue));
}
catch (UnsupportedInformationLevelException)
{
header.Status = NTStatus.STATUS_INVALID_PARAMETER;
return(new ErrorResponse(command.CommandName));
}
}
else if (command is NTTransactRequest)
{
NTTransactRequest request = (NTTransactRequest)command;
return(NTTransactHelper.GetNTTransactResponse(header, request, share, state, sendQueue));
}
else if (command is NTTransactSecondaryRequest)
{
NTTransactSecondaryRequest request = (NTTransactSecondaryRequest)command;
return(NTTransactHelper.GetNTTransactResponse(header, request, share, state, sendQueue));
}
else if (command is NTCreateAndXRequest)
{
NTCreateAndXRequest request = (NTCreateAndXRequest)command;
return(NTCreateHelper.GetNTCreateResponse(header, request, share, state));
}
}
else
{
header.Status = NTStatus.STATUS_SMB_BAD_TID;
return(new ErrorResponse(command.CommandName));
}
}
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
internal static SMBCommand GetOpenAndXResponse(SMBHeader header, OpenAndXRequest request, object share, StateObject state)
{
bool isExtended = (request.Flags & OpenFlags.SMB_OPEN_EXTENDED_RESPONSE) > 0;
string path = request.FileName;
if (share is NamedPipeShare)
{
RemoteService service = ((NamedPipeShare)share).GetService(path);
if (service != null)
{
ushort fileID = state.AddOpenedFile(path);
if (isExtended)
{
return(CreateResponseExtendedForNamedPipe(fileID));
}
else
{
CreateResponseForNamedPipe(fileID);
}
}
header.Status = NTStatus.STATUS_OBJECT_PATH_NOT_FOUND;
return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX));
}
else // FileSystemShare
{
FileSystemShare fileSystemShare = (FileSystemShare)share;
string userName = state.GetConnectedUserName(header.UID);
bool hasWriteAccess = fileSystemShare.HasWriteAccess(userName);
IFileSystem fileSystem = fileSystemShare.FileSystem;
OpenResult openResult;
FileSystemEntry entry = fileSystem.GetEntry(path);
if (entry != null)
{
if (!hasWriteAccess && request.AccessMode.AccessMode == AccessMode.Write || request.AccessMode.AccessMode == AccessMode.ReadWrite)
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX));
}
if (request.OpenMode.FileExistsOpts == FileExistsOpts.ReturnError)
{
header.Status = NTStatus.STATUS_OBJECT_NAME_COLLISION;
return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX));
}
else if (request.OpenMode.FileExistsOpts == FileExistsOpts.TruncateToZero)
{
try
{
Stream stream = fileSystem.OpenFile(path, FileMode.Truncate, FileAccess.ReadWrite, FileShare.ReadWrite);
stream.Close();
}
catch (IOException ex)
{
ushort errorCode = IOExceptionHelper.GetWin32ErrorCode(ex);
if (errorCode == (ushort)Win32Error.ERROR_SHARING_VIOLATION)
{
header.Status = NTStatus.STATUS_SHARING_VIOLATION;
return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX));
}
else
{
header.Status = NTStatus.STATUS_DATA_ERROR;
return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX));
}
}
catch (UnauthorizedAccessException)
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX));
}
openResult = OpenResult.FileExistedAndWasTruncated;
}
else // FileExistsOpts.Append
{
openResult = OpenResult.FileExistedAndWasOpened;
}
}
else
{
if (request.OpenMode.CreateFile == CreateFile.ReturnErrorIfNotExist)
{
header.Status = NTStatus.STATUS_NO_SUCH_FILE;
return(new ErrorResponse(CommandName.SMB_COM_OPEN_ANDX));
}
entry = fileSystem.CreateFile(path);
openResult = OpenResult.NotExistedAndWasCreated;
}
ushort fileID = state.AddOpenedFile(path, true);
if (isExtended)
{
return(CreateResponseFromFileSystemEntry(entry, fileID, openResult));
}
else
{
return(CreateResponseExtendedFromFileSystemEntry(entry, fileID, openResult));
}
}
}
