projects / GitHub / mt8127 / android_kernel_alcatel_ttab.git / blob
? search:


d9566bf8f917d00e565038477d59150188474618
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / fs / cifs / connect.c
1 /*
2 * fs/cifs/connect.c
3 *
4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
6 *
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
20 */
21 #include <linux/fs.h>
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/slab.h>
27 #include <linux/pagemap.h>
28 #include <linux/ctype.h>
29 #include <linux/utsname.h>
30 #include <linux/mempool.h>
31 #include <linux/delay.h>
32 #include <linux/completion.h>
33 #include <linux/kthread.h>
34 #include <linux/pagevec.h>
35 #include <linux/freezer.h>
36 #include <linux/namei.h>
37 #include <asm/uaccess.h>
38 #include <asm/processor.h>
39 #include <linux/inet.h>
40 #include <net/ipv6.h>
41 #include "cifspdu.h"
42 #include "cifsglob.h"
43 #include "cifsproto.h"
44 #include "cifs_unicode.h"
45 #include "cifs_debug.h"
46 #include "cifs_fs_sb.h"
47 #include "ntlmssp.h"
48 #include "nterr.h"
49 #include "rfc1002pdu.h"
50 #include "cn_cifs.h"
51
52 #define CIFS_PORT 445
53 #define RFC1001_PORT 139
54
55 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
56 unsigned char *p24);
57
58 extern mempool_t *cifs_req_poolp;
59
60 struct smb_vol {
61 char *username;
62 char *password;
63 char *domainname;
64 char *UNC;
65 char *UNCip;
66 char *iocharset; /* local code page for mapping to and from Unicode */
67 char source_rfc1001_name[16]; /* netbios name of client */
68 char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
69 uid_t linux_uid;
70 gid_t linux_gid;
71 mode_t file_mode;
72 mode_t dir_mode;
73 unsigned secFlg;
74 bool retry:1;
75 bool intr:1;
76 bool setuids:1;
77 bool override_uid:1;
78 bool override_gid:1;
79 bool dynperm:1;
80 bool noperm:1;
81 bool no_psx_acl:1; /* set if posix acl support should be disabled */
82 bool cifs_acl:1;
83 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
84 bool server_ino:1; /* use inode numbers from server ie UniqueId */
85 bool direct_io:1;
86 bool remap:1; /* set to remap seven reserved chars in filenames */
87 bool posix_paths:1; /* unset to not ask for posix pathnames. */
88 bool no_linux_ext:1;
89 bool sfu_emul:1;
90 bool nullauth:1; /* attempt to authenticate with null user */
91 bool nocase:1; /* request case insensitive filenames */
92 bool nobrl:1; /* disable sending byte range locks to srv */
93 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
94 bool seal:1; /* request transport encryption on share */
95 bool nodfs:1; /* Do not request DFS, even if available */
96 bool local_lease:1; /* check leases only on local system, not remote */
97 bool noblocksnd:1;
98 bool noautotune:1;
99 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
100 unsigned int rsize;
101 unsigned int wsize;
102 bool sockopt_tcp_nodelay:1;
103 unsigned short int port;
104 char *prepath;
105 };
106
107 static int ipv4_connect(struct TCP_Server_Info *server);
108 static int ipv6_connect(struct TCP_Server_Info *server);
109
110 /*
111 * cifs tcp session reconnection
112 *
113 * mark tcp session as reconnecting so temporarily locked
114 * mark all smb sessions as reconnecting for tcp session
115 * reconnect tcp session
116 * wake up waiters on reconnection? - (not needed currently)
117 */
118 static int
119 cifs_reconnect(struct TCP_Server_Info *server)
120 {
121 int rc = 0;
122 struct list_head *tmp, *tmp2;
123 struct cifsSesInfo *ses;
124 struct cifsTconInfo *tcon;
125 struct mid_q_entry *mid_entry;
126
127 spin_lock(&GlobalMid_Lock);
128 if (server->tcpStatus == CifsExiting) {
129 /* the demux thread will exit normally
130 next time through the loop */
131 spin_unlock(&GlobalMid_Lock);
132 return rc;
133 } else
134 server->tcpStatus = CifsNeedReconnect;
135 spin_unlock(&GlobalMid_Lock);
136 server->maxBuf = 0;
137
138 cFYI(1, ("Reconnecting tcp session"));
139
140 /* before reconnecting the tcp session, mark the smb session (uid)
141 and the tid bad so they are not used until reconnected */
142 read_lock(&cifs_tcp_ses_lock);
143 list_for_each(tmp, &server->smb_ses_list) {
144 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
145 ses->need_reconnect = true;
146 ses->ipc_tid = 0;
147 list_for_each(tmp2, &ses->tcon_list) {
148 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
149 tcon->need_reconnect = true;
150 }
151 }
152 read_unlock(&cifs_tcp_ses_lock);
153 /* do not want to be sending data on a socket we are freeing */
154 mutex_lock(&server->srv_mutex);
155 if (server->ssocket) {
156 cFYI(1, ("State: 0x%x Flags: 0x%lx", server->ssocket->state,
157 server->ssocket->flags));
158 kernel_sock_shutdown(server->ssocket, SHUT_WR);
159 cFYI(1, ("Post shutdown state: 0x%x Flags: 0x%lx",
160 server->ssocket->state,
161 server->ssocket->flags));
162 sock_release(server->ssocket);
163 server->ssocket = NULL;
164 }
165
166 spin_lock(&GlobalMid_Lock);
167 list_for_each(tmp, &server->pending_mid_q) {
168 mid_entry = list_entry(tmp, struct
169 mid_q_entry,
170 qhead);
171 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
172 /* Mark other intransit requests as needing
173 retry so we do not immediately mark the
174 session bad again (ie after we reconnect
175 below) as they timeout too */
176 mid_entry->midState = MID_RETRY_NEEDED;
177 }
178 }
179 spin_unlock(&GlobalMid_Lock);
180 mutex_unlock(&server->srv_mutex);
181
182 while ((server->tcpStatus != CifsExiting) &&
183 (server->tcpStatus != CifsGood)) {
184 try_to_freeze();
185 if (server->addr.sockAddr6.sin6_family == AF_INET6)
186 rc = ipv6_connect(server);
187 else
188 rc = ipv4_connect(server);
189 if (rc) {
190 cFYI(1, ("reconnect error %d", rc));
191 msleep(3000);
192 } else {
193 atomic_inc(&tcpSesReconnectCount);
194 spin_lock(&GlobalMid_Lock);
195 if (server->tcpStatus != CifsExiting)
196 server->tcpStatus = CifsGood;
197 server->sequence_number = 0;
198 spin_unlock(&GlobalMid_Lock);
199 /* atomic_set(&server->inFlight,0);*/
200 wake_up(&server->response_q);
201 }
202 }
203 return rc;
204 }
205
206 /*
207 return codes:
208 0 not a transact2, or all data present
209 >0 transact2 with that much data missing
210 -EINVAL = invalid transact2
211
212 */
213 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
214 {
215 struct smb_t2_rsp *pSMBt;
216 int total_data_size;
217 int data_in_this_rsp;
218 int remaining;
219
220 if (pSMB->Command != SMB_COM_TRANSACTION2)
221 return 0;
222
223 /* check for plausible wct, bcc and t2 data and parm sizes */
224 /* check for parm and data offset going beyond end of smb */
225 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
226 cFYI(1, ("invalid transact2 word count"));
227 return -EINVAL;
228 }
229
230 pSMBt = (struct smb_t2_rsp *)pSMB;
231
232 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
233 data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
234
235 remaining = total_data_size - data_in_this_rsp;
236
237 if (remaining == 0)
238 return 0;
239 else if (remaining < 0) {
240 cFYI(1, ("total data %d smaller than data in frame %d",
241 total_data_size, data_in_this_rsp));
242 return -EINVAL;
243 } else {
244 cFYI(1, ("missing %d bytes from transact2, check next response",
245 remaining));
246 if (total_data_size > maxBufSize) {
247 cERROR(1, ("TotalDataSize %d is over maximum buffer %d",
248 total_data_size, maxBufSize));
249 return -EINVAL;
250 }
251 return remaining;
252 }
253 }
254
255 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
256 {
257 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
258 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
259 int total_data_size;
260 int total_in_buf;
261 int remaining;
262 int total_in_buf2;
263 char *data_area_of_target;
264 char *data_area_of_buf2;
265 __u16 byte_count;
266
267 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
268
269 if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
270 cFYI(1, ("total data size of primary and secondary t2 differ"));
271 }
272
273 total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
274
275 remaining = total_data_size - total_in_buf;
276
277 if (remaining < 0)
278 return -EINVAL;
279
280 if (remaining == 0) /* nothing to do, ignore */
281 return 0;
282
283 total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
284 if (remaining < total_in_buf2) {
285 cFYI(1, ("transact2 2nd response contains too much data"));
286 }
287
288 /* find end of first SMB data area */
289 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
290 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
291 /* validate target area */
292
293 data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
294 le16_to_cpu(pSMB2->t2_rsp.DataOffset);
295
296 data_area_of_target += total_in_buf;
297
298 /* copy second buffer into end of first buffer */
299 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
300 total_in_buf += total_in_buf2;
301 pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
302 byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
303 byte_count += total_in_buf2;
304 BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
305
306 byte_count = pTargetSMB->smb_buf_length;
307 byte_count += total_in_buf2;
308
309 /* BB also add check that we are not beyond maximum buffer size */
310
311 pTargetSMB->smb_buf_length = byte_count;
312
313 if (remaining == total_in_buf2) {
314 cFYI(1, ("found the last secondary response"));
315 return 0; /* we are done */
316 } else /* more responses to go */
317 return 1;
318
319 }
320
321 static int
322 cifs_demultiplex_thread(struct TCP_Server_Info *server)
323 {
324 int length;
325 unsigned int pdu_length, total_read;
326 struct smb_hdr *smb_buffer = NULL;
327 struct smb_hdr *bigbuf = NULL;
328 struct smb_hdr *smallbuf = NULL;
329 struct msghdr smb_msg;
330 struct kvec iov;
331 struct socket *csocket = server->ssocket;
332 struct list_head *tmp;
333 struct cifsSesInfo *ses;
334 struct task_struct *task_to_wake = NULL;
335 struct mid_q_entry *mid_entry;
336 char temp;
337 bool isLargeBuf = false;
338 bool isMultiRsp;
339 int reconnect;
340
341 current->flags |= PF_MEMALLOC;
342 cFYI(1, ("Demultiplex PID: %d", task_pid_nr(current)));
343
344 length = atomic_inc_return(&tcpSesAllocCount);
345 if (length > 1)
346 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
347 GFP_KERNEL);
348
349 set_freezable();
350 while (server->tcpStatus != CifsExiting) {
351 if (try_to_freeze())
352 continue;
353 if (bigbuf == NULL) {
354 bigbuf = cifs_buf_get();
355 if (!bigbuf) {
356 cERROR(1, ("No memory for large SMB response"));
357 msleep(3000);
358 /* retry will check if exiting */
359 continue;
360 }
361 } else if (isLargeBuf) {
362 /* we are reusing a dirty large buf, clear its start */
363 memset(bigbuf, 0, sizeof(struct smb_hdr));
364 }
365
366 if (smallbuf == NULL) {
367 smallbuf = cifs_small_buf_get();
368 if (!smallbuf) {
369 cERROR(1, ("No memory for SMB response"));
370 msleep(1000);
371 /* retry will check if exiting */
372 continue;
373 }
374 /* beginning of smb buffer is cleared in our buf_get */
375 } else /* if existing small buf clear beginning */
376 memset(smallbuf, 0, sizeof(struct smb_hdr));
377
378 isLargeBuf = false;
379 isMultiRsp = false;
380 smb_buffer = smallbuf;
381 iov.iov_base = smb_buffer;
382 iov.iov_len = 4;
383 smb_msg.msg_control = NULL;
384 smb_msg.msg_controllen = 0;
385 pdu_length = 4; /* enough to get RFC1001 header */
386 incomplete_rcv:
387 length =
388 kernel_recvmsg(csocket, &smb_msg,
389 &iov, 1, pdu_length, 0 /* BB other flags? */);
390
391 if (server->tcpStatus == CifsExiting) {
392 break;
393 } else if (server->tcpStatus == CifsNeedReconnect) {
394 cFYI(1, ("Reconnect after server stopped responding"));
395 cifs_reconnect(server);
396 cFYI(1, ("call to reconnect done"));
397 csocket = server->ssocket;
398 continue;
399 } else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
400 msleep(1); /* minimum sleep to prevent looping
401 allowing socket to clear and app threads to set
402 tcpStatus CifsNeedReconnect if server hung */
403 if (pdu_length < 4) {
404 iov.iov_base = (4 - pdu_length) +
405 (char *)smb_buffer;
406 iov.iov_len = pdu_length;
407 smb_msg.msg_control = NULL;
408 smb_msg.msg_controllen = 0;
409 goto incomplete_rcv;
410 } else
411 continue;
412 } else if (length <= 0) {
413 if (server->tcpStatus == CifsNew) {
414 cFYI(1, ("tcp session abend after SMBnegprot"));
415 /* some servers kill the TCP session rather than
416 returning an SMB negprot error, in which
417 case reconnecting here is not going to help,
418 and so simply return error to mount */
419 break;
420 }
421 if (!try_to_freeze() && (length == -EINTR)) {
422 cFYI(1, ("cifsd thread killed"));
423 break;
424 }
425 cFYI(1, ("Reconnect after unexpected peek error %d",
426 length));
427 cifs_reconnect(server);
428 csocket = server->ssocket;
429 wake_up(&server->response_q);
430 continue;
431 } else if (length < pdu_length) {
432 cFYI(1, ("requested %d bytes but only got %d bytes",
433 pdu_length, length));
434 pdu_length -= length;
435 msleep(1);
436 goto incomplete_rcv;
437 }
438
439 /* The right amount was read from socket - 4 bytes */
440 /* so we can now interpret the length field */
441
442 /* the first byte big endian of the length field,
443 is actually not part of the length but the type
444 with the most common, zero, as regular data */
445 temp = *((char *) smb_buffer);
446
447 /* Note that FC 1001 length is big endian on the wire,
448 but we convert it here so it is always manipulated
449 as host byte order */
450 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
451 smb_buffer->smb_buf_length = pdu_length;
452
453 cFYI(1, ("rfc1002 length 0x%x", pdu_length+4));
454
455 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
456 continue;
457 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
458 cFYI(1, ("Good RFC 1002 session rsp"));
459 continue;
460 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
461 /* we get this from Windows 98 instead of
462 an error on SMB negprot response */
463 cFYI(1, ("Negative RFC1002 Session Response Error 0x%x)",
464 pdu_length));
465 if (server->tcpStatus == CifsNew) {
466 /* if nack on negprot (rather than
467 ret of smb negprot error) reconnecting
468 not going to help, ret error to mount */
469 break;
470 } else {
471 /* give server a second to
472 clean up before reconnect attempt */
473 msleep(1000);
474 /* always try 445 first on reconnect
475 since we get NACK on some if we ever
476 connected to port 139 (the NACK is
477 since we do not begin with RFC1001
478 session initialize frame) */
479 server->addr.sockAddr.sin_port =
480 htons(CIFS_PORT);
481 cifs_reconnect(server);
482 csocket = server->ssocket;
483 wake_up(&server->response_q);
484 continue;
485 }
486 } else if (temp != (char) 0) {
487 cERROR(1, ("Unknown RFC 1002 frame"));
488 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
489 length);
490 cifs_reconnect(server);
491 csocket = server->ssocket;
492 continue;
493 }
494
495 /* else we have an SMB response */
496 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
497 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
498 cERROR(1, ("Invalid size SMB length %d pdu_length %d",
499 length, pdu_length+4));
500 cifs_reconnect(server);
501 csocket = server->ssocket;
502 wake_up(&server->response_q);
503 continue;
504 }
505
506 /* else length ok */
507 reconnect = 0;
508
509 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
510 isLargeBuf = true;
511 memcpy(bigbuf, smallbuf, 4);
512 smb_buffer = bigbuf;
513 }
514 length = 0;
515 iov.iov_base = 4 + (char *)smb_buffer;
516 iov.iov_len = pdu_length;
517 for (total_read = 0; total_read < pdu_length;
518 total_read += length) {
519 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
520 pdu_length - total_read, 0);
521 if ((server->tcpStatus == CifsExiting) ||
522 (length == -EINTR)) {
523 /* then will exit */
524 reconnect = 2;
525 break;
526 } else if (server->tcpStatus == CifsNeedReconnect) {
527 cifs_reconnect(server);
528 csocket = server->ssocket;
529 /* Reconnect wakes up rspns q */
530 /* Now we will reread sock */
531 reconnect = 1;
532 break;
533 } else if ((length == -ERESTARTSYS) ||
534 (length == -EAGAIN)) {
535 msleep(1); /* minimum sleep to prevent looping,
536 allowing socket to clear and app
537 threads to set tcpStatus
538 CifsNeedReconnect if server hung*/
539 length = 0;
540 continue;
541 } else if (length <= 0) {
542 cERROR(1, ("Received no data, expecting %d",
543 pdu_length - total_read));
544 cifs_reconnect(server);
545 csocket = server->ssocket;
546 reconnect = 1;
547 break;
548 }
549 }
550 if (reconnect == 2)
551 break;
552 else if (reconnect == 1)
553 continue;
554
555 length += 4; /* account for rfc1002 hdr */
556
557
558 dump_smb(smb_buffer, length);
559 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
560 cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
561 continue;
562 }
563
564
565 task_to_wake = NULL;
566 spin_lock(&GlobalMid_Lock);
567 list_for_each(tmp, &server->pending_mid_q) {
568 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
569
570 if ((mid_entry->mid == smb_buffer->Mid) &&
571 (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
572 (mid_entry->command == smb_buffer->Command)) {
573 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
574 /* We have a multipart transact2 resp */
575 isMultiRsp = true;
576 if (mid_entry->resp_buf) {
577 /* merge response - fix up 1st*/
578 if (coalesce_t2(smb_buffer,
579 mid_entry->resp_buf)) {
580 mid_entry->multiRsp =
581 true;
582 break;
583 } else {
584 /* all parts received */
585 mid_entry->multiEnd =
586 true;
587 goto multi_t2_fnd;
588 }
589 } else {
590 if (!isLargeBuf) {
591 cERROR(1,("1st trans2 resp needs bigbuf"));
592 /* BB maybe we can fix this up, switch
593 to already allocated large buffer? */
594 } else {
595 /* Have first buffer */
596 mid_entry->resp_buf =
597 smb_buffer;
598 mid_entry->largeBuf =
599 true;
600 bigbuf = NULL;
601 }
602 }
603 break;
604 }
605 mid_entry->resp_buf = smb_buffer;
606 mid_entry->largeBuf = isLargeBuf;
607 multi_t2_fnd:
608 task_to_wake = mid_entry->tsk;
609 mid_entry->midState = MID_RESPONSE_RECEIVED;
610 #ifdef CONFIG_CIFS_STATS2
611 mid_entry->when_received = jiffies;
612 #endif
613 /* so we do not time out requests to server
614 which is still responding (since server could
615 be busy but not dead) */
616 server->lstrp = jiffies;
617 break;
618 }
619 }
620 spin_unlock(&GlobalMid_Lock);
621 if (task_to_wake) {
622 /* Was previous buf put in mpx struct for multi-rsp? */
623 if (!isMultiRsp) {
624 /* smb buffer will be freed by user thread */
625 if (isLargeBuf)
626 bigbuf = NULL;
627 else
628 smallbuf = NULL;
629 }
630 wake_up_process(task_to_wake);
631 } else if (!is_valid_oplock_break(smb_buffer, server) &&
632 !isMultiRsp) {
633 cERROR(1, ("No task to wake, unknown frame received! "
634 "NumMids %d", midCount.counter));
635 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
636 sizeof(struct smb_hdr));
637 #ifdef CONFIG_CIFS_DEBUG2
638 cifs_dump_detail(smb_buffer);
639 cifs_dump_mids(server);
640 #endif /* CIFS_DEBUG2 */
641
642 }
643 } /* end while !EXITING */
644
645 /* take it off the list, if it's not already */
646 write_lock(&cifs_tcp_ses_lock);
647 list_del_init(&server->tcp_ses_list);
648 write_unlock(&cifs_tcp_ses_lock);
649
650 spin_lock(&GlobalMid_Lock);
651 server->tcpStatus = CifsExiting;
652 spin_unlock(&GlobalMid_Lock);
653 wake_up_all(&server->response_q);
654
655 /* check if we have blocked requests that need to free */
656 /* Note that cifs_max_pending is normally 50, but
657 can be set at module install time to as little as two */
658 spin_lock(&GlobalMid_Lock);
659 if (atomic_read(&server->inFlight) >= cifs_max_pending)
660 atomic_set(&server->inFlight, cifs_max_pending - 1);
661 /* We do not want to set the max_pending too low or we
662 could end up with the counter going negative */
663 spin_unlock(&GlobalMid_Lock);
664 /* Although there should not be any requests blocked on
665 this queue it can not hurt to be paranoid and try to wake up requests
666 that may haven been blocked when more than 50 at time were on the wire
667 to the same server - they now will see the session is in exit state
668 and get out of SendReceive. */
669 wake_up_all(&server->request_q);
670 /* give those requests time to exit */
671 msleep(125);
672
673 if (server->ssocket) {
674 sock_release(csocket);
675 server->ssocket = NULL;
676 }
677 /* buffer usuallly freed in free_mid - need to free it here on exit */
678 cifs_buf_release(bigbuf);
679 if (smallbuf) /* no sense logging a debug message if NULL */
680 cifs_small_buf_release(smallbuf);
681
682 /*
683 * BB: we shouldn't have to do any of this. It shouldn't be
684 * possible to exit from the thread with active SMB sessions
685 */
686 read_lock(&cifs_tcp_ses_lock);
687 if (list_empty(&server->pending_mid_q)) {
688 /* loop through server session structures attached to this and
689 mark them dead */
690 list_for_each(tmp, &server->smb_ses_list) {
691 ses = list_entry(tmp, struct cifsSesInfo,
692 smb_ses_list);
693 ses->status = CifsExiting;
694 ses->server = NULL;
695 }
696 read_unlock(&cifs_tcp_ses_lock);
697 } else {
698 /* although we can not zero the server struct pointer yet,
699 since there are active requests which may depnd on them,
700 mark the corresponding SMB sessions as exiting too */
701 list_for_each(tmp, &server->smb_ses_list) {
702 ses = list_entry(tmp, struct cifsSesInfo,
703 smb_ses_list);
704 ses->status = CifsExiting;
705 }
706
707 spin_lock(&GlobalMid_Lock);
708 list_for_each(tmp, &server->pending_mid_q) {
709 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
710 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
711 cFYI(1, ("Clearing Mid 0x%x - waking up ",
712 mid_entry->mid));
713 task_to_wake = mid_entry->tsk;
714 if (task_to_wake)
715 wake_up_process(task_to_wake);
716 }
717 }
718 spin_unlock(&GlobalMid_Lock);
719 read_unlock(&cifs_tcp_ses_lock);
720 /* 1/8th of sec is more than enough time for them to exit */
721 msleep(125);
722 }
723
724 if (!list_empty(&server->pending_mid_q)) {
725 /* mpx threads have not exited yet give them
726 at least the smb send timeout time for long ops */
727 /* due to delays on oplock break requests, we need
728 to wait at least 45 seconds before giving up
729 on a request getting a response and going ahead
730 and killing cifsd */
731 cFYI(1, ("Wait for exit from demultiplex thread"));
732 msleep(46000);
733 /* if threads still have not exited they are probably never
734 coming home not much else we can do but free the memory */
735 }
736
737 /* last chance to mark ses pointers invalid
738 if there are any pointing to this (e.g
739 if a crazy root user tried to kill cifsd
740 kernel thread explicitly this might happen) */
741 /* BB: This shouldn't be necessary, see above */
742 read_lock(&cifs_tcp_ses_lock);
743 list_for_each(tmp, &server->smb_ses_list) {
744 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
745 ses->server = NULL;
746 }
747 read_unlock(&cifs_tcp_ses_lock);
748
749 kfree(server->hostname);
750 task_to_wake = xchg(&server->tsk, NULL);
751 kfree(server);
752
753 length = atomic_dec_return(&tcpSesAllocCount);
754 if (length > 0)
755 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
756 GFP_KERNEL);
757
758 /* if server->tsk was NULL then wait for a signal before exiting */
759 if (!task_to_wake) {
760 set_current_state(TASK_INTERRUPTIBLE);
761 while (!signal_pending(current)) {
762 schedule();
763 set_current_state(TASK_INTERRUPTIBLE);
764 }
765 set_current_state(TASK_RUNNING);
766 }
767
768 module_put_and_exit(0);
769 }
770
771 /* extract the host portion of the UNC string */
772 static char *
773 extract_hostname(const char *unc)
774 {
775 const char *src;
776 char *dst, *delim;
777 unsigned int len;
778
779 /* skip double chars at beginning of string */
780 /* BB: check validity of these bytes? */
781 src = unc + 2;
782
783 /* delimiter between hostname and sharename is always '\\' now */
784 delim = strchr(src, '\\');
785 if (!delim)
786 return ERR_PTR(-EINVAL);
787
788 len = delim - src;
789 dst = kmalloc((len + 1), GFP_KERNEL);
790 if (dst == NULL)
791 return ERR_PTR(-ENOMEM);
792
793 memcpy(dst, src, len);
794 dst[len] = '\0';
795
796 return dst;
797 }
798
799 static int
800 cifs_parse_mount_options(char *options, const char *devname,
801 struct smb_vol *vol)
802 {
803 char *value;
804 char *data;
805 unsigned int temp_len, i, j;
806 char separator[2];
807 short int override_uid = -1;
808 short int override_gid = -1;
809 bool uid_specified = false;
810 bool gid_specified = false;
811
812 separator[0] = ',';
813 separator[1] = 0;
814
815 if (Local_System_Name[0] != 0)
816 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
817 else {
818 char *nodename = utsname()->nodename;
819 int n = strnlen(nodename, 15);
820 memset(vol->source_rfc1001_name, 0x20, 15);
821 for (i = 0; i < n; i++) {
822 /* does not have to be perfect mapping since field is
823 informational, only used for servers that do not support
824 port 445 and it can be overridden at mount time */
825 vol->source_rfc1001_name[i] = toupper(nodename[i]);
826 }
827 }
828 vol->source_rfc1001_name[15] = 0;
829 /* null target name indicates to use *SMBSERVR default called name
830 if we end up sending RFC1001 session initialize */
831 vol->target_rfc1001_name[0] = 0;
832 vol->linux_uid = current_uid(); /* use current_euid() instead? */
833 vol->linux_gid = current_gid();
834
835 /* default to only allowing write access to owner of the mount */
836 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
837
838 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
839 /* default is always to request posix paths. */
840 vol->posix_paths = 1;
841 /* default to using server inode numbers where available */
842 vol->server_ino = 1;
843
844 if (!options)
845 return 1;
846
847 if (strncmp(options, "sep=", 4) == 0) {
848 if (options[4] != 0) {
849 separator[0] = options[4];
850 options += 5;
851 } else {
852 cFYI(1, ("Null separator not allowed"));
853 }
854 }
855
856 while ((data = strsep(&options, separator)) != NULL) {
857 if (!*data)
858 continue;
859 if ((value = strchr(data, '=')) != NULL)
860 *value++ = '\0';
861
862 /* Have to parse this before we parse for "user" */
863 if (strnicmp(data, "user_xattr", 10) == 0) {
864 vol->no_xattr = 0;
865 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
866 vol->no_xattr = 1;
867 } else if (strnicmp(data, "user", 4) == 0) {
868 if (!value) {
869 printk(KERN_WARNING
870 "CIFS: invalid or missing username\n");
871 return 1; /* needs_arg; */
872 } else if (!*value) {
873 /* null user, ie anonymous, authentication */
874 vol->nullauth = 1;
875 }
876 if (strnlen(value, 200) < 200) {
877 vol->username = value;
878 } else {
879 printk(KERN_WARNING "CIFS: username too long\n");
880 return 1;
881 }
882 } else if (strnicmp(data, "pass", 4) == 0) {
883 if (!value) {
884 vol->password = NULL;
885 continue;
886 } else if (value[0] == 0) {
887 /* check if string begins with double comma
888 since that would mean the password really
889 does start with a comma, and would not
890 indicate an empty string */
891 if (value[1] != separator[0]) {
892 vol->password = NULL;
893 continue;
894 }
895 }
896 temp_len = strlen(value);
897 /* removed password length check, NTLM passwords
898 can be arbitrarily long */
899
900 /* if comma in password, the string will be
901 prematurely null terminated. Commas in password are
902 specified across the cifs mount interface by a double
903 comma ie ,, and a comma used as in other cases ie ','
904 as a parameter delimiter/separator is single and due
905 to the strsep above is temporarily zeroed. */
906
907 /* NB: password legally can have multiple commas and
908 the only illegal character in a password is null */
909
910 if ((value[temp_len] == 0) &&
911 (value[temp_len+1] == separator[0])) {
912 /* reinsert comma */
913 value[temp_len] = separator[0];
914 temp_len += 2; /* move after second comma */
915 while (value[temp_len] != 0) {
916 if (value[temp_len] == separator[0]) {
917 if (value[temp_len+1] ==
918 separator[0]) {
919 /* skip second comma */
920 temp_len++;
921 } else {
922 /* single comma indicating start
923 of next parm */
924 break;
925 }
926 }
927 temp_len++;
928 }
929 if (value[temp_len] == 0) {
930 options = NULL;
931 } else {
932 value[temp_len] = 0;
933 /* point option to start of next parm */
934 options = value + temp_len + 1;
935 }
936 /* go from value to value + temp_len condensing
937 double commas to singles. Note that this ends up
938 allocating a few bytes too many, which is ok */
939 vol->password = kzalloc(temp_len, GFP_KERNEL);
940 if (vol->password == NULL) {
941 printk(KERN_WARNING "CIFS: no memory "
942 "for password\n");
943 return 1;
944 }
945 for (i = 0, j = 0; i < temp_len; i++, j++) {
946 vol->password[j] = value[i];
947 if (value[i] == separator[0]
948 && value[i+1] == separator[0]) {
949 /* skip second comma */
950 i++;
951 }
952 }
953 vol->password[j] = 0;
954 } else {
955 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
956 if (vol->password == NULL) {
957 printk(KERN_WARNING "CIFS: no memory "
958 "for password\n");
959 return 1;
960 }
961 strcpy(vol->password, value);
962 }
963 } else if (!strnicmp(data, "ip", 2) ||
964 !strnicmp(data, "addr", 4)) {
965 if (!value || !*value) {
966 vol->UNCip = NULL;
967 } else if (strnlen(value, INET6_ADDRSTRLEN) <
968 INET6_ADDRSTRLEN) {
969 vol->UNCip = value;
970 } else {
971 printk(KERN_WARNING "CIFS: ip address "
972 "too long\n");
973 return 1;
974 }
975 } else if (strnicmp(data, "sec", 3) == 0) {
976 if (!value || !*value) {
977 cERROR(1, ("no security value specified"));
978 continue;
979 } else if (strnicmp(value, "krb5i", 5) == 0) {
980 vol->secFlg |= CIFSSEC_MAY_KRB5 |
981 CIFSSEC_MUST_SIGN;
982 } else if (strnicmp(value, "krb5p", 5) == 0) {
983 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
984 CIFSSEC_MAY_KRB5; */
985 cERROR(1, ("Krb5 cifs privacy not supported"));
986 return 1;
987 } else if (strnicmp(value, "krb5", 4) == 0) {
988 vol->secFlg |= CIFSSEC_MAY_KRB5;
989 #ifdef CONFIG_CIFS_EXPERIMENTAL
990 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
991 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
992 CIFSSEC_MUST_SIGN;
993 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
994 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
995 #endif
996 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
997 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
998 CIFSSEC_MUST_SIGN;
999 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
1000 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1001 } else if (strnicmp(value, "ntlmi", 5) == 0) {
1002 vol->secFlg |= CIFSSEC_MAY_NTLM |
1003 CIFSSEC_MUST_SIGN;
1004 } else if (strnicmp(value, "ntlm", 4) == 0) {
1005 /* ntlm is default so can be turned off too */
1006 vol->secFlg |= CIFSSEC_MAY_NTLM;
1007 } else if (strnicmp(value, "nontlm", 6) == 0) {
1008 /* BB is there a better way to do this? */
1009 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1010 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1011 } else if (strnicmp(value, "lanman", 6) == 0) {
1012 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1013 #endif
1014 } else if (strnicmp(value, "none", 4) == 0) {
1015 vol->nullauth = 1;
1016 } else {
1017 cERROR(1, ("bad security option: %s", value));
1018 return 1;
1019 }
1020 } else if ((strnicmp(data, "unc", 3) == 0)
1021 || (strnicmp(data, "target", 6) == 0)
1022 || (strnicmp(data, "path", 4) == 0)) {
1023 if (!value || !*value) {
1024 printk(KERN_WARNING "CIFS: invalid path to "
1025 "network resource\n");
1026 return 1; /* needs_arg; */
1027 }
1028 if ((temp_len = strnlen(value, 300)) < 300) {
1029 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1030 if (vol->UNC == NULL)
1031 return 1;
1032 strcpy(vol->UNC, value);
1033 if (strncmp(vol->UNC, "//", 2) == 0) {
1034 vol->UNC[0] = '\\';
1035 vol->UNC[1] = '\\';
1036 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1037 printk(KERN_WARNING
1038 "CIFS: UNC Path does not begin "
1039 "with // or \\\\ \n");
1040 return 1;
1041 }
1042 } else {
1043 printk(KERN_WARNING "CIFS: UNC name too long\n");
1044 return 1;
1045 }
1046 } else if ((strnicmp(data, "domain", 3) == 0)
1047 || (strnicmp(data, "workgroup", 5) == 0)) {
1048 if (!value || !*value) {
1049 printk(KERN_WARNING "CIFS: invalid domain name\n");
1050 return 1; /* needs_arg; */
1051 }
1052 /* BB are there cases in which a comma can be valid in
1053 a domain name and need special handling? */
1054 if (strnlen(value, 256) < 256) {
1055 vol->domainname = value;
1056 cFYI(1, ("Domain name set"));
1057 } else {
1058 printk(KERN_WARNING "CIFS: domain name too "
1059 "long\n");
1060 return 1;
1061 }
1062 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1063 if (!value || !*value) {
1064 printk(KERN_WARNING
1065 "CIFS: invalid path prefix\n");
1066 return 1; /* needs_argument */
1067 }
1068 if ((temp_len = strnlen(value, 1024)) < 1024) {
1069 if (value[0] != '/')
1070 temp_len++; /* missing leading slash */
1071 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1072 if (vol->prepath == NULL)
1073 return 1;
1074 if (value[0] != '/') {
1075 vol->prepath[0] = '/';
1076 strcpy(vol->prepath+1, value);
1077 } else
1078 strcpy(vol->prepath, value);
1079 cFYI(1, ("prefix path %s", vol->prepath));
1080 } else {
1081 printk(KERN_WARNING "CIFS: prefix too long\n");
1082 return 1;
1083 }
1084 } else if (strnicmp(data, "iocharset", 9) == 0) {
1085 if (!value || !*value) {
1086 printk(KERN_WARNING "CIFS: invalid iocharset "
1087 "specified\n");
1088 return 1; /* needs_arg; */
1089 }
1090 if (strnlen(value, 65) < 65) {
1091 if (strnicmp(value, "default", 7))
1092 vol->iocharset = value;
1093 /* if iocharset not set then load_nls_default
1094 is used by caller */
1095 cFYI(1, ("iocharset set to %s", value));
1096 } else {
1097 printk(KERN_WARNING "CIFS: iocharset name "
1098 "too long.\n");
1099 return 1;
1100 }
1101 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1102 vol->linux_uid = simple_strtoul(value, &value, 0);
1103 uid_specified = true;
1104 } else if (!strnicmp(data, "forceuid", 8)) {
1105 override_uid = 1;
1106 } else if (!strnicmp(data, "noforceuid", 10)) {
1107 override_uid = 0;
1108 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1109 vol->linux_gid = simple_strtoul(value, &value, 0);
1110 gid_specified = true;
1111 } else if (!strnicmp(data, "forcegid", 8)) {
1112 override_gid = 1;
1113 } else if (!strnicmp(data, "noforcegid", 10)) {
1114 override_gid = 0;
1115 } else if (strnicmp(data, "file_mode", 4) == 0) {
1116 if (value && *value) {
1117 vol->file_mode =
1118 simple_strtoul(value, &value, 0);
1119 }
1120 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1121 if (value && *value) {
1122 vol->dir_mode =
1123 simple_strtoul(value, &value, 0);
1124 }
1125 } else if (strnicmp(data, "dirmode", 4) == 0) {
1126 if (value && *value) {
1127 vol->dir_mode =
1128 simple_strtoul(value, &value, 0);
1129 }
1130 } else if (strnicmp(data, "port", 4) == 0) {
1131 if (value && *value) {
1132 vol->port =
1133 simple_strtoul(value, &value, 0);
1134 }
1135 } else if (strnicmp(data, "rsize", 5) == 0) {
1136 if (value && *value) {
1137 vol->rsize =
1138 simple_strtoul(value, &value, 0);
1139 }
1140 } else if (strnicmp(data, "wsize", 5) == 0) {
1141 if (value && *value) {
1142 vol->wsize =
1143 simple_strtoul(value, &value, 0);
1144 }
1145 } else if (strnicmp(data, "sockopt", 5) == 0) {
1146 if (!value || !*value) {
1147 cERROR(1, ("no socket option specified"));
1148 continue;
1149 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1150 vol->sockopt_tcp_nodelay = 1;
1151 }
1152 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1153 if (!value || !*value || (*value == ' ')) {
1154 cFYI(1, ("invalid (empty) netbiosname"));
1155 } else {
1156 memset(vol->source_rfc1001_name, 0x20, 15);
1157 for (i = 0; i < 15; i++) {
1158 /* BB are there cases in which a comma can be
1159 valid in this workstation netbios name (and need
1160 special handling)? */
1161
1162 /* We do not uppercase netbiosname for user */
1163 if (value[i] == 0)
1164 break;
1165 else
1166 vol->source_rfc1001_name[i] =
1167 value[i];
1168 }
1169 /* The string has 16th byte zero still from
1170 set at top of the function */
1171 if ((i == 15) && (value[i] != 0))
1172 printk(KERN_WARNING "CIFS: netbiosname"
1173 " longer than 15 truncated.\n");
1174 }
1175 } else if (strnicmp(data, "servern", 7) == 0) {
1176 /* servernetbiosname specified override *SMBSERVER */
1177 if (!value || !*value || (*value == ' ')) {
1178 cFYI(1, ("empty server netbiosname specified"));
1179 } else {
1180 /* last byte, type, is 0x20 for servr type */
1181 memset(vol->target_rfc1001_name, 0x20, 16);
1182
1183 for (i = 0; i < 15; i++) {
1184 /* BB are there cases in which a comma can be
1185 valid in this workstation netbios name
1186 (and need special handling)? */
1187
1188 /* user or mount helper must uppercase
1189 the netbiosname */
1190 if (value[i] == 0)
1191 break;
1192 else
1193 vol->target_rfc1001_name[i] =
1194 value[i];
1195 }
1196 /* The string has 16th byte zero still from
1197 set at top of the function */
1198 if ((i == 15) && (value[i] != 0))
1199 printk(KERN_WARNING "CIFS: server net"
1200 "biosname longer than 15 truncated.\n");
1201 }
1202 } else if (strnicmp(data, "credentials", 4) == 0) {
1203 /* ignore */
1204 } else if (strnicmp(data, "version", 3) == 0) {
1205 /* ignore */
1206 } else if (strnicmp(data, "guest", 5) == 0) {
1207 /* ignore */
1208 } else if (strnicmp(data, "rw", 2) == 0) {
1209 /* ignore */
1210 } else if (strnicmp(data, "ro", 2) == 0) {
1211 /* ignore */
1212 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1213 vol->noblocksnd = 1;
1214 } else if (strnicmp(data, "noautotune", 10) == 0) {
1215 vol->noautotune = 1;
1216 } else if ((strnicmp(data, "suid", 4) == 0) ||
1217 (strnicmp(data, "nosuid", 6) == 0) ||
1218 (strnicmp(data, "exec", 4) == 0) ||
1219 (strnicmp(data, "noexec", 6) == 0) ||
1220 (strnicmp(data, "nodev", 5) == 0) ||
1221 (strnicmp(data, "noauto", 6) == 0) ||
1222 (strnicmp(data, "dev", 3) == 0)) {
1223 /* The mount tool or mount.cifs helper (if present)
1224 uses these opts to set flags, and the flags are read
1225 by the kernel vfs layer before we get here (ie
1226 before read super) so there is no point trying to
1227 parse these options again and set anything and it
1228 is ok to just ignore them */
1229 continue;
1230 } else if (strnicmp(data, "hard", 4) == 0) {
1231 vol->retry = 1;
1232 } else if (strnicmp(data, "soft", 4) == 0) {
1233 vol->retry = 0;
1234 } else if (strnicmp(data, "perm", 4) == 0) {
1235 vol->noperm = 0;
1236 } else if (strnicmp(data, "noperm", 6) == 0) {
1237 vol->noperm = 1;
1238 } else if (strnicmp(data, "mapchars", 8) == 0) {
1239 vol->remap = 1;
1240 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1241 vol->remap = 0;
1242 } else if (strnicmp(data, "sfu", 3) == 0) {
1243 vol->sfu_emul = 1;
1244 } else if (strnicmp(data, "nosfu", 5) == 0) {
1245 vol->sfu_emul = 0;
1246 } else if (strnicmp(data, "nodfs", 5) == 0) {
1247 vol->nodfs = 1;
1248 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1249 vol->posix_paths = 1;
1250 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1251 vol->posix_paths = 0;
1252 } else if (strnicmp(data, "nounix", 6) == 0) {
1253 vol->no_linux_ext = 1;
1254 } else if (strnicmp(data, "nolinux", 7) == 0) {
1255 vol->no_linux_ext = 1;
1256 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1257 (strnicmp(data, "ignorecase", 10) == 0)) {
1258 vol->nocase = 1;
1259 } else if (strnicmp(data, "brl", 3) == 0) {
1260 vol->nobrl = 0;
1261 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1262 (strnicmp(data, "nolock", 6) == 0)) {
1263 vol->nobrl = 1;
1264 /* turn off mandatory locking in mode
1265 if remote locking is turned off since the
1266 local vfs will do advisory */
1267 if (vol->file_mode ==
1268 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1269 vol->file_mode = S_IALLUGO;
1270 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1271 /* will take the shorter form "forcemand" as well */
1272 /* This mount option will force use of mandatory
1273 (DOS/Windows style) byte range locks, instead of
1274 using posix advisory byte range locks, even if the
1275 Unix extensions are available and posix locks would
1276 be supported otherwise. If Unix extensions are not
1277 negotiated this has no effect since mandatory locks
1278 would be used (mandatory locks is all that those
1279 those servers support) */
1280 vol->mand_lock = 1;
1281 } else if (strnicmp(data, "setuids", 7) == 0) {
1282 vol->setuids = 1;
1283 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1284 vol->setuids = 0;
1285 } else if (strnicmp(data, "dynperm", 7) == 0) {
1286 vol->dynperm = true;
1287 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1288 vol->dynperm = false;
1289 } else if (strnicmp(data, "nohard", 6) == 0) {
1290 vol->retry = 0;
1291 } else if (strnicmp(data, "nosoft", 6) == 0) {
1292 vol->retry = 1;
1293 } else if (strnicmp(data, "nointr", 6) == 0) {
1294 vol->intr = 0;
1295 } else if (strnicmp(data, "intr", 4) == 0) {
1296 vol->intr = 1;
1297 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1298 vol->nostrictsync = 1;
1299 } else if (strnicmp(data, "strictsync", 10) == 0) {
1300 vol->nostrictsync = 0;
1301 } else if (strnicmp(data, "serverino", 7) == 0) {
1302 vol->server_ino = 1;
1303 } else if (strnicmp(data, "noserverino", 9) == 0) {
1304 vol->server_ino = 0;
1305 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1306 vol->cifs_acl = 1;
1307 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1308 vol->cifs_acl = 0;
1309 } else if (strnicmp(data, "acl", 3) == 0) {
1310 vol->no_psx_acl = 0;
1311 } else if (strnicmp(data, "noacl", 5) == 0) {
1312 vol->no_psx_acl = 1;
1313 #ifdef CONFIG_CIFS_EXPERIMENTAL
1314 } else if (strnicmp(data, "locallease", 6) == 0) {
1315 vol->local_lease = 1;
1316 #endif
1317 } else if (strnicmp(data, "sign", 4) == 0) {
1318 vol->secFlg |= CIFSSEC_MUST_SIGN;
1319 } else if (strnicmp(data, "seal", 4) == 0) {
1320 /* we do not do the following in secFlags because seal
1321 is a per tree connection (mount) not a per socket
1322 or per-smb connection option in the protocol */
1323 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1324 vol->seal = 1;
1325 } else if (strnicmp(data, "direct", 6) == 0) {
1326 vol->direct_io = 1;
1327 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1328 vol->direct_io = 1;
1329 } else if (strnicmp(data, "noac", 4) == 0) {
1330 printk(KERN_WARNING "CIFS: Mount option noac not "
1331 "supported. Instead set "
1332 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1333 } else
1334 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1335 data);
1336 }
1337 if (vol->UNC == NULL) {
1338 if (devname == NULL) {
1339 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1340 "target\n");
1341 return 1;
1342 }
1343 if ((temp_len = strnlen(devname, 300)) < 300) {
1344 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1345 if (vol->UNC == NULL)
1346 return 1;
1347 strcpy(vol->UNC, devname);
1348 if (strncmp(vol->UNC, "//", 2) == 0) {
1349 vol->UNC[0] = '\\';
1350 vol->UNC[1] = '\\';
1351 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1352 printk(KERN_WARNING "CIFS: UNC Path does not "
1353 "begin with // or \\\\ \n");
1354 return 1;
1355 }
1356 value = strpbrk(vol->UNC+2, "/\\");
1357 if (value)
1358 *value = '\\';
1359 } else {
1360 printk(KERN_WARNING "CIFS: UNC name too long\n");
1361 return 1;
1362 }
1363 }
1364 if (vol->UNCip == NULL)
1365 vol->UNCip = &vol->UNC[2];
1366
1367 if (uid_specified)
1368 vol->override_uid = override_uid;
1369 else if (override_uid == 1)
1370 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1371 "specified with no uid= option.\n");
1372
1373 if (gid_specified)
1374 vol->override_gid = override_gid;
1375 else if (override_gid == 1)
1376 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1377 "specified with no gid= option.\n");
1378
1379 return 0;
1380 }
1381
1382 static struct TCP_Server_Info *
1383 cifs_find_tcp_session(struct sockaddr_storage *addr, unsigned short int port)
1384 {
1385 struct list_head *tmp;
1386 struct TCP_Server_Info *server;
1387 struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
1388 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
1389
1390 write_lock(&cifs_tcp_ses_lock);
1391 list_for_each(tmp, &cifs_tcp_ses_list) {
1392 server = list_entry(tmp, struct TCP_Server_Info,
1393 tcp_ses_list);
1394 /*
1395 * the demux thread can exit on its own while still in CifsNew
1396 * so don't accept any sockets in that state. Since the
1397 * tcpStatus never changes back to CifsNew it's safe to check
1398 * for this without a lock.
1399 */
1400 if (server->tcpStatus == CifsNew)
1401 continue;
1402
1403 switch (addr->ss_family) {
1404 case AF_INET:
1405 if (addr4->sin_addr.s_addr ==
1406 server->addr.sockAddr.sin_addr.s_addr) {
1407 addr4->sin_port = htons(port);
1408 /* user overrode default port? */
1409 if (addr4->sin_port) {
1410 if (addr4->sin_port !=
1411 server->addr.sockAddr.sin_port)
1412 continue;
1413 }
1414 break;
1415 } else
1416 continue;
1417
1418 case AF_INET6:
1419 if (ipv6_addr_equal(&addr6->sin6_addr,
1420 &server->addr.sockAddr6.sin6_addr) &&
1421 (addr6->sin6_scope_id ==
1422 server->addr.sockAddr6.sin6_scope_id)) {
1423 addr6->sin6_port = htons(port);
1424 /* user overrode default port? */
1425 if (addr6->sin6_port) {
1426 if (addr6->sin6_port !=
1427 server->addr.sockAddr6.sin6_port)
1428 continue;
1429 }
1430 break;
1431 } else
1432 continue;
1433 }
1434
1435 ++server->srv_count;
1436 write_unlock(&cifs_tcp_ses_lock);
1437 cFYI(1, ("Existing tcp session with server found"));
1438 return server;
1439 }
1440 write_unlock(&cifs_tcp_ses_lock);
1441 return NULL;
1442 }
1443
1444 static void
1445 cifs_put_tcp_session(struct TCP_Server_Info *server)
1446 {
1447 struct task_struct *task;
1448
1449 write_lock(&cifs_tcp_ses_lock);
1450 if (--server->srv_count > 0) {
1451 write_unlock(&cifs_tcp_ses_lock);
1452 return;
1453 }
1454
1455 list_del_init(&server->tcp_ses_list);
1456 write_unlock(&cifs_tcp_ses_lock);
1457
1458 spin_lock(&GlobalMid_Lock);
1459 server->tcpStatus = CifsExiting;
1460 spin_unlock(&GlobalMid_Lock);
1461
1462 task = xchg(&server->tsk, NULL);
1463 if (task)
1464 force_sig(SIGKILL, task);
1465 }
1466
1467 static struct TCP_Server_Info *
1468 cifs_get_tcp_session(struct smb_vol *volume_info)
1469 {
1470 struct TCP_Server_Info *tcp_ses = NULL;
1471 struct sockaddr_storage addr;
1472 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1473 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1474 int rc;
1475
1476 memset(&addr, 0, sizeof(struct sockaddr_storage));
1477
1478 cFYI(1, ("UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip));
1479
1480 if (volume_info->UNCip && volume_info->UNC) {
1481 rc = cifs_convert_address(volume_info->UNCip, &addr);
1482 if (!rc) {
1483 /* we failed translating address */
1484 rc = -EINVAL;
1485 goto out_err;
1486 }
1487 } else if (volume_info->UNCip) {
1488 /* BB using ip addr as tcp_ses name to connect to the
1489 DFS root below */
1490 cERROR(1, ("Connecting to DFS root not implemented yet"));
1491 rc = -EINVAL;
1492 goto out_err;
1493 } else /* which tcp_sess DFS root would we conect to */ {
1494 cERROR(1,
1495 ("CIFS mount error: No UNC path (e.g. -o "
1496 "unc=//192.168.1.100/public) specified"));
1497 rc = -EINVAL;
1498 goto out_err;
1499 }
1500
1501 /* see if we already have a matching tcp_ses */
1502 tcp_ses = cifs_find_tcp_session(&addr, volume_info->port);
1503 if (tcp_ses)
1504 return tcp_ses;
1505
1506 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1507 if (!tcp_ses) {
1508 rc = -ENOMEM;
1509 goto out_err;
1510 }
1511
1512 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1513 if (IS_ERR(tcp_ses->hostname)) {
1514 rc = PTR_ERR(tcp_ses->hostname);
1515 goto out_err;
1516 }
1517
1518 tcp_ses->noblocksnd = volume_info->noblocksnd;
1519 tcp_ses->noautotune = volume_info->noautotune;
1520 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1521 atomic_set(&tcp_ses->inFlight, 0);
1522 init_waitqueue_head(&tcp_ses->response_q);
1523 init_waitqueue_head(&tcp_ses->request_q);
1524 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1525 mutex_init(&tcp_ses->srv_mutex);
1526 memcpy(tcp_ses->workstation_RFC1001_name,
1527 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1528 memcpy(tcp_ses->server_RFC1001_name,
1529 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1530 tcp_ses->sequence_number = 0;
1531 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1532 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1533
1534 /*
1535 * at this point we are the only ones with the pointer
1536 * to the struct since the kernel thread not created yet
1537 * no need to spinlock this init of tcpStatus or srv_count
1538 */
1539 tcp_ses->tcpStatus = CifsNew;
1540 ++tcp_ses->srv_count;
1541
1542 if (addr.ss_family == AF_INET6) {
1543 cFYI(1, ("attempting ipv6 connect"));
1544 /* BB should we allow ipv6 on port 139? */
1545 /* other OS never observed in Wild doing 139 with v6 */
1546 sin_server6->sin6_port = htons(volume_info->port);
1547 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1548 sizeof(struct sockaddr_in6));
1549 rc = ipv6_connect(tcp_ses);
1550 } else {
1551 sin_server->sin_port = htons(volume_info->port);
1552 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1553 sizeof(struct sockaddr_in));
1554 rc = ipv4_connect(tcp_ses);
1555 }
1556 if (rc < 0) {
1557 cERROR(1, ("Error connecting to socket. Aborting operation"));
1558 goto out_err;
1559 }
1560
1561 /*
1562 * since we're in a cifs function already, we know that
1563 * this will succeed. No need for try_module_get().
1564 */
1565 __module_get(THIS_MODULE);
1566 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1567 tcp_ses, "cifsd");
1568 if (IS_ERR(tcp_ses->tsk)) {
1569 rc = PTR_ERR(tcp_ses->tsk);
1570 cERROR(1, ("error %d create cifsd thread", rc));
1571 module_put(THIS_MODULE);
1572 goto out_err;
1573 }
1574
1575 /* thread spawned, put it on the list */
1576 write_lock(&cifs_tcp_ses_lock);
1577 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1578 write_unlock(&cifs_tcp_ses_lock);
1579
1580 return tcp_ses;
1581
1582 out_err:
1583 if (tcp_ses) {
1584 if (!IS_ERR(tcp_ses->hostname))
1585 kfree(tcp_ses->hostname);
1586 if (tcp_ses->ssocket)
1587 sock_release(tcp_ses->ssocket);
1588 kfree(tcp_ses);
1589 }
1590 return ERR_PTR(rc);
1591 }
1592
1593 static struct cifsSesInfo *
1594 cifs_find_smb_ses(struct TCP_Server_Info *server, char *username)
1595 {
1596 struct list_head *tmp;
1597 struct cifsSesInfo *ses;
1598
1599 write_lock(&cifs_tcp_ses_lock);
1600 list_for_each(tmp, &server->smb_ses_list) {
1601 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
1602 if (strncmp(ses->userName, username, MAX_USERNAME_SIZE))
1603 continue;
1604
1605 ++ses->ses_count;
1606 write_unlock(&cifs_tcp_ses_lock);
1607 return ses;
1608 }
1609 write_unlock(&cifs_tcp_ses_lock);
1610 return NULL;
1611 }
1612
1613 static void
1614 cifs_put_smb_ses(struct cifsSesInfo *ses)
1615 {
1616 int xid;
1617 struct TCP_Server_Info *server = ses->server;
1618
1619 write_lock(&cifs_tcp_ses_lock);
1620 if (--ses->ses_count > 0) {
1621 write_unlock(&cifs_tcp_ses_lock);
1622 return;
1623 }
1624
1625 list_del_init(&ses->smb_ses_list);
1626 write_unlock(&cifs_tcp_ses_lock);
1627
1628 if (ses->status == CifsGood) {
1629 xid = GetXid();
1630 CIFSSMBLogoff(xid, ses);
1631 _FreeXid(xid);
1632 }
1633 sesInfoFree(ses);
1634 cifs_put_tcp_session(server);
1635 }
1636
1637 static struct cifsTconInfo *
1638 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1639 {
1640 struct list_head *tmp;
1641 struct cifsTconInfo *tcon;
1642
1643 write_lock(&cifs_tcp_ses_lock);
1644 list_for_each(tmp, &ses->tcon_list) {
1645 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1646 if (tcon->tidStatus == CifsExiting)
1647 continue;
1648 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1649 continue;
1650
1651 ++tcon->tc_count;
1652 write_unlock(&cifs_tcp_ses_lock);
1653 return tcon;
1654 }
1655 write_unlock(&cifs_tcp_ses_lock);
1656 return NULL;
1657 }
1658
1659 static void
1660 cifs_put_tcon(struct cifsTconInfo *tcon)
1661 {
1662 int xid;
1663 struct cifsSesInfo *ses = tcon->ses;
1664
1665 write_lock(&cifs_tcp_ses_lock);
1666 if (--tcon->tc_count > 0) {
1667 write_unlock(&cifs_tcp_ses_lock);
1668 return;
1669 }
1670
1671 list_del_init(&tcon->tcon_list);
1672 write_unlock(&cifs_tcp_ses_lock);
1673
1674 xid = GetXid();
1675 CIFSSMBTDis(xid, tcon);
1676 _FreeXid(xid);
1677
1678 tconInfoFree(tcon);
1679 cifs_put_smb_ses(ses);
1680 }
1681
1682 int
1683 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
1684 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
1685 struct dfs_info3_param **preferrals, int remap)
1686 {
1687 char *temp_unc;
1688 int rc = 0;
1689
1690 *pnum_referrals = 0;
1691 *preferrals = NULL;
1692
1693 if (pSesInfo->ipc_tid == 0) {
1694 temp_unc = kmalloc(2 /* for slashes */ +
1695 strnlen(pSesInfo->serverName,
1696 SERVER_NAME_LEN_WITH_NULL * 2)
1697 + 1 + 4 /* slash IPC$ */ + 2,
1698 GFP_KERNEL);
1699 if (temp_unc == NULL)
1700 return -ENOMEM;
1701 temp_unc[0] = '\\';
1702 temp_unc[1] = '\\';
1703 strcpy(temp_unc + 2, pSesInfo->serverName);
1704 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
1705 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1706 cFYI(1,
1707 ("CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid));
1708 kfree(temp_unc);
1709 }
1710 if (rc == 0)
1711 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
1712 pnum_referrals, nls_codepage, remap);
1713 /* BB map targetUNCs to dfs_info3 structures, here or
1714 in CIFSGetDFSRefer BB */
1715
1716 return rc;
1717 }
1718
1719 #ifdef CONFIG_DEBUG_LOCK_ALLOC
1720 static struct lock_class_key cifs_key[2];
1721 static struct lock_class_key cifs_slock_key[2];
1722
1723 static inline void
1724 cifs_reclassify_socket4(struct socket *sock)
1725 {
1726 struct sock *sk = sock->sk;
1727 BUG_ON(sock_owned_by_user(sk));
1728 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
1729 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
1730 }
1731
1732 static inline void
1733 cifs_reclassify_socket6(struct socket *sock)
1734 {
1735 struct sock *sk = sock->sk;
1736 BUG_ON(sock_owned_by_user(sk));
1737 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
1738 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
1739 }
1740 #else
1741 static inline void
1742 cifs_reclassify_socket4(struct socket *sock)
1743 {
1744 }
1745
1746 static inline void
1747 cifs_reclassify_socket6(struct socket *sock)
1748 {
1749 }
1750 #endif
1751
1752 /* See RFC1001 section 14 on representation of Netbios names */
1753 static void rfc1002mangle(char *target, char *source, unsigned int length)
1754 {
1755 unsigned int i, j;
1756
1757 for (i = 0, j = 0; i < (length); i++) {
1758 /* mask a nibble at a time and encode */
1759 target[j] = 'A' + (0x0F & (source[i] >> 4));
1760 target[j+1] = 'A' + (0x0F & source[i]);
1761 j += 2;
1762 }
1763
1764 }
1765
1766
1767 static int
1768 ipv4_connect(struct TCP_Server_Info *server)
1769 {
1770 int rc = 0;
1771 int val;
1772 bool connected = false;
1773 __be16 orig_port = 0;
1774 struct socket *socket = server->ssocket;
1775
1776 if (socket == NULL) {
1777 rc = sock_create_kern(PF_INET, SOCK_STREAM,
1778 IPPROTO_TCP, &socket);
1779 if (rc < 0) {
1780 cERROR(1, ("Error %d creating socket", rc));
1781 return rc;
1782 }
1783
1784 /* BB other socket options to set KEEPALIVE, NODELAY? */
1785 cFYI(1, ("Socket created"));
1786 server->ssocket = socket;
1787 socket->sk->sk_allocation = GFP_NOFS;
1788 cifs_reclassify_socket4(socket);
1789 }
1790
1791 /* user overrode default port */
1792 if (server->addr.sockAddr.sin_port) {
1793 rc = socket->ops->connect(socket, (struct sockaddr *)
1794 &server->addr.sockAddr,
1795 sizeof(struct sockaddr_in), 0);
1796 if (rc >= 0)
1797 connected = true;
1798 }
1799
1800 if (!connected) {
1801 /* save original port so we can retry user specified port
1802 later if fall back ports fail this time */
1803 orig_port = server->addr.sockAddr.sin_port;
1804
1805 /* do not retry on the same port we just failed on */
1806 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
1807 server->addr.sockAddr.sin_port = htons(CIFS_PORT);
1808 rc = socket->ops->connect(socket,
1809 (struct sockaddr *)
1810 &server->addr.sockAddr,
1811 sizeof(struct sockaddr_in), 0);
1812 if (rc >= 0)
1813 connected = true;
1814 }
1815 }
1816 if (!connected) {
1817 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
1818 rc = socket->ops->connect(socket, (struct sockaddr *)
1819 &server->addr.sockAddr,
1820 sizeof(struct sockaddr_in), 0);
1821 if (rc >= 0)
1822 connected = true;
1823 }
1824
1825 /* give up here - unless we want to retry on different
1826 protocol families some day */
1827 if (!connected) {
1828 if (orig_port)
1829 server->addr.sockAddr.sin_port = orig_port;
1830 cFYI(1, ("Error %d connecting to server via ipv4", rc));
1831 sock_release(socket);
1832 server->ssocket = NULL;
1833 return rc;
1834 }
1835
1836
1837 /*
1838 * Eventually check for other socket options to change from
1839 * the default. sock_setsockopt not used because it expects
1840 * user space buffer
1841 */
1842 socket->sk->sk_rcvtimeo = 7 * HZ;
1843 socket->sk->sk_sndtimeo = 5 * HZ;
1844
1845 /* make the bufsizes depend on wsize/rsize and max requests */
1846 if (server->noautotune) {
1847 if (socket->sk->sk_sndbuf < (200 * 1024))
1848 socket->sk->sk_sndbuf = 200 * 1024;
1849 if (socket->sk->sk_rcvbuf < (140 * 1024))
1850 socket->sk->sk_rcvbuf = 140 * 1024;
1851 }
1852
1853 if (server->tcp_nodelay) {
1854 val = 1;
1855 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
1856 (char *)&val, sizeof(val));
1857 if (rc)
1858 cFYI(1, ("set TCP_NODELAY socket option error %d", rc));
1859 }
1860
1861 cFYI(1, ("sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
1862 socket->sk->sk_sndbuf,
1863 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo));
1864
1865 /* send RFC1001 sessinit */
1866 if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
1867 /* some servers require RFC1001 sessinit before sending
1868 negprot - BB check reconnection in case where second
1869 sessinit is sent but no second negprot */
1870 struct rfc1002_session_packet *ses_init_buf;
1871 struct smb_hdr *smb_buf;
1872 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
1873 GFP_KERNEL);
1874 if (ses_init_buf) {
1875 ses_init_buf->trailer.session_req.called_len = 32;
1876 if (server->server_RFC1001_name &&
1877 server->server_RFC1001_name[0] != 0)
1878 rfc1002mangle(ses_init_buf->trailer.
1879 session_req.called_name,
1880 server->server_RFC1001_name,
1881 RFC1001_NAME_LEN_WITH_NULL);
1882 else
1883 rfc1002mangle(ses_init_buf->trailer.
1884 session_req.called_name,
1885 DEFAULT_CIFS_CALLED_NAME,
1886 RFC1001_NAME_LEN_WITH_NULL);
1887
1888 ses_init_buf->trailer.session_req.calling_len = 32;
1889
1890 /* calling name ends in null (byte 16) from old smb
1891 convention. */
1892 if (server->workstation_RFC1001_name &&
1893 server->workstation_RFC1001_name[0] != 0)
1894 rfc1002mangle(ses_init_buf->trailer.
1895 session_req.calling_name,
1896 server->workstation_RFC1001_name,
1897 RFC1001_NAME_LEN_WITH_NULL);
1898 else
1899 rfc1002mangle(ses_init_buf->trailer.
1900 session_req.calling_name,
1901 "LINUX_CIFS_CLNT",
1902 RFC1001_NAME_LEN_WITH_NULL);
1903
1904 ses_init_buf->trailer.session_req.scope1 = 0;
1905 ses_init_buf->trailer.session_req.scope2 = 0;
1906 smb_buf = (struct smb_hdr *)ses_init_buf;
1907 /* sizeof RFC1002_SESSION_REQUEST with no scope */
1908 smb_buf->smb_buf_length = 0x81000044;
1909 rc = smb_send(server, smb_buf, 0x44);
1910 kfree(ses_init_buf);
1911 msleep(1); /* RFC1001 layer in at least one server
1912 requires very short break before negprot
1913 presumably because not expecting negprot
1914 to follow so fast. This is a simple
1915 solution that works without
1916 complicating the code and causes no
1917 significant slowing down on mount
1918 for everyone else */
1919 }
1920 /* else the negprot may still work without this
1921 even though malloc failed */
1922
1923 }
1924
1925 return rc;
1926 }
1927
1928 static int
1929 ipv6_connect(struct TCP_Server_Info *server)
1930 {
1931 int rc = 0;
1932 int val;
1933 bool connected = false;
1934 __be16 orig_port = 0;
1935 struct socket *socket = server->ssocket;
1936
1937 if (socket == NULL) {
1938 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
1939 IPPROTO_TCP, &socket);
1940 if (rc < 0) {
1941 cERROR(1, ("Error %d creating ipv6 socket", rc));
1942 socket = NULL;
1943 return rc;
1944 }
1945
1946 /* BB other socket options to set KEEPALIVE, NODELAY? */
1947 cFYI(1, ("ipv6 Socket created"));
1948 server->ssocket = socket;
1949 socket->sk->sk_allocation = GFP_NOFS;
1950 cifs_reclassify_socket6(socket);
1951 }
1952
1953 /* user overrode default port */
1954 if (server->addr.sockAddr6.sin6_port) {
1955 rc = socket->ops->connect(socket,
1956 (struct sockaddr *) &server->addr.sockAddr6,
1957 sizeof(struct sockaddr_in6), 0);
1958 if (rc >= 0)
1959 connected = true;
1960 }
1961
1962 if (!connected) {
1963 /* save original port so we can retry user specified port
1964 later if fall back ports fail this time */
1965
1966 orig_port = server->addr.sockAddr6.sin6_port;
1967 /* do not retry on the same port we just failed on */
1968 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
1969 server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
1970 rc = socket->ops->connect(socket, (struct sockaddr *)
1971 &server->addr.sockAddr6,
1972 sizeof(struct sockaddr_in6), 0);
1973 if (rc >= 0)
1974 connected = true;
1975 }
1976 }
1977 if (!connected) {
1978 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
1979 rc = socket->ops->connect(socket, (struct sockaddr *)
1980 &server->addr.sockAddr6,
1981 sizeof(struct sockaddr_in6), 0);
1982 if (rc >= 0)
1983 connected = true;
1984 }
1985
1986 /* give up here - unless we want to retry on different
1987 protocol families some day */
1988 if (!connected) {
1989 if (orig_port)
1990 server->addr.sockAddr6.sin6_port = orig_port;
1991 cFYI(1, ("Error %d connecting to server via ipv6", rc));
1992 sock_release(socket);
1993 server->ssocket = NULL;
1994 return rc;
1995 }
1996
1997 /*
1998 * Eventually check for other socket options to change from
1999 * the default. sock_setsockopt not used because it expects
2000 * user space buffer
2001 */
2002 socket->sk->sk_rcvtimeo = 7 * HZ;
2003 socket->sk->sk_sndtimeo = 5 * HZ;
2004
2005 if (server->tcp_nodelay) {
2006 val = 1;
2007 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2008 (char *)&val, sizeof(val));
2009 if (rc)
2010 cFYI(1, ("set TCP_NODELAY socket option error %d", rc));
2011 }
2012
2013 server->ssocket = socket;
2014
2015 return rc;
2016 }
2017
2018 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
2019 struct super_block *sb, struct smb_vol *vol_info)
2020 {
2021 /* if we are reconnecting then should we check to see if
2022 * any requested capabilities changed locally e.g. via
2023 * remount but we can not do much about it here
2024 * if they have (even if we could detect it by the following)
2025 * Perhaps we could add a backpointer to array of sb from tcon
2026 * or if we change to make all sb to same share the same
2027 * sb as NFS - then we only have one backpointer to sb.
2028 * What if we wanted to mount the server share twice once with
2029 * and once without posixacls or posix paths? */
2030 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2031
2032 if (vol_info && vol_info->no_linux_ext) {
2033 tcon->fsUnixInfo.Capability = 0;
2034 tcon->unix_ext = 0; /* Unix Extensions disabled */
2035 cFYI(1, ("Linux protocol extensions disabled"));
2036 return;
2037 } else if (vol_info)
2038 tcon->unix_ext = 1; /* Unix Extensions supported */
2039
2040 if (tcon->unix_ext == 0) {
2041 cFYI(1, ("Unix extensions disabled so not set on reconnect"));
2042 return;
2043 }
2044
2045 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2046 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2047
2048 /* check for reconnect case in which we do not
2049 want to change the mount behavior if we can avoid it */
2050 if (vol_info == NULL) {
2051 /* turn off POSIX ACL and PATHNAMES if not set
2052 originally at mount time */
2053 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2054 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2055 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2056 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2057 cERROR(1, ("POSIXPATH support change"));
2058 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2059 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2060 cERROR(1, ("possible reconnect error"));
2061 cERROR(1,
2062 ("server disabled POSIX path support"));
2063 }
2064 }
2065
2066 cap &= CIFS_UNIX_CAP_MASK;
2067 if (vol_info && vol_info->no_psx_acl)
2068 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2069 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2070 cFYI(1, ("negotiated posix acl support"));
2071 if (sb)
2072 sb->s_flags |= MS_POSIXACL;
2073 }
2074
2075 if (vol_info && vol_info->posix_paths == 0)
2076 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2077 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2078 cFYI(1, ("negotiate posix pathnames"));
2079 if (sb)
2080 CIFS_SB(sb)->mnt_cifs_flags |=
2081 CIFS_MOUNT_POSIX_PATHS;
2082 }
2083
2084 /* We might be setting the path sep back to a different
2085 form if we are reconnecting and the server switched its
2086 posix path capability for this share */
2087 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2088 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2089
2090 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2091 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2092 CIFS_SB(sb)->rsize = 127 * 1024;
2093 cFYI(DBG2,
2094 ("larger reads not supported by srv"));
2095 }
2096 }
2097
2098
2099 cFYI(1, ("Negotiate caps 0x%x", (int)cap));
2100 #ifdef CONFIG_CIFS_DEBUG2
2101 if (cap & CIFS_UNIX_FCNTL_CAP)
2102 cFYI(1, ("FCNTL cap"));
2103 if (cap & CIFS_UNIX_EXTATTR_CAP)
2104 cFYI(1, ("EXTATTR cap"));
2105 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2106 cFYI(1, ("POSIX path cap"));
2107 if (cap & CIFS_UNIX_XATTR_CAP)
2108 cFYI(1, ("XATTR cap"));
2109 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2110 cFYI(1, ("POSIX ACL cap"));
2111 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2112 cFYI(1, ("very large read cap"));
2113 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2114 cFYI(1, ("very large write cap"));
2115 #endif /* CIFS_DEBUG2 */
2116 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2117 if (vol_info == NULL) {
2118 cFYI(1, ("resetting capabilities failed"));
2119 } else
2120 cERROR(1, ("Negotiating Unix capabilities "
2121 "with the server failed. Consider "
2122 "mounting with the Unix Extensions\n"
2123 "disabled, if problems are found, "
2124 "by specifying the nounix mount "
2125 "option."));
2126
2127 }
2128 }
2129 }
2130
2131 static void
2132 convert_delimiter(char *path, char delim)
2133 {
2134 int i;
2135 char old_delim;
2136
2137 if (path == NULL)
2138 return;
2139
2140 if (delim == '/')
2141 old_delim = '\\';
2142 else
2143 old_delim = '/';
2144
2145 for (i = 0; path[i] != '\0'; i++) {
2146 if (path[i] == old_delim)
2147 path[i] = delim;
2148 }
2149 }
2150
2151 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2152 struct cifs_sb_info *cifs_sb)
2153 {
2154 if (pvolume_info->rsize > CIFSMaxBufSize) {
2155 cERROR(1, ("rsize %d too large, using MaxBufSize",
2156 pvolume_info->rsize));
2157 cifs_sb->rsize = CIFSMaxBufSize;
2158 } else if ((pvolume_info->rsize) &&
2159 (pvolume_info->rsize <= CIFSMaxBufSize))
2160 cifs_sb->rsize = pvolume_info->rsize;
2161 else /* default */
2162 cifs_sb->rsize = CIFSMaxBufSize;
2163
2164 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2165 cERROR(1, ("wsize %d too large, using 4096 instead",
2166 pvolume_info->wsize));
2167 cifs_sb->wsize = 4096;
2168 } else if (pvolume_info->wsize)
2169 cifs_sb->wsize = pvolume_info->wsize;
2170 else
2171 cifs_sb->wsize = min_t(const int,
2172 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2173 127*1024);
2174 /* old default of CIFSMaxBufSize was too small now
2175 that SMB Write2 can send multiple pages in kvec.
2176 RFC1001 does not describe what happens when frame
2177 bigger than 128K is sent so use that as max in
2178 conjunction with 52K kvec constraint on arch with 4K
2179 page size */
2180
2181 if (cifs_sb->rsize < 2048) {
2182 cifs_sb->rsize = 2048;
2183 /* Windows ME may prefer this */
2184 cFYI(1, ("readsize set to minimum: 2048"));
2185 }
2186 /* calculate prepath */
2187 cifs_sb->prepath = pvolume_info->prepath;
2188 if (cifs_sb->prepath) {
2189 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2190 /* we can not convert the / to \ in the path
2191 separators in the prefixpath yet because we do not
2192 know (until reset_cifs_unix_caps is called later)
2193 whether POSIX PATH CAP is available. We normalize
2194 the / to \ after reset_cifs_unix_caps is called */
2195 pvolume_info->prepath = NULL;
2196 } else
2197 cifs_sb->prepathlen = 0;
2198 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2199 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2200 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2201 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2202 cFYI(1, ("file mode: 0x%x dir mode: 0x%x",
2203 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode));
2204
2205 if (pvolume_info->noperm)
2206 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2207 if (pvolume_info->setuids)
2208 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2209 if (pvolume_info->server_ino)
2210 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2211 if (pvolume_info->remap)
2212 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2213 if (pvolume_info->no_xattr)
2214 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2215 if (pvolume_info->sfu_emul)
2216 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2217 if (pvolume_info->nobrl)
2218 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2219 if (pvolume_info->nostrictsync)
2220 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2221 if (pvolume_info->mand_lock)
2222 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2223 if (pvolume_info->cifs_acl)
2224 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2225 if (pvolume_info->override_uid)
2226 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2227 if (pvolume_info->override_gid)
2228 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2229 if (pvolume_info->dynperm)
2230 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2231 if (pvolume_info->direct_io) {
2232 cFYI(1, ("mounting share using direct i/o"));
2233 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2234 }
2235
2236 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2237 cERROR(1, ("mount option dynperm ignored if cifsacl "
2238 "mount option supported"));
2239 }
2240
2241 static int
2242 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2243 struct cifs_sb_info *cifs_sb, const char *full_path)
2244 {
2245 int rc;
2246 FILE_ALL_INFO *pfile_info;
2247
2248 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2249 if (pfile_info == NULL)
2250 return -ENOMEM;
2251
2252 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2253 0 /* not legacy */, cifs_sb->local_nls,
2254 cifs_sb->mnt_cifs_flags &
2255 CIFS_MOUNT_MAP_SPECIAL_CHR);
2256 kfree(pfile_info);
2257 return rc;
2258 }
2259
2260 static void
2261 cleanup_volume_info(struct smb_vol **pvolume_info)
2262 {
2263 struct smb_vol *volume_info;
2264
2265 if (!pvolume_info && !*pvolume_info)
2266 return;
2267
2268 volume_info = *pvolume_info;
2269 kzfree(volume_info->password);
2270 kfree(volume_info->UNC);
2271 kfree(volume_info->prepath);
2272 kfree(volume_info);
2273 *pvolume_info = NULL;
2274 return;
2275 }
2276
2277 #ifdef CONFIG_CIFS_DFS_UPCALL
2278 /* build_path_to_root returns full path to root when
2279 * we do not have an exiting connection (tcon) */
2280 static char *
2281 build_unc_path_to_root(const struct smb_vol *volume_info,
2282 const struct cifs_sb_info *cifs_sb)
2283 {
2284 char *full_path;
2285
2286 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2287 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2288 if (full_path == NULL)
2289 return ERR_PTR(-ENOMEM);
2290
2291 strncpy(full_path, volume_info->UNC, unc_len);
2292 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2293 int i;
2294 for (i = 0; i < unc_len; i++) {
2295 if (full_path[i] == '\\')
2296 full_path[i] = '/';
2297 }
2298 }
2299
2300 if (cifs_sb->prepathlen)
2301 strncpy(full_path + unc_len, cifs_sb->prepath,
2302 cifs_sb->prepathlen);
2303
2304 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2305 return full_path;
2306 }
2307 #endif
2308
2309 int
2310 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2311 char *mount_data_global, const char *devname)
2312 {
2313 int rc;
2314 int xid;
2315 struct smb_vol *volume_info;
2316 struct cifsSesInfo *pSesInfo;
2317 struct cifsTconInfo *tcon;
2318 struct TCP_Server_Info *srvTcp;
2319 char *full_path;
2320 char *mount_data = mount_data_global;
2321 #ifdef CONFIG_CIFS_DFS_UPCALL
2322 struct dfs_info3_param *referrals = NULL;
2323 unsigned int num_referrals = 0;
2324 int referral_walks_count = 0;
2325 try_mount_again:
2326 #endif
2327 rc = 0;
2328 tcon = NULL;
2329 pSesInfo = NULL;
2330 srvTcp = NULL;
2331 full_path = NULL;
2332
2333 xid = GetXid();
2334
2335 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2336 if (!volume_info) {
2337 rc = -ENOMEM;
2338 goto out;
2339 }
2340
2341 if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2342 rc = -EINVAL;
2343 goto out;
2344 }
2345
2346 if (volume_info->nullauth) {
2347 cFYI(1, ("null user"));
2348 volume_info->username = "";
2349 } else if (volume_info->username) {
2350 /* BB fixme parse for domain name here */
2351 cFYI(1, ("Username: %s", volume_info->username));
2352 } else {
2353 cifserror("No username specified");
2354 /* In userspace mount helper we can get user name from alternate
2355 locations such as env variables and files on disk */
2356 rc = -EINVAL;
2357 goto out;
2358 }
2359
2360
2361 /* this is needed for ASCII cp to Unicode converts */
2362 if (volume_info->iocharset == NULL) {
2363 cifs_sb->local_nls = load_nls_default();
2364 /* load_nls_default can not return null */
2365 } else {
2366 cifs_sb->local_nls = load_nls(volume_info->iocharset);
2367 if (cifs_sb->local_nls == NULL) {
2368 cERROR(1, ("CIFS mount error: iocharset %s not found",
2369 volume_info->iocharset));
2370 rc = -ELIBACC;
2371 goto out;
2372 }
2373 }
2374
2375 /* get a reference to a tcp session */
2376 srvTcp = cifs_get_tcp_session(volume_info);
2377 if (IS_ERR(srvTcp)) {
2378 rc = PTR_ERR(srvTcp);
2379 goto out;
2380 }
2381
2382 pSesInfo = cifs_find_smb_ses(srvTcp, volume_info->username);
2383 if (pSesInfo) {
2384 cFYI(1, ("Existing smb sess found (status=%d)",
2385 pSesInfo->status));
2386 /*
2387 * The existing SMB session already has a reference to srvTcp,
2388 * so we can put back the extra one we got before
2389 */
2390 cifs_put_tcp_session(srvTcp);
2391
2392 mutex_lock(&pSesInfo->session_mutex);
2393 if (pSesInfo->need_reconnect) {
2394 cFYI(1, ("Session needs reconnect"));
2395 rc = cifs_setup_session(xid, pSesInfo,
2396 cifs_sb->local_nls);
2397 }
2398 mutex_unlock(&pSesInfo->session_mutex);
2399 } else if (!rc) {
2400 cFYI(1, ("Existing smb sess not found"));
2401 pSesInfo = sesInfoAlloc();
2402 if (pSesInfo == NULL) {
2403 rc = -ENOMEM;
2404 goto mount_fail_check;
2405 }
2406
2407 /* new SMB session uses our srvTcp ref */
2408 pSesInfo->server = srvTcp;
2409 if (srvTcp->addr.sockAddr6.sin6_family == AF_INET6)
2410 sprintf(pSesInfo->serverName, "%pI6",
2411 &srvTcp->addr.sockAddr6.sin6_addr);
2412 else
2413 sprintf(pSesInfo->serverName, "%pI4",
2414 &srvTcp->addr.sockAddr.sin_addr.s_addr);
2415
2416 write_lock(&cifs_tcp_ses_lock);
2417 list_add(&pSesInfo->smb_ses_list, &srvTcp->smb_ses_list);
2418 write_unlock(&cifs_tcp_ses_lock);
2419
2420 /* volume_info->password freed at unmount */
2421 if (volume_info->password) {
2422 pSesInfo->password = kstrdup(volume_info->password,
2423 GFP_KERNEL);
2424 if (!pSesInfo->password) {
2425 rc = -ENOMEM;
2426 goto mount_fail_check;
2427 }
2428 }
2429 if (volume_info->username)
2430 strncpy(pSesInfo->userName, volume_info->username,
2431 MAX_USERNAME_SIZE);
2432 if (volume_info->domainname) {
2433 int len = strlen(volume_info->domainname);
2434 pSesInfo->domainName = kmalloc(len + 1, GFP_KERNEL);
2435 if (pSesInfo->domainName)
2436 strcpy(pSesInfo->domainName,
2437 volume_info->domainname);
2438 }
2439 pSesInfo->linux_uid = volume_info->linux_uid;
2440 pSesInfo->overrideSecFlg = volume_info->secFlg;
2441 mutex_lock(&pSesInfo->session_mutex);
2442
2443 /* BB FIXME need to pass vol->secFlgs BB */
2444 rc = cifs_setup_session(xid, pSesInfo,
2445 cifs_sb->local_nls);
2446 mutex_unlock(&pSesInfo->session_mutex);
2447 }
2448
2449 /* search for existing tcon to this server share */
2450 if (!rc) {
2451 setup_cifs_sb(volume_info, cifs_sb);
2452
2453 tcon = cifs_find_tcon(pSesInfo, volume_info->UNC);
2454 if (tcon) {
2455 cFYI(1, ("Found match on UNC path"));
2456 /* existing tcon already has a reference */
2457 cifs_put_smb_ses(pSesInfo);
2458 if (tcon->seal != volume_info->seal)
2459 cERROR(1, ("transport encryption setting "
2460 "conflicts with existing tid"));
2461 } else {
2462 tcon = tconInfoAlloc();
2463 if (tcon == NULL) {
2464 rc = -ENOMEM;
2465 goto mount_fail_check;
2466 }
2467
2468 tcon->ses = pSesInfo;
2469 if (volume_info->password) {
2470 tcon->password = kstrdup(volume_info->password,
2471 GFP_KERNEL);
2472 if (!tcon->password) {
2473 rc = -ENOMEM;
2474 goto mount_fail_check;
2475 }
2476 }
2477
2478 if ((strchr(volume_info->UNC + 3, '\\') == NULL)
2479 && (strchr(volume_info->UNC + 3, '/') == NULL)) {
2480 cERROR(1, ("Missing share name"));
2481 rc = -ENODEV;
2482 goto mount_fail_check;
2483 } else {
2484 /* BB Do we need to wrap sesSem around
2485 * this TCon call and Unix SetFS as
2486 * we do on SessSetup and reconnect? */
2487 rc = CIFSTCon(xid, pSesInfo, volume_info->UNC,
2488 tcon, cifs_sb->local_nls);
2489 cFYI(1, ("CIFS Tcon rc = %d", rc));
2490 if (volume_info->nodfs) {
2491 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2492 cFYI(1, ("DFS disabled (%d)",
2493 tcon->Flags));
2494 }
2495 }
2496 if (rc)
2497 goto remote_path_check;
2498 tcon->seal = volume_info->seal;
2499 write_lock(&cifs_tcp_ses_lock);
2500 list_add(&tcon->tcon_list, &pSesInfo->tcon_list);
2501 write_unlock(&cifs_tcp_ses_lock);
2502 }
2503
2504 /* we can have only one retry value for a connection
2505 to a share so for resources mounted more than once
2506 to the same server share the last value passed in
2507 for the retry flag is used */
2508 tcon->retry = volume_info->retry;
2509 tcon->nocase = volume_info->nocase;
2510 tcon->local_lease = volume_info->local_lease;
2511 }
2512 if (pSesInfo) {
2513 if (pSesInfo->capabilities & CAP_LARGE_FILES)
2514 sb->s_maxbytes = MAX_LFS_FILESIZE;
2515 else
2516 sb->s_maxbytes = MAX_NON_LFS;
2517 }
2518
2519 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2520 sb->s_time_gran = 100;
2521
2522 if (rc)
2523 goto remote_path_check;
2524
2525 cifs_sb->tcon = tcon;
2526
2527 /* do not care if following two calls succeed - informational */
2528 if (!tcon->ipc) {
2529 CIFSSMBQFSDeviceInfo(xid, tcon);
2530 CIFSSMBQFSAttributeInfo(xid, tcon);
2531 }
2532
2533 /* tell server which Unix caps we support */
2534 if (tcon->ses->capabilities & CAP_UNIX)
2535 /* reset of caps checks mount to see if unix extensions
2536 disabled for just this mount */
2537 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2538 else
2539 tcon->unix_ext = 0; /* server does not support them */
2540
2541 /* convert forward to back slashes in prepath here if needed */
2542 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2543 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2544
2545 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2546 cifs_sb->rsize = 1024 * 127;
2547 cFYI(DBG2, ("no very large read support, rsize now 127K"));
2548 }
2549 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2550 cifs_sb->wsize = min(cifs_sb->wsize,
2551 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2552 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2553 cifs_sb->rsize = min(cifs_sb->rsize,
2554 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2555
2556 remote_path_check:
2557 /* check if a whole path (including prepath) is not remote */
2558 if (!rc && cifs_sb->prepathlen && tcon) {
2559 /* build_path_to_root works only when we have a valid tcon */
2560 full_path = cifs_build_path_to_root(cifs_sb);
2561 if (full_path == NULL) {
2562 rc = -ENOMEM;
2563 goto mount_fail_check;
2564 }
2565 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2566 if (rc != -EREMOTE) {
2567 kfree(full_path);
2568 goto mount_fail_check;
2569 }
2570 kfree(full_path);
2571 }
2572
2573 /* get referral if needed */
2574 if (rc == -EREMOTE) {
2575 #ifdef CONFIG_CIFS_DFS_UPCALL
2576 if (referral_walks_count > MAX_NESTED_LINKS) {
2577 /*
2578 * BB: when we implement proper loop detection,
2579 * we will remove this check. But now we need it
2580 * to prevent an indefinite loop if 'DFS tree' is
2581 * misconfigured (i.e. has loops).
2582 */
2583 rc = -ELOOP;
2584 goto mount_fail_check;
2585 }
2586 /* convert forward to back slashes in prepath here if needed */
2587 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2588 convert_delimiter(cifs_sb->prepath,
2589 CIFS_DIR_SEP(cifs_sb));
2590 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2591 if (IS_ERR(full_path)) {
2592 rc = PTR_ERR(full_path);
2593 goto mount_fail_check;
2594 }
2595
2596 cFYI(1, ("Getting referral for: %s", full_path));
2597 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2598 cifs_sb->local_nls, &num_referrals, &referrals,
2599 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2600 if (!rc && num_referrals > 0) {
2601 char *fake_devname = NULL;
2602
2603 if (mount_data != mount_data_global)
2604 kfree(mount_data);
2605
2606 mount_data = cifs_compose_mount_options(
2607 cifs_sb->mountdata, full_path + 1,
2608 referrals, &fake_devname);
2609
2610 free_dfs_info_array(referrals, num_referrals);
2611 kfree(fake_devname);
2612 kfree(full_path);
2613
2614 if (IS_ERR(mount_data)) {
2615 rc = PTR_ERR(mount_data);
2616 mount_data = NULL;
2617 goto mount_fail_check;
2618 }
2619
2620 if (tcon)
2621 cifs_put_tcon(tcon);
2622 else if (pSesInfo)
2623 cifs_put_smb_ses(pSesInfo);
2624
2625 cleanup_volume_info(&volume_info);
2626 referral_walks_count++;
2627 FreeXid(xid);
2628 goto try_mount_again;
2629 }
2630 #else /* No DFS support, return error on mount */
2631 rc = -EOPNOTSUPP;
2632 #endif
2633 }
2634
2635 mount_fail_check:
2636 /* on error free sesinfo and tcon struct if needed */
2637 if (rc) {
2638 if (mount_data != mount_data_global)
2639 kfree(mount_data);
2640 /* If find_unc succeeded then rc == 0 so we can not end */
2641 /* up accidently freeing someone elses tcon struct */
2642 if (tcon)
2643 cifs_put_tcon(tcon);
2644 else if (pSesInfo)
2645 cifs_put_smb_ses(pSesInfo);
2646 else
2647 cifs_put_tcp_session(srvTcp);
2648 goto out;
2649 }
2650
2651 /* volume_info->password is freed above when existing session found
2652 (in which case it is not needed anymore) but when new sesion is created
2653 the password ptr is put in the new session structure (in which case the
2654 password will be freed at unmount time) */
2655 out:
2656 /* zero out password before freeing */
2657 cleanup_volume_info(&volume_info);
2658 FreeXid(xid);
2659 return rc;
2660 }
2661
2662 int
2663 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2664 const char *tree, struct cifsTconInfo *tcon,
2665 const struct nls_table *nls_codepage)
2666 {
2667 struct smb_hdr *smb_buffer;
2668 struct smb_hdr *smb_buffer_response;
2669 TCONX_REQ *pSMB;
2670 TCONX_RSP *pSMBr;
2671 unsigned char *bcc_ptr;
2672 int rc = 0;
2673 int length, bytes_left;
2674 __u16 count;
2675
2676 if (ses == NULL)
2677 return -EIO;
2678
2679 smb_buffer = cifs_buf_get();
2680 if (smb_buffer == NULL)
2681 return -ENOMEM;
2682
2683 smb_buffer_response = smb_buffer;
2684
2685 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2686 NULL /*no tid */ , 4 /*wct */ );
2687
2688 smb_buffer->Mid = GetNextMid(ses->server);
2689 smb_buffer->Uid = ses->Suid;
2690 pSMB = (TCONX_REQ *) smb_buffer;
2691 pSMBr = (TCONX_RSP *) smb_buffer_response;
2692
2693 pSMB->AndXCommand = 0xFF;
2694 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2695 bcc_ptr = &pSMB->Password[0];
2696 if ((ses->server->secMode) & SECMODE_USER) {
2697 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
2698 *bcc_ptr = 0; /* password is null byte */
2699 bcc_ptr++; /* skip password */
2700 /* already aligned so no need to do it below */
2701 } else {
2702 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2703 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2704 specified as required (when that support is added to
2705 the vfs in the future) as only NTLM or the much
2706 weaker LANMAN (which we do not send by default) is accepted
2707 by Samba (not sure whether other servers allow
2708 NTLMv2 password here) */
2709 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2710 if ((extended_security & CIFSSEC_MAY_LANMAN) &&
2711 (ses->server->secType == LANMAN))
2712 calc_lanman_hash(tcon->password, ses->server->cryptKey,
2713 ses->server->secMode &
2714 SECMODE_PW_ENCRYPT ? true : false,
2715 bcc_ptr);
2716 else
2717 #endif /* CIFS_WEAK_PW_HASH */
2718 SMBNTencrypt(tcon->password, ses->server->cryptKey,
2719 bcc_ptr);
2720
2721 bcc_ptr += CIFS_SESS_KEY_SIZE;
2722 if (ses->capabilities & CAP_UNICODE) {
2723 /* must align unicode strings */
2724 *bcc_ptr = 0; /* null byte password */
2725 bcc_ptr++;
2726 }
2727 }
2728
2729 if (ses->server->secMode &
2730 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2731 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2732
2733 if (ses->capabilities & CAP_STATUS32) {
2734 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2735 }
2736 if (ses->capabilities & CAP_DFS) {
2737 smb_buffer->Flags2 |= SMBFLG2_DFS;
2738 }
2739 if (ses->capabilities & CAP_UNICODE) {
2740 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2741 length =
2742 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2743 6 /* max utf8 char length in bytes */ *
2744 (/* server len*/ + 256 /* share len */), nls_codepage);
2745 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
2746 bcc_ptr += 2; /* skip trailing null */
2747 } else { /* ASCII */
2748 strcpy(bcc_ptr, tree);
2749 bcc_ptr += strlen(tree) + 1;
2750 }
2751 strcpy(bcc_ptr, "?????");
2752 bcc_ptr += strlen("?????");
2753 bcc_ptr += 1;
2754 count = bcc_ptr - &pSMB->Password[0];
2755 pSMB->hdr.smb_buf_length += count;
2756 pSMB->ByteCount = cpu_to_le16(count);
2757
2758 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2759 CIFS_STD_OP);
2760
2761 /* above now done in SendReceive */
2762 if ((rc == 0) && (tcon != NULL)) {
2763 bool is_unicode;
2764
2765 tcon->tidStatus = CifsGood;
2766 tcon->need_reconnect = false;
2767 tcon->tid = smb_buffer_response->Tid;
2768 bcc_ptr = pByteArea(smb_buffer_response);
2769 bytes_left = BCC(smb_buffer_response);
2770 length = strnlen(bcc_ptr, bytes_left - 2);
2771 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
2772 is_unicode = true;
2773 else
2774 is_unicode = false;
2775
2776
2777 /* skip service field (NB: this field is always ASCII) */
2778 if (length == 3) {
2779 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
2780 (bcc_ptr[2] == 'C')) {
2781 cFYI(1, ("IPC connection"));
2782 tcon->ipc = 1;
2783 }
2784 } else if (length == 2) {
2785 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
2786 /* the most common case */
2787 cFYI(1, ("disk share connection"));
2788 }
2789 }
2790 bcc_ptr += length + 1;
2791 bytes_left -= (length + 1);
2792 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
2793
2794 /* mostly informational -- no need to fail on error here */
2795 kfree(tcon->nativeFileSystem);
2796 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
2797 bytes_left, is_unicode,
2798 nls_codepage);
2799
2800 cFYI(1, ("nativeFileSystem=%s", tcon->nativeFileSystem));
2801
2802 if ((smb_buffer_response->WordCount == 3) ||
2803 (smb_buffer_response->WordCount == 7))
2804 /* field is in same location */
2805 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
2806 else
2807 tcon->Flags = 0;
2808 cFYI(1, ("Tcon flags: 0x%x ", tcon->Flags));
2809 } else if ((rc == 0) && tcon == NULL) {
2810 /* all we need to save for IPC$ connection */
2811 ses->ipc_tid = smb_buffer_response->Tid;
2812 }
2813
2814 cifs_buf_release(smb_buffer);
2815 return rc;
2816 }
2817
2818 int
2819 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
2820 {
2821 int rc = 0;
2822 char *tmp;
2823
2824 if (cifs_sb->tcon)
2825 cifs_put_tcon(cifs_sb->tcon);
2826
2827 cifs_sb->tcon = NULL;
2828 tmp = cifs_sb->prepath;
2829 cifs_sb->prepathlen = 0;
2830 cifs_sb->prepath = NULL;
2831 kfree(tmp);
2832
2833 return rc;
2834 }
2835
2836 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *pSesInfo,
2837 struct nls_table *nls_info)
2838 {
2839 int rc = 0;
2840 int first_time = 0;
2841 struct TCP_Server_Info *server = pSesInfo->server;
2842
2843 /* what if server changes its buffer size after dropping the session? */
2844 if (server->maxBuf == 0) /* no need to send on reconnect */ {
2845 rc = CIFSSMBNegotiate(xid, pSesInfo);
2846 if (rc == -EAGAIN) {
2847 /* retry only once on 1st time connection */
2848 rc = CIFSSMBNegotiate(xid, pSesInfo);
2849 if (rc == -EAGAIN)
2850 rc = -EHOSTDOWN;
2851 }
2852 if (rc == 0) {
2853 spin_lock(&GlobalMid_Lock);
2854 if (server->tcpStatus != CifsExiting)
2855 server->tcpStatus = CifsGood;
2856 else
2857 rc = -EHOSTDOWN;
2858 spin_unlock(&GlobalMid_Lock);
2859
2860 }
2861 first_time = 1;
2862 }
2863
2864 if (rc)
2865 goto ss_err_exit;
2866
2867 pSesInfo->flags = 0;
2868 pSesInfo->capabilities = server->capabilities;
2869 if (linuxExtEnabled == 0)
2870 pSesInfo->capabilities &= (~CAP_UNIX);
2871
2872 cFYI(1, ("Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
2873 server->secMode, server->capabilities, server->timeAdj));
2874
2875 rc = CIFS_SessSetup(xid, pSesInfo, first_time, nls_info);
2876 if (rc) {
2877 cERROR(1, ("Send error in SessSetup = %d", rc));
2878 } else {
2879 cFYI(1, ("CIFS Session Established successfully"));
2880 spin_lock(&GlobalMid_Lock);
2881 pSesInfo->status = CifsGood;
2882 pSesInfo->need_reconnect = false;
2883 spin_unlock(&GlobalMid_Lock);
2884 }
2885
2886 ss_err_exit:
2887 return rc;
2888 }
2889
kernel source for telekom puls (alcatel/mediatek)