]> git.ipfire.org Git - thirdparty/linux.git/blame - fs/cifs/connect.c
cifs: factor smb_vol allocation out of cifs_setup_volume_info
[thirdparty/linux.git] / fs / cifs / connect.c
CommitLineData
1da177e4
LT
1/*
2 * fs/cifs/connect.c
3 *
d185cda7 4 * Copyright (C) International Business Machines Corp., 2002,2009
1da177e4
LT
5 * Author(s): Steve French (sfrench@us.ibm.com)
6 *
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
fb8c4b14 19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
1da177e4
LT
20 */
21#include <linux/fs.h>
22#include <linux/net.h>
23#include <linux/string.h>
24#include <linux/list.h>
25#include <linux/wait.h>
5a0e3ad6 26#include <linux/slab.h>
1da177e4
LT
27#include <linux/pagemap.h>
28#include <linux/ctype.h>
29#include <linux/utsname.h>
30#include <linux/mempool.h>
b8643e1b 31#include <linux/delay.h>
f191401f 32#include <linux/completion.h>
aaf737ad 33#include <linux/kthread.h>
0ae0efad 34#include <linux/pagevec.h>
7dfb7103 35#include <linux/freezer.h>
5c2503a8 36#include <linux/namei.h>
1da177e4
LT
37#include <asm/uaccess.h>
38#include <asm/processor.h>
50b64e3b 39#include <linux/inet.h>
0e2bedaa 40#include <net/ipv6.h>
1da177e4
LT
41#include "cifspdu.h"
42#include "cifsglob.h"
43#include "cifsproto.h"
44#include "cifs_unicode.h"
45#include "cifs_debug.h"
46#include "cifs_fs_sb.h"
47#include "ntlmssp.h"
48#include "nterr.h"
49#include "rfc1002pdu.h"
488f1d2d 50#include "fscache.h"
1da177e4
LT
51
52#define CIFS_PORT 445
53#define RFC1001_PORT 139
54
c74093b6
JL
55/* SMB echo "timeout" -- FIXME: tunable? */
56#define SMB_ECHO_INTERVAL (60 * HZ)
57
1da177e4
LT
58extern mempool_t *cifs_req_poolp;
59
2de970ff 60/* FIXME: should these be tunable? */
9d002df4 61#define TLINK_ERROR_EXPIRE (1 * HZ)
2de970ff 62#define TLINK_IDLE_EXPIRE (600 * HZ)
9d002df4 63
a9f1b85e
PS
64static int ip_connect(struct TCP_Server_Info *server);
65static int generic_ip_connect(struct TCP_Server_Info *server);
b647c35f 66static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
2de970ff 67static void cifs_prune_tlinks(struct work_struct *work);
1da177e4 68
d5c5605c
JL
69/*
70 * cifs tcp session reconnection
71 *
72 * mark tcp session as reconnecting so temporarily locked
73 * mark all smb sessions as reconnecting for tcp session
74 * reconnect tcp session
75 * wake up waiters on reconnection? - (not needed currently)
76 */
2cd646a2 77static int
1da177e4
LT
78cifs_reconnect(struct TCP_Server_Info *server)
79{
80 int rc = 0;
f1987b44 81 struct list_head *tmp, *tmp2;
96daf2b0
SF
82 struct cifs_ses *ses;
83 struct cifs_tcon *tcon;
fb8c4b14 84 struct mid_q_entry *mid_entry;
3c1105df 85 struct list_head retry_list;
50c2f753 86
1da177e4 87 spin_lock(&GlobalMid_Lock);
469ee614 88 if (server->tcpStatus == CifsExiting) {
fb8c4b14 89 /* the demux thread will exit normally
1da177e4
LT
90 next time through the loop */
91 spin_unlock(&GlobalMid_Lock);
92 return rc;
93 } else
94 server->tcpStatus = CifsNeedReconnect;
95 spin_unlock(&GlobalMid_Lock);
96 server->maxBuf = 0;
97
b6b38f70 98 cFYI(1, "Reconnecting tcp session");
1da177e4
LT
99
100 /* before reconnecting the tcp session, mark the smb session (uid)
101 and the tid bad so they are not used until reconnected */
2b84a36c 102 cFYI(1, "%s: marking sessions and tcons for reconnect", __func__);
3f9bcca7 103 spin_lock(&cifs_tcp_ses_lock);
14fbf50d 104 list_for_each(tmp, &server->smb_ses_list) {
96daf2b0 105 ses = list_entry(tmp, struct cifs_ses, smb_ses_list);
14fbf50d
JL
106 ses->need_reconnect = true;
107 ses->ipc_tid = 0;
f1987b44 108 list_for_each(tmp2, &ses->tcon_list) {
96daf2b0 109 tcon = list_entry(tmp2, struct cifs_tcon, tcon_list);
3b795210 110 tcon->need_reconnect = true;
1da177e4 111 }
1da177e4 112 }
3f9bcca7 113 spin_unlock(&cifs_tcp_ses_lock);
2b84a36c 114
1da177e4 115 /* do not want to be sending data on a socket we are freeing */
2b84a36c 116 cFYI(1, "%s: tearing down socket", __func__);
72ca545b 117 mutex_lock(&server->srv_mutex);
fb8c4b14 118 if (server->ssocket) {
b6b38f70
JP
119 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
120 server->ssocket->flags);
91cf45f0 121 kernel_sock_shutdown(server->ssocket, SHUT_WR);
b6b38f70 122 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
467a8f8d 123 server->ssocket->state,
b6b38f70 124 server->ssocket->flags);
1da177e4
LT
125 sock_release(server->ssocket);
126 server->ssocket = NULL;
127 }
5d0d2882
SP
128 server->sequence_number = 0;
129 server->session_estab = false;
21e73393
SP
130 kfree(server->session_key.response);
131 server->session_key.response = NULL;
132 server->session_key.len = 0;
fda35943 133 server->lstrp = jiffies;
2b84a36c 134 mutex_unlock(&server->srv_mutex);
1da177e4 135
2b84a36c 136 /* mark submitted MIDs for retry and issue callback */
3c1105df
JL
137 INIT_LIST_HEAD(&retry_list);
138 cFYI(1, "%s: moving mids to private list", __func__);
1da177e4 139 spin_lock(&GlobalMid_Lock);
2b84a36c
JL
140 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
141 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
142 if (mid_entry->midState == MID_REQUEST_SUBMITTED)
ad8b15f0 143 mid_entry->midState = MID_RETRY_NEEDED;
3c1105df
JL
144 list_move(&mid_entry->qhead, &retry_list);
145 }
146 spin_unlock(&GlobalMid_Lock);
147
148 cFYI(1, "%s: issuing mid callbacks", __func__);
149 list_for_each_safe(tmp, tmp2, &retry_list) {
150 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
2b84a36c
JL
151 list_del_init(&mid_entry->qhead);
152 mid_entry->callback(mid_entry);
1da177e4 153 }
1da177e4 154
7fdbaa1b 155 do {
6c3d8909 156 try_to_freeze();
a9f1b85e
PS
157
158 /* we should try only the port we connected to before */
159 rc = generic_ip_connect(server);
fb8c4b14 160 if (rc) {
b6b38f70 161 cFYI(1, "reconnect error %d", rc);
0cb766ae 162 msleep(3000);
1da177e4
LT
163 } else {
164 atomic_inc(&tcpSesReconnectCount);
165 spin_lock(&GlobalMid_Lock);
469ee614 166 if (server->tcpStatus != CifsExiting)
fd88ce93 167 server->tcpStatus = CifsNeedNegotiate;
fb8c4b14 168 spin_unlock(&GlobalMid_Lock);
1da177e4 169 }
7fdbaa1b 170 } while (server->tcpStatus == CifsNeedReconnect);
2b84a36c 171
1da177e4
LT
172 return rc;
173}
174
fb8c4b14 175/*
e4eb295d
SF
176 return codes:
177 0 not a transact2, or all data present
178 >0 transact2 with that much data missing
179 -EINVAL = invalid transact2
180
181 */
fb8c4b14 182static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
e4eb295d 183{
fb8c4b14 184 struct smb_t2_rsp *pSMBt;
e4eb295d 185 int remaining;
26ec2548 186 __u16 total_data_size, data_in_this_rsp;
e4eb295d 187
fb8c4b14 188 if (pSMB->Command != SMB_COM_TRANSACTION2)
e4eb295d
SF
189 return 0;
190
fb8c4b14
SF
191 /* check for plausible wct, bcc and t2 data and parm sizes */
192 /* check for parm and data offset going beyond end of smb */
193 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
b6b38f70 194 cFYI(1, "invalid transact2 word count");
e4eb295d
SF
195 return -EINVAL;
196 }
197
198 pSMBt = (struct smb_t2_rsp *)pSMB;
199
26ec2548
JL
200 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
201 data_in_this_rsp = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
e4eb295d 202
c0c7b905 203 if (total_data_size == data_in_this_rsp)
e4eb295d 204 return 0;
c0c7b905 205 else if (total_data_size < data_in_this_rsp) {
b6b38f70
JP
206 cFYI(1, "total data %d smaller than data in frame %d",
207 total_data_size, data_in_this_rsp);
e4eb295d 208 return -EINVAL;
e4eb295d 209 }
c0c7b905
JL
210
211 remaining = total_data_size - data_in_this_rsp;
212
213 cFYI(1, "missing %d bytes from transact2, check next response",
214 remaining);
215 if (total_data_size > maxBufSize) {
216 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
217 total_data_size, maxBufSize);
218 return -EINVAL;
219 }
220 return remaining;
e4eb295d
SF
221}
222
fb8c4b14 223static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
e4eb295d
SF
224{
225 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
226 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
fb8c4b14
SF
227 char *data_area_of_target;
228 char *data_area_of_buf2;
26ec2548 229 int remaining;
2a2047bc
JL
230 unsigned int byte_count, total_in_buf;
231 __u16 total_data_size, total_in_buf2;
e4eb295d 232
26ec2548 233 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
e4eb295d 234
26ec2548
JL
235 if (total_data_size !=
236 get_unaligned_le16(&pSMB2->t2_rsp.TotalDataCount))
b6b38f70 237 cFYI(1, "total data size of primary and secondary t2 differ");
e4eb295d 238
26ec2548 239 total_in_buf = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
e4eb295d
SF
240
241 remaining = total_data_size - total_in_buf;
50c2f753 242
fb8c4b14 243 if (remaining < 0)
2a2047bc 244 return -EPROTO;
e4eb295d 245
fb8c4b14 246 if (remaining == 0) /* nothing to do, ignore */
e4eb295d 247 return 0;
50c2f753 248
26ec2548 249 total_in_buf2 = get_unaligned_le16(&pSMB2->t2_rsp.DataCount);
fb8c4b14 250 if (remaining < total_in_buf2) {
b6b38f70 251 cFYI(1, "transact2 2nd response contains too much data");
e4eb295d
SF
252 }
253
254 /* find end of first SMB data area */
fb8c4b14 255 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
26ec2548 256 get_unaligned_le16(&pSMBt->t2_rsp.DataOffset);
e4eb295d
SF
257 /* validate target area */
258
26ec2548
JL
259 data_area_of_buf2 = (char *)&pSMB2->hdr.Protocol +
260 get_unaligned_le16(&pSMB2->t2_rsp.DataOffset);
e4eb295d
SF
261
262 data_area_of_target += total_in_buf;
263
264 /* copy second buffer into end of first buffer */
e4eb295d 265 total_in_buf += total_in_buf2;
2a2047bc
JL
266 /* is the result too big for the field? */
267 if (total_in_buf > USHRT_MAX)
268 return -EPROTO;
26ec2548 269 put_unaligned_le16(total_in_buf, &pSMBt->t2_rsp.DataCount);
2a2047bc
JL
270
271 /* fix up the BCC */
820a803f 272 byte_count = get_bcc(pTargetSMB);
e4eb295d 273 byte_count += total_in_buf2;
2a2047bc
JL
274 /* is the result too big for the field? */
275 if (byte_count > USHRT_MAX)
276 return -EPROTO;
820a803f 277 put_bcc(byte_count, pTargetSMB);
e4eb295d 278
be8e3b00 279 byte_count = be32_to_cpu(pTargetSMB->smb_buf_length);
e4eb295d 280 byte_count += total_in_buf2;
2a2047bc
JL
281 /* don't allow buffer to overflow */
282 if (byte_count > CIFSMaxBufSize)
283 return -ENOBUFS;
be8e3b00 284 pTargetSMB->smb_buf_length = cpu_to_be32(byte_count);
e4eb295d 285
2a2047bc
JL
286 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
287
fb8c4b14 288 if (remaining == total_in_buf2) {
b6b38f70 289 cFYI(1, "found the last secondary response");
e4eb295d
SF
290 return 0; /* we are done */
291 } else /* more responses to go */
292 return 1;
e4eb295d
SF
293}
294
c74093b6
JL
295static void
296cifs_echo_request(struct work_struct *work)
297{
298 int rc;
299 struct TCP_Server_Info *server = container_of(work,
300 struct TCP_Server_Info, echo.work);
301
247ec9b4 302 /*
195291e6
JL
303 * We cannot send an echo until the NEGOTIATE_PROTOCOL request is
304 * done, which is indicated by maxBuf != 0. Also, no need to ping if
305 * we got a response recently
247ec9b4 306 */
195291e6 307 if (server->maxBuf == 0 ||
247ec9b4 308 time_before(jiffies, server->lstrp + SMB_ECHO_INTERVAL - HZ))
c74093b6
JL
309 goto requeue_echo;
310
311 rc = CIFSSMBEcho(server);
312 if (rc)
313 cFYI(1, "Unable to send echo request to server: %s",
314 server->hostname);
315
316requeue_echo:
317 queue_delayed_work(system_nrt_wq, &server->echo, SMB_ECHO_INTERVAL);
318}
319
1da177e4
LT
320static int
321cifs_demultiplex_thread(struct TCP_Server_Info *server)
322{
323 int length;
324 unsigned int pdu_length, total_read;
325 struct smb_hdr *smb_buffer = NULL;
b8643e1b
SF
326 struct smb_hdr *bigbuf = NULL;
327 struct smb_hdr *smallbuf = NULL;
1da177e4
LT
328 struct msghdr smb_msg;
329 struct kvec iov;
330 struct socket *csocket = server->ssocket;
2b84a36c 331 struct list_head *tmp, *tmp2;
1da177e4
LT
332 struct task_struct *task_to_wake = NULL;
333 struct mid_q_entry *mid_entry;
70ca734a 334 char temp;
4b18f2a9
SF
335 bool isLargeBuf = false;
336 bool isMultiRsp;
e4eb295d 337 int reconnect;
1da177e4 338
1da177e4 339 current->flags |= PF_MEMALLOC;
b6b38f70 340 cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
93d0ec85
JL
341
342 length = atomic_inc_return(&tcpSesAllocCount);
343 if (length > 1)
26f57364
SF
344 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
345 GFP_KERNEL);
1da177e4 346
83144186 347 set_freezable();
469ee614 348 while (server->tcpStatus != CifsExiting) {
ede1327e
SF
349 if (try_to_freeze())
350 continue;
b8643e1b
SF
351 if (bigbuf == NULL) {
352 bigbuf = cifs_buf_get();
0fd1ffe0 353 if (!bigbuf) {
b6b38f70 354 cERROR(1, "No memory for large SMB response");
b8643e1b
SF
355 msleep(3000);
356 /* retry will check if exiting */
357 continue;
358 }
0fd1ffe0
PM
359 } else if (isLargeBuf) {
360 /* we are reusing a dirty large buf, clear its start */
26f57364 361 memset(bigbuf, 0, sizeof(struct smb_hdr));
1da177e4 362 }
b8643e1b
SF
363
364 if (smallbuf == NULL) {
365 smallbuf = cifs_small_buf_get();
0fd1ffe0 366 if (!smallbuf) {
b6b38f70 367 cERROR(1, "No memory for SMB response");
b8643e1b
SF
368 msleep(1000);
369 /* retry will check if exiting */
370 continue;
371 }
372 /* beginning of smb buffer is cleared in our buf_get */
373 } else /* if existing small buf clear beginning */
26f57364 374 memset(smallbuf, 0, sizeof(struct smb_hdr));
b8643e1b 375
4b18f2a9
SF
376 isLargeBuf = false;
377 isMultiRsp = false;
b8643e1b 378 smb_buffer = smallbuf;
1da177e4
LT
379 iov.iov_base = smb_buffer;
380 iov.iov_len = 4;
381 smb_msg.msg_control = NULL;
382 smb_msg.msg_controllen = 0;
f01d5e14 383 pdu_length = 4; /* enough to get RFC1001 header */
fda35943 384
f01d5e14 385incomplete_rcv:
fd88ce93 386 if (echo_retries > 0 && server->tcpStatus == CifsGood &&
fda35943
SF
387 time_after(jiffies, server->lstrp +
388 (echo_retries * SMB_ECHO_INTERVAL))) {
389 cERROR(1, "Server %s has not responded in %d seconds. "
390 "Reconnecting...", server->hostname,
391 (echo_retries * SMB_ECHO_INTERVAL / HZ));
392 cifs_reconnect(server);
393 csocket = server->ssocket;
394 wake_up(&server->response_q);
395 continue;
396 }
397
1da177e4
LT
398 length =
399 kernel_recvmsg(csocket, &smb_msg,
f01d5e14 400 &iov, 1, pdu_length, 0 /* BB other flags? */);
1da177e4 401
469ee614 402 if (server->tcpStatus == CifsExiting) {
1da177e4
LT
403 break;
404 } else if (server->tcpStatus == CifsNeedReconnect) {
b6b38f70 405 cFYI(1, "Reconnect after server stopped responding");
1da177e4 406 cifs_reconnect(server);
b6b38f70 407 cFYI(1, "call to reconnect done");
1da177e4
LT
408 csocket = server->ssocket;
409 continue;
522bbe65
JL
410 } else if (length == -ERESTARTSYS ||
411 length == -EAGAIN ||
412 length == -EINTR) {
b8643e1b 413 msleep(1); /* minimum sleep to prevent looping
1da177e4
LT
414 allowing socket to clear and app threads to set
415 tcpStatus CifsNeedReconnect if server hung */
c527c8a7
SF
416 if (pdu_length < 4) {
417 iov.iov_base = (4 - pdu_length) +
418 (char *)smb_buffer;
419 iov.iov_len = pdu_length;
420 smb_msg.msg_control = NULL;
421 smb_msg.msg_controllen = 0;
c18c732e 422 goto incomplete_rcv;
c527c8a7 423 } else
c18c732e 424 continue;
1da177e4 425 } else if (length <= 0) {
b6b38f70
JP
426 cFYI(1, "Reconnect after unexpected peek error %d",
427 length);
1da177e4
LT
428 cifs_reconnect(server);
429 csocket = server->ssocket;
430 wake_up(&server->response_q);
431 continue;
2a974680 432 } else if (length < pdu_length) {
b6b38f70
JP
433 cFYI(1, "requested %d bytes but only got %d bytes",
434 pdu_length, length);
f01d5e14 435 pdu_length -= length;
f01d5e14
SF
436 msleep(1);
437 goto incomplete_rcv;
46810cbf 438 }
1da177e4 439
70ca734a
SF
440 /* The right amount was read from socket - 4 bytes */
441 /* so we can now interpret the length field */
46810cbf 442
70ca734a
SF
443 /* the first byte big endian of the length field,
444 is actually not part of the length but the type
445 with the most common, zero, as regular data */
446 temp = *((char *) smb_buffer);
46810cbf 447
fb8c4b14 448 /* Note that FC 1001 length is big endian on the wire,
70ca734a
SF
449 but we convert it here so it is always manipulated
450 as host byte order */
be8e3b00 451 pdu_length = be32_to_cpu(smb_buffer->smb_buf_length);
70ca734a 452
b6b38f70 453 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
46810cbf 454
70ca734a 455 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
fb8c4b14 456 continue;
70ca734a 457 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
b6b38f70 458 cFYI(1, "Good RFC 1002 session rsp");
e4eb295d 459 continue;
70ca734a 460 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
fb8c4b14 461 /* we get this from Windows 98 instead of
46810cbf 462 an error on SMB negprot response */
b6b38f70
JP
463 cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
464 pdu_length);
7332f2a6
JL
465 /* give server a second to clean up */
466 msleep(1000);
467 /* always try 445 first on reconnect since we get NACK
468 * on some if we ever connected to port 139 (the NACK
469 * is since we do not begin with RFC1001 session
470 * initialize frame)
471 */
32670396 472 cifs_set_port((struct sockaddr *)
a9f1b85e 473 &server->dstaddr, CIFS_PORT);
7332f2a6
JL
474 cifs_reconnect(server);
475 csocket = server->ssocket;
476 wake_up(&server->response_q);
477 continue;
70ca734a 478 } else if (temp != (char) 0) {
b6b38f70 479 cERROR(1, "Unknown RFC 1002 frame");
70ca734a
SF
480 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
481 length);
46810cbf
SF
482 cifs_reconnect(server);
483 csocket = server->ssocket;
484 continue;
e4eb295d
SF
485 }
486
487 /* else we have an SMB response */
fb8c4b14 488 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
26f57364 489 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
b6b38f70
JP
490 cERROR(1, "Invalid size SMB length %d pdu_length %d",
491 length, pdu_length+4);
e4eb295d
SF
492 cifs_reconnect(server);
493 csocket = server->ssocket;
494 wake_up(&server->response_q);
495 continue;
fb8c4b14 496 }
e4eb295d
SF
497
498 /* else length ok */
499 reconnect = 0;
500
fb8c4b14 501 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
4b18f2a9 502 isLargeBuf = true;
e4eb295d
SF
503 memcpy(bigbuf, smallbuf, 4);
504 smb_buffer = bigbuf;
505 }
506 length = 0;
507 iov.iov_base = 4 + (char *)smb_buffer;
508 iov.iov_len = pdu_length;
fb8c4b14 509 for (total_read = 0; total_read < pdu_length;
e4eb295d
SF
510 total_read += length) {
511 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
512 pdu_length - total_read, 0);
522bbe65 513 if (server->tcpStatus == CifsExiting) {
e4eb295d
SF
514 /* then will exit */
515 reconnect = 2;
516 break;
517 } else if (server->tcpStatus == CifsNeedReconnect) {
46810cbf
SF
518 cifs_reconnect(server);
519 csocket = server->ssocket;
fb8c4b14 520 /* Reconnect wakes up rspns q */
e4eb295d
SF
521 /* Now we will reread sock */
522 reconnect = 1;
523 break;
522bbe65
JL
524 } else if (length == -ERESTARTSYS ||
525 length == -EAGAIN ||
526 length == -EINTR) {
e4eb295d 527 msleep(1); /* minimum sleep to prevent looping,
fb8c4b14 528 allowing socket to clear and app
e4eb295d
SF
529 threads to set tcpStatus
530 CifsNeedReconnect if server hung*/
c18c732e 531 length = 0;
46810cbf 532 continue;
e4eb295d 533 } else if (length <= 0) {
b6b38f70
JP
534 cERROR(1, "Received no data, expecting %d",
535 pdu_length - total_read);
e4eb295d
SF
536 cifs_reconnect(server);
537 csocket = server->ssocket;
538 reconnect = 1;
539 break;
46810cbf 540 }
e4eb295d 541 }
fb8c4b14 542 if (reconnect == 2)
e4eb295d 543 break;
fb8c4b14 544 else if (reconnect == 1)
e4eb295d 545 continue;
1da177e4 546
9587fcff 547 total_read += 4; /* account for rfc1002 hdr */
50c2f753 548
9587fcff 549 dump_smb(smb_buffer, total_read);
71823baf
JL
550
551 /*
552 * We know that we received enough to get to the MID as we
553 * checked the pdu_length earlier. Now check to see
554 * if the rest of the header is OK. We borrow the length
555 * var for the rest of the loop to avoid a new stack var.
556 *
557 * 48 bytes is enough to display the header and a little bit
558 * into the payload for debugging purposes.
559 */
560 length = checkSMB(smb_buffer, smb_buffer->Mid, total_read);
561 if (length != 0)
9587fcff 562 cifs_dump_mem("Bad SMB: ", smb_buffer,
71823baf 563 min_t(unsigned int, total_read, 48));
1da177e4 564
2b84a36c 565 mid_entry = NULL;
fda35943
SF
566 server->lstrp = jiffies;
567
e4eb295d 568 spin_lock(&GlobalMid_Lock);
2b84a36c 569 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
e4eb295d
SF
570 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
571
146f9f65
JL
572 if (mid_entry->mid != smb_buffer->Mid ||
573 mid_entry->midState != MID_REQUEST_SUBMITTED ||
574 mid_entry->command != smb_buffer->Command) {
575 mid_entry = NULL;
576 continue;
577 }
578
579 if (length == 0 &&
580 check2ndT2(smb_buffer, server->maxBuf) > 0) {
581 /* We have a multipart transact2 resp */
582 isMultiRsp = true;
583 if (mid_entry->resp_buf) {
584 /* merge response - fix up 1st*/
16541ba1
JL
585 length = coalesce_t2(smb_buffer,
586 mid_entry->resp_buf);
587 if (length > 0) {
588 length = 0;
146f9f65
JL
589 mid_entry->multiRsp = true;
590 break;
e4eb295d 591 } else {
16541ba1
JL
592 /* all parts received or
593 * packet is malformed
594 */
146f9f65
JL
595 mid_entry->multiEnd = true;
596 goto multi_t2_fnd;
597 }
598 } else {
599 if (!isLargeBuf) {
600 /*
601 * FIXME: switch to already
602 * allocated largebuf?
603 */
604 cERROR(1, "1st trans2 resp "
605 "needs bigbuf");
606 } else {
607 /* Have first buffer */
608 mid_entry->resp_buf =
609 smb_buffer;
610 mid_entry->largeBuf = true;
611 bigbuf = NULL;
e4eb295d 612 }
50c2f753 613 }
146f9f65
JL
614 break;
615 }
616 mid_entry->resp_buf = smb_buffer;
617 mid_entry->largeBuf = isLargeBuf;
e4eb295d 618multi_t2_fnd:
146f9f65
JL
619 if (length == 0)
620 mid_entry->midState = MID_RESPONSE_RECEIVED;
621 else
622 mid_entry->midState = MID_RESPONSE_MALFORMED;
1047abc1 623#ifdef CONFIG_CIFS_STATS2
146f9f65 624 mid_entry->when_received = jiffies;
1047abc1 625#endif
146f9f65 626 list_del_init(&mid_entry->qhead);
146f9f65 627 break;
1da177e4 628 }
e4eb295d 629 spin_unlock(&GlobalMid_Lock);
2b84a36c
JL
630
631 if (mid_entry != NULL) {
3c1105df 632 mid_entry->callback(mid_entry);
cd63499c 633 /* Was previous buf put in mpx struct for multi-rsp? */
fb8c4b14 634 if (!isMultiRsp) {
cd63499c 635 /* smb buffer will be freed by user thread */
26f57364 636 if (isLargeBuf)
cd63499c 637 bigbuf = NULL;
26f57364 638 else
cd63499c
SF
639 smallbuf = NULL;
640 }
71823baf
JL
641 } else if (length != 0) {
642 /* response sanity checks failed */
643 continue;
4b18f2a9
SF
644 } else if (!is_valid_oplock_break(smb_buffer, server) &&
645 !isMultiRsp) {
b6b38f70 646 cERROR(1, "No task to wake, unknown frame received! "
8097531a 647 "NumMids %d", atomic_read(&midCount));
50c2f753 648 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
70ca734a 649 sizeof(struct smb_hdr));
3979877e
SF
650#ifdef CONFIG_CIFS_DEBUG2
651 cifs_dump_detail(smb_buffer);
652 cifs_dump_mids(server);
653#endif /* CIFS_DEBUG2 */
50c2f753 654
e4eb295d
SF
655 }
656 } /* end while !EXITING */
657
e7ddee90 658 /* take it off the list, if it's not already */
3f9bcca7 659 spin_lock(&cifs_tcp_ses_lock);
e7ddee90 660 list_del_init(&server->tcp_ses_list);
3f9bcca7 661 spin_unlock(&cifs_tcp_ses_lock);
e7ddee90 662
1da177e4
LT
663 spin_lock(&GlobalMid_Lock);
664 server->tcpStatus = CifsExiting;
e691b9d1 665 spin_unlock(&GlobalMid_Lock);
dbdbb876 666 wake_up_all(&server->response_q);
e691b9d1 667
31ca3bc3
SF
668 /* check if we have blocked requests that need to free */
669 /* Note that cifs_max_pending is normally 50, but
670 can be set at module install time to as little as two */
e691b9d1 671 spin_lock(&GlobalMid_Lock);
fb8c4b14 672 if (atomic_read(&server->inFlight) >= cifs_max_pending)
31ca3bc3
SF
673 atomic_set(&server->inFlight, cifs_max_pending - 1);
674 /* We do not want to set the max_pending too low or we
675 could end up with the counter going negative */
1da177e4 676 spin_unlock(&GlobalMid_Lock);
50c2f753 677 /* Although there should not be any requests blocked on
1da177e4 678 this queue it can not hurt to be paranoid and try to wake up requests
09d1db5c 679 that may haven been blocked when more than 50 at time were on the wire
1da177e4
LT
680 to the same server - they now will see the session is in exit state
681 and get out of SendReceive. */
682 wake_up_all(&server->request_q);
683 /* give those requests time to exit */
b8643e1b 684 msleep(125);
50c2f753 685
fb8c4b14 686 if (server->ssocket) {
1da177e4
LT
687 sock_release(csocket);
688 server->ssocket = NULL;
689 }
fd62cb7e 690 /* buffer usually freed in free_mid - need to free it here on exit */
a8a11d39
MK
691 cifs_buf_release(bigbuf);
692 if (smallbuf) /* no sense logging a debug message if NULL */
b8643e1b 693 cifs_small_buf_release(smallbuf);
1da177e4 694
9d78315b 695 if (!list_empty(&server->pending_mid_q)) {
3c1105df
JL
696 struct list_head dispose_list;
697
698 INIT_LIST_HEAD(&dispose_list);
1da177e4 699 spin_lock(&GlobalMid_Lock);
2b84a36c 700 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
9d78315b 701 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
3c1105df
JL
702 cFYI(1, "Clearing mid 0x%x", mid_entry->mid);
703 mid_entry->midState = MID_SHUTDOWN;
704 list_move(&mid_entry->qhead, &dispose_list);
705 }
706 spin_unlock(&GlobalMid_Lock);
707
708 /* now walk dispose list and issue callbacks */
709 list_for_each_safe(tmp, tmp2, &dispose_list) {
710 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
711 cFYI(1, "Callback mid 0x%x", mid_entry->mid);
2b84a36c
JL
712 list_del_init(&mid_entry->qhead);
713 mid_entry->callback(mid_entry);
1da177e4 714 }
1da177e4 715 /* 1/8th of sec is more than enough time for them to exit */
b8643e1b 716 msleep(125);
1da177e4
LT
717 }
718
f191401f 719 if (!list_empty(&server->pending_mid_q)) {
50c2f753 720 /* mpx threads have not exited yet give them
1da177e4 721 at least the smb send timeout time for long ops */
31ca3bc3
SF
722 /* due to delays on oplock break requests, we need
723 to wait at least 45 seconds before giving up
724 on a request getting a response and going ahead
725 and killing cifsd */
b6b38f70 726 cFYI(1, "Wait for exit from demultiplex thread");
31ca3bc3 727 msleep(46000);
1da177e4
LT
728 /* if threads still have not exited they are probably never
729 coming home not much else we can do but free the memory */
730 }
1da177e4 731
c359cf3c 732 kfree(server->hostname);
b1c8d2b4 733 task_to_wake = xchg(&server->tsk, NULL);
31ca3bc3 734 kfree(server);
93d0ec85
JL
735
736 length = atomic_dec_return(&tcpSesAllocCount);
26f57364
SF
737 if (length > 0)
738 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
739 GFP_KERNEL);
50c2f753 740
b1c8d2b4
JL
741 /* if server->tsk was NULL then wait for a signal before exiting */
742 if (!task_to_wake) {
743 set_current_state(TASK_INTERRUPTIBLE);
744 while (!signal_pending(current)) {
745 schedule();
746 set_current_state(TASK_INTERRUPTIBLE);
747 }
748 set_current_state(TASK_RUNNING);
749 }
750
0468a2cf 751 module_put_and_exit(0);
1da177e4
LT
752}
753
c359cf3c
JL
754/* extract the host portion of the UNC string */
755static char *
756extract_hostname(const char *unc)
757{
758 const char *src;
759 char *dst, *delim;
760 unsigned int len;
761
762 /* skip double chars at beginning of string */
763 /* BB: check validity of these bytes? */
764 src = unc + 2;
765
766 /* delimiter between hostname and sharename is always '\\' now */
767 delim = strchr(src, '\\');
768 if (!delim)
769 return ERR_PTR(-EINVAL);
770
771 len = delim - src;
772 dst = kmalloc((len + 1), GFP_KERNEL);
773 if (dst == NULL)
774 return ERR_PTR(-ENOMEM);
775
776 memcpy(dst, src, len);
777 dst[len] = '\0';
778
779 return dst;
780}
781
1da177e4 782static int
b946845a 783cifs_parse_mount_options(const char *mountdata, const char *devname,
50c2f753 784 struct smb_vol *vol)
1da177e4 785{
4906e50b 786 char *value, *data, *end;
957df453 787 char *mountdata_copy = NULL, *options;
1da177e4
LT
788 unsigned int temp_len, i, j;
789 char separator[2];
9b9d6b24
JL
790 short int override_uid = -1;
791 short int override_gid = -1;
792 bool uid_specified = false;
793 bool gid_specified = false;
88463999 794 char *nodename = utsname()->nodename;
1da177e4
LT
795
796 separator[0] = ',';
50c2f753 797 separator[1] = 0;
1da177e4 798
88463999
JL
799 /*
800 * does not have to be perfect mapping since field is
801 * informational, only used for servers that do not support
802 * port 445 and it can be overridden at mount time
803 */
1397f2ee
JL
804 memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
805 for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
88463999
JL
806 vol->source_rfc1001_name[i] = toupper(nodename[i]);
807
1397f2ee 808 vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
a10faeb2
SF
809 /* null target name indicates to use *SMBSERVR default called name
810 if we end up sending RFC1001 session initialize */
811 vol->target_rfc1001_name[0] = 0;
3e4b3e1f
JL
812 vol->cred_uid = current_uid();
813 vol->linux_uid = current_uid();
a001e5b5 814 vol->linux_gid = current_gid();
f55ed1a8
JL
815
816 /* default to only allowing write access to owner of the mount */
817 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
1da177e4
LT
818
819 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
ac67055e
JA
820 /* default is always to request posix paths. */
821 vol->posix_paths = 1;
a0c9217f
JL
822 /* default to using server inode numbers where available */
823 vol->server_ino = 1;
ac67055e 824
6d20e840
SJ
825 vol->actimeo = CIFS_DEF_ACTIMEO;
826
b946845a
SF
827 if (!mountdata)
828 goto cifs_parse_mount_err;
829
830 mountdata_copy = kstrndup(mountdata, PAGE_SIZE, GFP_KERNEL);
831 if (!mountdata_copy)
832 goto cifs_parse_mount_err;
1da177e4 833
b946845a 834 options = mountdata_copy;
4906e50b 835 end = options + strlen(options);
50c2f753 836 if (strncmp(options, "sep=", 4) == 0) {
fb8c4b14 837 if (options[4] != 0) {
1da177e4
LT
838 separator[0] = options[4];
839 options += 5;
840 } else {
b6b38f70 841 cFYI(1, "Null separator not allowed");
1da177e4
LT
842 }
843 }
50c2f753 844
1da177e4
LT
845 while ((data = strsep(&options, separator)) != NULL) {
846 if (!*data)
847 continue;
848 if ((value = strchr(data, '=')) != NULL)
849 *value++ = '\0';
850
50c2f753
SF
851 /* Have to parse this before we parse for "user" */
852 if (strnicmp(data, "user_xattr", 10) == 0) {
1da177e4 853 vol->no_xattr = 0;
50c2f753 854 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
1da177e4
LT
855 vol->no_xattr = 1;
856 } else if (strnicmp(data, "user", 4) == 0) {
4b952a9b 857 if (!value) {
1da177e4
LT
858 printk(KERN_WARNING
859 "CIFS: invalid or missing username\n");
b946845a 860 goto cifs_parse_mount_err;
fb8c4b14 861 } else if (!*value) {
4b952a9b
SF
862 /* null user, ie anonymous, authentication */
863 vol->nullauth = 1;
1da177e4 864 }
8727c8a8
SF
865 if (strnlen(value, MAX_USERNAME_SIZE) <
866 MAX_USERNAME_SIZE) {
b946845a
SF
867 vol->username = kstrdup(value, GFP_KERNEL);
868 if (!vol->username) {
869 printk(KERN_WARNING "CIFS: no memory "
870 "for username\n");
871 goto cifs_parse_mount_err;
872 }
1da177e4
LT
873 } else {
874 printk(KERN_WARNING "CIFS: username too long\n");
b946845a 875 goto cifs_parse_mount_err;
1da177e4
LT
876 }
877 } else if (strnicmp(data, "pass", 4) == 0) {
878 if (!value) {
879 vol->password = NULL;
880 continue;
fb8c4b14 881 } else if (value[0] == 0) {
1da177e4
LT
882 /* check if string begins with double comma
883 since that would mean the password really
884 does start with a comma, and would not
885 indicate an empty string */
fb8c4b14 886 if (value[1] != separator[0]) {
1da177e4
LT
887 vol->password = NULL;
888 continue;
889 }
890 }
891 temp_len = strlen(value);
892 /* removed password length check, NTLM passwords
893 can be arbitrarily long */
894
50c2f753 895 /* if comma in password, the string will be
1da177e4
LT
896 prematurely null terminated. Commas in password are
897 specified across the cifs mount interface by a double
898 comma ie ,, and a comma used as in other cases ie ','
899 as a parameter delimiter/separator is single and due
900 to the strsep above is temporarily zeroed. */
901
902 /* NB: password legally can have multiple commas and
903 the only illegal character in a password is null */
904
50c2f753 905 if ((value[temp_len] == 0) &&
4906e50b 906 (value + temp_len < end) &&
09d1db5c 907 (value[temp_len+1] == separator[0])) {
1da177e4
LT
908 /* reinsert comma */
909 value[temp_len] = separator[0];
50c2f753
SF
910 temp_len += 2; /* move after second comma */
911 while (value[temp_len] != 0) {
1da177e4 912 if (value[temp_len] == separator[0]) {
50c2f753 913 if (value[temp_len+1] ==
09d1db5c
SF
914 separator[0]) {
915 /* skip second comma */
916 temp_len++;
50c2f753 917 } else {
1da177e4
LT
918 /* single comma indicating start
919 of next parm */
920 break;
921 }
922 }
923 temp_len++;
924 }
fb8c4b14 925 if (value[temp_len] == 0) {
1da177e4
LT
926 options = NULL;
927 } else {
928 value[temp_len] = 0;
929 /* point option to start of next parm */
930 options = value + temp_len + 1;
931 }
50c2f753 932 /* go from value to value + temp_len condensing
1da177e4
LT
933 double commas to singles. Note that this ends up
934 allocating a few bytes too many, which is ok */
e915fc49 935 vol->password = kzalloc(temp_len, GFP_KERNEL);
fb8c4b14 936 if (vol->password == NULL) {
50c2f753
SF
937 printk(KERN_WARNING "CIFS: no memory "
938 "for password\n");
b946845a 939 goto cifs_parse_mount_err;
433dc24f 940 }
50c2f753 941 for (i = 0, j = 0; i < temp_len; i++, j++) {
1da177e4 942 vol->password[j] = value[i];
fb8c4b14 943 if (value[i] == separator[0]
09d1db5c 944 && value[i+1] == separator[0]) {
1da177e4
LT
945 /* skip second comma */
946 i++;
947 }
948 }
949 vol->password[j] = 0;
950 } else {
e915fc49 951 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
fb8c4b14 952 if (vol->password == NULL) {
50c2f753
SF
953 printk(KERN_WARNING "CIFS: no memory "
954 "for password\n");
b946845a 955 goto cifs_parse_mount_err;
433dc24f 956 }
1da177e4
LT
957 strcpy(vol->password, value);
958 }
58f7f68f
JL
959 } else if (!strnicmp(data, "ip", 2) ||
960 !strnicmp(data, "addr", 4)) {
1da177e4
LT
961 if (!value || !*value) {
962 vol->UNCip = NULL;
50b64e3b
JL
963 } else if (strnlen(value, INET6_ADDRSTRLEN) <
964 INET6_ADDRSTRLEN) {
b946845a
SF
965 vol->UNCip = kstrdup(value, GFP_KERNEL);
966 if (!vol->UNCip) {
967 printk(KERN_WARNING "CIFS: no memory "
968 "for UNC IP\n");
969 goto cifs_parse_mount_err;
970 }
1da177e4 971 } else {
50c2f753
SF
972 printk(KERN_WARNING "CIFS: ip address "
973 "too long\n");
b946845a 974 goto cifs_parse_mount_err;
1da177e4 975 }
50c2f753
SF
976 } else if (strnicmp(data, "sec", 3) == 0) {
977 if (!value || !*value) {
b6b38f70 978 cERROR(1, "no security value specified");
50c2f753
SF
979 continue;
980 } else if (strnicmp(value, "krb5i", 5) == 0) {
981 vol->secFlg |= CIFSSEC_MAY_KRB5 |
189acaae 982 CIFSSEC_MUST_SIGN;
bf820679 983 } else if (strnicmp(value, "krb5p", 5) == 0) {
50c2f753
SF
984 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
985 CIFSSEC_MAY_KRB5; */
b6b38f70 986 cERROR(1, "Krb5 cifs privacy not supported");
b946845a 987 goto cifs_parse_mount_err;
bf820679 988 } else if (strnicmp(value, "krb5", 4) == 0) {
750d1151 989 vol->secFlg |= CIFSSEC_MAY_KRB5;
ac683924
SF
990 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
991 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
992 CIFSSEC_MUST_SIGN;
993 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
994 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
bf820679 995 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
750d1151 996 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
189acaae 997 CIFSSEC_MUST_SIGN;
bf820679 998 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
750d1151 999 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
bf820679 1000 } else if (strnicmp(value, "ntlmi", 5) == 0) {
750d1151 1001 vol->secFlg |= CIFSSEC_MAY_NTLM |
189acaae 1002 CIFSSEC_MUST_SIGN;
bf820679
SF
1003 } else if (strnicmp(value, "ntlm", 4) == 0) {
1004 /* ntlm is default so can be turned off too */
750d1151 1005 vol->secFlg |= CIFSSEC_MAY_NTLM;
bf820679 1006 } else if (strnicmp(value, "nontlm", 6) == 0) {
189acaae 1007 /* BB is there a better way to do this? */
750d1151 1008 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
189acaae
SF
1009#ifdef CONFIG_CIFS_WEAK_PW_HASH
1010 } else if (strnicmp(value, "lanman", 6) == 0) {
50c2f753 1011 vol->secFlg |= CIFSSEC_MAY_LANMAN;
189acaae 1012#endif
bf820679 1013 } else if (strnicmp(value, "none", 4) == 0) {
189acaae 1014 vol->nullauth = 1;
50c2f753 1015 } else {
b6b38f70 1016 cERROR(1, "bad security option: %s", value);
b946845a 1017 goto cifs_parse_mount_err;
50c2f753 1018 }
1cb06d0b
SF
1019 } else if (strnicmp(data, "vers", 3) == 0) {
1020 if (!value || !*value) {
1021 cERROR(1, "no protocol version specified"
1022 " after vers= mount option");
1023 } else if ((strnicmp(value, "cifs", 4) == 0) ||
1024 (strnicmp(value, "1", 1) == 0)) {
1025 /* this is the default */
1026 continue;
1cb06d0b 1027 }
1da177e4
LT
1028 } else if ((strnicmp(data, "unc", 3) == 0)
1029 || (strnicmp(data, "target", 6) == 0)
1030 || (strnicmp(data, "path", 4) == 0)) {
1031 if (!value || !*value) {
50c2f753
SF
1032 printk(KERN_WARNING "CIFS: invalid path to "
1033 "network resource\n");
b946845a 1034 goto cifs_parse_mount_err;
1da177e4
LT
1035 }
1036 if ((temp_len = strnlen(value, 300)) < 300) {
50c2f753 1037 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
4523cc30 1038 if (vol->UNC == NULL)
b946845a 1039 goto cifs_parse_mount_err;
50c2f753 1040 strcpy(vol->UNC, value);
1da177e4
LT
1041 if (strncmp(vol->UNC, "//", 2) == 0) {
1042 vol->UNC[0] = '\\';
1043 vol->UNC[1] = '\\';
50c2f753 1044 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1da177e4 1045 printk(KERN_WARNING
50c2f753
SF
1046 "CIFS: UNC Path does not begin "
1047 "with // or \\\\ \n");
b946845a 1048 goto cifs_parse_mount_err;
1da177e4
LT
1049 }
1050 } else {
1051 printk(KERN_WARNING "CIFS: UNC name too long\n");
b946845a 1052 goto cifs_parse_mount_err;
1da177e4
LT
1053 }
1054 } else if ((strnicmp(data, "domain", 3) == 0)
1055 || (strnicmp(data, "workgroup", 5) == 0)) {
1056 if (!value || !*value) {
1057 printk(KERN_WARNING "CIFS: invalid domain name\n");
b946845a 1058 goto cifs_parse_mount_err;
1da177e4
LT
1059 }
1060 /* BB are there cases in which a comma can be valid in
1061 a domain name and need special handling? */
3979877e 1062 if (strnlen(value, 256) < 256) {
b946845a
SF
1063 vol->domainname = kstrdup(value, GFP_KERNEL);
1064 if (!vol->domainname) {
1065 printk(KERN_WARNING "CIFS: no memory "
1066 "for domainname\n");
1067 goto cifs_parse_mount_err;
1068 }
b6b38f70 1069 cFYI(1, "Domain name set");
1da177e4 1070 } else {
50c2f753
SF
1071 printk(KERN_WARNING "CIFS: domain name too "
1072 "long\n");
b946845a 1073 goto cifs_parse_mount_err;
1da177e4 1074 }
3eb9a889
BG
1075 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1076 vol->srcaddr.ss_family = AF_UNSPEC;
1077
1078 if (!value || !*value) {
1079 printk(KERN_WARNING "CIFS: srcaddr value"
1080 " not specified.\n");
b946845a 1081 goto cifs_parse_mount_err;
3eb9a889
BG
1082 }
1083 i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1084 value, strlen(value));
b235f371 1085 if (i == 0) {
3eb9a889
BG
1086 printk(KERN_WARNING "CIFS: Could not parse"
1087 " srcaddr: %s\n",
1088 value);
b946845a 1089 goto cifs_parse_mount_err;
3eb9a889 1090 }
50c2f753
SF
1091 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1092 if (!value || !*value) {
1093 printk(KERN_WARNING
1094 "CIFS: invalid path prefix\n");
b946845a 1095 goto cifs_parse_mount_err;
50c2f753
SF
1096 }
1097 if ((temp_len = strnlen(value, 1024)) < 1024) {
4523cc30 1098 if (value[0] != '/')
2fe87f02 1099 temp_len++; /* missing leading slash */
50c2f753
SF
1100 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1101 if (vol->prepath == NULL)
b946845a 1102 goto cifs_parse_mount_err;
4523cc30 1103 if (value[0] != '/') {
2fe87f02 1104 vol->prepath[0] = '/';
50c2f753 1105 strcpy(vol->prepath+1, value);
2fe87f02 1106 } else
50c2f753 1107 strcpy(vol->prepath, value);
b6b38f70 1108 cFYI(1, "prefix path %s", vol->prepath);
50c2f753
SF
1109 } else {
1110 printk(KERN_WARNING "CIFS: prefix too long\n");
b946845a 1111 goto cifs_parse_mount_err;
50c2f753 1112 }
1da177e4
LT
1113 } else if (strnicmp(data, "iocharset", 9) == 0) {
1114 if (!value || !*value) {
63135e08
SF
1115 printk(KERN_WARNING "CIFS: invalid iocharset "
1116 "specified\n");
b946845a 1117 goto cifs_parse_mount_err;
1da177e4
LT
1118 }
1119 if (strnlen(value, 65) < 65) {
b946845a
SF
1120 if (strnicmp(value, "default", 7)) {
1121 vol->iocharset = kstrdup(value,
1122 GFP_KERNEL);
1123
1124 if (!vol->iocharset) {
1125 printk(KERN_WARNING "CIFS: no "
1126 "memory for"
1127 "charset\n");
1128 goto cifs_parse_mount_err;
1129 }
1130 }
50c2f753
SF
1131 /* if iocharset not set then load_nls_default
1132 is used by caller */
b6b38f70 1133 cFYI(1, "iocharset set to %s", value);
1da177e4 1134 } else {
63135e08
SF
1135 printk(KERN_WARNING "CIFS: iocharset name "
1136 "too long.\n");
b946845a 1137 goto cifs_parse_mount_err;
1da177e4 1138 }
9b9d6b24
JL
1139 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1140 vol->linux_uid = simple_strtoul(value, &value, 0);
1141 uid_specified = true;
bd763319
JL
1142 } else if (!strnicmp(data, "cruid", 5) && value && *value) {
1143 vol->cred_uid = simple_strtoul(value, &value, 0);
9b9d6b24
JL
1144 } else if (!strnicmp(data, "forceuid", 8)) {
1145 override_uid = 1;
1146 } else if (!strnicmp(data, "noforceuid", 10)) {
1147 override_uid = 0;
1148 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1149 vol->linux_gid = simple_strtoul(value, &value, 0);
1150 gid_specified = true;
1151 } else if (!strnicmp(data, "forcegid", 8)) {
1152 override_gid = 1;
1153 } else if (!strnicmp(data, "noforcegid", 10)) {
1154 override_gid = 0;
1da177e4
LT
1155 } else if (strnicmp(data, "file_mode", 4) == 0) {
1156 if (value && *value) {
1157 vol->file_mode =
1158 simple_strtoul(value, &value, 0);
1159 }
1160 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1161 if (value && *value) {
1162 vol->dir_mode =
1163 simple_strtoul(value, &value, 0);
1164 }
1165 } else if (strnicmp(data, "dirmode", 4) == 0) {
1166 if (value && *value) {
1167 vol->dir_mode =
1168 simple_strtoul(value, &value, 0);
1169 }
1170 } else if (strnicmp(data, "port", 4) == 0) {
1171 if (value && *value) {
1172 vol->port =
1173 simple_strtoul(value, &value, 0);
1174 }
1175 } else if (strnicmp(data, "rsize", 5) == 0) {
1176 if (value && *value) {
1177 vol->rsize =
1178 simple_strtoul(value, &value, 0);
1179 }
1180 } else if (strnicmp(data, "wsize", 5) == 0) {
1181 if (value && *value) {
1182 vol->wsize =
1183 simple_strtoul(value, &value, 0);
1184 }
1185 } else if (strnicmp(data, "sockopt", 5) == 0) {
6a5fa236 1186 if (!value || !*value) {
b6b38f70 1187 cERROR(1, "no socket option specified");
6a5fa236
SF
1188 continue;
1189 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1190 vol->sockopt_tcp_nodelay = 1;
1da177e4
LT
1191 }
1192 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1193 if (!value || !*value || (*value == ' ')) {
b6b38f70 1194 cFYI(1, "invalid (empty) netbiosname");
1da177e4 1195 } else {
1397f2ee
JL
1196 memset(vol->source_rfc1001_name, 0x20,
1197 RFC1001_NAME_LEN);
1198 /*
1199 * FIXME: are there cases in which a comma can
1200 * be valid in workstation netbios name (and
1201 * need special handling)?
1202 */
1203 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1204 /* don't ucase netbiosname for user */
50c2f753 1205 if (value[i] == 0)
1da177e4 1206 break;
1397f2ee 1207 vol->source_rfc1001_name[i] = value[i];
1da177e4
LT
1208 }
1209 /* The string has 16th byte zero still from
1210 set at top of the function */
1397f2ee 1211 if (i == RFC1001_NAME_LEN && value[i] != 0)
50c2f753
SF
1212 printk(KERN_WARNING "CIFS: netbiosname"
1213 " longer than 15 truncated.\n");
a10faeb2
SF
1214 }
1215 } else if (strnicmp(data, "servern", 7) == 0) {
1216 /* servernetbiosname specified override *SMBSERVER */
1217 if (!value || !*value || (*value == ' ')) {
b6b38f70 1218 cFYI(1, "empty server netbiosname specified");
a10faeb2
SF
1219 } else {
1220 /* last byte, type, is 0x20 for servr type */
1397f2ee
JL
1221 memset(vol->target_rfc1001_name, 0x20,
1222 RFC1001_NAME_LEN_WITH_NULL);
a10faeb2 1223
50c2f753 1224 for (i = 0; i < 15; i++) {
a10faeb2 1225 /* BB are there cases in which a comma can be
50c2f753
SF
1226 valid in this workstation netbios name
1227 (and need special handling)? */
a10faeb2 1228
50c2f753
SF
1229 /* user or mount helper must uppercase
1230 the netbiosname */
1231 if (value[i] == 0)
a10faeb2
SF
1232 break;
1233 else
50c2f753
SF
1234 vol->target_rfc1001_name[i] =
1235 value[i];
a10faeb2
SF
1236 }
1237 /* The string has 16th byte zero still from
1238 set at top of the function */
1397f2ee 1239 if (i == RFC1001_NAME_LEN && value[i] != 0)
50c2f753
SF
1240 printk(KERN_WARNING "CIFS: server net"
1241 "biosname longer than 15 truncated.\n");
1da177e4 1242 }
6d20e840
SJ
1243 } else if (strnicmp(data, "actimeo", 7) == 0) {
1244 if (value && *value) {
1245 vol->actimeo = HZ * simple_strtoul(value,
1246 &value, 0);
1247 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1248 cERROR(1, "CIFS: attribute cache"
1249 "timeout too large");
b946845a 1250 goto cifs_parse_mount_err;
6d20e840
SJ
1251 }
1252 }
1da177e4
LT
1253 } else if (strnicmp(data, "credentials", 4) == 0) {
1254 /* ignore */
1255 } else if (strnicmp(data, "version", 3) == 0) {
1256 /* ignore */
50c2f753 1257 } else if (strnicmp(data, "guest", 5) == 0) {
1da177e4 1258 /* ignore */
71a394fa
SF
1259 } else if (strnicmp(data, "rw", 2) == 0) {
1260 /* ignore */
1261 } else if (strnicmp(data, "ro", 2) == 0) {
1262 /* ignore */
edf1ae40
SF
1263 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1264 vol->noblocksnd = 1;
1265 } else if (strnicmp(data, "noautotune", 10) == 0) {
1266 vol->noautotune = 1;
1da177e4
LT
1267 } else if ((strnicmp(data, "suid", 4) == 0) ||
1268 (strnicmp(data, "nosuid", 6) == 0) ||
1269 (strnicmp(data, "exec", 4) == 0) ||
1270 (strnicmp(data, "noexec", 6) == 0) ||
1271 (strnicmp(data, "nodev", 5) == 0) ||
1272 (strnicmp(data, "noauto", 6) == 0) ||
1273 (strnicmp(data, "dev", 3) == 0)) {
1274 /* The mount tool or mount.cifs helper (if present)
50c2f753
SF
1275 uses these opts to set flags, and the flags are read
1276 by the kernel vfs layer before we get here (ie
1277 before read super) so there is no point trying to
1278 parse these options again and set anything and it
1279 is ok to just ignore them */
1da177e4 1280 continue;
1da177e4
LT
1281 } else if (strnicmp(data, "hard", 4) == 0) {
1282 vol->retry = 1;
1283 } else if (strnicmp(data, "soft", 4) == 0) {
1284 vol->retry = 0;
1285 } else if (strnicmp(data, "perm", 4) == 0) {
1286 vol->noperm = 0;
1287 } else if (strnicmp(data, "noperm", 6) == 0) {
1288 vol->noperm = 1;
6a0b4824
SF
1289 } else if (strnicmp(data, "mapchars", 8) == 0) {
1290 vol->remap = 1;
1291 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1292 vol->remap = 0;
50c2f753
SF
1293 } else if (strnicmp(data, "sfu", 3) == 0) {
1294 vol->sfu_emul = 1;
1295 } else if (strnicmp(data, "nosfu", 5) == 0) {
1296 vol->sfu_emul = 0;
2c1b8615
SF
1297 } else if (strnicmp(data, "nodfs", 5) == 0) {
1298 vol->nodfs = 1;
ac67055e
JA
1299 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1300 vol->posix_paths = 1;
1301 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1302 vol->posix_paths = 0;
c18c842b
SF
1303 } else if (strnicmp(data, "nounix", 6) == 0) {
1304 vol->no_linux_ext = 1;
1305 } else if (strnicmp(data, "nolinux", 7) == 0) {
1306 vol->no_linux_ext = 1;
50c2f753 1307 } else if ((strnicmp(data, "nocase", 6) == 0) ||
a10faeb2 1308 (strnicmp(data, "ignorecase", 10) == 0)) {
50c2f753 1309 vol->nocase = 1;
f636a348
JL
1310 } else if (strnicmp(data, "mand", 4) == 0) {
1311 /* ignore */
1312 } else if (strnicmp(data, "nomand", 6) == 0) {
1313 /* ignore */
1314 } else if (strnicmp(data, "_netdev", 7) == 0) {
1315 /* ignore */
c46fa8ac
SF
1316 } else if (strnicmp(data, "brl", 3) == 0) {
1317 vol->nobrl = 0;
50c2f753 1318 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1c955187 1319 (strnicmp(data, "nolock", 6) == 0)) {
c46fa8ac 1320 vol->nobrl = 1;
d3485d37
SF
1321 /* turn off mandatory locking in mode
1322 if remote locking is turned off since the
1323 local vfs will do advisory */
50c2f753
SF
1324 if (vol->file_mode ==
1325 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
d3485d37 1326 vol->file_mode = S_IALLUGO;
13a6e42a
SF
1327 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1328 /* will take the shorter form "forcemand" as well */
1329 /* This mount option will force use of mandatory
1330 (DOS/Windows style) byte range locks, instead of
1331 using posix advisory byte range locks, even if the
1332 Unix extensions are available and posix locks would
1333 be supported otherwise. If Unix extensions are not
1334 negotiated this has no effect since mandatory locks
1335 would be used (mandatory locks is all that those
1336 those servers support) */
1337 vol->mand_lock = 1;
1da177e4
LT
1338 } else if (strnicmp(data, "setuids", 7) == 0) {
1339 vol->setuids = 1;
1340 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1341 vol->setuids = 0;
d0a9c078
JL
1342 } else if (strnicmp(data, "dynperm", 7) == 0) {
1343 vol->dynperm = true;
1344 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1345 vol->dynperm = false;
1da177e4
LT
1346 } else if (strnicmp(data, "nohard", 6) == 0) {
1347 vol->retry = 0;
1348 } else if (strnicmp(data, "nosoft", 6) == 0) {
1349 vol->retry = 1;
1350 } else if (strnicmp(data, "nointr", 6) == 0) {
1351 vol->intr = 0;
1352 } else if (strnicmp(data, "intr", 4) == 0) {
1353 vol->intr = 1;
be652445
SF
1354 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1355 vol->nostrictsync = 1;
1356 } else if (strnicmp(data, "strictsync", 10) == 0) {
1357 vol->nostrictsync = 0;
50c2f753 1358 } else if (strnicmp(data, "serverino", 7) == 0) {
1da177e4 1359 vol->server_ino = 1;
50c2f753 1360 } else if (strnicmp(data, "noserverino", 9) == 0) {
1da177e4 1361 vol->server_ino = 0;
d4ffff1f
PS
1362 } else if (strnicmp(data, "rwpidforward", 4) == 0) {
1363 vol->rwpidforward = 1;
50c2f753 1364 } else if (strnicmp(data, "cifsacl", 7) == 0) {
0a4b92c0
SF
1365 vol->cifs_acl = 1;
1366 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1367 vol->cifs_acl = 0;
50c2f753 1368 } else if (strnicmp(data, "acl", 3) == 0) {
1da177e4 1369 vol->no_psx_acl = 0;
50c2f753 1370 } else if (strnicmp(data, "noacl", 5) == 0) {
1da177e4 1371 vol->no_psx_acl = 1;
84210e91
SF
1372 } else if (strnicmp(data, "locallease", 6) == 0) {
1373 vol->local_lease = 1;
50c2f753 1374 } else if (strnicmp(data, "sign", 4) == 0) {
750d1151 1375 vol->secFlg |= CIFSSEC_MUST_SIGN;
95b1cb90
SF
1376 } else if (strnicmp(data, "seal", 4) == 0) {
1377 /* we do not do the following in secFlags because seal
1378 is a per tree connection (mount) not a per socket
1379 or per-smb connection option in the protocol */
1380 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1381 vol->seal = 1;
50c2f753 1382 } else if (strnicmp(data, "direct", 6) == 0) {
1da177e4 1383 vol->direct_io = 1;
50c2f753 1384 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1da177e4 1385 vol->direct_io = 1;
d39454ff
PS
1386 } else if (strnicmp(data, "strictcache", 11) == 0) {
1387 vol->strict_io = 1;
1da177e4 1388 } else if (strnicmp(data, "noac", 4) == 0) {
50c2f753
SF
1389 printk(KERN_WARNING "CIFS: Mount option noac not "
1390 "supported. Instead set "
1391 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
fa1df75d 1392 } else if (strnicmp(data, "fsc", 3) == 0) {
607a569d 1393#ifndef CONFIG_CIFS_FSCACHE
83fb086e 1394 cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE "
607a569d 1395 "kernel config option set");
b946845a 1396 goto cifs_parse_mount_err;
607a569d 1397#endif
fa1df75d 1398 vol->fsc = true;
736a3320
SM
1399 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1400 vol->mfsymlinks = true;
0eb8a132
JL
1401 } else if (strnicmp(data, "multiuser", 8) == 0) {
1402 vol->multiuser = true;
1da177e4 1403 } else
50c2f753
SF
1404 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1405 data);
1da177e4
LT
1406 }
1407 if (vol->UNC == NULL) {
4523cc30 1408 if (devname == NULL) {
50c2f753
SF
1409 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1410 "target\n");
b946845a 1411 goto cifs_parse_mount_err;
1da177e4
LT
1412 }
1413 if ((temp_len = strnlen(devname, 300)) < 300) {
50c2f753 1414 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
4523cc30 1415 if (vol->UNC == NULL)
b946845a 1416 goto cifs_parse_mount_err;
50c2f753 1417 strcpy(vol->UNC, devname);
1da177e4
LT
1418 if (strncmp(vol->UNC, "//", 2) == 0) {
1419 vol->UNC[0] = '\\';
1420 vol->UNC[1] = '\\';
1421 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
50c2f753
SF
1422 printk(KERN_WARNING "CIFS: UNC Path does not "
1423 "begin with // or \\\\ \n");
b946845a 1424 goto cifs_parse_mount_err;
1da177e4 1425 }
7c5e628f
IM
1426 value = strpbrk(vol->UNC+2, "/\\");
1427 if (value)
1428 *value = '\\';
1da177e4
LT
1429 } else {
1430 printk(KERN_WARNING "CIFS: UNC name too long\n");
b946845a 1431 goto cifs_parse_mount_err;
1da177e4
LT
1432 }
1433 }
0eb8a132
JL
1434
1435 if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1436 cERROR(1, "Multiuser mounts currently require krb5 "
1437 "authentication!");
b946845a 1438 goto cifs_parse_mount_err;
0eb8a132
JL
1439 }
1440
fb8c4b14 1441 if (vol->UNCip == NULL)
1da177e4
LT
1442 vol->UNCip = &vol->UNC[2];
1443
9b9d6b24
JL
1444 if (uid_specified)
1445 vol->override_uid = override_uid;
1446 else if (override_uid == 1)
1447 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1448 "specified with no uid= option.\n");
1449
1450 if (gid_specified)
1451 vol->override_gid = override_gid;
1452 else if (override_gid == 1)
1453 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1454 "specified with no gid= option.\n");
1455
b946845a 1456 kfree(mountdata_copy);
1da177e4 1457 return 0;
b946845a
SF
1458
1459cifs_parse_mount_err:
1460 kfree(mountdata_copy);
1461 return 1;
1da177e4
LT
1462}
1463
3eb9a889
BG
1464/** Returns true if srcaddr isn't specified and rhs isn't
1465 * specified, or if srcaddr is specified and
1466 * matches the IP address of the rhs argument.
1467 */
1468static bool
1469srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1470{
1471 switch (srcaddr->sa_family) {
1472 case AF_UNSPEC:
1473 return (rhs->sa_family == AF_UNSPEC);
1474 case AF_INET: {
1475 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1476 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1477 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1478 }
1479 case AF_INET6: {
1480 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1481 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1482 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1483 }
1484 default:
1485 WARN_ON(1);
1486 return false; /* don't expect to be here */
1487 }
1488}
1489
4b886136
PS
1490/*
1491 * If no port is specified in addr structure, we try to match with 445 port
1492 * and if it fails - with 139 ports. It should be called only if address
1493 * families of server and addr are equal.
1494 */
1495static bool
1496match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1497{
6da97910 1498 __be16 port, *sport;
4b886136
PS
1499
1500 switch (addr->sa_family) {
1501 case AF_INET:
1502 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1503 port = ((struct sockaddr_in *) addr)->sin_port;
1504 break;
1505 case AF_INET6:
1506 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1507 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1508 break;
1509 default:
1510 WARN_ON(1);
1511 return false;
1512 }
1513
1514 if (!port) {
1515 port = htons(CIFS_PORT);
1516 if (port == *sport)
1517 return true;
1518
1519 port = htons(RFC1001_PORT);
1520 }
1521
1522 return port == *sport;
1523}
3eb9a889 1524
4515148e 1525static bool
3eb9a889
BG
1526match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1527 struct sockaddr *srcaddr)
4515148e 1528{
4515148e 1529 switch (addr->sa_family) {
a9f1b85e
PS
1530 case AF_INET: {
1531 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1532 struct sockaddr_in *srv_addr4 =
1533 (struct sockaddr_in *)&server->dstaddr;
1534
1535 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
4515148e 1536 return false;
4515148e 1537 break;
a9f1b85e
PS
1538 }
1539 case AF_INET6: {
1540 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1541 struct sockaddr_in6 *srv_addr6 =
1542 (struct sockaddr_in6 *)&server->dstaddr;
1543
4515148e 1544 if (!ipv6_addr_equal(&addr6->sin6_addr,
a9f1b85e 1545 &srv_addr6->sin6_addr))
4515148e 1546 return false;
a9f1b85e 1547 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
4515148e 1548 return false;
4515148e
JL
1549 break;
1550 }
a9f1b85e
PS
1551 default:
1552 WARN_ON(1);
1553 return false; /* don't expect to be here */
1554 }
4515148e 1555
3eb9a889
BG
1556 if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1557 return false;
1558
4515148e
JL
1559 return true;
1560}
1561
daf5b0b6
JL
1562static bool
1563match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1564{
1565 unsigned int secFlags;
1566
1567 if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1568 secFlags = vol->secFlg;
1569 else
1570 secFlags = global_secflags | vol->secFlg;
1571
1572 switch (server->secType) {
1573 case LANMAN:
1574 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1575 return false;
1576 break;
1577 case NTLMv2:
1578 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1579 return false;
1580 break;
1581 case NTLM:
1582 if (!(secFlags & CIFSSEC_MAY_NTLM))
1583 return false;
1584 break;
1585 case Kerberos:
1586 if (!(secFlags & CIFSSEC_MAY_KRB5))
1587 return false;
1588 break;
1589 case RawNTLMSSP:
1590 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1591 return false;
1592 break;
1593 default:
1594 /* shouldn't happen */
1595 return false;
1596 }
1597
25985edc 1598 /* now check if signing mode is acceptable */
daf5b0b6 1599 if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
96daf2b0 1600 (server->sec_mode & SECMODE_SIGN_REQUIRED))
daf5b0b6
JL
1601 return false;
1602 else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
96daf2b0 1603 (server->sec_mode &
daf5b0b6
JL
1604 (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1605 return false;
1606
1607 return true;
1608}
1609
37bb04e5
PS
1610static int match_server(struct TCP_Server_Info *server, struct sockaddr *addr,
1611 struct smb_vol *vol)
1612{
1613 if (!net_eq(cifs_net_ns(server), current->nsproxy->net_ns))
1614 return 0;
1615
1616 if (!match_address(server, addr,
1617 (struct sockaddr *)&vol->srcaddr))
1618 return 0;
1619
1620 if (!match_port(server, addr))
1621 return 0;
1622
1623 if (!match_security(server, vol))
1624 return 0;
1625
1626 return 1;
1627}
1628
e7ddee90 1629static struct TCP_Server_Info *
daf5b0b6 1630cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1da177e4 1631{
e7ddee90 1632 struct TCP_Server_Info *server;
e7ddee90 1633
3f9bcca7 1634 spin_lock(&cifs_tcp_ses_lock);
4515148e 1635 list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
37bb04e5 1636 if (!match_server(server, addr, vol))
daf5b0b6
JL
1637 continue;
1638
e7ddee90 1639 ++server->srv_count;
3f9bcca7 1640 spin_unlock(&cifs_tcp_ses_lock);
b6b38f70 1641 cFYI(1, "Existing tcp session with server found");
e7ddee90 1642 return server;
1da177e4 1643 }
3f9bcca7 1644 spin_unlock(&cifs_tcp_ses_lock);
1da177e4
LT
1645 return NULL;
1646}
1b20d672 1647
14fbf50d 1648static void
e7ddee90 1649cifs_put_tcp_session(struct TCP_Server_Info *server)
1da177e4 1650{
e7ddee90 1651 struct task_struct *task;
1b20d672 1652
3f9bcca7 1653 spin_lock(&cifs_tcp_ses_lock);
e7ddee90 1654 if (--server->srv_count > 0) {
3f9bcca7 1655 spin_unlock(&cifs_tcp_ses_lock);
e7ddee90 1656 return;
1da177e4 1657 }
1b20d672 1658
f1d0c998
RL
1659 put_net(cifs_net_ns(server));
1660
e7ddee90 1661 list_del_init(&server->tcp_ses_list);
3f9bcca7 1662 spin_unlock(&cifs_tcp_ses_lock);
dea570e0 1663
c74093b6
JL
1664 cancel_delayed_work_sync(&server->echo);
1665
e7ddee90
JL
1666 spin_lock(&GlobalMid_Lock);
1667 server->tcpStatus = CifsExiting;
1668 spin_unlock(&GlobalMid_Lock);
dea570e0 1669
d2b91521 1670 cifs_crypto_shash_release(server);
488f1d2d
SJ
1671 cifs_fscache_release_client_cookie(server);
1672
21e73393
SP
1673 kfree(server->session_key.response);
1674 server->session_key.response = NULL;
1675 server->session_key.len = 0;
1676
e7ddee90
JL
1677 task = xchg(&server->tsk, NULL);
1678 if (task)
1679 force_sig(SIGKILL, task);
1da177e4
LT
1680}
1681
63c038c2
JL
1682static struct TCP_Server_Info *
1683cifs_get_tcp_session(struct smb_vol *volume_info)
1684{
1685 struct TCP_Server_Info *tcp_ses = NULL;
a9ac49d3 1686 struct sockaddr_storage addr;
63c038c2
JL
1687 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1688 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1689 int rc;
1690
a9ac49d3 1691 memset(&addr, 0, sizeof(struct sockaddr_storage));
63c038c2 1692
b6b38f70 1693 cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
63c038c2 1694
1e68b2b2 1695 if (volume_info->UNCip && volume_info->UNC) {
50d97160
JL
1696 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1697 volume_info->UNCip,
67b7626a 1698 strlen(volume_info->UNCip),
50d97160 1699 volume_info->port);
1e68b2b2 1700 if (!rc) {
63c038c2
JL
1701 /* we failed translating address */
1702 rc = -EINVAL;
1703 goto out_err;
1704 }
63c038c2
JL
1705 } else if (volume_info->UNCip) {
1706 /* BB using ip addr as tcp_ses name to connect to the
1707 DFS root below */
b6b38f70 1708 cERROR(1, "Connecting to DFS root not implemented yet");
63c038c2
JL
1709 rc = -EINVAL;
1710 goto out_err;
1711 } else /* which tcp_sess DFS root would we conect to */ {
b6b38f70
JP
1712 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1713 "unc=//192.168.1.100/public) specified");
63c038c2
JL
1714 rc = -EINVAL;
1715 goto out_err;
1716 }
1717
1718 /* see if we already have a matching tcp_ses */
daf5b0b6 1719 tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
63c038c2
JL
1720 if (tcp_ses)
1721 return tcp_ses;
1722
1723 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1724 if (!tcp_ses) {
1725 rc = -ENOMEM;
1726 goto out_err;
1727 }
1728
d2b91521
SP
1729 rc = cifs_crypto_shash_allocate(tcp_ses);
1730 if (rc) {
1731 cERROR(1, "could not setup hash structures rc %d", rc);
1732 goto out_err;
1733 }
1734
f1d0c998 1735 cifs_set_net_ns(tcp_ses, get_net(current->nsproxy->net_ns));
63c038c2
JL
1736 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1737 if (IS_ERR(tcp_ses->hostname)) {
1738 rc = PTR_ERR(tcp_ses->hostname);
f7c5445a 1739 goto out_err_crypto_release;
63c038c2
JL
1740 }
1741
1742 tcp_ses->noblocksnd = volume_info->noblocksnd;
1743 tcp_ses->noautotune = volume_info->noautotune;
6a5fa236 1744 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
63c038c2
JL
1745 atomic_set(&tcp_ses->inFlight, 0);
1746 init_waitqueue_head(&tcp_ses->response_q);
1747 init_waitqueue_head(&tcp_ses->request_q);
1748 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1749 mutex_init(&tcp_ses->srv_mutex);
1750 memcpy(tcp_ses->workstation_RFC1001_name,
1751 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1752 memcpy(tcp_ses->server_RFC1001_name,
1753 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
5d0d2882 1754 tcp_ses->session_estab = false;
63c038c2 1755 tcp_ses->sequence_number = 0;
fda35943 1756 tcp_ses->lstrp = jiffies;
63c038c2
JL
1757 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1758 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
c74093b6 1759 INIT_DELAYED_WORK(&tcp_ses->echo, cifs_echo_request);
63c038c2
JL
1760
1761 /*
1762 * at this point we are the only ones with the pointer
1763 * to the struct since the kernel thread not created yet
1764 * no need to spinlock this init of tcpStatus or srv_count
1765 */
1766 tcp_ses->tcpStatus = CifsNew;
3eb9a889
BG
1767 memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1768 sizeof(tcp_ses->srcaddr));
63c038c2
JL
1769 ++tcp_ses->srv_count;
1770
a9ac49d3 1771 if (addr.ss_family == AF_INET6) {
b6b38f70 1772 cFYI(1, "attempting ipv6 connect");
63c038c2
JL
1773 /* BB should we allow ipv6 on port 139? */
1774 /* other OS never observed in Wild doing 139 with v6 */
a9f1b85e
PS
1775 memcpy(&tcp_ses->dstaddr, sin_server6,
1776 sizeof(struct sockaddr_in6));
1777 } else
1778 memcpy(&tcp_ses->dstaddr, sin_server,
1779 sizeof(struct sockaddr_in));
1780
1781 rc = ip_connect(tcp_ses);
63c038c2 1782 if (rc < 0) {
b6b38f70 1783 cERROR(1, "Error connecting to socket. Aborting operation");
f7c5445a 1784 goto out_err_crypto_release;
63c038c2
JL
1785 }
1786
1787 /*
1788 * since we're in a cifs function already, we know that
1789 * this will succeed. No need for try_module_get().
1790 */
1791 __module_get(THIS_MODULE);
1792 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1793 tcp_ses, "cifsd");
1794 if (IS_ERR(tcp_ses->tsk)) {
1795 rc = PTR_ERR(tcp_ses->tsk);
b6b38f70 1796 cERROR(1, "error %d create cifsd thread", rc);
63c038c2 1797 module_put(THIS_MODULE);
f7c5445a 1798 goto out_err_crypto_release;
63c038c2 1799 }
fd88ce93 1800 tcp_ses->tcpStatus = CifsNeedNegotiate;
63c038c2
JL
1801
1802 /* thread spawned, put it on the list */
3f9bcca7 1803 spin_lock(&cifs_tcp_ses_lock);
63c038c2 1804 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
3f9bcca7 1805 spin_unlock(&cifs_tcp_ses_lock);
63c038c2 1806
488f1d2d
SJ
1807 cifs_fscache_get_client_cookie(tcp_ses);
1808
c74093b6
JL
1809 /* queue echo request delayed work */
1810 queue_delayed_work(system_nrt_wq, &tcp_ses->echo, SMB_ECHO_INTERVAL);
1811
63c038c2
JL
1812 return tcp_ses;
1813
f7c5445a 1814out_err_crypto_release:
d2b91521
SP
1815 cifs_crypto_shash_release(tcp_ses);
1816
f1d0c998
RL
1817 put_net(cifs_net_ns(tcp_ses));
1818
63c038c2
JL
1819out_err:
1820 if (tcp_ses) {
8347a5cd
SF
1821 if (!IS_ERR(tcp_ses->hostname))
1822 kfree(tcp_ses->hostname);
63c038c2
JL
1823 if (tcp_ses->ssocket)
1824 sock_release(tcp_ses->ssocket);
1825 kfree(tcp_ses);
1826 }
1827 return ERR_PTR(rc);
1828}
1829
96daf2b0 1830static int match_session(struct cifs_ses *ses, struct smb_vol *vol)
37bb04e5
PS
1831{
1832 switch (ses->server->secType) {
1833 case Kerberos:
1834 if (vol->cred_uid != ses->cred_uid)
1835 return 0;
1836 break;
1837 default:
1838 /* anything else takes username/password */
1839 if (ses->user_name == NULL)
1840 return 0;
1841 if (strncmp(ses->user_name, vol->username,
1842 MAX_USERNAME_SIZE))
1843 return 0;
1844 if (strlen(vol->username) != 0 &&
1845 ses->password != NULL &&
1846 strncmp(ses->password,
1847 vol->password ? vol->password : "",
1848 MAX_PASSWORD_SIZE))
1849 return 0;
1850 }
1851 return 1;
1852}
1853
96daf2b0 1854static struct cifs_ses *
4ff67b72 1855cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1da177e4 1856{
96daf2b0 1857 struct cifs_ses *ses;
dea570e0 1858
3f9bcca7 1859 spin_lock(&cifs_tcp_ses_lock);
4ff67b72 1860 list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
37bb04e5
PS
1861 if (!match_session(ses, vol))
1862 continue;
14fbf50d 1863 ++ses->ses_count;
3f9bcca7 1864 spin_unlock(&cifs_tcp_ses_lock);
14fbf50d
JL
1865 return ses;
1866 }
3f9bcca7 1867 spin_unlock(&cifs_tcp_ses_lock);
14fbf50d
JL
1868 return NULL;
1869}
dea570e0 1870
14fbf50d 1871static void
96daf2b0 1872cifs_put_smb_ses(struct cifs_ses *ses)
14fbf50d
JL
1873{
1874 int xid;
1875 struct TCP_Server_Info *server = ses->server;
dea570e0 1876
36988c76 1877 cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
3f9bcca7 1878 spin_lock(&cifs_tcp_ses_lock);
14fbf50d 1879 if (--ses->ses_count > 0) {
3f9bcca7 1880 spin_unlock(&cifs_tcp_ses_lock);
14fbf50d
JL
1881 return;
1882 }
dea570e0 1883
14fbf50d 1884 list_del_init(&ses->smb_ses_list);
3f9bcca7 1885 spin_unlock(&cifs_tcp_ses_lock);
dea570e0 1886
14fbf50d
JL
1887 if (ses->status == CifsGood) {
1888 xid = GetXid();
1889 CIFSSMBLogoff(xid, ses);
1890 _FreeXid(xid);
1891 }
1892 sesInfoFree(ses);
1893 cifs_put_tcp_session(server);
1894}
dea570e0 1895
d9b94201
SF
1896static bool warned_on_ntlm; /* globals init to false automatically */
1897
96daf2b0 1898static struct cifs_ses *
36988c76
JL
1899cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1900{
1901 int rc = -ENOMEM, xid;
96daf2b0 1902 struct cifs_ses *ses;
a9f1b85e
PS
1903 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1904 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
36988c76
JL
1905
1906 xid = GetXid();
1907
4ff67b72 1908 ses = cifs_find_smb_ses(server, volume_info);
36988c76
JL
1909 if (ses) {
1910 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1911
36988c76 1912 mutex_lock(&ses->session_mutex);
198b5682
JL
1913 rc = cifs_negotiate_protocol(xid, ses);
1914 if (rc) {
1915 mutex_unlock(&ses->session_mutex);
1916 /* problem -- put our ses reference */
1917 cifs_put_smb_ses(ses);
1918 FreeXid(xid);
1919 return ERR_PTR(rc);
1920 }
36988c76
JL
1921 if (ses->need_reconnect) {
1922 cFYI(1, "Session needs reconnect");
1923 rc = cifs_setup_session(xid, ses,
1924 volume_info->local_nls);
1925 if (rc) {
1926 mutex_unlock(&ses->session_mutex);
1927 /* problem -- put our reference */
1928 cifs_put_smb_ses(ses);
1929 FreeXid(xid);
1930 return ERR_PTR(rc);
1931 }
1932 }
1933 mutex_unlock(&ses->session_mutex);
460cf341
JL
1934
1935 /* existing SMB ses has a server reference already */
1936 cifs_put_tcp_session(server);
36988c76
JL
1937 FreeXid(xid);
1938 return ses;
1939 }
1940
1941 cFYI(1, "Existing smb sess not found");
1942 ses = sesInfoAlloc();
1943 if (ses == NULL)
1944 goto get_ses_fail;
1945
1946 /* new SMB session uses our server ref */
1947 ses->server = server;
a9f1b85e
PS
1948 if (server->dstaddr.ss_family == AF_INET6)
1949 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
36988c76 1950 else
a9f1b85e 1951 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
36988c76 1952
8727c8a8
SF
1953 if (volume_info->username) {
1954 ses->user_name = kstrdup(volume_info->username, GFP_KERNEL);
1955 if (!ses->user_name)
1956 goto get_ses_fail;
1957 }
36988c76
JL
1958
1959 /* volume_info->password freed at unmount */
1960 if (volume_info->password) {
1961 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
1962 if (!ses->password)
1963 goto get_ses_fail;
1964 }
1965 if (volume_info->domainname) {
d3686d54
SP
1966 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
1967 if (!ses->domainName)
1968 goto get_ses_fail;
36988c76 1969 }
3e4b3e1f 1970 ses->cred_uid = volume_info->cred_uid;
36988c76 1971 ses->linux_uid = volume_info->linux_uid;
d9b94201
SF
1972
1973 /* ntlmv2 is much stronger than ntlm security, and has been broadly
1974 supported for many years, time to update default security mechanism */
1975 if ((volume_info->secFlg == 0) && warned_on_ntlm == false) {
1976 warned_on_ntlm = true;
1977 cERROR(1, "default security mechanism requested. The default "
1978 "security mechanism will be upgraded from ntlm to "
c592a707 1979 "ntlmv2 in kernel release 3.1");
d9b94201 1980 }
36988c76
JL
1981 ses->overrideSecFlg = volume_info->secFlg;
1982
1983 mutex_lock(&ses->session_mutex);
198b5682
JL
1984 rc = cifs_negotiate_protocol(xid, ses);
1985 if (!rc)
1986 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
36988c76 1987 mutex_unlock(&ses->session_mutex);
c8e56f1f 1988 if (rc)
36988c76
JL
1989 goto get_ses_fail;
1990
1991 /* success, put it on the list */
3f9bcca7 1992 spin_lock(&cifs_tcp_ses_lock);
36988c76 1993 list_add(&ses->smb_ses_list, &server->smb_ses_list);
3f9bcca7 1994 spin_unlock(&cifs_tcp_ses_lock);
36988c76
JL
1995
1996 FreeXid(xid);
1997 return ses;
1998
1999get_ses_fail:
2000 sesInfoFree(ses);
2001 FreeXid(xid);
2002 return ERR_PTR(rc);
2003}
2004
96daf2b0 2005static int match_tcon(struct cifs_tcon *tcon, const char *unc)
37bb04e5
PS
2006{
2007 if (tcon->tidStatus == CifsExiting)
2008 return 0;
2009 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
2010 return 0;
2011 return 1;
2012}
2013
96daf2b0
SF
2014static struct cifs_tcon *
2015cifs_find_tcon(struct cifs_ses *ses, const char *unc)
f1987b44
JL
2016{
2017 struct list_head *tmp;
96daf2b0 2018 struct cifs_tcon *tcon;
f1987b44 2019
3f9bcca7 2020 spin_lock(&cifs_tcp_ses_lock);
f1987b44 2021 list_for_each(tmp, &ses->tcon_list) {
96daf2b0 2022 tcon = list_entry(tmp, struct cifs_tcon, tcon_list);
37bb04e5 2023 if (!match_tcon(tcon, unc))
f1987b44 2024 continue;
f1987b44 2025 ++tcon->tc_count;
3f9bcca7 2026 spin_unlock(&cifs_tcp_ses_lock);
dea570e0 2027 return tcon;
1da177e4 2028 }
3f9bcca7 2029 spin_unlock(&cifs_tcp_ses_lock);
1da177e4
LT
2030 return NULL;
2031}
2032
f1987b44 2033static void
96daf2b0 2034cifs_put_tcon(struct cifs_tcon *tcon)
f1987b44
JL
2035{
2036 int xid;
96daf2b0 2037 struct cifs_ses *ses = tcon->ses;
f1987b44 2038
d00c28de 2039 cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
3f9bcca7 2040 spin_lock(&cifs_tcp_ses_lock);
f1987b44 2041 if (--tcon->tc_count > 0) {
3f9bcca7 2042 spin_unlock(&cifs_tcp_ses_lock);
f1987b44
JL
2043 return;
2044 }
2045
2046 list_del_init(&tcon->tcon_list);
3f9bcca7 2047 spin_unlock(&cifs_tcp_ses_lock);
f1987b44
JL
2048
2049 xid = GetXid();
2050 CIFSSMBTDis(xid, tcon);
2051 _FreeXid(xid);
2052
d03382ce 2053 cifs_fscache_release_super_cookie(tcon);
9f841593 2054 tconInfoFree(tcon);
f1987b44
JL
2055 cifs_put_smb_ses(ses);
2056}
2057
96daf2b0
SF
2058static struct cifs_tcon *
2059cifs_get_tcon(struct cifs_ses *ses, struct smb_vol *volume_info)
d00c28de
JL
2060{
2061 int rc, xid;
96daf2b0 2062 struct cifs_tcon *tcon;
d00c28de
JL
2063
2064 tcon = cifs_find_tcon(ses, volume_info->UNC);
2065 if (tcon) {
2066 cFYI(1, "Found match on UNC path");
2067 /* existing tcon already has a reference */
2068 cifs_put_smb_ses(ses);
2069 if (tcon->seal != volume_info->seal)
2070 cERROR(1, "transport encryption setting "
2071 "conflicts with existing tid");
2072 return tcon;
2073 }
2074
2075 tcon = tconInfoAlloc();
2076 if (tcon == NULL) {
2077 rc = -ENOMEM;
2078 goto out_fail;
2079 }
2080
2081 tcon->ses = ses;
2082 if (volume_info->password) {
2083 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
2084 if (!tcon->password) {
2085 rc = -ENOMEM;
2086 goto out_fail;
2087 }
2088 }
2089
2090 if (strchr(volume_info->UNC + 3, '\\') == NULL
2091 && strchr(volume_info->UNC + 3, '/') == NULL) {
2092 cERROR(1, "Missing share name");
2093 rc = -ENODEV;
2094 goto out_fail;
2095 }
2096
2097 /* BB Do we need to wrap session_mutex around
2098 * this TCon call and Unix SetFS as
2099 * we do on SessSetup and reconnect? */
2100 xid = GetXid();
2101 rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
2102 FreeXid(xid);
2103 cFYI(1, "CIFS Tcon rc = %d", rc);
2104 if (rc)
2105 goto out_fail;
2106
2107 if (volume_info->nodfs) {
2108 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2109 cFYI(1, "DFS disabled (%d)", tcon->Flags);
2110 }
2111 tcon->seal = volume_info->seal;
2112 /* we can have only one retry value for a connection
2113 to a share so for resources mounted more than once
2114 to the same server share the last value passed in
2115 for the retry flag is used */
2116 tcon->retry = volume_info->retry;
2117 tcon->nocase = volume_info->nocase;
2118 tcon->local_lease = volume_info->local_lease;
2119
3f9bcca7 2120 spin_lock(&cifs_tcp_ses_lock);
d00c28de 2121 list_add(&tcon->tcon_list, &ses->tcon_list);
3f9bcca7 2122 spin_unlock(&cifs_tcp_ses_lock);
d00c28de 2123
d03382ce
SJ
2124 cifs_fscache_get_super_cookie(tcon);
2125
d00c28de
JL
2126 return tcon;
2127
2128out_fail:
2129 tconInfoFree(tcon);
2130 return ERR_PTR(rc);
2131}
2132
9d002df4
JL
2133void
2134cifs_put_tlink(struct tcon_link *tlink)
2135{
2136 if (!tlink || IS_ERR(tlink))
2137 return;
2138
2139 if (!atomic_dec_and_test(&tlink->tl_count) ||
2140 test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2141 tlink->tl_time = jiffies;
2142 return;
2143 }
2144
2145 if (!IS_ERR(tlink_tcon(tlink)))
2146 cifs_put_tcon(tlink_tcon(tlink));
2147 kfree(tlink);
2148 return;
2149}
d00c28de 2150
25c7f41e 2151static inline struct tcon_link *
cd51875d
PS
2152cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
2153{
2154 return cifs_sb->master_tlink;
2155}
25c7f41e
PS
2156
2157static int
2158compare_mount_options(struct super_block *sb, struct cifs_mnt_data *mnt_data)
2159{
2160 struct cifs_sb_info *old = CIFS_SB(sb);
2161 struct cifs_sb_info *new = mnt_data->cifs_sb;
2162
2163 if ((sb->s_flags & CIFS_MS_MASK) != (mnt_data->flags & CIFS_MS_MASK))
2164 return 0;
2165
2166 if ((old->mnt_cifs_flags & CIFS_MOUNT_MASK) !=
2167 (new->mnt_cifs_flags & CIFS_MOUNT_MASK))
2168 return 0;
2169
2170 if (old->rsize != new->rsize)
2171 return 0;
2172
2173 /*
2174 * We want to share sb only if we don't specify wsize or specified wsize
2175 * is greater or equal than existing one.
2176 */
2177 if (new->wsize && new->wsize < old->wsize)
2178 return 0;
2179
2180 if (old->mnt_uid != new->mnt_uid || old->mnt_gid != new->mnt_gid)
2181 return 0;
2182
2183 if (old->mnt_file_mode != new->mnt_file_mode ||
2184 old->mnt_dir_mode != new->mnt_dir_mode)
2185 return 0;
2186
2187 if (strcmp(old->local_nls->charset, new->local_nls->charset))
2188 return 0;
2189
2190 if (old->actimeo != new->actimeo)
2191 return 0;
2192
2193 return 1;
2194}
2195
2196int
2197cifs_match_super(struct super_block *sb, void *data)
2198{
2199 struct cifs_mnt_data *mnt_data = (struct cifs_mnt_data *)data;
2200 struct smb_vol *volume_info;
2201 struct cifs_sb_info *cifs_sb;
2202 struct TCP_Server_Info *tcp_srv;
96daf2b0
SF
2203 struct cifs_ses *ses;
2204 struct cifs_tcon *tcon;
25c7f41e
PS
2205 struct tcon_link *tlink;
2206 struct sockaddr_storage addr;
2207 int rc = 0;
2208
2209 memset(&addr, 0, sizeof(struct sockaddr_storage));
2210
2211 spin_lock(&cifs_tcp_ses_lock);
2212 cifs_sb = CIFS_SB(sb);
2213 tlink = cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
2214 if (IS_ERR(tlink)) {
2215 spin_unlock(&cifs_tcp_ses_lock);
2216 return rc;
2217 }
2218 tcon = tlink_tcon(tlink);
2219 ses = tcon->ses;
2220 tcp_srv = ses->server;
2221
2222 volume_info = mnt_data->vol;
2223
2224 if (!volume_info->UNCip || !volume_info->UNC)
2225 goto out;
2226
2227 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
2228 volume_info->UNCip,
2229 strlen(volume_info->UNCip),
2230 volume_info->port);
2231 if (!rc)
2232 goto out;
2233
2234 if (!match_server(tcp_srv, (struct sockaddr *)&addr, volume_info) ||
2235 !match_session(ses, volume_info) ||
2236 !match_tcon(tcon, volume_info->UNC)) {
2237 rc = 0;
2238 goto out;
2239 }
2240
2241 rc = compare_mount_options(sb, mnt_data);
2242out:
2243 cifs_put_tlink(tlink);
2244 spin_unlock(&cifs_tcp_ses_lock);
2245 return rc;
2246}
2247
1da177e4 2248int
96daf2b0 2249get_dfs_path(int xid, struct cifs_ses *pSesInfo, const char *old_path,
50c2f753 2250 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
366781c1 2251 struct dfs_info3_param **preferrals, int remap)
1da177e4
LT
2252{
2253 char *temp_unc;
2254 int rc = 0;
2255
2256 *pnum_referrals = 0;
366781c1 2257 *preferrals = NULL;
1da177e4
LT
2258
2259 if (pSesInfo->ipc_tid == 0) {
2260 temp_unc = kmalloc(2 /* for slashes */ +
50c2f753
SF
2261 strnlen(pSesInfo->serverName,
2262 SERVER_NAME_LEN_WITH_NULL * 2)
1da177e4
LT
2263 + 1 + 4 /* slash IPC$ */ + 2,
2264 GFP_KERNEL);
2265 if (temp_unc == NULL)
2266 return -ENOMEM;
2267 temp_unc[0] = '\\';
2268 temp_unc[1] = '\\';
2269 strcpy(temp_unc + 2, pSesInfo->serverName);
2270 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2271 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
b6b38f70 2272 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
1da177e4
LT
2273 kfree(temp_unc);
2274 }
2275 if (rc == 0)
c2cf07d5 2276 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
737b758c 2277 pnum_referrals, nls_codepage, remap);
366781c1
SF
2278 /* BB map targetUNCs to dfs_info3 structures, here or
2279 in CIFSGetDFSRefer BB */
1da177e4
LT
2280
2281 return rc;
2282}
2283
09e50d55
JL
2284#ifdef CONFIG_DEBUG_LOCK_ALLOC
2285static struct lock_class_key cifs_key[2];
2286static struct lock_class_key cifs_slock_key[2];
2287
2288static inline void
2289cifs_reclassify_socket4(struct socket *sock)
2290{
2291 struct sock *sk = sock->sk;
2292 BUG_ON(sock_owned_by_user(sk));
2293 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2294 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2295}
2296
2297static inline void
2298cifs_reclassify_socket6(struct socket *sock)
2299{
2300 struct sock *sk = sock->sk;
2301 BUG_ON(sock_owned_by_user(sk));
2302 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2303 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2304}
2305#else
2306static inline void
2307cifs_reclassify_socket4(struct socket *sock)
2308{
2309}
2310
2311static inline void
2312cifs_reclassify_socket6(struct socket *sock)
2313{
2314}
2315#endif
2316
1da177e4 2317/* See RFC1001 section 14 on representation of Netbios names */
50c2f753 2318static void rfc1002mangle(char *target, char *source, unsigned int length)
1da177e4 2319{
50c2f753 2320 unsigned int i, j;
1da177e4 2321
50c2f753 2322 for (i = 0, j = 0; i < (length); i++) {
1da177e4
LT
2323 /* mask a nibble at a time and encode */
2324 target[j] = 'A' + (0x0F & (source[i] >> 4));
2325 target[j+1] = 'A' + (0x0F & source[i]);
50c2f753 2326 j += 2;
1da177e4
LT
2327 }
2328
2329}
2330
3eb9a889
BG
2331static int
2332bind_socket(struct TCP_Server_Info *server)
2333{
2334 int rc = 0;
2335 if (server->srcaddr.ss_family != AF_UNSPEC) {
2336 /* Bind to the specified local IP address */
2337 struct socket *socket = server->ssocket;
2338 rc = socket->ops->bind(socket,
2339 (struct sockaddr *) &server->srcaddr,
2340 sizeof(server->srcaddr));
2341 if (rc < 0) {
2342 struct sockaddr_in *saddr4;
2343 struct sockaddr_in6 *saddr6;
2344 saddr4 = (struct sockaddr_in *)&server->srcaddr;
2345 saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2346 if (saddr6->sin6_family == AF_INET6)
2347 cERROR(1, "cifs: "
2348 "Failed to bind to: %pI6c, error: %d\n",
2349 &saddr6->sin6_addr, rc);
2350 else
2351 cERROR(1, "cifs: "
2352 "Failed to bind to: %pI4, error: %d\n",
2353 &saddr4->sin_addr.s_addr, rc);
2354 }
2355 }
2356 return rc;
2357}
1da177e4
LT
2358
2359static int
a9f1b85e 2360ip_rfc1001_connect(struct TCP_Server_Info *server)
1da177e4
LT
2361{
2362 int rc = 0;
a9f1b85e
PS
2363 /*
2364 * some servers require RFC1001 sessinit before sending
2365 * negprot - BB check reconnection in case where second
2366 * sessinit is sent but no second negprot
2367 */
2368 struct rfc1002_session_packet *ses_init_buf;
2369 struct smb_hdr *smb_buf;
2370 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2371 GFP_KERNEL);
2372 if (ses_init_buf) {
2373 ses_init_buf->trailer.session_req.called_len = 32;
2374
2375 if (server->server_RFC1001_name &&
2376 server->server_RFC1001_name[0] != 0)
2377 rfc1002mangle(ses_init_buf->trailer.
2378 session_req.called_name,
2379 server->server_RFC1001_name,
2380 RFC1001_NAME_LEN_WITH_NULL);
2381 else
2382 rfc1002mangle(ses_init_buf->trailer.
2383 session_req.called_name,
2384 DEFAULT_CIFS_CALLED_NAME,
2385 RFC1001_NAME_LEN_WITH_NULL);
2386
2387 ses_init_buf->trailer.session_req.calling_len = 32;
2388
2389 /*
2390 * calling name ends in null (byte 16) from old smb
2391 * convention.
2392 */
2393 if (server->workstation_RFC1001_name &&
2394 server->workstation_RFC1001_name[0] != 0)
2395 rfc1002mangle(ses_init_buf->trailer.
2396 session_req.calling_name,
2397 server->workstation_RFC1001_name,
2398 RFC1001_NAME_LEN_WITH_NULL);
2399 else
2400 rfc1002mangle(ses_init_buf->trailer.
2401 session_req.calling_name,
2402 "LINUX_CIFS_CLNT",
2403 RFC1001_NAME_LEN_WITH_NULL);
2404
2405 ses_init_buf->trailer.session_req.scope1 = 0;
2406 ses_init_buf->trailer.session_req.scope2 = 0;
2407 smb_buf = (struct smb_hdr *)ses_init_buf;
2408
2409 /* sizeof RFC1002_SESSION_REQUEST with no scope */
be8e3b00 2410 smb_buf->smb_buf_length = cpu_to_be32(0x81000044);
a9f1b85e
PS
2411 rc = smb_send(server, smb_buf, 0x44);
2412 kfree(ses_init_buf);
2413 /*
2414 * RFC1001 layer in at least one server
2415 * requires very short break before negprot
2416 * presumably because not expecting negprot
2417 * to follow so fast. This is a simple
2418 * solution that works without
2419 * complicating the code and causes no
2420 * significant slowing down on mount
2421 * for everyone else
2422 */
2423 usleep_range(1000, 2000);
2424 }
2425 /*
2426 * else the negprot may still work without this
2427 * even though malloc failed
2428 */
2429
2430 return rc;
2431}
2432
2433static int
2434generic_ip_connect(struct TCP_Server_Info *server)
2435{
2436 int rc = 0;
6da97910 2437 __be16 sport;
a9f1b85e 2438 int slen, sfamily;
bcf4b106 2439 struct socket *socket = server->ssocket;
a9f1b85e
PS
2440 struct sockaddr *saddr;
2441
2442 saddr = (struct sockaddr *) &server->dstaddr;
2443
2444 if (server->dstaddr.ss_family == AF_INET6) {
2445 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
2446 slen = sizeof(struct sockaddr_in6);
2447 sfamily = AF_INET6;
2448 } else {
2449 sport = ((struct sockaddr_in *) saddr)->sin_port;
2450 slen = sizeof(struct sockaddr_in);
2451 sfamily = AF_INET;
2452 }
1da177e4 2453
bcf4b106 2454 if (socket == NULL) {
f1d0c998
RL
2455 rc = __sock_create(cifs_net_ns(server), sfamily, SOCK_STREAM,
2456 IPPROTO_TCP, &socket, 1);
1da177e4 2457 if (rc < 0) {
b6b38f70 2458 cERROR(1, "Error %d creating socket", rc);
a9f1b85e 2459 server->ssocket = NULL;
1da177e4 2460 return rc;
1da177e4 2461 }
bcf4b106
JL
2462
2463 /* BB other socket options to set KEEPALIVE, NODELAY? */
b6b38f70 2464 cFYI(1, "Socket created");
bcf4b106
JL
2465 server->ssocket = socket;
2466 socket->sk->sk_allocation = GFP_NOFS;
a9f1b85e
PS
2467 if (sfamily == AF_INET6)
2468 cifs_reclassify_socket6(socket);
2469 else
2470 cifs_reclassify_socket4(socket);
1da177e4
LT
2471 }
2472
3eb9a889
BG
2473 rc = bind_socket(server);
2474 if (rc < 0)
2475 return rc;
2476
bcf4b106
JL
2477 /*
2478 * Eventually check for other socket options to change from
a9f1b85e
PS
2479 * the default. sock_setsockopt not used because it expects
2480 * user space buffer
bcf4b106
JL
2481 */
2482 socket->sk->sk_rcvtimeo = 7 * HZ;
da505c38 2483 socket->sk->sk_sndtimeo = 5 * HZ;
edf1ae40 2484
b387eaeb 2485 /* make the bufsizes depend on wsize/rsize and max requests */
bcf4b106
JL
2486 if (server->noautotune) {
2487 if (socket->sk->sk_sndbuf < (200 * 1024))
2488 socket->sk->sk_sndbuf = 200 * 1024;
2489 if (socket->sk->sk_rcvbuf < (140 * 1024))
2490 socket->sk->sk_rcvbuf = 140 * 1024;
edf1ae40 2491 }
1da177e4 2492
6a5fa236 2493 if (server->tcp_nodelay) {
a9f1b85e 2494 int val = 1;
6a5fa236
SF
2495 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2496 (char *)&val, sizeof(val));
2497 if (rc)
b6b38f70 2498 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
6a5fa236
SF
2499 }
2500
b6b38f70 2501 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
bcf4b106 2502 socket->sk->sk_sndbuf,
b6b38f70 2503 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
bcf4b106 2504
ee1b3ea9
JL
2505 rc = socket->ops->connect(socket, saddr, slen, 0);
2506 if (rc < 0) {
2507 cFYI(1, "Error %d connecting to server", rc);
2508 sock_release(socket);
2509 server->ssocket = NULL;
2510 return rc;
2511 }
2512
a9f1b85e
PS
2513 if (sport == htons(RFC1001_PORT))
2514 rc = ip_rfc1001_connect(server);
50c2f753 2515
1da177e4
LT
2516 return rc;
2517}
2518
2519static int
a9f1b85e 2520ip_connect(struct TCP_Server_Info *server)
1da177e4 2521{
6da97910 2522 __be16 *sport;
a9f1b85e
PS
2523 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2524 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1da177e4 2525
a9f1b85e
PS
2526 if (server->dstaddr.ss_family == AF_INET6)
2527 sport = &addr6->sin6_port;
2528 else
2529 sport = &addr->sin_port;
1da177e4 2530
a9f1b85e
PS
2531 if (*sport == 0) {
2532 int rc;
1da177e4 2533
a9f1b85e
PS
2534 /* try with 445 port at first */
2535 *sport = htons(CIFS_PORT);
3eb9a889 2536
a9f1b85e 2537 rc = generic_ip_connect(server);
1da177e4 2538 if (rc >= 0)
a9f1b85e 2539 return rc;
6a5fa236 2540
a9f1b85e
PS
2541 /* if it failed, try with 139 port */
2542 *sport = htons(RFC1001_PORT);
6a5fa236
SF
2543 }
2544
a9f1b85e 2545 return generic_ip_connect(server);
1da177e4
LT
2546}
2547
96daf2b0 2548void reset_cifs_unix_caps(int xid, struct cifs_tcon *tcon,
2c6292ae 2549 struct cifs_sb_info *cifs_sb, struct smb_vol *vol_info)
8af18971
SF
2550{
2551 /* if we are reconnecting then should we check to see if
2552 * any requested capabilities changed locally e.g. via
2553 * remount but we can not do much about it here
2554 * if they have (even if we could detect it by the following)
2555 * Perhaps we could add a backpointer to array of sb from tcon
2556 * or if we change to make all sb to same share the same
2557 * sb as NFS - then we only have one backpointer to sb.
2558 * What if we wanted to mount the server share twice once with
2559 * and once without posixacls or posix paths? */
2560 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
50c2f753 2561
c18c842b
SF
2562 if (vol_info && vol_info->no_linux_ext) {
2563 tcon->fsUnixInfo.Capability = 0;
2564 tcon->unix_ext = 0; /* Unix Extensions disabled */
b6b38f70 2565 cFYI(1, "Linux protocol extensions disabled");
c18c842b
SF
2566 return;
2567 } else if (vol_info)
2568 tcon->unix_ext = 1; /* Unix Extensions supported */
2569
2570 if (tcon->unix_ext == 0) {
b6b38f70 2571 cFYI(1, "Unix extensions disabled so not set on reconnect");
c18c842b
SF
2572 return;
2573 }
50c2f753 2574
fb8c4b14 2575 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
8af18971 2576 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
6848b733 2577 cFYI(1, "unix caps which server supports %lld", cap);
8af18971
SF
2578 /* check for reconnect case in which we do not
2579 want to change the mount behavior if we can avoid it */
fb8c4b14 2580 if (vol_info == NULL) {
50c2f753 2581 /* turn off POSIX ACL and PATHNAMES if not set
8af18971
SF
2582 originally at mount time */
2583 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2584 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
11b6d645
IM
2585 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2586 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
b6b38f70 2587 cERROR(1, "POSIXPATH support change");
8af18971 2588 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
11b6d645 2589 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
b6b38f70
JP
2590 cERROR(1, "possible reconnect error");
2591 cERROR(1, "server disabled POSIX path support");
11b6d645 2592 }
8af18971 2593 }
50c2f753 2594
6848b733
SF
2595 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2596 cERROR(1, "per-share encryption not supported yet");
2597
8af18971 2598 cap &= CIFS_UNIX_CAP_MASK;
75865f8c 2599 if (vol_info && vol_info->no_psx_acl)
8af18971 2600 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
75865f8c 2601 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
b6b38f70 2602 cFYI(1, "negotiated posix acl support");
2c6292ae
AV
2603 if (cifs_sb)
2604 cifs_sb->mnt_cifs_flags |=
2605 CIFS_MOUNT_POSIXACL;
8af18971
SF
2606 }
2607
75865f8c 2608 if (vol_info && vol_info->posix_paths == 0)
8af18971 2609 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
75865f8c 2610 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
b6b38f70 2611 cFYI(1, "negotiate posix pathnames");
2c6292ae
AV
2612 if (cifs_sb)
2613 cifs_sb->mnt_cifs_flags |=
8af18971
SF
2614 CIFS_MOUNT_POSIX_PATHS;
2615 }
50c2f753 2616
2c6292ae 2617 if (cifs_sb && (cifs_sb->rsize > 127 * 1024)) {
75865f8c 2618 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2c6292ae 2619 cifs_sb->rsize = 127 * 1024;
b6b38f70 2620 cFYI(DBG2, "larger reads not supported by srv");
75865f8c
SF
2621 }
2622 }
50c2f753
SF
2623
2624
b6b38f70 2625 cFYI(1, "Negotiate caps 0x%x", (int)cap);
8af18971 2626#ifdef CONFIG_CIFS_DEBUG2
75865f8c 2627 if (cap & CIFS_UNIX_FCNTL_CAP)
b6b38f70 2628 cFYI(1, "FCNTL cap");
75865f8c 2629 if (cap & CIFS_UNIX_EXTATTR_CAP)
b6b38f70 2630 cFYI(1, "EXTATTR cap");
75865f8c 2631 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
b6b38f70 2632 cFYI(1, "POSIX path cap");
75865f8c 2633 if (cap & CIFS_UNIX_XATTR_CAP)
b6b38f70 2634 cFYI(1, "XATTR cap");
75865f8c 2635 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
b6b38f70 2636 cFYI(1, "POSIX ACL cap");
75865f8c 2637 if (cap & CIFS_UNIX_LARGE_READ_CAP)
b6b38f70 2638 cFYI(1, "very large read cap");
75865f8c 2639 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
b6b38f70 2640 cFYI(1, "very large write cap");
6848b733
SF
2641 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP)
2642 cFYI(1, "transport encryption cap");
2643 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2644 cFYI(1, "mandatory transport encryption cap");
8af18971
SF
2645#endif /* CIFS_DEBUG2 */
2646 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
442aa310 2647 if (vol_info == NULL) {
b6b38f70 2648 cFYI(1, "resetting capabilities failed");
442aa310 2649 } else
b6b38f70 2650 cERROR(1, "Negotiating Unix capabilities "
5a44b319
SF
2651 "with the server failed. Consider "
2652 "mounting with the Unix Extensions\n"
2653 "disabled, if problems are found, "
2654 "by specifying the nounix mount "
b6b38f70 2655 "option.");
5a44b319 2656
8af18971
SF
2657 }
2658 }
2659}
2660
724d9f1c
PS
2661void cifs_setup_cifs_sb(struct smb_vol *pvolume_info,
2662 struct cifs_sb_info *cifs_sb)
b1c8d2b4 2663{
2de970ff
JL
2664 INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2665
2ced6f69
AV
2666 spin_lock_init(&cifs_sb->tlink_tree_lock);
2667 cifs_sb->tlink_tree = RB_ROOT;
2668
3b795210 2669 if (pvolume_info->rsize > CIFSMaxBufSize) {
b6b38f70
JP
2670 cERROR(1, "rsize %d too large, using MaxBufSize",
2671 pvolume_info->rsize);
3b795210
SF
2672 cifs_sb->rsize = CIFSMaxBufSize;
2673 } else if ((pvolume_info->rsize) &&
2674 (pvolume_info->rsize <= CIFSMaxBufSize))
2675 cifs_sb->rsize = pvolume_info->rsize;
2676 else /* default */
2677 cifs_sb->rsize = CIFSMaxBufSize;
2678
3b795210
SF
2679 if (cifs_sb->rsize < 2048) {
2680 cifs_sb->rsize = 2048;
2681 /* Windows ME may prefer this */
b6b38f70 2682 cFYI(1, "readsize set to minimum: 2048");
3b795210 2683 }
25c7f41e
PS
2684
2685 /*
2686 * Temporarily set wsize for matching superblock. If we end up using
2687 * new sb then cifs_negotiate_wsize will later negotiate it downward
2688 * if needed.
2689 */
2690 cifs_sb->wsize = pvolume_info->wsize;
2691
3b795210
SF
2692 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2693 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2694 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2695 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
b6b38f70
JP
2696 cFYI(1, "file mode: 0x%x dir mode: 0x%x",
2697 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
3b795210 2698
6d20e840 2699 cifs_sb->actimeo = pvolume_info->actimeo;
724d9f1c 2700 cifs_sb->local_nls = pvolume_info->local_nls;
6d20e840 2701
3b795210
SF
2702 if (pvolume_info->noperm)
2703 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2704 if (pvolume_info->setuids)
2705 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2706 if (pvolume_info->server_ino)
2707 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2708 if (pvolume_info->remap)
2709 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2710 if (pvolume_info->no_xattr)
2711 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2712 if (pvolume_info->sfu_emul)
2713 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2714 if (pvolume_info->nobrl)
2715 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
be652445 2716 if (pvolume_info->nostrictsync)
4717bed6 2717 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
13a6e42a
SF
2718 if (pvolume_info->mand_lock)
2719 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
d4ffff1f
PS
2720 if (pvolume_info->rwpidforward)
2721 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_RWPIDFORWARD;
3b795210
SF
2722 if (pvolume_info->cifs_acl)
2723 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2724 if (pvolume_info->override_uid)
2725 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2726 if (pvolume_info->override_gid)
2727 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2728 if (pvolume_info->dynperm)
2729 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
fa1df75d
SJ
2730 if (pvolume_info->fsc)
2731 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
0eb8a132
JL
2732 if (pvolume_info->multiuser)
2733 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2734 CIFS_MOUNT_NO_PERM);
d39454ff
PS
2735 if (pvolume_info->strict_io)
2736 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_STRICT_IO;
3b795210 2737 if (pvolume_info->direct_io) {
b6b38f70 2738 cFYI(1, "mounting share using direct i/o");
3b795210
SF
2739 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2740 }
736a3320
SM
2741 if (pvolume_info->mfsymlinks) {
2742 if (pvolume_info->sfu_emul) {
2743 cERROR(1, "mount option mfsymlinks ignored if sfu "
2744 "mount option is used");
2745 } else {
2746 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2747 }
2748 }
3b795210
SF
2749
2750 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
b6b38f70
JP
2751 cERROR(1, "mount option dynperm ignored if cifsacl "
2752 "mount option supported");
b1c8d2b4
JL
2753}
2754
f7910cbd
JL
2755/*
2756 * When the server supports very large writes via POSIX extensions, we can
1190f6a0
JL
2757 * allow up to 2^24-1, minus the size of a WRITE_AND_X header, not including
2758 * the RFC1001 length.
f7910cbd
JL
2759 *
2760 * Note that this might make for "interesting" allocation problems during
1190f6a0
JL
2761 * writeback however as we have to allocate an array of pointers for the
2762 * pages. A 16M write means ~32kb page array with PAGE_CACHE_SIZE == 4096.
f7910cbd 2763 */
1190f6a0 2764#define CIFS_MAX_WSIZE ((1<<24) - 1 - sizeof(WRITE_REQ) + 4)
f7910cbd
JL
2765
2766/*
1190f6a0
JL
2767 * When the server doesn't allow large posix writes, only allow a wsize of
2768 * 128k minus the size of the WRITE_AND_X header. That allows for a write up
2769 * to the maximum size described by RFC1002.
f7910cbd 2770 */
1190f6a0 2771#define CIFS_MAX_RFC1002_WSIZE (128 * 1024 - sizeof(WRITE_REQ) + 4)
f7910cbd
JL
2772
2773/*
2774 * The default wsize is 1M. find_get_pages seems to return a maximum of 256
2775 * pages in a single call. With PAGE_CACHE_SIZE == 4k, this means we can fill
2776 * a single wsize request with a single call.
2777 */
2778#define CIFS_DEFAULT_WSIZE (1024 * 1024)
2779
2780static unsigned int
96daf2b0 2781cifs_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *pvolume_info)
f7910cbd
JL
2782{
2783 __u64 unix_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2784 struct TCP_Server_Info *server = tcon->ses->server;
2785 unsigned int wsize = pvolume_info->wsize ? pvolume_info->wsize :
2786 CIFS_DEFAULT_WSIZE;
2787
2788 /* can server support 24-bit write sizes? (via UNIX extensions) */
2789 if (!tcon->unix_ext || !(unix_cap & CIFS_UNIX_LARGE_WRITE_CAP))
1190f6a0 2790 wsize = min_t(unsigned int, wsize, CIFS_MAX_RFC1002_WSIZE);
f7910cbd 2791
1190f6a0
JL
2792 /*
2793 * no CAP_LARGE_WRITE_X or is signing enabled without CAP_UNIX set?
2794 * Limit it to max buffer offered by the server, minus the size of the
2795 * WRITEX header, not including the 4 byte RFC1001 length.
2796 */
2797 if (!(server->capabilities & CAP_LARGE_WRITE_X) ||
2798 (!(server->capabilities & CAP_UNIX) &&
2799 (server->sec_mode & (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED))))
2800 wsize = min_t(unsigned int, wsize,
2801 server->maxBuf - sizeof(WRITE_REQ) + 4);
f7910cbd
JL
2802
2803 /* hard limit of CIFS_MAX_WSIZE */
2804 wsize = min_t(unsigned int, wsize, CIFS_MAX_WSIZE);
2805
2806 return wsize;
2807}
2808
e4cce94c 2809static int
96daf2b0 2810is_path_accessible(int xid, struct cifs_tcon *tcon,
e4cce94c
IM
2811 struct cifs_sb_info *cifs_sb, const char *full_path)
2812{
2813 int rc;
e4cce94c
IM
2814 FILE_ALL_INFO *pfile_info;
2815
e4cce94c
IM
2816 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2817 if (pfile_info == NULL)
2818 return -ENOMEM;
2819
2820 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2821 0 /* not legacy */, cifs_sb->local_nls,
2822 cifs_sb->mnt_cifs_flags &
2823 CIFS_MOUNT_MAP_SPECIAL_CHR);
221d1d79
JL
2824
2825 if (rc == -EOPNOTSUPP || rc == -EINVAL)
2826 rc = SMBQueryInformation(xid, tcon, full_path, pfile_info,
2827 cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
2828 CIFS_MOUNT_MAP_SPECIAL_CHR);
e4cce94c
IM
2829 kfree(pfile_info);
2830 return rc;
2831}
2832
724d9f1c 2833void
f9e59bcb 2834cifs_cleanup_volume_info(struct smb_vol *volume_info)
1bfe73c2 2835{
f9e59bcb 2836 if (!volume_info)
1bfe73c2
IM
2837 return;
2838
b946845a 2839 kfree(volume_info->username);
1bfe73c2
IM
2840 kzfree(volume_info->password);
2841 kfree(volume_info->UNC);
b946845a
SF
2842 kfree(volume_info->UNCip);
2843 kfree(volume_info->domainname);
2844 kfree(volume_info->iocharset);
1bfe73c2
IM
2845 kfree(volume_info->prepath);
2846 kfree(volume_info);
1bfe73c2
IM
2847 return;
2848}
2849
2d6d589d 2850#ifdef CONFIG_CIFS_DFS_UPCALL
1bfe73c2
IM
2851/* build_path_to_root returns full path to root when
2852 * we do not have an exiting connection (tcon) */
2853static char *
b2a0fa15 2854build_unc_path_to_root(const struct smb_vol *vol,
1bfe73c2
IM
2855 const struct cifs_sb_info *cifs_sb)
2856{
b2a0fa15
JL
2857 char *full_path, *pos;
2858 unsigned int pplen = vol->prepath ? strlen(vol->prepath) : 0;
2859 unsigned int unc_len = strnlen(vol->UNC, MAX_TREE_SIZE + 1);
1bfe73c2 2860
b2a0fa15 2861 full_path = kmalloc(unc_len + pplen + 1, GFP_KERNEL);
1bfe73c2
IM
2862 if (full_path == NULL)
2863 return ERR_PTR(-ENOMEM);
2864
b2a0fa15
JL
2865 strncpy(full_path, vol->UNC, unc_len);
2866 pos = full_path + unc_len;
2867
2868 if (pplen) {
2869 strncpy(pos, vol->prepath, pplen);
2870 pos += pplen;
2871 }
2872
2873 *pos = '\0'; /* add trailing null */
f87d39d9 2874 convert_delimiter(full_path, CIFS_DIR_SEP(cifs_sb));
b2a0fa15 2875 cFYI(1, "%s: full_path=%s", __func__, full_path);
1bfe73c2
IM
2876 return full_path;
2877}
dd613945
SF
2878
2879/*
2880 * Perform a dfs referral query for a share and (optionally) prefix
2881 *
046462ab
SF
2882 * If a referral is found, cifs_sb->mountdata will be (re-)allocated
2883 * to a string containing updated options for the submount. Otherwise it
2884 * will be left untouched.
dd613945
SF
2885 *
2886 * Returns the rc from get_dfs_path to the caller, which can be used to
2887 * determine whether there were referrals.
2888 */
2889static int
96daf2b0 2890expand_dfs_referral(int xid, struct cifs_ses *pSesInfo,
dd613945 2891 struct smb_vol *volume_info, struct cifs_sb_info *cifs_sb,
046462ab 2892 int check_prefix)
dd613945
SF
2893{
2894 int rc;
2895 unsigned int num_referrals = 0;
2896 struct dfs_info3_param *referrals = NULL;
2897 char *full_path = NULL, *ref_path = NULL, *mdata = NULL;
2898
2899 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2900 if (IS_ERR(full_path))
2901 return PTR_ERR(full_path);
2902
2903 /* For DFS paths, skip the first '\' of the UNC */
2904 ref_path = check_prefix ? full_path + 1 : volume_info->UNC + 1;
2905
2906 rc = get_dfs_path(xid, pSesInfo , ref_path, cifs_sb->local_nls,
2907 &num_referrals, &referrals,
2908 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2909
2910 if (!rc && num_referrals > 0) {
2911 char *fake_devname = NULL;
2912
2913 mdata = cifs_compose_mount_options(cifs_sb->mountdata,
2914 full_path + 1, referrals,
2915 &fake_devname);
2916
2917 free_dfs_info_array(referrals, num_referrals);
2918 kfree(fake_devname);
2919
046462ab
SF
2920 if (cifs_sb->mountdata != NULL)
2921 kfree(cifs_sb->mountdata);
2922
dd613945
SF
2923 if (IS_ERR(mdata)) {
2924 rc = PTR_ERR(mdata);
2925 mdata = NULL;
2926 }
046462ab 2927 cifs_sb->mountdata = mdata;
dd613945
SF
2928 }
2929 kfree(full_path);
2930 return rc;
2931}
2d6d589d 2932#endif
1bfe73c2 2933
04db79b0
JL
2934static int
2935cifs_setup_volume_info(struct smb_vol *volume_info, char *mount_data,
2936 const char *devname)
1da177e4 2937{
724d9f1c 2938 int rc = 0;
1da177e4 2939
04db79b0
JL
2940 if (cifs_parse_mount_options(mount_data, devname, volume_info))
2941 return -EINVAL;
1da177e4 2942
7586b765 2943 if (volume_info->nullauth) {
b6b38f70 2944 cFYI(1, "null user");
446b23a7 2945 volume_info->username = kzalloc(1, GFP_KERNEL);
04db79b0
JL
2946 if (volume_info->username == NULL)
2947 return -ENOMEM;
7586b765 2948 } else if (volume_info->username) {
1da177e4 2949 /* BB fixme parse for domain name here */
b6b38f70 2950 cFYI(1, "Username: %s", volume_info->username);
1da177e4 2951 } else {
bf820679 2952 cifserror("No username specified");
50c2f753
SF
2953 /* In userspace mount helper we can get user name from alternate
2954 locations such as env variables and files on disk */
04db79b0 2955 return -EINVAL;
1da177e4
LT
2956 }
2957
1da177e4 2958 /* this is needed for ASCII cp to Unicode converts */
7586b765 2959 if (volume_info->iocharset == NULL) {
a5fc4ce0
JL
2960 /* load_nls_default cannot return null */
2961 volume_info->local_nls = load_nls_default();
1da177e4 2962 } else {
a5fc4ce0
JL
2963 volume_info->local_nls = load_nls(volume_info->iocharset);
2964 if (volume_info->local_nls == NULL) {
b6b38f70
JP
2965 cERROR(1, "CIFS mount error: iocharset %s not found",
2966 volume_info->iocharset);
04db79b0 2967 return -ELIBACC;
1da177e4
LT
2968 }
2969 }
724d9f1c 2970
724d9f1c
PS
2971 return rc;
2972}
2973
04db79b0
JL
2974struct smb_vol *
2975cifs_get_volume_info(char *mount_data, const char *devname)
2976{
2977 int rc;
2978 struct smb_vol *volume_info;
2979
2980 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2981 if (!volume_info)
2982 return ERR_PTR(-ENOMEM);
2983
2984 rc = cifs_setup_volume_info(volume_info, mount_data, devname);
2985 if (rc) {
2986 cifs_cleanup_volume_info(volume_info);
2987 volume_info = ERR_PTR(rc);
2988 }
2989
2990 return volume_info;
2991}
2992
724d9f1c 2993int
2c6292ae 2994cifs_mount(struct cifs_sb_info *cifs_sb, struct smb_vol *volume_info)
724d9f1c
PS
2995{
2996 int rc = 0;
2997 int xid;
96daf2b0
SF
2998 struct cifs_ses *pSesInfo;
2999 struct cifs_tcon *tcon;
724d9f1c
PS
3000 struct TCP_Server_Info *srvTcp;
3001 char *full_path;
3002 struct tcon_link *tlink;
3003#ifdef CONFIG_CIFS_DFS_UPCALL
3004 int referral_walks_count = 0;
dd854466
AV
3005
3006 rc = bdi_setup_and_register(&cifs_sb->bdi, "cifs", BDI_CAP_MAP_COPY);
3007 if (rc)
3008 return rc;
3009
3010 cifs_sb->bdi.ra_pages = default_backing_dev_info.ra_pages;
3011
724d9f1c
PS
3012try_mount_again:
3013 /* cleanup activities if we're chasing a referral */
3014 if (referral_walks_count) {
3015 if (tcon)
3016 cifs_put_tcon(tcon);
3017 else if (pSesInfo)
3018 cifs_put_smb_ses(pSesInfo);
3019
724d9f1c
PS
3020 FreeXid(xid);
3021 }
3022#endif
3023 tcon = NULL;
3024 pSesInfo = NULL;
3025 srvTcp = NULL;
3026 full_path = NULL;
3027 tlink = NULL;
3028
3029 xid = GetXid();
1da177e4 3030
63c038c2 3031 /* get a reference to a tcp session */
7586b765 3032 srvTcp = cifs_get_tcp_session(volume_info);
63c038c2
JL
3033 if (IS_ERR(srvTcp)) {
3034 rc = PTR_ERR(srvTcp);
dd854466 3035 bdi_destroy(&cifs_sb->bdi);
63c038c2 3036 goto out;
1da177e4
LT
3037 }
3038
36988c76
JL
3039 /* get a reference to a SMB session */
3040 pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
3041 if (IS_ERR(pSesInfo)) {
3042 rc = PTR_ERR(pSesInfo);
3043 pSesInfo = NULL;
3044 goto mount_fail_check;
1da177e4 3045 }
50c2f753 3046
d00c28de
JL
3047 /* search for existing tcon to this server share */
3048 tcon = cifs_get_tcon(pSesInfo, volume_info);
3049 if (IS_ERR(tcon)) {
3050 rc = PTR_ERR(tcon);
3051 tcon = NULL;
1bfe73c2 3052 goto remote_path_check;
d00c28de 3053 }
1bfe73c2 3054
d82c2df5 3055 /* tell server which Unix caps we support */
6848b733 3056 if (tcon->ses->capabilities & CAP_UNIX) {
d82c2df5
SF
3057 /* reset of caps checks mount to see if unix extensions
3058 disabled for just this mount */
2c6292ae 3059 reset_cifs_unix_caps(xid, tcon, cifs_sb, volume_info);
6848b733
SF
3060 if ((tcon->ses->server->tcpStatus == CifsNeedReconnect) &&
3061 (le64_to_cpu(tcon->fsUnixInfo.Capability) &
3062 CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)) {
3063 rc = -EACCES;
3064 goto mount_fail_check;
3065 }
3066 } else
d82c2df5 3067 tcon->unix_ext = 0; /* server does not support them */
c18c842b 3068
6848b733
SF
3069 /* do not care if following two calls succeed - informational */
3070 if (!tcon->ipc) {
3071 CIFSSMBQFSDeviceInfo(xid, tcon);
3072 CIFSSMBQFSAttributeInfo(xid, tcon);
3073 }
3074
d82c2df5
SF
3075 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
3076 cifs_sb->rsize = 1024 * 127;
b6b38f70 3077 cFYI(DBG2, "no very large read support, rsize now 127K");
1da177e4 3078 }
d82c2df5
SF
3079 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
3080 cifs_sb->rsize = min(cifs_sb->rsize,
3081 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
1da177e4 3082
f7910cbd
JL
3083 cifs_sb->wsize = cifs_negotiate_wsize(tcon, volume_info);
3084
1bfe73c2 3085remote_path_check:
c1508ca2
SF
3086#ifdef CONFIG_CIFS_DFS_UPCALL
3087 /*
3088 * Perform an unconditional check for whether there are DFS
3089 * referrals for this path without prefix, to provide support
3090 * for DFS referrals from w2k8 servers which don't seem to respond
3091 * with PATH_NOT_COVERED to requests that include the prefix.
3092 * Chase the referral if found, otherwise continue normally.
3093 */
3094 if (referral_walks_count == 0) {
3095 int refrc = expand_dfs_referral(xid, pSesInfo, volume_info,
046462ab 3096 cifs_sb, false);
c1508ca2
SF
3097 if (!refrc) {
3098 referral_walks_count++;
3099 goto try_mount_again;
3100 }
3101 }
3102#endif
3103
f87d39d9 3104 /* check if a whole path is not remote */
70945643 3105 if (!rc && tcon) {
e4cce94c 3106 /* build_path_to_root works only when we have a valid tcon */
f87d39d9 3107 full_path = cifs_build_path_to_root(volume_info, cifs_sb, tcon);
e4cce94c
IM
3108 if (full_path == NULL) {
3109 rc = -ENOMEM;
3110 goto mount_fail_check;
3111 }
3112 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
03ceace5 3113 if (rc != 0 && rc != -EREMOTE) {
e4cce94c
IM
3114 kfree(full_path);
3115 goto mount_fail_check;
3116 }
3117 kfree(full_path);
3118 }
3119
1bfe73c2
IM
3120 /* get referral if needed */
3121 if (rc == -EREMOTE) {
d036f50f 3122#ifdef CONFIG_CIFS_DFS_UPCALL
5c2503a8
IM
3123 if (referral_walks_count > MAX_NESTED_LINKS) {
3124 /*
3125 * BB: when we implement proper loop detection,
3126 * we will remove this check. But now we need it
3127 * to prevent an indefinite loop if 'DFS tree' is
3128 * misconfigured (i.e. has loops).
3129 */
3130 rc = -ELOOP;
3131 goto mount_fail_check;
3132 }
1bfe73c2 3133
dd613945 3134 rc = expand_dfs_referral(xid, pSesInfo, volume_info, cifs_sb,
046462ab 3135 true);
7b91e266 3136
dd613945 3137 if (!rc) {
5c2503a8 3138 referral_walks_count++;
1bfe73c2
IM
3139 goto try_mount_again;
3140 }
dd613945 3141 goto mount_fail_check;
d036f50f
SF
3142#else /* No DFS support, return error on mount */
3143 rc = -EOPNOTSUPP;
3144#endif
1bfe73c2
IM
3145 }
3146
9d002df4
JL
3147 if (rc)
3148 goto mount_fail_check;
3149
3150 /* now, hang the tcon off of the superblock */
3151 tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
3152 if (tlink == NULL) {
3153 rc = -ENOMEM;
3154 goto mount_fail_check;
3155 }
3156
b647c35f 3157 tlink->tl_uid = pSesInfo->linux_uid;
9d002df4
JL
3158 tlink->tl_tcon = tcon;
3159 tlink->tl_time = jiffies;
3160 set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
3161 set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3162
b647c35f 3163 cifs_sb->master_tlink = tlink;
9d002df4 3164 spin_lock(&cifs_sb->tlink_tree_lock);
b647c35f 3165 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
9d002df4 3166 spin_unlock(&cifs_sb->tlink_tree_lock);
413e661c 3167
2de970ff
JL
3168 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3169 TLINK_IDLE_EXPIRE);
3170
1bfe73c2
IM
3171mount_fail_check:
3172 /* on error free sesinfo and tcon struct if needed */
3173 if (rc) {
1bfe73c2 3174 /* If find_unc succeeded then rc == 0 so we can not end */
25985edc 3175 /* up accidentally freeing someone elses tcon struct */
1bfe73c2
IM
3176 if (tcon)
3177 cifs_put_tcon(tcon);
3178 else if (pSesInfo)
3179 cifs_put_smb_ses(pSesInfo);
3180 else
3181 cifs_put_tcp_session(srvTcp);
dd854466 3182 bdi_destroy(&cifs_sb->bdi);
1bfe73c2
IM
3183 goto out;
3184 }
3185
7586b765 3186 /* volume_info->password is freed above when existing session found
1da177e4
LT
3187 (in which case it is not needed anymore) but when new sesion is created
3188 the password ptr is put in the new session structure (in which case the
3189 password will be freed at unmount time) */
70fe7dc0
JL
3190out:
3191 /* zero out password before freeing */
1da177e4
LT
3192 FreeXid(xid);
3193 return rc;
3194}
3195
8d1bca32
JL
3196/*
3197 * Issue a TREE_CONNECT request. Note that for IPC$ shares, that the tcon
3198 * pointer may be NULL.
3199 */
1da177e4 3200int
96daf2b0
SF
3201CIFSTCon(unsigned int xid, struct cifs_ses *ses,
3202 const char *tree, struct cifs_tcon *tcon,
1da177e4
LT
3203 const struct nls_table *nls_codepage)
3204{
3205 struct smb_hdr *smb_buffer;
3206 struct smb_hdr *smb_buffer_response;
3207 TCONX_REQ *pSMB;
3208 TCONX_RSP *pSMBr;
3209 unsigned char *bcc_ptr;
3210 int rc = 0;
690c522f
JL
3211 int length;
3212 __u16 bytes_left, count;
1da177e4
LT
3213
3214 if (ses == NULL)
3215 return -EIO;
3216
3217 smb_buffer = cifs_buf_get();
ca43e3be 3218 if (smb_buffer == NULL)
1da177e4 3219 return -ENOMEM;
ca43e3be 3220
1da177e4
LT
3221 smb_buffer_response = smb_buffer;
3222
3223 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
3224 NULL /*no tid */ , 4 /*wct */ );
1982c344
SF
3225
3226 smb_buffer->Mid = GetNextMid(ses->server);
1da177e4
LT
3227 smb_buffer->Uid = ses->Suid;
3228 pSMB = (TCONX_REQ *) smb_buffer;
3229 pSMBr = (TCONX_RSP *) smb_buffer_response;
3230
3231 pSMB->AndXCommand = 0xFF;
3232 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
1da177e4 3233 bcc_ptr = &pSMB->Password[0];
8d1bca32 3234 if (!tcon || (ses->server->sec_mode & SECMODE_USER)) {
eeac8047 3235 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
7c7b25bc 3236 *bcc_ptr = 0; /* password is null byte */
eeac8047 3237 bcc_ptr++; /* skip password */
7c7b25bc 3238 /* already aligned so no need to do it below */
eeac8047 3239 } else {
540b2e37 3240 pSMB->PasswordLength = cpu_to_le16(CIFS_AUTH_RESP_SIZE);
eeac8047
SF
3241 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
3242 specified as required (when that support is added to
3243 the vfs in the future) as only NTLM or the much
7c7b25bc 3244 weaker LANMAN (which we do not send by default) is accepted
eeac8047
SF
3245 by Samba (not sure whether other servers allow
3246 NTLMv2 password here) */
7c7b25bc 3247#ifdef CONFIG_CIFS_WEAK_PW_HASH
04912d6a 3248 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
00e485b0 3249 (ses->server->secType == LANMAN))
d3ba50b1 3250 calc_lanman_hash(tcon->password, ses->server->cryptkey,
96daf2b0 3251 ses->server->sec_mode &
4e53a3fb
JL
3252 SECMODE_PW_ENCRYPT ? true : false,
3253 bcc_ptr);
7c7b25bc
SF
3254 else
3255#endif /* CIFS_WEAK_PW_HASH */
ee2c9258
SP
3256 rc = SMBNTencrypt(tcon->password, ses->server->cryptkey,
3257 bcc_ptr);
eeac8047 3258
540b2e37 3259 bcc_ptr += CIFS_AUTH_RESP_SIZE;
fb8c4b14 3260 if (ses->capabilities & CAP_UNICODE) {
7c7b25bc
SF
3261 /* must align unicode strings */
3262 *bcc_ptr = 0; /* null byte password */
3263 bcc_ptr++;
3264 }
eeac8047 3265 }
1da177e4 3266
96daf2b0 3267 if (ses->server->sec_mode &
a878fb22 3268 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
1da177e4
LT
3269 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
3270
3271 if (ses->capabilities & CAP_STATUS32) {
3272 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3273 }
3274 if (ses->capabilities & CAP_DFS) {
3275 smb_buffer->Flags2 |= SMBFLG2_DFS;
3276 }
3277 if (ses->capabilities & CAP_UNICODE) {
3278 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3279 length =
50c2f753
SF
3280 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
3281 6 /* max utf8 char length in bytes */ *
a878fb22
SF
3282 (/* server len*/ + 256 /* share len */), nls_codepage);
3283 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
1da177e4
LT
3284 bcc_ptr += 2; /* skip trailing null */
3285 } else { /* ASCII */
1da177e4
LT
3286 strcpy(bcc_ptr, tree);
3287 bcc_ptr += strlen(tree) + 1;
3288 }
3289 strcpy(bcc_ptr, "?????");
3290 bcc_ptr += strlen("?????");
3291 bcc_ptr += 1;
3292 count = bcc_ptr - &pSMB->Password[0];
be8e3b00
SF
3293 pSMB->hdr.smb_buf_length = cpu_to_be32(be32_to_cpu(
3294 pSMB->hdr.smb_buf_length) + count);
1da177e4
LT
3295 pSMB->ByteCount = cpu_to_le16(count);
3296
133672ef 3297 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
7749981e 3298 0);
1da177e4 3299
1da177e4
LT
3300 /* above now done in SendReceive */
3301 if ((rc == 0) && (tcon != NULL)) {
0e0d2cf3
SF
3302 bool is_unicode;
3303
1da177e4 3304 tcon->tidStatus = CifsGood;
3b795210 3305 tcon->need_reconnect = false;
1da177e4
LT
3306 tcon->tid = smb_buffer_response->Tid;
3307 bcc_ptr = pByteArea(smb_buffer_response);
690c522f 3308 bytes_left = get_bcc(smb_buffer_response);
cc20c031 3309 length = strnlen(bcc_ptr, bytes_left - 2);
0e0d2cf3
SF
3310 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3311 is_unicode = true;
3312 else
3313 is_unicode = false;
3314
cc20c031 3315
50c2f753 3316 /* skip service field (NB: this field is always ASCII) */
7f8ed420
SF
3317 if (length == 3) {
3318 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3319 (bcc_ptr[2] == 'C')) {
b6b38f70 3320 cFYI(1, "IPC connection");
7f8ed420
SF
3321 tcon->ipc = 1;
3322 }
3323 } else if (length == 2) {
3324 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3325 /* the most common case */
b6b38f70 3326 cFYI(1, "disk share connection");
7f8ed420
SF
3327 }
3328 }
50c2f753 3329 bcc_ptr += length + 1;
cc20c031 3330 bytes_left -= (length + 1);
1da177e4 3331 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
cc20c031
JL
3332
3333 /* mostly informational -- no need to fail on error here */
90a98b2f 3334 kfree(tcon->nativeFileSystem);
d185cda7 3335 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
0e0d2cf3 3336 bytes_left, is_unicode,
cc20c031
JL
3337 nls_codepage);
3338
b6b38f70 3339 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
cc20c031 3340
fb8c4b14 3341 if ((smb_buffer_response->WordCount == 3) ||
1a4e15a0
SF
3342 (smb_buffer_response->WordCount == 7))
3343 /* field is in same location */
3979877e
SF
3344 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3345 else
3346 tcon->Flags = 0;
b6b38f70 3347 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
1da177e4 3348 } else if ((rc == 0) && tcon == NULL) {
50c2f753 3349 /* all we need to save for IPC$ connection */
1da177e4
LT
3350 ses->ipc_tid = smb_buffer_response->Tid;
3351 }
3352
a8a11d39 3353 cifs_buf_release(smb_buffer);
1da177e4
LT
3354 return rc;
3355}
3356
2a9b9951
AV
3357void
3358cifs_umount(struct cifs_sb_info *cifs_sb)
1da177e4 3359{
b647c35f
JL
3360 struct rb_root *root = &cifs_sb->tlink_tree;
3361 struct rb_node *node;
3362 struct tcon_link *tlink;
9d002df4 3363
2de970ff
JL
3364 cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3365
b647c35f
JL
3366 spin_lock(&cifs_sb->tlink_tree_lock);
3367 while ((node = rb_first(root))) {
3368 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3369 cifs_get_tlink(tlink);
3370 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3371 rb_erase(node, root);
1da177e4 3372
b647c35f
JL
3373 spin_unlock(&cifs_sb->tlink_tree_lock);
3374 cifs_put_tlink(tlink);
3375 spin_lock(&cifs_sb->tlink_tree_lock);
3376 }
3377 spin_unlock(&cifs_sb->tlink_tree_lock);
50c2f753 3378
dd854466 3379 bdi_destroy(&cifs_sb->bdi);
d757d71b
AV
3380 kfree(cifs_sb->mountdata);
3381 unload_nls(cifs_sb->local_nls);
3382 kfree(cifs_sb);
50c2f753 3383}
1da177e4 3384
96daf2b0 3385int cifs_negotiate_protocol(unsigned int xid, struct cifs_ses *ses)
1da177e4
LT
3386{
3387 int rc = 0;
198b5682 3388 struct TCP_Server_Info *server = ses->server;
1da177e4 3389
198b5682
JL
3390 /* only send once per connect */
3391 if (server->maxBuf != 0)
3392 return 0;
3393
3394 rc = CIFSSMBNegotiate(xid, ses);
3395 if (rc == -EAGAIN) {
3396 /* retry only once on 1st time connection */
3397 rc = CIFSSMBNegotiate(xid, ses);
3398 if (rc == -EAGAIN)
3399 rc = -EHOSTDOWN;
1da177e4 3400 }
198b5682
JL
3401 if (rc == 0) {
3402 spin_lock(&GlobalMid_Lock);
7fdbaa1b 3403 if (server->tcpStatus == CifsNeedNegotiate)
198b5682
JL
3404 server->tcpStatus = CifsGood;
3405 else
3406 rc = -EHOSTDOWN;
3407 spin_unlock(&GlobalMid_Lock);
26b994fa 3408
198b5682
JL
3409 }
3410
3411 return rc;
3412}
3413
3414
96daf2b0 3415int cifs_setup_session(unsigned int xid, struct cifs_ses *ses,
198b5682
JL
3416 struct nls_table *nls_info)
3417{
3418 int rc = 0;
3419 struct TCP_Server_Info *server = ses->server;
26b994fa 3420
198b5682
JL
3421 ses->flags = 0;
3422 ses->capabilities = server->capabilities;
26b994fa 3423 if (linuxExtEnabled == 0)
198b5682 3424 ses->capabilities &= (~CAP_UNIX);
20418acd 3425
b6b38f70 3426 cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
96daf2b0 3427 server->sec_mode, server->capabilities, server->timeAdj);
cb7691b6 3428
198b5682 3429 rc = CIFS_SessSetup(xid, ses, nls_info);
26b994fa 3430 if (rc) {
b6b38f70 3431 cERROR(1, "Send error in SessSetup = %d", rc);
26b994fa 3432 } else {
5d0d2882
SP
3433 mutex_lock(&ses->server->srv_mutex);
3434 if (!server->session_estab) {
21e73393 3435 server->session_key.response = ses->auth_key.response;
5d0d2882 3436 server->session_key.len = ses->auth_key.len;
21e73393
SP
3437 server->sequence_number = 0x2;
3438 server->session_estab = true;
3439 ses->auth_key.response = NULL;
5d0d2882
SP
3440 }
3441 mutex_unlock(&server->srv_mutex);
3442
b6b38f70 3443 cFYI(1, "CIFS Session Established successfully");
20418acd 3444 spin_lock(&GlobalMid_Lock);
198b5682
JL
3445 ses->status = CifsGood;
3446 ses->need_reconnect = false;
20418acd 3447 spin_unlock(&GlobalMid_Lock);
1da177e4 3448 }
26b994fa 3449
21e73393
SP
3450 kfree(ses->auth_key.response);
3451 ses->auth_key.response = NULL;
3452 ses->auth_key.len = 0;
d3686d54
SP
3453 kfree(ses->ntlmssp);
3454 ses->ntlmssp = NULL;
21e73393 3455
1da177e4
LT
3456 return rc;
3457}
3458
96daf2b0 3459static struct cifs_tcon *
9d002df4
JL
3460cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3461{
96daf2b0
SF
3462 struct cifs_tcon *master_tcon = cifs_sb_master_tcon(cifs_sb);
3463 struct cifs_ses *ses;
3464 struct cifs_tcon *tcon = NULL;
9d002df4 3465 struct smb_vol *vol_info;
34c87901
SF
3466 char username[28]; /* big enough for "krb50x" + hex of ULONG_MAX 6+16 */
3467 /* We used to have this as MAX_USERNAME which is */
3468 /* way too big now (256 instead of 32) */
9d002df4
JL
3469
3470 vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3471 if (vol_info == NULL) {
3472 tcon = ERR_PTR(-ENOMEM);
3473 goto out;
3474 }
3475
3476 snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3477 vol_info->username = username;
3478 vol_info->local_nls = cifs_sb->local_nls;
3479 vol_info->linux_uid = fsuid;
3480 vol_info->cred_uid = fsuid;
3481 vol_info->UNC = master_tcon->treeName;
3482 vol_info->retry = master_tcon->retry;
3483 vol_info->nocase = master_tcon->nocase;
3484 vol_info->local_lease = master_tcon->local_lease;
3485 vol_info->no_linux_ext = !master_tcon->unix_ext;
3486
3487 /* FIXME: allow for other secFlg settings */
3488 vol_info->secFlg = CIFSSEC_MUST_KRB5;
3489
3490 /* get a reference for the same TCP session */
3f9bcca7 3491 spin_lock(&cifs_tcp_ses_lock);
9d002df4 3492 ++master_tcon->ses->server->srv_count;
3f9bcca7 3493 spin_unlock(&cifs_tcp_ses_lock);
9d002df4
JL
3494
3495 ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3496 if (IS_ERR(ses)) {
96daf2b0 3497 tcon = (struct cifs_tcon *)ses;
9d002df4
JL
3498 cifs_put_tcp_session(master_tcon->ses->server);
3499 goto out;
3500 }
3501
3502 tcon = cifs_get_tcon(ses, vol_info);
3503 if (IS_ERR(tcon)) {
3504 cifs_put_smb_ses(ses);
3505 goto out;
3506 }
3507
3508 if (ses->capabilities & CAP_UNIX)
3509 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3510out:
3511 kfree(vol_info);
3512
3513 return tcon;
3514}
3515
96daf2b0 3516struct cifs_tcon *
9d002df4
JL
3517cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3518{
3519 return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3520}
3521
3522static int
3523cifs_sb_tcon_pending_wait(void *unused)
3524{
3525 schedule();
3526 return signal_pending(current) ? -ERESTARTSYS : 0;
3527}
3528
b647c35f
JL
3529/* find and return a tlink with given uid */
3530static struct tcon_link *
3531tlink_rb_search(struct rb_root *root, uid_t uid)
3532{
3533 struct rb_node *node = root->rb_node;
3534 struct tcon_link *tlink;
3535
3536 while (node) {
3537 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3538
3539 if (tlink->tl_uid > uid)
3540 node = node->rb_left;
3541 else if (tlink->tl_uid < uid)
3542 node = node->rb_right;
3543 else
3544 return tlink;
3545 }
3546 return NULL;
3547}
3548
3549/* insert a tcon_link into the tree */
3550static void
3551tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
3552{
3553 struct rb_node **new = &(root->rb_node), *parent = NULL;
3554 struct tcon_link *tlink;
3555
3556 while (*new) {
3557 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
3558 parent = *new;
3559
3560 if (tlink->tl_uid > new_tlink->tl_uid)
3561 new = &((*new)->rb_left);
3562 else
3563 new = &((*new)->rb_right);
3564 }
3565
3566 rb_link_node(&new_tlink->tl_rbnode, parent, new);
3567 rb_insert_color(&new_tlink->tl_rbnode, root);
3568}
3569
9d002df4
JL
3570/*
3571 * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3572 * current task.
3573 *
3574 * If the superblock doesn't refer to a multiuser mount, then just return
3575 * the master tcon for the mount.
3576 *
6ef933a3 3577 * First, search the rbtree for an existing tcon for this fsuid. If one
9d002df4
JL
3578 * exists, then check to see if it's pending construction. If it is then wait
3579 * for construction to complete. Once it's no longer pending, check to see if
3580 * it failed and either return an error or retry construction, depending on
3581 * the timeout.
3582 *
3583 * If one doesn't exist then insert a new tcon_link struct into the tree and
3584 * try to construct a new one.
3585 */
3586struct tcon_link *
3587cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3588{
3589 int ret;
b647c35f 3590 uid_t fsuid = current_fsuid();
9d002df4
JL
3591 struct tcon_link *tlink, *newtlink;
3592
3593 if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3594 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3595
3596 spin_lock(&cifs_sb->tlink_tree_lock);
b647c35f 3597 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
9d002df4
JL
3598 if (tlink)
3599 cifs_get_tlink(tlink);
3600 spin_unlock(&cifs_sb->tlink_tree_lock);
3601
3602 if (tlink == NULL) {
3603 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3604 if (newtlink == NULL)
3605 return ERR_PTR(-ENOMEM);
b647c35f 3606 newtlink->tl_uid = fsuid;
9d002df4
JL
3607 newtlink->tl_tcon = ERR_PTR(-EACCES);
3608 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3609 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3610 cifs_get_tlink(newtlink);
3611
9d002df4
JL
3612 spin_lock(&cifs_sb->tlink_tree_lock);
3613 /* was one inserted after previous search? */
b647c35f 3614 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
9d002df4
JL
3615 if (tlink) {
3616 cifs_get_tlink(tlink);
3617 spin_unlock(&cifs_sb->tlink_tree_lock);
9d002df4
JL
3618 kfree(newtlink);
3619 goto wait_for_construction;
3620 }
9d002df4 3621 tlink = newtlink;
b647c35f
JL
3622 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3623 spin_unlock(&cifs_sb->tlink_tree_lock);
9d002df4
JL
3624 } else {
3625wait_for_construction:
3626 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3627 cifs_sb_tcon_pending_wait,
3628 TASK_INTERRUPTIBLE);
3629 if (ret) {
3630 cifs_put_tlink(tlink);
3631 return ERR_PTR(ret);
3632 }
3633
3634 /* if it's good, return it */
3635 if (!IS_ERR(tlink->tl_tcon))
3636 return tlink;
3637
3638 /* return error if we tried this already recently */
3639 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3640 cifs_put_tlink(tlink);
3641 return ERR_PTR(-EACCES);
3642 }
3643
3644 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3645 goto wait_for_construction;
3646 }
3647
3648 tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3649 clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3650 wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3651
3652 if (IS_ERR(tlink->tl_tcon)) {
3653 cifs_put_tlink(tlink);
3654 return ERR_PTR(-EACCES);
3655 }
3656
3657 return tlink;
3658}
2de970ff
JL
3659
3660/*
3661 * periodic workqueue job that scans tcon_tree for a superblock and closes
3662 * out tcons.
3663 */
3664static void
3665cifs_prune_tlinks(struct work_struct *work)
3666{
3667 struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3668 prune_tlinks.work);
b647c35f
JL
3669 struct rb_root *root = &cifs_sb->tlink_tree;
3670 struct rb_node *node = rb_first(root);
3671 struct rb_node *tmp;
3672 struct tcon_link *tlink;
2de970ff 3673
b647c35f
JL
3674 /*
3675 * Because we drop the spinlock in the loop in order to put the tlink
3676 * it's not guarded against removal of links from the tree. The only
3677 * places that remove entries from the tree are this function and
3678 * umounts. Because this function is non-reentrant and is canceled
3679 * before umount can proceed, this is safe.
3680 */
3681 spin_lock(&cifs_sb->tlink_tree_lock);
3682 node = rb_first(root);
3683 while (node != NULL) {
3684 tmp = node;
3685 node = rb_next(tmp);
3686 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
3687
3688 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
3689 atomic_read(&tlink->tl_count) != 0 ||
3690 time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
3691 continue;
2de970ff 3692
b647c35f
JL
3693 cifs_get_tlink(tlink);
3694 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3695 rb_erase(tmp, root);
3696
3697 spin_unlock(&cifs_sb->tlink_tree_lock);
3698 cifs_put_tlink(tlink);
3699 spin_lock(&cifs_sb->tlink_tree_lock);
3700 }
3701 spin_unlock(&cifs_sb->tlink_tree_lock);
2de970ff
JL
3702
3703 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3704 TLINK_IDLE_EXPIRE);
3705}