public NTStatus CreateFile(out object handle, out FileStatus fileStatus, string path, AccessMask desiredAccess, FileAttributes fileAttributes, ShareAccess shareAccess, CreateDisposition createDisposition, CreateOptions createOptions, SecurityContext securityContext)
{
handle = null;
fileStatus = FileStatus.FILE_DOES_NOT_EXIST;
NTCreateAndXRequest request = new NTCreateAndXRequest();
request.FileName = path;
request.DesiredAccess = desiredAccess;
request.ExtFileAttributes = ToExtendedFileAttributes(fileAttributes);
request.ShareAccess = shareAccess;
request.CreateDisposition = createDisposition;
request.CreateOptions = createOptions;
request.ImpersonationLevel = ImpersonationLevel.Impersonation;
TrySendMessage(request);
SMB1Message reply = m_client.WaitForMessage(CommandName.SMB_COM_NT_CREATE_ANDX);
if (reply != null)
{
if (reply.Commands[0] is NTCreateAndXResponse)
{
NTCreateAndXResponse response = reply.Commands[0] as NTCreateAndXResponse;
handle = response.FID;
fileStatus = ToFileStatus(response.CreateDisposition);
return(reply.Header.Status);
}
else if (reply.Commands[0] is ErrorResponse)
{
return(reply.Header.Status);
}
}
return(NTStatus.STATUS_INVALID_SMB);
}
public void CreateFile(out NtHandle handle, out FileStatus fileStatus, string path,
AccessMask desiredAccess, FileAttributes fileAttributes, ShareAccess shareAccess,
CreateDisposition createDisposition, CreateOptions createOptions, SecurityContext?securityContext)
{
handle = null;
fileStatus = FileStatus.FILE_DOES_NOT_EXIST;
NTCreateAndXRequest request = new NTCreateAndXRequest
{
FileName = path,
DesiredAccess = desiredAccess,
ExtFileAttributes = ToExtendedFileAttributes(fileAttributes),
ShareAccess = shareAccess,
CreateDisposition = createDisposition,
CreateOptions = createOptions,
ImpersonationLevel = ImpersonationLevel.Impersonation
};
TrySendMessage(request);
SMB1Message reply = m_client.WaitForMessage(CommandName.SMB_COM_NT_CREATE_ANDX);
switch (reply.Commands[0])
{
case NTCreateAndXResponse response:
{
handle = new Smb1Handle(response.FID);
fileStatus = ToFileStatus(response.CreateDisposition);
reply.IsSuccessElseThrow();
break;
}
case ErrorResponse _:
reply.IsSuccessElseThrow();
break;
default:
throw new NtStatusException(NTStatus.STATUS_INVALID_SMB);
}
}
internal static SMB1Command GetNTCreateResponse(SMB1Header header, NTCreateAndXRequest request, ISMBShare share, SMB1ConnectionState state)
{
SMB1Session session = state.GetSession(header.UID);
bool isExtended = (request.Flags & NTCreateFlags.NT_CREATE_REQUEST_EXTENDED_RESPONSE) > 0;
string path = request.FileName;
FileAccess createAccess = NTFileStoreHelper.ToCreateFileAccess(request.DesiredAccess, request.CreateDisposition);
if (share is FileSystemShare)
{
if (!((FileSystemShare)share).HasAccess(session.SecurityContext, path, createAccess))
{
state.LogToServer(Severity.Verbose, "Create: Opening '{0}{1}' failed. User '{2}' was denied access.", share.Name, request.FileName, session.UserName);
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(request.CommandName));
}
}
object handle;
FileStatus fileStatus;
NTStatus createStatus = share.FileStore.CreateFile(out handle, out fileStatus, path, request.DesiredAccess, request.ShareAccess, request.CreateDisposition, request.CreateOptions, session.SecurityContext);
if (createStatus != NTStatus.STATUS_SUCCESS)
{
state.LogToServer(Severity.Verbose, "Create: Opening '{0}{1}' failed. NTStatus: '{2}'.", share.Name, path, createStatus);
header.Status = createStatus;
return(new ErrorResponse(request.CommandName));
}
state.LogToServer(Severity.Verbose, "Create: Opened '{0}{1}'.", share.Name, path);
ushort?fileID = session.AddOpenFile(header.TID, path, handle);
if (!fileID.HasValue)
{
share.FileStore.CloseFile(handle);
header.Status = NTStatus.STATUS_TOO_MANY_OPENED_FILES;
return(new ErrorResponse(request.CommandName));
}
if (share is NamedPipeShare)
{
if (isExtended)
{
return(CreateResponseExtendedForNamedPipe(fileID.Value, FileStatus.FILE_OPENED));
}
else
{
return(CreateResponseForNamedPipe(fileID.Value, FileStatus.FILE_OPENED));
}
}
else // FileSystemShare
{
FileNetworkOpenInformation fileInfo = NTFileStoreHelper.GetNetworkOpenInformation(share.FileStore, handle);
if (isExtended)
{
NTCreateAndXResponseExtended response = CreateResponseExtendedFromFileInformation(fileInfo, fileID.Value, fileStatus);
if ((request.Flags & NTCreateFlags.NT_CREATE_REQUEST_OPBATCH) > 0)
{
response.OpLockLevel = OpLockLevel.BatchOpLockGranted;
}
return(response);
}
else
{
NTCreateAndXResponse response = CreateResponseFromFileInformation(fileInfo, fileID.Value, fileStatus);
if ((request.Flags & NTCreateFlags.NT_CREATE_REQUEST_OPBATCH) > 0)
{
response.OpLockLevel = OpLockLevel.BatchOpLockGranted;
}
return(response);
}
}
}
internal static SMB1Command GetNTCreateResponse(SMB1Header header, NTCreateAndXRequest request, ISMBShare share, SMB1ConnectionState state)
{
SMB1Session session = state.GetSession(header.UID);
bool isExtended = (request.Flags & NTCreateFlags.NT_CREATE_REQUEST_EXTENDED_RESPONSE) > 0;
string path = request.FileName;
if (!path.StartsWith(@"\"))
{
path = @"\" + path;
}
FileAccess createAccess = NTFileStoreHelper.ToCreateFileAccess(request.DesiredAccess, request.CreateDisposition);
if (share is FileSystemShare)
{
if (!((FileSystemShare)share).HasAccess(session.SecurityContext, path, createAccess))
{
state.LogToServer(Severity.Verbose, "Create: Opening '{0}{1}' failed. User '{2}' was denied access.", share.Name, request.FileName, session.UserName);
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(request.CommandName));
}
}
object handle;
FileStatus fileStatus;
FileAttributes fileAttributes = ToFileAttributes(request.ExtFileAttributes);
// GetFileInformation/FileNetworkOpenInformation requires FILE_READ_ATTRIBUTES
AccessMask desiredAccess = request.DesiredAccess | (AccessMask)FileAccessMask.FILE_READ_ATTRIBUTES;
NTStatus createStatus = share.FileStore.CreateFile(out handle, out fileStatus, path, desiredAccess, fileAttributes, request.ShareAccess, request.CreateDisposition, request.CreateOptions, session.SecurityContext);
if (createStatus != NTStatus.STATUS_SUCCESS)
{
state.LogToServer(Severity.Verbose, "Create: Opening '{0}{1}' failed. NTStatus: {2}.", share.Name, path, createStatus);
header.Status = createStatus;
return(new ErrorResponse(request.CommandName));
}
FileAccess fileAccess = NTFileStoreHelper.ToFileAccess(desiredAccess);
ushort? fileID = session.AddOpenFile(header.TID, share.Name, path, handle, fileAccess);
if (!fileID.HasValue)
{
share.FileStore.CloseFile(handle);
state.LogToServer(Severity.Verbose, "Create: Opening '{0}{1}' failed. Too many open files.", share.Name, path);
header.Status = NTStatus.STATUS_TOO_MANY_OPENED_FILES;
return(new ErrorResponse(request.CommandName));
}
string fileAccessString = fileAccess.ToString().Replace(", ", "|");
string shareAccessString = request.ShareAccess.ToString().Replace(", ", "|");
state.LogToServer(Severity.Verbose, "Create: Opened '{0}{1}', FileAccess: {2}, ShareAccess: {3}. (UID: {4}, TID: {5}, FID: {6})", share.Name, path, fileAccessString, shareAccessString, header.UID, header.TID, fileID.Value);
if (share is NamedPipeShare)
{
if (isExtended)
{
return(CreateResponseExtendedForNamedPipe(fileID.Value, FileStatus.FILE_OPENED));
}
else
{
return(CreateResponseForNamedPipe(fileID.Value, FileStatus.FILE_OPENED));
}
}
else // FileSystemShare
{
FileNetworkOpenInformation fileInfo = NTFileStoreHelper.GetNetworkOpenInformation(share.FileStore, handle);
if (isExtended)
{
NTCreateAndXResponseExtended response = CreateResponseExtendedFromFileInformation(fileInfo, fileID.Value, fileStatus);
return(response);
}
else
{
NTCreateAndXResponse response = CreateResponseFromFileInformation(fileInfo, fileID.Value, fileStatus);
return(response);
}
}
}
private List <SMB1Command> ProcessSMB1Command(SMB1Header header, SMB1Command command, SMB1ConnectionState state)
{
if (command is SessionSetupAndXRequest)
{
SessionSetupAndXRequest request = (SessionSetupAndXRequest)command;
state.MaxBufferSize = request.MaxBufferSize;
return(SessionSetupHelper.GetSessionSetupResponse(header, request, m_securityProvider, state));
}
else if (command is SessionSetupAndXRequestExtended)
{
SessionSetupAndXRequestExtended request = (SessionSetupAndXRequestExtended)command;
state.MaxBufferSize = request.MaxBufferSize;
return(SessionSetupHelper.GetSessionSetupResponseExtended(header, request, m_securityProvider, state));
}
else if (command is EchoRequest)
{
return(ServerResponseHelper.GetEchoResponse((EchoRequest)command));
}
else
{
SMB1Session session = state.GetSession(header.UID);
if (session == null)
{
header.Status = NTStatus.STATUS_USER_SESSION_DELETED;
return(new ErrorResponse(command.CommandName));
}
if (command is TreeConnectAndXRequest)
{
TreeConnectAndXRequest request = (TreeConnectAndXRequest)command;
return(TreeConnectHelper.GetTreeConnectResponse(header, request, state, m_services, m_shares));
}
else if (command is LogoffAndXRequest)
{
state.LogToServer(Severity.Information, "Logoff: User '{0}' logged off.", session.UserName);
m_securityProvider.DeleteSecurityContext(ref session.SecurityContext.AuthenticationContext);
state.RemoveSession(header.UID);
return(new LogoffAndXResponse());
}
else
{
ISMBShare share = session.GetConnectedTree(header.TID);
if (share == null)
{
header.Status = NTStatus.STATUS_SMB_BAD_TID;
return(new ErrorResponse(command.CommandName));
}
if (command is CreateDirectoryRequest)
{
CreateDirectoryRequest request = (CreateDirectoryRequest)command;
return(FileStoreResponseHelper.GetCreateDirectoryResponse(header, request, share, state));
}
else if (command is DeleteDirectoryRequest)
{
DeleteDirectoryRequest request = (DeleteDirectoryRequest)command;
return(FileStoreResponseHelper.GetDeleteDirectoryResponse(header, request, share, state));
}
else if (command is CloseRequest)
{
CloseRequest request = (CloseRequest)command;
return(ServerResponseHelper.GetCloseResponse(header, request, share, state));
}
else if (command is FlushRequest)
{
return(new FlushResponse());
}
else if (command is DeleteRequest)
{
DeleteRequest request = (DeleteRequest)command;
return(FileStoreResponseHelper.GetDeleteResponse(header, request, share, state));
}
else if (command is RenameRequest)
{
RenameRequest request = (RenameRequest)command;
return(FileStoreResponseHelper.GetRenameResponse(header, request, share, state));
}
else if (command is QueryInformationRequest)
{
QueryInformationRequest request = (QueryInformationRequest)command;
return(FileStoreResponseHelper.GetQueryInformationResponse(header, request, share, state));
}
else if (command is SetInformationRequest)
{
SetInformationRequest request = (SetInformationRequest)command;
return(FileStoreResponseHelper.GetSetInformationResponse(header, request, share, state));
}
else if (command is ReadRequest)
{
ReadRequest request = (ReadRequest)command;
return(ReadWriteResponseHelper.GetReadResponse(header, request, share, state));
}
else if (command is WriteRequest)
{
WriteRequest request = (WriteRequest)command;
return(ReadWriteResponseHelper.GetWriteResponse(header, request, share, state));
}
else if (command is CheckDirectoryRequest)
{
CheckDirectoryRequest request = (CheckDirectoryRequest)command;
return(FileStoreResponseHelper.GetCheckDirectoryResponse(header, request, share, state));
}
else if (command is WriteRawRequest)
{
// [MS-CIFS] 3.3.5.26 - Receiving an SMB_COM_WRITE_RAW Request:
// the server MUST verify that the Server.Capabilities include CAP_RAW_MODE,
// If an error is detected [..] the Write Raw operation MUST fail and
// the server MUST return a Final Server Response [..] with the Count field set to zero.
return(new WriteRawFinalResponse());
}
else if (command is SetInformation2Request)
{
SetInformation2Request request = (SetInformation2Request)command;
return(FileStoreResponseHelper.GetSetInformation2Response(header, request, share, state));
}
else if (command is LockingAndXRequest)
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(command.CommandName));
}
else if (command is OpenAndXRequest)
{
OpenAndXRequest request = (OpenAndXRequest)command;
return(OpenAndXHelper.GetOpenAndXResponse(header, request, share, state));
}
else if (command is ReadAndXRequest)
{
ReadAndXRequest request = (ReadAndXRequest)command;
return(ReadWriteResponseHelper.GetReadResponse(header, request, share, state));
}
else if (command is WriteAndXRequest)
{
WriteAndXRequest request = (WriteAndXRequest)command;
return(ReadWriteResponseHelper.GetWriteResponse(header, request, share, state));
}
else if (command is FindClose2Request)
{
return(ServerResponseHelper.GetFindClose2Request(header, (FindClose2Request)command, state));
}
else if (command is TreeDisconnectRequest)
{
TreeDisconnectRequest request = (TreeDisconnectRequest)command;
return(TreeConnectHelper.GetTreeDisconnectResponse(header, request, share, state));
}
else if (command is TransactionRequest) // Both TransactionRequest and Transaction2Request
{
TransactionRequest request = (TransactionRequest)command;
return(TransactionHelper.GetTransactionResponse(header, request, share, state));
}
else if (command is TransactionSecondaryRequest) // Both TransactionSecondaryRequest and Transaction2SecondaryRequest
{
TransactionSecondaryRequest request = (TransactionSecondaryRequest)command;
return(TransactionHelper.GetTransactionResponse(header, request, share, state));
}
else if (command is NTTransactRequest)
{
NTTransactRequest request = (NTTransactRequest)command;
return(NTTransactHelper.GetNTTransactResponse(header, request, share, state));
}
else if (command is NTTransactSecondaryRequest)
{
NTTransactSecondaryRequest request = (NTTransactSecondaryRequest)command;
return(NTTransactHelper.GetNTTransactResponse(header, request, share, state));
}
else if (command is NTCreateAndXRequest)
{
NTCreateAndXRequest request = (NTCreateAndXRequest)command;
return(NTCreateHelper.GetNTCreateResponse(header, request, share, state));
}
}
}
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
internal static SMBCommand GetNTCreateResponse(SMBHeader header, NTCreateAndXRequest request, object share, StateObject state)
{
bool isExtended = (request.Flags & NTCreateFlags.NT_CREATE_REQUEST_EXTENDED_RESPONSE) > 0;
string path = request.FileName;
if (share is NamedPipeShare)
{
RemoteService service = ((NamedPipeShare)share).GetService(path);
if (service != null)
{
ushort fileID = state.AddOpenedFile(path);
if (isExtended)
{
return(CreateResponseExtendedForNamedPipe(fileID));
}
else
{
return(CreateResponseForNamedPipe(fileID));
}
}
header.Status = NTStatus.STATUS_OBJECT_PATH_NOT_FOUND;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
else // FileSystemShare
{
FileSystemShare fileSystemShare = (FileSystemShare)share;
IFileSystem fileSystem = fileSystemShare.FileSystem;
bool forceDirectory = (request.CreateOptions & CreateOptions.FILE_DIRECTORY_FILE) > 0;
bool forceFile = (request.CreateOptions & CreateOptions.FILE_NON_DIRECTORY_FILE) > 0;
if (forceDirectory & (request.CreateDisposition != CreateDisposition.FILE_CREATE &&
request.CreateDisposition != CreateDisposition.FILE_OPEN &&
request.CreateDisposition != CreateDisposition.FILE_OPEN_IF))
{
header.Status = NTStatus.STATUS_INVALID_PARAMETER;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
// Windows will try to access named streams (alternate data streams) regardless of the FILE_NAMED_STREAMS flag, we need to prevent this behaviour.
if (path.Contains(":"))
{
// Windows Server 2003 will return STATUS_OBJECT_NAME_NOT_FOUND
header.Status = NTStatus.STATUS_NO_SUCH_FILE;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
FileSystemEntry entry = fileSystem.GetEntry(path);
if (request.CreateDisposition == CreateDisposition.FILE_OPEN)
{
if (entry == null)
{
header.Status = NTStatus.STATUS_OBJECT_PATH_NOT_FOUND;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
if (entry.IsDirectory && forceFile)
{
header.Status = NTStatus.STATUS_FILE_IS_A_DIRECTORY;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
if (!entry.IsDirectory && forceDirectory)
{
// Not sure if that's the correct response
header.Status = NTStatus.STATUS_OBJECT_NAME_COLLISION;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
}
else if (request.CreateDisposition == CreateDisposition.FILE_CREATE)
{
if (entry != null)
{
// File already exists, fail the request
header.Status = NTStatus.STATUS_OBJECT_NAME_COLLISION;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
string userName = state.GetConnectedUserName(header.UID);
if (!fileSystemShare.HasWriteAccess(userName))
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
try
{
if (forceDirectory)
{
entry = fileSystem.CreateDirectory(path);
}
else
{
entry = fileSystem.CreateFile(path);
}
}
catch (IOException ex)
{
ushort errorCode = IOExceptionHelper.GetWin32ErrorCode(ex);
if (errorCode == (ushort)Win32Error.ERROR_SHARING_VIOLATION)
{
header.Status = NTStatus.STATUS_SHARING_VIOLATION;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
else
{
header.Status = NTStatus.STATUS_DATA_ERROR;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
}
catch (UnauthorizedAccessException)
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
}
else if (request.CreateDisposition == CreateDisposition.FILE_OPEN_IF ||
request.CreateDisposition == CreateDisposition.FILE_OVERWRITE ||
request.CreateDisposition == CreateDisposition.FILE_OVERWRITE_IF ||
request.CreateDisposition == CreateDisposition.FILE_SUPERSEDE)
{
entry = fileSystem.GetEntry(path);
if (entry == null)
{
if (request.CreateDisposition == CreateDisposition.FILE_OVERWRITE)
{
header.Status = NTStatus.STATUS_OBJECT_PATH_NOT_FOUND;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
string userName = state.GetConnectedUserName(header.UID);
if (!fileSystemShare.HasWriteAccess(userName))
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
try
{
if (forceDirectory)
{
entry = fileSystem.CreateDirectory(path);
}
else
{
entry = fileSystem.CreateFile(path);
}
}
catch (IOException ex)
{
ushort errorCode = IOExceptionHelper.GetWin32ErrorCode(ex);
if (errorCode == (ushort)Win32Error.ERROR_SHARING_VIOLATION)
{
header.Status = NTStatus.STATUS_SHARING_VIOLATION;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
else
{
header.Status = NTStatus.STATUS_DATA_ERROR;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
}
catch (UnauthorizedAccessException)
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
}
else
{
if (request.CreateDisposition == CreateDisposition.FILE_OVERWRITE ||
request.CreateDisposition == CreateDisposition.FILE_OVERWRITE_IF ||
request.CreateDisposition == CreateDisposition.FILE_SUPERSEDE)
{
string userName = state.GetConnectedUserName(header.UID);
if (!fileSystemShare.HasWriteAccess(userName))
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
// Truncate the file
try
{
Stream stream = fileSystem.OpenFile(path, FileMode.Truncate, FileAccess.ReadWrite, FileShare.ReadWrite);
stream.Close();
}
catch (IOException ex)
{
ushort errorCode = IOExceptionHelper.GetWin32ErrorCode(ex);
if (errorCode == (ushort)Win32Error.ERROR_SHARING_VIOLATION)
{
header.Status = NTStatus.STATUS_SHARING_VIOLATION;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
else
{
header.Status = NTStatus.STATUS_DATA_ERROR;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
}
catch (UnauthorizedAccessException)
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(CommandName.SMB_COM_NT_CREATE_ANDX));
}
}
}
}
else
{
throw new InvalidRequestException();
}
bool isSequentialAccess = (request.CreateOptions & CreateOptions.FILE_SEQUENTIAL_ONLY) > 0;
ushort fileID = state.AddOpenedFile(path, isSequentialAccess);
if (isExtended)
{
NTCreateAndXResponseExtended response = CreateResponseExtendedFromFileSystemEntry(entry, fileID);
if ((request.Flags & NTCreateFlags.NT_CREATE_REQUEST_OPBATCH) > 0)
{
response.OpLockLevel = OpLockLevel.BatchOpLockGranted;
}
return(response);
}
else
{
NTCreateAndXResponse response = CreateResponseFromFileSystemEntry(entry, fileID);
if ((request.Flags & NTCreateFlags.NT_CREATE_REQUEST_OPBATCH) > 0)
{
response.OpLockLevel = OpLockLevel.BatchOpLockGranted;
}
return(response);
}
}
}
public override IEnumerable <AbstractPacket> GetSubPackets(bool includeSelfReference)
{
if (includeSelfReference)
{
yield return(this);
}
AbstractPacket packet = null;
try {
CommandTypes commandType = (CommandTypes)command;
if (commandType == CommandTypes.SMB_COM_NT_CREATE_ANDX)
{
if (!this.FlagsResponse)
{
packet = new NTCreateAndXRequest(this);
}
else
{
packet = new NTCreateAndXResponse(this);
}
}
else if (commandType == CommandTypes.SMB_COM_READ_ANDX)
{
if (this.FlagsResponse)
{
packet = new ReadAndXResponse(this);
}
else
{
packet = new ReadAndXRequest(this);
}
}
else if (commandType == CommandTypes.SMB_COM_CLOSE)
{
if (!this.FlagsResponse)
{
packet = new CloseRequest(this);
}
}
else if (commandType == CommandTypes.SMB_COM_NEGOTIATE)
{
if (!this.FlagsResponse)
{
packet = new NegotiateProtocolRequest(this);
}
else
{
packet = new NegotiateProtocolResponse(this);
}
}
else if (commandType == CommandTypes.SMB_COM_SESSION_SETUP_ANDX)
{
if (!this.FlagsResponse)
{
packet = new SetupAndXRequest(this);
}
else
{
packet = new SetupAndXResponse(this);
}
}
}
catch (Exception e) {
yield break;//no sub packets
}
if (packet != null)
{
yield return(packet);
foreach (AbstractPacket subPacket in packet.GetSubPackets(false))
{
yield return(subPacket);
}
}
else
{
yield break;
}
}
/// <summary>
/// May return null
/// </summary>
public SMBCommand ProcessCommand(SMBHeader header, SMBCommand command, StateObject state, List <SMBCommand> sendQueue)
{
if (command is NegotiateRequest)
{
NegotiateRequest request = (NegotiateRequest)command;
if (request.Dialects.Contains(SMBServer.NTLanManagerDialect))
{
if (EnableExtendedSecurity && header.ExtendedSecurityFlag)
{
return(NegotiateHelper.GetNegotiateResponseExtended(request, m_serverGuid));
}
else
{
return(new NegotiateResponseNotSupported());
}
}
else
{
return(new NegotiateResponseNotSupported());
}
}
else if (command is SessionSetupAndXRequest)
{
SessionSetupAndXRequest request = (SessionSetupAndXRequest)command;
state.MaxBufferSize = request.MaxBufferSize;
//this probably won't work
return(NegotiateHelper.GetSessionSetupResponse(header, request, state));
}
else if (command is SessionSetupAndXRequestExtended)
{
SessionSetupAndXRequestExtended request = (SessionSetupAndXRequestExtended)command;
state.MaxBufferSize = request.MaxBufferSize;
return(NegotiateHelper.GetSessionSetupResponseExtended(header, request, state));
}
else if (command is EchoRequest)
{
return(ServerResponseHelper.GetEchoResponse((EchoRequest)command, sendQueue));
}
else if (state.IsAuthenticated(header.UID))
{
if (command is TreeConnectAndXRequest)
{
TreeConnectAndXRequest request = (TreeConnectAndXRequest)command;
return(TreeConnectHelper.GetTreeConnectResponse(header, request, state, m_shares));
}
else if (command is LogoffAndXRequest)
{
return(new LogoffAndXResponse());
}
else if (state.IsTreeConnected(header.TID))
{
string rootPath = state.GetConnectedTreePath(header.TID);
object share;
if (state.IsIPC(header.TID))
{
share = m_services;
}
else
{
share = m_shares.GetShareFromRelativePath(rootPath);
}
if (command is CreateDirectoryRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
CreateDirectoryRequest request = (CreateDirectoryRequest)command;
return(FileSystemResponseHelper.GetCreateDirectoryResponse(header, request, (FileSystemShare)share, state));
}
else if (command is DeleteDirectoryRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
DeleteDirectoryRequest request = (DeleteDirectoryRequest)command;
return(FileSystemResponseHelper.GetDeleteDirectoryResponse(header, request, (FileSystemShare)share, state));
}
else if (command is CloseRequest)
{
CloseRequest request = (CloseRequest)command;
return(ServerResponseHelper.GetCloseResponse(header, request, state));
}
else if (command is FlushRequest)
{
return(new FlushResponse());
}
else if (command is DeleteRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
DeleteRequest request = (DeleteRequest)command;
return(FileSystemResponseHelper.GetDeleteResponse(header, request, (FileSystemShare)share, state));
}
else if (command is RenameRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
RenameRequest request = (RenameRequest)command;
return(FileSystemResponseHelper.GetRenameResponse(header, request, (FileSystemShare)share, state));
}
else if (command is QueryInformationRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
QueryInformationRequest request = (QueryInformationRequest)command;
return(FileSystemResponseHelper.GetQueryInformationResponse(header, request, (FileSystemShare)share));
}
else if (command is SetInformationRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
SetInformationRequest request = (SetInformationRequest)command;
return(FileSystemResponseHelper.GetSetInformationResponse(header, request, (FileSystemShare)share, state));
}
else if (command is ReadRequest)
{
ReadRequest request = (ReadRequest)command;
return(ReadWriteResponseHelper.GetReadResponse(header, request, share, state));
}
else if (command is WriteRequest)
{
string userName = state.GetConnectedUserName(header.UID);
if (share is FileSystemShare && !((FileSystemShare)share).HasWriteAccess(userName))
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(command.CommandName));
}
WriteRequest request = (WriteRequest)command;
return(ReadWriteResponseHelper.GetWriteResponse(header, request, share, state));
}
else if (command is CheckDirectoryRequest)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
CheckDirectoryRequest request = (CheckDirectoryRequest)command;
return(FileSystemResponseHelper.GetCheckDirectoryResponse(header, request, (FileSystemShare)share));
}
else if (command is WriteRawRequest)
{
// [MS-CIFS] 3.3.5.26 - Receiving an SMB_COM_WRITE_RAW Request:
// the server MUST verify that the Server.Capabilities include CAP_RAW_MODE,
// If an error is detected [..] the Write Raw operation MUST fail and
// the server MUST return a Final Server Response [..] with the Count field set to zero.
return(new WriteRawFinalResponse());
}
else if (command is SetInformation2Request)
{
if (!(share is FileSystemShare))
{
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
SetInformation2Request request = (SetInformation2Request)command;
return(FileSystemResponseHelper.GetSetInformation2Response(header, request, (FileSystemShare)share, state));
}
else if (command is LockingAndXRequest)
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(CommandName.SMB_COM_LOCKING_ANDX));
}
else if (command is OpenAndXRequest)
{
OpenAndXRequest request = (OpenAndXRequest)command;
return(OpenAndXHelper.GetOpenAndXResponse(header, request, share, state));
}
else if (command is ReadAndXRequest)
{
ReadAndXRequest request = (ReadAndXRequest)command;
return(ReadWriteResponseHelper.GetReadResponse(header, request, share, state));
}
else if (command is WriteAndXRequest)
{
string userName = state.GetConnectedUserName(header.UID);
if (share is FileSystemShare && !((FileSystemShare)share).HasWriteAccess(userName))
{
header.Status = NTStatus.STATUS_ACCESS_DENIED;
return(new ErrorResponse(command.CommandName));
}
WriteAndXRequest request = (WriteAndXRequest)command;
return(ReadWriteResponseHelper.GetWriteResponse(header, request, share, state));
}
else if (command is FindClose2Request)
{
return(ServerResponseHelper.GetFindClose2Request(header, (FindClose2Request)command, state));
}
else if (command is TreeDisconnectRequest)
{
TreeDisconnectRequest request = (TreeDisconnectRequest)command;
return(TreeConnectHelper.GetTreeDisconnectResponse(header, request, state));
}
else if (command is TransactionRequest) // Both TransactionRequest and Transaction2Request
{
TransactionRequest request = (TransactionRequest)command;
try
{
return(TransactionHelper.GetTransactionResponse(header, request, share, state, sendQueue));
}
catch (UnsupportedInformationLevelException)
{
header.Status = NTStatus.STATUS_INVALID_PARAMETER;
return(new ErrorResponse(command.CommandName));
}
}
else if (command is TransactionSecondaryRequest) // Both TransactionSecondaryRequest and Transaction2SecondaryRequest
{
TransactionSecondaryRequest request = (TransactionSecondaryRequest)command;
try
{
return(TransactionHelper.GetTransactionResponse(header, request, share, state, sendQueue));
}
catch (UnsupportedInformationLevelException)
{
header.Status = NTStatus.STATUS_INVALID_PARAMETER;
return(new ErrorResponse(command.CommandName));
}
}
else if (command is NTTransactRequest)
{
NTTransactRequest request = (NTTransactRequest)command;
return(NTTransactHelper.GetNTTransactResponse(header, request, share, state, sendQueue));
}
else if (command is NTTransactSecondaryRequest)
{
NTTransactSecondaryRequest request = (NTTransactSecondaryRequest)command;
return(NTTransactHelper.GetNTTransactResponse(header, request, share, state, sendQueue));
}
else if (command is NTCreateAndXRequest)
{
NTCreateAndXRequest request = (NTCreateAndXRequest)command;
return(NTCreateHelper.GetNTCreateResponse(header, request, share, state));
}
}
else
{
header.Status = NTStatus.STATUS_SMB_BAD_TID;
return(new ErrorResponse(command.CommandName));
}
}
header.Status = NTStatus.STATUS_SMB_BAD_COMMAND;
return(new ErrorResponse(command.CommandName));
}
