projects / deliverable / linux.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
cifs: fix artificial limit on reading symlinks
[deliverable/linux.git] / fs / cifs / connect.c
CommitLineData
1da177e4
LT		 1/*
2 * fs/cifs/connect.c
3 *
d185cda7 4 * Copyright (C) International Business Machines Corp., 2002,2009
1da177e4
LT		 5 * Author(s): Steve French (sfrench@us.ibm.com)
6 *
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
fb8c4b14 19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
1da177e4
LT		 20 */
21#include <linux/fs.h>
22#include <linux/net.h>
23#include <linux/string.h>
24#include <linux/list.h>
25#include <linux/wait.h>
1da177e4
LT		 26#include <linux/pagemap.h>
27#include <linux/ctype.h>
28#include <linux/utsname.h>
29#include <linux/mempool.h>
b8643e1b 30#include <linux/delay.h>
f191401f 31#include <linux/completion.h>
aaf737ad 32#include <linux/kthread.h>
0ae0efad 33#include <linux/pagevec.h>
7dfb7103 34#include <linux/freezer.h>
5c2503a8 35#include <linux/namei.h>
1da177e4
LT		 36#include <asm/uaccess.h>
37#include <asm/processor.h>
0e2bedaa 38#include <net/ipv6.h>
1da177e4
LT		 39#include "cifspdu.h"
40#include "cifsglob.h"
41#include "cifsproto.h"
42#include "cifs_unicode.h"
43#include "cifs_debug.h"
44#include "cifs_fs_sb.h"
45#include "ntlmssp.h"
46#include "nterr.h"
47#include "rfc1002pdu.h"
a2653eba 48#include "cn_cifs.h"
1da177e4
LT		 49
50#define CIFS_PORT 445
51#define RFC1001_PORT 139
52
1da177e4
LT		 53extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
54 unsigned char *p24);
55
56extern mempool_t *cifs_req_poolp;
57
58struct smb_vol {
59 char *username;
60 char *password;
61 char *domainname;
62 char *UNC;
63 char *UNCip;
95b1cb90 64 char *in6_addr; /* ipv6 address as human readable form of in6_addr */
1da177e4
LT		 65 char *iocharset; /* local code page for mapping to and from Unicode */
66 char source_rfc1001_name[16]; /* netbios name of client */
a10faeb2 67 char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
1da177e4
LT		 68 uid_t linux_uid;
69 gid_t linux_gid;
70 mode_t file_mode;
71 mode_t dir_mode;
189acaae 72 unsigned secFlg;
4b18f2a9
SF		 73 bool rw:1;
74 bool retry:1;
75 bool intr:1;
76 bool setuids:1;
77 bool override_uid:1;
78 bool override_gid:1;
d0a9c078 79 bool dynperm:1;
4b18f2a9
SF		 80 bool noperm:1;
81 bool no_psx_acl:1; /* set if posix acl support should be disabled */
82 bool cifs_acl:1;
83 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
84 bool server_ino:1; /* use inode numbers from server ie UniqueId */
85 bool direct_io:1;
95b1cb90
SF		 86 bool remap:1; /* set to remap seven reserved chars in filenames */
87 bool posix_paths:1; /* unset to not ask for posix pathnames. */
4b18f2a9
SF		 88 bool no_linux_ext:1;
89 bool sfu_emul:1;
95b1cb90
SF		 90 bool nullauth:1; /* attempt to authenticate with null user */
91 bool nocase:1; /* request case insensitive filenames */
92 bool nobrl:1; /* disable sending byte range locks to srv */
13a6e42a 93 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
95b1cb90 94 bool seal:1; /* request transport encryption on share */
84210e91
SF		 95 bool nodfs:1; /* Do not request DFS, even if available */
96 bool local_lease:1; /* check leases only on local system, not remote */
edf1ae40
SF		 97 bool noblocksnd:1;
98 bool noautotune:1;
be652445 99 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
1da177e4
LT		 100 unsigned int rsize;
101 unsigned int wsize;
102 unsigned int sockopt;
103 unsigned short int port;
fb8c4b14 104 char *prepath;
1da177e4
LT		 105};
106
bcf4b106 107static int ipv4_connect(struct TCP_Server_Info *server);
d5c5605c 108static int ipv6_connect(struct TCP_Server_Info *server);
1da177e4 109
d5c5605c
JL		 110/*
111 * cifs tcp session reconnection
112 *
113 * mark tcp session as reconnecting so temporarily locked
114 * mark all smb sessions as reconnecting for tcp session
115 * reconnect tcp session
116 * wake up waiters on reconnection? - (not needed currently)
117 */
2cd646a2 118static int
1da177e4
LT		 119cifs_reconnect(struct TCP_Server_Info *server)
120{
121 int rc = 0;
f1987b44 122 struct list_head *tmp, *tmp2;
1da177e4
LT		 123 struct cifsSesInfo *ses;
124 struct cifsTconInfo *tcon;
fb8c4b14 125 struct mid_q_entry *mid_entry;
50c2f753 126
1da177e4 127 spin_lock(&GlobalMid_Lock);
469ee614 128 if (server->tcpStatus == CifsExiting) {
fb8c4b14 129 /* the demux thread will exit normally
1da177e4
LT		 130 next time through the loop */
131 spin_unlock(&GlobalMid_Lock);
132 return rc;
133 } else
134 server->tcpStatus = CifsNeedReconnect;
135 spin_unlock(&GlobalMid_Lock);
136 server->maxBuf = 0;
137
e4eb295d 138 cFYI(1, ("Reconnecting tcp session"));
1da177e4
LT		 139
140 /* before reconnecting the tcp session, mark the smb session (uid)
141 and the tid bad so they are not used until reconnected */
14fbf50d
JL		 142 read_lock(&cifs_tcp_ses_lock);
143 list_for_each(tmp, &server->smb_ses_list) {
144 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
145 ses->need_reconnect = true;
146 ses->ipc_tid = 0;
f1987b44
JL		 147 list_for_each(tmp2, &ses->tcon_list) {
148 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
3b795210 149 tcon->need_reconnect = true;
1da177e4 150 }
1da177e4 151 }
f1987b44 152 read_unlock(&cifs_tcp_ses_lock);
1da177e4 153 /* do not want to be sending data on a socket we are freeing */
72ca545b 154 mutex_lock(&server->srv_mutex);
fb8c4b14 155 if (server->ssocket) {
467a8f8d 156 cFYI(1, ("State: 0x%x Flags: 0x%lx", server->ssocket->state,
1da177e4 157 server->ssocket->flags));
91cf45f0 158 kernel_sock_shutdown(server->ssocket, SHUT_WR);
fb8c4b14 159 cFYI(1, ("Post shutdown state: 0x%x Flags: 0x%lx",
467a8f8d 160 server->ssocket->state,
1da177e4
LT		 161 server->ssocket->flags));
162 sock_release(server->ssocket);
163 server->ssocket = NULL;
164 }
165
166 spin_lock(&GlobalMid_Lock);
167 list_for_each(tmp, &server->pending_mid_q) {
168 mid_entry = list_entry(tmp, struct
169 mid_q_entry,
170 qhead);
ad8b15f0 171 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
09d1db5c
SF		 172 /* Mark other intransit requests as needing
173 retry so we do not immediately mark the
174 session bad again (ie after we reconnect
175 below) as they timeout too */
ad8b15f0 176 mid_entry->midState = MID_RETRY_NEEDED;
1da177e4
LT		 177 }
178 }
179 spin_unlock(&GlobalMid_Lock);
72ca545b 180 mutex_unlock(&server->srv_mutex);
1da177e4 181
469ee614
JL		 182 while ((server->tcpStatus != CifsExiting) &&
183 (server->tcpStatus != CifsGood)) {
6c3d8909 184 try_to_freeze();
bcf4b106 185 if (server->addr.sockAddr6.sin6_family == AF_INET6)
d5c5605c 186 rc = ipv6_connect(server);
bcf4b106
JL		 187 else
188 rc = ipv4_connect(server);
fb8c4b14
SF		 189 if (rc) {
190 cFYI(1, ("reconnect error %d", rc));
0cb766ae 191 msleep(3000);
1da177e4
LT		 192 } else {
193 atomic_inc(&tcpSesReconnectCount);
194 spin_lock(&GlobalMid_Lock);
469ee614 195 if (server->tcpStatus != CifsExiting)
1da177e4 196 server->tcpStatus = CifsGood;
ad009ac9 197 server->sequence_number = 0;
fb8c4b14 198 spin_unlock(&GlobalMid_Lock);
1da177e4
LT		 199 /* atomic_set(&server->inFlight,0);*/
200 wake_up(&server->response_q);
201 }
202 }
203 return rc;
204}
205
fb8c4b14 206/*
e4eb295d
SF		 207 return codes:
208 0 not a transact2, or all data present
209 >0 transact2 with that much data missing
210 -EINVAL = invalid transact2
211
212 */
fb8c4b14 213static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
e4eb295d 214{
fb8c4b14
SF		 215 struct smb_t2_rsp *pSMBt;
216 int total_data_size;
e4eb295d
SF		 217 int data_in_this_rsp;
218 int remaining;
219
fb8c4b14 220 if (pSMB->Command != SMB_COM_TRANSACTION2)
e4eb295d
SF		 221 return 0;
222
fb8c4b14
SF		 223 /* check for plausible wct, bcc and t2 data and parm sizes */
224 /* check for parm and data offset going beyond end of smb */
225 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
467a8f8d 226 cFYI(1, ("invalid transact2 word count"));
e4eb295d
SF		 227 return -EINVAL;
228 }
229
230 pSMBt = (struct smb_t2_rsp *)pSMB;
231
232 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
233 data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
234
235 remaining = total_data_size - data_in_this_rsp;
236
fb8c4b14 237 if (remaining == 0)
e4eb295d 238 return 0;
fb8c4b14 239 else if (remaining < 0) {
467a8f8d 240 cFYI(1, ("total data %d smaller than data in frame %d",
e4eb295d
SF		 241 total_data_size, data_in_this_rsp));
242 return -EINVAL;
243 } else {
467a8f8d 244 cFYI(1, ("missing %d bytes from transact2, check next response",
e4eb295d 245 remaining));
fb8c4b14
SF		 246 if (total_data_size > maxBufSize) {
247 cERROR(1, ("TotalDataSize %d is over maximum buffer %d",
248 total_data_size, maxBufSize));
249 return -EINVAL;
e4eb295d
SF		 250 }
251 return remaining;
252 }
253}
254
fb8c4b14 255static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
e4eb295d
SF		 256{
257 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
258 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
259 int total_data_size;
260 int total_in_buf;
261 int remaining;
262 int total_in_buf2;
fb8c4b14
SF		 263 char *data_area_of_target;
264 char *data_area_of_buf2;
e4eb295d
SF		 265 __u16 byte_count;
266
267 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
268
fb8c4b14 269 if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
63135e08 270 cFYI(1, ("total data size of primary and secondary t2 differ"));
e4eb295d
SF		 271 }
272
273 total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
274
275 remaining = total_data_size - total_in_buf;
50c2f753 276
fb8c4b14 277 if (remaining < 0)
e4eb295d
SF		 278 return -EINVAL;
279
fb8c4b14 280 if (remaining == 0) /* nothing to do, ignore */
e4eb295d 281 return 0;
50c2f753 282
e4eb295d 283 total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
fb8c4b14 284 if (remaining < total_in_buf2) {
467a8f8d 285 cFYI(1, ("transact2 2nd response contains too much data"));
e4eb295d
SF		 286 }
287
288 /* find end of first SMB data area */
fb8c4b14 289 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
e4eb295d
SF		 290 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
291 /* validate target area */
292
293 data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
fb8c4b14 294 le16_to_cpu(pSMB2->t2_rsp.DataOffset);
e4eb295d
SF		 295
296 data_area_of_target += total_in_buf;
297
298 /* copy second buffer into end of first buffer */
fb8c4b14 299 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
e4eb295d
SF		 300 total_in_buf += total_in_buf2;
301 pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
302 byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
303 byte_count += total_in_buf2;
304 BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
305
70ca734a 306 byte_count = pTargetSMB->smb_buf_length;
e4eb295d
SF		 307 byte_count += total_in_buf2;
308
309 /* BB also add check that we are not beyond maximum buffer size */
50c2f753 310
70ca734a 311 pTargetSMB->smb_buf_length = byte_count;
e4eb295d 312
fb8c4b14 313 if (remaining == total_in_buf2) {
467a8f8d 314 cFYI(1, ("found the last secondary response"));
e4eb295d
SF		 315 return 0; /* we are done */
316 } else /* more responses to go */
317 return 1;
318
319}
320
1da177e4
LT		 321static int
322cifs_demultiplex_thread(struct TCP_Server_Info *server)
323{
324 int length;
325 unsigned int pdu_length, total_read;
326 struct smb_hdr *smb_buffer = NULL;
b8643e1b
SF		 327 struct smb_hdr *bigbuf = NULL;
328 struct smb_hdr *smallbuf = NULL;
1da177e4
LT		 329 struct msghdr smb_msg;
330 struct kvec iov;
331 struct socket *csocket = server->ssocket;
332 struct list_head *tmp;
333 struct cifsSesInfo *ses;
334 struct task_struct *task_to_wake = NULL;
335 struct mid_q_entry *mid_entry;
70ca734a 336 char temp;
4b18f2a9
SF		 337 bool isLargeBuf = false;
338 bool isMultiRsp;
e4eb295d 339 int reconnect;
1da177e4 340
1da177e4 341 current->flags |= PF_MEMALLOC;
ba25f9dc 342 cFYI(1, ("Demultiplex PID: %d", task_pid_nr(current)));
93d0ec85
JL		 343
344 length = atomic_inc_return(&tcpSesAllocCount);
345 if (length > 1)
26f57364
SF		 346 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
347 GFP_KERNEL);
1da177e4 348
83144186 349 set_freezable();
469ee614 350 while (server->tcpStatus != CifsExiting) {
ede1327e
SF		 351 if (try_to_freeze())
352 continue;
b8643e1b
SF		 353 if (bigbuf == NULL) {
354 bigbuf = cifs_buf_get();
0fd1ffe0
PM		 355 if (!bigbuf) {
356 cERROR(1, ("No memory for large SMB response"));
b8643e1b
SF		 357 msleep(3000);
358 /* retry will check if exiting */
359 continue;
360 }
0fd1ffe0
PM		 361 } else if (isLargeBuf) {
362 /* we are reusing a dirty large buf, clear its start */
26f57364 363 memset(bigbuf, 0, sizeof(struct smb_hdr));
1da177e4 364 }
b8643e1b
SF		 365
366 if (smallbuf == NULL) {
367 smallbuf = cifs_small_buf_get();
0fd1ffe0
PM		 368 if (!smallbuf) {
369 cERROR(1, ("No memory for SMB response"));
b8643e1b
SF		 370 msleep(1000);
371 /* retry will check if exiting */
372 continue;
373 }
374 /* beginning of smb buffer is cleared in our buf_get */
375 } else /* if existing small buf clear beginning */
26f57364 376 memset(smallbuf, 0, sizeof(struct smb_hdr));
b8643e1b 377
4b18f2a9
SF		 378 isLargeBuf = false;
379 isMultiRsp = false;
b8643e1b 380 smb_buffer = smallbuf;
1da177e4
LT		 381 iov.iov_base = smb_buffer;
382 iov.iov_len = 4;
383 smb_msg.msg_control = NULL;
384 smb_msg.msg_controllen = 0;
f01d5e14
SF		 385 pdu_length = 4; /* enough to get RFC1001 header */
386incomplete_rcv:
1da177e4
LT		 387 length =
388 kernel_recvmsg(csocket, &smb_msg,
f01d5e14 389 &iov, 1, pdu_length, 0 /* BB other flags? */);
1da177e4 390
469ee614 391 if (server->tcpStatus == CifsExiting) {
1da177e4
LT		 392 break;
393 } else if (server->tcpStatus == CifsNeedReconnect) {
0fd1ffe0 394 cFYI(1, ("Reconnect after server stopped responding"));
1da177e4 395 cifs_reconnect(server);
0fd1ffe0 396 cFYI(1, ("call to reconnect done"));
1da177e4
LT		 397 csocket = server->ssocket;
398 continue;
399 } else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
b8643e1b 400 msleep(1); /* minimum sleep to prevent looping
1da177e4
LT		 401 allowing socket to clear and app threads to set
402 tcpStatus CifsNeedReconnect if server hung */
c527c8a7
SF		 403 if (pdu_length < 4) {
404 iov.iov_base = (4 - pdu_length) +
405 (char *)smb_buffer;
406 iov.iov_len = pdu_length;
407 smb_msg.msg_control = NULL;
408 smb_msg.msg_controllen = 0;
c18c732e 409 goto incomplete_rcv;
c527c8a7 410 } else
c18c732e 411 continue;
1da177e4 412 } else if (length <= 0) {
0fd1ffe0
PM		 413 if (server->tcpStatus == CifsNew) {
414 cFYI(1, ("tcp session abend after SMBnegprot"));
09d1db5c
SF		 415 /* some servers kill the TCP session rather than
416 returning an SMB negprot error, in which
417 case reconnecting here is not going to help,
418 and so simply return error to mount */
1da177e4
LT		 419 break;
420 }
0fd1ffe0 421 if (!try_to_freeze() && (length == -EINTR)) {
467a8f8d 422 cFYI(1, ("cifsd thread killed"));
1da177e4
LT		 423 break;
424 }
467a8f8d 425 cFYI(1, ("Reconnect after unexpected peek error %d",
57337e42 426 length));
1da177e4
LT		 427 cifs_reconnect(server);
428 csocket = server->ssocket;
429 wake_up(&server->response_q);
430 continue;
2a974680
PT		 431 } else if (length < pdu_length) {
432 cFYI(1, ("requested %d bytes but only got %d bytes",
433 pdu_length, length));
f01d5e14 434 pdu_length -= length;
f01d5e14
SF		 435 msleep(1);
436 goto incomplete_rcv;
46810cbf 437 }
1da177e4 438
70ca734a
SF		 439 /* The right amount was read from socket - 4 bytes */
440 /* so we can now interpret the length field */
46810cbf 441
70ca734a
SF		 442 /* the first byte big endian of the length field,
443 is actually not part of the length but the type
444 with the most common, zero, as regular data */
445 temp = *((char *) smb_buffer);
46810cbf 446
fb8c4b14 447 /* Note that FC 1001 length is big endian on the wire,
70ca734a
SF		 448 but we convert it here so it is always manipulated
449 as host byte order */
5ca33c6a 450 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
70ca734a
SF		 451 smb_buffer->smb_buf_length = pdu_length;
452
467a8f8d 453 cFYI(1, ("rfc1002 length 0x%x", pdu_length+4));
46810cbf 454
70ca734a 455 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
fb8c4b14 456 continue;
70ca734a 457 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
467a8f8d 458 cFYI(1, ("Good RFC 1002 session rsp"));
e4eb295d 459 continue;
70ca734a 460 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
fb8c4b14 461 /* we get this from Windows 98 instead of
46810cbf 462 an error on SMB negprot response */
fb8c4b14 463 cFYI(1, ("Negative RFC1002 Session Response Error 0x%x)",
70ca734a 464 pdu_length));
fb8c4b14
SF		 465 if (server->tcpStatus == CifsNew) {
466 /* if nack on negprot (rather than
46810cbf
SF		 467 ret of smb negprot error) reconnecting
468 not going to help, ret error to mount */
469 break;
470 } else {
471 /* give server a second to
472 clean up before reconnect attempt */
473 msleep(1000);
474 /* always try 445 first on reconnect
475 since we get NACK on some if we ever
fb8c4b14 476 connected to port 139 (the NACK is
46810cbf
SF		 477 since we do not begin with RFC1001
478 session initialize frame) */
fb8c4b14 479 server->addr.sockAddr.sin_port =
46810cbf 480 htons(CIFS_PORT);
1da177e4
LT		 481 cifs_reconnect(server);
482 csocket = server->ssocket;
46810cbf 483 wake_up(&server->response_q);
1da177e4 484 continue;
46810cbf 485 }
70ca734a 486 } else if (temp != (char) 0) {
fb8c4b14 487 cERROR(1, ("Unknown RFC 1002 frame"));
70ca734a
SF		 488 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
489 length);
46810cbf
SF		 490 cifs_reconnect(server);
491 csocket = server->ssocket;
492 continue;
e4eb295d
SF		 493 }
494
495 /* else we have an SMB response */
fb8c4b14 496 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
26f57364 497 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
e4eb295d 498 cERROR(1, ("Invalid size SMB length %d pdu_length %d",
46810cbf 499 length, pdu_length+4));
e4eb295d
SF		 500 cifs_reconnect(server);
501 csocket = server->ssocket;
502 wake_up(&server->response_q);
503 continue;
fb8c4b14 504 }
e4eb295d
SF		 505
506 /* else length ok */
507 reconnect = 0;
508
fb8c4b14 509 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
4b18f2a9 510 isLargeBuf = true;
e4eb295d
SF		 511 memcpy(bigbuf, smallbuf, 4);
512 smb_buffer = bigbuf;
513 }
514 length = 0;
515 iov.iov_base = 4 + (char *)smb_buffer;
516 iov.iov_len = pdu_length;
fb8c4b14 517 for (total_read = 0; total_read < pdu_length;
e4eb295d
SF		 518 total_read += length) {
519 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
520 pdu_length - total_read, 0);
469ee614 521 if ((server->tcpStatus == CifsExiting) ||
e4eb295d
SF		 522 (length == -EINTR)) {
523 /* then will exit */
524 reconnect = 2;
525 break;
526 } else if (server->tcpStatus == CifsNeedReconnect) {
46810cbf
SF		 527 cifs_reconnect(server);
528 csocket = server->ssocket;
fb8c4b14 529 /* Reconnect wakes up rspns q */
e4eb295d
SF		 530 /* Now we will reread sock */
531 reconnect = 1;
532 break;
fb8c4b14 533 } else if ((length == -ERESTARTSYS) ||
e4eb295d
SF		 534 (length == -EAGAIN)) {
535 msleep(1); /* minimum sleep to prevent looping,
fb8c4b14 536 allowing socket to clear and app
e4eb295d
SF		 537 threads to set tcpStatus
538 CifsNeedReconnect if server hung*/
c18c732e 539 length = 0;
46810cbf 540 continue;
e4eb295d 541 } else if (length <= 0) {
fb8c4b14 542 cERROR(1, ("Received no data, expecting %d",
e4eb295d
SF		 543 pdu_length - total_read));
544 cifs_reconnect(server);
545 csocket = server->ssocket;
546 reconnect = 1;
547 break;
46810cbf 548 }
e4eb295d 549 }
fb8c4b14 550 if (reconnect == 2)
e4eb295d 551 break;
fb8c4b14 552 else if (reconnect == 1)
e4eb295d 553 continue;
1da177e4 554
e4eb295d 555 length += 4; /* account for rfc1002 hdr */
50c2f753 556
09d1db5c 557
e4eb295d 558 dump_smb(smb_buffer, length);
184ed211 559 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
b387eaeb 560 cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
e4eb295d
SF		 561 continue;
562 }
1da177e4 563
e4eb295d
SF		 564
565 task_to_wake = NULL;
566 spin_lock(&GlobalMid_Lock);
567 list_for_each(tmp, &server->pending_mid_q) {
568 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
569
50c2f753 570 if ((mid_entry->mid == smb_buffer->Mid) &&
e4eb295d
SF		 571 (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
572 (mid_entry->command == smb_buffer->Command)) {
fb8c4b14 573 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
e4eb295d 574 /* We have a multipart transact2 resp */
4b18f2a9 575 isMultiRsp = true;
fb8c4b14 576 if (mid_entry->resp_buf) {
e4eb295d 577 /* merge response - fix up 1st*/
50c2f753 578 if (coalesce_t2(smb_buffer,
e4eb295d 579 mid_entry->resp_buf)) {
4b18f2a9
SF		 580 mid_entry->multiRsp =
581 true;
e4eb295d
SF		 582 break;
583 } else {
584 /* all parts received */
4b18f2a9
SF		 585 mid_entry->multiEnd =
586 true;
50c2f753 587 goto multi_t2_fnd;
e4eb295d
SF		 588 }
589 } else {
fb8c4b14 590 if (!isLargeBuf) {
e4eb295d
SF		 591 cERROR(1,("1st trans2 resp needs bigbuf"));
592 /* BB maybe we can fix this up, switch
50c2f753 593 to already allocated large buffer? */
e4eb295d 594 } else {
cd63499c 595 /* Have first buffer */
e4eb295d
SF		 596 mid_entry->resp_buf =
597 smb_buffer;
4b18f2a9
SF		 598 mid_entry->largeBuf =
599 true;
e4eb295d
SF		 600 bigbuf = NULL;
601 }
602 }
603 break;
50c2f753 604 }
e4eb295d 605 mid_entry->resp_buf = smb_buffer;
4b18f2a9 606 mid_entry->largeBuf = isLargeBuf;
e4eb295d
SF		 607multi_t2_fnd:
608 task_to_wake = mid_entry->tsk;
609 mid_entry->midState = MID_RESPONSE_RECEIVED;
1047abc1
SF		 610#ifdef CONFIG_CIFS_STATS2
611 mid_entry->when_received = jiffies;
612#endif
3a5ff61c
SF		 613 /* so we do not time out requests to server
614 which is still responding (since server could
615 be busy but not dead) */
616 server->lstrp = jiffies;
e4eb295d 617 break;
46810cbf 618 }
1da177e4 619 }
e4eb295d
SF		 620 spin_unlock(&GlobalMid_Lock);
621 if (task_to_wake) {
cd63499c 622 /* Was previous buf put in mpx struct for multi-rsp? */
fb8c4b14 623 if (!isMultiRsp) {
cd63499c 624 /* smb buffer will be freed by user thread */
26f57364 625 if (isLargeBuf)
cd63499c 626 bigbuf = NULL;
26f57364 627 else
cd63499c
SF		 628 smallbuf = NULL;
629 }
e4eb295d 630 wake_up_process(task_to_wake);
4b18f2a9
SF		 631 } else if (!is_valid_oplock_break(smb_buffer, server) &&
632 !isMultiRsp) {
50c2f753
SF		 633 cERROR(1, ("No task to wake, unknown frame received! "
634 "NumMids %d", midCount.counter));
635 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
70ca734a 636 sizeof(struct smb_hdr));
3979877e
SF		 637#ifdef CONFIG_CIFS_DEBUG2
638 cifs_dump_detail(smb_buffer);
639 cifs_dump_mids(server);
640#endif /* CIFS_DEBUG2 */
50c2f753 641
e4eb295d
SF		 642 }
643 } /* end while !EXITING */
644
e7ddee90
JL		 645 /* take it off the list, if it's not already */
646 write_lock(&cifs_tcp_ses_lock);
647 list_del_init(&server->tcp_ses_list);
648 write_unlock(&cifs_tcp_ses_lock);
649
1da177e4
LT		 650 spin_lock(&GlobalMid_Lock);
651 server->tcpStatus = CifsExiting;
e691b9d1 652 spin_unlock(&GlobalMid_Lock);
dbdbb876 653 wake_up_all(&server->response_q);
e691b9d1 654
31ca3bc3
SF		 655 /* check if we have blocked requests that need to free */
656 /* Note that cifs_max_pending is normally 50, but
657 can be set at module install time to as little as two */
e691b9d1 658 spin_lock(&GlobalMid_Lock);
fb8c4b14 659 if (atomic_read(&server->inFlight) >= cifs_max_pending)
31ca3bc3
SF		 660 atomic_set(&server->inFlight, cifs_max_pending - 1);
661 /* We do not want to set the max_pending too low or we
662 could end up with the counter going negative */
1da177e4 663 spin_unlock(&GlobalMid_Lock);
50c2f753 664 /* Although there should not be any requests blocked on
1da177e4 665 this queue it can not hurt to be paranoid and try to wake up requests
09d1db5c 666 that may haven been blocked when more than 50 at time were on the wire
1da177e4
LT		 667 to the same server - they now will see the session is in exit state
668 and get out of SendReceive. */
669 wake_up_all(&server->request_q);
670 /* give those requests time to exit */
b8643e1b 671 msleep(125);
50c2f753 672
fb8c4b14 673 if (server->ssocket) {
1da177e4
LT		 674 sock_release(csocket);
675 server->ssocket = NULL;
676 }
b8643e1b 677 /* buffer usuallly freed in free_mid - need to free it here on exit */
a8a11d39
MK		 678 cifs_buf_release(bigbuf);
679 if (smallbuf) /* no sense logging a debug message if NULL */
b8643e1b 680 cifs_small_buf_release(smallbuf);
1da177e4 681
14fbf50d
JL		 682 /*
683 * BB: we shouldn't have to do any of this. It shouldn't be
684 * possible to exit from the thread with active SMB sessions
685 */
686 read_lock(&cifs_tcp_ses_lock);
1da177e4 687 if (list_empty(&server->pending_mid_q)) {
09d1db5c
SF		 688 /* loop through server session structures attached to this and
689 mark them dead */
14fbf50d
JL		 690 list_for_each(tmp, &server->smb_ses_list) {
691 ses = list_entry(tmp, struct cifsSesInfo,
692 smb_ses_list);
693 ses->status = CifsExiting;
694 ses->server = NULL;
1da177e4 695 }
14fbf50d 696 read_unlock(&cifs_tcp_ses_lock);
1da177e4 697 } else {
31ca3bc3
SF		 698 /* although we can not zero the server struct pointer yet,
699 since there are active requests which may depnd on them,
700 mark the corresponding SMB sessions as exiting too */
14fbf50d 701 list_for_each(tmp, &server->smb_ses_list) {
31ca3bc3 702 ses = list_entry(tmp, struct cifsSesInfo,
14fbf50d
JL		 703 smb_ses_list);
704 ses->status = CifsExiting;
31ca3bc3
SF		 705 }
706
1da177e4
LT		 707 spin_lock(&GlobalMid_Lock);
708 list_for_each(tmp, &server->pending_mid_q) {
709 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
710 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
50c2f753
SF		 711 cFYI(1, ("Clearing Mid 0x%x - waking up ",
712 mid_entry->mid));
1da177e4 713 task_to_wake = mid_entry->tsk;
26f57364 714 if (task_to_wake)
1da177e4 715 wake_up_process(task_to_wake);
1da177e4
LT		 716 }
717 }
718 spin_unlock(&GlobalMid_Lock);
14fbf50d 719 read_unlock(&cifs_tcp_ses_lock);
1da177e4 720 /* 1/8th of sec is more than enough time for them to exit */
b8643e1b 721 msleep(125);
1da177e4
LT		 722 }
723
f191401f 724 if (!list_empty(&server->pending_mid_q)) {
50c2f753 725 /* mpx threads have not exited yet give them
1da177e4 726 at least the smb send timeout time for long ops */
31ca3bc3
SF		 727 /* due to delays on oplock break requests, we need
728 to wait at least 45 seconds before giving up
729 on a request getting a response and going ahead
730 and killing cifsd */
1da177e4 731 cFYI(1, ("Wait for exit from demultiplex thread"));
31ca3bc3 732 msleep(46000);
1da177e4
LT		 733 /* if threads still have not exited they are probably never
734 coming home not much else we can do but free the memory */
735 }
1da177e4 736
31ca3bc3
SF		 737 /* last chance to mark ses pointers invalid
738 if there are any pointing to this (e.g
50c2f753 739 if a crazy root user tried to kill cifsd
31ca3bc3 740 kernel thread explicitly this might happen) */
14fbf50d
JL		 741 /* BB: This shouldn't be necessary, see above */
742 read_lock(&cifs_tcp_ses_lock);
743 list_for_each(tmp, &server->smb_ses_list) {
744 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
745 ses->server = NULL;
31ca3bc3 746 }
14fbf50d 747 read_unlock(&cifs_tcp_ses_lock);
31ca3bc3 748
c359cf3c 749 kfree(server->hostname);
b1c8d2b4 750 task_to_wake = xchg(&server->tsk, NULL);
31ca3bc3 751 kfree(server);
93d0ec85
JL		 752
753 length = atomic_dec_return(&tcpSesAllocCount);
26f57364
SF		 754 if (length > 0)
755 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
756 GFP_KERNEL);
50c2f753 757
b1c8d2b4
JL		 758 /* if server->tsk was NULL then wait for a signal before exiting */
759 if (!task_to_wake) {
760 set_current_state(TASK_INTERRUPTIBLE);
761 while (!signal_pending(current)) {
762 schedule();
763 set_current_state(TASK_INTERRUPTIBLE);
764 }
765 set_current_state(TASK_RUNNING);
766 }
767
0468a2cf 768 module_put_and_exit(0);
1da177e4
LT		 769}
770
c359cf3c
JL		 771/* extract the host portion of the UNC string */
772static char *
773extract_hostname(const char *unc)
774{
775 const char *src;
776 char *dst, *delim;
777 unsigned int len;
778
779 /* skip double chars at beginning of string */
780 /* BB: check validity of these bytes? */
781 src = unc + 2;
782
783 /* delimiter between hostname and sharename is always '\\' now */
784 delim = strchr(src, '\\');
785 if (!delim)
786 return ERR_PTR(-EINVAL);
787
788 len = delim - src;
789 dst = kmalloc((len + 1), GFP_KERNEL);
790 if (dst == NULL)
791 return ERR_PTR(-ENOMEM);
792
793 memcpy(dst, src, len);
794 dst[len] = '\0';
795
796 return dst;
797}
798
1da177e4 799static int
50c2f753
SF		 800cifs_parse_mount_options(char *options, const char *devname,
801 struct smb_vol *vol)
1da177e4
LT		 802{
803 char *value;
804 char *data;
805 unsigned int temp_len, i, j;
806 char separator[2];
807
808 separator[0] = ',';
50c2f753 809 separator[1] = 0;
1da177e4 810
12e36b2f 811 if (Local_System_Name[0] != 0)
50c2f753 812 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
2cd646a2 813 else {
12e36b2f 814 char *nodename = utsname()->nodename;
50c2f753
SF		 815 int n = strnlen(nodename, 15);
816 memset(vol->source_rfc1001_name, 0x20, 15);
817 for (i = 0; i < n; i++) {
2cd646a2
SF		 818 /* does not have to be perfect mapping since field is
819 informational, only used for servers that do not support
820 port 445 and it can be overridden at mount time */
12e36b2f 821 vol->source_rfc1001_name[i] = toupper(nodename[i]);
2cd646a2 822 }
1da177e4
LT		 823 }
824 vol->source_rfc1001_name[15] = 0;
a10faeb2
SF		 825 /* null target name indicates to use *SMBSERVR default called name
826 if we end up sending RFC1001 session initialize */
827 vol->target_rfc1001_name[0] = 0;
a001e5b5
DH		 828 vol->linux_uid = current_uid(); /* use current_euid() instead? */
829 vol->linux_gid = current_gid();
1da177e4
LT		 830 vol->dir_mode = S_IRWXUGO;
831 /* 2767 perms indicate mandatory locking support */
7505e052 832 vol->file_mode = (S_IRWXUGO | S_ISGID) & (~S_IXGRP);
1da177e4
LT		 833
834 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
4b18f2a9 835 vol->rw = true;
ac67055e
JA		 836 /* default is always to request posix paths. */
837 vol->posix_paths = 1;
838
1da177e4
LT		 839 if (!options)
840 return 1;
841
50c2f753 842 if (strncmp(options, "sep=", 4) == 0) {
fb8c4b14 843 if (options[4] != 0) {
1da177e4
LT		 844 separator[0] = options[4];
845 options += 5;
846 } else {
467a8f8d 847 cFYI(1, ("Null separator not allowed"));
1da177e4
LT		 848 }
849 }
50c2f753 850
1da177e4
LT		 851 while ((data = strsep(&options, separator)) != NULL) {
852 if (!*data)
853 continue;
854 if ((value = strchr(data, '=')) != NULL)
855 *value++ = '\0';
856
50c2f753
SF		 857 /* Have to parse this before we parse for "user" */
858 if (strnicmp(data, "user_xattr", 10) == 0) {
1da177e4 859 vol->no_xattr = 0;
50c2f753 860 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
1da177e4
LT		 861 vol->no_xattr = 1;
862 } else if (strnicmp(data, "user", 4) == 0) {
4b952a9b 863 if (!value) {
1da177e4
LT		 864 printk(KERN_WARNING
865 "CIFS: invalid or missing username\n");
866 return 1; /* needs_arg; */
fb8c4b14 867 } else if (!*value) {
4b952a9b
SF		 868 /* null user, ie anonymous, authentication */
869 vol->nullauth = 1;
1da177e4
LT		 870 }
871 if (strnlen(value, 200) < 200) {
872 vol->username = value;
873 } else {
874 printk(KERN_WARNING "CIFS: username too long\n");
875 return 1;
876 }
877 } else if (strnicmp(data, "pass", 4) == 0) {
878 if (!value) {
879 vol->password = NULL;
880 continue;
fb8c4b14 881 } else if (value[0] == 0) {
1da177e4
LT		 882 /* check if string begins with double comma
883 since that would mean the password really
884 does start with a comma, and would not
885 indicate an empty string */
fb8c4b14 886 if (value[1] != separator[0]) {
1da177e4
LT		 887 vol->password = NULL;
888 continue;
889 }
890 }
891 temp_len = strlen(value);
892 /* removed password length check, NTLM passwords
893 can be arbitrarily long */
894
50c2f753 895 /* if comma in password, the string will be
1da177e4
LT		 896 prematurely null terminated. Commas in password are
897 specified across the cifs mount interface by a double
898 comma ie ,, and a comma used as in other cases ie ','
899 as a parameter delimiter/separator is single and due
900 to the strsep above is temporarily zeroed. */
901
902 /* NB: password legally can have multiple commas and
903 the only illegal character in a password is null */
904
50c2f753 905 if ((value[temp_len] == 0) &&
09d1db5c 906 (value[temp_len+1] == separator[0])) {
1da177e4
LT		 907 /* reinsert comma */
908 value[temp_len] = separator[0];
50c2f753
SF		 909 temp_len += 2; /* move after second comma */
910 while (value[temp_len] != 0) {
1da177e4 911 if (value[temp_len] == separator[0]) {
50c2f753 912 if (value[temp_len+1] ==
09d1db5c
SF		 913 separator[0]) {
914 /* skip second comma */
915 temp_len++;
50c2f753 916 } else {
1da177e4
LT		 917 /* single comma indicating start
918 of next parm */
919 break;
920 }
921 }
922 temp_len++;
923 }
fb8c4b14 924 if (value[temp_len] == 0) {
1da177e4
LT		 925 options = NULL;
926 } else {
927 value[temp_len] = 0;
928 /* point option to start of next parm */
929 options = value + temp_len + 1;
930 }
50c2f753 931 /* go from value to value + temp_len condensing
1da177e4
LT		 932 double commas to singles. Note that this ends up
933 allocating a few bytes too many, which is ok */
e915fc49 934 vol->password = kzalloc(temp_len, GFP_KERNEL);
fb8c4b14 935 if (vol->password == NULL) {
50c2f753
SF		 936 printk(KERN_WARNING "CIFS: no memory "
937 "for password\n");
433dc24f
SF		 938 return 1;
939 }
50c2f753 940 for (i = 0, j = 0; i < temp_len; i++, j++) {
1da177e4 941 vol->password[j] = value[i];
fb8c4b14 942 if (value[i] == separator[0]
09d1db5c 943 && value[i+1] == separator[0]) {
1da177e4
LT		 944 /* skip second comma */
945 i++;
946 }
947 }
948 vol->password[j] = 0;
949 } else {
e915fc49 950 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
fb8c4b14 951 if (vol->password == NULL) {
50c2f753
SF		 952 printk(KERN_WARNING "CIFS: no memory "
953 "for password\n");
433dc24f
SF		 954 return 1;
955 }
1da177e4
LT		 956 strcpy(vol->password, value);
957 }
958 } else if (strnicmp(data, "ip", 2) == 0) {
959 if (!value || !*value) {
960 vol->UNCip = NULL;
961 } else if (strnlen(value, 35) < 35) {
962 vol->UNCip = value;
963 } else {
50c2f753
SF		 964 printk(KERN_WARNING "CIFS: ip address "
965 "too long\n");
1da177e4
LT		 966 return 1;
967 }
50c2f753
SF		 968 } else if (strnicmp(data, "sec", 3) == 0) {
969 if (!value || !*value) {
970 cERROR(1, ("no security value specified"));
971 continue;
972 } else if (strnicmp(value, "krb5i", 5) == 0) {
973 vol->secFlg |= CIFSSEC_MAY_KRB5 |
189acaae 974 CIFSSEC_MUST_SIGN;
bf820679 975 } else if (strnicmp(value, "krb5p", 5) == 0) {
50c2f753
SF		 976 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
977 CIFSSEC_MAY_KRB5; */
978 cERROR(1, ("Krb5 cifs privacy not supported"));
bf820679
SF		 979 return 1;
980 } else if (strnicmp(value, "krb5", 4) == 0) {
750d1151 981 vol->secFlg |= CIFSSEC_MAY_KRB5;
ac683924
SF		 982#ifdef CONFIG_CIFS_EXPERIMENTAL
983 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
984 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
985 CIFSSEC_MUST_SIGN;
986 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
987 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
988#endif
bf820679 989 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
750d1151 990 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
189acaae 991 CIFSSEC_MUST_SIGN;
bf820679 992 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
750d1151 993 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
bf820679 994 } else if (strnicmp(value, "ntlmi", 5) == 0) {
750d1151 995 vol->secFlg |= CIFSSEC_MAY_NTLM |
189acaae 996 CIFSSEC_MUST_SIGN;
bf820679
SF		 997 } else if (strnicmp(value, "ntlm", 4) == 0) {
998 /* ntlm is default so can be turned off too */
750d1151 999 vol->secFlg |= CIFSSEC_MAY_NTLM;
bf820679 1000 } else if (strnicmp(value, "nontlm", 6) == 0) {
189acaae 1001 /* BB is there a better way to do this? */
750d1151 1002 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
189acaae
SF		 1003#ifdef CONFIG_CIFS_WEAK_PW_HASH
1004 } else if (strnicmp(value, "lanman", 6) == 0) {
50c2f753 1005 vol->secFlg |= CIFSSEC_MAY_LANMAN;
189acaae 1006#endif
bf820679 1007 } else if (strnicmp(value, "none", 4) == 0) {
189acaae 1008 vol->nullauth = 1;
50c2f753
SF		 1009 } else {
1010 cERROR(1, ("bad security option: %s", value));
1011 return 1;
1012 }
1da177e4
LT		 1013 } else if ((strnicmp(data, "unc", 3) == 0)
1014 || (strnicmp(data, "target", 6) == 0)
1015 || (strnicmp(data, "path", 4) == 0)) {
1016 if (!value || !*value) {
50c2f753
SF		 1017 printk(KERN_WARNING "CIFS: invalid path to "
1018 "network resource\n");
1da177e4
LT		 1019 return 1; /* needs_arg; */
1020 }
1021 if ((temp_len = strnlen(value, 300)) < 300) {
50c2f753 1022 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
4523cc30 1023 if (vol->UNC == NULL)
1da177e4 1024 return 1;
50c2f753 1025 strcpy(vol->UNC, value);
1da177e4
LT		 1026 if (strncmp(vol->UNC, "//", 2) == 0) {
1027 vol->UNC[0] = '\\';
1028 vol->UNC[1] = '\\';
50c2f753 1029 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1da177e4 1030 printk(KERN_WARNING
50c2f753
SF		 1031 "CIFS: UNC Path does not begin "
1032 "with // or \\\\ \n");
1da177e4
LT		 1033 return 1;
1034 }
1035 } else {
1036 printk(KERN_WARNING "CIFS: UNC name too long\n");
1037 return 1;
1038 }
1039 } else if ((strnicmp(data, "domain", 3) == 0)
1040 || (strnicmp(data, "workgroup", 5) == 0)) {
1041 if (!value || !*value) {
1042 printk(KERN_WARNING "CIFS: invalid domain name\n");
1043 return 1; /* needs_arg; */
1044 }
1045 /* BB are there cases in which a comma can be valid in
1046 a domain name and need special handling? */
3979877e 1047 if (strnlen(value, 256) < 256) {
1da177e4
LT		 1048 vol->domainname = value;
1049 cFYI(1, ("Domain name set"));
1050 } else {
50c2f753
SF		 1051 printk(KERN_WARNING "CIFS: domain name too "
1052 "long\n");
1da177e4
LT		 1053 return 1;
1054 }
50c2f753
SF		 1055 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1056 if (!value || !*value) {
1057 printk(KERN_WARNING
1058 "CIFS: invalid path prefix\n");
1059 return 1; /* needs_argument */
1060 }
1061 if ((temp_len = strnlen(value, 1024)) < 1024) {
4523cc30 1062 if (value[0] != '/')
2fe87f02 1063 temp_len++; /* missing leading slash */
50c2f753
SF		 1064 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1065 if (vol->prepath == NULL)
1066 return 1;
4523cc30 1067 if (value[0] != '/') {
2fe87f02 1068 vol->prepath[0] = '/';
50c2f753 1069 strcpy(vol->prepath+1, value);
2fe87f02 1070 } else
50c2f753
SF		 1071 strcpy(vol->prepath, value);
1072 cFYI(1, ("prefix path %s", vol->prepath));
1073 } else {
1074 printk(KERN_WARNING "CIFS: prefix too long\n");
1075 return 1;
1076 }
1da177e4
LT		 1077 } else if (strnicmp(data, "iocharset", 9) == 0) {
1078 if (!value || !*value) {
63135e08
SF		 1079 printk(KERN_WARNING "CIFS: invalid iocharset "
1080 "specified\n");
1da177e4
LT		 1081 return 1; /* needs_arg; */
1082 }
1083 if (strnlen(value, 65) < 65) {
50c2f753 1084 if (strnicmp(value, "default", 7))
1da177e4 1085 vol->iocharset = value;
50c2f753
SF		 1086 /* if iocharset not set then load_nls_default
1087 is used by caller */
1088 cFYI(1, ("iocharset set to %s", value));
1da177e4 1089 } else {
63135e08
SF		 1090 printk(KERN_WARNING "CIFS: iocharset name "
1091 "too long.\n");
1da177e4
LT		 1092 return 1;
1093 }
1094 } else if (strnicmp(data, "uid", 3) == 0) {
1095 if (value && *value) {
1096 vol->linux_uid =
1097 simple_strtoul(value, &value, 0);
4523cc30 1098 vol->override_uid = 1;
1da177e4
LT		 1099 }
1100 } else if (strnicmp(data, "gid", 3) == 0) {
1101 if (value && *value) {
1102 vol->linux_gid =
1103 simple_strtoul(value, &value, 0);
4523cc30 1104 vol->override_gid = 1;
1da177e4
LT		 1105 }
1106 } else if (strnicmp(data, "file_mode", 4) == 0) {
1107 if (value && *value) {
1108 vol->file_mode =
1109 simple_strtoul(value, &value, 0);
1110 }
1111 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1112 if (value && *value) {
1113 vol->dir_mode =
1114 simple_strtoul(value, &value, 0);
1115 }
1116 } else if (strnicmp(data, "dirmode", 4) == 0) {
1117 if (value && *value) {
1118 vol->dir_mode =
1119 simple_strtoul(value, &value, 0);
1120 }
1121 } else if (strnicmp(data, "port", 4) == 0) {
1122 if (value && *value) {
1123 vol->port =
1124 simple_strtoul(value, &value, 0);
1125 }
1126 } else if (strnicmp(data, "rsize", 5) == 0) {
1127 if (value && *value) {
1128 vol->rsize =
1129 simple_strtoul(value, &value, 0);
1130 }
1131 } else if (strnicmp(data, "wsize", 5) == 0) {
1132 if (value && *value) {
1133 vol->wsize =
1134 simple_strtoul(value, &value, 0);
1135 }
1136 } else if (strnicmp(data, "sockopt", 5) == 0) {
1137 if (value && *value) {
1138 vol->sockopt =
1139 simple_strtoul(value, &value, 0);
1140 }
1141 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1142 if (!value || !*value || (*value == ' ')) {
63135e08 1143 cFYI(1, ("invalid (empty) netbiosname"));
1da177e4 1144 } else {
50c2f753
SF		 1145 memset(vol->source_rfc1001_name, 0x20, 15);
1146 for (i = 0; i < 15; i++) {
1147 /* BB are there cases in which a comma can be
1da177e4
LT		 1148 valid in this workstation netbios name (and need
1149 special handling)? */
1150
1151 /* We do not uppercase netbiosname for user */
50c2f753 1152 if (value[i] == 0)
1da177e4 1153 break;
50c2f753
SF		 1154 else
1155 vol->source_rfc1001_name[i] =
1156 value[i];
1da177e4
LT		 1157 }
1158 /* The string has 16th byte zero still from
1159 set at top of the function */
50c2f753
SF		 1160 if ((i == 15) && (value[i] != 0))
1161 printk(KERN_WARNING "CIFS: netbiosname"
1162 " longer than 15 truncated.\n");
a10faeb2
SF		 1163 }
1164 } else if (strnicmp(data, "servern", 7) == 0) {
1165 /* servernetbiosname specified override *SMBSERVER */
1166 if (!value || !*value || (*value == ' ')) {
467a8f8d 1167 cFYI(1, ("empty server netbiosname specified"));
a10faeb2
SF		 1168 } else {
1169 /* last byte, type, is 0x20 for servr type */
50c2f753 1170 memset(vol->target_rfc1001_name, 0x20, 16);
a10faeb2 1171
50c2f753 1172 for (i = 0; i < 15; i++) {
a10faeb2 1173 /* BB are there cases in which a comma can be
50c2f753
SF		 1174 valid in this workstation netbios name
1175 (and need special handling)? */
a10faeb2 1176
50c2f753
SF		 1177 /* user or mount helper must uppercase
1178 the netbiosname */
1179 if (value[i] == 0)
a10faeb2
SF		 1180 break;
1181 else
50c2f753
SF		 1182 vol->target_rfc1001_name[i] =
1183 value[i];
a10faeb2
SF		 1184 }
1185 /* The string has 16th byte zero still from
1186 set at top of the function */
50c2f753
SF		 1187 if ((i == 15) && (value[i] != 0))
1188 printk(KERN_WARNING "CIFS: server net"
1189 "biosname longer than 15 truncated.\n");
1da177e4
LT		 1190 }
1191 } else if (strnicmp(data, "credentials", 4) == 0) {
1192 /* ignore */
1193 } else if (strnicmp(data, "version", 3) == 0) {
1194 /* ignore */
50c2f753 1195 } else if (strnicmp(data, "guest", 5) == 0) {
1da177e4
LT		 1196 /* ignore */
1197 } else if (strnicmp(data, "rw", 2) == 0) {
4b18f2a9 1198 vol->rw = true;
edf1ae40
SF		 1199 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1200 vol->noblocksnd = 1;
1201 } else if (strnicmp(data, "noautotune", 10) == 0) {
1202 vol->noautotune = 1;
1da177e4
LT		 1203 } else if ((strnicmp(data, "suid", 4) == 0) ||
1204 (strnicmp(data, "nosuid", 6) == 0) ||
1205 (strnicmp(data, "exec", 4) == 0) ||
1206 (strnicmp(data, "noexec", 6) == 0) ||
1207 (strnicmp(data, "nodev", 5) == 0) ||
1208 (strnicmp(data, "noauto", 6) == 0) ||
1209 (strnicmp(data, "dev", 3) == 0)) {
1210 /* The mount tool or mount.cifs helper (if present)
50c2f753
SF		 1211 uses these opts to set flags, and the flags are read
1212 by the kernel vfs layer before we get here (ie
1213 before read super) so there is no point trying to
1214 parse these options again and set anything and it
1215 is ok to just ignore them */
1da177e4
LT		 1216 continue;
1217 } else if (strnicmp(data, "ro", 2) == 0) {
4b18f2a9 1218 vol->rw = false;
1da177e4
LT		 1219 } else if (strnicmp(data, "hard", 4) == 0) {
1220 vol->retry = 1;
1221 } else if (strnicmp(data, "soft", 4) == 0) {
1222 vol->retry = 0;
1223 } else if (strnicmp(data, "perm", 4) == 0) {
1224 vol->noperm = 0;
1225 } else if (strnicmp(data, "noperm", 6) == 0) {
1226 vol->noperm = 1;
6a0b4824
SF		 1227 } else if (strnicmp(data, "mapchars", 8) == 0) {
1228 vol->remap = 1;
1229 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1230 vol->remap = 0;
50c2f753
SF		 1231 } else if (strnicmp(data, "sfu", 3) == 0) {
1232 vol->sfu_emul = 1;
1233 } else if (strnicmp(data, "nosfu", 5) == 0) {
1234 vol->sfu_emul = 0;
2c1b8615
SF		 1235 } else if (strnicmp(data, "nodfs", 5) == 0) {
1236 vol->nodfs = 1;
ac67055e
JA		 1237 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1238 vol->posix_paths = 1;
1239 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1240 vol->posix_paths = 0;
c18c842b
SF		 1241 } else if (strnicmp(data, "nounix", 6) == 0) {
1242 vol->no_linux_ext = 1;
1243 } else if (strnicmp(data, "nolinux", 7) == 0) {
1244 vol->no_linux_ext = 1;
50c2f753 1245 } else if ((strnicmp(data, "nocase", 6) == 0) ||
a10faeb2 1246 (strnicmp(data, "ignorecase", 10) == 0)) {
50c2f753 1247 vol->nocase = 1;
c46fa8ac
SF		 1248 } else if (strnicmp(data, "brl", 3) == 0) {
1249 vol->nobrl = 0;
50c2f753 1250 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1c955187 1251 (strnicmp(data, "nolock", 6) == 0)) {
c46fa8ac 1252 vol->nobrl = 1;
d3485d37
SF		 1253 /* turn off mandatory locking in mode
1254 if remote locking is turned off since the
1255 local vfs will do advisory */
50c2f753
SF		 1256 if (vol->file_mode ==
1257 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
d3485d37 1258 vol->file_mode = S_IALLUGO;
13a6e42a
SF		 1259 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1260 /* will take the shorter form "forcemand" as well */
1261 /* This mount option will force use of mandatory
1262 (DOS/Windows style) byte range locks, instead of
1263 using posix advisory byte range locks, even if the
1264 Unix extensions are available and posix locks would
1265 be supported otherwise. If Unix extensions are not
1266 negotiated this has no effect since mandatory locks
1267 would be used (mandatory locks is all that those
1268 those servers support) */
1269 vol->mand_lock = 1;
1da177e4
LT		 1270 } else if (strnicmp(data, "setuids", 7) == 0) {
1271 vol->setuids = 1;
1272 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1273 vol->setuids = 0;
d0a9c078
JL		 1274 } else if (strnicmp(data, "dynperm", 7) == 0) {
1275 vol->dynperm = true;
1276 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1277 vol->dynperm = false;
1da177e4
LT		 1278 } else if (strnicmp(data, "nohard", 6) == 0) {
1279 vol->retry = 0;
1280 } else if (strnicmp(data, "nosoft", 6) == 0) {
1281 vol->retry = 1;
1282 } else if (strnicmp(data, "nointr", 6) == 0) {
1283 vol->intr = 0;
1284 } else if (strnicmp(data, "intr", 4) == 0) {
1285 vol->intr = 1;
be652445
SF		 1286 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1287 vol->nostrictsync = 1;
1288 } else if (strnicmp(data, "strictsync", 10) == 0) {
1289 vol->nostrictsync = 0;
50c2f753 1290 } else if (strnicmp(data, "serverino", 7) == 0) {
1da177e4 1291 vol->server_ino = 1;
50c2f753 1292 } else if (strnicmp(data, "noserverino", 9) == 0) {
1da177e4 1293 vol->server_ino = 0;
50c2f753 1294 } else if (strnicmp(data, "cifsacl", 7) == 0) {
0a4b92c0
SF		 1295 vol->cifs_acl = 1;
1296 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1297 vol->cifs_acl = 0;
50c2f753 1298 } else if (strnicmp(data, "acl", 3) == 0) {
1da177e4 1299 vol->no_psx_acl = 0;
50c2f753 1300 } else if (strnicmp(data, "noacl", 5) == 0) {
1da177e4 1301 vol->no_psx_acl = 1;
84210e91
SF		 1302#ifdef CONFIG_CIFS_EXPERIMENTAL
1303 } else if (strnicmp(data, "locallease", 6) == 0) {
1304 vol->local_lease = 1;
1305#endif
50c2f753 1306 } else if (strnicmp(data, "sign", 4) == 0) {
750d1151 1307 vol->secFlg |= CIFSSEC_MUST_SIGN;
95b1cb90
SF		 1308 } else if (strnicmp(data, "seal", 4) == 0) {
1309 /* we do not do the following in secFlags because seal
1310 is a per tree connection (mount) not a per socket
1311 or per-smb connection option in the protocol */
1312 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1313 vol->seal = 1;
50c2f753 1314 } else if (strnicmp(data, "direct", 6) == 0) {
1da177e4 1315 vol->direct_io = 1;
50c2f753 1316 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1da177e4 1317 vol->direct_io = 1;
50c2f753 1318 } else if (strnicmp(data, "in6_addr", 8) == 0) {
1da177e4
LT		 1319 if (!value || !*value) {
1320 vol->in6_addr = NULL;
1321 } else if (strnlen(value, 49) == 48) {
1322 vol->in6_addr = value;
1323 } else {
50c2f753
SF		 1324 printk(KERN_WARNING "CIFS: ip v6 address not "
1325 "48 characters long\n");
1da177e4
LT		 1326 return 1;
1327 }
1328 } else if (strnicmp(data, "noac", 4) == 0) {
50c2f753
SF		 1329 printk(KERN_WARNING "CIFS: Mount option noac not "
1330 "supported. Instead set "
1331 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1da177e4 1332 } else
50c2f753
SF		 1333 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1334 data);
1da177e4
LT		 1335 }
1336 if (vol->UNC == NULL) {
4523cc30 1337 if (devname == NULL) {
50c2f753
SF		 1338 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1339 "target\n");
1da177e4
LT		 1340 return 1;
1341 }
1342 if ((temp_len = strnlen(devname, 300)) < 300) {
50c2f753 1343 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
4523cc30 1344 if (vol->UNC == NULL)
1da177e4 1345 return 1;
50c2f753 1346 strcpy(vol->UNC, devname);
1da177e4
LT		 1347 if (strncmp(vol->UNC, "//", 2) == 0) {
1348 vol->UNC[0] = '\\';
1349 vol->UNC[1] = '\\';
1350 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
50c2f753
SF		 1351 printk(KERN_WARNING "CIFS: UNC Path does not "
1352 "begin with // or \\\\ \n");
1da177e4
LT		 1353 return 1;
1354 }
7c5e628f
IM		 1355 value = strpbrk(vol->UNC+2, "/\\");
1356 if (value)
1357 *value = '\\';
1da177e4
LT		 1358 } else {
1359 printk(KERN_WARNING "CIFS: UNC name too long\n");
1360 return 1;
1361 }
1362 }
fb8c4b14 1363 if (vol->UNCip == NULL)
1da177e4
LT		 1364 vol->UNCip = &vol->UNC[2];
1365
1366 return 0;
1367}
1368
e7ddee90 1369static struct TCP_Server_Info *
a9ac49d3 1370cifs_find_tcp_session(struct sockaddr_storage *addr)
1da177e4
LT		 1371{
1372 struct list_head *tmp;
e7ddee90
JL		 1373 struct TCP_Server_Info *server;
1374 struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
1375 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
1376
1377 write_lock(&cifs_tcp_ses_lock);
1378 list_for_each(tmp, &cifs_tcp_ses_list) {
1379 server = list_entry(tmp, struct TCP_Server_Info,
1380 tcp_ses_list);
e7ddee90
JL		 1381 /*
1382 * the demux thread can exit on its own while still in CifsNew
1383 * so don't accept any sockets in that state. Since the
1384 * tcpStatus never changes back to CifsNew it's safe to check
1385 * for this without a lock.
1386 */
1387 if (server->tcpStatus == CifsNew)
1b20d672 1388 continue;
1da177e4 1389
a9ac49d3 1390 if (addr->ss_family == AF_INET &&
e7ddee90
JL		 1391 (addr4->sin_addr.s_addr !=
1392 server->addr.sockAddr.sin_addr.s_addr))
1393 continue;
a9ac49d3 1394 else if (addr->ss_family == AF_INET6 &&
0e2bedaa
SF		 1395 !ipv6_addr_equal(&server->addr.sockAddr6.sin6_addr,
1396 &addr6->sin6_addr))
1b20d672
CG		 1397 continue;
1398
e7ddee90
JL		 1399 ++server->srv_count;
1400 write_unlock(&cifs_tcp_ses_lock);
d82c2df5 1401 cFYI(1, ("Existing tcp session with server found"));
e7ddee90 1402 return server;
1da177e4 1403 }
e7ddee90 1404 write_unlock(&cifs_tcp_ses_lock);
1da177e4
LT		 1405 return NULL;
1406}
1b20d672 1407
14fbf50d 1408static void
e7ddee90 1409cifs_put_tcp_session(struct TCP_Server_Info *server)
1da177e4 1410{
e7ddee90 1411 struct task_struct *task;
1b20d672 1412
e7ddee90
JL		 1413 write_lock(&cifs_tcp_ses_lock);
1414 if (--server->srv_count > 0) {
1415 write_unlock(&cifs_tcp_ses_lock);
1416 return;
1da177e4 1417 }
1b20d672 1418
e7ddee90
JL		 1419 list_del_init(&server->tcp_ses_list);
1420 write_unlock(&cifs_tcp_ses_lock);
dea570e0 1421
e7ddee90
JL		 1422 spin_lock(&GlobalMid_Lock);
1423 server->tcpStatus = CifsExiting;
1424 spin_unlock(&GlobalMid_Lock);
dea570e0 1425
e7ddee90
JL		 1426 task = xchg(&server->tsk, NULL);
1427 if (task)
1428 force_sig(SIGKILL, task);
1da177e4
LT		 1429}
1430
63c038c2
JL		 1431static struct TCP_Server_Info *
1432cifs_get_tcp_session(struct smb_vol *volume_info)
1433{
1434 struct TCP_Server_Info *tcp_ses = NULL;
a9ac49d3 1435 struct sockaddr_storage addr;
63c038c2
JL		 1436 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1437 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1438 int rc;
1439
a9ac49d3 1440 memset(&addr, 0, sizeof(struct sockaddr_storage));
63c038c2
JL		 1441
1442 if (volume_info->UNCip && volume_info->UNC) {
1443 rc = cifs_inet_pton(AF_INET, volume_info->UNCip,
1444 &sin_server->sin_addr.s_addr);
1445
1446 if (rc <= 0) {
1447 /* not ipv4 address, try ipv6 */
1448 rc = cifs_inet_pton(AF_INET6, volume_info->UNCip,
1449 &sin_server6->sin6_addr.in6_u);
1450 if (rc > 0)
a9ac49d3 1451 addr.ss_family = AF_INET6;
63c038c2 1452 } else {
a9ac49d3 1453 addr.ss_family = AF_INET;
63c038c2
JL		 1454 }
1455
1456 if (rc <= 0) {
1457 /* we failed translating address */
1458 rc = -EINVAL;
1459 goto out_err;
1460 }
1461
1462 cFYI(1, ("UNC: %s ip: %s", volume_info->UNC,
1463 volume_info->UNCip));
1464 } else if (volume_info->UNCip) {
1465 /* BB using ip addr as tcp_ses name to connect to the
1466 DFS root below */
1467 cERROR(1, ("Connecting to DFS root not implemented yet"));
1468 rc = -EINVAL;
1469 goto out_err;
1470 } else /* which tcp_sess DFS root would we conect to */ {
1471 cERROR(1,
1472 ("CIFS mount error: No UNC path (e.g. -o "
1473 "unc=//192.168.1.100/public) specified"));
1474 rc = -EINVAL;
1475 goto out_err;
1476 }
1477
1478 /* see if we already have a matching tcp_ses */
1479 tcp_ses = cifs_find_tcp_session(&addr);
1480 if (tcp_ses)
1481 return tcp_ses;
1482
1483 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1484 if (!tcp_ses) {
1485 rc = -ENOMEM;
1486 goto out_err;
1487 }
1488
1489 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1490 if (IS_ERR(tcp_ses->hostname)) {
1491 rc = PTR_ERR(tcp_ses->hostname);
1492 goto out_err;
1493 }
1494
1495 tcp_ses->noblocksnd = volume_info->noblocksnd;
1496 tcp_ses->noautotune = volume_info->noautotune;
1497 atomic_set(&tcp_ses->inFlight, 0);
1498 init_waitqueue_head(&tcp_ses->response_q);
1499 init_waitqueue_head(&tcp_ses->request_q);
1500 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1501 mutex_init(&tcp_ses->srv_mutex);
1502 memcpy(tcp_ses->workstation_RFC1001_name,
1503 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1504 memcpy(tcp_ses->server_RFC1001_name,
1505 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1506 tcp_ses->sequence_number = 0;
1507 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1508 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1509
1510 /*
1511 * at this point we are the only ones with the pointer
1512 * to the struct since the kernel thread not created yet
1513 * no need to spinlock this init of tcpStatus or srv_count
1514 */
1515 tcp_ses->tcpStatus = CifsNew;
1516 ++tcp_ses->srv_count;
1517
a9ac49d3 1518 if (addr.ss_family == AF_INET6) {
63c038c2
JL		 1519 cFYI(1, ("attempting ipv6 connect"));
1520 /* BB should we allow ipv6 on port 139? */
1521 /* other OS never observed in Wild doing 139 with v6 */
1522 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1523 sizeof(struct sockaddr_in6));
1524 sin_server6->sin6_port = htons(volume_info->port);
d5c5605c 1525 rc = ipv6_connect(tcp_ses);
63c038c2
JL		 1526 } else {
1527 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1528 sizeof(struct sockaddr_in));
1529 sin_server->sin_port = htons(volume_info->port);
bcf4b106 1530 rc = ipv4_connect(tcp_ses);
63c038c2
JL		 1531 }
1532 if (rc < 0) {
1533 cERROR(1, ("Error connecting to socket. Aborting operation"));
1534 goto out_err;
1535 }
1536
1537 /*
1538 * since we're in a cifs function already, we know that
1539 * this will succeed. No need for try_module_get().
1540 */
1541 __module_get(THIS_MODULE);
1542 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1543 tcp_ses, "cifsd");
1544 if (IS_ERR(tcp_ses->tsk)) {
1545 rc = PTR_ERR(tcp_ses->tsk);
1546 cERROR(1, ("error %d create cifsd thread", rc));
1547 module_put(THIS_MODULE);
1548 goto out_err;
1549 }
1550
1551 /* thread spawned, put it on the list */
1552 write_lock(&cifs_tcp_ses_lock);
1553 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1554 write_unlock(&cifs_tcp_ses_lock);
1555
1556 return tcp_ses;
1557
1558out_err:
1559 if (tcp_ses) {
1560 kfree(tcp_ses->hostname);
1561 if (tcp_ses->ssocket)
1562 sock_release(tcp_ses->ssocket);
1563 kfree(tcp_ses);
1564 }
1565 return ERR_PTR(rc);
1566}
1567
14fbf50d
JL		 1568static struct cifsSesInfo *
1569cifs_find_smb_ses(struct TCP_Server_Info *server, char *username)
1da177e4
LT		 1570{
1571 struct list_head *tmp;
14fbf50d 1572 struct cifsSesInfo *ses;
dea570e0 1573
14fbf50d
JL		 1574 write_lock(&cifs_tcp_ses_lock);
1575 list_for_each(tmp, &server->smb_ses_list) {
1576 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
1577 if (strncmp(ses->userName, username, MAX_USERNAME_SIZE))
dea570e0
SF		 1578 continue;
1579
14fbf50d
JL		 1580 ++ses->ses_count;
1581 write_unlock(&cifs_tcp_ses_lock);
1582 return ses;
1583 }
1584 write_unlock(&cifs_tcp_ses_lock);
1585 return NULL;
1586}
dea570e0 1587
14fbf50d
JL		 1588static void
1589cifs_put_smb_ses(struct cifsSesInfo *ses)
1590{
1591 int xid;
1592 struct TCP_Server_Info *server = ses->server;
dea570e0 1593
14fbf50d
JL		 1594 write_lock(&cifs_tcp_ses_lock);
1595 if (--ses->ses_count > 0) {
1596 write_unlock(&cifs_tcp_ses_lock);
1597 return;
1598 }
dea570e0 1599
14fbf50d
JL		 1600 list_del_init(&ses->smb_ses_list);
1601 write_unlock(&cifs_tcp_ses_lock);
dea570e0 1602
14fbf50d
JL		 1603 if (ses->status == CifsGood) {
1604 xid = GetXid();
1605 CIFSSMBLogoff(xid, ses);
1606 _FreeXid(xid);
1607 }
1608 sesInfoFree(ses);
1609 cifs_put_tcp_session(server);
1610}
dea570e0 1611
f1987b44
JL		 1612static struct cifsTconInfo *
1613cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1614{
1615 struct list_head *tmp;
1616 struct cifsTconInfo *tcon;
1617
1618 write_lock(&cifs_tcp_ses_lock);
1619 list_for_each(tmp, &ses->tcon_list) {
1620 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1621 if (tcon->tidStatus == CifsExiting)
1622 continue;
1623 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
dea570e0
SF		 1624 continue;
1625
f1987b44
JL		 1626 ++tcon->tc_count;
1627 write_unlock(&cifs_tcp_ses_lock);
dea570e0 1628 return tcon;
1da177e4 1629 }
f1987b44 1630 write_unlock(&cifs_tcp_ses_lock);
1da177e4
LT		 1631 return NULL;
1632}
1633
f1987b44
JL		 1634static void
1635cifs_put_tcon(struct cifsTconInfo *tcon)
1636{
1637 int xid;
1638 struct cifsSesInfo *ses = tcon->ses;
1639
1640 write_lock(&cifs_tcp_ses_lock);
1641 if (--tcon->tc_count > 0) {
1642 write_unlock(&cifs_tcp_ses_lock);
1643 return;
1644 }
1645
1646 list_del_init(&tcon->tcon_list);
1647 write_unlock(&cifs_tcp_ses_lock);
1648
1649 xid = GetXid();
1650 CIFSSMBTDis(xid, tcon);
1651 _FreeXid(xid);
1652
1653 DeleteTconOplockQEntries(tcon);
1654 tconInfoFree(tcon);
1655 cifs_put_smb_ses(ses);
1656}
1657
1da177e4 1658int
50c2f753
SF		 1659get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
1660 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
366781c1 1661 struct dfs_info3_param **preferrals, int remap)
1da177e4
LT		 1662{
1663 char *temp_unc;
1664 int rc = 0;
1665
1666 *pnum_referrals = 0;
366781c1 1667 *preferrals = NULL;
1da177e4
LT		 1668
1669 if (pSesInfo->ipc_tid == 0) {
1670 temp_unc = kmalloc(2 /* for slashes */ +
50c2f753
SF		 1671 strnlen(pSesInfo->serverName,
1672 SERVER_NAME_LEN_WITH_NULL * 2)
1da177e4
LT		 1673 + 1 + 4 /* slash IPC$ */ + 2,
1674 GFP_KERNEL);
1675 if (temp_unc == NULL)
1676 return -ENOMEM;
1677 temp_unc[0] = '\\';
1678 temp_unc[1] = '\\';
1679 strcpy(temp_unc + 2, pSesInfo->serverName);
1680 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
1681 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1682 cFYI(1,
50c2f753 1683 ("CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid));
1da177e4
LT		 1684 kfree(temp_unc);
1685 }
1686 if (rc == 0)
c2cf07d5 1687 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
737b758c 1688 pnum_referrals, nls_codepage, remap);
366781c1
SF		 1689 /* BB map targetUNCs to dfs_info3 structures, here or
1690 in CIFSGetDFSRefer BB */
1da177e4
LT		 1691
1692 return rc;
1693}
1694
09e50d55
JL		 1695#ifdef CONFIG_DEBUG_LOCK_ALLOC
1696static struct lock_class_key cifs_key[2];
1697static struct lock_class_key cifs_slock_key[2];
1698
1699static inline void
1700cifs_reclassify_socket4(struct socket *sock)
1701{
1702 struct sock *sk = sock->sk;
1703 BUG_ON(sock_owned_by_user(sk));
1704 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
1705 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
1706}
1707
1708static inline void
1709cifs_reclassify_socket6(struct socket *sock)
1710{
1711 struct sock *sk = sock->sk;
1712 BUG_ON(sock_owned_by_user(sk));
1713 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
1714 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
1715}
1716#else
1717static inline void
1718cifs_reclassify_socket4(struct socket *sock)
1719{
1720}
1721
1722static inline void
1723cifs_reclassify_socket6(struct socket *sock)
1724{
1725}
1726#endif
1727
1da177e4 1728/* See RFC1001 section 14 on representation of Netbios names */
50c2f753 1729static void rfc1002mangle(char *target, char *source, unsigned int length)
1da177e4 1730{
50c2f753 1731 unsigned int i, j;
1da177e4 1732
50c2f753 1733 for (i = 0, j = 0; i < (length); i++) {
1da177e4
LT		 1734 /* mask a nibble at a time and encode */
1735 target[j] = 'A' + (0x0F & (source[i] >> 4));
1736 target[j+1] = 'A' + (0x0F & source[i]);
50c2f753 1737 j += 2;
1da177e4
LT		 1738 }
1739
1740}
1741
1742
1743static int
bcf4b106 1744ipv4_connect(struct TCP_Server_Info *server)
1da177e4
LT		 1745{
1746 int rc = 0;
bcf4b106 1747 bool connected = false;
1da177e4 1748 __be16 orig_port = 0;
bcf4b106 1749 struct socket *socket = server->ssocket;
1da177e4 1750
bcf4b106 1751 if (socket == NULL) {
50c2f753 1752 rc = sock_create_kern(PF_INET, SOCK_STREAM,
bcf4b106 1753 IPPROTO_TCP, &socket);
1da177e4 1754 if (rc < 0) {
50c2f753 1755 cERROR(1, ("Error %d creating socket", rc));
1da177e4 1756 return rc;
1da177e4 1757 }
bcf4b106
JL		 1758
1759 /* BB other socket options to set KEEPALIVE, NODELAY? */
1760 cFYI(1, ("Socket created"));
1761 server->ssocket = socket;
1762 socket->sk->sk_allocation = GFP_NOFS;
1763 cifs_reclassify_socket4(socket);
1da177e4
LT		 1764 }
1765
bcf4b106
JL		 1766 /* user overrode default port */
1767 if (server->addr.sockAddr.sin_port) {
1768 rc = socket->ops->connect(socket, (struct sockaddr *)
1769 &server->addr.sockAddr,
1770 sizeof(struct sockaddr_in), 0);
1da177e4 1771 if (rc >= 0)
bcf4b106 1772 connected = true;
50c2f753 1773 }
1da177e4 1774
fb8c4b14 1775 if (!connected) {
50c2f753 1776 /* save original port so we can retry user specified port
1da177e4 1777 later if fall back ports fail this time */
bcf4b106 1778 orig_port = server->addr.sockAddr.sin_port;
1da177e4
LT		 1779
1780 /* do not retry on the same port we just failed on */
bcf4b106
JL		 1781 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
1782 server->addr.sockAddr.sin_port = htons(CIFS_PORT);
1783 rc = socket->ops->connect(socket,
1784 (struct sockaddr *)
1785 &server->addr.sockAddr,
1786 sizeof(struct sockaddr_in), 0);
1da177e4 1787 if (rc >= 0)
bcf4b106 1788 connected = true;
1da177e4
LT		 1789 }
1790 }
1791 if (!connected) {
bcf4b106
JL		 1792 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
1793 rc = socket->ops->connect(socket, (struct sockaddr *)
1794 &server->addr.sockAddr,
6345a3a8 1795 sizeof(struct sockaddr_in), 0);
50c2f753 1796 if (rc >= 0)
bcf4b106 1797 connected = true;
1da177e4
LT		 1798 }
1799
1800 /* give up here - unless we want to retry on different
1801 protocol families some day */
1802 if (!connected) {
fb8c4b14 1803 if (orig_port)
bcf4b106 1804 server->addr.sockAddr.sin_port = orig_port;
50c2f753 1805 cFYI(1, ("Error %d connecting to server via ipv4", rc));
bcf4b106
JL		 1806 sock_release(socket);
1807 server->ssocket = NULL;
1da177e4
LT		 1808 return rc;
1809 }
bcf4b106
JL		 1810
1811
1812 /*
1813 * Eventually check for other socket options to change from
1814 * the default. sock_setsockopt not used because it expects
1815 * user space buffer
1816 */
1817 socket->sk->sk_rcvtimeo = 7 * HZ;
da505c38 1818 socket->sk->sk_sndtimeo = 5 * HZ;
edf1ae40 1819
b387eaeb 1820 /* make the bufsizes depend on wsize/rsize and max requests */
bcf4b106
JL		 1821 if (server->noautotune) {
1822 if (socket->sk->sk_sndbuf < (200 * 1024))
1823 socket->sk->sk_sndbuf = 200 * 1024;
1824 if (socket->sk->sk_rcvbuf < (140 * 1024))
1825 socket->sk->sk_rcvbuf = 140 * 1024;
edf1ae40 1826 }
1da177e4 1827
bcf4b106
JL		 1828 cFYI(1, ("sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
1829 socket->sk->sk_sndbuf,
1830 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo));
1831
1da177e4 1832 /* send RFC1001 sessinit */
bcf4b106 1833 if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
1da177e4 1834 /* some servers require RFC1001 sessinit before sending
50c2f753 1835 negprot - BB check reconnection in case where second
1da177e4 1836 sessinit is sent but no second negprot */
50c2f753
SF		 1837 struct rfc1002_session_packet *ses_init_buf;
1838 struct smb_hdr *smb_buf;
1839 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
1840 GFP_KERNEL);
fb8c4b14 1841 if (ses_init_buf) {
1da177e4 1842 ses_init_buf->trailer.session_req.called_len = 32;
bcf4b106
JL		 1843 if (server->server_RFC1001_name &&
1844 server->server_RFC1001_name[0] != 0)
8ecaf67a
JL		 1845 rfc1002mangle(ses_init_buf->trailer.
1846 session_req.called_name,
bcf4b106 1847 server->server_RFC1001_name,
8ecaf67a 1848 RFC1001_NAME_LEN_WITH_NULL);
bcf4b106 1849 else
8ecaf67a
JL		 1850 rfc1002mangle(ses_init_buf->trailer.
1851 session_req.called_name,
1852 DEFAULT_CIFS_CALLED_NAME,
1853 RFC1001_NAME_LEN_WITH_NULL);
a10faeb2 1854
1da177e4 1855 ses_init_buf->trailer.session_req.calling_len = 32;
bcf4b106 1856
1da177e4
LT		 1857 /* calling name ends in null (byte 16) from old smb
1858 convention. */
bcf4b106
JL		 1859 if (server->workstation_RFC1001_name &&
1860 server->workstation_RFC1001_name[0] != 0)
8ecaf67a
JL		 1861 rfc1002mangle(ses_init_buf->trailer.
1862 session_req.calling_name,
bcf4b106 1863 server->workstation_RFC1001_name,
8ecaf67a 1864 RFC1001_NAME_LEN_WITH_NULL);
bcf4b106 1865 else
8ecaf67a
JL		 1866 rfc1002mangle(ses_init_buf->trailer.
1867 session_req.calling_name,
1868 "LINUX_CIFS_CLNT",
1869 RFC1001_NAME_LEN_WITH_NULL);
bcf4b106 1870
1da177e4
LT		 1871 ses_init_buf->trailer.session_req.scope1 = 0;
1872 ses_init_buf->trailer.session_req.scope2 = 0;
1873 smb_buf = (struct smb_hdr *)ses_init_buf;
1874 /* sizeof RFC1002_SESSION_REQUEST with no scope */
1875 smb_buf->smb_buf_length = 0x81000044;
0496e02d 1876 rc = smb_send(server, smb_buf, 0x44);
1da177e4 1877 kfree(ses_init_buf);
50c2f753 1878 msleep(1); /* RFC1001 layer in at least one server
083d3a2c
SF		 1879 requires very short break before negprot
1880 presumably because not expecting negprot
1881 to follow so fast. This is a simple
50c2f753 1882 solution that works without
083d3a2c
SF		 1883 complicating the code and causes no
1884 significant slowing down on mount
1885 for everyone else */
1da177e4 1886 }
50c2f753 1887 /* else the negprot may still work without this
1da177e4 1888 even though malloc failed */
50c2f753 1889
1da177e4 1890 }
50c2f753 1891
1da177e4
LT		 1892 return rc;
1893}
1894
1895static int
d5c5605c 1896ipv6_connect(struct TCP_Server_Info *server)
1da177e4
LT		 1897{
1898 int rc = 0;
d5c5605c 1899 bool connected = false;
1da177e4 1900 __be16 orig_port = 0;
d5c5605c 1901 struct socket *socket = server->ssocket;
1da177e4 1902
d5c5605c 1903 if (socket == NULL) {
50c2f753 1904 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
d5c5605c 1905 IPPROTO_TCP, &socket);
1da177e4 1906 if (rc < 0) {
50c2f753 1907 cERROR(1, ("Error %d creating ipv6 socket", rc));
d5c5605c 1908 socket = NULL;
1da177e4 1909 return rc;
1da177e4 1910 }
1da177e4 1911
d5c5605c
JL		 1912 /* BB other socket options to set KEEPALIVE, NODELAY? */
1913 cFYI(1, ("ipv6 Socket created"));
1914 server->ssocket = socket;
1915 socket->sk->sk_allocation = GFP_NOFS;
1916 cifs_reclassify_socket6(socket);
1917 }
1da177e4 1918
d5c5605c
JL		 1919 /* user overrode default port */
1920 if (server->addr.sockAddr6.sin6_port) {
1921 rc = socket->ops->connect(socket,
1922 (struct sockaddr *) &server->addr.sockAddr6,
6345a3a8 1923 sizeof(struct sockaddr_in6), 0);
1da177e4 1924 if (rc >= 0)
d5c5605c 1925 connected = true;
50c2f753 1926 }
1da177e4 1927
fb8c4b14 1928 if (!connected) {
50c2f753 1929 /* save original port so we can retry user specified port
1da177e4
LT		 1930 later if fall back ports fail this time */
1931
d5c5605c 1932 orig_port = server->addr.sockAddr6.sin6_port;
1da177e4 1933 /* do not retry on the same port we just failed on */
d5c5605c
JL		 1934 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
1935 server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
1936 rc = socket->ops->connect(socket, (struct sockaddr *)
1937 &server->addr.sockAddr6,
6345a3a8 1938 sizeof(struct sockaddr_in6), 0);
1da177e4 1939 if (rc >= 0)
d5c5605c 1940 connected = true;
1da177e4
LT		 1941 }
1942 }
1943 if (!connected) {
d5c5605c
JL		 1944 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
1945 rc = socket->ops->connect(socket, (struct sockaddr *)
1946 &server->addr.sockAddr6,
1947 sizeof(struct sockaddr_in6), 0);
50c2f753 1948 if (rc >= 0)
d5c5605c 1949 connected = true;
1da177e4
LT		 1950 }
1951
1952 /* give up here - unless we want to retry on different
1953 protocol families some day */
1954 if (!connected) {
fb8c4b14 1955 if (orig_port)
d5c5605c 1956 server->addr.sockAddr6.sin6_port = orig_port;
50c2f753 1957 cFYI(1, ("Error %d connecting to server via ipv6", rc));
d5c5605c
JL		 1958 sock_release(socket);
1959 server->ssocket = NULL;
1da177e4
LT		 1960 return rc;
1961 }
edf1ae40 1962
d5c5605c
JL		 1963 /*
1964 * Eventually check for other socket options to change from
1965 * the default. sock_setsockopt not used because it expects
1966 * user space buffer
1967 */
1968 socket->sk->sk_rcvtimeo = 7 * HZ;
da505c38 1969 socket->sk->sk_sndtimeo = 5 * HZ;
d5c5605c 1970 server->ssocket = socket;
50c2f753 1971
1da177e4
LT		 1972 return rc;
1973}
1974
50c2f753
SF		 1975void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
1976 struct super_block *sb, struct smb_vol *vol_info)
8af18971
SF		 1977{
1978 /* if we are reconnecting then should we check to see if
1979 * any requested capabilities changed locally e.g. via
1980 * remount but we can not do much about it here
1981 * if they have (even if we could detect it by the following)
1982 * Perhaps we could add a backpointer to array of sb from tcon
1983 * or if we change to make all sb to same share the same
1984 * sb as NFS - then we only have one backpointer to sb.
1985 * What if we wanted to mount the server share twice once with
1986 * and once without posixacls or posix paths? */
1987 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
50c2f753 1988
c18c842b
SF		 1989 if (vol_info && vol_info->no_linux_ext) {
1990 tcon->fsUnixInfo.Capability = 0;
1991 tcon->unix_ext = 0; /* Unix Extensions disabled */
1992 cFYI(1, ("Linux protocol extensions disabled"));
1993 return;
1994 } else if (vol_info)
1995 tcon->unix_ext = 1; /* Unix Extensions supported */
1996
1997 if (tcon->unix_ext == 0) {
1998 cFYI(1, ("Unix extensions disabled so not set on reconnect"));
1999 return;
2000 }
50c2f753 2001
fb8c4b14 2002 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
8af18971 2003 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
50c2f753 2004
8af18971
SF		 2005 /* check for reconnect case in which we do not
2006 want to change the mount behavior if we can avoid it */
fb8c4b14 2007 if (vol_info == NULL) {
50c2f753 2008 /* turn off POSIX ACL and PATHNAMES if not set
8af18971
SF		 2009 originally at mount time */
2010 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2011 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
11b6d645
IM		 2012 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2013 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2014 cERROR(1, ("POSIXPATH support change"));
8af18971 2015 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
11b6d645
IM		 2016 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2017 cERROR(1, ("possible reconnect error"));
2018 cERROR(1,
2019 ("server disabled POSIX path support"));
2020 }
8af18971 2021 }
50c2f753 2022
8af18971 2023 cap &= CIFS_UNIX_CAP_MASK;
75865f8c 2024 if (vol_info && vol_info->no_psx_acl)
8af18971 2025 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
75865f8c 2026 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
fb8c4b14
SF		 2027 cFYI(1, ("negotiated posix acl support"));
2028 if (sb)
8af18971
SF		 2029 sb->s_flags |= MS_POSIXACL;
2030 }
2031
75865f8c 2032 if (vol_info && vol_info->posix_paths == 0)
8af18971 2033 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
75865f8c 2034 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
fb8c4b14 2035 cFYI(1, ("negotiate posix pathnames"));
75865f8c 2036 if (sb)
50c2f753 2037 CIFS_SB(sb)->mnt_cifs_flags |=
8af18971
SF		 2038 CIFS_MOUNT_POSIX_PATHS;
2039 }
50c2f753 2040
984acfe1
SF		 2041 /* We might be setting the path sep back to a different
2042 form if we are reconnecting and the server switched its
50c2f753 2043 posix path capability for this share */
75865f8c 2044 if (sb && (CIFS_SB(sb)->prepathlen > 0))
984acfe1 2045 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
75865f8c
SF		 2046
2047 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2048 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2049 CIFS_SB(sb)->rsize = 127 * 1024;
90c81e0b
SF		 2050 cFYI(DBG2,
2051 ("larger reads not supported by srv"));
75865f8c
SF		 2052 }
2053 }
50c2f753
SF		 2054
2055
2056 cFYI(1, ("Negotiate caps 0x%x", (int)cap));
8af18971 2057#ifdef CONFIG_CIFS_DEBUG2
75865f8c 2058 if (cap & CIFS_UNIX_FCNTL_CAP)
fb8c4b14 2059 cFYI(1, ("FCNTL cap"));
75865f8c 2060 if (cap & CIFS_UNIX_EXTATTR_CAP)
fb8c4b14 2061 cFYI(1, ("EXTATTR cap"));
75865f8c 2062 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
fb8c4b14 2063 cFYI(1, ("POSIX path cap"));
75865f8c 2064 if (cap & CIFS_UNIX_XATTR_CAP)
fb8c4b14 2065 cFYI(1, ("XATTR cap"));
75865f8c 2066 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
fb8c4b14 2067 cFYI(1, ("POSIX ACL cap"));
75865f8c 2068 if (cap & CIFS_UNIX_LARGE_READ_CAP)
fb8c4b14 2069 cFYI(1, ("very large read cap"));
75865f8c 2070 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
fb8c4b14 2071 cFYI(1, ("very large write cap"));
8af18971
SF		 2072#endif /* CIFS_DEBUG2 */
2073 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
442aa310 2074 if (vol_info == NULL) {
5a44b319 2075 cFYI(1, ("resetting capabilities failed"));
442aa310 2076 } else
5a44b319
SF		 2077 cERROR(1, ("Negotiating Unix capabilities "
2078 "with the server failed. Consider "
2079 "mounting with the Unix Extensions\n"
2080 "disabled, if problems are found, "
2081 "by specifying the nounix mount "
2224f4e5 2082 "option."));
5a44b319 2083
8af18971
SF		 2084 }
2085 }
2086}
2087
03a143c9
SF		 2088static void
2089convert_delimiter(char *path, char delim)
2090{
2091 int i;
c2d68ea6 2092 char old_delim;
03a143c9
SF		 2093
2094 if (path == NULL)
2095 return;
2096
582d21e5 2097 if (delim == '/')
c2d68ea6
SF		 2098 old_delim = '\\';
2099 else
2100 old_delim = '/';
2101
03a143c9 2102 for (i = 0; path[i] != '\0'; i++) {
c2d68ea6 2103 if (path[i] == old_delim)
03a143c9
SF		 2104 path[i] = delim;
2105 }
2106}
2107
3b795210
SF		 2108static void setup_cifs_sb(struct smb_vol *pvolume_info,
2109 struct cifs_sb_info *cifs_sb)
b1c8d2b4 2110{
3b795210
SF		 2111 if (pvolume_info->rsize > CIFSMaxBufSize) {
2112 cERROR(1, ("rsize %d too large, using MaxBufSize",
2113 pvolume_info->rsize));
2114 cifs_sb->rsize = CIFSMaxBufSize;
2115 } else if ((pvolume_info->rsize) &&
2116 (pvolume_info->rsize <= CIFSMaxBufSize))
2117 cifs_sb->rsize = pvolume_info->rsize;
2118 else /* default */
2119 cifs_sb->rsize = CIFSMaxBufSize;
2120
2121 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2122 cERROR(1, ("wsize %d too large, using 4096 instead",
2123 pvolume_info->wsize));
2124 cifs_sb->wsize = 4096;
2125 } else if (pvolume_info->wsize)
2126 cifs_sb->wsize = pvolume_info->wsize;
2127 else
2128 cifs_sb->wsize = min_t(const int,
2129 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2130 127*1024);
2131 /* old default of CIFSMaxBufSize was too small now
2132 that SMB Write2 can send multiple pages in kvec.
2133 RFC1001 does not describe what happens when frame
2134 bigger than 128K is sent so use that as max in
2135 conjunction with 52K kvec constraint on arch with 4K
2136 page size */
2137
2138 if (cifs_sb->rsize < 2048) {
2139 cifs_sb->rsize = 2048;
2140 /* Windows ME may prefer this */
2141 cFYI(1, ("readsize set to minimum: 2048"));
2142 }
2143 /* calculate prepath */
2144 cifs_sb->prepath = pvolume_info->prepath;
2145 if (cifs_sb->prepath) {
2146 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2147 /* we can not convert the / to \ in the path
2148 separators in the prefixpath yet because we do not
2149 know (until reset_cifs_unix_caps is called later)
2150 whether POSIX PATH CAP is available. We normalize
2151 the / to \ after reset_cifs_unix_caps is called */
2152 pvolume_info->prepath = NULL;
2153 } else
2154 cifs_sb->prepathlen = 0;
2155 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2156 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2157 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2158 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2159 cFYI(1, ("file mode: 0x%x dir mode: 0x%x",
2160 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode));
2161
2162 if (pvolume_info->noperm)
2163 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2164 if (pvolume_info->setuids)
2165 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2166 if (pvolume_info->server_ino)
2167 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2168 if (pvolume_info->remap)
2169 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2170 if (pvolume_info->no_xattr)
2171 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2172 if (pvolume_info->sfu_emul)
2173 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2174 if (pvolume_info->nobrl)
2175 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
be652445 2176 if (pvolume_info->nostrictsync)
4717bed6 2177 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
13a6e42a
SF		 2178 if (pvolume_info->mand_lock)
2179 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
3b795210
SF		 2180 if (pvolume_info->cifs_acl)
2181 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2182 if (pvolume_info->override_uid)
2183 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2184 if (pvolume_info->override_gid)
2185 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2186 if (pvolume_info->dynperm)
2187 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2188 if (pvolume_info->direct_io) {
2189 cFYI(1, ("mounting share using direct i/o"));
2190 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2191 }
2192
2193 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2194 cERROR(1, ("mount option dynperm ignored if cifsacl "
2195 "mount option supported"));
b1c8d2b4
JL		 2196}
2197
e4cce94c
IM		 2198static int
2199is_path_accessible(int xid, struct cifsTconInfo *tcon,
2200 struct cifs_sb_info *cifs_sb, const char *full_path)
2201{
2202 int rc;
2203 __u64 inode_num;
2204 FILE_ALL_INFO *pfile_info;
2205
2206 rc = CIFSGetSrvInodeNumber(xid, tcon, full_path, &inode_num,
2207 cifs_sb->local_nls,
2208 cifs_sb->mnt_cifs_flags &
2209 CIFS_MOUNT_MAP_SPECIAL_CHR);
2210 if (rc != -EOPNOTSUPP)
2211 return rc;
2212
2213 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2214 if (pfile_info == NULL)
2215 return -ENOMEM;
2216
2217 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2218 0 /* not legacy */, cifs_sb->local_nls,
2219 cifs_sb->mnt_cifs_flags &
2220 CIFS_MOUNT_MAP_SPECIAL_CHR);
2221 kfree(pfile_info);
2222 return rc;
2223}
2224
1bfe73c2
IM		 2225static void
2226cleanup_volume_info(struct smb_vol **pvolume_info)
2227{
2228 struct smb_vol *volume_info;
2229
2230 if (!pvolume_info && !*pvolume_info)
2231 return;
2232
2233 volume_info = *pvolume_info;
2234 kzfree(volume_info->password);
2235 kfree(volume_info->UNC);
2236 kfree(volume_info->prepath);
2237 kfree(volume_info);
2238 *pvolume_info = NULL;
2239 return;
2240}
2241
2d6d589d 2242#ifdef CONFIG_CIFS_DFS_UPCALL
1bfe73c2
IM		 2243/* build_path_to_root returns full path to root when
2244 * we do not have an exiting connection (tcon) */
2245static char *
2246build_unc_path_to_root(const struct smb_vol *volume_info,
2247 const struct cifs_sb_info *cifs_sb)
2248{
2249 char *full_path;
2250
2251 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2252 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2253 if (full_path == NULL)
2254 return ERR_PTR(-ENOMEM);
2255
2256 strncpy(full_path, volume_info->UNC, unc_len);
2257 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2258 int i;
2259 for (i = 0; i < unc_len; i++) {
2260 if (full_path[i] == '\\')
2261 full_path[i] = '/';
2262 }
2263 }
2264
2265 if (cifs_sb->prepathlen)
2266 strncpy(full_path + unc_len, cifs_sb->prepath,
2267 cifs_sb->prepathlen);
2268
2269 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2270 return full_path;
2271}
2d6d589d 2272#endif
1bfe73c2 2273
1da177e4
LT		 2274int
2275cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
1bfe73c2 2276 char *mount_data_global, const char *devname)
1da177e4
LT		 2277{
2278 int rc = 0;
2279 int xid;
7586b765 2280 struct smb_vol *volume_info;
1da177e4 2281 struct cifsSesInfo *pSesInfo = NULL;
1da177e4
LT		 2282 struct cifsTconInfo *tcon = NULL;
2283 struct TCP_Server_Info *srvTcp = NULL;
e4cce94c 2284 char *full_path;
2d6d589d
SF		 2285 char *mount_data = mount_data_global;
2286#ifdef CONFIG_CIFS_DFS_UPCALL
1bfe73c2
IM		 2287 struct dfs_info3_param *referrals = NULL;
2288 unsigned int num_referrals = 0;
5c2503a8 2289 int referral_walks_count = 0;
1bfe73c2 2290try_mount_again:
2d6d589d 2291#endif
1bfe73c2 2292 full_path = NULL;
1da177e4
LT		 2293
2294 xid = GetXid();
2295
7586b765
JL		 2296 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2297 if (!volume_info) {
2298 rc = -ENOMEM;
2299 goto out;
2300 }
50c2f753 2301
7586b765 2302 if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
70fe7dc0
JL		 2303 rc = -EINVAL;
2304 goto out;
1da177e4
LT		 2305 }
2306
7586b765 2307 if (volume_info->nullauth) {
fb8c4b14 2308 cFYI(1, ("null user"));
7586b765
JL		 2309 volume_info->username = "";
2310 } else if (volume_info->username) {
1da177e4 2311 /* BB fixme parse for domain name here */
7586b765 2312 cFYI(1, ("Username: %s", volume_info->username));
1da177e4 2313 } else {
bf820679 2314 cifserror("No username specified");
50c2f753
SF		 2315 /* In userspace mount helper we can get user name from alternate
2316 locations such as env variables and files on disk */
70fe7dc0
JL		 2317 rc = -EINVAL;
2318 goto out;
1da177e4
LT		 2319 }
2320
1da177e4
LT		 2321
2322 /* this is needed for ASCII cp to Unicode converts */
7586b765 2323 if (volume_info->iocharset == NULL) {
1da177e4
LT		 2324 cifs_sb->local_nls = load_nls_default();
2325 /* load_nls_default can not return null */
2326 } else {
7586b765 2327 cifs_sb->local_nls = load_nls(volume_info->iocharset);
fb8c4b14 2328 if (cifs_sb->local_nls == NULL) {
50c2f753 2329 cERROR(1, ("CIFS mount error: iocharset %s not found",
7586b765 2330 volume_info->iocharset));
70fe7dc0
JL		 2331 rc = -ELIBACC;
2332 goto out;
1da177e4
LT		 2333 }
2334 }
2335
63c038c2 2336 /* get a reference to a tcp session */
7586b765 2337 srvTcp = cifs_get_tcp_session(volume_info);
63c038c2
JL		 2338 if (IS_ERR(srvTcp)) {
2339 rc = PTR_ERR(srvTcp);
2340 goto out;
1da177e4
LT		 2341 }
2342
7586b765 2343 pSesInfo = cifs_find_smb_ses(srvTcp, volume_info->username);
14fbf50d 2344 if (pSesInfo) {
1d9a8852
JL		 2345 cFYI(1, ("Existing smb sess found (status=%d)",
2346 pSesInfo->status));
14fbf50d
JL		 2347 /*
2348 * The existing SMB session already has a reference to srvTcp,
2349 * so we can put back the extra one we got before
2350 */
2351 cifs_put_tcp_session(srvTcp);
2352
88e7d705 2353 down(&pSesInfo->sesSem);
3b795210 2354 if (pSesInfo->need_reconnect) {
1d9a8852 2355 cFYI(1, ("Session needs reconnect"));
1d9a8852
JL		 2356 rc = cifs_setup_session(xid, pSesInfo,
2357 cifs_sb->local_nls);
1d9a8852 2358 }
88e7d705 2359 up(&pSesInfo->sesSem);
1da177e4 2360 } else if (!rc) {
bf820679 2361 cFYI(1, ("Existing smb sess not found"));
1da177e4 2362 pSesInfo = sesInfoAlloc();
14fbf50d 2363 if (pSesInfo == NULL) {
1da177e4 2364 rc = -ENOMEM;
14fbf50d 2365 goto mount_fail_check;
1da177e4
LT		 2366 }
2367
14fbf50d
JL		 2368 /* new SMB session uses our srvTcp ref */
2369 pSesInfo->server = srvTcp;
63c038c2 2370 if (srvTcp->addr.sockAddr6.sin6_family == AF_INET6)
0191b625
LT		 2371 sprintf(pSesInfo->serverName, "%pI6",
2372 &srvTcp->addr.sockAddr6.sin6_addr);
8ecaf67a 2373 else
0191b625
LT		 2374 sprintf(pSesInfo->serverName, "%pI4",
2375 &srvTcp->addr.sockAddr.sin_addr.s_addr);
14fbf50d
JL		 2376
2377 write_lock(&cifs_tcp_ses_lock);
2378 list_add(&pSesInfo->smb_ses_list, &srvTcp->smb_ses_list);
2379 write_unlock(&cifs_tcp_ses_lock);
2380
7586b765
JL		 2381 /* volume_info->password freed at unmount */
2382 if (volume_info->password) {
00e485b0
JL		 2383 pSesInfo->password = kstrdup(volume_info->password,
2384 GFP_KERNEL);
2385 if (!pSesInfo->password) {
2386 rc = -ENOMEM;
2387 goto mount_fail_check;
2388 }
14fbf50d 2389 }
7586b765
JL		 2390 if (volume_info->username)
2391 strncpy(pSesInfo->userName, volume_info->username,
14fbf50d 2392 MAX_USERNAME_SIZE);
7586b765
JL		 2393 if (volume_info->domainname) {
2394 int len = strlen(volume_info->domainname);
14fbf50d
JL		 2395 pSesInfo->domainName = kmalloc(len + 1, GFP_KERNEL);
2396 if (pSesInfo->domainName)
2397 strcpy(pSesInfo->domainName,
7586b765 2398 volume_info->domainname);
70fe7dc0 2399 }
7586b765
JL		 2400 pSesInfo->linux_uid = volume_info->linux_uid;
2401 pSesInfo->overrideSecFlg = volume_info->secFlg;
14fbf50d 2402 down(&pSesInfo->sesSem);
1da177e4 2403
14fbf50d
JL		 2404 /* BB FIXME need to pass vol->secFlgs BB */
2405 rc = cifs_setup_session(xid, pSesInfo,
2406 cifs_sb->local_nls);
2407 up(&pSesInfo->sesSem);
1da177e4 2408 }
50c2f753 2409
1da177e4
LT		 2410 /* search for existing tcon to this server share */
2411 if (!rc) {
7586b765 2412 setup_cifs_sb(volume_info, cifs_sb);
1da177e4 2413
7586b765 2414 tcon = cifs_find_tcon(pSesInfo, volume_info->UNC);
1da177e4 2415 if (tcon) {
bf820679 2416 cFYI(1, ("Found match on UNC path"));
f1987b44
JL		 2417 /* existing tcon already has a reference */
2418 cifs_put_smb_ses(pSesInfo);
7586b765 2419 if (tcon->seal != volume_info->seal)
95b1cb90
SF		 2420 cERROR(1, ("transport encryption setting "
2421 "conflicts with existing tid"));
1da177e4
LT		 2422 } else {
2423 tcon = tconInfoAlloc();
3b795210 2424 if (tcon == NULL) {
1da177e4 2425 rc = -ENOMEM;
3b795210
SF		 2426 goto mount_fail_check;
2427 }
00e485b0 2428
ab3f9929 2429 tcon->ses = pSesInfo;
00e485b0
JL		 2430 if (volume_info->password) {
2431 tcon->password = kstrdup(volume_info->password,
2432 GFP_KERNEL);
2433 if (!tcon->password) {
2434 rc = -ENOMEM;
2435 goto mount_fail_check;
2436 }
2437 }
3b795210 2438
7586b765
JL		 2439 if ((strchr(volume_info->UNC + 3, '\\') == NULL)
2440 && (strchr(volume_info->UNC + 3, '/') == NULL)) {
1bfe73c2 2441 cERROR(1, ("Missing share name"));
3b795210
SF		 2442 rc = -ENODEV;
2443 goto mount_fail_check;
2444 } else {
2445 /* BB Do we need to wrap sesSem around
2446 * this TCon call and Unix SetFS as
2447 * we do on SessSetup and reconnect? */
7586b765 2448 rc = CIFSTCon(xid, pSesInfo, volume_info->UNC,
3b795210
SF		 2449 tcon, cifs_sb->local_nls);
2450 cFYI(1, ("CIFS Tcon rc = %d", rc));
7586b765 2451 if (volume_info->nodfs) {
3b795210
SF		 2452 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2453 cFYI(1, ("DFS disabled (%d)",
2454 tcon->Flags));
1da177e4
LT		 2455 }
2456 }
14fbf50d 2457 if (rc)
1bfe73c2 2458 goto remote_path_check;
7586b765 2459 tcon->seal = volume_info->seal;
f1987b44
JL		 2460 write_lock(&cifs_tcp_ses_lock);
2461 list_add(&tcon->tcon_list, &pSesInfo->tcon_list);
2462 write_unlock(&cifs_tcp_ses_lock);
1da177e4 2463 }
3b795210
SF		 2464
2465 /* we can have only one retry value for a connection
2466 to a share so for resources mounted more than once
2467 to the same server share the last value passed in
2468 for the retry flag is used */
7586b765
JL		 2469 tcon->retry = volume_info->retry;
2470 tcon->nocase = volume_info->nocase;
2471 tcon->local_lease = volume_info->local_lease;
1da177e4 2472 }
4523cc30 2473 if (pSesInfo) {
1da177e4
LT		 2474 if (pSesInfo->capabilities & CAP_LARGE_FILES) {
2475 sb->s_maxbytes = (u64) 1 << 63;
2476 } else
2477 sb->s_maxbytes = (u64) 1 << 31; /* 2 GB */
2478 }
2479
8af18971 2480 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
1da177e4
LT		 2481 sb->s_time_gran = 100;
2482
1bfe73c2
IM		 2483 if (rc)
2484 goto remote_path_check;
2485
d82c2df5 2486 cifs_sb->tcon = tcon;
c18c842b 2487
d82c2df5
SF		 2488 /* do not care if following two calls succeed - informational */
2489 if (!tcon->ipc) {
2490 CIFSSMBQFSDeviceInfo(xid, tcon);
2491 CIFSSMBQFSAttributeInfo(xid, tcon);
2492 }
03a143c9 2493
d82c2df5
SF		 2494 /* tell server which Unix caps we support */
2495 if (tcon->ses->capabilities & CAP_UNIX)
2496 /* reset of caps checks mount to see if unix extensions
2497 disabled for just this mount */
7586b765 2498 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
d82c2df5
SF		 2499 else
2500 tcon->unix_ext = 0; /* server does not support them */
c18c842b 2501
d82c2df5
SF		 2502 /* convert forward to back slashes in prepath here if needed */
2503 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2504 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
03a143c9 2505
d82c2df5
SF		 2506 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2507 cifs_sb->rsize = 1024 * 127;
2508 cFYI(DBG2, ("no very large read support, rsize now 127K"));
1da177e4 2509 }
d82c2df5
SF		 2510 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2511 cifs_sb->wsize = min(cifs_sb->wsize,
2512 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2513 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2514 cifs_sb->rsize = min(cifs_sb->rsize,
2515 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
1da177e4 2516
1bfe73c2
IM		 2517remote_path_check:
2518 /* check if a whole path (including prepath) is not remote */
2519 if (!rc && cifs_sb->prepathlen && tcon) {
e4cce94c
IM		 2520 /* build_path_to_root works only when we have a valid tcon */
2521 full_path = cifs_build_path_to_root(cifs_sb);
2522 if (full_path == NULL) {
2523 rc = -ENOMEM;
2524 goto mount_fail_check;
2525 }
2526 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
1bfe73c2 2527 if (rc != -EREMOTE) {
e4cce94c
IM		 2528 kfree(full_path);
2529 goto mount_fail_check;
2530 }
2531 kfree(full_path);
2532 }
2533
1bfe73c2
IM		 2534 /* get referral if needed */
2535 if (rc == -EREMOTE) {
d036f50f 2536#ifdef CONFIG_CIFS_DFS_UPCALL
5c2503a8
IM		 2537 if (referral_walks_count > MAX_NESTED_LINKS) {
2538 /*
2539 * BB: when we implement proper loop detection,
2540 * we will remove this check. But now we need it
2541 * to prevent an indefinite loop if 'DFS tree' is
2542 * misconfigured (i.e. has loops).
2543 */
2544 rc = -ELOOP;
2545 goto mount_fail_check;
2546 }
1bfe73c2
IM		 2547 /* convert forward to back slashes in prepath here if needed */
2548 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2549 convert_delimiter(cifs_sb->prepath,
2550 CIFS_DIR_SEP(cifs_sb));
2551 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2552 if (IS_ERR(full_path)) {
2553 rc = PTR_ERR(full_path);
2554 goto mount_fail_check;
2555 }
2556
2557 cFYI(1, ("Getting referral for: %s", full_path));
2558 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2559 cifs_sb->local_nls, &num_referrals, &referrals,
2560 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2561 if (!rc && num_referrals > 0) {
2562 char *fake_devname = NULL;
2563
2564 if (mount_data != mount_data_global)
2565 kfree(mount_data);
2566 mount_data = cifs_compose_mount_options(
2567 cifs_sb->mountdata, full_path + 1,
2568 referrals, &fake_devname);
2569 kfree(fake_devname);
2570 free_dfs_info_array(referrals, num_referrals);
2571
2572 if (tcon)
2573 cifs_put_tcon(tcon);
2574 else if (pSesInfo)
2575 cifs_put_smb_ses(pSesInfo);
2576
2577 cleanup_volume_info(&volume_info);
2578 FreeXid(xid);
2579 kfree(full_path);
5c2503a8 2580 referral_walks_count++;
1bfe73c2
IM		 2581 goto try_mount_again;
2582 }
d036f50f
SF		 2583#else /* No DFS support, return error on mount */
2584 rc = -EOPNOTSUPP;
2585#endif
1bfe73c2
IM		 2586 }
2587
2588mount_fail_check:
2589 /* on error free sesinfo and tcon struct if needed */
2590 if (rc) {
2591 if (mount_data != mount_data_global)
2592 kfree(mount_data);
2593 /* If find_unc succeeded then rc == 0 so we can not end */
2594 /* up accidently freeing someone elses tcon struct */
2595 if (tcon)
2596 cifs_put_tcon(tcon);
2597 else if (pSesInfo)
2598 cifs_put_smb_ses(pSesInfo);
2599 else
2600 cifs_put_tcp_session(srvTcp);
2601 goto out;
2602 }
2603
7586b765 2604 /* volume_info->password is freed above when existing session found
1da177e4
LT		 2605 (in which case it is not needed anymore) but when new sesion is created
2606 the password ptr is put in the new session structure (in which case the
2607 password will be freed at unmount time) */
70fe7dc0
JL		 2608out:
2609 /* zero out password before freeing */
1bfe73c2 2610 cleanup_volume_info(&volume_info);
1da177e4
LT		 2611 FreeXid(xid);
2612 return rc;
2613}
2614
1da177e4
LT		 2615int
2616CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2617 const char *tree, struct cifsTconInfo *tcon,
2618 const struct nls_table *nls_codepage)
2619{
2620 struct smb_hdr *smb_buffer;
2621 struct smb_hdr *smb_buffer_response;
2622 TCONX_REQ *pSMB;
2623 TCONX_RSP *pSMBr;
2624 unsigned char *bcc_ptr;
2625 int rc = 0;
cc20c031 2626 int length, bytes_left;
1da177e4
LT		 2627 __u16 count;
2628
2629 if (ses == NULL)
2630 return -EIO;
2631
2632 smb_buffer = cifs_buf_get();
2633 if (smb_buffer == NULL) {
2634 return -ENOMEM;
2635 }
2636 smb_buffer_response = smb_buffer;
2637
2638 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2639 NULL /*no tid */ , 4 /*wct */ );
1982c344
SF		 2640
2641 smb_buffer->Mid = GetNextMid(ses->server);
1da177e4
LT		 2642 smb_buffer->Uid = ses->Suid;
2643 pSMB = (TCONX_REQ *) smb_buffer;
2644 pSMBr = (TCONX_RSP *) smb_buffer_response;
2645
2646 pSMB->AndXCommand = 0xFF;
2647 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
1da177e4 2648 bcc_ptr = &pSMB->Password[0];
fb8c4b14 2649 if ((ses->server->secMode) & SECMODE_USER) {
eeac8047 2650 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
7c7b25bc 2651 *bcc_ptr = 0; /* password is null byte */
eeac8047 2652 bcc_ptr++; /* skip password */
7c7b25bc 2653 /* already aligned so no need to do it below */
eeac8047 2654 } else {
7c7b25bc 2655 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
eeac8047
SF		 2656 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2657 specified as required (when that support is added to
2658 the vfs in the future) as only NTLM or the much
7c7b25bc 2659 weaker LANMAN (which we do not send by default) is accepted
eeac8047
SF		 2660 by Samba (not sure whether other servers allow
2661 NTLMv2 password here) */
7c7b25bc 2662#ifdef CONFIG_CIFS_WEAK_PW_HASH
50c2f753 2663 if ((extended_security & CIFSSEC_MAY_LANMAN) &&
00e485b0
JL		 2664 (ses->server->secType == LANMAN))
2665 calc_lanman_hash(tcon->password, ses->server->cryptKey,
4e53a3fb
JL		 2666 ses->server->secMode &
2667 SECMODE_PW_ENCRYPT ? true : false,
2668 bcc_ptr);
7c7b25bc
SF		 2669 else
2670#endif /* CIFS_WEAK_PW_HASH */
00e485b0 2671 SMBNTencrypt(tcon->password, ses->server->cryptKey,
eeac8047
SF		 2672 bcc_ptr);
2673
7c7b25bc 2674 bcc_ptr += CIFS_SESS_KEY_SIZE;
fb8c4b14 2675 if (ses->capabilities & CAP_UNICODE) {
7c7b25bc
SF		 2676 /* must align unicode strings */
2677 *bcc_ptr = 0; /* null byte password */
2678 bcc_ptr++;
2679 }
eeac8047 2680 }
1da177e4 2681
50c2f753 2682 if (ses->server->secMode &
a878fb22 2683 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
1da177e4
LT		 2684 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2685
2686 if (ses->capabilities & CAP_STATUS32) {
2687 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2688 }
2689 if (ses->capabilities & CAP_DFS) {
2690 smb_buffer->Flags2 |= SMBFLG2_DFS;
2691 }
2692 if (ses->capabilities & CAP_UNICODE) {
2693 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2694 length =
50c2f753
SF		 2695 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2696 6 /* max utf8 char length in bytes */ *
a878fb22
SF		 2697 (/* server len*/ + 256 /* share len */), nls_codepage);
2698 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
1da177e4
LT		 2699 bcc_ptr += 2; /* skip trailing null */
2700 } else { /* ASCII */
1da177e4
LT		 2701 strcpy(bcc_ptr, tree);
2702 bcc_ptr += strlen(tree) + 1;
2703 }
2704 strcpy(bcc_ptr, "?????");
2705 bcc_ptr += strlen("?????");
2706 bcc_ptr += 1;
2707 count = bcc_ptr - &pSMB->Password[0];
2708 pSMB->hdr.smb_buf_length += count;
2709 pSMB->ByteCount = cpu_to_le16(count);
2710
133672ef
SF		 2711 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2712 CIFS_STD_OP);
1da177e4 2713
1da177e4
LT		 2714 /* above now done in SendReceive */
2715 if ((rc == 0) && (tcon != NULL)) {
0e0d2cf3
SF		 2716 bool is_unicode;
2717
1da177e4 2718 tcon->tidStatus = CifsGood;
3b795210 2719 tcon->need_reconnect = false;
1da177e4
LT		 2720 tcon->tid = smb_buffer_response->Tid;
2721 bcc_ptr = pByteArea(smb_buffer_response);
cc20c031
JL		 2722 bytes_left = BCC(smb_buffer_response);
2723 length = strnlen(bcc_ptr, bytes_left - 2);
0e0d2cf3
SF		 2724 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
2725 is_unicode = true;
2726 else
2727 is_unicode = false;
2728
cc20c031 2729
50c2f753 2730 /* skip service field (NB: this field is always ASCII) */
7f8ed420
SF		 2731 if (length == 3) {
2732 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
2733 (bcc_ptr[2] == 'C')) {
2734 cFYI(1, ("IPC connection"));
2735 tcon->ipc = 1;
2736 }
2737 } else if (length == 2) {
2738 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
2739 /* the most common case */
2740 cFYI(1, ("disk share connection"));
2741 }
2742 }
50c2f753 2743 bcc_ptr += length + 1;
cc20c031 2744 bytes_left -= (length + 1);
1da177e4 2745 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
cc20c031
JL		 2746
2747 /* mostly informational -- no need to fail on error here */
d185cda7 2748 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
0e0d2cf3 2749 bytes_left, is_unicode,
cc20c031
JL		 2750 nls_codepage);
2751
2752 cFYI(1, ("nativeFileSystem=%s", tcon->nativeFileSystem));
2753
fb8c4b14 2754 if ((smb_buffer_response->WordCount == 3) ||
1a4e15a0
SF		 2755 (smb_buffer_response->WordCount == 7))
2756 /* field is in same location */
3979877e
SF		 2757 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
2758 else
2759 tcon->Flags = 0;
1da177e4
LT		 2760 cFYI(1, ("Tcon flags: 0x%x ", tcon->Flags));
2761 } else if ((rc == 0) && tcon == NULL) {
50c2f753 2762 /* all we need to save for IPC$ connection */
1da177e4
LT		 2763 ses->ipc_tid = smb_buffer_response->Tid;
2764 }
2765
a8a11d39 2766 cifs_buf_release(smb_buffer);
1da177e4
LT		 2767 return rc;
2768}
2769
2770int
2771cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
2772{
2773 int rc = 0;
50c2f753 2774 char *tmp;
1da177e4 2775
f1987b44
JL		 2776 if (cifs_sb->tcon)
2777 cifs_put_tcon(cifs_sb->tcon);
50c2f753 2778
1da177e4 2779 cifs_sb->tcon = NULL;
2fe87f02
SF		 2780 tmp = cifs_sb->prepath;
2781 cifs_sb->prepathlen = 0;
2782 cifs_sb->prepath = NULL;
2783 kfree(tmp);
1da177e4 2784
88e7d705 2785 return rc;
50c2f753 2786}
1da177e4
LT		 2787
2788int cifs_setup_session(unsigned int xid, struct cifsSesInfo *pSesInfo,
50c2f753 2789 struct nls_table *nls_info)
1da177e4
LT		 2790{
2791 int rc = 0;
ad009ac9 2792 int first_time = 0;
cb7691b6 2793 struct TCP_Server_Info *server = pSesInfo->server;
1da177e4
LT		 2794
2795 /* what if server changes its buffer size after dropping the session? */
cb7691b6 2796 if (server->maxBuf == 0) /* no need to send on reconnect */ {
1da177e4 2797 rc = CIFSSMBNegotiate(xid, pSesInfo);
cb7691b6
JL		 2798 if (rc == -EAGAIN) {
2799 /* retry only once on 1st time connection */
1da177e4 2800 rc = CIFSSMBNegotiate(xid, pSesInfo);
50c2f753 2801 if (rc == -EAGAIN)
1da177e4
LT		 2802 rc = -EHOSTDOWN;
2803 }
fb8c4b14 2804 if (rc == 0) {
1da177e4 2805 spin_lock(&GlobalMid_Lock);
cb7691b6
JL		 2806 if (server->tcpStatus != CifsExiting)
2807 server->tcpStatus = CifsGood;
1da177e4
LT		 2808 else
2809 rc = -EHOSTDOWN;
2810 spin_unlock(&GlobalMid_Lock);
2811
2812 }
ad009ac9 2813 first_time = 1;
1da177e4 2814 }
26b994fa
SF		 2815
2816 if (rc)
2817 goto ss_err_exit;
2818
2819 pSesInfo->flags = 0;
cb7691b6 2820 pSesInfo->capabilities = server->capabilities;
26b994fa
SF		 2821 if (linuxExtEnabled == 0)
2822 pSesInfo->capabilities &= (~CAP_UNIX);
20418acd 2823
26b994fa 2824 cFYI(1, ("Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
cb7691b6
JL		 2825 server->secMode, server->capabilities, server->timeAdj));
2826
20418acd 2827 rc = CIFS_SessSetup(xid, pSesInfo, first_time, nls_info);
26b994fa
SF		 2828 if (rc) {
2829 cERROR(1, ("Send error in SessSetup = %d", rc));
2830 } else {
2831 cFYI(1, ("CIFS Session Established successfully"));
20418acd
SF		 2832 spin_lock(&GlobalMid_Lock);
2833 pSesInfo->status = CifsGood;
2834 pSesInfo->need_reconnect = false;
2835 spin_unlock(&GlobalMid_Lock);
1da177e4 2836 }
26b994fa 2837
1da177e4
LT		 2838ss_err_exit:
2839 return rc;
2840}
2841
Linux kernel - Deliverables
This page took 0.665553 seconds and 5 git commands to generate.