mirror of
https://github.com/reactos/wine.git
synced 2024-11-26 05:00:30 +00:00
524251db40
LsaCallAuthenticationPackage, LsaConnectUntrusted and LsaDeregisterLogonProcess.
1018 lines
32 KiB
C
1018 lines
32 KiB
C
/* Copyright (C) 2004 Juan Lang
|
|
*
|
|
* This file implements loading of SSP DLLs.
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
*/
|
|
#include <assert.h>
|
|
#include <stdarg.h>
|
|
#include "windef.h"
|
|
#include "winbase.h"
|
|
#include "winnls.h"
|
|
#include "winreg.h"
|
|
#include "winternl.h"
|
|
#include "shlwapi.h"
|
|
#include "sspi.h"
|
|
#include "secur32_priv.h"
|
|
#include "secext.h"
|
|
#include "ntsecapi.h"
|
|
#include "thunks.h"
|
|
|
|
#include "wine/debug.h"
|
|
|
|
WINE_DEFAULT_DEBUG_CHANNEL(secur32);
|
|
|
|
/**
|
|
* Type definitions
|
|
*/
|
|
|
|
typedef struct _SecurePackageTable
|
|
{
|
|
DWORD numPackages;
|
|
DWORD numAllocated;
|
|
SecurePackage table[1];
|
|
} SecurePackageTable;
|
|
|
|
typedef struct _SecureProviderTable
|
|
{
|
|
DWORD numProviders;
|
|
DWORD numAllocated;
|
|
SecureProvider table[1];
|
|
} SecureProviderTable;
|
|
|
|
/**
|
|
* Prototypes
|
|
*/
|
|
|
|
/* Makes sure table has space for at least howBig entries. If table is NULL,
|
|
* returns a newly allocated table. Otherwise returns the address of the
|
|
* modified table, which may not be the same was when called.
|
|
*/
|
|
static SecurePackageTable *_resizePackageTable(SecurePackageTable *table,
|
|
DWORD howBig);
|
|
|
|
/* Makes sure table has space for at least howBig entries. If table is NULL,
|
|
* returns a newly allocated table. Otherwise returns the address of the
|
|
* modified table, which may not be the same was when called.
|
|
*/
|
|
static SecureProviderTable *_resizeProviderTable(SecureProviderTable *table,
|
|
DWORD howBig);
|
|
|
|
/* Tries to load moduleName as a provider. If successful, enumerates what
|
|
* packages it can and adds them to the package and provider tables. Resizes
|
|
* tables as necessary.
|
|
*/
|
|
static void _tryLoadProvider(PWSTR moduleName);
|
|
|
|
/* Initialization: read securityproviders value and attempt to open each dll
|
|
* there. For each DLL, call _tryLoadProvider to see if it's really an SSP.
|
|
* Two undocumented functions, AddSecurityPackage(A/W) and
|
|
* DeleteSecurityPackage(A/W), seem suspiciously like they'd register or
|
|
* unregister a dll, but I'm not sure.
|
|
*/
|
|
static void SECUR32_initializeProviders(void);
|
|
|
|
/* Frees all loaded packages and providers */
|
|
static void SECUR32_freeProviders(void);
|
|
|
|
/**
|
|
* Globals
|
|
*/
|
|
|
|
static CRITICAL_SECTION cs;
|
|
static SecurePackageTable *packageTable = NULL;
|
|
static SecureProviderTable *providerTable = NULL;
|
|
|
|
static SecurityFunctionTableA securityFunctionTableA = {
|
|
SECURITY_SUPPORT_PROVIDER_INTERFACE_VERSION_2,
|
|
EnumerateSecurityPackagesA,
|
|
QueryCredentialsAttributesA,
|
|
AcquireCredentialsHandleA,
|
|
FreeCredentialsHandle,
|
|
NULL, /* Reserved2 */
|
|
InitializeSecurityContextA,
|
|
AcceptSecurityContext,
|
|
CompleteAuthToken,
|
|
DeleteSecurityContext,
|
|
ApplyControlToken,
|
|
QueryContextAttributesA,
|
|
ImpersonateSecurityContext,
|
|
RevertSecurityContext,
|
|
MakeSignature,
|
|
VerifySignature,
|
|
FreeContextBuffer,
|
|
QuerySecurityPackageInfoA,
|
|
NULL, /* Reserved3 */
|
|
NULL, /* Reserved4 */
|
|
ExportSecurityContext,
|
|
ImportSecurityContextA,
|
|
AddCredentialsA,
|
|
NULL, /* Reserved8 */
|
|
QuerySecurityContextToken,
|
|
EncryptMessage,
|
|
DecryptMessage,
|
|
SetContextAttributesA
|
|
};
|
|
|
|
static SecurityFunctionTableW securityFunctionTableW = {
|
|
SECURITY_SUPPORT_PROVIDER_INTERFACE_VERSION_2,
|
|
EnumerateSecurityPackagesW,
|
|
QueryCredentialsAttributesW,
|
|
AcquireCredentialsHandleW,
|
|
FreeCredentialsHandle,
|
|
NULL, /* Reserved2 */
|
|
InitializeSecurityContextW,
|
|
AcceptSecurityContext,
|
|
CompleteAuthToken,
|
|
DeleteSecurityContext,
|
|
ApplyControlToken,
|
|
QueryContextAttributesW,
|
|
ImpersonateSecurityContext,
|
|
RevertSecurityContext,
|
|
MakeSignature,
|
|
VerifySignature,
|
|
FreeContextBuffer,
|
|
QuerySecurityPackageInfoW,
|
|
NULL, /* Reserved3 */
|
|
NULL, /* Reserved4 */
|
|
ExportSecurityContext,
|
|
ImportSecurityContextW,
|
|
AddCredentialsW,
|
|
NULL, /* Reserved8 */
|
|
QuerySecurityContextToken,
|
|
EncryptMessage,
|
|
DecryptMessage,
|
|
SetContextAttributesW
|
|
};
|
|
|
|
/***********************************************************************
|
|
* InitSecurityInterfaceA (SECUR32.@)
|
|
*/
|
|
PSecurityFunctionTableA WINAPI InitSecurityInterfaceA(void)
|
|
{
|
|
return &securityFunctionTableA;
|
|
}
|
|
|
|
/***********************************************************************
|
|
* InitSecurityInterfaceW (SECUR32.@)
|
|
*/
|
|
PSecurityFunctionTableW WINAPI InitSecurityInterfaceW(void)
|
|
{
|
|
return &securityFunctionTableW;
|
|
}
|
|
|
|
/* Allocates or resizes table to have space for at least howBig packages.
|
|
* Uses Heap functions, because needs to be able to reallocate.
|
|
*/
|
|
static SecurePackageTable *_resizePackageTable(SecurePackageTable *table,
|
|
DWORD howBig)
|
|
{
|
|
SecurePackageTable *ret;
|
|
|
|
EnterCriticalSection(&cs);
|
|
if (table)
|
|
{
|
|
if (table->numAllocated < howBig)
|
|
{
|
|
ret = HeapReAlloc(GetProcessHeap(), 0, table,
|
|
sizeof(SecurePackageTable) + (howBig - 1) * sizeof(SecurePackage));
|
|
if (ret)
|
|
{
|
|
ret->numAllocated = howBig;
|
|
table = ret;
|
|
}
|
|
}
|
|
else
|
|
ret = table;
|
|
}
|
|
else
|
|
{
|
|
DWORD numAllocated = (howBig > 1 ? howBig : 1);
|
|
|
|
ret = HeapAlloc(GetProcessHeap(), 0,
|
|
sizeof(SecurePackageTable) +
|
|
(numAllocated - 1) * sizeof(SecurePackage));
|
|
if (ret)
|
|
{
|
|
ret->numAllocated = numAllocated;
|
|
ret->numPackages = 0;
|
|
}
|
|
}
|
|
LeaveCriticalSection(&cs);
|
|
return ret;
|
|
}
|
|
|
|
/* Allocates or resizes table to have space for at least howBig providers.
|
|
* Uses Heap functions, because needs to be able to reallocate.
|
|
*/
|
|
static SecureProviderTable *_resizeProviderTable(SecureProviderTable *table,
|
|
DWORD howBig)
|
|
{
|
|
SecureProviderTable *ret;
|
|
|
|
EnterCriticalSection(&cs);
|
|
if (table)
|
|
{
|
|
if (table->numAllocated < howBig)
|
|
{
|
|
ret = HeapReAlloc(GetProcessHeap(), 0, table,
|
|
sizeof(SecureProviderTable) +
|
|
(howBig - 1) * sizeof(SecureProvider));
|
|
if (ret)
|
|
{
|
|
ret->numAllocated = howBig;
|
|
table = ret;
|
|
}
|
|
}
|
|
else
|
|
ret = table;
|
|
}
|
|
else
|
|
{
|
|
DWORD numAllocated = (howBig > 1 ? howBig : 1);
|
|
|
|
ret = HeapAlloc(GetProcessHeap(), 0,
|
|
sizeof(SecureProviderTable) +
|
|
(numAllocated - 1) * sizeof(SecureProvider));
|
|
if (ret)
|
|
{
|
|
ret->numAllocated = numAllocated;
|
|
ret->numProviders = 0;
|
|
}
|
|
}
|
|
LeaveCriticalSection(&cs);
|
|
return ret;
|
|
}
|
|
|
|
PWSTR SECUR32_strdupW(PCWSTR str)
|
|
{
|
|
PWSTR ret;
|
|
|
|
if (str)
|
|
{
|
|
ret = (PWSTR)SECUR32_ALLOC((lstrlenW(str) + 1) * sizeof(WCHAR));
|
|
if (ret)
|
|
lstrcpyW(ret, str);
|
|
}
|
|
else
|
|
ret = NULL;
|
|
return ret;
|
|
}
|
|
|
|
PWSTR SECUR32_AllocWideFromMultiByte(PCSTR str)
|
|
{
|
|
PWSTR ret;
|
|
|
|
if (str)
|
|
{
|
|
int charsNeeded = MultiByteToWideChar(CP_ACP, 0, str, -1, NULL, 0);
|
|
|
|
if (charsNeeded)
|
|
{
|
|
ret = (PWSTR)SECUR32_ALLOC(charsNeeded * sizeof(WCHAR));
|
|
if (ret)
|
|
MultiByteToWideChar(CP_ACP, 0, str, -1, ret, charsNeeded);
|
|
}
|
|
else
|
|
ret = NULL;
|
|
}
|
|
else
|
|
ret = NULL;
|
|
return ret;
|
|
}
|
|
|
|
PSTR SECUR32_AllocMultiByteFromWide(PCWSTR str)
|
|
{
|
|
PSTR ret;
|
|
|
|
if (str)
|
|
{
|
|
int charsNeeded = WideCharToMultiByte(CP_ACP, 0, str, -1, NULL, 0,
|
|
NULL, NULL);
|
|
|
|
if (charsNeeded)
|
|
{
|
|
ret = (PSTR)SECUR32_ALLOC(charsNeeded);
|
|
if (ret)
|
|
WideCharToMultiByte(CP_ACP, 0, str, -1, ret, charsNeeded,
|
|
NULL, NULL);
|
|
}
|
|
else
|
|
ret = NULL;
|
|
}
|
|
else
|
|
ret = NULL;
|
|
return ret;
|
|
}
|
|
|
|
static void _makeFnTableA(PSecurityFunctionTableA fnTableA,
|
|
const PSecurityFunctionTableA inFnTableA,
|
|
const PSecurityFunctionTableW inFnTableW)
|
|
{
|
|
if (fnTableA)
|
|
{
|
|
if (inFnTableA)
|
|
{
|
|
/* The size of the version 1 table is based on platform sdk's
|
|
* sspi.h, though the sample ssp also provided with platform sdk
|
|
* implies only functions through QuerySecurityPackageInfoA are
|
|
* implemented (yikes)
|
|
*/
|
|
size_t tableSize = inFnTableA->dwVersion == 1 ?
|
|
(LPBYTE)&inFnTableA->SetContextAttributesA -
|
|
(LPBYTE)inFnTableA : sizeof(SecurityFunctionTableA);
|
|
|
|
memcpy(fnTableA, inFnTableA, tableSize);
|
|
/* override this, since we can do it internally anyway */
|
|
fnTableA->QuerySecurityPackageInfoA =
|
|
QuerySecurityPackageInfoA;
|
|
}
|
|
else if (inFnTableW)
|
|
{
|
|
/* functions with thunks */
|
|
if (inFnTableW->AcquireCredentialsHandleW)
|
|
fnTableA->AcquireCredentialsHandleA =
|
|
thunk_AcquireCredentialsHandleA;
|
|
if (inFnTableW->InitializeSecurityContextW)
|
|
fnTableA->InitializeSecurityContextA =
|
|
thunk_InitializeSecurityContextA;
|
|
if (inFnTableW->ImportSecurityContextW)
|
|
fnTableA->ImportSecurityContextA =
|
|
thunk_ImportSecurityContextA;
|
|
if (inFnTableW->AddCredentialsW)
|
|
fnTableA->AddCredentialsA =
|
|
thunk_AddCredentialsA;
|
|
if (inFnTableW->QueryCredentialsAttributesW)
|
|
fnTableA->QueryCredentialsAttributesA =
|
|
thunk_QueryCredentialsAttributesA;
|
|
if (inFnTableW->QueryContextAttributesW)
|
|
fnTableA->QueryContextAttributesA =
|
|
thunk_QueryContextAttributesA;
|
|
if (inFnTableW->SetContextAttributesW)
|
|
fnTableA->SetContextAttributesA =
|
|
thunk_SetContextAttributesA;
|
|
/* this can't be thunked, there's no extra param to know which
|
|
* package to forward to */
|
|
fnTableA->EnumerateSecurityPackagesA = NULL;
|
|
/* functions with no thunks needed */
|
|
fnTableA->AcceptSecurityContext = inFnTableW->AcceptSecurityContext;
|
|
fnTableA->CompleteAuthToken = inFnTableW->CompleteAuthToken;
|
|
fnTableA->DeleteSecurityContext = inFnTableW->DeleteSecurityContext;
|
|
fnTableA->ImpersonateSecurityContext =
|
|
inFnTableW->ImpersonateSecurityContext;
|
|
fnTableA->RevertSecurityContext = inFnTableW->RevertSecurityContext;
|
|
fnTableA->MakeSignature = inFnTableW->MakeSignature;
|
|
fnTableA->VerifySignature = inFnTableW->VerifySignature;
|
|
fnTableA->FreeContextBuffer = inFnTableW->FreeContextBuffer;
|
|
fnTableA->QuerySecurityPackageInfoA =
|
|
QuerySecurityPackageInfoA;
|
|
fnTableA->ExportSecurityContext =
|
|
inFnTableW->ExportSecurityContext;
|
|
fnTableA->QuerySecurityContextToken =
|
|
inFnTableW->QuerySecurityContextToken;
|
|
fnTableA->EncryptMessage = inFnTableW->EncryptMessage;
|
|
fnTableA->DecryptMessage = inFnTableW->DecryptMessage;
|
|
}
|
|
}
|
|
}
|
|
|
|
static void _makeFnTableW(PSecurityFunctionTableW fnTableW,
|
|
const PSecurityFunctionTableA inFnTableA,
|
|
const PSecurityFunctionTableW inFnTableW)
|
|
{
|
|
if (fnTableW)
|
|
{
|
|
if (inFnTableW)
|
|
{
|
|
/* The size of the version 1 table is based on platform sdk's
|
|
* sspi.h, though the sample ssp also provided with platform sdk
|
|
* implies only functions through QuerySecurityPackageInfoA are
|
|
* implemented (yikes)
|
|
*/
|
|
size_t tableSize = inFnTableW->dwVersion == 1 ?
|
|
(LPBYTE)&inFnTableW->SetContextAttributesW -
|
|
(LPBYTE)inFnTableW : sizeof(SecurityFunctionTableW);
|
|
|
|
memcpy(fnTableW, inFnTableW, tableSize);
|
|
/* override this, since we can do it internally anyway */
|
|
fnTableW->QuerySecurityPackageInfoW =
|
|
QuerySecurityPackageInfoW;
|
|
}
|
|
else if (inFnTableA)
|
|
{
|
|
/* functions with thunks */
|
|
if (inFnTableA->AcquireCredentialsHandleA)
|
|
fnTableW->AcquireCredentialsHandleW =
|
|
thunk_AcquireCredentialsHandleW;
|
|
if (inFnTableA->InitializeSecurityContextA)
|
|
fnTableW->InitializeSecurityContextW =
|
|
thunk_InitializeSecurityContextW;
|
|
if (inFnTableA->ImportSecurityContextA)
|
|
fnTableW->ImportSecurityContextW =
|
|
thunk_ImportSecurityContextW;
|
|
if (inFnTableA->AddCredentialsA)
|
|
fnTableW->AddCredentialsW =
|
|
thunk_AddCredentialsW;
|
|
if (inFnTableA->QueryCredentialsAttributesA)
|
|
fnTableW->QueryCredentialsAttributesW =
|
|
thunk_QueryCredentialsAttributesW;
|
|
if (inFnTableA->QueryContextAttributesA)
|
|
fnTableW->QueryContextAttributesW =
|
|
thunk_QueryContextAttributesW;
|
|
if (inFnTableA->SetContextAttributesA)
|
|
fnTableW->SetContextAttributesW =
|
|
thunk_SetContextAttributesW;
|
|
/* this can't be thunked, there's no extra param to know which
|
|
* package to forward to */
|
|
fnTableW->EnumerateSecurityPackagesW = NULL;
|
|
/* functions with no thunks needed */
|
|
fnTableW->AcceptSecurityContext = inFnTableA->AcceptSecurityContext;
|
|
fnTableW->CompleteAuthToken = inFnTableA->CompleteAuthToken;
|
|
fnTableW->DeleteSecurityContext = inFnTableA->DeleteSecurityContext;
|
|
fnTableW->ImpersonateSecurityContext =
|
|
inFnTableA->ImpersonateSecurityContext;
|
|
fnTableW->RevertSecurityContext = inFnTableA->RevertSecurityContext;
|
|
fnTableW->MakeSignature = inFnTableA->MakeSignature;
|
|
fnTableW->VerifySignature = inFnTableA->VerifySignature;
|
|
fnTableW->FreeContextBuffer = inFnTableA->FreeContextBuffer;
|
|
fnTableW->QuerySecurityPackageInfoW =
|
|
QuerySecurityPackageInfoW;
|
|
fnTableW->ExportSecurityContext =
|
|
inFnTableA->ExportSecurityContext;
|
|
fnTableW->QuerySecurityContextToken =
|
|
inFnTableA->QuerySecurityContextToken;
|
|
fnTableW->EncryptMessage = inFnTableA->EncryptMessage;
|
|
fnTableW->DecryptMessage = inFnTableA->DecryptMessage;
|
|
}
|
|
}
|
|
}
|
|
|
|
static void _copyPackageInfo(PSecPkgInfoW info, const SecPkgInfoA *inInfoA,
|
|
const SecPkgInfoW *inInfoW)
|
|
{
|
|
if (info && (inInfoA || inInfoW))
|
|
{
|
|
/* odd, I know, but up until Name and Comment the structures are
|
|
* identical
|
|
*/
|
|
memcpy(info, inInfoW ? inInfoW : (PSecPkgInfoW)inInfoA, sizeof(*info));
|
|
if (inInfoW)
|
|
{
|
|
info->Name = SECUR32_strdupW(inInfoW->Name);
|
|
info->Comment = SECUR32_strdupW(inInfoW->Comment);
|
|
}
|
|
else
|
|
{
|
|
info->Name = SECUR32_AllocWideFromMultiByte(inInfoA->Name);
|
|
info->Comment = SECUR32_AllocWideFromMultiByte(inInfoA->Comment);
|
|
}
|
|
}
|
|
}
|
|
|
|
SecureProvider *SECUR32_addProvider(PSecurityFunctionTableA fnTableA,
|
|
PSecurityFunctionTableW fnTableW, PWSTR moduleName)
|
|
{
|
|
SecureProvider *ret;
|
|
|
|
EnterCriticalSection(&cs);
|
|
providerTable = _resizeProviderTable(providerTable,
|
|
providerTable ? providerTable->numProviders + 1 : 1);
|
|
if (providerTable)
|
|
{
|
|
ret = &providerTable->table[providerTable->numProviders++];
|
|
ret->lib = NULL;
|
|
if (fnTableA || fnTableW)
|
|
{
|
|
_makeFnTableA(&ret->fnTableA, fnTableA, fnTableW);
|
|
_makeFnTableW(&ret->fnTableW, fnTableA, fnTableW);
|
|
ret->loaded = TRUE;
|
|
}
|
|
else
|
|
{
|
|
ret->moduleName = SECUR32_strdupW(moduleName);
|
|
ret->loaded = FALSE;
|
|
}
|
|
}
|
|
else
|
|
ret = NULL;
|
|
LeaveCriticalSection(&cs);
|
|
return ret;
|
|
}
|
|
|
|
void SECUR32_addPackages(SecureProvider *provider, ULONG toAdd,
|
|
const SecPkgInfoA *infoA, const SecPkgInfoW *infoW)
|
|
{
|
|
assert(provider);
|
|
assert(infoA || infoW);
|
|
|
|
EnterCriticalSection(&cs);
|
|
packageTable = _resizePackageTable(packageTable,
|
|
packageTable ? packageTable->numPackages + toAdd : toAdd);
|
|
if (packageTable)
|
|
{
|
|
ULONG i;
|
|
|
|
for (i = 0; i < toAdd; i++)
|
|
{
|
|
SecurePackage *package =
|
|
&packageTable->table[packageTable->numPackages + i];
|
|
|
|
package->provider = provider;
|
|
_copyPackageInfo(&package->infoW,
|
|
infoA ? &infoA[i] : NULL,
|
|
infoW ? &infoW[i] : NULL);
|
|
}
|
|
packageTable->numPackages += toAdd;
|
|
}
|
|
LeaveCriticalSection(&cs);
|
|
}
|
|
|
|
static void _tryLoadProvider(PWSTR moduleName)
|
|
{
|
|
HMODULE lib = LoadLibraryW(moduleName);
|
|
|
|
if (lib)
|
|
{
|
|
INIT_SECURITY_INTERFACE_W pInitSecurityInterfaceW =
|
|
(INIT_SECURITY_INTERFACE_W)GetProcAddress(lib,
|
|
SECURITY_ENTRYPOINT_ANSIW);
|
|
INIT_SECURITY_INTERFACE_A pInitSecurityInterfaceA =
|
|
(INIT_SECURITY_INTERFACE_A)GetProcAddress(lib,
|
|
SECURITY_ENTRYPOINT_ANSIA);
|
|
|
|
TRACE("loaded %s, InitSecurityInterfaceA is %p, InitSecurityInterfaceW is %p\n",
|
|
debugstr_w(moduleName), pInitSecurityInterfaceA,
|
|
pInitSecurityInterfaceW);
|
|
if (pInitSecurityInterfaceW || pInitSecurityInterfaceA)
|
|
{
|
|
PSecurityFunctionTableA fnTableA = NULL;
|
|
PSecurityFunctionTableW fnTableW = NULL;
|
|
ULONG toAdd = 0;
|
|
PSecPkgInfoA infoA = NULL;
|
|
PSecPkgInfoW infoW = NULL;
|
|
SECURITY_STATUS ret = SEC_E_OK;
|
|
|
|
if (pInitSecurityInterfaceA)
|
|
fnTableA = pInitSecurityInterfaceA();
|
|
if (pInitSecurityInterfaceW)
|
|
fnTableW = pInitSecurityInterfaceW();
|
|
if (fnTableW && fnTableW->EnumerateSecurityPackagesW)
|
|
ret = fnTableW->EnumerateSecurityPackagesW(&toAdd, &infoW);
|
|
else if (fnTableA && fnTableA->EnumerateSecurityPackagesA)
|
|
ret = fnTableA->EnumerateSecurityPackagesA(&toAdd, &infoA);
|
|
if (ret == SEC_E_OK && toAdd > 0 && (infoW || infoA))
|
|
{
|
|
SecureProvider *provider = SECUR32_addProvider(NULL, NULL,
|
|
moduleName);
|
|
|
|
if (provider)
|
|
SECUR32_addPackages(provider, toAdd, infoA, infoW);
|
|
if (infoW)
|
|
fnTableW->FreeContextBuffer(infoW);
|
|
else
|
|
fnTableA->FreeContextBuffer(infoA);
|
|
}
|
|
}
|
|
FreeLibrary(lib);
|
|
}
|
|
else
|
|
WARN("failed to load %s\n", debugstr_w(moduleName));
|
|
}
|
|
|
|
static const WCHAR securityProvidersKeyW[] = {
|
|
'S','Y','S','T','E','M','\\','C','u','r','r','e','n','t','C','o','n','t','r',
|
|
'o','l','S','e','t','\\','C','o','n','t','r','o','l','\\','S','e','c','u','r',
|
|
'i','t','y','P','r','o','v','i','d','e','r','s','\0'
|
|
};
|
|
static const WCHAR securityProvidersW[] = {
|
|
'S','e','c','u','r','i','t','y','P','r','o','v','i','d','e','r','s',0
|
|
};
|
|
|
|
static void SECUR32_initializeProviders(void)
|
|
{
|
|
HKEY key;
|
|
long apiRet;
|
|
|
|
TRACE("\n");
|
|
InitializeCriticalSection(&cs);
|
|
/* First load built-in providers */
|
|
SECUR32_initSchannelSP();
|
|
/* Now load providers from registry */
|
|
apiRet = RegOpenKeyExW(HKEY_LOCAL_MACHINE, securityProvidersKeyW, 0,
|
|
KEY_READ, &key);
|
|
if (apiRet == ERROR_SUCCESS)
|
|
{
|
|
WCHAR securityPkgNames[MAX_PATH]; /* arbitrary len */
|
|
DWORD size = sizeof(securityPkgNames) / sizeof(WCHAR), type;
|
|
|
|
apiRet = RegQueryValueExW(key, securityProvidersW, NULL, &type,
|
|
(PBYTE)securityPkgNames, &size);
|
|
if (apiRet == ERROR_SUCCESS && type == REG_SZ)
|
|
{
|
|
WCHAR *ptr;
|
|
|
|
for (ptr = securityPkgNames;
|
|
ptr < (PWSTR)((PBYTE)securityPkgNames + size); )
|
|
{
|
|
WCHAR *comma;
|
|
|
|
for (comma = ptr; *comma && *comma != ','; comma++)
|
|
;
|
|
if (*comma == ',')
|
|
*comma = '\0';
|
|
for (; *ptr && isspace(*ptr) && ptr < securityPkgNames + size;
|
|
ptr++)
|
|
;
|
|
if (*ptr)
|
|
_tryLoadProvider(ptr);
|
|
ptr += lstrlenW(ptr) + 1;
|
|
}
|
|
}
|
|
RegCloseKey(key);
|
|
}
|
|
}
|
|
|
|
SecurePackage *SECUR32_findPackageW(PWSTR packageName)
|
|
{
|
|
SecurePackage *ret = NULL;
|
|
|
|
if (packageTable && packageName)
|
|
{
|
|
DWORD i;
|
|
|
|
for (i = 0, ret = NULL; !ret && i < packageTable->numPackages; i++)
|
|
if (!lstrcmpiW(packageTable->table[i].infoW.Name, packageName))
|
|
ret = &packageTable->table[i];
|
|
if (ret && ret->provider && !ret->provider->loaded)
|
|
{
|
|
ret->provider->lib = LoadLibraryW(ret->provider->moduleName);
|
|
if (ret->provider->lib)
|
|
{
|
|
INIT_SECURITY_INTERFACE_W pInitSecurityInterfaceW =
|
|
(INIT_SECURITY_INTERFACE_W)GetProcAddress(ret->provider->lib,
|
|
SECURITY_ENTRYPOINT_ANSIW);
|
|
INIT_SECURITY_INTERFACE_A pInitSecurityInterfaceA =
|
|
(INIT_SECURITY_INTERFACE_A)GetProcAddress(ret->provider->lib,
|
|
SECURITY_ENTRYPOINT_ANSIA);
|
|
PSecurityFunctionTableA fnTableA = NULL;
|
|
PSecurityFunctionTableW fnTableW = NULL;
|
|
|
|
if (pInitSecurityInterfaceA)
|
|
fnTableA = pInitSecurityInterfaceA();
|
|
if (pInitSecurityInterfaceW)
|
|
fnTableW = pInitSecurityInterfaceW();
|
|
_makeFnTableA(&ret->provider->fnTableA, fnTableA, fnTableW);
|
|
_makeFnTableW(&ret->provider->fnTableW, fnTableA, fnTableW);
|
|
ret->provider->loaded = TRUE;
|
|
}
|
|
else
|
|
ret = NULL;
|
|
}
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
SecurePackage *SECUR32_findPackageA(PSTR packageName)
|
|
{
|
|
SecurePackage *ret;
|
|
|
|
if (packageTable && packageName)
|
|
{
|
|
UNICODE_STRING package;
|
|
|
|
RtlCreateUnicodeStringFromAsciiz(&package, packageName);
|
|
ret = SECUR32_findPackageW(package.Buffer);
|
|
RtlFreeUnicodeString(&package);
|
|
}
|
|
else
|
|
ret = NULL;
|
|
return ret;
|
|
}
|
|
|
|
static void SECUR32_freeProviders(void)
|
|
{
|
|
DWORD i;
|
|
|
|
TRACE("\n");
|
|
EnterCriticalSection(&cs);
|
|
if (packageTable)
|
|
{
|
|
for (i = 0; i < packageTable->numPackages; i++)
|
|
{
|
|
SECUR32_FREE(packageTable->table[i].infoW.Name);
|
|
SECUR32_FREE(packageTable->table[i].infoW.Comment);
|
|
}
|
|
HeapFree(GetProcessHeap(), 0, packageTable);
|
|
packageTable = NULL;
|
|
}
|
|
if (providerTable)
|
|
{
|
|
for (i = 0; i < providerTable->numProviders; i++)
|
|
{
|
|
if (providerTable->table[i].moduleName)
|
|
SECUR32_FREE(providerTable->table[i].moduleName);
|
|
if (providerTable->table[i].lib)
|
|
FreeLibrary(providerTable->table[i].lib);
|
|
}
|
|
HeapFree(GetProcessHeap(), 0, providerTable);
|
|
providerTable = NULL;
|
|
}
|
|
LeaveCriticalSection(&cs);
|
|
DeleteCriticalSection(&cs);
|
|
}
|
|
|
|
/***********************************************************************
|
|
* FreeContextBuffer (SECUR32.@)
|
|
*
|
|
* Doh--if pv was allocated by a crypto package, this may not be correct.
|
|
* The sample ssp seems to use LocalAlloc/LocalFee, but there doesn't seem to
|
|
* be any guarantee, nor is there an alloc function in secur32.
|
|
*/
|
|
SECURITY_STATUS WINAPI FreeContextBuffer(PVOID pv)
|
|
{
|
|
SECURITY_STATUS ret;
|
|
|
|
/* as it turns out, SECURITY_STATUSes are actually HRESULTS */
|
|
if (pv)
|
|
{
|
|
if (SECUR32_FREE(pv) == NULL)
|
|
ret = SEC_E_OK;
|
|
else
|
|
ret = HRESULT_FROM_WIN32(GetLastError());
|
|
}
|
|
else
|
|
ret = HRESULT_FROM_WIN32(ERROR_INVALID_PARAMETER);
|
|
return ret;
|
|
}
|
|
|
|
/***********************************************************************
|
|
* EnumerateSecurityPackagesW (SECUR32.@)
|
|
*/
|
|
SECURITY_STATUS WINAPI EnumerateSecurityPackagesW(PULONG pcPackages,
|
|
PSecPkgInfoW *ppPackageInfo)
|
|
{
|
|
SECURITY_STATUS ret = SEC_E_OK;
|
|
|
|
/* windows just crashes if pcPackages or ppPackageInfo is NULL, so will I */
|
|
*pcPackages = 0;
|
|
EnterCriticalSection(&cs);
|
|
if (packageTable)
|
|
{
|
|
ULONG i;
|
|
size_t bytesNeeded;
|
|
|
|
bytesNeeded = packageTable->numPackages * sizeof(SecPkgInfoW);
|
|
for (i = 0; i < packageTable->numPackages; i++)
|
|
{
|
|
if (packageTable->table[i].infoW.Name)
|
|
bytesNeeded +=
|
|
(lstrlenW(packageTable->table[i].infoW.Name) + 1) *
|
|
sizeof(WCHAR);
|
|
if (packageTable->table[i].infoW.Comment)
|
|
bytesNeeded +=
|
|
(lstrlenW(packageTable->table[i].infoW.Comment) + 1) *
|
|
sizeof(WCHAR);
|
|
}
|
|
if (bytesNeeded)
|
|
{
|
|
*ppPackageInfo = (PSecPkgInfoW)SECUR32_ALLOC(bytesNeeded);
|
|
if (*ppPackageInfo)
|
|
{
|
|
PWSTR nextString;
|
|
|
|
*pcPackages = packageTable->numPackages;
|
|
nextString = (PWSTR)((PBYTE)*ppPackageInfo +
|
|
packageTable->numPackages * sizeof(SecPkgInfoW));
|
|
for (i = 0; i < packageTable->numPackages; i++)
|
|
{
|
|
PSecPkgInfoW pkgInfo = *ppPackageInfo + i;
|
|
|
|
memcpy(pkgInfo, &packageTable->table[i].infoW,
|
|
sizeof(SecPkgInfoW));
|
|
if (packageTable->table[i].infoW.Name)
|
|
{
|
|
pkgInfo->Name = nextString;
|
|
lstrcpyW(nextString, packageTable->table[i].infoW.Name);
|
|
nextString += lstrlenW(nextString) + 1;
|
|
}
|
|
else
|
|
pkgInfo->Name = NULL;
|
|
if (packageTable->table[i].infoW.Comment)
|
|
{
|
|
pkgInfo->Comment = nextString;
|
|
lstrcpyW(nextString,
|
|
packageTable->table[i].infoW.Comment);
|
|
nextString += lstrlenW(nextString) + 1;
|
|
}
|
|
else
|
|
pkgInfo->Comment = NULL;
|
|
}
|
|
}
|
|
else
|
|
ret = SEC_E_INSUFFICIENT_MEMORY;
|
|
}
|
|
}
|
|
LeaveCriticalSection(&cs);
|
|
return ret;
|
|
}
|
|
|
|
/* Converts info (which is assumed to be an array of cPackages SecPkgInfoW
|
|
* structures) into an array of SecPkgInfoA structures, which it returns.
|
|
*/
|
|
static PSecPkgInfoA thunk_PSecPkgInfoWToA(ULONG cPackages,
|
|
const PSecPkgInfoW info)
|
|
{
|
|
PSecPkgInfoA ret;
|
|
|
|
if (info)
|
|
{
|
|
size_t bytesNeeded = cPackages * sizeof(SecPkgInfoA);
|
|
ULONG i;
|
|
|
|
for (i = 0; i < cPackages; i++)
|
|
{
|
|
if (info[i].Name)
|
|
bytesNeeded += WideCharToMultiByte(CP_ACP, 0, info[i].Name,
|
|
-1, NULL, 0, NULL, NULL);
|
|
if (info[i].Comment)
|
|
bytesNeeded += WideCharToMultiByte(CP_ACP, 0, info[i].Comment,
|
|
-1, NULL, 0, NULL, NULL);
|
|
}
|
|
ret = (PSecPkgInfoA)SECUR32_ALLOC(bytesNeeded);
|
|
if (ret)
|
|
{
|
|
PSTR nextString;
|
|
|
|
nextString = (PSTR)((PBYTE)ret + cPackages * sizeof(SecPkgInfoA));
|
|
for (i = 0; i < cPackages; i++)
|
|
{
|
|
PSecPkgInfoA pkgInfo = ret + i;
|
|
int bytes;
|
|
|
|
memcpy(pkgInfo, &info[i], sizeof(SecPkgInfoA));
|
|
if (info[i].Name)
|
|
{
|
|
pkgInfo->Name = nextString;
|
|
/* just repeat back to WideCharToMultiByte how many bytes
|
|
* it requires, since we asked it earlier
|
|
*/
|
|
bytes = WideCharToMultiByte(CP_ACP, 0, info[i].Name, -1,
|
|
NULL, 0, NULL, NULL);
|
|
WideCharToMultiByte(CP_ACP, 0, info[i].Name, -1,
|
|
pkgInfo->Name, bytes, NULL, NULL);
|
|
nextString += lstrlenA(nextString) + 1;
|
|
}
|
|
else
|
|
pkgInfo->Name = NULL;
|
|
if (info[i].Comment)
|
|
{
|
|
pkgInfo->Comment = nextString;
|
|
/* just repeat back to WideCharToMultiByte how many bytes
|
|
* it requires, since we asked it earlier
|
|
*/
|
|
bytes = WideCharToMultiByte(CP_ACP, 0, info[i].Comment, -1,
|
|
NULL, 0, NULL, NULL);
|
|
WideCharToMultiByte(CP_ACP, 0, info[i].Comment, -1,
|
|
pkgInfo->Comment, bytes, NULL, NULL);
|
|
nextString += lstrlenA(nextString) + 1;
|
|
}
|
|
else
|
|
pkgInfo->Comment = NULL;
|
|
}
|
|
}
|
|
}
|
|
else
|
|
ret = NULL;
|
|
return ret;
|
|
}
|
|
|
|
/***********************************************************************
|
|
* EnumerateSecurityPackagesA (SECUR32.@)
|
|
*/
|
|
SECURITY_STATUS WINAPI EnumerateSecurityPackagesA(PULONG pcPackages,
|
|
PSecPkgInfoA *ppPackageInfo)
|
|
{
|
|
SECURITY_STATUS ret;
|
|
PSecPkgInfoW info;
|
|
|
|
ret = EnumerateSecurityPackagesW(pcPackages, &info);
|
|
if (ret == SEC_E_OK && *pcPackages && info)
|
|
{
|
|
*ppPackageInfo = thunk_PSecPkgInfoWToA(*pcPackages, info);
|
|
if (*pcPackages && !*ppPackageInfo)
|
|
{
|
|
*pcPackages = 0;
|
|
ret = SEC_E_INSUFFICIENT_MEMORY;
|
|
}
|
|
FreeContextBuffer(info);
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
/***********************************************************************
|
|
* GetComputerObjectNameA (SECUR32.@)
|
|
*/
|
|
BOOLEAN WINAPI GetComputerObjectNameA(
|
|
EXTENDED_NAME_FORMAT NameFormat, LPSTR lpNameBuffer, PULONG nSize)
|
|
{
|
|
FIXME("%d %p %p\n", NameFormat, lpNameBuffer, nSize);
|
|
return FALSE;
|
|
}
|
|
|
|
/***********************************************************************
|
|
* GetComputerObjectNameW (SECUR32.@)
|
|
*/
|
|
BOOLEAN WINAPI GetComputerObjectNameW(
|
|
EXTENDED_NAME_FORMAT NameFormat, LPWSTR lpNameBuffer, PULONG nSize)
|
|
{
|
|
FIXME("%d %p %p\n", NameFormat, lpNameBuffer, nSize);
|
|
return FALSE;
|
|
}
|
|
|
|
BOOLEAN WINAPI GetUserNameExA(
|
|
EXTENDED_NAME_FORMAT NameFormat, LPSTR lpNameBuffer, PULONG nSize)
|
|
{
|
|
FIXME("%d %p %p\n", NameFormat, lpNameBuffer, nSize);
|
|
return FALSE;
|
|
}
|
|
|
|
BOOLEAN WINAPI GetUserNameExW(
|
|
EXTENDED_NAME_FORMAT NameFormat, LPWSTR lpNameBuffer, PULONG nSize)
|
|
{
|
|
FIXME("%d %p %p\n", NameFormat, lpNameBuffer, nSize);
|
|
return FALSE;
|
|
}
|
|
|
|
NTSTATUS WINAPI LsaCallAuthenticationPackage(
|
|
HANDLE LsaHandle, ULONG AuthenticationPackage, PVOID ProtocolSubmitBuffer,
|
|
ULONG SubmitBufferLength, PVOID* ProtocolReturnBuffer, PULONG ReturnBufferLength,
|
|
NTSTATUS *ProtocolStatus)
|
|
{
|
|
FIXME("%p %ld %p %ld %p %p %p\n", LsaHandle, AuthenticationPackage,
|
|
ProtocolSubmitBuffer, SubmitBufferLength, ProtocolReturnBuffer,
|
|
ReturnBufferLength, ProtocolStatus);
|
|
return 0;
|
|
}
|
|
|
|
NTSTATUS WINAPI LsaConnectUntrusted(PHANDLE LsaHandle)
|
|
{
|
|
FIXME("%p\n", LsaHandle);
|
|
return 0;
|
|
}
|
|
|
|
NTSTATUS WINAPI LsaDeregisterLogonProcess(HANDLE LsaHandle)
|
|
{
|
|
FIXME("%p\n", LsaHandle);
|
|
return 0;
|
|
}
|
|
|
|
BOOLEAN WINAPI TranslateNameA(
|
|
LPCSTR lpAccountName, EXTENDED_NAME_FORMAT AccountNameFormat,
|
|
EXTENDED_NAME_FORMAT DesiredNameFormat, LPSTR lpTranslatedName,
|
|
PULONG nSize)
|
|
{
|
|
FIXME("%p %d %d %p %p\n", lpAccountName, AccountNameFormat,
|
|
DesiredNameFormat, lpTranslatedName, nSize);
|
|
return FALSE;
|
|
}
|
|
|
|
BOOLEAN WINAPI TranslateNameW(
|
|
LPCWSTR lpAccountName, EXTENDED_NAME_FORMAT AccountNameFormat,
|
|
EXTENDED_NAME_FORMAT DesiredNameFormat, LPWSTR lpTranslatedName,
|
|
PULONG nSize)
|
|
{
|
|
FIXME("%p %d %d %p %p\n", lpAccountName, AccountNameFormat,
|
|
DesiredNameFormat, lpTranslatedName, nSize);
|
|
return FALSE;
|
|
}
|
|
|
|
/***********************************************************************
|
|
* DllMain (SECUR32.0)
|
|
*/
|
|
BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
|
|
{
|
|
if (fdwReason == DLL_PROCESS_ATTACH)
|
|
{
|
|
DisableThreadLibraryCalls(hinstDLL);
|
|
SECUR32_initializeProviders();
|
|
}
|
|
else if (fdwReason == DLL_PROCESS_DETACH)
|
|
{
|
|
SECUR32_freeProviders();
|
|
}
|
|
|
|
return TRUE;
|
|
}
|