Public/winfsp
1
0
Fork 0
mirror of https://github.com/winfsp/winfsp.git synced 2025-04-23 08:53:01 -05:00
Code Issues Packages Projects Releases Wiki Activity

sys: IRP_MJ_CREATE: STATUS_REPARSE

Browse Source
This commit is contained in:
Bill Zissimopoulos 2015-12-05 13:30:37 -08:00
parent 1f0942a100
commit bdc7033740
1 changed files with 47 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

59
src/sys/create.c
View File

@ -352,9 +352,9 @@ VOID FspFsvolCreateComplete(
FspFsvrtDeviceExtension(FsvolDeviceExtension->FsvrtDeviceObject); FspFsvrtDeviceExtension(FsvolDeviceExtension->FsvrtDeviceObject);
PFILE_OBJECT FileObject = IrpSp->FileObject; PFILE_OBJECT FileObject = IrpSp->FileObject;
PACCESS_STATE AccessState = IrpSp->Parameters.Create.SecurityContext->AccessState; PACCESS_STATE AccessState = IrpSp->Parameters.Create.SecurityContext->AccessState;
PSECURITY_DESCRIPTOR SecurityDescriptor = PSECURITY_DESCRIPTOR SecurityDescriptor;
(PVOID)(Response->Buffer + Response->Rsp.Create.Buf.SecurityDescriptor.Offset); ULONG SecurityDescriptorSize;
ULONG SecurityDescriptorSize = Response->Rsp.Create.Buf.SecurityDescriptor.Size; UNICODE_STRING ReparseFileName;
ACCESS_MASK DesiredAccess = IrpSp->Parameters.Create.SecurityContext->DesiredAccess; ACCESS_MASK DesiredAccess = IrpSp->Parameters.Create.SecurityContext->DesiredAccess;
USHORT ShareAccess = IrpSp->Parameters.Create.ShareAccess; USHORT ShareAccess = IrpSp->Parameters.Create.ShareAccess;
ULONG Flags = IrpSp->Flags; ULONG Flags = IrpSp->Flags;
@ -378,28 +378,63 @@ VOID FspFsvolCreateComplete(
/* special case STATUS_REPARSE */ /* special case STATUS_REPARSE */
if (STATUS_REPARSE == Result) if (STATUS_REPARSE == Result)
{ {
if (IO_REPARSE != Response->IoStatus.Information && ReparseFileName.Buffer =
IO_REMOUNT != Response->IoStatus.Information) (PVOID)(Response->Buffer + Response->Rsp.Create.Buf.ReparseFileName.Offset);
{ ReparseFileName.Length = ReparseFileName.MaximumLength =
FspFileContextDelete(FileObject->FsContext); Response->Rsp.Create.Buf.ReparseFileName.Size;
FileObject->FsContext = 0;
FSP_RETURN(Result = STATUS_ACCESS_DENIED);
}
if (IO_REPARSE != Response->IoStatus.Information) Result = STATUS_ACCESS_DENIED;
if (IO_REPARSE == Response->IoStatus.Information)
{ {
if (0 == ReparseFileName.Length ||
(PUINT8)ReparseFileName.Buffer + ReparseFileName.Length >
(PUINT8)Response + Response->Size)
goto reparse_fail;
if (ReparseFileName.Length > FileObject->FileName.MaximumLength)
{
PVOID Buffer = ExAllocatePoolWithTag(NonPagedPool, ReparseFileName.Length, FSP_TAG);
if (0 == Buffer)
{
Result = STATUS_INSUFFICIENT_RESOURCES;
goto reparse_fail;
} }
ExFreePool(FileObject->FileName.Buffer);
FileObject->FileName.Length = 0;
FileObject->FileName.MaximumLength = ReparseFileName.Length;
FileObject->FileName.Buffer = Buffer;
RtlCopyUnicodeString(&FileObject->FileName, &ReparseFileName);
}
}
else
if (IO_REMOUNT == Response->IoStatus.Information)
{
if (0 != ReparseFileName.Length)
goto reparse_fail;
}
else
goto reparse_fail;
Irp->IoStatus.Information = Response->IoStatus.Information; Irp->IoStatus.Information = Response->IoStatus.Information;
Result = Response->IoStatus.Status; Result = Response->IoStatus.Status;
FSP_RETURN(); FSP_RETURN();
reparse_fail:
FspFileContextDelete(FileObject->FsContext);
FileObject->FsContext = 0;
FSP_RETURN();
} }
SecurityDescriptor =
(PVOID)(Response->Buffer + Response->Rsp.Create.Buf.SecurityDescriptor.Offset);
SecurityDescriptorSize = Response->Rsp.Create.Buf.SecurityDescriptor.Size;
/* are we doing access checks? */ /* are we doing access checks? */
if (FsvrtDeviceExtension->VolumeParams.NoSystemAccessCheck && if (FsvrtDeviceExtension->VolumeParams.NoSystemAccessCheck &&
0 != SecurityDescriptorSize) 0 != SecurityDescriptorSize)
{ {
if ((PUINT8)SecurityDescriptor + SecurityDescriptorSize > (PUINT8)Response + Response->Size || if ((PUINT8)SecurityDescriptor + SecurityDescriptorSize >
(PUINT8)Response + Response->Size ||
!FspValidRelativeSecurityDescriptor(SecurityDescriptor, SecurityDescriptorSize, 0)) !FspValidRelativeSecurityDescriptor(SecurityDescriptor, SecurityDescriptorSize, 0))
{ {
FspFsvolCreateClose(Irp, Response); FspFsvolCreateClose(Irp, Response);