sam.c

 
#include <winpr/config.h>
#include <winpr/path.h>
 
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
 
#include <winpr/wtypes.h>
#include <winpr/crt.h>
#include <winpr/sam.h>
#include <winpr/cast.h>
#include <winpr/print.h>
#include <winpr/file.h>
 
#include "../log.h"
#include "../utils.h"
 
#ifdef WINPR_HAVE_UNISTD_H
#include <unistd.h>
#endif
 
#define TAG WINPR_TAG("utils")
 
struct winpr_sam
{
  FILE* fp;
  char* line;
  char* buffer;
  size_t bufferlen;
  char* context;
  BOOL readOnly;
};
 
WINPR_ATTR_MALLOC(SamFreeEntry, 1)
static WINPR_SAM_ENTRY* SamEntryFromDataA(LPCSTR User, DWORD UserLength, LPCSTR Domain,
                                          DWORD DomainLength)
{
  WINPR_SAM_ENTRY* entry = calloc(1, sizeof(WINPR_SAM_ENTRY));
  if (!entry)
    return nullptr;
  if (User && (UserLength > 0))
    entry->User = _strdup(User);
  entry->UserLength = UserLength;
  if (Domain && (DomainLength > 0))
    entry->Domain = _strdup(Domain);
  entry->DomainLength = DomainLength;
  return entry;
}
 
WINPR_ATTR_NODISCARD
static BOOL SamAreEntriesEqual(const WINPR_SAM_ENTRY* a, const WINPR_SAM_ENTRY* b)
{
  if (!a || !b)
    return FALSE;
  if (a->UserLength != b->UserLength)
    return FALSE;
  if (a->DomainLength != b->DomainLength)
    return FALSE;
  if (a->UserLength > 0)
  {
    if (!a->User || !b->User)
      return FALSE;
    if (strncmp(a->User, b->User, a->UserLength) != 0)
      return FALSE;
  }
  if (a->DomainLength > 0)
  {
    if (!a->Domain || !b->Domain)
      return FALSE;
    if (strncmp(a->Domain, b->Domain, a->DomainLength) != 0)
      return FALSE;
  }
  return TRUE;
}
 
WINPR_SAM* SamOpen(const char* filename, BOOL readOnly)
{
  FILE* fp = nullptr;
  WINPR_SAM* sam = nullptr;
  char* allocatedFileName = nullptr;
 
  if (!filename)
  {
    allocatedFileName = winpr_GetConfigFilePath(TRUE, "SAM");
    filename = allocatedFileName;
  }
 
  if (readOnly)
    fp = winpr_fopen(filename, "r");
  else
  {
    fp = winpr_fopen(filename, "r+");
 
    if (!fp)
      fp = winpr_fopen(filename, "w+");
  }
  winpr_zfree(allocatedFileName);
 
  if (fp)
  {
    sam = (WINPR_SAM*)calloc(1, sizeof(WINPR_SAM));
 
    if (!sam)
    {
      (void)fclose(fp);
      return nullptr;
    }
 
    sam->readOnly = readOnly;
    sam->fp = fp;
  }
  else
  {
    WLog_DBG(TAG, "Could not open SAM file!");
    return nullptr;
  }
 
  return sam;
}
 
static void SamLookupFinish(WINPR_SAM* sam)
{
  winpr_znfree(sam->buffer, sam->bufferlen);
  sam->buffer = nullptr;
  sam->bufferlen = 0;
  sam->line = nullptr;
}
 
WINPR_ATTR_NODISCARD
static BOOL SamLookupStart(WINPR_SAM* sam)
{
  size_t readSize = 0;
  INT64 fileSize = 0;
 
  if (!sam || !sam->fp)
    return FALSE;
 
  if (_fseeki64(sam->fp, 0, SEEK_END) != 0)
    return FALSE;
  fileSize = _ftelli64(sam->fp);
  if (_fseeki64(sam->fp, 0, SEEK_SET) != 0)
    return FALSE;
 
  if (fileSize < 1)
    return FALSE;
 
  sam->context = nullptr;
  const size_t allocsize = WINPR_ASSERTING_INT_CAST(size_t, fileSize) + 2ull;
  sam->buffer = (char*)calloc(allocsize, 1);
 
  if (!sam->buffer)
    return FALSE;
  sam->bufferlen = allocsize;
 
  readSize = fread(sam->buffer, sam->bufferlen - 2ull, 1, sam->fp);
 
  if (!readSize)
  {
    if (!ferror(sam->fp))
      readSize = (size_t)fileSize;
  }
 
  if (readSize < 1)
  {
    SamLookupFinish(sam);
    return FALSE;
  }
 
  sam->buffer[fileSize] = '\n';
  sam->buffer[fileSize + 1] = '\0';
  sam->line = strtok_s(sam->buffer, "\n", &sam->context);
  return TRUE;
}
 
static void SamResetEntryUser(WINPR_SAM_ENTRY* entry)
{
  if (!entry)
    return;
 
  if (entry->UserLength > 0)
    winpr_znfree(entry->User, entry->UserLength);
  entry->User = nullptr;
  entry->UserLength = 0;
 
  if (entry->DomainLength > 0)
    winpr_znfree(entry->Domain, entry->DomainLength);
  entry->Domain = nullptr;
  entry->DomainLength = 0;
}
 
WINPR_ATTR_NODISCARD
static BOOL SamReadEntry(WINPR_SAM* sam, WINPR_SAM_ENTRY* entry)
{
  char* p[5] = WINPR_C_ARRAY_INIT;
  size_t count = 0;
 
  if (!sam || !entry || !sam->line)
    return FALSE;
 
  char* cur = sam->line;
 
  while ((cur = strchr(cur, ':')) != nullptr)
  {
    count++;
    cur++;
  }
 
  if (count < 4)
    goto fail;
 
  p[0] = sam->line;
  p[1] = strchr(p[0], ':') + 1;
  p[2] = strchr(p[1], ':') + 1;
  p[3] = strchr(p[2], ':') + 1;
  p[4] = strchr(p[3], ':') + 1;
  const size_t LmHashLength = WINPR_ASSERTING_INT_CAST(size_t, (p[3] - p[2] - 1));
  const size_t NtHashLength = WINPR_ASSERTING_INT_CAST(size_t, (p[4] - p[3] - 1));
 
  if ((LmHashLength != 0) && (LmHashLength != 32))
    goto fail;
 
  if ((NtHashLength != 0) && (NtHashLength != 32))
    goto fail;
 
  entry->UserLength = (UINT32)(p[1] - p[0] - 1);
  entry->User = (LPSTR)malloc(entry->UserLength + 1);
 
  if (!entry->User)
    goto fail;
 
  entry->User[entry->UserLength] = '\0';
  entry->DomainLength = (UINT32)(p[2] - p[1] - 1);
  memcpy(entry->User, p[0], entry->UserLength);
 
  if (entry->DomainLength > 0)
  {
    entry->Domain = (LPSTR)malloc(entry->DomainLength + 1);
 
    if (!entry->Domain)
      goto fail;
 
    memcpy(entry->Domain, p[1], entry->DomainLength);
    entry->Domain[entry->DomainLength] = '\0';
  }
  else
    entry->Domain = nullptr;
 
  if (LmHashLength == 32)
  {
    const size_t rc =
        winpr_HexStringToBinBuffer(p[2], LmHashLength, entry->LmHash, sizeof(entry->LmHash));
    if (rc != 16)
      goto fail;
  }
 
  if (NtHashLength == 32)
  {
    const size_t rc = winpr_HexStringToBinBuffer(p[3], NtHashLength, (BYTE*)entry->NtHash,
                                                 sizeof(entry->NtHash));
    if (rc != 16)
      goto fail;
  }
 
  return TRUE;
 
fail:
  SamResetEntryUser(entry);
  return FALSE;
}
 
void SamFreeEntry(WINPR_ATTR_UNUSED WINPR_SAM* sam, WINPR_SAM_ENTRY* entry)
{
  if (!entry)
    return;
  SamResetEntry(entry);
  winpr_znfree(entry, sizeof(WINPR_SAM_ENTRY));
}
 
void SamResetEntry(WINPR_SAM_ENTRY* entry)
{
  if (!entry)
    return;
 
  SamResetEntryUser(entry);
 
  ZeroMemory(entry->LmHash, sizeof(entry->LmHash));
  ZeroMemory(entry->NtHash, sizeof(entry->NtHash));
}
 
WINPR_SAM_ENTRY* SamLookupUserA(WINPR_SAM* sam, LPCSTR User, UINT32 UserLength, LPCSTR Domain,
                                UINT32 DomainLength)
{
  size_t length = 0;
  BOOL found = FALSE;
  WINPR_SAM_ENTRY* search = SamEntryFromDataA(User, UserLength, Domain, DomainLength);
  WINPR_SAM_ENTRY* entry = (WINPR_SAM_ENTRY*)calloc(1, sizeof(WINPR_SAM_ENTRY));
 
  if (!entry || !search)
    goto fail;
 
  if (!SamLookupStart(sam))
    goto fail;
 
  while (sam->line != nullptr)
  {
    length = strlen(sam->line);
 
    if (length > 1)
    {
      if (sam->line[0] != '#')
      {
        if (!SamReadEntry(sam, entry))
        {
          goto out_fail;
        }
 
        if (SamAreEntriesEqual(entry, search))
        {
          found = 1;
          break;
        }
      }
    }
 
    SamResetEntry(entry);
    sam->line = strtok_s(nullptr, "\n", &sam->context);
  }
 
out_fail:
  SamLookupFinish(sam);
fail:
  SamFreeEntry(sam, search);
 
  if (!found)
  {
    SamFreeEntry(sam, entry);
    return nullptr;
  }
 
  return entry;
}
 
WINPR_SAM_ENTRY* SamLookupUserW(WINPR_SAM* sam, LPCWSTR User, UINT32 UserLength, LPCWSTR Domain,
                                UINT32 DomainLength)
{
  WINPR_SAM_ENTRY* entry = nullptr;
  char* utfUser = nullptr;
  char* utfDomain = nullptr;
  size_t userCharLen = 0;
  size_t domainCharLen = 0;
 
  utfUser = ConvertWCharNToUtf8Alloc(User, UserLength / sizeof(WCHAR), &userCharLen);
  if (!utfUser)
    goto fail;
  if (DomainLength > 0)
  {
    utfDomain = ConvertWCharNToUtf8Alloc(Domain, DomainLength / sizeof(WCHAR), &domainCharLen);
    if (!utfDomain)
      goto fail;
  }
  entry = SamLookupUserA(sam, utfUser, (UINT32)userCharLen, utfDomain, (UINT32)domainCharLen);
  if (entry)
  {
    SamResetEntryUser(entry);
 
    if (User)
      entry->User = (char*)winpr_wcsndup(User, UserLength / sizeof(WCHAR));
    entry->UserLength = UserLength;
    if (Domain)
      entry->Domain = (char*)winpr_wcsndup(Domain, DomainLength / sizeof(WCHAR));
    entry->DomainLength = DomainLength;
  }
fail:
  winpr_znfree(utfUser, userCharLen);
  winpr_znfree(utfDomain, domainCharLen);
  return entry;
}
 
void SamClose(WINPR_SAM* sam)
{
  if (!sam)
    return;
 
  if (sam->fp)
    (void)fclose(sam->fp);
  winpr_znfree(sam, sizeof(WINPR_SAM));
}