?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
score: Add support for Sunplus S+core architecture
[linux-2.6/kvm.git] / fs / cifs / connect.c
blob97f4311b9a8ea2f40325ac2fda8a2929153402eb
1 /*
2 * fs/cifs/connect.c
3 *
4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
6 *
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
20 */
21 #include <linux/fs.h>
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/pagemap.h>
27 #include <linux/ctype.h>
28 #include <linux/utsname.h>
29 #include <linux/mempool.h>
30 #include <linux/delay.h>
31 #include <linux/completion.h>
32 #include <linux/kthread.h>
33 #include <linux/pagevec.h>
34 #include <linux/freezer.h>
35 #include <linux/namei.h>
36 #include <asm/uaccess.h>
37 #include <asm/processor.h>
38 #include <linux/inet.h>
39 #include <net/ipv6.h>
40 #include "cifspdu.h"
41 #include "cifsglob.h"
42 #include "cifsproto.h"
43 #include "cifs_unicode.h"
44 #include "cifs_debug.h"
45 #include "cifs_fs_sb.h"
46 #include "ntlmssp.h"
47 #include "nterr.h"
48 #include "rfc1002pdu.h"
49 #include "cn_cifs.h"
50
51 #define CIFS_PORT 445
52 #define RFC1001_PORT 139
53
54 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
55 unsigned char *p24);
56
57 extern mempool_t *cifs_req_poolp;
58
59 struct smb_vol {
60 char *username;
61 char *password;
62 char *domainname;
63 char *UNC;
64 char *UNCip;
65 char *iocharset; /* local code page for mapping to and from Unicode */
66 char source_rfc1001_name[16]; /* netbios name of client */
67 char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
68 uid_t linux_uid;
69 gid_t linux_gid;
70 mode_t file_mode;
71 mode_t dir_mode;
72 unsigned secFlg;
73 bool rw:1;
74 bool retry:1;
75 bool intr:1;
76 bool setuids:1;
77 bool override_uid:1;
78 bool override_gid:1;
79 bool dynperm:1;
80 bool noperm:1;
81 bool no_psx_acl:1; /* set if posix acl support should be disabled */
82 bool cifs_acl:1;
83 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
84 bool server_ino:1; /* use inode numbers from server ie UniqueId */
85 bool direct_io:1;
86 bool remap:1; /* set to remap seven reserved chars in filenames */
87 bool posix_paths:1; /* unset to not ask for posix pathnames. */
88 bool no_linux_ext:1;
89 bool sfu_emul:1;
90 bool nullauth:1; /* attempt to authenticate with null user */
91 bool nocase:1; /* request case insensitive filenames */
92 bool nobrl:1; /* disable sending byte range locks to srv */
93 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
94 bool seal:1; /* request transport encryption on share */
95 bool nodfs:1; /* Do not request DFS, even if available */
96 bool local_lease:1; /* check leases only on local system, not remote */
97 bool noblocksnd:1;
98 bool noautotune:1;
99 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
100 unsigned int rsize;
101 unsigned int wsize;
102 unsigned int sockopt;
103 unsigned short int port;
104 char *prepath;
105 };
106
107 static int ipv4_connect(struct TCP_Server_Info *server);
108 static int ipv6_connect(struct TCP_Server_Info *server);
109
110 /*
111 * cifs tcp session reconnection
112 *
113 * mark tcp session as reconnecting so temporarily locked
114 * mark all smb sessions as reconnecting for tcp session
115 * reconnect tcp session
116 * wake up waiters on reconnection? - (not needed currently)
117 */
118 static int
119 cifs_reconnect(struct TCP_Server_Info *server)
120 {
121 int rc = 0;
122 struct list_head *tmp, *tmp2;
123 struct cifsSesInfo *ses;
124 struct cifsTconInfo *tcon;
125 struct mid_q_entry *mid_entry;
126
127 spin_lock(&GlobalMid_Lock);
128 if (server->tcpStatus == CifsExiting) {
129 /* the demux thread will exit normally
130 next time through the loop */
131 spin_unlock(&GlobalMid_Lock);
132 return rc;
133 } else
134 server->tcpStatus = CifsNeedReconnect;
135 spin_unlock(&GlobalMid_Lock);
136 server->maxBuf = 0;
137
138 cFYI(1, ("Reconnecting tcp session"));
139
140 /* before reconnecting the tcp session, mark the smb session (uid)
141 and the tid bad so they are not used until reconnected */
142 read_lock(&cifs_tcp_ses_lock);
143 list_for_each(tmp, &server->smb_ses_list) {
144 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
145 ses->need_reconnect = true;
146 ses->ipc_tid = 0;
147 list_for_each(tmp2, &ses->tcon_list) {
148 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
149 tcon->need_reconnect = true;
150 }
151 }
152 read_unlock(&cifs_tcp_ses_lock);
153 /* do not want to be sending data on a socket we are freeing */
154 mutex_lock(&server->srv_mutex);
155 if (server->ssocket) {
156 cFYI(1, ("State: 0x%x Flags: 0x%lx", server->ssocket->state,
157 server->ssocket->flags));
158 kernel_sock_shutdown(server->ssocket, SHUT_WR);
159 cFYI(1, ("Post shutdown state: 0x%x Flags: 0x%lx",
160 server->ssocket->state,
161 server->ssocket->flags));
162 sock_release(server->ssocket);
163 server->ssocket = NULL;
164 }
165
166 spin_lock(&GlobalMid_Lock);
167 list_for_each(tmp, &server->pending_mid_q) {
168 mid_entry = list_entry(tmp, struct
169 mid_q_entry,
170 qhead);
171 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
172 /* Mark other intransit requests as needing
173 retry so we do not immediately mark the
174 session bad again (ie after we reconnect
175 below) as they timeout too */
176 mid_entry->midState = MID_RETRY_NEEDED;
177 }
178 }
179 spin_unlock(&GlobalMid_Lock);
180 mutex_unlock(&server->srv_mutex);
181
182 while ((server->tcpStatus != CifsExiting) &&
183 (server->tcpStatus != CifsGood)) {
184 try_to_freeze();
185 if (server->addr.sockAddr6.sin6_family == AF_INET6)
186 rc = ipv6_connect(server);
187 else
188 rc = ipv4_connect(server);
189 if (rc) {
190 cFYI(1, ("reconnect error %d", rc));
191 msleep(3000);
192 } else {
193 atomic_inc(&tcpSesReconnectCount);
194 spin_lock(&GlobalMid_Lock);
195 if (server->tcpStatus != CifsExiting)
196 server->tcpStatus = CifsGood;
197 server->sequence_number = 0;
198 spin_unlock(&GlobalMid_Lock);
199 /* atomic_set(&server->inFlight,0);*/
200 wake_up(&server->response_q);
201 }
202 }
203 return rc;
204 }
205
206 /*
207 return codes:
208 0 not a transact2, or all data present
209 >0 transact2 with that much data missing
210 -EINVAL = invalid transact2
211
212 */
213 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
214 {
215 struct smb_t2_rsp *pSMBt;
216 int total_data_size;
217 int data_in_this_rsp;
218 int remaining;
219
220 if (pSMB->Command != SMB_COM_TRANSACTION2)
221 return 0;
222
223 /* check for plausible wct, bcc and t2 data and parm sizes */
224 /* check for parm and data offset going beyond end of smb */
225 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
226 cFYI(1, ("invalid transact2 word count"));
227 return -EINVAL;
228 }
229
230 pSMBt = (struct smb_t2_rsp *)pSMB;
231
232 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
233 data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
234
235 remaining = total_data_size - data_in_this_rsp;
236
237 if (remaining == 0)
238 return 0;
239 else if (remaining < 0) {
240 cFYI(1, ("total data %d smaller than data in frame %d",
241 total_data_size, data_in_this_rsp));
242 return -EINVAL;
243 } else {
244 cFYI(1, ("missing %d bytes from transact2, check next response",
245 remaining));
246 if (total_data_size > maxBufSize) {
247 cERROR(1, ("TotalDataSize %d is over maximum buffer %d",
248 total_data_size, maxBufSize));
249 return -EINVAL;
250 }
251 return remaining;
252 }
253 }
254
255 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
256 {
257 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
258 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
259 int total_data_size;
260 int total_in_buf;
261 int remaining;
262 int total_in_buf2;
263 char *data_area_of_target;
264 char *data_area_of_buf2;
265 __u16 byte_count;
266
267 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
268
269 if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
270 cFYI(1, ("total data size of primary and secondary t2 differ"));
271 }
272
273 total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
274
275 remaining = total_data_size - total_in_buf;
276
277 if (remaining < 0)
278 return -EINVAL;
279
280 if (remaining == 0) /* nothing to do, ignore */
281 return 0;
282
283 total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
284 if (remaining < total_in_buf2) {
285 cFYI(1, ("transact2 2nd response contains too much data"));
286 }
287
288 /* find end of first SMB data area */
289 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
290 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
291 /* validate target area */
292
293 data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
294 le16_to_cpu(pSMB2->t2_rsp.DataOffset);
295
296 data_area_of_target += total_in_buf;
297
298 /* copy second buffer into end of first buffer */
299 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
300 total_in_buf += total_in_buf2;
301 pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
302 byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
303 byte_count += total_in_buf2;
304 BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
305
306 byte_count = pTargetSMB->smb_buf_length;
307 byte_count += total_in_buf2;
308
309 /* BB also add check that we are not beyond maximum buffer size */
310
311 pTargetSMB->smb_buf_length = byte_count;
312
313 if (remaining == total_in_buf2) {
314 cFYI(1, ("found the last secondary response"));
315 return 0; /* we are done */
316 } else /* more responses to go */
317 return 1;
318
319 }
320
321 static int
322 cifs_demultiplex_thread(struct TCP_Server_Info *server)
323 {
324 int length;
325 unsigned int pdu_length, total_read;
326 struct smb_hdr *smb_buffer = NULL;
327 struct smb_hdr *bigbuf = NULL;
328 struct smb_hdr *smallbuf = NULL;
329 struct msghdr smb_msg;
330 struct kvec iov;
331 struct socket *csocket = server->ssocket;
332 struct list_head *tmp;
333 struct cifsSesInfo *ses;
334 struct task_struct *task_to_wake = NULL;
335 struct mid_q_entry *mid_entry;
336 char temp;
337 bool isLargeBuf = false;
338 bool isMultiRsp;
339 int reconnect;
340
341 current->flags |= PF_MEMALLOC;
342 cFYI(1, ("Demultiplex PID: %d", task_pid_nr(current)));
343
344 length = atomic_inc_return(&tcpSesAllocCount);
345 if (length > 1)
346 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
347 GFP_KERNEL);
348
349 set_freezable();
350 while (server->tcpStatus != CifsExiting) {
351 if (try_to_freeze())
352 continue;
353 if (bigbuf == NULL) {
354 bigbuf = cifs_buf_get();
355 if (!bigbuf) {
356 cERROR(1, ("No memory for large SMB response"));
357 msleep(3000);
358 /* retry will check if exiting */
359 continue;
360 }
361 } else if (isLargeBuf) {
362 /* we are reusing a dirty large buf, clear its start */
363 memset(bigbuf, 0, sizeof(struct smb_hdr));
364 }
365
366 if (smallbuf == NULL) {
367 smallbuf = cifs_small_buf_get();
368 if (!smallbuf) {
369 cERROR(1, ("No memory for SMB response"));
370 msleep(1000);
371 /* retry will check if exiting */
372 continue;
373 }
374 /* beginning of smb buffer is cleared in our buf_get */
375 } else /* if existing small buf clear beginning */
376 memset(smallbuf, 0, sizeof(struct smb_hdr));
377
378 isLargeBuf = false;
379 isMultiRsp = false;
380 smb_buffer = smallbuf;
381 iov.iov_base = smb_buffer;
382 iov.iov_len = 4;
383 smb_msg.msg_control = NULL;
384 smb_msg.msg_controllen = 0;
385 pdu_length = 4; /* enough to get RFC1001 header */
386 incomplete_rcv:
387 length =
388 kernel_recvmsg(csocket, &smb_msg,
389 &iov, 1, pdu_length, 0 /* BB other flags? */);
390
391 if (server->tcpStatus == CifsExiting) {
392 break;
393 } else if (server->tcpStatus == CifsNeedReconnect) {
394 cFYI(1, ("Reconnect after server stopped responding"));
395 cifs_reconnect(server);
396 cFYI(1, ("call to reconnect done"));
397 csocket = server->ssocket;
398 continue;
399 } else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
400 msleep(1); /* minimum sleep to prevent looping
401 allowing socket to clear and app threads to set
402 tcpStatus CifsNeedReconnect if server hung */
403 if (pdu_length < 4) {
404 iov.iov_base = (4 - pdu_length) +
405 (char *)smb_buffer;
406 iov.iov_len = pdu_length;
407 smb_msg.msg_control = NULL;
408 smb_msg.msg_controllen = 0;
409 goto incomplete_rcv;
410 } else
411 continue;
412 } else if (length <= 0) {
413 if (server->tcpStatus == CifsNew) {
414 cFYI(1, ("tcp session abend after SMBnegprot"));
415 /* some servers kill the TCP session rather than
416 returning an SMB negprot error, in which
417 case reconnecting here is not going to help,
418 and so simply return error to mount */
419 break;
420 }
421 if (!try_to_freeze() && (length == -EINTR)) {
422 cFYI(1, ("cifsd thread killed"));
423 break;
424 }
425 cFYI(1, ("Reconnect after unexpected peek error %d",
426 length));
427 cifs_reconnect(server);
428 csocket = server->ssocket;
429 wake_up(&server->response_q);
430 continue;
431 } else if (length < pdu_length) {
432 cFYI(1, ("requested %d bytes but only got %d bytes",
433 pdu_length, length));
434 pdu_length -= length;
435 msleep(1);
436 goto incomplete_rcv;
437 }
438
439 /* The right amount was read from socket - 4 bytes */
440 /* so we can now interpret the length field */
441
442 /* the first byte big endian of the length field,
443 is actually not part of the length but the type
444 with the most common, zero, as regular data */
445 temp = *((char *) smb_buffer);
446
447 /* Note that FC 1001 length is big endian on the wire,
448 but we convert it here so it is always manipulated
449 as host byte order */
450 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
451 smb_buffer->smb_buf_length = pdu_length;
452
453 cFYI(1, ("rfc1002 length 0x%x", pdu_length+4));
454
455 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
456 continue;
457 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
458 cFYI(1, ("Good RFC 1002 session rsp"));
459 continue;
460 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
461 /* we get this from Windows 98 instead of
462 an error on SMB negprot response */
463 cFYI(1, ("Negative RFC1002 Session Response Error 0x%x)",
464 pdu_length));
465 if (server->tcpStatus == CifsNew) {
466 /* if nack on negprot (rather than
467 ret of smb negprot error) reconnecting
468 not going to help, ret error to mount */
469 break;
470 } else {
471 /* give server a second to
472 clean up before reconnect attempt */
473 msleep(1000);
474 /* always try 445 first on reconnect
475 since we get NACK on some if we ever
476 connected to port 139 (the NACK is
477 since we do not begin with RFC1001
478 session initialize frame) */
479 server->addr.sockAddr.sin_port =
480 htons(CIFS_PORT);
481 cifs_reconnect(server);
482 csocket = server->ssocket;
483 wake_up(&server->response_q);
484 continue;
485 }
486 } else if (temp != (char) 0) {
487 cERROR(1, ("Unknown RFC 1002 frame"));
488 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
489 length);
490 cifs_reconnect(server);
491 csocket = server->ssocket;
492 continue;
493 }
494
495 /* else we have an SMB response */
496 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
497 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
498 cERROR(1, ("Invalid size SMB length %d pdu_length %d",
499 length, pdu_length+4));
500 cifs_reconnect(server);
501 csocket = server->ssocket;
502 wake_up(&server->response_q);
503 continue;
504 }
505
506 /* else length ok */
507 reconnect = 0;
508
509 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
510 isLargeBuf = true;
511 memcpy(bigbuf, smallbuf, 4);
512 smb_buffer = bigbuf;
513 }
514 length = 0;
515 iov.iov_base = 4 + (char *)smb_buffer;
516 iov.iov_len = pdu_length;
517 for (total_read = 0; total_read < pdu_length;
518 total_read += length) {
519 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
520 pdu_length - total_read, 0);
521 if ((server->tcpStatus == CifsExiting) ||
522 (length == -EINTR)) {
523 /* then will exit */
524 reconnect = 2;
525 break;
526 } else if (server->tcpStatus == CifsNeedReconnect) {
527 cifs_reconnect(server);
528 csocket = server->ssocket;
529 /* Reconnect wakes up rspns q */
530 /* Now we will reread sock */
531 reconnect = 1;
532 break;
533 } else if ((length == -ERESTARTSYS) ||
534 (length == -EAGAIN)) {
535 msleep(1); /* minimum sleep to prevent looping,
536 allowing socket to clear and app
537 threads to set tcpStatus
538 CifsNeedReconnect if server hung*/
539 length = 0;
540 continue;
541 } else if (length <= 0) {
542 cERROR(1, ("Received no data, expecting %d",
543 pdu_length - total_read));
544 cifs_reconnect(server);
545 csocket = server->ssocket;
546 reconnect = 1;
547 break;
548 }
549 }
550 if (reconnect == 2)
551 break;
552 else if (reconnect == 1)
553 continue;
554
555 length += 4; /* account for rfc1002 hdr */
556
557
558 dump_smb(smb_buffer, length);
559 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
560 cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
561 continue;
562 }
563
564
565 task_to_wake = NULL;
566 spin_lock(&GlobalMid_Lock);
567 list_for_each(tmp, &server->pending_mid_q) {
568 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
569
570 if ((mid_entry->mid == smb_buffer->Mid) &&
571 (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
572 (mid_entry->command == smb_buffer->Command)) {
573 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
574 /* We have a multipart transact2 resp */
575 isMultiRsp = true;
576 if (mid_entry->resp_buf) {
577 /* merge response - fix up 1st*/
578 if (coalesce_t2(smb_buffer,
579 mid_entry->resp_buf)) {
580 mid_entry->multiRsp =
581 true;
582 break;
583 } else {
584 /* all parts received */
585 mid_entry->multiEnd =
586 true;
587 goto multi_t2_fnd;
588 }
589 } else {
590 if (!isLargeBuf) {
591 cERROR(1,("1st trans2 resp needs bigbuf"));
592 /* BB maybe we can fix this up, switch
593 to already allocated large buffer? */
594 } else {
595 /* Have first buffer */
596 mid_entry->resp_buf =
597 smb_buffer;
598 mid_entry->largeBuf =
599 true;
600 bigbuf = NULL;
601 }
602 }
603 break;
604 }
605 mid_entry->resp_buf = smb_buffer;
606 mid_entry->largeBuf = isLargeBuf;
607 multi_t2_fnd:
608 task_to_wake = mid_entry->tsk;
609 mid_entry->midState = MID_RESPONSE_RECEIVED;
610 #ifdef CONFIG_CIFS_STATS2
611 mid_entry->when_received = jiffies;
612 #endif
613 /* so we do not time out requests to server
614 which is still responding (since server could
615 be busy but not dead) */
616 server->lstrp = jiffies;
617 break;
618 }
619 }
620 spin_unlock(&GlobalMid_Lock);
621 if (task_to_wake) {
622 /* Was previous buf put in mpx struct for multi-rsp? */
623 if (!isMultiRsp) {
624 /* smb buffer will be freed by user thread */
625 if (isLargeBuf)
626 bigbuf = NULL;
627 else
628 smallbuf = NULL;
629 }
630 wake_up_process(task_to_wake);
631 } else if (!is_valid_oplock_break(smb_buffer, server) &&
632 !isMultiRsp) {
633 cERROR(1, ("No task to wake, unknown frame received! "
634 "NumMids %d", midCount.counter));
635 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
636 sizeof(struct smb_hdr));
637 #ifdef CONFIG_CIFS_DEBUG2
638 cifs_dump_detail(smb_buffer);
639 cifs_dump_mids(server);
640 #endif /* CIFS_DEBUG2 */
641
642 }
643 } /* end while !EXITING */
644
645 /* take it off the list, if it's not already */
646 write_lock(&cifs_tcp_ses_lock);
647 list_del_init(&server->tcp_ses_list);
648 write_unlock(&cifs_tcp_ses_lock);
649
650 spin_lock(&GlobalMid_Lock);
651 server->tcpStatus = CifsExiting;
652 spin_unlock(&GlobalMid_Lock);
653 wake_up_all(&server->response_q);
654
655 /* check if we have blocked requests that need to free */
656 /* Note that cifs_max_pending is normally 50, but
657 can be set at module install time to as little as two */
658 spin_lock(&GlobalMid_Lock);
659 if (atomic_read(&server->inFlight) >= cifs_max_pending)
660 atomic_set(&server->inFlight, cifs_max_pending - 1);
661 /* We do not want to set the max_pending too low or we
662 could end up with the counter going negative */
663 spin_unlock(&GlobalMid_Lock);
664 /* Although there should not be any requests blocked on
665 this queue it can not hurt to be paranoid and try to wake up requests
666 that may haven been blocked when more than 50 at time were on the wire
667 to the same server - they now will see the session is in exit state
668 and get out of SendReceive. */
669 wake_up_all(&server->request_q);
670 /* give those requests time to exit */
671 msleep(125);
672
673 if (server->ssocket) {
674 sock_release(csocket);
675 server->ssocket = NULL;
676 }
677 /* buffer usuallly freed in free_mid - need to free it here on exit */
678 cifs_buf_release(bigbuf);
679 if (smallbuf) /* no sense logging a debug message if NULL */
680 cifs_small_buf_release(smallbuf);
681
682 /*
683 * BB: we shouldn't have to do any of this. It shouldn't be
684 * possible to exit from the thread with active SMB sessions
685 */
686 read_lock(&cifs_tcp_ses_lock);
687 if (list_empty(&server->pending_mid_q)) {
688 /* loop through server session structures attached to this and
689 mark them dead */
690 list_for_each(tmp, &server->smb_ses_list) {
691 ses = list_entry(tmp, struct cifsSesInfo,
692 smb_ses_list);
693 ses->status = CifsExiting;
694 ses->server = NULL;
695 }
696 read_unlock(&cifs_tcp_ses_lock);
697 } else {
698 /* although we can not zero the server struct pointer yet,
699 since there are active requests which may depnd on them,
700 mark the corresponding SMB sessions as exiting too */
701 list_for_each(tmp, &server->smb_ses_list) {
702 ses = list_entry(tmp, struct cifsSesInfo,
703 smb_ses_list);
704 ses->status = CifsExiting;
705 }
706
707 spin_lock(&GlobalMid_Lock);
708 list_for_each(tmp, &server->pending_mid_q) {
709 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
710 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
711 cFYI(1, ("Clearing Mid 0x%x - waking up ",
712 mid_entry->mid));
713 task_to_wake = mid_entry->tsk;
714 if (task_to_wake)
715 wake_up_process(task_to_wake);
716 }
717 }
718 spin_unlock(&GlobalMid_Lock);
719 read_unlock(&cifs_tcp_ses_lock);
720 /* 1/8th of sec is more than enough time for them to exit */
721 msleep(125);
722 }
723
724 if (!list_empty(&server->pending_mid_q)) {
725 /* mpx threads have not exited yet give them
726 at least the smb send timeout time for long ops */
727 /* due to delays on oplock break requests, we need
728 to wait at least 45 seconds before giving up
729 on a request getting a response and going ahead
730 and killing cifsd */
731 cFYI(1, ("Wait for exit from demultiplex thread"));
732 msleep(46000);
733 /* if threads still have not exited they are probably never
734 coming home not much else we can do but free the memory */
735 }
736
737 /* last chance to mark ses pointers invalid
738 if there are any pointing to this (e.g
739 if a crazy root user tried to kill cifsd
740 kernel thread explicitly this might happen) */
741 /* BB: This shouldn't be necessary, see above */
742 read_lock(&cifs_tcp_ses_lock);
743 list_for_each(tmp, &server->smb_ses_list) {
744 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
745 ses->server = NULL;
746 }
747 read_unlock(&cifs_tcp_ses_lock);
748
749 kfree(server->hostname);
750 task_to_wake = xchg(&server->tsk, NULL);
751 kfree(server);
752
753 length = atomic_dec_return(&tcpSesAllocCount);
754 if (length > 0)
755 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
756 GFP_KERNEL);
757
758 /* if server->tsk was NULL then wait for a signal before exiting */
759 if (!task_to_wake) {
760 set_current_state(TASK_INTERRUPTIBLE);
761 while (!signal_pending(current)) {
762 schedule();
763 set_current_state(TASK_INTERRUPTIBLE);
764 }
765 set_current_state(TASK_RUNNING);
766 }
767
768 module_put_and_exit(0);
769 }
770
771 /* extract the host portion of the UNC string */
772 static char *
773 extract_hostname(const char *unc)
774 {
775 const char *src;
776 char *dst, *delim;
777 unsigned int len;
778
779 /* skip double chars at beginning of string */
780 /* BB: check validity of these bytes? */
781 src = unc + 2;
782
783 /* delimiter between hostname and sharename is always '\\' now */
784 delim = strchr(src, '\\');
785 if (!delim)
786 return ERR_PTR(-EINVAL);
787
788 len = delim - src;
789 dst = kmalloc((len + 1), GFP_KERNEL);
790 if (dst == NULL)
791 return ERR_PTR(-ENOMEM);
792
793 memcpy(dst, src, len);
794 dst[len] = '\0';
795
796 return dst;
797 }
798
799 static int
800 cifs_parse_mount_options(char *options, const char *devname,
801 struct smb_vol *vol)
802 {
803 char *value;
804 char *data;
805 unsigned int temp_len, i, j;
806 char separator[2];
807
808 separator[0] = ',';
809 separator[1] = 0;
810
811 if (Local_System_Name[0] != 0)
812 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
813 else {
814 char *nodename = utsname()->nodename;
815 int n = strnlen(nodename, 15);
816 memset(vol->source_rfc1001_name, 0x20, 15);
817 for (i = 0; i < n; i++) {
818 /* does not have to be perfect mapping since field is
819 informational, only used for servers that do not support
820 port 445 and it can be overridden at mount time */
821 vol->source_rfc1001_name[i] = toupper(nodename[i]);
822 }
823 }
824 vol->source_rfc1001_name[15] = 0;
825 /* null target name indicates to use *SMBSERVR default called name
826 if we end up sending RFC1001 session initialize */
827 vol->target_rfc1001_name[0] = 0;
828 vol->linux_uid = current_uid(); /* use current_euid() instead? */
829 vol->linux_gid = current_gid();
830
831 /* default to only allowing write access to owner of the mount */
832 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
833
834 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
835 vol->rw = true;
836 /* default is always to request posix paths. */
837 vol->posix_paths = 1;
838 /* default to using server inode numbers where available */
839 vol->server_ino = 1;
840
841 if (!options)
842 return 1;
843
844 if (strncmp(options, "sep=", 4) == 0) {
845 if (options[4] != 0) {
846 separator[0] = options[4];
847 options += 5;
848 } else {
849 cFYI(1, ("Null separator not allowed"));
850 }
851 }
852
853 while ((data = strsep(&options, separator)) != NULL) {
854 if (!*data)
855 continue;
856 if ((value = strchr(data, '=')) != NULL)
857 *value++ = '\0';
858
859 /* Have to parse this before we parse for "user" */
860 if (strnicmp(data, "user_xattr", 10) == 0) {
861 vol->no_xattr = 0;
862 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
863 vol->no_xattr = 1;
864 } else if (strnicmp(data, "user", 4) == 0) {
865 if (!value) {
866 printk(KERN_WARNING
867 "CIFS: invalid or missing username\n");
868 return 1; /* needs_arg; */
869 } else if (!*value) {
870 /* null user, ie anonymous, authentication */
871 vol->nullauth = 1;
872 }
873 if (strnlen(value, 200) < 200) {
874 vol->username = value;
875 } else {
876 printk(KERN_WARNING "CIFS: username too long\n");
877 return 1;
878 }
879 } else if (strnicmp(data, "pass", 4) == 0) {
880 if (!value) {
881 vol->password = NULL;
882 continue;
883 } else if (value[0] == 0) {
884 /* check if string begins with double comma
885 since that would mean the password really
886 does start with a comma, and would not
887 indicate an empty string */
888 if (value[1] != separator[0]) {
889 vol->password = NULL;
890 continue;
891 }
892 }
893 temp_len = strlen(value);
894 /* removed password length check, NTLM passwords
895 can be arbitrarily long */
896
897 /* if comma in password, the string will be
898 prematurely null terminated. Commas in password are
899 specified across the cifs mount interface by a double
900 comma ie ,, and a comma used as in other cases ie ','
901 as a parameter delimiter/separator is single and due
902 to the strsep above is temporarily zeroed. */
903
904 /* NB: password legally can have multiple commas and
905 the only illegal character in a password is null */
906
907 if ((value[temp_len] == 0) &&
908 (value[temp_len+1] == separator[0])) {
909 /* reinsert comma */
910 value[temp_len] = separator[0];
911 temp_len += 2; /* move after second comma */
912 while (value[temp_len] != 0) {
913 if (value[temp_len] == separator[0]) {
914 if (value[temp_len+1] ==
915 separator[0]) {
916 /* skip second comma */
917 temp_len++;
918 } else {
919 /* single comma indicating start
920 of next parm */
921 break;
922 }
923 }
924 temp_len++;
925 }
926 if (value[temp_len] == 0) {
927 options = NULL;
928 } else {
929 value[temp_len] = 0;
930 /* point option to start of next parm */
931 options = value + temp_len + 1;
932 }
933 /* go from value to value + temp_len condensing
934 double commas to singles. Note that this ends up
935 allocating a few bytes too many, which is ok */
936 vol->password = kzalloc(temp_len, GFP_KERNEL);
937 if (vol->password == NULL) {
938 printk(KERN_WARNING "CIFS: no memory "
939 "for password\n");
940 return 1;
941 }
942 for (i = 0, j = 0; i < temp_len; i++, j++) {
943 vol->password[j] = value[i];
944 if (value[i] == separator[0]
945 && value[i+1] == separator[0]) {
946 /* skip second comma */
947 i++;
948 }
949 }
950 vol->password[j] = 0;
951 } else {
952 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
953 if (vol->password == NULL) {
954 printk(KERN_WARNING "CIFS: no memory "
955 "for password\n");
956 return 1;
957 }
958 strcpy(vol->password, value);
959 }
960 } else if (!strnicmp(data, "ip", 2) ||
961 !strnicmp(data, "addr", 4)) {
962 if (!value || !*value) {
963 vol->UNCip = NULL;
964 } else if (strnlen(value, INET6_ADDRSTRLEN) <
965 INET6_ADDRSTRLEN) {
966 vol->UNCip = value;
967 } else {
968 printk(KERN_WARNING "CIFS: ip address "
969 "too long\n");
970 return 1;
971 }
972 } else if (strnicmp(data, "sec", 3) == 0) {
973 if (!value || !*value) {
974 cERROR(1, ("no security value specified"));
975 continue;
976 } else if (strnicmp(value, "krb5i", 5) == 0) {
977 vol->secFlg |= CIFSSEC_MAY_KRB5 |
978 CIFSSEC_MUST_SIGN;
979 } else if (strnicmp(value, "krb5p", 5) == 0) {
980 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
981 CIFSSEC_MAY_KRB5; */
982 cERROR(1, ("Krb5 cifs privacy not supported"));
983 return 1;
984 } else if (strnicmp(value, "krb5", 4) == 0) {
985 vol->secFlg |= CIFSSEC_MAY_KRB5;
986 #ifdef CONFIG_CIFS_EXPERIMENTAL
987 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
988 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
989 CIFSSEC_MUST_SIGN;
990 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
991 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
992 #endif
993 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
994 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
995 CIFSSEC_MUST_SIGN;
996 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
997 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
998 } else if (strnicmp(value, "ntlmi", 5) == 0) {
999 vol->secFlg |= CIFSSEC_MAY_NTLM |
1000 CIFSSEC_MUST_SIGN;
1001 } else if (strnicmp(value, "ntlm", 4) == 0) {
1002 /* ntlm is default so can be turned off too */
1003 vol->secFlg |= CIFSSEC_MAY_NTLM;
1004 } else if (strnicmp(value, "nontlm", 6) == 0) {
1005 /* BB is there a better way to do this? */
1006 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1007 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1008 } else if (strnicmp(value, "lanman", 6) == 0) {
1009 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1010 #endif
1011 } else if (strnicmp(value, "none", 4) == 0) {
1012 vol->nullauth = 1;
1013 } else {
1014 cERROR(1, ("bad security option: %s", value));
1015 return 1;
1016 }
1017 } else if ((strnicmp(data, "unc", 3) == 0)
1018 || (strnicmp(data, "target", 6) == 0)
1019 || (strnicmp(data, "path", 4) == 0)) {
1020 if (!value || !*value) {
1021 printk(KERN_WARNING "CIFS: invalid path to "
1022 "network resource\n");
1023 return 1; /* needs_arg; */
1024 }
1025 if ((temp_len = strnlen(value, 300)) < 300) {
1026 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1027 if (vol->UNC == NULL)
1028 return 1;
1029 strcpy(vol->UNC, value);
1030 if (strncmp(vol->UNC, "//", 2) == 0) {
1031 vol->UNC[0] = '\\';
1032 vol->UNC[1] = '\\';
1033 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1034 printk(KERN_WARNING
1035 "CIFS: UNC Path does not begin "
1036 "with // or \\\\ \n");
1037 return 1;
1038 }
1039 } else {
1040 printk(KERN_WARNING "CIFS: UNC name too long\n");
1041 return 1;
1042 }
1043 } else if ((strnicmp(data, "domain", 3) == 0)
1044 || (strnicmp(data, "workgroup", 5) == 0)) {
1045 if (!value || !*value) {
1046 printk(KERN_WARNING "CIFS: invalid domain name\n");
1047 return 1; /* needs_arg; */
1048 }
1049 /* BB are there cases in which a comma can be valid in
1050 a domain name and need special handling? */
1051 if (strnlen(value, 256) < 256) {
1052 vol->domainname = value;
1053 cFYI(1, ("Domain name set"));
1054 } else {
1055 printk(KERN_WARNING "CIFS: domain name too "
1056 "long\n");
1057 return 1;
1058 }
1059 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1060 if (!value || !*value) {
1061 printk(KERN_WARNING
1062 "CIFS: invalid path prefix\n");
1063 return 1; /* needs_argument */
1064 }
1065 if ((temp_len = strnlen(value, 1024)) < 1024) {
1066 if (value[0] != '/')
1067 temp_len++; /* missing leading slash */
1068 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1069 if (vol->prepath == NULL)
1070 return 1;
1071 if (value[0] != '/') {
1072 vol->prepath[0] = '/';
1073 strcpy(vol->prepath+1, value);
1074 } else
1075 strcpy(vol->prepath, value);
1076 cFYI(1, ("prefix path %s", vol->prepath));
1077 } else {
1078 printk(KERN_WARNING "CIFS: prefix too long\n");
1079 return 1;
1080 }
1081 } else if (strnicmp(data, "iocharset", 9) == 0) {
1082 if (!value || !*value) {
1083 printk(KERN_WARNING "CIFS: invalid iocharset "
1084 "specified\n");
1085 return 1; /* needs_arg; */
1086 }
1087 if (strnlen(value, 65) < 65) {
1088 if (strnicmp(value, "default", 7))
1089 vol->iocharset = value;
1090 /* if iocharset not set then load_nls_default
1091 is used by caller */
1092 cFYI(1, ("iocharset set to %s", value));
1093 } else {
1094 printk(KERN_WARNING "CIFS: iocharset name "
1095 "too long.\n");
1096 return 1;
1097 }
1098 } else if (strnicmp(data, "uid", 3) == 0) {
1099 if (value && *value)
1100 vol->linux_uid =
1101 simple_strtoul(value, &value, 0);
1102 } else if (strnicmp(data, "forceuid", 8) == 0) {
1103 vol->override_uid = 1;
1104 } else if (strnicmp(data, "gid", 3) == 0) {
1105 if (value && *value)
1106 vol->linux_gid =
1107 simple_strtoul(value, &value, 0);
1108 } else if (strnicmp(data, "forcegid", 8) == 0) {
1109 vol->override_gid = 1;
1110 } else if (strnicmp(data, "file_mode", 4) == 0) {
1111 if (value && *value) {
1112 vol->file_mode =
1113 simple_strtoul(value, &value, 0);
1114 }
1115 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1116 if (value && *value) {
1117 vol->dir_mode =
1118 simple_strtoul(value, &value, 0);
1119 }
1120 } else if (strnicmp(data, "dirmode", 4) == 0) {
1121 if (value && *value) {
1122 vol->dir_mode =
1123 simple_strtoul(value, &value, 0);
1124 }
1125 } else if (strnicmp(data, "port", 4) == 0) {
1126 if (value && *value) {
1127 vol->port =
1128 simple_strtoul(value, &value, 0);
1129 }
1130 } else if (strnicmp(data, "rsize", 5) == 0) {
1131 if (value && *value) {
1132 vol->rsize =
1133 simple_strtoul(value, &value, 0);
1134 }
1135 } else if (strnicmp(data, "wsize", 5) == 0) {
1136 if (value && *value) {
1137 vol->wsize =
1138 simple_strtoul(value, &value, 0);
1139 }
1140 } else if (strnicmp(data, "sockopt", 5) == 0) {
1141 if (value && *value) {
1142 vol->sockopt =
1143 simple_strtoul(value, &value, 0);
1144 }
1145 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1146 if (!value || !*value || (*value == ' ')) {
1147 cFYI(1, ("invalid (empty) netbiosname"));
1148 } else {
1149 memset(vol->source_rfc1001_name, 0x20, 15);
1150 for (i = 0; i < 15; i++) {
1151 /* BB are there cases in which a comma can be
1152 valid in this workstation netbios name (and need
1153 special handling)? */
1154
1155 /* We do not uppercase netbiosname for user */
1156 if (value[i] == 0)
1157 break;
1158 else
1159 vol->source_rfc1001_name[i] =
1160 value[i];
1161 }
1162 /* The string has 16th byte zero still from
1163 set at top of the function */
1164 if ((i == 15) && (value[i] != 0))
1165 printk(KERN_WARNING "CIFS: netbiosname"
1166 " longer than 15 truncated.\n");
1167 }
1168 } else if (strnicmp(data, "servern", 7) == 0) {
1169 /* servernetbiosname specified override *SMBSERVER */
1170 if (!value || !*value || (*value == ' ')) {
1171 cFYI(1, ("empty server netbiosname specified"));
1172 } else {
1173 /* last byte, type, is 0x20 for servr type */
1174 memset(vol->target_rfc1001_name, 0x20, 16);
1175
1176 for (i = 0; i < 15; i++) {
1177 /* BB are there cases in which a comma can be
1178 valid in this workstation netbios name
1179 (and need special handling)? */
1180
1181 /* user or mount helper must uppercase
1182 the netbiosname */
1183 if (value[i] == 0)
1184 break;
1185 else
1186 vol->target_rfc1001_name[i] =
1187 value[i];
1188 }
1189 /* The string has 16th byte zero still from
1190 set at top of the function */
1191 if ((i == 15) && (value[i] != 0))
1192 printk(KERN_WARNING "CIFS: server net"
1193 "biosname longer than 15 truncated.\n");
1194 }
1195 } else if (strnicmp(data, "credentials", 4) == 0) {
1196 /* ignore */
1197 } else if (strnicmp(data, "version", 3) == 0) {
1198 /* ignore */
1199 } else if (strnicmp(data, "guest", 5) == 0) {
1200 /* ignore */
1201 } else if (strnicmp(data, "rw", 2) == 0) {
1202 vol->rw = true;
1203 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1204 vol->noblocksnd = 1;
1205 } else if (strnicmp(data, "noautotune", 10) == 0) {
1206 vol->noautotune = 1;
1207 } else if ((strnicmp(data, "suid", 4) == 0) ||
1208 (strnicmp(data, "nosuid", 6) == 0) ||
1209 (strnicmp(data, "exec", 4) == 0) ||
1210 (strnicmp(data, "noexec", 6) == 0) ||
1211 (strnicmp(data, "nodev", 5) == 0) ||
1212 (strnicmp(data, "noauto", 6) == 0) ||
1213 (strnicmp(data, "dev", 3) == 0)) {
1214 /* The mount tool or mount.cifs helper (if present)
1215 uses these opts to set flags, and the flags are read
1216 by the kernel vfs layer before we get here (ie
1217 before read super) so there is no point trying to
1218 parse these options again and set anything and it
1219 is ok to just ignore them */
1220 continue;
1221 } else if (strnicmp(data, "ro", 2) == 0) {
1222 vol->rw = false;
1223 } else if (strnicmp(data, "hard", 4) == 0) {
1224 vol->retry = 1;
1225 } else if (strnicmp(data, "soft", 4) == 0) {
1226 vol->retry = 0;
1227 } else if (strnicmp(data, "perm", 4) == 0) {
1228 vol->noperm = 0;
1229 } else if (strnicmp(data, "noperm", 6) == 0) {
1230 vol->noperm = 1;
1231 } else if (strnicmp(data, "mapchars", 8) == 0) {
1232 vol->remap = 1;
1233 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1234 vol->remap = 0;
1235 } else if (strnicmp(data, "sfu", 3) == 0) {
1236 vol->sfu_emul = 1;
1237 } else if (strnicmp(data, "nosfu", 5) == 0) {
1238 vol->sfu_emul = 0;
1239 } else if (strnicmp(data, "nodfs", 5) == 0) {
1240 vol->nodfs = 1;
1241 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1242 vol->posix_paths = 1;
1243 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1244 vol->posix_paths = 0;
1245 } else if (strnicmp(data, "nounix", 6) == 0) {
1246 vol->no_linux_ext = 1;
1247 } else if (strnicmp(data, "nolinux", 7) == 0) {
1248 vol->no_linux_ext = 1;
1249 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1250 (strnicmp(data, "ignorecase", 10) == 0)) {
1251 vol->nocase = 1;
1252 } else if (strnicmp(data, "brl", 3) == 0) {
1253 vol->nobrl = 0;
1254 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1255 (strnicmp(data, "nolock", 6) == 0)) {
1256 vol->nobrl = 1;
1257 /* turn off mandatory locking in mode
1258 if remote locking is turned off since the
1259 local vfs will do advisory */
1260 if (vol->file_mode ==
1261 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1262 vol->file_mode = S_IALLUGO;
1263 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1264 /* will take the shorter form "forcemand" as well */
1265 /* This mount option will force use of mandatory
1266 (DOS/Windows style) byte range locks, instead of
1267 using posix advisory byte range locks, even if the
1268 Unix extensions are available and posix locks would
1269 be supported otherwise. If Unix extensions are not
1270 negotiated this has no effect since mandatory locks
1271 would be used (mandatory locks is all that those
1272 those servers support) */
1273 vol->mand_lock = 1;
1274 } else if (strnicmp(data, "setuids", 7) == 0) {
1275 vol->setuids = 1;
1276 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1277 vol->setuids = 0;
1278 } else if (strnicmp(data, "dynperm", 7) == 0) {
1279 vol->dynperm = true;
1280 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1281 vol->dynperm = false;
1282 } else if (strnicmp(data, "nohard", 6) == 0) {
1283 vol->retry = 0;
1284 } else if (strnicmp(data, "nosoft", 6) == 0) {
1285 vol->retry = 1;
1286 } else if (strnicmp(data, "nointr", 6) == 0) {
1287 vol->intr = 0;
1288 } else if (strnicmp(data, "intr", 4) == 0) {
1289 vol->intr = 1;
1290 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1291 vol->nostrictsync = 1;
1292 } else if (strnicmp(data, "strictsync", 10) == 0) {
1293 vol->nostrictsync = 0;
1294 } else if (strnicmp(data, "serverino", 7) == 0) {
1295 vol->server_ino = 1;
1296 } else if (strnicmp(data, "noserverino", 9) == 0) {
1297 vol->server_ino = 0;
1298 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1299 vol->cifs_acl = 1;
1300 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1301 vol->cifs_acl = 0;
1302 } else if (strnicmp(data, "acl", 3) == 0) {
1303 vol->no_psx_acl = 0;
1304 } else if (strnicmp(data, "noacl", 5) == 0) {
1305 vol->no_psx_acl = 1;
1306 #ifdef CONFIG_CIFS_EXPERIMENTAL
1307 } else if (strnicmp(data, "locallease", 6) == 0) {
1308 vol->local_lease = 1;
1309 #endif
1310 } else if (strnicmp(data, "sign", 4) == 0) {
1311 vol->secFlg |= CIFSSEC_MUST_SIGN;
1312 } else if (strnicmp(data, "seal", 4) == 0) {
1313 /* we do not do the following in secFlags because seal
1314 is a per tree connection (mount) not a per socket
1315 or per-smb connection option in the protocol */
1316 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1317 vol->seal = 1;
1318 } else if (strnicmp(data, "direct", 6) == 0) {
1319 vol->direct_io = 1;
1320 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1321 vol->direct_io = 1;
1322 } else if (strnicmp(data, "noac", 4) == 0) {
1323 printk(KERN_WARNING "CIFS: Mount option noac not "
1324 "supported. Instead set "
1325 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1326 } else
1327 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1328 data);
1329 }
1330 if (vol->UNC == NULL) {
1331 if (devname == NULL) {
1332 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1333 "target\n");
1334 return 1;
1335 }
1336 if ((temp_len = strnlen(devname, 300)) < 300) {
1337 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1338 if (vol->UNC == NULL)
1339 return 1;
1340 strcpy(vol->UNC, devname);
1341 if (strncmp(vol->UNC, "//", 2) == 0) {
1342 vol->UNC[0] = '\\';
1343 vol->UNC[1] = '\\';
1344 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1345 printk(KERN_WARNING "CIFS: UNC Path does not "
1346 "begin with // or \\\\ \n");
1347 return 1;
1348 }
1349 value = strpbrk(vol->UNC+2, "/\\");
1350 if (value)
1351 *value = '\\';
1352 } else {
1353 printk(KERN_WARNING "CIFS: UNC name too long\n");
1354 return 1;
1355 }
1356 }
1357 if (vol->UNCip == NULL)
1358 vol->UNCip = &vol->UNC[2];
1359
1360 return 0;
1361 }
1362
1363 static struct TCP_Server_Info *
1364 cifs_find_tcp_session(struct sockaddr_storage *addr)
1365 {
1366 struct list_head *tmp;
1367 struct TCP_Server_Info *server;
1368 struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
1369 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
1370
1371 write_lock(&cifs_tcp_ses_lock);
1372 list_for_each(tmp, &cifs_tcp_ses_list) {
1373 server = list_entry(tmp, struct TCP_Server_Info,
1374 tcp_ses_list);
1375 /*
1376 * the demux thread can exit on its own while still in CifsNew
1377 * so don't accept any sockets in that state. Since the
1378 * tcpStatus never changes back to CifsNew it's safe to check
1379 * for this without a lock.
1380 */
1381 if (server->tcpStatus == CifsNew)
1382 continue;
1383
1384 if (addr->ss_family == AF_INET &&
1385 (addr4->sin_addr.s_addr !=
1386 server->addr.sockAddr.sin_addr.s_addr))
1387 continue;
1388 else if (addr->ss_family == AF_INET6 &&
1389 !ipv6_addr_equal(&server->addr.sockAddr6.sin6_addr,
1390 &addr6->sin6_addr))
1391 continue;
1392
1393 ++server->srv_count;
1394 write_unlock(&cifs_tcp_ses_lock);
1395 cFYI(1, ("Existing tcp session with server found"));
1396 return server;
1397 }
1398 write_unlock(&cifs_tcp_ses_lock);
1399 return NULL;
1400 }
1401
1402 static void
1403 cifs_put_tcp_session(struct TCP_Server_Info *server)
1404 {
1405 struct task_struct *task;
1406
1407 write_lock(&cifs_tcp_ses_lock);
1408 if (--server->srv_count > 0) {
1409 write_unlock(&cifs_tcp_ses_lock);
1410 return;
1411 }
1412
1413 list_del_init(&server->tcp_ses_list);
1414 write_unlock(&cifs_tcp_ses_lock);
1415
1416 spin_lock(&GlobalMid_Lock);
1417 server->tcpStatus = CifsExiting;
1418 spin_unlock(&GlobalMid_Lock);
1419
1420 task = xchg(&server->tsk, NULL);
1421 if (task)
1422 force_sig(SIGKILL, task);
1423 }
1424
1425 static struct TCP_Server_Info *
1426 cifs_get_tcp_session(struct smb_vol *volume_info)
1427 {
1428 struct TCP_Server_Info *tcp_ses = NULL;
1429 struct sockaddr_storage addr;
1430 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1431 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1432 int rc;
1433
1434 memset(&addr, 0, sizeof(struct sockaddr_storage));
1435
1436 if (volume_info->UNCip && volume_info->UNC) {
1437 rc = cifs_inet_pton(AF_INET, volume_info->UNCip,
1438 &sin_server->sin_addr.s_addr);
1439
1440 if (rc <= 0) {
1441 /* not ipv4 address, try ipv6 */
1442 rc = cifs_inet_pton(AF_INET6, volume_info->UNCip,
1443 &sin_server6->sin6_addr.in6_u);
1444 if (rc > 0)
1445 addr.ss_family = AF_INET6;
1446 } else {
1447 addr.ss_family = AF_INET;
1448 }
1449
1450 if (rc <= 0) {
1451 /* we failed translating address */
1452 rc = -EINVAL;
1453 goto out_err;
1454 }
1455
1456 cFYI(1, ("UNC: %s ip: %s", volume_info->UNC,
1457 volume_info->UNCip));
1458 } else if (volume_info->UNCip) {
1459 /* BB using ip addr as tcp_ses name to connect to the
1460 DFS root below */
1461 cERROR(1, ("Connecting to DFS root not implemented yet"));
1462 rc = -EINVAL;
1463 goto out_err;
1464 } else /* which tcp_sess DFS root would we conect to */ {
1465 cERROR(1,
1466 ("CIFS mount error: No UNC path (e.g. -o "
1467 "unc=//192.168.1.100/public) specified"));
1468 rc = -EINVAL;
1469 goto out_err;
1470 }
1471
1472 /* see if we already have a matching tcp_ses */
1473 tcp_ses = cifs_find_tcp_session(&addr);
1474 if (tcp_ses)
1475 return tcp_ses;
1476
1477 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1478 if (!tcp_ses) {
1479 rc = -ENOMEM;
1480 goto out_err;
1481 }
1482
1483 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1484 if (IS_ERR(tcp_ses->hostname)) {
1485 rc = PTR_ERR(tcp_ses->hostname);
1486 goto out_err;
1487 }
1488
1489 tcp_ses->noblocksnd = volume_info->noblocksnd;
1490 tcp_ses->noautotune = volume_info->noautotune;
1491 atomic_set(&tcp_ses->inFlight, 0);
1492 init_waitqueue_head(&tcp_ses->response_q);
1493 init_waitqueue_head(&tcp_ses->request_q);
1494 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1495 mutex_init(&tcp_ses->srv_mutex);
1496 memcpy(tcp_ses->workstation_RFC1001_name,
1497 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1498 memcpy(tcp_ses->server_RFC1001_name,
1499 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1500 tcp_ses->sequence_number = 0;
1501 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1502 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1503
1504 /*
1505 * at this point we are the only ones with the pointer
1506 * to the struct since the kernel thread not created yet
1507 * no need to spinlock this init of tcpStatus or srv_count
1508 */
1509 tcp_ses->tcpStatus = CifsNew;
1510 ++tcp_ses->srv_count;
1511
1512 if (addr.ss_family == AF_INET6) {
1513 cFYI(1, ("attempting ipv6 connect"));
1514 /* BB should we allow ipv6 on port 139? */
1515 /* other OS never observed in Wild doing 139 with v6 */
1516 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1517 sizeof(struct sockaddr_in6));
1518 sin_server6->sin6_port = htons(volume_info->port);
1519 rc = ipv6_connect(tcp_ses);
1520 } else {
1521 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1522 sizeof(struct sockaddr_in));
1523 sin_server->sin_port = htons(volume_info->port);
1524 rc = ipv4_connect(tcp_ses);
1525 }
1526 if (rc < 0) {
1527 cERROR(1, ("Error connecting to socket. Aborting operation"));
1528 goto out_err;
1529 }
1530
1531 /*
1532 * since we're in a cifs function already, we know that
1533 * this will succeed. No need for try_module_get().
1534 */
1535 __module_get(THIS_MODULE);
1536 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1537 tcp_ses, "cifsd");
1538 if (IS_ERR(tcp_ses->tsk)) {
1539 rc = PTR_ERR(tcp_ses->tsk);
1540 cERROR(1, ("error %d create cifsd thread", rc));
1541 module_put(THIS_MODULE);
1542 goto out_err;
1543 }
1544
1545 /* thread spawned, put it on the list */
1546 write_lock(&cifs_tcp_ses_lock);
1547 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1548 write_unlock(&cifs_tcp_ses_lock);
1549
1550 return tcp_ses;
1551
1552 out_err:
1553 if (tcp_ses) {
1554 kfree(tcp_ses->hostname);
1555 if (tcp_ses->ssocket)
1556 sock_release(tcp_ses->ssocket);
1557 kfree(tcp_ses);
1558 }
1559 return ERR_PTR(rc);
1560 }
1561
1562 static struct cifsSesInfo *
1563 cifs_find_smb_ses(struct TCP_Server_Info *server, char *username)
1564 {
1565 struct list_head *tmp;
1566 struct cifsSesInfo *ses;
1567
1568 write_lock(&cifs_tcp_ses_lock);
1569 list_for_each(tmp, &server->smb_ses_list) {
1570 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
1571 if (strncmp(ses->userName, username, MAX_USERNAME_SIZE))
1572 continue;
1573
1574 ++ses->ses_count;
1575 write_unlock(&cifs_tcp_ses_lock);
1576 return ses;
1577 }
1578 write_unlock(&cifs_tcp_ses_lock);
1579 return NULL;
1580 }
1581
1582 static void
1583 cifs_put_smb_ses(struct cifsSesInfo *ses)
1584 {
1585 int xid;
1586 struct TCP_Server_Info *server = ses->server;
1587
1588 write_lock(&cifs_tcp_ses_lock);
1589 if (--ses->ses_count > 0) {
1590 write_unlock(&cifs_tcp_ses_lock);
1591 return;
1592 }
1593
1594 list_del_init(&ses->smb_ses_list);
1595 write_unlock(&cifs_tcp_ses_lock);
1596
1597 if (ses->status == CifsGood) {
1598 xid = GetXid();
1599 CIFSSMBLogoff(xid, ses);
1600 _FreeXid(xid);
1601 }
1602 sesInfoFree(ses);
1603 cifs_put_tcp_session(server);
1604 }
1605
1606 static struct cifsTconInfo *
1607 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1608 {
1609 struct list_head *tmp;
1610 struct cifsTconInfo *tcon;
1611
1612 write_lock(&cifs_tcp_ses_lock);
1613 list_for_each(tmp, &ses->tcon_list) {
1614 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1615 if (tcon->tidStatus == CifsExiting)
1616 continue;
1617 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1618 continue;
1619
1620 ++tcon->tc_count;
1621 write_unlock(&cifs_tcp_ses_lock);
1622 return tcon;
1623 }
1624 write_unlock(&cifs_tcp_ses_lock);
1625 return NULL;
1626 }
1627
1628 static void
1629 cifs_put_tcon(struct cifsTconInfo *tcon)
1630 {
1631 int xid;
1632 struct cifsSesInfo *ses = tcon->ses;
1633
1634 write_lock(&cifs_tcp_ses_lock);
1635 if (--tcon->tc_count > 0) {
1636 write_unlock(&cifs_tcp_ses_lock);
1637 return;
1638 }
1639
1640 list_del_init(&tcon->tcon_list);
1641 write_unlock(&cifs_tcp_ses_lock);
1642
1643 xid = GetXid();
1644 CIFSSMBTDis(xid, tcon);
1645 _FreeXid(xid);
1646
1647 DeleteTconOplockQEntries(tcon);
1648 tconInfoFree(tcon);
1649 cifs_put_smb_ses(ses);
1650 }
1651
1652 int
1653 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
1654 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
1655 struct dfs_info3_param **preferrals, int remap)
1656 {
1657 char *temp_unc;
1658 int rc = 0;
1659
1660 *pnum_referrals = 0;
1661 *preferrals = NULL;
1662
1663 if (pSesInfo->ipc_tid == 0) {
1664 temp_unc = kmalloc(2 /* for slashes */ +
1665 strnlen(pSesInfo->serverName,
1666 SERVER_NAME_LEN_WITH_NULL * 2)
1667 + 1 + 4 /* slash IPC$ */ + 2,
1668 GFP_KERNEL);
1669 if (temp_unc == NULL)
1670 return -ENOMEM;
1671 temp_unc[0] = '\\';
1672 temp_unc[1] = '\\';
1673 strcpy(temp_unc + 2, pSesInfo->serverName);
1674 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
1675 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1676 cFYI(1,
1677 ("CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid));
1678 kfree(temp_unc);
1679 }
1680 if (rc == 0)
1681 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
1682 pnum_referrals, nls_codepage, remap);
1683 /* BB map targetUNCs to dfs_info3 structures, here or
1684 in CIFSGetDFSRefer BB */
1685
1686 return rc;
1687 }
1688
1689 #ifdef CONFIG_DEBUG_LOCK_ALLOC
1690 static struct lock_class_key cifs_key[2];
1691 static struct lock_class_key cifs_slock_key[2];
1692
1693 static inline void
1694 cifs_reclassify_socket4(struct socket *sock)
1695 {
1696 struct sock *sk = sock->sk;
1697 BUG_ON(sock_owned_by_user(sk));
1698 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
1699 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
1700 }
1701
1702 static inline void
1703 cifs_reclassify_socket6(struct socket *sock)
1704 {
1705 struct sock *sk = sock->sk;
1706 BUG_ON(sock_owned_by_user(sk));
1707 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
1708 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
1709 }
1710 #else
1711 static inline void
1712 cifs_reclassify_socket4(struct socket *sock)
1713 {
1714 }
1715
1716 static inline void
1717 cifs_reclassify_socket6(struct socket *sock)
1718 {
1719 }
1720 #endif
1721
1722 /* See RFC1001 section 14 on representation of Netbios names */
1723 static void rfc1002mangle(char *target, char *source, unsigned int length)
1724 {
1725 unsigned int i, j;
1726
1727 for (i = 0, j = 0; i < (length); i++) {
1728 /* mask a nibble at a time and encode */
1729 target[j] = 'A' + (0x0F & (source[i] >> 4));
1730 target[j+1] = 'A' + (0x0F & source[i]);
1731 j += 2;
1732 }
1733
1734 }
1735
1736
1737 static int
1738 ipv4_connect(struct TCP_Server_Info *server)
1739 {
1740 int rc = 0;
1741 bool connected = false;
1742 __be16 orig_port = 0;
1743 struct socket *socket = server->ssocket;
1744
1745 if (socket == NULL) {
1746 rc = sock_create_kern(PF_INET, SOCK_STREAM,
1747 IPPROTO_TCP, &socket);
1748 if (rc < 0) {
1749 cERROR(1, ("Error %d creating socket", rc));
1750 return rc;
1751 }
1752
1753 /* BB other socket options to set KEEPALIVE, NODELAY? */
1754 cFYI(1, ("Socket created"));
1755 server->ssocket = socket;
1756 socket->sk->sk_allocation = GFP_NOFS;
1757 cifs_reclassify_socket4(socket);
1758 }
1759
1760 /* user overrode default port */
1761 if (server->addr.sockAddr.sin_port) {
1762 rc = socket->ops->connect(socket, (struct sockaddr *)
1763 &server->addr.sockAddr,
1764 sizeof(struct sockaddr_in), 0);
1765 if (rc >= 0)
1766 connected = true;
1767 }
1768
1769 if (!connected) {
1770 /* save original port so we can retry user specified port
1771 later if fall back ports fail this time */
1772 orig_port = server->addr.sockAddr.sin_port;
1773
1774 /* do not retry on the same port we just failed on */
1775 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
1776 server->addr.sockAddr.sin_port = htons(CIFS_PORT);
1777 rc = socket->ops->connect(socket,
1778 (struct sockaddr *)
1779 &server->addr.sockAddr,
1780 sizeof(struct sockaddr_in), 0);
1781 if (rc >= 0)
1782 connected = true;
1783 }
1784 }
1785 if (!connected) {
1786 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
1787 rc = socket->ops->connect(socket, (struct sockaddr *)
1788 &server->addr.sockAddr,
1789 sizeof(struct sockaddr_in), 0);
1790 if (rc >= 0)
1791 connected = true;
1792 }
1793
1794 /* give up here - unless we want to retry on different
1795 protocol families some day */
1796 if (!connected) {
1797 if (orig_port)
1798 server->addr.sockAddr.sin_port = orig_port;
1799 cFYI(1, ("Error %d connecting to server via ipv4", rc));
1800 sock_release(socket);
1801 server->ssocket = NULL;
1802 return rc;
1803 }
1804
1805
1806 /*
1807 * Eventually check for other socket options to change from
1808 * the default. sock_setsockopt not used because it expects
1809 * user space buffer
1810 */
1811 socket->sk->sk_rcvtimeo = 7 * HZ;
1812 socket->sk->sk_sndtimeo = 5 * HZ;
1813
1814 /* make the bufsizes depend on wsize/rsize and max requests */
1815 if (server->noautotune) {
1816 if (socket->sk->sk_sndbuf < (200 * 1024))
1817 socket->sk->sk_sndbuf = 200 * 1024;
1818 if (socket->sk->sk_rcvbuf < (140 * 1024))
1819 socket->sk->sk_rcvbuf = 140 * 1024;
1820 }
1821
1822 cFYI(1, ("sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
1823 socket->sk->sk_sndbuf,
1824 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo));
1825
1826 /* send RFC1001 sessinit */
1827 if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
1828 /* some servers require RFC1001 sessinit before sending
1829 negprot - BB check reconnection in case where second
1830 sessinit is sent but no second negprot */
1831 struct rfc1002_session_packet *ses_init_buf;
1832 struct smb_hdr *smb_buf;
1833 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
1834 GFP_KERNEL);
1835 if (ses_init_buf) {
1836 ses_init_buf->trailer.session_req.called_len = 32;
1837 if (server->server_RFC1001_name &&
1838 server->server_RFC1001_name[0] != 0)
1839 rfc1002mangle(ses_init_buf->trailer.
1840 session_req.called_name,
1841 server->server_RFC1001_name,
1842 RFC1001_NAME_LEN_WITH_NULL);
1843 else
1844 rfc1002mangle(ses_init_buf->trailer.
1845 session_req.called_name,
1846 DEFAULT_CIFS_CALLED_NAME,
1847 RFC1001_NAME_LEN_WITH_NULL);
1848
1849 ses_init_buf->trailer.session_req.calling_len = 32;
1850
1851 /* calling name ends in null (byte 16) from old smb
1852 convention. */
1853 if (server->workstation_RFC1001_name &&
1854 server->workstation_RFC1001_name[0] != 0)
1855 rfc1002mangle(ses_init_buf->trailer.
1856 session_req.calling_name,
1857 server->workstation_RFC1001_name,
1858 RFC1001_NAME_LEN_WITH_NULL);
1859 else
1860 rfc1002mangle(ses_init_buf->trailer.
1861 session_req.calling_name,
1862 "LINUX_CIFS_CLNT",
1863 RFC1001_NAME_LEN_WITH_NULL);
1864
1865 ses_init_buf->trailer.session_req.scope1 = 0;
1866 ses_init_buf->trailer.session_req.scope2 = 0;
1867 smb_buf = (struct smb_hdr *)ses_init_buf;
1868 /* sizeof RFC1002_SESSION_REQUEST with no scope */
1869 smb_buf->smb_buf_length = 0x81000044;
1870 rc = smb_send(server, smb_buf, 0x44);
1871 kfree(ses_init_buf);
1872 msleep(1); /* RFC1001 layer in at least one server
1873 requires very short break before negprot
1874 presumably because not expecting negprot
1875 to follow so fast. This is a simple
1876 solution that works without
1877 complicating the code and causes no
1878 significant slowing down on mount
1879 for everyone else */
1880 }
1881 /* else the negprot may still work without this
1882 even though malloc failed */
1883
1884 }
1885
1886 return rc;
1887 }
1888
1889 static int
1890 ipv6_connect(struct TCP_Server_Info *server)
1891 {
1892 int rc = 0;
1893 bool connected = false;
1894 __be16 orig_port = 0;
1895 struct socket *socket = server->ssocket;
1896
1897 if (socket == NULL) {
1898 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
1899 IPPROTO_TCP, &socket);
1900 if (rc < 0) {
1901 cERROR(1, ("Error %d creating ipv6 socket", rc));
1902 socket = NULL;
1903 return rc;
1904 }
1905
1906 /* BB other socket options to set KEEPALIVE, NODELAY? */
1907 cFYI(1, ("ipv6 Socket created"));
1908 server->ssocket = socket;
1909 socket->sk->sk_allocation = GFP_NOFS;
1910 cifs_reclassify_socket6(socket);
1911 }
1912
1913 /* user overrode default port */
1914 if (server->addr.sockAddr6.sin6_port) {
1915 rc = socket->ops->connect(socket,
1916 (struct sockaddr *) &server->addr.sockAddr6,
1917 sizeof(struct sockaddr_in6), 0);
1918 if (rc >= 0)
1919 connected = true;
1920 }
1921
1922 if (!connected) {
1923 /* save original port so we can retry user specified port
1924 later if fall back ports fail this time */
1925
1926 orig_port = server->addr.sockAddr6.sin6_port;
1927 /* do not retry on the same port we just failed on */
1928 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
1929 server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
1930 rc = socket->ops->connect(socket, (struct sockaddr *)
1931 &server->addr.sockAddr6,
1932 sizeof(struct sockaddr_in6), 0);
1933 if (rc >= 0)
1934 connected = true;
1935 }
1936 }
1937 if (!connected) {
1938 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
1939 rc = socket->ops->connect(socket, (struct sockaddr *)
1940 &server->addr.sockAddr6,
1941 sizeof(struct sockaddr_in6), 0);
1942 if (rc >= 0)
1943 connected = true;
1944 }
1945
1946 /* give up here - unless we want to retry on different
1947 protocol families some day */
1948 if (!connected) {
1949 if (orig_port)
1950 server->addr.sockAddr6.sin6_port = orig_port;
1951 cFYI(1, ("Error %d connecting to server via ipv6", rc));
1952 sock_release(socket);
1953 server->ssocket = NULL;
1954 return rc;
1955 }
1956
1957 /*
1958 * Eventually check for other socket options to change from
1959 * the default. sock_setsockopt not used because it expects
1960 * user space buffer
1961 */
1962 socket->sk->sk_rcvtimeo = 7 * HZ;
1963 socket->sk->sk_sndtimeo = 5 * HZ;
1964 server->ssocket = socket;
1965
1966 return rc;
1967 }
1968
1969 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
1970 struct super_block *sb, struct smb_vol *vol_info)
1971 {
1972 /* if we are reconnecting then should we check to see if
1973 * any requested capabilities changed locally e.g. via
1974 * remount but we can not do much about it here
1975 * if they have (even if we could detect it by the following)
1976 * Perhaps we could add a backpointer to array of sb from tcon
1977 * or if we change to make all sb to same share the same
1978 * sb as NFS - then we only have one backpointer to sb.
1979 * What if we wanted to mount the server share twice once with
1980 * and once without posixacls or posix paths? */
1981 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
1982
1983 if (vol_info && vol_info->no_linux_ext) {
1984 tcon->fsUnixInfo.Capability = 0;
1985 tcon->unix_ext = 0; /* Unix Extensions disabled */
1986 cFYI(1, ("Linux protocol extensions disabled"));
1987 return;
1988 } else if (vol_info)
1989 tcon->unix_ext = 1; /* Unix Extensions supported */
1990
1991 if (tcon->unix_ext == 0) {
1992 cFYI(1, ("Unix extensions disabled so not set on reconnect"));
1993 return;
1994 }
1995
1996 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
1997 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
1998
1999 /* check for reconnect case in which we do not
2000 want to change the mount behavior if we can avoid it */
2001 if (vol_info == NULL) {
2002 /* turn off POSIX ACL and PATHNAMES if not set
2003 originally at mount time */
2004 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2005 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2006 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2007 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2008 cERROR(1, ("POSIXPATH support change"));
2009 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2010 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2011 cERROR(1, ("possible reconnect error"));
2012 cERROR(1,
2013 ("server disabled POSIX path support"));
2014 }
2015 }
2016
2017 cap &= CIFS_UNIX_CAP_MASK;
2018 if (vol_info && vol_info->no_psx_acl)
2019 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2020 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2021 cFYI(1, ("negotiated posix acl support"));
2022 if (sb)
2023 sb->s_flags |= MS_POSIXACL;
2024 }
2025
2026 if (vol_info && vol_info->posix_paths == 0)
2027 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2028 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2029 cFYI(1, ("negotiate posix pathnames"));
2030 if (sb)
2031 CIFS_SB(sb)->mnt_cifs_flags |=
2032 CIFS_MOUNT_POSIX_PATHS;
2033 }
2034
2035 /* We might be setting the path sep back to a different
2036 form if we are reconnecting and the server switched its
2037 posix path capability for this share */
2038 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2039 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2040
2041 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2042 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2043 CIFS_SB(sb)->rsize = 127 * 1024;
2044 cFYI(DBG2,
2045 ("larger reads not supported by srv"));
2046 }
2047 }
2048
2049
2050 cFYI(1, ("Negotiate caps 0x%x", (int)cap));
2051 #ifdef CONFIG_CIFS_DEBUG2
2052 if (cap & CIFS_UNIX_FCNTL_CAP)
2053 cFYI(1, ("FCNTL cap"));
2054 if (cap & CIFS_UNIX_EXTATTR_CAP)
2055 cFYI(1, ("EXTATTR cap"));
2056 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2057 cFYI(1, ("POSIX path cap"));
2058 if (cap & CIFS_UNIX_XATTR_CAP)
2059 cFYI(1, ("XATTR cap"));
2060 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2061 cFYI(1, ("POSIX ACL cap"));
2062 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2063 cFYI(1, ("very large read cap"));
2064 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2065 cFYI(1, ("very large write cap"));
2066 #endif /* CIFS_DEBUG2 */
2067 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2068 if (vol_info == NULL) {
2069 cFYI(1, ("resetting capabilities failed"));
2070 } else
2071 cERROR(1, ("Negotiating Unix capabilities "
2072 "with the server failed. Consider "
2073 "mounting with the Unix Extensions\n"
2074 "disabled, if problems are found, "
2075 "by specifying the nounix mount "
2076 "option."));
2077
2078 }
2079 }
2080 }
2081
2082 static void
2083 convert_delimiter(char *path, char delim)
2084 {
2085 int i;
2086 char old_delim;
2087
2088 if (path == NULL)
2089 return;
2090
2091 if (delim == '/')
2092 old_delim = '\\';
2093 else
2094 old_delim = '/';
2095
2096 for (i = 0; path[i] != '\0'; i++) {
2097 if (path[i] == old_delim)
2098 path[i] = delim;
2099 }
2100 }
2101
2102 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2103 struct cifs_sb_info *cifs_sb)
2104 {
2105 if (pvolume_info->rsize > CIFSMaxBufSize) {
2106 cERROR(1, ("rsize %d too large, using MaxBufSize",
2107 pvolume_info->rsize));
2108 cifs_sb->rsize = CIFSMaxBufSize;
2109 } else if ((pvolume_info->rsize) &&
2110 (pvolume_info->rsize <= CIFSMaxBufSize))
2111 cifs_sb->rsize = pvolume_info->rsize;
2112 else /* default */
2113 cifs_sb->rsize = CIFSMaxBufSize;
2114
2115 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2116 cERROR(1, ("wsize %d too large, using 4096 instead",
2117 pvolume_info->wsize));
2118 cifs_sb->wsize = 4096;
2119 } else if (pvolume_info->wsize)
2120 cifs_sb->wsize = pvolume_info->wsize;
2121 else
2122 cifs_sb->wsize = min_t(const int,
2123 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2124 127*1024);
2125 /* old default of CIFSMaxBufSize was too small now
2126 that SMB Write2 can send multiple pages in kvec.
2127 RFC1001 does not describe what happens when frame
2128 bigger than 128K is sent so use that as max in
2129 conjunction with 52K kvec constraint on arch with 4K
2130 page size */
2131
2132 if (cifs_sb->rsize < 2048) {
2133 cifs_sb->rsize = 2048;
2134 /* Windows ME may prefer this */
2135 cFYI(1, ("readsize set to minimum: 2048"));
2136 }
2137 /* calculate prepath */
2138 cifs_sb->prepath = pvolume_info->prepath;
2139 if (cifs_sb->prepath) {
2140 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2141 /* we can not convert the / to \ in the path
2142 separators in the prefixpath yet because we do not
2143 know (until reset_cifs_unix_caps is called later)
2144 whether POSIX PATH CAP is available. We normalize
2145 the / to \ after reset_cifs_unix_caps is called */
2146 pvolume_info->prepath = NULL;
2147 } else
2148 cifs_sb->prepathlen = 0;
2149 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2150 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2151 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2152 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2153 cFYI(1, ("file mode: 0x%x dir mode: 0x%x",
2154 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode));
2155
2156 if (pvolume_info->noperm)
2157 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2158 if (pvolume_info->setuids)
2159 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2160 if (pvolume_info->server_ino)
2161 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2162 if (pvolume_info->remap)
2163 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2164 if (pvolume_info->no_xattr)
2165 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2166 if (pvolume_info->sfu_emul)
2167 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2168 if (pvolume_info->nobrl)
2169 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2170 if (pvolume_info->nostrictsync)
2171 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2172 if (pvolume_info->mand_lock)
2173 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2174 if (pvolume_info->cifs_acl)
2175 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2176 if (pvolume_info->override_uid)
2177 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2178 if (pvolume_info->override_gid)
2179 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2180 if (pvolume_info->dynperm)
2181 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2182 if (pvolume_info->direct_io) {
2183 cFYI(1, ("mounting share using direct i/o"));
2184 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2185 }
2186
2187 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2188 cERROR(1, ("mount option dynperm ignored if cifsacl "
2189 "mount option supported"));
2190 }
2191
2192 static int
2193 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2194 struct cifs_sb_info *cifs_sb, const char *full_path)
2195 {
2196 int rc;
2197 __u64 inode_num;
2198 FILE_ALL_INFO *pfile_info;
2199
2200 rc = CIFSGetSrvInodeNumber(xid, tcon, full_path, &inode_num,
2201 cifs_sb->local_nls,
2202 cifs_sb->mnt_cifs_flags &
2203 CIFS_MOUNT_MAP_SPECIAL_CHR);
2204 if (rc != -EOPNOTSUPP)
2205 return rc;
2206
2207 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2208 if (pfile_info == NULL)
2209 return -ENOMEM;
2210
2211 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2212 0 /* not legacy */, cifs_sb->local_nls,
2213 cifs_sb->mnt_cifs_flags &
2214 CIFS_MOUNT_MAP_SPECIAL_CHR);
2215 kfree(pfile_info);
2216 return rc;
2217 }
2218
2219 static void
2220 cleanup_volume_info(struct smb_vol **pvolume_info)
2221 {
2222 struct smb_vol *volume_info;
2223
2224 if (!pvolume_info && !*pvolume_info)
2225 return;
2226
2227 volume_info = *pvolume_info;
2228 kzfree(volume_info->password);
2229 kfree(volume_info->UNC);
2230 kfree(volume_info->prepath);
2231 kfree(volume_info);
2232 *pvolume_info = NULL;
2233 return;
2234 }
2235
2236 #ifdef CONFIG_CIFS_DFS_UPCALL
2237 /* build_path_to_root returns full path to root when
2238 * we do not have an exiting connection (tcon) */
2239 static char *
2240 build_unc_path_to_root(const struct smb_vol *volume_info,
2241 const struct cifs_sb_info *cifs_sb)
2242 {
2243 char *full_path;
2244
2245 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2246 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2247 if (full_path == NULL)
2248 return ERR_PTR(-ENOMEM);
2249
2250 strncpy(full_path, volume_info->UNC, unc_len);
2251 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2252 int i;
2253 for (i = 0; i < unc_len; i++) {
2254 if (full_path[i] == '\\')
2255 full_path[i] = '/';
2256 }
2257 }
2258
2259 if (cifs_sb->prepathlen)
2260 strncpy(full_path + unc_len, cifs_sb->prepath,
2261 cifs_sb->prepathlen);
2262
2263 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2264 return full_path;
2265 }
2266 #endif
2267
2268 int
2269 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2270 char *mount_data_global, const char *devname)
2271 {
2272 int rc = 0;
2273 int xid;
2274 struct smb_vol *volume_info;
2275 struct cifsSesInfo *pSesInfo = NULL;
2276 struct cifsTconInfo *tcon = NULL;
2277 struct TCP_Server_Info *srvTcp = NULL;
2278 char *full_path;
2279 char *mount_data = mount_data_global;
2280 #ifdef CONFIG_CIFS_DFS_UPCALL
2281 struct dfs_info3_param *referrals = NULL;
2282 unsigned int num_referrals = 0;
2283 int referral_walks_count = 0;
2284 try_mount_again:
2285 #endif
2286 full_path = NULL;
2287
2288 xid = GetXid();
2289
2290 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2291 if (!volume_info) {
2292 rc = -ENOMEM;
2293 goto out;
2294 }
2295
2296 if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2297 rc = -EINVAL;
2298 goto out;
2299 }
2300
2301 if (volume_info->nullauth) {
2302 cFYI(1, ("null user"));
2303 volume_info->username = "";
2304 } else if (volume_info->username) {
2305 /* BB fixme parse for domain name here */
2306 cFYI(1, ("Username: %s", volume_info->username));
2307 } else {
2308 cifserror("No username specified");
2309 /* In userspace mount helper we can get user name from alternate
2310 locations such as env variables and files on disk */
2311 rc = -EINVAL;
2312 goto out;
2313 }
2314
2315
2316 /* this is needed for ASCII cp to Unicode converts */
2317 if (volume_info->iocharset == NULL) {
2318 cifs_sb->local_nls = load_nls_default();
2319 /* load_nls_default can not return null */
2320 } else {
2321 cifs_sb->local_nls = load_nls(volume_info->iocharset);
2322 if (cifs_sb->local_nls == NULL) {
2323 cERROR(1, ("CIFS mount error: iocharset %s not found",
2324 volume_info->iocharset));
2325 rc = -ELIBACC;
2326 goto out;
2327 }
2328 }
2329
2330 /* get a reference to a tcp session */
2331 srvTcp = cifs_get_tcp_session(volume_info);
2332 if (IS_ERR(srvTcp)) {
2333 rc = PTR_ERR(srvTcp);
2334 goto out;
2335 }
2336
2337 pSesInfo = cifs_find_smb_ses(srvTcp, volume_info->username);
2338 if (pSesInfo) {
2339 cFYI(1, ("Existing smb sess found (status=%d)",
2340 pSesInfo->status));
2341 /*
2342 * The existing SMB session already has a reference to srvTcp,
2343 * so we can put back the extra one we got before
2344 */
2345 cifs_put_tcp_session(srvTcp);
2346
2347 down(&pSesInfo->sesSem);
2348 if (pSesInfo->need_reconnect) {
2349 cFYI(1, ("Session needs reconnect"));
2350 rc = cifs_setup_session(xid, pSesInfo,
2351 cifs_sb->local_nls);
2352 }
2353 up(&pSesInfo->sesSem);
2354 } else if (!rc) {
2355 cFYI(1, ("Existing smb sess not found"));
2356 pSesInfo = sesInfoAlloc();
2357 if (pSesInfo == NULL) {
2358 rc = -ENOMEM;
2359 goto mount_fail_check;
2360 }
2361
2362 /* new SMB session uses our srvTcp ref */
2363 pSesInfo->server = srvTcp;
2364 if (srvTcp->addr.sockAddr6.sin6_family == AF_INET6)
2365 sprintf(pSesInfo->serverName, "%pI6",
2366 &srvTcp->addr.sockAddr6.sin6_addr);
2367 else
2368 sprintf(pSesInfo->serverName, "%pI4",
2369 &srvTcp->addr.sockAddr.sin_addr.s_addr);
2370
2371 write_lock(&cifs_tcp_ses_lock);
2372 list_add(&pSesInfo->smb_ses_list, &srvTcp->smb_ses_list);
2373 write_unlock(&cifs_tcp_ses_lock);
2374
2375 /* volume_info->password freed at unmount */
2376 if (volume_info->password) {
2377 pSesInfo->password = kstrdup(volume_info->password,
2378 GFP_KERNEL);
2379 if (!pSesInfo->password) {
2380 rc = -ENOMEM;
2381 goto mount_fail_check;
2382 }
2383 }
2384 if (volume_info->username)
2385 strncpy(pSesInfo->userName, volume_info->username,
2386 MAX_USERNAME_SIZE);
2387 if (volume_info->domainname) {
2388 int len = strlen(volume_info->domainname);
2389 pSesInfo->domainName = kmalloc(len + 1, GFP_KERNEL);
2390 if (pSesInfo->domainName)
2391 strcpy(pSesInfo->domainName,
2392 volume_info->domainname);
2393 }
2394 pSesInfo->linux_uid = volume_info->linux_uid;
2395 pSesInfo->overrideSecFlg = volume_info->secFlg;
2396 down(&pSesInfo->sesSem);
2397
2398 /* BB FIXME need to pass vol->secFlgs BB */
2399 rc = cifs_setup_session(xid, pSesInfo,
2400 cifs_sb->local_nls);
2401 up(&pSesInfo->sesSem);
2402 }
2403
2404 /* search for existing tcon to this server share */
2405 if (!rc) {
2406 setup_cifs_sb(volume_info, cifs_sb);
2407
2408 tcon = cifs_find_tcon(pSesInfo, volume_info->UNC);
2409 if (tcon) {
2410 cFYI(1, ("Found match on UNC path"));
2411 /* existing tcon already has a reference */
2412 cifs_put_smb_ses(pSesInfo);
2413 if (tcon->seal != volume_info->seal)
2414 cERROR(1, ("transport encryption setting "
2415 "conflicts with existing tid"));
2416 } else {
2417 tcon = tconInfoAlloc();
2418 if (tcon == NULL) {
2419 rc = -ENOMEM;
2420 goto mount_fail_check;
2421 }
2422
2423 tcon->ses = pSesInfo;
2424 if (volume_info->password) {
2425 tcon->password = kstrdup(volume_info->password,
2426 GFP_KERNEL);
2427 if (!tcon->password) {
2428 rc = -ENOMEM;
2429 goto mount_fail_check;
2430 }
2431 }
2432
2433 if ((strchr(volume_info->UNC + 3, '\\') == NULL)
2434 && (strchr(volume_info->UNC + 3, '/') == NULL)) {
2435 cERROR(1, ("Missing share name"));
2436 rc = -ENODEV;
2437 goto mount_fail_check;
2438 } else {
2439 /* BB Do we need to wrap sesSem around
2440 * this TCon call and Unix SetFS as
2441 * we do on SessSetup and reconnect? */
2442 rc = CIFSTCon(xid, pSesInfo, volume_info->UNC,
2443 tcon, cifs_sb->local_nls);
2444 cFYI(1, ("CIFS Tcon rc = %d", rc));
2445 if (volume_info->nodfs) {
2446 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2447 cFYI(1, ("DFS disabled (%d)",
2448 tcon->Flags));
2449 }
2450 }
2451 if (rc)
2452 goto remote_path_check;
2453 tcon->seal = volume_info->seal;
2454 write_lock(&cifs_tcp_ses_lock);
2455 list_add(&tcon->tcon_list, &pSesInfo->tcon_list);
2456 write_unlock(&cifs_tcp_ses_lock);
2457 }
2458
2459 /* we can have only one retry value for a connection
2460 to a share so for resources mounted more than once
2461 to the same server share the last value passed in
2462 for the retry flag is used */
2463 tcon->retry = volume_info->retry;
2464 tcon->nocase = volume_info->nocase;
2465 tcon->local_lease = volume_info->local_lease;
2466 }
2467 if (pSesInfo) {
2468 if (pSesInfo->capabilities & CAP_LARGE_FILES) {
2469 sb->s_maxbytes = (u64) 1 << 63;
2470 } else
2471 sb->s_maxbytes = (u64) 1 << 31; /* 2 GB */
2472 }
2473
2474 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2475 sb->s_time_gran = 100;
2476
2477 if (rc)
2478 goto remote_path_check;
2479
2480 cifs_sb->tcon = tcon;
2481
2482 /* do not care if following two calls succeed - informational */
2483 if (!tcon->ipc) {
2484 CIFSSMBQFSDeviceInfo(xid, tcon);
2485 CIFSSMBQFSAttributeInfo(xid, tcon);
2486 }
2487
2488 /* tell server which Unix caps we support */
2489 if (tcon->ses->capabilities & CAP_UNIX)
2490 /* reset of caps checks mount to see if unix extensions
2491 disabled for just this mount */
2492 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2493 else
2494 tcon->unix_ext = 0; /* server does not support them */
2495
2496 /* convert forward to back slashes in prepath here if needed */
2497 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2498 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2499
2500 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2501 cifs_sb->rsize = 1024 * 127;
2502 cFYI(DBG2, ("no very large read support, rsize now 127K"));
2503 }
2504 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2505 cifs_sb->wsize = min(cifs_sb->wsize,
2506 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2507 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2508 cifs_sb->rsize = min(cifs_sb->rsize,
2509 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2510
2511 remote_path_check:
2512 /* check if a whole path (including prepath) is not remote */
2513 if (!rc && cifs_sb->prepathlen && tcon) {
2514 /* build_path_to_root works only when we have a valid tcon */
2515 full_path = cifs_build_path_to_root(cifs_sb);
2516 if (full_path == NULL) {
2517 rc = -ENOMEM;
2518 goto mount_fail_check;
2519 }
2520 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2521 if (rc != -EREMOTE) {
2522 kfree(full_path);
2523 goto mount_fail_check;
2524 }
2525 kfree(full_path);
2526 }
2527
2528 /* get referral if needed */
2529 if (rc == -EREMOTE) {
2530 #ifdef CONFIG_CIFS_DFS_UPCALL
2531 if (referral_walks_count > MAX_NESTED_LINKS) {
2532 /*
2533 * BB: when we implement proper loop detection,
2534 * we will remove this check. But now we need it
2535 * to prevent an indefinite loop if 'DFS tree' is
2536 * misconfigured (i.e. has loops).
2537 */
2538 rc = -ELOOP;
2539 goto mount_fail_check;
2540 }
2541 /* convert forward to back slashes in prepath here if needed */
2542 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2543 convert_delimiter(cifs_sb->prepath,
2544 CIFS_DIR_SEP(cifs_sb));
2545 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2546 if (IS_ERR(full_path)) {
2547 rc = PTR_ERR(full_path);
2548 goto mount_fail_check;
2549 }
2550
2551 cFYI(1, ("Getting referral for: %s", full_path));
2552 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2553 cifs_sb->local_nls, &num_referrals, &referrals,
2554 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2555 if (!rc && num_referrals > 0) {
2556 char *fake_devname = NULL;
2557
2558 if (mount_data != mount_data_global)
2559 kfree(mount_data);
2560 mount_data = cifs_compose_mount_options(
2561 cifs_sb->mountdata, full_path + 1,
2562 referrals, &fake_devname);
2563 kfree(fake_devname);
2564 free_dfs_info_array(referrals, num_referrals);
2565
2566 if (tcon)
2567 cifs_put_tcon(tcon);
2568 else if (pSesInfo)
2569 cifs_put_smb_ses(pSesInfo);
2570
2571 cleanup_volume_info(&volume_info);
2572 FreeXid(xid);
2573 kfree(full_path);
2574 referral_walks_count++;
2575 goto try_mount_again;
2576 }
2577 #else /* No DFS support, return error on mount */
2578 rc = -EOPNOTSUPP;
2579 #endif
2580 }
2581
2582 mount_fail_check:
2583 /* on error free sesinfo and tcon struct if needed */
2584 if (rc) {
2585 if (mount_data != mount_data_global)
2586 kfree(mount_data);
2587 /* If find_unc succeeded then rc == 0 so we can not end */
2588 /* up accidently freeing someone elses tcon struct */
2589 if (tcon)
2590 cifs_put_tcon(tcon);
2591 else if (pSesInfo)
2592 cifs_put_smb_ses(pSesInfo);
2593 else
2594 cifs_put_tcp_session(srvTcp);
2595 goto out;
2596 }
2597
2598 /* volume_info->password is freed above when existing session found
2599 (in which case it is not needed anymore) but when new sesion is created
2600 the password ptr is put in the new session structure (in which case the
2601 password will be freed at unmount time) */
2602 out:
2603 /* zero out password before freeing */
2604 cleanup_volume_info(&volume_info);
2605 FreeXid(xid);
2606 return rc;
2607 }
2608
2609 int
2610 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2611 const char *tree, struct cifsTconInfo *tcon,
2612 const struct nls_table *nls_codepage)
2613 {
2614 struct smb_hdr *smb_buffer;
2615 struct smb_hdr *smb_buffer_response;
2616 TCONX_REQ *pSMB;
2617 TCONX_RSP *pSMBr;
2618 unsigned char *bcc_ptr;
2619 int rc = 0;
2620 int length, bytes_left;
2621 __u16 count;
2622
2623 if (ses == NULL)
2624 return -EIO;
2625
2626 smb_buffer = cifs_buf_get();
2627 if (smb_buffer == NULL) {
2628 return -ENOMEM;
2629 }
2630 smb_buffer_response = smb_buffer;
2631
2632 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2633 NULL /*no tid */ , 4 /*wct */ );
2634
2635 smb_buffer->Mid = GetNextMid(ses->server);
2636 smb_buffer->Uid = ses->Suid;
2637 pSMB = (TCONX_REQ *) smb_buffer;
2638 pSMBr = (TCONX_RSP *) smb_buffer_response;
2639
2640 pSMB->AndXCommand = 0xFF;
2641 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2642 bcc_ptr = &pSMB->Password[0];
2643 if ((ses->server->secMode) & SECMODE_USER) {
2644 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
2645 *bcc_ptr = 0; /* password is null byte */
2646 bcc_ptr++; /* skip password */
2647 /* already aligned so no need to do it below */
2648 } else {
2649 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2650 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2651 specified as required (when that support is added to
2652 the vfs in the future) as only NTLM or the much
2653 weaker LANMAN (which we do not send by default) is accepted
2654 by Samba (not sure whether other servers allow
2655 NTLMv2 password here) */
2656 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2657 if ((extended_security & CIFSSEC_MAY_LANMAN) &&
2658 (ses->server->secType == LANMAN))
2659 calc_lanman_hash(tcon->password, ses->server->cryptKey,
2660 ses->server->secMode &
2661 SECMODE_PW_ENCRYPT ? true : false,
2662 bcc_ptr);
2663 else
2664 #endif /* CIFS_WEAK_PW_HASH */
2665 SMBNTencrypt(tcon->password, ses->server->cryptKey,
2666 bcc_ptr);
2667
2668 bcc_ptr += CIFS_SESS_KEY_SIZE;
2669 if (ses->capabilities & CAP_UNICODE) {
2670 /* must align unicode strings */
2671 *bcc_ptr = 0; /* null byte password */
2672 bcc_ptr++;
2673 }
2674 }
2675
2676 if (ses->server->secMode &
2677 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2678 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2679
2680 if (ses->capabilities & CAP_STATUS32) {
2681 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2682 }
2683 if (ses->capabilities & CAP_DFS) {
2684 smb_buffer->Flags2 |= SMBFLG2_DFS;
2685 }
2686 if (ses->capabilities & CAP_UNICODE) {
2687 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2688 length =
2689 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2690 6 /* max utf8 char length in bytes */ *
2691 (/* server len*/ + 256 /* share len */), nls_codepage);
2692 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
2693 bcc_ptr += 2; /* skip trailing null */
2694 } else { /* ASCII */
2695 strcpy(bcc_ptr, tree);
2696 bcc_ptr += strlen(tree) + 1;
2697 }
2698 strcpy(bcc_ptr, "?????");
2699 bcc_ptr += strlen("?????");
2700 bcc_ptr += 1;
2701 count = bcc_ptr - &pSMB->Password[0];
2702 pSMB->hdr.smb_buf_length += count;
2703 pSMB->ByteCount = cpu_to_le16(count);
2704
2705 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2706 CIFS_STD_OP);
2707
2708 /* above now done in SendReceive */
2709 if ((rc == 0) && (tcon != NULL)) {
2710 bool is_unicode;
2711
2712 tcon->tidStatus = CifsGood;
2713 tcon->need_reconnect = false;
2714 tcon->tid = smb_buffer_response->Tid;
2715 bcc_ptr = pByteArea(smb_buffer_response);
2716 bytes_left = BCC(smb_buffer_response);
2717 length = strnlen(bcc_ptr, bytes_left - 2);
2718 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
2719 is_unicode = true;
2720 else
2721 is_unicode = false;
2722
2723
2724 /* skip service field (NB: this field is always ASCII) */
2725 if (length == 3) {
2726 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
2727 (bcc_ptr[2] == 'C')) {
2728 cFYI(1, ("IPC connection"));
2729 tcon->ipc = 1;
2730 }
2731 } else if (length == 2) {
2732 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
2733 /* the most common case */
2734 cFYI(1, ("disk share connection"));
2735 }
2736 }
2737 bcc_ptr += length + 1;
2738 bytes_left -= (length + 1);
2739 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
2740
2741 /* mostly informational -- no need to fail on error here */
2742 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
2743 bytes_left, is_unicode,
2744 nls_codepage);
2745
2746 cFYI(1, ("nativeFileSystem=%s", tcon->nativeFileSystem));
2747
2748 if ((smb_buffer_response->WordCount == 3) ||
2749 (smb_buffer_response->WordCount == 7))
2750 /* field is in same location */
2751 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
2752 else
2753 tcon->Flags = 0;
2754 cFYI(1, ("Tcon flags: 0x%x ", tcon->Flags));
2755 } else if ((rc == 0) && tcon == NULL) {
2756 /* all we need to save for IPC$ connection */
2757 ses->ipc_tid = smb_buffer_response->Tid;
2758 }
2759
2760 cifs_buf_release(smb_buffer);
2761 return rc;
2762 }
2763
2764 int
2765 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
2766 {
2767 int rc = 0;
2768 char *tmp;
2769
2770 if (cifs_sb->tcon)
2771 cifs_put_tcon(cifs_sb->tcon);
2772
2773 cifs_sb->tcon = NULL;
2774 tmp = cifs_sb->prepath;
2775 cifs_sb->prepathlen = 0;
2776 cifs_sb->prepath = NULL;
2777 kfree(tmp);
2778
2779 return rc;
2780 }
2781
2782 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *pSesInfo,
2783 struct nls_table *nls_info)
2784 {
2785 int rc = 0;
2786 int first_time = 0;
2787 struct TCP_Server_Info *server = pSesInfo->server;
2788
2789 /* what if server changes its buffer size after dropping the session? */
2790 if (server->maxBuf == 0) /* no need to send on reconnect */ {
2791 rc = CIFSSMBNegotiate(xid, pSesInfo);
2792 if (rc == -EAGAIN) {
2793 /* retry only once on 1st time connection */
2794 rc = CIFSSMBNegotiate(xid, pSesInfo);
2795 if (rc == -EAGAIN)
2796 rc = -EHOSTDOWN;
2797 }
2798 if (rc == 0) {
2799 spin_lock(&GlobalMid_Lock);
2800 if (server->tcpStatus != CifsExiting)
2801 server->tcpStatus = CifsGood;
2802 else
2803 rc = -EHOSTDOWN;
2804 spin_unlock(&GlobalMid_Lock);
2805
2806 }
2807 first_time = 1;
2808 }
2809
2810 if (rc)
2811 goto ss_err_exit;
2812
2813 pSesInfo->flags = 0;
2814 pSesInfo->capabilities = server->capabilities;
2815 if (linuxExtEnabled == 0)
2816 pSesInfo->capabilities &= (~CAP_UNIX);
2817
2818 cFYI(1, ("Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
2819 server->secMode, server->capabilities, server->timeAdj));
2820
2821 rc = CIFS_SessSetup(xid, pSesInfo, first_time, nls_info);
2822 if (rc) {
2823 cERROR(1, ("Send error in SessSetup = %d", rc));
2824 } else {
2825 cFYI(1, ("CIFS Session Established successfully"));
2826 spin_lock(&GlobalMid_Lock);
2827 pSesInfo->status = CifsGood;
2828 pSesInfo->need_reconnect = false;
2829 spin_unlock(&GlobalMid_Lock);
2830 }
2831
2832 ss_err_exit:
2833 return rc;
2834 }
2835
kernel-based virtual machine