?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
[CIFS] When mandatory encryption on share, fail mount
[linux-2.6/linux-acpi-2.6/ibm-acpi-2.6.git] / fs / cifs / connect.c
blob581654fb174dfefea0bd171b57490b0f2397f30f
1 /*
2 * fs/cifs/connect.c
3 *
4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
6 *
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
20 */
21 #include <linux/fs.h>
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/slab.h>
27 #include <linux/pagemap.h>
28 #include <linux/ctype.h>
29 #include <linux/utsname.h>
30 #include <linux/mempool.h>
31 #include <linux/delay.h>
32 #include <linux/completion.h>
33 #include <linux/kthread.h>
34 #include <linux/pagevec.h>
35 #include <linux/freezer.h>
36 #include <linux/namei.h>
37 #include <asm/uaccess.h>
38 #include <asm/processor.h>
39 #include <linux/inet.h>
40 #include <net/ipv6.h>
41 #include "cifspdu.h"
42 #include "cifsglob.h"
43 #include "cifsproto.h"
44 #include "cifs_unicode.h"
45 #include "cifs_debug.h"
46 #include "cifs_fs_sb.h"
47 #include "ntlmssp.h"
48 #include "nterr.h"
49 #include "rfc1002pdu.h"
50 #include "fscache.h"
51
52 #define CIFS_PORT 445
53 #define RFC1001_PORT 139
54
55 /* SMB echo "timeout" -- FIXME: tunable? */
56 #define SMB_ECHO_INTERVAL (60 * HZ)
57
58 extern mempool_t *cifs_req_poolp;
59
60 struct smb_vol {
61 char *username;
62 char *password;
63 char *domainname;
64 char *UNC;
65 char *UNCip;
66 char *iocharset; /* local code page for mapping to and from Unicode */
67 char source_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* clnt nb name */
68 char target_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* srvr nb name */
69 uid_t cred_uid;
70 uid_t linux_uid;
71 gid_t linux_gid;
72 mode_t file_mode;
73 mode_t dir_mode;
74 unsigned secFlg;
75 bool retry:1;
76 bool intr:1;
77 bool setuids:1;
78 bool override_uid:1;
79 bool override_gid:1;
80 bool dynperm:1;
81 bool noperm:1;
82 bool no_psx_acl:1; /* set if posix acl support should be disabled */
83 bool cifs_acl:1;
84 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
85 bool server_ino:1; /* use inode numbers from server ie UniqueId */
86 bool direct_io:1;
87 bool strict_io:1; /* strict cache behavior */
88 bool remap:1; /* set to remap seven reserved chars in filenames */
89 bool posix_paths:1; /* unset to not ask for posix pathnames. */
90 bool no_linux_ext:1;
91 bool sfu_emul:1;
92 bool nullauth:1; /* attempt to authenticate with null user */
93 bool nocase:1; /* request case insensitive filenames */
94 bool nobrl:1; /* disable sending byte range locks to srv */
95 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
96 bool seal:1; /* request transport encryption on share */
97 bool nodfs:1; /* Do not request DFS, even if available */
98 bool local_lease:1; /* check leases only on local system, not remote */
99 bool noblocksnd:1;
100 bool noautotune:1;
101 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
102 bool fsc:1; /* enable fscache */
103 bool mfsymlinks:1; /* use Minshall+French Symlinks */
104 bool multiuser:1;
105 unsigned int rsize;
106 unsigned int wsize;
107 bool sockopt_tcp_nodelay:1;
108 unsigned short int port;
109 unsigned long actimeo; /* attribute cache timeout (jiffies) */
110 char *prepath;
111 struct sockaddr_storage srcaddr; /* allow binding to a local IP */
112 struct nls_table *local_nls;
113 };
114
115 /* FIXME: should these be tunable? */
116 #define TLINK_ERROR_EXPIRE (1 * HZ)
117 #define TLINK_IDLE_EXPIRE (600 * HZ)
118
119 static int ip_connect(struct TCP_Server_Info *server);
120 static int generic_ip_connect(struct TCP_Server_Info *server);
121 static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
122 static void cifs_prune_tlinks(struct work_struct *work);
123
124 /*
125 * cifs tcp session reconnection
126 *
127 * mark tcp session as reconnecting so temporarily locked
128 * mark all smb sessions as reconnecting for tcp session
129 * reconnect tcp session
130 * wake up waiters on reconnection? - (not needed currently)
131 */
132 static int
133 cifs_reconnect(struct TCP_Server_Info *server)
134 {
135 int rc = 0;
136 struct list_head *tmp, *tmp2;
137 struct cifsSesInfo *ses;
138 struct cifsTconInfo *tcon;
139 struct mid_q_entry *mid_entry;
140 struct list_head retry_list;
141
142 spin_lock(&GlobalMid_Lock);
143 if (server->tcpStatus == CifsExiting) {
144 /* the demux thread will exit normally
145 next time through the loop */
146 spin_unlock(&GlobalMid_Lock);
147 return rc;
148 } else
149 server->tcpStatus = CifsNeedReconnect;
150 spin_unlock(&GlobalMid_Lock);
151 server->maxBuf = 0;
152
153 cFYI(1, "Reconnecting tcp session");
154
155 /* before reconnecting the tcp session, mark the smb session (uid)
156 and the tid bad so they are not used until reconnected */
157 cFYI(1, "%s: marking sessions and tcons for reconnect", __func__);
158 spin_lock(&cifs_tcp_ses_lock);
159 list_for_each(tmp, &server->smb_ses_list) {
160 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
161 ses->need_reconnect = true;
162 ses->ipc_tid = 0;
163 list_for_each(tmp2, &ses->tcon_list) {
164 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
165 tcon->need_reconnect = true;
166 }
167 }
168 spin_unlock(&cifs_tcp_ses_lock);
169
170 /* do not want to be sending data on a socket we are freeing */
171 cFYI(1, "%s: tearing down socket", __func__);
172 mutex_lock(&server->srv_mutex);
173 if (server->ssocket) {
174 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
175 server->ssocket->flags);
176 kernel_sock_shutdown(server->ssocket, SHUT_WR);
177 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
178 server->ssocket->state,
179 server->ssocket->flags);
180 sock_release(server->ssocket);
181 server->ssocket = NULL;
182 }
183 server->sequence_number = 0;
184 server->session_estab = false;
185 kfree(server->session_key.response);
186 server->session_key.response = NULL;
187 server->session_key.len = 0;
188 server->lstrp = jiffies;
189 mutex_unlock(&server->srv_mutex);
190
191 /* mark submitted MIDs for retry and issue callback */
192 INIT_LIST_HEAD(&retry_list);
193 cFYI(1, "%s: moving mids to private list", __func__);
194 spin_lock(&GlobalMid_Lock);
195 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
196 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
197 if (mid_entry->midState == MID_REQUEST_SUBMITTED)
198 mid_entry->midState = MID_RETRY_NEEDED;
199 list_move(&mid_entry->qhead, &retry_list);
200 }
201 spin_unlock(&GlobalMid_Lock);
202
203 cFYI(1, "%s: issuing mid callbacks", __func__);
204 list_for_each_safe(tmp, tmp2, &retry_list) {
205 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
206 list_del_init(&mid_entry->qhead);
207 mid_entry->callback(mid_entry);
208 }
209
210 while (server->tcpStatus == CifsNeedReconnect) {
211 try_to_freeze();
212
213 /* we should try only the port we connected to before */
214 rc = generic_ip_connect(server);
215 if (rc) {
216 cFYI(1, "reconnect error %d", rc);
217 msleep(3000);
218 } else {
219 atomic_inc(&tcpSesReconnectCount);
220 spin_lock(&GlobalMid_Lock);
221 if (server->tcpStatus != CifsExiting)
222 server->tcpStatus = CifsNeedNegotiate;
223 spin_unlock(&GlobalMid_Lock);
224 }
225 }
226
227 return rc;
228 }
229
230 /*
231 return codes:
232 0 not a transact2, or all data present
233 >0 transact2 with that much data missing
234 -EINVAL = invalid transact2
235
236 */
237 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
238 {
239 struct smb_t2_rsp *pSMBt;
240 int remaining;
241 __u16 total_data_size, data_in_this_rsp;
242
243 if (pSMB->Command != SMB_COM_TRANSACTION2)
244 return 0;
245
246 /* check for plausible wct, bcc and t2 data and parm sizes */
247 /* check for parm and data offset going beyond end of smb */
248 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
249 cFYI(1, "invalid transact2 word count");
250 return -EINVAL;
251 }
252
253 pSMBt = (struct smb_t2_rsp *)pSMB;
254
255 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
256 data_in_this_rsp = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
257
258 if (total_data_size == data_in_this_rsp)
259 return 0;
260 else if (total_data_size < data_in_this_rsp) {
261 cFYI(1, "total data %d smaller than data in frame %d",
262 total_data_size, data_in_this_rsp);
263 return -EINVAL;
264 }
265
266 remaining = total_data_size - data_in_this_rsp;
267
268 cFYI(1, "missing %d bytes from transact2, check next response",
269 remaining);
270 if (total_data_size > maxBufSize) {
271 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
272 total_data_size, maxBufSize);
273 return -EINVAL;
274 }
275 return remaining;
276 }
277
278 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
279 {
280 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
281 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
282 char *data_area_of_target;
283 char *data_area_of_buf2;
284 int remaining;
285 unsigned int byte_count, total_in_buf;
286 __u16 total_data_size, total_in_buf2;
287
288 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
289
290 if (total_data_size !=
291 get_unaligned_le16(&pSMB2->t2_rsp.TotalDataCount))
292 cFYI(1, "total data size of primary and secondary t2 differ");
293
294 total_in_buf = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
295
296 remaining = total_data_size - total_in_buf;
297
298 if (remaining < 0)
299 return -EPROTO;
300
301 if (remaining == 0) /* nothing to do, ignore */
302 return 0;
303
304 total_in_buf2 = get_unaligned_le16(&pSMB2->t2_rsp.DataCount);
305 if (remaining < total_in_buf2) {
306 cFYI(1, "transact2 2nd response contains too much data");
307 }
308
309 /* find end of first SMB data area */
310 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
311 get_unaligned_le16(&pSMBt->t2_rsp.DataOffset);
312 /* validate target area */
313
314 data_area_of_buf2 = (char *)&pSMB2->hdr.Protocol +
315 get_unaligned_le16(&pSMB2->t2_rsp.DataOffset);
316
317 data_area_of_target += total_in_buf;
318
319 /* copy second buffer into end of first buffer */
320 total_in_buf += total_in_buf2;
321 /* is the result too big for the field? */
322 if (total_in_buf > USHRT_MAX)
323 return -EPROTO;
324 put_unaligned_le16(total_in_buf, &pSMBt->t2_rsp.DataCount);
325
326 /* fix up the BCC */
327 byte_count = get_bcc(pTargetSMB);
328 byte_count += total_in_buf2;
329 /* is the result too big for the field? */
330 if (byte_count > USHRT_MAX)
331 return -EPROTO;
332 put_bcc(byte_count, pTargetSMB);
333
334 byte_count = be32_to_cpu(pTargetSMB->smb_buf_length);
335 byte_count += total_in_buf2;
336 /* don't allow buffer to overflow */
337 if (byte_count > CIFSMaxBufSize)
338 return -ENOBUFS;
339 pTargetSMB->smb_buf_length = cpu_to_be32(byte_count);
340
341 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
342
343 if (remaining == total_in_buf2) {
344 cFYI(1, "found the last secondary response");
345 return 0; /* we are done */
346 } else /* more responses to go */
347 return 1;
348 }
349
350 static void
351 cifs_echo_request(struct work_struct *work)
352 {
353 int rc;
354 struct TCP_Server_Info *server = container_of(work,
355 struct TCP_Server_Info, echo.work);
356
357 /*
358 * We cannot send an echo until the NEGOTIATE_PROTOCOL request is
359 * done, which is indicated by maxBuf != 0. Also, no need to ping if
360 * we got a response recently
361 */
362 if (server->maxBuf == 0 ||
363 time_before(jiffies, server->lstrp + SMB_ECHO_INTERVAL - HZ))
364 goto requeue_echo;
365
366 rc = CIFSSMBEcho(server);
367 if (rc)
368 cFYI(1, "Unable to send echo request to server: %s",
369 server->hostname);
370
371 requeue_echo:
372 queue_delayed_work(system_nrt_wq, &server->echo, SMB_ECHO_INTERVAL);
373 }
374
375 static int
376 cifs_demultiplex_thread(struct TCP_Server_Info *server)
377 {
378 int length;
379 unsigned int pdu_length, total_read;
380 struct smb_hdr *smb_buffer = NULL;
381 struct smb_hdr *bigbuf = NULL;
382 struct smb_hdr *smallbuf = NULL;
383 struct msghdr smb_msg;
384 struct kvec iov;
385 struct socket *csocket = server->ssocket;
386 struct list_head *tmp, *tmp2;
387 struct task_struct *task_to_wake = NULL;
388 struct mid_q_entry *mid_entry;
389 char temp;
390 bool isLargeBuf = false;
391 bool isMultiRsp;
392 int reconnect;
393
394 current->flags |= PF_MEMALLOC;
395 cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
396
397 length = atomic_inc_return(&tcpSesAllocCount);
398 if (length > 1)
399 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
400 GFP_KERNEL);
401
402 set_freezable();
403 while (server->tcpStatus != CifsExiting) {
404 if (try_to_freeze())
405 continue;
406 if (bigbuf == NULL) {
407 bigbuf = cifs_buf_get();
408 if (!bigbuf) {
409 cERROR(1, "No memory for large SMB response");
410 msleep(3000);
411 /* retry will check if exiting */
412 continue;
413 }
414 } else if (isLargeBuf) {
415 /* we are reusing a dirty large buf, clear its start */
416 memset(bigbuf, 0, sizeof(struct smb_hdr));
417 }
418
419 if (smallbuf == NULL) {
420 smallbuf = cifs_small_buf_get();
421 if (!smallbuf) {
422 cERROR(1, "No memory for SMB response");
423 msleep(1000);
424 /* retry will check if exiting */
425 continue;
426 }
427 /* beginning of smb buffer is cleared in our buf_get */
428 } else /* if existing small buf clear beginning */
429 memset(smallbuf, 0, sizeof(struct smb_hdr));
430
431 isLargeBuf = false;
432 isMultiRsp = false;
433 smb_buffer = smallbuf;
434 iov.iov_base = smb_buffer;
435 iov.iov_len = 4;
436 smb_msg.msg_control = NULL;
437 smb_msg.msg_controllen = 0;
438 pdu_length = 4; /* enough to get RFC1001 header */
439
440 incomplete_rcv:
441 if (echo_retries > 0 && server->tcpStatus == CifsGood &&
442 time_after(jiffies, server->lstrp +
443 (echo_retries * SMB_ECHO_INTERVAL))) {
444 cERROR(1, "Server %s has not responded in %d seconds. "
445 "Reconnecting...", server->hostname,
446 (echo_retries * SMB_ECHO_INTERVAL / HZ));
447 cifs_reconnect(server);
448 csocket = server->ssocket;
449 wake_up(&server->response_q);
450 continue;
451 }
452
453 length =
454 kernel_recvmsg(csocket, &smb_msg,
455 &iov, 1, pdu_length, 0 /* BB other flags? */);
456
457 if (server->tcpStatus == CifsExiting) {
458 break;
459 } else if (server->tcpStatus == CifsNeedReconnect) {
460 cFYI(1, "Reconnect after server stopped responding");
461 cifs_reconnect(server);
462 cFYI(1, "call to reconnect done");
463 csocket = server->ssocket;
464 continue;
465 } else if (length == -ERESTARTSYS ||
466 length == -EAGAIN ||
467 length == -EINTR) {
468 msleep(1); /* minimum sleep to prevent looping
469 allowing socket to clear and app threads to set
470 tcpStatus CifsNeedReconnect if server hung */
471 if (pdu_length < 4) {
472 iov.iov_base = (4 - pdu_length) +
473 (char *)smb_buffer;
474 iov.iov_len = pdu_length;
475 smb_msg.msg_control = NULL;
476 smb_msg.msg_controllen = 0;
477 goto incomplete_rcv;
478 } else
479 continue;
480 } else if (length <= 0) {
481 cFYI(1, "Reconnect after unexpected peek error %d",
482 length);
483 cifs_reconnect(server);
484 csocket = server->ssocket;
485 wake_up(&server->response_q);
486 continue;
487 } else if (length < pdu_length) {
488 cFYI(1, "requested %d bytes but only got %d bytes",
489 pdu_length, length);
490 pdu_length -= length;
491 msleep(1);
492 goto incomplete_rcv;
493 }
494
495 /* The right amount was read from socket - 4 bytes */
496 /* so we can now interpret the length field */
497
498 /* the first byte big endian of the length field,
499 is actually not part of the length but the type
500 with the most common, zero, as regular data */
501 temp = *((char *) smb_buffer);
502
503 /* Note that FC 1001 length is big endian on the wire,
504 but we convert it here so it is always manipulated
505 as host byte order */
506 pdu_length = be32_to_cpu(smb_buffer->smb_buf_length);
507
508 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
509
510 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
511 continue;
512 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
513 cFYI(1, "Good RFC 1002 session rsp");
514 continue;
515 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
516 /* we get this from Windows 98 instead of
517 an error on SMB negprot response */
518 cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
519 pdu_length);
520 /* give server a second to clean up */
521 msleep(1000);
522 /* always try 445 first on reconnect since we get NACK
523 * on some if we ever connected to port 139 (the NACK
524 * is since we do not begin with RFC1001 session
525 * initialize frame)
526 */
527 cifs_set_port((struct sockaddr *)
528 &server->dstaddr, CIFS_PORT);
529 cifs_reconnect(server);
530 csocket = server->ssocket;
531 wake_up(&server->response_q);
532 continue;
533 } else if (temp != (char) 0) {
534 cERROR(1, "Unknown RFC 1002 frame");
535 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
536 length);
537 cifs_reconnect(server);
538 csocket = server->ssocket;
539 continue;
540 }
541
542 /* else we have an SMB response */
543 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
544 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
545 cERROR(1, "Invalid size SMB length %d pdu_length %d",
546 length, pdu_length+4);
547 cifs_reconnect(server);
548 csocket = server->ssocket;
549 wake_up(&server->response_q);
550 continue;
551 }
552
553 /* else length ok */
554 reconnect = 0;
555
556 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
557 isLargeBuf = true;
558 memcpy(bigbuf, smallbuf, 4);
559 smb_buffer = bigbuf;
560 }
561 length = 0;
562 iov.iov_base = 4 + (char *)smb_buffer;
563 iov.iov_len = pdu_length;
564 for (total_read = 0; total_read < pdu_length;
565 total_read += length) {
566 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
567 pdu_length - total_read, 0);
568 if (server->tcpStatus == CifsExiting) {
569 /* then will exit */
570 reconnect = 2;
571 break;
572 } else if (server->tcpStatus == CifsNeedReconnect) {
573 cifs_reconnect(server);
574 csocket = server->ssocket;
575 /* Reconnect wakes up rspns q */
576 /* Now we will reread sock */
577 reconnect = 1;
578 break;
579 } else if (length == -ERESTARTSYS ||
580 length == -EAGAIN ||
581 length == -EINTR) {
582 msleep(1); /* minimum sleep to prevent looping,
583 allowing socket to clear and app
584 threads to set tcpStatus
585 CifsNeedReconnect if server hung*/
586 length = 0;
587 continue;
588 } else if (length <= 0) {
589 cERROR(1, "Received no data, expecting %d",
590 pdu_length - total_read);
591 cifs_reconnect(server);
592 csocket = server->ssocket;
593 reconnect = 1;
594 break;
595 }
596 }
597 if (reconnect == 2)
598 break;
599 else if (reconnect == 1)
600 continue;
601
602 total_read += 4; /* account for rfc1002 hdr */
603
604 dump_smb(smb_buffer, total_read);
605
606 /*
607 * We know that we received enough to get to the MID as we
608 * checked the pdu_length earlier. Now check to see
609 * if the rest of the header is OK. We borrow the length
610 * var for the rest of the loop to avoid a new stack var.
611 *
612 * 48 bytes is enough to display the header and a little bit
613 * into the payload for debugging purposes.
614 */
615 length = checkSMB(smb_buffer, smb_buffer->Mid, total_read);
616 if (length != 0)
617 cifs_dump_mem("Bad SMB: ", smb_buffer,
618 min_t(unsigned int, total_read, 48));
619
620 mid_entry = NULL;
621 server->lstrp = jiffies;
622
623 spin_lock(&GlobalMid_Lock);
624 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
625 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
626
627 if (mid_entry->mid != smb_buffer->Mid ||
628 mid_entry->midState != MID_REQUEST_SUBMITTED ||
629 mid_entry->command != smb_buffer->Command) {
630 mid_entry = NULL;
631 continue;
632 }
633
634 if (length == 0 &&
635 check2ndT2(smb_buffer, server->maxBuf) > 0) {
636 /* We have a multipart transact2 resp */
637 isMultiRsp = true;
638 if (mid_entry->resp_buf) {
639 /* merge response - fix up 1st*/
640 length = coalesce_t2(smb_buffer,
641 mid_entry->resp_buf);
642 if (length > 0) {
643 length = 0;
644 mid_entry->multiRsp = true;
645 break;
646 } else {
647 /* all parts received or
648 * packet is malformed
649 */
650 mid_entry->multiEnd = true;
651 goto multi_t2_fnd;
652 }
653 } else {
654 if (!isLargeBuf) {
655 /*
656 * FIXME: switch to already
657 * allocated largebuf?
658 */
659 cERROR(1, "1st trans2 resp "
660 "needs bigbuf");
661 } else {
662 /* Have first buffer */
663 mid_entry->resp_buf =
664 smb_buffer;
665 mid_entry->largeBuf = true;
666 bigbuf = NULL;
667 }
668 }
669 break;
670 }
671 mid_entry->resp_buf = smb_buffer;
672 mid_entry->largeBuf = isLargeBuf;
673 multi_t2_fnd:
674 if (length == 0)
675 mid_entry->midState = MID_RESPONSE_RECEIVED;
676 else
677 mid_entry->midState = MID_RESPONSE_MALFORMED;
678 #ifdef CONFIG_CIFS_STATS2
679 mid_entry->when_received = jiffies;
680 #endif
681 list_del_init(&mid_entry->qhead);
682 break;
683 }
684 spin_unlock(&GlobalMid_Lock);
685
686 if (mid_entry != NULL) {
687 mid_entry->callback(mid_entry);
688 /* Was previous buf put in mpx struct for multi-rsp? */
689 if (!isMultiRsp) {
690 /* smb buffer will be freed by user thread */
691 if (isLargeBuf)
692 bigbuf = NULL;
693 else
694 smallbuf = NULL;
695 }
696 } else if (length != 0) {
697 /* response sanity checks failed */
698 continue;
699 } else if (!is_valid_oplock_break(smb_buffer, server) &&
700 !isMultiRsp) {
701 cERROR(1, "No task to wake, unknown frame received! "
702 "NumMids %d", atomic_read(&midCount));
703 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
704 sizeof(struct smb_hdr));
705 #ifdef CONFIG_CIFS_DEBUG2
706 cifs_dump_detail(smb_buffer);
707 cifs_dump_mids(server);
708 #endif /* CIFS_DEBUG2 */
709
710 }
711 } /* end while !EXITING */
712
713 /* take it off the list, if it's not already */
714 spin_lock(&cifs_tcp_ses_lock);
715 list_del_init(&server->tcp_ses_list);
716 spin_unlock(&cifs_tcp_ses_lock);
717
718 spin_lock(&GlobalMid_Lock);
719 server->tcpStatus = CifsExiting;
720 spin_unlock(&GlobalMid_Lock);
721 wake_up_all(&server->response_q);
722
723 /* check if we have blocked requests that need to free */
724 /* Note that cifs_max_pending is normally 50, but
725 can be set at module install time to as little as two */
726 spin_lock(&GlobalMid_Lock);
727 if (atomic_read(&server->inFlight) >= cifs_max_pending)
728 atomic_set(&server->inFlight, cifs_max_pending - 1);
729 /* We do not want to set the max_pending too low or we
730 could end up with the counter going negative */
731 spin_unlock(&GlobalMid_Lock);
732 /* Although there should not be any requests blocked on
733 this queue it can not hurt to be paranoid and try to wake up requests
734 that may haven been blocked when more than 50 at time were on the wire
735 to the same server - they now will see the session is in exit state
736 and get out of SendReceive. */
737 wake_up_all(&server->request_q);
738 /* give those requests time to exit */
739 msleep(125);
740
741 if (server->ssocket) {
742 sock_release(csocket);
743 server->ssocket = NULL;
744 }
745 /* buffer usually freed in free_mid - need to free it here on exit */
746 cifs_buf_release(bigbuf);
747 if (smallbuf) /* no sense logging a debug message if NULL */
748 cifs_small_buf_release(smallbuf);
749
750 if (!list_empty(&server->pending_mid_q)) {
751 struct list_head dispose_list;
752
753 INIT_LIST_HEAD(&dispose_list);
754 spin_lock(&GlobalMid_Lock);
755 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
756 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
757 cFYI(1, "Clearing mid 0x%x", mid_entry->mid);
758 mid_entry->midState = MID_SHUTDOWN;
759 list_move(&mid_entry->qhead, &dispose_list);
760 }
761 spin_unlock(&GlobalMid_Lock);
762
763 /* now walk dispose list and issue callbacks */
764 list_for_each_safe(tmp, tmp2, &dispose_list) {
765 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
766 cFYI(1, "Callback mid 0x%x", mid_entry->mid);
767 list_del_init(&mid_entry->qhead);
768 mid_entry->callback(mid_entry);
769 }
770 /* 1/8th of sec is more than enough time for them to exit */
771 msleep(125);
772 }
773
774 if (!list_empty(&server->pending_mid_q)) {
775 /* mpx threads have not exited yet give them
776 at least the smb send timeout time for long ops */
777 /* due to delays on oplock break requests, we need
778 to wait at least 45 seconds before giving up
779 on a request getting a response and going ahead
780 and killing cifsd */
781 cFYI(1, "Wait for exit from demultiplex thread");
782 msleep(46000);
783 /* if threads still have not exited they are probably never
784 coming home not much else we can do but free the memory */
785 }
786
787 kfree(server->hostname);
788 task_to_wake = xchg(&server->tsk, NULL);
789 kfree(server);
790
791 length = atomic_dec_return(&tcpSesAllocCount);
792 if (length > 0)
793 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
794 GFP_KERNEL);
795
796 /* if server->tsk was NULL then wait for a signal before exiting */
797 if (!task_to_wake) {
798 set_current_state(TASK_INTERRUPTIBLE);
799 while (!signal_pending(current)) {
800 schedule();
801 set_current_state(TASK_INTERRUPTIBLE);
802 }
803 set_current_state(TASK_RUNNING);
804 }
805
806 module_put_and_exit(0);
807 }
808
809 /* extract the host portion of the UNC string */
810 static char *
811 extract_hostname(const char *unc)
812 {
813 const char *src;
814 char *dst, *delim;
815 unsigned int len;
816
817 /* skip double chars at beginning of string */
818 /* BB: check validity of these bytes? */
819 src = unc + 2;
820
821 /* delimiter between hostname and sharename is always '\\' now */
822 delim = strchr(src, '\\');
823 if (!delim)
824 return ERR_PTR(-EINVAL);
825
826 len = delim - src;
827 dst = kmalloc((len + 1), GFP_KERNEL);
828 if (dst == NULL)
829 return ERR_PTR(-ENOMEM);
830
831 memcpy(dst, src, len);
832 dst[len] = '\0';
833
834 return dst;
835 }
836
837 static int
838 cifs_parse_mount_options(const char *mountdata, const char *devname,
839 struct smb_vol *vol)
840 {
841 char *value, *data, *end;
842 char *mountdata_copy, *options;
843 unsigned int temp_len, i, j;
844 char separator[2];
845 short int override_uid = -1;
846 short int override_gid = -1;
847 bool uid_specified = false;
848 bool gid_specified = false;
849 char *nodename = utsname()->nodename;
850
851 separator[0] = ',';
852 separator[1] = 0;
853
854 /*
855 * does not have to be perfect mapping since field is
856 * informational, only used for servers that do not support
857 * port 445 and it can be overridden at mount time
858 */
859 memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
860 for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
861 vol->source_rfc1001_name[i] = toupper(nodename[i]);
862
863 vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
864 /* null target name indicates to use *SMBSERVR default called name
865 if we end up sending RFC1001 session initialize */
866 vol->target_rfc1001_name[0] = 0;
867 vol->cred_uid = current_uid();
868 vol->linux_uid = current_uid();
869 vol->linux_gid = current_gid();
870
871 /* default to only allowing write access to owner of the mount */
872 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
873
874 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
875 /* default is always to request posix paths. */
876 vol->posix_paths = 1;
877 /* default to using server inode numbers where available */
878 vol->server_ino = 1;
879
880 vol->actimeo = CIFS_DEF_ACTIMEO;
881
882 if (!mountdata)
883 goto cifs_parse_mount_err;
884
885 mountdata_copy = kstrndup(mountdata, PAGE_SIZE, GFP_KERNEL);
886 if (!mountdata_copy)
887 goto cifs_parse_mount_err;
888
889 options = mountdata_copy;
890 end = options + strlen(options);
891 if (strncmp(options, "sep=", 4) == 0) {
892 if (options[4] != 0) {
893 separator[0] = options[4];
894 options += 5;
895 } else {
896 cFYI(1, "Null separator not allowed");
897 }
898 }
899
900 while ((data = strsep(&options, separator)) != NULL) {
901 if (!*data)
902 continue;
903 if ((value = strchr(data, '=')) != NULL)
904 *value++ = '\0';
905
906 /* Have to parse this before we parse for "user" */
907 if (strnicmp(data, "user_xattr", 10) == 0) {
908 vol->no_xattr = 0;
909 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
910 vol->no_xattr = 1;
911 } else if (strnicmp(data, "user", 4) == 0) {
912 if (!value) {
913 printk(KERN_WARNING
914 "CIFS: invalid or missing username\n");
915 goto cifs_parse_mount_err;
916 } else if (!*value) {
917 /* null user, ie anonymous, authentication */
918 vol->nullauth = 1;
919 }
920 if (strnlen(value, MAX_USERNAME_SIZE) <
921 MAX_USERNAME_SIZE) {
922 vol->username = kstrdup(value, GFP_KERNEL);
923 if (!vol->username) {
924 printk(KERN_WARNING "CIFS: no memory "
925 "for username\n");
926 goto cifs_parse_mount_err;
927 }
928 } else {
929 printk(KERN_WARNING "CIFS: username too long\n");
930 goto cifs_parse_mount_err;
931 }
932 } else if (strnicmp(data, "pass", 4) == 0) {
933 if (!value) {
934 vol->password = NULL;
935 continue;
936 } else if (value[0] == 0) {
937 /* check if string begins with double comma
938 since that would mean the password really
939 does start with a comma, and would not
940 indicate an empty string */
941 if (value[1] != separator[0]) {
942 vol->password = NULL;
943 continue;
944 }
945 }
946 temp_len = strlen(value);
947 /* removed password length check, NTLM passwords
948 can be arbitrarily long */
949
950 /* if comma in password, the string will be
951 prematurely null terminated. Commas in password are
952 specified across the cifs mount interface by a double
953 comma ie ,, and a comma used as in other cases ie ','
954 as a parameter delimiter/separator is single and due
955 to the strsep above is temporarily zeroed. */
956
957 /* NB: password legally can have multiple commas and
958 the only illegal character in a password is null */
959
960 if ((value[temp_len] == 0) &&
961 (value + temp_len < end) &&
962 (value[temp_len+1] == separator[0])) {
963 /* reinsert comma */
964 value[temp_len] = separator[0];
965 temp_len += 2; /* move after second comma */
966 while (value[temp_len] != 0) {
967 if (value[temp_len] == separator[0]) {
968 if (value[temp_len+1] ==
969 separator[0]) {
970 /* skip second comma */
971 temp_len++;
972 } else {
973 /* single comma indicating start
974 of next parm */
975 break;
976 }
977 }
978 temp_len++;
979 }
980 if (value[temp_len] == 0) {
981 options = NULL;
982 } else {
983 value[temp_len] = 0;
984 /* point option to start of next parm */
985 options = value + temp_len + 1;
986 }
987 /* go from value to value + temp_len condensing
988 double commas to singles. Note that this ends up
989 allocating a few bytes too many, which is ok */
990 vol->password = kzalloc(temp_len, GFP_KERNEL);
991 if (vol->password == NULL) {
992 printk(KERN_WARNING "CIFS: no memory "
993 "for password\n");
994 goto cifs_parse_mount_err;
995 }
996 for (i = 0, j = 0; i < temp_len; i++, j++) {
997 vol->password[j] = value[i];
998 if (value[i] == separator[0]
999 && value[i+1] == separator[0]) {
1000 /* skip second comma */
1001 i++;
1002 }
1003 }
1004 vol->password[j] = 0;
1005 } else {
1006 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
1007 if (vol->password == NULL) {
1008 printk(KERN_WARNING "CIFS: no memory "
1009 "for password\n");
1010 goto cifs_parse_mount_err;
1011 }
1012 strcpy(vol->password, value);
1013 }
1014 } else if (!strnicmp(data, "ip", 2) ||
1015 !strnicmp(data, "addr", 4)) {
1016 if (!value || !*value) {
1017 vol->UNCip = NULL;
1018 } else if (strnlen(value, INET6_ADDRSTRLEN) <
1019 INET6_ADDRSTRLEN) {
1020 vol->UNCip = kstrdup(value, GFP_KERNEL);
1021 if (!vol->UNCip) {
1022 printk(KERN_WARNING "CIFS: no memory "
1023 "for UNC IP\n");
1024 goto cifs_parse_mount_err;
1025 }
1026 } else {
1027 printk(KERN_WARNING "CIFS: ip address "
1028 "too long\n");
1029 goto cifs_parse_mount_err;
1030 }
1031 } else if (strnicmp(data, "sec", 3) == 0) {
1032 if (!value || !*value) {
1033 cERROR(1, "no security value specified");
1034 continue;
1035 } else if (strnicmp(value, "krb5i", 5) == 0) {
1036 vol->secFlg |= CIFSSEC_MAY_KRB5 |
1037 CIFSSEC_MUST_SIGN;
1038 } else if (strnicmp(value, "krb5p", 5) == 0) {
1039 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
1040 CIFSSEC_MAY_KRB5; */
1041 cERROR(1, "Krb5 cifs privacy not supported");
1042 goto cifs_parse_mount_err;
1043 } else if (strnicmp(value, "krb5", 4) == 0) {
1044 vol->secFlg |= CIFSSEC_MAY_KRB5;
1045 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
1046 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
1047 CIFSSEC_MUST_SIGN;
1048 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
1049 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
1050 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
1051 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
1052 CIFSSEC_MUST_SIGN;
1053 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
1054 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1055 } else if (strnicmp(value, "ntlmi", 5) == 0) {
1056 vol->secFlg |= CIFSSEC_MAY_NTLM |
1057 CIFSSEC_MUST_SIGN;
1058 } else if (strnicmp(value, "ntlm", 4) == 0) {
1059 /* ntlm is default so can be turned off too */
1060 vol->secFlg |= CIFSSEC_MAY_NTLM;
1061 } else if (strnicmp(value, "nontlm", 6) == 0) {
1062 /* BB is there a better way to do this? */
1063 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1064 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1065 } else if (strnicmp(value, "lanman", 6) == 0) {
1066 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1067 #endif
1068 } else if (strnicmp(value, "none", 4) == 0) {
1069 vol->nullauth = 1;
1070 } else {
1071 cERROR(1, "bad security option: %s", value);
1072 goto cifs_parse_mount_err;
1073 }
1074 } else if (strnicmp(data, "vers", 3) == 0) {
1075 if (!value || !*value) {
1076 cERROR(1, "no protocol version specified"
1077 " after vers= mount option");
1078 } else if ((strnicmp(value, "cifs", 4) == 0) ||
1079 (strnicmp(value, "1", 1) == 0)) {
1080 /* this is the default */
1081 continue;
1082 }
1083 } else if ((strnicmp(data, "unc", 3) == 0)
1084 || (strnicmp(data, "target", 6) == 0)
1085 || (strnicmp(data, "path", 4) == 0)) {
1086 if (!value || !*value) {
1087 printk(KERN_WARNING "CIFS: invalid path to "
1088 "network resource\n");
1089 goto cifs_parse_mount_err;
1090 }
1091 if ((temp_len = strnlen(value, 300)) < 300) {
1092 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1093 if (vol->UNC == NULL)
1094 goto cifs_parse_mount_err;
1095 strcpy(vol->UNC, value);
1096 if (strncmp(vol->UNC, "//", 2) == 0) {
1097 vol->UNC[0] = '\\';
1098 vol->UNC[1] = '\\';
1099 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1100 printk(KERN_WARNING
1101 "CIFS: UNC Path does not begin "
1102 "with // or \\\\ \n");
1103 goto cifs_parse_mount_err;
1104 }
1105 } else {
1106 printk(KERN_WARNING "CIFS: UNC name too long\n");
1107 goto cifs_parse_mount_err;
1108 }
1109 } else if ((strnicmp(data, "domain", 3) == 0)
1110 || (strnicmp(data, "workgroup", 5) == 0)) {
1111 if (!value || !*value) {
1112 printk(KERN_WARNING "CIFS: invalid domain name\n");
1113 goto cifs_parse_mount_err;
1114 }
1115 /* BB are there cases in which a comma can be valid in
1116 a domain name and need special handling? */
1117 if (strnlen(value, 256) < 256) {
1118 vol->domainname = kstrdup(value, GFP_KERNEL);
1119 if (!vol->domainname) {
1120 printk(KERN_WARNING "CIFS: no memory "
1121 "for domainname\n");
1122 goto cifs_parse_mount_err;
1123 }
1124 cFYI(1, "Domain name set");
1125 } else {
1126 printk(KERN_WARNING "CIFS: domain name too "
1127 "long\n");
1128 goto cifs_parse_mount_err;
1129 }
1130 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1131 vol->srcaddr.ss_family = AF_UNSPEC;
1132
1133 if (!value || !*value) {
1134 printk(KERN_WARNING "CIFS: srcaddr value"
1135 " not specified.\n");
1136 goto cifs_parse_mount_err;
1137 }
1138 i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1139 value, strlen(value));
1140 if (i == 0) {
1141 printk(KERN_WARNING "CIFS: Could not parse"
1142 " srcaddr: %s\n",
1143 value);
1144 goto cifs_parse_mount_err;
1145 }
1146 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1147 if (!value || !*value) {
1148 printk(KERN_WARNING
1149 "CIFS: invalid path prefix\n");
1150 goto cifs_parse_mount_err;
1151 }
1152 if ((temp_len = strnlen(value, 1024)) < 1024) {
1153 if (value[0] != '/')
1154 temp_len++; /* missing leading slash */
1155 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1156 if (vol->prepath == NULL)
1157 goto cifs_parse_mount_err;
1158 if (value[0] != '/') {
1159 vol->prepath[0] = '/';
1160 strcpy(vol->prepath+1, value);
1161 } else
1162 strcpy(vol->prepath, value);
1163 cFYI(1, "prefix path %s", vol->prepath);
1164 } else {
1165 printk(KERN_WARNING "CIFS: prefix too long\n");
1166 goto cifs_parse_mount_err;
1167 }
1168 } else if (strnicmp(data, "iocharset", 9) == 0) {
1169 if (!value || !*value) {
1170 printk(KERN_WARNING "CIFS: invalid iocharset "
1171 "specified\n");
1172 goto cifs_parse_mount_err;
1173 }
1174 if (strnlen(value, 65) < 65) {
1175 if (strnicmp(value, "default", 7)) {
1176 vol->iocharset = kstrdup(value,
1177 GFP_KERNEL);
1178
1179 if (!vol->iocharset) {
1180 printk(KERN_WARNING "CIFS: no "
1181 "memory for"
1182 "charset\n");
1183 goto cifs_parse_mount_err;
1184 }
1185 }
1186 /* if iocharset not set then load_nls_default
1187 is used by caller */
1188 cFYI(1, "iocharset set to %s", value);
1189 } else {
1190 printk(KERN_WARNING "CIFS: iocharset name "
1191 "too long.\n");
1192 goto cifs_parse_mount_err;
1193 }
1194 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1195 vol->linux_uid = simple_strtoul(value, &value, 0);
1196 uid_specified = true;
1197 } else if (!strnicmp(data, "cruid", 5) && value && *value) {
1198 vol->cred_uid = simple_strtoul(value, &value, 0);
1199 } else if (!strnicmp(data, "forceuid", 8)) {
1200 override_uid = 1;
1201 } else if (!strnicmp(data, "noforceuid", 10)) {
1202 override_uid = 0;
1203 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1204 vol->linux_gid = simple_strtoul(value, &value, 0);
1205 gid_specified = true;
1206 } else if (!strnicmp(data, "forcegid", 8)) {
1207 override_gid = 1;
1208 } else if (!strnicmp(data, "noforcegid", 10)) {
1209 override_gid = 0;
1210 } else if (strnicmp(data, "file_mode", 4) == 0) {
1211 if (value && *value) {
1212 vol->file_mode =
1213 simple_strtoul(value, &value, 0);
1214 }
1215 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1216 if (value && *value) {
1217 vol->dir_mode =
1218 simple_strtoul(value, &value, 0);
1219 }
1220 } else if (strnicmp(data, "dirmode", 4) == 0) {
1221 if (value && *value) {
1222 vol->dir_mode =
1223 simple_strtoul(value, &value, 0);
1224 }
1225 } else if (strnicmp(data, "port", 4) == 0) {
1226 if (value && *value) {
1227 vol->port =
1228 simple_strtoul(value, &value, 0);
1229 }
1230 } else if (strnicmp(data, "rsize", 5) == 0) {
1231 if (value && *value) {
1232 vol->rsize =
1233 simple_strtoul(value, &value, 0);
1234 }
1235 } else if (strnicmp(data, "wsize", 5) == 0) {
1236 if (value && *value) {
1237 vol->wsize =
1238 simple_strtoul(value, &value, 0);
1239 }
1240 } else if (strnicmp(data, "sockopt", 5) == 0) {
1241 if (!value || !*value) {
1242 cERROR(1, "no socket option specified");
1243 continue;
1244 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1245 vol->sockopt_tcp_nodelay = 1;
1246 }
1247 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1248 if (!value || !*value || (*value == ' ')) {
1249 cFYI(1, "invalid (empty) netbiosname");
1250 } else {
1251 memset(vol->source_rfc1001_name, 0x20,
1252 RFC1001_NAME_LEN);
1253 /*
1254 * FIXME: are there cases in which a comma can
1255 * be valid in workstation netbios name (and
1256 * need special handling)?
1257 */
1258 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1259 /* don't ucase netbiosname for user */
1260 if (value[i] == 0)
1261 break;
1262 vol->source_rfc1001_name[i] = value[i];
1263 }
1264 /* The string has 16th byte zero still from
1265 set at top of the function */
1266 if (i == RFC1001_NAME_LEN && value[i] != 0)
1267 printk(KERN_WARNING "CIFS: netbiosname"
1268 " longer than 15 truncated.\n");
1269 }
1270 } else if (strnicmp(data, "servern", 7) == 0) {
1271 /* servernetbiosname specified override *SMBSERVER */
1272 if (!value || !*value || (*value == ' ')) {
1273 cFYI(1, "empty server netbiosname specified");
1274 } else {
1275 /* last byte, type, is 0x20 for servr type */
1276 memset(vol->target_rfc1001_name, 0x20,
1277 RFC1001_NAME_LEN_WITH_NULL);
1278
1279 for (i = 0; i < 15; i++) {
1280 /* BB are there cases in which a comma can be
1281 valid in this workstation netbios name
1282 (and need special handling)? */
1283
1284 /* user or mount helper must uppercase
1285 the netbiosname */
1286 if (value[i] == 0)
1287 break;
1288 else
1289 vol->target_rfc1001_name[i] =
1290 value[i];
1291 }
1292 /* The string has 16th byte zero still from
1293 set at top of the function */
1294 if (i == RFC1001_NAME_LEN && value[i] != 0)
1295 printk(KERN_WARNING "CIFS: server net"
1296 "biosname longer than 15 truncated.\n");
1297 }
1298 } else if (strnicmp(data, "actimeo", 7) == 0) {
1299 if (value && *value) {
1300 vol->actimeo = HZ * simple_strtoul(value,
1301 &value, 0);
1302 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1303 cERROR(1, "CIFS: attribute cache"
1304 "timeout too large");
1305 goto cifs_parse_mount_err;
1306 }
1307 }
1308 } else if (strnicmp(data, "credentials", 4) == 0) {
1309 /* ignore */
1310 } else if (strnicmp(data, "version", 3) == 0) {
1311 /* ignore */
1312 } else if (strnicmp(data, "guest", 5) == 0) {
1313 /* ignore */
1314 } else if (strnicmp(data, "rw", 2) == 0) {
1315 /* ignore */
1316 } else if (strnicmp(data, "ro", 2) == 0) {
1317 /* ignore */
1318 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1319 vol->noblocksnd = 1;
1320 } else if (strnicmp(data, "noautotune", 10) == 0) {
1321 vol->noautotune = 1;
1322 } else if ((strnicmp(data, "suid", 4) == 0) ||
1323 (strnicmp(data, "nosuid", 6) == 0) ||
1324 (strnicmp(data, "exec", 4) == 0) ||
1325 (strnicmp(data, "noexec", 6) == 0) ||
1326 (strnicmp(data, "nodev", 5) == 0) ||
1327 (strnicmp(data, "noauto", 6) == 0) ||
1328 (strnicmp(data, "dev", 3) == 0)) {
1329 /* The mount tool or mount.cifs helper (if present)
1330 uses these opts to set flags, and the flags are read
1331 by the kernel vfs layer before we get here (ie
1332 before read super) so there is no point trying to
1333 parse these options again and set anything and it
1334 is ok to just ignore them */
1335 continue;
1336 } else if (strnicmp(data, "hard", 4) == 0) {
1337 vol->retry = 1;
1338 } else if (strnicmp(data, "soft", 4) == 0) {
1339 vol->retry = 0;
1340 } else if (strnicmp(data, "perm", 4) == 0) {
1341 vol->noperm = 0;
1342 } else if (strnicmp(data, "noperm", 6) == 0) {
1343 vol->noperm = 1;
1344 } else if (strnicmp(data, "mapchars", 8) == 0) {
1345 vol->remap = 1;
1346 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1347 vol->remap = 0;
1348 } else if (strnicmp(data, "sfu", 3) == 0) {
1349 vol->sfu_emul = 1;
1350 } else if (strnicmp(data, "nosfu", 5) == 0) {
1351 vol->sfu_emul = 0;
1352 } else if (strnicmp(data, "nodfs", 5) == 0) {
1353 vol->nodfs = 1;
1354 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1355 vol->posix_paths = 1;
1356 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1357 vol->posix_paths = 0;
1358 } else if (strnicmp(data, "nounix", 6) == 0) {
1359 vol->no_linux_ext = 1;
1360 } else if (strnicmp(data, "nolinux", 7) == 0) {
1361 vol->no_linux_ext = 1;
1362 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1363 (strnicmp(data, "ignorecase", 10) == 0)) {
1364 vol->nocase = 1;
1365 } else if (strnicmp(data, "mand", 4) == 0) {
1366 /* ignore */
1367 } else if (strnicmp(data, "nomand", 6) == 0) {
1368 /* ignore */
1369 } else if (strnicmp(data, "_netdev", 7) == 0) {
1370 /* ignore */
1371 } else if (strnicmp(data, "brl", 3) == 0) {
1372 vol->nobrl = 0;
1373 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1374 (strnicmp(data, "nolock", 6) == 0)) {
1375 vol->nobrl = 1;
1376 /* turn off mandatory locking in mode
1377 if remote locking is turned off since the
1378 local vfs will do advisory */
1379 if (vol->file_mode ==
1380 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1381 vol->file_mode = S_IALLUGO;
1382 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1383 /* will take the shorter form "forcemand" as well */
1384 /* This mount option will force use of mandatory
1385 (DOS/Windows style) byte range locks, instead of
1386 using posix advisory byte range locks, even if the
1387 Unix extensions are available and posix locks would
1388 be supported otherwise. If Unix extensions are not
1389 negotiated this has no effect since mandatory locks
1390 would be used (mandatory locks is all that those
1391 those servers support) */
1392 vol->mand_lock = 1;
1393 } else if (strnicmp(data, "setuids", 7) == 0) {
1394 vol->setuids = 1;
1395 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1396 vol->setuids = 0;
1397 } else if (strnicmp(data, "dynperm", 7) == 0) {
1398 vol->dynperm = true;
1399 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1400 vol->dynperm = false;
1401 } else if (strnicmp(data, "nohard", 6) == 0) {
1402 vol->retry = 0;
1403 } else if (strnicmp(data, "nosoft", 6) == 0) {
1404 vol->retry = 1;
1405 } else if (strnicmp(data, "nointr", 6) == 0) {
1406 vol->intr = 0;
1407 } else if (strnicmp(data, "intr", 4) == 0) {
1408 vol->intr = 1;
1409 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1410 vol->nostrictsync = 1;
1411 } else if (strnicmp(data, "strictsync", 10) == 0) {
1412 vol->nostrictsync = 0;
1413 } else if (strnicmp(data, "serverino", 7) == 0) {
1414 vol->server_ino = 1;
1415 } else if (strnicmp(data, "noserverino", 9) == 0) {
1416 vol->server_ino = 0;
1417 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1418 vol->cifs_acl = 1;
1419 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1420 vol->cifs_acl = 0;
1421 } else if (strnicmp(data, "acl", 3) == 0) {
1422 vol->no_psx_acl = 0;
1423 } else if (strnicmp(data, "noacl", 5) == 0) {
1424 vol->no_psx_acl = 1;
1425 } else if (strnicmp(data, "locallease", 6) == 0) {
1426 vol->local_lease = 1;
1427 } else if (strnicmp(data, "sign", 4) == 0) {
1428 vol->secFlg |= CIFSSEC_MUST_SIGN;
1429 } else if (strnicmp(data, "seal", 4) == 0) {
1430 /* we do not do the following in secFlags because seal
1431 is a per tree connection (mount) not a per socket
1432 or per-smb connection option in the protocol */
1433 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1434 vol->seal = 1;
1435 } else if (strnicmp(data, "direct", 6) == 0) {
1436 vol->direct_io = 1;
1437 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1438 vol->direct_io = 1;
1439 } else if (strnicmp(data, "strictcache", 11) == 0) {
1440 vol->strict_io = 1;
1441 } else if (strnicmp(data, "noac", 4) == 0) {
1442 printk(KERN_WARNING "CIFS: Mount option noac not "
1443 "supported. Instead set "
1444 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1445 } else if (strnicmp(data, "fsc", 3) == 0) {
1446 #ifndef CONFIG_CIFS_FSCACHE
1447 cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE"
1448 "kernel config option set");
1449 goto cifs_parse_mount_err;
1450 #endif
1451 vol->fsc = true;
1452 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1453 vol->mfsymlinks = true;
1454 } else if (strnicmp(data, "multiuser", 8) == 0) {
1455 vol->multiuser = true;
1456 } else
1457 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1458 data);
1459 }
1460 if (vol->UNC == NULL) {
1461 if (devname == NULL) {
1462 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1463 "target\n");
1464 goto cifs_parse_mount_err;
1465 }
1466 if ((temp_len = strnlen(devname, 300)) < 300) {
1467 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1468 if (vol->UNC == NULL)
1469 goto cifs_parse_mount_err;
1470 strcpy(vol->UNC, devname);
1471 if (strncmp(vol->UNC, "//", 2) == 0) {
1472 vol->UNC[0] = '\\';
1473 vol->UNC[1] = '\\';
1474 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1475 printk(KERN_WARNING "CIFS: UNC Path does not "
1476 "begin with // or \\\\ \n");
1477 goto cifs_parse_mount_err;
1478 }
1479 value = strpbrk(vol->UNC+2, "/\\");
1480 if (value)
1481 *value = '\\';
1482 } else {
1483 printk(KERN_WARNING "CIFS: UNC name too long\n");
1484 goto cifs_parse_mount_err;
1485 }
1486 }
1487
1488 if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1489 cERROR(1, "Multiuser mounts currently require krb5 "
1490 "authentication!");
1491 goto cifs_parse_mount_err;
1492 }
1493
1494 if (vol->UNCip == NULL)
1495 vol->UNCip = &vol->UNC[2];
1496
1497 if (uid_specified)
1498 vol->override_uid = override_uid;
1499 else if (override_uid == 1)
1500 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1501 "specified with no uid= option.\n");
1502
1503 if (gid_specified)
1504 vol->override_gid = override_gid;
1505 else if (override_gid == 1)
1506 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1507 "specified with no gid= option.\n");
1508
1509 kfree(mountdata_copy);
1510 return 0;
1511
1512 cifs_parse_mount_err:
1513 kfree(mountdata_copy);
1514 return 1;
1515 }
1516
1517 /** Returns true if srcaddr isn't specified and rhs isn't
1518 * specified, or if srcaddr is specified and
1519 * matches the IP address of the rhs argument.
1520 */
1521 static bool
1522 srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1523 {
1524 switch (srcaddr->sa_family) {
1525 case AF_UNSPEC:
1526 return (rhs->sa_family == AF_UNSPEC);
1527 case AF_INET: {
1528 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1529 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1530 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1531 }
1532 case AF_INET6: {
1533 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1534 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1535 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1536 }
1537 default:
1538 WARN_ON(1);
1539 return false; /* don't expect to be here */
1540 }
1541 }
1542
1543 /*
1544 * If no port is specified in addr structure, we try to match with 445 port
1545 * and if it fails - with 139 ports. It should be called only if address
1546 * families of server and addr are equal.
1547 */
1548 static bool
1549 match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1550 {
1551 __be16 port, *sport;
1552
1553 switch (addr->sa_family) {
1554 case AF_INET:
1555 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1556 port = ((struct sockaddr_in *) addr)->sin_port;
1557 break;
1558 case AF_INET6:
1559 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1560 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1561 break;
1562 default:
1563 WARN_ON(1);
1564 return false;
1565 }
1566
1567 if (!port) {
1568 port = htons(CIFS_PORT);
1569 if (port == *sport)
1570 return true;
1571
1572 port = htons(RFC1001_PORT);
1573 }
1574
1575 return port == *sport;
1576 }
1577
1578 static bool
1579 match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1580 struct sockaddr *srcaddr)
1581 {
1582 switch (addr->sa_family) {
1583 case AF_INET: {
1584 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1585 struct sockaddr_in *srv_addr4 =
1586 (struct sockaddr_in *)&server->dstaddr;
1587
1588 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
1589 return false;
1590 break;
1591 }
1592 case AF_INET6: {
1593 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1594 struct sockaddr_in6 *srv_addr6 =
1595 (struct sockaddr_in6 *)&server->dstaddr;
1596
1597 if (!ipv6_addr_equal(&addr6->sin6_addr,
1598 &srv_addr6->sin6_addr))
1599 return false;
1600 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
1601 return false;
1602 break;
1603 }
1604 default:
1605 WARN_ON(1);
1606 return false; /* don't expect to be here */
1607 }
1608
1609 if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1610 return false;
1611
1612 return true;
1613 }
1614
1615 static bool
1616 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1617 {
1618 unsigned int secFlags;
1619
1620 if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1621 secFlags = vol->secFlg;
1622 else
1623 secFlags = global_secflags | vol->secFlg;
1624
1625 switch (server->secType) {
1626 case LANMAN:
1627 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1628 return false;
1629 break;
1630 case NTLMv2:
1631 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1632 return false;
1633 break;
1634 case NTLM:
1635 if (!(secFlags & CIFSSEC_MAY_NTLM))
1636 return false;
1637 break;
1638 case Kerberos:
1639 if (!(secFlags & CIFSSEC_MAY_KRB5))
1640 return false;
1641 break;
1642 case RawNTLMSSP:
1643 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1644 return false;
1645 break;
1646 default:
1647 /* shouldn't happen */
1648 return false;
1649 }
1650
1651 /* now check if signing mode is acceptable */
1652 if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1653 (server->secMode & SECMODE_SIGN_REQUIRED))
1654 return false;
1655 else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1656 (server->secMode &
1657 (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1658 return false;
1659
1660 return true;
1661 }
1662
1663 static int match_server(struct TCP_Server_Info *server, struct sockaddr *addr,
1664 struct smb_vol *vol)
1665 {
1666 if (!net_eq(cifs_net_ns(server), current->nsproxy->net_ns))
1667 return 0;
1668
1669 if (!match_address(server, addr,
1670 (struct sockaddr *)&vol->srcaddr))
1671 return 0;
1672
1673 if (!match_port(server, addr))
1674 return 0;
1675
1676 if (!match_security(server, vol))
1677 return 0;
1678
1679 return 1;
1680 }
1681
1682 static struct TCP_Server_Info *
1683 cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1684 {
1685 struct TCP_Server_Info *server;
1686
1687 spin_lock(&cifs_tcp_ses_lock);
1688 list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
1689 if (!match_server(server, addr, vol))
1690 continue;
1691
1692 ++server->srv_count;
1693 spin_unlock(&cifs_tcp_ses_lock);
1694 cFYI(1, "Existing tcp session with server found");
1695 return server;
1696 }
1697 spin_unlock(&cifs_tcp_ses_lock);
1698 return NULL;
1699 }
1700
1701 static void
1702 cifs_put_tcp_session(struct TCP_Server_Info *server)
1703 {
1704 struct task_struct *task;
1705
1706 spin_lock(&cifs_tcp_ses_lock);
1707 if (--server->srv_count > 0) {
1708 spin_unlock(&cifs_tcp_ses_lock);
1709 return;
1710 }
1711
1712 put_net(cifs_net_ns(server));
1713
1714 list_del_init(&server->tcp_ses_list);
1715 spin_unlock(&cifs_tcp_ses_lock);
1716
1717 cancel_delayed_work_sync(&server->echo);
1718
1719 spin_lock(&GlobalMid_Lock);
1720 server->tcpStatus = CifsExiting;
1721 spin_unlock(&GlobalMid_Lock);
1722
1723 cifs_crypto_shash_release(server);
1724 cifs_fscache_release_client_cookie(server);
1725
1726 kfree(server->session_key.response);
1727 server->session_key.response = NULL;
1728 server->session_key.len = 0;
1729
1730 task = xchg(&server->tsk, NULL);
1731 if (task)
1732 force_sig(SIGKILL, task);
1733 }
1734
1735 static struct TCP_Server_Info *
1736 cifs_get_tcp_session(struct smb_vol *volume_info)
1737 {
1738 struct TCP_Server_Info *tcp_ses = NULL;
1739 struct sockaddr_storage addr;
1740 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1741 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1742 int rc;
1743
1744 memset(&addr, 0, sizeof(struct sockaddr_storage));
1745
1746 cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
1747
1748 if (volume_info->UNCip && volume_info->UNC) {
1749 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1750 volume_info->UNCip,
1751 strlen(volume_info->UNCip),
1752 volume_info->port);
1753 if (!rc) {
1754 /* we failed translating address */
1755 rc = -EINVAL;
1756 goto out_err;
1757 }
1758 } else if (volume_info->UNCip) {
1759 /* BB using ip addr as tcp_ses name to connect to the
1760 DFS root below */
1761 cERROR(1, "Connecting to DFS root not implemented yet");
1762 rc = -EINVAL;
1763 goto out_err;
1764 } else /* which tcp_sess DFS root would we conect to */ {
1765 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1766 "unc=//192.168.1.100/public) specified");
1767 rc = -EINVAL;
1768 goto out_err;
1769 }
1770
1771 /* see if we already have a matching tcp_ses */
1772 tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
1773 if (tcp_ses)
1774 return tcp_ses;
1775
1776 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1777 if (!tcp_ses) {
1778 rc = -ENOMEM;
1779 goto out_err;
1780 }
1781
1782 rc = cifs_crypto_shash_allocate(tcp_ses);
1783 if (rc) {
1784 cERROR(1, "could not setup hash structures rc %d", rc);
1785 goto out_err;
1786 }
1787
1788 cifs_set_net_ns(tcp_ses, get_net(current->nsproxy->net_ns));
1789 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1790 if (IS_ERR(tcp_ses->hostname)) {
1791 rc = PTR_ERR(tcp_ses->hostname);
1792 goto out_err_crypto_release;
1793 }
1794
1795 tcp_ses->noblocksnd = volume_info->noblocksnd;
1796 tcp_ses->noautotune = volume_info->noautotune;
1797 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1798 atomic_set(&tcp_ses->inFlight, 0);
1799 init_waitqueue_head(&tcp_ses->response_q);
1800 init_waitqueue_head(&tcp_ses->request_q);
1801 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1802 mutex_init(&tcp_ses->srv_mutex);
1803 memcpy(tcp_ses->workstation_RFC1001_name,
1804 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1805 memcpy(tcp_ses->server_RFC1001_name,
1806 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1807 tcp_ses->session_estab = false;
1808 tcp_ses->sequence_number = 0;
1809 tcp_ses->lstrp = jiffies;
1810 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1811 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1812 INIT_DELAYED_WORK(&tcp_ses->echo, cifs_echo_request);
1813
1814 /*
1815 * at this point we are the only ones with the pointer
1816 * to the struct since the kernel thread not created yet
1817 * no need to spinlock this init of tcpStatus or srv_count
1818 */
1819 tcp_ses->tcpStatus = CifsNew;
1820 memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1821 sizeof(tcp_ses->srcaddr));
1822 ++tcp_ses->srv_count;
1823
1824 if (addr.ss_family == AF_INET6) {
1825 cFYI(1, "attempting ipv6 connect");
1826 /* BB should we allow ipv6 on port 139? */
1827 /* other OS never observed in Wild doing 139 with v6 */
1828 memcpy(&tcp_ses->dstaddr, sin_server6,
1829 sizeof(struct sockaddr_in6));
1830 } else
1831 memcpy(&tcp_ses->dstaddr, sin_server,
1832 sizeof(struct sockaddr_in));
1833
1834 rc = ip_connect(tcp_ses);
1835 if (rc < 0) {
1836 cERROR(1, "Error connecting to socket. Aborting operation");
1837 goto out_err_crypto_release;
1838 }
1839
1840 /*
1841 * since we're in a cifs function already, we know that
1842 * this will succeed. No need for try_module_get().
1843 */
1844 __module_get(THIS_MODULE);
1845 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1846 tcp_ses, "cifsd");
1847 if (IS_ERR(tcp_ses->tsk)) {
1848 rc = PTR_ERR(tcp_ses->tsk);
1849 cERROR(1, "error %d create cifsd thread", rc);
1850 module_put(THIS_MODULE);
1851 goto out_err_crypto_release;
1852 }
1853 tcp_ses->tcpStatus = CifsNeedNegotiate;
1854
1855 /* thread spawned, put it on the list */
1856 spin_lock(&cifs_tcp_ses_lock);
1857 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1858 spin_unlock(&cifs_tcp_ses_lock);
1859
1860 cifs_fscache_get_client_cookie(tcp_ses);
1861
1862 /* queue echo request delayed work */
1863 queue_delayed_work(system_nrt_wq, &tcp_ses->echo, SMB_ECHO_INTERVAL);
1864
1865 return tcp_ses;
1866
1867 out_err_crypto_release:
1868 cifs_crypto_shash_release(tcp_ses);
1869
1870 put_net(cifs_net_ns(tcp_ses));
1871
1872 out_err:
1873 if (tcp_ses) {
1874 if (!IS_ERR(tcp_ses->hostname))
1875 kfree(tcp_ses->hostname);
1876 if (tcp_ses->ssocket)
1877 sock_release(tcp_ses->ssocket);
1878 kfree(tcp_ses);
1879 }
1880 return ERR_PTR(rc);
1881 }
1882
1883 static int match_session(struct cifsSesInfo *ses, struct smb_vol *vol)
1884 {
1885 switch (ses->server->secType) {
1886 case Kerberos:
1887 if (vol->cred_uid != ses->cred_uid)
1888 return 0;
1889 break;
1890 default:
1891 /* anything else takes username/password */
1892 if (ses->user_name == NULL)
1893 return 0;
1894 if (strncmp(ses->user_name, vol->username,
1895 MAX_USERNAME_SIZE))
1896 return 0;
1897 if (strlen(vol->username) != 0 &&
1898 ses->password != NULL &&
1899 strncmp(ses->password,
1900 vol->password ? vol->password : "",
1901 MAX_PASSWORD_SIZE))
1902 return 0;
1903 }
1904 return 1;
1905 }
1906
1907 static struct cifsSesInfo *
1908 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1909 {
1910 struct cifsSesInfo *ses;
1911
1912 spin_lock(&cifs_tcp_ses_lock);
1913 list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
1914 if (!match_session(ses, vol))
1915 continue;
1916 ++ses->ses_count;
1917 spin_unlock(&cifs_tcp_ses_lock);
1918 return ses;
1919 }
1920 spin_unlock(&cifs_tcp_ses_lock);
1921 return NULL;
1922 }
1923
1924 static void
1925 cifs_put_smb_ses(struct cifsSesInfo *ses)
1926 {
1927 int xid;
1928 struct TCP_Server_Info *server = ses->server;
1929
1930 cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
1931 spin_lock(&cifs_tcp_ses_lock);
1932 if (--ses->ses_count > 0) {
1933 spin_unlock(&cifs_tcp_ses_lock);
1934 return;
1935 }
1936
1937 list_del_init(&ses->smb_ses_list);
1938 spin_unlock(&cifs_tcp_ses_lock);
1939
1940 if (ses->status == CifsGood) {
1941 xid = GetXid();
1942 CIFSSMBLogoff(xid, ses);
1943 _FreeXid(xid);
1944 }
1945 sesInfoFree(ses);
1946 cifs_put_tcp_session(server);
1947 }
1948
1949 static bool warned_on_ntlm; /* globals init to false automatically */
1950
1951 static struct cifsSesInfo *
1952 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1953 {
1954 int rc = -ENOMEM, xid;
1955 struct cifsSesInfo *ses;
1956 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1957 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
1958
1959 xid = GetXid();
1960
1961 ses = cifs_find_smb_ses(server, volume_info);
1962 if (ses) {
1963 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1964
1965 mutex_lock(&ses->session_mutex);
1966 rc = cifs_negotiate_protocol(xid, ses);
1967 if (rc) {
1968 mutex_unlock(&ses->session_mutex);
1969 /* problem -- put our ses reference */
1970 cifs_put_smb_ses(ses);
1971 FreeXid(xid);
1972 return ERR_PTR(rc);
1973 }
1974 if (ses->need_reconnect) {
1975 cFYI(1, "Session needs reconnect");
1976 rc = cifs_setup_session(xid, ses,
1977 volume_info->local_nls);
1978 if (rc) {
1979 mutex_unlock(&ses->session_mutex);
1980 /* problem -- put our reference */
1981 cifs_put_smb_ses(ses);
1982 FreeXid(xid);
1983 return ERR_PTR(rc);
1984 }
1985 }
1986 mutex_unlock(&ses->session_mutex);
1987
1988 /* existing SMB ses has a server reference already */
1989 cifs_put_tcp_session(server);
1990 FreeXid(xid);
1991 return ses;
1992 }
1993
1994 cFYI(1, "Existing smb sess not found");
1995 ses = sesInfoAlloc();
1996 if (ses == NULL)
1997 goto get_ses_fail;
1998
1999 /* new SMB session uses our server ref */
2000 ses->server = server;
2001 if (server->dstaddr.ss_family == AF_INET6)
2002 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
2003 else
2004 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
2005
2006 if (volume_info->username) {
2007 ses->user_name = kstrdup(volume_info->username, GFP_KERNEL);
2008 if (!ses->user_name)
2009 goto get_ses_fail;
2010 }
2011
2012 /* volume_info->password freed at unmount */
2013 if (volume_info->password) {
2014 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
2015 if (!ses->password)
2016 goto get_ses_fail;
2017 }
2018 if (volume_info->domainname) {
2019 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
2020 if (!ses->domainName)
2021 goto get_ses_fail;
2022 }
2023 ses->cred_uid = volume_info->cred_uid;
2024 ses->linux_uid = volume_info->linux_uid;
2025
2026 /* ntlmv2 is much stronger than ntlm security, and has been broadly
2027 supported for many years, time to update default security mechanism */
2028 if ((volume_info->secFlg == 0) && warned_on_ntlm == false) {
2029 warned_on_ntlm = true;
2030 cERROR(1, "default security mechanism requested. The default "
2031 "security mechanism will be upgraded from ntlm to "
2032 "ntlmv2 in kernel release 2.6.41");
2033 }
2034 ses->overrideSecFlg = volume_info->secFlg;
2035
2036 mutex_lock(&ses->session_mutex);
2037 rc = cifs_negotiate_protocol(xid, ses);
2038 if (!rc)
2039 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
2040 mutex_unlock(&ses->session_mutex);
2041 if (rc)
2042 goto get_ses_fail;
2043
2044 /* success, put it on the list */
2045 spin_lock(&cifs_tcp_ses_lock);
2046 list_add(&ses->smb_ses_list, &server->smb_ses_list);
2047 spin_unlock(&cifs_tcp_ses_lock);
2048
2049 FreeXid(xid);
2050 return ses;
2051
2052 get_ses_fail:
2053 sesInfoFree(ses);
2054 FreeXid(xid);
2055 return ERR_PTR(rc);
2056 }
2057
2058 static int match_tcon(struct cifsTconInfo *tcon, const char *unc)
2059 {
2060 if (tcon->tidStatus == CifsExiting)
2061 return 0;
2062 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
2063 return 0;
2064 return 1;
2065 }
2066
2067 static struct cifsTconInfo *
2068 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
2069 {
2070 struct list_head *tmp;
2071 struct cifsTconInfo *tcon;
2072
2073 spin_lock(&cifs_tcp_ses_lock);
2074 list_for_each(tmp, &ses->tcon_list) {
2075 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
2076 if (!match_tcon(tcon, unc))
2077 continue;
2078 ++tcon->tc_count;
2079 spin_unlock(&cifs_tcp_ses_lock);
2080 return tcon;
2081 }
2082 spin_unlock(&cifs_tcp_ses_lock);
2083 return NULL;
2084 }
2085
2086 static void
2087 cifs_put_tcon(struct cifsTconInfo *tcon)
2088 {
2089 int xid;
2090 struct cifsSesInfo *ses = tcon->ses;
2091
2092 cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
2093 spin_lock(&cifs_tcp_ses_lock);
2094 if (--tcon->tc_count > 0) {
2095 spin_unlock(&cifs_tcp_ses_lock);
2096 return;
2097 }
2098
2099 list_del_init(&tcon->tcon_list);
2100 spin_unlock(&cifs_tcp_ses_lock);
2101
2102 xid = GetXid();
2103 CIFSSMBTDis(xid, tcon);
2104 _FreeXid(xid);
2105
2106 cifs_fscache_release_super_cookie(tcon);
2107 tconInfoFree(tcon);
2108 cifs_put_smb_ses(ses);
2109 }
2110
2111 static struct cifsTconInfo *
2112 cifs_get_tcon(struct cifsSesInfo *ses, struct smb_vol *volume_info)
2113 {
2114 int rc, xid;
2115 struct cifsTconInfo *tcon;
2116
2117 tcon = cifs_find_tcon(ses, volume_info->UNC);
2118 if (tcon) {
2119 cFYI(1, "Found match on UNC path");
2120 /* existing tcon already has a reference */
2121 cifs_put_smb_ses(ses);
2122 if (tcon->seal != volume_info->seal)
2123 cERROR(1, "transport encryption setting "
2124 "conflicts with existing tid");
2125 return tcon;
2126 }
2127
2128 tcon = tconInfoAlloc();
2129 if (tcon == NULL) {
2130 rc = -ENOMEM;
2131 goto out_fail;
2132 }
2133
2134 tcon->ses = ses;
2135 if (volume_info->password) {
2136 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
2137 if (!tcon->password) {
2138 rc = -ENOMEM;
2139 goto out_fail;
2140 }
2141 }
2142
2143 if (strchr(volume_info->UNC + 3, '\\') == NULL
2144 && strchr(volume_info->UNC + 3, '/') == NULL) {
2145 cERROR(1, "Missing share name");
2146 rc = -ENODEV;
2147 goto out_fail;
2148 }
2149
2150 /* BB Do we need to wrap session_mutex around
2151 * this TCon call and Unix SetFS as
2152 * we do on SessSetup and reconnect? */
2153 xid = GetXid();
2154 rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
2155 FreeXid(xid);
2156 cFYI(1, "CIFS Tcon rc = %d", rc);
2157 if (rc)
2158 goto out_fail;
2159
2160 if (volume_info->nodfs) {
2161 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2162 cFYI(1, "DFS disabled (%d)", tcon->Flags);
2163 }
2164 tcon->seal = volume_info->seal;
2165 /* we can have only one retry value for a connection
2166 to a share so for resources mounted more than once
2167 to the same server share the last value passed in
2168 for the retry flag is used */
2169 tcon->retry = volume_info->retry;
2170 tcon->nocase = volume_info->nocase;
2171 tcon->local_lease = volume_info->local_lease;
2172
2173 spin_lock(&cifs_tcp_ses_lock);
2174 list_add(&tcon->tcon_list, &ses->tcon_list);
2175 spin_unlock(&cifs_tcp_ses_lock);
2176
2177 cifs_fscache_get_super_cookie(tcon);
2178
2179 return tcon;
2180
2181 out_fail:
2182 tconInfoFree(tcon);
2183 return ERR_PTR(rc);
2184 }
2185
2186 void
2187 cifs_put_tlink(struct tcon_link *tlink)
2188 {
2189 if (!tlink || IS_ERR(tlink))
2190 return;
2191
2192 if (!atomic_dec_and_test(&tlink->tl_count) ||
2193 test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2194 tlink->tl_time = jiffies;
2195 return;
2196 }
2197
2198 if (!IS_ERR(tlink_tcon(tlink)))
2199 cifs_put_tcon(tlink_tcon(tlink));
2200 kfree(tlink);
2201 return;
2202 }
2203
2204 int
2205 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
2206 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
2207 struct dfs_info3_param **preferrals, int remap)
2208 {
2209 char *temp_unc;
2210 int rc = 0;
2211
2212 *pnum_referrals = 0;
2213 *preferrals = NULL;
2214
2215 if (pSesInfo->ipc_tid == 0) {
2216 temp_unc = kmalloc(2 /* for slashes */ +
2217 strnlen(pSesInfo->serverName,
2218 SERVER_NAME_LEN_WITH_NULL * 2)
2219 + 1 + 4 /* slash IPC$ */ + 2,
2220 GFP_KERNEL);
2221 if (temp_unc == NULL)
2222 return -ENOMEM;
2223 temp_unc[0] = '\\';
2224 temp_unc[1] = '\\';
2225 strcpy(temp_unc + 2, pSesInfo->serverName);
2226 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2227 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
2228 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
2229 kfree(temp_unc);
2230 }
2231 if (rc == 0)
2232 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
2233 pnum_referrals, nls_codepage, remap);
2234 /* BB map targetUNCs to dfs_info3 structures, here or
2235 in CIFSGetDFSRefer BB */
2236
2237 return rc;
2238 }
2239
2240 #ifdef CONFIG_DEBUG_LOCK_ALLOC
2241 static struct lock_class_key cifs_key[2];
2242 static struct lock_class_key cifs_slock_key[2];
2243
2244 static inline void
2245 cifs_reclassify_socket4(struct socket *sock)
2246 {
2247 struct sock *sk = sock->sk;
2248 BUG_ON(sock_owned_by_user(sk));
2249 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2250 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2251 }
2252
2253 static inline void
2254 cifs_reclassify_socket6(struct socket *sock)
2255 {
2256 struct sock *sk = sock->sk;
2257 BUG_ON(sock_owned_by_user(sk));
2258 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2259 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2260 }
2261 #else
2262 static inline void
2263 cifs_reclassify_socket4(struct socket *sock)
2264 {
2265 }
2266
2267 static inline void
2268 cifs_reclassify_socket6(struct socket *sock)
2269 {
2270 }
2271 #endif
2272
2273 /* See RFC1001 section 14 on representation of Netbios names */
2274 static void rfc1002mangle(char *target, char *source, unsigned int length)
2275 {
2276 unsigned int i, j;
2277
2278 for (i = 0, j = 0; i < (length); i++) {
2279 /* mask a nibble at a time and encode */
2280 target[j] = 'A' + (0x0F & (source[i] >> 4));
2281 target[j+1] = 'A' + (0x0F & source[i]);
2282 j += 2;
2283 }
2284
2285 }
2286
2287 static int
2288 bind_socket(struct TCP_Server_Info *server)
2289 {
2290 int rc = 0;
2291 if (server->srcaddr.ss_family != AF_UNSPEC) {
2292 /* Bind to the specified local IP address */
2293 struct socket *socket = server->ssocket;
2294 rc = socket->ops->bind(socket,
2295 (struct sockaddr *) &server->srcaddr,
2296 sizeof(server->srcaddr));
2297 if (rc < 0) {
2298 struct sockaddr_in *saddr4;
2299 struct sockaddr_in6 *saddr6;
2300 saddr4 = (struct sockaddr_in *)&server->srcaddr;
2301 saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2302 if (saddr6->sin6_family == AF_INET6)
2303 cERROR(1, "cifs: "
2304 "Failed to bind to: %pI6c, error: %d\n",
2305 &saddr6->sin6_addr, rc);
2306 else
2307 cERROR(1, "cifs: "
2308 "Failed to bind to: %pI4, error: %d\n",
2309 &saddr4->sin_addr.s_addr, rc);
2310 }
2311 }
2312 return rc;
2313 }
2314
2315 static int
2316 ip_rfc1001_connect(struct TCP_Server_Info *server)
2317 {
2318 int rc = 0;
2319 /*
2320 * some servers require RFC1001 sessinit before sending
2321 * negprot - BB check reconnection in case where second
2322 * sessinit is sent but no second negprot
2323 */
2324 struct rfc1002_session_packet *ses_init_buf;
2325 struct smb_hdr *smb_buf;
2326 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2327 GFP_KERNEL);
2328 if (ses_init_buf) {
2329 ses_init_buf->trailer.session_req.called_len = 32;
2330
2331 if (server->server_RFC1001_name &&
2332 server->server_RFC1001_name[0] != 0)
2333 rfc1002mangle(ses_init_buf->trailer.
2334 session_req.called_name,
2335 server->server_RFC1001_name,
2336 RFC1001_NAME_LEN_WITH_NULL);
2337 else
2338 rfc1002mangle(ses_init_buf->trailer.
2339 session_req.called_name,
2340 DEFAULT_CIFS_CALLED_NAME,
2341 RFC1001_NAME_LEN_WITH_NULL);
2342
2343 ses_init_buf->trailer.session_req.calling_len = 32;
2344
2345 /*
2346 * calling name ends in null (byte 16) from old smb
2347 * convention.
2348 */
2349 if (server->workstation_RFC1001_name &&
2350 server->workstation_RFC1001_name[0] != 0)
2351 rfc1002mangle(ses_init_buf->trailer.
2352 session_req.calling_name,
2353 server->workstation_RFC1001_name,
2354 RFC1001_NAME_LEN_WITH_NULL);
2355 else
2356 rfc1002mangle(ses_init_buf->trailer.
2357 session_req.calling_name,
2358 "LINUX_CIFS_CLNT",
2359 RFC1001_NAME_LEN_WITH_NULL);
2360
2361 ses_init_buf->trailer.session_req.scope1 = 0;
2362 ses_init_buf->trailer.session_req.scope2 = 0;
2363 smb_buf = (struct smb_hdr *)ses_init_buf;
2364
2365 /* sizeof RFC1002_SESSION_REQUEST with no scope */
2366 smb_buf->smb_buf_length = cpu_to_be32(0x81000044);
2367 rc = smb_send(server, smb_buf, 0x44);
2368 kfree(ses_init_buf);
2369 /*
2370 * RFC1001 layer in at least one server
2371 * requires very short break before negprot
2372 * presumably because not expecting negprot
2373 * to follow so fast. This is a simple
2374 * solution that works without
2375 * complicating the code and causes no
2376 * significant slowing down on mount
2377 * for everyone else
2378 */
2379 usleep_range(1000, 2000);
2380 }
2381 /*
2382 * else the negprot may still work without this
2383 * even though malloc failed
2384 */
2385
2386 return rc;
2387 }
2388
2389 static int
2390 generic_ip_connect(struct TCP_Server_Info *server)
2391 {
2392 int rc = 0;
2393 __be16 sport;
2394 int slen, sfamily;
2395 struct socket *socket = server->ssocket;
2396 struct sockaddr *saddr;
2397
2398 saddr = (struct sockaddr *) &server->dstaddr;
2399
2400 if (server->dstaddr.ss_family == AF_INET6) {
2401 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
2402 slen = sizeof(struct sockaddr_in6);
2403 sfamily = AF_INET6;
2404 } else {
2405 sport = ((struct sockaddr_in *) saddr)->sin_port;
2406 slen = sizeof(struct sockaddr_in);
2407 sfamily = AF_INET;
2408 }
2409
2410 if (socket == NULL) {
2411 rc = __sock_create(cifs_net_ns(server), sfamily, SOCK_STREAM,
2412 IPPROTO_TCP, &socket, 1);
2413 if (rc < 0) {
2414 cERROR(1, "Error %d creating socket", rc);
2415 server->ssocket = NULL;
2416 return rc;
2417 }
2418
2419 /* BB other socket options to set KEEPALIVE, NODELAY? */
2420 cFYI(1, "Socket created");
2421 server->ssocket = socket;
2422 socket->sk->sk_allocation = GFP_NOFS;
2423 if (sfamily == AF_INET6)
2424 cifs_reclassify_socket6(socket);
2425 else
2426 cifs_reclassify_socket4(socket);
2427 }
2428
2429 rc = bind_socket(server);
2430 if (rc < 0)
2431 return rc;
2432
2433 rc = socket->ops->connect(socket, saddr, slen, 0);
2434 if (rc < 0) {
2435 cFYI(1, "Error %d connecting to server", rc);
2436 sock_release(socket);
2437 server->ssocket = NULL;
2438 return rc;
2439 }
2440
2441 /*
2442 * Eventually check for other socket options to change from
2443 * the default. sock_setsockopt not used because it expects
2444 * user space buffer
2445 */
2446 socket->sk->sk_rcvtimeo = 7 * HZ;
2447 socket->sk->sk_sndtimeo = 5 * HZ;
2448
2449 /* make the bufsizes depend on wsize/rsize and max requests */
2450 if (server->noautotune) {
2451 if (socket->sk->sk_sndbuf < (200 * 1024))
2452 socket->sk->sk_sndbuf = 200 * 1024;
2453 if (socket->sk->sk_rcvbuf < (140 * 1024))
2454 socket->sk->sk_rcvbuf = 140 * 1024;
2455 }
2456
2457 if (server->tcp_nodelay) {
2458 int val = 1;
2459 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2460 (char *)&val, sizeof(val));
2461 if (rc)
2462 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2463 }
2464
2465 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
2466 socket->sk->sk_sndbuf,
2467 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
2468
2469 if (sport == htons(RFC1001_PORT))
2470 rc = ip_rfc1001_connect(server);
2471
2472 return rc;
2473 }
2474
2475 static int
2476 ip_connect(struct TCP_Server_Info *server)
2477 {
2478 __be16 *sport;
2479 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2480 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
2481
2482 if (server->dstaddr.ss_family == AF_INET6)
2483 sport = &addr6->sin6_port;
2484 else
2485 sport = &addr->sin_port;
2486
2487 if (*sport == 0) {
2488 int rc;
2489
2490 /* try with 445 port at first */
2491 *sport = htons(CIFS_PORT);
2492
2493 rc = generic_ip_connect(server);
2494 if (rc >= 0)
2495 return rc;
2496
2497 /* if it failed, try with 139 port */
2498 *sport = htons(RFC1001_PORT);
2499 }
2500
2501 return generic_ip_connect(server);
2502 }
2503
2504 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
2505 struct super_block *sb, struct smb_vol *vol_info)
2506 {
2507 /* if we are reconnecting then should we check to see if
2508 * any requested capabilities changed locally e.g. via
2509 * remount but we can not do much about it here
2510 * if they have (even if we could detect it by the following)
2511 * Perhaps we could add a backpointer to array of sb from tcon
2512 * or if we change to make all sb to same share the same
2513 * sb as NFS - then we only have one backpointer to sb.
2514 * What if we wanted to mount the server share twice once with
2515 * and once without posixacls or posix paths? */
2516 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2517
2518 if (vol_info && vol_info->no_linux_ext) {
2519 tcon->fsUnixInfo.Capability = 0;
2520 tcon->unix_ext = 0; /* Unix Extensions disabled */
2521 cFYI(1, "Linux protocol extensions disabled");
2522 return;
2523 } else if (vol_info)
2524 tcon->unix_ext = 1; /* Unix Extensions supported */
2525
2526 if (tcon->unix_ext == 0) {
2527 cFYI(1, "Unix extensions disabled so not set on reconnect");
2528 return;
2529 }
2530
2531 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2532 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2533 cFYI(1, "unix caps which server supports %lld", cap);
2534 /* check for reconnect case in which we do not
2535 want to change the mount behavior if we can avoid it */
2536 if (vol_info == NULL) {
2537 /* turn off POSIX ACL and PATHNAMES if not set
2538 originally at mount time */
2539 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2540 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2541 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2542 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2543 cERROR(1, "POSIXPATH support change");
2544 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2545 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2546 cERROR(1, "possible reconnect error");
2547 cERROR(1, "server disabled POSIX path support");
2548 }
2549 }
2550
2551 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2552 cERROR(1, "per-share encryption not supported yet");
2553
2554 cap &= CIFS_UNIX_CAP_MASK;
2555 if (vol_info && vol_info->no_psx_acl)
2556 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2557 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2558 cFYI(1, "negotiated posix acl support");
2559 if (sb)
2560 sb->s_flags |= MS_POSIXACL;
2561 }
2562
2563 if (vol_info && vol_info->posix_paths == 0)
2564 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2565 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2566 cFYI(1, "negotiate posix pathnames");
2567 if (sb)
2568 CIFS_SB(sb)->mnt_cifs_flags |=
2569 CIFS_MOUNT_POSIX_PATHS;
2570 }
2571
2572 /* We might be setting the path sep back to a different
2573 form if we are reconnecting and the server switched its
2574 posix path capability for this share */
2575 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2576 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2577
2578 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2579 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2580 CIFS_SB(sb)->rsize = 127 * 1024;
2581 cFYI(DBG2, "larger reads not supported by srv");
2582 }
2583 }
2584
2585
2586 cFYI(1, "Negotiate caps 0x%x", (int)cap);
2587 #ifdef CONFIG_CIFS_DEBUG2
2588 if (cap & CIFS_UNIX_FCNTL_CAP)
2589 cFYI(1, "FCNTL cap");
2590 if (cap & CIFS_UNIX_EXTATTR_CAP)
2591 cFYI(1, "EXTATTR cap");
2592 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2593 cFYI(1, "POSIX path cap");
2594 if (cap & CIFS_UNIX_XATTR_CAP)
2595 cFYI(1, "XATTR cap");
2596 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2597 cFYI(1, "POSIX ACL cap");
2598 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2599 cFYI(1, "very large read cap");
2600 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2601 cFYI(1, "very large write cap");
2602 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP)
2603 cFYI(1, "transport encryption cap");
2604 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2605 cFYI(1, "mandatory transport encryption cap");
2606 #endif /* CIFS_DEBUG2 */
2607 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2608 if (vol_info == NULL) {
2609 cFYI(1, "resetting capabilities failed");
2610 } else
2611 cERROR(1, "Negotiating Unix capabilities "
2612 "with the server failed. Consider "
2613 "mounting with the Unix Extensions\n"
2614 "disabled, if problems are found, "
2615 "by specifying the nounix mount "
2616 "option.");
2617
2618 }
2619 }
2620 }
2621
2622 static void
2623 convert_delimiter(char *path, char delim)
2624 {
2625 int i;
2626 char old_delim;
2627
2628 if (path == NULL)
2629 return;
2630
2631 if (delim == '/')
2632 old_delim = '\\';
2633 else
2634 old_delim = '/';
2635
2636 for (i = 0; path[i] != '\0'; i++) {
2637 if (path[i] == old_delim)
2638 path[i] = delim;
2639 }
2640 }
2641
2642 void cifs_setup_cifs_sb(struct smb_vol *pvolume_info,
2643 struct cifs_sb_info *cifs_sb)
2644 {
2645 INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2646
2647 if (pvolume_info->rsize > CIFSMaxBufSize) {
2648 cERROR(1, "rsize %d too large, using MaxBufSize",
2649 pvolume_info->rsize);
2650 cifs_sb->rsize = CIFSMaxBufSize;
2651 } else if ((pvolume_info->rsize) &&
2652 (pvolume_info->rsize <= CIFSMaxBufSize))
2653 cifs_sb->rsize = pvolume_info->rsize;
2654 else /* default */
2655 cifs_sb->rsize = CIFSMaxBufSize;
2656
2657 if (cifs_sb->rsize < 2048) {
2658 cifs_sb->rsize = 2048;
2659 /* Windows ME may prefer this */
2660 cFYI(1, "readsize set to minimum: 2048");
2661 }
2662 /* calculate prepath */
2663 cifs_sb->prepath = pvolume_info->prepath;
2664 if (cifs_sb->prepath) {
2665 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2666 /* we can not convert the / to \ in the path
2667 separators in the prefixpath yet because we do not
2668 know (until reset_cifs_unix_caps is called later)
2669 whether POSIX PATH CAP is available. We normalize
2670 the / to \ after reset_cifs_unix_caps is called */
2671 pvolume_info->prepath = NULL;
2672 } else
2673 cifs_sb->prepathlen = 0;
2674 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2675 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2676 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2677 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2678 cFYI(1, "file mode: 0x%x dir mode: 0x%x",
2679 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
2680
2681 cifs_sb->actimeo = pvolume_info->actimeo;
2682 cifs_sb->local_nls = pvolume_info->local_nls;
2683
2684 if (pvolume_info->noperm)
2685 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2686 if (pvolume_info->setuids)
2687 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2688 if (pvolume_info->server_ino)
2689 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2690 if (pvolume_info->remap)
2691 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2692 if (pvolume_info->no_xattr)
2693 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2694 if (pvolume_info->sfu_emul)
2695 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2696 if (pvolume_info->nobrl)
2697 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2698 if (pvolume_info->nostrictsync)
2699 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2700 if (pvolume_info->mand_lock)
2701 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2702 if (pvolume_info->cifs_acl)
2703 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2704 if (pvolume_info->override_uid)
2705 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2706 if (pvolume_info->override_gid)
2707 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2708 if (pvolume_info->dynperm)
2709 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2710 if (pvolume_info->fsc)
2711 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
2712 if (pvolume_info->multiuser)
2713 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2714 CIFS_MOUNT_NO_PERM);
2715 if (pvolume_info->strict_io)
2716 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_STRICT_IO;
2717 if (pvolume_info->direct_io) {
2718 cFYI(1, "mounting share using direct i/o");
2719 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2720 }
2721 if (pvolume_info->mfsymlinks) {
2722 if (pvolume_info->sfu_emul) {
2723 cERROR(1, "mount option mfsymlinks ignored if sfu "
2724 "mount option is used");
2725 } else {
2726 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2727 }
2728 }
2729
2730 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2731 cERROR(1, "mount option dynperm ignored if cifsacl "
2732 "mount option supported");
2733 }
2734
2735 /*
2736 * When the server supports very large writes via POSIX extensions, we can
2737 * allow up to 2^24 - PAGE_CACHE_SIZE.
2738 *
2739 * Note that this might make for "interesting" allocation problems during
2740 * writeback however (as we have to allocate an array of pointers for the
2741 * pages). A 16M write means ~32kb page array with PAGE_CACHE_SIZE == 4096.
2742 */
2743 #define CIFS_MAX_WSIZE ((1<<24) - PAGE_CACHE_SIZE)
2744
2745 /*
2746 * When the server doesn't allow large posix writes, default to a wsize of
2747 * 128k - PAGE_CACHE_SIZE -- one page less than the largest frame size
2748 * described in RFC1001. This allows space for the header without going over
2749 * that by default.
2750 */
2751 #define CIFS_MAX_RFC1001_WSIZE (128 * 1024 - PAGE_CACHE_SIZE)
2752
2753 /*
2754 * The default wsize is 1M. find_get_pages seems to return a maximum of 256
2755 * pages in a single call. With PAGE_CACHE_SIZE == 4k, this means we can fill
2756 * a single wsize request with a single call.
2757 */
2758 #define CIFS_DEFAULT_WSIZE (1024 * 1024)
2759
2760 static unsigned int
2761 cifs_negotiate_wsize(struct cifsTconInfo *tcon, struct smb_vol *pvolume_info)
2762 {
2763 __u64 unix_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2764 struct TCP_Server_Info *server = tcon->ses->server;
2765 unsigned int wsize = pvolume_info->wsize ? pvolume_info->wsize :
2766 CIFS_DEFAULT_WSIZE;
2767
2768 /* can server support 24-bit write sizes? (via UNIX extensions) */
2769 if (!tcon->unix_ext || !(unix_cap & CIFS_UNIX_LARGE_WRITE_CAP))
2770 wsize = min_t(unsigned int, wsize, CIFS_MAX_RFC1001_WSIZE);
2771
2772 /* no CAP_LARGE_WRITE_X? Limit it to 16 bits */
2773 if (!(server->capabilities & CAP_LARGE_WRITE_X))
2774 wsize = min_t(unsigned int, wsize, USHRT_MAX);
2775
2776 /* hard limit of CIFS_MAX_WSIZE */
2777 wsize = min_t(unsigned int, wsize, CIFS_MAX_WSIZE);
2778
2779 return wsize;
2780 }
2781
2782 static int
2783 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2784 struct cifs_sb_info *cifs_sb, const char *full_path)
2785 {
2786 int rc;
2787 FILE_ALL_INFO *pfile_info;
2788
2789 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2790 if (pfile_info == NULL)
2791 return -ENOMEM;
2792
2793 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2794 0 /* not legacy */, cifs_sb->local_nls,
2795 cifs_sb->mnt_cifs_flags &
2796 CIFS_MOUNT_MAP_SPECIAL_CHR);
2797
2798 if (rc == -EOPNOTSUPP || rc == -EINVAL)
2799 rc = SMBQueryInformation(xid, tcon, full_path, pfile_info,
2800 cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
2801 CIFS_MOUNT_MAP_SPECIAL_CHR);
2802 kfree(pfile_info);
2803 return rc;
2804 }
2805
2806 void
2807 cifs_cleanup_volume_info(struct smb_vol **pvolume_info)
2808 {
2809 struct smb_vol *volume_info;
2810
2811 if (!pvolume_info || !*pvolume_info)
2812 return;
2813
2814 volume_info = *pvolume_info;
2815 kfree(volume_info->username);
2816 kzfree(volume_info->password);
2817 kfree(volume_info->UNC);
2818 kfree(volume_info->UNCip);
2819 kfree(volume_info->domainname);
2820 kfree(volume_info->iocharset);
2821 kfree(volume_info->prepath);
2822 kfree(volume_info);
2823 *pvolume_info = NULL;
2824 return;
2825 }
2826
2827 #ifdef CONFIG_CIFS_DFS_UPCALL
2828 /* build_path_to_root returns full path to root when
2829 * we do not have an exiting connection (tcon) */
2830 static char *
2831 build_unc_path_to_root(const struct smb_vol *volume_info,
2832 const struct cifs_sb_info *cifs_sb)
2833 {
2834 char *full_path;
2835
2836 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2837 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2838 if (full_path == NULL)
2839 return ERR_PTR(-ENOMEM);
2840
2841 strncpy(full_path, volume_info->UNC, unc_len);
2842 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2843 int i;
2844 for (i = 0; i < unc_len; i++) {
2845 if (full_path[i] == '\\')
2846 full_path[i] = '/';
2847 }
2848 }
2849
2850 if (cifs_sb->prepathlen)
2851 strncpy(full_path + unc_len, cifs_sb->prepath,
2852 cifs_sb->prepathlen);
2853
2854 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2855 return full_path;
2856 }
2857
2858 /*
2859 * Perform a dfs referral query for a share and (optionally) prefix
2860 *
2861 * If a referral is found, cifs_sb->mountdata will be (re-)allocated
2862 * to a string containing updated options for the submount. Otherwise it
2863 * will be left untouched.
2864 *
2865 * Returns the rc from get_dfs_path to the caller, which can be used to
2866 * determine whether there were referrals.
2867 */
2868 static int
2869 expand_dfs_referral(int xid, struct cifsSesInfo *pSesInfo,
2870 struct smb_vol *volume_info, struct cifs_sb_info *cifs_sb,
2871 int check_prefix)
2872 {
2873 int rc;
2874 unsigned int num_referrals = 0;
2875 struct dfs_info3_param *referrals = NULL;
2876 char *full_path = NULL, *ref_path = NULL, *mdata = NULL;
2877
2878 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2879 if (IS_ERR(full_path))
2880 return PTR_ERR(full_path);
2881
2882 /* For DFS paths, skip the first '\' of the UNC */
2883 ref_path = check_prefix ? full_path + 1 : volume_info->UNC + 1;
2884
2885 rc = get_dfs_path(xid, pSesInfo , ref_path, cifs_sb->local_nls,
2886 &num_referrals, &referrals,
2887 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2888
2889 if (!rc && num_referrals > 0) {
2890 char *fake_devname = NULL;
2891
2892 mdata = cifs_compose_mount_options(cifs_sb->mountdata,
2893 full_path + 1, referrals,
2894 &fake_devname);
2895
2896 free_dfs_info_array(referrals, num_referrals);
2897 kfree(fake_devname);
2898
2899 if (cifs_sb->mountdata != NULL)
2900 kfree(cifs_sb->mountdata);
2901
2902 if (IS_ERR(mdata)) {
2903 rc = PTR_ERR(mdata);
2904 mdata = NULL;
2905 }
2906 cifs_sb->mountdata = mdata;
2907 }
2908 kfree(full_path);
2909 return rc;
2910 }
2911 #endif
2912
2913 int cifs_setup_volume_info(struct smb_vol **pvolume_info, char *mount_data,
2914 const char *devname)
2915 {
2916 struct smb_vol *volume_info;
2917 int rc = 0;
2918
2919 *pvolume_info = NULL;
2920
2921 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2922 if (!volume_info) {
2923 rc = -ENOMEM;
2924 goto out;
2925 }
2926
2927 if (cifs_parse_mount_options(mount_data, devname,
2928 volume_info)) {
2929 rc = -EINVAL;
2930 goto out;
2931 }
2932
2933 if (volume_info->nullauth) {
2934 cFYI(1, "null user");
2935 volume_info->username = "";
2936 } else if (volume_info->username) {
2937 /* BB fixme parse for domain name here */
2938 cFYI(1, "Username: %s", volume_info->username);
2939 } else {
2940 cifserror("No username specified");
2941 /* In userspace mount helper we can get user name from alternate
2942 locations such as env variables and files on disk */
2943 rc = -EINVAL;
2944 goto out;
2945 }
2946
2947 /* this is needed for ASCII cp to Unicode converts */
2948 if (volume_info->iocharset == NULL) {
2949 /* load_nls_default cannot return null */
2950 volume_info->local_nls = load_nls_default();
2951 } else {
2952 volume_info->local_nls = load_nls(volume_info->iocharset);
2953 if (volume_info->local_nls == NULL) {
2954 cERROR(1, "CIFS mount error: iocharset %s not found",
2955 volume_info->iocharset);
2956 rc = -ELIBACC;
2957 goto out;
2958 }
2959 }
2960
2961 *pvolume_info = volume_info;
2962 return rc;
2963 out:
2964 cifs_cleanup_volume_info(&volume_info);
2965 return rc;
2966 }
2967
2968 int
2969 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2970 struct smb_vol *volume_info, const char *devname)
2971 {
2972 int rc = 0;
2973 int xid;
2974 struct cifsSesInfo *pSesInfo;
2975 struct cifsTconInfo *tcon;
2976 struct TCP_Server_Info *srvTcp;
2977 char *full_path;
2978 struct tcon_link *tlink;
2979 #ifdef CONFIG_CIFS_DFS_UPCALL
2980 int referral_walks_count = 0;
2981 try_mount_again:
2982 /* cleanup activities if we're chasing a referral */
2983 if (referral_walks_count) {
2984 if (tcon)
2985 cifs_put_tcon(tcon);
2986 else if (pSesInfo)
2987 cifs_put_smb_ses(pSesInfo);
2988
2989 cifs_cleanup_volume_info(&volume_info);
2990 FreeXid(xid);
2991 }
2992 #endif
2993 tcon = NULL;
2994 pSesInfo = NULL;
2995 srvTcp = NULL;
2996 full_path = NULL;
2997 tlink = NULL;
2998
2999 xid = GetXid();
3000
3001 /* get a reference to a tcp session */
3002 srvTcp = cifs_get_tcp_session(volume_info);
3003 if (IS_ERR(srvTcp)) {
3004 rc = PTR_ERR(srvTcp);
3005 goto out;
3006 }
3007
3008 /* get a reference to a SMB session */
3009 pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
3010 if (IS_ERR(pSesInfo)) {
3011 rc = PTR_ERR(pSesInfo);
3012 pSesInfo = NULL;
3013 goto mount_fail_check;
3014 }
3015
3016 if (pSesInfo->capabilities & CAP_LARGE_FILES)
3017 sb->s_maxbytes = MAX_LFS_FILESIZE;
3018 else
3019 sb->s_maxbytes = MAX_NON_LFS;
3020
3021 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
3022 sb->s_time_gran = 100;
3023
3024 /* search for existing tcon to this server share */
3025 tcon = cifs_get_tcon(pSesInfo, volume_info);
3026 if (IS_ERR(tcon)) {
3027 rc = PTR_ERR(tcon);
3028 tcon = NULL;
3029 goto remote_path_check;
3030 }
3031
3032 /* tell server which Unix caps we support */
3033 if (tcon->ses->capabilities & CAP_UNIX) {
3034 /* reset of caps checks mount to see if unix extensions
3035 disabled for just this mount */
3036 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
3037 if ((tcon->ses->server->tcpStatus == CifsNeedReconnect) &&
3038 (le64_to_cpu(tcon->fsUnixInfo.Capability) &
3039 CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)) {
3040 rc = -EACCES;
3041 goto mount_fail_check;
3042 }
3043 } else
3044 tcon->unix_ext = 0; /* server does not support them */
3045
3046 /* do not care if following two calls succeed - informational */
3047 if (!tcon->ipc) {
3048 CIFSSMBQFSDeviceInfo(xid, tcon);
3049 CIFSSMBQFSAttributeInfo(xid, tcon);
3050 }
3051
3052 /* convert forward to back slashes in prepath here if needed */
3053 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
3054 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
3055
3056 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
3057 cifs_sb->rsize = 1024 * 127;
3058 cFYI(DBG2, "no very large read support, rsize now 127K");
3059 }
3060 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
3061 cifs_sb->rsize = min(cifs_sb->rsize,
3062 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
3063
3064 cifs_sb->wsize = cifs_negotiate_wsize(tcon, volume_info);
3065
3066 remote_path_check:
3067 #ifdef CONFIG_CIFS_DFS_UPCALL
3068 /*
3069 * Perform an unconditional check for whether there are DFS
3070 * referrals for this path without prefix, to provide support
3071 * for DFS referrals from w2k8 servers which don't seem to respond
3072 * with PATH_NOT_COVERED to requests that include the prefix.
3073 * Chase the referral if found, otherwise continue normally.
3074 */
3075 if (referral_walks_count == 0) {
3076 int refrc = expand_dfs_referral(xid, pSesInfo, volume_info,
3077 cifs_sb, false);
3078 if (!refrc) {
3079 referral_walks_count++;
3080 goto try_mount_again;
3081 }
3082 }
3083 #endif
3084
3085 /* check if a whole path (including prepath) is not remote */
3086 if (!rc && tcon) {
3087 /* build_path_to_root works only when we have a valid tcon */
3088 full_path = cifs_build_path_to_root(cifs_sb, tcon);
3089 if (full_path == NULL) {
3090 rc = -ENOMEM;
3091 goto mount_fail_check;
3092 }
3093 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
3094 if (rc != 0 && rc != -EREMOTE) {
3095 kfree(full_path);
3096 goto mount_fail_check;
3097 }
3098 kfree(full_path);
3099 }
3100
3101 /* get referral if needed */
3102 if (rc == -EREMOTE) {
3103 #ifdef CONFIG_CIFS_DFS_UPCALL
3104 if (referral_walks_count > MAX_NESTED_LINKS) {
3105 /*
3106 * BB: when we implement proper loop detection,
3107 * we will remove this check. But now we need it
3108 * to prevent an indefinite loop if 'DFS tree' is
3109 * misconfigured (i.e. has loops).
3110 */
3111 rc = -ELOOP;
3112 goto mount_fail_check;
3113 }
3114 /* convert forward to back slashes in prepath here if needed */
3115 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
3116 convert_delimiter(cifs_sb->prepath,
3117 CIFS_DIR_SEP(cifs_sb));
3118
3119 rc = expand_dfs_referral(xid, pSesInfo, volume_info, cifs_sb,
3120 true);
3121
3122 if (!rc) {
3123 referral_walks_count++;
3124 goto try_mount_again;
3125 }
3126 goto mount_fail_check;
3127 #else /* No DFS support, return error on mount */
3128 rc = -EOPNOTSUPP;
3129 #endif
3130 }
3131
3132 if (rc)
3133 goto mount_fail_check;
3134
3135 /* now, hang the tcon off of the superblock */
3136 tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
3137 if (tlink == NULL) {
3138 rc = -ENOMEM;
3139 goto mount_fail_check;
3140 }
3141
3142 tlink->tl_uid = pSesInfo->linux_uid;
3143 tlink->tl_tcon = tcon;
3144 tlink->tl_time = jiffies;
3145 set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
3146 set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3147
3148 cifs_sb->master_tlink = tlink;
3149 spin_lock(&cifs_sb->tlink_tree_lock);
3150 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3151 spin_unlock(&cifs_sb->tlink_tree_lock);
3152
3153 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3154 TLINK_IDLE_EXPIRE);
3155
3156 mount_fail_check:
3157 /* on error free sesinfo and tcon struct if needed */
3158 if (rc) {
3159 /* If find_unc succeeded then rc == 0 so we can not end */
3160 /* up accidentally freeing someone elses tcon struct */
3161 if (tcon)
3162 cifs_put_tcon(tcon);
3163 else if (pSesInfo)
3164 cifs_put_smb_ses(pSesInfo);
3165 else
3166 cifs_put_tcp_session(srvTcp);
3167 goto out;
3168 }
3169
3170 /* volume_info->password is freed above when existing session found
3171 (in which case it is not needed anymore) but when new sesion is created
3172 the password ptr is put in the new session structure (in which case the
3173 password will be freed at unmount time) */
3174 out:
3175 /* zero out password before freeing */
3176 FreeXid(xid);
3177 return rc;
3178 }
3179
3180 int
3181 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
3182 const char *tree, struct cifsTconInfo *tcon,
3183 const struct nls_table *nls_codepage)
3184 {
3185 struct smb_hdr *smb_buffer;
3186 struct smb_hdr *smb_buffer_response;
3187 TCONX_REQ *pSMB;
3188 TCONX_RSP *pSMBr;
3189 unsigned char *bcc_ptr;
3190 int rc = 0;
3191 int length;
3192 __u16 bytes_left, count;
3193
3194 if (ses == NULL)
3195 return -EIO;
3196
3197 smb_buffer = cifs_buf_get();
3198 if (smb_buffer == NULL)
3199 return -ENOMEM;
3200
3201 smb_buffer_response = smb_buffer;
3202
3203 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
3204 NULL /*no tid */ , 4 /*wct */ );
3205
3206 smb_buffer->Mid = GetNextMid(ses->server);
3207 smb_buffer->Uid = ses->Suid;
3208 pSMB = (TCONX_REQ *) smb_buffer;
3209 pSMBr = (TCONX_RSP *) smb_buffer_response;
3210
3211 pSMB->AndXCommand = 0xFF;
3212 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
3213 bcc_ptr = &pSMB->Password[0];
3214 if ((ses->server->secMode) & SECMODE_USER) {
3215 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
3216 *bcc_ptr = 0; /* password is null byte */
3217 bcc_ptr++; /* skip password */
3218 /* already aligned so no need to do it below */
3219 } else {
3220 pSMB->PasswordLength = cpu_to_le16(CIFS_AUTH_RESP_SIZE);
3221 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
3222 specified as required (when that support is added to
3223 the vfs in the future) as only NTLM or the much
3224 weaker LANMAN (which we do not send by default) is accepted
3225 by Samba (not sure whether other servers allow
3226 NTLMv2 password here) */
3227 #ifdef CONFIG_CIFS_WEAK_PW_HASH
3228 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
3229 (ses->server->secType == LANMAN))
3230 calc_lanman_hash(tcon->password, ses->server->cryptkey,
3231 ses->server->secMode &
3232 SECMODE_PW_ENCRYPT ? true : false,
3233 bcc_ptr);
3234 else
3235 #endif /* CIFS_WEAK_PW_HASH */
3236 rc = SMBNTencrypt(tcon->password, ses->server->cryptkey,
3237 bcc_ptr);
3238
3239 bcc_ptr += CIFS_AUTH_RESP_SIZE;
3240 if (ses->capabilities & CAP_UNICODE) {
3241 /* must align unicode strings */
3242 *bcc_ptr = 0; /* null byte password */
3243 bcc_ptr++;
3244 }
3245 }
3246
3247 if (ses->server->secMode &
3248 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
3249 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
3250
3251 if (ses->capabilities & CAP_STATUS32) {
3252 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3253 }
3254 if (ses->capabilities & CAP_DFS) {
3255 smb_buffer->Flags2 |= SMBFLG2_DFS;
3256 }
3257 if (ses->capabilities & CAP_UNICODE) {
3258 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3259 length =
3260 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
3261 6 /* max utf8 char length in bytes */ *
3262 (/* server len*/ + 256 /* share len */), nls_codepage);
3263 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
3264 bcc_ptr += 2; /* skip trailing null */
3265 } else { /* ASCII */
3266 strcpy(bcc_ptr, tree);
3267 bcc_ptr += strlen(tree) + 1;
3268 }
3269 strcpy(bcc_ptr, "?????");
3270 bcc_ptr += strlen("?????");
3271 bcc_ptr += 1;
3272 count = bcc_ptr - &pSMB->Password[0];
3273 pSMB->hdr.smb_buf_length = cpu_to_be32(be32_to_cpu(
3274 pSMB->hdr.smb_buf_length) + count);
3275 pSMB->ByteCount = cpu_to_le16(count);
3276
3277 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
3278 0);
3279
3280 /* above now done in SendReceive */
3281 if ((rc == 0) && (tcon != NULL)) {
3282 bool is_unicode;
3283
3284 tcon->tidStatus = CifsGood;
3285 tcon->need_reconnect = false;
3286 tcon->tid = smb_buffer_response->Tid;
3287 bcc_ptr = pByteArea(smb_buffer_response);
3288 bytes_left = get_bcc(smb_buffer_response);
3289 length = strnlen(bcc_ptr, bytes_left - 2);
3290 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3291 is_unicode = true;
3292 else
3293 is_unicode = false;
3294
3295
3296 /* skip service field (NB: this field is always ASCII) */
3297 if (length == 3) {
3298 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3299 (bcc_ptr[2] == 'C')) {
3300 cFYI(1, "IPC connection");
3301 tcon->ipc = 1;
3302 }
3303 } else if (length == 2) {
3304 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3305 /* the most common case */
3306 cFYI(1, "disk share connection");
3307 }
3308 }
3309 bcc_ptr += length + 1;
3310 bytes_left -= (length + 1);
3311 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
3312
3313 /* mostly informational -- no need to fail on error here */
3314 kfree(tcon->nativeFileSystem);
3315 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
3316 bytes_left, is_unicode,
3317 nls_codepage);
3318
3319 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
3320
3321 if ((smb_buffer_response->WordCount == 3) ||
3322 (smb_buffer_response->WordCount == 7))
3323 /* field is in same location */
3324 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3325 else
3326 tcon->Flags = 0;
3327 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
3328 } else if ((rc == 0) && tcon == NULL) {
3329 /* all we need to save for IPC$ connection */
3330 ses->ipc_tid = smb_buffer_response->Tid;
3331 }
3332
3333 cifs_buf_release(smb_buffer);
3334 return rc;
3335 }
3336
3337 int
3338 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
3339 {
3340 struct rb_root *root = &cifs_sb->tlink_tree;
3341 struct rb_node *node;
3342 struct tcon_link *tlink;
3343 char *tmp;
3344
3345 cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3346
3347 spin_lock(&cifs_sb->tlink_tree_lock);
3348 while ((node = rb_first(root))) {
3349 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3350 cifs_get_tlink(tlink);
3351 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3352 rb_erase(node, root);
3353
3354 spin_unlock(&cifs_sb->tlink_tree_lock);
3355 cifs_put_tlink(tlink);
3356 spin_lock(&cifs_sb->tlink_tree_lock);
3357 }
3358 spin_unlock(&cifs_sb->tlink_tree_lock);
3359
3360 tmp = cifs_sb->prepath;
3361 cifs_sb->prepathlen = 0;
3362 cifs_sb->prepath = NULL;
3363 kfree(tmp);
3364
3365 return 0;
3366 }
3367
3368 int cifs_negotiate_protocol(unsigned int xid, struct cifsSesInfo *ses)
3369 {
3370 int rc = 0;
3371 struct TCP_Server_Info *server = ses->server;
3372
3373 /* only send once per connect */
3374 if (server->maxBuf != 0)
3375 return 0;
3376
3377 rc = CIFSSMBNegotiate(xid, ses);
3378 if (rc == -EAGAIN) {
3379 /* retry only once on 1st time connection */
3380 rc = CIFSSMBNegotiate(xid, ses);
3381 if (rc == -EAGAIN)
3382 rc = -EHOSTDOWN;
3383 }
3384 if (rc == 0) {
3385 spin_lock(&GlobalMid_Lock);
3386 if (server->tcpStatus != CifsExiting)
3387 server->tcpStatus = CifsGood;
3388 else
3389 rc = -EHOSTDOWN;
3390 spin_unlock(&GlobalMid_Lock);
3391
3392 }
3393
3394 return rc;
3395 }
3396
3397
3398 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *ses,
3399 struct nls_table *nls_info)
3400 {
3401 int rc = 0;
3402 struct TCP_Server_Info *server = ses->server;
3403
3404 ses->flags = 0;
3405 ses->capabilities = server->capabilities;
3406 if (linuxExtEnabled == 0)
3407 ses->capabilities &= (~CAP_UNIX);
3408
3409 cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3410 server->secMode, server->capabilities, server->timeAdj);
3411
3412 rc = CIFS_SessSetup(xid, ses, nls_info);
3413 if (rc) {
3414 cERROR(1, "Send error in SessSetup = %d", rc);
3415 } else {
3416 mutex_lock(&ses->server->srv_mutex);
3417 if (!server->session_estab) {
3418 server->session_key.response = ses->auth_key.response;
3419 server->session_key.len = ses->auth_key.len;
3420 server->sequence_number = 0x2;
3421 server->session_estab = true;
3422 ses->auth_key.response = NULL;
3423 }
3424 mutex_unlock(&server->srv_mutex);
3425
3426 cFYI(1, "CIFS Session Established successfully");
3427 spin_lock(&GlobalMid_Lock);
3428 ses->status = CifsGood;
3429 ses->need_reconnect = false;
3430 spin_unlock(&GlobalMid_Lock);
3431 }
3432
3433 kfree(ses->auth_key.response);
3434 ses->auth_key.response = NULL;
3435 ses->auth_key.len = 0;
3436 kfree(ses->ntlmssp);
3437 ses->ntlmssp = NULL;
3438
3439 return rc;
3440 }
3441
3442 static struct cifsTconInfo *
3443 cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3444 {
3445 struct cifsTconInfo *master_tcon = cifs_sb_master_tcon(cifs_sb);
3446 struct cifsSesInfo *ses;
3447 struct cifsTconInfo *tcon = NULL;
3448 struct smb_vol *vol_info;
3449 char username[28]; /* big enough for "krb50x" + hex of ULONG_MAX 6+16 */
3450 /* We used to have this as MAX_USERNAME which is */
3451 /* way too big now (256 instead of 32) */
3452
3453 vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3454 if (vol_info == NULL) {
3455 tcon = ERR_PTR(-ENOMEM);
3456 goto out;
3457 }
3458
3459 snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3460 vol_info->username = username;
3461 vol_info->local_nls = cifs_sb->local_nls;
3462 vol_info->linux_uid = fsuid;
3463 vol_info->cred_uid = fsuid;
3464 vol_info->UNC = master_tcon->treeName;
3465 vol_info->retry = master_tcon->retry;
3466 vol_info->nocase = master_tcon->nocase;
3467 vol_info->local_lease = master_tcon->local_lease;
3468 vol_info->no_linux_ext = !master_tcon->unix_ext;
3469
3470 /* FIXME: allow for other secFlg settings */
3471 vol_info->secFlg = CIFSSEC_MUST_KRB5;
3472
3473 /* get a reference for the same TCP session */
3474 spin_lock(&cifs_tcp_ses_lock);
3475 ++master_tcon->ses->server->srv_count;
3476 spin_unlock(&cifs_tcp_ses_lock);
3477
3478 ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3479 if (IS_ERR(ses)) {
3480 tcon = (struct cifsTconInfo *)ses;
3481 cifs_put_tcp_session(master_tcon->ses->server);
3482 goto out;
3483 }
3484
3485 tcon = cifs_get_tcon(ses, vol_info);
3486 if (IS_ERR(tcon)) {
3487 cifs_put_smb_ses(ses);
3488 goto out;
3489 }
3490
3491 if (ses->capabilities & CAP_UNIX)
3492 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3493 out:
3494 kfree(vol_info);
3495
3496 return tcon;
3497 }
3498
3499 static inline struct tcon_link *
3500 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
3501 {
3502 return cifs_sb->master_tlink;
3503 }
3504
3505 struct cifsTconInfo *
3506 cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3507 {
3508 return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3509 }
3510
3511 static int
3512 cifs_sb_tcon_pending_wait(void *unused)
3513 {
3514 schedule();
3515 return signal_pending(current) ? -ERESTARTSYS : 0;
3516 }
3517
3518 /* find and return a tlink with given uid */
3519 static struct tcon_link *
3520 tlink_rb_search(struct rb_root *root, uid_t uid)
3521 {
3522 struct rb_node *node = root->rb_node;
3523 struct tcon_link *tlink;
3524
3525 while (node) {
3526 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3527
3528 if (tlink->tl_uid > uid)
3529 node = node->rb_left;
3530 else if (tlink->tl_uid < uid)
3531 node = node->rb_right;
3532 else
3533 return tlink;
3534 }
3535 return NULL;
3536 }
3537
3538 /* insert a tcon_link into the tree */
3539 static void
3540 tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
3541 {
3542 struct rb_node **new = &(root->rb_node), *parent = NULL;
3543 struct tcon_link *tlink;
3544
3545 while (*new) {
3546 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
3547 parent = *new;
3548
3549 if (tlink->tl_uid > new_tlink->tl_uid)
3550 new = &((*new)->rb_left);
3551 else
3552 new = &((*new)->rb_right);
3553 }
3554
3555 rb_link_node(&new_tlink->tl_rbnode, parent, new);
3556 rb_insert_color(&new_tlink->tl_rbnode, root);
3557 }
3558
3559 /*
3560 * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3561 * current task.
3562 *
3563 * If the superblock doesn't refer to a multiuser mount, then just return
3564 * the master tcon for the mount.
3565 *
3566 * First, search the rbtree for an existing tcon for this fsuid. If one
3567 * exists, then check to see if it's pending construction. If it is then wait
3568 * for construction to complete. Once it's no longer pending, check to see if
3569 * it failed and either return an error or retry construction, depending on
3570 * the timeout.
3571 *
3572 * If one doesn't exist then insert a new tcon_link struct into the tree and
3573 * try to construct a new one.
3574 */
3575 struct tcon_link *
3576 cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3577 {
3578 int ret;
3579 uid_t fsuid = current_fsuid();
3580 struct tcon_link *tlink, *newtlink;
3581
3582 if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3583 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3584
3585 spin_lock(&cifs_sb->tlink_tree_lock);
3586 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3587 if (tlink)
3588 cifs_get_tlink(tlink);
3589 spin_unlock(&cifs_sb->tlink_tree_lock);
3590
3591 if (tlink == NULL) {
3592 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3593 if (newtlink == NULL)
3594 return ERR_PTR(-ENOMEM);
3595 newtlink->tl_uid = fsuid;
3596 newtlink->tl_tcon = ERR_PTR(-EACCES);
3597 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3598 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3599 cifs_get_tlink(newtlink);
3600
3601 spin_lock(&cifs_sb->tlink_tree_lock);
3602 /* was one inserted after previous search? */
3603 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3604 if (tlink) {
3605 cifs_get_tlink(tlink);
3606 spin_unlock(&cifs_sb->tlink_tree_lock);
3607 kfree(newtlink);
3608 goto wait_for_construction;
3609 }
3610 tlink = newtlink;
3611 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3612 spin_unlock(&cifs_sb->tlink_tree_lock);
3613 } else {
3614 wait_for_construction:
3615 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3616 cifs_sb_tcon_pending_wait,
3617 TASK_INTERRUPTIBLE);
3618 if (ret) {
3619 cifs_put_tlink(tlink);
3620 return ERR_PTR(ret);
3621 }
3622
3623 /* if it's good, return it */
3624 if (!IS_ERR(tlink->tl_tcon))
3625 return tlink;
3626
3627 /* return error if we tried this already recently */
3628 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3629 cifs_put_tlink(tlink);
3630 return ERR_PTR(-EACCES);
3631 }
3632
3633 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3634 goto wait_for_construction;
3635 }
3636
3637 tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3638 clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3639 wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3640
3641 if (IS_ERR(tlink->tl_tcon)) {
3642 cifs_put_tlink(tlink);
3643 return ERR_PTR(-EACCES);
3644 }
3645
3646 return tlink;
3647 }
3648
3649 /*
3650 * periodic workqueue job that scans tcon_tree for a superblock and closes
3651 * out tcons.
3652 */
3653 static void
3654 cifs_prune_tlinks(struct work_struct *work)
3655 {
3656 struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3657 prune_tlinks.work);
3658 struct rb_root *root = &cifs_sb->tlink_tree;
3659 struct rb_node *node = rb_first(root);
3660 struct rb_node *tmp;
3661 struct tcon_link *tlink;
3662
3663 /*
3664 * Because we drop the spinlock in the loop in order to put the tlink
3665 * it's not guarded against removal of links from the tree. The only
3666 * places that remove entries from the tree are this function and
3667 * umounts. Because this function is non-reentrant and is canceled
3668 * before umount can proceed, this is safe.
3669 */
3670 spin_lock(&cifs_sb->tlink_tree_lock);
3671 node = rb_first(root);
3672 while (node != NULL) {
3673 tmp = node;
3674 node = rb_next(tmp);
3675 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
3676
3677 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
3678 atomic_read(&tlink->tl_count) != 0 ||
3679 time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
3680 continue;
3681
3682 cifs_get_tlink(tlink);
3683 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3684 rb_erase(tmp, root);
3685
3686 spin_unlock(&cifs_sb->tlink_tree_lock);
3687 cifs_put_tlink(tlink);
3688 spin_lock(&cifs_sb->tlink_tree_lock);
3689 }
3690 spin_unlock(&cifs_sb->tlink_tree_lock);
3691
3692 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3693 TLINK_IDLE_EXPIRE);
3694 }
Linux 2.6 ibm-acpi/thinkpad-acpi driver git tree