blob: a41be6399ac00f32622ab87256e9b4c27307e67a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
|
/*
Unix SMB/CIFS implementation.
SMB2 client library header
Copyright (C) Andrew Tridgell 2005
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#ifndef __LIBCLI_SMB2_SMB2_CONSTANTS_H__
#define __LIBCLI_SMB2_SMB2_CONSTANTS_H__
/* offsets into SMB2_TRANSFORM header elements */
#define SMB2_TF_PROTOCOL_ID 0x00 /* 4 bytes */
#define SMB2_TF_SIGNATURE 0x04 /* 16 bytes */
#define SMB2_TF_NONCE 0x14 /* 16 bytes */
#define SMB2_TF_MSG_SIZE 0x24 /* 4 bytes */
#define SMB2_TF_RESERVED 0x28 /* 2 bytes */
#define SMB2_TF_FLAGS 0x2A /* 2 bytes */
#define SMB2_TF_SESSION_ID 0x2C /* 8 bytes */
#define SMB2_TF_HDR_SIZE 0x34 /* 52 bytes */
#define SMB2_TF_MAGIC 0x424D53FD /* 0xFD 'S' 'M' 'B' */
#define SMB2_TF_FLAGS_ENCRYPTED 0x0001
/* offsets into header elements for a sync SMB2 request */
#define SMB2_HDR_PROTOCOL_ID 0x00
#define SMB2_HDR_LENGTH 0x04
#define SMB2_HDR_CREDIT_CHARGE 0x06
#define SMB2_HDR_EPOCH SMB2_HDR_CREDIT_CHARGE /* TODO: remove this */
#define SMB2_HDR_STATUS 0x08
#define SMB2_HDR_CHANNEL_SEQUENCE SMB2_HDR_STATUS /* in requests */
#define SMB2_HDR_OPCODE 0x0c
#define SMB2_HDR_CREDIT 0x0e
#define SMB2_HDR_FLAGS 0x10
#define SMB2_HDR_NEXT_COMMAND 0x14
#define SMB2_HDR_MESSAGE_ID 0x18
#define SMB2_HDR_PID 0x20
#define SMB2_HDR_TID 0x24
#define SMB2_HDR_SESSION_ID 0x28
#define SMB2_HDR_SIGNATURE 0x30 /* 16 bytes */
#define SMB2_HDR_BODY 0x40
/* offsets into header elements for an async SMB2 request */
#define SMB2_HDR_ASYNC_ID 0x20
/* header flags */
#define SMB2_HDR_FLAG_REDIRECT 0x01
#define SMB2_HDR_FLAG_ASYNC 0x02
#define SMB2_HDR_FLAG_CHAINED 0x04
#define SMB2_HDR_FLAG_SIGNED 0x08
#define SMB2_HDR_FLAG_PRIORITY_MASK 0x70
#define SMB2_HDR_FLAG_DFS 0x10000000
#define SMB2_HDR_FLAG_REPLAY_OPERATION 0x20000000
#define SMB2_PRIORITY_MASK_TO_VALUE(__m) (((__m) & SMB2_HDR_FLAG_PRIORITY_MASK) >> 4)
#define SMB2_PRIORITY_VALUE_TO_MASK(__v) (((__v) << 4) & SMB2_HDR_FLAG_PRIORITY_MASK)
/* SMB2 opcodes */
#define SMB2_OP_NEGPROT 0x00
#define SMB2_OP_SESSSETUP 0x01
#define SMB2_OP_LOGOFF 0x02
#define SMB2_OP_TCON 0x03
#define SMB2_OP_TDIS 0x04
#define SMB2_OP_CREATE 0x05
#define SMB2_OP_CLOSE 0x06
#define SMB2_OP_FLUSH 0x07
#define SMB2_OP_READ 0x08
#define SMB2_OP_WRITE 0x09
#define SMB2_OP_LOCK 0x0a
#define SMB2_OP_IOCTL 0x0b
#define SMB2_OP_CANCEL 0x0c
#define SMB2_OP_KEEPALIVE 0x0d
#define SMB2_OP_QUERY_DIRECTORY 0x0e
#define SMB2_OP_NOTIFY 0x0f
#define SMB2_OP_GETINFO 0x10
#define SMB2_OP_SETINFO 0x11
#define SMB2_OP_BREAK 0x12
#define SMB2_MAGIC 0x424D53FE /* 0xFE 'S' 'M' 'B' */
/* SMB2 negotiate dialects */
#define SMB2_DIALECT_REVISION_000 0x0000 /* early beta dialect */
#define SMB2_DIALECT_REVISION_202 0x0202
#define SMB2_DIALECT_REVISION_210 0x0210
#define SMB2_DIALECT_REVISION_222 0x0222
#define SMB2_DIALECT_REVISION_224 0x0224
#define SMB3_DIALECT_REVISION_300 0x0300
#define SMB3_DIALECT_REVISION_302 0x0302
#define SMB3_DIALECT_REVISION_310 0x0310
#define SMB3_DIALECT_REVISION_311 0x0311
#define SMB2_DIALECT_REVISION_2FF 0x02FF
/* SMB2 negotiate security_mode */
#define SMB2_NEGOTIATE_SIGNING_ENABLED 0x01
#define SMB2_NEGOTIATE_SIGNING_REQUIRED 0x02
/* SMB2 global capabilities */
#define SMB2_CAP_DFS 0x00000001
#define SMB2_CAP_LEASING 0x00000002 /* only in dialect >= 0x210 */
#define SMB2_CAP_LARGE_MTU 0x00000004 /* only in dialect >= 0x210 */
#define SMB2_CAP_MULTI_CHANNEL 0x00000008 /* only in dialect >= 0x222 */
#define SMB2_CAP_PERSISTENT_HANDLES 0x00000010 /* only in dialect >= 0x222 */
#define SMB2_CAP_DIRECTORY_LEASING 0x00000020 /* only in dialect >= 0x222 */
#define SMB2_CAP_ENCRYPTION 0x00000040 /* only in dialect >= 0x222 */
/* so we can spot new caps as added */
#define SMB2_CAP_ALL (\
SMB2_CAP_DFS | \
SMB2_CAP_LEASING | \
SMB2_CAP_LARGE_MTU | \
SMB2_CAP_MULTI_CHANNEL | \
SMB2_CAP_PERSISTENT_HANDLES | \
SMB2_CAP_DIRECTORY_LEASING | \
SMB2_CAP_ENCRYPTION)
/* Types of SMB2 Negotiate Contexts - only in dialect >= 0x310 */
#define SMB2_PREAUTH_INTEGRITY_CAPABILITIES 0x0001
#define SMB2_ENCRYPTION_CAPABILITIES 0x0002
#define SMB2_COMPRESSION_CAPABILITIES 0x0003
#define SMB2_NETNAME_NEGOTIATE_CONTEXT_ID 0x0005
#define SMB2_TRANSPORT_CAPABILITIES 0x0006
#define SMB2_RDMA_TRANSFORM_CAPABILITIES 0x0007
#define SMB2_SIGNING_CAPABILITIES 0x0008
#define SMB2_POSIX_EXTENSIONS_AVAILABLE 0x0100
/* Values for the SMB2_PREAUTH_INTEGRITY_CAPABILITIES Context (>= 0x310) */
#define SMB2_PREAUTH_INTEGRITY_SHA512 0x0001
/* Values for the SMB2_SIGNING_CAPABILITIES Context (>= 0x311) */
#define SMB2_SIGNING_INVALID_ALGO 0xffff /* only used internally */
#define SMB2_SIGNING_MD5_SMB1 0xfffe /* internally for SMB1 */
#define SMB2_SIGNING_HMAC_SHA256 0x0000 /* default <= 0x210 */
#define SMB2_SIGNING_AES128_CMAC 0x0001 /* default >= 0x224 */
#define SMB2_SIGNING_AES128_GMAC 0x0002 /* only in dialect >= 0x311 */
/* Values for the SMB2_ENCRYPTION_CAPABILITIES Context (>= 0x311) */
#define SMB2_ENCRYPTION_INVALID_ALGO 0xffff /* only used internally */
#define SMB2_ENCRYPTION_NONE 0x0000 /* only used internally */
#define SMB2_ENCRYPTION_AES128_CCM 0x0001 /* only in dialect >= 0x224 */
#define SMB2_ENCRYPTION_AES128_GCM 0x0002 /* only in dialect >= 0x311 */
#define SMB2_ENCRYPTION_AES256_CCM 0x0003 /* only in dialect >= 0x311 */
#define SMB2_ENCRYPTION_AES256_GCM 0x0004 /* only in dialect >= 0x311 */
#define SMB2_NONCE_HIGH_MAX(nonce_len_bytes) ((uint64_t)(\
((nonce_len_bytes) >= 16) ? UINT64_MAX : \
((nonce_len_bytes) <= 8) ? 0 : \
(((uint64_t)1 << (((nonce_len_bytes) - 8)*8)) - 1) \
))
/* Values for the SMB2_TRANSPORT_CAPABILITIES Context (>= 0x311) */
#define SMB2_ACCEPT_TRANSPORT_LEVEL_SECURITY 0x0001
/* Values for the SMB2_RDMA_TRANSFORM_CAPABILITIES Context (>= 0x311) */
#define SMB2_RDMA_TRANSFORM_NONE 0x0000
#define SMB2_RDMA_TRANSFORM_ENCRYPTION 0x0001
#define SMB2_RDMA_TRANSFORM_SIGNING 0x0002
/* SMB2 session (request) flags */
#define SMB2_SESSION_FLAG_BINDING 0x01
/* SMB2_SESSION_FLAG_ENCRYPT_DATA 0x04 only in dialect >= 0x310 */
/* SMB2 session (response) flags */
#define SMB2_SESSION_FLAG_IS_GUEST 0x0001
#define SMB2_SESSION_FLAG_IS_NULL 0x0002
#define SMB2_SESSION_FLAG_ENCRYPT_DATA 0x0004 /* in dialect >= 0x224 */
/* SMB2 tree connect (request) flags */
#define SMB2_SHAREFLAG_CLUSTER_RECONNECT 0x0001 /* only in dialect >= 0x310 */
/* SMB2 sharetype flags */
#define SMB2_SHARE_TYPE_DISK 0x1
#define SMB2_SHARE_TYPE_PIPE 0x2
#define SMB2_SHARE_TYPE_PRINT 0x3
/* SMB2 share flags */
#define SMB2_SHAREFLAG_MANUAL_CACHING 0x0000
#define SMB2_SHAREFLAG_AUTO_CACHING 0x0010
#define SMB2_SHAREFLAG_VDO_CACHING 0x0020
#define SMB2_SHAREFLAG_NO_CACHING 0x0030
#define SMB2_SHAREFLAG_DFS 0x0001
#define SMB2_SHAREFLAG_DFS_ROOT 0x0002
#define SMB2_SHAREFLAG_RESTRICT_EXCLUSIVE_OPENS 0x0100
#define SMB2_SHAREFLAG_FORCE_SHARED_DELETE 0x0200
#define SMB2_SHAREFLAG_ALLOW_NAMESPACE_CACHING 0x0400
#define SMB2_SHAREFLAG_ACCESS_BASED_DIRECTORY_ENUM 0x0800
#define SMB2_SHAREFLAG_FORCE_LEVELII_OPLOCKS 0x1000
#define SMB2_SHAREFLAG_ENABLE_HASH_V1 0x2000
#define SMB2_SHAREFLAG_ENABLE_HASH_V2 0x4000
#define SMB2_SHAREFLAG_ENCRYPT_DATA 0x8000
#define SMB2_SHAREFLAG_IDENTITY_REMOTING 0x00040000
#define SMB2_SHAREFLAG_COMPRESS_DATA 0x00100000
#define SMB2_SHAREFLAG_ISOLATED_TRANSPORT 0x00200000
/* SMB2 share capabilities */
#define SMB2_SHARE_CAP_DFS 0x8
#define SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY 0x10 /* in dialect >= 0x222 */
#define SMB2_SHARE_CAP_SCALEOUT 0x20 /* in dialect >= 0x222 */
#define SMB2_SHARE_CAP_CLUSTER 0x40 /* in dialect >= 0x222 */
#define SMB2_SHARE_CAP_ASYMMETRIC 0x80 /* in dialect >= 0x302 */
/* SMB2 create security flags */
#define SMB2_SECURITY_DYNAMIC_TRACKING 0x01
#define SMB2_SECURITY_EFFECTIVE_ONLY 0x02
/* SMB2 lock flags */
#define SMB2_LOCK_FLAG_NONE 0x00000000
#define SMB2_LOCK_FLAG_SHARED 0x00000001
#define SMB2_LOCK_FLAG_EXCLUSIVE 0x00000002
#define SMB2_LOCK_FLAG_UNLOCK 0x00000004
#define SMB2_LOCK_FLAG_FAIL_IMMEDIATELY 0x00000010
#define SMB2_LOCK_FLAG_ALL_MASK 0x00000017
/* SMB2 requested oplock levels */
#define SMB2_OPLOCK_LEVEL_NONE 0x00
#define SMB2_OPLOCK_LEVEL_II 0x01
#define SMB2_OPLOCK_LEVEL_EXCLUSIVE 0x08
#define SMB2_OPLOCK_LEVEL_BATCH 0x09
#define SMB2_OPLOCK_LEVEL_LEASE 0xFF
/* SMB2 lease bits */
#define SMB2_LEASE_NONE 0x00
/* SMB2 lease flags */
#define SMB2_LEASE_FLAG_BREAK_IN_PROGRESS 0x00000002
#define SMB2_LEASE_FLAG_PARENT_LEASE_KEY_SET 0x00000004
/* SMB2 lease break flags */
#define SMB2_NOTIFY_BREAK_LEASE_FLAG_ACK_REQUIRED 0x01
/* SMB2 impersonation levels */
#define SMB2_IMPERSONATION_ANONYMOUS 0x00
#define SMB2_IMPERSONATION_IDENTIFICATION 0x01
#define SMB2_IMPERSONATION_IMPERSONATION 0x02
#define SMB2_IMPERSONATION_DELEGATE 0x03
/* SMB2 create tags */
#define SMB2_CREATE_TAG_EXTA "ExtA"
#define SMB2_CREATE_TAG_MXAC "MxAc"
#define SMB2_CREATE_TAG_SECD "SecD"
#define SMB2_CREATE_TAG_DHNQ "DHnQ"
#define SMB2_CREATE_TAG_DHNC "DHnC"
#define SMB2_CREATE_TAG_ALSI "AlSi"
#define SMB2_CREATE_TAG_TWRP "TWrp"
#define SMB2_CREATE_TAG_QFID "QFid"
#define SMB2_CREATE_TAG_RQLS "RqLs"
#define SMB2_CREATE_TAG_DH2Q "DH2Q"
#define SMB2_CREATE_TAG_DH2C "DH2C"
#define SMB2_CREATE_TAG_AAPL "AAPL"
#define SMB2_CREATE_TAG_APP_INSTANCE_ID "\x45\xBC\xA6\x6A\xEF\xA7\xF7\x4A\x90\x08\xFA\x46\x2E\x14\x4D\x74"
#define SVHDX_OPEN_DEVICE_CONTEXT "\x9C\xCB\xCF\x9E\x04\xC1\xE6\x43\x98\x0E\x15\x8D\xA1\xF6\xEC\x83"
#define SMB2_CREATE_TAG_POSIX "\x93\xAD\x25\x50\x9C\xB4\x11\xE7\xB4\x23\x83\xDE\x96\x8B\xCD\x7C"
/* SMB2 notify flags */
#define SMB2_WATCH_TREE 0x0001
/* SMB2 Create ignore some more create_options */
#define SMB2_CREATE_OPTIONS_NOT_SUPPORTED_MASK (NTCREATEX_OPTIONS_TREE_CONNECTION | \
NTCREATEX_OPTIONS_OPFILTER)
/*
SMB2 uses different level numbers for the same old SMB trans2 search levels
*/
#define SMB2_FIND_DIRECTORY_INFO 0x01
#define SMB2_FIND_FULL_DIRECTORY_INFO 0x02
#define SMB2_FIND_BOTH_DIRECTORY_INFO 0x03
#define SMB2_FIND_NAME_INFO 0x0C
#define SMB2_FIND_ID_BOTH_DIRECTORY_INFO 0x25
#define SMB2_FIND_ID_FULL_DIRECTORY_INFO 0x26
/* SMB2 UNIX Extensions. */
#define SMB2_FIND_POSIX_INFORMATION 0x64
/* flags for SMB2 find */
#define SMB2_CONTINUE_FLAG_RESTART 0x01
#define SMB2_CONTINUE_FLAG_SINGLE 0x02
#define SMB2_CONTINUE_FLAG_INDEX 0x04
#define SMB2_CONTINUE_FLAG_REOPEN 0x10
/* get/setinfo classes, see [MS-SMB2] 2.2.37 and 2.2.39 */
#define SMB2_0_INFO_FILE 0x01
#define SMB2_0_INFO_FILESYSTEM 0x02
#define SMB2_0_INFO_SECURITY 0x03
#define SMB2_0_INFO_QUOTA 0x04
#define SMB2_CLOSE_FLAGS_FULL_INFORMATION (0x01)
#define SMB2_READFLAG_READ_UNBUFFERED 0x01
#define SMB2_WRITEFLAG_WRITE_THROUGH 0x00000001
#define SMB2_WRITEFLAG_WRITE_UNBUFFERED 0x00000002
/* 2.2.31 SMB2 IOCTL Request */
#define SMB2_IOCTL_FLAG_IS_FSCTL 0x00000001
/*
* Flags for durable handle v2 requests
*/
#define SMB2_DHANDLE_FLAG_PERSISTENT 0x00000002
/* The AES CCM nonce N of 15 - L octets. Where L=4 */
#define SMB2_AES_128_CCM_NONCE_SIZE 11
#endif
|
