projects / linux-block.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
[CIFS] Update cifs version number
[linux-block.git] / fs / cifs / connect.c
CommitLineData
1da177e4
LT		 1/*
2 * fs/cifs/connect.c
3 *
d185cda7 4 * Copyright (C) International Business Machines Corp., 2002,2009
1da177e4
LT		 5 * Author(s): Steve French (sfrench@us.ibm.com)
6 *
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
fb8c4b14 19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
1da177e4
LT		 20 */
21#include <linux/fs.h>
22#include <linux/net.h>
23#include <linux/string.h>
24#include <linux/list.h>
25#include <linux/wait.h>
5a0e3ad6 26#include <linux/slab.h>
1da177e4
LT		 27#include <linux/pagemap.h>
28#include <linux/ctype.h>
29#include <linux/utsname.h>
30#include <linux/mempool.h>
b8643e1b 31#include <linux/delay.h>
f191401f 32#include <linux/completion.h>
aaf737ad 33#include <linux/kthread.h>
0ae0efad 34#include <linux/pagevec.h>
7dfb7103 35#include <linux/freezer.h>
5c2503a8 36#include <linux/namei.h>
1da177e4
LT		 37#include <asm/uaccess.h>
38#include <asm/processor.h>
50b64e3b 39#include <linux/inet.h>
0e2bedaa 40#include <net/ipv6.h>
1da177e4
LT		 41#include "cifspdu.h"
42#include "cifsglob.h"
43#include "cifsproto.h"
44#include "cifs_unicode.h"
45#include "cifs_debug.h"
46#include "cifs_fs_sb.h"
47#include "ntlmssp.h"
48#include "nterr.h"
49#include "rfc1002pdu.h"
488f1d2d 50#include "fscache.h"
1da177e4
LT		 51
52#define CIFS_PORT 445
53#define RFC1001_PORT 139
54
1da177e4
LT		 55extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
56 unsigned char *p24);
57
58extern mempool_t *cifs_req_poolp;
59
60struct smb_vol {
61 char *username;
62 char *password;
63 char *domainname;
64 char *UNC;
65 char *UNCip;
1da177e4 66 char *iocharset; /* local code page for mapping to and from Unicode */
1397f2ee
JL		 67 char source_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* clnt nb name */
68 char target_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* srvr nb name */
3e4b3e1f 69 uid_t cred_uid;
1da177e4
LT		 70 uid_t linux_uid;
71 gid_t linux_gid;
72 mode_t file_mode;
73 mode_t dir_mode;
189acaae 74 unsigned secFlg;
4b18f2a9
SF		 75 bool retry:1;
76 bool intr:1;
77 bool setuids:1;
78 bool override_uid:1;
79 bool override_gid:1;
d0a9c078 80 bool dynperm:1;
4b18f2a9
SF		 81 bool noperm:1;
82 bool no_psx_acl:1; /* set if posix acl support should be disabled */
83 bool cifs_acl:1;
84 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
85 bool server_ino:1; /* use inode numbers from server ie UniqueId */
86 bool direct_io:1;
95b1cb90
SF		 87 bool remap:1; /* set to remap seven reserved chars in filenames */
88 bool posix_paths:1; /* unset to not ask for posix pathnames. */
4b18f2a9
SF		 89 bool no_linux_ext:1;
90 bool sfu_emul:1;
95b1cb90
SF		 91 bool nullauth:1; /* attempt to authenticate with null user */
92 bool nocase:1; /* request case insensitive filenames */
93 bool nobrl:1; /* disable sending byte range locks to srv */
13a6e42a 94 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
95b1cb90 95 bool seal:1; /* request transport encryption on share */
84210e91
SF		 96 bool nodfs:1; /* Do not request DFS, even if available */
97 bool local_lease:1; /* check leases only on local system, not remote */
edf1ae40
SF		 98 bool noblocksnd:1;
99 bool noautotune:1;
be652445 100 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
fa1df75d 101 bool fsc:1; /* enable fscache */
736a3320 102 bool mfsymlinks:1; /* use Minshall+French Symlinks */
0eb8a132 103 bool multiuser:1;
1da177e4
LT		 104 unsigned int rsize;
105 unsigned int wsize;
6a5fa236 106 bool sockopt_tcp_nodelay:1;
1da177e4 107 unsigned short int port;
6d20e840 108 unsigned long actimeo; /* attribute cache timeout (jiffies) */
fb8c4b14 109 char *prepath;
3eb9a889 110 struct sockaddr_storage srcaddr; /* allow binding to a local IP */
a5fc4ce0 111 struct nls_table *local_nls;
1da177e4
LT		 112};
113
2de970ff 114/* FIXME: should these be tunable? */
9d002df4 115#define TLINK_ERROR_EXPIRE (1 * HZ)
2de970ff 116#define TLINK_IDLE_EXPIRE (600 * HZ)
9d002df4 117
a9f1b85e
PS		 118static int ip_connect(struct TCP_Server_Info *server);
119static int generic_ip_connect(struct TCP_Server_Info *server);
b647c35f 120static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
2de970ff 121static void cifs_prune_tlinks(struct work_struct *work);
1da177e4 122
d5c5605c
JL		 123/*
124 * cifs tcp session reconnection
125 *
126 * mark tcp session as reconnecting so temporarily locked
127 * mark all smb sessions as reconnecting for tcp session
128 * reconnect tcp session
129 * wake up waiters on reconnection? - (not needed currently)
130 */
2cd646a2 131static int
1da177e4
LT		 132cifs_reconnect(struct TCP_Server_Info *server)
133{
134 int rc = 0;
f1987b44 135 struct list_head *tmp, *tmp2;
1da177e4
LT		 136 struct cifsSesInfo *ses;
137 struct cifsTconInfo *tcon;
fb8c4b14 138 struct mid_q_entry *mid_entry;
50c2f753 139
1da177e4 140 spin_lock(&GlobalMid_Lock);
469ee614 141 if (server->tcpStatus == CifsExiting) {
fb8c4b14 142 /* the demux thread will exit normally
1da177e4
LT		 143 next time through the loop */
144 spin_unlock(&GlobalMid_Lock);
145 return rc;
146 } else
147 server->tcpStatus = CifsNeedReconnect;
148 spin_unlock(&GlobalMid_Lock);
149 server->maxBuf = 0;
150
b6b38f70 151 cFYI(1, "Reconnecting tcp session");
1da177e4
LT		 152
153 /* before reconnecting the tcp session, mark the smb session (uid)
154 and the tid bad so they are not used until reconnected */
3f9bcca7 155 spin_lock(&cifs_tcp_ses_lock);
14fbf50d
JL		 156 list_for_each(tmp, &server->smb_ses_list) {
157 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
158 ses->need_reconnect = true;
159 ses->ipc_tid = 0;
f1987b44
JL		 160 list_for_each(tmp2, &ses->tcon_list) {
161 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
3b795210 162 tcon->need_reconnect = true;
1da177e4 163 }
1da177e4 164 }
3f9bcca7 165 spin_unlock(&cifs_tcp_ses_lock);
1da177e4 166 /* do not want to be sending data on a socket we are freeing */
72ca545b 167 mutex_lock(&server->srv_mutex);
fb8c4b14 168 if (server->ssocket) {
b6b38f70
JP		 169 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
170 server->ssocket->flags);
91cf45f0 171 kernel_sock_shutdown(server->ssocket, SHUT_WR);
b6b38f70 172 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
467a8f8d 173 server->ssocket->state,
b6b38f70 174 server->ssocket->flags);
1da177e4
LT		 175 sock_release(server->ssocket);
176 server->ssocket = NULL;
177 }
5d0d2882
SP		 178 server->sequence_number = 0;
179 server->session_estab = false;
21e73393
SP		 180 kfree(server->session_key.response);
181 server->session_key.response = NULL;
182 server->session_key.len = 0;
1da177e4
LT		 183
184 spin_lock(&GlobalMid_Lock);
185 list_for_each(tmp, &server->pending_mid_q) {
186 mid_entry = list_entry(tmp, struct
187 mid_q_entry,
188 qhead);
ad8b15f0 189 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
09d1db5c
SF		 190 /* Mark other intransit requests as needing
191 retry so we do not immediately mark the
192 session bad again (ie after we reconnect
193 below) as they timeout too */
ad8b15f0 194 mid_entry->midState = MID_RETRY_NEEDED;
1da177e4
LT		 195 }
196 }
197 spin_unlock(&GlobalMid_Lock);
72ca545b 198 mutex_unlock(&server->srv_mutex);
1da177e4 199
469ee614
JL		 200 while ((server->tcpStatus != CifsExiting) &&
201 (server->tcpStatus != CifsGood)) {
6c3d8909 202 try_to_freeze();
a9f1b85e
PS		 203
204 /* we should try only the port we connected to before */
205 rc = generic_ip_connect(server);
fb8c4b14 206 if (rc) {
b6b38f70 207 cFYI(1, "reconnect error %d", rc);
0cb766ae 208 msleep(3000);
1da177e4
LT		 209 } else {
210 atomic_inc(&tcpSesReconnectCount);
211 spin_lock(&GlobalMid_Lock);
469ee614 212 if (server->tcpStatus != CifsExiting)
1da177e4 213 server->tcpStatus = CifsGood;
fb8c4b14 214 spin_unlock(&GlobalMid_Lock);
1da177e4
LT		 215 /* atomic_set(&server->inFlight,0);*/
216 wake_up(&server->response_q);
217 }
218 }
219 return rc;
220}
221
fb8c4b14 222/*
e4eb295d
SF		 223 return codes:
224 0 not a transact2, or all data present
225 >0 transact2 with that much data missing
226 -EINVAL = invalid transact2
227
228 */
fb8c4b14 229static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
e4eb295d 230{
fb8c4b14
SF		 231 struct smb_t2_rsp *pSMBt;
232 int total_data_size;
e4eb295d
SF		 233 int data_in_this_rsp;
234 int remaining;
235
fb8c4b14 236 if (pSMB->Command != SMB_COM_TRANSACTION2)
e4eb295d
SF		 237 return 0;
238
fb8c4b14
SF		 239 /* check for plausible wct, bcc and t2 data and parm sizes */
240 /* check for parm and data offset going beyond end of smb */
241 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
b6b38f70 242 cFYI(1, "invalid transact2 word count");
e4eb295d
SF		 243 return -EINVAL;
244 }
245
246 pSMBt = (struct smb_t2_rsp *)pSMB;
247
248 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
249 data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
250
251 remaining = total_data_size - data_in_this_rsp;
252
fb8c4b14 253 if (remaining == 0)
e4eb295d 254 return 0;
fb8c4b14 255 else if (remaining < 0) {
b6b38f70
JP		 256 cFYI(1, "total data %d smaller than data in frame %d",
257 total_data_size, data_in_this_rsp);
e4eb295d
SF		 258 return -EINVAL;
259 } else {
b6b38f70
JP		 260 cFYI(1, "missing %d bytes from transact2, check next response",
261 remaining);
fb8c4b14 262 if (total_data_size > maxBufSize) {
b6b38f70
JP		 263 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
264 total_data_size, maxBufSize);
fb8c4b14 265 return -EINVAL;
e4eb295d
SF		 266 }
267 return remaining;
268 }
269}
270
fb8c4b14 271static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
e4eb295d
SF		 272{
273 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
274 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
275 int total_data_size;
276 int total_in_buf;
277 int remaining;
278 int total_in_buf2;
fb8c4b14
SF		 279 char *data_area_of_target;
280 char *data_area_of_buf2;
e4eb295d
SF		 281 __u16 byte_count;
282
283 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
284
fb8c4b14 285 if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
b6b38f70 286 cFYI(1, "total data size of primary and secondary t2 differ");
e4eb295d
SF		 287 }
288
289 total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
290
291 remaining = total_data_size - total_in_buf;
50c2f753 292
fb8c4b14 293 if (remaining < 0)
e4eb295d
SF		 294 return -EINVAL;
295
fb8c4b14 296 if (remaining == 0) /* nothing to do, ignore */
e4eb295d 297 return 0;
50c2f753 298
e4eb295d 299 total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
fb8c4b14 300 if (remaining < total_in_buf2) {
b6b38f70 301 cFYI(1, "transact2 2nd response contains too much data");
e4eb295d
SF		 302 }
303
304 /* find end of first SMB data area */
fb8c4b14 305 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
e4eb295d
SF		 306 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
307 /* validate target area */
308
309 data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
fb8c4b14 310 le16_to_cpu(pSMB2->t2_rsp.DataOffset);
e4eb295d
SF		 311
312 data_area_of_target += total_in_buf;
313
314 /* copy second buffer into end of first buffer */
fb8c4b14 315 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
e4eb295d
SF		 316 total_in_buf += total_in_buf2;
317 pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
318 byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
319 byte_count += total_in_buf2;
320 BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
321
70ca734a 322 byte_count = pTargetSMB->smb_buf_length;
e4eb295d
SF		 323 byte_count += total_in_buf2;
324
325 /* BB also add check that we are not beyond maximum buffer size */
50c2f753 326
70ca734a 327 pTargetSMB->smb_buf_length = byte_count;
e4eb295d 328
fb8c4b14 329 if (remaining == total_in_buf2) {
b6b38f70 330 cFYI(1, "found the last secondary response");
e4eb295d
SF		 331 return 0; /* we are done */
332 } else /* more responses to go */
333 return 1;
334
335}
336
1da177e4
LT		 337static int
338cifs_demultiplex_thread(struct TCP_Server_Info *server)
339{
340 int length;
341 unsigned int pdu_length, total_read;
342 struct smb_hdr *smb_buffer = NULL;
b8643e1b
SF		 343 struct smb_hdr *bigbuf = NULL;
344 struct smb_hdr *smallbuf = NULL;
1da177e4
LT		 345 struct msghdr smb_msg;
346 struct kvec iov;
347 struct socket *csocket = server->ssocket;
348 struct list_head *tmp;
1da177e4
LT		 349 struct task_struct *task_to_wake = NULL;
350 struct mid_q_entry *mid_entry;
70ca734a 351 char temp;
4b18f2a9
SF		 352 bool isLargeBuf = false;
353 bool isMultiRsp;
e4eb295d 354 int reconnect;
1da177e4 355
1da177e4 356 current->flags |= PF_MEMALLOC;
b6b38f70 357 cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
93d0ec85
JL		 358
359 length = atomic_inc_return(&tcpSesAllocCount);
360 if (length > 1)
26f57364
SF		 361 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
362 GFP_KERNEL);
1da177e4 363
83144186 364 set_freezable();
469ee614 365 while (server->tcpStatus != CifsExiting) {
ede1327e
SF		 366 if (try_to_freeze())
367 continue;
b8643e1b
SF		 368 if (bigbuf == NULL) {
369 bigbuf = cifs_buf_get();
0fd1ffe0 370 if (!bigbuf) {
b6b38f70 371 cERROR(1, "No memory for large SMB response");
b8643e1b
SF		 372 msleep(3000);
373 /* retry will check if exiting */
374 continue;
375 }
0fd1ffe0
PM		 376 } else if (isLargeBuf) {
377 /* we are reusing a dirty large buf, clear its start */
26f57364 378 memset(bigbuf, 0, sizeof(struct smb_hdr));
1da177e4 379 }
b8643e1b
SF		 380
381 if (smallbuf == NULL) {
382 smallbuf = cifs_small_buf_get();
0fd1ffe0 383 if (!smallbuf) {
b6b38f70 384 cERROR(1, "No memory for SMB response");
b8643e1b
SF		 385 msleep(1000);
386 /* retry will check if exiting */
387 continue;
388 }
389 /* beginning of smb buffer is cleared in our buf_get */
390 } else /* if existing small buf clear beginning */
26f57364 391 memset(smallbuf, 0, sizeof(struct smb_hdr));
b8643e1b 392
4b18f2a9
SF		 393 isLargeBuf = false;
394 isMultiRsp = false;
b8643e1b 395 smb_buffer = smallbuf;
1da177e4
LT		 396 iov.iov_base = smb_buffer;
397 iov.iov_len = 4;
398 smb_msg.msg_control = NULL;
399 smb_msg.msg_controllen = 0;
f01d5e14
SF		 400 pdu_length = 4; /* enough to get RFC1001 header */
401incomplete_rcv:
1da177e4
LT		 402 length =
403 kernel_recvmsg(csocket, &smb_msg,
f01d5e14 404 &iov, 1, pdu_length, 0 /* BB other flags? */);
1da177e4 405
469ee614 406 if (server->tcpStatus == CifsExiting) {
1da177e4
LT		 407 break;
408 } else if (server->tcpStatus == CifsNeedReconnect) {
b6b38f70 409 cFYI(1, "Reconnect after server stopped responding");
1da177e4 410 cifs_reconnect(server);
b6b38f70 411 cFYI(1, "call to reconnect done");
1da177e4
LT		 412 csocket = server->ssocket;
413 continue;
522bbe65
JL		 414 } else if (length == -ERESTARTSYS ||
415 length == -EAGAIN ||
416 length == -EINTR) {
b8643e1b 417 msleep(1); /* minimum sleep to prevent looping
1da177e4
LT		 418 allowing socket to clear and app threads to set
419 tcpStatus CifsNeedReconnect if server hung */
c527c8a7
SF		 420 if (pdu_length < 4) {
421 iov.iov_base = (4 - pdu_length) +
422 (char *)smb_buffer;
423 iov.iov_len = pdu_length;
424 smb_msg.msg_control = NULL;
425 smb_msg.msg_controllen = 0;
c18c732e 426 goto incomplete_rcv;
c527c8a7 427 } else
c18c732e 428 continue;
1da177e4 429 } else if (length <= 0) {
b6b38f70
JP		 430 cFYI(1, "Reconnect after unexpected peek error %d",
431 length);
1da177e4
LT		 432 cifs_reconnect(server);
433 csocket = server->ssocket;
434 wake_up(&server->response_q);
435 continue;
2a974680 436 } else if (length < pdu_length) {
b6b38f70
JP		 437 cFYI(1, "requested %d bytes but only got %d bytes",
438 pdu_length, length);
f01d5e14 439 pdu_length -= length;
f01d5e14
SF		 440 msleep(1);
441 goto incomplete_rcv;
46810cbf 442 }
1da177e4 443
70ca734a
SF		 444 /* The right amount was read from socket - 4 bytes */
445 /* so we can now interpret the length field */
46810cbf 446
70ca734a
SF		 447 /* the first byte big endian of the length field,
448 is actually not part of the length but the type
449 with the most common, zero, as regular data */
450 temp = *((char *) smb_buffer);
46810cbf 451
fb8c4b14 452 /* Note that FC 1001 length is big endian on the wire,
70ca734a
SF		 453 but we convert it here so it is always manipulated
454 as host byte order */
5ca33c6a 455 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
70ca734a
SF		 456 smb_buffer->smb_buf_length = pdu_length;
457
b6b38f70 458 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
46810cbf 459
70ca734a 460 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
fb8c4b14 461 continue;
70ca734a 462 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
b6b38f70 463 cFYI(1, "Good RFC 1002 session rsp");
e4eb295d 464 continue;
70ca734a 465 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
fb8c4b14 466 /* we get this from Windows 98 instead of
46810cbf 467 an error on SMB negprot response */
b6b38f70
JP		 468 cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
469 pdu_length);
7332f2a6
JL		 470 /* give server a second to clean up */
471 msleep(1000);
472 /* always try 445 first on reconnect since we get NACK
473 * on some if we ever connected to port 139 (the NACK
474 * is since we do not begin with RFC1001 session
475 * initialize frame)
476 */
32670396 477 cifs_set_port((struct sockaddr *)
a9f1b85e 478 &server->dstaddr, CIFS_PORT);
7332f2a6
JL		 479 cifs_reconnect(server);
480 csocket = server->ssocket;
481 wake_up(&server->response_q);
482 continue;
70ca734a 483 } else if (temp != (char) 0) {
b6b38f70 484 cERROR(1, "Unknown RFC 1002 frame");
70ca734a
SF		 485 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
486 length);
46810cbf
SF		 487 cifs_reconnect(server);
488 csocket = server->ssocket;
489 continue;
e4eb295d
SF		 490 }
491
492 /* else we have an SMB response */
fb8c4b14 493 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
26f57364 494 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
b6b38f70
JP		 495 cERROR(1, "Invalid size SMB length %d pdu_length %d",
496 length, pdu_length+4);
e4eb295d
SF		 497 cifs_reconnect(server);
498 csocket = server->ssocket;
499 wake_up(&server->response_q);
500 continue;
fb8c4b14 501 }
e4eb295d
SF		 502
503 /* else length ok */
504 reconnect = 0;
505
fb8c4b14 506 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
4b18f2a9 507 isLargeBuf = true;
e4eb295d
SF		 508 memcpy(bigbuf, smallbuf, 4);
509 smb_buffer = bigbuf;
510 }
511 length = 0;
512 iov.iov_base = 4 + (char *)smb_buffer;
513 iov.iov_len = pdu_length;
fb8c4b14 514 for (total_read = 0; total_read < pdu_length;
e4eb295d
SF		 515 total_read += length) {
516 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
517 pdu_length - total_read, 0);
522bbe65 518 if (server->tcpStatus == CifsExiting) {
e4eb295d
SF		 519 /* then will exit */
520 reconnect = 2;
521 break;
522 } else if (server->tcpStatus == CifsNeedReconnect) {
46810cbf
SF		 523 cifs_reconnect(server);
524 csocket = server->ssocket;
fb8c4b14 525 /* Reconnect wakes up rspns q */
e4eb295d
SF		 526 /* Now we will reread sock */
527 reconnect = 1;
528 break;
522bbe65
JL		 529 } else if (length == -ERESTARTSYS ||
530 length == -EAGAIN ||
531 length == -EINTR) {
e4eb295d 532 msleep(1); /* minimum sleep to prevent looping,
fb8c4b14 533 allowing socket to clear and app
e4eb295d
SF		 534 threads to set tcpStatus
535 CifsNeedReconnect if server hung*/
c18c732e 536 length = 0;
46810cbf 537 continue;
e4eb295d 538 } else if (length <= 0) {
b6b38f70
JP		 539 cERROR(1, "Received no data, expecting %d",
540 pdu_length - total_read);
e4eb295d
SF		 541 cifs_reconnect(server);
542 csocket = server->ssocket;
543 reconnect = 1;
544 break;
46810cbf 545 }
e4eb295d 546 }
fb8c4b14 547 if (reconnect == 2)
e4eb295d 548 break;
fb8c4b14 549 else if (reconnect == 1)
e4eb295d 550 continue;
1da177e4 551
e4eb295d 552 length += 4; /* account for rfc1002 hdr */
50c2f753 553
09d1db5c 554
e4eb295d 555 dump_smb(smb_buffer, length);
184ed211 556 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
b387eaeb 557 cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
e4eb295d
SF		 558 continue;
559 }
1da177e4 560
e4eb295d
SF		 561
562 task_to_wake = NULL;
563 spin_lock(&GlobalMid_Lock);
564 list_for_each(tmp, &server->pending_mid_q) {
565 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
566
50c2f753 567 if ((mid_entry->mid == smb_buffer->Mid) &&
e4eb295d
SF		 568 (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
569 (mid_entry->command == smb_buffer->Command)) {
fb8c4b14 570 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
e4eb295d 571 /* We have a multipart transact2 resp */
4b18f2a9 572 isMultiRsp = true;
fb8c4b14 573 if (mid_entry->resp_buf) {
e4eb295d 574 /* merge response - fix up 1st*/
50c2f753 575 if (coalesce_t2(smb_buffer,
e4eb295d 576 mid_entry->resp_buf)) {
4b18f2a9
SF		 577 mid_entry->multiRsp =
578 true;
e4eb295d
SF		 579 break;
580 } else {
581 /* all parts received */
4b18f2a9
SF		 582 mid_entry->multiEnd =
583 true;
50c2f753 584 goto multi_t2_fnd;
e4eb295d
SF		 585 }
586 } else {
fb8c4b14 587 if (!isLargeBuf) {
b6b38f70 588 cERROR(1, "1st trans2 resp needs bigbuf");
e4eb295d 589 /* BB maybe we can fix this up, switch
50c2f753 590 to already allocated large buffer? */
e4eb295d 591 } else {
cd63499c 592 /* Have first buffer */
e4eb295d
SF		 593 mid_entry->resp_buf =
594 smb_buffer;
4b18f2a9
SF		 595 mid_entry->largeBuf =
596 true;
e4eb295d
SF		 597 bigbuf = NULL;
598 }
599 }
600 break;
50c2f753 601 }
e4eb295d 602 mid_entry->resp_buf = smb_buffer;
4b18f2a9 603 mid_entry->largeBuf = isLargeBuf;
e4eb295d
SF		 604multi_t2_fnd:
605 task_to_wake = mid_entry->tsk;
606 mid_entry->midState = MID_RESPONSE_RECEIVED;
1047abc1
SF		 607#ifdef CONFIG_CIFS_STATS2
608 mid_entry->when_received = jiffies;
609#endif
3a5ff61c
SF		 610 /* so we do not time out requests to server
611 which is still responding (since server could
612 be busy but not dead) */
613 server->lstrp = jiffies;
e4eb295d 614 break;
46810cbf 615 }
1da177e4 616 }
e4eb295d
SF		 617 spin_unlock(&GlobalMid_Lock);
618 if (task_to_wake) {
cd63499c 619 /* Was previous buf put in mpx struct for multi-rsp? */
fb8c4b14 620 if (!isMultiRsp) {
cd63499c 621 /* smb buffer will be freed by user thread */
26f57364 622 if (isLargeBuf)
cd63499c 623 bigbuf = NULL;
26f57364 624 else
cd63499c
SF		 625 smallbuf = NULL;
626 }
e4eb295d 627 wake_up_process(task_to_wake);
4b18f2a9
SF		 628 } else if (!is_valid_oplock_break(smb_buffer, server) &&
629 !isMultiRsp) {
b6b38f70 630 cERROR(1, "No task to wake, unknown frame received! "
8097531a 631 "NumMids %d", atomic_read(&midCount));
50c2f753 632 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
70ca734a 633 sizeof(struct smb_hdr));
3979877e
SF		 634#ifdef CONFIG_CIFS_DEBUG2
635 cifs_dump_detail(smb_buffer);
636 cifs_dump_mids(server);
637#endif /* CIFS_DEBUG2 */
50c2f753 638
e4eb295d
SF		 639 }
640 } /* end while !EXITING */
641
e7ddee90 642 /* take it off the list, if it's not already */
3f9bcca7 643 spin_lock(&cifs_tcp_ses_lock);
e7ddee90 644 list_del_init(&server->tcp_ses_list);
3f9bcca7 645 spin_unlock(&cifs_tcp_ses_lock);
e7ddee90 646
1da177e4
LT		 647 spin_lock(&GlobalMid_Lock);
648 server->tcpStatus = CifsExiting;
e691b9d1 649 spin_unlock(&GlobalMid_Lock);
dbdbb876 650 wake_up_all(&server->response_q);
e691b9d1 651
31ca3bc3
SF		 652 /* check if we have blocked requests that need to free */
653 /* Note that cifs_max_pending is normally 50, but
654 can be set at module install time to as little as two */
e691b9d1 655 spin_lock(&GlobalMid_Lock);
fb8c4b14 656 if (atomic_read(&server->inFlight) >= cifs_max_pending)
31ca3bc3
SF		 657 atomic_set(&server->inFlight, cifs_max_pending - 1);
658 /* We do not want to set the max_pending too low or we
659 could end up with the counter going negative */
1da177e4 660 spin_unlock(&GlobalMid_Lock);
50c2f753 661 /* Although there should not be any requests blocked on
1da177e4 662 this queue it can not hurt to be paranoid and try to wake up requests
09d1db5c 663 that may haven been blocked when more than 50 at time were on the wire
1da177e4
LT		 664 to the same server - they now will see the session is in exit state
665 and get out of SendReceive. */
666 wake_up_all(&server->request_q);
667 /* give those requests time to exit */
b8643e1b 668 msleep(125);
50c2f753 669
fb8c4b14 670 if (server->ssocket) {
1da177e4
LT		 671 sock_release(csocket);
672 server->ssocket = NULL;
673 }
b8643e1b 674 /* buffer usuallly freed in free_mid - need to free it here on exit */
a8a11d39
MK		 675 cifs_buf_release(bigbuf);
676 if (smallbuf) /* no sense logging a debug message if NULL */
b8643e1b 677 cifs_small_buf_release(smallbuf);
1da177e4 678
9d78315b 679 if (!list_empty(&server->pending_mid_q)) {
1da177e4
LT		 680 spin_lock(&GlobalMid_Lock);
681 list_for_each(tmp, &server->pending_mid_q) {
9d78315b 682 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
1da177e4 683 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
b6b38f70 684 cFYI(1, "Clearing Mid 0x%x - waking up ",
9d78315b 685 mid_entry->mid);
1da177e4 686 task_to_wake = mid_entry->tsk;
26f57364 687 if (task_to_wake)
1da177e4 688 wake_up_process(task_to_wake);
1da177e4
LT		 689 }
690 }
691 spin_unlock(&GlobalMid_Lock);
1da177e4 692 /* 1/8th of sec is more than enough time for them to exit */
b8643e1b 693 msleep(125);
1da177e4
LT		 694 }
695
f191401f 696 if (!list_empty(&server->pending_mid_q)) {
50c2f753 697 /* mpx threads have not exited yet give them
1da177e4 698 at least the smb send timeout time for long ops */
31ca3bc3
SF		 699 /* due to delays on oplock break requests, we need
700 to wait at least 45 seconds before giving up
701 on a request getting a response and going ahead
702 and killing cifsd */
b6b38f70 703 cFYI(1, "Wait for exit from demultiplex thread");
31ca3bc3 704 msleep(46000);
1da177e4
LT		 705 /* if threads still have not exited they are probably never
706 coming home not much else we can do but free the memory */
707 }
1da177e4 708
c359cf3c 709 kfree(server->hostname);
b1c8d2b4 710 task_to_wake = xchg(&server->tsk, NULL);
31ca3bc3 711 kfree(server);
93d0ec85
JL		 712
713 length = atomic_dec_return(&tcpSesAllocCount);
26f57364
SF		 714 if (length > 0)
715 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
716 GFP_KERNEL);
50c2f753 717
b1c8d2b4
JL		 718 /* if server->tsk was NULL then wait for a signal before exiting */
719 if (!task_to_wake) {
720 set_current_state(TASK_INTERRUPTIBLE);
721 while (!signal_pending(current)) {
722 schedule();
723 set_current_state(TASK_INTERRUPTIBLE);
724 }
725 set_current_state(TASK_RUNNING);
726 }
727
0468a2cf 728 module_put_and_exit(0);
1da177e4
LT		 729}
730
c359cf3c
JL		 731/* extract the host portion of the UNC string */
732static char *
733extract_hostname(const char *unc)
734{
735 const char *src;
736 char *dst, *delim;
737 unsigned int len;
738
739 /* skip double chars at beginning of string */
740 /* BB: check validity of these bytes? */
741 src = unc + 2;
742
743 /* delimiter between hostname and sharename is always '\\' now */
744 delim = strchr(src, '\\');
745 if (!delim)
746 return ERR_PTR(-EINVAL);
747
748 len = delim - src;
749 dst = kmalloc((len + 1), GFP_KERNEL);
750 if (dst == NULL)
751 return ERR_PTR(-ENOMEM);
752
753 memcpy(dst, src, len);
754 dst[len] = '\0';
755
756 return dst;
757}
758
1da177e4 759static int
50c2f753
SF		 760cifs_parse_mount_options(char *options, const char *devname,
761 struct smb_vol *vol)
1da177e4
LT		 762{
763 char *value;
764 char *data;
765 unsigned int temp_len, i, j;
766 char separator[2];
9b9d6b24
JL		 767 short int override_uid = -1;
768 short int override_gid = -1;
769 bool uid_specified = false;
770 bool gid_specified = false;
88463999 771 char *nodename = utsname()->nodename;
1da177e4
LT		 772
773 separator[0] = ',';
50c2f753 774 separator[1] = 0;
1da177e4 775
88463999
JL		 776 /*
777 * does not have to be perfect mapping since field is
778 * informational, only used for servers that do not support
779 * port 445 and it can be overridden at mount time
780 */
1397f2ee
JL		 781 memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
782 for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
88463999
JL		 783 vol->source_rfc1001_name[i] = toupper(nodename[i]);
784
1397f2ee 785 vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
a10faeb2
SF		 786 /* null target name indicates to use *SMBSERVR default called name
787 if we end up sending RFC1001 session initialize */
788 vol->target_rfc1001_name[0] = 0;
3e4b3e1f
JL		 789 vol->cred_uid = current_uid();
790 vol->linux_uid = current_uid();
a001e5b5 791 vol->linux_gid = current_gid();
f55ed1a8
JL		 792
793 /* default to only allowing write access to owner of the mount */
794 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
1da177e4
LT		 795
796 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
ac67055e
JA		 797 /* default is always to request posix paths. */
798 vol->posix_paths = 1;
a0c9217f
JL		 799 /* default to using server inode numbers where available */
800 vol->server_ino = 1;
ac67055e 801
6d20e840
SJ		 802 vol->actimeo = CIFS_DEF_ACTIMEO;
803
1da177e4
LT		 804 if (!options)
805 return 1;
806
50c2f753 807 if (strncmp(options, "sep=", 4) == 0) {
fb8c4b14 808 if (options[4] != 0) {
1da177e4
LT		 809 separator[0] = options[4];
810 options += 5;
811 } else {
b6b38f70 812 cFYI(1, "Null separator not allowed");
1da177e4
LT		 813 }
814 }
50c2f753 815
1da177e4
LT		 816 while ((data = strsep(&options, separator)) != NULL) {
817 if (!*data)
818 continue;
819 if ((value = strchr(data, '=')) != NULL)
820 *value++ = '\0';
821
50c2f753
SF		 822 /* Have to parse this before we parse for "user" */
823 if (strnicmp(data, "user_xattr", 10) == 0) {
1da177e4 824 vol->no_xattr = 0;
50c2f753 825 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
1da177e4
LT		 826 vol->no_xattr = 1;
827 } else if (strnicmp(data, "user", 4) == 0) {
4b952a9b 828 if (!value) {
1da177e4
LT		 829 printk(KERN_WARNING
830 "CIFS: invalid or missing username\n");
831 return 1; /* needs_arg; */
fb8c4b14 832 } else if (!*value) {
4b952a9b
SF		 833 /* null user, ie anonymous, authentication */
834 vol->nullauth = 1;
1da177e4
LT		 835 }
836 if (strnlen(value, 200) < 200) {
837 vol->username = value;
838 } else {
839 printk(KERN_WARNING "CIFS: username too long\n");
840 return 1;
841 }
842 } else if (strnicmp(data, "pass", 4) == 0) {
843 if (!value) {
844 vol->password = NULL;
845 continue;
fb8c4b14 846 } else if (value[0] == 0) {
1da177e4
LT		 847 /* check if string begins with double comma
848 since that would mean the password really
849 does start with a comma, and would not
850 indicate an empty string */
fb8c4b14 851 if (value[1] != separator[0]) {
1da177e4
LT		 852 vol->password = NULL;
853 continue;
854 }
855 }
856 temp_len = strlen(value);
857 /* removed password length check, NTLM passwords
858 can be arbitrarily long */
859
50c2f753 860 /* if comma in password, the string will be
1da177e4
LT		 861 prematurely null terminated. Commas in password are
862 specified across the cifs mount interface by a double
863 comma ie ,, and a comma used as in other cases ie ','
864 as a parameter delimiter/separator is single and due
865 to the strsep above is temporarily zeroed. */
866
867 /* NB: password legally can have multiple commas and
868 the only illegal character in a password is null */
869
50c2f753 870 if ((value[temp_len] == 0) &&
09d1db5c 871 (value[temp_len+1] == separator[0])) {
1da177e4
LT		 872 /* reinsert comma */
873 value[temp_len] = separator[0];
50c2f753
SF		 874 temp_len += 2; /* move after second comma */
875 while (value[temp_len] != 0) {
1da177e4 876 if (value[temp_len] == separator[0]) {
50c2f753 877 if (value[temp_len+1] ==
09d1db5c
SF		 878 separator[0]) {
879 /* skip second comma */
880 temp_len++;
50c2f753 881 } else {
1da177e4
LT		 882 /* single comma indicating start
883 of next parm */
884 break;
885 }
886 }
887 temp_len++;
888 }
fb8c4b14 889 if (value[temp_len] == 0) {
1da177e4
LT		 890 options = NULL;
891 } else {
892 value[temp_len] = 0;
893 /* point option to start of next parm */
894 options = value + temp_len + 1;
895 }
50c2f753 896 /* go from value to value + temp_len condensing
1da177e4
LT		 897 double commas to singles. Note that this ends up
898 allocating a few bytes too many, which is ok */
e915fc49 899 vol->password = kzalloc(temp_len, GFP_KERNEL);
fb8c4b14 900 if (vol->password == NULL) {
50c2f753
SF		 901 printk(KERN_WARNING "CIFS: no memory "
902 "for password\n");
433dc24f
SF		 903 return 1;
904 }
50c2f753 905 for (i = 0, j = 0; i < temp_len; i++, j++) {
1da177e4 906 vol->password[j] = value[i];
fb8c4b14 907 if (value[i] == separator[0]
09d1db5c 908 && value[i+1] == separator[0]) {
1da177e4
LT		 909 /* skip second comma */
910 i++;
911 }
912 }
913 vol->password[j] = 0;
914 } else {
e915fc49 915 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
fb8c4b14 916 if (vol->password == NULL) {
50c2f753
SF		 917 printk(KERN_WARNING "CIFS: no memory "
918 "for password\n");
433dc24f
SF		 919 return 1;
920 }
1da177e4
LT		 921 strcpy(vol->password, value);
922 }
58f7f68f
JL		 923 } else if (!strnicmp(data, "ip", 2) ||
924 !strnicmp(data, "addr", 4)) {
1da177e4
LT		 925 if (!value || !*value) {
926 vol->UNCip = NULL;
50b64e3b
JL		 927 } else if (strnlen(value, INET6_ADDRSTRLEN) <
928 INET6_ADDRSTRLEN) {
1da177e4
LT		 929 vol->UNCip = value;
930 } else {
50c2f753
SF		 931 printk(KERN_WARNING "CIFS: ip address "
932 "too long\n");
1da177e4
LT		 933 return 1;
934 }
50c2f753
SF		 935 } else if (strnicmp(data, "sec", 3) == 0) {
936 if (!value || !*value) {
b6b38f70 937 cERROR(1, "no security value specified");
50c2f753
SF		 938 continue;
939 } else if (strnicmp(value, "krb5i", 5) == 0) {
940 vol->secFlg |= CIFSSEC_MAY_KRB5 |
189acaae 941 CIFSSEC_MUST_SIGN;
bf820679 942 } else if (strnicmp(value, "krb5p", 5) == 0) {
50c2f753
SF		 943 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
944 CIFSSEC_MAY_KRB5; */
b6b38f70 945 cERROR(1, "Krb5 cifs privacy not supported");
bf820679
SF		 946 return 1;
947 } else if (strnicmp(value, "krb5", 4) == 0) {
750d1151 948 vol->secFlg |= CIFSSEC_MAY_KRB5;
ac683924
SF		 949 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
950 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
951 CIFSSEC_MUST_SIGN;
952 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
953 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
bf820679 954 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
750d1151 955 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
189acaae 956 CIFSSEC_MUST_SIGN;
bf820679 957 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
750d1151 958 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
bf820679 959 } else if (strnicmp(value, "ntlmi", 5) == 0) {
750d1151 960 vol->secFlg |= CIFSSEC_MAY_NTLM |
189acaae 961 CIFSSEC_MUST_SIGN;
bf820679
SF		 962 } else if (strnicmp(value, "ntlm", 4) == 0) {
963 /* ntlm is default so can be turned off too */
750d1151 964 vol->secFlg |= CIFSSEC_MAY_NTLM;
bf820679 965 } else if (strnicmp(value, "nontlm", 6) == 0) {
189acaae 966 /* BB is there a better way to do this? */
750d1151 967 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
189acaae
SF		 968#ifdef CONFIG_CIFS_WEAK_PW_HASH
969 } else if (strnicmp(value, "lanman", 6) == 0) {
50c2f753 970 vol->secFlg |= CIFSSEC_MAY_LANMAN;
189acaae 971#endif
bf820679 972 } else if (strnicmp(value, "none", 4) == 0) {
189acaae 973 vol->nullauth = 1;
50c2f753 974 } else {
b6b38f70 975 cERROR(1, "bad security option: %s", value);
50c2f753
SF		 976 return 1;
977 }
1da177e4
LT		 978 } else if ((strnicmp(data, "unc", 3) == 0)
979 || (strnicmp(data, "target", 6) == 0)
980 || (strnicmp(data, "path", 4) == 0)) {
981 if (!value || !*value) {
50c2f753
SF		 982 printk(KERN_WARNING "CIFS: invalid path to "
983 "network resource\n");
1da177e4
LT		 984 return 1; /* needs_arg; */
985 }
986 if ((temp_len = strnlen(value, 300)) < 300) {
50c2f753 987 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
4523cc30 988 if (vol->UNC == NULL)
1da177e4 989 return 1;
50c2f753 990 strcpy(vol->UNC, value);
1da177e4
LT		 991 if (strncmp(vol->UNC, "//", 2) == 0) {
992 vol->UNC[0] = '\\';
993 vol->UNC[1] = '\\';
50c2f753 994 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1da177e4 995 printk(KERN_WARNING
50c2f753
SF		 996 "CIFS: UNC Path does not begin "
997 "with // or \\\\ \n");
1da177e4
LT		 998 return 1;
999 }
1000 } else {
1001 printk(KERN_WARNING "CIFS: UNC name too long\n");
1002 return 1;
1003 }
1004 } else if ((strnicmp(data, "domain", 3) == 0)
1005 || (strnicmp(data, "workgroup", 5) == 0)) {
1006 if (!value || !*value) {
1007 printk(KERN_WARNING "CIFS: invalid domain name\n");
1008 return 1; /* needs_arg; */
1009 }
1010 /* BB are there cases in which a comma can be valid in
1011 a domain name and need special handling? */
3979877e 1012 if (strnlen(value, 256) < 256) {
1da177e4 1013 vol->domainname = value;
b6b38f70 1014 cFYI(1, "Domain name set");
1da177e4 1015 } else {
50c2f753
SF		 1016 printk(KERN_WARNING "CIFS: domain name too "
1017 "long\n");
1da177e4
LT		 1018 return 1;
1019 }
3eb9a889
BG		 1020 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1021 vol->srcaddr.ss_family = AF_UNSPEC;
1022
1023 if (!value || !*value) {
1024 printk(KERN_WARNING "CIFS: srcaddr value"
1025 " not specified.\n");
1026 return 1; /* needs_arg; */
1027 }
1028 i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1029 value, strlen(value));
b235f371 1030 if (i == 0) {
3eb9a889
BG		 1031 printk(KERN_WARNING "CIFS: Could not parse"
1032 " srcaddr: %s\n",
1033 value);
1034 return 1;
1035 }
50c2f753
SF		 1036 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1037 if (!value || !*value) {
1038 printk(KERN_WARNING
1039 "CIFS: invalid path prefix\n");
1040 return 1; /* needs_argument */
1041 }
1042 if ((temp_len = strnlen(value, 1024)) < 1024) {
4523cc30 1043 if (value[0] != '/')
2fe87f02 1044 temp_len++; /* missing leading slash */
50c2f753
SF		 1045 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1046 if (vol->prepath == NULL)
1047 return 1;
4523cc30 1048 if (value[0] != '/') {
2fe87f02 1049 vol->prepath[0] = '/';
50c2f753 1050 strcpy(vol->prepath+1, value);
2fe87f02 1051 } else
50c2f753 1052 strcpy(vol->prepath, value);
b6b38f70 1053 cFYI(1, "prefix path %s", vol->prepath);
50c2f753
SF		 1054 } else {
1055 printk(KERN_WARNING "CIFS: prefix too long\n");
1056 return 1;
1057 }
1da177e4
LT		 1058 } else if (strnicmp(data, "iocharset", 9) == 0) {
1059 if (!value || !*value) {
63135e08
SF		 1060 printk(KERN_WARNING "CIFS: invalid iocharset "
1061 "specified\n");
1da177e4
LT		 1062 return 1; /* needs_arg; */
1063 }
1064 if (strnlen(value, 65) < 65) {
50c2f753 1065 if (strnicmp(value, "default", 7))
1da177e4 1066 vol->iocharset = value;
50c2f753
SF		 1067 /* if iocharset not set then load_nls_default
1068 is used by caller */
b6b38f70 1069 cFYI(1, "iocharset set to %s", value);
1da177e4 1070 } else {
63135e08
SF		 1071 printk(KERN_WARNING "CIFS: iocharset name "
1072 "too long.\n");
1da177e4
LT		 1073 return 1;
1074 }
9b9d6b24
JL		 1075 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1076 vol->linux_uid = simple_strtoul(value, &value, 0);
1077 uid_specified = true;
bd763319
JL		 1078 } else if (!strnicmp(data, "cruid", 5) && value && *value) {
1079 vol->cred_uid = simple_strtoul(value, &value, 0);
9b9d6b24
JL		 1080 } else if (!strnicmp(data, "forceuid", 8)) {
1081 override_uid = 1;
1082 } else if (!strnicmp(data, "noforceuid", 10)) {
1083 override_uid = 0;
1084 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1085 vol->linux_gid = simple_strtoul(value, &value, 0);
1086 gid_specified = true;
1087 } else if (!strnicmp(data, "forcegid", 8)) {
1088 override_gid = 1;
1089 } else if (!strnicmp(data, "noforcegid", 10)) {
1090 override_gid = 0;
1da177e4
LT		 1091 } else if (strnicmp(data, "file_mode", 4) == 0) {
1092 if (value && *value) {
1093 vol->file_mode =
1094 simple_strtoul(value, &value, 0);
1095 }
1096 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1097 if (value && *value) {
1098 vol->dir_mode =
1099 simple_strtoul(value, &value, 0);
1100 }
1101 } else if (strnicmp(data, "dirmode", 4) == 0) {
1102 if (value && *value) {
1103 vol->dir_mode =
1104 simple_strtoul(value, &value, 0);
1105 }
1106 } else if (strnicmp(data, "port", 4) == 0) {
1107 if (value && *value) {
1108 vol->port =
1109 simple_strtoul(value, &value, 0);
1110 }
1111 } else if (strnicmp(data, "rsize", 5) == 0) {
1112 if (value && *value) {
1113 vol->rsize =
1114 simple_strtoul(value, &value, 0);
1115 }
1116 } else if (strnicmp(data, "wsize", 5) == 0) {
1117 if (value && *value) {
1118 vol->wsize =
1119 simple_strtoul(value, &value, 0);
1120 }
1121 } else if (strnicmp(data, "sockopt", 5) == 0) {
6a5fa236 1122 if (!value || !*value) {
b6b38f70 1123 cERROR(1, "no socket option specified");
6a5fa236
SF		 1124 continue;
1125 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1126 vol->sockopt_tcp_nodelay = 1;
1da177e4
LT		 1127 }
1128 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1129 if (!value || !*value || (*value == ' ')) {
b6b38f70 1130 cFYI(1, "invalid (empty) netbiosname");
1da177e4 1131 } else {
1397f2ee
JL		 1132 memset(vol->source_rfc1001_name, 0x20,
1133 RFC1001_NAME_LEN);
1134 /*
1135 * FIXME: are there cases in which a comma can
1136 * be valid in workstation netbios name (and
1137 * need special handling)?
1138 */
1139 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1140 /* don't ucase netbiosname for user */
50c2f753 1141 if (value[i] == 0)
1da177e4 1142 break;
1397f2ee 1143 vol->source_rfc1001_name[i] = value[i];
1da177e4
LT		 1144 }
1145 /* The string has 16th byte zero still from
1146 set at top of the function */
1397f2ee 1147 if (i == RFC1001_NAME_LEN && value[i] != 0)
50c2f753
SF		 1148 printk(KERN_WARNING "CIFS: netbiosname"
1149 " longer than 15 truncated.\n");
a10faeb2
SF		 1150 }
1151 } else if (strnicmp(data, "servern", 7) == 0) {
1152 /* servernetbiosname specified override *SMBSERVER */
1153 if (!value || !*value || (*value == ' ')) {
b6b38f70 1154 cFYI(1, "empty server netbiosname specified");
a10faeb2
SF		 1155 } else {
1156 /* last byte, type, is 0x20 for servr type */
1397f2ee
JL		 1157 memset(vol->target_rfc1001_name, 0x20,
1158 RFC1001_NAME_LEN_WITH_NULL);
a10faeb2 1159
50c2f753 1160 for (i = 0; i < 15; i++) {
a10faeb2 1161 /* BB are there cases in which a comma can be
50c2f753
SF		 1162 valid in this workstation netbios name
1163 (and need special handling)? */
a10faeb2 1164
50c2f753
SF		 1165 /* user or mount helper must uppercase
1166 the netbiosname */
1167 if (value[i] == 0)
a10faeb2
SF		 1168 break;
1169 else
50c2f753
SF		 1170 vol->target_rfc1001_name[i] =
1171 value[i];
a10faeb2
SF		 1172 }
1173 /* The string has 16th byte zero still from
1174 set at top of the function */
1397f2ee 1175 if (i == RFC1001_NAME_LEN && value[i] != 0)
50c2f753
SF		 1176 printk(KERN_WARNING "CIFS: server net"
1177 "biosname longer than 15 truncated.\n");
1da177e4 1178 }
6d20e840
SJ		 1179 } else if (strnicmp(data, "actimeo", 7) == 0) {
1180 if (value && *value) {
1181 vol->actimeo = HZ * simple_strtoul(value,
1182 &value, 0);
1183 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1184 cERROR(1, "CIFS: attribute cache"
1185 "timeout too large");
1186 return 1;
1187 }
1188 }
1da177e4
LT		 1189 } else if (strnicmp(data, "credentials", 4) == 0) {
1190 /* ignore */
1191 } else if (strnicmp(data, "version", 3) == 0) {
1192 /* ignore */
50c2f753 1193 } else if (strnicmp(data, "guest", 5) == 0) {
1da177e4 1194 /* ignore */
71a394fa
SF		 1195 } else if (strnicmp(data, "rw", 2) == 0) {
1196 /* ignore */
1197 } else if (strnicmp(data, "ro", 2) == 0) {
1198 /* ignore */
edf1ae40
SF		 1199 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1200 vol->noblocksnd = 1;
1201 } else if (strnicmp(data, "noautotune", 10) == 0) {
1202 vol->noautotune = 1;
1da177e4
LT		 1203 } else if ((strnicmp(data, "suid", 4) == 0) ||
1204 (strnicmp(data, "nosuid", 6) == 0) ||
1205 (strnicmp(data, "exec", 4) == 0) ||
1206 (strnicmp(data, "noexec", 6) == 0) ||
1207 (strnicmp(data, "nodev", 5) == 0) ||
1208 (strnicmp(data, "noauto", 6) == 0) ||
1209 (strnicmp(data, "dev", 3) == 0)) {
1210 /* The mount tool or mount.cifs helper (if present)
50c2f753
SF		 1211 uses these opts to set flags, and the flags are read
1212 by the kernel vfs layer before we get here (ie
1213 before read super) so there is no point trying to
1214 parse these options again and set anything and it
1215 is ok to just ignore them */
1da177e4 1216 continue;
1da177e4
LT		 1217 } else if (strnicmp(data, "hard", 4) == 0) {
1218 vol->retry = 1;
1219 } else if (strnicmp(data, "soft", 4) == 0) {
1220 vol->retry = 0;
1221 } else if (strnicmp(data, "perm", 4) == 0) {
1222 vol->noperm = 0;
1223 } else if (strnicmp(data, "noperm", 6) == 0) {
1224 vol->noperm = 1;
6a0b4824
SF		 1225 } else if (strnicmp(data, "mapchars", 8) == 0) {
1226 vol->remap = 1;
1227 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1228 vol->remap = 0;
50c2f753
SF		 1229 } else if (strnicmp(data, "sfu", 3) == 0) {
1230 vol->sfu_emul = 1;
1231 } else if (strnicmp(data, "nosfu", 5) == 0) {
1232 vol->sfu_emul = 0;
2c1b8615
SF		 1233 } else if (strnicmp(data, "nodfs", 5) == 0) {
1234 vol->nodfs = 1;
ac67055e
JA		 1235 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1236 vol->posix_paths = 1;
1237 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1238 vol->posix_paths = 0;
c18c842b
SF		 1239 } else if (strnicmp(data, "nounix", 6) == 0) {
1240 vol->no_linux_ext = 1;
1241 } else if (strnicmp(data, "nolinux", 7) == 0) {
1242 vol->no_linux_ext = 1;
50c2f753 1243 } else if ((strnicmp(data, "nocase", 6) == 0) ||
a10faeb2 1244 (strnicmp(data, "ignorecase", 10) == 0)) {
50c2f753 1245 vol->nocase = 1;
f636a348
JL		 1246 } else if (strnicmp(data, "mand", 4) == 0) {
1247 /* ignore */
1248 } else if (strnicmp(data, "nomand", 6) == 0) {
1249 /* ignore */
1250 } else if (strnicmp(data, "_netdev", 7) == 0) {
1251 /* ignore */
c46fa8ac
SF		 1252 } else if (strnicmp(data, "brl", 3) == 0) {
1253 vol->nobrl = 0;
50c2f753 1254 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1c955187 1255 (strnicmp(data, "nolock", 6) == 0)) {
c46fa8ac 1256 vol->nobrl = 1;
d3485d37
SF		 1257 /* turn off mandatory locking in mode
1258 if remote locking is turned off since the
1259 local vfs will do advisory */
50c2f753
SF		 1260 if (vol->file_mode ==
1261 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
d3485d37 1262 vol->file_mode = S_IALLUGO;
13a6e42a
SF		 1263 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1264 /* will take the shorter form "forcemand" as well */
1265 /* This mount option will force use of mandatory
1266 (DOS/Windows style) byte range locks, instead of
1267 using posix advisory byte range locks, even if the
1268 Unix extensions are available and posix locks would
1269 be supported otherwise. If Unix extensions are not
1270 negotiated this has no effect since mandatory locks
1271 would be used (mandatory locks is all that those
1272 those servers support) */
1273 vol->mand_lock = 1;
1da177e4
LT		 1274 } else if (strnicmp(data, "setuids", 7) == 0) {
1275 vol->setuids = 1;
1276 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1277 vol->setuids = 0;
d0a9c078
JL		 1278 } else if (strnicmp(data, "dynperm", 7) == 0) {
1279 vol->dynperm = true;
1280 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1281 vol->dynperm = false;
1da177e4
LT		 1282 } else if (strnicmp(data, "nohard", 6) == 0) {
1283 vol->retry = 0;
1284 } else if (strnicmp(data, "nosoft", 6) == 0) {
1285 vol->retry = 1;
1286 } else if (strnicmp(data, "nointr", 6) == 0) {
1287 vol->intr = 0;
1288 } else if (strnicmp(data, "intr", 4) == 0) {
1289 vol->intr = 1;
be652445
SF		 1290 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1291 vol->nostrictsync = 1;
1292 } else if (strnicmp(data, "strictsync", 10) == 0) {
1293 vol->nostrictsync = 0;
50c2f753 1294 } else if (strnicmp(data, "serverino", 7) == 0) {
1da177e4 1295 vol->server_ino = 1;
50c2f753 1296 } else if (strnicmp(data, "noserverino", 9) == 0) {
1da177e4 1297 vol->server_ino = 0;
50c2f753 1298 } else if (strnicmp(data, "cifsacl", 7) == 0) {
0a4b92c0
SF		 1299 vol->cifs_acl = 1;
1300 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1301 vol->cifs_acl = 0;
50c2f753 1302 } else if (strnicmp(data, "acl", 3) == 0) {
1da177e4 1303 vol->no_psx_acl = 0;
50c2f753 1304 } else if (strnicmp(data, "noacl", 5) == 0) {
1da177e4 1305 vol->no_psx_acl = 1;
84210e91
SF		 1306 } else if (strnicmp(data, "locallease", 6) == 0) {
1307 vol->local_lease = 1;
50c2f753 1308 } else if (strnicmp(data, "sign", 4) == 0) {
750d1151 1309 vol->secFlg |= CIFSSEC_MUST_SIGN;
95b1cb90
SF		 1310 } else if (strnicmp(data, "seal", 4) == 0) {
1311 /* we do not do the following in secFlags because seal
1312 is a per tree connection (mount) not a per socket
1313 or per-smb connection option in the protocol */
1314 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1315 vol->seal = 1;
50c2f753 1316 } else if (strnicmp(data, "direct", 6) == 0) {
1da177e4 1317 vol->direct_io = 1;
50c2f753 1318 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1da177e4 1319 vol->direct_io = 1;
1da177e4 1320 } else if (strnicmp(data, "noac", 4) == 0) {
50c2f753
SF		 1321 printk(KERN_WARNING "CIFS: Mount option noac not "
1322 "supported. Instead set "
1323 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
fa1df75d 1324 } else if (strnicmp(data, "fsc", 3) == 0) {
607a569d
SJ		 1325#ifndef CONFIG_CIFS_FSCACHE
1326 cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE"
1327 "kernel config option set");
1328 return 1;
1329#endif
fa1df75d 1330 vol->fsc = true;
736a3320
SM		 1331 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1332 vol->mfsymlinks = true;
0eb8a132
JL		 1333 } else if (strnicmp(data, "multiuser", 8) == 0) {
1334 vol->multiuser = true;
1da177e4 1335 } else
50c2f753
SF		 1336 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1337 data);
1da177e4
LT		 1338 }
1339 if (vol->UNC == NULL) {
4523cc30 1340 if (devname == NULL) {
50c2f753
SF		 1341 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1342 "target\n");
1da177e4
LT		 1343 return 1;
1344 }
1345 if ((temp_len = strnlen(devname, 300)) < 300) {
50c2f753 1346 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
4523cc30 1347 if (vol->UNC == NULL)
1da177e4 1348 return 1;
50c2f753 1349 strcpy(vol->UNC, devname);
1da177e4
LT		 1350 if (strncmp(vol->UNC, "//", 2) == 0) {
1351 vol->UNC[0] = '\\';
1352 vol->UNC[1] = '\\';
1353 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
50c2f753
SF		 1354 printk(KERN_WARNING "CIFS: UNC Path does not "
1355 "begin with // or \\\\ \n");
1da177e4
LT		 1356 return 1;
1357 }
7c5e628f
IM		 1358 value = strpbrk(vol->UNC+2, "/\\");
1359 if (value)
1360 *value = '\\';
1da177e4
LT		 1361 } else {
1362 printk(KERN_WARNING "CIFS: UNC name too long\n");
1363 return 1;
1364 }
1365 }
0eb8a132
JL		 1366
1367 if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1368 cERROR(1, "Multiuser mounts currently require krb5 "
1369 "authentication!");
1370 return 1;
1371 }
1372
fb8c4b14 1373 if (vol->UNCip == NULL)
1da177e4
LT		 1374 vol->UNCip = &vol->UNC[2];
1375
9b9d6b24
JL		 1376 if (uid_specified)
1377 vol->override_uid = override_uid;
1378 else if (override_uid == 1)
1379 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1380 "specified with no uid= option.\n");
1381
1382 if (gid_specified)
1383 vol->override_gid = override_gid;
1384 else if (override_gid == 1)
1385 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1386 "specified with no gid= option.\n");
1387
1da177e4
LT		 1388 return 0;
1389}
1390
3eb9a889
BG		 1391/** Returns true if srcaddr isn't specified and rhs isn't
1392 * specified, or if srcaddr is specified and
1393 * matches the IP address of the rhs argument.
1394 */
1395static bool
1396srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1397{
1398 switch (srcaddr->sa_family) {
1399 case AF_UNSPEC:
1400 return (rhs->sa_family == AF_UNSPEC);
1401 case AF_INET: {
1402 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1403 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1404 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1405 }
1406 case AF_INET6: {
1407 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1408 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1409 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1410 }
1411 default:
1412 WARN_ON(1);
1413 return false; /* don't expect to be here */
1414 }
1415}
1416
4b886136
PS		 1417/*
1418 * If no port is specified in addr structure, we try to match with 445 port
1419 * and if it fails - with 139 ports. It should be called only if address
1420 * families of server and addr are equal.
1421 */
1422static bool
1423match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1424{
1425 unsigned short int port, *sport;
1426
1427 switch (addr->sa_family) {
1428 case AF_INET:
1429 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1430 port = ((struct sockaddr_in *) addr)->sin_port;
1431 break;
1432 case AF_INET6:
1433 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1434 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1435 break;
1436 default:
1437 WARN_ON(1);
1438 return false;
1439 }
1440
1441 if (!port) {
1442 port = htons(CIFS_PORT);
1443 if (port == *sport)
1444 return true;
1445
1446 port = htons(RFC1001_PORT);
1447 }
1448
1449 return port == *sport;
1450}
3eb9a889 1451
4515148e 1452static bool
3eb9a889
BG		 1453match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1454 struct sockaddr *srcaddr)
4515148e 1455{
4515148e 1456 switch (addr->sa_family) {
a9f1b85e
PS		 1457 case AF_INET: {
1458 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1459 struct sockaddr_in *srv_addr4 =
1460 (struct sockaddr_in *)&server->dstaddr;
1461
1462 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
4515148e 1463 return false;
4515148e 1464 break;
a9f1b85e
PS		 1465 }
1466 case AF_INET6: {
1467 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1468 struct sockaddr_in6 *srv_addr6 =
1469 (struct sockaddr_in6 *)&server->dstaddr;
1470
4515148e 1471 if (!ipv6_addr_equal(&addr6->sin6_addr,
a9f1b85e 1472 &srv_addr6->sin6_addr))
4515148e 1473 return false;
a9f1b85e 1474 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
4515148e 1475 return false;
4515148e
JL		 1476 break;
1477 }
a9f1b85e
PS		 1478 default:
1479 WARN_ON(1);
1480 return false; /* don't expect to be here */
1481 }
4515148e 1482
3eb9a889
BG		 1483 if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1484 return false;
1485
4515148e
JL		 1486 return true;
1487}
1488
daf5b0b6
JL		 1489static bool
1490match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1491{
1492 unsigned int secFlags;
1493
1494 if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1495 secFlags = vol->secFlg;
1496 else
1497 secFlags = global_secflags | vol->secFlg;
1498
1499 switch (server->secType) {
1500 case LANMAN:
1501 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1502 return false;
1503 break;
1504 case NTLMv2:
1505 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1506 return false;
1507 break;
1508 case NTLM:
1509 if (!(secFlags & CIFSSEC_MAY_NTLM))
1510 return false;
1511 break;
1512 case Kerberos:
1513 if (!(secFlags & CIFSSEC_MAY_KRB5))
1514 return false;
1515 break;
1516 case RawNTLMSSP:
1517 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1518 return false;
1519 break;
1520 default:
1521 /* shouldn't happen */
1522 return false;
1523 }
1524
1525 /* now check if signing mode is acceptible */
1526 if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1527 (server->secMode & SECMODE_SIGN_REQUIRED))
1528 return false;
1529 else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1530 (server->secMode &
1531 (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1532 return false;
1533
1534 return true;
1535}
1536
e7ddee90 1537static struct TCP_Server_Info *
daf5b0b6 1538cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1da177e4 1539{
e7ddee90 1540 struct TCP_Server_Info *server;
e7ddee90 1541
3f9bcca7 1542 spin_lock(&cifs_tcp_ses_lock);
4515148e 1543 list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
3eb9a889
BG		 1544 if (!match_address(server, addr,
1545 (struct sockaddr *)&vol->srcaddr))
4515148e 1546 continue;
1b20d672 1547
4b886136
PS		 1548 if (!match_port(server, addr))
1549 continue;
1550
daf5b0b6
JL		 1551 if (!match_security(server, vol))
1552 continue;
1553
e7ddee90 1554 ++server->srv_count;
3f9bcca7 1555 spin_unlock(&cifs_tcp_ses_lock);
b6b38f70 1556 cFYI(1, "Existing tcp session with server found");
e7ddee90 1557 return server;
1da177e4 1558 }
3f9bcca7 1559 spin_unlock(&cifs_tcp_ses_lock);
1da177e4
LT		 1560 return NULL;
1561}
1b20d672 1562
14fbf50d 1563static void
e7ddee90 1564cifs_put_tcp_session(struct TCP_Server_Info *server)
1da177e4 1565{
e7ddee90 1566 struct task_struct *task;
1b20d672 1567
3f9bcca7 1568 spin_lock(&cifs_tcp_ses_lock);
e7ddee90 1569 if (--server->srv_count > 0) {
3f9bcca7 1570 spin_unlock(&cifs_tcp_ses_lock);
e7ddee90 1571 return;
1da177e4 1572 }
1b20d672 1573
e7ddee90 1574 list_del_init(&server->tcp_ses_list);
3f9bcca7 1575 spin_unlock(&cifs_tcp_ses_lock);
dea570e0 1576
e7ddee90
JL		 1577 spin_lock(&GlobalMid_Lock);
1578 server->tcpStatus = CifsExiting;
1579 spin_unlock(&GlobalMid_Lock);
dea570e0 1580
d2b91521 1581 cifs_crypto_shash_release(server);
488f1d2d
SJ		 1582 cifs_fscache_release_client_cookie(server);
1583
21e73393
SP		 1584 kfree(server->session_key.response);
1585 server->session_key.response = NULL;
1586 server->session_key.len = 0;
1587
e7ddee90
JL		 1588 task = xchg(&server->tsk, NULL);
1589 if (task)
1590 force_sig(SIGKILL, task);
1da177e4
LT		 1591}
1592
63c038c2
JL		 1593static struct TCP_Server_Info *
1594cifs_get_tcp_session(struct smb_vol *volume_info)
1595{
1596 struct TCP_Server_Info *tcp_ses = NULL;
a9ac49d3 1597 struct sockaddr_storage addr;
63c038c2
JL		 1598 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1599 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1600 int rc;
1601
a9ac49d3 1602 memset(&addr, 0, sizeof(struct sockaddr_storage));
63c038c2 1603
b6b38f70 1604 cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
63c038c2 1605
1e68b2b2 1606 if (volume_info->UNCip && volume_info->UNC) {
50d97160
JL		 1607 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1608 volume_info->UNCip,
67b7626a 1609 strlen(volume_info->UNCip),
50d97160 1610 volume_info->port);
1e68b2b2 1611 if (!rc) {
63c038c2
JL		 1612 /* we failed translating address */
1613 rc = -EINVAL;
1614 goto out_err;
1615 }
63c038c2
JL		 1616 } else if (volume_info->UNCip) {
1617 /* BB using ip addr as tcp_ses name to connect to the
1618 DFS root below */
b6b38f70 1619 cERROR(1, "Connecting to DFS root not implemented yet");
63c038c2
JL		 1620 rc = -EINVAL;
1621 goto out_err;
1622 } else /* which tcp_sess DFS root would we conect to */ {
b6b38f70
JP		 1623 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1624 "unc=//192.168.1.100/public) specified");
63c038c2
JL		 1625 rc = -EINVAL;
1626 goto out_err;
1627 }
1628
1629 /* see if we already have a matching tcp_ses */
daf5b0b6 1630 tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
63c038c2
JL		 1631 if (tcp_ses)
1632 return tcp_ses;
1633
1634 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1635 if (!tcp_ses) {
1636 rc = -ENOMEM;
1637 goto out_err;
1638 }
1639
d2b91521
SP		 1640 rc = cifs_crypto_shash_allocate(tcp_ses);
1641 if (rc) {
1642 cERROR(1, "could not setup hash structures rc %d", rc);
1643 goto out_err;
1644 }
1645
63c038c2
JL		 1646 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1647 if (IS_ERR(tcp_ses->hostname)) {
1648 rc = PTR_ERR(tcp_ses->hostname);
f7c5445a 1649 goto out_err_crypto_release;
63c038c2
JL		 1650 }
1651
1652 tcp_ses->noblocksnd = volume_info->noblocksnd;
1653 tcp_ses->noautotune = volume_info->noautotune;
6a5fa236 1654 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
63c038c2
JL		 1655 atomic_set(&tcp_ses->inFlight, 0);
1656 init_waitqueue_head(&tcp_ses->response_q);
1657 init_waitqueue_head(&tcp_ses->request_q);
1658 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1659 mutex_init(&tcp_ses->srv_mutex);
1660 memcpy(tcp_ses->workstation_RFC1001_name,
1661 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1662 memcpy(tcp_ses->server_RFC1001_name,
1663 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
5d0d2882 1664 tcp_ses->session_estab = false;
63c038c2
JL		 1665 tcp_ses->sequence_number = 0;
1666 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1667 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1668
1669 /*
1670 * at this point we are the only ones with the pointer
1671 * to the struct since the kernel thread not created yet
1672 * no need to spinlock this init of tcpStatus or srv_count
1673 */
1674 tcp_ses->tcpStatus = CifsNew;
3eb9a889
BG		 1675 memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1676 sizeof(tcp_ses->srcaddr));
63c038c2
JL		 1677 ++tcp_ses->srv_count;
1678
a9ac49d3 1679 if (addr.ss_family == AF_INET6) {
b6b38f70 1680 cFYI(1, "attempting ipv6 connect");
63c038c2
JL		 1681 /* BB should we allow ipv6 on port 139? */
1682 /* other OS never observed in Wild doing 139 with v6 */
a9f1b85e
PS		 1683 memcpy(&tcp_ses->dstaddr, sin_server6,
1684 sizeof(struct sockaddr_in6));
1685 } else
1686 memcpy(&tcp_ses->dstaddr, sin_server,
1687 sizeof(struct sockaddr_in));
1688
1689 rc = ip_connect(tcp_ses);
63c038c2 1690 if (rc < 0) {
b6b38f70 1691 cERROR(1, "Error connecting to socket. Aborting operation");
f7c5445a 1692 goto out_err_crypto_release;
63c038c2
JL		 1693 }
1694
1695 /*
1696 * since we're in a cifs function already, we know that
1697 * this will succeed. No need for try_module_get().
1698 */
1699 __module_get(THIS_MODULE);
1700 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1701 tcp_ses, "cifsd");
1702 if (IS_ERR(tcp_ses->tsk)) {
1703 rc = PTR_ERR(tcp_ses->tsk);
b6b38f70 1704 cERROR(1, "error %d create cifsd thread", rc);
63c038c2 1705 module_put(THIS_MODULE);
f7c5445a 1706 goto out_err_crypto_release;
63c038c2
JL		 1707 }
1708
1709 /* thread spawned, put it on the list */
3f9bcca7 1710 spin_lock(&cifs_tcp_ses_lock);
63c038c2 1711 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
3f9bcca7 1712 spin_unlock(&cifs_tcp_ses_lock);
63c038c2 1713
488f1d2d
SJ		 1714 cifs_fscache_get_client_cookie(tcp_ses);
1715
63c038c2
JL		 1716 return tcp_ses;
1717
f7c5445a 1718out_err_crypto_release:
d2b91521
SP		 1719 cifs_crypto_shash_release(tcp_ses);
1720
63c038c2
JL		 1721out_err:
1722 if (tcp_ses) {
8347a5cd
SF		 1723 if (!IS_ERR(tcp_ses->hostname))
1724 kfree(tcp_ses->hostname);
63c038c2
JL		 1725 if (tcp_ses->ssocket)
1726 sock_release(tcp_ses->ssocket);
1727 kfree(tcp_ses);
1728 }
1729 return ERR_PTR(rc);
1730}
1731
14fbf50d 1732static struct cifsSesInfo *
4ff67b72 1733cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1da177e4 1734{
14fbf50d 1735 struct cifsSesInfo *ses;
dea570e0 1736
3f9bcca7 1737 spin_lock(&cifs_tcp_ses_lock);
4ff67b72
JL		 1738 list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
1739 switch (server->secType) {
1740 case Kerberos:
3e4b3e1f 1741 if (vol->cred_uid != ses->cred_uid)
4ff67b72
JL		 1742 continue;
1743 break;
1744 default:
1745 /* anything else takes username/password */
1746 if (strncmp(ses->userName, vol->username,
1747 MAX_USERNAME_SIZE))
1748 continue;
1749 if (strlen(vol->username) != 0 &&
24e6cf92 1750 ses->password != NULL &&
fc87a406
JL		 1751 strncmp(ses->password,
1752 vol->password ? vol->password : "",
4ff67b72
JL		 1753 MAX_PASSWORD_SIZE))
1754 continue;
1755 }
14fbf50d 1756 ++ses->ses_count;
3f9bcca7 1757 spin_unlock(&cifs_tcp_ses_lock);
14fbf50d
JL		 1758 return ses;
1759 }
3f9bcca7 1760 spin_unlock(&cifs_tcp_ses_lock);
14fbf50d
JL		 1761 return NULL;
1762}
dea570e0 1763
14fbf50d
JL		 1764static void
1765cifs_put_smb_ses(struct cifsSesInfo *ses)
1766{
1767 int xid;
1768 struct TCP_Server_Info *server = ses->server;
dea570e0 1769
36988c76 1770 cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
3f9bcca7 1771 spin_lock(&cifs_tcp_ses_lock);
14fbf50d 1772 if (--ses->ses_count > 0) {
3f9bcca7 1773 spin_unlock(&cifs_tcp_ses_lock);
14fbf50d
JL		 1774 return;
1775 }
dea570e0 1776
14fbf50d 1777 list_del_init(&ses->smb_ses_list);
3f9bcca7 1778 spin_unlock(&cifs_tcp_ses_lock);
dea570e0 1779
14fbf50d
JL		 1780 if (ses->status == CifsGood) {
1781 xid = GetXid();
1782 CIFSSMBLogoff(xid, ses);
1783 _FreeXid(xid);
1784 }
1785 sesInfoFree(ses);
1786 cifs_put_tcp_session(server);
1787}
dea570e0 1788
36988c76
JL		 1789static struct cifsSesInfo *
1790cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1791{
1792 int rc = -ENOMEM, xid;
1793 struct cifsSesInfo *ses;
a9f1b85e
PS		 1794 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1795 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
36988c76
JL		 1796
1797 xid = GetXid();
1798
4ff67b72 1799 ses = cifs_find_smb_ses(server, volume_info);
36988c76
JL		 1800 if (ses) {
1801 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1802
36988c76 1803 mutex_lock(&ses->session_mutex);
198b5682
JL		 1804 rc = cifs_negotiate_protocol(xid, ses);
1805 if (rc) {
1806 mutex_unlock(&ses->session_mutex);
1807 /* problem -- put our ses reference */
1808 cifs_put_smb_ses(ses);
1809 FreeXid(xid);
1810 return ERR_PTR(rc);
1811 }
36988c76
JL		 1812 if (ses->need_reconnect) {
1813 cFYI(1, "Session needs reconnect");
1814 rc = cifs_setup_session(xid, ses,
1815 volume_info->local_nls);
1816 if (rc) {
1817 mutex_unlock(&ses->session_mutex);
1818 /* problem -- put our reference */
1819 cifs_put_smb_ses(ses);
1820 FreeXid(xid);
1821 return ERR_PTR(rc);
1822 }
1823 }
1824 mutex_unlock(&ses->session_mutex);
460cf341
JL		 1825
1826 /* existing SMB ses has a server reference already */
1827 cifs_put_tcp_session(server);
36988c76
JL		 1828 FreeXid(xid);
1829 return ses;
1830 }
1831
1832 cFYI(1, "Existing smb sess not found");
1833 ses = sesInfoAlloc();
1834 if (ses == NULL)
1835 goto get_ses_fail;
1836
1837 /* new SMB session uses our server ref */
1838 ses->server = server;
a9f1b85e
PS		 1839 if (server->dstaddr.ss_family == AF_INET6)
1840 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
36988c76 1841 else
a9f1b85e 1842 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
36988c76
JL		 1843
1844 if (volume_info->username)
1845 strncpy(ses->userName, volume_info->username,
1846 MAX_USERNAME_SIZE);
1847
1848 /* volume_info->password freed at unmount */
1849 if (volume_info->password) {
1850 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
1851 if (!ses->password)
1852 goto get_ses_fail;
1853 }
1854 if (volume_info->domainname) {
d3686d54
SP		 1855 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
1856 if (!ses->domainName)
1857 goto get_ses_fail;
36988c76 1858 }
3e4b3e1f 1859 ses->cred_uid = volume_info->cred_uid;
36988c76
JL		 1860 ses->linux_uid = volume_info->linux_uid;
1861 ses->overrideSecFlg = volume_info->secFlg;
1862
1863 mutex_lock(&ses->session_mutex);
198b5682
JL		 1864 rc = cifs_negotiate_protocol(xid, ses);
1865 if (!rc)
1866 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
36988c76 1867 mutex_unlock(&ses->session_mutex);
c8e56f1f 1868 if (rc)
36988c76
JL		 1869 goto get_ses_fail;
1870
1871 /* success, put it on the list */
3f9bcca7 1872 spin_lock(&cifs_tcp_ses_lock);
36988c76 1873 list_add(&ses->smb_ses_list, &server->smb_ses_list);
3f9bcca7 1874 spin_unlock(&cifs_tcp_ses_lock);
36988c76
JL		 1875
1876 FreeXid(xid);
1877 return ses;
1878
1879get_ses_fail:
1880 sesInfoFree(ses);
1881 FreeXid(xid);
1882 return ERR_PTR(rc);
1883}
1884
f1987b44
JL		 1885static struct cifsTconInfo *
1886cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1887{
1888 struct list_head *tmp;
1889 struct cifsTconInfo *tcon;
1890
3f9bcca7 1891 spin_lock(&cifs_tcp_ses_lock);
f1987b44
JL		 1892 list_for_each(tmp, &ses->tcon_list) {
1893 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1894 if (tcon->tidStatus == CifsExiting)
1895 continue;
1896 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
dea570e0
SF		 1897 continue;
1898
f1987b44 1899 ++tcon->tc_count;
3f9bcca7 1900 spin_unlock(&cifs_tcp_ses_lock);
dea570e0 1901 return tcon;
1da177e4 1902 }
3f9bcca7 1903 spin_unlock(&cifs_tcp_ses_lock);
1da177e4
LT		 1904 return NULL;
1905}
1906
f1987b44
JL		 1907static void
1908cifs_put_tcon(struct cifsTconInfo *tcon)
1909{
1910 int xid;
1911 struct cifsSesInfo *ses = tcon->ses;
1912
d00c28de 1913 cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
3f9bcca7 1914 spin_lock(&cifs_tcp_ses_lock);
f1987b44 1915 if (--tcon->tc_count > 0) {
3f9bcca7 1916 spin_unlock(&cifs_tcp_ses_lock);
f1987b44
JL		 1917 return;
1918 }
1919
1920 list_del_init(&tcon->tcon_list);
3f9bcca7 1921 spin_unlock(&cifs_tcp_ses_lock);
f1987b44
JL		 1922
1923 xid = GetXid();
1924 CIFSSMBTDis(xid, tcon);
1925 _FreeXid(xid);
1926
d03382ce 1927 cifs_fscache_release_super_cookie(tcon);
9f841593 1928 tconInfoFree(tcon);
f1987b44
JL		 1929 cifs_put_smb_ses(ses);
1930}
1931
d00c28de
JL		 1932static struct cifsTconInfo *
1933cifs_get_tcon(struct cifsSesInfo *ses, struct smb_vol *volume_info)
1934{
1935 int rc, xid;
1936 struct cifsTconInfo *tcon;
1937
1938 tcon = cifs_find_tcon(ses, volume_info->UNC);
1939 if (tcon) {
1940 cFYI(1, "Found match on UNC path");
1941 /* existing tcon already has a reference */
1942 cifs_put_smb_ses(ses);
1943 if (tcon->seal != volume_info->seal)
1944 cERROR(1, "transport encryption setting "
1945 "conflicts with existing tid");
1946 return tcon;
1947 }
1948
1949 tcon = tconInfoAlloc();
1950 if (tcon == NULL) {
1951 rc = -ENOMEM;
1952 goto out_fail;
1953 }
1954
1955 tcon->ses = ses;
1956 if (volume_info->password) {
1957 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
1958 if (!tcon->password) {
1959 rc = -ENOMEM;
1960 goto out_fail;
1961 }
1962 }
1963
1964 if (strchr(volume_info->UNC + 3, '\\') == NULL
1965 && strchr(volume_info->UNC + 3, '/') == NULL) {
1966 cERROR(1, "Missing share name");
1967 rc = -ENODEV;
1968 goto out_fail;
1969 }
1970
1971 /* BB Do we need to wrap session_mutex around
1972 * this TCon call and Unix SetFS as
1973 * we do on SessSetup and reconnect? */
1974 xid = GetXid();
1975 rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
1976 FreeXid(xid);
1977 cFYI(1, "CIFS Tcon rc = %d", rc);
1978 if (rc)
1979 goto out_fail;
1980
1981 if (volume_info->nodfs) {
1982 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
1983 cFYI(1, "DFS disabled (%d)", tcon->Flags);
1984 }
1985 tcon->seal = volume_info->seal;
1986 /* we can have only one retry value for a connection
1987 to a share so for resources mounted more than once
1988 to the same server share the last value passed in
1989 for the retry flag is used */
1990 tcon->retry = volume_info->retry;
1991 tcon->nocase = volume_info->nocase;
1992 tcon->local_lease = volume_info->local_lease;
1993
3f9bcca7 1994 spin_lock(&cifs_tcp_ses_lock);
d00c28de 1995 list_add(&tcon->tcon_list, &ses->tcon_list);
3f9bcca7 1996 spin_unlock(&cifs_tcp_ses_lock);
d00c28de 1997
d03382ce
SJ		 1998 cifs_fscache_get_super_cookie(tcon);
1999
d00c28de
JL		 2000 return tcon;
2001
2002out_fail:
2003 tconInfoFree(tcon);
2004 return ERR_PTR(rc);
2005}
2006
9d002df4
JL		 2007void
2008cifs_put_tlink(struct tcon_link *tlink)
2009{
2010 if (!tlink || IS_ERR(tlink))
2011 return;
2012
2013 if (!atomic_dec_and_test(&tlink->tl_count) ||
2014 test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2015 tlink->tl_time = jiffies;
2016 return;
2017 }
2018
2019 if (!IS_ERR(tlink_tcon(tlink)))
2020 cifs_put_tcon(tlink_tcon(tlink));
2021 kfree(tlink);
2022 return;
2023}
d00c28de 2024
1da177e4 2025int
50c2f753
SF		 2026get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
2027 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
366781c1 2028 struct dfs_info3_param **preferrals, int remap)
1da177e4
LT		 2029{
2030 char *temp_unc;
2031 int rc = 0;
2032
2033 *pnum_referrals = 0;
366781c1 2034 *preferrals = NULL;
1da177e4
LT		 2035
2036 if (pSesInfo->ipc_tid == 0) {
2037 temp_unc = kmalloc(2 /* for slashes */ +
50c2f753
SF		 2038 strnlen(pSesInfo->serverName,
2039 SERVER_NAME_LEN_WITH_NULL * 2)
1da177e4
LT		 2040 + 1 + 4 /* slash IPC$ */ + 2,
2041 GFP_KERNEL);
2042 if (temp_unc == NULL)
2043 return -ENOMEM;
2044 temp_unc[0] = '\\';
2045 temp_unc[1] = '\\';
2046 strcpy(temp_unc + 2, pSesInfo->serverName);
2047 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2048 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
b6b38f70 2049 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
1da177e4
LT		 2050 kfree(temp_unc);
2051 }
2052 if (rc == 0)
c2cf07d5 2053 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
737b758c 2054 pnum_referrals, nls_codepage, remap);
366781c1
SF		 2055 /* BB map targetUNCs to dfs_info3 structures, here or
2056 in CIFSGetDFSRefer BB */
1da177e4
LT		 2057
2058 return rc;
2059}
2060
09e50d55
JL		 2061#ifdef CONFIG_DEBUG_LOCK_ALLOC
2062static struct lock_class_key cifs_key[2];
2063static struct lock_class_key cifs_slock_key[2];
2064
2065static inline void
2066cifs_reclassify_socket4(struct socket *sock)
2067{
2068 struct sock *sk = sock->sk;
2069 BUG_ON(sock_owned_by_user(sk));
2070 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2071 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2072}
2073
2074static inline void
2075cifs_reclassify_socket6(struct socket *sock)
2076{
2077 struct sock *sk = sock->sk;
2078 BUG_ON(sock_owned_by_user(sk));
2079 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2080 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2081}
2082#else
2083static inline void
2084cifs_reclassify_socket4(struct socket *sock)
2085{
2086}
2087
2088static inline void
2089cifs_reclassify_socket6(struct socket *sock)
2090{
2091}
2092#endif
2093
1da177e4 2094/* See RFC1001 section 14 on representation of Netbios names */
50c2f753 2095static void rfc1002mangle(char *target, char *source, unsigned int length)
1da177e4 2096{
50c2f753 2097 unsigned int i, j;
1da177e4 2098
50c2f753 2099 for (i = 0, j = 0; i < (length); i++) {
1da177e4
LT		 2100 /* mask a nibble at a time and encode */
2101 target[j] = 'A' + (0x0F & (source[i] >> 4));
2102 target[j+1] = 'A' + (0x0F & source[i]);
50c2f753 2103 j += 2;
1da177e4
LT		 2104 }
2105
2106}
2107
3eb9a889
BG		 2108static int
2109bind_socket(struct TCP_Server_Info *server)
2110{
2111 int rc = 0;
2112 if (server->srcaddr.ss_family != AF_UNSPEC) {
2113 /* Bind to the specified local IP address */
2114 struct socket *socket = server->ssocket;
2115 rc = socket->ops->bind(socket,
2116 (struct sockaddr *) &server->srcaddr,
2117 sizeof(server->srcaddr));
2118 if (rc < 0) {
2119 struct sockaddr_in *saddr4;
2120 struct sockaddr_in6 *saddr6;
2121 saddr4 = (struct sockaddr_in *)&server->srcaddr;
2122 saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2123 if (saddr6->sin6_family == AF_INET6)
2124 cERROR(1, "cifs: "
2125 "Failed to bind to: %pI6c, error: %d\n",
2126 &saddr6->sin6_addr, rc);
2127 else
2128 cERROR(1, "cifs: "
2129 "Failed to bind to: %pI4, error: %d\n",
2130 &saddr4->sin_addr.s_addr, rc);
2131 }
2132 }
2133 return rc;
2134}
1da177e4
LT		 2135
2136static int
a9f1b85e 2137ip_rfc1001_connect(struct TCP_Server_Info *server)
1da177e4
LT		 2138{
2139 int rc = 0;
a9f1b85e
PS		 2140 /*
2141 * some servers require RFC1001 sessinit before sending
2142 * negprot - BB check reconnection in case where second
2143 * sessinit is sent but no second negprot
2144 */
2145 struct rfc1002_session_packet *ses_init_buf;
2146 struct smb_hdr *smb_buf;
2147 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2148 GFP_KERNEL);
2149 if (ses_init_buf) {
2150 ses_init_buf->trailer.session_req.called_len = 32;
2151
2152 if (server->server_RFC1001_name &&
2153 server->server_RFC1001_name[0] != 0)
2154 rfc1002mangle(ses_init_buf->trailer.
2155 session_req.called_name,
2156 server->server_RFC1001_name,
2157 RFC1001_NAME_LEN_WITH_NULL);
2158 else
2159 rfc1002mangle(ses_init_buf->trailer.
2160 session_req.called_name,
2161 DEFAULT_CIFS_CALLED_NAME,
2162 RFC1001_NAME_LEN_WITH_NULL);
2163
2164 ses_init_buf->trailer.session_req.calling_len = 32;
2165
2166 /*
2167 * calling name ends in null (byte 16) from old smb
2168 * convention.
2169 */
2170 if (server->workstation_RFC1001_name &&
2171 server->workstation_RFC1001_name[0] != 0)
2172 rfc1002mangle(ses_init_buf->trailer.
2173 session_req.calling_name,
2174 server->workstation_RFC1001_name,
2175 RFC1001_NAME_LEN_WITH_NULL);
2176 else
2177 rfc1002mangle(ses_init_buf->trailer.
2178 session_req.calling_name,
2179 "LINUX_CIFS_CLNT",
2180 RFC1001_NAME_LEN_WITH_NULL);
2181
2182 ses_init_buf->trailer.session_req.scope1 = 0;
2183 ses_init_buf->trailer.session_req.scope2 = 0;
2184 smb_buf = (struct smb_hdr *)ses_init_buf;
2185
2186 /* sizeof RFC1002_SESSION_REQUEST with no scope */
2187 smb_buf->smb_buf_length = 0x81000044;
2188 rc = smb_send(server, smb_buf, 0x44);
2189 kfree(ses_init_buf);
2190 /*
2191 * RFC1001 layer in at least one server
2192 * requires very short break before negprot
2193 * presumably because not expecting negprot
2194 * to follow so fast. This is a simple
2195 * solution that works without
2196 * complicating the code and causes no
2197 * significant slowing down on mount
2198 * for everyone else
2199 */
2200 usleep_range(1000, 2000);
2201 }
2202 /*
2203 * else the negprot may still work without this
2204 * even though malloc failed
2205 */
2206
2207 return rc;
2208}
2209
2210static int
2211generic_ip_connect(struct TCP_Server_Info *server)
2212{
2213 int rc = 0;
2214 unsigned short int sport;
2215 int slen, sfamily;
bcf4b106 2216 struct socket *socket = server->ssocket;
a9f1b85e
PS		 2217 struct sockaddr *saddr;
2218
2219 saddr = (struct sockaddr *) &server->dstaddr;
2220
2221 if (server->dstaddr.ss_family == AF_INET6) {
2222 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
2223 slen = sizeof(struct sockaddr_in6);
2224 sfamily = AF_INET6;
2225 } else {
2226 sport = ((struct sockaddr_in *) saddr)->sin_port;
2227 slen = sizeof(struct sockaddr_in);
2228 sfamily = AF_INET;
2229 }
1da177e4 2230
bcf4b106 2231 if (socket == NULL) {
a9f1b85e 2232 rc = sock_create_kern(sfamily, SOCK_STREAM,
bcf4b106 2233 IPPROTO_TCP, &socket);
1da177e4 2234 if (rc < 0) {
b6b38f70 2235 cERROR(1, "Error %d creating socket", rc);
a9f1b85e 2236 server->ssocket = NULL;
1da177e4 2237 return rc;
1da177e4 2238 }
bcf4b106
JL		 2239
2240 /* BB other socket options to set KEEPALIVE, NODELAY? */
b6b38f70 2241 cFYI(1, "Socket created");
bcf4b106
JL		 2242 server->ssocket = socket;
2243 socket->sk->sk_allocation = GFP_NOFS;
a9f1b85e
PS		 2244 if (sfamily == AF_INET6)
2245 cifs_reclassify_socket6(socket);
2246 else
2247 cifs_reclassify_socket4(socket);
1da177e4
LT		 2248 }
2249
3eb9a889
BG		 2250 rc = bind_socket(server);
2251 if (rc < 0)
2252 return rc;
2253
a9f1b85e
PS		 2254 rc = socket->ops->connect(socket, saddr, slen, 0);
2255 if (rc < 0) {
2256 cFYI(1, "Error %d connecting to server", rc);
bcf4b106
JL		 2257 sock_release(socket);
2258 server->ssocket = NULL;
1da177e4
LT		 2259 return rc;
2260 }
bcf4b106 2261
bcf4b106
JL		 2262 /*
2263 * Eventually check for other socket options to change from
a9f1b85e
PS		 2264 * the default. sock_setsockopt not used because it expects
2265 * user space buffer
bcf4b106
JL		 2266 */
2267 socket->sk->sk_rcvtimeo = 7 * HZ;
da505c38 2268 socket->sk->sk_sndtimeo = 5 * HZ;
edf1ae40 2269
b387eaeb 2270 /* make the bufsizes depend on wsize/rsize and max requests */
bcf4b106
JL		 2271 if (server->noautotune) {
2272 if (socket->sk->sk_sndbuf < (200 * 1024))
2273 socket->sk->sk_sndbuf = 200 * 1024;
2274 if (socket->sk->sk_rcvbuf < (140 * 1024))
2275 socket->sk->sk_rcvbuf = 140 * 1024;
edf1ae40 2276 }
1da177e4 2277
6a5fa236 2278 if (server->tcp_nodelay) {
a9f1b85e 2279 int val = 1;
6a5fa236
SF		 2280 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2281 (char *)&val, sizeof(val));
2282 if (rc)
b6b38f70 2283 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
6a5fa236
SF		 2284 }
2285
b6b38f70 2286 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
bcf4b106 2287 socket->sk->sk_sndbuf,
b6b38f70 2288 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
bcf4b106 2289
a9f1b85e
PS		 2290 if (sport == htons(RFC1001_PORT))
2291 rc = ip_rfc1001_connect(server);
50c2f753 2292
1da177e4
LT		 2293 return rc;
2294}
2295
2296static int
a9f1b85e 2297ip_connect(struct TCP_Server_Info *server)
1da177e4 2298{
a9f1b85e
PS		 2299 unsigned short int *sport;
2300 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2301 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1da177e4 2302
a9f1b85e
PS		 2303 if (server->dstaddr.ss_family == AF_INET6)
2304 sport = &addr6->sin6_port;
2305 else
2306 sport = &addr->sin_port;
1da177e4 2307
a9f1b85e
PS		 2308 if (*sport == 0) {
2309 int rc;
1da177e4 2310
a9f1b85e
PS		 2311 /* try with 445 port at first */
2312 *sport = htons(CIFS_PORT);
3eb9a889 2313
a9f1b85e 2314 rc = generic_ip_connect(server);
1da177e4 2315 if (rc >= 0)
a9f1b85e 2316 return rc;
6a5fa236 2317
a9f1b85e
PS		 2318 /* if it failed, try with 139 port */
2319 *sport = htons(RFC1001_PORT);
6a5fa236
SF		 2320 }
2321
a9f1b85e 2322 return generic_ip_connect(server);
1da177e4
LT		 2323}
2324
50c2f753
SF		 2325void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
2326 struct super_block *sb, struct smb_vol *vol_info)
8af18971
SF		 2327{
2328 /* if we are reconnecting then should we check to see if
2329 * any requested capabilities changed locally e.g. via
2330 * remount but we can not do much about it here
2331 * if they have (even if we could detect it by the following)
2332 * Perhaps we could add a backpointer to array of sb from tcon
2333 * or if we change to make all sb to same share the same
2334 * sb as NFS - then we only have one backpointer to sb.
2335 * What if we wanted to mount the server share twice once with
2336 * and once without posixacls or posix paths? */
2337 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
50c2f753 2338
c18c842b
SF		 2339 if (vol_info && vol_info->no_linux_ext) {
2340 tcon->fsUnixInfo.Capability = 0;
2341 tcon->unix_ext = 0; /* Unix Extensions disabled */
b6b38f70 2342 cFYI(1, "Linux protocol extensions disabled");
c18c842b
SF		 2343 return;
2344 } else if (vol_info)
2345 tcon->unix_ext = 1; /* Unix Extensions supported */
2346
2347 if (tcon->unix_ext == 0) {
b6b38f70 2348 cFYI(1, "Unix extensions disabled so not set on reconnect");
c18c842b
SF		 2349 return;
2350 }
50c2f753 2351
fb8c4b14 2352 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
8af18971 2353 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
50c2f753 2354
8af18971
SF		 2355 /* check for reconnect case in which we do not
2356 want to change the mount behavior if we can avoid it */
fb8c4b14 2357 if (vol_info == NULL) {
50c2f753 2358 /* turn off POSIX ACL and PATHNAMES if not set
8af18971
SF		 2359 originally at mount time */
2360 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2361 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
11b6d645
IM		 2362 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2363 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
b6b38f70 2364 cERROR(1, "POSIXPATH support change");
8af18971 2365 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
11b6d645 2366 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
b6b38f70
JP		 2367 cERROR(1, "possible reconnect error");
2368 cERROR(1, "server disabled POSIX path support");
11b6d645 2369 }
8af18971 2370 }
50c2f753 2371
8af18971 2372 cap &= CIFS_UNIX_CAP_MASK;
75865f8c 2373 if (vol_info && vol_info->no_psx_acl)
8af18971 2374 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
75865f8c 2375 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
b6b38f70 2376 cFYI(1, "negotiated posix acl support");
fb8c4b14 2377 if (sb)
8af18971
SF		 2378 sb->s_flags |= MS_POSIXACL;
2379 }
2380
75865f8c 2381 if (vol_info && vol_info->posix_paths == 0)
8af18971 2382 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
75865f8c 2383 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
b6b38f70 2384 cFYI(1, "negotiate posix pathnames");
75865f8c 2385 if (sb)
50c2f753 2386 CIFS_SB(sb)->mnt_cifs_flags |=
8af18971
SF		 2387 CIFS_MOUNT_POSIX_PATHS;
2388 }
50c2f753 2389
984acfe1
SF		 2390 /* We might be setting the path sep back to a different
2391 form if we are reconnecting and the server switched its
50c2f753 2392 posix path capability for this share */
75865f8c 2393 if (sb && (CIFS_SB(sb)->prepathlen > 0))
984acfe1 2394 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
75865f8c
SF		 2395
2396 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2397 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2398 CIFS_SB(sb)->rsize = 127 * 1024;
b6b38f70 2399 cFYI(DBG2, "larger reads not supported by srv");
75865f8c
SF		 2400 }
2401 }
50c2f753
SF		 2402
2403
b6b38f70 2404 cFYI(1, "Negotiate caps 0x%x", (int)cap);
8af18971 2405#ifdef CONFIG_CIFS_DEBUG2
75865f8c 2406 if (cap & CIFS_UNIX_FCNTL_CAP)
b6b38f70 2407 cFYI(1, "FCNTL cap");
75865f8c 2408 if (cap & CIFS_UNIX_EXTATTR_CAP)
b6b38f70 2409 cFYI(1, "EXTATTR cap");
75865f8c 2410 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
b6b38f70 2411 cFYI(1, "POSIX path cap");
75865f8c 2412 if (cap & CIFS_UNIX_XATTR_CAP)
b6b38f70 2413 cFYI(1, "XATTR cap");
75865f8c 2414 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
b6b38f70 2415 cFYI(1, "POSIX ACL cap");
75865f8c 2416 if (cap & CIFS_UNIX_LARGE_READ_CAP)
b6b38f70 2417 cFYI(1, "very large read cap");
75865f8c 2418 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
b6b38f70 2419 cFYI(1, "very large write cap");
8af18971
SF		 2420#endif /* CIFS_DEBUG2 */
2421 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
442aa310 2422 if (vol_info == NULL) {
b6b38f70 2423 cFYI(1, "resetting capabilities failed");
442aa310 2424 } else
b6b38f70 2425 cERROR(1, "Negotiating Unix capabilities "
5a44b319
SF		 2426 "with the server failed. Consider "
2427 "mounting with the Unix Extensions\n"
2428 "disabled, if problems are found, "
2429 "by specifying the nounix mount "
b6b38f70 2430 "option.");
5a44b319 2431
8af18971
SF		 2432 }
2433 }
2434}
2435
03a143c9
SF		 2436static void
2437convert_delimiter(char *path, char delim)
2438{
2439 int i;
c2d68ea6 2440 char old_delim;
03a143c9
SF		 2441
2442 if (path == NULL)
2443 return;
2444
582d21e5 2445 if (delim == '/')
c2d68ea6
SF		 2446 old_delim = '\\';
2447 else
2448 old_delim = '/';
2449
03a143c9 2450 for (i = 0; path[i] != '\0'; i++) {
c2d68ea6 2451 if (path[i] == old_delim)
03a143c9
SF		 2452 path[i] = delim;
2453 }
2454}
2455
3b795210
SF		 2456static void setup_cifs_sb(struct smb_vol *pvolume_info,
2457 struct cifs_sb_info *cifs_sb)
b1c8d2b4 2458{
2de970ff
JL		 2459 INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2460
3b795210 2461 if (pvolume_info->rsize > CIFSMaxBufSize) {
b6b38f70
JP		 2462 cERROR(1, "rsize %d too large, using MaxBufSize",
2463 pvolume_info->rsize);
3b795210
SF		 2464 cifs_sb->rsize = CIFSMaxBufSize;
2465 } else if ((pvolume_info->rsize) &&
2466 (pvolume_info->rsize <= CIFSMaxBufSize))
2467 cifs_sb->rsize = pvolume_info->rsize;
2468 else /* default */
2469 cifs_sb->rsize = CIFSMaxBufSize;
2470
2471 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
b6b38f70
JP		 2472 cERROR(1, "wsize %d too large, using 4096 instead",
2473 pvolume_info->wsize);
3b795210
SF		 2474 cifs_sb->wsize = 4096;
2475 } else if (pvolume_info->wsize)
2476 cifs_sb->wsize = pvolume_info->wsize;
2477 else
2478 cifs_sb->wsize = min_t(const int,
2479 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2480 127*1024);
2481 /* old default of CIFSMaxBufSize was too small now
2482 that SMB Write2 can send multiple pages in kvec.
2483 RFC1001 does not describe what happens when frame
2484 bigger than 128K is sent so use that as max in
2485 conjunction with 52K kvec constraint on arch with 4K
2486 page size */
2487
2488 if (cifs_sb->rsize < 2048) {
2489 cifs_sb->rsize = 2048;
2490 /* Windows ME may prefer this */
b6b38f70 2491 cFYI(1, "readsize set to minimum: 2048");
3b795210
SF		 2492 }
2493 /* calculate prepath */
2494 cifs_sb->prepath = pvolume_info->prepath;
2495 if (cifs_sb->prepath) {
2496 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2497 /* we can not convert the / to \ in the path
2498 separators in the prefixpath yet because we do not
2499 know (until reset_cifs_unix_caps is called later)
2500 whether POSIX PATH CAP is available. We normalize
2501 the / to \ after reset_cifs_unix_caps is called */
2502 pvolume_info->prepath = NULL;
2503 } else
2504 cifs_sb->prepathlen = 0;
2505 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2506 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2507 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2508 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
b6b38f70
JP		 2509 cFYI(1, "file mode: 0x%x dir mode: 0x%x",
2510 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
3b795210 2511
6d20e840
SJ		 2512 cifs_sb->actimeo = pvolume_info->actimeo;
2513
3b795210
SF		 2514 if (pvolume_info->noperm)
2515 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2516 if (pvolume_info->setuids)
2517 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2518 if (pvolume_info->server_ino)
2519 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2520 if (pvolume_info->remap)
2521 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2522 if (pvolume_info->no_xattr)
2523 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2524 if (pvolume_info->sfu_emul)
2525 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2526 if (pvolume_info->nobrl)
2527 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
be652445 2528 if (pvolume_info->nostrictsync)
4717bed6 2529 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
13a6e42a
SF		 2530 if (pvolume_info->mand_lock)
2531 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
3b795210
SF		 2532 if (pvolume_info->cifs_acl)
2533 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2534 if (pvolume_info->override_uid)
2535 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2536 if (pvolume_info->override_gid)
2537 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2538 if (pvolume_info->dynperm)
2539 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
fa1df75d
SJ		 2540 if (pvolume_info->fsc)
2541 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
0eb8a132
JL		 2542 if (pvolume_info->multiuser)
2543 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2544 CIFS_MOUNT_NO_PERM);
3b795210 2545 if (pvolume_info->direct_io) {
b6b38f70 2546 cFYI(1, "mounting share using direct i/o");
3b795210
SF		 2547 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2548 }
736a3320
SM		 2549 if (pvolume_info->mfsymlinks) {
2550 if (pvolume_info->sfu_emul) {
2551 cERROR(1, "mount option mfsymlinks ignored if sfu "
2552 "mount option is used");
2553 } else {
2554 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2555 }
2556 }
3b795210
SF		 2557
2558 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
b6b38f70
JP		 2559 cERROR(1, "mount option dynperm ignored if cifsacl "
2560 "mount option supported");
b1c8d2b4
JL		 2561}
2562
e4cce94c
IM		 2563static int
2564is_path_accessible(int xid, struct cifsTconInfo *tcon,
2565 struct cifs_sb_info *cifs_sb, const char *full_path)
2566{
2567 int rc;
e4cce94c
IM		 2568 FILE_ALL_INFO *pfile_info;
2569
e4cce94c
IM		 2570 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2571 if (pfile_info == NULL)
2572 return -ENOMEM;
2573
2574 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2575 0 /* not legacy */, cifs_sb->local_nls,
2576 cifs_sb->mnt_cifs_flags &
2577 CIFS_MOUNT_MAP_SPECIAL_CHR);
2578 kfree(pfile_info);
2579 return rc;
2580}
2581
1bfe73c2
IM		 2582static void
2583cleanup_volume_info(struct smb_vol **pvolume_info)
2584{
2585 struct smb_vol *volume_info;
2586
ad6cca6d 2587 if (!pvolume_info || !*pvolume_info)
1bfe73c2
IM		 2588 return;
2589
2590 volume_info = *pvolume_info;
2591 kzfree(volume_info->password);
2592 kfree(volume_info->UNC);
2593 kfree(volume_info->prepath);
2594 kfree(volume_info);
2595 *pvolume_info = NULL;
2596 return;
2597}
2598
2d6d589d 2599#ifdef CONFIG_CIFS_DFS_UPCALL
1bfe73c2
IM		 2600/* build_path_to_root returns full path to root when
2601 * we do not have an exiting connection (tcon) */
2602static char *
2603build_unc_path_to_root(const struct smb_vol *volume_info,
2604 const struct cifs_sb_info *cifs_sb)
2605{
2606 char *full_path;
2607
2608 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2609 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2610 if (full_path == NULL)
2611 return ERR_PTR(-ENOMEM);
2612
2613 strncpy(full_path, volume_info->UNC, unc_len);
2614 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2615 int i;
2616 for (i = 0; i < unc_len; i++) {
2617 if (full_path[i] == '\\')
2618 full_path[i] = '/';
2619 }
2620 }
2621
2622 if (cifs_sb->prepathlen)
2623 strncpy(full_path + unc_len, cifs_sb->prepath,
2624 cifs_sb->prepathlen);
2625
2626 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2627 return full_path;
2628}
2d6d589d 2629#endif
1bfe73c2 2630
1da177e4
LT		 2631int
2632cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
1bfe73c2 2633 char *mount_data_global, const char *devname)
1da177e4 2634{
a2934c7b 2635 int rc;
1da177e4 2636 int xid;
7586b765 2637 struct smb_vol *volume_info;
a2934c7b
JL		 2638 struct cifsSesInfo *pSesInfo;
2639 struct cifsTconInfo *tcon;
2640 struct TCP_Server_Info *srvTcp;
e4cce94c 2641 char *full_path;
2d6d589d 2642 char *mount_data = mount_data_global;
9d002df4 2643 struct tcon_link *tlink;
2d6d589d 2644#ifdef CONFIG_CIFS_DFS_UPCALL
1bfe73c2
IM		 2645 struct dfs_info3_param *referrals = NULL;
2646 unsigned int num_referrals = 0;
5c2503a8 2647 int referral_walks_count = 0;
1bfe73c2 2648try_mount_again:
2d6d589d 2649#endif
a2934c7b
JL		 2650 rc = 0;
2651 tcon = NULL;
2652 pSesInfo = NULL;
2653 srvTcp = NULL;
1bfe73c2 2654 full_path = NULL;
9d002df4 2655 tlink = NULL;
1da177e4
LT		 2656
2657 xid = GetXid();
2658
7586b765
JL		 2659 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2660 if (!volume_info) {
2661 rc = -ENOMEM;
2662 goto out;
2663 }
50c2f753 2664
7586b765 2665 if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
70fe7dc0
JL		 2666 rc = -EINVAL;
2667 goto out;
1da177e4
LT		 2668 }
2669
7586b765 2670 if (volume_info->nullauth) {
b6b38f70 2671 cFYI(1, "null user");
7586b765
JL		 2672 volume_info->username = "";
2673 } else if (volume_info->username) {
1da177e4 2674 /* BB fixme parse for domain name here */
b6b38f70 2675 cFYI(1, "Username: %s", volume_info->username);
1da177e4 2676 } else {
bf820679 2677 cifserror("No username specified");
50c2f753
SF		 2678 /* In userspace mount helper we can get user name from alternate
2679 locations such as env variables and files on disk */
70fe7dc0
JL		 2680 rc = -EINVAL;
2681 goto out;
1da177e4
LT		 2682 }
2683
1da177e4 2684 /* this is needed for ASCII cp to Unicode converts */
7586b765 2685 if (volume_info->iocharset == NULL) {
a5fc4ce0
JL		 2686 /* load_nls_default cannot return null */
2687 volume_info->local_nls = load_nls_default();
1da177e4 2688 } else {
a5fc4ce0
JL		 2689 volume_info->local_nls = load_nls(volume_info->iocharset);
2690 if (volume_info->local_nls == NULL) {
b6b38f70
JP		 2691 cERROR(1, "CIFS mount error: iocharset %s not found",
2692 volume_info->iocharset);
70fe7dc0
JL		 2693 rc = -ELIBACC;
2694 goto out;
1da177e4
LT		 2695 }
2696 }
a5fc4ce0 2697 cifs_sb->local_nls = volume_info->local_nls;
1da177e4 2698
63c038c2 2699 /* get a reference to a tcp session */
7586b765 2700 srvTcp = cifs_get_tcp_session(volume_info);
63c038c2
JL		 2701 if (IS_ERR(srvTcp)) {
2702 rc = PTR_ERR(srvTcp);
2703 goto out;
1da177e4
LT		 2704 }
2705
36988c76
JL		 2706 /* get a reference to a SMB session */
2707 pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
2708 if (IS_ERR(pSesInfo)) {
2709 rc = PTR_ERR(pSesInfo);
2710 pSesInfo = NULL;
2711 goto mount_fail_check;
1da177e4 2712 }
50c2f753 2713
d00c28de
JL		 2714 setup_cifs_sb(volume_info, cifs_sb);
2715 if (pSesInfo->capabilities & CAP_LARGE_FILES)
2716 sb->s_maxbytes = MAX_LFS_FILESIZE;
2717 else
2718 sb->s_maxbytes = MAX_NON_LFS;
1da177e4 2719
8af18971 2720 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
1da177e4
LT		 2721 sb->s_time_gran = 100;
2722
d00c28de
JL		 2723 /* search for existing tcon to this server share */
2724 tcon = cifs_get_tcon(pSesInfo, volume_info);
2725 if (IS_ERR(tcon)) {
2726 rc = PTR_ERR(tcon);
2727 tcon = NULL;
1bfe73c2 2728 goto remote_path_check;
d00c28de 2729 }
1bfe73c2 2730
d82c2df5
SF		 2731 /* do not care if following two calls succeed - informational */
2732 if (!tcon->ipc) {
2733 CIFSSMBQFSDeviceInfo(xid, tcon);
2734 CIFSSMBQFSAttributeInfo(xid, tcon);
2735 }
03a143c9 2736
d82c2df5
SF		 2737 /* tell server which Unix caps we support */
2738 if (tcon->ses->capabilities & CAP_UNIX)
2739 /* reset of caps checks mount to see if unix extensions
2740 disabled for just this mount */
7586b765 2741 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
d82c2df5
SF		 2742 else
2743 tcon->unix_ext = 0; /* server does not support them */
c18c842b 2744
d82c2df5
SF		 2745 /* convert forward to back slashes in prepath here if needed */
2746 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2747 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
03a143c9 2748
d82c2df5
SF		 2749 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2750 cifs_sb->rsize = 1024 * 127;
b6b38f70 2751 cFYI(DBG2, "no very large read support, rsize now 127K");
1da177e4 2752 }
d82c2df5
SF		 2753 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2754 cifs_sb->wsize = min(cifs_sb->wsize,
2755 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2756 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2757 cifs_sb->rsize = min(cifs_sb->rsize,
2758 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
1da177e4 2759
1bfe73c2
IM		 2760remote_path_check:
2761 /* check if a whole path (including prepath) is not remote */
2762 if (!rc && cifs_sb->prepathlen && tcon) {
e4cce94c 2763 /* build_path_to_root works only when we have a valid tcon */
7d161b7f 2764 full_path = cifs_build_path_to_root(cifs_sb, tcon);
e4cce94c
IM		 2765 if (full_path == NULL) {
2766 rc = -ENOMEM;
2767 goto mount_fail_check;
2768 }
2769 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
03ceace5 2770 if (rc != 0 && rc != -EREMOTE) {
e4cce94c
IM		 2771 kfree(full_path);
2772 goto mount_fail_check;
2773 }
2774 kfree(full_path);
2775 }
2776
1bfe73c2
IM		 2777 /* get referral if needed */
2778 if (rc == -EREMOTE) {
d036f50f 2779#ifdef CONFIG_CIFS_DFS_UPCALL
5c2503a8
IM		 2780 if (referral_walks_count > MAX_NESTED_LINKS) {
2781 /*
2782 * BB: when we implement proper loop detection,
2783 * we will remove this check. But now we need it
2784 * to prevent an indefinite loop if 'DFS tree' is
2785 * misconfigured (i.e. has loops).
2786 */
2787 rc = -ELOOP;
2788 goto mount_fail_check;
2789 }
1bfe73c2
IM		 2790 /* convert forward to back slashes in prepath here if needed */
2791 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2792 convert_delimiter(cifs_sb->prepath,
2793 CIFS_DIR_SEP(cifs_sb));
2794 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2795 if (IS_ERR(full_path)) {
2796 rc = PTR_ERR(full_path);
2797 goto mount_fail_check;
2798 }
2799
b6b38f70 2800 cFYI(1, "Getting referral for: %s", full_path);
1bfe73c2
IM		 2801 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2802 cifs_sb->local_nls, &num_referrals, &referrals,
2803 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2804 if (!rc && num_referrals > 0) {
2805 char *fake_devname = NULL;
2806
2807 if (mount_data != mount_data_global)
2808 kfree(mount_data);
7b91e266 2809
1bfe73c2
IM		 2810 mount_data = cifs_compose_mount_options(
2811 cifs_sb->mountdata, full_path + 1,
2812 referrals, &fake_devname);
7b91e266 2813
1bfe73c2 2814 free_dfs_info_array(referrals, num_referrals);
7b91e266
JL		 2815 kfree(fake_devname);
2816 kfree(full_path);
2817
2818 if (IS_ERR(mount_data)) {
2819 rc = PTR_ERR(mount_data);
2820 mount_data = NULL;
2821 goto mount_fail_check;
2822 }
1bfe73c2
IM		 2823
2824 if (tcon)
2825 cifs_put_tcon(tcon);
2826 else if (pSesInfo)
2827 cifs_put_smb_ses(pSesInfo);
2828
2829 cleanup_volume_info(&volume_info);
5c2503a8 2830 referral_walks_count++;
a2934c7b 2831 FreeXid(xid);
1bfe73c2
IM		 2832 goto try_mount_again;
2833 }
d036f50f
SF		 2834#else /* No DFS support, return error on mount */
2835 rc = -EOPNOTSUPP;
2836#endif
1bfe73c2
IM		 2837 }
2838
9d002df4
JL		 2839 if (rc)
2840 goto mount_fail_check;
2841
2842 /* now, hang the tcon off of the superblock */
2843 tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
2844 if (tlink == NULL) {
2845 rc = -ENOMEM;
2846 goto mount_fail_check;
2847 }
2848
b647c35f 2849 tlink->tl_uid = pSesInfo->linux_uid;
9d002df4
JL		 2850 tlink->tl_tcon = tcon;
2851 tlink->tl_time = jiffies;
2852 set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
2853 set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
2854
b647c35f 2855 cifs_sb->master_tlink = tlink;
9d002df4 2856 spin_lock(&cifs_sb->tlink_tree_lock);
b647c35f 2857 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
9d002df4 2858 spin_unlock(&cifs_sb->tlink_tree_lock);
413e661c 2859
2de970ff
JL		 2860 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
2861 TLINK_IDLE_EXPIRE);
2862
1bfe73c2
IM		 2863mount_fail_check:
2864 /* on error free sesinfo and tcon struct if needed */
2865 if (rc) {
2866 if (mount_data != mount_data_global)
2867 kfree(mount_data);
2868 /* If find_unc succeeded then rc == 0 so we can not end */
2869 /* up accidently freeing someone elses tcon struct */
2870 if (tcon)
2871 cifs_put_tcon(tcon);
2872 else if (pSesInfo)
2873 cifs_put_smb_ses(pSesInfo);
2874 else
2875 cifs_put_tcp_session(srvTcp);
2876 goto out;
2877 }
2878
7586b765 2879 /* volume_info->password is freed above when existing session found
1da177e4
LT		 2880 (in which case it is not needed anymore) but when new sesion is created
2881 the password ptr is put in the new session structure (in which case the
2882 password will be freed at unmount time) */
70fe7dc0
JL		 2883out:
2884 /* zero out password before freeing */
1bfe73c2 2885 cleanup_volume_info(&volume_info);
1da177e4
LT		 2886 FreeXid(xid);
2887 return rc;
2888}
2889
1da177e4
LT		 2890int
2891CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2892 const char *tree, struct cifsTconInfo *tcon,
2893 const struct nls_table *nls_codepage)
2894{
2895 struct smb_hdr *smb_buffer;
2896 struct smb_hdr *smb_buffer_response;
2897 TCONX_REQ *pSMB;
2898 TCONX_RSP *pSMBr;
2899 unsigned char *bcc_ptr;
2900 int rc = 0;
cc20c031 2901 int length, bytes_left;
1da177e4
LT		 2902 __u16 count;
2903
2904 if (ses == NULL)
2905 return -EIO;
2906
2907 smb_buffer = cifs_buf_get();
ca43e3be 2908 if (smb_buffer == NULL)
1da177e4 2909 return -ENOMEM;
ca43e3be 2910
1da177e4
LT		 2911 smb_buffer_response = smb_buffer;
2912
2913 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2914 NULL /*no tid */ , 4 /*wct */ );
1982c344
SF		 2915
2916 smb_buffer->Mid = GetNextMid(ses->server);
1da177e4
LT		 2917 smb_buffer->Uid = ses->Suid;
2918 pSMB = (TCONX_REQ *) smb_buffer;
2919 pSMBr = (TCONX_RSP *) smb_buffer_response;
2920
2921 pSMB->AndXCommand = 0xFF;
2922 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
1da177e4 2923 bcc_ptr = &pSMB->Password[0];
fb8c4b14 2924 if ((ses->server->secMode) & SECMODE_USER) {
eeac8047 2925 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
7c7b25bc 2926 *bcc_ptr = 0; /* password is null byte */
eeac8047 2927 bcc_ptr++; /* skip password */
7c7b25bc 2928 /* already aligned so no need to do it below */
eeac8047 2929 } else {
7c7b25bc 2930 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
eeac8047
SF		 2931 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2932 specified as required (when that support is added to
2933 the vfs in the future) as only NTLM or the much
7c7b25bc 2934 weaker LANMAN (which we do not send by default) is accepted
eeac8047
SF		 2935 by Samba (not sure whether other servers allow
2936 NTLMv2 password here) */
7c7b25bc 2937#ifdef CONFIG_CIFS_WEAK_PW_HASH
04912d6a 2938 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
00e485b0 2939 (ses->server->secType == LANMAN))
d3ba50b1 2940 calc_lanman_hash(tcon->password, ses->server->cryptkey,
4e53a3fb
JL		 2941 ses->server->secMode &
2942 SECMODE_PW_ENCRYPT ? true : false,
2943 bcc_ptr);
7c7b25bc
SF		 2944 else
2945#endif /* CIFS_WEAK_PW_HASH */
d3ba50b1 2946 SMBNTencrypt(tcon->password, ses->server->cryptkey, bcc_ptr);
eeac8047 2947
7c7b25bc 2948 bcc_ptr += CIFS_SESS_KEY_SIZE;
fb8c4b14 2949 if (ses->capabilities & CAP_UNICODE) {
7c7b25bc
SF		 2950 /* must align unicode strings */
2951 *bcc_ptr = 0; /* null byte password */
2952 bcc_ptr++;
2953 }
eeac8047 2954 }
1da177e4 2955
50c2f753 2956 if (ses->server->secMode &
a878fb22 2957 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
1da177e4
LT		 2958 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2959
2960 if (ses->capabilities & CAP_STATUS32) {
2961 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2962 }
2963 if (ses->capabilities & CAP_DFS) {
2964 smb_buffer->Flags2 |= SMBFLG2_DFS;
2965 }
2966 if (ses->capabilities & CAP_UNICODE) {
2967 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2968 length =
50c2f753
SF		 2969 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2970 6 /* max utf8 char length in bytes */ *
a878fb22
SF		 2971 (/* server len*/ + 256 /* share len */), nls_codepage);
2972 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
1da177e4
LT		 2973 bcc_ptr += 2; /* skip trailing null */
2974 } else { /* ASCII */
1da177e4
LT		 2975 strcpy(bcc_ptr, tree);
2976 bcc_ptr += strlen(tree) + 1;
2977 }
2978 strcpy(bcc_ptr, "?????");
2979 bcc_ptr += strlen("?????");
2980 bcc_ptr += 1;
2981 count = bcc_ptr - &pSMB->Password[0];
2982 pSMB->hdr.smb_buf_length += count;
2983 pSMB->ByteCount = cpu_to_le16(count);
2984
133672ef
SF		 2985 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2986 CIFS_STD_OP);
1da177e4 2987
1da177e4
LT		 2988 /* above now done in SendReceive */
2989 if ((rc == 0) && (tcon != NULL)) {
0e0d2cf3
SF		 2990 bool is_unicode;
2991
1da177e4 2992 tcon->tidStatus = CifsGood;
3b795210 2993 tcon->need_reconnect = false;
1da177e4
LT		 2994 tcon->tid = smb_buffer_response->Tid;
2995 bcc_ptr = pByteArea(smb_buffer_response);
cc20c031
JL		 2996 bytes_left = BCC(smb_buffer_response);
2997 length = strnlen(bcc_ptr, bytes_left - 2);
0e0d2cf3
SF		 2998 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
2999 is_unicode = true;
3000 else
3001 is_unicode = false;
3002
cc20c031 3003
50c2f753 3004 /* skip service field (NB: this field is always ASCII) */
7f8ed420
SF		 3005 if (length == 3) {
3006 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3007 (bcc_ptr[2] == 'C')) {
b6b38f70 3008 cFYI(1, "IPC connection");
7f8ed420
SF		 3009 tcon->ipc = 1;
3010 }
3011 } else if (length == 2) {
3012 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3013 /* the most common case */
b6b38f70 3014 cFYI(1, "disk share connection");
7f8ed420
SF		 3015 }
3016 }
50c2f753 3017 bcc_ptr += length + 1;
cc20c031 3018 bytes_left -= (length + 1);
1da177e4 3019 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
cc20c031
JL		 3020
3021 /* mostly informational -- no need to fail on error here */
90a98b2f 3022 kfree(tcon->nativeFileSystem);
d185cda7 3023 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
0e0d2cf3 3024 bytes_left, is_unicode,
cc20c031
JL		 3025 nls_codepage);
3026
b6b38f70 3027 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
cc20c031 3028
fb8c4b14 3029 if ((smb_buffer_response->WordCount == 3) ||
1a4e15a0
SF		 3030 (smb_buffer_response->WordCount == 7))
3031 /* field is in same location */
3979877e
SF		 3032 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3033 else
3034 tcon->Flags = 0;
b6b38f70 3035 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
1da177e4 3036 } else if ((rc == 0) && tcon == NULL) {
50c2f753 3037 /* all we need to save for IPC$ connection */
1da177e4
LT		 3038 ses->ipc_tid = smb_buffer_response->Tid;
3039 }
3040
a8a11d39 3041 cifs_buf_release(smb_buffer);
1da177e4
LT		 3042 return rc;
3043}
3044
3045int
3046cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
3047{
b647c35f
JL		 3048 struct rb_root *root = &cifs_sb->tlink_tree;
3049 struct rb_node *node;
3050 struct tcon_link *tlink;
50c2f753 3051 char *tmp;
9d002df4 3052
2de970ff
JL		 3053 cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3054
b647c35f
JL		 3055 spin_lock(&cifs_sb->tlink_tree_lock);
3056 while ((node = rb_first(root))) {
3057 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3058 cifs_get_tlink(tlink);
3059 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3060 rb_erase(node, root);
1da177e4 3061
b647c35f
JL		 3062 spin_unlock(&cifs_sb->tlink_tree_lock);
3063 cifs_put_tlink(tlink);
3064 spin_lock(&cifs_sb->tlink_tree_lock);
3065 }
3066 spin_unlock(&cifs_sb->tlink_tree_lock);
50c2f753 3067
2fe87f02
SF		 3068 tmp = cifs_sb->prepath;
3069 cifs_sb->prepathlen = 0;
3070 cifs_sb->prepath = NULL;
3071 kfree(tmp);
1da177e4 3072
9d002df4 3073 return 0;
50c2f753 3074}
1da177e4 3075
198b5682 3076int cifs_negotiate_protocol(unsigned int xid, struct cifsSesInfo *ses)
1da177e4
LT		 3077{
3078 int rc = 0;
198b5682 3079 struct TCP_Server_Info *server = ses->server;
1da177e4 3080
198b5682
JL		 3081 /* only send once per connect */
3082 if (server->maxBuf != 0)
3083 return 0;
3084
3085 rc = CIFSSMBNegotiate(xid, ses);
3086 if (rc == -EAGAIN) {
3087 /* retry only once on 1st time connection */
3088 rc = CIFSSMBNegotiate(xid, ses);
3089 if (rc == -EAGAIN)
3090 rc = -EHOSTDOWN;
1da177e4 3091 }
198b5682
JL		 3092 if (rc == 0) {
3093 spin_lock(&GlobalMid_Lock);
3094 if (server->tcpStatus != CifsExiting)
3095 server->tcpStatus = CifsGood;
3096 else
3097 rc = -EHOSTDOWN;
3098 spin_unlock(&GlobalMid_Lock);
26b994fa 3099
198b5682
JL		 3100 }
3101
3102 return rc;
3103}
3104
3105
3106int cifs_setup_session(unsigned int xid, struct cifsSesInfo *ses,
3107 struct nls_table *nls_info)
3108{
3109 int rc = 0;
3110 struct TCP_Server_Info *server = ses->server;
26b994fa 3111
198b5682
JL		 3112 ses->flags = 0;
3113 ses->capabilities = server->capabilities;
26b994fa 3114 if (linuxExtEnabled == 0)
198b5682 3115 ses->capabilities &= (~CAP_UNIX);
20418acd 3116
b6b38f70
JP		 3117 cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3118 server->secMode, server->capabilities, server->timeAdj);
cb7691b6 3119
198b5682 3120 rc = CIFS_SessSetup(xid, ses, nls_info);
26b994fa 3121 if (rc) {
b6b38f70 3122 cERROR(1, "Send error in SessSetup = %d", rc);
26b994fa 3123 } else {
5d0d2882
SP		 3124 mutex_lock(&ses->server->srv_mutex);
3125 if (!server->session_estab) {
21e73393 3126 server->session_key.response = ses->auth_key.response;
5d0d2882 3127 server->session_key.len = ses->auth_key.len;
21e73393
SP		 3128 server->sequence_number = 0x2;
3129 server->session_estab = true;
3130 ses->auth_key.response = NULL;
5d0d2882
SP		 3131 }
3132 mutex_unlock(&server->srv_mutex);
3133
b6b38f70 3134 cFYI(1, "CIFS Session Established successfully");
20418acd 3135 spin_lock(&GlobalMid_Lock);
198b5682
JL		 3136 ses->status = CifsGood;
3137 ses->need_reconnect = false;
20418acd 3138 spin_unlock(&GlobalMid_Lock);
1da177e4 3139 }
26b994fa 3140
21e73393
SP		 3141 kfree(ses->auth_key.response);
3142 ses->auth_key.response = NULL;
3143 ses->auth_key.len = 0;
d3686d54
SP		 3144 kfree(ses->ntlmssp);
3145 ses->ntlmssp = NULL;
21e73393 3146
1da177e4
LT		 3147 return rc;
3148}
3149
d2445556 3150static struct cifsTconInfo *
9d002df4
JL		 3151cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3152{
3153 struct cifsTconInfo *master_tcon = cifs_sb_master_tcon(cifs_sb);
3154 struct cifsSesInfo *ses;
3155 struct cifsTconInfo *tcon = NULL;
3156 struct smb_vol *vol_info;
3157 char username[MAX_USERNAME_SIZE + 1];
3158
3159 vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3160 if (vol_info == NULL) {
3161 tcon = ERR_PTR(-ENOMEM);
3162 goto out;
3163 }
3164
3165 snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3166 vol_info->username = username;
3167 vol_info->local_nls = cifs_sb->local_nls;
3168 vol_info->linux_uid = fsuid;
3169 vol_info->cred_uid = fsuid;
3170 vol_info->UNC = master_tcon->treeName;
3171 vol_info->retry = master_tcon->retry;
3172 vol_info->nocase = master_tcon->nocase;
3173 vol_info->local_lease = master_tcon->local_lease;
3174 vol_info->no_linux_ext = !master_tcon->unix_ext;
3175
3176 /* FIXME: allow for other secFlg settings */
3177 vol_info->secFlg = CIFSSEC_MUST_KRB5;
3178
3179 /* get a reference for the same TCP session */
3f9bcca7 3180 spin_lock(&cifs_tcp_ses_lock);
9d002df4 3181 ++master_tcon->ses->server->srv_count;
3f9bcca7 3182 spin_unlock(&cifs_tcp_ses_lock);
9d002df4
JL		 3183
3184 ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3185 if (IS_ERR(ses)) {
3186 tcon = (struct cifsTconInfo *)ses;
3187 cifs_put_tcp_session(master_tcon->ses->server);
3188 goto out;
3189 }
3190
3191 tcon = cifs_get_tcon(ses, vol_info);
3192 if (IS_ERR(tcon)) {
3193 cifs_put_smb_ses(ses);
3194 goto out;
3195 }
3196
3197 if (ses->capabilities & CAP_UNIX)
3198 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3199out:
3200 kfree(vol_info);
3201
3202 return tcon;
3203}
3204
413e661c 3205static inline struct tcon_link *
9d002df4
JL		 3206cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
3207{
413e661c 3208 return cifs_sb->master_tlink;
9d002df4
JL		 3209}
3210
3211struct cifsTconInfo *
3212cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3213{
3214 return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3215}
3216
3217static int
3218cifs_sb_tcon_pending_wait(void *unused)
3219{
3220 schedule();
3221 return signal_pending(current) ? -ERESTARTSYS : 0;
3222}
3223
b647c35f
JL		 3224/* find and return a tlink with given uid */
3225static struct tcon_link *
3226tlink_rb_search(struct rb_root *root, uid_t uid)
3227{
3228 struct rb_node *node = root->rb_node;
3229 struct tcon_link *tlink;
3230
3231 while (node) {
3232 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3233
3234 if (tlink->tl_uid > uid)
3235 node = node->rb_left;
3236 else if (tlink->tl_uid < uid)
3237 node = node->rb_right;
3238 else
3239 return tlink;
3240 }
3241 return NULL;
3242}
3243
3244/* insert a tcon_link into the tree */
3245static void
3246tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
3247{
3248 struct rb_node **new = &(root->rb_node), *parent = NULL;
3249 struct tcon_link *tlink;
3250
3251 while (*new) {
3252 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
3253 parent = *new;
3254
3255 if (tlink->tl_uid > new_tlink->tl_uid)
3256 new = &((*new)->rb_left);
3257 else
3258 new = &((*new)->rb_right);
3259 }
3260
3261 rb_link_node(&new_tlink->tl_rbnode, parent, new);
3262 rb_insert_color(&new_tlink->tl_rbnode, root);
3263}
3264
9d002df4
JL		 3265/*
3266 * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3267 * current task.
3268 *
3269 * If the superblock doesn't refer to a multiuser mount, then just return
3270 * the master tcon for the mount.
3271 *
6ef933a3 3272 * First, search the rbtree for an existing tcon for this fsuid. If one
9d002df4
JL		 3273 * exists, then check to see if it's pending construction. If it is then wait
3274 * for construction to complete. Once it's no longer pending, check to see if
3275 * it failed and either return an error or retry construction, depending on
3276 * the timeout.
3277 *
3278 * If one doesn't exist then insert a new tcon_link struct into the tree and
3279 * try to construct a new one.
3280 */
3281struct tcon_link *
3282cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3283{
3284 int ret;
b647c35f 3285 uid_t fsuid = current_fsuid();
9d002df4
JL		 3286 struct tcon_link *tlink, *newtlink;
3287
3288 if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3289 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3290
3291 spin_lock(&cifs_sb->tlink_tree_lock);
b647c35f 3292 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
9d002df4
JL		 3293 if (tlink)
3294 cifs_get_tlink(tlink);
3295 spin_unlock(&cifs_sb->tlink_tree_lock);
3296
3297 if (tlink == NULL) {
3298 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3299 if (newtlink == NULL)
3300 return ERR_PTR(-ENOMEM);
b647c35f 3301 newtlink->tl_uid = fsuid;
9d002df4
JL		 3302 newtlink->tl_tcon = ERR_PTR(-EACCES);
3303 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3304 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3305 cifs_get_tlink(newtlink);
3306
9d002df4
JL		 3307 spin_lock(&cifs_sb->tlink_tree_lock);
3308 /* was one inserted after previous search? */
b647c35f 3309 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
9d002df4
JL		 3310 if (tlink) {
3311 cifs_get_tlink(tlink);
3312 spin_unlock(&cifs_sb->tlink_tree_lock);
9d002df4
JL		 3313 kfree(newtlink);
3314 goto wait_for_construction;
3315 }
9d002df4 3316 tlink = newtlink;
b647c35f
JL		 3317 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3318 spin_unlock(&cifs_sb->tlink_tree_lock);
9d002df4
JL		 3319 } else {
3320wait_for_construction:
3321 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3322 cifs_sb_tcon_pending_wait,
3323 TASK_INTERRUPTIBLE);
3324 if (ret) {
3325 cifs_put_tlink(tlink);
3326 return ERR_PTR(ret);
3327 }
3328
3329 /* if it's good, return it */
3330 if (!IS_ERR(tlink->tl_tcon))
3331 return tlink;
3332
3333 /* return error if we tried this already recently */
3334 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3335 cifs_put_tlink(tlink);
3336 return ERR_PTR(-EACCES);
3337 }
3338
3339 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3340 goto wait_for_construction;
3341 }
3342
3343 tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3344 clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3345 wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3346
3347 if (IS_ERR(tlink->tl_tcon)) {
3348 cifs_put_tlink(tlink);
3349 return ERR_PTR(-EACCES);
3350 }
3351
3352 return tlink;
3353}
2de970ff
JL		 3354
3355/*
3356 * periodic workqueue job that scans tcon_tree for a superblock and closes
3357 * out tcons.
3358 */
3359static void
3360cifs_prune_tlinks(struct work_struct *work)
3361{
3362 struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3363 prune_tlinks.work);
b647c35f
JL		 3364 struct rb_root *root = &cifs_sb->tlink_tree;
3365 struct rb_node *node = rb_first(root);
3366 struct rb_node *tmp;
3367 struct tcon_link *tlink;
2de970ff 3368
b647c35f
JL		 3369 /*
3370 * Because we drop the spinlock in the loop in order to put the tlink
3371 * it's not guarded against removal of links from the tree. The only
3372 * places that remove entries from the tree are this function and
3373 * umounts. Because this function is non-reentrant and is canceled
3374 * before umount can proceed, this is safe.
3375 */
3376 spin_lock(&cifs_sb->tlink_tree_lock);
3377 node = rb_first(root);
3378 while (node != NULL) {
3379 tmp = node;
3380 node = rb_next(tmp);
3381 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
3382
3383 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
3384 atomic_read(&tlink->tl_count) != 0 ||
3385 time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
3386 continue;
2de970ff 3387
b647c35f
JL		 3388 cifs_get_tlink(tlink);
3389 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3390 rb_erase(tmp, root);
3391
3392 spin_unlock(&cifs_sb->tlink_tree_lock);
3393 cifs_put_tlink(tlink);
3394 spin_lock(&cifs_sb->tlink_tree_lock);
3395 }
3396 spin_unlock(&cifs_sb->tlink_tree_lock);
2de970ff
JL		 3397
3398 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3399 TLINK_IDLE_EXPIRE);
3400}
Linux 6.x block layer and io_uring tree(s)