include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit...
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / fs / cifs / connect.c
CommitLineData
1da177e4
LT
1/*
2 * fs/cifs/connect.c
3 *
d185cda7 4 * Copyright (C) International Business Machines Corp., 2002,2009
1da177e4
LT
5 * Author(s): Steve French (sfrench@us.ibm.com)
6 *
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
fb8c4b14 19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
1da177e4
LT
20 */
21#include <linux/fs.h>
22#include <linux/net.h>
23#include <linux/string.h>
24#include <linux/list.h>
25#include <linux/wait.h>
5a0e3ad6 26#include <linux/slab.h>
1da177e4
LT
27#include <linux/pagemap.h>
28#include <linux/ctype.h>
29#include <linux/utsname.h>
30#include <linux/mempool.h>
b8643e1b 31#include <linux/delay.h>
f191401f 32#include <linux/completion.h>
aaf737ad 33#include <linux/kthread.h>
0ae0efad 34#include <linux/pagevec.h>
7dfb7103 35#include <linux/freezer.h>
5c2503a8 36#include <linux/namei.h>
1da177e4
LT
37#include <asm/uaccess.h>
38#include <asm/processor.h>
50b64e3b 39#include <linux/inet.h>
0e2bedaa 40#include <net/ipv6.h>
1da177e4
LT
41#include "cifspdu.h"
42#include "cifsglob.h"
43#include "cifsproto.h"
44#include "cifs_unicode.h"
45#include "cifs_debug.h"
46#include "cifs_fs_sb.h"
47#include "ntlmssp.h"
48#include "nterr.h"
49#include "rfc1002pdu.h"
a2653eba 50#include "cn_cifs.h"
1da177e4
LT
51
52#define CIFS_PORT 445
53#define RFC1001_PORT 139
54
1da177e4
LT
55extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
56 unsigned char *p24);
57
58extern mempool_t *cifs_req_poolp;
59
60struct smb_vol {
61 char *username;
62 char *password;
63 char *domainname;
64 char *UNC;
65 char *UNCip;
1da177e4
LT
66 char *iocharset; /* local code page for mapping to and from Unicode */
67 char source_rfc1001_name[16]; /* netbios name of client */
a10faeb2 68 char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
1da177e4
LT
69 uid_t linux_uid;
70 gid_t linux_gid;
71 mode_t file_mode;
72 mode_t dir_mode;
189acaae 73 unsigned secFlg;
4b18f2a9
SF
74 bool retry:1;
75 bool intr:1;
76 bool setuids:1;
77 bool override_uid:1;
78 bool override_gid:1;
d0a9c078 79 bool dynperm:1;
4b18f2a9
SF
80 bool noperm:1;
81 bool no_psx_acl:1; /* set if posix acl support should be disabled */
82 bool cifs_acl:1;
83 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
84 bool server_ino:1; /* use inode numbers from server ie UniqueId */
85 bool direct_io:1;
95b1cb90
SF
86 bool remap:1; /* set to remap seven reserved chars in filenames */
87 bool posix_paths:1; /* unset to not ask for posix pathnames. */
4b18f2a9
SF
88 bool no_linux_ext:1;
89 bool sfu_emul:1;
95b1cb90
SF
90 bool nullauth:1; /* attempt to authenticate with null user */
91 bool nocase:1; /* request case insensitive filenames */
92 bool nobrl:1; /* disable sending byte range locks to srv */
13a6e42a 93 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
95b1cb90 94 bool seal:1; /* request transport encryption on share */
84210e91
SF
95 bool nodfs:1; /* Do not request DFS, even if available */
96 bool local_lease:1; /* check leases only on local system, not remote */
edf1ae40
SF
97 bool noblocksnd:1;
98 bool noautotune:1;
be652445 99 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
1da177e4
LT
100 unsigned int rsize;
101 unsigned int wsize;
6a5fa236 102 bool sockopt_tcp_nodelay:1;
1da177e4 103 unsigned short int port;
fb8c4b14 104 char *prepath;
1da177e4
LT
105};
106
bcf4b106 107static int ipv4_connect(struct TCP_Server_Info *server);
d5c5605c 108static int ipv6_connect(struct TCP_Server_Info *server);
1da177e4 109
d5c5605c
JL
110/*
111 * cifs tcp session reconnection
112 *
113 * mark tcp session as reconnecting so temporarily locked
114 * mark all smb sessions as reconnecting for tcp session
115 * reconnect tcp session
116 * wake up waiters on reconnection? - (not needed currently)
117 */
2cd646a2 118static int
1da177e4
LT
119cifs_reconnect(struct TCP_Server_Info *server)
120{
121 int rc = 0;
f1987b44 122 struct list_head *tmp, *tmp2;
1da177e4
LT
123 struct cifsSesInfo *ses;
124 struct cifsTconInfo *tcon;
fb8c4b14 125 struct mid_q_entry *mid_entry;
50c2f753 126
1da177e4 127 spin_lock(&GlobalMid_Lock);
469ee614 128 if (server->tcpStatus == CifsExiting) {
fb8c4b14 129 /* the demux thread will exit normally
1da177e4
LT
130 next time through the loop */
131 spin_unlock(&GlobalMid_Lock);
132 return rc;
133 } else
134 server->tcpStatus = CifsNeedReconnect;
135 spin_unlock(&GlobalMid_Lock);
136 server->maxBuf = 0;
137
e4eb295d 138 cFYI(1, ("Reconnecting tcp session"));
1da177e4
LT
139
140 /* before reconnecting the tcp session, mark the smb session (uid)
141 and the tid bad so they are not used until reconnected */
14fbf50d
JL
142 read_lock(&cifs_tcp_ses_lock);
143 list_for_each(tmp, &server->smb_ses_list) {
144 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
145 ses->need_reconnect = true;
146 ses->ipc_tid = 0;
f1987b44
JL
147 list_for_each(tmp2, &ses->tcon_list) {
148 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
3b795210 149 tcon->need_reconnect = true;
1da177e4 150 }
1da177e4 151 }
f1987b44 152 read_unlock(&cifs_tcp_ses_lock);
1da177e4 153 /* do not want to be sending data on a socket we are freeing */
72ca545b 154 mutex_lock(&server->srv_mutex);
fb8c4b14 155 if (server->ssocket) {
467a8f8d 156 cFYI(1, ("State: 0x%x Flags: 0x%lx", server->ssocket->state,
1da177e4 157 server->ssocket->flags));
91cf45f0 158 kernel_sock_shutdown(server->ssocket, SHUT_WR);
fb8c4b14 159 cFYI(1, ("Post shutdown state: 0x%x Flags: 0x%lx",
467a8f8d 160 server->ssocket->state,
1da177e4
LT
161 server->ssocket->flags));
162 sock_release(server->ssocket);
163 server->ssocket = NULL;
164 }
165
166 spin_lock(&GlobalMid_Lock);
167 list_for_each(tmp, &server->pending_mid_q) {
168 mid_entry = list_entry(tmp, struct
169 mid_q_entry,
170 qhead);
ad8b15f0 171 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
09d1db5c
SF
172 /* Mark other intransit requests as needing
173 retry so we do not immediately mark the
174 session bad again (ie after we reconnect
175 below) as they timeout too */
ad8b15f0 176 mid_entry->midState = MID_RETRY_NEEDED;
1da177e4
LT
177 }
178 }
179 spin_unlock(&GlobalMid_Lock);
72ca545b 180 mutex_unlock(&server->srv_mutex);
1da177e4 181
469ee614
JL
182 while ((server->tcpStatus != CifsExiting) &&
183 (server->tcpStatus != CifsGood)) {
6c3d8909 184 try_to_freeze();
bcf4b106 185 if (server->addr.sockAddr6.sin6_family == AF_INET6)
d5c5605c 186 rc = ipv6_connect(server);
bcf4b106
JL
187 else
188 rc = ipv4_connect(server);
fb8c4b14
SF
189 if (rc) {
190 cFYI(1, ("reconnect error %d", rc));
0cb766ae 191 msleep(3000);
1da177e4
LT
192 } else {
193 atomic_inc(&tcpSesReconnectCount);
194 spin_lock(&GlobalMid_Lock);
469ee614 195 if (server->tcpStatus != CifsExiting)
1da177e4 196 server->tcpStatus = CifsGood;
ad009ac9 197 server->sequence_number = 0;
fb8c4b14 198 spin_unlock(&GlobalMid_Lock);
1da177e4
LT
199 /* atomic_set(&server->inFlight,0);*/
200 wake_up(&server->response_q);
201 }
202 }
203 return rc;
204}
205
fb8c4b14 206/*
e4eb295d
SF
207 return codes:
208 0 not a transact2, or all data present
209 >0 transact2 with that much data missing
210 -EINVAL = invalid transact2
211
212 */
fb8c4b14 213static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
e4eb295d 214{
fb8c4b14
SF
215 struct smb_t2_rsp *pSMBt;
216 int total_data_size;
e4eb295d
SF
217 int data_in_this_rsp;
218 int remaining;
219
fb8c4b14 220 if (pSMB->Command != SMB_COM_TRANSACTION2)
e4eb295d
SF
221 return 0;
222
fb8c4b14
SF
223 /* check for plausible wct, bcc and t2 data and parm sizes */
224 /* check for parm and data offset going beyond end of smb */
225 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
467a8f8d 226 cFYI(1, ("invalid transact2 word count"));
e4eb295d
SF
227 return -EINVAL;
228 }
229
230 pSMBt = (struct smb_t2_rsp *)pSMB;
231
232 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
233 data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
234
235 remaining = total_data_size - data_in_this_rsp;
236
fb8c4b14 237 if (remaining == 0)
e4eb295d 238 return 0;
fb8c4b14 239 else if (remaining < 0) {
467a8f8d 240 cFYI(1, ("total data %d smaller than data in frame %d",
e4eb295d
SF
241 total_data_size, data_in_this_rsp));
242 return -EINVAL;
243 } else {
467a8f8d 244 cFYI(1, ("missing %d bytes from transact2, check next response",
e4eb295d 245 remaining));
fb8c4b14
SF
246 if (total_data_size > maxBufSize) {
247 cERROR(1, ("TotalDataSize %d is over maximum buffer %d",
248 total_data_size, maxBufSize));
249 return -EINVAL;
e4eb295d
SF
250 }
251 return remaining;
252 }
253}
254
fb8c4b14 255static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
e4eb295d
SF
256{
257 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
258 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
259 int total_data_size;
260 int total_in_buf;
261 int remaining;
262 int total_in_buf2;
fb8c4b14
SF
263 char *data_area_of_target;
264 char *data_area_of_buf2;
e4eb295d
SF
265 __u16 byte_count;
266
267 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
268
fb8c4b14 269 if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
63135e08 270 cFYI(1, ("total data size of primary and secondary t2 differ"));
e4eb295d
SF
271 }
272
273 total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
274
275 remaining = total_data_size - total_in_buf;
50c2f753 276
fb8c4b14 277 if (remaining < 0)
e4eb295d
SF
278 return -EINVAL;
279
fb8c4b14 280 if (remaining == 0) /* nothing to do, ignore */
e4eb295d 281 return 0;
50c2f753 282
e4eb295d 283 total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
fb8c4b14 284 if (remaining < total_in_buf2) {
467a8f8d 285 cFYI(1, ("transact2 2nd response contains too much data"));
e4eb295d
SF
286 }
287
288 /* find end of first SMB data area */
fb8c4b14 289 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
e4eb295d
SF
290 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
291 /* validate target area */
292
293 data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
fb8c4b14 294 le16_to_cpu(pSMB2->t2_rsp.DataOffset);
e4eb295d
SF
295
296 data_area_of_target += total_in_buf;
297
298 /* copy second buffer into end of first buffer */
fb8c4b14 299 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
e4eb295d
SF
300 total_in_buf += total_in_buf2;
301 pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
302 byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
303 byte_count += total_in_buf2;
304 BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
305
70ca734a 306 byte_count = pTargetSMB->smb_buf_length;
e4eb295d
SF
307 byte_count += total_in_buf2;
308
309 /* BB also add check that we are not beyond maximum buffer size */
50c2f753 310
70ca734a 311 pTargetSMB->smb_buf_length = byte_count;
e4eb295d 312
fb8c4b14 313 if (remaining == total_in_buf2) {
467a8f8d 314 cFYI(1, ("found the last secondary response"));
e4eb295d
SF
315 return 0; /* we are done */
316 } else /* more responses to go */
317 return 1;
318
319}
320
1da177e4
LT
321static int
322cifs_demultiplex_thread(struct TCP_Server_Info *server)
323{
324 int length;
325 unsigned int pdu_length, total_read;
326 struct smb_hdr *smb_buffer = NULL;
b8643e1b
SF
327 struct smb_hdr *bigbuf = NULL;
328 struct smb_hdr *smallbuf = NULL;
1da177e4
LT
329 struct msghdr smb_msg;
330 struct kvec iov;
331 struct socket *csocket = server->ssocket;
332 struct list_head *tmp;
333 struct cifsSesInfo *ses;
334 struct task_struct *task_to_wake = NULL;
335 struct mid_q_entry *mid_entry;
70ca734a 336 char temp;
4b18f2a9
SF
337 bool isLargeBuf = false;
338 bool isMultiRsp;
e4eb295d 339 int reconnect;
1da177e4 340
1da177e4 341 current->flags |= PF_MEMALLOC;
ba25f9dc 342 cFYI(1, ("Demultiplex PID: %d", task_pid_nr(current)));
93d0ec85
JL
343
344 length = atomic_inc_return(&tcpSesAllocCount);
345 if (length > 1)
26f57364
SF
346 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
347 GFP_KERNEL);
1da177e4 348
83144186 349 set_freezable();
469ee614 350 while (server->tcpStatus != CifsExiting) {
ede1327e
SF
351 if (try_to_freeze())
352 continue;
b8643e1b
SF
353 if (bigbuf == NULL) {
354 bigbuf = cifs_buf_get();
0fd1ffe0
PM
355 if (!bigbuf) {
356 cERROR(1, ("No memory for large SMB response"));
b8643e1b
SF
357 msleep(3000);
358 /* retry will check if exiting */
359 continue;
360 }
0fd1ffe0
PM
361 } else if (isLargeBuf) {
362 /* we are reusing a dirty large buf, clear its start */
26f57364 363 memset(bigbuf, 0, sizeof(struct smb_hdr));
1da177e4 364 }
b8643e1b
SF
365
366 if (smallbuf == NULL) {
367 smallbuf = cifs_small_buf_get();
0fd1ffe0
PM
368 if (!smallbuf) {
369 cERROR(1, ("No memory for SMB response"));
b8643e1b
SF
370 msleep(1000);
371 /* retry will check if exiting */
372 continue;
373 }
374 /* beginning of smb buffer is cleared in our buf_get */
375 } else /* if existing small buf clear beginning */
26f57364 376 memset(smallbuf, 0, sizeof(struct smb_hdr));
b8643e1b 377
4b18f2a9
SF
378 isLargeBuf = false;
379 isMultiRsp = false;
b8643e1b 380 smb_buffer = smallbuf;
1da177e4
LT
381 iov.iov_base = smb_buffer;
382 iov.iov_len = 4;
383 smb_msg.msg_control = NULL;
384 smb_msg.msg_controllen = 0;
f01d5e14
SF
385 pdu_length = 4; /* enough to get RFC1001 header */
386incomplete_rcv:
1da177e4
LT
387 length =
388 kernel_recvmsg(csocket, &smb_msg,
f01d5e14 389 &iov, 1, pdu_length, 0 /* BB other flags? */);
1da177e4 390
469ee614 391 if (server->tcpStatus == CifsExiting) {
1da177e4
LT
392 break;
393 } else if (server->tcpStatus == CifsNeedReconnect) {
0fd1ffe0 394 cFYI(1, ("Reconnect after server stopped responding"));
1da177e4 395 cifs_reconnect(server);
0fd1ffe0 396 cFYI(1, ("call to reconnect done"));
1da177e4
LT
397 csocket = server->ssocket;
398 continue;
399 } else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
b8643e1b 400 msleep(1); /* minimum sleep to prevent looping
1da177e4
LT
401 allowing socket to clear and app threads to set
402 tcpStatus CifsNeedReconnect if server hung */
c527c8a7
SF
403 if (pdu_length < 4) {
404 iov.iov_base = (4 - pdu_length) +
405 (char *)smb_buffer;
406 iov.iov_len = pdu_length;
407 smb_msg.msg_control = NULL;
408 smb_msg.msg_controllen = 0;
c18c732e 409 goto incomplete_rcv;
c527c8a7 410 } else
c18c732e 411 continue;
1da177e4 412 } else if (length <= 0) {
0fd1ffe0
PM
413 if (server->tcpStatus == CifsNew) {
414 cFYI(1, ("tcp session abend after SMBnegprot"));
09d1db5c
SF
415 /* some servers kill the TCP session rather than
416 returning an SMB negprot error, in which
417 case reconnecting here is not going to help,
418 and so simply return error to mount */
1da177e4
LT
419 break;
420 }
0fd1ffe0 421 if (!try_to_freeze() && (length == -EINTR)) {
467a8f8d 422 cFYI(1, ("cifsd thread killed"));
1da177e4
LT
423 break;
424 }
467a8f8d 425 cFYI(1, ("Reconnect after unexpected peek error %d",
57337e42 426 length));
1da177e4
LT
427 cifs_reconnect(server);
428 csocket = server->ssocket;
429 wake_up(&server->response_q);
430 continue;
2a974680
PT
431 } else if (length < pdu_length) {
432 cFYI(1, ("requested %d bytes but only got %d bytes",
433 pdu_length, length));
f01d5e14 434 pdu_length -= length;
f01d5e14
SF
435 msleep(1);
436 goto incomplete_rcv;
46810cbf 437 }
1da177e4 438
70ca734a
SF
439 /* The right amount was read from socket - 4 bytes */
440 /* so we can now interpret the length field */
46810cbf 441
70ca734a
SF
442 /* the first byte big endian of the length field,
443 is actually not part of the length but the type
444 with the most common, zero, as regular data */
445 temp = *((char *) smb_buffer);
46810cbf 446
fb8c4b14 447 /* Note that FC 1001 length is big endian on the wire,
70ca734a
SF
448 but we convert it here so it is always manipulated
449 as host byte order */
5ca33c6a 450 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
70ca734a
SF
451 smb_buffer->smb_buf_length = pdu_length;
452
467a8f8d 453 cFYI(1, ("rfc1002 length 0x%x", pdu_length+4));
46810cbf 454
70ca734a 455 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
fb8c4b14 456 continue;
70ca734a 457 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
467a8f8d 458 cFYI(1, ("Good RFC 1002 session rsp"));
e4eb295d 459 continue;
70ca734a 460 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
fb8c4b14 461 /* we get this from Windows 98 instead of
46810cbf 462 an error on SMB negprot response */
fb8c4b14 463 cFYI(1, ("Negative RFC1002 Session Response Error 0x%x)",
70ca734a 464 pdu_length));
fb8c4b14
SF
465 if (server->tcpStatus == CifsNew) {
466 /* if nack on negprot (rather than
46810cbf
SF
467 ret of smb negprot error) reconnecting
468 not going to help, ret error to mount */
469 break;
470 } else {
471 /* give server a second to
472 clean up before reconnect attempt */
473 msleep(1000);
474 /* always try 445 first on reconnect
475 since we get NACK on some if we ever
fb8c4b14 476 connected to port 139 (the NACK is
46810cbf
SF
477 since we do not begin with RFC1001
478 session initialize frame) */
fb8c4b14 479 server->addr.sockAddr.sin_port =
46810cbf 480 htons(CIFS_PORT);
1da177e4
LT
481 cifs_reconnect(server);
482 csocket = server->ssocket;
46810cbf 483 wake_up(&server->response_q);
1da177e4 484 continue;
46810cbf 485 }
70ca734a 486 } else if (temp != (char) 0) {
fb8c4b14 487 cERROR(1, ("Unknown RFC 1002 frame"));
70ca734a
SF
488 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
489 length);
46810cbf
SF
490 cifs_reconnect(server);
491 csocket = server->ssocket;
492 continue;
e4eb295d
SF
493 }
494
495 /* else we have an SMB response */
fb8c4b14 496 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
26f57364 497 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
e4eb295d 498 cERROR(1, ("Invalid size SMB length %d pdu_length %d",
46810cbf 499 length, pdu_length+4));
e4eb295d
SF
500 cifs_reconnect(server);
501 csocket = server->ssocket;
502 wake_up(&server->response_q);
503 continue;
fb8c4b14 504 }
e4eb295d
SF
505
506 /* else length ok */
507 reconnect = 0;
508
fb8c4b14 509 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
4b18f2a9 510 isLargeBuf = true;
e4eb295d
SF
511 memcpy(bigbuf, smallbuf, 4);
512 smb_buffer = bigbuf;
513 }
514 length = 0;
515 iov.iov_base = 4 + (char *)smb_buffer;
516 iov.iov_len = pdu_length;
fb8c4b14 517 for (total_read = 0; total_read < pdu_length;
e4eb295d
SF
518 total_read += length) {
519 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
520 pdu_length - total_read, 0);
469ee614 521 if ((server->tcpStatus == CifsExiting) ||
e4eb295d
SF
522 (length == -EINTR)) {
523 /* then will exit */
524 reconnect = 2;
525 break;
526 } else if (server->tcpStatus == CifsNeedReconnect) {
46810cbf
SF
527 cifs_reconnect(server);
528 csocket = server->ssocket;
fb8c4b14 529 /* Reconnect wakes up rspns q */
e4eb295d
SF
530 /* Now we will reread sock */
531 reconnect = 1;
532 break;
fb8c4b14 533 } else if ((length == -ERESTARTSYS) ||
e4eb295d
SF
534 (length == -EAGAIN)) {
535 msleep(1); /* minimum sleep to prevent looping,
fb8c4b14 536 allowing socket to clear and app
e4eb295d
SF
537 threads to set tcpStatus
538 CifsNeedReconnect if server hung*/
c18c732e 539 length = 0;
46810cbf 540 continue;
e4eb295d 541 } else if (length <= 0) {
fb8c4b14 542 cERROR(1, ("Received no data, expecting %d",
e4eb295d
SF
543 pdu_length - total_read));
544 cifs_reconnect(server);
545 csocket = server->ssocket;
546 reconnect = 1;
547 break;
46810cbf 548 }
e4eb295d 549 }
fb8c4b14 550 if (reconnect == 2)
e4eb295d 551 break;
fb8c4b14 552 else if (reconnect == 1)
e4eb295d 553 continue;
1da177e4 554
e4eb295d 555 length += 4; /* account for rfc1002 hdr */
50c2f753 556
09d1db5c 557
e4eb295d 558 dump_smb(smb_buffer, length);
184ed211 559 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
b387eaeb 560 cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
e4eb295d
SF
561 continue;
562 }
1da177e4 563
e4eb295d
SF
564
565 task_to_wake = NULL;
566 spin_lock(&GlobalMid_Lock);
567 list_for_each(tmp, &server->pending_mid_q) {
568 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
569
50c2f753 570 if ((mid_entry->mid == smb_buffer->Mid) &&
e4eb295d
SF
571 (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
572 (mid_entry->command == smb_buffer->Command)) {
fb8c4b14 573 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
e4eb295d 574 /* We have a multipart transact2 resp */
4b18f2a9 575 isMultiRsp = true;
fb8c4b14 576 if (mid_entry->resp_buf) {
e4eb295d 577 /* merge response - fix up 1st*/
50c2f753 578 if (coalesce_t2(smb_buffer,
e4eb295d 579 mid_entry->resp_buf)) {
4b18f2a9
SF
580 mid_entry->multiRsp =
581 true;
e4eb295d
SF
582 break;
583 } else {
584 /* all parts received */
4b18f2a9
SF
585 mid_entry->multiEnd =
586 true;
50c2f753 587 goto multi_t2_fnd;
e4eb295d
SF
588 }
589 } else {
fb8c4b14 590 if (!isLargeBuf) {
e4eb295d
SF
591 cERROR(1,("1st trans2 resp needs bigbuf"));
592 /* BB maybe we can fix this up, switch
50c2f753 593 to already allocated large buffer? */
e4eb295d 594 } else {
cd63499c 595 /* Have first buffer */
e4eb295d
SF
596 mid_entry->resp_buf =
597 smb_buffer;
4b18f2a9
SF
598 mid_entry->largeBuf =
599 true;
e4eb295d
SF
600 bigbuf = NULL;
601 }
602 }
603 break;
50c2f753 604 }
e4eb295d 605 mid_entry->resp_buf = smb_buffer;
4b18f2a9 606 mid_entry->largeBuf = isLargeBuf;
e4eb295d
SF
607multi_t2_fnd:
608 task_to_wake = mid_entry->tsk;
609 mid_entry->midState = MID_RESPONSE_RECEIVED;
1047abc1
SF
610#ifdef CONFIG_CIFS_STATS2
611 mid_entry->when_received = jiffies;
612#endif
3a5ff61c
SF
613 /* so we do not time out requests to server
614 which is still responding (since server could
615 be busy but not dead) */
616 server->lstrp = jiffies;
e4eb295d 617 break;
46810cbf 618 }
1da177e4 619 }
e4eb295d
SF
620 spin_unlock(&GlobalMid_Lock);
621 if (task_to_wake) {
cd63499c 622 /* Was previous buf put in mpx struct for multi-rsp? */
fb8c4b14 623 if (!isMultiRsp) {
cd63499c 624 /* smb buffer will be freed by user thread */
26f57364 625 if (isLargeBuf)
cd63499c 626 bigbuf = NULL;
26f57364 627 else
cd63499c
SF
628 smallbuf = NULL;
629 }
e4eb295d 630 wake_up_process(task_to_wake);
4b18f2a9
SF
631 } else if (!is_valid_oplock_break(smb_buffer, server) &&
632 !isMultiRsp) {
50c2f753
SF
633 cERROR(1, ("No task to wake, unknown frame received! "
634 "NumMids %d", midCount.counter));
635 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
70ca734a 636 sizeof(struct smb_hdr));
3979877e
SF
637#ifdef CONFIG_CIFS_DEBUG2
638 cifs_dump_detail(smb_buffer);
639 cifs_dump_mids(server);
640#endif /* CIFS_DEBUG2 */
50c2f753 641
e4eb295d
SF
642 }
643 } /* end while !EXITING */
644
e7ddee90
JL
645 /* take it off the list, if it's not already */
646 write_lock(&cifs_tcp_ses_lock);
647 list_del_init(&server->tcp_ses_list);
648 write_unlock(&cifs_tcp_ses_lock);
649
1da177e4
LT
650 spin_lock(&GlobalMid_Lock);
651 server->tcpStatus = CifsExiting;
e691b9d1 652 spin_unlock(&GlobalMid_Lock);
dbdbb876 653 wake_up_all(&server->response_q);
e691b9d1 654
31ca3bc3
SF
655 /* check if we have blocked requests that need to free */
656 /* Note that cifs_max_pending is normally 50, but
657 can be set at module install time to as little as two */
e691b9d1 658 spin_lock(&GlobalMid_Lock);
fb8c4b14 659 if (atomic_read(&server->inFlight) >= cifs_max_pending)
31ca3bc3
SF
660 atomic_set(&server->inFlight, cifs_max_pending - 1);
661 /* We do not want to set the max_pending too low or we
662 could end up with the counter going negative */
1da177e4 663 spin_unlock(&GlobalMid_Lock);
50c2f753 664 /* Although there should not be any requests blocked on
1da177e4 665 this queue it can not hurt to be paranoid and try to wake up requests
09d1db5c 666 that may haven been blocked when more than 50 at time were on the wire
1da177e4
LT
667 to the same server - they now will see the session is in exit state
668 and get out of SendReceive. */
669 wake_up_all(&server->request_q);
670 /* give those requests time to exit */
b8643e1b 671 msleep(125);
50c2f753 672
fb8c4b14 673 if (server->ssocket) {
1da177e4
LT
674 sock_release(csocket);
675 server->ssocket = NULL;
676 }
b8643e1b 677 /* buffer usuallly freed in free_mid - need to free it here on exit */
a8a11d39
MK
678 cifs_buf_release(bigbuf);
679 if (smallbuf) /* no sense logging a debug message if NULL */
b8643e1b 680 cifs_small_buf_release(smallbuf);
1da177e4 681
14fbf50d
JL
682 /*
683 * BB: we shouldn't have to do any of this. It shouldn't be
684 * possible to exit from the thread with active SMB sessions
685 */
686 read_lock(&cifs_tcp_ses_lock);
1da177e4 687 if (list_empty(&server->pending_mid_q)) {
09d1db5c
SF
688 /* loop through server session structures attached to this and
689 mark them dead */
14fbf50d
JL
690 list_for_each(tmp, &server->smb_ses_list) {
691 ses = list_entry(tmp, struct cifsSesInfo,
692 smb_ses_list);
693 ses->status = CifsExiting;
694 ses->server = NULL;
1da177e4 695 }
14fbf50d 696 read_unlock(&cifs_tcp_ses_lock);
1da177e4 697 } else {
31ca3bc3
SF
698 /* although we can not zero the server struct pointer yet,
699 since there are active requests which may depnd on them,
700 mark the corresponding SMB sessions as exiting too */
14fbf50d 701 list_for_each(tmp, &server->smb_ses_list) {
31ca3bc3 702 ses = list_entry(tmp, struct cifsSesInfo,
14fbf50d
JL
703 smb_ses_list);
704 ses->status = CifsExiting;
31ca3bc3
SF
705 }
706
1da177e4
LT
707 spin_lock(&GlobalMid_Lock);
708 list_for_each(tmp, &server->pending_mid_q) {
709 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
710 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
50c2f753
SF
711 cFYI(1, ("Clearing Mid 0x%x - waking up ",
712 mid_entry->mid));
1da177e4 713 task_to_wake = mid_entry->tsk;
26f57364 714 if (task_to_wake)
1da177e4 715 wake_up_process(task_to_wake);
1da177e4
LT
716 }
717 }
718 spin_unlock(&GlobalMid_Lock);
14fbf50d 719 read_unlock(&cifs_tcp_ses_lock);
1da177e4 720 /* 1/8th of sec is more than enough time for them to exit */
b8643e1b 721 msleep(125);
1da177e4
LT
722 }
723
f191401f 724 if (!list_empty(&server->pending_mid_q)) {
50c2f753 725 /* mpx threads have not exited yet give them
1da177e4 726 at least the smb send timeout time for long ops */
31ca3bc3
SF
727 /* due to delays on oplock break requests, we need
728 to wait at least 45 seconds before giving up
729 on a request getting a response and going ahead
730 and killing cifsd */
1da177e4 731 cFYI(1, ("Wait for exit from demultiplex thread"));
31ca3bc3 732 msleep(46000);
1da177e4
LT
733 /* if threads still have not exited they are probably never
734 coming home not much else we can do but free the memory */
735 }
1da177e4 736
31ca3bc3
SF
737 /* last chance to mark ses pointers invalid
738 if there are any pointing to this (e.g
50c2f753 739 if a crazy root user tried to kill cifsd
31ca3bc3 740 kernel thread explicitly this might happen) */
14fbf50d
JL
741 /* BB: This shouldn't be necessary, see above */
742 read_lock(&cifs_tcp_ses_lock);
743 list_for_each(tmp, &server->smb_ses_list) {
744 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
745 ses->server = NULL;
31ca3bc3 746 }
14fbf50d 747 read_unlock(&cifs_tcp_ses_lock);
31ca3bc3 748
c359cf3c 749 kfree(server->hostname);
b1c8d2b4 750 task_to_wake = xchg(&server->tsk, NULL);
31ca3bc3 751 kfree(server);
93d0ec85
JL
752
753 length = atomic_dec_return(&tcpSesAllocCount);
26f57364
SF
754 if (length > 0)
755 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
756 GFP_KERNEL);
50c2f753 757
b1c8d2b4
JL
758 /* if server->tsk was NULL then wait for a signal before exiting */
759 if (!task_to_wake) {
760 set_current_state(TASK_INTERRUPTIBLE);
761 while (!signal_pending(current)) {
762 schedule();
763 set_current_state(TASK_INTERRUPTIBLE);
764 }
765 set_current_state(TASK_RUNNING);
766 }
767
0468a2cf 768 module_put_and_exit(0);
1da177e4
LT
769}
770
c359cf3c
JL
771/* extract the host portion of the UNC string */
772static char *
773extract_hostname(const char *unc)
774{
775 const char *src;
776 char *dst, *delim;
777 unsigned int len;
778
779 /* skip double chars at beginning of string */
780 /* BB: check validity of these bytes? */
781 src = unc + 2;
782
783 /* delimiter between hostname and sharename is always '\\' now */
784 delim = strchr(src, '\\');
785 if (!delim)
786 return ERR_PTR(-EINVAL);
787
788 len = delim - src;
789 dst = kmalloc((len + 1), GFP_KERNEL);
790 if (dst == NULL)
791 return ERR_PTR(-ENOMEM);
792
793 memcpy(dst, src, len);
794 dst[len] = '\0';
795
796 return dst;
797}
798
1da177e4 799static int
50c2f753
SF
800cifs_parse_mount_options(char *options, const char *devname,
801 struct smb_vol *vol)
1da177e4
LT
802{
803 char *value;
804 char *data;
805 unsigned int temp_len, i, j;
806 char separator[2];
9b9d6b24
JL
807 short int override_uid = -1;
808 short int override_gid = -1;
809 bool uid_specified = false;
810 bool gid_specified = false;
1da177e4
LT
811
812 separator[0] = ',';
50c2f753 813 separator[1] = 0;
1da177e4 814
12e36b2f 815 if (Local_System_Name[0] != 0)
50c2f753 816 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
2cd646a2 817 else {
12e36b2f 818 char *nodename = utsname()->nodename;
50c2f753
SF
819 int n = strnlen(nodename, 15);
820 memset(vol->source_rfc1001_name, 0x20, 15);
821 for (i = 0; i < n; i++) {
2cd646a2
SF
822 /* does not have to be perfect mapping since field is
823 informational, only used for servers that do not support
824 port 445 and it can be overridden at mount time */
12e36b2f 825 vol->source_rfc1001_name[i] = toupper(nodename[i]);
2cd646a2 826 }
1da177e4
LT
827 }
828 vol->source_rfc1001_name[15] = 0;
a10faeb2
SF
829 /* null target name indicates to use *SMBSERVR default called name
830 if we end up sending RFC1001 session initialize */
831 vol->target_rfc1001_name[0] = 0;
a001e5b5
DH
832 vol->linux_uid = current_uid(); /* use current_euid() instead? */
833 vol->linux_gid = current_gid();
f55ed1a8
JL
834
835 /* default to only allowing write access to owner of the mount */
836 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
1da177e4
LT
837
838 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
ac67055e
JA
839 /* default is always to request posix paths. */
840 vol->posix_paths = 1;
a0c9217f
JL
841 /* default to using server inode numbers where available */
842 vol->server_ino = 1;
ac67055e 843
1da177e4
LT
844 if (!options)
845 return 1;
846
50c2f753 847 if (strncmp(options, "sep=", 4) == 0) {
fb8c4b14 848 if (options[4] != 0) {
1da177e4
LT
849 separator[0] = options[4];
850 options += 5;
851 } else {
467a8f8d 852 cFYI(1, ("Null separator not allowed"));
1da177e4
LT
853 }
854 }
50c2f753 855
1da177e4
LT
856 while ((data = strsep(&options, separator)) != NULL) {
857 if (!*data)
858 continue;
859 if ((value = strchr(data, '=')) != NULL)
860 *value++ = '\0';
861
50c2f753
SF
862 /* Have to parse this before we parse for "user" */
863 if (strnicmp(data, "user_xattr", 10) == 0) {
1da177e4 864 vol->no_xattr = 0;
50c2f753 865 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
1da177e4
LT
866 vol->no_xattr = 1;
867 } else if (strnicmp(data, "user", 4) == 0) {
4b952a9b 868 if (!value) {
1da177e4
LT
869 printk(KERN_WARNING
870 "CIFS: invalid or missing username\n");
871 return 1; /* needs_arg; */
fb8c4b14 872 } else if (!*value) {
4b952a9b
SF
873 /* null user, ie anonymous, authentication */
874 vol->nullauth = 1;
1da177e4
LT
875 }
876 if (strnlen(value, 200) < 200) {
877 vol->username = value;
878 } else {
879 printk(KERN_WARNING "CIFS: username too long\n");
880 return 1;
881 }
882 } else if (strnicmp(data, "pass", 4) == 0) {
883 if (!value) {
884 vol->password = NULL;
885 continue;
fb8c4b14 886 } else if (value[0] == 0) {
1da177e4
LT
887 /* check if string begins with double comma
888 since that would mean the password really
889 does start with a comma, and would not
890 indicate an empty string */
fb8c4b14 891 if (value[1] != separator[0]) {
1da177e4
LT
892 vol->password = NULL;
893 continue;
894 }
895 }
896 temp_len = strlen(value);
897 /* removed password length check, NTLM passwords
898 can be arbitrarily long */
899
50c2f753 900 /* if comma in password, the string will be
1da177e4
LT
901 prematurely null terminated. Commas in password are
902 specified across the cifs mount interface by a double
903 comma ie ,, and a comma used as in other cases ie ','
904 as a parameter delimiter/separator is single and due
905 to the strsep above is temporarily zeroed. */
906
907 /* NB: password legally can have multiple commas and
908 the only illegal character in a password is null */
909
50c2f753 910 if ((value[temp_len] == 0) &&
09d1db5c 911 (value[temp_len+1] == separator[0])) {
1da177e4
LT
912 /* reinsert comma */
913 value[temp_len] = separator[0];
50c2f753
SF
914 temp_len += 2; /* move after second comma */
915 while (value[temp_len] != 0) {
1da177e4 916 if (value[temp_len] == separator[0]) {
50c2f753 917 if (value[temp_len+1] ==
09d1db5c
SF
918 separator[0]) {
919 /* skip second comma */
920 temp_len++;
50c2f753 921 } else {
1da177e4
LT
922 /* single comma indicating start
923 of next parm */
924 break;
925 }
926 }
927 temp_len++;
928 }
fb8c4b14 929 if (value[temp_len] == 0) {
1da177e4
LT
930 options = NULL;
931 } else {
932 value[temp_len] = 0;
933 /* point option to start of next parm */
934 options = value + temp_len + 1;
935 }
50c2f753 936 /* go from value to value + temp_len condensing
1da177e4
LT
937 double commas to singles. Note that this ends up
938 allocating a few bytes too many, which is ok */
e915fc49 939 vol->password = kzalloc(temp_len, GFP_KERNEL);
fb8c4b14 940 if (vol->password == NULL) {
50c2f753
SF
941 printk(KERN_WARNING "CIFS: no memory "
942 "for password\n");
433dc24f
SF
943 return 1;
944 }
50c2f753 945 for (i = 0, j = 0; i < temp_len; i++, j++) {
1da177e4 946 vol->password[j] = value[i];
fb8c4b14 947 if (value[i] == separator[0]
09d1db5c 948 && value[i+1] == separator[0]) {
1da177e4
LT
949 /* skip second comma */
950 i++;
951 }
952 }
953 vol->password[j] = 0;
954 } else {
e915fc49 955 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
fb8c4b14 956 if (vol->password == NULL) {
50c2f753
SF
957 printk(KERN_WARNING "CIFS: no memory "
958 "for password\n");
433dc24f
SF
959 return 1;
960 }
1da177e4
LT
961 strcpy(vol->password, value);
962 }
58f7f68f
JL
963 } else if (!strnicmp(data, "ip", 2) ||
964 !strnicmp(data, "addr", 4)) {
1da177e4
LT
965 if (!value || !*value) {
966 vol->UNCip = NULL;
50b64e3b
JL
967 } else if (strnlen(value, INET6_ADDRSTRLEN) <
968 INET6_ADDRSTRLEN) {
1da177e4
LT
969 vol->UNCip = value;
970 } else {
50c2f753
SF
971 printk(KERN_WARNING "CIFS: ip address "
972 "too long\n");
1da177e4
LT
973 return 1;
974 }
50c2f753
SF
975 } else if (strnicmp(data, "sec", 3) == 0) {
976 if (!value || !*value) {
977 cERROR(1, ("no security value specified"));
978 continue;
979 } else if (strnicmp(value, "krb5i", 5) == 0) {
980 vol->secFlg |= CIFSSEC_MAY_KRB5 |
189acaae 981 CIFSSEC_MUST_SIGN;
bf820679 982 } else if (strnicmp(value, "krb5p", 5) == 0) {
50c2f753
SF
983 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
984 CIFSSEC_MAY_KRB5; */
985 cERROR(1, ("Krb5 cifs privacy not supported"));
bf820679
SF
986 return 1;
987 } else if (strnicmp(value, "krb5", 4) == 0) {
750d1151 988 vol->secFlg |= CIFSSEC_MAY_KRB5;
ac683924
SF
989#ifdef CONFIG_CIFS_EXPERIMENTAL
990 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
991 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
992 CIFSSEC_MUST_SIGN;
993 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
994 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
995#endif
bf820679 996 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
750d1151 997 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
189acaae 998 CIFSSEC_MUST_SIGN;
bf820679 999 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
750d1151 1000 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
bf820679 1001 } else if (strnicmp(value, "ntlmi", 5) == 0) {
750d1151 1002 vol->secFlg |= CIFSSEC_MAY_NTLM |
189acaae 1003 CIFSSEC_MUST_SIGN;
bf820679
SF
1004 } else if (strnicmp(value, "ntlm", 4) == 0) {
1005 /* ntlm is default so can be turned off too */
750d1151 1006 vol->secFlg |= CIFSSEC_MAY_NTLM;
bf820679 1007 } else if (strnicmp(value, "nontlm", 6) == 0) {
189acaae 1008 /* BB is there a better way to do this? */
750d1151 1009 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
189acaae
SF
1010#ifdef CONFIG_CIFS_WEAK_PW_HASH
1011 } else if (strnicmp(value, "lanman", 6) == 0) {
50c2f753 1012 vol->secFlg |= CIFSSEC_MAY_LANMAN;
189acaae 1013#endif
bf820679 1014 } else if (strnicmp(value, "none", 4) == 0) {
189acaae 1015 vol->nullauth = 1;
50c2f753
SF
1016 } else {
1017 cERROR(1, ("bad security option: %s", value));
1018 return 1;
1019 }
1da177e4
LT
1020 } else if ((strnicmp(data, "unc", 3) == 0)
1021 || (strnicmp(data, "target", 6) == 0)
1022 || (strnicmp(data, "path", 4) == 0)) {
1023 if (!value || !*value) {
50c2f753
SF
1024 printk(KERN_WARNING "CIFS: invalid path to "
1025 "network resource\n");
1da177e4
LT
1026 return 1; /* needs_arg; */
1027 }
1028 if ((temp_len = strnlen(value, 300)) < 300) {
50c2f753 1029 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
4523cc30 1030 if (vol->UNC == NULL)
1da177e4 1031 return 1;
50c2f753 1032 strcpy(vol->UNC, value);
1da177e4
LT
1033 if (strncmp(vol->UNC, "//", 2) == 0) {
1034 vol->UNC[0] = '\\';
1035 vol->UNC[1] = '\\';
50c2f753 1036 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1da177e4 1037 printk(KERN_WARNING
50c2f753
SF
1038 "CIFS: UNC Path does not begin "
1039 "with // or \\\\ \n");
1da177e4
LT
1040 return 1;
1041 }
1042 } else {
1043 printk(KERN_WARNING "CIFS: UNC name too long\n");
1044 return 1;
1045 }
1046 } else if ((strnicmp(data, "domain", 3) == 0)
1047 || (strnicmp(data, "workgroup", 5) == 0)) {
1048 if (!value || !*value) {
1049 printk(KERN_WARNING "CIFS: invalid domain name\n");
1050 return 1; /* needs_arg; */
1051 }
1052 /* BB are there cases in which a comma can be valid in
1053 a domain name and need special handling? */
3979877e 1054 if (strnlen(value, 256) < 256) {
1da177e4
LT
1055 vol->domainname = value;
1056 cFYI(1, ("Domain name set"));
1057 } else {
50c2f753
SF
1058 printk(KERN_WARNING "CIFS: domain name too "
1059 "long\n");
1da177e4
LT
1060 return 1;
1061 }
50c2f753
SF
1062 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1063 if (!value || !*value) {
1064 printk(KERN_WARNING
1065 "CIFS: invalid path prefix\n");
1066 return 1; /* needs_argument */
1067 }
1068 if ((temp_len = strnlen(value, 1024)) < 1024) {
4523cc30 1069 if (value[0] != '/')
2fe87f02 1070 temp_len++; /* missing leading slash */
50c2f753
SF
1071 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1072 if (vol->prepath == NULL)
1073 return 1;
4523cc30 1074 if (value[0] != '/') {
2fe87f02 1075 vol->prepath[0] = '/';
50c2f753 1076 strcpy(vol->prepath+1, value);
2fe87f02 1077 } else
50c2f753
SF
1078 strcpy(vol->prepath, value);
1079 cFYI(1, ("prefix path %s", vol->prepath));
1080 } else {
1081 printk(KERN_WARNING "CIFS: prefix too long\n");
1082 return 1;
1083 }
1da177e4
LT
1084 } else if (strnicmp(data, "iocharset", 9) == 0) {
1085 if (!value || !*value) {
63135e08
SF
1086 printk(KERN_WARNING "CIFS: invalid iocharset "
1087 "specified\n");
1da177e4
LT
1088 return 1; /* needs_arg; */
1089 }
1090 if (strnlen(value, 65) < 65) {
50c2f753 1091 if (strnicmp(value, "default", 7))
1da177e4 1092 vol->iocharset = value;
50c2f753
SF
1093 /* if iocharset not set then load_nls_default
1094 is used by caller */
1095 cFYI(1, ("iocharset set to %s", value));
1da177e4 1096 } else {
63135e08
SF
1097 printk(KERN_WARNING "CIFS: iocharset name "
1098 "too long.\n");
1da177e4
LT
1099 return 1;
1100 }
9b9d6b24
JL
1101 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1102 vol->linux_uid = simple_strtoul(value, &value, 0);
1103 uid_specified = true;
1104 } else if (!strnicmp(data, "forceuid", 8)) {
1105 override_uid = 1;
1106 } else if (!strnicmp(data, "noforceuid", 10)) {
1107 override_uid = 0;
1108 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1109 vol->linux_gid = simple_strtoul(value, &value, 0);
1110 gid_specified = true;
1111 } else if (!strnicmp(data, "forcegid", 8)) {
1112 override_gid = 1;
1113 } else if (!strnicmp(data, "noforcegid", 10)) {
1114 override_gid = 0;
1da177e4
LT
1115 } else if (strnicmp(data, "file_mode", 4) == 0) {
1116 if (value && *value) {
1117 vol->file_mode =
1118 simple_strtoul(value, &value, 0);
1119 }
1120 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1121 if (value && *value) {
1122 vol->dir_mode =
1123 simple_strtoul(value, &value, 0);
1124 }
1125 } else if (strnicmp(data, "dirmode", 4) == 0) {
1126 if (value && *value) {
1127 vol->dir_mode =
1128 simple_strtoul(value, &value, 0);
1129 }
1130 } else if (strnicmp(data, "port", 4) == 0) {
1131 if (value && *value) {
1132 vol->port =
1133 simple_strtoul(value, &value, 0);
1134 }
1135 } else if (strnicmp(data, "rsize", 5) == 0) {
1136 if (value && *value) {
1137 vol->rsize =
1138 simple_strtoul(value, &value, 0);
1139 }
1140 } else if (strnicmp(data, "wsize", 5) == 0) {
1141 if (value && *value) {
1142 vol->wsize =
1143 simple_strtoul(value, &value, 0);
1144 }
1145 } else if (strnicmp(data, "sockopt", 5) == 0) {
6a5fa236
SF
1146 if (!value || !*value) {
1147 cERROR(1, ("no socket option specified"));
1148 continue;
1149 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1150 vol->sockopt_tcp_nodelay = 1;
1da177e4
LT
1151 }
1152 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1153 if (!value || !*value || (*value == ' ')) {
63135e08 1154 cFYI(1, ("invalid (empty) netbiosname"));
1da177e4 1155 } else {
50c2f753
SF
1156 memset(vol->source_rfc1001_name, 0x20, 15);
1157 for (i = 0; i < 15; i++) {
1158 /* BB are there cases in which a comma can be
1da177e4
LT
1159 valid in this workstation netbios name (and need
1160 special handling)? */
1161
1162 /* We do not uppercase netbiosname for user */
50c2f753 1163 if (value[i] == 0)
1da177e4 1164 break;
50c2f753
SF
1165 else
1166 vol->source_rfc1001_name[i] =
1167 value[i];
1da177e4
LT
1168 }
1169 /* The string has 16th byte zero still from
1170 set at top of the function */
50c2f753
SF
1171 if ((i == 15) && (value[i] != 0))
1172 printk(KERN_WARNING "CIFS: netbiosname"
1173 " longer than 15 truncated.\n");
a10faeb2
SF
1174 }
1175 } else if (strnicmp(data, "servern", 7) == 0) {
1176 /* servernetbiosname specified override *SMBSERVER */
1177 if (!value || !*value || (*value == ' ')) {
467a8f8d 1178 cFYI(1, ("empty server netbiosname specified"));
a10faeb2
SF
1179 } else {
1180 /* last byte, type, is 0x20 for servr type */
50c2f753 1181 memset(vol->target_rfc1001_name, 0x20, 16);
a10faeb2 1182
50c2f753 1183 for (i = 0; i < 15; i++) {
a10faeb2 1184 /* BB are there cases in which a comma can be
50c2f753
SF
1185 valid in this workstation netbios name
1186 (and need special handling)? */
a10faeb2 1187
50c2f753
SF
1188 /* user or mount helper must uppercase
1189 the netbiosname */
1190 if (value[i] == 0)
a10faeb2
SF
1191 break;
1192 else
50c2f753
SF
1193 vol->target_rfc1001_name[i] =
1194 value[i];
a10faeb2
SF
1195 }
1196 /* The string has 16th byte zero still from
1197 set at top of the function */
50c2f753
SF
1198 if ((i == 15) && (value[i] != 0))
1199 printk(KERN_WARNING "CIFS: server net"
1200 "biosname longer than 15 truncated.\n");
1da177e4
LT
1201 }
1202 } else if (strnicmp(data, "credentials", 4) == 0) {
1203 /* ignore */
1204 } else if (strnicmp(data, "version", 3) == 0) {
1205 /* ignore */
50c2f753 1206 } else if (strnicmp(data, "guest", 5) == 0) {
1da177e4 1207 /* ignore */
71a394fa
SF
1208 } else if (strnicmp(data, "rw", 2) == 0) {
1209 /* ignore */
1210 } else if (strnicmp(data, "ro", 2) == 0) {
1211 /* ignore */
edf1ae40
SF
1212 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1213 vol->noblocksnd = 1;
1214 } else if (strnicmp(data, "noautotune", 10) == 0) {
1215 vol->noautotune = 1;
1da177e4
LT
1216 } else if ((strnicmp(data, "suid", 4) == 0) ||
1217 (strnicmp(data, "nosuid", 6) == 0) ||
1218 (strnicmp(data, "exec", 4) == 0) ||
1219 (strnicmp(data, "noexec", 6) == 0) ||
1220 (strnicmp(data, "nodev", 5) == 0) ||
1221 (strnicmp(data, "noauto", 6) == 0) ||
1222 (strnicmp(data, "dev", 3) == 0)) {
1223 /* The mount tool or mount.cifs helper (if present)
50c2f753
SF
1224 uses these opts to set flags, and the flags are read
1225 by the kernel vfs layer before we get here (ie
1226 before read super) so there is no point trying to
1227 parse these options again and set anything and it
1228 is ok to just ignore them */
1da177e4 1229 continue;
1da177e4
LT
1230 } else if (strnicmp(data, "hard", 4) == 0) {
1231 vol->retry = 1;
1232 } else if (strnicmp(data, "soft", 4) == 0) {
1233 vol->retry = 0;
1234 } else if (strnicmp(data, "perm", 4) == 0) {
1235 vol->noperm = 0;
1236 } else if (strnicmp(data, "noperm", 6) == 0) {
1237 vol->noperm = 1;
6a0b4824
SF
1238 } else if (strnicmp(data, "mapchars", 8) == 0) {
1239 vol->remap = 1;
1240 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1241 vol->remap = 0;
50c2f753
SF
1242 } else if (strnicmp(data, "sfu", 3) == 0) {
1243 vol->sfu_emul = 1;
1244 } else if (strnicmp(data, "nosfu", 5) == 0) {
1245 vol->sfu_emul = 0;
2c1b8615
SF
1246 } else if (strnicmp(data, "nodfs", 5) == 0) {
1247 vol->nodfs = 1;
ac67055e
JA
1248 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1249 vol->posix_paths = 1;
1250 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1251 vol->posix_paths = 0;
c18c842b
SF
1252 } else if (strnicmp(data, "nounix", 6) == 0) {
1253 vol->no_linux_ext = 1;
1254 } else if (strnicmp(data, "nolinux", 7) == 0) {
1255 vol->no_linux_ext = 1;
50c2f753 1256 } else if ((strnicmp(data, "nocase", 6) == 0) ||
a10faeb2 1257 (strnicmp(data, "ignorecase", 10) == 0)) {
50c2f753 1258 vol->nocase = 1;
c46fa8ac
SF
1259 } else if (strnicmp(data, "brl", 3) == 0) {
1260 vol->nobrl = 0;
50c2f753 1261 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1c955187 1262 (strnicmp(data, "nolock", 6) == 0)) {
c46fa8ac 1263 vol->nobrl = 1;
d3485d37
SF
1264 /* turn off mandatory locking in mode
1265 if remote locking is turned off since the
1266 local vfs will do advisory */
50c2f753
SF
1267 if (vol->file_mode ==
1268 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
d3485d37 1269 vol->file_mode = S_IALLUGO;
13a6e42a
SF
1270 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1271 /* will take the shorter form "forcemand" as well */
1272 /* This mount option will force use of mandatory
1273 (DOS/Windows style) byte range locks, instead of
1274 using posix advisory byte range locks, even if the
1275 Unix extensions are available and posix locks would
1276 be supported otherwise. If Unix extensions are not
1277 negotiated this has no effect since mandatory locks
1278 would be used (mandatory locks is all that those
1279 those servers support) */
1280 vol->mand_lock = 1;
1da177e4
LT
1281 } else if (strnicmp(data, "setuids", 7) == 0) {
1282 vol->setuids = 1;
1283 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1284 vol->setuids = 0;
d0a9c078
JL
1285 } else if (strnicmp(data, "dynperm", 7) == 0) {
1286 vol->dynperm = true;
1287 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1288 vol->dynperm = false;
1da177e4
LT
1289 } else if (strnicmp(data, "nohard", 6) == 0) {
1290 vol->retry = 0;
1291 } else if (strnicmp(data, "nosoft", 6) == 0) {
1292 vol->retry = 1;
1293 } else if (strnicmp(data, "nointr", 6) == 0) {
1294 vol->intr = 0;
1295 } else if (strnicmp(data, "intr", 4) == 0) {
1296 vol->intr = 1;
be652445
SF
1297 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1298 vol->nostrictsync = 1;
1299 } else if (strnicmp(data, "strictsync", 10) == 0) {
1300 vol->nostrictsync = 0;
50c2f753 1301 } else if (strnicmp(data, "serverino", 7) == 0) {
1da177e4 1302 vol->server_ino = 1;
50c2f753 1303 } else if (strnicmp(data, "noserverino", 9) == 0) {
1da177e4 1304 vol->server_ino = 0;
50c2f753 1305 } else if (strnicmp(data, "cifsacl", 7) == 0) {
0a4b92c0
SF
1306 vol->cifs_acl = 1;
1307 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1308 vol->cifs_acl = 0;
50c2f753 1309 } else if (strnicmp(data, "acl", 3) == 0) {
1da177e4 1310 vol->no_psx_acl = 0;
50c2f753 1311 } else if (strnicmp(data, "noacl", 5) == 0) {
1da177e4 1312 vol->no_psx_acl = 1;
84210e91
SF
1313#ifdef CONFIG_CIFS_EXPERIMENTAL
1314 } else if (strnicmp(data, "locallease", 6) == 0) {
1315 vol->local_lease = 1;
1316#endif
50c2f753 1317 } else if (strnicmp(data, "sign", 4) == 0) {
750d1151 1318 vol->secFlg |= CIFSSEC_MUST_SIGN;
95b1cb90
SF
1319 } else if (strnicmp(data, "seal", 4) == 0) {
1320 /* we do not do the following in secFlags because seal
1321 is a per tree connection (mount) not a per socket
1322 or per-smb connection option in the protocol */
1323 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1324 vol->seal = 1;
50c2f753 1325 } else if (strnicmp(data, "direct", 6) == 0) {
1da177e4 1326 vol->direct_io = 1;
50c2f753 1327 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1da177e4 1328 vol->direct_io = 1;
1da177e4 1329 } else if (strnicmp(data, "noac", 4) == 0) {
50c2f753
SF
1330 printk(KERN_WARNING "CIFS: Mount option noac not "
1331 "supported. Instead set "
1332 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1da177e4 1333 } else
50c2f753
SF
1334 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1335 data);
1da177e4
LT
1336 }
1337 if (vol->UNC == NULL) {
4523cc30 1338 if (devname == NULL) {
50c2f753
SF
1339 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1340 "target\n");
1da177e4
LT
1341 return 1;
1342 }
1343 if ((temp_len = strnlen(devname, 300)) < 300) {
50c2f753 1344 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
4523cc30 1345 if (vol->UNC == NULL)
1da177e4 1346 return 1;
50c2f753 1347 strcpy(vol->UNC, devname);
1da177e4
LT
1348 if (strncmp(vol->UNC, "//", 2) == 0) {
1349 vol->UNC[0] = '\\';
1350 vol->UNC[1] = '\\';
1351 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
50c2f753
SF
1352 printk(KERN_WARNING "CIFS: UNC Path does not "
1353 "begin with // or \\\\ \n");
1da177e4
LT
1354 return 1;
1355 }
7c5e628f
IM
1356 value = strpbrk(vol->UNC+2, "/\\");
1357 if (value)
1358 *value = '\\';
1da177e4
LT
1359 } else {
1360 printk(KERN_WARNING "CIFS: UNC name too long\n");
1361 return 1;
1362 }
1363 }
fb8c4b14 1364 if (vol->UNCip == NULL)
1da177e4
LT
1365 vol->UNCip = &vol->UNC[2];
1366
9b9d6b24
JL
1367 if (uid_specified)
1368 vol->override_uid = override_uid;
1369 else if (override_uid == 1)
1370 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1371 "specified with no uid= option.\n");
1372
1373 if (gid_specified)
1374 vol->override_gid = override_gid;
1375 else if (override_gid == 1)
1376 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1377 "specified with no gid= option.\n");
1378
1da177e4
LT
1379 return 0;
1380}
1381
e7ddee90 1382static struct TCP_Server_Info *
bdb97adc 1383cifs_find_tcp_session(struct sockaddr_storage *addr, unsigned short int port)
1da177e4
LT
1384{
1385 struct list_head *tmp;
e7ddee90
JL
1386 struct TCP_Server_Info *server;
1387 struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
1388 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
1389
1390 write_lock(&cifs_tcp_ses_lock);
1391 list_for_each(tmp, &cifs_tcp_ses_list) {
1392 server = list_entry(tmp, struct TCP_Server_Info,
1393 tcp_ses_list);
e7ddee90
JL
1394 /*
1395 * the demux thread can exit on its own while still in CifsNew
1396 * so don't accept any sockets in that state. Since the
1397 * tcpStatus never changes back to CifsNew it's safe to check
1398 * for this without a lock.
1399 */
1400 if (server->tcpStatus == CifsNew)
1b20d672 1401 continue;
1da177e4 1402
bdb97adc
SJ
1403 switch (addr->ss_family) {
1404 case AF_INET:
1405 if (addr4->sin_addr.s_addr ==
1406 server->addr.sockAddr.sin_addr.s_addr) {
1407 addr4->sin_port = htons(port);
1408 /* user overrode default port? */
1409 if (addr4->sin_port) {
1410 if (addr4->sin_port !=
1411 server->addr.sockAddr.sin_port)
1412 continue;
1413 }
1414 break;
1415 } else
1416 continue;
1417
1418 case AF_INET6:
1419 if (ipv6_addr_equal(&addr6->sin6_addr,
1420 &server->addr.sockAddr6.sin6_addr) &&
ca43e3be 1421 (addr6->sin6_scope_id ==
bdb97adc
SJ
1422 server->addr.sockAddr6.sin6_scope_id)) {
1423 addr6->sin6_port = htons(port);
1424 /* user overrode default port? */
1425 if (addr6->sin6_port) {
ca43e3be 1426 if (addr6->sin6_port !=
bdb97adc 1427 server->addr.sockAddr6.sin6_port)
ca43e3be 1428 continue;
bdb97adc
SJ
1429 }
1430 break;
ca43e3be 1431 } else
bdb97adc
SJ
1432 continue;
1433 }
1b20d672 1434
e7ddee90
JL
1435 ++server->srv_count;
1436 write_unlock(&cifs_tcp_ses_lock);
d82c2df5 1437 cFYI(1, ("Existing tcp session with server found"));
e7ddee90 1438 return server;
1da177e4 1439 }
e7ddee90 1440 write_unlock(&cifs_tcp_ses_lock);
1da177e4
LT
1441 return NULL;
1442}
1b20d672 1443
14fbf50d 1444static void
e7ddee90 1445cifs_put_tcp_session(struct TCP_Server_Info *server)
1da177e4 1446{
e7ddee90 1447 struct task_struct *task;
1b20d672 1448
e7ddee90
JL
1449 write_lock(&cifs_tcp_ses_lock);
1450 if (--server->srv_count > 0) {
1451 write_unlock(&cifs_tcp_ses_lock);
1452 return;
1da177e4 1453 }
1b20d672 1454
e7ddee90
JL
1455 list_del_init(&server->tcp_ses_list);
1456 write_unlock(&cifs_tcp_ses_lock);
dea570e0 1457
e7ddee90
JL
1458 spin_lock(&GlobalMid_Lock);
1459 server->tcpStatus = CifsExiting;
1460 spin_unlock(&GlobalMid_Lock);
dea570e0 1461
e7ddee90
JL
1462 task = xchg(&server->tsk, NULL);
1463 if (task)
1464 force_sig(SIGKILL, task);
1da177e4
LT
1465}
1466
63c038c2
JL
1467static struct TCP_Server_Info *
1468cifs_get_tcp_session(struct smb_vol *volume_info)
1469{
1470 struct TCP_Server_Info *tcp_ses = NULL;
a9ac49d3 1471 struct sockaddr_storage addr;
63c038c2
JL
1472 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1473 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1474 int rc;
1475
a9ac49d3 1476 memset(&addr, 0, sizeof(struct sockaddr_storage));
63c038c2 1477
1e68b2b2 1478 cFYI(1, ("UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip));
63c038c2 1479
1e68b2b2
JL
1480 if (volume_info->UNCip && volume_info->UNC) {
1481 rc = cifs_convert_address(volume_info->UNCip, &addr);
1482 if (!rc) {
63c038c2
JL
1483 /* we failed translating address */
1484 rc = -EINVAL;
1485 goto out_err;
1486 }
63c038c2
JL
1487 } else if (volume_info->UNCip) {
1488 /* BB using ip addr as tcp_ses name to connect to the
1489 DFS root below */
1490 cERROR(1, ("Connecting to DFS root not implemented yet"));
1491 rc = -EINVAL;
1492 goto out_err;
1493 } else /* which tcp_sess DFS root would we conect to */ {
1494 cERROR(1,
1495 ("CIFS mount error: No UNC path (e.g. -o "
1496 "unc=//192.168.1.100/public) specified"));
1497 rc = -EINVAL;
1498 goto out_err;
1499 }
1500
1501 /* see if we already have a matching tcp_ses */
bdb97adc 1502 tcp_ses = cifs_find_tcp_session(&addr, volume_info->port);
63c038c2
JL
1503 if (tcp_ses)
1504 return tcp_ses;
1505
1506 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1507 if (!tcp_ses) {
1508 rc = -ENOMEM;
1509 goto out_err;
1510 }
1511
1512 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1513 if (IS_ERR(tcp_ses->hostname)) {
1514 rc = PTR_ERR(tcp_ses->hostname);
1515 goto out_err;
1516 }
1517
1518 tcp_ses->noblocksnd = volume_info->noblocksnd;
1519 tcp_ses->noautotune = volume_info->noautotune;
6a5fa236 1520 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
63c038c2
JL
1521 atomic_set(&tcp_ses->inFlight, 0);
1522 init_waitqueue_head(&tcp_ses->response_q);
1523 init_waitqueue_head(&tcp_ses->request_q);
1524 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1525 mutex_init(&tcp_ses->srv_mutex);
1526 memcpy(tcp_ses->workstation_RFC1001_name,
1527 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1528 memcpy(tcp_ses->server_RFC1001_name,
1529 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1530 tcp_ses->sequence_number = 0;
1531 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1532 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1533
1534 /*
1535 * at this point we are the only ones with the pointer
1536 * to the struct since the kernel thread not created yet
1537 * no need to spinlock this init of tcpStatus or srv_count
1538 */
1539 tcp_ses->tcpStatus = CifsNew;
1540 ++tcp_ses->srv_count;
1541
a9ac49d3 1542 if (addr.ss_family == AF_INET6) {
63c038c2
JL
1543 cFYI(1, ("attempting ipv6 connect"));
1544 /* BB should we allow ipv6 on port 139? */
1545 /* other OS never observed in Wild doing 139 with v6 */
6debdbc0 1546 sin_server6->sin6_port = htons(volume_info->port);
63c038c2
JL
1547 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1548 sizeof(struct sockaddr_in6));
d5c5605c 1549 rc = ipv6_connect(tcp_ses);
63c038c2 1550 } else {
6debdbc0 1551 sin_server->sin_port = htons(volume_info->port);
63c038c2
JL
1552 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1553 sizeof(struct sockaddr_in));
bcf4b106 1554 rc = ipv4_connect(tcp_ses);
63c038c2
JL
1555 }
1556 if (rc < 0) {
1557 cERROR(1, ("Error connecting to socket. Aborting operation"));
1558 goto out_err;
1559 }
1560
1561 /*
1562 * since we're in a cifs function already, we know that
1563 * this will succeed. No need for try_module_get().
1564 */
1565 __module_get(THIS_MODULE);
1566 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1567 tcp_ses, "cifsd");
1568 if (IS_ERR(tcp_ses->tsk)) {
1569 rc = PTR_ERR(tcp_ses->tsk);
1570 cERROR(1, ("error %d create cifsd thread", rc));
1571 module_put(THIS_MODULE);
1572 goto out_err;
1573 }
1574
1575 /* thread spawned, put it on the list */
1576 write_lock(&cifs_tcp_ses_lock);
1577 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1578 write_unlock(&cifs_tcp_ses_lock);
1579
1580 return tcp_ses;
1581
1582out_err:
1583 if (tcp_ses) {
8347a5cd
SF
1584 if (!IS_ERR(tcp_ses->hostname))
1585 kfree(tcp_ses->hostname);
63c038c2
JL
1586 if (tcp_ses->ssocket)
1587 sock_release(tcp_ses->ssocket);
1588 kfree(tcp_ses);
1589 }
1590 return ERR_PTR(rc);
1591}
1592
14fbf50d
JL
1593static struct cifsSesInfo *
1594cifs_find_smb_ses(struct TCP_Server_Info *server, char *username)
1da177e4
LT
1595{
1596 struct list_head *tmp;
14fbf50d 1597 struct cifsSesInfo *ses;
dea570e0 1598
14fbf50d
JL
1599 write_lock(&cifs_tcp_ses_lock);
1600 list_for_each(tmp, &server->smb_ses_list) {
1601 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
1602 if (strncmp(ses->userName, username, MAX_USERNAME_SIZE))
dea570e0
SF
1603 continue;
1604
14fbf50d
JL
1605 ++ses->ses_count;
1606 write_unlock(&cifs_tcp_ses_lock);
1607 return ses;
1608 }
1609 write_unlock(&cifs_tcp_ses_lock);
1610 return NULL;
1611}
dea570e0 1612
14fbf50d
JL
1613static void
1614cifs_put_smb_ses(struct cifsSesInfo *ses)
1615{
1616 int xid;
1617 struct TCP_Server_Info *server = ses->server;
dea570e0 1618
14fbf50d
JL
1619 write_lock(&cifs_tcp_ses_lock);
1620 if (--ses->ses_count > 0) {
1621 write_unlock(&cifs_tcp_ses_lock);
1622 return;
1623 }
dea570e0 1624
14fbf50d
JL
1625 list_del_init(&ses->smb_ses_list);
1626 write_unlock(&cifs_tcp_ses_lock);
dea570e0 1627
14fbf50d
JL
1628 if (ses->status == CifsGood) {
1629 xid = GetXid();
1630 CIFSSMBLogoff(xid, ses);
1631 _FreeXid(xid);
1632 }
1633 sesInfoFree(ses);
1634 cifs_put_tcp_session(server);
1635}
dea570e0 1636
f1987b44
JL
1637static struct cifsTconInfo *
1638cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1639{
1640 struct list_head *tmp;
1641 struct cifsTconInfo *tcon;
1642
1643 write_lock(&cifs_tcp_ses_lock);
1644 list_for_each(tmp, &ses->tcon_list) {
1645 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1646 if (tcon->tidStatus == CifsExiting)
1647 continue;
1648 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
dea570e0
SF
1649 continue;
1650
f1987b44
JL
1651 ++tcon->tc_count;
1652 write_unlock(&cifs_tcp_ses_lock);
dea570e0 1653 return tcon;
1da177e4 1654 }
f1987b44 1655 write_unlock(&cifs_tcp_ses_lock);
1da177e4
LT
1656 return NULL;
1657}
1658
f1987b44
JL
1659static void
1660cifs_put_tcon(struct cifsTconInfo *tcon)
1661{
1662 int xid;
1663 struct cifsSesInfo *ses = tcon->ses;
1664
1665 write_lock(&cifs_tcp_ses_lock);
1666 if (--tcon->tc_count > 0) {
1667 write_unlock(&cifs_tcp_ses_lock);
1668 return;
1669 }
1670
1671 list_del_init(&tcon->tcon_list);
1672 write_unlock(&cifs_tcp_ses_lock);
1673
1674 xid = GetXid();
1675 CIFSSMBTDis(xid, tcon);
1676 _FreeXid(xid);
1677
f1987b44
JL
1678 tconInfoFree(tcon);
1679 cifs_put_smb_ses(ses);
1680}
1681
1da177e4 1682int
50c2f753
SF
1683get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
1684 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
366781c1 1685 struct dfs_info3_param **preferrals, int remap)
1da177e4
LT
1686{
1687 char *temp_unc;
1688 int rc = 0;
1689
1690 *pnum_referrals = 0;
366781c1 1691 *preferrals = NULL;
1da177e4
LT
1692
1693 if (pSesInfo->ipc_tid == 0) {
1694 temp_unc = kmalloc(2 /* for slashes */ +
50c2f753
SF
1695 strnlen(pSesInfo->serverName,
1696 SERVER_NAME_LEN_WITH_NULL * 2)
1da177e4
LT
1697 + 1 + 4 /* slash IPC$ */ + 2,
1698 GFP_KERNEL);
1699 if (temp_unc == NULL)
1700 return -ENOMEM;
1701 temp_unc[0] = '\\';
1702 temp_unc[1] = '\\';
1703 strcpy(temp_unc + 2, pSesInfo->serverName);
1704 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
1705 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1706 cFYI(1,
50c2f753 1707 ("CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid));
1da177e4
LT
1708 kfree(temp_unc);
1709 }
1710 if (rc == 0)
c2cf07d5 1711 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
737b758c 1712 pnum_referrals, nls_codepage, remap);
366781c1
SF
1713 /* BB map targetUNCs to dfs_info3 structures, here or
1714 in CIFSGetDFSRefer BB */
1da177e4
LT
1715
1716 return rc;
1717}
1718
09e50d55
JL
1719#ifdef CONFIG_DEBUG_LOCK_ALLOC
1720static struct lock_class_key cifs_key[2];
1721static struct lock_class_key cifs_slock_key[2];
1722
1723static inline void
1724cifs_reclassify_socket4(struct socket *sock)
1725{
1726 struct sock *sk = sock->sk;
1727 BUG_ON(sock_owned_by_user(sk));
1728 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
1729 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
1730}
1731
1732static inline void
1733cifs_reclassify_socket6(struct socket *sock)
1734{
1735 struct sock *sk = sock->sk;
1736 BUG_ON(sock_owned_by_user(sk));
1737 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
1738 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
1739}
1740#else
1741static inline void
1742cifs_reclassify_socket4(struct socket *sock)
1743{
1744}
1745
1746static inline void
1747cifs_reclassify_socket6(struct socket *sock)
1748{
1749}
1750#endif
1751
1da177e4 1752/* See RFC1001 section 14 on representation of Netbios names */
50c2f753 1753static void rfc1002mangle(char *target, char *source, unsigned int length)
1da177e4 1754{
50c2f753 1755 unsigned int i, j;
1da177e4 1756
50c2f753 1757 for (i = 0, j = 0; i < (length); i++) {
1da177e4
LT
1758 /* mask a nibble at a time and encode */
1759 target[j] = 'A' + (0x0F & (source[i] >> 4));
1760 target[j+1] = 'A' + (0x0F & source[i]);
50c2f753 1761 j += 2;
1da177e4
LT
1762 }
1763
1764}
1765
1766
1767static int
bcf4b106 1768ipv4_connect(struct TCP_Server_Info *server)
1da177e4
LT
1769{
1770 int rc = 0;
6a5fa236 1771 int val;
bcf4b106 1772 bool connected = false;
1da177e4 1773 __be16 orig_port = 0;
bcf4b106 1774 struct socket *socket = server->ssocket;
1da177e4 1775
bcf4b106 1776 if (socket == NULL) {
50c2f753 1777 rc = sock_create_kern(PF_INET, SOCK_STREAM,
bcf4b106 1778 IPPROTO_TCP, &socket);
1da177e4 1779 if (rc < 0) {
50c2f753 1780 cERROR(1, ("Error %d creating socket", rc));
1da177e4 1781 return rc;
1da177e4 1782 }
bcf4b106
JL
1783
1784 /* BB other socket options to set KEEPALIVE, NODELAY? */
1785 cFYI(1, ("Socket created"));
1786 server->ssocket = socket;
1787 socket->sk->sk_allocation = GFP_NOFS;
1788 cifs_reclassify_socket4(socket);
1da177e4
LT
1789 }
1790
bcf4b106
JL
1791 /* user overrode default port */
1792 if (server->addr.sockAddr.sin_port) {
1793 rc = socket->ops->connect(socket, (struct sockaddr *)
1794 &server->addr.sockAddr,
1795 sizeof(struct sockaddr_in), 0);
1da177e4 1796 if (rc >= 0)
bcf4b106 1797 connected = true;
50c2f753 1798 }
1da177e4 1799
fb8c4b14 1800 if (!connected) {
50c2f753 1801 /* save original port so we can retry user specified port
1da177e4 1802 later if fall back ports fail this time */
bcf4b106 1803 orig_port = server->addr.sockAddr.sin_port;
1da177e4
LT
1804
1805 /* do not retry on the same port we just failed on */
bcf4b106
JL
1806 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
1807 server->addr.sockAddr.sin_port = htons(CIFS_PORT);
1808 rc = socket->ops->connect(socket,
1809 (struct sockaddr *)
1810 &server->addr.sockAddr,
1811 sizeof(struct sockaddr_in), 0);
1da177e4 1812 if (rc >= 0)
bcf4b106 1813 connected = true;
1da177e4
LT
1814 }
1815 }
1816 if (!connected) {
bcf4b106
JL
1817 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
1818 rc = socket->ops->connect(socket, (struct sockaddr *)
1819 &server->addr.sockAddr,
6345a3a8 1820 sizeof(struct sockaddr_in), 0);
50c2f753 1821 if (rc >= 0)
bcf4b106 1822 connected = true;
1da177e4
LT
1823 }
1824
1825 /* give up here - unless we want to retry on different
1826 protocol families some day */
1827 if (!connected) {
fb8c4b14 1828 if (orig_port)
bcf4b106 1829 server->addr.sockAddr.sin_port = orig_port;
50c2f753 1830 cFYI(1, ("Error %d connecting to server via ipv4", rc));
bcf4b106
JL
1831 sock_release(socket);
1832 server->ssocket = NULL;
1da177e4
LT
1833 return rc;
1834 }
bcf4b106
JL
1835
1836
1837 /*
1838 * Eventually check for other socket options to change from
1839 * the default. sock_setsockopt not used because it expects
1840 * user space buffer
1841 */
1842 socket->sk->sk_rcvtimeo = 7 * HZ;
da505c38 1843 socket->sk->sk_sndtimeo = 5 * HZ;
edf1ae40 1844
b387eaeb 1845 /* make the bufsizes depend on wsize/rsize and max requests */
bcf4b106
JL
1846 if (server->noautotune) {
1847 if (socket->sk->sk_sndbuf < (200 * 1024))
1848 socket->sk->sk_sndbuf = 200 * 1024;
1849 if (socket->sk->sk_rcvbuf < (140 * 1024))
1850 socket->sk->sk_rcvbuf = 140 * 1024;
edf1ae40 1851 }
1da177e4 1852
6a5fa236
SF
1853 if (server->tcp_nodelay) {
1854 val = 1;
1855 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
1856 (char *)&val, sizeof(val));
1857 if (rc)
1858 cFYI(1, ("set TCP_NODELAY socket option error %d", rc));
1859 }
1860
bcf4b106
JL
1861 cFYI(1, ("sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
1862 socket->sk->sk_sndbuf,
1863 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo));
1864
1da177e4 1865 /* send RFC1001 sessinit */
bcf4b106 1866 if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
1da177e4 1867 /* some servers require RFC1001 sessinit before sending
50c2f753 1868 negprot - BB check reconnection in case where second
1da177e4 1869 sessinit is sent but no second negprot */
50c2f753
SF
1870 struct rfc1002_session_packet *ses_init_buf;
1871 struct smb_hdr *smb_buf;
1872 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
1873 GFP_KERNEL);
fb8c4b14 1874 if (ses_init_buf) {
1da177e4 1875 ses_init_buf->trailer.session_req.called_len = 32;
bcf4b106
JL
1876 if (server->server_RFC1001_name &&
1877 server->server_RFC1001_name[0] != 0)
8ecaf67a
JL
1878 rfc1002mangle(ses_init_buf->trailer.
1879 session_req.called_name,
bcf4b106 1880 server->server_RFC1001_name,
8ecaf67a 1881 RFC1001_NAME_LEN_WITH_NULL);
bcf4b106 1882 else
8ecaf67a
JL
1883 rfc1002mangle(ses_init_buf->trailer.
1884 session_req.called_name,
1885 DEFAULT_CIFS_CALLED_NAME,
1886 RFC1001_NAME_LEN_WITH_NULL);
a10faeb2 1887
1da177e4 1888 ses_init_buf->trailer.session_req.calling_len = 32;
bcf4b106 1889
1da177e4
LT
1890 /* calling name ends in null (byte 16) from old smb
1891 convention. */
bcf4b106
JL
1892 if (server->workstation_RFC1001_name &&
1893 server->workstation_RFC1001_name[0] != 0)
8ecaf67a
JL
1894 rfc1002mangle(ses_init_buf->trailer.
1895 session_req.calling_name,
bcf4b106 1896 server->workstation_RFC1001_name,
8ecaf67a 1897 RFC1001_NAME_LEN_WITH_NULL);
bcf4b106 1898 else
8ecaf67a
JL
1899 rfc1002mangle(ses_init_buf->trailer.
1900 session_req.calling_name,
1901 "LINUX_CIFS_CLNT",
1902 RFC1001_NAME_LEN_WITH_NULL);
bcf4b106 1903
1da177e4
LT
1904 ses_init_buf->trailer.session_req.scope1 = 0;
1905 ses_init_buf->trailer.session_req.scope2 = 0;
1906 smb_buf = (struct smb_hdr *)ses_init_buf;
1907 /* sizeof RFC1002_SESSION_REQUEST with no scope */
1908 smb_buf->smb_buf_length = 0x81000044;
0496e02d 1909 rc = smb_send(server, smb_buf, 0x44);
1da177e4 1910 kfree(ses_init_buf);
50c2f753 1911 msleep(1); /* RFC1001 layer in at least one server
083d3a2c
SF
1912 requires very short break before negprot
1913 presumably because not expecting negprot
1914 to follow so fast. This is a simple
50c2f753 1915 solution that works without
083d3a2c
SF
1916 complicating the code and causes no
1917 significant slowing down on mount
1918 for everyone else */
1da177e4 1919 }
50c2f753 1920 /* else the negprot may still work without this
1da177e4 1921 even though malloc failed */
50c2f753 1922
1da177e4 1923 }
50c2f753 1924
1da177e4
LT
1925 return rc;
1926}
1927
1928static int
d5c5605c 1929ipv6_connect(struct TCP_Server_Info *server)
1da177e4
LT
1930{
1931 int rc = 0;
6a5fa236 1932 int val;
d5c5605c 1933 bool connected = false;
1da177e4 1934 __be16 orig_port = 0;
d5c5605c 1935 struct socket *socket = server->ssocket;
1da177e4 1936
d5c5605c 1937 if (socket == NULL) {
50c2f753 1938 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
d5c5605c 1939 IPPROTO_TCP, &socket);
1da177e4 1940 if (rc < 0) {
50c2f753 1941 cERROR(1, ("Error %d creating ipv6 socket", rc));
d5c5605c 1942 socket = NULL;
1da177e4 1943 return rc;
1da177e4 1944 }
1da177e4 1945
d5c5605c
JL
1946 /* BB other socket options to set KEEPALIVE, NODELAY? */
1947 cFYI(1, ("ipv6 Socket created"));
1948 server->ssocket = socket;
1949 socket->sk->sk_allocation = GFP_NOFS;
1950 cifs_reclassify_socket6(socket);
1951 }
1da177e4 1952
d5c5605c
JL
1953 /* user overrode default port */
1954 if (server->addr.sockAddr6.sin6_port) {
1955 rc = socket->ops->connect(socket,
1956 (struct sockaddr *) &server->addr.sockAddr6,
6345a3a8 1957 sizeof(struct sockaddr_in6), 0);
1da177e4 1958 if (rc >= 0)
d5c5605c 1959 connected = true;
50c2f753 1960 }
1da177e4 1961
fb8c4b14 1962 if (!connected) {
50c2f753 1963 /* save original port so we can retry user specified port
1da177e4
LT
1964 later if fall back ports fail this time */
1965
d5c5605c 1966 orig_port = server->addr.sockAddr6.sin6_port;
1da177e4 1967 /* do not retry on the same port we just failed on */
d5c5605c
JL
1968 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
1969 server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
1970 rc = socket->ops->connect(socket, (struct sockaddr *)
1971 &server->addr.sockAddr6,
6345a3a8 1972 sizeof(struct sockaddr_in6), 0);
1da177e4 1973 if (rc >= 0)
d5c5605c 1974 connected = true;
1da177e4
LT
1975 }
1976 }
1977 if (!connected) {
d5c5605c
JL
1978 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
1979 rc = socket->ops->connect(socket, (struct sockaddr *)
1980 &server->addr.sockAddr6,
1981 sizeof(struct sockaddr_in6), 0);
50c2f753 1982 if (rc >= 0)
d5c5605c 1983 connected = true;
1da177e4
LT
1984 }
1985
1986 /* give up here - unless we want to retry on different
1987 protocol families some day */
1988 if (!connected) {
fb8c4b14 1989 if (orig_port)
d5c5605c 1990 server->addr.sockAddr6.sin6_port = orig_port;
50c2f753 1991 cFYI(1, ("Error %d connecting to server via ipv6", rc));
d5c5605c
JL
1992 sock_release(socket);
1993 server->ssocket = NULL;
1da177e4
LT
1994 return rc;
1995 }
edf1ae40 1996
d5c5605c
JL
1997 /*
1998 * Eventually check for other socket options to change from
1999 * the default. sock_setsockopt not used because it expects
2000 * user space buffer
2001 */
2002 socket->sk->sk_rcvtimeo = 7 * HZ;
da505c38 2003 socket->sk->sk_sndtimeo = 5 * HZ;
6a5fa236
SF
2004
2005 if (server->tcp_nodelay) {
2006 val = 1;
2007 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2008 (char *)&val, sizeof(val));
2009 if (rc)
2010 cFYI(1, ("set TCP_NODELAY socket option error %d", rc));
2011 }
2012
d5c5605c 2013 server->ssocket = socket;
50c2f753 2014
1da177e4
LT
2015 return rc;
2016}
2017
50c2f753
SF
2018void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
2019 struct super_block *sb, struct smb_vol *vol_info)
8af18971
SF
2020{
2021 /* if we are reconnecting then should we check to see if
2022 * any requested capabilities changed locally e.g. via
2023 * remount but we can not do much about it here
2024 * if they have (even if we could detect it by the following)
2025 * Perhaps we could add a backpointer to array of sb from tcon
2026 * or if we change to make all sb to same share the same
2027 * sb as NFS - then we only have one backpointer to sb.
2028 * What if we wanted to mount the server share twice once with
2029 * and once without posixacls or posix paths? */
2030 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
50c2f753 2031
c18c842b
SF
2032 if (vol_info && vol_info->no_linux_ext) {
2033 tcon->fsUnixInfo.Capability = 0;
2034 tcon->unix_ext = 0; /* Unix Extensions disabled */
2035 cFYI(1, ("Linux protocol extensions disabled"));
2036 return;
2037 } else if (vol_info)
2038 tcon->unix_ext = 1; /* Unix Extensions supported */
2039
2040 if (tcon->unix_ext == 0) {
2041 cFYI(1, ("Unix extensions disabled so not set on reconnect"));
2042 return;
2043 }
50c2f753 2044
fb8c4b14 2045 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
8af18971 2046 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
50c2f753 2047
8af18971
SF
2048 /* check for reconnect case in which we do not
2049 want to change the mount behavior if we can avoid it */
fb8c4b14 2050 if (vol_info == NULL) {
50c2f753 2051 /* turn off POSIX ACL and PATHNAMES if not set
8af18971
SF
2052 originally at mount time */
2053 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2054 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
11b6d645
IM
2055 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2056 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2057 cERROR(1, ("POSIXPATH support change"));
8af18971 2058 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
11b6d645
IM
2059 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2060 cERROR(1, ("possible reconnect error"));
2061 cERROR(1,
2062 ("server disabled POSIX path support"));
2063 }
8af18971 2064 }
50c2f753 2065
8af18971 2066 cap &= CIFS_UNIX_CAP_MASK;
75865f8c 2067 if (vol_info && vol_info->no_psx_acl)
8af18971 2068 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
75865f8c 2069 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
fb8c4b14
SF
2070 cFYI(1, ("negotiated posix acl support"));
2071 if (sb)
8af18971
SF
2072 sb->s_flags |= MS_POSIXACL;
2073 }
2074
75865f8c 2075 if (vol_info && vol_info->posix_paths == 0)
8af18971 2076 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
75865f8c 2077 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
fb8c4b14 2078 cFYI(1, ("negotiate posix pathnames"));
75865f8c 2079 if (sb)
50c2f753 2080 CIFS_SB(sb)->mnt_cifs_flags |=
8af18971
SF
2081 CIFS_MOUNT_POSIX_PATHS;
2082 }
50c2f753 2083
984acfe1
SF
2084 /* We might be setting the path sep back to a different
2085 form if we are reconnecting and the server switched its
50c2f753 2086 posix path capability for this share */
75865f8c 2087 if (sb && (CIFS_SB(sb)->prepathlen > 0))
984acfe1 2088 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
75865f8c
SF
2089
2090 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2091 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2092 CIFS_SB(sb)->rsize = 127 * 1024;
90c81e0b
SF
2093 cFYI(DBG2,
2094 ("larger reads not supported by srv"));
75865f8c
SF
2095 }
2096 }
50c2f753
SF
2097
2098
2099 cFYI(1, ("Negotiate caps 0x%x", (int)cap));
8af18971 2100#ifdef CONFIG_CIFS_DEBUG2
75865f8c 2101 if (cap & CIFS_UNIX_FCNTL_CAP)
fb8c4b14 2102 cFYI(1, ("FCNTL cap"));
75865f8c 2103 if (cap & CIFS_UNIX_EXTATTR_CAP)
fb8c4b14 2104 cFYI(1, ("EXTATTR cap"));
75865f8c 2105 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
fb8c4b14 2106 cFYI(1, ("POSIX path cap"));
75865f8c 2107 if (cap & CIFS_UNIX_XATTR_CAP)
fb8c4b14 2108 cFYI(1, ("XATTR cap"));
75865f8c 2109 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
fb8c4b14 2110 cFYI(1, ("POSIX ACL cap"));
75865f8c 2111 if (cap & CIFS_UNIX_LARGE_READ_CAP)
fb8c4b14 2112 cFYI(1, ("very large read cap"));
75865f8c 2113 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
fb8c4b14 2114 cFYI(1, ("very large write cap"));
8af18971
SF
2115#endif /* CIFS_DEBUG2 */
2116 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
442aa310 2117 if (vol_info == NULL) {
5a44b319 2118 cFYI(1, ("resetting capabilities failed"));
442aa310 2119 } else
5a44b319
SF
2120 cERROR(1, ("Negotiating Unix capabilities "
2121 "with the server failed. Consider "
2122 "mounting with the Unix Extensions\n"
2123 "disabled, if problems are found, "
2124 "by specifying the nounix mount "
2224f4e5 2125 "option."));
5a44b319 2126
8af18971
SF
2127 }
2128 }
2129}
2130
03a143c9
SF
2131static void
2132convert_delimiter(char *path, char delim)
2133{
2134 int i;
c2d68ea6 2135 char old_delim;
03a143c9
SF
2136
2137 if (path == NULL)
2138 return;
2139
582d21e5 2140 if (delim == '/')
c2d68ea6
SF
2141 old_delim = '\\';
2142 else
2143 old_delim = '/';
2144
03a143c9 2145 for (i = 0; path[i] != '\0'; i++) {
c2d68ea6 2146 if (path[i] == old_delim)
03a143c9
SF
2147 path[i] = delim;
2148 }
2149}
2150
3b795210
SF
2151static void setup_cifs_sb(struct smb_vol *pvolume_info,
2152 struct cifs_sb_info *cifs_sb)
b1c8d2b4 2153{
3b795210
SF
2154 if (pvolume_info->rsize > CIFSMaxBufSize) {
2155 cERROR(1, ("rsize %d too large, using MaxBufSize",
2156 pvolume_info->rsize));
2157 cifs_sb->rsize = CIFSMaxBufSize;
2158 } else if ((pvolume_info->rsize) &&
2159 (pvolume_info->rsize <= CIFSMaxBufSize))
2160 cifs_sb->rsize = pvolume_info->rsize;
2161 else /* default */
2162 cifs_sb->rsize = CIFSMaxBufSize;
2163
2164 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2165 cERROR(1, ("wsize %d too large, using 4096 instead",
2166 pvolume_info->wsize));
2167 cifs_sb->wsize = 4096;
2168 } else if (pvolume_info->wsize)
2169 cifs_sb->wsize = pvolume_info->wsize;
2170 else
2171 cifs_sb->wsize = min_t(const int,
2172 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2173 127*1024);
2174 /* old default of CIFSMaxBufSize was too small now
2175 that SMB Write2 can send multiple pages in kvec.
2176 RFC1001 does not describe what happens when frame
2177 bigger than 128K is sent so use that as max in
2178 conjunction with 52K kvec constraint on arch with 4K
2179 page size */
2180
2181 if (cifs_sb->rsize < 2048) {
2182 cifs_sb->rsize = 2048;
2183 /* Windows ME may prefer this */
2184 cFYI(1, ("readsize set to minimum: 2048"));
2185 }
2186 /* calculate prepath */
2187 cifs_sb->prepath = pvolume_info->prepath;
2188 if (cifs_sb->prepath) {
2189 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2190 /* we can not convert the / to \ in the path
2191 separators in the prefixpath yet because we do not
2192 know (until reset_cifs_unix_caps is called later)
2193 whether POSIX PATH CAP is available. We normalize
2194 the / to \ after reset_cifs_unix_caps is called */
2195 pvolume_info->prepath = NULL;
2196 } else
2197 cifs_sb->prepathlen = 0;
2198 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2199 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2200 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2201 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2202 cFYI(1, ("file mode: 0x%x dir mode: 0x%x",
2203 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode));
2204
2205 if (pvolume_info->noperm)
2206 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2207 if (pvolume_info->setuids)
2208 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2209 if (pvolume_info->server_ino)
2210 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2211 if (pvolume_info->remap)
2212 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2213 if (pvolume_info->no_xattr)
2214 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2215 if (pvolume_info->sfu_emul)
2216 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2217 if (pvolume_info->nobrl)
2218 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
be652445 2219 if (pvolume_info->nostrictsync)
4717bed6 2220 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
13a6e42a
SF
2221 if (pvolume_info->mand_lock)
2222 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
3b795210
SF
2223 if (pvolume_info->cifs_acl)
2224 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2225 if (pvolume_info->override_uid)
2226 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2227 if (pvolume_info->override_gid)
2228 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2229 if (pvolume_info->dynperm)
2230 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2231 if (pvolume_info->direct_io) {
2232 cFYI(1, ("mounting share using direct i/o"));
2233 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2234 }
2235
2236 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2237 cERROR(1, ("mount option dynperm ignored if cifsacl "
2238 "mount option supported"));
b1c8d2b4
JL
2239}
2240
e4cce94c
IM
2241static int
2242is_path_accessible(int xid, struct cifsTconInfo *tcon,
2243 struct cifs_sb_info *cifs_sb, const char *full_path)
2244{
2245 int rc;
e4cce94c
IM
2246 FILE_ALL_INFO *pfile_info;
2247
e4cce94c
IM
2248 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2249 if (pfile_info == NULL)
2250 return -ENOMEM;
2251
2252 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2253 0 /* not legacy */, cifs_sb->local_nls,
2254 cifs_sb->mnt_cifs_flags &
2255 CIFS_MOUNT_MAP_SPECIAL_CHR);
2256 kfree(pfile_info);
2257 return rc;
2258}
2259
1bfe73c2
IM
2260static void
2261cleanup_volume_info(struct smb_vol **pvolume_info)
2262{
2263 struct smb_vol *volume_info;
2264
2265 if (!pvolume_info && !*pvolume_info)
2266 return;
2267
2268 volume_info = *pvolume_info;
2269 kzfree(volume_info->password);
2270 kfree(volume_info->UNC);
2271 kfree(volume_info->prepath);
2272 kfree(volume_info);
2273 *pvolume_info = NULL;
2274 return;
2275}
2276
2d6d589d 2277#ifdef CONFIG_CIFS_DFS_UPCALL
1bfe73c2
IM
2278/* build_path_to_root returns full path to root when
2279 * we do not have an exiting connection (tcon) */
2280static char *
2281build_unc_path_to_root(const struct smb_vol *volume_info,
2282 const struct cifs_sb_info *cifs_sb)
2283{
2284 char *full_path;
2285
2286 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2287 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2288 if (full_path == NULL)
2289 return ERR_PTR(-ENOMEM);
2290
2291 strncpy(full_path, volume_info->UNC, unc_len);
2292 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2293 int i;
2294 for (i = 0; i < unc_len; i++) {
2295 if (full_path[i] == '\\')
2296 full_path[i] = '/';
2297 }
2298 }
2299
2300 if (cifs_sb->prepathlen)
2301 strncpy(full_path + unc_len, cifs_sb->prepath,
2302 cifs_sb->prepathlen);
2303
2304 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2305 return full_path;
2306}
2d6d589d 2307#endif
1bfe73c2 2308
1da177e4
LT
2309int
2310cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
1bfe73c2 2311 char *mount_data_global, const char *devname)
1da177e4 2312{
a2934c7b 2313 int rc;
1da177e4 2314 int xid;
7586b765 2315 struct smb_vol *volume_info;
a2934c7b
JL
2316 struct cifsSesInfo *pSesInfo;
2317 struct cifsTconInfo *tcon;
2318 struct TCP_Server_Info *srvTcp;
e4cce94c 2319 char *full_path;
2d6d589d
SF
2320 char *mount_data = mount_data_global;
2321#ifdef CONFIG_CIFS_DFS_UPCALL
1bfe73c2
IM
2322 struct dfs_info3_param *referrals = NULL;
2323 unsigned int num_referrals = 0;
5c2503a8 2324 int referral_walks_count = 0;
1bfe73c2 2325try_mount_again:
2d6d589d 2326#endif
a2934c7b
JL
2327 rc = 0;
2328 tcon = NULL;
2329 pSesInfo = NULL;
2330 srvTcp = NULL;
1bfe73c2 2331 full_path = NULL;
1da177e4
LT
2332
2333 xid = GetXid();
2334
7586b765
JL
2335 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2336 if (!volume_info) {
2337 rc = -ENOMEM;
2338 goto out;
2339 }
50c2f753 2340
7586b765 2341 if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
70fe7dc0
JL
2342 rc = -EINVAL;
2343 goto out;
1da177e4
LT
2344 }
2345
7586b765 2346 if (volume_info->nullauth) {
fb8c4b14 2347 cFYI(1, ("null user"));
7586b765
JL
2348 volume_info->username = "";
2349 } else if (volume_info->username) {
1da177e4 2350 /* BB fixme parse for domain name here */
7586b765 2351 cFYI(1, ("Username: %s", volume_info->username));
1da177e4 2352 } else {
bf820679 2353 cifserror("No username specified");
50c2f753
SF
2354 /* In userspace mount helper we can get user name from alternate
2355 locations such as env variables and files on disk */
70fe7dc0
JL
2356 rc = -EINVAL;
2357 goto out;
1da177e4
LT
2358 }
2359
1da177e4
LT
2360
2361 /* this is needed for ASCII cp to Unicode converts */
7586b765 2362 if (volume_info->iocharset == NULL) {
1da177e4
LT
2363 cifs_sb->local_nls = load_nls_default();
2364 /* load_nls_default can not return null */
2365 } else {
7586b765 2366 cifs_sb->local_nls = load_nls(volume_info->iocharset);
fb8c4b14 2367 if (cifs_sb->local_nls == NULL) {
50c2f753 2368 cERROR(1, ("CIFS mount error: iocharset %s not found",
7586b765 2369 volume_info->iocharset));
70fe7dc0
JL
2370 rc = -ELIBACC;
2371 goto out;
1da177e4
LT
2372 }
2373 }
2374
63c038c2 2375 /* get a reference to a tcp session */
7586b765 2376 srvTcp = cifs_get_tcp_session(volume_info);
63c038c2
JL
2377 if (IS_ERR(srvTcp)) {
2378 rc = PTR_ERR(srvTcp);
2379 goto out;
1da177e4
LT
2380 }
2381
7586b765 2382 pSesInfo = cifs_find_smb_ses(srvTcp, volume_info->username);
14fbf50d 2383 if (pSesInfo) {
1d9a8852
JL
2384 cFYI(1, ("Existing smb sess found (status=%d)",
2385 pSesInfo->status));
14fbf50d
JL
2386 /*
2387 * The existing SMB session already has a reference to srvTcp,
2388 * so we can put back the extra one we got before
2389 */
2390 cifs_put_tcp_session(srvTcp);
2391
d7b619cf 2392 mutex_lock(&pSesInfo->session_mutex);
3b795210 2393 if (pSesInfo->need_reconnect) {
1d9a8852 2394 cFYI(1, ("Session needs reconnect"));
1d9a8852
JL
2395 rc = cifs_setup_session(xid, pSesInfo,
2396 cifs_sb->local_nls);
1d9a8852 2397 }
d7b619cf 2398 mutex_unlock(&pSesInfo->session_mutex);
1da177e4 2399 } else if (!rc) {
bf820679 2400 cFYI(1, ("Existing smb sess not found"));
1da177e4 2401 pSesInfo = sesInfoAlloc();
14fbf50d 2402 if (pSesInfo == NULL) {
1da177e4 2403 rc = -ENOMEM;
14fbf50d 2404 goto mount_fail_check;
1da177e4
LT
2405 }
2406
14fbf50d
JL
2407 /* new SMB session uses our srvTcp ref */
2408 pSesInfo->server = srvTcp;
63c038c2 2409 if (srvTcp->addr.sockAddr6.sin6_family == AF_INET6)
0191b625
LT
2410 sprintf(pSesInfo->serverName, "%pI6",
2411 &srvTcp->addr.sockAddr6.sin6_addr);
8ecaf67a 2412 else
0191b625
LT
2413 sprintf(pSesInfo->serverName, "%pI4",
2414 &srvTcp->addr.sockAddr.sin_addr.s_addr);
14fbf50d
JL
2415
2416 write_lock(&cifs_tcp_ses_lock);
2417 list_add(&pSesInfo->smb_ses_list, &srvTcp->smb_ses_list);
2418 write_unlock(&cifs_tcp_ses_lock);
2419
7586b765
JL
2420 /* volume_info->password freed at unmount */
2421 if (volume_info->password) {
00e485b0
JL
2422 pSesInfo->password = kstrdup(volume_info->password,
2423 GFP_KERNEL);
2424 if (!pSesInfo->password) {
2425 rc = -ENOMEM;
2426 goto mount_fail_check;
2427 }
14fbf50d 2428 }
7586b765
JL
2429 if (volume_info->username)
2430 strncpy(pSesInfo->userName, volume_info->username,
14fbf50d 2431 MAX_USERNAME_SIZE);
7586b765
JL
2432 if (volume_info->domainname) {
2433 int len = strlen(volume_info->domainname);
14fbf50d
JL
2434 pSesInfo->domainName = kmalloc(len + 1, GFP_KERNEL);
2435 if (pSesInfo->domainName)
2436 strcpy(pSesInfo->domainName,
7586b765 2437 volume_info->domainname);
70fe7dc0 2438 }
7586b765
JL
2439 pSesInfo->linux_uid = volume_info->linux_uid;
2440 pSesInfo->overrideSecFlg = volume_info->secFlg;
d7b619cf 2441 mutex_lock(&pSesInfo->session_mutex);
1da177e4 2442
14fbf50d
JL
2443 /* BB FIXME need to pass vol->secFlgs BB */
2444 rc = cifs_setup_session(xid, pSesInfo,
2445 cifs_sb->local_nls);
d7b619cf 2446 mutex_unlock(&pSesInfo->session_mutex);
1da177e4 2447 }
50c2f753 2448
1da177e4
LT
2449 /* search for existing tcon to this server share */
2450 if (!rc) {
7586b765 2451 setup_cifs_sb(volume_info, cifs_sb);
1da177e4 2452
7586b765 2453 tcon = cifs_find_tcon(pSesInfo, volume_info->UNC);
1da177e4 2454 if (tcon) {
bf820679 2455 cFYI(1, ("Found match on UNC path"));
f1987b44
JL
2456 /* existing tcon already has a reference */
2457 cifs_put_smb_ses(pSesInfo);
7586b765 2458 if (tcon->seal != volume_info->seal)
95b1cb90
SF
2459 cERROR(1, ("transport encryption setting "
2460 "conflicts with existing tid"));
1da177e4
LT
2461 } else {
2462 tcon = tconInfoAlloc();
3b795210 2463 if (tcon == NULL) {
1da177e4 2464 rc = -ENOMEM;
3b795210
SF
2465 goto mount_fail_check;
2466 }
00e485b0 2467
ab3f9929 2468 tcon->ses = pSesInfo;
00e485b0
JL
2469 if (volume_info->password) {
2470 tcon->password = kstrdup(volume_info->password,
2471 GFP_KERNEL);
2472 if (!tcon->password) {
2473 rc = -ENOMEM;
2474 goto mount_fail_check;
2475 }
2476 }
3b795210 2477
7586b765
JL
2478 if ((strchr(volume_info->UNC + 3, '\\') == NULL)
2479 && (strchr(volume_info->UNC + 3, '/') == NULL)) {
1bfe73c2 2480 cERROR(1, ("Missing share name"));
3b795210
SF
2481 rc = -ENODEV;
2482 goto mount_fail_check;
2483 } else {
2484 /* BB Do we need to wrap sesSem around
2485 * this TCon call and Unix SetFS as
2486 * we do on SessSetup and reconnect? */
7586b765 2487 rc = CIFSTCon(xid, pSesInfo, volume_info->UNC,
3b795210
SF
2488 tcon, cifs_sb->local_nls);
2489 cFYI(1, ("CIFS Tcon rc = %d", rc));
7586b765 2490 if (volume_info->nodfs) {
3b795210
SF
2491 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2492 cFYI(1, ("DFS disabled (%d)",
2493 tcon->Flags));
1da177e4
LT
2494 }
2495 }
14fbf50d 2496 if (rc)
1bfe73c2 2497 goto remote_path_check;
7586b765 2498 tcon->seal = volume_info->seal;
f1987b44
JL
2499 write_lock(&cifs_tcp_ses_lock);
2500 list_add(&tcon->tcon_list, &pSesInfo->tcon_list);
2501 write_unlock(&cifs_tcp_ses_lock);
1da177e4 2502 }
3b795210
SF
2503
2504 /* we can have only one retry value for a connection
2505 to a share so for resources mounted more than once
2506 to the same server share the last value passed in
2507 for the retry flag is used */
7586b765
JL
2508 tcon->retry = volume_info->retry;
2509 tcon->nocase = volume_info->nocase;
2510 tcon->local_lease = volume_info->local_lease;
1da177e4 2511 }
4523cc30 2512 if (pSesInfo) {
03aa3a49
JL
2513 if (pSesInfo->capabilities & CAP_LARGE_FILES)
2514 sb->s_maxbytes = MAX_LFS_FILESIZE;
2515 else
2516 sb->s_maxbytes = MAX_NON_LFS;
1da177e4
LT
2517 }
2518
8af18971 2519 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
1da177e4
LT
2520 sb->s_time_gran = 100;
2521
1bfe73c2
IM
2522 if (rc)
2523 goto remote_path_check;
2524
d82c2df5 2525 cifs_sb->tcon = tcon;
c18c842b 2526
d82c2df5
SF
2527 /* do not care if following two calls succeed - informational */
2528 if (!tcon->ipc) {
2529 CIFSSMBQFSDeviceInfo(xid, tcon);
2530 CIFSSMBQFSAttributeInfo(xid, tcon);
2531 }
03a143c9 2532
d82c2df5
SF
2533 /* tell server which Unix caps we support */
2534 if (tcon->ses->capabilities & CAP_UNIX)
2535 /* reset of caps checks mount to see if unix extensions
2536 disabled for just this mount */
7586b765 2537 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
d82c2df5
SF
2538 else
2539 tcon->unix_ext = 0; /* server does not support them */
c18c842b 2540
d82c2df5
SF
2541 /* convert forward to back slashes in prepath here if needed */
2542 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2543 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
03a143c9 2544
d82c2df5
SF
2545 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2546 cifs_sb->rsize = 1024 * 127;
2547 cFYI(DBG2, ("no very large read support, rsize now 127K"));
1da177e4 2548 }
d82c2df5
SF
2549 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2550 cifs_sb->wsize = min(cifs_sb->wsize,
2551 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2552 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2553 cifs_sb->rsize = min(cifs_sb->rsize,
2554 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
1da177e4 2555
1bfe73c2
IM
2556remote_path_check:
2557 /* check if a whole path (including prepath) is not remote */
2558 if (!rc && cifs_sb->prepathlen && tcon) {
e4cce94c
IM
2559 /* build_path_to_root works only when we have a valid tcon */
2560 full_path = cifs_build_path_to_root(cifs_sb);
2561 if (full_path == NULL) {
2562 rc = -ENOMEM;
2563 goto mount_fail_check;
2564 }
2565 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
1bfe73c2 2566 if (rc != -EREMOTE) {
e4cce94c
IM
2567 kfree(full_path);
2568 goto mount_fail_check;
2569 }
2570 kfree(full_path);
2571 }
2572
1bfe73c2
IM
2573 /* get referral if needed */
2574 if (rc == -EREMOTE) {
d036f50f 2575#ifdef CONFIG_CIFS_DFS_UPCALL
5c2503a8
IM
2576 if (referral_walks_count > MAX_NESTED_LINKS) {
2577 /*
2578 * BB: when we implement proper loop detection,
2579 * we will remove this check. But now we need it
2580 * to prevent an indefinite loop if 'DFS tree' is
2581 * misconfigured (i.e. has loops).
2582 */
2583 rc = -ELOOP;
2584 goto mount_fail_check;
2585 }
1bfe73c2
IM
2586 /* convert forward to back slashes in prepath here if needed */
2587 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2588 convert_delimiter(cifs_sb->prepath,
2589 CIFS_DIR_SEP(cifs_sb));
2590 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2591 if (IS_ERR(full_path)) {
2592 rc = PTR_ERR(full_path);
2593 goto mount_fail_check;
2594 }
2595
2596 cFYI(1, ("Getting referral for: %s", full_path));
2597 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2598 cifs_sb->local_nls, &num_referrals, &referrals,
2599 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2600 if (!rc && num_referrals > 0) {
2601 char *fake_devname = NULL;
2602
2603 if (mount_data != mount_data_global)
2604 kfree(mount_data);
7b91e266 2605
1bfe73c2
IM
2606 mount_data = cifs_compose_mount_options(
2607 cifs_sb->mountdata, full_path + 1,
2608 referrals, &fake_devname);
7b91e266 2609
1bfe73c2 2610 free_dfs_info_array(referrals, num_referrals);
7b91e266
JL
2611 kfree(fake_devname);
2612 kfree(full_path);
2613
2614 if (IS_ERR(mount_data)) {
2615 rc = PTR_ERR(mount_data);
2616 mount_data = NULL;
2617 goto mount_fail_check;
2618 }
1bfe73c2
IM
2619
2620 if (tcon)
2621 cifs_put_tcon(tcon);
2622 else if (pSesInfo)
2623 cifs_put_smb_ses(pSesInfo);
2624
2625 cleanup_volume_info(&volume_info);
5c2503a8 2626 referral_walks_count++;
a2934c7b 2627 FreeXid(xid);
1bfe73c2
IM
2628 goto try_mount_again;
2629 }
d036f50f
SF
2630#else /* No DFS support, return error on mount */
2631 rc = -EOPNOTSUPP;
2632#endif
1bfe73c2
IM
2633 }
2634
2635mount_fail_check:
2636 /* on error free sesinfo and tcon struct if needed */
2637 if (rc) {
2638 if (mount_data != mount_data_global)
2639 kfree(mount_data);
2640 /* If find_unc succeeded then rc == 0 so we can not end */
2641 /* up accidently freeing someone elses tcon struct */
2642 if (tcon)
2643 cifs_put_tcon(tcon);
2644 else if (pSesInfo)
2645 cifs_put_smb_ses(pSesInfo);
2646 else
2647 cifs_put_tcp_session(srvTcp);
2648 goto out;
2649 }
2650
7586b765 2651 /* volume_info->password is freed above when existing session found
1da177e4
LT
2652 (in which case it is not needed anymore) but when new sesion is created
2653 the password ptr is put in the new session structure (in which case the
2654 password will be freed at unmount time) */
70fe7dc0
JL
2655out:
2656 /* zero out password before freeing */
1bfe73c2 2657 cleanup_volume_info(&volume_info);
1da177e4
LT
2658 FreeXid(xid);
2659 return rc;
2660}
2661
1da177e4
LT
2662int
2663CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2664 const char *tree, struct cifsTconInfo *tcon,
2665 const struct nls_table *nls_codepage)
2666{
2667 struct smb_hdr *smb_buffer;
2668 struct smb_hdr *smb_buffer_response;
2669 TCONX_REQ *pSMB;
2670 TCONX_RSP *pSMBr;
2671 unsigned char *bcc_ptr;
2672 int rc = 0;
cc20c031 2673 int length, bytes_left;
1da177e4
LT
2674 __u16 count;
2675
2676 if (ses == NULL)
2677 return -EIO;
2678
2679 smb_buffer = cifs_buf_get();
ca43e3be 2680 if (smb_buffer == NULL)
1da177e4 2681 return -ENOMEM;
ca43e3be 2682
1da177e4
LT
2683 smb_buffer_response = smb_buffer;
2684
2685 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2686 NULL /*no tid */ , 4 /*wct */ );
1982c344
SF
2687
2688 smb_buffer->Mid = GetNextMid(ses->server);
1da177e4
LT
2689 smb_buffer->Uid = ses->Suid;
2690 pSMB = (TCONX_REQ *) smb_buffer;
2691 pSMBr = (TCONX_RSP *) smb_buffer_response;
2692
2693 pSMB->AndXCommand = 0xFF;
2694 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
1da177e4 2695 bcc_ptr = &pSMB->Password[0];
fb8c4b14 2696 if ((ses->server->secMode) & SECMODE_USER) {
eeac8047 2697 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
7c7b25bc 2698 *bcc_ptr = 0; /* password is null byte */
eeac8047 2699 bcc_ptr++; /* skip password */
7c7b25bc 2700 /* already aligned so no need to do it below */
eeac8047 2701 } else {
7c7b25bc 2702 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
eeac8047
SF
2703 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2704 specified as required (when that support is added to
2705 the vfs in the future) as only NTLM or the much
7c7b25bc 2706 weaker LANMAN (which we do not send by default) is accepted
eeac8047
SF
2707 by Samba (not sure whether other servers allow
2708 NTLMv2 password here) */
7c7b25bc 2709#ifdef CONFIG_CIFS_WEAK_PW_HASH
50c2f753 2710 if ((extended_security & CIFSSEC_MAY_LANMAN) &&
00e485b0
JL
2711 (ses->server->secType == LANMAN))
2712 calc_lanman_hash(tcon->password, ses->server->cryptKey,
4e53a3fb
JL
2713 ses->server->secMode &
2714 SECMODE_PW_ENCRYPT ? true : false,
2715 bcc_ptr);
7c7b25bc
SF
2716 else
2717#endif /* CIFS_WEAK_PW_HASH */
00e485b0 2718 SMBNTencrypt(tcon->password, ses->server->cryptKey,
eeac8047
SF
2719 bcc_ptr);
2720
7c7b25bc 2721 bcc_ptr += CIFS_SESS_KEY_SIZE;
fb8c4b14 2722 if (ses->capabilities & CAP_UNICODE) {
7c7b25bc
SF
2723 /* must align unicode strings */
2724 *bcc_ptr = 0; /* null byte password */
2725 bcc_ptr++;
2726 }
eeac8047 2727 }
1da177e4 2728
50c2f753 2729 if (ses->server->secMode &
a878fb22 2730 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
1da177e4
LT
2731 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2732
2733 if (ses->capabilities & CAP_STATUS32) {
2734 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2735 }
2736 if (ses->capabilities & CAP_DFS) {
2737 smb_buffer->Flags2 |= SMBFLG2_DFS;
2738 }
2739 if (ses->capabilities & CAP_UNICODE) {
2740 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2741 length =
50c2f753
SF
2742 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2743 6 /* max utf8 char length in bytes */ *
a878fb22
SF
2744 (/* server len*/ + 256 /* share len */), nls_codepage);
2745 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
1da177e4
LT
2746 bcc_ptr += 2; /* skip trailing null */
2747 } else { /* ASCII */
1da177e4
LT
2748 strcpy(bcc_ptr, tree);
2749 bcc_ptr += strlen(tree) + 1;
2750 }
2751 strcpy(bcc_ptr, "?????");
2752 bcc_ptr += strlen("?????");
2753 bcc_ptr += 1;
2754 count = bcc_ptr - &pSMB->Password[0];
2755 pSMB->hdr.smb_buf_length += count;
2756 pSMB->ByteCount = cpu_to_le16(count);
2757
133672ef
SF
2758 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2759 CIFS_STD_OP);
1da177e4 2760
1da177e4
LT
2761 /* above now done in SendReceive */
2762 if ((rc == 0) && (tcon != NULL)) {
0e0d2cf3
SF
2763 bool is_unicode;
2764
1da177e4 2765 tcon->tidStatus = CifsGood;
3b795210 2766 tcon->need_reconnect = false;
1da177e4
LT
2767 tcon->tid = smb_buffer_response->Tid;
2768 bcc_ptr = pByteArea(smb_buffer_response);
cc20c031
JL
2769 bytes_left = BCC(smb_buffer_response);
2770 length = strnlen(bcc_ptr, bytes_left - 2);
0e0d2cf3
SF
2771 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
2772 is_unicode = true;
2773 else
2774 is_unicode = false;
2775
cc20c031 2776
50c2f753 2777 /* skip service field (NB: this field is always ASCII) */
7f8ed420
SF
2778 if (length == 3) {
2779 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
2780 (bcc_ptr[2] == 'C')) {
2781 cFYI(1, ("IPC connection"));
2782 tcon->ipc = 1;
2783 }
2784 } else if (length == 2) {
2785 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
2786 /* the most common case */
2787 cFYI(1, ("disk share connection"));
2788 }
2789 }
50c2f753 2790 bcc_ptr += length + 1;
cc20c031 2791 bytes_left -= (length + 1);
1da177e4 2792 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
cc20c031
JL
2793
2794 /* mostly informational -- no need to fail on error here */
90a98b2f 2795 kfree(tcon->nativeFileSystem);
d185cda7 2796 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
0e0d2cf3 2797 bytes_left, is_unicode,
cc20c031
JL
2798 nls_codepage);
2799
2800 cFYI(1, ("nativeFileSystem=%s", tcon->nativeFileSystem));
2801
fb8c4b14 2802 if ((smb_buffer_response->WordCount == 3) ||
1a4e15a0
SF
2803 (smb_buffer_response->WordCount == 7))
2804 /* field is in same location */
3979877e
SF
2805 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
2806 else
2807 tcon->Flags = 0;
1da177e4
LT
2808 cFYI(1, ("Tcon flags: 0x%x ", tcon->Flags));
2809 } else if ((rc == 0) && tcon == NULL) {
50c2f753 2810 /* all we need to save for IPC$ connection */
1da177e4
LT
2811 ses->ipc_tid = smb_buffer_response->Tid;
2812 }
2813
a8a11d39 2814 cifs_buf_release(smb_buffer);
1da177e4
LT
2815 return rc;
2816}
2817
2818int
2819cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
2820{
2821 int rc = 0;
50c2f753 2822 char *tmp;
1da177e4 2823
f1987b44
JL
2824 if (cifs_sb->tcon)
2825 cifs_put_tcon(cifs_sb->tcon);
50c2f753 2826
1da177e4 2827 cifs_sb->tcon = NULL;
2fe87f02
SF
2828 tmp = cifs_sb->prepath;
2829 cifs_sb->prepathlen = 0;
2830 cifs_sb->prepath = NULL;
2831 kfree(tmp);
1da177e4 2832
88e7d705 2833 return rc;
50c2f753 2834}
1da177e4
LT
2835
2836int cifs_setup_session(unsigned int xid, struct cifsSesInfo *pSesInfo,
50c2f753 2837 struct nls_table *nls_info)
1da177e4
LT
2838{
2839 int rc = 0;
ad009ac9 2840 int first_time = 0;
cb7691b6 2841 struct TCP_Server_Info *server = pSesInfo->server;
1da177e4
LT
2842
2843 /* what if server changes its buffer size after dropping the session? */
cb7691b6 2844 if (server->maxBuf == 0) /* no need to send on reconnect */ {
1da177e4 2845 rc = CIFSSMBNegotiate(xid, pSesInfo);
cb7691b6
JL
2846 if (rc == -EAGAIN) {
2847 /* retry only once on 1st time connection */
1da177e4 2848 rc = CIFSSMBNegotiate(xid, pSesInfo);
50c2f753 2849 if (rc == -EAGAIN)
1da177e4
LT
2850 rc = -EHOSTDOWN;
2851 }
fb8c4b14 2852 if (rc == 0) {
1da177e4 2853 spin_lock(&GlobalMid_Lock);
cb7691b6
JL
2854 if (server->tcpStatus != CifsExiting)
2855 server->tcpStatus = CifsGood;
1da177e4
LT
2856 else
2857 rc = -EHOSTDOWN;
2858 spin_unlock(&GlobalMid_Lock);
2859
2860 }
ad009ac9 2861 first_time = 1;
1da177e4 2862 }
26b994fa
SF
2863
2864 if (rc)
2865 goto ss_err_exit;
2866
2867 pSesInfo->flags = 0;
cb7691b6 2868 pSesInfo->capabilities = server->capabilities;
26b994fa
SF
2869 if (linuxExtEnabled == 0)
2870 pSesInfo->capabilities &= (~CAP_UNIX);
20418acd 2871
26b994fa 2872 cFYI(1, ("Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
cb7691b6
JL
2873 server->secMode, server->capabilities, server->timeAdj));
2874
20418acd 2875 rc = CIFS_SessSetup(xid, pSesInfo, first_time, nls_info);
26b994fa
SF
2876 if (rc) {
2877 cERROR(1, ("Send error in SessSetup = %d", rc));
2878 } else {
2879 cFYI(1, ("CIFS Session Established successfully"));
20418acd
SF
2880 spin_lock(&GlobalMid_Lock);
2881 pSesInfo->status = CifsGood;
2882 pSesInfo->need_reconnect = false;
2883 spin_unlock(&GlobalMid_Lock);
1da177e4 2884 }
26b994fa 2885
1da177e4
LT
2886ss_err_exit:
2887 return rc;
2888}
2889