seccomp: Add SECCOMP_RET_TRAP
[deliverable/linux.git] / fs / cifs / connect.c
1 /*
2 * fs/cifs/connect.c
3 *
4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
6 *
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
20 */
21 #include <linux/fs.h>
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/slab.h>
27 #include <linux/pagemap.h>
28 #include <linux/ctype.h>
29 #include <linux/utsname.h>
30 #include <linux/mempool.h>
31 #include <linux/delay.h>
32 #include <linux/completion.h>
33 #include <linux/kthread.h>
34 #include <linux/pagevec.h>
35 #include <linux/freezer.h>
36 #include <linux/namei.h>
37 #include <asm/uaccess.h>
38 #include <asm/processor.h>
39 #include <linux/inet.h>
40 #include <linux/module.h>
41 #include <keys/user-type.h>
42 #include <net/ipv6.h>
43 #include <linux/parser.h>
44
45 #include "cifspdu.h"
46 #include "cifsglob.h"
47 #include "cifsproto.h"
48 #include "cifs_unicode.h"
49 #include "cifs_debug.h"
50 #include "cifs_fs_sb.h"
51 #include "ntlmssp.h"
52 #include "nterr.h"
53 #include "rfc1002pdu.h"
54 #include "fscache.h"
55
56 #define CIFS_PORT 445
57 #define RFC1001_PORT 139
58
59 /* SMB echo "timeout" -- FIXME: tunable? */
60 #define SMB_ECHO_INTERVAL (60 * HZ)
61
62 extern mempool_t *cifs_req_poolp;
63
64 /* FIXME: should these be tunable? */
65 #define TLINK_ERROR_EXPIRE (1 * HZ)
66 #define TLINK_IDLE_EXPIRE (600 * HZ)
67
68 enum {
69
70 /* Mount options that take no arguments */
71 Opt_user_xattr, Opt_nouser_xattr,
72 Opt_forceuid, Opt_noforceuid,
73 Opt_noblocksend, Opt_noautotune,
74 Opt_hard, Opt_soft, Opt_perm, Opt_noperm,
75 Opt_mapchars, Opt_nomapchars, Opt_sfu,
76 Opt_nosfu, Opt_nodfs, Opt_posixpaths,
77 Opt_noposixpaths, Opt_nounix,
78 Opt_nocase,
79 Opt_brl, Opt_nobrl,
80 Opt_forcemandatorylock, Opt_setuids,
81 Opt_nosetuids, Opt_dynperm, Opt_nodynperm,
82 Opt_nohard, Opt_nosoft,
83 Opt_nointr, Opt_intr,
84 Opt_nostrictsync, Opt_strictsync,
85 Opt_serverino, Opt_noserverino,
86 Opt_rwpidforward, Opt_cifsacl, Opt_nocifsacl,
87 Opt_acl, Opt_noacl, Opt_locallease,
88 Opt_sign, Opt_seal, Opt_direct,
89 Opt_strictcache, Opt_noac,
90 Opt_fsc, Opt_mfsymlinks,
91 Opt_multiuser, Opt_sloppy,
92
93 /* Mount options which take numeric value */
94 Opt_backupuid, Opt_backupgid, Opt_uid,
95 Opt_cruid, Opt_gid, Opt_file_mode,
96 Opt_dirmode, Opt_port,
97 Opt_rsize, Opt_wsize, Opt_actimeo,
98
99 /* Mount options which take string value */
100 Opt_user, Opt_pass, Opt_ip,
101 Opt_unc, Opt_domain,
102 Opt_srcaddr, Opt_prefixpath,
103 Opt_iocharset, Opt_sockopt,
104 Opt_netbiosname, Opt_servern,
105 Opt_ver, Opt_sec,
106
107 /* Mount options to be ignored */
108 Opt_ignore,
109
110 /* Options which could be blank */
111 Opt_blank_pass,
112
113 Opt_err
114 };
115
116 static const match_table_t cifs_mount_option_tokens = {
117
118 { Opt_user_xattr, "user_xattr" },
119 { Opt_nouser_xattr, "nouser_xattr" },
120 { Opt_forceuid, "forceuid" },
121 { Opt_noforceuid, "noforceuid" },
122 { Opt_noblocksend, "noblocksend" },
123 { Opt_noautotune, "noautotune" },
124 { Opt_hard, "hard" },
125 { Opt_soft, "soft" },
126 { Opt_perm, "perm" },
127 { Opt_noperm, "noperm" },
128 { Opt_mapchars, "mapchars" },
129 { Opt_nomapchars, "nomapchars" },
130 { Opt_sfu, "sfu" },
131 { Opt_nosfu, "nosfu" },
132 { Opt_nodfs, "nodfs" },
133 { Opt_posixpaths, "posixpaths" },
134 { Opt_noposixpaths, "noposixpaths" },
135 { Opt_nounix, "nounix" },
136 { Opt_nounix, "nolinux" },
137 { Opt_nocase, "nocase" },
138 { Opt_nocase, "ignorecase" },
139 { Opt_brl, "brl" },
140 { Opt_nobrl, "nobrl" },
141 { Opt_nobrl, "nolock" },
142 { Opt_forcemandatorylock, "forcemandatorylock" },
143 { Opt_forcemandatorylock, "forcemand" },
144 { Opt_setuids, "setuids" },
145 { Opt_nosetuids, "nosetuids" },
146 { Opt_dynperm, "dynperm" },
147 { Opt_nodynperm, "nodynperm" },
148 { Opt_nohard, "nohard" },
149 { Opt_nosoft, "nosoft" },
150 { Opt_nointr, "nointr" },
151 { Opt_intr, "intr" },
152 { Opt_nostrictsync, "nostrictsync" },
153 { Opt_strictsync, "strictsync" },
154 { Opt_serverino, "serverino" },
155 { Opt_noserverino, "noserverino" },
156 { Opt_rwpidforward, "rwpidforward" },
157 { Opt_cifsacl, "cifsacl" },
158 { Opt_nocifsacl, "nocifsacl" },
159 { Opt_acl, "acl" },
160 { Opt_noacl, "noacl" },
161 { Opt_locallease, "locallease" },
162 { Opt_sign, "sign" },
163 { Opt_seal, "seal" },
164 { Opt_direct, "direct" },
165 { Opt_direct, "forceddirectio" },
166 { Opt_strictcache, "strictcache" },
167 { Opt_noac, "noac" },
168 { Opt_fsc, "fsc" },
169 { Opt_mfsymlinks, "mfsymlinks" },
170 { Opt_multiuser, "multiuser" },
171 { Opt_sloppy, "sloppy" },
172
173 { Opt_backupuid, "backupuid=%s" },
174 { Opt_backupgid, "backupgid=%s" },
175 { Opt_uid, "uid=%s" },
176 { Opt_cruid, "cruid=%s" },
177 { Opt_gid, "gid=%s" },
178 { Opt_file_mode, "file_mode=%s" },
179 { Opt_dirmode, "dirmode=%s" },
180 { Opt_dirmode, "dir_mode=%s" },
181 { Opt_port, "port=%s" },
182 { Opt_rsize, "rsize=%s" },
183 { Opt_wsize, "wsize=%s" },
184 { Opt_actimeo, "actimeo=%s" },
185
186 { Opt_user, "user=%s" },
187 { Opt_user, "username=%s" },
188 { Opt_blank_pass, "pass=" },
189 { Opt_pass, "pass=%s" },
190 { Opt_pass, "password=%s" },
191 { Opt_ip, "ip=%s" },
192 { Opt_ip, "addr=%s" },
193 { Opt_unc, "unc=%s" },
194 { Opt_unc, "target=%s" },
195 { Opt_unc, "path=%s" },
196 { Opt_domain, "dom=%s" },
197 { Opt_domain, "domain=%s" },
198 { Opt_domain, "workgroup=%s" },
199 { Opt_srcaddr, "srcaddr=%s" },
200 { Opt_prefixpath, "prefixpath=%s" },
201 { Opt_iocharset, "iocharset=%s" },
202 { Opt_sockopt, "sockopt=%s" },
203 { Opt_netbiosname, "netbiosname=%s" },
204 { Opt_servern, "servern=%s" },
205 { Opt_ver, "ver=%s" },
206 { Opt_ver, "vers=%s" },
207 { Opt_ver, "version=%s" },
208 { Opt_sec, "sec=%s" },
209
210 { Opt_ignore, "cred" },
211 { Opt_ignore, "credentials" },
212 { Opt_ignore, "guest" },
213 { Opt_ignore, "rw" },
214 { Opt_ignore, "ro" },
215 { Opt_ignore, "suid" },
216 { Opt_ignore, "nosuid" },
217 { Opt_ignore, "exec" },
218 { Opt_ignore, "noexec" },
219 { Opt_ignore, "nodev" },
220 { Opt_ignore, "noauto" },
221 { Opt_ignore, "dev" },
222 { Opt_ignore, "mand" },
223 { Opt_ignore, "nomand" },
224 { Opt_ignore, "_netdev" },
225
226 { Opt_err, NULL }
227 };
228
229 enum {
230 Opt_sec_krb5, Opt_sec_krb5i, Opt_sec_krb5p,
231 Opt_sec_ntlmsspi, Opt_sec_ntlmssp,
232 Opt_ntlm, Opt_sec_ntlmi, Opt_sec_ntlmv2i,
233 Opt_sec_nontlm, Opt_sec_lanman,
234 Opt_sec_none,
235
236 Opt_sec_err
237 };
238
239 static const match_table_t cifs_secflavor_tokens = {
240 { Opt_sec_krb5, "krb5" },
241 { Opt_sec_krb5i, "krb5i" },
242 { Opt_sec_krb5p, "krb5p" },
243 { Opt_sec_ntlmsspi, "ntlmsspi" },
244 { Opt_sec_ntlmssp, "ntlmssp" },
245 { Opt_ntlm, "ntlm" },
246 { Opt_sec_ntlmi, "ntlmi" },
247 { Opt_sec_ntlmv2i, "ntlmv2i" },
248 { Opt_sec_nontlm, "nontlm" },
249 { Opt_sec_lanman, "lanman" },
250 { Opt_sec_none, "none" },
251
252 { Opt_sec_err, NULL }
253 };
254
255 static int ip_connect(struct TCP_Server_Info *server);
256 static int generic_ip_connect(struct TCP_Server_Info *server);
257 static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
258 static void cifs_prune_tlinks(struct work_struct *work);
259 static int cifs_setup_volume_info(struct smb_vol *volume_info, char *mount_data,
260 const char *devname);
261
262 /*
263 * cifs tcp session reconnection
264 *
265 * mark tcp session as reconnecting so temporarily locked
266 * mark all smb sessions as reconnecting for tcp session
267 * reconnect tcp session
268 * wake up waiters on reconnection? - (not needed currently)
269 */
270 static int
271 cifs_reconnect(struct TCP_Server_Info *server)
272 {
273 int rc = 0;
274 struct list_head *tmp, *tmp2;
275 struct cifs_ses *ses;
276 struct cifs_tcon *tcon;
277 struct mid_q_entry *mid_entry;
278 struct list_head retry_list;
279
280 spin_lock(&GlobalMid_Lock);
281 if (server->tcpStatus == CifsExiting) {
282 /* the demux thread will exit normally
283 next time through the loop */
284 spin_unlock(&GlobalMid_Lock);
285 return rc;
286 } else
287 server->tcpStatus = CifsNeedReconnect;
288 spin_unlock(&GlobalMid_Lock);
289 server->maxBuf = 0;
290
291 cFYI(1, "Reconnecting tcp session");
292
293 /* before reconnecting the tcp session, mark the smb session (uid)
294 and the tid bad so they are not used until reconnected */
295 cFYI(1, "%s: marking sessions and tcons for reconnect", __func__);
296 spin_lock(&cifs_tcp_ses_lock);
297 list_for_each(tmp, &server->smb_ses_list) {
298 ses = list_entry(tmp, struct cifs_ses, smb_ses_list);
299 ses->need_reconnect = true;
300 ses->ipc_tid = 0;
301 list_for_each(tmp2, &ses->tcon_list) {
302 tcon = list_entry(tmp2, struct cifs_tcon, tcon_list);
303 tcon->need_reconnect = true;
304 }
305 }
306 spin_unlock(&cifs_tcp_ses_lock);
307
308 /* do not want to be sending data on a socket we are freeing */
309 cFYI(1, "%s: tearing down socket", __func__);
310 mutex_lock(&server->srv_mutex);
311 if (server->ssocket) {
312 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
313 server->ssocket->flags);
314 kernel_sock_shutdown(server->ssocket, SHUT_WR);
315 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
316 server->ssocket->state,
317 server->ssocket->flags);
318 sock_release(server->ssocket);
319 server->ssocket = NULL;
320 }
321 server->sequence_number = 0;
322 server->session_estab = false;
323 kfree(server->session_key.response);
324 server->session_key.response = NULL;
325 server->session_key.len = 0;
326 server->lstrp = jiffies;
327 mutex_unlock(&server->srv_mutex);
328
329 /* mark submitted MIDs for retry and issue callback */
330 INIT_LIST_HEAD(&retry_list);
331 cFYI(1, "%s: moving mids to private list", __func__);
332 spin_lock(&GlobalMid_Lock);
333 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
334 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
335 if (mid_entry->mid_state == MID_REQUEST_SUBMITTED)
336 mid_entry->mid_state = MID_RETRY_NEEDED;
337 list_move(&mid_entry->qhead, &retry_list);
338 }
339 spin_unlock(&GlobalMid_Lock);
340
341 cFYI(1, "%s: issuing mid callbacks", __func__);
342 list_for_each_safe(tmp, tmp2, &retry_list) {
343 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
344 list_del_init(&mid_entry->qhead);
345 mid_entry->callback(mid_entry);
346 }
347
348 do {
349 try_to_freeze();
350
351 /* we should try only the port we connected to before */
352 rc = generic_ip_connect(server);
353 if (rc) {
354 cFYI(1, "reconnect error %d", rc);
355 msleep(3000);
356 } else {
357 atomic_inc(&tcpSesReconnectCount);
358 spin_lock(&GlobalMid_Lock);
359 if (server->tcpStatus != CifsExiting)
360 server->tcpStatus = CifsNeedNegotiate;
361 spin_unlock(&GlobalMid_Lock);
362 }
363 } while (server->tcpStatus == CifsNeedReconnect);
364
365 return rc;
366 }
367
368 /*
369 return codes:
370 0 not a transact2, or all data present
371 >0 transact2 with that much data missing
372 -EINVAL = invalid transact2
373
374 */
375 static int check2ndT2(char *buf)
376 {
377 struct smb_hdr *pSMB = (struct smb_hdr *)buf;
378 struct smb_t2_rsp *pSMBt;
379 int remaining;
380 __u16 total_data_size, data_in_this_rsp;
381
382 if (pSMB->Command != SMB_COM_TRANSACTION2)
383 return 0;
384
385 /* check for plausible wct, bcc and t2 data and parm sizes */
386 /* check for parm and data offset going beyond end of smb */
387 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
388 cFYI(1, "invalid transact2 word count");
389 return -EINVAL;
390 }
391
392 pSMBt = (struct smb_t2_rsp *)pSMB;
393
394 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
395 data_in_this_rsp = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
396
397 if (total_data_size == data_in_this_rsp)
398 return 0;
399 else if (total_data_size < data_in_this_rsp) {
400 cFYI(1, "total data %d smaller than data in frame %d",
401 total_data_size, data_in_this_rsp);
402 return -EINVAL;
403 }
404
405 remaining = total_data_size - data_in_this_rsp;
406
407 cFYI(1, "missing %d bytes from transact2, check next response",
408 remaining);
409 if (total_data_size > CIFSMaxBufSize) {
410 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
411 total_data_size, CIFSMaxBufSize);
412 return -EINVAL;
413 }
414 return remaining;
415 }
416
417 static int coalesce_t2(char *second_buf, struct smb_hdr *target_hdr)
418 {
419 struct smb_t2_rsp *pSMBs = (struct smb_t2_rsp *)second_buf;
420 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)target_hdr;
421 char *data_area_of_tgt;
422 char *data_area_of_src;
423 int remaining;
424 unsigned int byte_count, total_in_tgt;
425 __u16 tgt_total_cnt, src_total_cnt, total_in_src;
426
427 src_total_cnt = get_unaligned_le16(&pSMBs->t2_rsp.TotalDataCount);
428 tgt_total_cnt = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
429
430 if (tgt_total_cnt != src_total_cnt)
431 cFYI(1, "total data count of primary and secondary t2 differ "
432 "source=%hu target=%hu", src_total_cnt, tgt_total_cnt);
433
434 total_in_tgt = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
435
436 remaining = tgt_total_cnt - total_in_tgt;
437
438 if (remaining < 0) {
439 cFYI(1, "Server sent too much data. tgt_total_cnt=%hu "
440 "total_in_tgt=%hu", tgt_total_cnt, total_in_tgt);
441 return -EPROTO;
442 }
443
444 if (remaining == 0) {
445 /* nothing to do, ignore */
446 cFYI(1, "no more data remains");
447 return 0;
448 }
449
450 total_in_src = get_unaligned_le16(&pSMBs->t2_rsp.DataCount);
451 if (remaining < total_in_src)
452 cFYI(1, "transact2 2nd response contains too much data");
453
454 /* find end of first SMB data area */
455 data_area_of_tgt = (char *)&pSMBt->hdr.Protocol +
456 get_unaligned_le16(&pSMBt->t2_rsp.DataOffset);
457
458 /* validate target area */
459 data_area_of_src = (char *)&pSMBs->hdr.Protocol +
460 get_unaligned_le16(&pSMBs->t2_rsp.DataOffset);
461
462 data_area_of_tgt += total_in_tgt;
463
464 total_in_tgt += total_in_src;
465 /* is the result too big for the field? */
466 if (total_in_tgt > USHRT_MAX) {
467 cFYI(1, "coalesced DataCount too large (%u)", total_in_tgt);
468 return -EPROTO;
469 }
470 put_unaligned_le16(total_in_tgt, &pSMBt->t2_rsp.DataCount);
471
472 /* fix up the BCC */
473 byte_count = get_bcc(target_hdr);
474 byte_count += total_in_src;
475 /* is the result too big for the field? */
476 if (byte_count > USHRT_MAX) {
477 cFYI(1, "coalesced BCC too large (%u)", byte_count);
478 return -EPROTO;
479 }
480 put_bcc(byte_count, target_hdr);
481
482 byte_count = be32_to_cpu(target_hdr->smb_buf_length);
483 byte_count += total_in_src;
484 /* don't allow buffer to overflow */
485 if (byte_count > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) {
486 cFYI(1, "coalesced BCC exceeds buffer size (%u)", byte_count);
487 return -ENOBUFS;
488 }
489 target_hdr->smb_buf_length = cpu_to_be32(byte_count);
490
491 /* copy second buffer into end of first buffer */
492 memcpy(data_area_of_tgt, data_area_of_src, total_in_src);
493
494 if (remaining != total_in_src) {
495 /* more responses to go */
496 cFYI(1, "waiting for more secondary responses");
497 return 1;
498 }
499
500 /* we are done */
501 cFYI(1, "found the last secondary response");
502 return 0;
503 }
504
505 static void
506 cifs_echo_request(struct work_struct *work)
507 {
508 int rc;
509 struct TCP_Server_Info *server = container_of(work,
510 struct TCP_Server_Info, echo.work);
511
512 /*
513 * We cannot send an echo until the NEGOTIATE_PROTOCOL request is
514 * done, which is indicated by maxBuf != 0. Also, no need to ping if
515 * we got a response recently
516 */
517 if (server->maxBuf == 0 ||
518 time_before(jiffies, server->lstrp + SMB_ECHO_INTERVAL - HZ))
519 goto requeue_echo;
520
521 rc = CIFSSMBEcho(server);
522 if (rc)
523 cFYI(1, "Unable to send echo request to server: %s",
524 server->hostname);
525
526 requeue_echo:
527 queue_delayed_work(cifsiod_wq, &server->echo, SMB_ECHO_INTERVAL);
528 }
529
530 static bool
531 allocate_buffers(struct TCP_Server_Info *server)
532 {
533 if (!server->bigbuf) {
534 server->bigbuf = (char *)cifs_buf_get();
535 if (!server->bigbuf) {
536 cERROR(1, "No memory for large SMB response");
537 msleep(3000);
538 /* retry will check if exiting */
539 return false;
540 }
541 } else if (server->large_buf) {
542 /* we are reusing a dirty large buf, clear its start */
543 memset(server->bigbuf, 0, header_size());
544 }
545
546 if (!server->smallbuf) {
547 server->smallbuf = (char *)cifs_small_buf_get();
548 if (!server->smallbuf) {
549 cERROR(1, "No memory for SMB response");
550 msleep(1000);
551 /* retry will check if exiting */
552 return false;
553 }
554 /* beginning of smb buffer is cleared in our buf_get */
555 } else {
556 /* if existing small buf clear beginning */
557 memset(server->smallbuf, 0, header_size());
558 }
559
560 return true;
561 }
562
563 static bool
564 server_unresponsive(struct TCP_Server_Info *server)
565 {
566 /*
567 * We need to wait 2 echo intervals to make sure we handle such
568 * situations right:
569 * 1s client sends a normal SMB request
570 * 2s client gets a response
571 * 30s echo workqueue job pops, and decides we got a response recently
572 * and don't need to send another
573 * ...
574 * 65s kernel_recvmsg times out, and we see that we haven't gotten
575 * a response in >60s.
576 */
577 if (server->tcpStatus == CifsGood &&
578 time_after(jiffies, server->lstrp + 2 * SMB_ECHO_INTERVAL)) {
579 cERROR(1, "Server %s has not responded in %d seconds. "
580 "Reconnecting...", server->hostname,
581 (2 * SMB_ECHO_INTERVAL) / HZ);
582 cifs_reconnect(server);
583 wake_up(&server->response_q);
584 return true;
585 }
586
587 return false;
588 }
589
590 /*
591 * kvec_array_init - clone a kvec array, and advance into it
592 * @new: pointer to memory for cloned array
593 * @iov: pointer to original array
594 * @nr_segs: number of members in original array
595 * @bytes: number of bytes to advance into the cloned array
596 *
597 * This function will copy the array provided in iov to a section of memory
598 * and advance the specified number of bytes into the new array. It returns
599 * the number of segments in the new array. "new" must be at least as big as
600 * the original iov array.
601 */
602 static unsigned int
603 kvec_array_init(struct kvec *new, struct kvec *iov, unsigned int nr_segs,
604 size_t bytes)
605 {
606 size_t base = 0;
607
608 while (bytes || !iov->iov_len) {
609 int copy = min(bytes, iov->iov_len);
610
611 bytes -= copy;
612 base += copy;
613 if (iov->iov_len == base) {
614 iov++;
615 nr_segs--;
616 base = 0;
617 }
618 }
619 memcpy(new, iov, sizeof(*iov) * nr_segs);
620 new->iov_base += base;
621 new->iov_len -= base;
622 return nr_segs;
623 }
624
625 static struct kvec *
626 get_server_iovec(struct TCP_Server_Info *server, unsigned int nr_segs)
627 {
628 struct kvec *new_iov;
629
630 if (server->iov && nr_segs <= server->nr_iov)
631 return server->iov;
632
633 /* not big enough -- allocate a new one and release the old */
634 new_iov = kmalloc(sizeof(*new_iov) * nr_segs, GFP_NOFS);
635 if (new_iov) {
636 kfree(server->iov);
637 server->iov = new_iov;
638 server->nr_iov = nr_segs;
639 }
640 return new_iov;
641 }
642
643 int
644 cifs_readv_from_socket(struct TCP_Server_Info *server, struct kvec *iov_orig,
645 unsigned int nr_segs, unsigned int to_read)
646 {
647 int length = 0;
648 int total_read;
649 unsigned int segs;
650 struct msghdr smb_msg;
651 struct kvec *iov;
652
653 iov = get_server_iovec(server, nr_segs);
654 if (!iov)
655 return -ENOMEM;
656
657 smb_msg.msg_control = NULL;
658 smb_msg.msg_controllen = 0;
659
660 for (total_read = 0; to_read; total_read += length, to_read -= length) {
661 try_to_freeze();
662
663 if (server_unresponsive(server)) {
664 total_read = -EAGAIN;
665 break;
666 }
667
668 segs = kvec_array_init(iov, iov_orig, nr_segs, total_read);
669
670 length = kernel_recvmsg(server->ssocket, &smb_msg,
671 iov, segs, to_read, 0);
672
673 if (server->tcpStatus == CifsExiting) {
674 total_read = -ESHUTDOWN;
675 break;
676 } else if (server->tcpStatus == CifsNeedReconnect) {
677 cifs_reconnect(server);
678 total_read = -EAGAIN;
679 break;
680 } else if (length == -ERESTARTSYS ||
681 length == -EAGAIN ||
682 length == -EINTR) {
683 /*
684 * Minimum sleep to prevent looping, allowing socket
685 * to clear and app threads to set tcpStatus
686 * CifsNeedReconnect if server hung.
687 */
688 usleep_range(1000, 2000);
689 length = 0;
690 continue;
691 } else if (length <= 0) {
692 cFYI(1, "Received no data or error: expecting %d "
693 "got %d", to_read, length);
694 cifs_reconnect(server);
695 total_read = -EAGAIN;
696 break;
697 }
698 }
699 return total_read;
700 }
701
702 int
703 cifs_read_from_socket(struct TCP_Server_Info *server, char *buf,
704 unsigned int to_read)
705 {
706 struct kvec iov;
707
708 iov.iov_base = buf;
709 iov.iov_len = to_read;
710
711 return cifs_readv_from_socket(server, &iov, 1, to_read);
712 }
713
714 static bool
715 is_smb_response(struct TCP_Server_Info *server, unsigned char type)
716 {
717 /*
718 * The first byte big endian of the length field,
719 * is actually not part of the length but the type
720 * with the most common, zero, as regular data.
721 */
722 switch (type) {
723 case RFC1002_SESSION_MESSAGE:
724 /* Regular SMB response */
725 return true;
726 case RFC1002_SESSION_KEEP_ALIVE:
727 cFYI(1, "RFC 1002 session keep alive");
728 break;
729 case RFC1002_POSITIVE_SESSION_RESPONSE:
730 cFYI(1, "RFC 1002 positive session response");
731 break;
732 case RFC1002_NEGATIVE_SESSION_RESPONSE:
733 /*
734 * We get this from Windows 98 instead of an error on
735 * SMB negprot response.
736 */
737 cFYI(1, "RFC 1002 negative session response");
738 /* give server a second to clean up */
739 msleep(1000);
740 /*
741 * Always try 445 first on reconnect since we get NACK
742 * on some if we ever connected to port 139 (the NACK
743 * is since we do not begin with RFC1001 session
744 * initialize frame).
745 */
746 cifs_set_port((struct sockaddr *)&server->dstaddr, CIFS_PORT);
747 cifs_reconnect(server);
748 wake_up(&server->response_q);
749 break;
750 default:
751 cERROR(1, "RFC 1002 unknown response type 0x%x", type);
752 cifs_reconnect(server);
753 }
754
755 return false;
756 }
757
758 static struct mid_q_entry *
759 find_mid(struct TCP_Server_Info *server, char *buffer)
760 {
761 struct smb_hdr *buf = (struct smb_hdr *)buffer;
762 struct mid_q_entry *mid;
763
764 spin_lock(&GlobalMid_Lock);
765 list_for_each_entry(mid, &server->pending_mid_q, qhead) {
766 if (mid->mid == buf->Mid &&
767 mid->mid_state == MID_REQUEST_SUBMITTED &&
768 le16_to_cpu(mid->command) == buf->Command) {
769 spin_unlock(&GlobalMid_Lock);
770 return mid;
771 }
772 }
773 spin_unlock(&GlobalMid_Lock);
774 return NULL;
775 }
776
777 void
778 dequeue_mid(struct mid_q_entry *mid, bool malformed)
779 {
780 #ifdef CONFIG_CIFS_STATS2
781 mid->when_received = jiffies;
782 #endif
783 spin_lock(&GlobalMid_Lock);
784 if (!malformed)
785 mid->mid_state = MID_RESPONSE_RECEIVED;
786 else
787 mid->mid_state = MID_RESPONSE_MALFORMED;
788 list_del_init(&mid->qhead);
789 spin_unlock(&GlobalMid_Lock);
790 }
791
792 static void
793 handle_mid(struct mid_q_entry *mid, struct TCP_Server_Info *server,
794 char *buf, int malformed)
795 {
796 if (malformed == 0 && check2ndT2(buf) > 0) {
797 mid->multiRsp = true;
798 if (mid->resp_buf) {
799 /* merge response - fix up 1st*/
800 malformed = coalesce_t2(buf, mid->resp_buf);
801 if (malformed > 0)
802 return;
803
804 /* All parts received or packet is malformed. */
805 mid->multiEnd = true;
806 return dequeue_mid(mid, malformed);
807 }
808 if (!server->large_buf) {
809 /*FIXME: switch to already allocated largebuf?*/
810 cERROR(1, "1st trans2 resp needs bigbuf");
811 } else {
812 /* Have first buffer */
813 mid->resp_buf = buf;
814 mid->large_buf = true;
815 server->bigbuf = NULL;
816 }
817 return;
818 }
819 mid->resp_buf = buf;
820 mid->large_buf = server->large_buf;
821 /* Was previous buf put in mpx struct for multi-rsp? */
822 if (!mid->multiRsp) {
823 /* smb buffer will be freed by user thread */
824 if (server->large_buf)
825 server->bigbuf = NULL;
826 else
827 server->smallbuf = NULL;
828 }
829 dequeue_mid(mid, malformed);
830 }
831
832 static void clean_demultiplex_info(struct TCP_Server_Info *server)
833 {
834 int length;
835
836 /* take it off the list, if it's not already */
837 spin_lock(&cifs_tcp_ses_lock);
838 list_del_init(&server->tcp_ses_list);
839 spin_unlock(&cifs_tcp_ses_lock);
840
841 spin_lock(&GlobalMid_Lock);
842 server->tcpStatus = CifsExiting;
843 spin_unlock(&GlobalMid_Lock);
844 wake_up_all(&server->response_q);
845
846 /* check if we have blocked requests that need to free */
847 spin_lock(&server->req_lock);
848 if (server->credits <= 0)
849 server->credits = 1;
850 spin_unlock(&server->req_lock);
851 /*
852 * Although there should not be any requests blocked on this queue it
853 * can not hurt to be paranoid and try to wake up requests that may
854 * haven been blocked when more than 50 at time were on the wire to the
855 * same server - they now will see the session is in exit state and get
856 * out of SendReceive.
857 */
858 wake_up_all(&server->request_q);
859 /* give those requests time to exit */
860 msleep(125);
861
862 if (server->ssocket) {
863 sock_release(server->ssocket);
864 server->ssocket = NULL;
865 }
866
867 if (!list_empty(&server->pending_mid_q)) {
868 struct list_head dispose_list;
869 struct mid_q_entry *mid_entry;
870 struct list_head *tmp, *tmp2;
871
872 INIT_LIST_HEAD(&dispose_list);
873 spin_lock(&GlobalMid_Lock);
874 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
875 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
876 cFYI(1, "Clearing mid 0x%llx", mid_entry->mid);
877 mid_entry->mid_state = MID_SHUTDOWN;
878 list_move(&mid_entry->qhead, &dispose_list);
879 }
880 spin_unlock(&GlobalMid_Lock);
881
882 /* now walk dispose list and issue callbacks */
883 list_for_each_safe(tmp, tmp2, &dispose_list) {
884 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
885 cFYI(1, "Callback mid 0x%llx", mid_entry->mid);
886 list_del_init(&mid_entry->qhead);
887 mid_entry->callback(mid_entry);
888 }
889 /* 1/8th of sec is more than enough time for them to exit */
890 msleep(125);
891 }
892
893 if (!list_empty(&server->pending_mid_q)) {
894 /*
895 * mpx threads have not exited yet give them at least the smb
896 * send timeout time for long ops.
897 *
898 * Due to delays on oplock break requests, we need to wait at
899 * least 45 seconds before giving up on a request getting a
900 * response and going ahead and killing cifsd.
901 */
902 cFYI(1, "Wait for exit from demultiplex thread");
903 msleep(46000);
904 /*
905 * If threads still have not exited they are probably never
906 * coming home not much else we can do but free the memory.
907 */
908 }
909
910 kfree(server->hostname);
911 kfree(server->iov);
912 kfree(server);
913
914 length = atomic_dec_return(&tcpSesAllocCount);
915 if (length > 0)
916 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
917 GFP_KERNEL);
918 }
919
920 static int
921 standard_receive3(struct TCP_Server_Info *server, struct mid_q_entry *mid)
922 {
923 int length;
924 char *buf = server->smallbuf;
925 unsigned int pdu_length = get_rfc1002_length(buf);
926
927 /* make sure this will fit in a large buffer */
928 if (pdu_length > CIFSMaxBufSize + max_header_size() - 4) {
929 cERROR(1, "SMB response too long (%u bytes)",
930 pdu_length);
931 cifs_reconnect(server);
932 wake_up(&server->response_q);
933 return -EAGAIN;
934 }
935
936 /* switch to large buffer if too big for a small one */
937 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
938 server->large_buf = true;
939 memcpy(server->bigbuf, buf, server->total_read);
940 buf = server->bigbuf;
941 }
942
943 /* now read the rest */
944 length = cifs_read_from_socket(server, buf + header_size() - 1,
945 pdu_length - header_size() + 1 + 4);
946 if (length < 0)
947 return length;
948 server->total_read += length;
949
950 dump_smb(buf, server->total_read);
951
952 /*
953 * We know that we received enough to get to the MID as we
954 * checked the pdu_length earlier. Now check to see
955 * if the rest of the header is OK. We borrow the length
956 * var for the rest of the loop to avoid a new stack var.
957 *
958 * 48 bytes is enough to display the header and a little bit
959 * into the payload for debugging purposes.
960 */
961 length = checkSMB(buf, server->total_read);
962 if (length != 0)
963 cifs_dump_mem("Bad SMB: ", buf,
964 min_t(unsigned int, server->total_read, 48));
965
966 if (!mid)
967 return length;
968
969 handle_mid(mid, server, buf, length);
970 return 0;
971 }
972
973 static int
974 cifs_demultiplex_thread(void *p)
975 {
976 int length;
977 struct TCP_Server_Info *server = p;
978 unsigned int pdu_length;
979 char *buf = NULL;
980 struct task_struct *task_to_wake = NULL;
981 struct mid_q_entry *mid_entry;
982
983 current->flags |= PF_MEMALLOC;
984 cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
985
986 length = atomic_inc_return(&tcpSesAllocCount);
987 if (length > 1)
988 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
989 GFP_KERNEL);
990
991 set_freezable();
992 while (server->tcpStatus != CifsExiting) {
993 if (try_to_freeze())
994 continue;
995
996 if (!allocate_buffers(server))
997 continue;
998
999 server->large_buf = false;
1000 buf = server->smallbuf;
1001 pdu_length = 4; /* enough to get RFC1001 header */
1002
1003 length = cifs_read_from_socket(server, buf, pdu_length);
1004 if (length < 0)
1005 continue;
1006 server->total_read = length;
1007
1008 /*
1009 * The right amount was read from socket - 4 bytes,
1010 * so we can now interpret the length field.
1011 */
1012 pdu_length = get_rfc1002_length(buf);
1013
1014 cFYI(1, "RFC1002 header 0x%x", pdu_length);
1015 if (!is_smb_response(server, buf[0]))
1016 continue;
1017
1018 /* make sure we have enough to get to the MID */
1019 if (pdu_length < header_size() - 1 - 4) {
1020 cERROR(1, "SMB response too short (%u bytes)",
1021 pdu_length);
1022 cifs_reconnect(server);
1023 wake_up(&server->response_q);
1024 continue;
1025 }
1026
1027 /* read down to the MID */
1028 length = cifs_read_from_socket(server, buf + 4,
1029 header_size() - 1 - 4);
1030 if (length < 0)
1031 continue;
1032 server->total_read += length;
1033
1034 mid_entry = find_mid(server, buf);
1035
1036 if (!mid_entry || !mid_entry->receive)
1037 length = standard_receive3(server, mid_entry);
1038 else
1039 length = mid_entry->receive(server, mid_entry);
1040
1041 if (length < 0)
1042 continue;
1043
1044 if (server->large_buf)
1045 buf = server->bigbuf;
1046
1047 server->lstrp = jiffies;
1048 if (mid_entry != NULL) {
1049 if (!mid_entry->multiRsp || mid_entry->multiEnd)
1050 mid_entry->callback(mid_entry);
1051 } else if (!is_valid_oplock_break(buf, server)) {
1052 cERROR(1, "No task to wake, unknown frame received! "
1053 "NumMids %d", atomic_read(&midCount));
1054 cifs_dump_mem("Received Data is: ", buf, header_size());
1055 #ifdef CONFIG_CIFS_DEBUG2
1056 cifs_dump_detail(buf);
1057 cifs_dump_mids(server);
1058 #endif /* CIFS_DEBUG2 */
1059
1060 }
1061 } /* end while !EXITING */
1062
1063 /* buffer usually freed in free_mid - need to free it here on exit */
1064 cifs_buf_release(server->bigbuf);
1065 if (server->smallbuf) /* no sense logging a debug message if NULL */
1066 cifs_small_buf_release(server->smallbuf);
1067
1068 task_to_wake = xchg(&server->tsk, NULL);
1069 clean_demultiplex_info(server);
1070
1071 /* if server->tsk was NULL then wait for a signal before exiting */
1072 if (!task_to_wake) {
1073 set_current_state(TASK_INTERRUPTIBLE);
1074 while (!signal_pending(current)) {
1075 schedule();
1076 set_current_state(TASK_INTERRUPTIBLE);
1077 }
1078 set_current_state(TASK_RUNNING);
1079 }
1080
1081 module_put_and_exit(0);
1082 }
1083
1084 /* extract the host portion of the UNC string */
1085 static char *
1086 extract_hostname(const char *unc)
1087 {
1088 const char *src;
1089 char *dst, *delim;
1090 unsigned int len;
1091
1092 /* skip double chars at beginning of string */
1093 /* BB: check validity of these bytes? */
1094 src = unc + 2;
1095
1096 /* delimiter between hostname and sharename is always '\\' now */
1097 delim = strchr(src, '\\');
1098 if (!delim)
1099 return ERR_PTR(-EINVAL);
1100
1101 len = delim - src;
1102 dst = kmalloc((len + 1), GFP_KERNEL);
1103 if (dst == NULL)
1104 return ERR_PTR(-ENOMEM);
1105
1106 memcpy(dst, src, len);
1107 dst[len] = '\0';
1108
1109 return dst;
1110 }
1111
1112 static int get_option_ul(substring_t args[], unsigned long *option)
1113 {
1114 int rc;
1115 char *string;
1116
1117 string = match_strdup(args);
1118 if (string == NULL)
1119 return -ENOMEM;
1120 rc = kstrtoul(string, 10, option);
1121 kfree(string);
1122
1123 return rc;
1124 }
1125
1126
1127 static int cifs_parse_security_flavors(char *value,
1128 struct smb_vol *vol)
1129 {
1130
1131 substring_t args[MAX_OPT_ARGS];
1132
1133 switch (match_token(value, cifs_secflavor_tokens, args)) {
1134 case Opt_sec_krb5:
1135 vol->secFlg |= CIFSSEC_MAY_KRB5;
1136 break;
1137 case Opt_sec_krb5i:
1138 vol->secFlg |= CIFSSEC_MAY_KRB5 | CIFSSEC_MUST_SIGN;
1139 break;
1140 case Opt_sec_krb5p:
1141 /* vol->secFlg |= CIFSSEC_MUST_SEAL | CIFSSEC_MAY_KRB5; */
1142 cERROR(1, "Krb5 cifs privacy not supported");
1143 break;
1144 case Opt_sec_ntlmssp:
1145 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
1146 break;
1147 case Opt_sec_ntlmsspi:
1148 vol->secFlg |= CIFSSEC_MAY_NTLMSSP | CIFSSEC_MUST_SIGN;
1149 break;
1150 case Opt_ntlm:
1151 /* ntlm is default so can be turned off too */
1152 vol->secFlg |= CIFSSEC_MAY_NTLM;
1153 break;
1154 case Opt_sec_ntlmi:
1155 vol->secFlg |= CIFSSEC_MAY_NTLM | CIFSSEC_MUST_SIGN;
1156 break;
1157 case Opt_sec_nontlm:
1158 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1159 break;
1160 case Opt_sec_ntlmv2i:
1161 vol->secFlg |= CIFSSEC_MAY_NTLMV2 | CIFSSEC_MUST_SIGN;
1162 break;
1163 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1164 case Opt_sec_lanman:
1165 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1166 break;
1167 #endif
1168 case Opt_sec_none:
1169 vol->nullauth = 1;
1170 break;
1171 default:
1172 cERROR(1, "bad security option: %s", value);
1173 return 1;
1174 }
1175
1176 return 0;
1177 }
1178
1179 static int
1180 cifs_parse_mount_options(const char *mountdata, const char *devname,
1181 struct smb_vol *vol)
1182 {
1183 char *data, *end;
1184 char *mountdata_copy = NULL, *options;
1185 unsigned int temp_len, i, j;
1186 char separator[2];
1187 short int override_uid = -1;
1188 short int override_gid = -1;
1189 bool uid_specified = false;
1190 bool gid_specified = false;
1191 bool sloppy = false;
1192 char *invalid = NULL;
1193 char *nodename = utsname()->nodename;
1194 char *string = NULL;
1195 char *tmp_end, *value;
1196 char delim;
1197
1198 separator[0] = ',';
1199 separator[1] = 0;
1200 delim = separator[0];
1201
1202 /*
1203 * does not have to be perfect mapping since field is
1204 * informational, only used for servers that do not support
1205 * port 445 and it can be overridden at mount time
1206 */
1207 memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
1208 for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
1209 vol->source_rfc1001_name[i] = toupper(nodename[i]);
1210
1211 vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
1212 /* null target name indicates to use *SMBSERVR default called name
1213 if we end up sending RFC1001 session initialize */
1214 vol->target_rfc1001_name[0] = 0;
1215 vol->cred_uid = current_uid();
1216 vol->linux_uid = current_uid();
1217 vol->linux_gid = current_gid();
1218
1219 /* default to only allowing write access to owner of the mount */
1220 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
1221
1222 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
1223 /* default is always to request posix paths. */
1224 vol->posix_paths = 1;
1225 /* default to using server inode numbers where available */
1226 vol->server_ino = 1;
1227
1228 vol->actimeo = CIFS_DEF_ACTIMEO;
1229
1230 if (!mountdata)
1231 goto cifs_parse_mount_err;
1232
1233 mountdata_copy = kstrndup(mountdata, PAGE_SIZE, GFP_KERNEL);
1234 if (!mountdata_copy)
1235 goto cifs_parse_mount_err;
1236
1237 options = mountdata_copy;
1238 end = options + strlen(options);
1239
1240 if (strncmp(options, "sep=", 4) == 0) {
1241 if (options[4] != 0) {
1242 separator[0] = options[4];
1243 options += 5;
1244 } else {
1245 cFYI(1, "Null separator not allowed");
1246 }
1247 }
1248 vol->backupuid_specified = false; /* no backup intent for a user */
1249 vol->backupgid_specified = false; /* no backup intent for a group */
1250
1251 while ((data = strsep(&options, separator)) != NULL) {
1252 substring_t args[MAX_OPT_ARGS];
1253 unsigned long option;
1254 int token;
1255
1256 if (!*data)
1257 continue;
1258
1259 token = match_token(data, cifs_mount_option_tokens, args);
1260
1261 switch (token) {
1262
1263 /* Ingnore the following */
1264 case Opt_ignore:
1265 break;
1266
1267 /* Boolean values */
1268 case Opt_user_xattr:
1269 vol->no_xattr = 0;
1270 break;
1271 case Opt_nouser_xattr:
1272 vol->no_xattr = 1;
1273 break;
1274 case Opt_forceuid:
1275 override_uid = 1;
1276 break;
1277 case Opt_noforceuid:
1278 override_uid = 0;
1279 break;
1280 case Opt_noblocksend:
1281 vol->noblocksnd = 1;
1282 break;
1283 case Opt_noautotune:
1284 vol->noautotune = 1;
1285 break;
1286 case Opt_hard:
1287 vol->retry = 1;
1288 break;
1289 case Opt_soft:
1290 vol->retry = 0;
1291 break;
1292 case Opt_perm:
1293 vol->noperm = 0;
1294 break;
1295 case Opt_noperm:
1296 vol->noperm = 1;
1297 break;
1298 case Opt_mapchars:
1299 vol->remap = 1;
1300 break;
1301 case Opt_nomapchars:
1302 vol->remap = 0;
1303 break;
1304 case Opt_sfu:
1305 vol->sfu_emul = 1;
1306 break;
1307 case Opt_nosfu:
1308 vol->sfu_emul = 0;
1309 break;
1310 case Opt_nodfs:
1311 vol->nodfs = 1;
1312 break;
1313 case Opt_posixpaths:
1314 vol->posix_paths = 1;
1315 break;
1316 case Opt_noposixpaths:
1317 vol->posix_paths = 0;
1318 break;
1319 case Opt_nounix:
1320 vol->no_linux_ext = 1;
1321 break;
1322 case Opt_nocase:
1323 vol->nocase = 1;
1324 break;
1325 case Opt_brl:
1326 vol->nobrl = 0;
1327 break;
1328 case Opt_nobrl:
1329 vol->nobrl = 1;
1330 /*
1331 * turn off mandatory locking in mode
1332 * if remote locking is turned off since the
1333 * local vfs will do advisory
1334 */
1335 if (vol->file_mode ==
1336 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1337 vol->file_mode = S_IALLUGO;
1338 break;
1339 case Opt_forcemandatorylock:
1340 vol->mand_lock = 1;
1341 break;
1342 case Opt_setuids:
1343 vol->setuids = 1;
1344 break;
1345 case Opt_nosetuids:
1346 vol->setuids = 0;
1347 break;
1348 case Opt_dynperm:
1349 vol->dynperm = true;
1350 break;
1351 case Opt_nodynperm:
1352 vol->dynperm = false;
1353 break;
1354 case Opt_nohard:
1355 vol->retry = 0;
1356 break;
1357 case Opt_nosoft:
1358 vol->retry = 1;
1359 break;
1360 case Opt_nointr:
1361 vol->intr = 0;
1362 break;
1363 case Opt_intr:
1364 vol->intr = 1;
1365 break;
1366 case Opt_nostrictsync:
1367 vol->nostrictsync = 1;
1368 break;
1369 case Opt_strictsync:
1370 vol->nostrictsync = 0;
1371 break;
1372 case Opt_serverino:
1373 vol->server_ino = 1;
1374 break;
1375 case Opt_noserverino:
1376 vol->server_ino = 0;
1377 break;
1378 case Opt_rwpidforward:
1379 vol->rwpidforward = 1;
1380 break;
1381 case Opt_cifsacl:
1382 vol->cifs_acl = 1;
1383 break;
1384 case Opt_nocifsacl:
1385 vol->cifs_acl = 0;
1386 break;
1387 case Opt_acl:
1388 vol->no_psx_acl = 0;
1389 break;
1390 case Opt_noacl:
1391 vol->no_psx_acl = 1;
1392 break;
1393 case Opt_locallease:
1394 vol->local_lease = 1;
1395 break;
1396 case Opt_sign:
1397 vol->secFlg |= CIFSSEC_MUST_SIGN;
1398 break;
1399 case Opt_seal:
1400 /* we do not do the following in secFlags because seal
1401 * is a per tree connection (mount) not a per socket
1402 * or per-smb connection option in the protocol
1403 * vol->secFlg |= CIFSSEC_MUST_SEAL;
1404 */
1405 vol->seal = 1;
1406 break;
1407 case Opt_direct:
1408 vol->direct_io = 1;
1409 break;
1410 case Opt_strictcache:
1411 vol->strict_io = 1;
1412 break;
1413 case Opt_noac:
1414 printk(KERN_WARNING "CIFS: Mount option noac not "
1415 "supported. Instead set "
1416 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1417 break;
1418 case Opt_fsc:
1419 #ifndef CONFIG_CIFS_FSCACHE
1420 cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE "
1421 "kernel config option set");
1422 goto cifs_parse_mount_err;
1423 #endif
1424 vol->fsc = true;
1425 break;
1426 case Opt_mfsymlinks:
1427 vol->mfsymlinks = true;
1428 break;
1429 case Opt_multiuser:
1430 vol->multiuser = true;
1431 break;
1432 case Opt_sloppy:
1433 sloppy = true;
1434 break;
1435
1436 /* Numeric Values */
1437 case Opt_backupuid:
1438 if (get_option_ul(args, &option)) {
1439 cERROR(1, "%s: Invalid backupuid value",
1440 __func__);
1441 goto cifs_parse_mount_err;
1442 }
1443 vol->backupuid = option;
1444 vol->backupuid_specified = true;
1445 break;
1446 case Opt_backupgid:
1447 if (get_option_ul(args, &option)) {
1448 cERROR(1, "%s: Invalid backupgid value",
1449 __func__);
1450 goto cifs_parse_mount_err;
1451 }
1452 vol->backupgid = option;
1453 vol->backupgid_specified = true;
1454 break;
1455 case Opt_uid:
1456 if (get_option_ul(args, &option)) {
1457 cERROR(1, "%s: Invalid uid value",
1458 __func__);
1459 goto cifs_parse_mount_err;
1460 }
1461 vol->linux_uid = option;
1462 uid_specified = true;
1463 break;
1464 case Opt_cruid:
1465 if (get_option_ul(args, &option)) {
1466 cERROR(1, "%s: Invalid cruid value",
1467 __func__);
1468 goto cifs_parse_mount_err;
1469 }
1470 vol->cred_uid = option;
1471 break;
1472 case Opt_gid:
1473 if (get_option_ul(args, &option)) {
1474 cERROR(1, "%s: Invalid gid value",
1475 __func__);
1476 goto cifs_parse_mount_err;
1477 }
1478 vol->linux_gid = option;
1479 gid_specified = true;
1480 break;
1481 case Opt_file_mode:
1482 if (get_option_ul(args, &option)) {
1483 cERROR(1, "%s: Invalid file_mode value",
1484 __func__);
1485 goto cifs_parse_mount_err;
1486 }
1487 vol->file_mode = option;
1488 break;
1489 case Opt_dirmode:
1490 if (get_option_ul(args, &option)) {
1491 cERROR(1, "%s: Invalid dir_mode value",
1492 __func__);
1493 goto cifs_parse_mount_err;
1494 }
1495 vol->dir_mode = option;
1496 break;
1497 case Opt_port:
1498 if (get_option_ul(args, &option)) {
1499 cERROR(1, "%s: Invalid port value",
1500 __func__);
1501 goto cifs_parse_mount_err;
1502 }
1503 vol->port = option;
1504 break;
1505 case Opt_rsize:
1506 if (get_option_ul(args, &option)) {
1507 cERROR(1, "%s: Invalid rsize value",
1508 __func__);
1509 goto cifs_parse_mount_err;
1510 }
1511 vol->rsize = option;
1512 break;
1513 case Opt_wsize:
1514 if (get_option_ul(args, &option)) {
1515 cERROR(1, "%s: Invalid wsize value",
1516 __func__);
1517 goto cifs_parse_mount_err;
1518 }
1519 vol->wsize = option;
1520 break;
1521 case Opt_actimeo:
1522 if (get_option_ul(args, &option)) {
1523 cERROR(1, "%s: Invalid actimeo value",
1524 __func__);
1525 goto cifs_parse_mount_err;
1526 }
1527 vol->actimeo = HZ * option;
1528 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1529 cERROR(1, "CIFS: attribute cache"
1530 "timeout too large");
1531 goto cifs_parse_mount_err;
1532 }
1533 break;
1534
1535 /* String Arguments */
1536
1537 case Opt_user:
1538 string = match_strdup(args);
1539 if (string == NULL)
1540 goto out_nomem;
1541
1542 if (!*string) {
1543 /* null user, ie. anonymous authentication */
1544 vol->nullauth = 1;
1545 } else if (strnlen(string, MAX_USERNAME_SIZE) >
1546 MAX_USERNAME_SIZE) {
1547 printk(KERN_WARNING "CIFS: username too long\n");
1548 goto cifs_parse_mount_err;
1549 }
1550 vol->username = kstrdup(string, GFP_KERNEL);
1551 if (!vol->username) {
1552 printk(KERN_WARNING "CIFS: no memory "
1553 "for username\n");
1554 goto cifs_parse_mount_err;
1555 }
1556 break;
1557 case Opt_blank_pass:
1558 vol->password = NULL;
1559 break;
1560 case Opt_pass:
1561 /* passwords have to be handled differently
1562 * to allow the character used for deliminator
1563 * to be passed within them
1564 */
1565
1566 /* Obtain the value string */
1567 value = strchr(data, '=');
1568 value++;
1569
1570 /* Set tmp_end to end of the string */
1571 tmp_end = (char *) value + strlen(value);
1572
1573 /* Check if following character is the deliminator
1574 * If yes, we have encountered a double deliminator
1575 * reset the NULL character to the deliminator
1576 */
1577 if (tmp_end < end && tmp_end[1] == delim)
1578 tmp_end[0] = delim;
1579
1580 /* Keep iterating until we get to a single deliminator
1581 * OR the end
1582 */
1583 while ((tmp_end = strchr(tmp_end, delim)) != NULL &&
1584 (tmp_end[1] == delim)) {
1585 tmp_end = (char *) &tmp_end[2];
1586 }
1587
1588 /* Reset var options to point to next element */
1589 if (tmp_end) {
1590 tmp_end[0] = '\0';
1591 options = (char *) &tmp_end[1];
1592 } else
1593 /* Reached the end of the mount option string */
1594 options = end;
1595
1596 /* Now build new password string */
1597 temp_len = strlen(value);
1598 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
1599 if (vol->password == NULL) {
1600 printk(KERN_WARNING "CIFS: no memory "
1601 "for password\n");
1602 goto cifs_parse_mount_err;
1603 }
1604
1605 for (i = 0, j = 0; i < temp_len; i++, j++) {
1606 vol->password[j] = value[i];
1607 if ((value[i] == delim) &&
1608 value[i+1] == delim)
1609 /* skip the second deliminator */
1610 i++;
1611 }
1612 vol->password[j] = '\0';
1613 break;
1614 case Opt_ip:
1615 string = match_strdup(args);
1616 if (string == NULL)
1617 goto out_nomem;
1618
1619 if (!*string) {
1620 vol->UNCip = NULL;
1621 } else if (strnlen(string, INET6_ADDRSTRLEN) >
1622 INET6_ADDRSTRLEN) {
1623 printk(KERN_WARNING "CIFS: ip address "
1624 "too long\n");
1625 goto cifs_parse_mount_err;
1626 }
1627 vol->UNCip = kstrdup(string, GFP_KERNEL);
1628 if (!vol->UNCip) {
1629 printk(KERN_WARNING "CIFS: no memory "
1630 "for UNC IP\n");
1631 goto cifs_parse_mount_err;
1632 }
1633 break;
1634 case Opt_unc:
1635 string = match_strdup(args);
1636 if (string == NULL)
1637 goto out_nomem;
1638
1639 if (!*string) {
1640 printk(KERN_WARNING "CIFS: invalid path to "
1641 "network resource\n");
1642 goto cifs_parse_mount_err;
1643 }
1644
1645 temp_len = strnlen(string, 300);
1646 if (temp_len == 300) {
1647 printk(KERN_WARNING "CIFS: UNC name too long\n");
1648 goto cifs_parse_mount_err;
1649 }
1650
1651 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1652 if (vol->UNC == NULL) {
1653 printk(KERN_WARNING "CIFS: no memory for UNC\n");
1654 goto cifs_parse_mount_err;
1655 }
1656 strcpy(vol->UNC, string);
1657
1658 if (strncmp(string, "//", 2) == 0) {
1659 vol->UNC[0] = '\\';
1660 vol->UNC[1] = '\\';
1661 } else if (strncmp(string, "\\\\", 2) != 0) {
1662 printk(KERN_WARNING "CIFS: UNC Path does not "
1663 "begin with // or \\\\\n");
1664 goto cifs_parse_mount_err;
1665 }
1666
1667 break;
1668 case Opt_domain:
1669 string = match_strdup(args);
1670 if (string == NULL)
1671 goto out_nomem;
1672
1673 if (!*string) {
1674 printk(KERN_WARNING "CIFS: invalid domain"
1675 " name\n");
1676 goto cifs_parse_mount_err;
1677 } else if (strnlen(string, 256) == 256) {
1678 printk(KERN_WARNING "CIFS: domain name too"
1679 " long\n");
1680 goto cifs_parse_mount_err;
1681 }
1682
1683 vol->domainname = kstrdup(string, GFP_KERNEL);
1684 if (!vol->domainname) {
1685 printk(KERN_WARNING "CIFS: no memory "
1686 "for domainname\n");
1687 goto cifs_parse_mount_err;
1688 }
1689 cFYI(1, "Domain name set");
1690 break;
1691 case Opt_srcaddr:
1692 string = match_strdup(args);
1693 if (string == NULL)
1694 goto out_nomem;
1695
1696 if (!*string) {
1697 printk(KERN_WARNING "CIFS: srcaddr value not"
1698 " specified\n");
1699 goto cifs_parse_mount_err;
1700 } else if (!cifs_convert_address(
1701 (struct sockaddr *)&vol->srcaddr,
1702 string, strlen(string))) {
1703 printk(KERN_WARNING "CIFS: Could not parse"
1704 " srcaddr: %s\n", string);
1705 goto cifs_parse_mount_err;
1706 }
1707 break;
1708 case Opt_prefixpath:
1709 string = match_strdup(args);
1710 if (string == NULL)
1711 goto out_nomem;
1712
1713 if (!*string) {
1714 printk(KERN_WARNING "CIFS: Invalid path"
1715 " prefix\n");
1716 goto cifs_parse_mount_err;
1717 }
1718 temp_len = strnlen(string, 1024);
1719 if (string[0] != '/')
1720 temp_len++; /* missing leading slash */
1721 if (temp_len > 1024) {
1722 printk(KERN_WARNING "CIFS: prefix too long\n");
1723 goto cifs_parse_mount_err;
1724 }
1725
1726 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1727 if (vol->prepath == NULL) {
1728 printk(KERN_WARNING "CIFS: no memory "
1729 "for path prefix\n");
1730 goto cifs_parse_mount_err;
1731 }
1732
1733 if (string[0] != '/') {
1734 vol->prepath[0] = '/';
1735 strcpy(vol->prepath+1, string);
1736 } else
1737 strcpy(vol->prepath, string);
1738
1739 break;
1740 case Opt_iocharset:
1741 string = match_strdup(args);
1742 if (string == NULL)
1743 goto out_nomem;
1744
1745 if (!*string) {
1746 printk(KERN_WARNING "CIFS: Invalid iocharset"
1747 " specified\n");
1748 goto cifs_parse_mount_err;
1749 } else if (strnlen(string, 1024) >= 65) {
1750 printk(KERN_WARNING "CIFS: iocharset name "
1751 "too long.\n");
1752 goto cifs_parse_mount_err;
1753 }
1754
1755 if (strnicmp(string, "default", 7) != 0) {
1756 vol->iocharset = kstrdup(string,
1757 GFP_KERNEL);
1758 if (!vol->iocharset) {
1759 printk(KERN_WARNING "CIFS: no memory"
1760 "for charset\n");
1761 goto cifs_parse_mount_err;
1762 }
1763 }
1764 /* if iocharset not set then load_nls_default
1765 * is used by caller
1766 */
1767 cFYI(1, "iocharset set to %s", string);
1768 break;
1769 case Opt_sockopt:
1770 string = match_strdup(args);
1771 if (string == NULL)
1772 goto out_nomem;
1773
1774 if (!*string) {
1775 printk(KERN_WARNING "CIFS: No socket option"
1776 " specified\n");
1777 goto cifs_parse_mount_err;
1778 }
1779 if (strnicmp(string, "TCP_NODELAY", 11) == 0)
1780 vol->sockopt_tcp_nodelay = 1;
1781 break;
1782 case Opt_netbiosname:
1783 string = match_strdup(args);
1784 if (string == NULL)
1785 goto out_nomem;
1786
1787 if (!*string) {
1788 printk(KERN_WARNING "CIFS: Invalid (empty)"
1789 " netbiosname\n");
1790 break;
1791 }
1792
1793 memset(vol->source_rfc1001_name, 0x20,
1794 RFC1001_NAME_LEN);
1795 /*
1796 * FIXME: are there cases in which a comma can
1797 * be valid in workstation netbios name (and
1798 * need special handling)?
1799 */
1800 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1801 /* don't ucase netbiosname for user */
1802 if (string[i] == 0)
1803 break;
1804 vol->source_rfc1001_name[i] = string[i];
1805 }
1806 /* The string has 16th byte zero still from
1807 * set at top of the function
1808 */
1809 if (i == RFC1001_NAME_LEN && string[i] != 0)
1810 printk(KERN_WARNING "CIFS: netbiosname"
1811 " longer than 15 truncated.\n");
1812
1813 break;
1814 case Opt_servern:
1815 /* servernetbiosname specified override *SMBSERVER */
1816 string = match_strdup(args);
1817 if (string == NULL)
1818 goto out_nomem;
1819
1820 if (!*string) {
1821 printk(KERN_WARNING "CIFS: Empty server"
1822 " netbiosname specified\n");
1823 break;
1824 }
1825 /* last byte, type, is 0x20 for servr type */
1826 memset(vol->target_rfc1001_name, 0x20,
1827 RFC1001_NAME_LEN_WITH_NULL);
1828
1829 /* BB are there cases in which a comma can be
1830 valid in this workstation netbios name
1831 (and need special handling)? */
1832
1833 /* user or mount helper must uppercase the
1834 netbios name */
1835 for (i = 0; i < 15; i++) {
1836 if (string[i] == 0)
1837 break;
1838 vol->target_rfc1001_name[i] = string[i];
1839 }
1840 /* The string has 16th byte zero still from
1841 set at top of the function */
1842 if (i == RFC1001_NAME_LEN && string[i] != 0)
1843 printk(KERN_WARNING "CIFS: server net"
1844 "biosname longer than 15 truncated.\n");
1845 break;
1846 case Opt_ver:
1847 string = match_strdup(args);
1848 if (string == NULL)
1849 goto out_nomem;
1850
1851 if (!*string) {
1852 cERROR(1, "no protocol version specified"
1853 " after vers= mount option");
1854 goto cifs_parse_mount_err;
1855 }
1856
1857 if (strnicmp(string, "cifs", 4) == 0 ||
1858 strnicmp(string, "1", 1) == 0) {
1859 /* This is the default */
1860 break;
1861 }
1862 /* For all other value, error */
1863 printk(KERN_WARNING "CIFS: Invalid version"
1864 " specified\n");
1865 goto cifs_parse_mount_err;
1866 case Opt_sec:
1867 string = match_strdup(args);
1868 if (string == NULL)
1869 goto out_nomem;
1870
1871 if (!*string) {
1872 printk(KERN_WARNING "CIFS: no security flavor"
1873 " specified\n");
1874 break;
1875 }
1876
1877 if (cifs_parse_security_flavors(string, vol) != 0)
1878 goto cifs_parse_mount_err;
1879 break;
1880 default:
1881 /*
1882 * An option we don't recognize. Save it off for later
1883 * if we haven't already found one
1884 */
1885 if (!invalid)
1886 invalid = data;
1887 break;
1888 }
1889 /* Free up any allocated string */
1890 kfree(string);
1891 string = NULL;
1892 }
1893
1894 if (!sloppy && invalid) {
1895 printk(KERN_ERR "CIFS: Unknown mount option \"%s\"\n", invalid);
1896 goto cifs_parse_mount_err;
1897 }
1898
1899 #ifndef CONFIG_KEYS
1900 /* Muliuser mounts require CONFIG_KEYS support */
1901 if (vol->multiuser) {
1902 cERROR(1, "Multiuser mounts require kernels with "
1903 "CONFIG_KEYS enabled.");
1904 goto cifs_parse_mount_err;
1905 }
1906 #endif
1907
1908 if (vol->UNCip == NULL)
1909 vol->UNCip = &vol->UNC[2];
1910
1911 if (uid_specified)
1912 vol->override_uid = override_uid;
1913 else if (override_uid == 1)
1914 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1915 "specified with no uid= option.\n");
1916
1917 if (gid_specified)
1918 vol->override_gid = override_gid;
1919 else if (override_gid == 1)
1920 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1921 "specified with no gid= option.\n");
1922
1923 kfree(mountdata_copy);
1924 return 0;
1925
1926 out_nomem:
1927 printk(KERN_WARNING "Could not allocate temporary buffer\n");
1928 cifs_parse_mount_err:
1929 kfree(string);
1930 kfree(mountdata_copy);
1931 return 1;
1932 }
1933
1934 /** Returns true if srcaddr isn't specified and rhs isn't
1935 * specified, or if srcaddr is specified and
1936 * matches the IP address of the rhs argument.
1937 */
1938 static bool
1939 srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1940 {
1941 switch (srcaddr->sa_family) {
1942 case AF_UNSPEC:
1943 return (rhs->sa_family == AF_UNSPEC);
1944 case AF_INET: {
1945 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1946 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1947 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1948 }
1949 case AF_INET6: {
1950 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1951 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1952 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1953 }
1954 default:
1955 WARN_ON(1);
1956 return false; /* don't expect to be here */
1957 }
1958 }
1959
1960 /*
1961 * If no port is specified in addr structure, we try to match with 445 port
1962 * and if it fails - with 139 ports. It should be called only if address
1963 * families of server and addr are equal.
1964 */
1965 static bool
1966 match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1967 {
1968 __be16 port, *sport;
1969
1970 switch (addr->sa_family) {
1971 case AF_INET:
1972 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1973 port = ((struct sockaddr_in *) addr)->sin_port;
1974 break;
1975 case AF_INET6:
1976 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1977 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1978 break;
1979 default:
1980 WARN_ON(1);
1981 return false;
1982 }
1983
1984 if (!port) {
1985 port = htons(CIFS_PORT);
1986 if (port == *sport)
1987 return true;
1988
1989 port = htons(RFC1001_PORT);
1990 }
1991
1992 return port == *sport;
1993 }
1994
1995 static bool
1996 match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1997 struct sockaddr *srcaddr)
1998 {
1999 switch (addr->sa_family) {
2000 case AF_INET: {
2001 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
2002 struct sockaddr_in *srv_addr4 =
2003 (struct sockaddr_in *)&server->dstaddr;
2004
2005 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
2006 return false;
2007 break;
2008 }
2009 case AF_INET6: {
2010 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
2011 struct sockaddr_in6 *srv_addr6 =
2012 (struct sockaddr_in6 *)&server->dstaddr;
2013
2014 if (!ipv6_addr_equal(&addr6->sin6_addr,
2015 &srv_addr6->sin6_addr))
2016 return false;
2017 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
2018 return false;
2019 break;
2020 }
2021 default:
2022 WARN_ON(1);
2023 return false; /* don't expect to be here */
2024 }
2025
2026 if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
2027 return false;
2028
2029 return true;
2030 }
2031
2032 static bool
2033 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
2034 {
2035 unsigned int secFlags;
2036
2037 if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
2038 secFlags = vol->secFlg;
2039 else
2040 secFlags = global_secflags | vol->secFlg;
2041
2042 switch (server->secType) {
2043 case LANMAN:
2044 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
2045 return false;
2046 break;
2047 case NTLMv2:
2048 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
2049 return false;
2050 break;
2051 case NTLM:
2052 if (!(secFlags & CIFSSEC_MAY_NTLM))
2053 return false;
2054 break;
2055 case Kerberos:
2056 if (!(secFlags & CIFSSEC_MAY_KRB5))
2057 return false;
2058 break;
2059 case RawNTLMSSP:
2060 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
2061 return false;
2062 break;
2063 default:
2064 /* shouldn't happen */
2065 return false;
2066 }
2067
2068 /* now check if signing mode is acceptable */
2069 if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
2070 (server->sec_mode & SECMODE_SIGN_REQUIRED))
2071 return false;
2072 else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
2073 (server->sec_mode &
2074 (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
2075 return false;
2076
2077 return true;
2078 }
2079
2080 static int match_server(struct TCP_Server_Info *server, struct sockaddr *addr,
2081 struct smb_vol *vol)
2082 {
2083 if (!net_eq(cifs_net_ns(server), current->nsproxy->net_ns))
2084 return 0;
2085
2086 if (!match_address(server, addr,
2087 (struct sockaddr *)&vol->srcaddr))
2088 return 0;
2089
2090 if (!match_port(server, addr))
2091 return 0;
2092
2093 if (!match_security(server, vol))
2094 return 0;
2095
2096 return 1;
2097 }
2098
2099 static struct TCP_Server_Info *
2100 cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
2101 {
2102 struct TCP_Server_Info *server;
2103
2104 spin_lock(&cifs_tcp_ses_lock);
2105 list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
2106 if (!match_server(server, addr, vol))
2107 continue;
2108
2109 ++server->srv_count;
2110 spin_unlock(&cifs_tcp_ses_lock);
2111 cFYI(1, "Existing tcp session with server found");
2112 return server;
2113 }
2114 spin_unlock(&cifs_tcp_ses_lock);
2115 return NULL;
2116 }
2117
2118 static void
2119 cifs_put_tcp_session(struct TCP_Server_Info *server)
2120 {
2121 struct task_struct *task;
2122
2123 spin_lock(&cifs_tcp_ses_lock);
2124 if (--server->srv_count > 0) {
2125 spin_unlock(&cifs_tcp_ses_lock);
2126 return;
2127 }
2128
2129 put_net(cifs_net_ns(server));
2130
2131 list_del_init(&server->tcp_ses_list);
2132 spin_unlock(&cifs_tcp_ses_lock);
2133
2134 cancel_delayed_work_sync(&server->echo);
2135
2136 spin_lock(&GlobalMid_Lock);
2137 server->tcpStatus = CifsExiting;
2138 spin_unlock(&GlobalMid_Lock);
2139
2140 cifs_crypto_shash_release(server);
2141 cifs_fscache_release_client_cookie(server);
2142
2143 kfree(server->session_key.response);
2144 server->session_key.response = NULL;
2145 server->session_key.len = 0;
2146
2147 task = xchg(&server->tsk, NULL);
2148 if (task)
2149 force_sig(SIGKILL, task);
2150 }
2151
2152 static struct TCP_Server_Info *
2153 cifs_get_tcp_session(struct smb_vol *volume_info)
2154 {
2155 struct TCP_Server_Info *tcp_ses = NULL;
2156 struct sockaddr_storage addr;
2157 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
2158 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
2159 int rc;
2160
2161 memset(&addr, 0, sizeof(struct sockaddr_storage));
2162
2163 cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
2164
2165 if (volume_info->UNCip && volume_info->UNC) {
2166 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
2167 volume_info->UNCip,
2168 strlen(volume_info->UNCip),
2169 volume_info->port);
2170 if (!rc) {
2171 /* we failed translating address */
2172 rc = -EINVAL;
2173 goto out_err;
2174 }
2175 } else if (volume_info->UNCip) {
2176 /* BB using ip addr as tcp_ses name to connect to the
2177 DFS root below */
2178 cERROR(1, "Connecting to DFS root not implemented yet");
2179 rc = -EINVAL;
2180 goto out_err;
2181 } else /* which tcp_sess DFS root would we conect to */ {
2182 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
2183 "unc=//192.168.1.100/public) specified");
2184 rc = -EINVAL;
2185 goto out_err;
2186 }
2187
2188 /* see if we already have a matching tcp_ses */
2189 tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
2190 if (tcp_ses)
2191 return tcp_ses;
2192
2193 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
2194 if (!tcp_ses) {
2195 rc = -ENOMEM;
2196 goto out_err;
2197 }
2198
2199 rc = cifs_crypto_shash_allocate(tcp_ses);
2200 if (rc) {
2201 cERROR(1, "could not setup hash structures rc %d", rc);
2202 goto out_err;
2203 }
2204
2205 cifs_set_net_ns(tcp_ses, get_net(current->nsproxy->net_ns));
2206 tcp_ses->hostname = extract_hostname(volume_info->UNC);
2207 if (IS_ERR(tcp_ses->hostname)) {
2208 rc = PTR_ERR(tcp_ses->hostname);
2209 goto out_err_crypto_release;
2210 }
2211
2212 tcp_ses->noblocksnd = volume_info->noblocksnd;
2213 tcp_ses->noautotune = volume_info->noautotune;
2214 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
2215 tcp_ses->in_flight = 0;
2216 tcp_ses->credits = 1;
2217 init_waitqueue_head(&tcp_ses->response_q);
2218 init_waitqueue_head(&tcp_ses->request_q);
2219 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
2220 mutex_init(&tcp_ses->srv_mutex);
2221 memcpy(tcp_ses->workstation_RFC1001_name,
2222 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
2223 memcpy(tcp_ses->server_RFC1001_name,
2224 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
2225 tcp_ses->session_estab = false;
2226 tcp_ses->sequence_number = 0;
2227 tcp_ses->lstrp = jiffies;
2228 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
2229 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
2230 INIT_DELAYED_WORK(&tcp_ses->echo, cifs_echo_request);
2231
2232 /*
2233 * at this point we are the only ones with the pointer
2234 * to the struct since the kernel thread not created yet
2235 * no need to spinlock this init of tcpStatus or srv_count
2236 */
2237 tcp_ses->tcpStatus = CifsNew;
2238 memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
2239 sizeof(tcp_ses->srcaddr));
2240 ++tcp_ses->srv_count;
2241
2242 if (addr.ss_family == AF_INET6) {
2243 cFYI(1, "attempting ipv6 connect");
2244 /* BB should we allow ipv6 on port 139? */
2245 /* other OS never observed in Wild doing 139 with v6 */
2246 memcpy(&tcp_ses->dstaddr, sin_server6,
2247 sizeof(struct sockaddr_in6));
2248 } else
2249 memcpy(&tcp_ses->dstaddr, sin_server,
2250 sizeof(struct sockaddr_in));
2251
2252 rc = ip_connect(tcp_ses);
2253 if (rc < 0) {
2254 cERROR(1, "Error connecting to socket. Aborting operation");
2255 goto out_err_crypto_release;
2256 }
2257
2258 /*
2259 * since we're in a cifs function already, we know that
2260 * this will succeed. No need for try_module_get().
2261 */
2262 __module_get(THIS_MODULE);
2263 tcp_ses->tsk = kthread_run(cifs_demultiplex_thread,
2264 tcp_ses, "cifsd");
2265 if (IS_ERR(tcp_ses->tsk)) {
2266 rc = PTR_ERR(tcp_ses->tsk);
2267 cERROR(1, "error %d create cifsd thread", rc);
2268 module_put(THIS_MODULE);
2269 goto out_err_crypto_release;
2270 }
2271 tcp_ses->tcpStatus = CifsNeedNegotiate;
2272
2273 /* thread spawned, put it on the list */
2274 spin_lock(&cifs_tcp_ses_lock);
2275 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
2276 spin_unlock(&cifs_tcp_ses_lock);
2277
2278 cifs_fscache_get_client_cookie(tcp_ses);
2279
2280 /* queue echo request delayed work */
2281 queue_delayed_work(cifsiod_wq, &tcp_ses->echo, SMB_ECHO_INTERVAL);
2282
2283 return tcp_ses;
2284
2285 out_err_crypto_release:
2286 cifs_crypto_shash_release(tcp_ses);
2287
2288 put_net(cifs_net_ns(tcp_ses));
2289
2290 out_err:
2291 if (tcp_ses) {
2292 if (!IS_ERR(tcp_ses->hostname))
2293 kfree(tcp_ses->hostname);
2294 if (tcp_ses->ssocket)
2295 sock_release(tcp_ses->ssocket);
2296 kfree(tcp_ses);
2297 }
2298 return ERR_PTR(rc);
2299 }
2300
2301 static int match_session(struct cifs_ses *ses, struct smb_vol *vol)
2302 {
2303 switch (ses->server->secType) {
2304 case Kerberos:
2305 if (vol->cred_uid != ses->cred_uid)
2306 return 0;
2307 break;
2308 default:
2309 /* NULL username means anonymous session */
2310 if (ses->user_name == NULL) {
2311 if (!vol->nullauth)
2312 return 0;
2313 break;
2314 }
2315
2316 /* anything else takes username/password */
2317 if (strncmp(ses->user_name,
2318 vol->username ? vol->username : "",
2319 MAX_USERNAME_SIZE))
2320 return 0;
2321 if (strlen(vol->username) != 0 &&
2322 ses->password != NULL &&
2323 strncmp(ses->password,
2324 vol->password ? vol->password : "",
2325 MAX_PASSWORD_SIZE))
2326 return 0;
2327 }
2328 return 1;
2329 }
2330
2331 static struct cifs_ses *
2332 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
2333 {
2334 struct cifs_ses *ses;
2335
2336 spin_lock(&cifs_tcp_ses_lock);
2337 list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
2338 if (!match_session(ses, vol))
2339 continue;
2340 ++ses->ses_count;
2341 spin_unlock(&cifs_tcp_ses_lock);
2342 return ses;
2343 }
2344 spin_unlock(&cifs_tcp_ses_lock);
2345 return NULL;
2346 }
2347
2348 static void
2349 cifs_put_smb_ses(struct cifs_ses *ses)
2350 {
2351 int xid;
2352 struct TCP_Server_Info *server = ses->server;
2353
2354 cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
2355 spin_lock(&cifs_tcp_ses_lock);
2356 if (--ses->ses_count > 0) {
2357 spin_unlock(&cifs_tcp_ses_lock);
2358 return;
2359 }
2360
2361 list_del_init(&ses->smb_ses_list);
2362 spin_unlock(&cifs_tcp_ses_lock);
2363
2364 if (ses->status == CifsGood) {
2365 xid = GetXid();
2366 CIFSSMBLogoff(xid, ses);
2367 _FreeXid(xid);
2368 }
2369 sesInfoFree(ses);
2370 cifs_put_tcp_session(server);
2371 }
2372
2373 #ifdef CONFIG_KEYS
2374
2375 /* strlen("cifs:a:") + INET6_ADDRSTRLEN + 1 */
2376 #define CIFSCREDS_DESC_SIZE (7 + INET6_ADDRSTRLEN + 1)
2377
2378 /* Populate username and pw fields from keyring if possible */
2379 static int
2380 cifs_set_cifscreds(struct smb_vol *vol, struct cifs_ses *ses)
2381 {
2382 int rc = 0;
2383 char *desc, *delim, *payload;
2384 ssize_t len;
2385 struct key *key;
2386 struct TCP_Server_Info *server = ses->server;
2387 struct sockaddr_in *sa;
2388 struct sockaddr_in6 *sa6;
2389 struct user_key_payload *upayload;
2390
2391 desc = kmalloc(CIFSCREDS_DESC_SIZE, GFP_KERNEL);
2392 if (!desc)
2393 return -ENOMEM;
2394
2395 /* try to find an address key first */
2396 switch (server->dstaddr.ss_family) {
2397 case AF_INET:
2398 sa = (struct sockaddr_in *)&server->dstaddr;
2399 sprintf(desc, "cifs:a:%pI4", &sa->sin_addr.s_addr);
2400 break;
2401 case AF_INET6:
2402 sa6 = (struct sockaddr_in6 *)&server->dstaddr;
2403 sprintf(desc, "cifs:a:%pI6c", &sa6->sin6_addr.s6_addr);
2404 break;
2405 default:
2406 cFYI(1, "Bad ss_family (%hu)", server->dstaddr.ss_family);
2407 rc = -EINVAL;
2408 goto out_err;
2409 }
2410
2411 cFYI(1, "%s: desc=%s", __func__, desc);
2412 key = request_key(&key_type_logon, desc, "");
2413 if (IS_ERR(key)) {
2414 if (!ses->domainName) {
2415 cFYI(1, "domainName is NULL");
2416 rc = PTR_ERR(key);
2417 goto out_err;
2418 }
2419
2420 /* didn't work, try to find a domain key */
2421 sprintf(desc, "cifs:d:%s", ses->domainName);
2422 cFYI(1, "%s: desc=%s", __func__, desc);
2423 key = request_key(&key_type_logon, desc, "");
2424 if (IS_ERR(key)) {
2425 rc = PTR_ERR(key);
2426 goto out_err;
2427 }
2428 }
2429
2430 down_read(&key->sem);
2431 upayload = key->payload.data;
2432 if (IS_ERR_OR_NULL(upayload)) {
2433 rc = upayload ? PTR_ERR(upayload) : -EINVAL;
2434 goto out_key_put;
2435 }
2436
2437 /* find first : in payload */
2438 payload = (char *)upayload->data;
2439 delim = strnchr(payload, upayload->datalen, ':');
2440 cFYI(1, "payload=%s", payload);
2441 if (!delim) {
2442 cFYI(1, "Unable to find ':' in payload (datalen=%d)",
2443 upayload->datalen);
2444 rc = -EINVAL;
2445 goto out_key_put;
2446 }
2447
2448 len = delim - payload;
2449 if (len > MAX_USERNAME_SIZE || len <= 0) {
2450 cFYI(1, "Bad value from username search (len=%zd)", len);
2451 rc = -EINVAL;
2452 goto out_key_put;
2453 }
2454
2455 vol->username = kstrndup(payload, len, GFP_KERNEL);
2456 if (!vol->username) {
2457 cFYI(1, "Unable to allocate %zd bytes for username", len);
2458 rc = -ENOMEM;
2459 goto out_key_put;
2460 }
2461 cFYI(1, "%s: username=%s", __func__, vol->username);
2462
2463 len = key->datalen - (len + 1);
2464 if (len > MAX_PASSWORD_SIZE || len <= 0) {
2465 cFYI(1, "Bad len for password search (len=%zd)", len);
2466 rc = -EINVAL;
2467 kfree(vol->username);
2468 vol->username = NULL;
2469 goto out_key_put;
2470 }
2471
2472 ++delim;
2473 vol->password = kstrndup(delim, len, GFP_KERNEL);
2474 if (!vol->password) {
2475 cFYI(1, "Unable to allocate %zd bytes for password", len);
2476 rc = -ENOMEM;
2477 kfree(vol->username);
2478 vol->username = NULL;
2479 goto out_key_put;
2480 }
2481
2482 out_key_put:
2483 up_read(&key->sem);
2484 key_put(key);
2485 out_err:
2486 kfree(desc);
2487 cFYI(1, "%s: returning %d", __func__, rc);
2488 return rc;
2489 }
2490 #else /* ! CONFIG_KEYS */
2491 static inline int
2492 cifs_set_cifscreds(struct smb_vol *vol __attribute__((unused)),
2493 struct cifs_ses *ses __attribute__((unused)))
2494 {
2495 return -ENOSYS;
2496 }
2497 #endif /* CONFIG_KEYS */
2498
2499 static bool warned_on_ntlm; /* globals init to false automatically */
2500
2501 static struct cifs_ses *
2502 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
2503 {
2504 int rc = -ENOMEM, xid;
2505 struct cifs_ses *ses;
2506 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
2507 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2508
2509 xid = GetXid();
2510
2511 ses = cifs_find_smb_ses(server, volume_info);
2512 if (ses) {
2513 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
2514
2515 mutex_lock(&ses->session_mutex);
2516 rc = cifs_negotiate_protocol(xid, ses);
2517 if (rc) {
2518 mutex_unlock(&ses->session_mutex);
2519 /* problem -- put our ses reference */
2520 cifs_put_smb_ses(ses);
2521 FreeXid(xid);
2522 return ERR_PTR(rc);
2523 }
2524 if (ses->need_reconnect) {
2525 cFYI(1, "Session needs reconnect");
2526 rc = cifs_setup_session(xid, ses,
2527 volume_info->local_nls);
2528 if (rc) {
2529 mutex_unlock(&ses->session_mutex);
2530 /* problem -- put our reference */
2531 cifs_put_smb_ses(ses);
2532 FreeXid(xid);
2533 return ERR_PTR(rc);
2534 }
2535 }
2536 mutex_unlock(&ses->session_mutex);
2537
2538 /* existing SMB ses has a server reference already */
2539 cifs_put_tcp_session(server);
2540 FreeXid(xid);
2541 return ses;
2542 }
2543
2544 cFYI(1, "Existing smb sess not found");
2545 ses = sesInfoAlloc();
2546 if (ses == NULL)
2547 goto get_ses_fail;
2548
2549 /* new SMB session uses our server ref */
2550 ses->server = server;
2551 if (server->dstaddr.ss_family == AF_INET6)
2552 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
2553 else
2554 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
2555
2556 if (volume_info->username) {
2557 ses->user_name = kstrdup(volume_info->username, GFP_KERNEL);
2558 if (!ses->user_name)
2559 goto get_ses_fail;
2560 }
2561
2562 /* volume_info->password freed at unmount */
2563 if (volume_info->password) {
2564 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
2565 if (!ses->password)
2566 goto get_ses_fail;
2567 }
2568 if (volume_info->domainname) {
2569 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
2570 if (!ses->domainName)
2571 goto get_ses_fail;
2572 }
2573 ses->cred_uid = volume_info->cred_uid;
2574 ses->linux_uid = volume_info->linux_uid;
2575
2576 /* ntlmv2 is much stronger than ntlm security, and has been broadly
2577 supported for many years, time to update default security mechanism */
2578 if ((volume_info->secFlg == 0) && warned_on_ntlm == false) {
2579 warned_on_ntlm = true;
2580 cERROR(1, "default security mechanism requested. The default "
2581 "security mechanism will be upgraded from ntlm to "
2582 "ntlmv2 in kernel release 3.3");
2583 }
2584 ses->overrideSecFlg = volume_info->secFlg;
2585
2586 mutex_lock(&ses->session_mutex);
2587 rc = cifs_negotiate_protocol(xid, ses);
2588 if (!rc)
2589 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
2590 mutex_unlock(&ses->session_mutex);
2591 if (rc)
2592 goto get_ses_fail;
2593
2594 /* success, put it on the list */
2595 spin_lock(&cifs_tcp_ses_lock);
2596 list_add(&ses->smb_ses_list, &server->smb_ses_list);
2597 spin_unlock(&cifs_tcp_ses_lock);
2598
2599 FreeXid(xid);
2600 return ses;
2601
2602 get_ses_fail:
2603 sesInfoFree(ses);
2604 FreeXid(xid);
2605 return ERR_PTR(rc);
2606 }
2607
2608 static int match_tcon(struct cifs_tcon *tcon, const char *unc)
2609 {
2610 if (tcon->tidStatus == CifsExiting)
2611 return 0;
2612 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
2613 return 0;
2614 return 1;
2615 }
2616
2617 static struct cifs_tcon *
2618 cifs_find_tcon(struct cifs_ses *ses, const char *unc)
2619 {
2620 struct list_head *tmp;
2621 struct cifs_tcon *tcon;
2622
2623 spin_lock(&cifs_tcp_ses_lock);
2624 list_for_each(tmp, &ses->tcon_list) {
2625 tcon = list_entry(tmp, struct cifs_tcon, tcon_list);
2626 if (!match_tcon(tcon, unc))
2627 continue;
2628 ++tcon->tc_count;
2629 spin_unlock(&cifs_tcp_ses_lock);
2630 return tcon;
2631 }
2632 spin_unlock(&cifs_tcp_ses_lock);
2633 return NULL;
2634 }
2635
2636 static void
2637 cifs_put_tcon(struct cifs_tcon *tcon)
2638 {
2639 int xid;
2640 struct cifs_ses *ses = tcon->ses;
2641
2642 cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
2643 spin_lock(&cifs_tcp_ses_lock);
2644 if (--tcon->tc_count > 0) {
2645 spin_unlock(&cifs_tcp_ses_lock);
2646 return;
2647 }
2648
2649 list_del_init(&tcon->tcon_list);
2650 spin_unlock(&cifs_tcp_ses_lock);
2651
2652 xid = GetXid();
2653 CIFSSMBTDis(xid, tcon);
2654 _FreeXid(xid);
2655
2656 cifs_fscache_release_super_cookie(tcon);
2657 tconInfoFree(tcon);
2658 cifs_put_smb_ses(ses);
2659 }
2660
2661 static struct cifs_tcon *
2662 cifs_get_tcon(struct cifs_ses *ses, struct smb_vol *volume_info)
2663 {
2664 int rc, xid;
2665 struct cifs_tcon *tcon;
2666
2667 tcon = cifs_find_tcon(ses, volume_info->UNC);
2668 if (tcon) {
2669 cFYI(1, "Found match on UNC path");
2670 /* existing tcon already has a reference */
2671 cifs_put_smb_ses(ses);
2672 if (tcon->seal != volume_info->seal)
2673 cERROR(1, "transport encryption setting "
2674 "conflicts with existing tid");
2675 return tcon;
2676 }
2677
2678 tcon = tconInfoAlloc();
2679 if (tcon == NULL) {
2680 rc = -ENOMEM;
2681 goto out_fail;
2682 }
2683
2684 tcon->ses = ses;
2685 if (volume_info->password) {
2686 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
2687 if (!tcon->password) {
2688 rc = -ENOMEM;
2689 goto out_fail;
2690 }
2691 }
2692
2693 if (strchr(volume_info->UNC + 3, '\\') == NULL
2694 && strchr(volume_info->UNC + 3, '/') == NULL) {
2695 cERROR(1, "Missing share name");
2696 rc = -ENODEV;
2697 goto out_fail;
2698 }
2699
2700 /* BB Do we need to wrap session_mutex around
2701 * this TCon call and Unix SetFS as
2702 * we do on SessSetup and reconnect? */
2703 xid = GetXid();
2704 rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
2705 FreeXid(xid);
2706 cFYI(1, "CIFS Tcon rc = %d", rc);
2707 if (rc)
2708 goto out_fail;
2709
2710 if (volume_info->nodfs) {
2711 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2712 cFYI(1, "DFS disabled (%d)", tcon->Flags);
2713 }
2714 tcon->seal = volume_info->seal;
2715 /* we can have only one retry value for a connection
2716 to a share so for resources mounted more than once
2717 to the same server share the last value passed in
2718 for the retry flag is used */
2719 tcon->retry = volume_info->retry;
2720 tcon->nocase = volume_info->nocase;
2721 tcon->local_lease = volume_info->local_lease;
2722
2723 spin_lock(&cifs_tcp_ses_lock);
2724 list_add(&tcon->tcon_list, &ses->tcon_list);
2725 spin_unlock(&cifs_tcp_ses_lock);
2726
2727 cifs_fscache_get_super_cookie(tcon);
2728
2729 return tcon;
2730
2731 out_fail:
2732 tconInfoFree(tcon);
2733 return ERR_PTR(rc);
2734 }
2735
2736 void
2737 cifs_put_tlink(struct tcon_link *tlink)
2738 {
2739 if (!tlink || IS_ERR(tlink))
2740 return;
2741
2742 if (!atomic_dec_and_test(&tlink->tl_count) ||
2743 test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2744 tlink->tl_time = jiffies;
2745 return;
2746 }
2747
2748 if (!IS_ERR(tlink_tcon(tlink)))
2749 cifs_put_tcon(tlink_tcon(tlink));
2750 kfree(tlink);
2751 return;
2752 }
2753
2754 static inline struct tcon_link *
2755 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
2756 {
2757 return cifs_sb->master_tlink;
2758 }
2759
2760 static int
2761 compare_mount_options(struct super_block *sb, struct cifs_mnt_data *mnt_data)
2762 {
2763 struct cifs_sb_info *old = CIFS_SB(sb);
2764 struct cifs_sb_info *new = mnt_data->cifs_sb;
2765
2766 if ((sb->s_flags & CIFS_MS_MASK) != (mnt_data->flags & CIFS_MS_MASK))
2767 return 0;
2768
2769 if ((old->mnt_cifs_flags & CIFS_MOUNT_MASK) !=
2770 (new->mnt_cifs_flags & CIFS_MOUNT_MASK))
2771 return 0;
2772
2773 /*
2774 * We want to share sb only if we don't specify an r/wsize or
2775 * specified r/wsize is greater than or equal to existing one.
2776 */
2777 if (new->wsize && new->wsize < old->wsize)
2778 return 0;
2779
2780 if (new->rsize && new->rsize < old->rsize)
2781 return 0;
2782
2783 if (old->mnt_uid != new->mnt_uid || old->mnt_gid != new->mnt_gid)
2784 return 0;
2785
2786 if (old->mnt_file_mode != new->mnt_file_mode ||
2787 old->mnt_dir_mode != new->mnt_dir_mode)
2788 return 0;
2789
2790 if (strcmp(old->local_nls->charset, new->local_nls->charset))
2791 return 0;
2792
2793 if (old->actimeo != new->actimeo)
2794 return 0;
2795
2796 return 1;
2797 }
2798
2799 int
2800 cifs_match_super(struct super_block *sb, void *data)
2801 {
2802 struct cifs_mnt_data *mnt_data = (struct cifs_mnt_data *)data;
2803 struct smb_vol *volume_info;
2804 struct cifs_sb_info *cifs_sb;
2805 struct TCP_Server_Info *tcp_srv;
2806 struct cifs_ses *ses;
2807 struct cifs_tcon *tcon;
2808 struct tcon_link *tlink;
2809 struct sockaddr_storage addr;
2810 int rc = 0;
2811
2812 memset(&addr, 0, sizeof(struct sockaddr_storage));
2813
2814 spin_lock(&cifs_tcp_ses_lock);
2815 cifs_sb = CIFS_SB(sb);
2816 tlink = cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
2817 if (IS_ERR(tlink)) {
2818 spin_unlock(&cifs_tcp_ses_lock);
2819 return rc;
2820 }
2821 tcon = tlink_tcon(tlink);
2822 ses = tcon->ses;
2823 tcp_srv = ses->server;
2824
2825 volume_info = mnt_data->vol;
2826
2827 if (!volume_info->UNCip || !volume_info->UNC)
2828 goto out;
2829
2830 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
2831 volume_info->UNCip,
2832 strlen(volume_info->UNCip),
2833 volume_info->port);
2834 if (!rc)
2835 goto out;
2836
2837 if (!match_server(tcp_srv, (struct sockaddr *)&addr, volume_info) ||
2838 !match_session(ses, volume_info) ||
2839 !match_tcon(tcon, volume_info->UNC)) {
2840 rc = 0;
2841 goto out;
2842 }
2843
2844 rc = compare_mount_options(sb, mnt_data);
2845 out:
2846 spin_unlock(&cifs_tcp_ses_lock);
2847 cifs_put_tlink(tlink);
2848 return rc;
2849 }
2850
2851 int
2852 get_dfs_path(int xid, struct cifs_ses *pSesInfo, const char *old_path,
2853 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
2854 struct dfs_info3_param **preferrals, int remap)
2855 {
2856 char *temp_unc;
2857 int rc = 0;
2858
2859 *pnum_referrals = 0;
2860 *preferrals = NULL;
2861
2862 if (pSesInfo->ipc_tid == 0) {
2863 temp_unc = kmalloc(2 /* for slashes */ +
2864 strnlen(pSesInfo->serverName,
2865 SERVER_NAME_LEN_WITH_NULL * 2)
2866 + 1 + 4 /* slash IPC$ */ + 2,
2867 GFP_KERNEL);
2868 if (temp_unc == NULL)
2869 return -ENOMEM;
2870 temp_unc[0] = '\\';
2871 temp_unc[1] = '\\';
2872 strcpy(temp_unc + 2, pSesInfo->serverName);
2873 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2874 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
2875 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
2876 kfree(temp_unc);
2877 }
2878 if (rc == 0)
2879 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
2880 pnum_referrals, nls_codepage, remap);
2881 /* BB map targetUNCs to dfs_info3 structures, here or
2882 in CIFSGetDFSRefer BB */
2883
2884 return rc;
2885 }
2886
2887 #ifdef CONFIG_DEBUG_LOCK_ALLOC
2888 static struct lock_class_key cifs_key[2];
2889 static struct lock_class_key cifs_slock_key[2];
2890
2891 static inline void
2892 cifs_reclassify_socket4(struct socket *sock)
2893 {
2894 struct sock *sk = sock->sk;
2895 BUG_ON(sock_owned_by_user(sk));
2896 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2897 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2898 }
2899
2900 static inline void
2901 cifs_reclassify_socket6(struct socket *sock)
2902 {
2903 struct sock *sk = sock->sk;
2904 BUG_ON(sock_owned_by_user(sk));
2905 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2906 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2907 }
2908 #else
2909 static inline void
2910 cifs_reclassify_socket4(struct socket *sock)
2911 {
2912 }
2913
2914 static inline void
2915 cifs_reclassify_socket6(struct socket *sock)
2916 {
2917 }
2918 #endif
2919
2920 /* See RFC1001 section 14 on representation of Netbios names */
2921 static void rfc1002mangle(char *target, char *source, unsigned int length)
2922 {
2923 unsigned int i, j;
2924
2925 for (i = 0, j = 0; i < (length); i++) {
2926 /* mask a nibble at a time and encode */
2927 target[j] = 'A' + (0x0F & (source[i] >> 4));
2928 target[j+1] = 'A' + (0x0F & source[i]);
2929 j += 2;
2930 }
2931
2932 }
2933
2934 static int
2935 bind_socket(struct TCP_Server_Info *server)
2936 {
2937 int rc = 0;
2938 if (server->srcaddr.ss_family != AF_UNSPEC) {
2939 /* Bind to the specified local IP address */
2940 struct socket *socket = server->ssocket;
2941 rc = socket->ops->bind(socket,
2942 (struct sockaddr *) &server->srcaddr,
2943 sizeof(server->srcaddr));
2944 if (rc < 0) {
2945 struct sockaddr_in *saddr4;
2946 struct sockaddr_in6 *saddr6;
2947 saddr4 = (struct sockaddr_in *)&server->srcaddr;
2948 saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2949 if (saddr6->sin6_family == AF_INET6)
2950 cERROR(1, "cifs: "
2951 "Failed to bind to: %pI6c, error: %d\n",
2952 &saddr6->sin6_addr, rc);
2953 else
2954 cERROR(1, "cifs: "
2955 "Failed to bind to: %pI4, error: %d\n",
2956 &saddr4->sin_addr.s_addr, rc);
2957 }
2958 }
2959 return rc;
2960 }
2961
2962 static int
2963 ip_rfc1001_connect(struct TCP_Server_Info *server)
2964 {
2965 int rc = 0;
2966 /*
2967 * some servers require RFC1001 sessinit before sending
2968 * negprot - BB check reconnection in case where second
2969 * sessinit is sent but no second negprot
2970 */
2971 struct rfc1002_session_packet *ses_init_buf;
2972 struct smb_hdr *smb_buf;
2973 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2974 GFP_KERNEL);
2975 if (ses_init_buf) {
2976 ses_init_buf->trailer.session_req.called_len = 32;
2977
2978 if (server->server_RFC1001_name &&
2979 server->server_RFC1001_name[0] != 0)
2980 rfc1002mangle(ses_init_buf->trailer.
2981 session_req.called_name,
2982 server->server_RFC1001_name,
2983 RFC1001_NAME_LEN_WITH_NULL);
2984 else
2985 rfc1002mangle(ses_init_buf->trailer.
2986 session_req.called_name,
2987 DEFAULT_CIFS_CALLED_NAME,
2988 RFC1001_NAME_LEN_WITH_NULL);
2989
2990 ses_init_buf->trailer.session_req.calling_len = 32;
2991
2992 /*
2993 * calling name ends in null (byte 16) from old smb
2994 * convention.
2995 */
2996 if (server->workstation_RFC1001_name &&
2997 server->workstation_RFC1001_name[0] != 0)
2998 rfc1002mangle(ses_init_buf->trailer.
2999 session_req.calling_name,
3000 server->workstation_RFC1001_name,
3001 RFC1001_NAME_LEN_WITH_NULL);
3002 else
3003 rfc1002mangle(ses_init_buf->trailer.
3004 session_req.calling_name,
3005 "LINUX_CIFS_CLNT",
3006 RFC1001_NAME_LEN_WITH_NULL);
3007
3008 ses_init_buf->trailer.session_req.scope1 = 0;
3009 ses_init_buf->trailer.session_req.scope2 = 0;
3010 smb_buf = (struct smb_hdr *)ses_init_buf;
3011
3012 /* sizeof RFC1002_SESSION_REQUEST with no scope */
3013 smb_buf->smb_buf_length = cpu_to_be32(0x81000044);
3014 rc = smb_send(server, smb_buf, 0x44);
3015 kfree(ses_init_buf);
3016 /*
3017 * RFC1001 layer in at least one server
3018 * requires very short break before negprot
3019 * presumably because not expecting negprot
3020 * to follow so fast. This is a simple
3021 * solution that works without
3022 * complicating the code and causes no
3023 * significant slowing down on mount
3024 * for everyone else
3025 */
3026 usleep_range(1000, 2000);
3027 }
3028 /*
3029 * else the negprot may still work without this
3030 * even though malloc failed
3031 */
3032
3033 return rc;
3034 }
3035
3036 static int
3037 generic_ip_connect(struct TCP_Server_Info *server)
3038 {
3039 int rc = 0;
3040 __be16 sport;
3041 int slen, sfamily;
3042 struct socket *socket = server->ssocket;
3043 struct sockaddr *saddr;
3044
3045 saddr = (struct sockaddr *) &server->dstaddr;
3046
3047 if (server->dstaddr.ss_family == AF_INET6) {
3048 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
3049 slen = sizeof(struct sockaddr_in6);
3050 sfamily = AF_INET6;
3051 } else {
3052 sport = ((struct sockaddr_in *) saddr)->sin_port;
3053 slen = sizeof(struct sockaddr_in);
3054 sfamily = AF_INET;
3055 }
3056
3057 if (socket == NULL) {
3058 rc = __sock_create(cifs_net_ns(server), sfamily, SOCK_STREAM,
3059 IPPROTO_TCP, &socket, 1);
3060 if (rc < 0) {
3061 cERROR(1, "Error %d creating socket", rc);
3062 server->ssocket = NULL;
3063 return rc;
3064 }
3065
3066 /* BB other socket options to set KEEPALIVE, NODELAY? */
3067 cFYI(1, "Socket created");
3068 server->ssocket = socket;
3069 socket->sk->sk_allocation = GFP_NOFS;
3070 if (sfamily == AF_INET6)
3071 cifs_reclassify_socket6(socket);
3072 else
3073 cifs_reclassify_socket4(socket);
3074 }
3075
3076 rc = bind_socket(server);
3077 if (rc < 0)
3078 return rc;
3079
3080 /*
3081 * Eventually check for other socket options to change from
3082 * the default. sock_setsockopt not used because it expects
3083 * user space buffer
3084 */
3085 socket->sk->sk_rcvtimeo = 7 * HZ;
3086 socket->sk->sk_sndtimeo = 5 * HZ;
3087
3088 /* make the bufsizes depend on wsize/rsize and max requests */
3089 if (server->noautotune) {
3090 if (socket->sk->sk_sndbuf < (200 * 1024))
3091 socket->sk->sk_sndbuf = 200 * 1024;
3092 if (socket->sk->sk_rcvbuf < (140 * 1024))
3093 socket->sk->sk_rcvbuf = 140 * 1024;
3094 }
3095
3096 if (server->tcp_nodelay) {
3097 int val = 1;
3098 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
3099 (char *)&val, sizeof(val));
3100 if (rc)
3101 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
3102 }
3103
3104 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
3105 socket->sk->sk_sndbuf,
3106 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
3107
3108 rc = socket->ops->connect(socket, saddr, slen, 0);
3109 if (rc < 0) {
3110 cFYI(1, "Error %d connecting to server", rc);
3111 sock_release(socket);
3112 server->ssocket = NULL;
3113 return rc;
3114 }
3115
3116 if (sport == htons(RFC1001_PORT))
3117 rc = ip_rfc1001_connect(server);
3118
3119 return rc;
3120 }
3121
3122 static int
3123 ip_connect(struct TCP_Server_Info *server)
3124 {
3125 __be16 *sport;
3126 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
3127 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
3128
3129 if (server->dstaddr.ss_family == AF_INET6)
3130 sport = &addr6->sin6_port;
3131 else
3132 sport = &addr->sin_port;
3133
3134 if (*sport == 0) {
3135 int rc;
3136
3137 /* try with 445 port at first */
3138 *sport = htons(CIFS_PORT);
3139
3140 rc = generic_ip_connect(server);
3141 if (rc >= 0)
3142 return rc;
3143
3144 /* if it failed, try with 139 port */
3145 *sport = htons(RFC1001_PORT);
3146 }
3147
3148 return generic_ip_connect(server);
3149 }
3150
3151 void reset_cifs_unix_caps(int xid, struct cifs_tcon *tcon,
3152 struct cifs_sb_info *cifs_sb, struct smb_vol *vol_info)
3153 {
3154 /* if we are reconnecting then should we check to see if
3155 * any requested capabilities changed locally e.g. via
3156 * remount but we can not do much about it here
3157 * if they have (even if we could detect it by the following)
3158 * Perhaps we could add a backpointer to array of sb from tcon
3159 * or if we change to make all sb to same share the same
3160 * sb as NFS - then we only have one backpointer to sb.
3161 * What if we wanted to mount the server share twice once with
3162 * and once without posixacls or posix paths? */
3163 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
3164
3165 if (vol_info && vol_info->no_linux_ext) {
3166 tcon->fsUnixInfo.Capability = 0;
3167 tcon->unix_ext = 0; /* Unix Extensions disabled */
3168 cFYI(1, "Linux protocol extensions disabled");
3169 return;
3170 } else if (vol_info)
3171 tcon->unix_ext = 1; /* Unix Extensions supported */
3172
3173 if (tcon->unix_ext == 0) {
3174 cFYI(1, "Unix extensions disabled so not set on reconnect");
3175 return;
3176 }
3177
3178 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
3179 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
3180 cFYI(1, "unix caps which server supports %lld", cap);
3181 /* check for reconnect case in which we do not
3182 want to change the mount behavior if we can avoid it */
3183 if (vol_info == NULL) {
3184 /* turn off POSIX ACL and PATHNAMES if not set
3185 originally at mount time */
3186 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
3187 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
3188 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
3189 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
3190 cERROR(1, "POSIXPATH support change");
3191 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
3192 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
3193 cERROR(1, "possible reconnect error");
3194 cERROR(1, "server disabled POSIX path support");
3195 }
3196 }
3197
3198 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
3199 cERROR(1, "per-share encryption not supported yet");
3200
3201 cap &= CIFS_UNIX_CAP_MASK;
3202 if (vol_info && vol_info->no_psx_acl)
3203 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
3204 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
3205 cFYI(1, "negotiated posix acl support");
3206 if (cifs_sb)
3207 cifs_sb->mnt_cifs_flags |=
3208 CIFS_MOUNT_POSIXACL;
3209 }
3210
3211 if (vol_info && vol_info->posix_paths == 0)
3212 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
3213 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
3214 cFYI(1, "negotiate posix pathnames");
3215 if (cifs_sb)
3216 cifs_sb->mnt_cifs_flags |=
3217 CIFS_MOUNT_POSIX_PATHS;
3218 }
3219
3220 cFYI(1, "Negotiate caps 0x%x", (int)cap);
3221 #ifdef CONFIG_CIFS_DEBUG2
3222 if (cap & CIFS_UNIX_FCNTL_CAP)
3223 cFYI(1, "FCNTL cap");
3224 if (cap & CIFS_UNIX_EXTATTR_CAP)
3225 cFYI(1, "EXTATTR cap");
3226 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
3227 cFYI(1, "POSIX path cap");
3228 if (cap & CIFS_UNIX_XATTR_CAP)
3229 cFYI(1, "XATTR cap");
3230 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
3231 cFYI(1, "POSIX ACL cap");
3232 if (cap & CIFS_UNIX_LARGE_READ_CAP)
3233 cFYI(1, "very large read cap");
3234 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
3235 cFYI(1, "very large write cap");
3236 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP)
3237 cFYI(1, "transport encryption cap");
3238 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
3239 cFYI(1, "mandatory transport encryption cap");
3240 #endif /* CIFS_DEBUG2 */
3241 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
3242 if (vol_info == NULL) {
3243 cFYI(1, "resetting capabilities failed");
3244 } else
3245 cERROR(1, "Negotiating Unix capabilities "
3246 "with the server failed. Consider "
3247 "mounting with the Unix Extensions\n"
3248 "disabled, if problems are found, "
3249 "by specifying the nounix mount "
3250 "option.");
3251
3252 }
3253 }
3254 }
3255
3256 void cifs_setup_cifs_sb(struct smb_vol *pvolume_info,
3257 struct cifs_sb_info *cifs_sb)
3258 {
3259 INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
3260
3261 spin_lock_init(&cifs_sb->tlink_tree_lock);
3262 cifs_sb->tlink_tree = RB_ROOT;
3263
3264 /*
3265 * Temporarily set r/wsize for matching superblock. If we end up using
3266 * new sb then client will later negotiate it downward if needed.
3267 */
3268 cifs_sb->rsize = pvolume_info->rsize;
3269 cifs_sb->wsize = pvolume_info->wsize;
3270
3271 cifs_sb->mnt_uid = pvolume_info->linux_uid;
3272 cifs_sb->mnt_gid = pvolume_info->linux_gid;
3273 if (pvolume_info->backupuid_specified)
3274 cifs_sb->mnt_backupuid = pvolume_info->backupuid;
3275 if (pvolume_info->backupgid_specified)
3276 cifs_sb->mnt_backupgid = pvolume_info->backupgid;
3277 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
3278 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
3279 cFYI(1, "file mode: 0x%hx dir mode: 0x%hx",
3280 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
3281
3282 cifs_sb->actimeo = pvolume_info->actimeo;
3283 cifs_sb->local_nls = pvolume_info->local_nls;
3284
3285 if (pvolume_info->noperm)
3286 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
3287 if (pvolume_info->setuids)
3288 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
3289 if (pvolume_info->server_ino)
3290 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
3291 if (pvolume_info->remap)
3292 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
3293 if (pvolume_info->no_xattr)
3294 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
3295 if (pvolume_info->sfu_emul)
3296 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
3297 if (pvolume_info->nobrl)
3298 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
3299 if (pvolume_info->nostrictsync)
3300 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
3301 if (pvolume_info->mand_lock)
3302 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
3303 if (pvolume_info->rwpidforward)
3304 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_RWPIDFORWARD;
3305 if (pvolume_info->cifs_acl)
3306 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
3307 if (pvolume_info->backupuid_specified)
3308 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_BACKUPUID;
3309 if (pvolume_info->backupgid_specified)
3310 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_BACKUPGID;
3311 if (pvolume_info->override_uid)
3312 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
3313 if (pvolume_info->override_gid)
3314 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
3315 if (pvolume_info->dynperm)
3316 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
3317 if (pvolume_info->fsc)
3318 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
3319 if (pvolume_info->multiuser)
3320 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
3321 CIFS_MOUNT_NO_PERM);
3322 if (pvolume_info->strict_io)
3323 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_STRICT_IO;
3324 if (pvolume_info->direct_io) {
3325 cFYI(1, "mounting share using direct i/o");
3326 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
3327 }
3328 if (pvolume_info->mfsymlinks) {
3329 if (pvolume_info->sfu_emul) {
3330 cERROR(1, "mount option mfsymlinks ignored if sfu "
3331 "mount option is used");
3332 } else {
3333 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
3334 }
3335 }
3336
3337 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
3338 cERROR(1, "mount option dynperm ignored if cifsacl "
3339 "mount option supported");
3340 }
3341
3342 /*
3343 * When the server supports very large reads and writes via POSIX extensions,
3344 * we can allow up to 2^24-1, minus the size of a READ/WRITE_AND_X header, not
3345 * including the RFC1001 length.
3346 *
3347 * Note that this might make for "interesting" allocation problems during
3348 * writeback however as we have to allocate an array of pointers for the
3349 * pages. A 16M write means ~32kb page array with PAGE_CACHE_SIZE == 4096.
3350 *
3351 * For reads, there is a similar problem as we need to allocate an array
3352 * of kvecs to handle the receive, though that should only need to be done
3353 * once.
3354 */
3355 #define CIFS_MAX_WSIZE ((1<<24) - 1 - sizeof(WRITE_REQ) + 4)
3356 #define CIFS_MAX_RSIZE ((1<<24) - sizeof(READ_RSP) + 4)
3357
3358 /*
3359 * When the server doesn't allow large posix writes, only allow a rsize/wsize
3360 * of 2^17-1 minus the size of the call header. That allows for a read or
3361 * write up to the maximum size described by RFC1002.
3362 */
3363 #define CIFS_MAX_RFC1002_WSIZE ((1<<17) - 1 - sizeof(WRITE_REQ) + 4)
3364 #define CIFS_MAX_RFC1002_RSIZE ((1<<17) - 1 - sizeof(READ_RSP) + 4)
3365
3366 /*
3367 * The default wsize is 1M. find_get_pages seems to return a maximum of 256
3368 * pages in a single call. With PAGE_CACHE_SIZE == 4k, this means we can fill
3369 * a single wsize request with a single call.
3370 */
3371 #define CIFS_DEFAULT_IOSIZE (1024 * 1024)
3372
3373 /*
3374 * Windows only supports a max of 60kb reads and 65535 byte writes. Default to
3375 * those values when posix extensions aren't in force. In actuality here, we
3376 * use 65536 to allow for a write that is a multiple of 4k. Most servers seem
3377 * to be ok with the extra byte even though Windows doesn't send writes that
3378 * are that large.
3379 *
3380 * Citation:
3381 *
3382 * http://blogs.msdn.com/b/openspecification/archive/2009/04/10/smb-maximum-transmit-buffer-size-and-performance-tuning.aspx
3383 */
3384 #define CIFS_DEFAULT_NON_POSIX_RSIZE (60 * 1024)
3385 #define CIFS_DEFAULT_NON_POSIX_WSIZE (65536)
3386
3387 static unsigned int
3388 cifs_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *pvolume_info)
3389 {
3390 __u64 unix_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
3391 struct TCP_Server_Info *server = tcon->ses->server;
3392 unsigned int wsize;
3393
3394 /* start with specified wsize, or default */
3395 if (pvolume_info->wsize)
3396 wsize = pvolume_info->wsize;
3397 else if (tcon->unix_ext && (unix_cap & CIFS_UNIX_LARGE_WRITE_CAP))
3398 wsize = CIFS_DEFAULT_IOSIZE;
3399 else
3400 wsize = CIFS_DEFAULT_NON_POSIX_WSIZE;
3401
3402 /* can server support 24-bit write sizes? (via UNIX extensions) */
3403 if (!tcon->unix_ext || !(unix_cap & CIFS_UNIX_LARGE_WRITE_CAP))
3404 wsize = min_t(unsigned int, wsize, CIFS_MAX_RFC1002_WSIZE);
3405
3406 /*
3407 * no CAP_LARGE_WRITE_X or is signing enabled without CAP_UNIX set?
3408 * Limit it to max buffer offered by the server, minus the size of the
3409 * WRITEX header, not including the 4 byte RFC1001 length.
3410 */
3411 if (!(server->capabilities & CAP_LARGE_WRITE_X) ||
3412 (!(server->capabilities & CAP_UNIX) &&
3413 (server->sec_mode & (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED))))
3414 wsize = min_t(unsigned int, wsize,
3415 server->maxBuf - sizeof(WRITE_REQ) + 4);
3416
3417 /* hard limit of CIFS_MAX_WSIZE */
3418 wsize = min_t(unsigned int, wsize, CIFS_MAX_WSIZE);
3419
3420 return wsize;
3421 }
3422
3423 static unsigned int
3424 cifs_negotiate_rsize(struct cifs_tcon *tcon, struct smb_vol *pvolume_info)
3425 {
3426 __u64 unix_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
3427 struct TCP_Server_Info *server = tcon->ses->server;
3428 unsigned int rsize, defsize;
3429
3430 /*
3431 * Set default value...
3432 *
3433 * HACK alert! Ancient servers have very small buffers. Even though
3434 * MS-CIFS indicates that servers are only limited by the client's
3435 * bufsize for reads, testing against win98se shows that it throws
3436 * INVALID_PARAMETER errors if you try to request too large a read.
3437 *
3438 * If the server advertises a MaxBufferSize of less than one page,
3439 * assume that it also can't satisfy reads larger than that either.
3440 *
3441 * FIXME: Is there a better heuristic for this?
3442 */
3443 if (tcon->unix_ext && (unix_cap & CIFS_UNIX_LARGE_READ_CAP))
3444 defsize = CIFS_DEFAULT_IOSIZE;
3445 else if (server->capabilities & CAP_LARGE_READ_X)
3446 defsize = CIFS_DEFAULT_NON_POSIX_RSIZE;
3447 else if (server->maxBuf >= PAGE_CACHE_SIZE)
3448 defsize = CIFSMaxBufSize;
3449 else
3450 defsize = server->maxBuf - sizeof(READ_RSP);
3451
3452 rsize = pvolume_info->rsize ? pvolume_info->rsize : defsize;
3453
3454 /*
3455 * no CAP_LARGE_READ_X? Then MS-CIFS states that we must limit this to
3456 * the client's MaxBufferSize.
3457 */
3458 if (!(server->capabilities & CAP_LARGE_READ_X))
3459 rsize = min_t(unsigned int, CIFSMaxBufSize, rsize);
3460
3461 /* hard limit of CIFS_MAX_RSIZE */
3462 rsize = min_t(unsigned int, rsize, CIFS_MAX_RSIZE);
3463
3464 return rsize;
3465 }
3466
3467 static int
3468 is_path_accessible(int xid, struct cifs_tcon *tcon,
3469 struct cifs_sb_info *cifs_sb, const char *full_path)
3470 {
3471 int rc;
3472 FILE_ALL_INFO *pfile_info;
3473
3474 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
3475 if (pfile_info == NULL)
3476 return -ENOMEM;
3477
3478 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
3479 0 /* not legacy */, cifs_sb->local_nls,
3480 cifs_sb->mnt_cifs_flags &
3481 CIFS_MOUNT_MAP_SPECIAL_CHR);
3482
3483 if (rc == -EOPNOTSUPP || rc == -EINVAL)
3484 rc = SMBQueryInformation(xid, tcon, full_path, pfile_info,
3485 cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
3486 CIFS_MOUNT_MAP_SPECIAL_CHR);
3487 kfree(pfile_info);
3488 return rc;
3489 }
3490
3491 static void
3492 cleanup_volume_info_contents(struct smb_vol *volume_info)
3493 {
3494 kfree(volume_info->username);
3495 kzfree(volume_info->password);
3496 if (volume_info->UNCip != volume_info->UNC + 2)
3497 kfree(volume_info->UNCip);
3498 kfree(volume_info->UNC);
3499 kfree(volume_info->domainname);
3500 kfree(volume_info->iocharset);
3501 kfree(volume_info->prepath);
3502 }
3503
3504 void
3505 cifs_cleanup_volume_info(struct smb_vol *volume_info)
3506 {
3507 if (!volume_info)
3508 return;
3509 cleanup_volume_info_contents(volume_info);
3510 kfree(volume_info);
3511 }
3512
3513
3514 #ifdef CONFIG_CIFS_DFS_UPCALL
3515 /* build_path_to_root returns full path to root when
3516 * we do not have an exiting connection (tcon) */
3517 static char *
3518 build_unc_path_to_root(const struct smb_vol *vol,
3519 const struct cifs_sb_info *cifs_sb)
3520 {
3521 char *full_path, *pos;
3522 unsigned int pplen = vol->prepath ? strlen(vol->prepath) : 0;
3523 unsigned int unc_len = strnlen(vol->UNC, MAX_TREE_SIZE + 1);
3524
3525 full_path = kmalloc(unc_len + pplen + 1, GFP_KERNEL);
3526 if (full_path == NULL)
3527 return ERR_PTR(-ENOMEM);
3528
3529 strncpy(full_path, vol->UNC, unc_len);
3530 pos = full_path + unc_len;
3531
3532 if (pplen) {
3533 strncpy(pos, vol->prepath, pplen);
3534 pos += pplen;
3535 }
3536
3537 *pos = '\0'; /* add trailing null */
3538 convert_delimiter(full_path, CIFS_DIR_SEP(cifs_sb));
3539 cFYI(1, "%s: full_path=%s", __func__, full_path);
3540 return full_path;
3541 }
3542
3543 /*
3544 * Perform a dfs referral query for a share and (optionally) prefix
3545 *
3546 * If a referral is found, cifs_sb->mountdata will be (re-)allocated
3547 * to a string containing updated options for the submount. Otherwise it
3548 * will be left untouched.
3549 *
3550 * Returns the rc from get_dfs_path to the caller, which can be used to
3551 * determine whether there were referrals.
3552 */
3553 static int
3554 expand_dfs_referral(int xid, struct cifs_ses *pSesInfo,
3555 struct smb_vol *volume_info, struct cifs_sb_info *cifs_sb,
3556 int check_prefix)
3557 {
3558 int rc;
3559 unsigned int num_referrals = 0;
3560 struct dfs_info3_param *referrals = NULL;
3561 char *full_path = NULL, *ref_path = NULL, *mdata = NULL;
3562
3563 full_path = build_unc_path_to_root(volume_info, cifs_sb);
3564 if (IS_ERR(full_path))
3565 return PTR_ERR(full_path);
3566
3567 /* For DFS paths, skip the first '\' of the UNC */
3568 ref_path = check_prefix ? full_path + 1 : volume_info->UNC + 1;
3569
3570 rc = get_dfs_path(xid, pSesInfo , ref_path, cifs_sb->local_nls,
3571 &num_referrals, &referrals,
3572 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
3573
3574 if (!rc && num_referrals > 0) {
3575 char *fake_devname = NULL;
3576
3577 mdata = cifs_compose_mount_options(cifs_sb->mountdata,
3578 full_path + 1, referrals,
3579 &fake_devname);
3580
3581 free_dfs_info_array(referrals, num_referrals);
3582
3583 if (IS_ERR(mdata)) {
3584 rc = PTR_ERR(mdata);
3585 mdata = NULL;
3586 } else {
3587 cleanup_volume_info_contents(volume_info);
3588 memset(volume_info, '\0', sizeof(*volume_info));
3589 rc = cifs_setup_volume_info(volume_info, mdata,
3590 fake_devname);
3591 }
3592 kfree(fake_devname);
3593 kfree(cifs_sb->mountdata);
3594 cifs_sb->mountdata = mdata;
3595 }
3596 kfree(full_path);
3597 return rc;
3598 }
3599 #endif
3600
3601 static int
3602 cifs_setup_volume_info(struct smb_vol *volume_info, char *mount_data,
3603 const char *devname)
3604 {
3605 int rc = 0;
3606
3607 if (cifs_parse_mount_options(mount_data, devname, volume_info))
3608 return -EINVAL;
3609
3610 if (volume_info->nullauth) {
3611 cFYI(1, "Anonymous login");
3612 kfree(volume_info->username);
3613 volume_info->username = NULL;
3614 } else if (volume_info->username) {
3615 /* BB fixme parse for domain name here */
3616 cFYI(1, "Username: %s", volume_info->username);
3617 } else {
3618 cifserror("No username specified");
3619 /* In userspace mount helper we can get user name from alternate
3620 locations such as env variables and files on disk */
3621 return -EINVAL;
3622 }
3623
3624 /* this is needed for ASCII cp to Unicode converts */
3625 if (volume_info->iocharset == NULL) {
3626 /* load_nls_default cannot return null */
3627 volume_info->local_nls = load_nls_default();
3628 } else {
3629 volume_info->local_nls = load_nls(volume_info->iocharset);
3630 if (volume_info->local_nls == NULL) {
3631 cERROR(1, "CIFS mount error: iocharset %s not found",
3632 volume_info->iocharset);
3633 return -ELIBACC;
3634 }
3635 }
3636
3637 return rc;
3638 }
3639
3640 struct smb_vol *
3641 cifs_get_volume_info(char *mount_data, const char *devname)
3642 {
3643 int rc;
3644 struct smb_vol *volume_info;
3645
3646 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
3647 if (!volume_info)
3648 return ERR_PTR(-ENOMEM);
3649
3650 rc = cifs_setup_volume_info(volume_info, mount_data, devname);
3651 if (rc) {
3652 cifs_cleanup_volume_info(volume_info);
3653 volume_info = ERR_PTR(rc);
3654 }
3655
3656 return volume_info;
3657 }
3658
3659 /* make sure ra_pages is a multiple of rsize */
3660 static inline unsigned int
3661 cifs_ra_pages(struct cifs_sb_info *cifs_sb)
3662 {
3663 unsigned int reads;
3664 unsigned int rsize_pages = cifs_sb->rsize / PAGE_CACHE_SIZE;
3665
3666 if (rsize_pages >= default_backing_dev_info.ra_pages)
3667 return default_backing_dev_info.ra_pages;
3668 else if (rsize_pages == 0)
3669 return rsize_pages;
3670
3671 reads = default_backing_dev_info.ra_pages / rsize_pages;
3672 return reads * rsize_pages;
3673 }
3674
3675 int
3676 cifs_mount(struct cifs_sb_info *cifs_sb, struct smb_vol *volume_info)
3677 {
3678 int rc;
3679 int xid;
3680 struct cifs_ses *pSesInfo;
3681 struct cifs_tcon *tcon;
3682 struct TCP_Server_Info *srvTcp;
3683 char *full_path;
3684 struct tcon_link *tlink;
3685 #ifdef CONFIG_CIFS_DFS_UPCALL
3686 int referral_walks_count = 0;
3687 #endif
3688
3689 rc = bdi_setup_and_register(&cifs_sb->bdi, "cifs", BDI_CAP_MAP_COPY);
3690 if (rc)
3691 return rc;
3692
3693 #ifdef CONFIG_CIFS_DFS_UPCALL
3694 try_mount_again:
3695 /* cleanup activities if we're chasing a referral */
3696 if (referral_walks_count) {
3697 if (tcon)
3698 cifs_put_tcon(tcon);
3699 else if (pSesInfo)
3700 cifs_put_smb_ses(pSesInfo);
3701
3702 FreeXid(xid);
3703 }
3704 #endif
3705 rc = 0;
3706 tcon = NULL;
3707 pSesInfo = NULL;
3708 srvTcp = NULL;
3709 full_path = NULL;
3710 tlink = NULL;
3711
3712 xid = GetXid();
3713
3714 /* get a reference to a tcp session */
3715 srvTcp = cifs_get_tcp_session(volume_info);
3716 if (IS_ERR(srvTcp)) {
3717 rc = PTR_ERR(srvTcp);
3718 bdi_destroy(&cifs_sb->bdi);
3719 goto out;
3720 }
3721
3722 /* get a reference to a SMB session */
3723 pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
3724 if (IS_ERR(pSesInfo)) {
3725 rc = PTR_ERR(pSesInfo);
3726 pSesInfo = NULL;
3727 goto mount_fail_check;
3728 }
3729
3730 /* search for existing tcon to this server share */
3731 tcon = cifs_get_tcon(pSesInfo, volume_info);
3732 if (IS_ERR(tcon)) {
3733 rc = PTR_ERR(tcon);
3734 tcon = NULL;
3735 goto remote_path_check;
3736 }
3737
3738 /* tell server which Unix caps we support */
3739 if (tcon->ses->capabilities & CAP_UNIX) {
3740 /* reset of caps checks mount to see if unix extensions
3741 disabled for just this mount */
3742 reset_cifs_unix_caps(xid, tcon, cifs_sb, volume_info);
3743 if ((tcon->ses->server->tcpStatus == CifsNeedReconnect) &&
3744 (le64_to_cpu(tcon->fsUnixInfo.Capability) &
3745 CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)) {
3746 rc = -EACCES;
3747 goto mount_fail_check;
3748 }
3749 } else
3750 tcon->unix_ext = 0; /* server does not support them */
3751
3752 /* do not care if following two calls succeed - informational */
3753 if (!tcon->ipc) {
3754 CIFSSMBQFSDeviceInfo(xid, tcon);
3755 CIFSSMBQFSAttributeInfo(xid, tcon);
3756 }
3757
3758 cifs_sb->wsize = cifs_negotiate_wsize(tcon, volume_info);
3759 cifs_sb->rsize = cifs_negotiate_rsize(tcon, volume_info);
3760
3761 /* tune readahead according to rsize */
3762 cifs_sb->bdi.ra_pages = cifs_ra_pages(cifs_sb);
3763
3764 remote_path_check:
3765 #ifdef CONFIG_CIFS_DFS_UPCALL
3766 /*
3767 * Perform an unconditional check for whether there are DFS
3768 * referrals for this path without prefix, to provide support
3769 * for DFS referrals from w2k8 servers which don't seem to respond
3770 * with PATH_NOT_COVERED to requests that include the prefix.
3771 * Chase the referral if found, otherwise continue normally.
3772 */
3773 if (referral_walks_count == 0) {
3774 int refrc = expand_dfs_referral(xid, pSesInfo, volume_info,
3775 cifs_sb, false);
3776 if (!refrc) {
3777 referral_walks_count++;
3778 goto try_mount_again;
3779 }
3780 }
3781 #endif
3782
3783 /* check if a whole path is not remote */
3784 if (!rc && tcon) {
3785 /* build_path_to_root works only when we have a valid tcon */
3786 full_path = cifs_build_path_to_root(volume_info, cifs_sb, tcon);
3787 if (full_path == NULL) {
3788 rc = -ENOMEM;
3789 goto mount_fail_check;
3790 }
3791 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
3792 if (rc != 0 && rc != -EREMOTE) {
3793 kfree(full_path);
3794 goto mount_fail_check;
3795 }
3796 kfree(full_path);
3797 }
3798
3799 /* get referral if needed */
3800 if (rc == -EREMOTE) {
3801 #ifdef CONFIG_CIFS_DFS_UPCALL
3802 if (referral_walks_count > MAX_NESTED_LINKS) {
3803 /*
3804 * BB: when we implement proper loop detection,
3805 * we will remove this check. But now we need it
3806 * to prevent an indefinite loop if 'DFS tree' is
3807 * misconfigured (i.e. has loops).
3808 */
3809 rc = -ELOOP;
3810 goto mount_fail_check;
3811 }
3812
3813 rc = expand_dfs_referral(xid, pSesInfo, volume_info, cifs_sb,
3814 true);
3815
3816 if (!rc) {
3817 referral_walks_count++;
3818 goto try_mount_again;
3819 }
3820 goto mount_fail_check;
3821 #else /* No DFS support, return error on mount */
3822 rc = -EOPNOTSUPP;
3823 #endif
3824 }
3825
3826 if (rc)
3827 goto mount_fail_check;
3828
3829 /* now, hang the tcon off of the superblock */
3830 tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
3831 if (tlink == NULL) {
3832 rc = -ENOMEM;
3833 goto mount_fail_check;
3834 }
3835
3836 tlink->tl_uid = pSesInfo->linux_uid;
3837 tlink->tl_tcon = tcon;
3838 tlink->tl_time = jiffies;
3839 set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
3840 set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3841
3842 cifs_sb->master_tlink = tlink;
3843 spin_lock(&cifs_sb->tlink_tree_lock);
3844 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3845 spin_unlock(&cifs_sb->tlink_tree_lock);
3846
3847 queue_delayed_work(cifsiod_wq, &cifs_sb->prune_tlinks,
3848 TLINK_IDLE_EXPIRE);
3849
3850 mount_fail_check:
3851 /* on error free sesinfo and tcon struct if needed */
3852 if (rc) {
3853 /* If find_unc succeeded then rc == 0 so we can not end */
3854 /* up accidentally freeing someone elses tcon struct */
3855 if (tcon)
3856 cifs_put_tcon(tcon);
3857 else if (pSesInfo)
3858 cifs_put_smb_ses(pSesInfo);
3859 else
3860 cifs_put_tcp_session(srvTcp);
3861 bdi_destroy(&cifs_sb->bdi);
3862 }
3863
3864 out:
3865 FreeXid(xid);
3866 return rc;
3867 }
3868
3869 /*
3870 * Issue a TREE_CONNECT request. Note that for IPC$ shares, that the tcon
3871 * pointer may be NULL.
3872 */
3873 int
3874 CIFSTCon(unsigned int xid, struct cifs_ses *ses,
3875 const char *tree, struct cifs_tcon *tcon,
3876 const struct nls_table *nls_codepage)
3877 {
3878 struct smb_hdr *smb_buffer;
3879 struct smb_hdr *smb_buffer_response;
3880 TCONX_REQ *pSMB;
3881 TCONX_RSP *pSMBr;
3882 unsigned char *bcc_ptr;
3883 int rc = 0;
3884 int length;
3885 __u16 bytes_left, count;
3886
3887 if (ses == NULL)
3888 return -EIO;
3889
3890 smb_buffer = cifs_buf_get();
3891 if (smb_buffer == NULL)
3892 return -ENOMEM;
3893
3894 smb_buffer_response = smb_buffer;
3895
3896 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
3897 NULL /*no tid */ , 4 /*wct */ );
3898
3899 smb_buffer->Mid = GetNextMid(ses->server);
3900 smb_buffer->Uid = ses->Suid;
3901 pSMB = (TCONX_REQ *) smb_buffer;
3902 pSMBr = (TCONX_RSP *) smb_buffer_response;
3903
3904 pSMB->AndXCommand = 0xFF;
3905 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
3906 bcc_ptr = &pSMB->Password[0];
3907 if (!tcon || (ses->server->sec_mode & SECMODE_USER)) {
3908 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
3909 *bcc_ptr = 0; /* password is null byte */
3910 bcc_ptr++; /* skip password */
3911 /* already aligned so no need to do it below */
3912 } else {
3913 pSMB->PasswordLength = cpu_to_le16(CIFS_AUTH_RESP_SIZE);
3914 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
3915 specified as required (when that support is added to
3916 the vfs in the future) as only NTLM or the much
3917 weaker LANMAN (which we do not send by default) is accepted
3918 by Samba (not sure whether other servers allow
3919 NTLMv2 password here) */
3920 #ifdef CONFIG_CIFS_WEAK_PW_HASH
3921 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
3922 (ses->server->secType == LANMAN))
3923 calc_lanman_hash(tcon->password, ses->server->cryptkey,
3924 ses->server->sec_mode &
3925 SECMODE_PW_ENCRYPT ? true : false,
3926 bcc_ptr);
3927 else
3928 #endif /* CIFS_WEAK_PW_HASH */
3929 rc = SMBNTencrypt(tcon->password, ses->server->cryptkey,
3930 bcc_ptr, nls_codepage);
3931
3932 bcc_ptr += CIFS_AUTH_RESP_SIZE;
3933 if (ses->capabilities & CAP_UNICODE) {
3934 /* must align unicode strings */
3935 *bcc_ptr = 0; /* null byte password */
3936 bcc_ptr++;
3937 }
3938 }
3939
3940 if (ses->server->sec_mode &
3941 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
3942 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
3943
3944 if (ses->capabilities & CAP_STATUS32) {
3945 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3946 }
3947 if (ses->capabilities & CAP_DFS) {
3948 smb_buffer->Flags2 |= SMBFLG2_DFS;
3949 }
3950 if (ses->capabilities & CAP_UNICODE) {
3951 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3952 length =
3953 cifs_strtoUTF16((__le16 *) bcc_ptr, tree,
3954 6 /* max utf8 char length in bytes */ *
3955 (/* server len*/ + 256 /* share len */), nls_codepage);
3956 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
3957 bcc_ptr += 2; /* skip trailing null */
3958 } else { /* ASCII */
3959 strcpy(bcc_ptr, tree);
3960 bcc_ptr += strlen(tree) + 1;
3961 }
3962 strcpy(bcc_ptr, "?????");
3963 bcc_ptr += strlen("?????");
3964 bcc_ptr += 1;
3965 count = bcc_ptr - &pSMB->Password[0];
3966 pSMB->hdr.smb_buf_length = cpu_to_be32(be32_to_cpu(
3967 pSMB->hdr.smb_buf_length) + count);
3968 pSMB->ByteCount = cpu_to_le16(count);
3969
3970 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
3971 0);
3972
3973 /* above now done in SendReceive */
3974 if ((rc == 0) && (tcon != NULL)) {
3975 bool is_unicode;
3976
3977 tcon->tidStatus = CifsGood;
3978 tcon->need_reconnect = false;
3979 tcon->tid = smb_buffer_response->Tid;
3980 bcc_ptr = pByteArea(smb_buffer_response);
3981 bytes_left = get_bcc(smb_buffer_response);
3982 length = strnlen(bcc_ptr, bytes_left - 2);
3983 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3984 is_unicode = true;
3985 else
3986 is_unicode = false;
3987
3988
3989 /* skip service field (NB: this field is always ASCII) */
3990 if (length == 3) {
3991 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3992 (bcc_ptr[2] == 'C')) {
3993 cFYI(1, "IPC connection");
3994 tcon->ipc = 1;
3995 }
3996 } else if (length == 2) {
3997 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3998 /* the most common case */
3999 cFYI(1, "disk share connection");
4000 }
4001 }
4002 bcc_ptr += length + 1;
4003 bytes_left -= (length + 1);
4004 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
4005
4006 /* mostly informational -- no need to fail on error here */
4007 kfree(tcon->nativeFileSystem);
4008 tcon->nativeFileSystem = cifs_strndup_from_utf16(bcc_ptr,
4009 bytes_left, is_unicode,
4010 nls_codepage);
4011
4012 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
4013
4014 if ((smb_buffer_response->WordCount == 3) ||
4015 (smb_buffer_response->WordCount == 7))
4016 /* field is in same location */
4017 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
4018 else
4019 tcon->Flags = 0;
4020 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
4021 } else if ((rc == 0) && tcon == NULL) {
4022 /* all we need to save for IPC$ connection */
4023 ses->ipc_tid = smb_buffer_response->Tid;
4024 }
4025
4026 cifs_buf_release(smb_buffer);
4027 return rc;
4028 }
4029
4030 void
4031 cifs_umount(struct cifs_sb_info *cifs_sb)
4032 {
4033 struct rb_root *root = &cifs_sb->tlink_tree;
4034 struct rb_node *node;
4035 struct tcon_link *tlink;
4036
4037 cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
4038
4039 spin_lock(&cifs_sb->tlink_tree_lock);
4040 while ((node = rb_first(root))) {
4041 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
4042 cifs_get_tlink(tlink);
4043 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
4044 rb_erase(node, root);
4045
4046 spin_unlock(&cifs_sb->tlink_tree_lock);
4047 cifs_put_tlink(tlink);
4048 spin_lock(&cifs_sb->tlink_tree_lock);
4049 }
4050 spin_unlock(&cifs_sb->tlink_tree_lock);
4051
4052 bdi_destroy(&cifs_sb->bdi);
4053 kfree(cifs_sb->mountdata);
4054 unload_nls(cifs_sb->local_nls);
4055 kfree(cifs_sb);
4056 }
4057
4058 int cifs_negotiate_protocol(unsigned int xid, struct cifs_ses *ses)
4059 {
4060 int rc = 0;
4061 struct TCP_Server_Info *server = ses->server;
4062
4063 /* only send once per connect */
4064 if (server->maxBuf != 0)
4065 return 0;
4066
4067 cifs_set_credits(server, 1);
4068 rc = CIFSSMBNegotiate(xid, ses);
4069 if (rc == -EAGAIN) {
4070 /* retry only once on 1st time connection */
4071 cifs_set_credits(server, 1);
4072 rc = CIFSSMBNegotiate(xid, ses);
4073 if (rc == -EAGAIN)
4074 rc = -EHOSTDOWN;
4075 }
4076 if (rc == 0) {
4077 spin_lock(&GlobalMid_Lock);
4078 if (server->tcpStatus == CifsNeedNegotiate)
4079 server->tcpStatus = CifsGood;
4080 else
4081 rc = -EHOSTDOWN;
4082 spin_unlock(&GlobalMid_Lock);
4083
4084 }
4085
4086 return rc;
4087 }
4088
4089
4090 int cifs_setup_session(unsigned int xid, struct cifs_ses *ses,
4091 struct nls_table *nls_info)
4092 {
4093 int rc = 0;
4094 struct TCP_Server_Info *server = ses->server;
4095
4096 ses->flags = 0;
4097 ses->capabilities = server->capabilities;
4098 if (linuxExtEnabled == 0)
4099 ses->capabilities &= (~CAP_UNIX);
4100
4101 cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
4102 server->sec_mode, server->capabilities, server->timeAdj);
4103
4104 rc = CIFS_SessSetup(xid, ses, nls_info);
4105 if (rc) {
4106 cERROR(1, "Send error in SessSetup = %d", rc);
4107 } else {
4108 mutex_lock(&ses->server->srv_mutex);
4109 if (!server->session_estab) {
4110 server->session_key.response = ses->auth_key.response;
4111 server->session_key.len = ses->auth_key.len;
4112 server->sequence_number = 0x2;
4113 server->session_estab = true;
4114 ses->auth_key.response = NULL;
4115 }
4116 mutex_unlock(&server->srv_mutex);
4117
4118 cFYI(1, "CIFS Session Established successfully");
4119 spin_lock(&GlobalMid_Lock);
4120 ses->status = CifsGood;
4121 ses->need_reconnect = false;
4122 spin_unlock(&GlobalMid_Lock);
4123 }
4124
4125 kfree(ses->auth_key.response);
4126 ses->auth_key.response = NULL;
4127 ses->auth_key.len = 0;
4128 kfree(ses->ntlmssp);
4129 ses->ntlmssp = NULL;
4130
4131 return rc;
4132 }
4133
4134 static int
4135 cifs_set_vol_auth(struct smb_vol *vol, struct cifs_ses *ses)
4136 {
4137 switch (ses->server->secType) {
4138 case Kerberos:
4139 vol->secFlg = CIFSSEC_MUST_KRB5;
4140 return 0;
4141 case NTLMv2:
4142 vol->secFlg = CIFSSEC_MUST_NTLMV2;
4143 break;
4144 case NTLM:
4145 vol->secFlg = CIFSSEC_MUST_NTLM;
4146 break;
4147 case RawNTLMSSP:
4148 vol->secFlg = CIFSSEC_MUST_NTLMSSP;
4149 break;
4150 case LANMAN:
4151 vol->secFlg = CIFSSEC_MUST_LANMAN;
4152 break;
4153 }
4154
4155 return cifs_set_cifscreds(vol, ses);
4156 }
4157
4158 static struct cifs_tcon *
4159 cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
4160 {
4161 int rc;
4162 struct cifs_tcon *master_tcon = cifs_sb_master_tcon(cifs_sb);
4163 struct cifs_ses *ses;
4164 struct cifs_tcon *tcon = NULL;
4165 struct smb_vol *vol_info;
4166
4167 vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
4168 if (vol_info == NULL)
4169 return ERR_PTR(-ENOMEM);
4170
4171 vol_info->local_nls = cifs_sb->local_nls;
4172 vol_info->linux_uid = fsuid;
4173 vol_info->cred_uid = fsuid;
4174 vol_info->UNC = master_tcon->treeName;
4175 vol_info->retry = master_tcon->retry;
4176 vol_info->nocase = master_tcon->nocase;
4177 vol_info->local_lease = master_tcon->local_lease;
4178 vol_info->no_linux_ext = !master_tcon->unix_ext;
4179
4180 rc = cifs_set_vol_auth(vol_info, master_tcon->ses);
4181 if (rc) {
4182 tcon = ERR_PTR(rc);
4183 goto out;
4184 }
4185
4186 /* get a reference for the same TCP session */
4187 spin_lock(&cifs_tcp_ses_lock);
4188 ++master_tcon->ses->server->srv_count;
4189 spin_unlock(&cifs_tcp_ses_lock);
4190
4191 ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
4192 if (IS_ERR(ses)) {
4193 tcon = (struct cifs_tcon *)ses;
4194 cifs_put_tcp_session(master_tcon->ses->server);
4195 goto out;
4196 }
4197
4198 tcon = cifs_get_tcon(ses, vol_info);
4199 if (IS_ERR(tcon)) {
4200 cifs_put_smb_ses(ses);
4201 goto out;
4202 }
4203
4204 if (ses->capabilities & CAP_UNIX)
4205 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
4206 out:
4207 kfree(vol_info->username);
4208 kfree(vol_info->password);
4209 kfree(vol_info);
4210
4211 return tcon;
4212 }
4213
4214 struct cifs_tcon *
4215 cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
4216 {
4217 return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
4218 }
4219
4220 static int
4221 cifs_sb_tcon_pending_wait(void *unused)
4222 {
4223 schedule();
4224 return signal_pending(current) ? -ERESTARTSYS : 0;
4225 }
4226
4227 /* find and return a tlink with given uid */
4228 static struct tcon_link *
4229 tlink_rb_search(struct rb_root *root, uid_t uid)
4230 {
4231 struct rb_node *node = root->rb_node;
4232 struct tcon_link *tlink;
4233
4234 while (node) {
4235 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
4236
4237 if (tlink->tl_uid > uid)
4238 node = node->rb_left;
4239 else if (tlink->tl_uid < uid)
4240 node = node->rb_right;
4241 else
4242 return tlink;
4243 }
4244 return NULL;
4245 }
4246
4247 /* insert a tcon_link into the tree */
4248 static void
4249 tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
4250 {
4251 struct rb_node **new = &(root->rb_node), *parent = NULL;
4252 struct tcon_link *tlink;
4253
4254 while (*new) {
4255 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
4256 parent = *new;
4257
4258 if (tlink->tl_uid > new_tlink->tl_uid)
4259 new = &((*new)->rb_left);
4260 else
4261 new = &((*new)->rb_right);
4262 }
4263
4264 rb_link_node(&new_tlink->tl_rbnode, parent, new);
4265 rb_insert_color(&new_tlink->tl_rbnode, root);
4266 }
4267
4268 /*
4269 * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
4270 * current task.
4271 *
4272 * If the superblock doesn't refer to a multiuser mount, then just return
4273 * the master tcon for the mount.
4274 *
4275 * First, search the rbtree for an existing tcon for this fsuid. If one
4276 * exists, then check to see if it's pending construction. If it is then wait
4277 * for construction to complete. Once it's no longer pending, check to see if
4278 * it failed and either return an error or retry construction, depending on
4279 * the timeout.
4280 *
4281 * If one doesn't exist then insert a new tcon_link struct into the tree and
4282 * try to construct a new one.
4283 */
4284 struct tcon_link *
4285 cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
4286 {
4287 int ret;
4288 uid_t fsuid = current_fsuid();
4289 struct tcon_link *tlink, *newtlink;
4290
4291 if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
4292 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
4293
4294 spin_lock(&cifs_sb->tlink_tree_lock);
4295 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
4296 if (tlink)
4297 cifs_get_tlink(tlink);
4298 spin_unlock(&cifs_sb->tlink_tree_lock);
4299
4300 if (tlink == NULL) {
4301 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
4302 if (newtlink == NULL)
4303 return ERR_PTR(-ENOMEM);
4304 newtlink->tl_uid = fsuid;
4305 newtlink->tl_tcon = ERR_PTR(-EACCES);
4306 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
4307 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
4308 cifs_get_tlink(newtlink);
4309
4310 spin_lock(&cifs_sb->tlink_tree_lock);
4311 /* was one inserted after previous search? */
4312 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
4313 if (tlink) {
4314 cifs_get_tlink(tlink);
4315 spin_unlock(&cifs_sb->tlink_tree_lock);
4316 kfree(newtlink);
4317 goto wait_for_construction;
4318 }
4319 tlink = newtlink;
4320 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
4321 spin_unlock(&cifs_sb->tlink_tree_lock);
4322 } else {
4323 wait_for_construction:
4324 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
4325 cifs_sb_tcon_pending_wait,
4326 TASK_INTERRUPTIBLE);
4327 if (ret) {
4328 cifs_put_tlink(tlink);
4329 return ERR_PTR(ret);
4330 }
4331
4332 /* if it's good, return it */
4333 if (!IS_ERR(tlink->tl_tcon))
4334 return tlink;
4335
4336 /* return error if we tried this already recently */
4337 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
4338 cifs_put_tlink(tlink);
4339 return ERR_PTR(-EACCES);
4340 }
4341
4342 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
4343 goto wait_for_construction;
4344 }
4345
4346 tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
4347 clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
4348 wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
4349
4350 if (IS_ERR(tlink->tl_tcon)) {
4351 cifs_put_tlink(tlink);
4352 return ERR_PTR(-EACCES);
4353 }
4354
4355 return tlink;
4356 }
4357
4358 /*
4359 * periodic workqueue job that scans tcon_tree for a superblock and closes
4360 * out tcons.
4361 */
4362 static void
4363 cifs_prune_tlinks(struct work_struct *work)
4364 {
4365 struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
4366 prune_tlinks.work);
4367 struct rb_root *root = &cifs_sb->tlink_tree;
4368 struct rb_node *node = rb_first(root);
4369 struct rb_node *tmp;
4370 struct tcon_link *tlink;
4371
4372 /*
4373 * Because we drop the spinlock in the loop in order to put the tlink
4374 * it's not guarded against removal of links from the tree. The only
4375 * places that remove entries from the tree are this function and
4376 * umounts. Because this function is non-reentrant and is canceled
4377 * before umount can proceed, this is safe.
4378 */
4379 spin_lock(&cifs_sb->tlink_tree_lock);
4380 node = rb_first(root);
4381 while (node != NULL) {
4382 tmp = node;
4383 node = rb_next(tmp);
4384 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
4385
4386 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
4387 atomic_read(&tlink->tl_count) != 0 ||
4388 time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
4389 continue;
4390
4391 cifs_get_tlink(tlink);
4392 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
4393 rb_erase(tmp, root);
4394
4395 spin_unlock(&cifs_sb->tlink_tree_lock);
4396 cifs_put_tlink(tlink);
4397 spin_lock(&cifs_sb->tlink_tree_lock);
4398 }
4399 spin_unlock(&cifs_sb->tlink_tree_lock);
4400
4401 queue_delayed_work(cifsiod_wq, &cifs_sb->prune_tlinks,
4402 TLINK_IDLE_EXPIRE);
4403 }
This page took 0.168694 seconds and 5 git commands to generate.