Adding upstream version 2:4.20.0+dfsg.upstream/2%4.20.0+dfsg

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 216 insertions, 0 deletions

diff --git a/python/samba/tests/smb2symlink.py b/python/samba/tests/smb2symlink.py
new file mode 100644
index 0000000..83df78e
--- /dev/null
+++ b/python/samba/tests/smb2symlink.py
@@ -0,0 +1,216 @@
+# Unix SMB/CIFS implementation.
+# Copyright Volker Lendecke <vl@samba.org> 2022
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+
+from samba.samba3 import libsmb_samba_internal as libsmb
+from samba import reparse_symlink
+from samba import (ntstatus,NTSTATUSError)
+from samba.dcerpc import security as sec
+import samba.tests.libsmb
+
+class Smb2SymlinkTests(samba.tests.libsmb.LibsmbTests):
+
+    def connections(self, smb1share=None, smb2share=None):
+        if not smb1share:
+            smb1share = samba.tests.env_get_var_value(
+                "SMB1_SHARE", allow_missing=True)
+            if not smb1share:
+                smb1share = "nosymlinks_smb1allow"
+
+        try:
+            smb1 = libsmb.Conn(
+                self.server_ip,
+                smb1share,
+                self.lp,
+                self.creds,
+                force_smb1=True)
+        except NTSTATUSError as e:
+            if e.args[0] != ntstatus.NT_STATUS_CONNECTION_RESET:
+                raise
+        smb1.smb1_posix()
+
+        if not smb2share:
+            smb2share = samba.tests.env_get_var_value(
+                "SMB2_SHARE", allow_missing=True)
+            if not smb2share:
+                smb2share = "nosymlinks"
+
+        smb2 = libsmb.Conn(
+            self.server_ip,
+            smb2share,
+            self.lp,
+            self.creds)
+        return (smb1, smb2)
+
+    def create_symlink(self, conn, target, symlink):
+        self.clean_file(conn, symlink)
+        if (conn.protocol() < libsmb.PROTOCOL_SMB2_02 and conn.have_posix()):
+            conn.smb1_symlink(target, symlink)
+        else:
+            flags = 0 if target[0]=='/' else 1
+            syml = conn.create(
+                symlink,
+                DesiredAccess=sec.SEC_FILE_READ_ATTRIBUTE|
+                sec.SEC_FILE_WRITE_ATTRIBUTE|
+                sec.SEC_STD_DELETE,
+                FileAttributes=libsmb.FILE_ATTRIBUTE_NORMAL,
+                CreateDisposition=libsmb.FILE_OPEN_IF,
+                CreateOptions=libsmb.FILE_OPEN_REPARSE_POINT)
+            b = reparse_symlink.symlink_put(target, target, 0, 1)
+            conn.fsctl(syml, libsmb.FSCTL_SET_REPARSE_POINT, b, 0)
+            conn.close(syml)
+
+    def assert_symlink_exception(self, e, expect):
+        self.assertEqual(e.args[0], ntstatus.NT_STATUS_STOPPED_ON_SYMLINK)
+        for k,v in expect.items():
+            if (k == "flags"):
+                # Ignore symlink trust flags for now
+                expected = v & ~libsmb.SYMLINK_TRUST_MASK
+                got = e.args[2].get(k) & ~libsmb.SYMLINK_TRUST_MASK
+                self.assertEqual((k,got), (k,expected))
+            else:
+                self.assertEqual((k,e.args[2].get(k)), (k,v))
+
+    def test_symlinkerror_directory(self):
+        """Test a symlink in a nonterminal path component"""
+        (smb1,smb2) = self.connections()
+        symlink="syml"
+        target="foo"
+        suffix="bar"
+
+        self.create_symlink(smb1, target, symlink)
+
+        with self.assertRaises(NTSTATUSError) as e:
+            fd = smb2.create_ex(f'{symlink}\\{suffix}')
+
+        self.assert_symlink_exception(
+            e.exception,
+            { 'unparsed_path_length' : len(suffix)+1,
+              'substitute_name' : target,
+              'print_name' : target,
+              'flags' : 0x20000001 })
+
+        self.clean_file(smb1, symlink)
+
+    def test_symlinkerror_file(self):
+        """Test a simple symlink in a terminal path"""
+        (smb1,smb2) = self.connections()
+        symlink="syml"
+        target="foo"
+
+        self.create_symlink(smb1, target, symlink)
+
+        with self.assertRaises(NTSTATUSError) as e:
+            fd = smb2.create_ex(f'{symlink}')
+
+        self.assert_symlink_exception(
+                e.exception,
+            { 'unparsed_path_length' : 0,
+              'substitute_name' : target,
+              'print_name' : target,
+              'flags' : 0x20000001 })
+
+        self.clean_file(smb1, symlink)
+
+    def test_symlinkerror_absolute_outside_share(self):
+        """
+        Test symlinks to outside of the share
+        We return the contents 1:1
+        """
+        (smb1,smb2) = self.connections()
+        symlink="syml"
+
+        for target in ["/etc", "//foo/bar", "/"]:
+
+            self.create_symlink(smb1, target, symlink)
+
+            with self.assertRaises(NTSTATUSError) as e:
+                fd = smb2.create_ex(f'{symlink}')
+
+            self.assert_symlink_exception(
+                e.exception,
+                { 'unparsed_path_length' : 0,
+                  'substitute_name' : target,
+                  'print_name' : target,
+                  'flags' : 0 })
+
+            self.clean_file(smb1, symlink)
+
+    def test_symlinkerror_absolute_inshare(self):
+        """Test an absolute symlink inside the share"""
+        (smb1,smb2) = self.connections()
+        symlink="syml"
+
+        localpath=samba.tests.env_get_var_value("LOCAL_PATH")
+        shareroot=f'{localpath}/nosymlinks'
+        rel_dest="dst"
+        target=f'{shareroot}/{rel_dest}'
+
+        self.create_symlink(smb1, target, symlink)
+
+        with self.assertRaises(NTSTATUSError) as e:
+            fd = smb2.create_ex(f'{symlink}')
+
+        self.assert_symlink_exception(
+            e.exception,
+            { 'unparsed_path_length' : 0,
+              'substitute_name' : rel_dest,
+              'print_name' : rel_dest,
+              'flags' : 0 })
+
+        self.clean_file(smb1, symlink)
+
+    def test_symlink_reparse_data_buffer_parse(self):
+        """Test parsing a symlink reparse buffer coming from Windows"""
+
+        buf = (b'\x0c\x00\x00\xa0\x18\x00\x00\x00'
+               b'\x06\x00\x06\x00\x00\x00\x06\x00'
+               b'\x01\x00\x00\x00\x62\x00\x61\x00'
+               b'\x72\x00\x62\x00\x61\x00\x72\x00')
+
+        try:
+            syml = reparse_symlink.symlink_get(buf);
+        except:
+            self.fail("Could not parse symlink buffer")
+
+        self.assertEqual(syml, ('bar', 'bar', 0, 1));
+
+    def test_bug15505(self):
+        """Test an absolute intermediate symlink inside the share"""
+        (smb1,smb2) = self.connections(smb1share="tmp",smb2share="tmp")
+        symlink="syml"
+
+        localpath=samba.tests.env_get_var_value("LOCAL_PATH")
+
+        smb1.mkdir("sub")
+        self.addCleanup(self.clean_file, smb1, "sub")
+
+        self.create_symlink(smb1, f'{localpath}/sub1', "sub/lnk")
+        self.addCleanup(self.clean_file, smb1, "sub/lnk")
+
+        smb1.mkdir("sub1")
+        self.addCleanup(self.clean_file, smb1, "sub1")
+
+        fd = smb1.create("sub1/x", CreateDisposition=libsmb.FILE_CREATE);
+        smb1.close(fd)
+        self.addCleanup(self.clean_file, smb1, "sub1/x")
+
+        fd = smb2.create("sub\\lnk\\x")
+        smb2.close(fd)
+
+if __name__ == '__main__':
+    import unittest
+    unittest.main()