Line data Source code
1 : /*
2 : Unix SMB/CIFS implementation.
3 :
4 : manipulate dns name structures
5 :
6 : Copyright (C) 2010 Kai Blin <kai@samba.org>
7 :
8 : Heavily based on nbtname.c which is:
9 :
10 : Copyright (C) Andrew Tridgell 2005
11 :
12 : This program is free software; you can redistribute it and/or modify
13 : it under the terms of the GNU General Public License as published by
14 : the Free Software Foundation; either version 3 of the License, or
15 : (at your option) any later version.
16 :
17 : This program is distributed in the hope that it will be useful,
18 : but WITHOUT ANY WARRANTY; without even the implied warranty of
19 : MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 : GNU General Public License for more details.
21 :
22 : You should have received a copy of the GNU General Public License
23 : along with this program. If not, see <http://www.gnu.org/licenses/>.
24 : */
25 :
26 : /*
27 : see rfc1002 for the detailed format of compressed names
28 : */
29 :
30 : #include "includes.h"
31 : #include "librpc/gen_ndr/ndr_dns.h"
32 : #include "librpc/gen_ndr/ndr_misc.h"
33 : #include "librpc/gen_ndr/ndr_dnsp.h"
34 : #include "system/locale.h"
35 : #include "lib/util/util_net.h"
36 : #include "ndr_dns_utils.h"
37 :
38 : /* don't allow an unlimited number of name components */
39 : #define MAX_COMPONENTS 128
40 :
41 : /**
42 : print a dns string
43 : */
44 0 : _PUBLIC_ void ndr_print_dns_string(struct ndr_print *ndr,
45 : const char *name,
46 : const char *s)
47 : {
48 0 : ndr_print_string(ndr, name, s);
49 0 : }
50 :
51 : /*
52 : pull one component of a dns_string
53 : */
54 84972 : static enum ndr_err_code ndr_pull_component(struct ndr_pull *ndr,
55 : uint8_t **component,
56 : uint32_t *offset,
57 : uint32_t *max_offset)
58 : {
59 : uint8_t len;
60 84972 : unsigned int loops = 0;
61 94089 : while (loops < 5) {
62 94089 : if (*offset >= ndr->data_size) {
63 0 : return ndr_pull_error(ndr, NDR_ERR_STRING,
64 : "BAD DNS NAME component, bad offset");
65 : }
66 94089 : len = ndr->data[*offset];
67 94089 : if (len == 0) {
68 16781 : *offset += 1;
69 16781 : *max_offset = MAX(*max_offset, *offset);
70 16781 : *component = NULL;
71 16781 : return NDR_ERR_SUCCESS;
72 : }
73 77308 : if ((len & 0xC0) == 0xC0) {
74 : /* its a label pointer */
75 9117 : if (1 + *offset >= ndr->data_size) {
76 0 : return ndr_pull_error(ndr, NDR_ERR_STRING,
77 : "BAD DNS NAME component, " \
78 : "bad label offset");
79 : }
80 9117 : *max_offset = MAX(*max_offset, *offset + 2);
81 9117 : *offset = ((len&0x3F)<<8) | ndr->data[1 + *offset];
82 9117 : *max_offset = MAX(*max_offset, *offset);
83 9117 : loops++;
84 9117 : continue;
85 : }
86 68191 : if ((len & 0xC0) != 0) {
87 : /* its a reserved length field */
88 0 : return ndr_pull_error(ndr, NDR_ERR_STRING,
89 : "BAD DNS NAME component, " \
90 : "reserved length field: 0x%02x",
91 : (len &0xC));
92 : }
93 68191 : if (*offset + len + 1 > ndr->data_size) {
94 0 : return ndr_pull_error(ndr, NDR_ERR_STRING,
95 : "BAD DNS NAME component, "\
96 : "length too long");
97 : }
98 136382 : *component = (uint8_t*)talloc_strndup(ndr,
99 68191 : (const char *)&ndr->data[1 + *offset], len);
100 68191 : NDR_ERR_HAVE_NO_MEMORY(*component);
101 68191 : *offset += len + 1;
102 68191 : *max_offset = MAX(*max_offset, *offset);
103 68191 : return NDR_ERR_SUCCESS;
104 : }
105 :
106 : /* too many pointers */
107 0 : return ndr_pull_error(ndr, NDR_ERR_STRING,
108 : "BAD DNS NAME component, too many pointers");
109 : }
110 :
111 : /**
112 : pull a dns_string from the wire
113 : */
114 16781 : _PUBLIC_ enum ndr_err_code ndr_pull_dns_string(struct ndr_pull *ndr,
115 : int ndr_flags,
116 : const char **s)
117 : {
118 16781 : uint32_t offset = ndr->offset;
119 16781 : uint32_t max_offset = offset;
120 : unsigned num_components;
121 : char *name;
122 :
123 16781 : if (!(ndr_flags & NDR_SCALARS)) {
124 0 : return NDR_ERR_SUCCESS;
125 : }
126 :
127 16781 : name = talloc_strdup(ndr->current_mem_ctx, "");
128 :
129 : /* break up name into a list of components */
130 84972 : for (num_components=0; num_components<MAX_COMPONENTS;
131 68191 : num_components++) {
132 84972 : uint8_t *component = NULL;
133 84972 : NDR_CHECK(ndr_pull_component(ndr, &component, &offset,
134 : &max_offset));
135 84972 : if (component == NULL) break;
136 68191 : if (num_components > 0) {
137 51432 : name = talloc_asprintf_append_buffer(name, ".%s",
138 : component);
139 : } else {
140 16759 : name = talloc_asprintf_append_buffer(name, "%s",
141 : component);
142 : }
143 68191 : NDR_ERR_HAVE_NO_MEMORY(name);
144 : }
145 16781 : if (num_components == MAX_COMPONENTS) {
146 0 : return ndr_pull_error(ndr, NDR_ERR_STRING,
147 : "BAD DNS NAME too many components");
148 : }
149 :
150 16781 : (*s) = name;
151 16781 : ndr->offset = max_offset;
152 :
153 16781 : return NDR_ERR_SUCCESS;
154 : }
155 :
156 : /**
157 : push a dns string to the wire
158 : */
159 20561 : _PUBLIC_ enum ndr_err_code ndr_push_dns_string(struct ndr_push *ndr,
160 : int ndr_flags,
161 : const char *s)
162 : {
163 20561 : return ndr_push_dns_string_list(ndr,
164 : &ndr->dns_string_list,
165 : ndr_flags,
166 : s,
167 : false);
168 : }
169 :
170 1864 : _PUBLIC_ enum ndr_err_code ndr_pull_dns_txt_record(struct ndr_pull *ndr, int ndr_flags, struct dns_txt_record *r)
171 : {
172 1864 : NDR_PULL_CHECK_FLAGS(ndr, ndr_flags);
173 1864 : if (ndr_flags & NDR_SCALARS) {
174 : enum ndr_err_code ndr_err;
175 1864 : uint32_t data_size = ndr->data_size;
176 1864 : uint32_t record_size = 0;
177 1864 : ndr_err = ndr_token_retrieve(&ndr->array_size_list, r,
178 : &record_size);
179 1864 : if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
180 1864 : NDR_PULL_NEED_BYTES(ndr, record_size);
181 1864 : ndr->data_size = ndr->offset + record_size;
182 : }
183 1864 : NDR_CHECK(ndr_pull_align(ndr, 1));
184 1864 : NDR_CHECK(ndr_pull_dnsp_string_list(ndr, NDR_SCALARS, &r->txt));
185 1864 : NDR_CHECK(ndr_pull_trailer_align(ndr, 1));
186 1864 : ndr->data_size = data_size;
187 : }
188 1864 : if (ndr_flags & NDR_BUFFERS) {
189 : }
190 1864 : return NDR_ERR_SUCCESS;
191 : }
192 :
193 14516 : _PUBLIC_ enum ndr_err_code ndr_push_dns_res_rec(struct ndr_push *ndr,
194 : int ndr_flags,
195 : const struct dns_res_rec *r)
196 : {
197 14516 : uint32_t _flags_save_STRUCT = ndr->flags;
198 : uint32_t _saved_offset1, _saved_offset2;
199 : uint16_t length;
200 14516 : ndr_set_flags(&ndr->flags, LIBNDR_PRINT_ARRAY_HEX |
201 : LIBNDR_FLAG_NOALIGN);
202 14516 : if (ndr_flags & NDR_SCALARS) {
203 7288 : uint32_t _flags_save_name = ndr->flags;
204 :
205 7288 : NDR_CHECK(ndr_push_align(ndr, 4));
206 :
207 7288 : switch (r->rr_type) {
208 344 : case DNS_QTYPE_TKEY:
209 : case DNS_QTYPE_TSIG:
210 344 : ndr_set_flags(&ndr->flags, LIBNDR_FLAG_NO_COMPRESSION);
211 344 : break;
212 6944 : default:
213 6944 : break;
214 : }
215 7288 : NDR_CHECK(ndr_push_dns_string(ndr, NDR_SCALARS, r->name));
216 7288 : ndr->flags = _flags_save_name;
217 :
218 7288 : NDR_CHECK(ndr_push_dns_qtype(ndr, NDR_SCALARS, r->rr_type));
219 7288 : NDR_CHECK(ndr_push_dns_qclass(ndr, NDR_SCALARS, r->rr_class));
220 7288 : NDR_CHECK(ndr_push_uint32(ndr, NDR_SCALARS, r->ttl));
221 7288 : _saved_offset1 = ndr->offset;
222 7288 : NDR_CHECK(ndr_push_uint16(ndr, NDR_SCALARS, 0));
223 7288 : if (r->length > 0) {
224 : uint32_t _saved_offset3;
225 :
226 7120 : NDR_CHECK(ndr_push_set_switch_value(ndr, &r->rdata,
227 : r->rr_type));
228 7120 : _saved_offset3 = ndr->offset;
229 7120 : NDR_CHECK(ndr_push_dns_rdata(ndr, NDR_SCALARS,
230 : &r->rdata));
231 7120 : if ((ndr->offset != _saved_offset3) &&
232 7107 : (r->unexpected.length > 0)) {
233 : /*
234 : * ndr_push_dns_rdata pushed a known
235 : * record, but we have something
236 : * unexpected. That's invalid.
237 : */
238 0 : return ndr_push_error(ndr,
239 : NDR_ERR_LENGTH,
240 : "Invalid...Unexpected " \
241 : "blob length is too " \
242 : "large");
243 : }
244 : }
245 7288 : if (r->unexpected.length > UINT16_MAX) {
246 0 : return ndr_push_error(ndr, NDR_ERR_LENGTH,
247 : "Unexpected blob length "\
248 : "is too large");
249 : }
250 :
251 7288 : NDR_CHECK(ndr_push_bytes(ndr, r->unexpected.data,
252 : r->unexpected.length));
253 7288 : NDR_CHECK(ndr_push_trailer_align(ndr, 4));
254 7288 : length = ndr->offset - (_saved_offset1 + 2);
255 7288 : _saved_offset2 = ndr->offset;
256 7288 : ndr->offset = _saved_offset1;
257 7288 : NDR_CHECK(ndr_push_uint16(ndr, NDR_SCALARS, length));
258 7288 : ndr->offset = _saved_offset2;
259 : }
260 14516 : if (ndr_flags & NDR_BUFFERS) {
261 7288 : NDR_CHECK(ndr_push_dns_rdata(ndr, NDR_BUFFERS,
262 : &r->rdata));
263 : }
264 14516 : ndr->flags = _flags_save_STRUCT;
265 14516 : return NDR_ERR_SUCCESS;
266 : }
267 :
268 11806 : _PUBLIC_ enum ndr_err_code ndr_pull_dns_res_rec(struct ndr_pull *ndr,
269 : int ndr_flags,
270 : struct dns_res_rec *r)
271 : {
272 11806 : uint32_t _flags_save_STRUCT = ndr->flags;
273 : uint32_t _saved_offset1;
274 : uint32_t pad, length;
275 :
276 11806 : ndr_set_flags(&ndr->flags, LIBNDR_PRINT_ARRAY_HEX |
277 : LIBNDR_FLAG_NOALIGN);
278 11806 : if (ndr_flags & NDR_SCALARS) {
279 5903 : NDR_CHECK(ndr_pull_align(ndr, 4));
280 5903 : NDR_CHECK(ndr_pull_dns_string(ndr, NDR_SCALARS, &r->name));
281 5903 : NDR_CHECK(ndr_pull_dns_qtype(ndr, NDR_SCALARS, &r->rr_type));
282 5903 : NDR_CHECK(ndr_pull_dns_qclass(ndr, NDR_SCALARS, &r->rr_class));
283 5903 : NDR_CHECK(ndr_pull_uint32(ndr, NDR_SCALARS, &r->ttl));
284 5903 : NDR_CHECK(ndr_pull_uint16(ndr, NDR_SCALARS, &r->length));
285 5903 : _saved_offset1 = ndr->offset;
286 5903 : if (r->length > 0) {
287 5664 : NDR_CHECK(ndr_token_store(ndr, &ndr->array_size_list,
288 : &r->rdata,
289 : r->length));
290 5664 : NDR_CHECK(ndr_pull_set_switch_value(ndr, &r->rdata,
291 : r->rr_type));
292 5664 : NDR_CHECK(ndr_pull_dns_rdata(ndr, NDR_SCALARS,
293 : &r->rdata));
294 : } else {
295 239 : ZERO_STRUCT(r->rdata);
296 : }
297 5903 : length = ndr->offset - _saved_offset1;
298 5903 : if (length > r->length) {
299 0 : return ndr_pull_error(ndr, NDR_ERR_LENGTH, "TODO");
300 : }
301 :
302 5903 : r->unexpected = data_blob_null;
303 5903 : pad = r->length - length;
304 5903 : if (pad > 0) {
305 0 : NDR_PULL_NEED_BYTES(ndr, pad);
306 0 : r->unexpected = data_blob_talloc(ndr->current_mem_ctx,
307 : ndr->data +
308 : ndr->offset,
309 : pad);
310 0 : if (r->unexpected.data == NULL) {
311 0 : return ndr_pull_error(ndr,
312 : NDR_ERR_ALLOC,
313 : "Failed to allocate a " \
314 : "data blob");
315 : }
316 0 : ndr->offset += pad;
317 : }
318 :
319 :
320 5903 : NDR_CHECK(ndr_pull_trailer_align(ndr, 4));
321 : }
322 11806 : if (ndr_flags & NDR_BUFFERS) {
323 5903 : NDR_CHECK(ndr_pull_dns_rdata(ndr, NDR_BUFFERS, &r->rdata));
324 : }
325 11806 : ndr->flags = _flags_save_STRUCT;
326 11806 : return NDR_ERR_SUCCESS;
327 : }
|
