]> git.proxmox.com Git - mirror_ubuntu-artful-kernel.git/blame - fs/cifs/connect.c
projects / mirror_ubuntu-artful-kernel.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
[CIFS] Migrate from prefixpath logic
[mirror_ubuntu-artful-kernel.git] / fs / cifs / connect.c
CommitLineData
1da177e4
LT		 1/*
2 * fs/cifs/connect.c
3 *
d185cda7 4 * Copyright (C) International Business Machines Corp., 2002,2009
1da177e4
LT		 5 * Author(s): Steve French (sfrench@us.ibm.com)
6 *
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
fb8c4b14 19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
1da177e4
LT		 20 */
21#include <linux/fs.h>
22#include <linux/net.h>
23#include <linux/string.h>
24#include <linux/list.h>
25#include <linux/wait.h>
5a0e3ad6 26#include <linux/slab.h>
1da177e4
LT		 27#include <linux/pagemap.h>
28#include <linux/ctype.h>
29#include <linux/utsname.h>
30#include <linux/mempool.h>
b8643e1b 31#include <linux/delay.h>
f191401f 32#include <linux/completion.h>
aaf737ad 33#include <linux/kthread.h>
0ae0efad 34#include <linux/pagevec.h>
7dfb7103 35#include <linux/freezer.h>
5c2503a8 36#include <linux/namei.h>
1da177e4
LT		 37#include <asm/uaccess.h>
38#include <asm/processor.h>
50b64e3b 39#include <linux/inet.h>
0e2bedaa 40#include <net/ipv6.h>
1da177e4
LT		 41#include "cifspdu.h"
42#include "cifsglob.h"
43#include "cifsproto.h"
44#include "cifs_unicode.h"
45#include "cifs_debug.h"
46#include "cifs_fs_sb.h"
47#include "ntlmssp.h"
48#include "nterr.h"
49#include "rfc1002pdu.h"
488f1d2d 50#include "fscache.h"
1da177e4
LT		 51
52#define CIFS_PORT 445
53#define RFC1001_PORT 139
54
c74093b6
JL		 55/* SMB echo "timeout" -- FIXME: tunable? */
56#define SMB_ECHO_INTERVAL (60 * HZ)
57
1da177e4
LT		 58extern mempool_t *cifs_req_poolp;
59
2de970ff 60/* FIXME: should these be tunable? */
9d002df4 61#define TLINK_ERROR_EXPIRE (1 * HZ)
2de970ff 62#define TLINK_IDLE_EXPIRE (600 * HZ)
9d002df4 63
a9f1b85e
PS		 64static int ip_connect(struct TCP_Server_Info *server);
65static int generic_ip_connect(struct TCP_Server_Info *server);
b647c35f 66static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
2de970ff 67static void cifs_prune_tlinks(struct work_struct *work);
1da177e4 68
d5c5605c
JL		 69/*
70 * cifs tcp session reconnection
71 *
72 * mark tcp session as reconnecting so temporarily locked
73 * mark all smb sessions as reconnecting for tcp session
74 * reconnect tcp session
75 * wake up waiters on reconnection? - (not needed currently)
76 */
2cd646a2 77static int
1da177e4
LT		 78cifs_reconnect(struct TCP_Server_Info *server)
79{
80 int rc = 0;
f1987b44 81 struct list_head *tmp, *tmp2;
1da177e4
LT		 82 struct cifsSesInfo *ses;
83 struct cifsTconInfo *tcon;
fb8c4b14 84 struct mid_q_entry *mid_entry;
3c1105df 85 struct list_head retry_list;
50c2f753 86
1da177e4 87 spin_lock(&GlobalMid_Lock);
469ee614 88 if (server->tcpStatus == CifsExiting) {
fb8c4b14 89 /* the demux thread will exit normally
1da177e4
LT		 90 next time through the loop */
91 spin_unlock(&GlobalMid_Lock);
92 return rc;
93 } else
94 server->tcpStatus = CifsNeedReconnect;
95 spin_unlock(&GlobalMid_Lock);
96 server->maxBuf = 0;
97
b6b38f70 98 cFYI(1, "Reconnecting tcp session");
1da177e4
LT		 99
100 /* before reconnecting the tcp session, mark the smb session (uid)
101 and the tid bad so they are not used until reconnected */
2b84a36c 102 cFYI(1, "%s: marking sessions and tcons for reconnect", __func__);
3f9bcca7 103 spin_lock(&cifs_tcp_ses_lock);
14fbf50d
JL		 104 list_for_each(tmp, &server->smb_ses_list) {
105 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
106 ses->need_reconnect = true;
107 ses->ipc_tid = 0;
f1987b44
JL		 108 list_for_each(tmp2, &ses->tcon_list) {
109 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
3b795210 110 tcon->need_reconnect = true;
1da177e4 111 }
1da177e4 112 }
3f9bcca7 113 spin_unlock(&cifs_tcp_ses_lock);
2b84a36c 114
1da177e4 115 /* do not want to be sending data on a socket we are freeing */
2b84a36c 116 cFYI(1, "%s: tearing down socket", __func__);
72ca545b 117 mutex_lock(&server->srv_mutex);
fb8c4b14 118 if (server->ssocket) {
b6b38f70
JP		 119 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
120 server->ssocket->flags);
91cf45f0 121 kernel_sock_shutdown(server->ssocket, SHUT_WR);
b6b38f70 122 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
467a8f8d 123 server->ssocket->state,
b6b38f70 124 server->ssocket->flags);
1da177e4
LT		 125 sock_release(server->ssocket);
126 server->ssocket = NULL;
127 }
5d0d2882
SP		 128 server->sequence_number = 0;
129 server->session_estab = false;
21e73393
SP		 130 kfree(server->session_key.response);
131 server->session_key.response = NULL;
132 server->session_key.len = 0;
fda35943 133 server->lstrp = jiffies;
2b84a36c 134 mutex_unlock(&server->srv_mutex);
1da177e4 135
2b84a36c 136 /* mark submitted MIDs for retry and issue callback */
3c1105df
JL		 137 INIT_LIST_HEAD(&retry_list);
138 cFYI(1, "%s: moving mids to private list", __func__);
1da177e4 139 spin_lock(&GlobalMid_Lock);
2b84a36c
JL		 140 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
141 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
142 if (mid_entry->midState == MID_REQUEST_SUBMITTED)
ad8b15f0 143 mid_entry->midState = MID_RETRY_NEEDED;
3c1105df
JL		 144 list_move(&mid_entry->qhead, &retry_list);
145 }
146 spin_unlock(&GlobalMid_Lock);
147
148 cFYI(1, "%s: issuing mid callbacks", __func__);
149 list_for_each_safe(tmp, tmp2, &retry_list) {
150 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
2b84a36c
JL		 151 list_del_init(&mid_entry->qhead);
152 mid_entry->callback(mid_entry);
1da177e4 153 }
1da177e4 154
fd88ce93 155 while (server->tcpStatus == CifsNeedReconnect) {
6c3d8909 156 try_to_freeze();
a9f1b85e
PS		 157
158 /* we should try only the port we connected to before */
159 rc = generic_ip_connect(server);
fb8c4b14 160 if (rc) {
b6b38f70 161 cFYI(1, "reconnect error %d", rc);
0cb766ae 162 msleep(3000);
1da177e4
LT		 163 } else {
164 atomic_inc(&tcpSesReconnectCount);
165 spin_lock(&GlobalMid_Lock);
469ee614 166 if (server->tcpStatus != CifsExiting)
fd88ce93 167 server->tcpStatus = CifsNeedNegotiate;
fb8c4b14 168 spin_unlock(&GlobalMid_Lock);
1da177e4
LT		 169 }
170 }
2b84a36c 171
1da177e4
LT		 172 return rc;
173}
174
fb8c4b14 175/*
e4eb295d
SF		 176 return codes:
177 0 not a transact2, or all data present
178 >0 transact2 with that much data missing
179 -EINVAL = invalid transact2
180
181 */
fb8c4b14 182static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
e4eb295d 183{
fb8c4b14 184 struct smb_t2_rsp *pSMBt;
e4eb295d 185 int remaining;
26ec2548 186 __u16 total_data_size, data_in_this_rsp;
e4eb295d 187
fb8c4b14 188 if (pSMB->Command != SMB_COM_TRANSACTION2)
e4eb295d
SF		 189 return 0;
190
fb8c4b14
SF		 191 /* check for plausible wct, bcc and t2 data and parm sizes */
192 /* check for parm and data offset going beyond end of smb */
193 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
b6b38f70 194 cFYI(1, "invalid transact2 word count");
e4eb295d
SF		 195 return -EINVAL;
196 }
197
198 pSMBt = (struct smb_t2_rsp *)pSMB;
199
26ec2548
JL		 200 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
201 data_in_this_rsp = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
e4eb295d 202
c0c7b905 203 if (total_data_size == data_in_this_rsp)
e4eb295d 204 return 0;
c0c7b905 205 else if (total_data_size < data_in_this_rsp) {
b6b38f70
JP		 206 cFYI(1, "total data %d smaller than data in frame %d",
207 total_data_size, data_in_this_rsp);
e4eb295d 208 return -EINVAL;
e4eb295d 209 }
c0c7b905
JL		 210
211 remaining = total_data_size - data_in_this_rsp;
212
213 cFYI(1, "missing %d bytes from transact2, check next response",
214 remaining);
215 if (total_data_size > maxBufSize) {
216 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
217 total_data_size, maxBufSize);
218 return -EINVAL;
219 }
220 return remaining;
e4eb295d
SF		 221}
222
fb8c4b14 223static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
e4eb295d
SF		 224{
225 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
226 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
fb8c4b14
SF		 227 char *data_area_of_target;
228 char *data_area_of_buf2;
26ec2548 229 int remaining;
2a2047bc
JL		 230 unsigned int byte_count, total_in_buf;
231 __u16 total_data_size, total_in_buf2;
e4eb295d 232
26ec2548 233 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
e4eb295d 234
26ec2548
JL		 235 if (total_data_size !=
236 get_unaligned_le16(&pSMB2->t2_rsp.TotalDataCount))
b6b38f70 237 cFYI(1, "total data size of primary and secondary t2 differ");
e4eb295d 238
26ec2548 239 total_in_buf = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
e4eb295d
SF		 240
241 remaining = total_data_size - total_in_buf;
50c2f753 242
fb8c4b14 243 if (remaining < 0)
2a2047bc 244 return -EPROTO;
e4eb295d 245
fb8c4b14 246 if (remaining == 0) /* nothing to do, ignore */
e4eb295d 247 return 0;
50c2f753 248
26ec2548 249 total_in_buf2 = get_unaligned_le16(&pSMB2->t2_rsp.DataCount);
fb8c4b14 250 if (remaining < total_in_buf2) {
b6b38f70 251 cFYI(1, "transact2 2nd response contains too much data");
e4eb295d
SF		 252 }
253
254 /* find end of first SMB data area */
fb8c4b14 255 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
26ec2548 256 get_unaligned_le16(&pSMBt->t2_rsp.DataOffset);
e4eb295d
SF		 257 /* validate target area */
258
26ec2548
JL		 259 data_area_of_buf2 = (char *)&pSMB2->hdr.Protocol +
260 get_unaligned_le16(&pSMB2->t2_rsp.DataOffset);
e4eb295d
SF		 261
262 data_area_of_target += total_in_buf;
263
264 /* copy second buffer into end of first buffer */
e4eb295d 265 total_in_buf += total_in_buf2;
2a2047bc
JL		 266 /* is the result too big for the field? */
267 if (total_in_buf > USHRT_MAX)
268 return -EPROTO;
26ec2548 269 put_unaligned_le16(total_in_buf, &pSMBt->t2_rsp.DataCount);
2a2047bc
JL		 270
271 /* fix up the BCC */
820a803f 272 byte_count = get_bcc(pTargetSMB);
e4eb295d 273 byte_count += total_in_buf2;
2a2047bc
JL		 274 /* is the result too big for the field? */
275 if (byte_count > USHRT_MAX)
276 return -EPROTO;
820a803f 277 put_bcc(byte_count, pTargetSMB);
e4eb295d 278
be8e3b00 279 byte_count = be32_to_cpu(pTargetSMB->smb_buf_length);
e4eb295d 280 byte_count += total_in_buf2;
2a2047bc
JL		 281 /* don't allow buffer to overflow */
282 if (byte_count > CIFSMaxBufSize)
283 return -ENOBUFS;
be8e3b00 284 pTargetSMB->smb_buf_length = cpu_to_be32(byte_count);
e4eb295d 285
2a2047bc
JL		 286 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
287
fb8c4b14 288 if (remaining == total_in_buf2) {
b6b38f70 289 cFYI(1, "found the last secondary response");
e4eb295d
SF		 290 return 0; /* we are done */
291 } else /* more responses to go */
292 return 1;
e4eb295d
SF		 293}
294
c74093b6
JL		 295static void
296cifs_echo_request(struct work_struct *work)
297{
298 int rc;
299 struct TCP_Server_Info *server = container_of(work,
300 struct TCP_Server_Info, echo.work);
301
247ec9b4 302 /*
195291e6
JL		 303 * We cannot send an echo until the NEGOTIATE_PROTOCOL request is
304 * done, which is indicated by maxBuf != 0. Also, no need to ping if
305 * we got a response recently
247ec9b4 306 */
195291e6 307 if (server->maxBuf == 0 ||
247ec9b4 308 time_before(jiffies, server->lstrp + SMB_ECHO_INTERVAL - HZ))
c74093b6
JL		 309 goto requeue_echo;
310
311 rc = CIFSSMBEcho(server);
312 if (rc)
313 cFYI(1, "Unable to send echo request to server: %s",
314 server->hostname);
315
316requeue_echo:
317 queue_delayed_work(system_nrt_wq, &server->echo, SMB_ECHO_INTERVAL);
318}
319
1da177e4
LT		 320static int
321cifs_demultiplex_thread(struct TCP_Server_Info *server)
322{
323 int length;
324 unsigned int pdu_length, total_read;
325 struct smb_hdr *smb_buffer = NULL;
b8643e1b
SF		 326 struct smb_hdr *bigbuf = NULL;
327 struct smb_hdr *smallbuf = NULL;
1da177e4
LT		 328 struct msghdr smb_msg;
329 struct kvec iov;
330 struct socket *csocket = server->ssocket;
2b84a36c 331 struct list_head *tmp, *tmp2;
1da177e4
LT		 332 struct task_struct *task_to_wake = NULL;
333 struct mid_q_entry *mid_entry;
70ca734a 334 char temp;
4b18f2a9
SF		 335 bool isLargeBuf = false;
336 bool isMultiRsp;
e4eb295d 337 int reconnect;
1da177e4 338
1da177e4 339 current->flags |= PF_MEMALLOC;
b6b38f70 340 cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
93d0ec85
JL		 341
342 length = atomic_inc_return(&tcpSesAllocCount);
343 if (length > 1)
26f57364
SF		 344 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
345 GFP_KERNEL);
1da177e4 346
83144186 347 set_freezable();
469ee614 348 while (server->tcpStatus != CifsExiting) {
ede1327e
SF		 349 if (try_to_freeze())
350 continue;
b8643e1b
SF		 351 if (bigbuf == NULL) {
352 bigbuf = cifs_buf_get();
0fd1ffe0 353 if (!bigbuf) {
b6b38f70 354 cERROR(1, "No memory for large SMB response");
b8643e1b
SF		 355 msleep(3000);
356 /* retry will check if exiting */
357 continue;
358 }
0fd1ffe0
PM		 359 } else if (isLargeBuf) {
360 /* we are reusing a dirty large buf, clear its start */
26f57364 361 memset(bigbuf, 0, sizeof(struct smb_hdr));
1da177e4 362 }
b8643e1b
SF		 363
364 if (smallbuf == NULL) {
365 smallbuf = cifs_small_buf_get();
0fd1ffe0 366 if (!smallbuf) {
b6b38f70 367 cERROR(1, "No memory for SMB response");
b8643e1b
SF		 368 msleep(1000);
369 /* retry will check if exiting */
370 continue;
371 }
372 /* beginning of smb buffer is cleared in our buf_get */
373 } else /* if existing small buf clear beginning */
26f57364 374 memset(smallbuf, 0, sizeof(struct smb_hdr));
b8643e1b 375
4b18f2a9
SF		 376 isLargeBuf = false;
377 isMultiRsp = false;
b8643e1b 378 smb_buffer = smallbuf;
1da177e4
LT		 379 iov.iov_base = smb_buffer;
380 iov.iov_len = 4;
381 smb_msg.msg_control = NULL;
382 smb_msg.msg_controllen = 0;
f01d5e14 383 pdu_length = 4; /* enough to get RFC1001 header */
fda35943 384
f01d5e14 385incomplete_rcv:
fd88ce93 386 if (echo_retries > 0 && server->tcpStatus == CifsGood &&
fda35943
SF		 387 time_after(jiffies, server->lstrp +
388 (echo_retries * SMB_ECHO_INTERVAL))) {
389 cERROR(1, "Server %s has not responded in %d seconds. "
390 "Reconnecting...", server->hostname,
391 (echo_retries * SMB_ECHO_INTERVAL / HZ));
392 cifs_reconnect(server);
393 csocket = server->ssocket;
394 wake_up(&server->response_q);
395 continue;
396 }
397
1da177e4
LT		 398 length =
399 kernel_recvmsg(csocket, &smb_msg,
f01d5e14 400 &iov, 1, pdu_length, 0 /* BB other flags? */);
1da177e4 401
469ee614 402 if (server->tcpStatus == CifsExiting) {
1da177e4
LT		 403 break;
404 } else if (server->tcpStatus == CifsNeedReconnect) {
b6b38f70 405 cFYI(1, "Reconnect after server stopped responding");
1da177e4 406 cifs_reconnect(server);
b6b38f70 407 cFYI(1, "call to reconnect done");
1da177e4
LT		 408 csocket = server->ssocket;
409 continue;
522bbe65
JL		 410 } else if (length == -ERESTARTSYS ||
411 length == -EAGAIN ||
412 length == -EINTR) {
b8643e1b 413 msleep(1); /* minimum sleep to prevent looping
1da177e4
LT		 414 allowing socket to clear and app threads to set
415 tcpStatus CifsNeedReconnect if server hung */
c527c8a7
SF		 416 if (pdu_length < 4) {
417 iov.iov_base = (4 - pdu_length) +
418 (char *)smb_buffer;
419 iov.iov_len = pdu_length;
420 smb_msg.msg_control = NULL;
421 smb_msg.msg_controllen = 0;
c18c732e 422 goto incomplete_rcv;
c527c8a7 423 } else
c18c732e 424 continue;
1da177e4 425 } else if (length <= 0) {
b6b38f70
JP		 426 cFYI(1, "Reconnect after unexpected peek error %d",
427 length);
1da177e4
LT		 428 cifs_reconnect(server);
429 csocket = server->ssocket;
430 wake_up(&server->response_q);
431 continue;
2a974680 432 } else if (length < pdu_length) {
b6b38f70
JP		 433 cFYI(1, "requested %d bytes but only got %d bytes",
434 pdu_length, length);
f01d5e14 435 pdu_length -= length;
f01d5e14
SF		 436 msleep(1);
437 goto incomplete_rcv;
46810cbf 438 }
1da177e4 439
70ca734a
SF		 440 /* The right amount was read from socket - 4 bytes */
441 /* so we can now interpret the length field */
46810cbf 442
70ca734a
SF		 443 /* the first byte big endian of the length field,
444 is actually not part of the length but the type
445 with the most common, zero, as regular data */
446 temp = *((char *) smb_buffer);
46810cbf 447
fb8c4b14 448 /* Note that FC 1001 length is big endian on the wire,
70ca734a
SF		 449 but we convert it here so it is always manipulated
450 as host byte order */
be8e3b00 451 pdu_length = be32_to_cpu(smb_buffer->smb_buf_length);
70ca734a 452
b6b38f70 453 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
46810cbf 454
70ca734a 455 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
fb8c4b14 456 continue;
70ca734a 457 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
b6b38f70 458 cFYI(1, "Good RFC 1002 session rsp");
e4eb295d 459 continue;
70ca734a 460 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
fb8c4b14 461 /* we get this from Windows 98 instead of
46810cbf 462 an error on SMB negprot response */
b6b38f70
JP		 463 cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
464 pdu_length);
7332f2a6
JL		 465 /* give server a second to clean up */
466 msleep(1000);
467 /* always try 445 first on reconnect since we get NACK
468 * on some if we ever connected to port 139 (the NACK
469 * is since we do not begin with RFC1001 session
470 * initialize frame)
471 */
32670396 472 cifs_set_port((struct sockaddr *)
a9f1b85e 473 &server->dstaddr, CIFS_PORT);
7332f2a6
JL		 474 cifs_reconnect(server);
475 csocket = server->ssocket;
476 wake_up(&server->response_q);
477 continue;
70ca734a 478 } else if (temp != (char) 0) {
b6b38f70 479 cERROR(1, "Unknown RFC 1002 frame");
70ca734a
SF		 480 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
481 length);
46810cbf
SF		 482 cifs_reconnect(server);
483 csocket = server->ssocket;
484 continue;
e4eb295d
SF		 485 }
486
487 /* else we have an SMB response */
fb8c4b14 488 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
26f57364 489 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
b6b38f70
JP		 490 cERROR(1, "Invalid size SMB length %d pdu_length %d",
491 length, pdu_length+4);
e4eb295d
SF		 492 cifs_reconnect(server);
493 csocket = server->ssocket;
494 wake_up(&server->response_q);
495 continue;
fb8c4b14 496 }
e4eb295d
SF		 497
498 /* else length ok */
499 reconnect = 0;
500
fb8c4b14 501 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
4b18f2a9 502 isLargeBuf = true;
e4eb295d
SF		 503 memcpy(bigbuf, smallbuf, 4);
504 smb_buffer = bigbuf;
505 }
506 length = 0;
507 iov.iov_base = 4 + (char *)smb_buffer;
508 iov.iov_len = pdu_length;
fb8c4b14 509 for (total_read = 0; total_read < pdu_length;
e4eb295d
SF		 510 total_read += length) {
511 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
512 pdu_length - total_read, 0);
522bbe65 513 if (server->tcpStatus == CifsExiting) {
e4eb295d
SF		 514 /* then will exit */
515 reconnect = 2;
516 break;
517 } else if (server->tcpStatus == CifsNeedReconnect) {
46810cbf
SF		 518 cifs_reconnect(server);
519 csocket = server->ssocket;
fb8c4b14 520 /* Reconnect wakes up rspns q */
e4eb295d
SF		 521 /* Now we will reread sock */
522 reconnect = 1;
523 break;
522bbe65
JL		 524 } else if (length == -ERESTARTSYS ||
525 length == -EAGAIN ||
526 length == -EINTR) {
e4eb295d 527 msleep(1); /* minimum sleep to prevent looping,
fb8c4b14 528 allowing socket to clear and app
e4eb295d
SF		 529 threads to set tcpStatus
530 CifsNeedReconnect if server hung*/
c18c732e 531 length = 0;
46810cbf 532 continue;
e4eb295d 533 } else if (length <= 0) {
b6b38f70
JP		 534 cERROR(1, "Received no data, expecting %d",
535 pdu_length - total_read);
e4eb295d
SF		 536 cifs_reconnect(server);
537 csocket = server->ssocket;
538 reconnect = 1;
539 break;
46810cbf 540 }
e4eb295d 541 }
fb8c4b14 542 if (reconnect == 2)
e4eb295d 543 break;
fb8c4b14 544 else if (reconnect == 1)
e4eb295d 545 continue;
1da177e4 546
9587fcff 547 total_read += 4; /* account for rfc1002 hdr */
50c2f753 548
9587fcff 549 dump_smb(smb_buffer, total_read);
71823baf
JL		 550
551 /*
552 * We know that we received enough to get to the MID as we
553 * checked the pdu_length earlier. Now check to see
554 * if the rest of the header is OK. We borrow the length
555 * var for the rest of the loop to avoid a new stack var.
556 *
557 * 48 bytes is enough to display the header and a little bit
558 * into the payload for debugging purposes.
559 */
560 length = checkSMB(smb_buffer, smb_buffer->Mid, total_read);
561 if (length != 0)
9587fcff 562 cifs_dump_mem("Bad SMB: ", smb_buffer,
71823baf 563 min_t(unsigned int, total_read, 48));
1da177e4 564
2b84a36c 565 mid_entry = NULL;
fda35943
SF		 566 server->lstrp = jiffies;
567
e4eb295d 568 spin_lock(&GlobalMid_Lock);
2b84a36c 569 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
e4eb295d
SF		 570 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
571
146f9f65
JL		 572 if (mid_entry->mid != smb_buffer->Mid ||
573 mid_entry->midState != MID_REQUEST_SUBMITTED ||
574 mid_entry->command != smb_buffer->Command) {
575 mid_entry = NULL;
576 continue;
577 }
578
579 if (length == 0 &&
580 check2ndT2(smb_buffer, server->maxBuf) > 0) {
581 /* We have a multipart transact2 resp */
582 isMultiRsp = true;
583 if (mid_entry->resp_buf) {
584 /* merge response - fix up 1st*/
16541ba1
JL		 585 length = coalesce_t2(smb_buffer,
586 mid_entry->resp_buf);
587 if (length > 0) {
588 length = 0;
146f9f65
JL		 589 mid_entry->multiRsp = true;
590 break;
e4eb295d 591 } else {
16541ba1
JL		 592 /* all parts received or
593 * packet is malformed
594 */
146f9f65
JL		 595 mid_entry->multiEnd = true;
596 goto multi_t2_fnd;
597 }
598 } else {
599 if (!isLargeBuf) {
600 /*
601 * FIXME: switch to already
602 * allocated largebuf?
603 */
604 cERROR(1, "1st trans2 resp "
605 "needs bigbuf");
606 } else {
607 /* Have first buffer */
608 mid_entry->resp_buf =
609 smb_buffer;
610 mid_entry->largeBuf = true;
611 bigbuf = NULL;
e4eb295d 612 }
50c2f753 613 }
146f9f65
JL		 614 break;
615 }
616 mid_entry->resp_buf = smb_buffer;
617 mid_entry->largeBuf = isLargeBuf;
e4eb295d 618multi_t2_fnd:
146f9f65
JL		 619 if (length == 0)
620 mid_entry->midState = MID_RESPONSE_RECEIVED;
621 else
622 mid_entry->midState = MID_RESPONSE_MALFORMED;
1047abc1 623#ifdef CONFIG_CIFS_STATS2
146f9f65 624 mid_entry->when_received = jiffies;
1047abc1 625#endif
146f9f65 626 list_del_init(&mid_entry->qhead);
146f9f65 627 break;
1da177e4 628 }
e4eb295d 629 spin_unlock(&GlobalMid_Lock);
2b84a36c
JL		 630
631 if (mid_entry != NULL) {
3c1105df 632 mid_entry->callback(mid_entry);
cd63499c 633 /* Was previous buf put in mpx struct for multi-rsp? */
fb8c4b14 634 if (!isMultiRsp) {
cd63499c 635 /* smb buffer will be freed by user thread */
26f57364 636 if (isLargeBuf)
cd63499c 637 bigbuf = NULL;
26f57364 638 else
cd63499c
SF		 639 smallbuf = NULL;
640 }
71823baf
JL		 641 } else if (length != 0) {
642 /* response sanity checks failed */
643 continue;
4b18f2a9
SF		 644 } else if (!is_valid_oplock_break(smb_buffer, server) &&
645 !isMultiRsp) {
b6b38f70 646 cERROR(1, "No task to wake, unknown frame received! "
8097531a 647 "NumMids %d", atomic_read(&midCount));
50c2f753 648 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
70ca734a 649 sizeof(struct smb_hdr));
3979877e
SF		 650#ifdef CONFIG_CIFS_DEBUG2
651 cifs_dump_detail(smb_buffer);
652 cifs_dump_mids(server);
653#endif /* CIFS_DEBUG2 */
50c2f753 654
e4eb295d
SF		 655 }
656 } /* end while !EXITING */
657
e7ddee90 658 /* take it off the list, if it's not already */
3f9bcca7 659 spin_lock(&cifs_tcp_ses_lock);
e7ddee90 660 list_del_init(&server->tcp_ses_list);
3f9bcca7 661 spin_unlock(&cifs_tcp_ses_lock);
e7ddee90 662
1da177e4
LT		 663 spin_lock(&GlobalMid_Lock);
664 server->tcpStatus = CifsExiting;
e691b9d1 665 spin_unlock(&GlobalMid_Lock);
dbdbb876 666 wake_up_all(&server->response_q);
e691b9d1 667
31ca3bc3
SF		 668 /* check if we have blocked requests that need to free */
669 /* Note that cifs_max_pending is normally 50, but
670 can be set at module install time to as little as two */
e691b9d1 671 spin_lock(&GlobalMid_Lock);
fb8c4b14 672 if (atomic_read(&server->inFlight) >= cifs_max_pending)
31ca3bc3
SF		 673 atomic_set(&server->inFlight, cifs_max_pending - 1);
674 /* We do not want to set the max_pending too low or we
675 could end up with the counter going negative */
1da177e4 676 spin_unlock(&GlobalMid_Lock);
50c2f753 677 /* Although there should not be any requests blocked on
1da177e4 678 this queue it can not hurt to be paranoid and try to wake up requests
09d1db5c 679 that may haven been blocked when more than 50 at time were on the wire
1da177e4
LT		 680 to the same server - they now will see the session is in exit state
681 and get out of SendReceive. */
682 wake_up_all(&server->request_q);
683 /* give those requests time to exit */
b8643e1b 684 msleep(125);
50c2f753 685
fb8c4b14 686 if (server->ssocket) {
1da177e4
LT		 687 sock_release(csocket);
688 server->ssocket = NULL;
689 }
fd62cb7e 690 /* buffer usually freed in free_mid - need to free it here on exit */
a8a11d39
MK		 691 cifs_buf_release(bigbuf);
692 if (smallbuf) /* no sense logging a debug message if NULL */
b8643e1b 693 cifs_small_buf_release(smallbuf);
1da177e4 694
9d78315b 695 if (!list_empty(&server->pending_mid_q)) {
3c1105df
JL		 696 struct list_head dispose_list;
697
698 INIT_LIST_HEAD(&dispose_list);
1da177e4 699 spin_lock(&GlobalMid_Lock);
2b84a36c 700 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
9d78315b 701 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
3c1105df
JL		 702 cFYI(1, "Clearing mid 0x%x", mid_entry->mid);
703 mid_entry->midState = MID_SHUTDOWN;
704 list_move(&mid_entry->qhead, &dispose_list);
705 }
706 spin_unlock(&GlobalMid_Lock);
707
708 /* now walk dispose list and issue callbacks */
709 list_for_each_safe(tmp, tmp2, &dispose_list) {
710 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
711 cFYI(1, "Callback mid 0x%x", mid_entry->mid);
2b84a36c
JL		 712 list_del_init(&mid_entry->qhead);
713 mid_entry->callback(mid_entry);
1da177e4 714 }
1da177e4 715 /* 1/8th of sec is more than enough time for them to exit */
b8643e1b 716 msleep(125);
1da177e4
LT		 717 }
718
f191401f 719 if (!list_empty(&server->pending_mid_q)) {
50c2f753 720 /* mpx threads have not exited yet give them
1da177e4 721 at least the smb send timeout time for long ops */
31ca3bc3
SF		 722 /* due to delays on oplock break requests, we need
723 to wait at least 45 seconds before giving up
724 on a request getting a response and going ahead
725 and killing cifsd */
b6b38f70 726 cFYI(1, "Wait for exit from demultiplex thread");
31ca3bc3 727 msleep(46000);
1da177e4
LT		 728 /* if threads still have not exited they are probably never
729 coming home not much else we can do but free the memory */
730 }
1da177e4 731
c359cf3c 732 kfree(server->hostname);
b1c8d2b4 733 task_to_wake = xchg(&server->tsk, NULL);
31ca3bc3 734 kfree(server);
93d0ec85
JL		 735
736 length = atomic_dec_return(&tcpSesAllocCount);
26f57364
SF		 737 if (length > 0)
738 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
739 GFP_KERNEL);
50c2f753 740
b1c8d2b4
JL		 741 /* if server->tsk was NULL then wait for a signal before exiting */
742 if (!task_to_wake) {
743 set_current_state(TASK_INTERRUPTIBLE);
744 while (!signal_pending(current)) {
745 schedule();
746 set_current_state(TASK_INTERRUPTIBLE);
747 }
748 set_current_state(TASK_RUNNING);
749 }
750
0468a2cf 751 module_put_and_exit(0);
1da177e4
LT		 752}
753
c359cf3c
JL		 754/* extract the host portion of the UNC string */
755static char *
756extract_hostname(const char *unc)
757{
758 const char *src;
759 char *dst, *delim;
760 unsigned int len;
761
762 /* skip double chars at beginning of string */
763 /* BB: check validity of these bytes? */
764 src = unc + 2;
765
766 /* delimiter between hostname and sharename is always '\\' now */
767 delim = strchr(src, '\\');
768 if (!delim)
769 return ERR_PTR(-EINVAL);
770
771 len = delim - src;
772 dst = kmalloc((len + 1), GFP_KERNEL);
773 if (dst == NULL)
774 return ERR_PTR(-ENOMEM);
775
776 memcpy(dst, src, len);
777 dst[len] = '\0';
778
779 return dst;
780}
781
1da177e4 782static int
b946845a 783cifs_parse_mount_options(const char *mountdata, const char *devname,
50c2f753 784 struct smb_vol *vol)
1da177e4 785{
4906e50b 786 char *value, *data, *end;
b946845a 787 char *mountdata_copy, *options;
1da177e4
LT		 788 unsigned int temp_len, i, j;
789 char separator[2];
9b9d6b24
JL		 790 short int override_uid = -1;
791 short int override_gid = -1;
792 bool uid_specified = false;
793 bool gid_specified = false;
88463999 794 char *nodename = utsname()->nodename;
1da177e4
LT		 795
796 separator[0] = ',';
50c2f753 797 separator[1] = 0;
1da177e4 798
88463999
JL		 799 /*
800 * does not have to be perfect mapping since field is
801 * informational, only used for servers that do not support
802 * port 445 and it can be overridden at mount time
803 */
1397f2ee
JL		 804 memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
805 for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
88463999
JL		 806 vol->source_rfc1001_name[i] = toupper(nodename[i]);
807
1397f2ee 808 vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
a10faeb2
SF		 809 /* null target name indicates to use *SMBSERVR default called name
810 if we end up sending RFC1001 session initialize */
811 vol->target_rfc1001_name[0] = 0;
3e4b3e1f
JL		 812 vol->cred_uid = current_uid();
813 vol->linux_uid = current_uid();
a001e5b5 814 vol->linux_gid = current_gid();
f55ed1a8
JL		 815
816 /* default to only allowing write access to owner of the mount */
817 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
1da177e4
LT		 818
819 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
ac67055e
JA		 820 /* default is always to request posix paths. */
821 vol->posix_paths = 1;
a0c9217f
JL		 822 /* default to using server inode numbers where available */
823 vol->server_ino = 1;
ac67055e 824
6d20e840
SJ		 825 vol->actimeo = CIFS_DEF_ACTIMEO;
826
b946845a
SF		 827 if (!mountdata)
828 goto cifs_parse_mount_err;
829
830 mountdata_copy = kstrndup(mountdata, PAGE_SIZE, GFP_KERNEL);
831 if (!mountdata_copy)
832 goto cifs_parse_mount_err;
1da177e4 833
b946845a 834 options = mountdata_copy;
4906e50b 835 end = options + strlen(options);
50c2f753 836 if (strncmp(options, "sep=", 4) == 0) {
fb8c4b14 837 if (options[4] != 0) {
1da177e4
LT		 838 separator[0] = options[4];
839 options += 5;
840 } else {
b6b38f70 841 cFYI(1, "Null separator not allowed");
1da177e4
LT		 842 }
843 }
50c2f753 844
1da177e4
LT		 845 while ((data = strsep(&options, separator)) != NULL) {
846 if (!*data)
847 continue;
848 if ((value = strchr(data, '=')) != NULL)
849 *value++ = '\0';
850
50c2f753
SF		 851 /* Have to parse this before we parse for "user" */
852 if (strnicmp(data, "user_xattr", 10) == 0) {
1da177e4 853 vol->no_xattr = 0;
50c2f753 854 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
1da177e4
LT		 855 vol->no_xattr = 1;
856 } else if (strnicmp(data, "user", 4) == 0) {
4b952a9b 857 if (!value) {
1da177e4
LT		 858 printk(KERN_WARNING
859 "CIFS: invalid or missing username\n");
b946845a 860 goto cifs_parse_mount_err;
fb8c4b14 861 } else if (!*value) {
4b952a9b
SF		 862 /* null user, ie anonymous, authentication */
863 vol->nullauth = 1;
1da177e4 864 }
8727c8a8
SF		 865 if (strnlen(value, MAX_USERNAME_SIZE) <
866 MAX_USERNAME_SIZE) {
b946845a
SF		 867 vol->username = kstrdup(value, GFP_KERNEL);
868 if (!vol->username) {
869 printk(KERN_WARNING "CIFS: no memory "
870 "for username\n");
871 goto cifs_parse_mount_err;
872 }
1da177e4
LT		 873 } else {
874 printk(KERN_WARNING "CIFS: username too long\n");
b946845a 875 goto cifs_parse_mount_err;
1da177e4
LT		 876 }
877 } else if (strnicmp(data, "pass", 4) == 0) {
878 if (!value) {
879 vol->password = NULL;
880 continue;
fb8c4b14 881 } else if (value[0] == 0) {
1da177e4
LT		 882 /* check if string begins with double comma
883 since that would mean the password really
884 does start with a comma, and would not
885 indicate an empty string */
fb8c4b14 886 if (value[1] != separator[0]) {
1da177e4
LT		 887 vol->password = NULL;
888 continue;
889 }
890 }
891 temp_len = strlen(value);
892 /* removed password length check, NTLM passwords
893 can be arbitrarily long */
894
50c2f753 895 /* if comma in password, the string will be
1da177e4
LT		 896 prematurely null terminated. Commas in password are
897 specified across the cifs mount interface by a double
898 comma ie ,, and a comma used as in other cases ie ','
899 as a parameter delimiter/separator is single and due
900 to the strsep above is temporarily zeroed. */
901
902 /* NB: password legally can have multiple commas and
903 the only illegal character in a password is null */
904
50c2f753 905 if ((value[temp_len] == 0) &&
4906e50b 906 (value + temp_len < end) &&
09d1db5c 907 (value[temp_len+1] == separator[0])) {
1da177e4
LT		 908 /* reinsert comma */
909 value[temp_len] = separator[0];
50c2f753
SF		 910 temp_len += 2; /* move after second comma */
911 while (value[temp_len] != 0) {
1da177e4 912 if (value[temp_len] == separator[0]) {
50c2f753 913 if (value[temp_len+1] ==
09d1db5c
SF		 914 separator[0]) {
915 /* skip second comma */
916 temp_len++;
50c2f753 917 } else {
1da177e4
LT		 918 /* single comma indicating start
919 of next parm */
920 break;
921 }
922 }
923 temp_len++;
924 }
fb8c4b14 925 if (value[temp_len] == 0) {
1da177e4
LT		 926 options = NULL;
927 } else {
928 value[temp_len] = 0;
929 /* point option to start of next parm */
930 options = value + temp_len + 1;
931 }
50c2f753 932 /* go from value to value + temp_len condensing
1da177e4
LT		 933 double commas to singles. Note that this ends up
934 allocating a few bytes too many, which is ok */
e915fc49 935 vol->password = kzalloc(temp_len, GFP_KERNEL);
fb8c4b14 936 if (vol->password == NULL) {
50c2f753
SF		 937 printk(KERN_WARNING "CIFS: no memory "
938 "for password\n");
b946845a 939 goto cifs_parse_mount_err;
433dc24f 940 }
50c2f753 941 for (i = 0, j = 0; i < temp_len; i++, j++) {
1da177e4 942 vol->password[j] = value[i];
fb8c4b14 943 if (value[i] == separator[0]
09d1db5c 944 && value[i+1] == separator[0]) {
1da177e4
LT		 945 /* skip second comma */
946 i++;
947 }
948 }
949 vol->password[j] = 0;
950 } else {
e915fc49 951 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
fb8c4b14 952 if (vol->password == NULL) {
50c2f753
SF		 953 printk(KERN_WARNING "CIFS: no memory "
954 "for password\n");
b946845a 955 goto cifs_parse_mount_err;
433dc24f 956 }
1da177e4
LT		 957 strcpy(vol->password, value);
958 }
58f7f68f
JL		 959 } else if (!strnicmp(data, "ip", 2) ||
960 !strnicmp(data, "addr", 4)) {
1da177e4
LT		 961 if (!value || !*value) {
962 vol->UNCip = NULL;
50b64e3b
JL		 963 } else if (strnlen(value, INET6_ADDRSTRLEN) <
964 INET6_ADDRSTRLEN) {
b946845a
SF		 965 vol->UNCip = kstrdup(value, GFP_KERNEL);
966 if (!vol->UNCip) {
967 printk(KERN_WARNING "CIFS: no memory "
968 "for UNC IP\n");
969 goto cifs_parse_mount_err;
970 }
1da177e4 971 } else {
50c2f753
SF		 972 printk(KERN_WARNING "CIFS: ip address "
973 "too long\n");
b946845a 974 goto cifs_parse_mount_err;
1da177e4 975 }
50c2f753
SF		 976 } else if (strnicmp(data, "sec", 3) == 0) {
977 if (!value || !*value) {
b6b38f70 978 cERROR(1, "no security value specified");
50c2f753
SF		 979 continue;
980 } else if (strnicmp(value, "krb5i", 5) == 0) {
981 vol->secFlg |= CIFSSEC_MAY_KRB5 |
189acaae 982 CIFSSEC_MUST_SIGN;
bf820679 983 } else if (strnicmp(value, "krb5p", 5) == 0) {
50c2f753
SF		 984 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
985 CIFSSEC_MAY_KRB5; */
b6b38f70 986 cERROR(1, "Krb5 cifs privacy not supported");
b946845a 987 goto cifs_parse_mount_err;
bf820679 988 } else if (strnicmp(value, "krb5", 4) == 0) {
750d1151 989 vol->secFlg |= CIFSSEC_MAY_KRB5;
ac683924
SF		 990 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
991 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
992 CIFSSEC_MUST_SIGN;
993 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
994 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
bf820679 995 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
750d1151 996 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
189acaae 997 CIFSSEC_MUST_SIGN;
bf820679 998 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
750d1151 999 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
bf820679 1000 } else if (strnicmp(value, "ntlmi", 5) == 0) {
750d1151 1001 vol->secFlg |= CIFSSEC_MAY_NTLM |
189acaae 1002 CIFSSEC_MUST_SIGN;
bf820679
SF		 1003 } else if (strnicmp(value, "ntlm", 4) == 0) {
1004 /* ntlm is default so can be turned off too */
750d1151 1005 vol->secFlg |= CIFSSEC_MAY_NTLM;
bf820679 1006 } else if (strnicmp(value, "nontlm", 6) == 0) {
189acaae 1007 /* BB is there a better way to do this? */
750d1151 1008 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
189acaae
SF		 1009#ifdef CONFIG_CIFS_WEAK_PW_HASH
1010 } else if (strnicmp(value, "lanman", 6) == 0) {
50c2f753 1011 vol->secFlg |= CIFSSEC_MAY_LANMAN;
189acaae 1012#endif
bf820679 1013 } else if (strnicmp(value, "none", 4) == 0) {
189acaae 1014 vol->nullauth = 1;
50c2f753 1015 } else {
b6b38f70 1016 cERROR(1, "bad security option: %s", value);
b946845a 1017 goto cifs_parse_mount_err;
50c2f753 1018 }
1cb06d0b
SF		 1019 } else if (strnicmp(data, "vers", 3) == 0) {
1020 if (!value || !*value) {
1021 cERROR(1, "no protocol version specified"
1022 " after vers= mount option");
1023 } else if ((strnicmp(value, "cifs", 4) == 0) ||
1024 (strnicmp(value, "1", 1) == 0)) {
1025 /* this is the default */
1026 continue;
1cb06d0b 1027 }
1da177e4
LT		 1028 } else if ((strnicmp(data, "unc", 3) == 0)
1029 || (strnicmp(data, "target", 6) == 0)
1030 || (strnicmp(data, "path", 4) == 0)) {
1031 if (!value || !*value) {
50c2f753
SF		 1032 printk(KERN_WARNING "CIFS: invalid path to "
1033 "network resource\n");
b946845a 1034 goto cifs_parse_mount_err;
1da177e4
LT		 1035 }
1036 if ((temp_len = strnlen(value, 300)) < 300) {
50c2f753 1037 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
4523cc30 1038 if (vol->UNC == NULL)
b946845a 1039 goto cifs_parse_mount_err;
50c2f753 1040 strcpy(vol->UNC, value);
1da177e4
LT		 1041 if (strncmp(vol->UNC, "//", 2) == 0) {
1042 vol->UNC[0] = '\\';
1043 vol->UNC[1] = '\\';
50c2f753 1044 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1da177e4 1045 printk(KERN_WARNING
50c2f753
SF		 1046 "CIFS: UNC Path does not begin "
1047 "with // or \\\\ \n");
b946845a 1048 goto cifs_parse_mount_err;
1da177e4
LT		 1049 }
1050 } else {
1051 printk(KERN_WARNING "CIFS: UNC name too long\n");
b946845a 1052 goto cifs_parse_mount_err;
1da177e4
LT		 1053 }
1054 } else if ((strnicmp(data, "domain", 3) == 0)
1055 || (strnicmp(data, "workgroup", 5) == 0)) {
1056 if (!value || !*value) {
1057 printk(KERN_WARNING "CIFS: invalid domain name\n");
b946845a 1058 goto cifs_parse_mount_err;
1da177e4
LT		 1059 }
1060 /* BB are there cases in which a comma can be valid in
1061 a domain name and need special handling? */
3979877e 1062 if (strnlen(value, 256) < 256) {
b946845a
SF		 1063 vol->domainname = kstrdup(value, GFP_KERNEL);
1064 if (!vol->domainname) {
1065 printk(KERN_WARNING "CIFS: no memory "
1066 "for domainname\n");
1067 goto cifs_parse_mount_err;
1068 }
b6b38f70 1069 cFYI(1, "Domain name set");
1da177e4 1070 } else {
50c2f753
SF		 1071 printk(KERN_WARNING "CIFS: domain name too "
1072 "long\n");
b946845a 1073 goto cifs_parse_mount_err;
1da177e4 1074 }
3eb9a889
BG		 1075 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1076 vol->srcaddr.ss_family = AF_UNSPEC;
1077
1078 if (!value || !*value) {
1079 printk(KERN_WARNING "CIFS: srcaddr value"
1080 " not specified.\n");
b946845a 1081 goto cifs_parse_mount_err;
3eb9a889
BG		 1082 }
1083 i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1084 value, strlen(value));
b235f371 1085 if (i == 0) {
3eb9a889
BG		 1086 printk(KERN_WARNING "CIFS: Could not parse"
1087 " srcaddr: %s\n",
1088 value);
b946845a 1089 goto cifs_parse_mount_err;
3eb9a889 1090 }
50c2f753
SF		 1091 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1092 if (!value || !*value) {
1093 printk(KERN_WARNING
1094 "CIFS: invalid path prefix\n");
b946845a 1095 goto cifs_parse_mount_err;
50c2f753
SF		 1096 }
1097 if ((temp_len = strnlen(value, 1024)) < 1024) {
4523cc30 1098 if (value[0] != '/')
2fe87f02 1099 temp_len++; /* missing leading slash */
50c2f753
SF		 1100 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1101 if (vol->prepath == NULL)
b946845a 1102 goto cifs_parse_mount_err;
4523cc30 1103 if (value[0] != '/') {
2fe87f02 1104 vol->prepath[0] = '/';
50c2f753 1105 strcpy(vol->prepath+1, value);
2fe87f02 1106 } else
50c2f753 1107 strcpy(vol->prepath, value);
b6b38f70 1108 cFYI(1, "prefix path %s", vol->prepath);
50c2f753
SF		 1109 } else {
1110 printk(KERN_WARNING "CIFS: prefix too long\n");
b946845a 1111 goto cifs_parse_mount_err;
50c2f753 1112 }
1da177e4
LT		 1113 } else if (strnicmp(data, "iocharset", 9) == 0) {
1114 if (!value || !*value) {
63135e08
SF		 1115 printk(KERN_WARNING "CIFS: invalid iocharset "
1116 "specified\n");
b946845a 1117 goto cifs_parse_mount_err;
1da177e4
LT		 1118 }
1119 if (strnlen(value, 65) < 65) {
b946845a
SF		 1120 if (strnicmp(value, "default", 7)) {
1121 vol->iocharset = kstrdup(value,
1122 GFP_KERNEL);
1123
1124 if (!vol->iocharset) {
1125 printk(KERN_WARNING "CIFS: no "
1126 "memory for"
1127 "charset\n");
1128 goto cifs_parse_mount_err;
1129 }
1130 }
50c2f753
SF		 1131 /* if iocharset not set then load_nls_default
1132 is used by caller */
b6b38f70 1133 cFYI(1, "iocharset set to %s", value);
1da177e4 1134 } else {
63135e08
SF		 1135 printk(KERN_WARNING "CIFS: iocharset name "
1136 "too long.\n");
b946845a 1137 goto cifs_parse_mount_err;
1da177e4 1138 }
9b9d6b24
JL		 1139 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1140 vol->linux_uid = simple_strtoul(value, &value, 0);
1141 uid_specified = true;
bd763319
JL		 1142 } else if (!strnicmp(data, "cruid", 5) && value && *value) {
1143 vol->cred_uid = simple_strtoul(value, &value, 0);
9b9d6b24
JL		 1144 } else if (!strnicmp(data, "forceuid", 8)) {
1145 override_uid = 1;
1146 } else if (!strnicmp(data, "noforceuid", 10)) {
1147 override_uid = 0;
1148 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1149 vol->linux_gid = simple_strtoul(value, &value, 0);
1150 gid_specified = true;
1151 } else if (!strnicmp(data, "forcegid", 8)) {
1152 override_gid = 1;
1153 } else if (!strnicmp(data, "noforcegid", 10)) {
1154 override_gid = 0;
1da177e4
LT		 1155 } else if (strnicmp(data, "file_mode", 4) == 0) {
1156 if (value && *value) {
1157 vol->file_mode =
1158 simple_strtoul(value, &value, 0);
1159 }
1160 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1161 if (value && *value) {
1162 vol->dir_mode =
1163 simple_strtoul(value, &value, 0);
1164 }
1165 } else if (strnicmp(data, "dirmode", 4) == 0) {
1166 if (value && *value) {
1167 vol->dir_mode =
1168 simple_strtoul(value, &value, 0);
1169 }
1170 } else if (strnicmp(data, "port", 4) == 0) {
1171 if (value && *value) {
1172 vol->port =
1173 simple_strtoul(value, &value, 0);
1174 }
1175 } else if (strnicmp(data, "rsize", 5) == 0) {
1176 if (value && *value) {
1177 vol->rsize =
1178 simple_strtoul(value, &value, 0);
1179 }
1180 } else if (strnicmp(data, "wsize", 5) == 0) {
1181 if (value && *value) {
1182 vol->wsize =
1183 simple_strtoul(value, &value, 0);
1184 }
1185 } else if (strnicmp(data, "sockopt", 5) == 0) {
6a5fa236 1186 if (!value || !*value) {
b6b38f70 1187 cERROR(1, "no socket option specified");
6a5fa236
SF		 1188 continue;
1189 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1190 vol->sockopt_tcp_nodelay = 1;
1da177e4
LT		 1191 }
1192 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1193 if (!value || !*value || (*value == ' ')) {
b6b38f70 1194 cFYI(1, "invalid (empty) netbiosname");
1da177e4 1195 } else {
1397f2ee
JL		 1196 memset(vol->source_rfc1001_name, 0x20,
1197 RFC1001_NAME_LEN);
1198 /*
1199 * FIXME: are there cases in which a comma can
1200 * be valid in workstation netbios name (and
1201 * need special handling)?
1202 */
1203 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1204 /* don't ucase netbiosname for user */
50c2f753 1205 if (value[i] == 0)
1da177e4 1206 break;
1397f2ee 1207 vol->source_rfc1001_name[i] = value[i];
1da177e4
LT		 1208 }
1209 /* The string has 16th byte zero still from
1210 set at top of the function */
1397f2ee 1211 if (i == RFC1001_NAME_LEN && value[i] != 0)
50c2f753
SF		 1212 printk(KERN_WARNING "CIFS: netbiosname"
1213 " longer than 15 truncated.\n");
a10faeb2
SF		 1214 }
1215 } else if (strnicmp(data, "servern", 7) == 0) {
1216 /* servernetbiosname specified override *SMBSERVER */
1217 if (!value || !*value || (*value == ' ')) {
b6b38f70 1218 cFYI(1, "empty server netbiosname specified");
a10faeb2
SF		 1219 } else {
1220 /* last byte, type, is 0x20 for servr type */
1397f2ee
JL		 1221 memset(vol->target_rfc1001_name, 0x20,
1222 RFC1001_NAME_LEN_WITH_NULL);
a10faeb2 1223
50c2f753 1224 for (i = 0; i < 15; i++) {
a10faeb2 1225 /* BB are there cases in which a comma can be
50c2f753
SF		 1226 valid in this workstation netbios name
1227 (and need special handling)? */
a10faeb2 1228
50c2f753
SF		 1229 /* user or mount helper must uppercase
1230 the netbiosname */
1231 if (value[i] == 0)
a10faeb2
SF		 1232 break;
1233 else
50c2f753
SF		 1234 vol->target_rfc1001_name[i] =
1235 value[i];
a10faeb2
SF		 1236 }
1237 /* The string has 16th byte zero still from
1238 set at top of the function */
1397f2ee 1239 if (i == RFC1001_NAME_LEN && value[i] != 0)
50c2f753
SF		 1240 printk(KERN_WARNING "CIFS: server net"
1241 "biosname longer than 15 truncated.\n");
1da177e4 1242 }
6d20e840
SJ		 1243 } else if (strnicmp(data, "actimeo", 7) == 0) {
1244 if (value && *value) {
1245 vol->actimeo = HZ * simple_strtoul(value,
1246 &value, 0);
1247 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1248 cERROR(1, "CIFS: attribute cache"
1249 "timeout too large");
b946845a 1250 goto cifs_parse_mount_err;
6d20e840
SJ		 1251 }
1252 }
1da177e4
LT		 1253 } else if (strnicmp(data, "credentials", 4) == 0) {
1254 /* ignore */
1255 } else if (strnicmp(data, "version", 3) == 0) {
1256 /* ignore */
50c2f753 1257 } else if (strnicmp(data, "guest", 5) == 0) {
1da177e4 1258 /* ignore */
71a394fa
SF		 1259 } else if (strnicmp(data, "rw", 2) == 0) {
1260 /* ignore */
1261 } else if (strnicmp(data, "ro", 2) == 0) {
1262 /* ignore */
edf1ae40
SF		 1263 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1264 vol->noblocksnd = 1;
1265 } else if (strnicmp(data, "noautotune", 10) == 0) {
1266 vol->noautotune = 1;
1da177e4
LT		 1267 } else if ((strnicmp(data, "suid", 4) == 0) ||
1268 (strnicmp(data, "nosuid", 6) == 0) ||
1269 (strnicmp(data, "exec", 4) == 0) ||
1270 (strnicmp(data, "noexec", 6) == 0) ||
1271 (strnicmp(data, "nodev", 5) == 0) ||
1272 (strnicmp(data, "noauto", 6) == 0) ||
1273 (strnicmp(data, "dev", 3) == 0)) {
1274 /* The mount tool or mount.cifs helper (if present)
50c2f753
SF		 1275 uses these opts to set flags, and the flags are read
1276 by the kernel vfs layer before we get here (ie
1277 before read super) so there is no point trying to
1278 parse these options again and set anything and it
1279 is ok to just ignore them */
1da177e4 1280 continue;
1da177e4
LT		 1281 } else if (strnicmp(data, "hard", 4) == 0) {
1282 vol->retry = 1;
1283 } else if (strnicmp(data, "soft", 4) == 0) {
1284 vol->retry = 0;
1285 } else if (strnicmp(data, "perm", 4) == 0) {
1286 vol->noperm = 0;
1287 } else if (strnicmp(data, "noperm", 6) == 0) {
1288 vol->noperm = 1;
6a0b4824
SF		 1289 } else if (strnicmp(data, "mapchars", 8) == 0) {
1290 vol->remap = 1;
1291 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1292 vol->remap = 0;
50c2f753
SF		 1293 } else if (strnicmp(data, "sfu", 3) == 0) {
1294 vol->sfu_emul = 1;
1295 } else if (strnicmp(data, "nosfu", 5) == 0) {
1296 vol->sfu_emul = 0;
2c1b8615
SF		 1297 } else if (strnicmp(data, "nodfs", 5) == 0) {
1298 vol->nodfs = 1;
ac67055e
JA		 1299 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1300 vol->posix_paths = 1;
1301 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1302 vol->posix_paths = 0;
c18c842b
SF		 1303 } else if (strnicmp(data, "nounix", 6) == 0) {
1304 vol->no_linux_ext = 1;
1305 } else if (strnicmp(data, "nolinux", 7) == 0) {
1306 vol->no_linux_ext = 1;
50c2f753 1307 } else if ((strnicmp(data, "nocase", 6) == 0) ||
a10faeb2 1308 (strnicmp(data, "ignorecase", 10) == 0)) {
50c2f753 1309 vol->nocase = 1;
f636a348
JL		 1310 } else if (strnicmp(data, "mand", 4) == 0) {
1311 /* ignore */
1312 } else if (strnicmp(data, "nomand", 6) == 0) {
1313 /* ignore */
1314 } else if (strnicmp(data, "_netdev", 7) == 0) {
1315 /* ignore */
c46fa8ac
SF		 1316 } else if (strnicmp(data, "brl", 3) == 0) {
1317 vol->nobrl = 0;
50c2f753 1318 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1c955187 1319 (strnicmp(data, "nolock", 6) == 0)) {
c46fa8ac 1320 vol->nobrl = 1;
d3485d37
SF		 1321 /* turn off mandatory locking in mode
1322 if remote locking is turned off since the
1323 local vfs will do advisory */
50c2f753
SF		 1324 if (vol->file_mode ==
1325 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
d3485d37 1326 vol->file_mode = S_IALLUGO;
13a6e42a
SF		 1327 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1328 /* will take the shorter form "forcemand" as well */
1329 /* This mount option will force use of mandatory
1330 (DOS/Windows style) byte range locks, instead of
1331 using posix advisory byte range locks, even if the
1332 Unix extensions are available and posix locks would
1333 be supported otherwise. If Unix extensions are not
1334 negotiated this has no effect since mandatory locks
1335 would be used (mandatory locks is all that those
1336 those servers support) */
1337 vol->mand_lock = 1;
1da177e4
LT		 1338 } else if (strnicmp(data, "setuids", 7) == 0) {
1339 vol->setuids = 1;
1340 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1341 vol->setuids = 0;
d0a9c078
JL		 1342 } else if (strnicmp(data, "dynperm", 7) == 0) {
1343 vol->dynperm = true;
1344 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1345 vol->dynperm = false;
1da177e4
LT		 1346 } else if (strnicmp(data, "nohard", 6) == 0) {
1347 vol->retry = 0;
1348 } else if (strnicmp(data, "nosoft", 6) == 0) {
1349 vol->retry = 1;
1350 } else if (strnicmp(data, "nointr", 6) == 0) {
1351 vol->intr = 0;
1352 } else if (strnicmp(data, "intr", 4) == 0) {
1353 vol->intr = 1;
be652445
SF		 1354 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1355 vol->nostrictsync = 1;
1356 } else if (strnicmp(data, "strictsync", 10) == 0) {
1357 vol->nostrictsync = 0;
50c2f753 1358 } else if (strnicmp(data, "serverino", 7) == 0) {
1da177e4 1359 vol->server_ino = 1;
50c2f753 1360 } else if (strnicmp(data, "noserverino", 9) == 0) {
1da177e4 1361 vol->server_ino = 0;
50c2f753 1362 } else if (strnicmp(data, "cifsacl", 7) == 0) {
0a4b92c0
SF		 1363 vol->cifs_acl = 1;
1364 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1365 vol->cifs_acl = 0;
50c2f753 1366 } else if (strnicmp(data, "acl", 3) == 0) {
1da177e4 1367 vol->no_psx_acl = 0;
50c2f753 1368 } else if (strnicmp(data, "noacl", 5) == 0) {
1da177e4 1369 vol->no_psx_acl = 1;
84210e91
SF		 1370 } else if (strnicmp(data, "locallease", 6) == 0) {
1371 vol->local_lease = 1;
50c2f753 1372 } else if (strnicmp(data, "sign", 4) == 0) {
750d1151 1373 vol->secFlg |= CIFSSEC_MUST_SIGN;
95b1cb90
SF		 1374 } else if (strnicmp(data, "seal", 4) == 0) {
1375 /* we do not do the following in secFlags because seal
1376 is a per tree connection (mount) not a per socket
1377 or per-smb connection option in the protocol */
1378 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1379 vol->seal = 1;
50c2f753 1380 } else if (strnicmp(data, "direct", 6) == 0) {
1da177e4 1381 vol->direct_io = 1;
50c2f753 1382 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1da177e4 1383 vol->direct_io = 1;
d39454ff
PS		 1384 } else if (strnicmp(data, "strictcache", 11) == 0) {
1385 vol->strict_io = 1;
1da177e4 1386 } else if (strnicmp(data, "noac", 4) == 0) {
50c2f753
SF		 1387 printk(KERN_WARNING "CIFS: Mount option noac not "
1388 "supported. Instead set "
1389 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
fa1df75d 1390 } else if (strnicmp(data, "fsc", 3) == 0) {
607a569d
SJ		 1391#ifndef CONFIG_CIFS_FSCACHE
1392 cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE"
1393 "kernel config option set");
b946845a 1394 goto cifs_parse_mount_err;
607a569d 1395#endif
fa1df75d 1396 vol->fsc = true;
736a3320
SM		 1397 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1398 vol->mfsymlinks = true;
0eb8a132
JL		 1399 } else if (strnicmp(data, "multiuser", 8) == 0) {
1400 vol->multiuser = true;
1da177e4 1401 } else
50c2f753
SF		 1402 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1403 data);
1da177e4
LT		 1404 }
1405 if (vol->UNC == NULL) {
4523cc30 1406 if (devname == NULL) {
50c2f753
SF		 1407 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1408 "target\n");
b946845a 1409 goto cifs_parse_mount_err;
1da177e4
LT		 1410 }
1411 if ((temp_len = strnlen(devname, 300)) < 300) {
50c2f753 1412 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
4523cc30 1413 if (vol->UNC == NULL)
b946845a 1414 goto cifs_parse_mount_err;
50c2f753 1415 strcpy(vol->UNC, devname);
1da177e4
LT		 1416 if (strncmp(vol->UNC, "//", 2) == 0) {
1417 vol->UNC[0] = '\\';
1418 vol->UNC[1] = '\\';
1419 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
50c2f753
SF		 1420 printk(KERN_WARNING "CIFS: UNC Path does not "
1421 "begin with // or \\\\ \n");
b946845a 1422 goto cifs_parse_mount_err;
1da177e4 1423 }
7c5e628f
IM		 1424 value = strpbrk(vol->UNC+2, "/\\");
1425 if (value)
1426 *value = '\\';
1da177e4
LT		 1427 } else {
1428 printk(KERN_WARNING "CIFS: UNC name too long\n");
b946845a 1429 goto cifs_parse_mount_err;
1da177e4
LT		 1430 }
1431 }
0eb8a132
JL		 1432
1433 if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1434 cERROR(1, "Multiuser mounts currently require krb5 "
1435 "authentication!");
b946845a 1436 goto cifs_parse_mount_err;
0eb8a132
JL		 1437 }
1438
fb8c4b14 1439 if (vol->UNCip == NULL)
1da177e4
LT		 1440 vol->UNCip = &vol->UNC[2];
1441
9b9d6b24
JL		 1442 if (uid_specified)
1443 vol->override_uid = override_uid;
1444 else if (override_uid == 1)
1445 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1446 "specified with no uid= option.\n");
1447
1448 if (gid_specified)
1449 vol->override_gid = override_gid;
1450 else if (override_gid == 1)
1451 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1452 "specified with no gid= option.\n");
1453
b946845a 1454 kfree(mountdata_copy);
1da177e4 1455 return 0;
b946845a
SF		 1456
1457cifs_parse_mount_err:
1458 kfree(mountdata_copy);
1459 return 1;
1da177e4
LT		 1460}
1461
3eb9a889
BG		 1462/** Returns true if srcaddr isn't specified and rhs isn't
1463 * specified, or if srcaddr is specified and
1464 * matches the IP address of the rhs argument.
1465 */
1466static bool
1467srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1468{
1469 switch (srcaddr->sa_family) {
1470 case AF_UNSPEC:
1471 return (rhs->sa_family == AF_UNSPEC);
1472 case AF_INET: {
1473 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1474 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1475 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1476 }
1477 case AF_INET6: {
1478 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1479 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1480 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1481 }
1482 default:
1483 WARN_ON(1);
1484 return false; /* don't expect to be here */
1485 }
1486}
1487
4b886136
PS		 1488/*
1489 * If no port is specified in addr structure, we try to match with 445 port
1490 * and if it fails - with 139 ports. It should be called only if address
1491 * families of server and addr are equal.
1492 */
1493static bool
1494match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1495{
6da97910 1496 __be16 port, *sport;
4b886136
PS		 1497
1498 switch (addr->sa_family) {
1499 case AF_INET:
1500 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1501 port = ((struct sockaddr_in *) addr)->sin_port;
1502 break;
1503 case AF_INET6:
1504 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1505 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1506 break;
1507 default:
1508 WARN_ON(1);
1509 return false;
1510 }
1511
1512 if (!port) {
1513 port = htons(CIFS_PORT);
1514 if (port == *sport)
1515 return true;
1516
1517 port = htons(RFC1001_PORT);
1518 }
1519
1520 return port == *sport;
1521}
3eb9a889 1522
4515148e 1523static bool
3eb9a889
BG		 1524match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1525 struct sockaddr *srcaddr)
4515148e 1526{
4515148e 1527 switch (addr->sa_family) {
a9f1b85e
PS		 1528 case AF_INET: {
1529 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1530 struct sockaddr_in *srv_addr4 =
1531 (struct sockaddr_in *)&server->dstaddr;
1532
1533 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
4515148e 1534 return false;
4515148e 1535 break;
a9f1b85e
PS		 1536 }
1537 case AF_INET6: {
1538 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1539 struct sockaddr_in6 *srv_addr6 =
1540 (struct sockaddr_in6 *)&server->dstaddr;
1541
4515148e 1542 if (!ipv6_addr_equal(&addr6->sin6_addr,
a9f1b85e 1543 &srv_addr6->sin6_addr))
4515148e 1544 return false;
a9f1b85e 1545 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
4515148e 1546 return false;
4515148e
JL		 1547 break;
1548 }
a9f1b85e
PS		 1549 default:
1550 WARN_ON(1);
1551 return false; /* don't expect to be here */
1552 }
4515148e 1553
3eb9a889
BG		 1554 if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1555 return false;
1556
4515148e
JL		 1557 return true;
1558}
1559
daf5b0b6
JL		 1560static bool
1561match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1562{
1563 unsigned int secFlags;
1564
1565 if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1566 secFlags = vol->secFlg;
1567 else
1568 secFlags = global_secflags | vol->secFlg;
1569
1570 switch (server->secType) {
1571 case LANMAN:
1572 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1573 return false;
1574 break;
1575 case NTLMv2:
1576 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1577 return false;
1578 break;
1579 case NTLM:
1580 if (!(secFlags & CIFSSEC_MAY_NTLM))
1581 return false;
1582 break;
1583 case Kerberos:
1584 if (!(secFlags & CIFSSEC_MAY_KRB5))
1585 return false;
1586 break;
1587 case RawNTLMSSP:
1588 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1589 return false;
1590 break;
1591 default:
1592 /* shouldn't happen */
1593 return false;
1594 }
1595
25985edc 1596 /* now check if signing mode is acceptable */
daf5b0b6
JL		 1597 if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1598 (server->secMode & SECMODE_SIGN_REQUIRED))
1599 return false;
1600 else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1601 (server->secMode &
1602 (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1603 return false;
1604
1605 return true;
1606}
1607
37bb04e5
PS		 1608static int match_server(struct TCP_Server_Info *server, struct sockaddr *addr,
1609 struct smb_vol *vol)
1610{
1611 if (!net_eq(cifs_net_ns(server), current->nsproxy->net_ns))
1612 return 0;
1613
1614 if (!match_address(server, addr,
1615 (struct sockaddr *)&vol->srcaddr))
1616 return 0;
1617
1618 if (!match_port(server, addr))
1619 return 0;
1620
1621 if (!match_security(server, vol))
1622 return 0;
1623
1624 return 1;
1625}
1626
e7ddee90 1627static struct TCP_Server_Info *
daf5b0b6 1628cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1da177e4 1629{
e7ddee90 1630 struct TCP_Server_Info *server;
e7ddee90 1631
3f9bcca7 1632 spin_lock(&cifs_tcp_ses_lock);
4515148e 1633 list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
37bb04e5 1634 if (!match_server(server, addr, vol))
daf5b0b6
JL		 1635 continue;
1636
e7ddee90 1637 ++server->srv_count;
3f9bcca7 1638 spin_unlock(&cifs_tcp_ses_lock);
b6b38f70 1639 cFYI(1, "Existing tcp session with server found");
e7ddee90 1640 return server;
1da177e4 1641 }
3f9bcca7 1642 spin_unlock(&cifs_tcp_ses_lock);
1da177e4
LT		 1643 return NULL;
1644}
1b20d672 1645
14fbf50d 1646static void
e7ddee90 1647cifs_put_tcp_session(struct TCP_Server_Info *server)
1da177e4 1648{
e7ddee90 1649 struct task_struct *task;
1b20d672 1650
3f9bcca7 1651 spin_lock(&cifs_tcp_ses_lock);
e7ddee90 1652 if (--server->srv_count > 0) {
3f9bcca7 1653 spin_unlock(&cifs_tcp_ses_lock);
e7ddee90 1654 return;
1da177e4 1655 }
1b20d672 1656
f1d0c998
RL		 1657 put_net(cifs_net_ns(server));
1658
e7ddee90 1659 list_del_init(&server->tcp_ses_list);
3f9bcca7 1660 spin_unlock(&cifs_tcp_ses_lock);
dea570e0 1661
c74093b6
JL		 1662 cancel_delayed_work_sync(&server->echo);
1663
e7ddee90
JL		 1664 spin_lock(&GlobalMid_Lock);
1665 server->tcpStatus = CifsExiting;
1666 spin_unlock(&GlobalMid_Lock);
dea570e0 1667
d2b91521 1668 cifs_crypto_shash_release(server);
488f1d2d
SJ		 1669 cifs_fscache_release_client_cookie(server);
1670
21e73393
SP		 1671 kfree(server->session_key.response);
1672 server->session_key.response = NULL;
1673 server->session_key.len = 0;
1674
e7ddee90
JL		 1675 task = xchg(&server->tsk, NULL);
1676 if (task)
1677 force_sig(SIGKILL, task);
1da177e4
LT		 1678}
1679
63c038c2
JL		 1680static struct TCP_Server_Info *
1681cifs_get_tcp_session(struct smb_vol *volume_info)
1682{
1683 struct TCP_Server_Info *tcp_ses = NULL;
a9ac49d3 1684 struct sockaddr_storage addr;
63c038c2
JL		 1685 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1686 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1687 int rc;
1688
a9ac49d3 1689 memset(&addr, 0, sizeof(struct sockaddr_storage));
63c038c2 1690
b6b38f70 1691 cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
63c038c2 1692
1e68b2b2 1693 if (volume_info->UNCip && volume_info->UNC) {
50d97160
JL		 1694 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1695 volume_info->UNCip,
67b7626a 1696 strlen(volume_info->UNCip),
50d97160 1697 volume_info->port);
1e68b2b2 1698 if (!rc) {
63c038c2
JL		 1699 /* we failed translating address */
1700 rc = -EINVAL;
1701 goto out_err;
1702 }
63c038c2
JL		 1703 } else if (volume_info->UNCip) {
1704 /* BB using ip addr as tcp_ses name to connect to the
1705 DFS root below */
b6b38f70 1706 cERROR(1, "Connecting to DFS root not implemented yet");
63c038c2
JL		 1707 rc = -EINVAL;
1708 goto out_err;
1709 } else /* which tcp_sess DFS root would we conect to */ {
b6b38f70
JP		 1710 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1711 "unc=//192.168.1.100/public) specified");
63c038c2
JL		 1712 rc = -EINVAL;
1713 goto out_err;
1714 }
1715
1716 /* see if we already have a matching tcp_ses */
daf5b0b6 1717 tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
63c038c2
JL		 1718 if (tcp_ses)
1719 return tcp_ses;
1720
1721 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1722 if (!tcp_ses) {
1723 rc = -ENOMEM;
1724 goto out_err;
1725 }
1726
d2b91521
SP		 1727 rc = cifs_crypto_shash_allocate(tcp_ses);
1728 if (rc) {
1729 cERROR(1, "could not setup hash structures rc %d", rc);
1730 goto out_err;
1731 }
1732
f1d0c998 1733 cifs_set_net_ns(tcp_ses, get_net(current->nsproxy->net_ns));
63c038c2
JL		 1734 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1735 if (IS_ERR(tcp_ses->hostname)) {
1736 rc = PTR_ERR(tcp_ses->hostname);
f7c5445a 1737 goto out_err_crypto_release;
63c038c2
JL		 1738 }
1739
1740 tcp_ses->noblocksnd = volume_info->noblocksnd;
1741 tcp_ses->noautotune = volume_info->noautotune;
6a5fa236 1742 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
63c038c2
JL		 1743 atomic_set(&tcp_ses->inFlight, 0);
1744 init_waitqueue_head(&tcp_ses->response_q);
1745 init_waitqueue_head(&tcp_ses->request_q);
1746 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1747 mutex_init(&tcp_ses->srv_mutex);
1748 memcpy(tcp_ses->workstation_RFC1001_name,
1749 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1750 memcpy(tcp_ses->server_RFC1001_name,
1751 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
5d0d2882 1752 tcp_ses->session_estab = false;
63c038c2 1753 tcp_ses->sequence_number = 0;
fda35943 1754 tcp_ses->lstrp = jiffies;
63c038c2
JL		 1755 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1756 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
c74093b6 1757 INIT_DELAYED_WORK(&tcp_ses->echo, cifs_echo_request);
63c038c2
JL		 1758
1759 /*
1760 * at this point we are the only ones with the pointer
1761 * to the struct since the kernel thread not created yet
1762 * no need to spinlock this init of tcpStatus or srv_count
1763 */
1764 tcp_ses->tcpStatus = CifsNew;
3eb9a889
BG		 1765 memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1766 sizeof(tcp_ses->srcaddr));
63c038c2
JL		 1767 ++tcp_ses->srv_count;
1768
a9ac49d3 1769 if (addr.ss_family == AF_INET6) {
b6b38f70 1770 cFYI(1, "attempting ipv6 connect");
63c038c2
JL		 1771 /* BB should we allow ipv6 on port 139? */
1772 /* other OS never observed in Wild doing 139 with v6 */
a9f1b85e
PS		 1773 memcpy(&tcp_ses->dstaddr, sin_server6,
1774 sizeof(struct sockaddr_in6));
1775 } else
1776 memcpy(&tcp_ses->dstaddr, sin_server,
1777 sizeof(struct sockaddr_in));
1778
1779 rc = ip_connect(tcp_ses);
63c038c2 1780 if (rc < 0) {
b6b38f70 1781 cERROR(1, "Error connecting to socket. Aborting operation");
f7c5445a 1782 goto out_err_crypto_release;
63c038c2
JL		 1783 }
1784
1785 /*
1786 * since we're in a cifs function already, we know that
1787 * this will succeed. No need for try_module_get().
1788 */
1789 __module_get(THIS_MODULE);
1790 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1791 tcp_ses, "cifsd");
1792 if (IS_ERR(tcp_ses->tsk)) {
1793 rc = PTR_ERR(tcp_ses->tsk);
b6b38f70 1794 cERROR(1, "error %d create cifsd thread", rc);
63c038c2 1795 module_put(THIS_MODULE);
f7c5445a 1796 goto out_err_crypto_release;
63c038c2 1797 }
fd88ce93 1798 tcp_ses->tcpStatus = CifsNeedNegotiate;
63c038c2
JL		 1799
1800 /* thread spawned, put it on the list */
3f9bcca7 1801 spin_lock(&cifs_tcp_ses_lock);
63c038c2 1802 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
3f9bcca7 1803 spin_unlock(&cifs_tcp_ses_lock);
63c038c2 1804
488f1d2d
SJ		 1805 cifs_fscache_get_client_cookie(tcp_ses);
1806
c74093b6
JL		 1807 /* queue echo request delayed work */
1808 queue_delayed_work(system_nrt_wq, &tcp_ses->echo, SMB_ECHO_INTERVAL);
1809
63c038c2
JL		 1810 return tcp_ses;
1811
f7c5445a 1812out_err_crypto_release:
d2b91521
SP		 1813 cifs_crypto_shash_release(tcp_ses);
1814
f1d0c998
RL		 1815 put_net(cifs_net_ns(tcp_ses));
1816
63c038c2
JL		 1817out_err:
1818 if (tcp_ses) {
8347a5cd
SF		 1819 if (!IS_ERR(tcp_ses->hostname))
1820 kfree(tcp_ses->hostname);
63c038c2
JL		 1821 if (tcp_ses->ssocket)
1822 sock_release(tcp_ses->ssocket);
1823 kfree(tcp_ses);
1824 }
1825 return ERR_PTR(rc);
1826}
1827
37bb04e5
PS		 1828static int match_session(struct cifsSesInfo *ses, struct smb_vol *vol)
1829{
1830 switch (ses->server->secType) {
1831 case Kerberos:
1832 if (vol->cred_uid != ses->cred_uid)
1833 return 0;
1834 break;
1835 default:
1836 /* anything else takes username/password */
1837 if (ses->user_name == NULL)
1838 return 0;
1839 if (strncmp(ses->user_name, vol->username,
1840 MAX_USERNAME_SIZE))
1841 return 0;
1842 if (strlen(vol->username) != 0 &&
1843 ses->password != NULL &&
1844 strncmp(ses->password,
1845 vol->password ? vol->password : "",
1846 MAX_PASSWORD_SIZE))
1847 return 0;
1848 }
1849 return 1;
1850}
1851
14fbf50d 1852static struct cifsSesInfo *
4ff67b72 1853cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1da177e4 1854{
14fbf50d 1855 struct cifsSesInfo *ses;
dea570e0 1856
3f9bcca7 1857 spin_lock(&cifs_tcp_ses_lock);
4ff67b72 1858 list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
37bb04e5
PS		 1859 if (!match_session(ses, vol))
1860 continue;
14fbf50d 1861 ++ses->ses_count;
3f9bcca7 1862 spin_unlock(&cifs_tcp_ses_lock);
14fbf50d
JL		 1863 return ses;
1864 }
3f9bcca7 1865 spin_unlock(&cifs_tcp_ses_lock);
14fbf50d
JL		 1866 return NULL;
1867}
dea570e0 1868
14fbf50d
JL		 1869static void
1870cifs_put_smb_ses(struct cifsSesInfo *ses)
1871{
1872 int xid;
1873 struct TCP_Server_Info *server = ses->server;
dea570e0 1874
36988c76 1875 cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
3f9bcca7 1876 spin_lock(&cifs_tcp_ses_lock);
14fbf50d 1877 if (--ses->ses_count > 0) {
3f9bcca7 1878 spin_unlock(&cifs_tcp_ses_lock);
14fbf50d
JL		 1879 return;
1880 }
dea570e0 1881
14fbf50d 1882 list_del_init(&ses->smb_ses_list);
3f9bcca7 1883 spin_unlock(&cifs_tcp_ses_lock);
dea570e0 1884
14fbf50d
JL		 1885 if (ses->status == CifsGood) {
1886 xid = GetXid();
1887 CIFSSMBLogoff(xid, ses);
1888 _FreeXid(xid);
1889 }
1890 sesInfoFree(ses);
1891 cifs_put_tcp_session(server);
1892}
dea570e0 1893
d9b94201
SF		 1894static bool warned_on_ntlm; /* globals init to false automatically */
1895
36988c76
JL		 1896static struct cifsSesInfo *
1897cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1898{
1899 int rc = -ENOMEM, xid;
1900 struct cifsSesInfo *ses;
a9f1b85e
PS		 1901 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1902 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
36988c76
JL		 1903
1904 xid = GetXid();
1905
4ff67b72 1906 ses = cifs_find_smb_ses(server, volume_info);
36988c76
JL		 1907 if (ses) {
1908 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1909
36988c76 1910 mutex_lock(&ses->session_mutex);
198b5682
JL		 1911 rc = cifs_negotiate_protocol(xid, ses);
1912 if (rc) {
1913 mutex_unlock(&ses->session_mutex);
1914 /* problem -- put our ses reference */
1915 cifs_put_smb_ses(ses);
1916 FreeXid(xid);
1917 return ERR_PTR(rc);
1918 }
36988c76
JL		 1919 if (ses->need_reconnect) {
1920 cFYI(1, "Session needs reconnect");
1921 rc = cifs_setup_session(xid, ses,
1922 volume_info->local_nls);
1923 if (rc) {
1924 mutex_unlock(&ses->session_mutex);
1925 /* problem -- put our reference */
1926 cifs_put_smb_ses(ses);
1927 FreeXid(xid);
1928 return ERR_PTR(rc);
1929 }
1930 }
1931 mutex_unlock(&ses->session_mutex);
460cf341
JL		 1932
1933 /* existing SMB ses has a server reference already */
1934 cifs_put_tcp_session(server);
36988c76
JL		 1935 FreeXid(xid);
1936 return ses;
1937 }
1938
1939 cFYI(1, "Existing smb sess not found");
1940 ses = sesInfoAlloc();
1941 if (ses == NULL)
1942 goto get_ses_fail;
1943
1944 /* new SMB session uses our server ref */
1945 ses->server = server;
a9f1b85e
PS		 1946 if (server->dstaddr.ss_family == AF_INET6)
1947 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
36988c76 1948 else
a9f1b85e 1949 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
36988c76 1950
8727c8a8
SF		 1951 if (volume_info->username) {
1952 ses->user_name = kstrdup(volume_info->username, GFP_KERNEL);
1953 if (!ses->user_name)
1954 goto get_ses_fail;
1955 }
36988c76
JL		 1956
1957 /* volume_info->password freed at unmount */
1958 if (volume_info->password) {
1959 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
1960 if (!ses->password)
1961 goto get_ses_fail;
1962 }
1963 if (volume_info->domainname) {
d3686d54
SP		 1964 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
1965 if (!ses->domainName)
1966 goto get_ses_fail;
36988c76 1967 }
3e4b3e1f 1968 ses->cred_uid = volume_info->cred_uid;
36988c76 1969 ses->linux_uid = volume_info->linux_uid;
d9b94201
SF		 1970
1971 /* ntlmv2 is much stronger than ntlm security, and has been broadly
1972 supported for many years, time to update default security mechanism */
1973 if ((volume_info->secFlg == 0) && warned_on_ntlm == false) {
1974 warned_on_ntlm = true;
1975 cERROR(1, "default security mechanism requested. The default "
1976 "security mechanism will be upgraded from ntlm to "
1977 "ntlmv2 in kernel release 2.6.41");
1978 }
36988c76
JL		 1979 ses->overrideSecFlg = volume_info->secFlg;
1980
1981 mutex_lock(&ses->session_mutex);
198b5682
JL		 1982 rc = cifs_negotiate_protocol(xid, ses);
1983 if (!rc)
1984 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
36988c76 1985 mutex_unlock(&ses->session_mutex);
c8e56f1f 1986 if (rc)
36988c76
JL		 1987 goto get_ses_fail;
1988
1989 /* success, put it on the list */
3f9bcca7 1990 spin_lock(&cifs_tcp_ses_lock);
36988c76 1991 list_add(&ses->smb_ses_list, &server->smb_ses_list);
3f9bcca7 1992 spin_unlock(&cifs_tcp_ses_lock);
36988c76
JL		 1993
1994 FreeXid(xid);
1995 return ses;
1996
1997get_ses_fail:
1998 sesInfoFree(ses);
1999 FreeXid(xid);
2000 return ERR_PTR(rc);
2001}
2002
37bb04e5
PS		 2003static int match_tcon(struct cifsTconInfo *tcon, const char *unc)
2004{
2005 if (tcon->tidStatus == CifsExiting)
2006 return 0;
2007 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
2008 return 0;
2009 return 1;
2010}
2011
f1987b44
JL		 2012static struct cifsTconInfo *
2013cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
2014{
2015 struct list_head *tmp;
2016 struct cifsTconInfo *tcon;
2017
3f9bcca7 2018 spin_lock(&cifs_tcp_ses_lock);
f1987b44
JL		 2019 list_for_each(tmp, &ses->tcon_list) {
2020 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
37bb04e5 2021 if (!match_tcon(tcon, unc))
f1987b44 2022 continue;
f1987b44 2023 ++tcon->tc_count;
3f9bcca7 2024 spin_unlock(&cifs_tcp_ses_lock);
dea570e0 2025 return tcon;
1da177e4 2026 }
3f9bcca7 2027 spin_unlock(&cifs_tcp_ses_lock);
1da177e4
LT		 2028 return NULL;
2029}
2030
f1987b44
JL		 2031static void
2032cifs_put_tcon(struct cifsTconInfo *tcon)
2033{
2034 int xid;
2035 struct cifsSesInfo *ses = tcon->ses;
2036
d00c28de 2037 cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
3f9bcca7 2038 spin_lock(&cifs_tcp_ses_lock);
f1987b44 2039 if (--tcon->tc_count > 0) {
3f9bcca7 2040 spin_unlock(&cifs_tcp_ses_lock);
f1987b44
JL		 2041 return;
2042 }
2043
2044 list_del_init(&tcon->tcon_list);
3f9bcca7 2045 spin_unlock(&cifs_tcp_ses_lock);
f1987b44
JL		 2046
2047 xid = GetXid();
2048 CIFSSMBTDis(xid, tcon);
2049 _FreeXid(xid);
2050
d03382ce 2051 cifs_fscache_release_super_cookie(tcon);
9f841593 2052 tconInfoFree(tcon);
f1987b44
JL		 2053 cifs_put_smb_ses(ses);
2054}
2055
d00c28de
JL		 2056static struct cifsTconInfo *
2057cifs_get_tcon(struct cifsSesInfo *ses, struct smb_vol *volume_info)
2058{
2059 int rc, xid;
2060 struct cifsTconInfo *tcon;
2061
2062 tcon = cifs_find_tcon(ses, volume_info->UNC);
2063 if (tcon) {
2064 cFYI(1, "Found match on UNC path");
2065 /* existing tcon already has a reference */
2066 cifs_put_smb_ses(ses);
2067 if (tcon->seal != volume_info->seal)
2068 cERROR(1, "transport encryption setting "
2069 "conflicts with existing tid");
2070 return tcon;
2071 }
2072
2073 tcon = tconInfoAlloc();
2074 if (tcon == NULL) {
2075 rc = -ENOMEM;
2076 goto out_fail;
2077 }
2078
2079 tcon->ses = ses;
2080 if (volume_info->password) {
2081 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
2082 if (!tcon->password) {
2083 rc = -ENOMEM;
2084 goto out_fail;
2085 }
2086 }
2087
2088 if (strchr(volume_info->UNC + 3, '\\') == NULL
2089 && strchr(volume_info->UNC + 3, '/') == NULL) {
2090 cERROR(1, "Missing share name");
2091 rc = -ENODEV;
2092 goto out_fail;
2093 }
2094
2095 /* BB Do we need to wrap session_mutex around
2096 * this TCon call and Unix SetFS as
2097 * we do on SessSetup and reconnect? */
2098 xid = GetXid();
2099 rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
2100 FreeXid(xid);
2101 cFYI(1, "CIFS Tcon rc = %d", rc);
2102 if (rc)
2103 goto out_fail;
2104
2105 if (volume_info->nodfs) {
2106 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2107 cFYI(1, "DFS disabled (%d)", tcon->Flags);
2108 }
2109 tcon->seal = volume_info->seal;
2110 /* we can have only one retry value for a connection
2111 to a share so for resources mounted more than once
2112 to the same server share the last value passed in
2113 for the retry flag is used */
2114 tcon->retry = volume_info->retry;
2115 tcon->nocase = volume_info->nocase;
2116 tcon->local_lease = volume_info->local_lease;
2117
3f9bcca7 2118 spin_lock(&cifs_tcp_ses_lock);
d00c28de 2119 list_add(&tcon->tcon_list, &ses->tcon_list);
3f9bcca7 2120 spin_unlock(&cifs_tcp_ses_lock);
d00c28de 2121
d03382ce
SJ		 2122 cifs_fscache_get_super_cookie(tcon);
2123
d00c28de
JL		 2124 return tcon;
2125
2126out_fail:
2127 tconInfoFree(tcon);
2128 return ERR_PTR(rc);
2129}
2130
9d002df4
JL		 2131void
2132cifs_put_tlink(struct tcon_link *tlink)
2133{
2134 if (!tlink || IS_ERR(tlink))
2135 return;
2136
2137 if (!atomic_dec_and_test(&tlink->tl_count) ||
2138 test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2139 tlink->tl_time = jiffies;
2140 return;
2141 }
2142
2143 if (!IS_ERR(tlink_tcon(tlink)))
2144 cifs_put_tcon(tlink_tcon(tlink));
2145 kfree(tlink);
2146 return;
2147}
d00c28de 2148
1da177e4 2149int
50c2f753
SF		 2150get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
2151 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
366781c1 2152 struct dfs_info3_param **preferrals, int remap)
1da177e4
LT		 2153{
2154 char *temp_unc;
2155 int rc = 0;
2156
2157 *pnum_referrals = 0;
366781c1 2158 *preferrals = NULL;
1da177e4
LT		 2159
2160 if (pSesInfo->ipc_tid == 0) {
2161 temp_unc = kmalloc(2 /* for slashes */ +
50c2f753
SF		 2162 strnlen(pSesInfo->serverName,
2163 SERVER_NAME_LEN_WITH_NULL * 2)
1da177e4
LT		 2164 + 1 + 4 /* slash IPC$ */ + 2,
2165 GFP_KERNEL);
2166 if (temp_unc == NULL)
2167 return -ENOMEM;
2168 temp_unc[0] = '\\';
2169 temp_unc[1] = '\\';
2170 strcpy(temp_unc + 2, pSesInfo->serverName);
2171 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2172 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
b6b38f70 2173 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
1da177e4
LT		 2174 kfree(temp_unc);
2175 }
2176 if (rc == 0)
c2cf07d5 2177 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
737b758c 2178 pnum_referrals, nls_codepage, remap);
366781c1
SF		 2179 /* BB map targetUNCs to dfs_info3 structures, here or
2180 in CIFSGetDFSRefer BB */
1da177e4
LT		 2181
2182 return rc;
2183}
2184
09e50d55
JL		 2185#ifdef CONFIG_DEBUG_LOCK_ALLOC
2186static struct lock_class_key cifs_key[2];
2187static struct lock_class_key cifs_slock_key[2];
2188
2189static inline void
2190cifs_reclassify_socket4(struct socket *sock)
2191{
2192 struct sock *sk = sock->sk;
2193 BUG_ON(sock_owned_by_user(sk));
2194 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2195 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2196}
2197
2198static inline void
2199cifs_reclassify_socket6(struct socket *sock)
2200{
2201 struct sock *sk = sock->sk;
2202 BUG_ON(sock_owned_by_user(sk));
2203 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2204 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2205}
2206#else
2207static inline void
2208cifs_reclassify_socket4(struct socket *sock)
2209{
2210}
2211
2212static inline void
2213cifs_reclassify_socket6(struct socket *sock)
2214{
2215}
2216#endif
2217
1da177e4 2218/* See RFC1001 section 14 on representation of Netbios names */
50c2f753 2219static void rfc1002mangle(char *target, char *source, unsigned int length)
1da177e4 2220{
50c2f753 2221 unsigned int i, j;
1da177e4 2222
50c2f753 2223 for (i = 0, j = 0; i < (length); i++) {
1da177e4
LT		 2224 /* mask a nibble at a time and encode */
2225 target[j] = 'A' + (0x0F & (source[i] >> 4));
2226 target[j+1] = 'A' + (0x0F & source[i]);
50c2f753 2227 j += 2;
1da177e4
LT		 2228 }
2229
2230}
2231
3eb9a889
BG		 2232static int
2233bind_socket(struct TCP_Server_Info *server)
2234{
2235 int rc = 0;
2236 if (server->srcaddr.ss_family != AF_UNSPEC) {
2237 /* Bind to the specified local IP address */
2238 struct socket *socket = server->ssocket;
2239 rc = socket->ops->bind(socket,
2240 (struct sockaddr *) &server->srcaddr,
2241 sizeof(server->srcaddr));
2242 if (rc < 0) {
2243 struct sockaddr_in *saddr4;
2244 struct sockaddr_in6 *saddr6;
2245 saddr4 = (struct sockaddr_in *)&server->srcaddr;
2246 saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2247 if (saddr6->sin6_family == AF_INET6)
2248 cERROR(1, "cifs: "
2249 "Failed to bind to: %pI6c, error: %d\n",
2250 &saddr6->sin6_addr, rc);
2251 else
2252 cERROR(1, "cifs: "
2253 "Failed to bind to: %pI4, error: %d\n",
2254 &saddr4->sin_addr.s_addr, rc);
2255 }
2256 }
2257 return rc;
2258}
1da177e4
LT		 2259
2260static int
a9f1b85e 2261ip_rfc1001_connect(struct TCP_Server_Info *server)
1da177e4
LT		 2262{
2263 int rc = 0;
a9f1b85e
PS		 2264 /*
2265 * some servers require RFC1001 sessinit before sending
2266 * negprot - BB check reconnection in case where second
2267 * sessinit is sent but no second negprot
2268 */
2269 struct rfc1002_session_packet *ses_init_buf;
2270 struct smb_hdr *smb_buf;
2271 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2272 GFP_KERNEL);
2273 if (ses_init_buf) {
2274 ses_init_buf->trailer.session_req.called_len = 32;
2275
2276 if (server->server_RFC1001_name &&
2277 server->server_RFC1001_name[0] != 0)
2278 rfc1002mangle(ses_init_buf->trailer.
2279 session_req.called_name,
2280 server->server_RFC1001_name,
2281 RFC1001_NAME_LEN_WITH_NULL);
2282 else
2283 rfc1002mangle(ses_init_buf->trailer.
2284 session_req.called_name,
2285 DEFAULT_CIFS_CALLED_NAME,
2286 RFC1001_NAME_LEN_WITH_NULL);
2287
2288 ses_init_buf->trailer.session_req.calling_len = 32;
2289
2290 /*
2291 * calling name ends in null (byte 16) from old smb
2292 * convention.
2293 */
2294 if (server->workstation_RFC1001_name &&
2295 server->workstation_RFC1001_name[0] != 0)
2296 rfc1002mangle(ses_init_buf->trailer.
2297 session_req.calling_name,
2298 server->workstation_RFC1001_name,
2299 RFC1001_NAME_LEN_WITH_NULL);
2300 else
2301 rfc1002mangle(ses_init_buf->trailer.
2302 session_req.calling_name,
2303 "LINUX_CIFS_CLNT",
2304 RFC1001_NAME_LEN_WITH_NULL);
2305
2306 ses_init_buf->trailer.session_req.scope1 = 0;
2307 ses_init_buf->trailer.session_req.scope2 = 0;
2308 smb_buf = (struct smb_hdr *)ses_init_buf;
2309
2310 /* sizeof RFC1002_SESSION_REQUEST with no scope */
be8e3b00 2311 smb_buf->smb_buf_length = cpu_to_be32(0x81000044);
a9f1b85e
PS		 2312 rc = smb_send(server, smb_buf, 0x44);
2313 kfree(ses_init_buf);
2314 /*
2315 * RFC1001 layer in at least one server
2316 * requires very short break before negprot
2317 * presumably because not expecting negprot
2318 * to follow so fast. This is a simple
2319 * solution that works without
2320 * complicating the code and causes no
2321 * significant slowing down on mount
2322 * for everyone else
2323 */
2324 usleep_range(1000, 2000);
2325 }
2326 /*
2327 * else the negprot may still work without this
2328 * even though malloc failed
2329 */
2330
2331 return rc;
2332}
2333
2334static int
2335generic_ip_connect(struct TCP_Server_Info *server)
2336{
2337 int rc = 0;
6da97910 2338 __be16 sport;
a9f1b85e 2339 int slen, sfamily;
bcf4b106 2340 struct socket *socket = server->ssocket;
a9f1b85e
PS		 2341 struct sockaddr *saddr;
2342
2343 saddr = (struct sockaddr *) &server->dstaddr;
2344
2345 if (server->dstaddr.ss_family == AF_INET6) {
2346 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
2347 slen = sizeof(struct sockaddr_in6);
2348 sfamily = AF_INET6;
2349 } else {
2350 sport = ((struct sockaddr_in *) saddr)->sin_port;
2351 slen = sizeof(struct sockaddr_in);
2352 sfamily = AF_INET;
2353 }
1da177e4 2354
bcf4b106 2355 if (socket == NULL) {
f1d0c998
RL		 2356 rc = __sock_create(cifs_net_ns(server), sfamily, SOCK_STREAM,
2357 IPPROTO_TCP, &socket, 1);
1da177e4 2358 if (rc < 0) {
b6b38f70 2359 cERROR(1, "Error %d creating socket", rc);
a9f1b85e 2360 server->ssocket = NULL;
1da177e4 2361 return rc;
1da177e4 2362 }
bcf4b106
JL		 2363
2364 /* BB other socket options to set KEEPALIVE, NODELAY? */
b6b38f70 2365 cFYI(1, "Socket created");
bcf4b106
JL		 2366 server->ssocket = socket;
2367 socket->sk->sk_allocation = GFP_NOFS;
a9f1b85e
PS		 2368 if (sfamily == AF_INET6)
2369 cifs_reclassify_socket6(socket);
2370 else
2371 cifs_reclassify_socket4(socket);
1da177e4
LT		 2372 }
2373
3eb9a889
BG		 2374 rc = bind_socket(server);
2375 if (rc < 0)
2376 return rc;
2377
a9f1b85e
PS		 2378 rc = socket->ops->connect(socket, saddr, slen, 0);
2379 if (rc < 0) {
2380 cFYI(1, "Error %d connecting to server", rc);
bcf4b106
JL		 2381 sock_release(socket);
2382 server->ssocket = NULL;
1da177e4
LT		 2383 return rc;
2384 }
bcf4b106 2385
bcf4b106
JL		 2386 /*
2387 * Eventually check for other socket options to change from
a9f1b85e
PS		 2388 * the default. sock_setsockopt not used because it expects
2389 * user space buffer
bcf4b106
JL		 2390 */
2391 socket->sk->sk_rcvtimeo = 7 * HZ;
da505c38 2392 socket->sk->sk_sndtimeo = 5 * HZ;
edf1ae40 2393
b387eaeb 2394 /* make the bufsizes depend on wsize/rsize and max requests */
bcf4b106
JL		 2395 if (server->noautotune) {
2396 if (socket->sk->sk_sndbuf < (200 * 1024))
2397 socket->sk->sk_sndbuf = 200 * 1024;
2398 if (socket->sk->sk_rcvbuf < (140 * 1024))
2399 socket->sk->sk_rcvbuf = 140 * 1024;
edf1ae40 2400 }
1da177e4 2401
6a5fa236 2402 if (server->tcp_nodelay) {
a9f1b85e 2403 int val = 1;
6a5fa236
SF		 2404 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2405 (char *)&val, sizeof(val));
2406 if (rc)
b6b38f70 2407 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
6a5fa236
SF		 2408 }
2409
b6b38f70 2410 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
bcf4b106 2411 socket->sk->sk_sndbuf,
b6b38f70 2412 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
bcf4b106 2413
a9f1b85e
PS		 2414 if (sport == htons(RFC1001_PORT))
2415 rc = ip_rfc1001_connect(server);
50c2f753 2416
1da177e4
LT		 2417 return rc;
2418}
2419
2420static int
a9f1b85e 2421ip_connect(struct TCP_Server_Info *server)
1da177e4 2422{
6da97910 2423 __be16 *sport;
a9f1b85e
PS		 2424 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2425 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1da177e4 2426
a9f1b85e
PS		 2427 if (server->dstaddr.ss_family == AF_INET6)
2428 sport = &addr6->sin6_port;
2429 else
2430 sport = &addr->sin_port;
1da177e4 2431
a9f1b85e
PS		 2432 if (*sport == 0) {
2433 int rc;
1da177e4 2434
a9f1b85e
PS		 2435 /* try with 445 port at first */
2436 *sport = htons(CIFS_PORT);
3eb9a889 2437
a9f1b85e 2438 rc = generic_ip_connect(server);
1da177e4 2439 if (rc >= 0)
a9f1b85e 2440 return rc;
6a5fa236 2441
a9f1b85e
PS		 2442 /* if it failed, try with 139 port */
2443 *sport = htons(RFC1001_PORT);
6a5fa236
SF		 2444 }
2445
a9f1b85e 2446 return generic_ip_connect(server);
1da177e4
LT		 2447}
2448
50c2f753
SF		 2449void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
2450 struct super_block *sb, struct smb_vol *vol_info)
8af18971
SF		 2451{
2452 /* if we are reconnecting then should we check to see if
2453 * any requested capabilities changed locally e.g. via
2454 * remount but we can not do much about it here
2455 * if they have (even if we could detect it by the following)
2456 * Perhaps we could add a backpointer to array of sb from tcon
2457 * or if we change to make all sb to same share the same
2458 * sb as NFS - then we only have one backpointer to sb.
2459 * What if we wanted to mount the server share twice once with
2460 * and once without posixacls or posix paths? */
2461 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
50c2f753 2462
c18c842b
SF		 2463 if (vol_info && vol_info->no_linux_ext) {
2464 tcon->fsUnixInfo.Capability = 0;
2465 tcon->unix_ext = 0; /* Unix Extensions disabled */
b6b38f70 2466 cFYI(1, "Linux protocol extensions disabled");
c18c842b
SF		 2467 return;
2468 } else if (vol_info)
2469 tcon->unix_ext = 1; /* Unix Extensions supported */
2470
2471 if (tcon->unix_ext == 0) {
b6b38f70 2472 cFYI(1, "Unix extensions disabled so not set on reconnect");
c18c842b
SF		 2473 return;
2474 }
50c2f753 2475
fb8c4b14 2476 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
8af18971 2477 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
6848b733 2478 cFYI(1, "unix caps which server supports %lld", cap);
8af18971
SF		 2479 /* check for reconnect case in which we do not
2480 want to change the mount behavior if we can avoid it */
fb8c4b14 2481 if (vol_info == NULL) {
50c2f753 2482 /* turn off POSIX ACL and PATHNAMES if not set
8af18971
SF		 2483 originally at mount time */
2484 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2485 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
11b6d645
IM		 2486 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2487 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
b6b38f70 2488 cERROR(1, "POSIXPATH support change");
8af18971 2489 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
11b6d645 2490 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
b6b38f70
JP		 2491 cERROR(1, "possible reconnect error");
2492 cERROR(1, "server disabled POSIX path support");
11b6d645 2493 }
8af18971 2494 }
50c2f753 2495
6848b733
SF		 2496 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2497 cERROR(1, "per-share encryption not supported yet");
2498
8af18971 2499 cap &= CIFS_UNIX_CAP_MASK;
75865f8c 2500 if (vol_info && vol_info->no_psx_acl)
8af18971 2501 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
75865f8c 2502 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
b6b38f70 2503 cFYI(1, "negotiated posix acl support");
fb8c4b14 2504 if (sb)
8af18971
SF		 2505 sb->s_flags |= MS_POSIXACL;
2506 }
2507
75865f8c 2508 if (vol_info && vol_info->posix_paths == 0)
8af18971 2509 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
75865f8c 2510 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
b6b38f70 2511 cFYI(1, "negotiate posix pathnames");
75865f8c 2512 if (sb)
50c2f753 2513 CIFS_SB(sb)->mnt_cifs_flags |=
8af18971
SF		 2514 CIFS_MOUNT_POSIX_PATHS;
2515 }
50c2f753 2516
75865f8c
SF		 2517 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2518 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2519 CIFS_SB(sb)->rsize = 127 * 1024;
b6b38f70 2520 cFYI(DBG2, "larger reads not supported by srv");
75865f8c
SF		 2521 }
2522 }
50c2f753
SF		 2523
2524
b6b38f70 2525 cFYI(1, "Negotiate caps 0x%x", (int)cap);
8af18971 2526#ifdef CONFIG_CIFS_DEBUG2
75865f8c 2527 if (cap & CIFS_UNIX_FCNTL_CAP)
b6b38f70 2528 cFYI(1, "FCNTL cap");
75865f8c 2529 if (cap & CIFS_UNIX_EXTATTR_CAP)
b6b38f70 2530 cFYI(1, "EXTATTR cap");
75865f8c 2531 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
b6b38f70 2532 cFYI(1, "POSIX path cap");
75865f8c 2533 if (cap & CIFS_UNIX_XATTR_CAP)
b6b38f70 2534 cFYI(1, "XATTR cap");
75865f8c 2535 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
b6b38f70 2536 cFYI(1, "POSIX ACL cap");
75865f8c 2537 if (cap & CIFS_UNIX_LARGE_READ_CAP)
b6b38f70 2538 cFYI(1, "very large read cap");
75865f8c 2539 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
b6b38f70 2540 cFYI(1, "very large write cap");
6848b733
SF		 2541 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP)
2542 cFYI(1, "transport encryption cap");
2543 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2544 cFYI(1, "mandatory transport encryption cap");
8af18971
SF		 2545#endif /* CIFS_DEBUG2 */
2546 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
442aa310 2547 if (vol_info == NULL) {
b6b38f70 2548 cFYI(1, "resetting capabilities failed");
442aa310 2549 } else
b6b38f70 2550 cERROR(1, "Negotiating Unix capabilities "
5a44b319
SF		 2551 "with the server failed. Consider "
2552 "mounting with the Unix Extensions\n"
2553 "disabled, if problems are found, "
2554 "by specifying the nounix mount "
b6b38f70 2555 "option.");
5a44b319 2556
8af18971
SF		 2557 }
2558 }
2559}
2560
724d9f1c
PS		 2561void cifs_setup_cifs_sb(struct smb_vol *pvolume_info,
2562 struct cifs_sb_info *cifs_sb)
b1c8d2b4 2563{
2de970ff
JL		 2564 INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2565
3b795210 2566 if (pvolume_info->rsize > CIFSMaxBufSize) {
b6b38f70
JP		 2567 cERROR(1, "rsize %d too large, using MaxBufSize",
2568 pvolume_info->rsize);
3b795210
SF		 2569 cifs_sb->rsize = CIFSMaxBufSize;
2570 } else if ((pvolume_info->rsize) &&
2571 (pvolume_info->rsize <= CIFSMaxBufSize))
2572 cifs_sb->rsize = pvolume_info->rsize;
2573 else /* default */
2574 cifs_sb->rsize = CIFSMaxBufSize;
2575
3b795210
SF		 2576 if (cifs_sb->rsize < 2048) {
2577 cifs_sb->rsize = 2048;
2578 /* Windows ME may prefer this */
b6b38f70 2579 cFYI(1, "readsize set to minimum: 2048");
3b795210 2580 }
3b795210
SF		 2581 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2582 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2583 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2584 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
b6b38f70
JP		 2585 cFYI(1, "file mode: 0x%x dir mode: 0x%x",
2586 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
3b795210 2587
6d20e840 2588 cifs_sb->actimeo = pvolume_info->actimeo;
724d9f1c 2589 cifs_sb->local_nls = pvolume_info->local_nls;
6d20e840 2590
3b795210
SF		 2591 if (pvolume_info->noperm)
2592 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2593 if (pvolume_info->setuids)
2594 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2595 if (pvolume_info->server_ino)
2596 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2597 if (pvolume_info->remap)
2598 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2599 if (pvolume_info->no_xattr)
2600 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2601 if (pvolume_info->sfu_emul)
2602 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2603 if (pvolume_info->nobrl)
2604 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
be652445 2605 if (pvolume_info->nostrictsync)
4717bed6 2606 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
13a6e42a
SF		 2607 if (pvolume_info->mand_lock)
2608 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
3b795210
SF		 2609 if (pvolume_info->cifs_acl)
2610 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2611 if (pvolume_info->override_uid)
2612 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2613 if (pvolume_info->override_gid)
2614 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2615 if (pvolume_info->dynperm)
2616 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
fa1df75d
SJ		 2617 if (pvolume_info->fsc)
2618 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
0eb8a132
JL		 2619 if (pvolume_info->multiuser)
2620 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2621 CIFS_MOUNT_NO_PERM);
d39454ff
PS		 2622 if (pvolume_info->strict_io)
2623 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_STRICT_IO;
3b795210 2624 if (pvolume_info->direct_io) {
b6b38f70 2625 cFYI(1, "mounting share using direct i/o");
3b795210
SF		 2626 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2627 }
736a3320
SM		 2628 if (pvolume_info->mfsymlinks) {
2629 if (pvolume_info->sfu_emul) {
2630 cERROR(1, "mount option mfsymlinks ignored if sfu "
2631 "mount option is used");
2632 } else {
2633 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2634 }
2635 }
3b795210
SF		 2636
2637 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
b6b38f70
JP		 2638 cERROR(1, "mount option dynperm ignored if cifsacl "
2639 "mount option supported");
b1c8d2b4
JL		 2640}
2641
f7910cbd
JL		 2642/*
2643 * When the server supports very large writes via POSIX extensions, we can
2644 * allow up to 2^24 - PAGE_CACHE_SIZE.
2645 *
2646 * Note that this might make for "interesting" allocation problems during
2647 * writeback however (as we have to allocate an array of pointers for the
2648 * pages). A 16M write means ~32kb page array with PAGE_CACHE_SIZE == 4096.
2649 */
2650#define CIFS_MAX_WSIZE ((1<<24) - PAGE_CACHE_SIZE)
2651
2652/*
2653 * When the server doesn't allow large posix writes, default to a wsize of
2654 * 128k - PAGE_CACHE_SIZE -- one page less than the largest frame size
2655 * described in RFC1001. This allows space for the header without going over
2656 * that by default.
2657 */
2658#define CIFS_MAX_RFC1001_WSIZE (128 * 1024 - PAGE_CACHE_SIZE)
2659
2660/*
2661 * The default wsize is 1M. find_get_pages seems to return a maximum of 256
2662 * pages in a single call. With PAGE_CACHE_SIZE == 4k, this means we can fill
2663 * a single wsize request with a single call.
2664 */
2665#define CIFS_DEFAULT_WSIZE (1024 * 1024)
2666
2667static unsigned int
2668cifs_negotiate_wsize(struct cifsTconInfo *tcon, struct smb_vol *pvolume_info)
2669{
2670 __u64 unix_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2671 struct TCP_Server_Info *server = tcon->ses->server;
2672 unsigned int wsize = pvolume_info->wsize ? pvolume_info->wsize :
2673 CIFS_DEFAULT_WSIZE;
2674
2675 /* can server support 24-bit write sizes? (via UNIX extensions) */
2676 if (!tcon->unix_ext || !(unix_cap & CIFS_UNIX_LARGE_WRITE_CAP))
2677 wsize = min_t(unsigned int, wsize, CIFS_MAX_RFC1001_WSIZE);
2678
2679 /* no CAP_LARGE_WRITE_X? Limit it to 16 bits */
2680 if (!(server->capabilities & CAP_LARGE_WRITE_X))
2681 wsize = min_t(unsigned int, wsize, USHRT_MAX);
2682
2683 /* hard limit of CIFS_MAX_WSIZE */
2684 wsize = min_t(unsigned int, wsize, CIFS_MAX_WSIZE);
2685
2686 return wsize;
2687}
2688
e4cce94c
IM		 2689static int
2690is_path_accessible(int xid, struct cifsTconInfo *tcon,
2691 struct cifs_sb_info *cifs_sb, const char *full_path)
2692{
2693 int rc;
e4cce94c
IM		 2694 FILE_ALL_INFO *pfile_info;
2695
e4cce94c
IM		 2696 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2697 if (pfile_info == NULL)
2698 return -ENOMEM;
2699
2700 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2701 0 /* not legacy */, cifs_sb->local_nls,
2702 cifs_sb->mnt_cifs_flags &
2703 CIFS_MOUNT_MAP_SPECIAL_CHR);
221d1d79
JL		 2704
2705 if (rc == -EOPNOTSUPP || rc == -EINVAL)
2706 rc = SMBQueryInformation(xid, tcon, full_path, pfile_info,
2707 cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
2708 CIFS_MOUNT_MAP_SPECIAL_CHR);
e4cce94c
IM		 2709 kfree(pfile_info);
2710 return rc;
2711}
2712
724d9f1c
PS		 2713void
2714cifs_cleanup_volume_info(struct smb_vol **pvolume_info)
1bfe73c2
IM		 2715{
2716 struct smb_vol *volume_info;
2717
ad6cca6d 2718 if (!pvolume_info || !*pvolume_info)
1bfe73c2
IM		 2719 return;
2720
2721 volume_info = *pvolume_info;
b946845a 2722 kfree(volume_info->username);
1bfe73c2
IM		 2723 kzfree(volume_info->password);
2724 kfree(volume_info->UNC);
b946845a
SF		 2725 kfree(volume_info->UNCip);
2726 kfree(volume_info->domainname);
2727 kfree(volume_info->iocharset);
1bfe73c2
IM		 2728 kfree(volume_info->prepath);
2729 kfree(volume_info);
2730 *pvolume_info = NULL;
2731 return;
2732}
2733
2d6d589d 2734#ifdef CONFIG_CIFS_DFS_UPCALL
1bfe73c2
IM		 2735/* build_path_to_root returns full path to root when
2736 * we do not have an exiting connection (tcon) */
2737static char *
2738build_unc_path_to_root(const struct smb_vol *volume_info,
2739 const struct cifs_sb_info *cifs_sb)
2740{
2741 char *full_path;
2742
2743 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
f87d39d9 2744 full_path = kmalloc(unc_len + 1, GFP_KERNEL);
1bfe73c2
IM		 2745 if (full_path == NULL)
2746 return ERR_PTR(-ENOMEM);
2747
2748 strncpy(full_path, volume_info->UNC, unc_len);
f87d39d9
SF		 2749 full_path[unc_len] = 0; /* add trailing null */
2750 convert_delimiter(full_path, CIFS_DIR_SEP(cifs_sb));
1bfe73c2
IM		 2751 return full_path;
2752}
dd613945
SF		 2753
2754/*
2755 * Perform a dfs referral query for a share and (optionally) prefix
2756 *
046462ab
SF		 2757 * If a referral is found, cifs_sb->mountdata will be (re-)allocated
2758 * to a string containing updated options for the submount. Otherwise it
2759 * will be left untouched.
dd613945
SF		 2760 *
2761 * Returns the rc from get_dfs_path to the caller, which can be used to
2762 * determine whether there were referrals.
2763 */
2764static int
2765expand_dfs_referral(int xid, struct cifsSesInfo *pSesInfo,
2766 struct smb_vol *volume_info, struct cifs_sb_info *cifs_sb,
046462ab 2767 int check_prefix)
dd613945
SF		 2768{
2769 int rc;
2770 unsigned int num_referrals = 0;
2771 struct dfs_info3_param *referrals = NULL;
2772 char *full_path = NULL, *ref_path = NULL, *mdata = NULL;
2773
2774 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2775 if (IS_ERR(full_path))
2776 return PTR_ERR(full_path);
2777
2778 /* For DFS paths, skip the first '\' of the UNC */
2779 ref_path = check_prefix ? full_path + 1 : volume_info->UNC + 1;
2780
2781 rc = get_dfs_path(xid, pSesInfo , ref_path, cifs_sb->local_nls,
2782 &num_referrals, &referrals,
2783 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2784
2785 if (!rc && num_referrals > 0) {
2786 char *fake_devname = NULL;
2787
2788 mdata = cifs_compose_mount_options(cifs_sb->mountdata,
2789 full_path + 1, referrals,
2790 &fake_devname);
2791
2792 free_dfs_info_array(referrals, num_referrals);
2793 kfree(fake_devname);
2794
046462ab
SF		 2795 if (cifs_sb->mountdata != NULL)
2796 kfree(cifs_sb->mountdata);
2797
dd613945
SF		 2798 if (IS_ERR(mdata)) {
2799 rc = PTR_ERR(mdata);
2800 mdata = NULL;
2801 }
046462ab 2802 cifs_sb->mountdata = mdata;
dd613945
SF		 2803 }
2804 kfree(full_path);
2805 return rc;
2806}
2d6d589d 2807#endif
1bfe73c2 2808
724d9f1c
PS		 2809int cifs_setup_volume_info(struct smb_vol **pvolume_info, char *mount_data,
2810 const char *devname)
1da177e4 2811{
7586b765 2812 struct smb_vol *volume_info;
724d9f1c 2813 int rc = 0;
1da177e4 2814
724d9f1c 2815 *pvolume_info = NULL;
1da177e4 2816
7586b765
JL		 2817 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2818 if (!volume_info) {
2819 rc = -ENOMEM;
2820 goto out;
2821 }
50c2f753 2822
724d9f1c 2823 if (cifs_parse_mount_options(mount_data, devname,
f14bcf71 2824 volume_info)) {
70fe7dc0
JL		 2825 rc = -EINVAL;
2826 goto out;
1da177e4
LT		 2827 }
2828
7586b765 2829 if (volume_info->nullauth) {
b6b38f70 2830 cFYI(1, "null user");
7586b765
JL		 2831 volume_info->username = "";
2832 } else if (volume_info->username) {
1da177e4 2833 /* BB fixme parse for domain name here */
b6b38f70 2834 cFYI(1, "Username: %s", volume_info->username);
1da177e4 2835 } else {
bf820679 2836 cifserror("No username specified");
50c2f753
SF		 2837 /* In userspace mount helper we can get user name from alternate
2838 locations such as env variables and files on disk */
70fe7dc0
JL		 2839 rc = -EINVAL;
2840 goto out;
1da177e4
LT		 2841 }
2842
1da177e4 2843 /* this is needed for ASCII cp to Unicode converts */
7586b765 2844 if (volume_info->iocharset == NULL) {
a5fc4ce0
JL		 2845 /* load_nls_default cannot return null */
2846 volume_info->local_nls = load_nls_default();
1da177e4 2847 } else {
a5fc4ce0
JL		 2848 volume_info->local_nls = load_nls(volume_info->iocharset);
2849 if (volume_info->local_nls == NULL) {
b6b38f70
JP		 2850 cERROR(1, "CIFS mount error: iocharset %s not found",
2851 volume_info->iocharset);
70fe7dc0
JL		 2852 rc = -ELIBACC;
2853 goto out;
1da177e4
LT		 2854 }
2855 }
724d9f1c
PS		 2856
2857 *pvolume_info = volume_info;
2858 return rc;
2859out:
2860 cifs_cleanup_volume_info(&volume_info);
2861 return rc;
2862}
2863
2864int
2865cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2866 struct smb_vol *volume_info, const char *devname)
2867{
2868 int rc = 0;
2869 int xid;
2870 struct cifsSesInfo *pSesInfo;
2871 struct cifsTconInfo *tcon;
2872 struct TCP_Server_Info *srvTcp;
2873 char *full_path;
2874 struct tcon_link *tlink;
2875#ifdef CONFIG_CIFS_DFS_UPCALL
2876 int referral_walks_count = 0;
2877try_mount_again:
2878 /* cleanup activities if we're chasing a referral */
2879 if (referral_walks_count) {
2880 if (tcon)
2881 cifs_put_tcon(tcon);
2882 else if (pSesInfo)
2883 cifs_put_smb_ses(pSesInfo);
2884
2885 cifs_cleanup_volume_info(&volume_info);
2886 FreeXid(xid);
2887 }
2888#endif
2889 tcon = NULL;
2890 pSesInfo = NULL;
2891 srvTcp = NULL;
2892 full_path = NULL;
2893 tlink = NULL;
2894
2895 xid = GetXid();
1da177e4 2896
63c038c2 2897 /* get a reference to a tcp session */
7586b765 2898 srvTcp = cifs_get_tcp_session(volume_info);
63c038c2
JL		 2899 if (IS_ERR(srvTcp)) {
2900 rc = PTR_ERR(srvTcp);
2901 goto out;
1da177e4
LT		 2902 }
2903
36988c76
JL		 2904 /* get a reference to a SMB session */
2905 pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
2906 if (IS_ERR(pSesInfo)) {
2907 rc = PTR_ERR(pSesInfo);
2908 pSesInfo = NULL;
2909 goto mount_fail_check;
1da177e4 2910 }
50c2f753 2911
d00c28de
JL		 2912 if (pSesInfo->capabilities & CAP_LARGE_FILES)
2913 sb->s_maxbytes = MAX_LFS_FILESIZE;
2914 else
2915 sb->s_maxbytes = MAX_NON_LFS;
1da177e4 2916
8af18971 2917 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
1da177e4
LT		 2918 sb->s_time_gran = 100;
2919
d00c28de
JL		 2920 /* search for existing tcon to this server share */
2921 tcon = cifs_get_tcon(pSesInfo, volume_info);
2922 if (IS_ERR(tcon)) {
2923 rc = PTR_ERR(tcon);
2924 tcon = NULL;
1bfe73c2 2925 goto remote_path_check;
d00c28de 2926 }
1bfe73c2 2927
d82c2df5 2928 /* tell server which Unix caps we support */
6848b733 2929 if (tcon->ses->capabilities & CAP_UNIX) {
d82c2df5
SF		 2930 /* reset of caps checks mount to see if unix extensions
2931 disabled for just this mount */
7586b765 2932 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
6848b733
SF		 2933 if ((tcon->ses->server->tcpStatus == CifsNeedReconnect) &&
2934 (le64_to_cpu(tcon->fsUnixInfo.Capability) &
2935 CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)) {
2936 rc = -EACCES;
2937 goto mount_fail_check;
2938 }
2939 } else
d82c2df5 2940 tcon->unix_ext = 0; /* server does not support them */
c18c842b 2941
6848b733
SF		 2942 /* do not care if following two calls succeed - informational */
2943 if (!tcon->ipc) {
2944 CIFSSMBQFSDeviceInfo(xid, tcon);
2945 CIFSSMBQFSAttributeInfo(xid, tcon);
2946 }
2947
d82c2df5
SF		 2948 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2949 cifs_sb->rsize = 1024 * 127;
b6b38f70 2950 cFYI(DBG2, "no very large read support, rsize now 127K");
1da177e4 2951 }
d82c2df5
SF		 2952 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2953 cifs_sb->rsize = min(cifs_sb->rsize,
2954 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
1da177e4 2955
f7910cbd
JL		 2956 cifs_sb->wsize = cifs_negotiate_wsize(tcon, volume_info);
2957
1bfe73c2 2958remote_path_check:
c1508ca2
SF		 2959#ifdef CONFIG_CIFS_DFS_UPCALL
2960 /*
2961 * Perform an unconditional check for whether there are DFS
2962 * referrals for this path without prefix, to provide support
2963 * for DFS referrals from w2k8 servers which don't seem to respond
2964 * with PATH_NOT_COVERED to requests that include the prefix.
2965 * Chase the referral if found, otherwise continue normally.
2966 */
2967 if (referral_walks_count == 0) {
2968 int refrc = expand_dfs_referral(xid, pSesInfo, volume_info,
046462ab 2969 cifs_sb, false);
c1508ca2
SF		 2970 if (!refrc) {
2971 referral_walks_count++;
2972 goto try_mount_again;
2973 }
2974 }
2975#endif
2976
f87d39d9 2977 /* check if a whole path is not remote */
70945643 2978 if (!rc && tcon) {
e4cce94c 2979 /* build_path_to_root works only when we have a valid tcon */
f87d39d9 2980 full_path = cifs_build_path_to_root(volume_info, cifs_sb, tcon);
e4cce94c
IM		 2981 if (full_path == NULL) {
2982 rc = -ENOMEM;
2983 goto mount_fail_check;
2984 }
2985 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
03ceace5 2986 if (rc != 0 && rc != -EREMOTE) {
e4cce94c
IM		 2987 kfree(full_path);
2988 goto mount_fail_check;
2989 }
2990 kfree(full_path);
2991 }
2992
1bfe73c2
IM		 2993 /* get referral if needed */
2994 if (rc == -EREMOTE) {
d036f50f 2995#ifdef CONFIG_CIFS_DFS_UPCALL
5c2503a8
IM		 2996 if (referral_walks_count > MAX_NESTED_LINKS) {
2997 /*
2998 * BB: when we implement proper loop detection,
2999 * we will remove this check. But now we need it
3000 * to prevent an indefinite loop if 'DFS tree' is
3001 * misconfigured (i.e. has loops).
3002 */
3003 rc = -ELOOP;
3004 goto mount_fail_check;
3005 }
1bfe73c2 3006
dd613945 3007 rc = expand_dfs_referral(xid, pSesInfo, volume_info, cifs_sb,
046462ab 3008 true);
7b91e266 3009
dd613945 3010 if (!rc) {
5c2503a8 3011 referral_walks_count++;
1bfe73c2
IM		 3012 goto try_mount_again;
3013 }
dd613945 3014 goto mount_fail_check;
d036f50f
SF		 3015#else /* No DFS support, return error on mount */
3016 rc = -EOPNOTSUPP;
3017#endif
1bfe73c2
IM		 3018 }
3019
9d002df4
JL		 3020 if (rc)
3021 goto mount_fail_check;
3022
3023 /* now, hang the tcon off of the superblock */
3024 tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
3025 if (tlink == NULL) {
3026 rc = -ENOMEM;
3027 goto mount_fail_check;
3028 }
3029
b647c35f 3030 tlink->tl_uid = pSesInfo->linux_uid;
9d002df4
JL		 3031 tlink->tl_tcon = tcon;
3032 tlink->tl_time = jiffies;
3033 set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
3034 set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3035
b647c35f 3036 cifs_sb->master_tlink = tlink;
9d002df4 3037 spin_lock(&cifs_sb->tlink_tree_lock);
b647c35f 3038 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
9d002df4 3039 spin_unlock(&cifs_sb->tlink_tree_lock);
413e661c 3040
2de970ff
JL		 3041 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3042 TLINK_IDLE_EXPIRE);
3043
1bfe73c2
IM		 3044mount_fail_check:
3045 /* on error free sesinfo and tcon struct if needed */
3046 if (rc) {
1bfe73c2 3047 /* If find_unc succeeded then rc == 0 so we can not end */
25985edc 3048 /* up accidentally freeing someone elses tcon struct */
1bfe73c2
IM		 3049 if (tcon)
3050 cifs_put_tcon(tcon);
3051 else if (pSesInfo)
3052 cifs_put_smb_ses(pSesInfo);
3053 else
3054 cifs_put_tcp_session(srvTcp);
3055 goto out;
3056 }
3057
7586b765 3058 /* volume_info->password is freed above when existing session found
1da177e4
LT		 3059 (in which case it is not needed anymore) but when new sesion is created
3060 the password ptr is put in the new session structure (in which case the
3061 password will be freed at unmount time) */
70fe7dc0
JL		 3062out:
3063 /* zero out password before freeing */
1da177e4
LT		 3064 FreeXid(xid);
3065 return rc;
3066}
3067
1da177e4
LT		 3068int
3069CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
3070 const char *tree, struct cifsTconInfo *tcon,
3071 const struct nls_table *nls_codepage)
3072{
3073 struct smb_hdr *smb_buffer;
3074 struct smb_hdr *smb_buffer_response;
3075 TCONX_REQ *pSMB;
3076 TCONX_RSP *pSMBr;
3077 unsigned char *bcc_ptr;
3078 int rc = 0;
690c522f
JL		 3079 int length;
3080 __u16 bytes_left, count;
1da177e4
LT		 3081
3082 if (ses == NULL)
3083 return -EIO;
3084
3085 smb_buffer = cifs_buf_get();
ca43e3be 3086 if (smb_buffer == NULL)
1da177e4 3087 return -ENOMEM;
ca43e3be 3088
1da177e4
LT		 3089 smb_buffer_response = smb_buffer;
3090
3091 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
3092 NULL /*no tid */ , 4 /*wct */ );
1982c344
SF		 3093
3094 smb_buffer->Mid = GetNextMid(ses->server);
1da177e4
LT		 3095 smb_buffer->Uid = ses->Suid;
3096 pSMB = (TCONX_REQ *) smb_buffer;
3097 pSMBr = (TCONX_RSP *) smb_buffer_response;
3098
3099 pSMB->AndXCommand = 0xFF;
3100 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
1da177e4 3101 bcc_ptr = &pSMB->Password[0];
fb8c4b14 3102 if ((ses->server->secMode) & SECMODE_USER) {
eeac8047 3103 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
7c7b25bc 3104 *bcc_ptr = 0; /* password is null byte */
eeac8047 3105 bcc_ptr++; /* skip password */
7c7b25bc 3106 /* already aligned so no need to do it below */
eeac8047 3107 } else {
540b2e37 3108 pSMB->PasswordLength = cpu_to_le16(CIFS_AUTH_RESP_SIZE);
eeac8047
SF		 3109 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
3110 specified as required (when that support is added to
3111 the vfs in the future) as only NTLM or the much
7c7b25bc 3112 weaker LANMAN (which we do not send by default) is accepted
eeac8047
SF		 3113 by Samba (not sure whether other servers allow
3114 NTLMv2 password here) */
7c7b25bc 3115#ifdef CONFIG_CIFS_WEAK_PW_HASH
04912d6a 3116 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
00e485b0 3117 (ses->server->secType == LANMAN))
d3ba50b1 3118 calc_lanman_hash(tcon->password, ses->server->cryptkey,
4e53a3fb
JL		 3119 ses->server->secMode &
3120 SECMODE_PW_ENCRYPT ? true : false,
3121 bcc_ptr);
7c7b25bc
SF		 3122 else
3123#endif /* CIFS_WEAK_PW_HASH */
ee2c9258
SP		 3124 rc = SMBNTencrypt(tcon->password, ses->server->cryptkey,
3125 bcc_ptr);
eeac8047 3126
540b2e37 3127 bcc_ptr += CIFS_AUTH_RESP_SIZE;
fb8c4b14 3128 if (ses->capabilities & CAP_UNICODE) {
7c7b25bc
SF		 3129 /* must align unicode strings */
3130 *bcc_ptr = 0; /* null byte password */
3131 bcc_ptr++;
3132 }
eeac8047 3133 }
1da177e4 3134
50c2f753 3135 if (ses->server->secMode &
a878fb22 3136 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
1da177e4
LT		 3137 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
3138
3139 if (ses->capabilities & CAP_STATUS32) {
3140 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3141 }
3142 if (ses->capabilities & CAP_DFS) {
3143 smb_buffer->Flags2 |= SMBFLG2_DFS;
3144 }
3145 if (ses->capabilities & CAP_UNICODE) {
3146 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3147 length =
50c2f753
SF		 3148 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
3149 6 /* max utf8 char length in bytes */ *
a878fb22
SF		 3150 (/* server len*/ + 256 /* share len */), nls_codepage);
3151 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
1da177e4
LT		 3152 bcc_ptr += 2; /* skip trailing null */
3153 } else { /* ASCII */
1da177e4
LT		 3154 strcpy(bcc_ptr, tree);
3155 bcc_ptr += strlen(tree) + 1;
3156 }
3157 strcpy(bcc_ptr, "?????");
3158 bcc_ptr += strlen("?????");
3159 bcc_ptr += 1;
3160 count = bcc_ptr - &pSMB->Password[0];
be8e3b00
SF		 3161 pSMB->hdr.smb_buf_length = cpu_to_be32(be32_to_cpu(
3162 pSMB->hdr.smb_buf_length) + count);
1da177e4
LT		 3163 pSMB->ByteCount = cpu_to_le16(count);
3164
133672ef 3165 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
7749981e 3166 0);
1da177e4 3167
1da177e4
LT		 3168 /* above now done in SendReceive */
3169 if ((rc == 0) && (tcon != NULL)) {
0e0d2cf3
SF		 3170 bool is_unicode;
3171
1da177e4 3172 tcon->tidStatus = CifsGood;
3b795210 3173 tcon->need_reconnect = false;
1da177e4
LT		 3174 tcon->tid = smb_buffer_response->Tid;
3175 bcc_ptr = pByteArea(smb_buffer_response);
690c522f 3176 bytes_left = get_bcc(smb_buffer_response);
cc20c031 3177 length = strnlen(bcc_ptr, bytes_left - 2);
0e0d2cf3
SF		 3178 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3179 is_unicode = true;
3180 else
3181 is_unicode = false;
3182
cc20c031 3183
50c2f753 3184 /* skip service field (NB: this field is always ASCII) */
7f8ed420
SF		 3185 if (length == 3) {
3186 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3187 (bcc_ptr[2] == 'C')) {
b6b38f70 3188 cFYI(1, "IPC connection");
7f8ed420
SF		 3189 tcon->ipc = 1;
3190 }
3191 } else if (length == 2) {
3192 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3193 /* the most common case */
b6b38f70 3194 cFYI(1, "disk share connection");
7f8ed420
SF		 3195 }
3196 }
50c2f753 3197 bcc_ptr += length + 1;
cc20c031 3198 bytes_left -= (length + 1);
1da177e4 3199 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
cc20c031
JL		 3200
3201 /* mostly informational -- no need to fail on error here */
90a98b2f 3202 kfree(tcon->nativeFileSystem);
d185cda7 3203 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
0e0d2cf3 3204 bytes_left, is_unicode,
cc20c031
JL		 3205 nls_codepage);
3206
b6b38f70 3207 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
cc20c031 3208
fb8c4b14 3209 if ((smb_buffer_response->WordCount == 3) ||
1a4e15a0
SF		 3210 (smb_buffer_response->WordCount == 7))
3211 /* field is in same location */
3979877e
SF		 3212 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3213 else
3214 tcon->Flags = 0;
b6b38f70 3215 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
1da177e4 3216 } else if ((rc == 0) && tcon == NULL) {
50c2f753 3217 /* all we need to save for IPC$ connection */
1da177e4
LT		 3218 ses->ipc_tid = smb_buffer_response->Tid;
3219 }
3220
a8a11d39 3221 cifs_buf_release(smb_buffer);
1da177e4
LT		 3222 return rc;
3223}
3224
3225int
3226cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
3227{
b647c35f
JL		 3228 struct rb_root *root = &cifs_sb->tlink_tree;
3229 struct rb_node *node;
3230 struct tcon_link *tlink;
9d002df4 3231
2de970ff
JL		 3232 cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3233
b647c35f
JL		 3234 spin_lock(&cifs_sb->tlink_tree_lock);
3235 while ((node = rb_first(root))) {
3236 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3237 cifs_get_tlink(tlink);
3238 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3239 rb_erase(node, root);
1da177e4 3240
b647c35f
JL		 3241 spin_unlock(&cifs_sb->tlink_tree_lock);
3242 cifs_put_tlink(tlink);
3243 spin_lock(&cifs_sb->tlink_tree_lock);
3244 }
3245 spin_unlock(&cifs_sb->tlink_tree_lock);
50c2f753 3246
9d002df4 3247 return 0;
50c2f753 3248}
1da177e4 3249
198b5682 3250int cifs_negotiate_protocol(unsigned int xid, struct cifsSesInfo *ses)
1da177e4
LT		 3251{
3252 int rc = 0;
198b5682 3253 struct TCP_Server_Info *server = ses->server;
1da177e4 3254
198b5682
JL		 3255 /* only send once per connect */
3256 if (server->maxBuf != 0)
3257 return 0;
3258
3259 rc = CIFSSMBNegotiate(xid, ses);
3260 if (rc == -EAGAIN) {
3261 /* retry only once on 1st time connection */
3262 rc = CIFSSMBNegotiate(xid, ses);
3263 if (rc == -EAGAIN)
3264 rc = -EHOSTDOWN;
1da177e4 3265 }
198b5682
JL		 3266 if (rc == 0) {
3267 spin_lock(&GlobalMid_Lock);
3268 if (server->tcpStatus != CifsExiting)
3269 server->tcpStatus = CifsGood;
3270 else
3271 rc = -EHOSTDOWN;
3272 spin_unlock(&GlobalMid_Lock);
26b994fa 3273
198b5682
JL		 3274 }
3275
3276 return rc;
3277}
3278
3279
3280int cifs_setup_session(unsigned int xid, struct cifsSesInfo *ses,
3281 struct nls_table *nls_info)
3282{
3283 int rc = 0;
3284 struct TCP_Server_Info *server = ses->server;
26b994fa 3285
198b5682
JL		 3286 ses->flags = 0;
3287 ses->capabilities = server->capabilities;
26b994fa 3288 if (linuxExtEnabled == 0)
198b5682 3289 ses->capabilities &= (~CAP_UNIX);
20418acd 3290
b6b38f70
JP		 3291 cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3292 server->secMode, server->capabilities, server->timeAdj);
cb7691b6 3293
198b5682 3294 rc = CIFS_SessSetup(xid, ses, nls_info);
26b994fa 3295 if (rc) {
b6b38f70 3296 cERROR(1, "Send error in SessSetup = %d", rc);
26b994fa 3297 } else {
5d0d2882
SP		 3298 mutex_lock(&ses->server->srv_mutex);
3299 if (!server->session_estab) {
21e73393 3300 server->session_key.response = ses->auth_key.response;
5d0d2882 3301 server->session_key.len = ses->auth_key.len;
21e73393
SP		 3302 server->sequence_number = 0x2;
3303 server->session_estab = true;
3304 ses->auth_key.response = NULL;
5d0d2882
SP		 3305 }
3306 mutex_unlock(&server->srv_mutex);
3307
b6b38f70 3308 cFYI(1, "CIFS Session Established successfully");
20418acd 3309 spin_lock(&GlobalMid_Lock);
198b5682
JL		 3310 ses->status = CifsGood;
3311 ses->need_reconnect = false;
20418acd 3312 spin_unlock(&GlobalMid_Lock);
1da177e4 3313 }
26b994fa 3314
21e73393
SP		 3315 kfree(ses->auth_key.response);
3316 ses->auth_key.response = NULL;
3317 ses->auth_key.len = 0;
d3686d54
SP		 3318 kfree(ses->ntlmssp);
3319 ses->ntlmssp = NULL;
21e73393 3320
1da177e4
LT		 3321 return rc;
3322}
3323
d2445556 3324static struct cifsTconInfo *
9d002df4
JL		 3325cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3326{
3327 struct cifsTconInfo *master_tcon = cifs_sb_master_tcon(cifs_sb);
3328 struct cifsSesInfo *ses;
3329 struct cifsTconInfo *tcon = NULL;
3330 struct smb_vol *vol_info;
34c87901
SF		 3331 char username[28]; /* big enough for "krb50x" + hex of ULONG_MAX 6+16 */
3332 /* We used to have this as MAX_USERNAME which is */
3333 /* way too big now (256 instead of 32) */
9d002df4
JL		 3334
3335 vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3336 if (vol_info == NULL) {
3337 tcon = ERR_PTR(-ENOMEM);
3338 goto out;
3339 }
3340
3341 snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3342 vol_info->username = username;
3343 vol_info->local_nls = cifs_sb->local_nls;
3344 vol_info->linux_uid = fsuid;
3345 vol_info->cred_uid = fsuid;
3346 vol_info->UNC = master_tcon->treeName;
3347 vol_info->retry = master_tcon->retry;
3348 vol_info->nocase = master_tcon->nocase;
3349 vol_info->local_lease = master_tcon->local_lease;
3350 vol_info->no_linux_ext = !master_tcon->unix_ext;
3351
3352 /* FIXME: allow for other secFlg settings */
3353 vol_info->secFlg = CIFSSEC_MUST_KRB5;
3354
3355 /* get a reference for the same TCP session */
3f9bcca7 3356 spin_lock(&cifs_tcp_ses_lock);
9d002df4 3357 ++master_tcon->ses->server->srv_count;
3f9bcca7 3358 spin_unlock(&cifs_tcp_ses_lock);
9d002df4
JL		 3359
3360 ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3361 if (IS_ERR(ses)) {
3362 tcon = (struct cifsTconInfo *)ses;
3363 cifs_put_tcp_session(master_tcon->ses->server);
3364 goto out;
3365 }
3366
3367 tcon = cifs_get_tcon(ses, vol_info);
3368 if (IS_ERR(tcon)) {
3369 cifs_put_smb_ses(ses);
3370 goto out;
3371 }
3372
3373 if (ses->capabilities & CAP_UNIX)
3374 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3375out:
3376 kfree(vol_info);
3377
3378 return tcon;
3379}
3380
413e661c 3381static inline struct tcon_link *
9d002df4
JL		 3382cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
3383{
413e661c 3384 return cifs_sb->master_tlink;
9d002df4
JL		 3385}
3386
3387struct cifsTconInfo *
3388cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3389{
3390 return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3391}
3392
3393static int
3394cifs_sb_tcon_pending_wait(void *unused)
3395{
3396 schedule();
3397 return signal_pending(current) ? -ERESTARTSYS : 0;
3398}
3399
b647c35f
JL		 3400/* find and return a tlink with given uid */
3401static struct tcon_link *
3402tlink_rb_search(struct rb_root *root, uid_t uid)
3403{
3404 struct rb_node *node = root->rb_node;
3405 struct tcon_link *tlink;
3406
3407 while (node) {
3408 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3409
3410 if (tlink->tl_uid > uid)
3411 node = node->rb_left;
3412 else if (tlink->tl_uid < uid)
3413 node = node->rb_right;
3414 else
3415 return tlink;
3416 }
3417 return NULL;
3418}
3419
3420/* insert a tcon_link into the tree */
3421static void
3422tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
3423{
3424 struct rb_node **new = &(root->rb_node), *parent = NULL;
3425 struct tcon_link *tlink;
3426
3427 while (*new) {
3428 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
3429 parent = *new;
3430
3431 if (tlink->tl_uid > new_tlink->tl_uid)
3432 new = &((*new)->rb_left);
3433 else
3434 new = &((*new)->rb_right);
3435 }
3436
3437 rb_link_node(&new_tlink->tl_rbnode, parent, new);
3438 rb_insert_color(&new_tlink->tl_rbnode, root);
3439}
3440
9d002df4
JL		 3441/*
3442 * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3443 * current task.
3444 *
3445 * If the superblock doesn't refer to a multiuser mount, then just return
3446 * the master tcon for the mount.
3447 *
6ef933a3 3448 * First, search the rbtree for an existing tcon for this fsuid. If one
9d002df4
JL		 3449 * exists, then check to see if it's pending construction. If it is then wait
3450 * for construction to complete. Once it's no longer pending, check to see if
3451 * it failed and either return an error or retry construction, depending on
3452 * the timeout.
3453 *
3454 * If one doesn't exist then insert a new tcon_link struct into the tree and
3455 * try to construct a new one.
3456 */
3457struct tcon_link *
3458cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3459{
3460 int ret;
b647c35f 3461 uid_t fsuid = current_fsuid();
9d002df4
JL		 3462 struct tcon_link *tlink, *newtlink;
3463
3464 if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3465 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3466
3467 spin_lock(&cifs_sb->tlink_tree_lock);
b647c35f 3468 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
9d002df4
JL		 3469 if (tlink)
3470 cifs_get_tlink(tlink);
3471 spin_unlock(&cifs_sb->tlink_tree_lock);
3472
3473 if (tlink == NULL) {
3474 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3475 if (newtlink == NULL)
3476 return ERR_PTR(-ENOMEM);
b647c35f 3477 newtlink->tl_uid = fsuid;
9d002df4
JL		 3478 newtlink->tl_tcon = ERR_PTR(-EACCES);
3479 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3480 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3481 cifs_get_tlink(newtlink);
3482
9d002df4
JL		 3483 spin_lock(&cifs_sb->tlink_tree_lock);
3484 /* was one inserted after previous search? */
b647c35f 3485 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
9d002df4
JL		 3486 if (tlink) {
3487 cifs_get_tlink(tlink);
3488 spin_unlock(&cifs_sb->tlink_tree_lock);
9d002df4
JL		 3489 kfree(newtlink);
3490 goto wait_for_construction;
3491 }
9d002df4 3492 tlink = newtlink;
b647c35f
JL		 3493 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3494 spin_unlock(&cifs_sb->tlink_tree_lock);
9d002df4
JL		 3495 } else {
3496wait_for_construction:
3497 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3498 cifs_sb_tcon_pending_wait,
3499 TASK_INTERRUPTIBLE);
3500 if (ret) {
3501 cifs_put_tlink(tlink);
3502 return ERR_PTR(ret);
3503 }
3504
3505 /* if it's good, return it */
3506 if (!IS_ERR(tlink->tl_tcon))
3507 return tlink;
3508
3509 /* return error if we tried this already recently */
3510 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3511 cifs_put_tlink(tlink);
3512 return ERR_PTR(-EACCES);
3513 }
3514
3515 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3516 goto wait_for_construction;
3517 }
3518
3519 tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3520 clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3521 wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3522
3523 if (IS_ERR(tlink->tl_tcon)) {
3524 cifs_put_tlink(tlink);
3525 return ERR_PTR(-EACCES);
3526 }
3527
3528 return tlink;
3529}
2de970ff
JL		 3530
3531/*
3532 * periodic workqueue job that scans tcon_tree for a superblock and closes
3533 * out tcons.
3534 */
3535static void
3536cifs_prune_tlinks(struct work_struct *work)
3537{
3538 struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3539 prune_tlinks.work);
b647c35f
JL		 3540 struct rb_root *root = &cifs_sb->tlink_tree;
3541 struct rb_node *node = rb_first(root);
3542 struct rb_node *tmp;
3543 struct tcon_link *tlink;
2de970ff 3544
b647c35f
JL		 3545 /*
3546 * Because we drop the spinlock in the loop in order to put the tlink
3547 * it's not guarded against removal of links from the tree. The only
3548 * places that remove entries from the tree are this function and
3549 * umounts. Because this function is non-reentrant and is canceled
3550 * before umount can proceed, this is safe.
3551 */
3552 spin_lock(&cifs_sb->tlink_tree_lock);
3553 node = rb_first(root);
3554 while (node != NULL) {
3555 tmp = node;
3556 node = rb_next(tmp);
3557 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
3558
3559 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
3560 atomic_read(&tlink->tl_count) != 0 ||
3561 time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
3562 continue;
2de970ff 3563
b647c35f
JL		 3564 cifs_get_tlink(tlink);
3565 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3566 rb_erase(tmp, root);
3567
3568 spin_unlock(&cifs_sb->tlink_tree_lock);
3569 cifs_put_tlink(tlink);
3570 spin_lock(&cifs_sb->tlink_tree_lock);
3571 }
3572 spin_unlock(&cifs_sb->tlink_tree_lock);
2de970ff
JL		 3573
3574 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3575 TLINK_IDLE_EXPIRE);
3576}
Ubuntu Artful kernel mirror