]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/blob - fs/cifs/connect.c
cifs: add addr= mount option alias for ip=
[mirror_ubuntu-zesty-kernel.git] / fs / cifs / connect.c
1 /*
2 * fs/cifs/connect.c
3 *
4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
6 *
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
20 */
21 #include <linux/fs.h>
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/pagemap.h>
27 #include <linux/ctype.h>
28 #include <linux/utsname.h>
29 #include <linux/mempool.h>
30 #include <linux/delay.h>
31 #include <linux/completion.h>
32 #include <linux/kthread.h>
33 #include <linux/pagevec.h>
34 #include <linux/freezer.h>
35 #include <linux/namei.h>
36 #include <asm/uaccess.h>
37 #include <asm/processor.h>
38 #include <linux/inet.h>
39 #include <net/ipv6.h>
40 #include "cifspdu.h"
41 #include "cifsglob.h"
42 #include "cifsproto.h"
43 #include "cifs_unicode.h"
44 #include "cifs_debug.h"
45 #include "cifs_fs_sb.h"
46 #include "ntlmssp.h"
47 #include "nterr.h"
48 #include "rfc1002pdu.h"
49 #include "cn_cifs.h"
50
51 #define CIFS_PORT 445
52 #define RFC1001_PORT 139
53
54 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
55 unsigned char *p24);
56
57 extern mempool_t *cifs_req_poolp;
58
59 struct smb_vol {
60 char *username;
61 char *password;
62 char *domainname;
63 char *UNC;
64 char *UNCip;
65 char *in6_addr; /* ipv6 address as human readable form of in6_addr */
66 char *iocharset; /* local code page for mapping to and from Unicode */
67 char source_rfc1001_name[16]; /* netbios name of client */
68 char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
69 uid_t linux_uid;
70 gid_t linux_gid;
71 mode_t file_mode;
72 mode_t dir_mode;
73 unsigned secFlg;
74 bool rw:1;
75 bool retry:1;
76 bool intr:1;
77 bool setuids:1;
78 bool override_uid:1;
79 bool override_gid:1;
80 bool dynperm:1;
81 bool noperm:1;
82 bool no_psx_acl:1; /* set if posix acl support should be disabled */
83 bool cifs_acl:1;
84 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
85 bool server_ino:1; /* use inode numbers from server ie UniqueId */
86 bool direct_io:1;
87 bool remap:1; /* set to remap seven reserved chars in filenames */
88 bool posix_paths:1; /* unset to not ask for posix pathnames. */
89 bool no_linux_ext:1;
90 bool sfu_emul:1;
91 bool nullauth:1; /* attempt to authenticate with null user */
92 bool nocase:1; /* request case insensitive filenames */
93 bool nobrl:1; /* disable sending byte range locks to srv */
94 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
95 bool seal:1; /* request transport encryption on share */
96 bool nodfs:1; /* Do not request DFS, even if available */
97 bool local_lease:1; /* check leases only on local system, not remote */
98 bool noblocksnd:1;
99 bool noautotune:1;
100 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
101 unsigned int rsize;
102 unsigned int wsize;
103 unsigned int sockopt;
104 unsigned short int port;
105 char *prepath;
106 };
107
108 static int ipv4_connect(struct TCP_Server_Info *server);
109 static int ipv6_connect(struct TCP_Server_Info *server);
110
111 /*
112 * cifs tcp session reconnection
113 *
114 * mark tcp session as reconnecting so temporarily locked
115 * mark all smb sessions as reconnecting for tcp session
116 * reconnect tcp session
117 * wake up waiters on reconnection? - (not needed currently)
118 */
119 static int
120 cifs_reconnect(struct TCP_Server_Info *server)
121 {
122 int rc = 0;
123 struct list_head *tmp, *tmp2;
124 struct cifsSesInfo *ses;
125 struct cifsTconInfo *tcon;
126 struct mid_q_entry *mid_entry;
127
128 spin_lock(&GlobalMid_Lock);
129 if (server->tcpStatus == CifsExiting) {
130 /* the demux thread will exit normally
131 next time through the loop */
132 spin_unlock(&GlobalMid_Lock);
133 return rc;
134 } else
135 server->tcpStatus = CifsNeedReconnect;
136 spin_unlock(&GlobalMid_Lock);
137 server->maxBuf = 0;
138
139 cFYI(1, ("Reconnecting tcp session"));
140
141 /* before reconnecting the tcp session, mark the smb session (uid)
142 and the tid bad so they are not used until reconnected */
143 read_lock(&cifs_tcp_ses_lock);
144 list_for_each(tmp, &server->smb_ses_list) {
145 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
146 ses->need_reconnect = true;
147 ses->ipc_tid = 0;
148 list_for_each(tmp2, &ses->tcon_list) {
149 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
150 tcon->need_reconnect = true;
151 }
152 }
153 read_unlock(&cifs_tcp_ses_lock);
154 /* do not want to be sending data on a socket we are freeing */
155 mutex_lock(&server->srv_mutex);
156 if (server->ssocket) {
157 cFYI(1, ("State: 0x%x Flags: 0x%lx", server->ssocket->state,
158 server->ssocket->flags));
159 kernel_sock_shutdown(server->ssocket, SHUT_WR);
160 cFYI(1, ("Post shutdown state: 0x%x Flags: 0x%lx",
161 server->ssocket->state,
162 server->ssocket->flags));
163 sock_release(server->ssocket);
164 server->ssocket = NULL;
165 }
166
167 spin_lock(&GlobalMid_Lock);
168 list_for_each(tmp, &server->pending_mid_q) {
169 mid_entry = list_entry(tmp, struct
170 mid_q_entry,
171 qhead);
172 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
173 /* Mark other intransit requests as needing
174 retry so we do not immediately mark the
175 session bad again (ie after we reconnect
176 below) as they timeout too */
177 mid_entry->midState = MID_RETRY_NEEDED;
178 }
179 }
180 spin_unlock(&GlobalMid_Lock);
181 mutex_unlock(&server->srv_mutex);
182
183 while ((server->tcpStatus != CifsExiting) &&
184 (server->tcpStatus != CifsGood)) {
185 try_to_freeze();
186 if (server->addr.sockAddr6.sin6_family == AF_INET6)
187 rc = ipv6_connect(server);
188 else
189 rc = ipv4_connect(server);
190 if (rc) {
191 cFYI(1, ("reconnect error %d", rc));
192 msleep(3000);
193 } else {
194 atomic_inc(&tcpSesReconnectCount);
195 spin_lock(&GlobalMid_Lock);
196 if (server->tcpStatus != CifsExiting)
197 server->tcpStatus = CifsGood;
198 server->sequence_number = 0;
199 spin_unlock(&GlobalMid_Lock);
200 /* atomic_set(&server->inFlight,0);*/
201 wake_up(&server->response_q);
202 }
203 }
204 return rc;
205 }
206
207 /*
208 return codes:
209 0 not a transact2, or all data present
210 >0 transact2 with that much data missing
211 -EINVAL = invalid transact2
212
213 */
214 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
215 {
216 struct smb_t2_rsp *pSMBt;
217 int total_data_size;
218 int data_in_this_rsp;
219 int remaining;
220
221 if (pSMB->Command != SMB_COM_TRANSACTION2)
222 return 0;
223
224 /* check for plausible wct, bcc and t2 data and parm sizes */
225 /* check for parm and data offset going beyond end of smb */
226 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
227 cFYI(1, ("invalid transact2 word count"));
228 return -EINVAL;
229 }
230
231 pSMBt = (struct smb_t2_rsp *)pSMB;
232
233 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
234 data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
235
236 remaining = total_data_size - data_in_this_rsp;
237
238 if (remaining == 0)
239 return 0;
240 else if (remaining < 0) {
241 cFYI(1, ("total data %d smaller than data in frame %d",
242 total_data_size, data_in_this_rsp));
243 return -EINVAL;
244 } else {
245 cFYI(1, ("missing %d bytes from transact2, check next response",
246 remaining));
247 if (total_data_size > maxBufSize) {
248 cERROR(1, ("TotalDataSize %d is over maximum buffer %d",
249 total_data_size, maxBufSize));
250 return -EINVAL;
251 }
252 return remaining;
253 }
254 }
255
256 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
257 {
258 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
259 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
260 int total_data_size;
261 int total_in_buf;
262 int remaining;
263 int total_in_buf2;
264 char *data_area_of_target;
265 char *data_area_of_buf2;
266 __u16 byte_count;
267
268 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
269
270 if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
271 cFYI(1, ("total data size of primary and secondary t2 differ"));
272 }
273
274 total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
275
276 remaining = total_data_size - total_in_buf;
277
278 if (remaining < 0)
279 return -EINVAL;
280
281 if (remaining == 0) /* nothing to do, ignore */
282 return 0;
283
284 total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
285 if (remaining < total_in_buf2) {
286 cFYI(1, ("transact2 2nd response contains too much data"));
287 }
288
289 /* find end of first SMB data area */
290 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
291 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
292 /* validate target area */
293
294 data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
295 le16_to_cpu(pSMB2->t2_rsp.DataOffset);
296
297 data_area_of_target += total_in_buf;
298
299 /* copy second buffer into end of first buffer */
300 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
301 total_in_buf += total_in_buf2;
302 pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
303 byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
304 byte_count += total_in_buf2;
305 BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
306
307 byte_count = pTargetSMB->smb_buf_length;
308 byte_count += total_in_buf2;
309
310 /* BB also add check that we are not beyond maximum buffer size */
311
312 pTargetSMB->smb_buf_length = byte_count;
313
314 if (remaining == total_in_buf2) {
315 cFYI(1, ("found the last secondary response"));
316 return 0; /* we are done */
317 } else /* more responses to go */
318 return 1;
319
320 }
321
322 static int
323 cifs_demultiplex_thread(struct TCP_Server_Info *server)
324 {
325 int length;
326 unsigned int pdu_length, total_read;
327 struct smb_hdr *smb_buffer = NULL;
328 struct smb_hdr *bigbuf = NULL;
329 struct smb_hdr *smallbuf = NULL;
330 struct msghdr smb_msg;
331 struct kvec iov;
332 struct socket *csocket = server->ssocket;
333 struct list_head *tmp;
334 struct cifsSesInfo *ses;
335 struct task_struct *task_to_wake = NULL;
336 struct mid_q_entry *mid_entry;
337 char temp;
338 bool isLargeBuf = false;
339 bool isMultiRsp;
340 int reconnect;
341
342 current->flags |= PF_MEMALLOC;
343 cFYI(1, ("Demultiplex PID: %d", task_pid_nr(current)));
344
345 length = atomic_inc_return(&tcpSesAllocCount);
346 if (length > 1)
347 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
348 GFP_KERNEL);
349
350 set_freezable();
351 while (server->tcpStatus != CifsExiting) {
352 if (try_to_freeze())
353 continue;
354 if (bigbuf == NULL) {
355 bigbuf = cifs_buf_get();
356 if (!bigbuf) {
357 cERROR(1, ("No memory for large SMB response"));
358 msleep(3000);
359 /* retry will check if exiting */
360 continue;
361 }
362 } else if (isLargeBuf) {
363 /* we are reusing a dirty large buf, clear its start */
364 memset(bigbuf, 0, sizeof(struct smb_hdr));
365 }
366
367 if (smallbuf == NULL) {
368 smallbuf = cifs_small_buf_get();
369 if (!smallbuf) {
370 cERROR(1, ("No memory for SMB response"));
371 msleep(1000);
372 /* retry will check if exiting */
373 continue;
374 }
375 /* beginning of smb buffer is cleared in our buf_get */
376 } else /* if existing small buf clear beginning */
377 memset(smallbuf, 0, sizeof(struct smb_hdr));
378
379 isLargeBuf = false;
380 isMultiRsp = false;
381 smb_buffer = smallbuf;
382 iov.iov_base = smb_buffer;
383 iov.iov_len = 4;
384 smb_msg.msg_control = NULL;
385 smb_msg.msg_controllen = 0;
386 pdu_length = 4; /* enough to get RFC1001 header */
387 incomplete_rcv:
388 length =
389 kernel_recvmsg(csocket, &smb_msg,
390 &iov, 1, pdu_length, 0 /* BB other flags? */);
391
392 if (server->tcpStatus == CifsExiting) {
393 break;
394 } else if (server->tcpStatus == CifsNeedReconnect) {
395 cFYI(1, ("Reconnect after server stopped responding"));
396 cifs_reconnect(server);
397 cFYI(1, ("call to reconnect done"));
398 csocket = server->ssocket;
399 continue;
400 } else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
401 msleep(1); /* minimum sleep to prevent looping
402 allowing socket to clear and app threads to set
403 tcpStatus CifsNeedReconnect if server hung */
404 if (pdu_length < 4) {
405 iov.iov_base = (4 - pdu_length) +
406 (char *)smb_buffer;
407 iov.iov_len = pdu_length;
408 smb_msg.msg_control = NULL;
409 smb_msg.msg_controllen = 0;
410 goto incomplete_rcv;
411 } else
412 continue;
413 } else if (length <= 0) {
414 if (server->tcpStatus == CifsNew) {
415 cFYI(1, ("tcp session abend after SMBnegprot"));
416 /* some servers kill the TCP session rather than
417 returning an SMB negprot error, in which
418 case reconnecting here is not going to help,
419 and so simply return error to mount */
420 break;
421 }
422 if (!try_to_freeze() && (length == -EINTR)) {
423 cFYI(1, ("cifsd thread killed"));
424 break;
425 }
426 cFYI(1, ("Reconnect after unexpected peek error %d",
427 length));
428 cifs_reconnect(server);
429 csocket = server->ssocket;
430 wake_up(&server->response_q);
431 continue;
432 } else if (length < pdu_length) {
433 cFYI(1, ("requested %d bytes but only got %d bytes",
434 pdu_length, length));
435 pdu_length -= length;
436 msleep(1);
437 goto incomplete_rcv;
438 }
439
440 /* The right amount was read from socket - 4 bytes */
441 /* so we can now interpret the length field */
442
443 /* the first byte big endian of the length field,
444 is actually not part of the length but the type
445 with the most common, zero, as regular data */
446 temp = *((char *) smb_buffer);
447
448 /* Note that FC 1001 length is big endian on the wire,
449 but we convert it here so it is always manipulated
450 as host byte order */
451 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
452 smb_buffer->smb_buf_length = pdu_length;
453
454 cFYI(1, ("rfc1002 length 0x%x", pdu_length+4));
455
456 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
457 continue;
458 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
459 cFYI(1, ("Good RFC 1002 session rsp"));
460 continue;
461 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
462 /* we get this from Windows 98 instead of
463 an error on SMB negprot response */
464 cFYI(1, ("Negative RFC1002 Session Response Error 0x%x)",
465 pdu_length));
466 if (server->tcpStatus == CifsNew) {
467 /* if nack on negprot (rather than
468 ret of smb negprot error) reconnecting
469 not going to help, ret error to mount */
470 break;
471 } else {
472 /* give server a second to
473 clean up before reconnect attempt */
474 msleep(1000);
475 /* always try 445 first on reconnect
476 since we get NACK on some if we ever
477 connected to port 139 (the NACK is
478 since we do not begin with RFC1001
479 session initialize frame) */
480 server->addr.sockAddr.sin_port =
481 htons(CIFS_PORT);
482 cifs_reconnect(server);
483 csocket = server->ssocket;
484 wake_up(&server->response_q);
485 continue;
486 }
487 } else if (temp != (char) 0) {
488 cERROR(1, ("Unknown RFC 1002 frame"));
489 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
490 length);
491 cifs_reconnect(server);
492 csocket = server->ssocket;
493 continue;
494 }
495
496 /* else we have an SMB response */
497 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
498 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
499 cERROR(1, ("Invalid size SMB length %d pdu_length %d",
500 length, pdu_length+4));
501 cifs_reconnect(server);
502 csocket = server->ssocket;
503 wake_up(&server->response_q);
504 continue;
505 }
506
507 /* else length ok */
508 reconnect = 0;
509
510 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
511 isLargeBuf = true;
512 memcpy(bigbuf, smallbuf, 4);
513 smb_buffer = bigbuf;
514 }
515 length = 0;
516 iov.iov_base = 4 + (char *)smb_buffer;
517 iov.iov_len = pdu_length;
518 for (total_read = 0; total_read < pdu_length;
519 total_read += length) {
520 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
521 pdu_length - total_read, 0);
522 if ((server->tcpStatus == CifsExiting) ||
523 (length == -EINTR)) {
524 /* then will exit */
525 reconnect = 2;
526 break;
527 } else if (server->tcpStatus == CifsNeedReconnect) {
528 cifs_reconnect(server);
529 csocket = server->ssocket;
530 /* Reconnect wakes up rspns q */
531 /* Now we will reread sock */
532 reconnect = 1;
533 break;
534 } else if ((length == -ERESTARTSYS) ||
535 (length == -EAGAIN)) {
536 msleep(1); /* minimum sleep to prevent looping,
537 allowing socket to clear and app
538 threads to set tcpStatus
539 CifsNeedReconnect if server hung*/
540 length = 0;
541 continue;
542 } else if (length <= 0) {
543 cERROR(1, ("Received no data, expecting %d",
544 pdu_length - total_read));
545 cifs_reconnect(server);
546 csocket = server->ssocket;
547 reconnect = 1;
548 break;
549 }
550 }
551 if (reconnect == 2)
552 break;
553 else if (reconnect == 1)
554 continue;
555
556 length += 4; /* account for rfc1002 hdr */
557
558
559 dump_smb(smb_buffer, length);
560 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
561 cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
562 continue;
563 }
564
565
566 task_to_wake = NULL;
567 spin_lock(&GlobalMid_Lock);
568 list_for_each(tmp, &server->pending_mid_q) {
569 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
570
571 if ((mid_entry->mid == smb_buffer->Mid) &&
572 (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
573 (mid_entry->command == smb_buffer->Command)) {
574 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
575 /* We have a multipart transact2 resp */
576 isMultiRsp = true;
577 if (mid_entry->resp_buf) {
578 /* merge response - fix up 1st*/
579 if (coalesce_t2(smb_buffer,
580 mid_entry->resp_buf)) {
581 mid_entry->multiRsp =
582 true;
583 break;
584 } else {
585 /* all parts received */
586 mid_entry->multiEnd =
587 true;
588 goto multi_t2_fnd;
589 }
590 } else {
591 if (!isLargeBuf) {
592 cERROR(1,("1st trans2 resp needs bigbuf"));
593 /* BB maybe we can fix this up, switch
594 to already allocated large buffer? */
595 } else {
596 /* Have first buffer */
597 mid_entry->resp_buf =
598 smb_buffer;
599 mid_entry->largeBuf =
600 true;
601 bigbuf = NULL;
602 }
603 }
604 break;
605 }
606 mid_entry->resp_buf = smb_buffer;
607 mid_entry->largeBuf = isLargeBuf;
608 multi_t2_fnd:
609 task_to_wake = mid_entry->tsk;
610 mid_entry->midState = MID_RESPONSE_RECEIVED;
611 #ifdef CONFIG_CIFS_STATS2
612 mid_entry->when_received = jiffies;
613 #endif
614 /* so we do not time out requests to server
615 which is still responding (since server could
616 be busy but not dead) */
617 server->lstrp = jiffies;
618 break;
619 }
620 }
621 spin_unlock(&GlobalMid_Lock);
622 if (task_to_wake) {
623 /* Was previous buf put in mpx struct for multi-rsp? */
624 if (!isMultiRsp) {
625 /* smb buffer will be freed by user thread */
626 if (isLargeBuf)
627 bigbuf = NULL;
628 else
629 smallbuf = NULL;
630 }
631 wake_up_process(task_to_wake);
632 } else if (!is_valid_oplock_break(smb_buffer, server) &&
633 !isMultiRsp) {
634 cERROR(1, ("No task to wake, unknown frame received! "
635 "NumMids %d", midCount.counter));
636 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
637 sizeof(struct smb_hdr));
638 #ifdef CONFIG_CIFS_DEBUG2
639 cifs_dump_detail(smb_buffer);
640 cifs_dump_mids(server);
641 #endif /* CIFS_DEBUG2 */
642
643 }
644 } /* end while !EXITING */
645
646 /* take it off the list, if it's not already */
647 write_lock(&cifs_tcp_ses_lock);
648 list_del_init(&server->tcp_ses_list);
649 write_unlock(&cifs_tcp_ses_lock);
650
651 spin_lock(&GlobalMid_Lock);
652 server->tcpStatus = CifsExiting;
653 spin_unlock(&GlobalMid_Lock);
654 wake_up_all(&server->response_q);
655
656 /* check if we have blocked requests that need to free */
657 /* Note that cifs_max_pending is normally 50, but
658 can be set at module install time to as little as two */
659 spin_lock(&GlobalMid_Lock);
660 if (atomic_read(&server->inFlight) >= cifs_max_pending)
661 atomic_set(&server->inFlight, cifs_max_pending - 1);
662 /* We do not want to set the max_pending too low or we
663 could end up with the counter going negative */
664 spin_unlock(&GlobalMid_Lock);
665 /* Although there should not be any requests blocked on
666 this queue it can not hurt to be paranoid and try to wake up requests
667 that may haven been blocked when more than 50 at time were on the wire
668 to the same server - they now will see the session is in exit state
669 and get out of SendReceive. */
670 wake_up_all(&server->request_q);
671 /* give those requests time to exit */
672 msleep(125);
673
674 if (server->ssocket) {
675 sock_release(csocket);
676 server->ssocket = NULL;
677 }
678 /* buffer usuallly freed in free_mid - need to free it here on exit */
679 cifs_buf_release(bigbuf);
680 if (smallbuf) /* no sense logging a debug message if NULL */
681 cifs_small_buf_release(smallbuf);
682
683 /*
684 * BB: we shouldn't have to do any of this. It shouldn't be
685 * possible to exit from the thread with active SMB sessions
686 */
687 read_lock(&cifs_tcp_ses_lock);
688 if (list_empty(&server->pending_mid_q)) {
689 /* loop through server session structures attached to this and
690 mark them dead */
691 list_for_each(tmp, &server->smb_ses_list) {
692 ses = list_entry(tmp, struct cifsSesInfo,
693 smb_ses_list);
694 ses->status = CifsExiting;
695 ses->server = NULL;
696 }
697 read_unlock(&cifs_tcp_ses_lock);
698 } else {
699 /* although we can not zero the server struct pointer yet,
700 since there are active requests which may depnd on them,
701 mark the corresponding SMB sessions as exiting too */
702 list_for_each(tmp, &server->smb_ses_list) {
703 ses = list_entry(tmp, struct cifsSesInfo,
704 smb_ses_list);
705 ses->status = CifsExiting;
706 }
707
708 spin_lock(&GlobalMid_Lock);
709 list_for_each(tmp, &server->pending_mid_q) {
710 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
711 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
712 cFYI(1, ("Clearing Mid 0x%x - waking up ",
713 mid_entry->mid));
714 task_to_wake = mid_entry->tsk;
715 if (task_to_wake)
716 wake_up_process(task_to_wake);
717 }
718 }
719 spin_unlock(&GlobalMid_Lock);
720 read_unlock(&cifs_tcp_ses_lock);
721 /* 1/8th of sec is more than enough time for them to exit */
722 msleep(125);
723 }
724
725 if (!list_empty(&server->pending_mid_q)) {
726 /* mpx threads have not exited yet give them
727 at least the smb send timeout time for long ops */
728 /* due to delays on oplock break requests, we need
729 to wait at least 45 seconds before giving up
730 on a request getting a response and going ahead
731 and killing cifsd */
732 cFYI(1, ("Wait for exit from demultiplex thread"));
733 msleep(46000);
734 /* if threads still have not exited they are probably never
735 coming home not much else we can do but free the memory */
736 }
737
738 /* last chance to mark ses pointers invalid
739 if there are any pointing to this (e.g
740 if a crazy root user tried to kill cifsd
741 kernel thread explicitly this might happen) */
742 /* BB: This shouldn't be necessary, see above */
743 read_lock(&cifs_tcp_ses_lock);
744 list_for_each(tmp, &server->smb_ses_list) {
745 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
746 ses->server = NULL;
747 }
748 read_unlock(&cifs_tcp_ses_lock);
749
750 kfree(server->hostname);
751 task_to_wake = xchg(&server->tsk, NULL);
752 kfree(server);
753
754 length = atomic_dec_return(&tcpSesAllocCount);
755 if (length > 0)
756 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
757 GFP_KERNEL);
758
759 /* if server->tsk was NULL then wait for a signal before exiting */
760 if (!task_to_wake) {
761 set_current_state(TASK_INTERRUPTIBLE);
762 while (!signal_pending(current)) {
763 schedule();
764 set_current_state(TASK_INTERRUPTIBLE);
765 }
766 set_current_state(TASK_RUNNING);
767 }
768
769 module_put_and_exit(0);
770 }
771
772 /* extract the host portion of the UNC string */
773 static char *
774 extract_hostname(const char *unc)
775 {
776 const char *src;
777 char *dst, *delim;
778 unsigned int len;
779
780 /* skip double chars at beginning of string */
781 /* BB: check validity of these bytes? */
782 src = unc + 2;
783
784 /* delimiter between hostname and sharename is always '\\' now */
785 delim = strchr(src, '\\');
786 if (!delim)
787 return ERR_PTR(-EINVAL);
788
789 len = delim - src;
790 dst = kmalloc((len + 1), GFP_KERNEL);
791 if (dst == NULL)
792 return ERR_PTR(-ENOMEM);
793
794 memcpy(dst, src, len);
795 dst[len] = '\0';
796
797 return dst;
798 }
799
800 static int
801 cifs_parse_mount_options(char *options, const char *devname,
802 struct smb_vol *vol)
803 {
804 char *value;
805 char *data;
806 unsigned int temp_len, i, j;
807 char separator[2];
808
809 separator[0] = ',';
810 separator[1] = 0;
811
812 if (Local_System_Name[0] != 0)
813 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
814 else {
815 char *nodename = utsname()->nodename;
816 int n = strnlen(nodename, 15);
817 memset(vol->source_rfc1001_name, 0x20, 15);
818 for (i = 0; i < n; i++) {
819 /* does not have to be perfect mapping since field is
820 informational, only used for servers that do not support
821 port 445 and it can be overridden at mount time */
822 vol->source_rfc1001_name[i] = toupper(nodename[i]);
823 }
824 }
825 vol->source_rfc1001_name[15] = 0;
826 /* null target name indicates to use *SMBSERVR default called name
827 if we end up sending RFC1001 session initialize */
828 vol->target_rfc1001_name[0] = 0;
829 vol->linux_uid = current_uid(); /* use current_euid() instead? */
830 vol->linux_gid = current_gid();
831
832 /* default to only allowing write access to owner of the mount */
833 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
834
835 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
836 vol->rw = true;
837 /* default is always to request posix paths. */
838 vol->posix_paths = 1;
839 /* default to using server inode numbers where available */
840 vol->server_ino = 1;
841
842 if (!options)
843 return 1;
844
845 if (strncmp(options, "sep=", 4) == 0) {
846 if (options[4] != 0) {
847 separator[0] = options[4];
848 options += 5;
849 } else {
850 cFYI(1, ("Null separator not allowed"));
851 }
852 }
853
854 while ((data = strsep(&options, separator)) != NULL) {
855 if (!*data)
856 continue;
857 if ((value = strchr(data, '=')) != NULL)
858 *value++ = '\0';
859
860 /* Have to parse this before we parse for "user" */
861 if (strnicmp(data, "user_xattr", 10) == 0) {
862 vol->no_xattr = 0;
863 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
864 vol->no_xattr = 1;
865 } else if (strnicmp(data, "user", 4) == 0) {
866 if (!value) {
867 printk(KERN_WARNING
868 "CIFS: invalid or missing username\n");
869 return 1; /* needs_arg; */
870 } else if (!*value) {
871 /* null user, ie anonymous, authentication */
872 vol->nullauth = 1;
873 }
874 if (strnlen(value, 200) < 200) {
875 vol->username = value;
876 } else {
877 printk(KERN_WARNING "CIFS: username too long\n");
878 return 1;
879 }
880 } else if (strnicmp(data, "pass", 4) == 0) {
881 if (!value) {
882 vol->password = NULL;
883 continue;
884 } else if (value[0] == 0) {
885 /* check if string begins with double comma
886 since that would mean the password really
887 does start with a comma, and would not
888 indicate an empty string */
889 if (value[1] != separator[0]) {
890 vol->password = NULL;
891 continue;
892 }
893 }
894 temp_len = strlen(value);
895 /* removed password length check, NTLM passwords
896 can be arbitrarily long */
897
898 /* if comma in password, the string will be
899 prematurely null terminated. Commas in password are
900 specified across the cifs mount interface by a double
901 comma ie ,, and a comma used as in other cases ie ','
902 as a parameter delimiter/separator is single and due
903 to the strsep above is temporarily zeroed. */
904
905 /* NB: password legally can have multiple commas and
906 the only illegal character in a password is null */
907
908 if ((value[temp_len] == 0) &&
909 (value[temp_len+1] == separator[0])) {
910 /* reinsert comma */
911 value[temp_len] = separator[0];
912 temp_len += 2; /* move after second comma */
913 while (value[temp_len] != 0) {
914 if (value[temp_len] == separator[0]) {
915 if (value[temp_len+1] ==
916 separator[0]) {
917 /* skip second comma */
918 temp_len++;
919 } else {
920 /* single comma indicating start
921 of next parm */
922 break;
923 }
924 }
925 temp_len++;
926 }
927 if (value[temp_len] == 0) {
928 options = NULL;
929 } else {
930 value[temp_len] = 0;
931 /* point option to start of next parm */
932 options = value + temp_len + 1;
933 }
934 /* go from value to value + temp_len condensing
935 double commas to singles. Note that this ends up
936 allocating a few bytes too many, which is ok */
937 vol->password = kzalloc(temp_len, GFP_KERNEL);
938 if (vol->password == NULL) {
939 printk(KERN_WARNING "CIFS: no memory "
940 "for password\n");
941 return 1;
942 }
943 for (i = 0, j = 0; i < temp_len; i++, j++) {
944 vol->password[j] = value[i];
945 if (value[i] == separator[0]
946 && value[i+1] == separator[0]) {
947 /* skip second comma */
948 i++;
949 }
950 }
951 vol->password[j] = 0;
952 } else {
953 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
954 if (vol->password == NULL) {
955 printk(KERN_WARNING "CIFS: no memory "
956 "for password\n");
957 return 1;
958 }
959 strcpy(vol->password, value);
960 }
961 } else if (!strnicmp(data, "ip", 2) ||
962 !strnicmp(data, "addr", 4)) {
963 if (!value || !*value) {
964 vol->UNCip = NULL;
965 } else if (strnlen(value, INET6_ADDRSTRLEN) <
966 INET6_ADDRSTRLEN) {
967 vol->UNCip = value;
968 } else {
969 printk(KERN_WARNING "CIFS: ip address "
970 "too long\n");
971 return 1;
972 }
973 } else if (strnicmp(data, "sec", 3) == 0) {
974 if (!value || !*value) {
975 cERROR(1, ("no security value specified"));
976 continue;
977 } else if (strnicmp(value, "krb5i", 5) == 0) {
978 vol->secFlg |= CIFSSEC_MAY_KRB5 |
979 CIFSSEC_MUST_SIGN;
980 } else if (strnicmp(value, "krb5p", 5) == 0) {
981 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
982 CIFSSEC_MAY_KRB5; */
983 cERROR(1, ("Krb5 cifs privacy not supported"));
984 return 1;
985 } else if (strnicmp(value, "krb5", 4) == 0) {
986 vol->secFlg |= CIFSSEC_MAY_KRB5;
987 #ifdef CONFIG_CIFS_EXPERIMENTAL
988 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
989 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
990 CIFSSEC_MUST_SIGN;
991 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
992 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
993 #endif
994 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
995 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
996 CIFSSEC_MUST_SIGN;
997 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
998 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
999 } else if (strnicmp(value, "ntlmi", 5) == 0) {
1000 vol->secFlg |= CIFSSEC_MAY_NTLM |
1001 CIFSSEC_MUST_SIGN;
1002 } else if (strnicmp(value, "ntlm", 4) == 0) {
1003 /* ntlm is default so can be turned off too */
1004 vol->secFlg |= CIFSSEC_MAY_NTLM;
1005 } else if (strnicmp(value, "nontlm", 6) == 0) {
1006 /* BB is there a better way to do this? */
1007 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1008 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1009 } else if (strnicmp(value, "lanman", 6) == 0) {
1010 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1011 #endif
1012 } else if (strnicmp(value, "none", 4) == 0) {
1013 vol->nullauth = 1;
1014 } else {
1015 cERROR(1, ("bad security option: %s", value));
1016 return 1;
1017 }
1018 } else if ((strnicmp(data, "unc", 3) == 0)
1019 || (strnicmp(data, "target", 6) == 0)
1020 || (strnicmp(data, "path", 4) == 0)) {
1021 if (!value || !*value) {
1022 printk(KERN_WARNING "CIFS: invalid path to "
1023 "network resource\n");
1024 return 1; /* needs_arg; */
1025 }
1026 if ((temp_len = strnlen(value, 300)) < 300) {
1027 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1028 if (vol->UNC == NULL)
1029 return 1;
1030 strcpy(vol->UNC, value);
1031 if (strncmp(vol->UNC, "//", 2) == 0) {
1032 vol->UNC[0] = '\\';
1033 vol->UNC[1] = '\\';
1034 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1035 printk(KERN_WARNING
1036 "CIFS: UNC Path does not begin "
1037 "with // or \\\\ \n");
1038 return 1;
1039 }
1040 } else {
1041 printk(KERN_WARNING "CIFS: UNC name too long\n");
1042 return 1;
1043 }
1044 } else if ((strnicmp(data, "domain", 3) == 0)
1045 || (strnicmp(data, "workgroup", 5) == 0)) {
1046 if (!value || !*value) {
1047 printk(KERN_WARNING "CIFS: invalid domain name\n");
1048 return 1; /* needs_arg; */
1049 }
1050 /* BB are there cases in which a comma can be valid in
1051 a domain name and need special handling? */
1052 if (strnlen(value, 256) < 256) {
1053 vol->domainname = value;
1054 cFYI(1, ("Domain name set"));
1055 } else {
1056 printk(KERN_WARNING "CIFS: domain name too "
1057 "long\n");
1058 return 1;
1059 }
1060 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1061 if (!value || !*value) {
1062 printk(KERN_WARNING
1063 "CIFS: invalid path prefix\n");
1064 return 1; /* needs_argument */
1065 }
1066 if ((temp_len = strnlen(value, 1024)) < 1024) {
1067 if (value[0] != '/')
1068 temp_len++; /* missing leading slash */
1069 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1070 if (vol->prepath == NULL)
1071 return 1;
1072 if (value[0] != '/') {
1073 vol->prepath[0] = '/';
1074 strcpy(vol->prepath+1, value);
1075 } else
1076 strcpy(vol->prepath, value);
1077 cFYI(1, ("prefix path %s", vol->prepath));
1078 } else {
1079 printk(KERN_WARNING "CIFS: prefix too long\n");
1080 return 1;
1081 }
1082 } else if (strnicmp(data, "iocharset", 9) == 0) {
1083 if (!value || !*value) {
1084 printk(KERN_WARNING "CIFS: invalid iocharset "
1085 "specified\n");
1086 return 1; /* needs_arg; */
1087 }
1088 if (strnlen(value, 65) < 65) {
1089 if (strnicmp(value, "default", 7))
1090 vol->iocharset = value;
1091 /* if iocharset not set then load_nls_default
1092 is used by caller */
1093 cFYI(1, ("iocharset set to %s", value));
1094 } else {
1095 printk(KERN_WARNING "CIFS: iocharset name "
1096 "too long.\n");
1097 return 1;
1098 }
1099 } else if (strnicmp(data, "uid", 3) == 0) {
1100 if (value && *value)
1101 vol->linux_uid =
1102 simple_strtoul(value, &value, 0);
1103 } else if (strnicmp(data, "forceuid", 8) == 0) {
1104 vol->override_uid = 1;
1105 } else if (strnicmp(data, "gid", 3) == 0) {
1106 if (value && *value)
1107 vol->linux_gid =
1108 simple_strtoul(value, &value, 0);
1109 } else if (strnicmp(data, "forcegid", 8) == 0) {
1110 vol->override_gid = 1;
1111 } else if (strnicmp(data, "file_mode", 4) == 0) {
1112 if (value && *value) {
1113 vol->file_mode =
1114 simple_strtoul(value, &value, 0);
1115 }
1116 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1117 if (value && *value) {
1118 vol->dir_mode =
1119 simple_strtoul(value, &value, 0);
1120 }
1121 } else if (strnicmp(data, "dirmode", 4) == 0) {
1122 if (value && *value) {
1123 vol->dir_mode =
1124 simple_strtoul(value, &value, 0);
1125 }
1126 } else if (strnicmp(data, "port", 4) == 0) {
1127 if (value && *value) {
1128 vol->port =
1129 simple_strtoul(value, &value, 0);
1130 }
1131 } else if (strnicmp(data, "rsize", 5) == 0) {
1132 if (value && *value) {
1133 vol->rsize =
1134 simple_strtoul(value, &value, 0);
1135 }
1136 } else if (strnicmp(data, "wsize", 5) == 0) {
1137 if (value && *value) {
1138 vol->wsize =
1139 simple_strtoul(value, &value, 0);
1140 }
1141 } else if (strnicmp(data, "sockopt", 5) == 0) {
1142 if (value && *value) {
1143 vol->sockopt =
1144 simple_strtoul(value, &value, 0);
1145 }
1146 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1147 if (!value || !*value || (*value == ' ')) {
1148 cFYI(1, ("invalid (empty) netbiosname"));
1149 } else {
1150 memset(vol->source_rfc1001_name, 0x20, 15);
1151 for (i = 0; i < 15; i++) {
1152 /* BB are there cases in which a comma can be
1153 valid in this workstation netbios name (and need
1154 special handling)? */
1155
1156 /* We do not uppercase netbiosname for user */
1157 if (value[i] == 0)
1158 break;
1159 else
1160 vol->source_rfc1001_name[i] =
1161 value[i];
1162 }
1163 /* The string has 16th byte zero still from
1164 set at top of the function */
1165 if ((i == 15) && (value[i] != 0))
1166 printk(KERN_WARNING "CIFS: netbiosname"
1167 " longer than 15 truncated.\n");
1168 }
1169 } else if (strnicmp(data, "servern", 7) == 0) {
1170 /* servernetbiosname specified override *SMBSERVER */
1171 if (!value || !*value || (*value == ' ')) {
1172 cFYI(1, ("empty server netbiosname specified"));
1173 } else {
1174 /* last byte, type, is 0x20 for servr type */
1175 memset(vol->target_rfc1001_name, 0x20, 16);
1176
1177 for (i = 0; i < 15; i++) {
1178 /* BB are there cases in which a comma can be
1179 valid in this workstation netbios name
1180 (and need special handling)? */
1181
1182 /* user or mount helper must uppercase
1183 the netbiosname */
1184 if (value[i] == 0)
1185 break;
1186 else
1187 vol->target_rfc1001_name[i] =
1188 value[i];
1189 }
1190 /* The string has 16th byte zero still from
1191 set at top of the function */
1192 if ((i == 15) && (value[i] != 0))
1193 printk(KERN_WARNING "CIFS: server net"
1194 "biosname longer than 15 truncated.\n");
1195 }
1196 } else if (strnicmp(data, "credentials", 4) == 0) {
1197 /* ignore */
1198 } else if (strnicmp(data, "version", 3) == 0) {
1199 /* ignore */
1200 } else if (strnicmp(data, "guest", 5) == 0) {
1201 /* ignore */
1202 } else if (strnicmp(data, "rw", 2) == 0) {
1203 vol->rw = true;
1204 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1205 vol->noblocksnd = 1;
1206 } else if (strnicmp(data, "noautotune", 10) == 0) {
1207 vol->noautotune = 1;
1208 } else if ((strnicmp(data, "suid", 4) == 0) ||
1209 (strnicmp(data, "nosuid", 6) == 0) ||
1210 (strnicmp(data, "exec", 4) == 0) ||
1211 (strnicmp(data, "noexec", 6) == 0) ||
1212 (strnicmp(data, "nodev", 5) == 0) ||
1213 (strnicmp(data, "noauto", 6) == 0) ||
1214 (strnicmp(data, "dev", 3) == 0)) {
1215 /* The mount tool or mount.cifs helper (if present)
1216 uses these opts to set flags, and the flags are read
1217 by the kernel vfs layer before we get here (ie
1218 before read super) so there is no point trying to
1219 parse these options again and set anything and it
1220 is ok to just ignore them */
1221 continue;
1222 } else if (strnicmp(data, "ro", 2) == 0) {
1223 vol->rw = false;
1224 } else if (strnicmp(data, "hard", 4) == 0) {
1225 vol->retry = 1;
1226 } else if (strnicmp(data, "soft", 4) == 0) {
1227 vol->retry = 0;
1228 } else if (strnicmp(data, "perm", 4) == 0) {
1229 vol->noperm = 0;
1230 } else if (strnicmp(data, "noperm", 6) == 0) {
1231 vol->noperm = 1;
1232 } else if (strnicmp(data, "mapchars", 8) == 0) {
1233 vol->remap = 1;
1234 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1235 vol->remap = 0;
1236 } else if (strnicmp(data, "sfu", 3) == 0) {
1237 vol->sfu_emul = 1;
1238 } else if (strnicmp(data, "nosfu", 5) == 0) {
1239 vol->sfu_emul = 0;
1240 } else if (strnicmp(data, "nodfs", 5) == 0) {
1241 vol->nodfs = 1;
1242 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1243 vol->posix_paths = 1;
1244 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1245 vol->posix_paths = 0;
1246 } else if (strnicmp(data, "nounix", 6) == 0) {
1247 vol->no_linux_ext = 1;
1248 } else if (strnicmp(data, "nolinux", 7) == 0) {
1249 vol->no_linux_ext = 1;
1250 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1251 (strnicmp(data, "ignorecase", 10) == 0)) {
1252 vol->nocase = 1;
1253 } else if (strnicmp(data, "brl", 3) == 0) {
1254 vol->nobrl = 0;
1255 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1256 (strnicmp(data, "nolock", 6) == 0)) {
1257 vol->nobrl = 1;
1258 /* turn off mandatory locking in mode
1259 if remote locking is turned off since the
1260 local vfs will do advisory */
1261 if (vol->file_mode ==
1262 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1263 vol->file_mode = S_IALLUGO;
1264 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1265 /* will take the shorter form "forcemand" as well */
1266 /* This mount option will force use of mandatory
1267 (DOS/Windows style) byte range locks, instead of
1268 using posix advisory byte range locks, even if the
1269 Unix extensions are available and posix locks would
1270 be supported otherwise. If Unix extensions are not
1271 negotiated this has no effect since mandatory locks
1272 would be used (mandatory locks is all that those
1273 those servers support) */
1274 vol->mand_lock = 1;
1275 } else if (strnicmp(data, "setuids", 7) == 0) {
1276 vol->setuids = 1;
1277 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1278 vol->setuids = 0;
1279 } else if (strnicmp(data, "dynperm", 7) == 0) {
1280 vol->dynperm = true;
1281 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1282 vol->dynperm = false;
1283 } else if (strnicmp(data, "nohard", 6) == 0) {
1284 vol->retry = 0;
1285 } else if (strnicmp(data, "nosoft", 6) == 0) {
1286 vol->retry = 1;
1287 } else if (strnicmp(data, "nointr", 6) == 0) {
1288 vol->intr = 0;
1289 } else if (strnicmp(data, "intr", 4) == 0) {
1290 vol->intr = 1;
1291 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1292 vol->nostrictsync = 1;
1293 } else if (strnicmp(data, "strictsync", 10) == 0) {
1294 vol->nostrictsync = 0;
1295 } else if (strnicmp(data, "serverino", 7) == 0) {
1296 vol->server_ino = 1;
1297 } else if (strnicmp(data, "noserverino", 9) == 0) {
1298 vol->server_ino = 0;
1299 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1300 vol->cifs_acl = 1;
1301 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1302 vol->cifs_acl = 0;
1303 } else if (strnicmp(data, "acl", 3) == 0) {
1304 vol->no_psx_acl = 0;
1305 } else if (strnicmp(data, "noacl", 5) == 0) {
1306 vol->no_psx_acl = 1;
1307 #ifdef CONFIG_CIFS_EXPERIMENTAL
1308 } else if (strnicmp(data, "locallease", 6) == 0) {
1309 vol->local_lease = 1;
1310 #endif
1311 } else if (strnicmp(data, "sign", 4) == 0) {
1312 vol->secFlg |= CIFSSEC_MUST_SIGN;
1313 } else if (strnicmp(data, "seal", 4) == 0) {
1314 /* we do not do the following in secFlags because seal
1315 is a per tree connection (mount) not a per socket
1316 or per-smb connection option in the protocol */
1317 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1318 vol->seal = 1;
1319 } else if (strnicmp(data, "direct", 6) == 0) {
1320 vol->direct_io = 1;
1321 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1322 vol->direct_io = 1;
1323 } else if (strnicmp(data, "in6_addr", 8) == 0) {
1324 if (!value || !*value) {
1325 vol->in6_addr = NULL;
1326 } else if (strnlen(value, 49) == 48) {
1327 vol->in6_addr = value;
1328 } else {
1329 printk(KERN_WARNING "CIFS: ip v6 address not "
1330 "48 characters long\n");
1331 return 1;
1332 }
1333 } else if (strnicmp(data, "noac", 4) == 0) {
1334 printk(KERN_WARNING "CIFS: Mount option noac not "
1335 "supported. Instead set "
1336 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1337 } else
1338 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1339 data);
1340 }
1341 if (vol->UNC == NULL) {
1342 if (devname == NULL) {
1343 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1344 "target\n");
1345 return 1;
1346 }
1347 if ((temp_len = strnlen(devname, 300)) < 300) {
1348 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1349 if (vol->UNC == NULL)
1350 return 1;
1351 strcpy(vol->UNC, devname);
1352 if (strncmp(vol->UNC, "//", 2) == 0) {
1353 vol->UNC[0] = '\\';
1354 vol->UNC[1] = '\\';
1355 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1356 printk(KERN_WARNING "CIFS: UNC Path does not "
1357 "begin with // or \\\\ \n");
1358 return 1;
1359 }
1360 value = strpbrk(vol->UNC+2, "/\\");
1361 if (value)
1362 *value = '\\';
1363 } else {
1364 printk(KERN_WARNING "CIFS: UNC name too long\n");
1365 return 1;
1366 }
1367 }
1368 if (vol->UNCip == NULL)
1369 vol->UNCip = &vol->UNC[2];
1370
1371 return 0;
1372 }
1373
1374 static struct TCP_Server_Info *
1375 cifs_find_tcp_session(struct sockaddr_storage *addr)
1376 {
1377 struct list_head *tmp;
1378 struct TCP_Server_Info *server;
1379 struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
1380 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
1381
1382 write_lock(&cifs_tcp_ses_lock);
1383 list_for_each(tmp, &cifs_tcp_ses_list) {
1384 server = list_entry(tmp, struct TCP_Server_Info,
1385 tcp_ses_list);
1386 /*
1387 * the demux thread can exit on its own while still in CifsNew
1388 * so don't accept any sockets in that state. Since the
1389 * tcpStatus never changes back to CifsNew it's safe to check
1390 * for this without a lock.
1391 */
1392 if (server->tcpStatus == CifsNew)
1393 continue;
1394
1395 if (addr->ss_family == AF_INET &&
1396 (addr4->sin_addr.s_addr !=
1397 server->addr.sockAddr.sin_addr.s_addr))
1398 continue;
1399 else if (addr->ss_family == AF_INET6 &&
1400 !ipv6_addr_equal(&server->addr.sockAddr6.sin6_addr,
1401 &addr6->sin6_addr))
1402 continue;
1403
1404 ++server->srv_count;
1405 write_unlock(&cifs_tcp_ses_lock);
1406 cFYI(1, ("Existing tcp session with server found"));
1407 return server;
1408 }
1409 write_unlock(&cifs_tcp_ses_lock);
1410 return NULL;
1411 }
1412
1413 static void
1414 cifs_put_tcp_session(struct TCP_Server_Info *server)
1415 {
1416 struct task_struct *task;
1417
1418 write_lock(&cifs_tcp_ses_lock);
1419 if (--server->srv_count > 0) {
1420 write_unlock(&cifs_tcp_ses_lock);
1421 return;
1422 }
1423
1424 list_del_init(&server->tcp_ses_list);
1425 write_unlock(&cifs_tcp_ses_lock);
1426
1427 spin_lock(&GlobalMid_Lock);
1428 server->tcpStatus = CifsExiting;
1429 spin_unlock(&GlobalMid_Lock);
1430
1431 task = xchg(&server->tsk, NULL);
1432 if (task)
1433 force_sig(SIGKILL, task);
1434 }
1435
1436 static struct TCP_Server_Info *
1437 cifs_get_tcp_session(struct smb_vol *volume_info)
1438 {
1439 struct TCP_Server_Info *tcp_ses = NULL;
1440 struct sockaddr_storage addr;
1441 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1442 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1443 int rc;
1444
1445 memset(&addr, 0, sizeof(struct sockaddr_storage));
1446
1447 if (volume_info->UNCip && volume_info->UNC) {
1448 rc = cifs_inet_pton(AF_INET, volume_info->UNCip,
1449 &sin_server->sin_addr.s_addr);
1450
1451 if (rc <= 0) {
1452 /* not ipv4 address, try ipv6 */
1453 rc = cifs_inet_pton(AF_INET6, volume_info->UNCip,
1454 &sin_server6->sin6_addr.in6_u);
1455 if (rc > 0)
1456 addr.ss_family = AF_INET6;
1457 } else {
1458 addr.ss_family = AF_INET;
1459 }
1460
1461 if (rc <= 0) {
1462 /* we failed translating address */
1463 rc = -EINVAL;
1464 goto out_err;
1465 }
1466
1467 cFYI(1, ("UNC: %s ip: %s", volume_info->UNC,
1468 volume_info->UNCip));
1469 } else if (volume_info->UNCip) {
1470 /* BB using ip addr as tcp_ses name to connect to the
1471 DFS root below */
1472 cERROR(1, ("Connecting to DFS root not implemented yet"));
1473 rc = -EINVAL;
1474 goto out_err;
1475 } else /* which tcp_sess DFS root would we conect to */ {
1476 cERROR(1,
1477 ("CIFS mount error: No UNC path (e.g. -o "
1478 "unc=//192.168.1.100/public) specified"));
1479 rc = -EINVAL;
1480 goto out_err;
1481 }
1482
1483 /* see if we already have a matching tcp_ses */
1484 tcp_ses = cifs_find_tcp_session(&addr);
1485 if (tcp_ses)
1486 return tcp_ses;
1487
1488 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1489 if (!tcp_ses) {
1490 rc = -ENOMEM;
1491 goto out_err;
1492 }
1493
1494 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1495 if (IS_ERR(tcp_ses->hostname)) {
1496 rc = PTR_ERR(tcp_ses->hostname);
1497 goto out_err;
1498 }
1499
1500 tcp_ses->noblocksnd = volume_info->noblocksnd;
1501 tcp_ses->noautotune = volume_info->noautotune;
1502 atomic_set(&tcp_ses->inFlight, 0);
1503 init_waitqueue_head(&tcp_ses->response_q);
1504 init_waitqueue_head(&tcp_ses->request_q);
1505 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1506 mutex_init(&tcp_ses->srv_mutex);
1507 memcpy(tcp_ses->workstation_RFC1001_name,
1508 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1509 memcpy(tcp_ses->server_RFC1001_name,
1510 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1511 tcp_ses->sequence_number = 0;
1512 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1513 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1514
1515 /*
1516 * at this point we are the only ones with the pointer
1517 * to the struct since the kernel thread not created yet
1518 * no need to spinlock this init of tcpStatus or srv_count
1519 */
1520 tcp_ses->tcpStatus = CifsNew;
1521 ++tcp_ses->srv_count;
1522
1523 if (addr.ss_family == AF_INET6) {
1524 cFYI(1, ("attempting ipv6 connect"));
1525 /* BB should we allow ipv6 on port 139? */
1526 /* other OS never observed in Wild doing 139 with v6 */
1527 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1528 sizeof(struct sockaddr_in6));
1529 sin_server6->sin6_port = htons(volume_info->port);
1530 rc = ipv6_connect(tcp_ses);
1531 } else {
1532 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1533 sizeof(struct sockaddr_in));
1534 sin_server->sin_port = htons(volume_info->port);
1535 rc = ipv4_connect(tcp_ses);
1536 }
1537 if (rc < 0) {
1538 cERROR(1, ("Error connecting to socket. Aborting operation"));
1539 goto out_err;
1540 }
1541
1542 /*
1543 * since we're in a cifs function already, we know that
1544 * this will succeed. No need for try_module_get().
1545 */
1546 __module_get(THIS_MODULE);
1547 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1548 tcp_ses, "cifsd");
1549 if (IS_ERR(tcp_ses->tsk)) {
1550 rc = PTR_ERR(tcp_ses->tsk);
1551 cERROR(1, ("error %d create cifsd thread", rc));
1552 module_put(THIS_MODULE);
1553 goto out_err;
1554 }
1555
1556 /* thread spawned, put it on the list */
1557 write_lock(&cifs_tcp_ses_lock);
1558 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1559 write_unlock(&cifs_tcp_ses_lock);
1560
1561 return tcp_ses;
1562
1563 out_err:
1564 if (tcp_ses) {
1565 kfree(tcp_ses->hostname);
1566 if (tcp_ses->ssocket)
1567 sock_release(tcp_ses->ssocket);
1568 kfree(tcp_ses);
1569 }
1570 return ERR_PTR(rc);
1571 }
1572
1573 static struct cifsSesInfo *
1574 cifs_find_smb_ses(struct TCP_Server_Info *server, char *username)
1575 {
1576 struct list_head *tmp;
1577 struct cifsSesInfo *ses;
1578
1579 write_lock(&cifs_tcp_ses_lock);
1580 list_for_each(tmp, &server->smb_ses_list) {
1581 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
1582 if (strncmp(ses->userName, username, MAX_USERNAME_SIZE))
1583 continue;
1584
1585 ++ses->ses_count;
1586 write_unlock(&cifs_tcp_ses_lock);
1587 return ses;
1588 }
1589 write_unlock(&cifs_tcp_ses_lock);
1590 return NULL;
1591 }
1592
1593 static void
1594 cifs_put_smb_ses(struct cifsSesInfo *ses)
1595 {
1596 int xid;
1597 struct TCP_Server_Info *server = ses->server;
1598
1599 write_lock(&cifs_tcp_ses_lock);
1600 if (--ses->ses_count > 0) {
1601 write_unlock(&cifs_tcp_ses_lock);
1602 return;
1603 }
1604
1605 list_del_init(&ses->smb_ses_list);
1606 write_unlock(&cifs_tcp_ses_lock);
1607
1608 if (ses->status == CifsGood) {
1609 xid = GetXid();
1610 CIFSSMBLogoff(xid, ses);
1611 _FreeXid(xid);
1612 }
1613 sesInfoFree(ses);
1614 cifs_put_tcp_session(server);
1615 }
1616
1617 static struct cifsTconInfo *
1618 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1619 {
1620 struct list_head *tmp;
1621 struct cifsTconInfo *tcon;
1622
1623 write_lock(&cifs_tcp_ses_lock);
1624 list_for_each(tmp, &ses->tcon_list) {
1625 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1626 if (tcon->tidStatus == CifsExiting)
1627 continue;
1628 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1629 continue;
1630
1631 ++tcon->tc_count;
1632 write_unlock(&cifs_tcp_ses_lock);
1633 return tcon;
1634 }
1635 write_unlock(&cifs_tcp_ses_lock);
1636 return NULL;
1637 }
1638
1639 static void
1640 cifs_put_tcon(struct cifsTconInfo *tcon)
1641 {
1642 int xid;
1643 struct cifsSesInfo *ses = tcon->ses;
1644
1645 write_lock(&cifs_tcp_ses_lock);
1646 if (--tcon->tc_count > 0) {
1647 write_unlock(&cifs_tcp_ses_lock);
1648 return;
1649 }
1650
1651 list_del_init(&tcon->tcon_list);
1652 write_unlock(&cifs_tcp_ses_lock);
1653
1654 xid = GetXid();
1655 CIFSSMBTDis(xid, tcon);
1656 _FreeXid(xid);
1657
1658 DeleteTconOplockQEntries(tcon);
1659 tconInfoFree(tcon);
1660 cifs_put_smb_ses(ses);
1661 }
1662
1663 int
1664 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
1665 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
1666 struct dfs_info3_param **preferrals, int remap)
1667 {
1668 char *temp_unc;
1669 int rc = 0;
1670
1671 *pnum_referrals = 0;
1672 *preferrals = NULL;
1673
1674 if (pSesInfo->ipc_tid == 0) {
1675 temp_unc = kmalloc(2 /* for slashes */ +
1676 strnlen(pSesInfo->serverName,
1677 SERVER_NAME_LEN_WITH_NULL * 2)
1678 + 1 + 4 /* slash IPC$ */ + 2,
1679 GFP_KERNEL);
1680 if (temp_unc == NULL)
1681 return -ENOMEM;
1682 temp_unc[0] = '\\';
1683 temp_unc[1] = '\\';
1684 strcpy(temp_unc + 2, pSesInfo->serverName);
1685 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
1686 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1687 cFYI(1,
1688 ("CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid));
1689 kfree(temp_unc);
1690 }
1691 if (rc == 0)
1692 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
1693 pnum_referrals, nls_codepage, remap);
1694 /* BB map targetUNCs to dfs_info3 structures, here or
1695 in CIFSGetDFSRefer BB */
1696
1697 return rc;
1698 }
1699
1700 #ifdef CONFIG_DEBUG_LOCK_ALLOC
1701 static struct lock_class_key cifs_key[2];
1702 static struct lock_class_key cifs_slock_key[2];
1703
1704 static inline void
1705 cifs_reclassify_socket4(struct socket *sock)
1706 {
1707 struct sock *sk = sock->sk;
1708 BUG_ON(sock_owned_by_user(sk));
1709 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
1710 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
1711 }
1712
1713 static inline void
1714 cifs_reclassify_socket6(struct socket *sock)
1715 {
1716 struct sock *sk = sock->sk;
1717 BUG_ON(sock_owned_by_user(sk));
1718 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
1719 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
1720 }
1721 #else
1722 static inline void
1723 cifs_reclassify_socket4(struct socket *sock)
1724 {
1725 }
1726
1727 static inline void
1728 cifs_reclassify_socket6(struct socket *sock)
1729 {
1730 }
1731 #endif
1732
1733 /* See RFC1001 section 14 on representation of Netbios names */
1734 static void rfc1002mangle(char *target, char *source, unsigned int length)
1735 {
1736 unsigned int i, j;
1737
1738 for (i = 0, j = 0; i < (length); i++) {
1739 /* mask a nibble at a time and encode */
1740 target[j] = 'A' + (0x0F & (source[i] >> 4));
1741 target[j+1] = 'A' + (0x0F & source[i]);
1742 j += 2;
1743 }
1744
1745 }
1746
1747
1748 static int
1749 ipv4_connect(struct TCP_Server_Info *server)
1750 {
1751 int rc = 0;
1752 bool connected = false;
1753 __be16 orig_port = 0;
1754 struct socket *socket = server->ssocket;
1755
1756 if (socket == NULL) {
1757 rc = sock_create_kern(PF_INET, SOCK_STREAM,
1758 IPPROTO_TCP, &socket);
1759 if (rc < 0) {
1760 cERROR(1, ("Error %d creating socket", rc));
1761 return rc;
1762 }
1763
1764 /* BB other socket options to set KEEPALIVE, NODELAY? */
1765 cFYI(1, ("Socket created"));
1766 server->ssocket = socket;
1767 socket->sk->sk_allocation = GFP_NOFS;
1768 cifs_reclassify_socket4(socket);
1769 }
1770
1771 /* user overrode default port */
1772 if (server->addr.sockAddr.sin_port) {
1773 rc = socket->ops->connect(socket, (struct sockaddr *)
1774 &server->addr.sockAddr,
1775 sizeof(struct sockaddr_in), 0);
1776 if (rc >= 0)
1777 connected = true;
1778 }
1779
1780 if (!connected) {
1781 /* save original port so we can retry user specified port
1782 later if fall back ports fail this time */
1783 orig_port = server->addr.sockAddr.sin_port;
1784
1785 /* do not retry on the same port we just failed on */
1786 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
1787 server->addr.sockAddr.sin_port = htons(CIFS_PORT);
1788 rc = socket->ops->connect(socket,
1789 (struct sockaddr *)
1790 &server->addr.sockAddr,
1791 sizeof(struct sockaddr_in), 0);
1792 if (rc >= 0)
1793 connected = true;
1794 }
1795 }
1796 if (!connected) {
1797 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
1798 rc = socket->ops->connect(socket, (struct sockaddr *)
1799 &server->addr.sockAddr,
1800 sizeof(struct sockaddr_in), 0);
1801 if (rc >= 0)
1802 connected = true;
1803 }
1804
1805 /* give up here - unless we want to retry on different
1806 protocol families some day */
1807 if (!connected) {
1808 if (orig_port)
1809 server->addr.sockAddr.sin_port = orig_port;
1810 cFYI(1, ("Error %d connecting to server via ipv4", rc));
1811 sock_release(socket);
1812 server->ssocket = NULL;
1813 return rc;
1814 }
1815
1816
1817 /*
1818 * Eventually check for other socket options to change from
1819 * the default. sock_setsockopt not used because it expects
1820 * user space buffer
1821 */
1822 socket->sk->sk_rcvtimeo = 7 * HZ;
1823 socket->sk->sk_sndtimeo = 5 * HZ;
1824
1825 /* make the bufsizes depend on wsize/rsize and max requests */
1826 if (server->noautotune) {
1827 if (socket->sk->sk_sndbuf < (200 * 1024))
1828 socket->sk->sk_sndbuf = 200 * 1024;
1829 if (socket->sk->sk_rcvbuf < (140 * 1024))
1830 socket->sk->sk_rcvbuf = 140 * 1024;
1831 }
1832
1833 cFYI(1, ("sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
1834 socket->sk->sk_sndbuf,
1835 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo));
1836
1837 /* send RFC1001 sessinit */
1838 if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
1839 /* some servers require RFC1001 sessinit before sending
1840 negprot - BB check reconnection in case where second
1841 sessinit is sent but no second negprot */
1842 struct rfc1002_session_packet *ses_init_buf;
1843 struct smb_hdr *smb_buf;
1844 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
1845 GFP_KERNEL);
1846 if (ses_init_buf) {
1847 ses_init_buf->trailer.session_req.called_len = 32;
1848 if (server->server_RFC1001_name &&
1849 server->server_RFC1001_name[0] != 0)
1850 rfc1002mangle(ses_init_buf->trailer.
1851 session_req.called_name,
1852 server->server_RFC1001_name,
1853 RFC1001_NAME_LEN_WITH_NULL);
1854 else
1855 rfc1002mangle(ses_init_buf->trailer.
1856 session_req.called_name,
1857 DEFAULT_CIFS_CALLED_NAME,
1858 RFC1001_NAME_LEN_WITH_NULL);
1859
1860 ses_init_buf->trailer.session_req.calling_len = 32;
1861
1862 /* calling name ends in null (byte 16) from old smb
1863 convention. */
1864 if (server->workstation_RFC1001_name &&
1865 server->workstation_RFC1001_name[0] != 0)
1866 rfc1002mangle(ses_init_buf->trailer.
1867 session_req.calling_name,
1868 server->workstation_RFC1001_name,
1869 RFC1001_NAME_LEN_WITH_NULL);
1870 else
1871 rfc1002mangle(ses_init_buf->trailer.
1872 session_req.calling_name,
1873 "LINUX_CIFS_CLNT",
1874 RFC1001_NAME_LEN_WITH_NULL);
1875
1876 ses_init_buf->trailer.session_req.scope1 = 0;
1877 ses_init_buf->trailer.session_req.scope2 = 0;
1878 smb_buf = (struct smb_hdr *)ses_init_buf;
1879 /* sizeof RFC1002_SESSION_REQUEST with no scope */
1880 smb_buf->smb_buf_length = 0x81000044;
1881 rc = smb_send(server, smb_buf, 0x44);
1882 kfree(ses_init_buf);
1883 msleep(1); /* RFC1001 layer in at least one server
1884 requires very short break before negprot
1885 presumably because not expecting negprot
1886 to follow so fast. This is a simple
1887 solution that works without
1888 complicating the code and causes no
1889 significant slowing down on mount
1890 for everyone else */
1891 }
1892 /* else the negprot may still work without this
1893 even though malloc failed */
1894
1895 }
1896
1897 return rc;
1898 }
1899
1900 static int
1901 ipv6_connect(struct TCP_Server_Info *server)
1902 {
1903 int rc = 0;
1904 bool connected = false;
1905 __be16 orig_port = 0;
1906 struct socket *socket = server->ssocket;
1907
1908 if (socket == NULL) {
1909 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
1910 IPPROTO_TCP, &socket);
1911 if (rc < 0) {
1912 cERROR(1, ("Error %d creating ipv6 socket", rc));
1913 socket = NULL;
1914 return rc;
1915 }
1916
1917 /* BB other socket options to set KEEPALIVE, NODELAY? */
1918 cFYI(1, ("ipv6 Socket created"));
1919 server->ssocket = socket;
1920 socket->sk->sk_allocation = GFP_NOFS;
1921 cifs_reclassify_socket6(socket);
1922 }
1923
1924 /* user overrode default port */
1925 if (server->addr.sockAddr6.sin6_port) {
1926 rc = socket->ops->connect(socket,
1927 (struct sockaddr *) &server->addr.sockAddr6,
1928 sizeof(struct sockaddr_in6), 0);
1929 if (rc >= 0)
1930 connected = true;
1931 }
1932
1933 if (!connected) {
1934 /* save original port so we can retry user specified port
1935 later if fall back ports fail this time */
1936
1937 orig_port = server->addr.sockAddr6.sin6_port;
1938 /* do not retry on the same port we just failed on */
1939 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
1940 server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
1941 rc = socket->ops->connect(socket, (struct sockaddr *)
1942 &server->addr.sockAddr6,
1943 sizeof(struct sockaddr_in6), 0);
1944 if (rc >= 0)
1945 connected = true;
1946 }
1947 }
1948 if (!connected) {
1949 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
1950 rc = socket->ops->connect(socket, (struct sockaddr *)
1951 &server->addr.sockAddr6,
1952 sizeof(struct sockaddr_in6), 0);
1953 if (rc >= 0)
1954 connected = true;
1955 }
1956
1957 /* give up here - unless we want to retry on different
1958 protocol families some day */
1959 if (!connected) {
1960 if (orig_port)
1961 server->addr.sockAddr6.sin6_port = orig_port;
1962 cFYI(1, ("Error %d connecting to server via ipv6", rc));
1963 sock_release(socket);
1964 server->ssocket = NULL;
1965 return rc;
1966 }
1967
1968 /*
1969 * Eventually check for other socket options to change from
1970 * the default. sock_setsockopt not used because it expects
1971 * user space buffer
1972 */
1973 socket->sk->sk_rcvtimeo = 7 * HZ;
1974 socket->sk->sk_sndtimeo = 5 * HZ;
1975 server->ssocket = socket;
1976
1977 return rc;
1978 }
1979
1980 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
1981 struct super_block *sb, struct smb_vol *vol_info)
1982 {
1983 /* if we are reconnecting then should we check to see if
1984 * any requested capabilities changed locally e.g. via
1985 * remount but we can not do much about it here
1986 * if they have (even if we could detect it by the following)
1987 * Perhaps we could add a backpointer to array of sb from tcon
1988 * or if we change to make all sb to same share the same
1989 * sb as NFS - then we only have one backpointer to sb.
1990 * What if we wanted to mount the server share twice once with
1991 * and once without posixacls or posix paths? */
1992 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
1993
1994 if (vol_info && vol_info->no_linux_ext) {
1995 tcon->fsUnixInfo.Capability = 0;
1996 tcon->unix_ext = 0; /* Unix Extensions disabled */
1997 cFYI(1, ("Linux protocol extensions disabled"));
1998 return;
1999 } else if (vol_info)
2000 tcon->unix_ext = 1; /* Unix Extensions supported */
2001
2002 if (tcon->unix_ext == 0) {
2003 cFYI(1, ("Unix extensions disabled so not set on reconnect"));
2004 return;
2005 }
2006
2007 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2008 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2009
2010 /* check for reconnect case in which we do not
2011 want to change the mount behavior if we can avoid it */
2012 if (vol_info == NULL) {
2013 /* turn off POSIX ACL and PATHNAMES if not set
2014 originally at mount time */
2015 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2016 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2017 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2018 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2019 cERROR(1, ("POSIXPATH support change"));
2020 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2021 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2022 cERROR(1, ("possible reconnect error"));
2023 cERROR(1,
2024 ("server disabled POSIX path support"));
2025 }
2026 }
2027
2028 cap &= CIFS_UNIX_CAP_MASK;
2029 if (vol_info && vol_info->no_psx_acl)
2030 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2031 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2032 cFYI(1, ("negotiated posix acl support"));
2033 if (sb)
2034 sb->s_flags |= MS_POSIXACL;
2035 }
2036
2037 if (vol_info && vol_info->posix_paths == 0)
2038 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2039 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2040 cFYI(1, ("negotiate posix pathnames"));
2041 if (sb)
2042 CIFS_SB(sb)->mnt_cifs_flags |=
2043 CIFS_MOUNT_POSIX_PATHS;
2044 }
2045
2046 /* We might be setting the path sep back to a different
2047 form if we are reconnecting and the server switched its
2048 posix path capability for this share */
2049 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2050 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2051
2052 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2053 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2054 CIFS_SB(sb)->rsize = 127 * 1024;
2055 cFYI(DBG2,
2056 ("larger reads not supported by srv"));
2057 }
2058 }
2059
2060
2061 cFYI(1, ("Negotiate caps 0x%x", (int)cap));
2062 #ifdef CONFIG_CIFS_DEBUG2
2063 if (cap & CIFS_UNIX_FCNTL_CAP)
2064 cFYI(1, ("FCNTL cap"));
2065 if (cap & CIFS_UNIX_EXTATTR_CAP)
2066 cFYI(1, ("EXTATTR cap"));
2067 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2068 cFYI(1, ("POSIX path cap"));
2069 if (cap & CIFS_UNIX_XATTR_CAP)
2070 cFYI(1, ("XATTR cap"));
2071 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2072 cFYI(1, ("POSIX ACL cap"));
2073 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2074 cFYI(1, ("very large read cap"));
2075 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2076 cFYI(1, ("very large write cap"));
2077 #endif /* CIFS_DEBUG2 */
2078 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2079 if (vol_info == NULL) {
2080 cFYI(1, ("resetting capabilities failed"));
2081 } else
2082 cERROR(1, ("Negotiating Unix capabilities "
2083 "with the server failed. Consider "
2084 "mounting with the Unix Extensions\n"
2085 "disabled, if problems are found, "
2086 "by specifying the nounix mount "
2087 "option."));
2088
2089 }
2090 }
2091 }
2092
2093 static void
2094 convert_delimiter(char *path, char delim)
2095 {
2096 int i;
2097 char old_delim;
2098
2099 if (path == NULL)
2100 return;
2101
2102 if (delim == '/')
2103 old_delim = '\\';
2104 else
2105 old_delim = '/';
2106
2107 for (i = 0; path[i] != '\0'; i++) {
2108 if (path[i] == old_delim)
2109 path[i] = delim;
2110 }
2111 }
2112
2113 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2114 struct cifs_sb_info *cifs_sb)
2115 {
2116 if (pvolume_info->rsize > CIFSMaxBufSize) {
2117 cERROR(1, ("rsize %d too large, using MaxBufSize",
2118 pvolume_info->rsize));
2119 cifs_sb->rsize = CIFSMaxBufSize;
2120 } else if ((pvolume_info->rsize) &&
2121 (pvolume_info->rsize <= CIFSMaxBufSize))
2122 cifs_sb->rsize = pvolume_info->rsize;
2123 else /* default */
2124 cifs_sb->rsize = CIFSMaxBufSize;
2125
2126 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2127 cERROR(1, ("wsize %d too large, using 4096 instead",
2128 pvolume_info->wsize));
2129 cifs_sb->wsize = 4096;
2130 } else if (pvolume_info->wsize)
2131 cifs_sb->wsize = pvolume_info->wsize;
2132 else
2133 cifs_sb->wsize = min_t(const int,
2134 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2135 127*1024);
2136 /* old default of CIFSMaxBufSize was too small now
2137 that SMB Write2 can send multiple pages in kvec.
2138 RFC1001 does not describe what happens when frame
2139 bigger than 128K is sent so use that as max in
2140 conjunction with 52K kvec constraint on arch with 4K
2141 page size */
2142
2143 if (cifs_sb->rsize < 2048) {
2144 cifs_sb->rsize = 2048;
2145 /* Windows ME may prefer this */
2146 cFYI(1, ("readsize set to minimum: 2048"));
2147 }
2148 /* calculate prepath */
2149 cifs_sb->prepath = pvolume_info->prepath;
2150 if (cifs_sb->prepath) {
2151 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2152 /* we can not convert the / to \ in the path
2153 separators in the prefixpath yet because we do not
2154 know (until reset_cifs_unix_caps is called later)
2155 whether POSIX PATH CAP is available. We normalize
2156 the / to \ after reset_cifs_unix_caps is called */
2157 pvolume_info->prepath = NULL;
2158 } else
2159 cifs_sb->prepathlen = 0;
2160 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2161 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2162 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2163 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2164 cFYI(1, ("file mode: 0x%x dir mode: 0x%x",
2165 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode));
2166
2167 if (pvolume_info->noperm)
2168 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2169 if (pvolume_info->setuids)
2170 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2171 if (pvolume_info->server_ino)
2172 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2173 if (pvolume_info->remap)
2174 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2175 if (pvolume_info->no_xattr)
2176 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2177 if (pvolume_info->sfu_emul)
2178 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2179 if (pvolume_info->nobrl)
2180 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2181 if (pvolume_info->nostrictsync)
2182 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2183 if (pvolume_info->mand_lock)
2184 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2185 if (pvolume_info->cifs_acl)
2186 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2187 if (pvolume_info->override_uid)
2188 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2189 if (pvolume_info->override_gid)
2190 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2191 if (pvolume_info->dynperm)
2192 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2193 if (pvolume_info->direct_io) {
2194 cFYI(1, ("mounting share using direct i/o"));
2195 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2196 }
2197
2198 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2199 cERROR(1, ("mount option dynperm ignored if cifsacl "
2200 "mount option supported"));
2201 }
2202
2203 static int
2204 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2205 struct cifs_sb_info *cifs_sb, const char *full_path)
2206 {
2207 int rc;
2208 __u64 inode_num;
2209 FILE_ALL_INFO *pfile_info;
2210
2211 rc = CIFSGetSrvInodeNumber(xid, tcon, full_path, &inode_num,
2212 cifs_sb->local_nls,
2213 cifs_sb->mnt_cifs_flags &
2214 CIFS_MOUNT_MAP_SPECIAL_CHR);
2215 if (rc != -EOPNOTSUPP)
2216 return rc;
2217
2218 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2219 if (pfile_info == NULL)
2220 return -ENOMEM;
2221
2222 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2223 0 /* not legacy */, cifs_sb->local_nls,
2224 cifs_sb->mnt_cifs_flags &
2225 CIFS_MOUNT_MAP_SPECIAL_CHR);
2226 kfree(pfile_info);
2227 return rc;
2228 }
2229
2230 static void
2231 cleanup_volume_info(struct smb_vol **pvolume_info)
2232 {
2233 struct smb_vol *volume_info;
2234
2235 if (!pvolume_info && !*pvolume_info)
2236 return;
2237
2238 volume_info = *pvolume_info;
2239 kzfree(volume_info->password);
2240 kfree(volume_info->UNC);
2241 kfree(volume_info->prepath);
2242 kfree(volume_info);
2243 *pvolume_info = NULL;
2244 return;
2245 }
2246
2247 #ifdef CONFIG_CIFS_DFS_UPCALL
2248 /* build_path_to_root returns full path to root when
2249 * we do not have an exiting connection (tcon) */
2250 static char *
2251 build_unc_path_to_root(const struct smb_vol *volume_info,
2252 const struct cifs_sb_info *cifs_sb)
2253 {
2254 char *full_path;
2255
2256 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2257 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2258 if (full_path == NULL)
2259 return ERR_PTR(-ENOMEM);
2260
2261 strncpy(full_path, volume_info->UNC, unc_len);
2262 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2263 int i;
2264 for (i = 0; i < unc_len; i++) {
2265 if (full_path[i] == '\\')
2266 full_path[i] = '/';
2267 }
2268 }
2269
2270 if (cifs_sb->prepathlen)
2271 strncpy(full_path + unc_len, cifs_sb->prepath,
2272 cifs_sb->prepathlen);
2273
2274 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2275 return full_path;
2276 }
2277 #endif
2278
2279 int
2280 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2281 char *mount_data_global, const char *devname)
2282 {
2283 int rc = 0;
2284 int xid;
2285 struct smb_vol *volume_info;
2286 struct cifsSesInfo *pSesInfo = NULL;
2287 struct cifsTconInfo *tcon = NULL;
2288 struct TCP_Server_Info *srvTcp = NULL;
2289 char *full_path;
2290 char *mount_data = mount_data_global;
2291 #ifdef CONFIG_CIFS_DFS_UPCALL
2292 struct dfs_info3_param *referrals = NULL;
2293 unsigned int num_referrals = 0;
2294 int referral_walks_count = 0;
2295 try_mount_again:
2296 #endif
2297 full_path = NULL;
2298
2299 xid = GetXid();
2300
2301 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2302 if (!volume_info) {
2303 rc = -ENOMEM;
2304 goto out;
2305 }
2306
2307 if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2308 rc = -EINVAL;
2309 goto out;
2310 }
2311
2312 if (volume_info->nullauth) {
2313 cFYI(1, ("null user"));
2314 volume_info->username = "";
2315 } else if (volume_info->username) {
2316 /* BB fixme parse for domain name here */
2317 cFYI(1, ("Username: %s", volume_info->username));
2318 } else {
2319 cifserror("No username specified");
2320 /* In userspace mount helper we can get user name from alternate
2321 locations such as env variables and files on disk */
2322 rc = -EINVAL;
2323 goto out;
2324 }
2325
2326
2327 /* this is needed for ASCII cp to Unicode converts */
2328 if (volume_info->iocharset == NULL) {
2329 cifs_sb->local_nls = load_nls_default();
2330 /* load_nls_default can not return null */
2331 } else {
2332 cifs_sb->local_nls = load_nls(volume_info->iocharset);
2333 if (cifs_sb->local_nls == NULL) {
2334 cERROR(1, ("CIFS mount error: iocharset %s not found",
2335 volume_info->iocharset));
2336 rc = -ELIBACC;
2337 goto out;
2338 }
2339 }
2340
2341 /* get a reference to a tcp session */
2342 srvTcp = cifs_get_tcp_session(volume_info);
2343 if (IS_ERR(srvTcp)) {
2344 rc = PTR_ERR(srvTcp);
2345 goto out;
2346 }
2347
2348 pSesInfo = cifs_find_smb_ses(srvTcp, volume_info->username);
2349 if (pSesInfo) {
2350 cFYI(1, ("Existing smb sess found (status=%d)",
2351 pSesInfo->status));
2352 /*
2353 * The existing SMB session already has a reference to srvTcp,
2354 * so we can put back the extra one we got before
2355 */
2356 cifs_put_tcp_session(srvTcp);
2357
2358 down(&pSesInfo->sesSem);
2359 if (pSesInfo->need_reconnect) {
2360 cFYI(1, ("Session needs reconnect"));
2361 rc = cifs_setup_session(xid, pSesInfo,
2362 cifs_sb->local_nls);
2363 }
2364 up(&pSesInfo->sesSem);
2365 } else if (!rc) {
2366 cFYI(1, ("Existing smb sess not found"));
2367 pSesInfo = sesInfoAlloc();
2368 if (pSesInfo == NULL) {
2369 rc = -ENOMEM;
2370 goto mount_fail_check;
2371 }
2372
2373 /* new SMB session uses our srvTcp ref */
2374 pSesInfo->server = srvTcp;
2375 if (srvTcp->addr.sockAddr6.sin6_family == AF_INET6)
2376 sprintf(pSesInfo->serverName, "%pI6",
2377 &srvTcp->addr.sockAddr6.sin6_addr);
2378 else
2379 sprintf(pSesInfo->serverName, "%pI4",
2380 &srvTcp->addr.sockAddr.sin_addr.s_addr);
2381
2382 write_lock(&cifs_tcp_ses_lock);
2383 list_add(&pSesInfo->smb_ses_list, &srvTcp->smb_ses_list);
2384 write_unlock(&cifs_tcp_ses_lock);
2385
2386 /* volume_info->password freed at unmount */
2387 if (volume_info->password) {
2388 pSesInfo->password = kstrdup(volume_info->password,
2389 GFP_KERNEL);
2390 if (!pSesInfo->password) {
2391 rc = -ENOMEM;
2392 goto mount_fail_check;
2393 }
2394 }
2395 if (volume_info->username)
2396 strncpy(pSesInfo->userName, volume_info->username,
2397 MAX_USERNAME_SIZE);
2398 if (volume_info->domainname) {
2399 int len = strlen(volume_info->domainname);
2400 pSesInfo->domainName = kmalloc(len + 1, GFP_KERNEL);
2401 if (pSesInfo->domainName)
2402 strcpy(pSesInfo->domainName,
2403 volume_info->domainname);
2404 }
2405 pSesInfo->linux_uid = volume_info->linux_uid;
2406 pSesInfo->overrideSecFlg = volume_info->secFlg;
2407 down(&pSesInfo->sesSem);
2408
2409 /* BB FIXME need to pass vol->secFlgs BB */
2410 rc = cifs_setup_session(xid, pSesInfo,
2411 cifs_sb->local_nls);
2412 up(&pSesInfo->sesSem);
2413 }
2414
2415 /* search for existing tcon to this server share */
2416 if (!rc) {
2417 setup_cifs_sb(volume_info, cifs_sb);
2418
2419 tcon = cifs_find_tcon(pSesInfo, volume_info->UNC);
2420 if (tcon) {
2421 cFYI(1, ("Found match on UNC path"));
2422 /* existing tcon already has a reference */
2423 cifs_put_smb_ses(pSesInfo);
2424 if (tcon->seal != volume_info->seal)
2425 cERROR(1, ("transport encryption setting "
2426 "conflicts with existing tid"));
2427 } else {
2428 tcon = tconInfoAlloc();
2429 if (tcon == NULL) {
2430 rc = -ENOMEM;
2431 goto mount_fail_check;
2432 }
2433
2434 tcon->ses = pSesInfo;
2435 if (volume_info->password) {
2436 tcon->password = kstrdup(volume_info->password,
2437 GFP_KERNEL);
2438 if (!tcon->password) {
2439 rc = -ENOMEM;
2440 goto mount_fail_check;
2441 }
2442 }
2443
2444 if ((strchr(volume_info->UNC + 3, '\\') == NULL)
2445 && (strchr(volume_info->UNC + 3, '/') == NULL)) {
2446 cERROR(1, ("Missing share name"));
2447 rc = -ENODEV;
2448 goto mount_fail_check;
2449 } else {
2450 /* BB Do we need to wrap sesSem around
2451 * this TCon call and Unix SetFS as
2452 * we do on SessSetup and reconnect? */
2453 rc = CIFSTCon(xid, pSesInfo, volume_info->UNC,
2454 tcon, cifs_sb->local_nls);
2455 cFYI(1, ("CIFS Tcon rc = %d", rc));
2456 if (volume_info->nodfs) {
2457 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2458 cFYI(1, ("DFS disabled (%d)",
2459 tcon->Flags));
2460 }
2461 }
2462 if (rc)
2463 goto remote_path_check;
2464 tcon->seal = volume_info->seal;
2465 write_lock(&cifs_tcp_ses_lock);
2466 list_add(&tcon->tcon_list, &pSesInfo->tcon_list);
2467 write_unlock(&cifs_tcp_ses_lock);
2468 }
2469
2470 /* we can have only one retry value for a connection
2471 to a share so for resources mounted more than once
2472 to the same server share the last value passed in
2473 for the retry flag is used */
2474 tcon->retry = volume_info->retry;
2475 tcon->nocase = volume_info->nocase;
2476 tcon->local_lease = volume_info->local_lease;
2477 }
2478 if (pSesInfo) {
2479 if (pSesInfo->capabilities & CAP_LARGE_FILES) {
2480 sb->s_maxbytes = (u64) 1 << 63;
2481 } else
2482 sb->s_maxbytes = (u64) 1 << 31; /* 2 GB */
2483 }
2484
2485 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2486 sb->s_time_gran = 100;
2487
2488 if (rc)
2489 goto remote_path_check;
2490
2491 cifs_sb->tcon = tcon;
2492
2493 /* do not care if following two calls succeed - informational */
2494 if (!tcon->ipc) {
2495 CIFSSMBQFSDeviceInfo(xid, tcon);
2496 CIFSSMBQFSAttributeInfo(xid, tcon);
2497 }
2498
2499 /* tell server which Unix caps we support */
2500 if (tcon->ses->capabilities & CAP_UNIX)
2501 /* reset of caps checks mount to see if unix extensions
2502 disabled for just this mount */
2503 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2504 else
2505 tcon->unix_ext = 0; /* server does not support them */
2506
2507 /* convert forward to back slashes in prepath here if needed */
2508 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2509 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2510
2511 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2512 cifs_sb->rsize = 1024 * 127;
2513 cFYI(DBG2, ("no very large read support, rsize now 127K"));
2514 }
2515 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2516 cifs_sb->wsize = min(cifs_sb->wsize,
2517 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2518 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2519 cifs_sb->rsize = min(cifs_sb->rsize,
2520 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2521
2522 remote_path_check:
2523 /* check if a whole path (including prepath) is not remote */
2524 if (!rc && cifs_sb->prepathlen && tcon) {
2525 /* build_path_to_root works only when we have a valid tcon */
2526 full_path = cifs_build_path_to_root(cifs_sb);
2527 if (full_path == NULL) {
2528 rc = -ENOMEM;
2529 goto mount_fail_check;
2530 }
2531 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2532 if (rc != -EREMOTE) {
2533 kfree(full_path);
2534 goto mount_fail_check;
2535 }
2536 kfree(full_path);
2537 }
2538
2539 /* get referral if needed */
2540 if (rc == -EREMOTE) {
2541 #ifdef CONFIG_CIFS_DFS_UPCALL
2542 if (referral_walks_count > MAX_NESTED_LINKS) {
2543 /*
2544 * BB: when we implement proper loop detection,
2545 * we will remove this check. But now we need it
2546 * to prevent an indefinite loop if 'DFS tree' is
2547 * misconfigured (i.e. has loops).
2548 */
2549 rc = -ELOOP;
2550 goto mount_fail_check;
2551 }
2552 /* convert forward to back slashes in prepath here if needed */
2553 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2554 convert_delimiter(cifs_sb->prepath,
2555 CIFS_DIR_SEP(cifs_sb));
2556 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2557 if (IS_ERR(full_path)) {
2558 rc = PTR_ERR(full_path);
2559 goto mount_fail_check;
2560 }
2561
2562 cFYI(1, ("Getting referral for: %s", full_path));
2563 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2564 cifs_sb->local_nls, &num_referrals, &referrals,
2565 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2566 if (!rc && num_referrals > 0) {
2567 char *fake_devname = NULL;
2568
2569 if (mount_data != mount_data_global)
2570 kfree(mount_data);
2571 mount_data = cifs_compose_mount_options(
2572 cifs_sb->mountdata, full_path + 1,
2573 referrals, &fake_devname);
2574 kfree(fake_devname);
2575 free_dfs_info_array(referrals, num_referrals);
2576
2577 if (tcon)
2578 cifs_put_tcon(tcon);
2579 else if (pSesInfo)
2580 cifs_put_smb_ses(pSesInfo);
2581
2582 cleanup_volume_info(&volume_info);
2583 FreeXid(xid);
2584 kfree(full_path);
2585 referral_walks_count++;
2586 goto try_mount_again;
2587 }
2588 #else /* No DFS support, return error on mount */
2589 rc = -EOPNOTSUPP;
2590 #endif
2591 }
2592
2593 mount_fail_check:
2594 /* on error free sesinfo and tcon struct if needed */
2595 if (rc) {
2596 if (mount_data != mount_data_global)
2597 kfree(mount_data);
2598 /* If find_unc succeeded then rc == 0 so we can not end */
2599 /* up accidently freeing someone elses tcon struct */
2600 if (tcon)
2601 cifs_put_tcon(tcon);
2602 else if (pSesInfo)
2603 cifs_put_smb_ses(pSesInfo);
2604 else
2605 cifs_put_tcp_session(srvTcp);
2606 goto out;
2607 }
2608
2609 /* volume_info->password is freed above when existing session found
2610 (in which case it is not needed anymore) but when new sesion is created
2611 the password ptr is put in the new session structure (in which case the
2612 password will be freed at unmount time) */
2613 out:
2614 /* zero out password before freeing */
2615 cleanup_volume_info(&volume_info);
2616 FreeXid(xid);
2617 return rc;
2618 }
2619
2620 int
2621 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2622 const char *tree, struct cifsTconInfo *tcon,
2623 const struct nls_table *nls_codepage)
2624 {
2625 struct smb_hdr *smb_buffer;
2626 struct smb_hdr *smb_buffer_response;
2627 TCONX_REQ *pSMB;
2628 TCONX_RSP *pSMBr;
2629 unsigned char *bcc_ptr;
2630 int rc = 0;
2631 int length, bytes_left;
2632 __u16 count;
2633
2634 if (ses == NULL)
2635 return -EIO;
2636
2637 smb_buffer = cifs_buf_get();
2638 if (smb_buffer == NULL) {
2639 return -ENOMEM;
2640 }
2641 smb_buffer_response = smb_buffer;
2642
2643 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2644 NULL /*no tid */ , 4 /*wct */ );
2645
2646 smb_buffer->Mid = GetNextMid(ses->server);
2647 smb_buffer->Uid = ses->Suid;
2648 pSMB = (TCONX_REQ *) smb_buffer;
2649 pSMBr = (TCONX_RSP *) smb_buffer_response;
2650
2651 pSMB->AndXCommand = 0xFF;
2652 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2653 bcc_ptr = &pSMB->Password[0];
2654 if ((ses->server->secMode) & SECMODE_USER) {
2655 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
2656 *bcc_ptr = 0; /* password is null byte */
2657 bcc_ptr++; /* skip password */
2658 /* already aligned so no need to do it below */
2659 } else {
2660 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2661 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2662 specified as required (when that support is added to
2663 the vfs in the future) as only NTLM or the much
2664 weaker LANMAN (which we do not send by default) is accepted
2665 by Samba (not sure whether other servers allow
2666 NTLMv2 password here) */
2667 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2668 if ((extended_security & CIFSSEC_MAY_LANMAN) &&
2669 (ses->server->secType == LANMAN))
2670 calc_lanman_hash(tcon->password, ses->server->cryptKey,
2671 ses->server->secMode &
2672 SECMODE_PW_ENCRYPT ? true : false,
2673 bcc_ptr);
2674 else
2675 #endif /* CIFS_WEAK_PW_HASH */
2676 SMBNTencrypt(tcon->password, ses->server->cryptKey,
2677 bcc_ptr);
2678
2679 bcc_ptr += CIFS_SESS_KEY_SIZE;
2680 if (ses->capabilities & CAP_UNICODE) {
2681 /* must align unicode strings */
2682 *bcc_ptr = 0; /* null byte password */
2683 bcc_ptr++;
2684 }
2685 }
2686
2687 if (ses->server->secMode &
2688 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2689 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2690
2691 if (ses->capabilities & CAP_STATUS32) {
2692 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2693 }
2694 if (ses->capabilities & CAP_DFS) {
2695 smb_buffer->Flags2 |= SMBFLG2_DFS;
2696 }
2697 if (ses->capabilities & CAP_UNICODE) {
2698 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2699 length =
2700 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2701 6 /* max utf8 char length in bytes */ *
2702 (/* server len*/ + 256 /* share len */), nls_codepage);
2703 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
2704 bcc_ptr += 2; /* skip trailing null */
2705 } else { /* ASCII */
2706 strcpy(bcc_ptr, tree);
2707 bcc_ptr += strlen(tree) + 1;
2708 }
2709 strcpy(bcc_ptr, "?????");
2710 bcc_ptr += strlen("?????");
2711 bcc_ptr += 1;
2712 count = bcc_ptr - &pSMB->Password[0];
2713 pSMB->hdr.smb_buf_length += count;
2714 pSMB->ByteCount = cpu_to_le16(count);
2715
2716 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2717 CIFS_STD_OP);
2718
2719 /* above now done in SendReceive */
2720 if ((rc == 0) && (tcon != NULL)) {
2721 bool is_unicode;
2722
2723 tcon->tidStatus = CifsGood;
2724 tcon->need_reconnect = false;
2725 tcon->tid = smb_buffer_response->Tid;
2726 bcc_ptr = pByteArea(smb_buffer_response);
2727 bytes_left = BCC(smb_buffer_response);
2728 length = strnlen(bcc_ptr, bytes_left - 2);
2729 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
2730 is_unicode = true;
2731 else
2732 is_unicode = false;
2733
2734
2735 /* skip service field (NB: this field is always ASCII) */
2736 if (length == 3) {
2737 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
2738 (bcc_ptr[2] == 'C')) {
2739 cFYI(1, ("IPC connection"));
2740 tcon->ipc = 1;
2741 }
2742 } else if (length == 2) {
2743 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
2744 /* the most common case */
2745 cFYI(1, ("disk share connection"));
2746 }
2747 }
2748 bcc_ptr += length + 1;
2749 bytes_left -= (length + 1);
2750 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
2751
2752 /* mostly informational -- no need to fail on error here */
2753 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
2754 bytes_left, is_unicode,
2755 nls_codepage);
2756
2757 cFYI(1, ("nativeFileSystem=%s", tcon->nativeFileSystem));
2758
2759 if ((smb_buffer_response->WordCount == 3) ||
2760 (smb_buffer_response->WordCount == 7))
2761 /* field is in same location */
2762 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
2763 else
2764 tcon->Flags = 0;
2765 cFYI(1, ("Tcon flags: 0x%x ", tcon->Flags));
2766 } else if ((rc == 0) && tcon == NULL) {
2767 /* all we need to save for IPC$ connection */
2768 ses->ipc_tid = smb_buffer_response->Tid;
2769 }
2770
2771 cifs_buf_release(smb_buffer);
2772 return rc;
2773 }
2774
2775 int
2776 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
2777 {
2778 int rc = 0;
2779 char *tmp;
2780
2781 if (cifs_sb->tcon)
2782 cifs_put_tcon(cifs_sb->tcon);
2783
2784 cifs_sb->tcon = NULL;
2785 tmp = cifs_sb->prepath;
2786 cifs_sb->prepathlen = 0;
2787 cifs_sb->prepath = NULL;
2788 kfree(tmp);
2789
2790 return rc;
2791 }
2792
2793 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *pSesInfo,
2794 struct nls_table *nls_info)
2795 {
2796 int rc = 0;
2797 int first_time = 0;
2798 struct TCP_Server_Info *server = pSesInfo->server;
2799
2800 /* what if server changes its buffer size after dropping the session? */
2801 if (server->maxBuf == 0) /* no need to send on reconnect */ {
2802 rc = CIFSSMBNegotiate(xid, pSesInfo);
2803 if (rc == -EAGAIN) {
2804 /* retry only once on 1st time connection */
2805 rc = CIFSSMBNegotiate(xid, pSesInfo);
2806 if (rc == -EAGAIN)
2807 rc = -EHOSTDOWN;
2808 }
2809 if (rc == 0) {
2810 spin_lock(&GlobalMid_Lock);
2811 if (server->tcpStatus != CifsExiting)
2812 server->tcpStatus = CifsGood;
2813 else
2814 rc = -EHOSTDOWN;
2815 spin_unlock(&GlobalMid_Lock);
2816
2817 }
2818 first_time = 1;
2819 }
2820
2821 if (rc)
2822 goto ss_err_exit;
2823
2824 pSesInfo->flags = 0;
2825 pSesInfo->capabilities = server->capabilities;
2826 if (linuxExtEnabled == 0)
2827 pSesInfo->capabilities &= (~CAP_UNIX);
2828
2829 cFYI(1, ("Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
2830 server->secMode, server->capabilities, server->timeAdj));
2831
2832 rc = CIFS_SessSetup(xid, pSesInfo, first_time, nls_info);
2833 if (rc) {
2834 cERROR(1, ("Send error in SessSetup = %d", rc));
2835 } else {
2836 cFYI(1, ("CIFS Session Established successfully"));
2837 spin_lock(&GlobalMid_Lock);
2838 pSesInfo->status = CifsGood;
2839 pSesInfo->need_reconnect = false;
2840 spin_unlock(&GlobalMid_Lock);
2841 }
2842
2843 ss_err_exit:
2844 return rc;
2845 }
2846