?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
gma500: add more ops
[linux-2.6/linux-acpi-2.6/ibm-acpi-2.6.git] / fs / cifs / connect.c
blobc8cb83ef6f6ff9881abc720b195cfe9276686923
1 /*
2 * fs/cifs/connect.c
3 *
4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
6 *
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
20 */
21 #include <linux/fs.h>
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/slab.h>
27 #include <linux/pagemap.h>
28 #include <linux/ctype.h>
29 #include <linux/utsname.h>
30 #include <linux/mempool.h>
31 #include <linux/delay.h>
32 #include <linux/completion.h>
33 #include <linux/kthread.h>
34 #include <linux/pagevec.h>
35 #include <linux/freezer.h>
36 #include <linux/namei.h>
37 #include <asm/uaccess.h>
38 #include <asm/processor.h>
39 #include <linux/inet.h>
40 #include <net/ipv6.h>
41 #include "cifspdu.h"
42 #include "cifsglob.h"
43 #include "cifsproto.h"
44 #include "cifs_unicode.h"
45 #include "cifs_debug.h"
46 #include "cifs_fs_sb.h"
47 #include "ntlmssp.h"
48 #include "nterr.h"
49 #include "rfc1002pdu.h"
50 #include "fscache.h"
51
52 #define CIFS_PORT 445
53 #define RFC1001_PORT 139
54
55 /* SMB echo "timeout" -- FIXME: tunable? */
56 #define SMB_ECHO_INTERVAL (60 * HZ)
57
58 extern mempool_t *cifs_req_poolp;
59
60 /* FIXME: should these be tunable? */
61 #define TLINK_ERROR_EXPIRE (1 * HZ)
62 #define TLINK_IDLE_EXPIRE (600 * HZ)
63
64 static int ip_connect(struct TCP_Server_Info *server);
65 static int generic_ip_connect(struct TCP_Server_Info *server);
66 static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
67 static void cifs_prune_tlinks(struct work_struct *work);
68
69 /*
70 * cifs tcp session reconnection
71 *
72 * mark tcp session as reconnecting so temporarily locked
73 * mark all smb sessions as reconnecting for tcp session
74 * reconnect tcp session
75 * wake up waiters on reconnection? - (not needed currently)
76 */
77 static int
78 cifs_reconnect(struct TCP_Server_Info *server)
79 {
80 int rc = 0;
81 struct list_head *tmp, *tmp2;
82 struct cifs_ses *ses;
83 struct cifs_tcon *tcon;
84 struct mid_q_entry *mid_entry;
85 struct list_head retry_list;
86
87 spin_lock(&GlobalMid_Lock);
88 if (server->tcpStatus == CifsExiting) {
89 /* the demux thread will exit normally
90 next time through the loop */
91 spin_unlock(&GlobalMid_Lock);
92 return rc;
93 } else
94 server->tcpStatus = CifsNeedReconnect;
95 spin_unlock(&GlobalMid_Lock);
96 server->maxBuf = 0;
97
98 cFYI(1, "Reconnecting tcp session");
99
100 /* before reconnecting the tcp session, mark the smb session (uid)
101 and the tid bad so they are not used until reconnected */
102 cFYI(1, "%s: marking sessions and tcons for reconnect", __func__);
103 spin_lock(&cifs_tcp_ses_lock);
104 list_for_each(tmp, &server->smb_ses_list) {
105 ses = list_entry(tmp, struct cifs_ses, smb_ses_list);
106 ses->need_reconnect = true;
107 ses->ipc_tid = 0;
108 list_for_each(tmp2, &ses->tcon_list) {
109 tcon = list_entry(tmp2, struct cifs_tcon, tcon_list);
110 tcon->need_reconnect = true;
111 }
112 }
113 spin_unlock(&cifs_tcp_ses_lock);
114
115 /* do not want to be sending data on a socket we are freeing */
116 cFYI(1, "%s: tearing down socket", __func__);
117 mutex_lock(&server->srv_mutex);
118 if (server->ssocket) {
119 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
120 server->ssocket->flags);
121 kernel_sock_shutdown(server->ssocket, SHUT_WR);
122 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
123 server->ssocket->state,
124 server->ssocket->flags);
125 sock_release(server->ssocket);
126 server->ssocket = NULL;
127 }
128 server->sequence_number = 0;
129 server->session_estab = false;
130 kfree(server->session_key.response);
131 server->session_key.response = NULL;
132 server->session_key.len = 0;
133 server->lstrp = jiffies;
134 mutex_unlock(&server->srv_mutex);
135
136 /* mark submitted MIDs for retry and issue callback */
137 INIT_LIST_HEAD(&retry_list);
138 cFYI(1, "%s: moving mids to private list", __func__);
139 spin_lock(&GlobalMid_Lock);
140 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
141 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
142 if (mid_entry->midState == MID_REQUEST_SUBMITTED)
143 mid_entry->midState = MID_RETRY_NEEDED;
144 list_move(&mid_entry->qhead, &retry_list);
145 }
146 spin_unlock(&GlobalMid_Lock);
147
148 cFYI(1, "%s: issuing mid callbacks", __func__);
149 list_for_each_safe(tmp, tmp2, &retry_list) {
150 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
151 list_del_init(&mid_entry->qhead);
152 mid_entry->callback(mid_entry);
153 }
154
155 do {
156 try_to_freeze();
157
158 /* we should try only the port we connected to before */
159 rc = generic_ip_connect(server);
160 if (rc) {
161 cFYI(1, "reconnect error %d", rc);
162 msleep(3000);
163 } else {
164 atomic_inc(&tcpSesReconnectCount);
165 spin_lock(&GlobalMid_Lock);
166 if (server->tcpStatus != CifsExiting)
167 server->tcpStatus = CifsNeedNegotiate;
168 spin_unlock(&GlobalMid_Lock);
169 }
170 } while (server->tcpStatus == CifsNeedReconnect);
171
172 return rc;
173 }
174
175 /*
176 return codes:
177 0 not a transact2, or all data present
178 >0 transact2 with that much data missing
179 -EINVAL = invalid transact2
180
181 */
182 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
183 {
184 struct smb_t2_rsp *pSMBt;
185 int remaining;
186 __u16 total_data_size, data_in_this_rsp;
187
188 if (pSMB->Command != SMB_COM_TRANSACTION2)
189 return 0;
190
191 /* check for plausible wct, bcc and t2 data and parm sizes */
192 /* check for parm and data offset going beyond end of smb */
193 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
194 cFYI(1, "invalid transact2 word count");
195 return -EINVAL;
196 }
197
198 pSMBt = (struct smb_t2_rsp *)pSMB;
199
200 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
201 data_in_this_rsp = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
202
203 if (total_data_size == data_in_this_rsp)
204 return 0;
205 else if (total_data_size < data_in_this_rsp) {
206 cFYI(1, "total data %d smaller than data in frame %d",
207 total_data_size, data_in_this_rsp);
208 return -EINVAL;
209 }
210
211 remaining = total_data_size - data_in_this_rsp;
212
213 cFYI(1, "missing %d bytes from transact2, check next response",
214 remaining);
215 if (total_data_size > maxBufSize) {
216 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
217 total_data_size, maxBufSize);
218 return -EINVAL;
219 }
220 return remaining;
221 }
222
223 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
224 {
225 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
226 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
227 char *data_area_of_target;
228 char *data_area_of_buf2;
229 int remaining;
230 unsigned int byte_count, total_in_buf;
231 __u16 total_data_size, total_in_buf2;
232
233 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
234
235 if (total_data_size !=
236 get_unaligned_le16(&pSMB2->t2_rsp.TotalDataCount))
237 cFYI(1, "total data size of primary and secondary t2 differ");
238
239 total_in_buf = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
240
241 remaining = total_data_size - total_in_buf;
242
243 if (remaining < 0)
244 return -EPROTO;
245
246 if (remaining == 0) /* nothing to do, ignore */
247 return 0;
248
249 total_in_buf2 = get_unaligned_le16(&pSMB2->t2_rsp.DataCount);
250 if (remaining < total_in_buf2) {
251 cFYI(1, "transact2 2nd response contains too much data");
252 }
253
254 /* find end of first SMB data area */
255 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
256 get_unaligned_le16(&pSMBt->t2_rsp.DataOffset);
257 /* validate target area */
258
259 data_area_of_buf2 = (char *)&pSMB2->hdr.Protocol +
260 get_unaligned_le16(&pSMB2->t2_rsp.DataOffset);
261
262 data_area_of_target += total_in_buf;
263
264 /* copy second buffer into end of first buffer */
265 total_in_buf += total_in_buf2;
266 /* is the result too big for the field? */
267 if (total_in_buf > USHRT_MAX)
268 return -EPROTO;
269 put_unaligned_le16(total_in_buf, &pSMBt->t2_rsp.DataCount);
270
271 /* fix up the BCC */
272 byte_count = get_bcc(pTargetSMB);
273 byte_count += total_in_buf2;
274 /* is the result too big for the field? */
275 if (byte_count > USHRT_MAX)
276 return -EPROTO;
277 put_bcc(byte_count, pTargetSMB);
278
279 byte_count = be32_to_cpu(pTargetSMB->smb_buf_length);
280 byte_count += total_in_buf2;
281 /* don't allow buffer to overflow */
282 if (byte_count > CIFSMaxBufSize)
283 return -ENOBUFS;
284 pTargetSMB->smb_buf_length = cpu_to_be32(byte_count);
285
286 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
287
288 if (remaining == total_in_buf2) {
289 cFYI(1, "found the last secondary response");
290 return 0; /* we are done */
291 } else /* more responses to go */
292 return 1;
293 }
294
295 static void
296 cifs_echo_request(struct work_struct *work)
297 {
298 int rc;
299 struct TCP_Server_Info *server = container_of(work,
300 struct TCP_Server_Info, echo.work);
301
302 /*
303 * We cannot send an echo until the NEGOTIATE_PROTOCOL request is
304 * done, which is indicated by maxBuf != 0. Also, no need to ping if
305 * we got a response recently
306 */
307 if (server->maxBuf == 0 ||
308 time_before(jiffies, server->lstrp + SMB_ECHO_INTERVAL - HZ))
309 goto requeue_echo;
310
311 rc = CIFSSMBEcho(server);
312 if (rc)
313 cFYI(1, "Unable to send echo request to server: %s",
314 server->hostname);
315
316 requeue_echo:
317 queue_delayed_work(system_nrt_wq, &server->echo, SMB_ECHO_INTERVAL);
318 }
319
320 static int
321 cifs_demultiplex_thread(struct TCP_Server_Info *server)
322 {
323 int length;
324 unsigned int pdu_length, total_read;
325 struct smb_hdr *smb_buffer = NULL;
326 struct smb_hdr *bigbuf = NULL;
327 struct smb_hdr *smallbuf = NULL;
328 struct msghdr smb_msg;
329 struct kvec iov;
330 struct socket *csocket = server->ssocket;
331 struct list_head *tmp, *tmp2;
332 struct task_struct *task_to_wake = NULL;
333 struct mid_q_entry *mid_entry;
334 char temp;
335 bool isLargeBuf = false;
336 bool isMultiRsp;
337 int reconnect;
338
339 current->flags |= PF_MEMALLOC;
340 cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
341
342 length = atomic_inc_return(&tcpSesAllocCount);
343 if (length > 1)
344 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
345 GFP_KERNEL);
346
347 set_freezable();
348 while (server->tcpStatus != CifsExiting) {
349 if (try_to_freeze())
350 continue;
351 if (bigbuf == NULL) {
352 bigbuf = cifs_buf_get();
353 if (!bigbuf) {
354 cERROR(1, "No memory for large SMB response");
355 msleep(3000);
356 /* retry will check if exiting */
357 continue;
358 }
359 } else if (isLargeBuf) {
360 /* we are reusing a dirty large buf, clear its start */
361 memset(bigbuf, 0, sizeof(struct smb_hdr));
362 }
363
364 if (smallbuf == NULL) {
365 smallbuf = cifs_small_buf_get();
366 if (!smallbuf) {
367 cERROR(1, "No memory for SMB response");
368 msleep(1000);
369 /* retry will check if exiting */
370 continue;
371 }
372 /* beginning of smb buffer is cleared in our buf_get */
373 } else /* if existing small buf clear beginning */
374 memset(smallbuf, 0, sizeof(struct smb_hdr));
375
376 isLargeBuf = false;
377 isMultiRsp = false;
378 smb_buffer = smallbuf;
379 iov.iov_base = smb_buffer;
380 iov.iov_len = 4;
381 smb_msg.msg_control = NULL;
382 smb_msg.msg_controllen = 0;
383 pdu_length = 4; /* enough to get RFC1001 header */
384
385 incomplete_rcv:
386 if (echo_retries > 0 && server->tcpStatus == CifsGood &&
387 time_after(jiffies, server->lstrp +
388 (echo_retries * SMB_ECHO_INTERVAL))) {
389 cERROR(1, "Server %s has not responded in %d seconds. "
390 "Reconnecting...", server->hostname,
391 (echo_retries * SMB_ECHO_INTERVAL / HZ));
392 cifs_reconnect(server);
393 csocket = server->ssocket;
394 wake_up(&server->response_q);
395 continue;
396 }
397
398 length =
399 kernel_recvmsg(csocket, &smb_msg,
400 &iov, 1, pdu_length, 0 /* BB other flags? */);
401
402 if (server->tcpStatus == CifsExiting) {
403 break;
404 } else if (server->tcpStatus == CifsNeedReconnect) {
405 cFYI(1, "Reconnect after server stopped responding");
406 cifs_reconnect(server);
407 cFYI(1, "call to reconnect done");
408 csocket = server->ssocket;
409 continue;
410 } else if (length == -ERESTARTSYS ||
411 length == -EAGAIN ||
412 length == -EINTR) {
413 msleep(1); /* minimum sleep to prevent looping
414 allowing socket to clear and app threads to set
415 tcpStatus CifsNeedReconnect if server hung */
416 if (pdu_length < 4) {
417 iov.iov_base = (4 - pdu_length) +
418 (char *)smb_buffer;
419 iov.iov_len = pdu_length;
420 smb_msg.msg_control = NULL;
421 smb_msg.msg_controllen = 0;
422 goto incomplete_rcv;
423 } else
424 continue;
425 } else if (length <= 0) {
426 cFYI(1, "Reconnect after unexpected peek error %d",
427 length);
428 cifs_reconnect(server);
429 csocket = server->ssocket;
430 wake_up(&server->response_q);
431 continue;
432 } else if (length < pdu_length) {
433 cFYI(1, "requested %d bytes but only got %d bytes",
434 pdu_length, length);
435 pdu_length -= length;
436 msleep(1);
437 goto incomplete_rcv;
438 }
439
440 /* The right amount was read from socket - 4 bytes */
441 /* so we can now interpret the length field */
442
443 /* the first byte big endian of the length field,
444 is actually not part of the length but the type
445 with the most common, zero, as regular data */
446 temp = *((char *) smb_buffer);
447
448 /* Note that FC 1001 length is big endian on the wire,
449 but we convert it here so it is always manipulated
450 as host byte order */
451 pdu_length = be32_to_cpu(smb_buffer->smb_buf_length);
452
453 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
454
455 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
456 continue;
457 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
458 cFYI(1, "Good RFC 1002 session rsp");
459 continue;
460 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
461 /* we get this from Windows 98 instead of
462 an error on SMB negprot response */
463 cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
464 pdu_length);
465 /* give server a second to clean up */
466 msleep(1000);
467 /* always try 445 first on reconnect since we get NACK
468 * on some if we ever connected to port 139 (the NACK
469 * is since we do not begin with RFC1001 session
470 * initialize frame)
471 */
472 cifs_set_port((struct sockaddr *)
473 &server->dstaddr, CIFS_PORT);
474 cifs_reconnect(server);
475 csocket = server->ssocket;
476 wake_up(&server->response_q);
477 continue;
478 } else if (temp != (char) 0) {
479 cERROR(1, "Unknown RFC 1002 frame");
480 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
481 length);
482 cifs_reconnect(server);
483 csocket = server->ssocket;
484 continue;
485 }
486
487 /* else we have an SMB response */
488 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
489 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
490 cERROR(1, "Invalid size SMB length %d pdu_length %d",
491 length, pdu_length+4);
492 cifs_reconnect(server);
493 csocket = server->ssocket;
494 wake_up(&server->response_q);
495 continue;
496 }
497
498 /* else length ok */
499 reconnect = 0;
500
501 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
502 isLargeBuf = true;
503 memcpy(bigbuf, smallbuf, 4);
504 smb_buffer = bigbuf;
505 }
506 length = 0;
507 iov.iov_base = 4 + (char *)smb_buffer;
508 iov.iov_len = pdu_length;
509 for (total_read = 0; total_read < pdu_length;
510 total_read += length) {
511 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
512 pdu_length - total_read, 0);
513 if (server->tcpStatus == CifsExiting) {
514 /* then will exit */
515 reconnect = 2;
516 break;
517 } else if (server->tcpStatus == CifsNeedReconnect) {
518 cifs_reconnect(server);
519 csocket = server->ssocket;
520 /* Reconnect wakes up rspns q */
521 /* Now we will reread sock */
522 reconnect = 1;
523 break;
524 } else if (length == -ERESTARTSYS ||
525 length == -EAGAIN ||
526 length == -EINTR) {
527 msleep(1); /* minimum sleep to prevent looping,
528 allowing socket to clear and app
529 threads to set tcpStatus
530 CifsNeedReconnect if server hung*/
531 length = 0;
532 continue;
533 } else if (length <= 0) {
534 cERROR(1, "Received no data, expecting %d",
535 pdu_length - total_read);
536 cifs_reconnect(server);
537 csocket = server->ssocket;
538 reconnect = 1;
539 break;
540 }
541 }
542 if (reconnect == 2)
543 break;
544 else if (reconnect == 1)
545 continue;
546
547 total_read += 4; /* account for rfc1002 hdr */
548
549 dump_smb(smb_buffer, total_read);
550
551 /*
552 * We know that we received enough to get to the MID as we
553 * checked the pdu_length earlier. Now check to see
554 * if the rest of the header is OK. We borrow the length
555 * var for the rest of the loop to avoid a new stack var.
556 *
557 * 48 bytes is enough to display the header and a little bit
558 * into the payload for debugging purposes.
559 */
560 length = checkSMB(smb_buffer, smb_buffer->Mid, total_read);
561 if (length != 0)
562 cifs_dump_mem("Bad SMB: ", smb_buffer,
563 min_t(unsigned int, total_read, 48));
564
565 mid_entry = NULL;
566 server->lstrp = jiffies;
567
568 spin_lock(&GlobalMid_Lock);
569 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
570 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
571
572 if (mid_entry->mid != smb_buffer->Mid ||
573 mid_entry->midState != MID_REQUEST_SUBMITTED ||
574 mid_entry->command != smb_buffer->Command) {
575 mid_entry = NULL;
576 continue;
577 }
578
579 if (length == 0 &&
580 check2ndT2(smb_buffer, server->maxBuf) > 0) {
581 /* We have a multipart transact2 resp */
582 isMultiRsp = true;
583 if (mid_entry->resp_buf) {
584 /* merge response - fix up 1st*/
585 length = coalesce_t2(smb_buffer,
586 mid_entry->resp_buf);
587 if (length > 0) {
588 length = 0;
589 mid_entry->multiRsp = true;
590 break;
591 } else {
592 /* all parts received or
593 * packet is malformed
594 */
595 mid_entry->multiEnd = true;
596 goto multi_t2_fnd;
597 }
598 } else {
599 if (!isLargeBuf) {
600 /*
601 * FIXME: switch to already
602 * allocated largebuf?
603 */
604 cERROR(1, "1st trans2 resp "
605 "needs bigbuf");
606 } else {
607 /* Have first buffer */
608 mid_entry->resp_buf =
609 smb_buffer;
610 mid_entry->largeBuf = true;
611 bigbuf = NULL;
612 }
613 }
614 break;
615 }
616 mid_entry->resp_buf = smb_buffer;
617 mid_entry->largeBuf = isLargeBuf;
618 multi_t2_fnd:
619 if (length == 0)
620 mid_entry->midState = MID_RESPONSE_RECEIVED;
621 else
622 mid_entry->midState = MID_RESPONSE_MALFORMED;
623 #ifdef CONFIG_CIFS_STATS2
624 mid_entry->when_received = jiffies;
625 #endif
626 list_del_init(&mid_entry->qhead);
627 break;
628 }
629 spin_unlock(&GlobalMid_Lock);
630
631 if (mid_entry != NULL) {
632 mid_entry->callback(mid_entry);
633 /* Was previous buf put in mpx struct for multi-rsp? */
634 if (!isMultiRsp) {
635 /* smb buffer will be freed by user thread */
636 if (isLargeBuf)
637 bigbuf = NULL;
638 else
639 smallbuf = NULL;
640 }
641 } else if (length != 0) {
642 /* response sanity checks failed */
643 continue;
644 } else if (!is_valid_oplock_break(smb_buffer, server) &&
645 !isMultiRsp) {
646 cERROR(1, "No task to wake, unknown frame received! "
647 "NumMids %d", atomic_read(&midCount));
648 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
649 sizeof(struct smb_hdr));
650 #ifdef CONFIG_CIFS_DEBUG2
651 cifs_dump_detail(smb_buffer);
652 cifs_dump_mids(server);
653 #endif /* CIFS_DEBUG2 */
654
655 }
656 } /* end while !EXITING */
657
658 /* take it off the list, if it's not already */
659 spin_lock(&cifs_tcp_ses_lock);
660 list_del_init(&server->tcp_ses_list);
661 spin_unlock(&cifs_tcp_ses_lock);
662
663 spin_lock(&GlobalMid_Lock);
664 server->tcpStatus = CifsExiting;
665 spin_unlock(&GlobalMid_Lock);
666 wake_up_all(&server->response_q);
667
668 /* check if we have blocked requests that need to free */
669 /* Note that cifs_max_pending is normally 50, but
670 can be set at module install time to as little as two */
671 spin_lock(&GlobalMid_Lock);
672 if (atomic_read(&server->inFlight) >= cifs_max_pending)
673 atomic_set(&server->inFlight, cifs_max_pending - 1);
674 /* We do not want to set the max_pending too low or we
675 could end up with the counter going negative */
676 spin_unlock(&GlobalMid_Lock);
677 /* Although there should not be any requests blocked on
678 this queue it can not hurt to be paranoid and try to wake up requests
679 that may haven been blocked when more than 50 at time were on the wire
680 to the same server - they now will see the session is in exit state
681 and get out of SendReceive. */
682 wake_up_all(&server->request_q);
683 /* give those requests time to exit */
684 msleep(125);
685
686 if (server->ssocket) {
687 sock_release(csocket);
688 server->ssocket = NULL;
689 }
690 /* buffer usually freed in free_mid - need to free it here on exit */
691 cifs_buf_release(bigbuf);
692 if (smallbuf) /* no sense logging a debug message if NULL */
693 cifs_small_buf_release(smallbuf);
694
695 if (!list_empty(&server->pending_mid_q)) {
696 struct list_head dispose_list;
697
698 INIT_LIST_HEAD(&dispose_list);
699 spin_lock(&GlobalMid_Lock);
700 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
701 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
702 cFYI(1, "Clearing mid 0x%x", mid_entry->mid);
703 mid_entry->midState = MID_SHUTDOWN;
704 list_move(&mid_entry->qhead, &dispose_list);
705 }
706 spin_unlock(&GlobalMid_Lock);
707
708 /* now walk dispose list and issue callbacks */
709 list_for_each_safe(tmp, tmp2, &dispose_list) {
710 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
711 cFYI(1, "Callback mid 0x%x", mid_entry->mid);
712 list_del_init(&mid_entry->qhead);
713 mid_entry->callback(mid_entry);
714 }
715 /* 1/8th of sec is more than enough time for them to exit */
716 msleep(125);
717 }
718
719 if (!list_empty(&server->pending_mid_q)) {
720 /* mpx threads have not exited yet give them
721 at least the smb send timeout time for long ops */
722 /* due to delays on oplock break requests, we need
723 to wait at least 45 seconds before giving up
724 on a request getting a response and going ahead
725 and killing cifsd */
726 cFYI(1, "Wait for exit from demultiplex thread");
727 msleep(46000);
728 /* if threads still have not exited they are probably never
729 coming home not much else we can do but free the memory */
730 }
731
732 kfree(server->hostname);
733 task_to_wake = xchg(&server->tsk, NULL);
734 kfree(server);
735
736 length = atomic_dec_return(&tcpSesAllocCount);
737 if (length > 0)
738 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
739 GFP_KERNEL);
740
741 /* if server->tsk was NULL then wait for a signal before exiting */
742 if (!task_to_wake) {
743 set_current_state(TASK_INTERRUPTIBLE);
744 while (!signal_pending(current)) {
745 schedule();
746 set_current_state(TASK_INTERRUPTIBLE);
747 }
748 set_current_state(TASK_RUNNING);
749 }
750
751 module_put_and_exit(0);
752 }
753
754 /* extract the host portion of the UNC string */
755 static char *
756 extract_hostname(const char *unc)
757 {
758 const char *src;
759 char *dst, *delim;
760 unsigned int len;
761
762 /* skip double chars at beginning of string */
763 /* BB: check validity of these bytes? */
764 src = unc + 2;
765
766 /* delimiter between hostname and sharename is always '\\' now */
767 delim = strchr(src, '\\');
768 if (!delim)
769 return ERR_PTR(-EINVAL);
770
771 len = delim - src;
772 dst = kmalloc((len + 1), GFP_KERNEL);
773 if (dst == NULL)
774 return ERR_PTR(-ENOMEM);
775
776 memcpy(dst, src, len);
777 dst[len] = '\0';
778
779 return dst;
780 }
781
782 static int
783 cifs_parse_mount_options(const char *mountdata, const char *devname,
784 struct smb_vol *vol)
785 {
786 char *value, *data, *end;
787 char *mountdata_copy = NULL, *options;
788 unsigned int temp_len, i, j;
789 char separator[2];
790 short int override_uid = -1;
791 short int override_gid = -1;
792 bool uid_specified = false;
793 bool gid_specified = false;
794 char *nodename = utsname()->nodename;
795
796 separator[0] = ',';
797 separator[1] = 0;
798
799 /*
800 * does not have to be perfect mapping since field is
801 * informational, only used for servers that do not support
802 * port 445 and it can be overridden at mount time
803 */
804 memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
805 for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
806 vol->source_rfc1001_name[i] = toupper(nodename[i]);
807
808 vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
809 /* null target name indicates to use *SMBSERVR default called name
810 if we end up sending RFC1001 session initialize */
811 vol->target_rfc1001_name[0] = 0;
812 vol->cred_uid = current_uid();
813 vol->linux_uid = current_uid();
814 vol->linux_gid = current_gid();
815
816 /* default to only allowing write access to owner of the mount */
817 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
818
819 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
820 /* default is always to request posix paths. */
821 vol->posix_paths = 1;
822 /* default to using server inode numbers where available */
823 vol->server_ino = 1;
824
825 vol->actimeo = CIFS_DEF_ACTIMEO;
826
827 if (!mountdata)
828 goto cifs_parse_mount_err;
829
830 mountdata_copy = kstrndup(mountdata, PAGE_SIZE, GFP_KERNEL);
831 if (!mountdata_copy)
832 goto cifs_parse_mount_err;
833
834 options = mountdata_copy;
835 end = options + strlen(options);
836 if (strncmp(options, "sep=", 4) == 0) {
837 if (options[4] != 0) {
838 separator[0] = options[4];
839 options += 5;
840 } else {
841 cFYI(1, "Null separator not allowed");
842 }
843 }
844
845 while ((data = strsep(&options, separator)) != NULL) {
846 if (!*data)
847 continue;
848 if ((value = strchr(data, '=')) != NULL)
849 *value++ = '\0';
850
851 /* Have to parse this before we parse for "user" */
852 if (strnicmp(data, "user_xattr", 10) == 0) {
853 vol->no_xattr = 0;
854 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
855 vol->no_xattr = 1;
856 } else if (strnicmp(data, "user", 4) == 0) {
857 if (!value) {
858 printk(KERN_WARNING
859 "CIFS: invalid or missing username\n");
860 goto cifs_parse_mount_err;
861 } else if (!*value) {
862 /* null user, ie anonymous, authentication */
863 vol->nullauth = 1;
864 }
865 if (strnlen(value, MAX_USERNAME_SIZE) <
866 MAX_USERNAME_SIZE) {
867 vol->username = kstrdup(value, GFP_KERNEL);
868 if (!vol->username) {
869 printk(KERN_WARNING "CIFS: no memory "
870 "for username\n");
871 goto cifs_parse_mount_err;
872 }
873 } else {
874 printk(KERN_WARNING "CIFS: username too long\n");
875 goto cifs_parse_mount_err;
876 }
877 } else if (strnicmp(data, "pass", 4) == 0) {
878 if (!value) {
879 vol->password = NULL;
880 continue;
881 } else if (value[0] == 0) {
882 /* check if string begins with double comma
883 since that would mean the password really
884 does start with a comma, and would not
885 indicate an empty string */
886 if (value[1] != separator[0]) {
887 vol->password = NULL;
888 continue;
889 }
890 }
891 temp_len = strlen(value);
892 /* removed password length check, NTLM passwords
893 can be arbitrarily long */
894
895 /* if comma in password, the string will be
896 prematurely null terminated. Commas in password are
897 specified across the cifs mount interface by a double
898 comma ie ,, and a comma used as in other cases ie ','
899 as a parameter delimiter/separator is single and due
900 to the strsep above is temporarily zeroed. */
901
902 /* NB: password legally can have multiple commas and
903 the only illegal character in a password is null */
904
905 if ((value[temp_len] == 0) &&
906 (value + temp_len < end) &&
907 (value[temp_len+1] == separator[0])) {
908 /* reinsert comma */
909 value[temp_len] = separator[0];
910 temp_len += 2; /* move after second comma */
911 while (value[temp_len] != 0) {
912 if (value[temp_len] == separator[0]) {
913 if (value[temp_len+1] ==
914 separator[0]) {
915 /* skip second comma */
916 temp_len++;
917 } else {
918 /* single comma indicating start
919 of next parm */
920 break;
921 }
922 }
923 temp_len++;
924 }
925 if (value[temp_len] == 0) {
926 options = NULL;
927 } else {
928 value[temp_len] = 0;
929 /* point option to start of next parm */
930 options = value + temp_len + 1;
931 }
932 /* go from value to value + temp_len condensing
933 double commas to singles. Note that this ends up
934 allocating a few bytes too many, which is ok */
935 vol->password = kzalloc(temp_len, GFP_KERNEL);
936 if (vol->password == NULL) {
937 printk(KERN_WARNING "CIFS: no memory "
938 "for password\n");
939 goto cifs_parse_mount_err;
940 }
941 for (i = 0, j = 0; i < temp_len; i++, j++) {
942 vol->password[j] = value[i];
943 if (value[i] == separator[0]
944 && value[i+1] == separator[0]) {
945 /* skip second comma */
946 i++;
947 }
948 }
949 vol->password[j] = 0;
950 } else {
951 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
952 if (vol->password == NULL) {
953 printk(KERN_WARNING "CIFS: no memory "
954 "for password\n");
955 goto cifs_parse_mount_err;
956 }
957 strcpy(vol->password, value);
958 }
959 } else if (!strnicmp(data, "ip", 2) ||
960 !strnicmp(data, "addr", 4)) {
961 if (!value || !*value) {
962 vol->UNCip = NULL;
963 } else if (strnlen(value, INET6_ADDRSTRLEN) <
964 INET6_ADDRSTRLEN) {
965 vol->UNCip = kstrdup(value, GFP_KERNEL);
966 if (!vol->UNCip) {
967 printk(KERN_WARNING "CIFS: no memory "
968 "for UNC IP\n");
969 goto cifs_parse_mount_err;
970 }
971 } else {
972 printk(KERN_WARNING "CIFS: ip address "
973 "too long\n");
974 goto cifs_parse_mount_err;
975 }
976 } else if (strnicmp(data, "sec", 3) == 0) {
977 if (!value || !*value) {
978 cERROR(1, "no security value specified");
979 continue;
980 } else if (strnicmp(value, "krb5i", 5) == 0) {
981 vol->secFlg |= CIFSSEC_MAY_KRB5 |
982 CIFSSEC_MUST_SIGN;
983 } else if (strnicmp(value, "krb5p", 5) == 0) {
984 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
985 CIFSSEC_MAY_KRB5; */
986 cERROR(1, "Krb5 cifs privacy not supported");
987 goto cifs_parse_mount_err;
988 } else if (strnicmp(value, "krb5", 4) == 0) {
989 vol->secFlg |= CIFSSEC_MAY_KRB5;
990 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
991 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
992 CIFSSEC_MUST_SIGN;
993 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
994 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
995 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
996 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
997 CIFSSEC_MUST_SIGN;
998 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
999 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1000 } else if (strnicmp(value, "ntlmi", 5) == 0) {
1001 vol->secFlg |= CIFSSEC_MAY_NTLM |
1002 CIFSSEC_MUST_SIGN;
1003 } else if (strnicmp(value, "ntlm", 4) == 0) {
1004 /* ntlm is default so can be turned off too */
1005 vol->secFlg |= CIFSSEC_MAY_NTLM;
1006 } else if (strnicmp(value, "nontlm", 6) == 0) {
1007 /* BB is there a better way to do this? */
1008 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1009 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1010 } else if (strnicmp(value, "lanman", 6) == 0) {
1011 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1012 #endif
1013 } else if (strnicmp(value, "none", 4) == 0) {
1014 vol->nullauth = 1;
1015 } else {
1016 cERROR(1, "bad security option: %s", value);
1017 goto cifs_parse_mount_err;
1018 }
1019 } else if (strnicmp(data, "vers", 3) == 0) {
1020 if (!value || !*value) {
1021 cERROR(1, "no protocol version specified"
1022 " after vers= mount option");
1023 } else if ((strnicmp(value, "cifs", 4) == 0) ||
1024 (strnicmp(value, "1", 1) == 0)) {
1025 /* this is the default */
1026 continue;
1027 }
1028 } else if ((strnicmp(data, "unc", 3) == 0)
1029 || (strnicmp(data, "target", 6) == 0)
1030 || (strnicmp(data, "path", 4) == 0)) {
1031 if (!value || !*value) {
1032 printk(KERN_WARNING "CIFS: invalid path to "
1033 "network resource\n");
1034 goto cifs_parse_mount_err;
1035 }
1036 if ((temp_len = strnlen(value, 300)) < 300) {
1037 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1038 if (vol->UNC == NULL)
1039 goto cifs_parse_mount_err;
1040 strcpy(vol->UNC, value);
1041 if (strncmp(vol->UNC, "//", 2) == 0) {
1042 vol->UNC[0] = '\\';
1043 vol->UNC[1] = '\\';
1044 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1045 printk(KERN_WARNING
1046 "CIFS: UNC Path does not begin "
1047 "with // or \\\\ \n");
1048 goto cifs_parse_mount_err;
1049 }
1050 } else {
1051 printk(KERN_WARNING "CIFS: UNC name too long\n");
1052 goto cifs_parse_mount_err;
1053 }
1054 } else if ((strnicmp(data, "domain", 3) == 0)
1055 || (strnicmp(data, "workgroup", 5) == 0)) {
1056 if (!value || !*value) {
1057 printk(KERN_WARNING "CIFS: invalid domain name\n");
1058 goto cifs_parse_mount_err;
1059 }
1060 /* BB are there cases in which a comma can be valid in
1061 a domain name and need special handling? */
1062 if (strnlen(value, 256) < 256) {
1063 vol->domainname = kstrdup(value, GFP_KERNEL);
1064 if (!vol->domainname) {
1065 printk(KERN_WARNING "CIFS: no memory "
1066 "for domainname\n");
1067 goto cifs_parse_mount_err;
1068 }
1069 cFYI(1, "Domain name set");
1070 } else {
1071 printk(KERN_WARNING "CIFS: domain name too "
1072 "long\n");
1073 goto cifs_parse_mount_err;
1074 }
1075 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1076 vol->srcaddr.ss_family = AF_UNSPEC;
1077
1078 if (!value || !*value) {
1079 printk(KERN_WARNING "CIFS: srcaddr value"
1080 " not specified.\n");
1081 goto cifs_parse_mount_err;
1082 }
1083 i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1084 value, strlen(value));
1085 if (i == 0) {
1086 printk(KERN_WARNING "CIFS: Could not parse"
1087 " srcaddr: %s\n",
1088 value);
1089 goto cifs_parse_mount_err;
1090 }
1091 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1092 if (!value || !*value) {
1093 printk(KERN_WARNING
1094 "CIFS: invalid path prefix\n");
1095 goto cifs_parse_mount_err;
1096 }
1097 if ((temp_len = strnlen(value, 1024)) < 1024) {
1098 if (value[0] != '/')
1099 temp_len++; /* missing leading slash */
1100 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1101 if (vol->prepath == NULL)
1102 goto cifs_parse_mount_err;
1103 if (value[0] != '/') {
1104 vol->prepath[0] = '/';
1105 strcpy(vol->prepath+1, value);
1106 } else
1107 strcpy(vol->prepath, value);
1108 cFYI(1, "prefix path %s", vol->prepath);
1109 } else {
1110 printk(KERN_WARNING "CIFS: prefix too long\n");
1111 goto cifs_parse_mount_err;
1112 }
1113 } else if (strnicmp(data, "iocharset", 9) == 0) {
1114 if (!value || !*value) {
1115 printk(KERN_WARNING "CIFS: invalid iocharset "
1116 "specified\n");
1117 goto cifs_parse_mount_err;
1118 }
1119 if (strnlen(value, 65) < 65) {
1120 if (strnicmp(value, "default", 7)) {
1121 vol->iocharset = kstrdup(value,
1122 GFP_KERNEL);
1123
1124 if (!vol->iocharset) {
1125 printk(KERN_WARNING "CIFS: no "
1126 "memory for"
1127 "charset\n");
1128 goto cifs_parse_mount_err;
1129 }
1130 }
1131 /* if iocharset not set then load_nls_default
1132 is used by caller */
1133 cFYI(1, "iocharset set to %s", value);
1134 } else {
1135 printk(KERN_WARNING "CIFS: iocharset name "
1136 "too long.\n");
1137 goto cifs_parse_mount_err;
1138 }
1139 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1140 vol->linux_uid = simple_strtoul(value, &value, 0);
1141 uid_specified = true;
1142 } else if (!strnicmp(data, "cruid", 5) && value && *value) {
1143 vol->cred_uid = simple_strtoul(value, &value, 0);
1144 } else if (!strnicmp(data, "forceuid", 8)) {
1145 override_uid = 1;
1146 } else if (!strnicmp(data, "noforceuid", 10)) {
1147 override_uid = 0;
1148 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1149 vol->linux_gid = simple_strtoul(value, &value, 0);
1150 gid_specified = true;
1151 } else if (!strnicmp(data, "forcegid", 8)) {
1152 override_gid = 1;
1153 } else if (!strnicmp(data, "noforcegid", 10)) {
1154 override_gid = 0;
1155 } else if (strnicmp(data, "file_mode", 4) == 0) {
1156 if (value && *value) {
1157 vol->file_mode =
1158 simple_strtoul(value, &value, 0);
1159 }
1160 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1161 if (value && *value) {
1162 vol->dir_mode =
1163 simple_strtoul(value, &value, 0);
1164 }
1165 } else if (strnicmp(data, "dirmode", 4) == 0) {
1166 if (value && *value) {
1167 vol->dir_mode =
1168 simple_strtoul(value, &value, 0);
1169 }
1170 } else if (strnicmp(data, "port", 4) == 0) {
1171 if (value && *value) {
1172 vol->port =
1173 simple_strtoul(value, &value, 0);
1174 }
1175 } else if (strnicmp(data, "rsize", 5) == 0) {
1176 if (value && *value) {
1177 vol->rsize =
1178 simple_strtoul(value, &value, 0);
1179 }
1180 } else if (strnicmp(data, "wsize", 5) == 0) {
1181 if (value && *value) {
1182 vol->wsize =
1183 simple_strtoul(value, &value, 0);
1184 }
1185 } else if (strnicmp(data, "sockopt", 5) == 0) {
1186 if (!value || !*value) {
1187 cERROR(1, "no socket option specified");
1188 continue;
1189 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1190 vol->sockopt_tcp_nodelay = 1;
1191 }
1192 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1193 if (!value || !*value || (*value == ' ')) {
1194 cFYI(1, "invalid (empty) netbiosname");
1195 } else {
1196 memset(vol->source_rfc1001_name, 0x20,
1197 RFC1001_NAME_LEN);
1198 /*
1199 * FIXME: are there cases in which a comma can
1200 * be valid in workstation netbios name (and
1201 * need special handling)?
1202 */
1203 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1204 /* don't ucase netbiosname for user */
1205 if (value[i] == 0)
1206 break;
1207 vol->source_rfc1001_name[i] = value[i];
1208 }
1209 /* The string has 16th byte zero still from
1210 set at top of the function */
1211 if (i == RFC1001_NAME_LEN && value[i] != 0)
1212 printk(KERN_WARNING "CIFS: netbiosname"
1213 " longer than 15 truncated.\n");
1214 }
1215 } else if (strnicmp(data, "servern", 7) == 0) {
1216 /* servernetbiosname specified override *SMBSERVER */
1217 if (!value || !*value || (*value == ' ')) {
1218 cFYI(1, "empty server netbiosname specified");
1219 } else {
1220 /* last byte, type, is 0x20 for servr type */
1221 memset(vol->target_rfc1001_name, 0x20,
1222 RFC1001_NAME_LEN_WITH_NULL);
1223
1224 for (i = 0; i < 15; i++) {
1225 /* BB are there cases in which a comma can be
1226 valid in this workstation netbios name
1227 (and need special handling)? */
1228
1229 /* user or mount helper must uppercase
1230 the netbiosname */
1231 if (value[i] == 0)
1232 break;
1233 else
1234 vol->target_rfc1001_name[i] =
1235 value[i];
1236 }
1237 /* The string has 16th byte zero still from
1238 set at top of the function */
1239 if (i == RFC1001_NAME_LEN && value[i] != 0)
1240 printk(KERN_WARNING "CIFS: server net"
1241 "biosname longer than 15 truncated.\n");
1242 }
1243 } else if (strnicmp(data, "actimeo", 7) == 0) {
1244 if (value && *value) {
1245 vol->actimeo = HZ * simple_strtoul(value,
1246 &value, 0);
1247 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1248 cERROR(1, "CIFS: attribute cache"
1249 "timeout too large");
1250 goto cifs_parse_mount_err;
1251 }
1252 }
1253 } else if (strnicmp(data, "credentials", 4) == 0) {
1254 /* ignore */
1255 } else if (strnicmp(data, "version", 3) == 0) {
1256 /* ignore */
1257 } else if (strnicmp(data, "guest", 5) == 0) {
1258 /* ignore */
1259 } else if (strnicmp(data, "rw", 2) == 0) {
1260 /* ignore */
1261 } else if (strnicmp(data, "ro", 2) == 0) {
1262 /* ignore */
1263 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1264 vol->noblocksnd = 1;
1265 } else if (strnicmp(data, "noautotune", 10) == 0) {
1266 vol->noautotune = 1;
1267 } else if ((strnicmp(data, "suid", 4) == 0) ||
1268 (strnicmp(data, "nosuid", 6) == 0) ||
1269 (strnicmp(data, "exec", 4) == 0) ||
1270 (strnicmp(data, "noexec", 6) == 0) ||
1271 (strnicmp(data, "nodev", 5) == 0) ||
1272 (strnicmp(data, "noauto", 6) == 0) ||
1273 (strnicmp(data, "dev", 3) == 0)) {
1274 /* The mount tool or mount.cifs helper (if present)
1275 uses these opts to set flags, and the flags are read
1276 by the kernel vfs layer before we get here (ie
1277 before read super) so there is no point trying to
1278 parse these options again and set anything and it
1279 is ok to just ignore them */
1280 continue;
1281 } else if (strnicmp(data, "hard", 4) == 0) {
1282 vol->retry = 1;
1283 } else if (strnicmp(data, "soft", 4) == 0) {
1284 vol->retry = 0;
1285 } else if (strnicmp(data, "perm", 4) == 0) {
1286 vol->noperm = 0;
1287 } else if (strnicmp(data, "noperm", 6) == 0) {
1288 vol->noperm = 1;
1289 } else if (strnicmp(data, "mapchars", 8) == 0) {
1290 vol->remap = 1;
1291 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1292 vol->remap = 0;
1293 } else if (strnicmp(data, "sfu", 3) == 0) {
1294 vol->sfu_emul = 1;
1295 } else if (strnicmp(data, "nosfu", 5) == 0) {
1296 vol->sfu_emul = 0;
1297 } else if (strnicmp(data, "nodfs", 5) == 0) {
1298 vol->nodfs = 1;
1299 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1300 vol->posix_paths = 1;
1301 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1302 vol->posix_paths = 0;
1303 } else if (strnicmp(data, "nounix", 6) == 0) {
1304 vol->no_linux_ext = 1;
1305 } else if (strnicmp(data, "nolinux", 7) == 0) {
1306 vol->no_linux_ext = 1;
1307 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1308 (strnicmp(data, "ignorecase", 10) == 0)) {
1309 vol->nocase = 1;
1310 } else if (strnicmp(data, "mand", 4) == 0) {
1311 /* ignore */
1312 } else if (strnicmp(data, "nomand", 6) == 0) {
1313 /* ignore */
1314 } else if (strnicmp(data, "_netdev", 7) == 0) {
1315 /* ignore */
1316 } else if (strnicmp(data, "brl", 3) == 0) {
1317 vol->nobrl = 0;
1318 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1319 (strnicmp(data, "nolock", 6) == 0)) {
1320 vol->nobrl = 1;
1321 /* turn off mandatory locking in mode
1322 if remote locking is turned off since the
1323 local vfs will do advisory */
1324 if (vol->file_mode ==
1325 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1326 vol->file_mode = S_IALLUGO;
1327 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1328 /* will take the shorter form "forcemand" as well */
1329 /* This mount option will force use of mandatory
1330 (DOS/Windows style) byte range locks, instead of
1331 using posix advisory byte range locks, even if the
1332 Unix extensions are available and posix locks would
1333 be supported otherwise. If Unix extensions are not
1334 negotiated this has no effect since mandatory locks
1335 would be used (mandatory locks is all that those
1336 those servers support) */
1337 vol->mand_lock = 1;
1338 } else if (strnicmp(data, "setuids", 7) == 0) {
1339 vol->setuids = 1;
1340 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1341 vol->setuids = 0;
1342 } else if (strnicmp(data, "dynperm", 7) == 0) {
1343 vol->dynperm = true;
1344 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1345 vol->dynperm = false;
1346 } else if (strnicmp(data, "nohard", 6) == 0) {
1347 vol->retry = 0;
1348 } else if (strnicmp(data, "nosoft", 6) == 0) {
1349 vol->retry = 1;
1350 } else if (strnicmp(data, "nointr", 6) == 0) {
1351 vol->intr = 0;
1352 } else if (strnicmp(data, "intr", 4) == 0) {
1353 vol->intr = 1;
1354 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1355 vol->nostrictsync = 1;
1356 } else if (strnicmp(data, "strictsync", 10) == 0) {
1357 vol->nostrictsync = 0;
1358 } else if (strnicmp(data, "serverino", 7) == 0) {
1359 vol->server_ino = 1;
1360 } else if (strnicmp(data, "noserverino", 9) == 0) {
1361 vol->server_ino = 0;
1362 } else if (strnicmp(data, "rwpidforward", 4) == 0) {
1363 vol->rwpidforward = 1;
1364 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1365 vol->cifs_acl = 1;
1366 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1367 vol->cifs_acl = 0;
1368 } else if (strnicmp(data, "acl", 3) == 0) {
1369 vol->no_psx_acl = 0;
1370 } else if (strnicmp(data, "noacl", 5) == 0) {
1371 vol->no_psx_acl = 1;
1372 } else if (strnicmp(data, "locallease", 6) == 0) {
1373 vol->local_lease = 1;
1374 } else if (strnicmp(data, "sign", 4) == 0) {
1375 vol->secFlg |= CIFSSEC_MUST_SIGN;
1376 } else if (strnicmp(data, "seal", 4) == 0) {
1377 /* we do not do the following in secFlags because seal
1378 is a per tree connection (mount) not a per socket
1379 or per-smb connection option in the protocol */
1380 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1381 vol->seal = 1;
1382 } else if (strnicmp(data, "direct", 6) == 0) {
1383 vol->direct_io = 1;
1384 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1385 vol->direct_io = 1;
1386 } else if (strnicmp(data, "strictcache", 11) == 0) {
1387 vol->strict_io = 1;
1388 } else if (strnicmp(data, "noac", 4) == 0) {
1389 printk(KERN_WARNING "CIFS: Mount option noac not "
1390 "supported. Instead set "
1391 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1392 } else if (strnicmp(data, "fsc", 3) == 0) {
1393 #ifndef CONFIG_CIFS_FSCACHE
1394 cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE "
1395 "kernel config option set");
1396 goto cifs_parse_mount_err;
1397 #endif
1398 vol->fsc = true;
1399 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1400 vol->mfsymlinks = true;
1401 } else if (strnicmp(data, "multiuser", 8) == 0) {
1402 vol->multiuser = true;
1403 } else
1404 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1405 data);
1406 }
1407 if (vol->UNC == NULL) {
1408 if (devname == NULL) {
1409 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1410 "target\n");
1411 goto cifs_parse_mount_err;
1412 }
1413 if ((temp_len = strnlen(devname, 300)) < 300) {
1414 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1415 if (vol->UNC == NULL)
1416 goto cifs_parse_mount_err;
1417 strcpy(vol->UNC, devname);
1418 if (strncmp(vol->UNC, "//", 2) == 0) {
1419 vol->UNC[0] = '\\';
1420 vol->UNC[1] = '\\';
1421 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1422 printk(KERN_WARNING "CIFS: UNC Path does not "
1423 "begin with // or \\\\ \n");
1424 goto cifs_parse_mount_err;
1425 }
1426 value = strpbrk(vol->UNC+2, "/\\");
1427 if (value)
1428 *value = '\\';
1429 } else {
1430 printk(KERN_WARNING "CIFS: UNC name too long\n");
1431 goto cifs_parse_mount_err;
1432 }
1433 }
1434
1435 if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1436 cERROR(1, "Multiuser mounts currently require krb5 "
1437 "authentication!");
1438 goto cifs_parse_mount_err;
1439 }
1440
1441 if (vol->UNCip == NULL)
1442 vol->UNCip = &vol->UNC[2];
1443
1444 if (uid_specified)
1445 vol->override_uid = override_uid;
1446 else if (override_uid == 1)
1447 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1448 "specified with no uid= option.\n");
1449
1450 if (gid_specified)
1451 vol->override_gid = override_gid;
1452 else if (override_gid == 1)
1453 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1454 "specified with no gid= option.\n");
1455
1456 kfree(mountdata_copy);
1457 return 0;
1458
1459 cifs_parse_mount_err:
1460 kfree(mountdata_copy);
1461 return 1;
1462 }
1463
1464 /** Returns true if srcaddr isn't specified and rhs isn't
1465 * specified, or if srcaddr is specified and
1466 * matches the IP address of the rhs argument.
1467 */
1468 static bool
1469 srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1470 {
1471 switch (srcaddr->sa_family) {
1472 case AF_UNSPEC:
1473 return (rhs->sa_family == AF_UNSPEC);
1474 case AF_INET: {
1475 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1476 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1477 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1478 }
1479 case AF_INET6: {
1480 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1481 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1482 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1483 }
1484 default:
1485 WARN_ON(1);
1486 return false; /* don't expect to be here */
1487 }
1488 }
1489
1490 /*
1491 * If no port is specified in addr structure, we try to match with 445 port
1492 * and if it fails - with 139 ports. It should be called only if address
1493 * families of server and addr are equal.
1494 */
1495 static bool
1496 match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1497 {
1498 __be16 port, *sport;
1499
1500 switch (addr->sa_family) {
1501 case AF_INET:
1502 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1503 port = ((struct sockaddr_in *) addr)->sin_port;
1504 break;
1505 case AF_INET6:
1506 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1507 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1508 break;
1509 default:
1510 WARN_ON(1);
1511 return false;
1512 }
1513
1514 if (!port) {
1515 port = htons(CIFS_PORT);
1516 if (port == *sport)
1517 return true;
1518
1519 port = htons(RFC1001_PORT);
1520 }
1521
1522 return port == *sport;
1523 }
1524
1525 static bool
1526 match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1527 struct sockaddr *srcaddr)
1528 {
1529 switch (addr->sa_family) {
1530 case AF_INET: {
1531 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1532 struct sockaddr_in *srv_addr4 =
1533 (struct sockaddr_in *)&server->dstaddr;
1534
1535 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
1536 return false;
1537 break;
1538 }
1539 case AF_INET6: {
1540 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1541 struct sockaddr_in6 *srv_addr6 =
1542 (struct sockaddr_in6 *)&server->dstaddr;
1543
1544 if (!ipv6_addr_equal(&addr6->sin6_addr,
1545 &srv_addr6->sin6_addr))
1546 return false;
1547 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
1548 return false;
1549 break;
1550 }
1551 default:
1552 WARN_ON(1);
1553 return false; /* don't expect to be here */
1554 }
1555
1556 if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1557 return false;
1558
1559 return true;
1560 }
1561
1562 static bool
1563 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1564 {
1565 unsigned int secFlags;
1566
1567 if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1568 secFlags = vol->secFlg;
1569 else
1570 secFlags = global_secflags | vol->secFlg;
1571
1572 switch (server->secType) {
1573 case LANMAN:
1574 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1575 return false;
1576 break;
1577 case NTLMv2:
1578 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1579 return false;
1580 break;
1581 case NTLM:
1582 if (!(secFlags & CIFSSEC_MAY_NTLM))
1583 return false;
1584 break;
1585 case Kerberos:
1586 if (!(secFlags & CIFSSEC_MAY_KRB5))
1587 return false;
1588 break;
1589 case RawNTLMSSP:
1590 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1591 return false;
1592 break;
1593 default:
1594 /* shouldn't happen */
1595 return false;
1596 }
1597
1598 /* now check if signing mode is acceptable */
1599 if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1600 (server->sec_mode & SECMODE_SIGN_REQUIRED))
1601 return false;
1602 else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1603 (server->sec_mode &
1604 (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1605 return false;
1606
1607 return true;
1608 }
1609
1610 static int match_server(struct TCP_Server_Info *server, struct sockaddr *addr,
1611 struct smb_vol *vol)
1612 {
1613 if (!net_eq(cifs_net_ns(server), current->nsproxy->net_ns))
1614 return 0;
1615
1616 if (!match_address(server, addr,
1617 (struct sockaddr *)&vol->srcaddr))
1618 return 0;
1619
1620 if (!match_port(server, addr))
1621 return 0;
1622
1623 if (!match_security(server, vol))
1624 return 0;
1625
1626 return 1;
1627 }
1628
1629 static struct TCP_Server_Info *
1630 cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1631 {
1632 struct TCP_Server_Info *server;
1633
1634 spin_lock(&cifs_tcp_ses_lock);
1635 list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
1636 if (!match_server(server, addr, vol))
1637 continue;
1638
1639 ++server->srv_count;
1640 spin_unlock(&cifs_tcp_ses_lock);
1641 cFYI(1, "Existing tcp session with server found");
1642 return server;
1643 }
1644 spin_unlock(&cifs_tcp_ses_lock);
1645 return NULL;
1646 }
1647
1648 static void
1649 cifs_put_tcp_session(struct TCP_Server_Info *server)
1650 {
1651 struct task_struct *task;
1652
1653 spin_lock(&cifs_tcp_ses_lock);
1654 if (--server->srv_count > 0) {
1655 spin_unlock(&cifs_tcp_ses_lock);
1656 return;
1657 }
1658
1659 put_net(cifs_net_ns(server));
1660
1661 list_del_init(&server->tcp_ses_list);
1662 spin_unlock(&cifs_tcp_ses_lock);
1663
1664 cancel_delayed_work_sync(&server->echo);
1665
1666 spin_lock(&GlobalMid_Lock);
1667 server->tcpStatus = CifsExiting;
1668 spin_unlock(&GlobalMid_Lock);
1669
1670 cifs_crypto_shash_release(server);
1671 cifs_fscache_release_client_cookie(server);
1672
1673 kfree(server->session_key.response);
1674 server->session_key.response = NULL;
1675 server->session_key.len = 0;
1676
1677 task = xchg(&server->tsk, NULL);
1678 if (task)
1679 force_sig(SIGKILL, task);
1680 }
1681
1682 static struct TCP_Server_Info *
1683 cifs_get_tcp_session(struct smb_vol *volume_info)
1684 {
1685 struct TCP_Server_Info *tcp_ses = NULL;
1686 struct sockaddr_storage addr;
1687 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1688 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1689 int rc;
1690
1691 memset(&addr, 0, sizeof(struct sockaddr_storage));
1692
1693 cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
1694
1695 if (volume_info->UNCip && volume_info->UNC) {
1696 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1697 volume_info->UNCip,
1698 strlen(volume_info->UNCip),
1699 volume_info->port);
1700 if (!rc) {
1701 /* we failed translating address */
1702 rc = -EINVAL;
1703 goto out_err;
1704 }
1705 } else if (volume_info->UNCip) {
1706 /* BB using ip addr as tcp_ses name to connect to the
1707 DFS root below */
1708 cERROR(1, "Connecting to DFS root not implemented yet");
1709 rc = -EINVAL;
1710 goto out_err;
1711 } else /* which tcp_sess DFS root would we conect to */ {
1712 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1713 "unc=//192.168.1.100/public) specified");
1714 rc = -EINVAL;
1715 goto out_err;
1716 }
1717
1718 /* see if we already have a matching tcp_ses */
1719 tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
1720 if (tcp_ses)
1721 return tcp_ses;
1722
1723 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1724 if (!tcp_ses) {
1725 rc = -ENOMEM;
1726 goto out_err;
1727 }
1728
1729 rc = cifs_crypto_shash_allocate(tcp_ses);
1730 if (rc) {
1731 cERROR(1, "could not setup hash structures rc %d", rc);
1732 goto out_err;
1733 }
1734
1735 cifs_set_net_ns(tcp_ses, get_net(current->nsproxy->net_ns));
1736 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1737 if (IS_ERR(tcp_ses->hostname)) {
1738 rc = PTR_ERR(tcp_ses->hostname);
1739 goto out_err_crypto_release;
1740 }
1741
1742 tcp_ses->noblocksnd = volume_info->noblocksnd;
1743 tcp_ses->noautotune = volume_info->noautotune;
1744 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1745 atomic_set(&tcp_ses->inFlight, 0);
1746 init_waitqueue_head(&tcp_ses->response_q);
1747 init_waitqueue_head(&tcp_ses->request_q);
1748 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1749 mutex_init(&tcp_ses->srv_mutex);
1750 memcpy(tcp_ses->workstation_RFC1001_name,
1751 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1752 memcpy(tcp_ses->server_RFC1001_name,
1753 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1754 tcp_ses->session_estab = false;
1755 tcp_ses->sequence_number = 0;
1756 tcp_ses->lstrp = jiffies;
1757 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1758 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1759 INIT_DELAYED_WORK(&tcp_ses->echo, cifs_echo_request);
1760
1761 /*
1762 * at this point we are the only ones with the pointer
1763 * to the struct since the kernel thread not created yet
1764 * no need to spinlock this init of tcpStatus or srv_count
1765 */
1766 tcp_ses->tcpStatus = CifsNew;
1767 memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1768 sizeof(tcp_ses->srcaddr));
1769 ++tcp_ses->srv_count;
1770
1771 if (addr.ss_family == AF_INET6) {
1772 cFYI(1, "attempting ipv6 connect");
1773 /* BB should we allow ipv6 on port 139? */
1774 /* other OS never observed in Wild doing 139 with v6 */
1775 memcpy(&tcp_ses->dstaddr, sin_server6,
1776 sizeof(struct sockaddr_in6));
1777 } else
1778 memcpy(&tcp_ses->dstaddr, sin_server,
1779 sizeof(struct sockaddr_in));
1780
1781 rc = ip_connect(tcp_ses);
1782 if (rc < 0) {
1783 cERROR(1, "Error connecting to socket. Aborting operation");
1784 goto out_err_crypto_release;
1785 }
1786
1787 /*
1788 * since we're in a cifs function already, we know that
1789 * this will succeed. No need for try_module_get().
1790 */
1791 __module_get(THIS_MODULE);
1792 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1793 tcp_ses, "cifsd");
1794 if (IS_ERR(tcp_ses->tsk)) {
1795 rc = PTR_ERR(tcp_ses->tsk);
1796 cERROR(1, "error %d create cifsd thread", rc);
1797 module_put(THIS_MODULE);
1798 goto out_err_crypto_release;
1799 }
1800 tcp_ses->tcpStatus = CifsNeedNegotiate;
1801
1802 /* thread spawned, put it on the list */
1803 spin_lock(&cifs_tcp_ses_lock);
1804 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1805 spin_unlock(&cifs_tcp_ses_lock);
1806
1807 cifs_fscache_get_client_cookie(tcp_ses);
1808
1809 /* queue echo request delayed work */
1810 queue_delayed_work(system_nrt_wq, &tcp_ses->echo, SMB_ECHO_INTERVAL);
1811
1812 return tcp_ses;
1813
1814 out_err_crypto_release:
1815 cifs_crypto_shash_release(tcp_ses);
1816
1817 put_net(cifs_net_ns(tcp_ses));
1818
1819 out_err:
1820 if (tcp_ses) {
1821 if (!IS_ERR(tcp_ses->hostname))
1822 kfree(tcp_ses->hostname);
1823 if (tcp_ses->ssocket)
1824 sock_release(tcp_ses->ssocket);
1825 kfree(tcp_ses);
1826 }
1827 return ERR_PTR(rc);
1828 }
1829
1830 static int match_session(struct cifs_ses *ses, struct smb_vol *vol)
1831 {
1832 switch (ses->server->secType) {
1833 case Kerberos:
1834 if (vol->cred_uid != ses->cred_uid)
1835 return 0;
1836 break;
1837 default:
1838 /* anything else takes username/password */
1839 if (ses->user_name == NULL)
1840 return 0;
1841 if (strncmp(ses->user_name, vol->username,
1842 MAX_USERNAME_SIZE))
1843 return 0;
1844 if (strlen(vol->username) != 0 &&
1845 ses->password != NULL &&
1846 strncmp(ses->password,
1847 vol->password ? vol->password : "",
1848 MAX_PASSWORD_SIZE))
1849 return 0;
1850 }
1851 return 1;
1852 }
1853
1854 static struct cifs_ses *
1855 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1856 {
1857 struct cifs_ses *ses;
1858
1859 spin_lock(&cifs_tcp_ses_lock);
1860 list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
1861 if (!match_session(ses, vol))
1862 continue;
1863 ++ses->ses_count;
1864 spin_unlock(&cifs_tcp_ses_lock);
1865 return ses;
1866 }
1867 spin_unlock(&cifs_tcp_ses_lock);
1868 return NULL;
1869 }
1870
1871 static void
1872 cifs_put_smb_ses(struct cifs_ses *ses)
1873 {
1874 int xid;
1875 struct TCP_Server_Info *server = ses->server;
1876
1877 cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
1878 spin_lock(&cifs_tcp_ses_lock);
1879 if (--ses->ses_count > 0) {
1880 spin_unlock(&cifs_tcp_ses_lock);
1881 return;
1882 }
1883
1884 list_del_init(&ses->smb_ses_list);
1885 spin_unlock(&cifs_tcp_ses_lock);
1886
1887 if (ses->status == CifsGood) {
1888 xid = GetXid();
1889 CIFSSMBLogoff(xid, ses);
1890 _FreeXid(xid);
1891 }
1892 sesInfoFree(ses);
1893 cifs_put_tcp_session(server);
1894 }
1895
1896 static bool warned_on_ntlm; /* globals init to false automatically */
1897
1898 static struct cifs_ses *
1899 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1900 {
1901 int rc = -ENOMEM, xid;
1902 struct cifs_ses *ses;
1903 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1904 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
1905
1906 xid = GetXid();
1907
1908 ses = cifs_find_smb_ses(server, volume_info);
1909 if (ses) {
1910 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1911
1912 mutex_lock(&ses->session_mutex);
1913 rc = cifs_negotiate_protocol(xid, ses);
1914 if (rc) {
1915 mutex_unlock(&ses->session_mutex);
1916 /* problem -- put our ses reference */
1917 cifs_put_smb_ses(ses);
1918 FreeXid(xid);
1919 return ERR_PTR(rc);
1920 }
1921 if (ses->need_reconnect) {
1922 cFYI(1, "Session needs reconnect");
1923 rc = cifs_setup_session(xid, ses,
1924 volume_info->local_nls);
1925 if (rc) {
1926 mutex_unlock(&ses->session_mutex);
1927 /* problem -- put our reference */
1928 cifs_put_smb_ses(ses);
1929 FreeXid(xid);
1930 return ERR_PTR(rc);
1931 }
1932 }
1933 mutex_unlock(&ses->session_mutex);
1934
1935 /* existing SMB ses has a server reference already */
1936 cifs_put_tcp_session(server);
1937 FreeXid(xid);
1938 return ses;
1939 }
1940
1941 cFYI(1, "Existing smb sess not found");
1942 ses = sesInfoAlloc();
1943 if (ses == NULL)
1944 goto get_ses_fail;
1945
1946 /* new SMB session uses our server ref */
1947 ses->server = server;
1948 if (server->dstaddr.ss_family == AF_INET6)
1949 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
1950 else
1951 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
1952
1953 if (volume_info->username) {
1954 ses->user_name = kstrdup(volume_info->username, GFP_KERNEL);
1955 if (!ses->user_name)
1956 goto get_ses_fail;
1957 }
1958
1959 /* volume_info->password freed at unmount */
1960 if (volume_info->password) {
1961 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
1962 if (!ses->password)
1963 goto get_ses_fail;
1964 }
1965 if (volume_info->domainname) {
1966 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
1967 if (!ses->domainName)
1968 goto get_ses_fail;
1969 }
1970 ses->cred_uid = volume_info->cred_uid;
1971 ses->linux_uid = volume_info->linux_uid;
1972
1973 /* ntlmv2 is much stronger than ntlm security, and has been broadly
1974 supported for many years, time to update default security mechanism */
1975 if ((volume_info->secFlg == 0) && warned_on_ntlm == false) {
1976 warned_on_ntlm = true;
1977 cERROR(1, "default security mechanism requested. The default "
1978 "security mechanism will be upgraded from ntlm to "
1979 "ntlmv2 in kernel release 3.1");
1980 }
1981 ses->overrideSecFlg = volume_info->secFlg;
1982
1983 mutex_lock(&ses->session_mutex);
1984 rc = cifs_negotiate_protocol(xid, ses);
1985 if (!rc)
1986 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
1987 mutex_unlock(&ses->session_mutex);
1988 if (rc)
1989 goto get_ses_fail;
1990
1991 /* success, put it on the list */
1992 spin_lock(&cifs_tcp_ses_lock);
1993 list_add(&ses->smb_ses_list, &server->smb_ses_list);
1994 spin_unlock(&cifs_tcp_ses_lock);
1995
1996 FreeXid(xid);
1997 return ses;
1998
1999 get_ses_fail:
2000 sesInfoFree(ses);
2001 FreeXid(xid);
2002 return ERR_PTR(rc);
2003 }
2004
2005 static int match_tcon(struct cifs_tcon *tcon, const char *unc)
2006 {
2007 if (tcon->tidStatus == CifsExiting)
2008 return 0;
2009 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
2010 return 0;
2011 return 1;
2012 }
2013
2014 static struct cifs_tcon *
2015 cifs_find_tcon(struct cifs_ses *ses, const char *unc)
2016 {
2017 struct list_head *tmp;
2018 struct cifs_tcon *tcon;
2019
2020 spin_lock(&cifs_tcp_ses_lock);
2021 list_for_each(tmp, &ses->tcon_list) {
2022 tcon = list_entry(tmp, struct cifs_tcon, tcon_list);
2023 if (!match_tcon(tcon, unc))
2024 continue;
2025 ++tcon->tc_count;
2026 spin_unlock(&cifs_tcp_ses_lock);
2027 return tcon;
2028 }
2029 spin_unlock(&cifs_tcp_ses_lock);
2030 return NULL;
2031 }
2032
2033 static void
2034 cifs_put_tcon(struct cifs_tcon *tcon)
2035 {
2036 int xid;
2037 struct cifs_ses *ses = tcon->ses;
2038
2039 cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
2040 spin_lock(&cifs_tcp_ses_lock);
2041 if (--tcon->tc_count > 0) {
2042 spin_unlock(&cifs_tcp_ses_lock);
2043 return;
2044 }
2045
2046 list_del_init(&tcon->tcon_list);
2047 spin_unlock(&cifs_tcp_ses_lock);
2048
2049 xid = GetXid();
2050 CIFSSMBTDis(xid, tcon);
2051 _FreeXid(xid);
2052
2053 cifs_fscache_release_super_cookie(tcon);
2054 tconInfoFree(tcon);
2055 cifs_put_smb_ses(ses);
2056 }
2057
2058 static struct cifs_tcon *
2059 cifs_get_tcon(struct cifs_ses *ses, struct smb_vol *volume_info)
2060 {
2061 int rc, xid;
2062 struct cifs_tcon *tcon;
2063
2064 tcon = cifs_find_tcon(ses, volume_info->UNC);
2065 if (tcon) {
2066 cFYI(1, "Found match on UNC path");
2067 /* existing tcon already has a reference */
2068 cifs_put_smb_ses(ses);
2069 if (tcon->seal != volume_info->seal)
2070 cERROR(1, "transport encryption setting "
2071 "conflicts with existing tid");
2072 return tcon;
2073 }
2074
2075 tcon = tconInfoAlloc();
2076 if (tcon == NULL) {
2077 rc = -ENOMEM;
2078 goto out_fail;
2079 }
2080
2081 tcon->ses = ses;
2082 if (volume_info->password) {
2083 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
2084 if (!tcon->password) {
2085 rc = -ENOMEM;
2086 goto out_fail;
2087 }
2088 }
2089
2090 if (strchr(volume_info->UNC + 3, '\\') == NULL
2091 && strchr(volume_info->UNC + 3, '/') == NULL) {
2092 cERROR(1, "Missing share name");
2093 rc = -ENODEV;
2094 goto out_fail;
2095 }
2096
2097 /* BB Do we need to wrap session_mutex around
2098 * this TCon call and Unix SetFS as
2099 * we do on SessSetup and reconnect? */
2100 xid = GetXid();
2101 rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
2102 FreeXid(xid);
2103 cFYI(1, "CIFS Tcon rc = %d", rc);
2104 if (rc)
2105 goto out_fail;
2106
2107 if (volume_info->nodfs) {
2108 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2109 cFYI(1, "DFS disabled (%d)", tcon->Flags);
2110 }
2111 tcon->seal = volume_info->seal;
2112 /* we can have only one retry value for a connection
2113 to a share so for resources mounted more than once
2114 to the same server share the last value passed in
2115 for the retry flag is used */
2116 tcon->retry = volume_info->retry;
2117 tcon->nocase = volume_info->nocase;
2118 tcon->local_lease = volume_info->local_lease;
2119
2120 spin_lock(&cifs_tcp_ses_lock);
2121 list_add(&tcon->tcon_list, &ses->tcon_list);
2122 spin_unlock(&cifs_tcp_ses_lock);
2123
2124 cifs_fscache_get_super_cookie(tcon);
2125
2126 return tcon;
2127
2128 out_fail:
2129 tconInfoFree(tcon);
2130 return ERR_PTR(rc);
2131 }
2132
2133 void
2134 cifs_put_tlink(struct tcon_link *tlink)
2135 {
2136 if (!tlink || IS_ERR(tlink))
2137 return;
2138
2139 if (!atomic_dec_and_test(&tlink->tl_count) ||
2140 test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2141 tlink->tl_time = jiffies;
2142 return;
2143 }
2144
2145 if (!IS_ERR(tlink_tcon(tlink)))
2146 cifs_put_tcon(tlink_tcon(tlink));
2147 kfree(tlink);
2148 return;
2149 }
2150
2151 static inline struct tcon_link *
2152 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
2153 {
2154 return cifs_sb->master_tlink;
2155 }
2156
2157 static int
2158 compare_mount_options(struct super_block *sb, struct cifs_mnt_data *mnt_data)
2159 {
2160 struct cifs_sb_info *old = CIFS_SB(sb);
2161 struct cifs_sb_info *new = mnt_data->cifs_sb;
2162
2163 if ((sb->s_flags & CIFS_MS_MASK) != (mnt_data->flags & CIFS_MS_MASK))
2164 return 0;
2165
2166 if ((old->mnt_cifs_flags & CIFS_MOUNT_MASK) !=
2167 (new->mnt_cifs_flags & CIFS_MOUNT_MASK))
2168 return 0;
2169
2170 if (old->rsize != new->rsize)
2171 return 0;
2172
2173 /*
2174 * We want to share sb only if we don't specify wsize or specified wsize
2175 * is greater or equal than existing one.
2176 */
2177 if (new->wsize && new->wsize < old->wsize)
2178 return 0;
2179
2180 if (old->mnt_uid != new->mnt_uid || old->mnt_gid != new->mnt_gid)
2181 return 0;
2182
2183 if (old->mnt_file_mode != new->mnt_file_mode ||
2184 old->mnt_dir_mode != new->mnt_dir_mode)
2185 return 0;
2186
2187 if (strcmp(old->local_nls->charset, new->local_nls->charset))
2188 return 0;
2189
2190 if (old->actimeo != new->actimeo)
2191 return 0;
2192
2193 return 1;
2194 }
2195
2196 int
2197 cifs_match_super(struct super_block *sb, void *data)
2198 {
2199 struct cifs_mnt_data *mnt_data = (struct cifs_mnt_data *)data;
2200 struct smb_vol *volume_info;
2201 struct cifs_sb_info *cifs_sb;
2202 struct TCP_Server_Info *tcp_srv;
2203 struct cifs_ses *ses;
2204 struct cifs_tcon *tcon;
2205 struct tcon_link *tlink;
2206 struct sockaddr_storage addr;
2207 int rc = 0;
2208
2209 memset(&addr, 0, sizeof(struct sockaddr_storage));
2210
2211 spin_lock(&cifs_tcp_ses_lock);
2212 cifs_sb = CIFS_SB(sb);
2213 tlink = cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
2214 if (IS_ERR(tlink)) {
2215 spin_unlock(&cifs_tcp_ses_lock);
2216 return rc;
2217 }
2218 tcon = tlink_tcon(tlink);
2219 ses = tcon->ses;
2220 tcp_srv = ses->server;
2221
2222 volume_info = mnt_data->vol;
2223
2224 if (!volume_info->UNCip || !volume_info->UNC)
2225 goto out;
2226
2227 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
2228 volume_info->UNCip,
2229 strlen(volume_info->UNCip),
2230 volume_info->port);
2231 if (!rc)
2232 goto out;
2233
2234 if (!match_server(tcp_srv, (struct sockaddr *)&addr, volume_info) ||
2235 !match_session(ses, volume_info) ||
2236 !match_tcon(tcon, volume_info->UNC)) {
2237 rc = 0;
2238 goto out;
2239 }
2240
2241 rc = compare_mount_options(sb, mnt_data);
2242 out:
2243 cifs_put_tlink(tlink);
2244 spin_unlock(&cifs_tcp_ses_lock);
2245 return rc;
2246 }
2247
2248 int
2249 get_dfs_path(int xid, struct cifs_ses *pSesInfo, const char *old_path,
2250 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
2251 struct dfs_info3_param **preferrals, int remap)
2252 {
2253 char *temp_unc;
2254 int rc = 0;
2255
2256 *pnum_referrals = 0;
2257 *preferrals = NULL;
2258
2259 if (pSesInfo->ipc_tid == 0) {
2260 temp_unc = kmalloc(2 /* for slashes */ +
2261 strnlen(pSesInfo->serverName,
2262 SERVER_NAME_LEN_WITH_NULL * 2)
2263 + 1 + 4 /* slash IPC$ */ + 2,
2264 GFP_KERNEL);
2265 if (temp_unc == NULL)
2266 return -ENOMEM;
2267 temp_unc[0] = '\\';
2268 temp_unc[1] = '\\';
2269 strcpy(temp_unc + 2, pSesInfo->serverName);
2270 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2271 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
2272 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
2273 kfree(temp_unc);
2274 }
2275 if (rc == 0)
2276 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
2277 pnum_referrals, nls_codepage, remap);
2278 /* BB map targetUNCs to dfs_info3 structures, here or
2279 in CIFSGetDFSRefer BB */
2280
2281 return rc;
2282 }
2283
2284 #ifdef CONFIG_DEBUG_LOCK_ALLOC
2285 static struct lock_class_key cifs_key[2];
2286 static struct lock_class_key cifs_slock_key[2];
2287
2288 static inline void
2289 cifs_reclassify_socket4(struct socket *sock)
2290 {
2291 struct sock *sk = sock->sk;
2292 BUG_ON(sock_owned_by_user(sk));
2293 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2294 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2295 }
2296
2297 static inline void
2298 cifs_reclassify_socket6(struct socket *sock)
2299 {
2300 struct sock *sk = sock->sk;
2301 BUG_ON(sock_owned_by_user(sk));
2302 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2303 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2304 }
2305 #else
2306 static inline void
2307 cifs_reclassify_socket4(struct socket *sock)
2308 {
2309 }
2310
2311 static inline void
2312 cifs_reclassify_socket6(struct socket *sock)
2313 {
2314 }
2315 #endif
2316
2317 /* See RFC1001 section 14 on representation of Netbios names */
2318 static void rfc1002mangle(char *target, char *source, unsigned int length)
2319 {
2320 unsigned int i, j;
2321
2322 for (i = 0, j = 0; i < (length); i++) {
2323 /* mask a nibble at a time and encode */
2324 target[j] = 'A' + (0x0F & (source[i] >> 4));
2325 target[j+1] = 'A' + (0x0F & source[i]);
2326 j += 2;
2327 }
2328
2329 }
2330
2331 static int
2332 bind_socket(struct TCP_Server_Info *server)
2333 {
2334 int rc = 0;
2335 if (server->srcaddr.ss_family != AF_UNSPEC) {
2336 /* Bind to the specified local IP address */
2337 struct socket *socket = server->ssocket;
2338 rc = socket->ops->bind(socket,
2339 (struct sockaddr *) &server->srcaddr,
2340 sizeof(server->srcaddr));
2341 if (rc < 0) {
2342 struct sockaddr_in *saddr4;
2343 struct sockaddr_in6 *saddr6;
2344 saddr4 = (struct sockaddr_in *)&server->srcaddr;
2345 saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2346 if (saddr6->sin6_family == AF_INET6)
2347 cERROR(1, "cifs: "
2348 "Failed to bind to: %pI6c, error: %d\n",
2349 &saddr6->sin6_addr, rc);
2350 else
2351 cERROR(1, "cifs: "
2352 "Failed to bind to: %pI4, error: %d\n",
2353 &saddr4->sin_addr.s_addr, rc);
2354 }
2355 }
2356 return rc;
2357 }
2358
2359 static int
2360 ip_rfc1001_connect(struct TCP_Server_Info *server)
2361 {
2362 int rc = 0;
2363 /*
2364 * some servers require RFC1001 sessinit before sending
2365 * negprot - BB check reconnection in case where second
2366 * sessinit is sent but no second negprot
2367 */
2368 struct rfc1002_session_packet *ses_init_buf;
2369 struct smb_hdr *smb_buf;
2370 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2371 GFP_KERNEL);
2372 if (ses_init_buf) {
2373 ses_init_buf->trailer.session_req.called_len = 32;
2374
2375 if (server->server_RFC1001_name &&
2376 server->server_RFC1001_name[0] != 0)
2377 rfc1002mangle(ses_init_buf->trailer.
2378 session_req.called_name,
2379 server->server_RFC1001_name,
2380 RFC1001_NAME_LEN_WITH_NULL);
2381 else
2382 rfc1002mangle(ses_init_buf->trailer.
2383 session_req.called_name,
2384 DEFAULT_CIFS_CALLED_NAME,
2385 RFC1001_NAME_LEN_WITH_NULL);
2386
2387 ses_init_buf->trailer.session_req.calling_len = 32;
2388
2389 /*
2390 * calling name ends in null (byte 16) from old smb
2391 * convention.
2392 */
2393 if (server->workstation_RFC1001_name &&
2394 server->workstation_RFC1001_name[0] != 0)
2395 rfc1002mangle(ses_init_buf->trailer.
2396 session_req.calling_name,
2397 server->workstation_RFC1001_name,
2398 RFC1001_NAME_LEN_WITH_NULL);
2399 else
2400 rfc1002mangle(ses_init_buf->trailer.
2401 session_req.calling_name,
2402 "LINUX_CIFS_CLNT",
2403 RFC1001_NAME_LEN_WITH_NULL);
2404
2405 ses_init_buf->trailer.session_req.scope1 = 0;
2406 ses_init_buf->trailer.session_req.scope2 = 0;
2407 smb_buf = (struct smb_hdr *)ses_init_buf;
2408
2409 /* sizeof RFC1002_SESSION_REQUEST with no scope */
2410 smb_buf->smb_buf_length = cpu_to_be32(0x81000044);
2411 rc = smb_send(server, smb_buf, 0x44);
2412 kfree(ses_init_buf);
2413 /*
2414 * RFC1001 layer in at least one server
2415 * requires very short break before negprot
2416 * presumably because not expecting negprot
2417 * to follow so fast. This is a simple
2418 * solution that works without
2419 * complicating the code and causes no
2420 * significant slowing down on mount
2421 * for everyone else
2422 */
2423 usleep_range(1000, 2000);
2424 }
2425 /*
2426 * else the negprot may still work without this
2427 * even though malloc failed
2428 */
2429
2430 return rc;
2431 }
2432
2433 static int
2434 generic_ip_connect(struct TCP_Server_Info *server)
2435 {
2436 int rc = 0;
2437 __be16 sport;
2438 int slen, sfamily;
2439 struct socket *socket = server->ssocket;
2440 struct sockaddr *saddr;
2441
2442 saddr = (struct sockaddr *) &server->dstaddr;
2443
2444 if (server->dstaddr.ss_family == AF_INET6) {
2445 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
2446 slen = sizeof(struct sockaddr_in6);
2447 sfamily = AF_INET6;
2448 } else {
2449 sport = ((struct sockaddr_in *) saddr)->sin_port;
2450 slen = sizeof(struct sockaddr_in);
2451 sfamily = AF_INET;
2452 }
2453
2454 if (socket == NULL) {
2455 rc = __sock_create(cifs_net_ns(server), sfamily, SOCK_STREAM,
2456 IPPROTO_TCP, &socket, 1);
2457 if (rc < 0) {
2458 cERROR(1, "Error %d creating socket", rc);
2459 server->ssocket = NULL;
2460 return rc;
2461 }
2462
2463 /* BB other socket options to set KEEPALIVE, NODELAY? */
2464 cFYI(1, "Socket created");
2465 server->ssocket = socket;
2466 socket->sk->sk_allocation = GFP_NOFS;
2467 if (sfamily == AF_INET6)
2468 cifs_reclassify_socket6(socket);
2469 else
2470 cifs_reclassify_socket4(socket);
2471 }
2472
2473 rc = bind_socket(server);
2474 if (rc < 0)
2475 return rc;
2476
2477 /*
2478 * Eventually check for other socket options to change from
2479 * the default. sock_setsockopt not used because it expects
2480 * user space buffer
2481 */
2482 socket->sk->sk_rcvtimeo = 7 * HZ;
2483 socket->sk->sk_sndtimeo = 5 * HZ;
2484
2485 /* make the bufsizes depend on wsize/rsize and max requests */
2486 if (server->noautotune) {
2487 if (socket->sk->sk_sndbuf < (200 * 1024))
2488 socket->sk->sk_sndbuf = 200 * 1024;
2489 if (socket->sk->sk_rcvbuf < (140 * 1024))
2490 socket->sk->sk_rcvbuf = 140 * 1024;
2491 }
2492
2493 if (server->tcp_nodelay) {
2494 int val = 1;
2495 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2496 (char *)&val, sizeof(val));
2497 if (rc)
2498 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2499 }
2500
2501 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
2502 socket->sk->sk_sndbuf,
2503 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
2504
2505 rc = socket->ops->connect(socket, saddr, slen, 0);
2506 if (rc < 0) {
2507 cFYI(1, "Error %d connecting to server", rc);
2508 sock_release(socket);
2509 server->ssocket = NULL;
2510 return rc;
2511 }
2512
2513 if (sport == htons(RFC1001_PORT))
2514 rc = ip_rfc1001_connect(server);
2515
2516 return rc;
2517 }
2518
2519 static int
2520 ip_connect(struct TCP_Server_Info *server)
2521 {
2522 __be16 *sport;
2523 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2524 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
2525
2526 if (server->dstaddr.ss_family == AF_INET6)
2527 sport = &addr6->sin6_port;
2528 else
2529 sport = &addr->sin_port;
2530
2531 if (*sport == 0) {
2532 int rc;
2533
2534 /* try with 445 port at first */
2535 *sport = htons(CIFS_PORT);
2536
2537 rc = generic_ip_connect(server);
2538 if (rc >= 0)
2539 return rc;
2540
2541 /* if it failed, try with 139 port */
2542 *sport = htons(RFC1001_PORT);
2543 }
2544
2545 return generic_ip_connect(server);
2546 }
2547
2548 void reset_cifs_unix_caps(int xid, struct cifs_tcon *tcon,
2549 struct cifs_sb_info *cifs_sb, struct smb_vol *vol_info)
2550 {
2551 /* if we are reconnecting then should we check to see if
2552 * any requested capabilities changed locally e.g. via
2553 * remount but we can not do much about it here
2554 * if they have (even if we could detect it by the following)
2555 * Perhaps we could add a backpointer to array of sb from tcon
2556 * or if we change to make all sb to same share the same
2557 * sb as NFS - then we only have one backpointer to sb.
2558 * What if we wanted to mount the server share twice once with
2559 * and once without posixacls or posix paths? */
2560 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2561
2562 if (vol_info && vol_info->no_linux_ext) {
2563 tcon->fsUnixInfo.Capability = 0;
2564 tcon->unix_ext = 0; /* Unix Extensions disabled */
2565 cFYI(1, "Linux protocol extensions disabled");
2566 return;
2567 } else if (vol_info)
2568 tcon->unix_ext = 1; /* Unix Extensions supported */
2569
2570 if (tcon->unix_ext == 0) {
2571 cFYI(1, "Unix extensions disabled so not set on reconnect");
2572 return;
2573 }
2574
2575 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2576 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2577 cFYI(1, "unix caps which server supports %lld", cap);
2578 /* check for reconnect case in which we do not
2579 want to change the mount behavior if we can avoid it */
2580 if (vol_info == NULL) {
2581 /* turn off POSIX ACL and PATHNAMES if not set
2582 originally at mount time */
2583 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2584 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2585 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2586 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2587 cERROR(1, "POSIXPATH support change");
2588 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2589 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2590 cERROR(1, "possible reconnect error");
2591 cERROR(1, "server disabled POSIX path support");
2592 }
2593 }
2594
2595 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2596 cERROR(1, "per-share encryption not supported yet");
2597
2598 cap &= CIFS_UNIX_CAP_MASK;
2599 if (vol_info && vol_info->no_psx_acl)
2600 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2601 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2602 cFYI(1, "negotiated posix acl support");
2603 if (cifs_sb)
2604 cifs_sb->mnt_cifs_flags |=
2605 CIFS_MOUNT_POSIXACL;
2606 }
2607
2608 if (vol_info && vol_info->posix_paths == 0)
2609 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2610 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2611 cFYI(1, "negotiate posix pathnames");
2612 if (cifs_sb)
2613 cifs_sb->mnt_cifs_flags |=
2614 CIFS_MOUNT_POSIX_PATHS;
2615 }
2616
2617 if (cifs_sb && (cifs_sb->rsize > 127 * 1024)) {
2618 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2619 cifs_sb->rsize = 127 * 1024;
2620 cFYI(DBG2, "larger reads not supported by srv");
2621 }
2622 }
2623
2624
2625 cFYI(1, "Negotiate caps 0x%x", (int)cap);
2626 #ifdef CONFIG_CIFS_DEBUG2
2627 if (cap & CIFS_UNIX_FCNTL_CAP)
2628 cFYI(1, "FCNTL cap");
2629 if (cap & CIFS_UNIX_EXTATTR_CAP)
2630 cFYI(1, "EXTATTR cap");
2631 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2632 cFYI(1, "POSIX path cap");
2633 if (cap & CIFS_UNIX_XATTR_CAP)
2634 cFYI(1, "XATTR cap");
2635 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2636 cFYI(1, "POSIX ACL cap");
2637 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2638 cFYI(1, "very large read cap");
2639 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2640 cFYI(1, "very large write cap");
2641 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP)
2642 cFYI(1, "transport encryption cap");
2643 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2644 cFYI(1, "mandatory transport encryption cap");
2645 #endif /* CIFS_DEBUG2 */
2646 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2647 if (vol_info == NULL) {
2648 cFYI(1, "resetting capabilities failed");
2649 } else
2650 cERROR(1, "Negotiating Unix capabilities "
2651 "with the server failed. Consider "
2652 "mounting with the Unix Extensions\n"
2653 "disabled, if problems are found, "
2654 "by specifying the nounix mount "
2655 "option.");
2656
2657 }
2658 }
2659 }
2660
2661 void cifs_setup_cifs_sb(struct smb_vol *pvolume_info,
2662 struct cifs_sb_info *cifs_sb)
2663 {
2664 INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2665
2666 spin_lock_init(&cifs_sb->tlink_tree_lock);
2667 cifs_sb->tlink_tree = RB_ROOT;
2668
2669 if (pvolume_info->rsize > CIFSMaxBufSize) {
2670 cERROR(1, "rsize %d too large, using MaxBufSize",
2671 pvolume_info->rsize);
2672 cifs_sb->rsize = CIFSMaxBufSize;
2673 } else if ((pvolume_info->rsize) &&
2674 (pvolume_info->rsize <= CIFSMaxBufSize))
2675 cifs_sb->rsize = pvolume_info->rsize;
2676 else /* default */
2677 cifs_sb->rsize = CIFSMaxBufSize;
2678
2679 if (cifs_sb->rsize < 2048) {
2680 cifs_sb->rsize = 2048;
2681 /* Windows ME may prefer this */
2682 cFYI(1, "readsize set to minimum: 2048");
2683 }
2684
2685 /*
2686 * Temporarily set wsize for matching superblock. If we end up using
2687 * new sb then cifs_negotiate_wsize will later negotiate it downward
2688 * if needed.
2689 */
2690 cifs_sb->wsize = pvolume_info->wsize;
2691
2692 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2693 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2694 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2695 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2696 cFYI(1, "file mode: 0x%x dir mode: 0x%x",
2697 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
2698
2699 cifs_sb->actimeo = pvolume_info->actimeo;
2700 cifs_sb->local_nls = pvolume_info->local_nls;
2701
2702 if (pvolume_info->noperm)
2703 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2704 if (pvolume_info->setuids)
2705 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2706 if (pvolume_info->server_ino)
2707 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2708 if (pvolume_info->remap)
2709 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2710 if (pvolume_info->no_xattr)
2711 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2712 if (pvolume_info->sfu_emul)
2713 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2714 if (pvolume_info->nobrl)
2715 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2716 if (pvolume_info->nostrictsync)
2717 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2718 if (pvolume_info->mand_lock)
2719 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2720 if (pvolume_info->rwpidforward)
2721 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_RWPIDFORWARD;
2722 if (pvolume_info->cifs_acl)
2723 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2724 if (pvolume_info->override_uid)
2725 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2726 if (pvolume_info->override_gid)
2727 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2728 if (pvolume_info->dynperm)
2729 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2730 if (pvolume_info->fsc)
2731 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
2732 if (pvolume_info->multiuser)
2733 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2734 CIFS_MOUNT_NO_PERM);
2735 if (pvolume_info->strict_io)
2736 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_STRICT_IO;
2737 if (pvolume_info->direct_io) {
2738 cFYI(1, "mounting share using direct i/o");
2739 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2740 }
2741 if (pvolume_info->mfsymlinks) {
2742 if (pvolume_info->sfu_emul) {
2743 cERROR(1, "mount option mfsymlinks ignored if sfu "
2744 "mount option is used");
2745 } else {
2746 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2747 }
2748 }
2749
2750 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2751 cERROR(1, "mount option dynperm ignored if cifsacl "
2752 "mount option supported");
2753 }
2754
2755 /*
2756 * When the server supports very large writes via POSIX extensions, we can
2757 * allow up to 2^24-1, minus the size of a WRITE_AND_X header, not including
2758 * the RFC1001 length.
2759 *
2760 * Note that this might make for "interesting" allocation problems during
2761 * writeback however as we have to allocate an array of pointers for the
2762 * pages. A 16M write means ~32kb page array with PAGE_CACHE_SIZE == 4096.
2763 */
2764 #define CIFS_MAX_WSIZE ((1<<24) - 1 - sizeof(WRITE_REQ) + 4)
2765
2766 /*
2767 * When the server doesn't allow large posix writes, only allow a wsize of
2768 * 128k minus the size of the WRITE_AND_X header. That allows for a write up
2769 * to the maximum size described by RFC1002.
2770 */
2771 #define CIFS_MAX_RFC1002_WSIZE (128 * 1024 - sizeof(WRITE_REQ) + 4)
2772
2773 /*
2774 * The default wsize is 1M. find_get_pages seems to return a maximum of 256
2775 * pages in a single call. With PAGE_CACHE_SIZE == 4k, this means we can fill
2776 * a single wsize request with a single call.
2777 */
2778 #define CIFS_DEFAULT_WSIZE (1024 * 1024)
2779
2780 static unsigned int
2781 cifs_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *pvolume_info)
2782 {
2783 __u64 unix_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2784 struct TCP_Server_Info *server = tcon->ses->server;
2785 unsigned int wsize = pvolume_info->wsize ? pvolume_info->wsize :
2786 CIFS_DEFAULT_WSIZE;
2787
2788 /* can server support 24-bit write sizes? (via UNIX extensions) */
2789 if (!tcon->unix_ext || !(unix_cap & CIFS_UNIX_LARGE_WRITE_CAP))
2790 wsize = min_t(unsigned int, wsize, CIFS_MAX_RFC1002_WSIZE);
2791
2792 /*
2793 * no CAP_LARGE_WRITE_X or is signing enabled without CAP_UNIX set?
2794 * Limit it to max buffer offered by the server, minus the size of the
2795 * WRITEX header, not including the 4 byte RFC1001 length.
2796 */
2797 if (!(server->capabilities & CAP_LARGE_WRITE_X) ||
2798 (!(server->capabilities & CAP_UNIX) &&
2799 (server->sec_mode & (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED))))
2800 wsize = min_t(unsigned int, wsize,
2801 server->maxBuf - sizeof(WRITE_REQ) + 4);
2802
2803 /* hard limit of CIFS_MAX_WSIZE */
2804 wsize = min_t(unsigned int, wsize, CIFS_MAX_WSIZE);
2805
2806 return wsize;
2807 }
2808
2809 static int
2810 is_path_accessible(int xid, struct cifs_tcon *tcon,
2811 struct cifs_sb_info *cifs_sb, const char *full_path)
2812 {
2813 int rc;
2814 FILE_ALL_INFO *pfile_info;
2815
2816 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2817 if (pfile_info == NULL)
2818 return -ENOMEM;
2819
2820 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2821 0 /* not legacy */, cifs_sb->local_nls,
2822 cifs_sb->mnt_cifs_flags &
2823 CIFS_MOUNT_MAP_SPECIAL_CHR);
2824
2825 if (rc == -EOPNOTSUPP || rc == -EINVAL)
2826 rc = SMBQueryInformation(xid, tcon, full_path, pfile_info,
2827 cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
2828 CIFS_MOUNT_MAP_SPECIAL_CHR);
2829 kfree(pfile_info);
2830 return rc;
2831 }
2832
2833 void
2834 cifs_cleanup_volume_info(struct smb_vol **pvolume_info)
2835 {
2836 struct smb_vol *volume_info;
2837
2838 if (!pvolume_info || !*pvolume_info)
2839 return;
2840
2841 volume_info = *pvolume_info;
2842 kfree(volume_info->username);
2843 kzfree(volume_info->password);
2844 kfree(volume_info->UNC);
2845 kfree(volume_info->UNCip);
2846 kfree(volume_info->domainname);
2847 kfree(volume_info->iocharset);
2848 kfree(volume_info->prepath);
2849 kfree(volume_info);
2850 *pvolume_info = NULL;
2851 return;
2852 }
2853
2854 #ifdef CONFIG_CIFS_DFS_UPCALL
2855 /* build_path_to_root returns full path to root when
2856 * we do not have an exiting connection (tcon) */
2857 static char *
2858 build_unc_path_to_root(const struct smb_vol *volume_info,
2859 const struct cifs_sb_info *cifs_sb)
2860 {
2861 char *full_path;
2862
2863 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2864 full_path = kmalloc(unc_len + 1, GFP_KERNEL);
2865 if (full_path == NULL)
2866 return ERR_PTR(-ENOMEM);
2867
2868 strncpy(full_path, volume_info->UNC, unc_len);
2869 full_path[unc_len] = 0; /* add trailing null */
2870 convert_delimiter(full_path, CIFS_DIR_SEP(cifs_sb));
2871 return full_path;
2872 }
2873
2874 /*
2875 * Perform a dfs referral query for a share and (optionally) prefix
2876 *
2877 * If a referral is found, cifs_sb->mountdata will be (re-)allocated
2878 * to a string containing updated options for the submount. Otherwise it
2879 * will be left untouched.
2880 *
2881 * Returns the rc from get_dfs_path to the caller, which can be used to
2882 * determine whether there were referrals.
2883 */
2884 static int
2885 expand_dfs_referral(int xid, struct cifs_ses *pSesInfo,
2886 struct smb_vol *volume_info, struct cifs_sb_info *cifs_sb,
2887 int check_prefix)
2888 {
2889 int rc;
2890 unsigned int num_referrals = 0;
2891 struct dfs_info3_param *referrals = NULL;
2892 char *full_path = NULL, *ref_path = NULL, *mdata = NULL;
2893
2894 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2895 if (IS_ERR(full_path))
2896 return PTR_ERR(full_path);
2897
2898 /* For DFS paths, skip the first '\' of the UNC */
2899 ref_path = check_prefix ? full_path + 1 : volume_info->UNC + 1;
2900
2901 rc = get_dfs_path(xid, pSesInfo , ref_path, cifs_sb->local_nls,
2902 &num_referrals, &referrals,
2903 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2904
2905 if (!rc && num_referrals > 0) {
2906 char *fake_devname = NULL;
2907
2908 mdata = cifs_compose_mount_options(cifs_sb->mountdata,
2909 full_path + 1, referrals,
2910 &fake_devname);
2911
2912 free_dfs_info_array(referrals, num_referrals);
2913 kfree(fake_devname);
2914
2915 if (cifs_sb->mountdata != NULL)
2916 kfree(cifs_sb->mountdata);
2917
2918 if (IS_ERR(mdata)) {
2919 rc = PTR_ERR(mdata);
2920 mdata = NULL;
2921 }
2922 cifs_sb->mountdata = mdata;
2923 }
2924 kfree(full_path);
2925 return rc;
2926 }
2927 #endif
2928
2929 int cifs_setup_volume_info(struct smb_vol **pvolume_info, char *mount_data,
2930 const char *devname)
2931 {
2932 struct smb_vol *volume_info;
2933 int rc = 0;
2934
2935 *pvolume_info = NULL;
2936
2937 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2938 if (!volume_info) {
2939 rc = -ENOMEM;
2940 goto out;
2941 }
2942
2943 if (cifs_parse_mount_options(mount_data, devname,
2944 volume_info)) {
2945 rc = -EINVAL;
2946 goto out;
2947 }
2948
2949 if (volume_info->nullauth) {
2950 cFYI(1, "null user");
2951 volume_info->username = kzalloc(1, GFP_KERNEL);
2952 if (volume_info->username == NULL) {
2953 rc = -ENOMEM;
2954 goto out;
2955 }
2956 } else if (volume_info->username) {
2957 /* BB fixme parse for domain name here */
2958 cFYI(1, "Username: %s", volume_info->username);
2959 } else {
2960 cifserror("No username specified");
2961 /* In userspace mount helper we can get user name from alternate
2962 locations such as env variables and files on disk */
2963 rc = -EINVAL;
2964 goto out;
2965 }
2966
2967 /* this is needed for ASCII cp to Unicode converts */
2968 if (volume_info->iocharset == NULL) {
2969 /* load_nls_default cannot return null */
2970 volume_info->local_nls = load_nls_default();
2971 } else {
2972 volume_info->local_nls = load_nls(volume_info->iocharset);
2973 if (volume_info->local_nls == NULL) {
2974 cERROR(1, "CIFS mount error: iocharset %s not found",
2975 volume_info->iocharset);
2976 rc = -ELIBACC;
2977 goto out;
2978 }
2979 }
2980
2981 *pvolume_info = volume_info;
2982 return rc;
2983 out:
2984 cifs_cleanup_volume_info(&volume_info);
2985 return rc;
2986 }
2987
2988 int
2989 cifs_mount(struct cifs_sb_info *cifs_sb, struct smb_vol *volume_info)
2990 {
2991 int rc = 0;
2992 int xid;
2993 struct cifs_ses *pSesInfo;
2994 struct cifs_tcon *tcon;
2995 struct TCP_Server_Info *srvTcp;
2996 char *full_path;
2997 struct tcon_link *tlink;
2998 #ifdef CONFIG_CIFS_DFS_UPCALL
2999 int referral_walks_count = 0;
3000
3001 rc = bdi_setup_and_register(&cifs_sb->bdi, "cifs", BDI_CAP_MAP_COPY);
3002 if (rc)
3003 return rc;
3004
3005 cifs_sb->bdi.ra_pages = default_backing_dev_info.ra_pages;
3006
3007 try_mount_again:
3008 /* cleanup activities if we're chasing a referral */
3009 if (referral_walks_count) {
3010 if (tcon)
3011 cifs_put_tcon(tcon);
3012 else if (pSesInfo)
3013 cifs_put_smb_ses(pSesInfo);
3014
3015 cifs_cleanup_volume_info(&volume_info);
3016 FreeXid(xid);
3017 }
3018 #endif
3019 tcon = NULL;
3020 pSesInfo = NULL;
3021 srvTcp = NULL;
3022 full_path = NULL;
3023 tlink = NULL;
3024
3025 xid = GetXid();
3026
3027 /* get a reference to a tcp session */
3028 srvTcp = cifs_get_tcp_session(volume_info);
3029 if (IS_ERR(srvTcp)) {
3030 rc = PTR_ERR(srvTcp);
3031 bdi_destroy(&cifs_sb->bdi);
3032 goto out;
3033 }
3034
3035 /* get a reference to a SMB session */
3036 pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
3037 if (IS_ERR(pSesInfo)) {
3038 rc = PTR_ERR(pSesInfo);
3039 pSesInfo = NULL;
3040 goto mount_fail_check;
3041 }
3042
3043 /* search for existing tcon to this server share */
3044 tcon = cifs_get_tcon(pSesInfo, volume_info);
3045 if (IS_ERR(tcon)) {
3046 rc = PTR_ERR(tcon);
3047 tcon = NULL;
3048 goto remote_path_check;
3049 }
3050
3051 /* tell server which Unix caps we support */
3052 if (tcon->ses->capabilities & CAP_UNIX) {
3053 /* reset of caps checks mount to see if unix extensions
3054 disabled for just this mount */
3055 reset_cifs_unix_caps(xid, tcon, cifs_sb, volume_info);
3056 if ((tcon->ses->server->tcpStatus == CifsNeedReconnect) &&
3057 (le64_to_cpu(tcon->fsUnixInfo.Capability) &
3058 CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)) {
3059 rc = -EACCES;
3060 goto mount_fail_check;
3061 }
3062 } else
3063 tcon->unix_ext = 0; /* server does not support them */
3064
3065 /* do not care if following two calls succeed - informational */
3066 if (!tcon->ipc) {
3067 CIFSSMBQFSDeviceInfo(xid, tcon);
3068 CIFSSMBQFSAttributeInfo(xid, tcon);
3069 }
3070
3071 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
3072 cifs_sb->rsize = 1024 * 127;
3073 cFYI(DBG2, "no very large read support, rsize now 127K");
3074 }
3075 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
3076 cifs_sb->rsize = min(cifs_sb->rsize,
3077 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
3078
3079 cifs_sb->wsize = cifs_negotiate_wsize(tcon, volume_info);
3080
3081 remote_path_check:
3082 #ifdef CONFIG_CIFS_DFS_UPCALL
3083 /*
3084 * Perform an unconditional check for whether there are DFS
3085 * referrals for this path without prefix, to provide support
3086 * for DFS referrals from w2k8 servers which don't seem to respond
3087 * with PATH_NOT_COVERED to requests that include the prefix.
3088 * Chase the referral if found, otherwise continue normally.
3089 */
3090 if (referral_walks_count == 0) {
3091 int refrc = expand_dfs_referral(xid, pSesInfo, volume_info,
3092 cifs_sb, false);
3093 if (!refrc) {
3094 referral_walks_count++;
3095 goto try_mount_again;
3096 }
3097 }
3098 #endif
3099
3100 /* check if a whole path is not remote */
3101 if (!rc && tcon) {
3102 /* build_path_to_root works only when we have a valid tcon */
3103 full_path = cifs_build_path_to_root(volume_info, cifs_sb, tcon);
3104 if (full_path == NULL) {
3105 rc = -ENOMEM;
3106 goto mount_fail_check;
3107 }
3108 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
3109 if (rc != 0 && rc != -EREMOTE) {
3110 kfree(full_path);
3111 goto mount_fail_check;
3112 }
3113 kfree(full_path);
3114 }
3115
3116 /* get referral if needed */
3117 if (rc == -EREMOTE) {
3118 #ifdef CONFIG_CIFS_DFS_UPCALL
3119 if (referral_walks_count > MAX_NESTED_LINKS) {
3120 /*
3121 * BB: when we implement proper loop detection,
3122 * we will remove this check. But now we need it
3123 * to prevent an indefinite loop if 'DFS tree' is
3124 * misconfigured (i.e. has loops).
3125 */
3126 rc = -ELOOP;
3127 goto mount_fail_check;
3128 }
3129
3130 rc = expand_dfs_referral(xid, pSesInfo, volume_info, cifs_sb,
3131 true);
3132
3133 if (!rc) {
3134 referral_walks_count++;
3135 goto try_mount_again;
3136 }
3137 goto mount_fail_check;
3138 #else /* No DFS support, return error on mount */
3139 rc = -EOPNOTSUPP;
3140 #endif
3141 }
3142
3143 if (rc)
3144 goto mount_fail_check;
3145
3146 /* now, hang the tcon off of the superblock */
3147 tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
3148 if (tlink == NULL) {
3149 rc = -ENOMEM;
3150 goto mount_fail_check;
3151 }
3152
3153 tlink->tl_uid = pSesInfo->linux_uid;
3154 tlink->tl_tcon = tcon;
3155 tlink->tl_time = jiffies;
3156 set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
3157 set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3158
3159 cifs_sb->master_tlink = tlink;
3160 spin_lock(&cifs_sb->tlink_tree_lock);
3161 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3162 spin_unlock(&cifs_sb->tlink_tree_lock);
3163
3164 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3165 TLINK_IDLE_EXPIRE);
3166
3167 mount_fail_check:
3168 /* on error free sesinfo and tcon struct if needed */
3169 if (rc) {
3170 /* If find_unc succeeded then rc == 0 so we can not end */
3171 /* up accidentally freeing someone elses tcon struct */
3172 if (tcon)
3173 cifs_put_tcon(tcon);
3174 else if (pSesInfo)
3175 cifs_put_smb_ses(pSesInfo);
3176 else
3177 cifs_put_tcp_session(srvTcp);
3178 bdi_destroy(&cifs_sb->bdi);
3179 goto out;
3180 }
3181
3182 /* volume_info->password is freed above when existing session found
3183 (in which case it is not needed anymore) but when new sesion is created
3184 the password ptr is put in the new session structure (in which case the
3185 password will be freed at unmount time) */
3186 out:
3187 /* zero out password before freeing */
3188 FreeXid(xid);
3189 return rc;
3190 }
3191
3192 /*
3193 * Issue a TREE_CONNECT request. Note that for IPC$ shares, that the tcon
3194 * pointer may be NULL.
3195 */
3196 int
3197 CIFSTCon(unsigned int xid, struct cifs_ses *ses,
3198 const char *tree, struct cifs_tcon *tcon,
3199 const struct nls_table *nls_codepage)
3200 {
3201 struct smb_hdr *smb_buffer;
3202 struct smb_hdr *smb_buffer_response;
3203 TCONX_REQ *pSMB;
3204 TCONX_RSP *pSMBr;
3205 unsigned char *bcc_ptr;
3206 int rc = 0;
3207 int length;
3208 __u16 bytes_left, count;
3209
3210 if (ses == NULL)
3211 return -EIO;
3212
3213 smb_buffer = cifs_buf_get();
3214 if (smb_buffer == NULL)
3215 return -ENOMEM;
3216
3217 smb_buffer_response = smb_buffer;
3218
3219 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
3220 NULL /*no tid */ , 4 /*wct */ );
3221
3222 smb_buffer->Mid = GetNextMid(ses->server);
3223 smb_buffer->Uid = ses->Suid;
3224 pSMB = (TCONX_REQ *) smb_buffer;
3225 pSMBr = (TCONX_RSP *) smb_buffer_response;
3226
3227 pSMB->AndXCommand = 0xFF;
3228 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
3229 bcc_ptr = &pSMB->Password[0];
3230 if (!tcon || (ses->server->sec_mode & SECMODE_USER)) {
3231 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
3232 *bcc_ptr = 0; /* password is null byte */
3233 bcc_ptr++; /* skip password */
3234 /* already aligned so no need to do it below */
3235 } else {
3236 pSMB->PasswordLength = cpu_to_le16(CIFS_AUTH_RESP_SIZE);
3237 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
3238 specified as required (when that support is added to
3239 the vfs in the future) as only NTLM or the much
3240 weaker LANMAN (which we do not send by default) is accepted
3241 by Samba (not sure whether other servers allow
3242 NTLMv2 password here) */
3243 #ifdef CONFIG_CIFS_WEAK_PW_HASH
3244 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
3245 (ses->server->secType == LANMAN))
3246 calc_lanman_hash(tcon->password, ses->server->cryptkey,
3247 ses->server->sec_mode &
3248 SECMODE_PW_ENCRYPT ? true : false,
3249 bcc_ptr);
3250 else
3251 #endif /* CIFS_WEAK_PW_HASH */
3252 rc = SMBNTencrypt(tcon->password, ses->server->cryptkey,
3253 bcc_ptr);
3254
3255 bcc_ptr += CIFS_AUTH_RESP_SIZE;
3256 if (ses->capabilities & CAP_UNICODE) {
3257 /* must align unicode strings */
3258 *bcc_ptr = 0; /* null byte password */
3259 bcc_ptr++;
3260 }
3261 }
3262
3263 if (ses->server->sec_mode &
3264 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
3265 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
3266
3267 if (ses->capabilities & CAP_STATUS32) {
3268 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3269 }
3270 if (ses->capabilities & CAP_DFS) {
3271 smb_buffer->Flags2 |= SMBFLG2_DFS;
3272 }
3273 if (ses->capabilities & CAP_UNICODE) {
3274 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3275 length =
3276 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
3277 6 /* max utf8 char length in bytes */ *
3278 (/* server len*/ + 256 /* share len */), nls_codepage);
3279 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
3280 bcc_ptr += 2; /* skip trailing null */
3281 } else { /* ASCII */
3282 strcpy(bcc_ptr, tree);
3283 bcc_ptr += strlen(tree) + 1;
3284 }
3285 strcpy(bcc_ptr, "?????");
3286 bcc_ptr += strlen("?????");
3287 bcc_ptr += 1;
3288 count = bcc_ptr - &pSMB->Password[0];
3289 pSMB->hdr.smb_buf_length = cpu_to_be32(be32_to_cpu(
3290 pSMB->hdr.smb_buf_length) + count);
3291 pSMB->ByteCount = cpu_to_le16(count);
3292
3293 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
3294 0);
3295
3296 /* above now done in SendReceive */
3297 if ((rc == 0) && (tcon != NULL)) {
3298 bool is_unicode;
3299
3300 tcon->tidStatus = CifsGood;
3301 tcon->need_reconnect = false;
3302 tcon->tid = smb_buffer_response->Tid;
3303 bcc_ptr = pByteArea(smb_buffer_response);
3304 bytes_left = get_bcc(smb_buffer_response);
3305 length = strnlen(bcc_ptr, bytes_left - 2);
3306 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3307 is_unicode = true;
3308 else
3309 is_unicode = false;
3310
3311
3312 /* skip service field (NB: this field is always ASCII) */
3313 if (length == 3) {
3314 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3315 (bcc_ptr[2] == 'C')) {
3316 cFYI(1, "IPC connection");
3317 tcon->ipc = 1;
3318 }
3319 } else if (length == 2) {
3320 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3321 /* the most common case */
3322 cFYI(1, "disk share connection");
3323 }
3324 }
3325 bcc_ptr += length + 1;
3326 bytes_left -= (length + 1);
3327 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
3328
3329 /* mostly informational -- no need to fail on error here */
3330 kfree(tcon->nativeFileSystem);
3331 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
3332 bytes_left, is_unicode,
3333 nls_codepage);
3334
3335 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
3336
3337 if ((smb_buffer_response->WordCount == 3) ||
3338 (smb_buffer_response->WordCount == 7))
3339 /* field is in same location */
3340 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3341 else
3342 tcon->Flags = 0;
3343 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
3344 } else if ((rc == 0) && tcon == NULL) {
3345 /* all we need to save for IPC$ connection */
3346 ses->ipc_tid = smb_buffer_response->Tid;
3347 }
3348
3349 cifs_buf_release(smb_buffer);
3350 return rc;
3351 }
3352
3353 void
3354 cifs_umount(struct cifs_sb_info *cifs_sb)
3355 {
3356 struct rb_root *root = &cifs_sb->tlink_tree;
3357 struct rb_node *node;
3358 struct tcon_link *tlink;
3359
3360 cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3361
3362 spin_lock(&cifs_sb->tlink_tree_lock);
3363 while ((node = rb_first(root))) {
3364 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3365 cifs_get_tlink(tlink);
3366 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3367 rb_erase(node, root);
3368
3369 spin_unlock(&cifs_sb->tlink_tree_lock);
3370 cifs_put_tlink(tlink);
3371 spin_lock(&cifs_sb->tlink_tree_lock);
3372 }
3373 spin_unlock(&cifs_sb->tlink_tree_lock);
3374
3375 bdi_destroy(&cifs_sb->bdi);
3376 kfree(cifs_sb->mountdata);
3377 unload_nls(cifs_sb->local_nls);
3378 kfree(cifs_sb);
3379 }
3380
3381 int cifs_negotiate_protocol(unsigned int xid, struct cifs_ses *ses)
3382 {
3383 int rc = 0;
3384 struct TCP_Server_Info *server = ses->server;
3385
3386 /* only send once per connect */
3387 if (server->maxBuf != 0)
3388 return 0;
3389
3390 rc = CIFSSMBNegotiate(xid, ses);
3391 if (rc == -EAGAIN) {
3392 /* retry only once on 1st time connection */
3393 rc = CIFSSMBNegotiate(xid, ses);
3394 if (rc == -EAGAIN)
3395 rc = -EHOSTDOWN;
3396 }
3397 if (rc == 0) {
3398 spin_lock(&GlobalMid_Lock);
3399 if (server->tcpStatus == CifsNeedNegotiate)
3400 server->tcpStatus = CifsGood;
3401 else
3402 rc = -EHOSTDOWN;
3403 spin_unlock(&GlobalMid_Lock);
3404
3405 }
3406
3407 return rc;
3408 }
3409
3410
3411 int cifs_setup_session(unsigned int xid, struct cifs_ses *ses,
3412 struct nls_table *nls_info)
3413 {
3414 int rc = 0;
3415 struct TCP_Server_Info *server = ses->server;
3416
3417 ses->flags = 0;
3418 ses->capabilities = server->capabilities;
3419 if (linuxExtEnabled == 0)
3420 ses->capabilities &= (~CAP_UNIX);
3421
3422 cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3423 server->sec_mode, server->capabilities, server->timeAdj);
3424
3425 rc = CIFS_SessSetup(xid, ses, nls_info);
3426 if (rc) {
3427 cERROR(1, "Send error in SessSetup = %d", rc);
3428 } else {
3429 mutex_lock(&ses->server->srv_mutex);
3430 if (!server->session_estab) {
3431 server->session_key.response = ses->auth_key.response;
3432 server->session_key.len = ses->auth_key.len;
3433 server->sequence_number = 0x2;
3434 server->session_estab = true;
3435 ses->auth_key.response = NULL;
3436 }
3437 mutex_unlock(&server->srv_mutex);
3438
3439 cFYI(1, "CIFS Session Established successfully");
3440 spin_lock(&GlobalMid_Lock);
3441 ses->status = CifsGood;
3442 ses->need_reconnect = false;
3443 spin_unlock(&GlobalMid_Lock);
3444 }
3445
3446 kfree(ses->auth_key.response);
3447 ses->auth_key.response = NULL;
3448 ses->auth_key.len = 0;
3449 kfree(ses->ntlmssp);
3450 ses->ntlmssp = NULL;
3451
3452 return rc;
3453 }
3454
3455 static struct cifs_tcon *
3456 cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3457 {
3458 struct cifs_tcon *master_tcon = cifs_sb_master_tcon(cifs_sb);
3459 struct cifs_ses *ses;
3460 struct cifs_tcon *tcon = NULL;
3461 struct smb_vol *vol_info;
3462 char username[28]; /* big enough for "krb50x" + hex of ULONG_MAX 6+16 */
3463 /* We used to have this as MAX_USERNAME which is */
3464 /* way too big now (256 instead of 32) */
3465
3466 vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3467 if (vol_info == NULL) {
3468 tcon = ERR_PTR(-ENOMEM);
3469 goto out;
3470 }
3471
3472 snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3473 vol_info->username = username;
3474 vol_info->local_nls = cifs_sb->local_nls;
3475 vol_info->linux_uid = fsuid;
3476 vol_info->cred_uid = fsuid;
3477 vol_info->UNC = master_tcon->treeName;
3478 vol_info->retry = master_tcon->retry;
3479 vol_info->nocase = master_tcon->nocase;
3480 vol_info->local_lease = master_tcon->local_lease;
3481 vol_info->no_linux_ext = !master_tcon->unix_ext;
3482
3483 /* FIXME: allow for other secFlg settings */
3484 vol_info->secFlg = CIFSSEC_MUST_KRB5;
3485
3486 /* get a reference for the same TCP session */
3487 spin_lock(&cifs_tcp_ses_lock);
3488 ++master_tcon->ses->server->srv_count;
3489 spin_unlock(&cifs_tcp_ses_lock);
3490
3491 ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3492 if (IS_ERR(ses)) {
3493 tcon = (struct cifs_tcon *)ses;
3494 cifs_put_tcp_session(master_tcon->ses->server);
3495 goto out;
3496 }
3497
3498 tcon = cifs_get_tcon(ses, vol_info);
3499 if (IS_ERR(tcon)) {
3500 cifs_put_smb_ses(ses);
3501 goto out;
3502 }
3503
3504 if (ses->capabilities & CAP_UNIX)
3505 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3506 out:
3507 kfree(vol_info);
3508
3509 return tcon;
3510 }
3511
3512 struct cifs_tcon *
3513 cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3514 {
3515 return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3516 }
3517
3518 static int
3519 cifs_sb_tcon_pending_wait(void *unused)
3520 {
3521 schedule();
3522 return signal_pending(current) ? -ERESTARTSYS : 0;
3523 }
3524
3525 /* find and return a tlink with given uid */
3526 static struct tcon_link *
3527 tlink_rb_search(struct rb_root *root, uid_t uid)
3528 {
3529 struct rb_node *node = root->rb_node;
3530 struct tcon_link *tlink;
3531
3532 while (node) {
3533 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3534
3535 if (tlink->tl_uid > uid)
3536 node = node->rb_left;
3537 else if (tlink->tl_uid < uid)
3538 node = node->rb_right;
3539 else
3540 return tlink;
3541 }
3542 return NULL;
3543 }
3544
3545 /* insert a tcon_link into the tree */
3546 static void
3547 tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
3548 {
3549 struct rb_node **new = &(root->rb_node), *parent = NULL;
3550 struct tcon_link *tlink;
3551
3552 while (*new) {
3553 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
3554 parent = *new;
3555
3556 if (tlink->tl_uid > new_tlink->tl_uid)
3557 new = &((*new)->rb_left);
3558 else
3559 new = &((*new)->rb_right);
3560 }
3561
3562 rb_link_node(&new_tlink->tl_rbnode, parent, new);
3563 rb_insert_color(&new_tlink->tl_rbnode, root);
3564 }
3565
3566 /*
3567 * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3568 * current task.
3569 *
3570 * If the superblock doesn't refer to a multiuser mount, then just return
3571 * the master tcon for the mount.
3572 *
3573 * First, search the rbtree for an existing tcon for this fsuid. If one
3574 * exists, then check to see if it's pending construction. If it is then wait
3575 * for construction to complete. Once it's no longer pending, check to see if
3576 * it failed and either return an error or retry construction, depending on
3577 * the timeout.
3578 *
3579 * If one doesn't exist then insert a new tcon_link struct into the tree and
3580 * try to construct a new one.
3581 */
3582 struct tcon_link *
3583 cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3584 {
3585 int ret;
3586 uid_t fsuid = current_fsuid();
3587 struct tcon_link *tlink, *newtlink;
3588
3589 if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3590 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3591
3592 spin_lock(&cifs_sb->tlink_tree_lock);
3593 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3594 if (tlink)
3595 cifs_get_tlink(tlink);
3596 spin_unlock(&cifs_sb->tlink_tree_lock);
3597
3598 if (tlink == NULL) {
3599 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3600 if (newtlink == NULL)
3601 return ERR_PTR(-ENOMEM);
3602 newtlink->tl_uid = fsuid;
3603 newtlink->tl_tcon = ERR_PTR(-EACCES);
3604 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3605 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3606 cifs_get_tlink(newtlink);
3607
3608 spin_lock(&cifs_sb->tlink_tree_lock);
3609 /* was one inserted after previous search? */
3610 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3611 if (tlink) {
3612 cifs_get_tlink(tlink);
3613 spin_unlock(&cifs_sb->tlink_tree_lock);
3614 kfree(newtlink);
3615 goto wait_for_construction;
3616 }
3617 tlink = newtlink;
3618 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3619 spin_unlock(&cifs_sb->tlink_tree_lock);
3620 } else {
3621 wait_for_construction:
3622 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3623 cifs_sb_tcon_pending_wait,
3624 TASK_INTERRUPTIBLE);
3625 if (ret) {
3626 cifs_put_tlink(tlink);
3627 return ERR_PTR(ret);
3628 }
3629
3630 /* if it's good, return it */
3631 if (!IS_ERR(tlink->tl_tcon))
3632 return tlink;
3633
3634 /* return error if we tried this already recently */
3635 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3636 cifs_put_tlink(tlink);
3637 return ERR_PTR(-EACCES);
3638 }
3639
3640 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3641 goto wait_for_construction;
3642 }
3643
3644 tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3645 clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3646 wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3647
3648 if (IS_ERR(tlink->tl_tcon)) {
3649 cifs_put_tlink(tlink);
3650 return ERR_PTR(-EACCES);
3651 }
3652
3653 return tlink;
3654 }
3655
3656 /*
3657 * periodic workqueue job that scans tcon_tree for a superblock and closes
3658 * out tcons.
3659 */
3660 static void
3661 cifs_prune_tlinks(struct work_struct *work)
3662 {
3663 struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3664 prune_tlinks.work);
3665 struct rb_root *root = &cifs_sb->tlink_tree;
3666 struct rb_node *node = rb_first(root);
3667 struct rb_node *tmp;
3668 struct tcon_link *tlink;
3669
3670 /*
3671 * Because we drop the spinlock in the loop in order to put the tlink
3672 * it's not guarded against removal of links from the tree. The only
3673 * places that remove entries from the tree are this function and
3674 * umounts. Because this function is non-reentrant and is canceled
3675 * before umount can proceed, this is safe.
3676 */
3677 spin_lock(&cifs_sb->tlink_tree_lock);
3678 node = rb_first(root);
3679 while (node != NULL) {
3680 tmp = node;
3681 node = rb_next(tmp);
3682 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
3683
3684 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
3685 atomic_read(&tlink->tl_count) != 0 ||
3686 time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
3687 continue;
3688
3689 cifs_get_tlink(tlink);
3690 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3691 rb_erase(tmp, root);
3692
3693 spin_unlock(&cifs_sb->tlink_tree_lock);
3694 cifs_put_tlink(tlink);
3695 spin_lock(&cifs_sb->tlink_tree_lock);
3696 }
3697 spin_unlock(&cifs_sb->tlink_tree_lock);
3698
3699 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3700 TLINK_IDLE_EXPIRE);
3701 }
Linux 2.6 ibm-acpi/thinkpad-acpi driver git tree