summaryrefslogtreecommitdiff
path: root/epan/dissectors/packet-smb.c
AgeCommit message (Collapse)AuthorFilesLines
2006-02-06add dissection of a few more create optionsRonnie Sahlberg1-15/+86
svn path=/trunk/; revision=17179
2005-12-21add dissection of two more NTCreateAndX bits : Ronnie Sahlberg1-0/+20
open by file id and backup intent svn path=/trunk/; revision=16869
2005-12-11implement SMB_FILE_ALL_INFO properly once and for allRonnie Sahlberg1-73/+50
svn path=/trunk/; revision=16755
2005-12-05updates for FILE_OBJECTID_BUFFER and have smb call this (no more unknown ↵Ronnie Sahlberg1-26/+5
bytes in smb for objectid) svn path=/trunk/; revision=16682
2005-11-26add endoffile infolevelRonnie Sahlberg1-0/+19
svn path=/trunk/; revision=16607
2005-11-26more infolevelsRonnie Sahlberg1-0/+19
svn path=/trunk/; revision=16606
2005-11-26assume the four bytes after the fid in notify request is the completion maskRonnie Sahlberg1-1/+1
svn path=/trunk/; revision=16596
2005-11-25from metze and modified, fix for in offset/length for transaction requestRonnie Sahlberg1-1/+1
svn path=/trunk/; revision=16589
2005-11-25add some more infolevelsRonnie Sahlberg1-3/+37
svn path=/trunk/; revision=16585
2005-11-25add dissection of the smb2 impersionationlevel fieldRonnie Sahlberg1-1/+1
svn path=/trunk/; revision=16581
2005-11-25some info level updatesRonnie Sahlberg1-0/+43
svn path=/trunk/; revision=16580
2005-11-25some info level updatesRonnie Sahlberg1-1/+44
svn path=/trunk/; revision=16579
2005-11-19fix for bug 570, the domain name is present in sessionsetupandx replies ↵Ronnie Sahlberg1-1/+1
even for wc==4 svn path=/trunk/; revision=16550
2005-11-18dissect some more infolevelsRonnie Sahlberg1-20/+20
svn path=/trunk/; revision=16543
2005-11-17add dissection of more infolevels for smb2Ronnie Sahlberg1-14/+12
svn path=/trunk/; revision=16539
2005-11-17add dissection of fs_[objectid|full_size]_infoRonnie Sahlberg1-46/+62
svn path=/trunk/; revision=16538
2005-11-17 add dissection of fs quota infoRonnie Sahlberg1-1/+1
svn path=/trunk/; revision=16537
2005-11-17add full dissection of fs_[volume|size|device|atrtibute]_infoRonnie Sahlberg1-84/+118
svn path=/trunk/; revision=16536
2005-11-17add dissection of the security descriptor maskRonnie Sahlberg1-1/+1
svn path=/trunk/; revision=16535
2005-11-12from Laurent ConstantinRonnie Sahlberg1-20/+154
updates to smb A patch for packet-smb.c is attached:  - it improves timeout decoding  - it defines common NT transaction IOCTL functions  - it corrects decoding of resume key in search queries  - it defines a new function dissect_4_2_16_8_unsure() to replace   dissect_4_2_16_8(). I'm unsure if it is correct. As said in   comments, it works for me, but I find strange that nobody noticed   dissect_4_2_16_8() was wrong. So, it is between "#if 0".   Someone else should confirm dissect_4_2_16_8_unsure() works   before activating it. svn path=/trunk/; revision=16494
2005-11-12 improve the dissection of Create and fill in most of the fieldsRonnie Sahlberg1-5/+5
svn path=/trunk/; revision=16490
2005-11-12dissect more of Close request/responseRonnie Sahlberg1-1/+1
svn path=/trunk/; revision=16487
2005-10-04Don't ensure all the bytes of a security descriptor exist before callingGuy Harris1-4/+4
"dissect_nt_sec_desc()". Add a Boolean argument to "dissect_nt_sec_desc()" to indicate whether a length was passed to it (so we don't treat -1 as a special value; we want to stop treating -1 as a special length value, and, in fact, want to stop treating *any* negative length values specially, so that we don't have to worry about passing arbitrary 32-bit values from packets as lengths), and have "dissect_nt_sec_desc()" initially create the protocol tree item for the security descriptor with a length of "go to the end of the tvbuff", and set the length once we're done dissecting it - and, if the length was specified, check at *that* point, *after* we've dissected the security descriptor, whether we have the entire security descriptor in the tvbuff. That means that we don't have to worry about overflows after "dissect_nt_sec_desc()" returns - if the length was so large that we would have gotten an overflow, we'd have thrown an exception in the "tvb_ensure_bytes_exist()" call at the end of "dissect_nt_sec_desc()". Do sanity checks on offsets within the security descriptor, so we know the item referred to by the offset is after the fixed-length portion of the descriptor. svn path=/trunk/; revision=16113
2005-09-29Make "top_tree" static; nobody else uses it, and if they're both notGuy Harris1-1/+1
static, they collide with one another in builds on at least some platforms. svn path=/trunk/; revision=16049
2005-09-28fix #480: Change defaults for all reassembling settings to ONUlf Lamping1-2/+2
I've changed all settings I could find to TRUE. It might be reasonable to change some protocol settings back to FALSE, if reassembling fails very often. svn path=/trunk/; revision=16048
2005-09-17Move some headers for stuff defined by a dissector into epan/dissectorsGuy Harris1-1/+1
- and rename smb.h to packet-smb.h, as it's packet-smb.c's header file. svn path=/trunk/; revision=15845
2005-09-17Move a pile of protocol-related headers from the top-level sourceGuy Harris1-1/+1
directory to the epan directory. Some of them should perhaps ultimately be moved to epan/dissectors, if they pertain only to stuff exported by a particular dissector. Fix Gerald's e-mail address in files we're moving. svn path=/trunk/; revision=15844
2005-09-13In smb_trans_defragment(), throw an exception if we encounter a too-largeGerald Combs1-0/+9
fragment size. The limit is conservatively set at 65536 bytes. It may have to be increased. Fixes bug 421. Add an entry to the release notes. svn path=/trunk/; revision=15789
2005-08-24EVERYTHING IN THE BUILDBOT IS GOING TO BE RED!!! Sorry! Ulf Lamping1-5/+3
I've done more than a day to change the timestamp resolution from microseconds to nanoseconds. As I really don't want to loose those changes, I'm going to check in the changes I've done so far. Hopefully someone else will give me a helping hand with the things left ... What's done: I've changed the timestamp resolution from usec to nsec in almost any place in the sources. I've changed parts of the implementation in nstime.s/.h and a lot of places elsewhere. As I don't understand the editcap source (well, I'm maybe just too tired right now), hopefully someone else might be able to fix this soon. Doing all those changes, we get native nanosecond timestamp resolution in Ethereal. After fixing all the remaining issues, I'll take a look how to display this in a convenient way... As I've also changed the wiretap timestamp resolution from usec to nsec we might want to change the wiretap version number... svn path=/trunk/; revision=15520
2005-08-20removed MSVC warnings:Ulf Lamping1-3/+3
packet-camel.c(6829) : warning C4101: 'version_str' : unreferenced local variable packet-quakeworld.c(172) : warning C4090: 'return' : different 'const' qualifiers packet-smb.c(10859) : warning C4101: 'target_name_len' : unreferenced local variable packet-smb.c(10860) : warning C4101: 'fn_len' : unreferenced local variable packet-smb.c(10858) : warning C4101: 'fn' : unreferenced local variable svn path=/trunk/; revision=15474
2005-08-20Use get_timedelta() to get the difference between two times.Guy Harris1-8/+5
svn path=/trunk/; revision=15455
2005-08-19Restore pinfo->private_data after calling another dissector, in case it getsGerald Combs1-0/+2
overwritten. Fixes bug 367. svn path=/trunk/; revision=15435
2005-08-17snprintf -> g_snprintfUlf Lamping1-2/+1
svn path=/trunk/; revision=15398
2005-08-16add SetFileInfo level 1013 SetDispositionInfo decodingRonnie Sahlberg1-1/+35
svn path=/trunk/; revision=15374
2005-08-13some more gmemchunk -> se_alloc() updatesRonnie Sahlberg1-71/+9
there are only 5 gmemchunks left but they have different litetime for their allocations than the 100+ ones that have been removed. The remaining 5 should be converted some other way. svn path=/trunk/; revision=15328
2005-08-10rename ep_tvb_get_string() to tvb_get_ephemeral_string() asnd update the ↵Ronnie Sahlberg1-1/+1
documentation in README.developer svn path=/trunk/; revision=15270
2005-08-06DissectorError is not supposed to be directly thrown; one should use theGuy Harris1-68/+68
various DISSECTOR_ macros, so the error message includes an indication of the problem, and the file and line number. svn path=/trunk/; revision=15237
2005-08-06In packet-frame.c, don't free static memory when we throw aGerald Combs1-1/+2
DissectorError. In packet-kerberos.c, restore pinfo->private_data if we throw an exception, which keeps the SMB dissector from throwing a DissectorError. Initialize variables in other places to squelch valgrind warnings. svn path=/trunk/; revision=15235
2005-08-05More char -> const char warning fixesJörg Mayer1-1/+1
svn path=/trunk/; revision=15218
2005-07-28some more memification of tvb_get_string() no obvious memleaks fixed this ↵Ronnie Sahlberg1-2/+1
time :-( svn path=/trunk/; revision=15131
2005-07-19minor fix to add required alignment for AueryPathInfo level 0x107Ronnie Sahlberg1-1/+8
it decodes "better" but might still be broken since none of the packets I have match any of the "standards" svn path=/trunk/; revision=14952
2005-06-26Get rid of the private "my_match_strval()" routine in many dissectors;Guy Harris1-1/+1
add a "match_strval_idx()" routine that does the same thing, and have "match_strval()" call it. Make those routines, and "val_to_str()", return a "const" pointer. Update dissectors as necessary to squelch compiler warnings produced by that. Use "val_to_str()" rather than using "match_strval()" and then, if the result is null, substituting a specific string. Clean up some other "match_strval()"/"val_to_str()" usages. Add a null pointer check in the NDPS dissector's "attribute_value()" routine, as it's not clear that "global_attribute_name" won't be null at that point. Make some global variables in the AFS4INT dissector local. Make some routines not used outside the module they're in static. Make some tables "static const". Clean up white space. Fix Gerald's address in some files. svn path=/trunk/; revision=14786
2005-06-26packet-smb.c(14406) : warning C4090: 'return' : different 'const' qualifiersUlf Lamping1-2/+2
svn path=/trunk/; revision=14780
2005-06-02add a generated toplevel line between the TCP protocol and the desegmented ↵Ulf Lamping1-2/+6
content, to better understand what's going on while desegmenting. We'll have to add similar mechanisms for other protocols as well... svn path=/trunk/; revision=14527
2005-06-02bugfix (fuzz_tested): t2i can be zero, test at all places before using itUlf Lamping1-8/+8
svn path=/trunk/; revision=14526
2005-05-30don't go into an (almost) endless loop, if si->info_count is -1, which is ↵Ulf Lamping1-0/+6
the default value. Seems to be a general bug worth to thought about, but I don't know the SMB internals and this bugfix should work anyway. Found this by a privately fuzzed capture file (sorry, can't give it away) svn path=/trunk/; revision=14501
2005-05-30fix #215: the field hf_smb_print_spool_file_name used the wrong type, use ↵Ulf Lamping1-1/+1
FT_STRINGZ to add a string svn path=/trunk/; revision=14482
2005-05-14Throw an exception if AndXOffset is less than the current offset. Fixes bugGerald Combs1-0/+45
163. I'm not sure if this fix is entirely correct, but it doesn't appear to have affected any SMB captures here adversely. svn path=/trunk/; revision=14365
2005-05-04Don't try to feed a null pointer to strncmp(). Fixes bug 158.Gerald Combs1-0/+2
Shouldn't the number of fuzz bugs decrease asymptotically at some point? svn path=/trunk/; revision=14306
2005-04-20In all functions that require smb_info data, throw an exception if weGerald Combs1-9/+140
can't fetch it. Fix a few more null pointer dereferences. Fixes bug 79. svn path=/trunk/; revision=14149