2 * Copyright (c) 2000-2001 Boris Popov
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
28 * various SMB requests. Most of the routines merely packs data into mbufs.
31 #include <sys/cdefs.h>
32 __FBSDID("$FreeBSD$");
34 #include <sys/param.h>
35 #include <sys/systm.h>
36 #include <sys/kernel.h>
37 #include <sys/malloc.h>
40 #include <sys/sysctl.h>
41 #include <sys/socket.h>
44 #include <sys/iconv.h>
46 #include <netsmb/smb.h>
47 #include <netsmb/smb_subr.h>
48 #include <netsmb/smb_rq.h>
49 #include <netsmb/smb_conn.h>
50 #include <netsmb/smb_tran.h>
52 #include "opt_netsmb.h"
59 static struct smb_dialect smb_dialects[] = {
60 {SMB_DIALECT_CORE, "PC NETWORK PROGRAM 1.0"},
61 {SMB_DIALECT_COREPLUS, "MICROSOFT NETWORKS 1.03"},
62 {SMB_DIALECT_LANMAN1_0, "MICROSOFT NETWORKS 3.0"},
63 {SMB_DIALECT_LANMAN1_0, "LANMAN1.0"},
64 {SMB_DIALECT_LANMAN2_0, "LM1.2X002"},
65 {SMB_DIALECT_LANMAN2_0, "Samba"},
66 {SMB_DIALECT_NTLM0_12, "NT LANMAN 1.0"},
67 {SMB_DIALECT_NTLM0_12, "NT LM 0.12"},
71 #define SMB_DIALECT_MAX (sizeof(smb_dialects) / sizeof(struct smb_dialect) - 2)
74 smb_vc_maxread(struct smb_vc *vcp)
77 * Specs say up to 64k data bytes, but Windows traffic
78 * uses 60k... no doubt for some good reason.
80 * Don't exceed the server's buffer size if signatures
81 * are enabled otherwise Windows 2003 chokes. Allow space
82 * for the SMB header & a little bit extra.
84 if ((vcp->vc_sopt.sv_caps & SMB_CAP_LARGE_READX) &&
85 (vcp->vc_hflags2 & SMB_FLAGS2_SECURITY_SIGNATURE) == 0)
88 return (vcp->vc_sopt.sv_maxtx - SMB_HDRLEN - 64);
92 smb_vc_maxwrite(struct smb_vc *vcp)
97 if ((vcp->vc_sopt.sv_caps & SMB_CAP_LARGE_WRITEX) &&
98 (vcp->vc_hflags2 & SMB_FLAGS2_SECURITY_SIGNATURE) == 0)
101 return (vcp->vc_sopt.sv_maxtx - SMB_HDRLEN - 64);
105 smb_smb_nomux(struct smb_vc *vcp, struct smb_cred *scred, const char *name)
107 if (scred->scr_td->td_proc == vcp->vc_iod->iod_p)
109 SMBERROR("wrong function called(%s)\n", name);
114 smb_smb_negotiate(struct smb_vc *vcp, struct smb_cred *scred)
116 struct smb_dialect *dp;
117 struct smb_sopt *sp = NULL;
121 u_int8_t wc, stime[8], sblen;
122 u_int16_t dindex, tw, tw1, swlen, bc;
124 int unicode = SMB_UNICODE_STRINGS(vcp);
125 void * servercharset = vcp->vc_toserver;
126 void * localcharset = vcp->vc_tolocal;
128 if (smb_smb_nomux(vcp, scred, __func__) != 0)
130 /* Disable Unicode for SMB_COM_NEGOTIATE requests */
132 vcp->vc_toserver = vcp->vc_cp_toserver;
133 vcp->vc_tolocal = vcp->vc_cp_tolocal;
137 vcp->obj.co_flags &= ~(SMBV_ENCRYPT);
139 bzero(sp, sizeof(struct smb_sopt));
140 error = smb_rq_alloc(VCTOCP(vcp), SMB_COM_NEGOTIATE, scred, &rqp);
143 smb_rq_getrequest(rqp, &mbp);
147 for(dp = smb_dialects; dp->d_id != -1; dp++) {
148 mb_put_uint8(mbp, SMB_DT_DIALECT);
149 smb_put_dstring(mbp, vcp, dp->d_name, SMB_CS_NONE);
152 error = smb_rq_simple(rqp);
153 SMBSDEBUG("%d\n", error);
156 smb_rq_getreply(rqp, &mdp);
158 error = md_get_uint8(mdp, &wc);
161 error = md_get_uint16le(mdp, &dindex);
165 SMBERROR("Don't know how to talk with server %s (%d)\n", "xxx", dindex);
169 dp = smb_dialects + dindex;
170 sp->sv_proto = dp->d_id;
171 SMBSDEBUG("Dialect %s (%d, %d)\n", dp->d_name, dindex, wc);
173 if (dp->d_id >= SMB_DIALECT_NTLM0_12) {
176 md_get_uint8(mdp, &sp->sv_sm);
177 md_get_uint16le(mdp, &sp->sv_maxmux);
178 md_get_uint16le(mdp, &sp->sv_maxvcs);
179 md_get_uint32le(mdp, &sp->sv_maxtx);
180 md_get_uint32le(mdp, &sp->sv_maxraw);
181 md_get_uint32le(mdp, &sp->sv_skey);
182 md_get_uint32le(mdp, &sp->sv_caps);
183 md_get_mem(mdp, stime, 8, MB_MSYSTEM);
184 md_get_uint16le(mdp, (u_int16_t*)&sp->sv_tz);
185 md_get_uint8(mdp, &sblen);
186 if (sblen && (sp->sv_sm & SMB_SM_ENCRYPT)) {
187 if (sblen != SMB_MAXCHALLENGELEN) {
188 SMBERROR("Unexpected length of security blob (%d)\n", sblen);
191 error = md_get_uint16le(mdp, &bc);
194 if (sp->sv_caps & SMB_CAP_EXT_SECURITY)
195 md_get_mem(mdp, NULL, 16, MB_MSYSTEM);
196 error = md_get_mem(mdp, vcp->vc_ch, sblen, MB_MSYSTEM);
199 vcp->vc_chlen = sblen;
200 vcp->obj.co_flags |= SMBV_ENCRYPT;
202 if (sp->sv_sm & SMB_SM_SIGS_REQUIRE)
203 vcp->vc_hflags2 |= SMB_FLAGS2_SECURITY_SIGNATURE;
204 if (vcp->vc_ucs_toserver &&
205 sp->sv_caps & SMB_CAP_UNICODE) {
209 vcp->obj.co_flags |= SMBV_UNICODE;
211 vcp->vc_hflags2 |= SMB_FLAGS2_KNOWS_LONG_NAMES;
212 if (dp->d_id == SMB_DIALECT_NTLM0_12 &&
213 sp->sv_maxtx < 4096 &&
214 (sp->sv_caps & SMB_CAP_NT_SMBS) == 0) {
215 vcp->obj.co_flags |= SMBV_WIN95;
216 SMBSDEBUG("Win95 detected\n");
221 vcp->vc_hflags2 &= ~(SMB_FLAGS2_EXT_SEC|SMB_FLAGS2_DFS|
222 SMB_FLAGS2_ERR_STATUS|SMB_FLAGS2_UNICODE);
224 if (dp->d_id > SMB_DIALECT_CORE) {
225 md_get_uint16le(mdp, &tw);
227 md_get_uint16le(mdp, &tw);
229 md_get_uint16le(mdp, &sp->sv_maxmux);
230 md_get_uint16le(mdp, &sp->sv_maxvcs);
231 md_get_uint16le(mdp, &tw); /* rawmode */
232 md_get_uint32le(mdp, &sp->sv_skey);
233 if (wc == 13) { /* >= LANMAN1 */
234 md_get_uint16(mdp, &tw); /* time */
235 md_get_uint16(mdp, &tw1); /* date */
236 md_get_uint16le(mdp, (u_int16_t*)&sp->sv_tz);
237 md_get_uint16le(mdp, &swlen);
238 if (swlen > SMB_MAXCHALLENGELEN)
240 md_get_uint16(mdp, NULL); /* mbz */
241 if (md_get_uint16le(mdp, &bc) != 0)
245 if (swlen && (sp->sv_sm & SMB_SM_ENCRYPT)) {
246 error = md_get_mem(mdp, vcp->vc_ch, swlen, MB_MSYSTEM);
249 vcp->vc_chlen = swlen;
250 vcp->obj.co_flags |= SMBV_ENCRYPT;
253 vcp->vc_hflags2 |= SMB_FLAGS2_KNOWS_LONG_NAMES;
254 } else { /* an old CORE protocol */
260 vcp->vc_maxvcs = sp->sv_maxvcs;
261 if (vcp->vc_maxvcs <= 1) {
262 if (vcp->vc_maxvcs == 0)
265 if (sp->sv_maxtx <= 0 || sp->sv_maxtx > 0xffff)
268 sp->sv_maxtx = min(sp->sv_maxtx,
269 63*1024 + SMB_HDRLEN + 16);
270 SMB_TRAN_GETPARAM(vcp, SMBTP_RCVSZ, &maxqsz);
271 vcp->vc_rxmax = min(smb_vc_maxread(vcp), maxqsz - 1024);
272 SMB_TRAN_GETPARAM(vcp, SMBTP_SNDSZ, &maxqsz);
273 vcp->vc_wxmax = min(smb_vc_maxwrite(vcp), maxqsz - 1024);
274 vcp->vc_txmax = min(sp->sv_maxtx, maxqsz);
275 SMBSDEBUG("TZ = %d\n", sp->sv_tz);
276 SMBSDEBUG("CAPS = %x\n", sp->sv_caps);
277 SMBSDEBUG("MAXMUX = %d\n", sp->sv_maxmux);
278 SMBSDEBUG("MAXVCS = %d\n", sp->sv_maxvcs);
279 SMBSDEBUG("MAXRAW = %d\n", sp->sv_maxraw);
280 SMBSDEBUG("MAXTX = %d\n", sp->sv_maxtx);
283 /* Restore Unicode conversion state */
285 vcp->vc_toserver = servercharset;
286 vcp->vc_tolocal = localcharset;
287 vcp->vc_hflags2 |= SMB_FLAGS2_UNICODE;
294 smb_smb_ssnsetup(struct smb_vc *vcp, struct smb_cred *scred)
300 smb_uniptr unipp, ntencpass = NULL;
301 char *pp, *up, *pbuf, *encpass;
302 int error, plen, uniplen, ulen, upper;
307 if (vcp->obj.co_flags & SMBV_UNICODE)
308 caps |= SMB_CAP_UNICODE;
312 vcp->vc_smbuid = SMB_UID_UNKNOWN;
314 if (smb_smb_nomux(vcp, scred, __func__) != 0)
317 error = smb_rq_alloc(VCTOCP(vcp), SMB_COM_SESSION_SETUP_ANDX, scred, &rqp);
320 pbuf = malloc(SMB_MAXPASSWORDLEN + 1, M_SMBTEMP, M_WAITOK);
321 encpass = malloc(24, M_SMBTEMP, M_WAITOK);
322 if (vcp->vc_sopt.sv_sm & SMB_SM_USER) {
324 * We try w/o uppercasing first so Samba mixed case
325 * passwords work. If that fails we come back and try
326 * uppercasing to satisfy OS/2 and Windows for Workgroups.
329 iconv_convstr(vcp->vc_toupper, pbuf,
330 smb_vc_getpass(vcp)/*, SMB_MAXPASSWORDLEN*/);
332 strncpy(pbuf, smb_vc_getpass(vcp), SMB_MAXPASSWORDLEN);
333 pbuf[SMB_MAXPASSWORDLEN] = '\0';
335 if (!SMB_UNICODE_STRINGS(vcp))
336 iconv_convstr(vcp->vc_toserver, pbuf, pbuf/*,
337 SMB_MAXPASSWORDLEN*/);
339 if (vcp->vc_sopt.sv_sm & SMB_SM_ENCRYPT) {
341 smb_encrypt(pbuf, vcp->vc_ch, encpass);
342 ntencpass = malloc(uniplen, M_SMBTEMP, M_WAITOK);
343 if (SMB_UNICODE_STRINGS(vcp)) {
344 strncpy(pbuf, smb_vc_getpass(vcp),
346 pbuf[SMB_MAXPASSWORDLEN] = '\0';
348 iconv_convstr(vcp->vc_toserver, pbuf,
349 smb_vc_getpass(vcp)/*,
350 SMB_MAXPASSWORDLEN*/);
351 smb_ntencrypt(pbuf, vcp->vc_ch, (u_char*)ntencpass);
355 plen = strlen(pbuf) + 1;
358 ntencpass = malloc(uniplen, M_SMBTEMP, M_WAITOK);
359 smb_strtouni(ntencpass, smb_vc_getpass(vcp));
363 * The uniplen is zeroed because Samba cannot deal
364 * with this 2nd cleartext password. This Samba
365 * "bug" is actually a workaround for problems in
373 * In the share security mode password will be used
374 * only in the tree authentication
379 uniplen = 0 /* sizeof(smb_unieol) */;
383 up = vcp->vc_username;
384 ulen = strlen(up) + 1;
386 * If userid is null we are attempting anonymous browse login
387 * so passwords must be zero length.
391 mb_put_uint8(mbp, 0xff);
392 mb_put_uint8(mbp, 0);
393 mb_put_uint16le(mbp, 0);
394 mb_put_uint16le(mbp, vcp->vc_sopt.sv_maxtx);
395 mb_put_uint16le(mbp, vcp->vc_sopt.sv_maxmux);
396 mb_put_uint16le(mbp, vcp->vc_number);
397 mb_put_uint32le(mbp, vcp->vc_sopt.sv_skey);
398 mb_put_uint16le(mbp, plen);
399 if (SMB_DIALECT(vcp) < SMB_DIALECT_NTLM0_12) {
400 mb_put_uint32le(mbp, 0);
403 mb_put_mem(mbp, pp, plen, MB_MSYSTEM);
404 smb_put_dstring(mbp, vcp, up, SMB_CS_NONE);
406 mb_put_uint16le(mbp, uniplen);
407 mb_put_uint32le(mbp, 0); /* reserved */
408 mb_put_uint32le(mbp, caps);
411 mb_put_mem(mbp, pp, plen, MB_MSYSTEM);
412 mb_put_mem(mbp, (caddr_t)unipp, uniplen, MB_MSYSTEM);
413 smb_put_dstring(mbp, vcp, up, SMB_CS_NONE); /* AccountName */
414 smb_put_dstring(mbp, vcp, vcp->vc_domain, SMB_CS_NONE); /* PrimaryDomain */
415 smb_put_dstring(mbp, vcp, "FreeBSD", SMB_CS_NONE); /* Client's OS */
416 smb_put_dstring(mbp, vcp, "NETSMB", SMB_CS_NONE); /* Client name */
420 free(ntencpass, M_SMBTEMP);
421 if (vcp->vc_hflags2 & SMB_FLAGS2_SECURITY_SIGNATURE)
423 error = smb_rq_simple(rqp);
424 SMBSDEBUG("%d\n", error);
426 if (rqp->sr_errclass == ERRDOS && rqp->sr_serror == ERRnoaccess)
430 vcp->vc_smbuid = rqp->sr_rpuid;
432 free(encpass, M_SMBTEMP);
433 free(pbuf, M_SMBTEMP);
435 if (error && upper == 1 && vcp->vc_sopt.sv_sm & SMB_SM_USER)
441 smb_smb_ssnclose(struct smb_vc *vcp, struct smb_cred *scred)
447 if (vcp->vc_smbuid == SMB_UID_UNKNOWN)
450 if (smb_smb_nomux(vcp, scred, __func__) != 0)
453 error = smb_rq_alloc(VCTOCP(vcp), SMB_COM_LOGOFF_ANDX, scred, &rqp);
458 mb_put_uint8(mbp, 0xff);
459 mb_put_uint8(mbp, 0);
460 mb_put_uint16le(mbp, 0);
464 error = smb_rq_simple(rqp);
465 SMBSDEBUG("%d\n", error);
470 static char smb_any_share[] = "?????";
473 smb_share_typename(int stype)
482 pp = smb_any_share; /* can't use LPT: here... */
499 smb_smb_treeconnect(struct smb_share *ssp, struct smb_cred *scred)
502 struct smb_rq rq, *rqp = &rq;
504 char *pp, *pbuf, *encpass;
505 int error, plen, caseopt, upper;
510 /* Disable Unicode for SMB_COM_TREE_CONNECT_ANDX requests */
511 if (SSTOVC(ssp)->vc_hflags2 & SMB_FLAGS2_UNICODE) {
513 vcp->vc_toserver = vcp->vc_cp_toserver;
514 vcp->vc_tolocal = vcp->vc_cp_tolocal;
515 vcp->vc_hflags2 &= ~SMB_FLAGS2_UNICODE;
518 ssp->ss_tid = SMB_TID_UNKNOWN;
519 error = smb_rq_alloc(SSTOCP(ssp), SMB_COM_TREE_CONNECT_ANDX, scred, &rqp);
523 caseopt = SMB_CS_NONE;
524 if (vcp->vc_sopt.sv_sm & SMB_SM_USER) {
530 pbuf = malloc(SMB_MAXPASSWORDLEN + 1, M_SMBTEMP, M_WAITOK);
531 encpass = malloc(24, M_SMBTEMP, M_WAITOK);
533 * We try w/o uppercasing first so Samba mixed case
534 * passwords work. If that fails we come back and try
535 * uppercasing to satisfy OS/2 and Windows for Workgroups.
538 iconv_convstr(vcp->vc_toupper, pbuf,
539 smb_share_getpass(ssp)/*,
540 SMB_MAXPASSWORDLEN*/);
542 strncpy(pbuf, smb_share_getpass(ssp),
544 pbuf[SMB_MAXPASSWORDLEN] = '\0';
546 if (vcp->vc_sopt.sv_sm & SMB_SM_ENCRYPT) {
548 smb_encrypt(pbuf, vcp->vc_ch, encpass);
551 plen = strlen(pbuf) + 1;
557 mb_put_uint8(mbp, 0xff);
558 mb_put_uint8(mbp, 0);
559 mb_put_uint16le(mbp, 0);
560 mb_put_uint16le(mbp, 0); /* Flags */
561 mb_put_uint16le(mbp, plen);
564 mb_put_mem(mbp, pp, plen, MB_MSYSTEM);
565 smb_put_dmem(mbp, vcp, "\\\\", 2, caseopt);
566 pp = vcp->vc_srvname;
567 smb_put_dmem(mbp, vcp, pp, strlen(pp), caseopt);
568 smb_put_dmem(mbp, vcp, "\\", 1, caseopt);
570 smb_put_dstring(mbp, vcp, pp, caseopt);
571 pp = smb_share_typename(ssp->ss_type);
572 smb_put_dstring(mbp, vcp, pp, caseopt);
574 error = smb_rq_simple(rqp);
575 SMBSDEBUG("%d\n", error);
578 ssp->ss_tid = rqp->sr_rptid;
579 ssp->ss_vcgenid = vcp->vc_genid;
580 ssp->ss_flags |= SMBS_CONNECTED;
582 * If the server can speak Unicode then switch
583 * our converters to do Unicode <--> Local
585 if (vcp->obj.co_flags & SMBV_UNICODE) {
586 vcp->vc_toserver = vcp->vc_ucs_toserver;
587 vcp->vc_tolocal = vcp->vc_ucs_tolocal;
588 vcp->vc_hflags2 |= SMB_FLAGS2_UNICODE;
592 free(encpass, M_SMBTEMP);
594 free(pbuf, M_SMBTEMP);
596 if (error && upper == 1)
602 smb_smb_treedisconnect(struct smb_share *ssp, struct smb_cred *scred)
608 if (ssp->ss_tid == SMB_TID_UNKNOWN)
610 error = smb_rq_alloc(SSTOCP(ssp), SMB_COM_TREE_DISCONNECT, scred, &rqp);
618 error = smb_rq_simple(rqp);
619 SMBSDEBUG("%d\n", error);
621 ssp->ss_tid = SMB_TID_UNKNOWN;
626 smb_smb_readx(struct smb_share *ssp, u_int16_t fid, int *len, int *rresid,
627 struct uio *uio, struct smb_cred *scred)
634 u_int16_t residhi, residlo, off, doff;
637 error = smb_rq_alloc(SSTOCP(ssp), SMB_COM_READ_ANDX, scred, &rqp);
640 smb_rq_getrequest(rqp, &mbp);
642 mb_put_uint8(mbp, 0xff); /* no secondary command */
643 mb_put_uint8(mbp, 0); /* MBZ */
644 mb_put_uint16le(mbp, 0); /* offset to secondary */
645 mb_put_mem(mbp, (caddr_t)&fid, sizeof(fid), MB_MSYSTEM);
646 mb_put_uint32le(mbp, uio->uio_offset);
647 *len = min(SSTOVC(ssp)->vc_rxmax, *len);
648 mb_put_uint16le(mbp, *len); /* MaxCount */
649 mb_put_uint16le(mbp, *len); /* MinCount (only indicates blocking) */
650 mb_put_uint32le(mbp, (unsigned)*len >> 16); /* MaxCountHigh */
651 mb_put_uint16le(mbp, *len); /* Remaining ("obsolete") */
652 mb_put_uint32le(mbp, uio->uio_offset >> 32); /* OffsetHigh */
657 error = smb_rq_simple(rqp);
660 smb_rq_getreply(rqp, &mdp);
662 md_get_uint8(mdp, &wc);
668 md_get_uint8(mdp, NULL);
670 md_get_uint8(mdp, NULL);
672 md_get_uint16le(mdp, NULL);
674 md_get_uint16le(mdp, NULL);
676 md_get_uint16le(mdp, NULL); /* data compaction mode */
678 md_get_uint16le(mdp, NULL);
680 md_get_uint16le(mdp, &residlo);
682 md_get_uint16le(mdp, &doff); /* data offset */
684 md_get_uint16le(mdp, &residhi);
686 resid = (residhi << 16) | residlo;
687 md_get_mem(mdp, NULL, 4 * 2, MB_MSYSTEM);
689 md_get_uint16le(mdp, NULL); /* ByteCount */
691 if (doff > off) /* pad byte(s)? */
692 md_get_mem(mdp, NULL, doff - off, MB_MSYSTEM);
697 error = md_get_uio(mdp, uio, resid);
707 smb_smb_writex(struct smb_share *ssp, u_int16_t fid, int *len, int *rresid,
708 struct uio *uio, struct smb_cred *scred)
717 error = smb_rq_alloc(SSTOCP(ssp), SMB_COM_WRITE_ANDX, scred, &rqp);
720 smb_rq_getrequest(rqp, &mbp);
722 mb_put_uint8(mbp, 0xff); /* no secondary command */
723 mb_put_uint8(mbp, 0); /* MBZ */
724 mb_put_uint16le(mbp, 0); /* offset to secondary */
725 mb_put_mem(mbp, (caddr_t)&fid, sizeof(fid), MB_MSYSTEM);
726 mb_put_uint32le(mbp, uio->uio_offset);
727 mb_put_uint32le(mbp, 0); /* MBZ (timeout) */
728 mb_put_uint16le(mbp, 0); /* !write-thru */
729 mb_put_uint16le(mbp, 0);
730 *len = min(SSTOVC(ssp)->vc_wxmax, *len);
731 mb_put_uint16le(mbp, (unsigned)*len >> 16);
732 mb_put_uint16le(mbp, *len);
733 mb_put_uint16le(mbp, 64); /* data offset from header start */
734 mb_put_uint32le(mbp, uio->uio_offset >> 32); /* OffsetHigh */
738 mb_put_uint8(mbp, 0xee); /* mimic xp pad byte! */
739 error = mb_put_uio(mbp, uio, *len);
743 error = smb_rq_simple(rqp);
746 smb_rq_getreply(rqp, &mdp);
747 md_get_uint8(mdp, &wc);
752 md_get_uint8(mdp, NULL);
753 md_get_uint8(mdp, NULL);
754 md_get_uint16le(mdp, NULL);
755 md_get_uint16le(mdp, &resid);
764 smb_smb_read(struct smb_share *ssp, u_int16_t fid,
765 int *len, int *rresid, struct uio *uio, struct smb_cred *scred)
772 int error, rlen, blksz;
774 if (SSTOVC(ssp)->vc_sopt.sv_caps & SMB_CAP_LARGE_READX)
775 return (smb_smb_readx(ssp, fid, len, rresid, uio, scred));
777 error = smb_rq_alloc(SSTOCP(ssp), SMB_COM_READ, scred, &rqp);
781 blksz = SSTOVC(ssp)->vc_txmax - SMB_HDRLEN - 16;
782 rlen = *len = min(blksz, *len);
784 smb_rq_getrequest(rqp, &mbp);
786 mb_put_mem(mbp, (caddr_t)&fid, sizeof(fid), MB_MSYSTEM);
787 mb_put_uint16le(mbp, rlen);
788 mb_put_uint32le(mbp, uio->uio_offset);
789 mb_put_uint16le(mbp, min(uio->uio_resid, 0xffff));
794 error = smb_rq_simple(rqp);
797 smb_rq_getreply(rqp, &mdp);
798 md_get_uint8(mdp, &wc);
803 md_get_uint16le(mdp, &resid);
804 md_get_mem(mdp, NULL, 4 * 2, MB_MSYSTEM);
805 md_get_uint16le(mdp, &bc);
806 md_get_uint8(mdp, NULL); /* ignore buffer type */
807 md_get_uint16le(mdp, &resid);
812 error = md_get_uio(mdp, uio, resid);
822 smb_read(struct smb_share *ssp, u_int16_t fid, struct uio *uio,
823 struct smb_cred *scred)
825 int tsize, len, resid;
828 tsize = uio->uio_resid;
832 error = smb_smb_read(ssp, fid, &len, &resid, uio, scred);
843 smb_smb_write(struct smb_share *ssp, u_int16_t fid, int *len, int *rresid,
844 struct uio *uio, struct smb_cred *scred)
853 if (*len && SSTOVC(ssp)->vc_sopt.sv_caps & SMB_CAP_LARGE_WRITEX)
854 return (smb_smb_writex(ssp, fid, len, rresid, uio, scred));
856 blksz = SSTOVC(ssp)->vc_txmax - SMB_HDRLEN - 16;
860 resid = *len = min(blksz, *len);
862 error = smb_rq_alloc(SSTOCP(ssp), SMB_COM_WRITE, scred, &rqp);
865 smb_rq_getrequest(rqp, &mbp);
867 mb_put_mem(mbp, (caddr_t)&fid, sizeof(fid), MB_MSYSTEM);
868 mb_put_uint16le(mbp, resid);
869 mb_put_uint32le(mbp, uio->uio_offset);
870 mb_put_uint16le(mbp, min(uio->uio_resid, 0xffff));
873 mb_put_uint8(mbp, SMB_DT_DATA);
874 mb_put_uint16le(mbp, resid);
876 error = mb_put_uio(mbp, uio, resid);
880 error = smb_rq_simple(rqp);
883 smb_rq_getreply(rqp, &mdp);
884 md_get_uint8(mdp, &wc);
889 md_get_uint16le(mdp, &resid);
897 smb_write(struct smb_share *ssp, u_int16_t fid, struct uio *uio,
898 struct smb_cred *scred)
900 int error = 0, len, tsize, resid;
903 tsize = uio->uio_resid;
908 error = smb_smb_write(ssp, fid, &len, &resid, uio, scred);
919 * Errors can happen on the copyin, the rpc, etc. So they
920 * imply resid is unreliable. The only safe thing is
921 * to pretend zero bytes made it. We needn't restore the
922 * iovs because callers don't depend on them in error
923 * paths - uio_resid and uio_offset are what matter.
931 smb_smb_echo(struct smb_vc *vcp, struct smb_cred *scred)
937 error = smb_rq_alloc(VCTOCP(vcp), SMB_COM_ECHO, scred, &rqp);
942 mb_put_uint16le(mbp, 1);
945 mb_put_uint32le(mbp, 0);
947 error = smb_rq_simple(rqp);
948 SMBSDEBUG("%d\n", error);