4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/slab.h>
27 #include <linux/pagemap.h>
28 #include <linux/ctype.h>
29 #include <linux/utsname.h>
30 #include <linux/mempool.h>
31 #include <linux/delay.h>
32 #include <linux/completion.h>
33 #include <linux/kthread.h>
34 #include <linux/pagevec.h>
35 #include <linux/freezer.h>
36 #include <linux/namei.h>
37 #include <asm/uaccess.h>
38 #include <asm/processor.h>
39 #include <linux/inet.h>
43 #include "cifsproto.h"
44 #include "cifs_unicode.h"
45 #include "cifs_debug.h"
46 #include "cifs_fs_sb.h"
49 #include "rfc1002pdu.h"
53 #define RFC1001_PORT 139
55 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
58 extern mempool_t *cifs_req_poolp;
66 char *iocharset; /* local code page for mapping to and from Unicode */
67 char source_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* clnt nb name */
68 char target_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* srvr nb name */
82 bool no_psx_acl:1; /* set if posix acl support should be disabled */
84 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
85 bool server_ino:1; /* use inode numbers from server ie UniqueId */
87 bool remap:1; /* set to remap seven reserved chars in filenames */
88 bool posix_paths:1; /* unset to not ask for posix pathnames. */
91 bool nullauth:1; /* attempt to authenticate with null user */
92 bool nocase:1; /* request case insensitive filenames */
93 bool nobrl:1; /* disable sending byte range locks to srv */
94 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
95 bool seal:1; /* request transport encryption on share */
96 bool nodfs:1; /* Do not request DFS, even if available */
97 bool local_lease:1; /* check leases only on local system, not remote */
100 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
101 bool fsc:1; /* enable fscache */
102 bool mfsymlinks:1; /* use Minshall+French Symlinks */
106 bool sockopt_tcp_nodelay:1;
107 unsigned short int port;
108 unsigned long actimeo; /* attribute cache timeout (jiffies) */
110 struct sockaddr_storage srcaddr; /* allow binding to a local IP */
111 struct nls_table *local_nls;
114 /* FIXME: should these be tunable? */
115 #define TLINK_ERROR_EXPIRE (1 * HZ)
116 #define TLINK_IDLE_EXPIRE (600 * HZ)
118 static int ip_connect(struct TCP_Server_Info *server);
119 static int generic_ip_connect(struct TCP_Server_Info *server);
120 static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
121 static void cifs_prune_tlinks(struct work_struct *work);
124 * cifs tcp session reconnection
126 * mark tcp session as reconnecting so temporarily locked
127 * mark all smb sessions as reconnecting for tcp session
128 * reconnect tcp session
129 * wake up waiters on reconnection? - (not needed currently)
132 cifs_reconnect(struct TCP_Server_Info *server)
135 struct list_head *tmp, *tmp2;
136 struct cifsSesInfo *ses;
137 struct cifsTconInfo *tcon;
138 struct mid_q_entry *mid_entry;
140 spin_lock(&GlobalMid_Lock);
141 if (server->tcpStatus == CifsExiting) {
142 /* the demux thread will exit normally
143 next time through the loop */
144 spin_unlock(&GlobalMid_Lock);
147 server->tcpStatus = CifsNeedReconnect;
148 spin_unlock(&GlobalMid_Lock);
151 cFYI(1, "Reconnecting tcp session");
153 /* before reconnecting the tcp session, mark the smb session (uid)
154 and the tid bad so they are not used until reconnected */
155 spin_lock(&cifs_tcp_ses_lock);
156 list_for_each(tmp, &server->smb_ses_list) {
157 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
158 ses->need_reconnect = true;
160 list_for_each(tmp2, &ses->tcon_list) {
161 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
162 tcon->need_reconnect = true;
165 spin_unlock(&cifs_tcp_ses_lock);
166 /* do not want to be sending data on a socket we are freeing */
167 mutex_lock(&server->srv_mutex);
168 if (server->ssocket) {
169 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
170 server->ssocket->flags);
171 kernel_sock_shutdown(server->ssocket, SHUT_WR);
172 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
173 server->ssocket->state,
174 server->ssocket->flags);
175 sock_release(server->ssocket);
176 server->ssocket = NULL;
178 server->sequence_number = 0;
179 server->session_estab = false;
180 kfree(server->session_key.response);
181 server->session_key.response = NULL;
182 server->session_key.len = 0;
184 spin_lock(&GlobalMid_Lock);
185 list_for_each(tmp, &server->pending_mid_q) {
186 mid_entry = list_entry(tmp, struct
189 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
190 /* Mark other intransit requests as needing
191 retry so we do not immediately mark the
192 session bad again (ie after we reconnect
193 below) as they timeout too */
194 mid_entry->midState = MID_RETRY_NEEDED;
197 spin_unlock(&GlobalMid_Lock);
198 mutex_unlock(&server->srv_mutex);
200 while ((server->tcpStatus != CifsExiting) &&
201 (server->tcpStatus != CifsGood)) {
204 /* we should try only the port we connected to before */
205 rc = generic_ip_connect(server);
207 cFYI(1, "reconnect error %d", rc);
210 atomic_inc(&tcpSesReconnectCount);
211 spin_lock(&GlobalMid_Lock);
212 if (server->tcpStatus != CifsExiting)
213 server->tcpStatus = CifsGood;
214 spin_unlock(&GlobalMid_Lock);
215 /* atomic_set(&server->inFlight,0);*/
216 wake_up(&server->response_q);
224 0 not a transact2, or all data present
225 >0 transact2 with that much data missing
226 -EINVAL = invalid transact2
229 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
231 struct smb_t2_rsp *pSMBt;
233 int data_in_this_rsp;
236 if (pSMB->Command != SMB_COM_TRANSACTION2)
239 /* check for plausible wct, bcc and t2 data and parm sizes */
240 /* check for parm and data offset going beyond end of smb */
241 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
242 cFYI(1, "invalid transact2 word count");
246 pSMBt = (struct smb_t2_rsp *)pSMB;
248 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
249 data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
251 remaining = total_data_size - data_in_this_rsp;
255 else if (remaining < 0) {
256 cFYI(1, "total data %d smaller than data in frame %d",
257 total_data_size, data_in_this_rsp);
260 cFYI(1, "missing %d bytes from transact2, check next response",
262 if (total_data_size > maxBufSize) {
263 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
264 total_data_size, maxBufSize);
271 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
273 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
274 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
279 char *data_area_of_target;
280 char *data_area_of_buf2;
283 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
285 if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
286 cFYI(1, "total data size of primary and secondary t2 differ");
289 total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
291 remaining = total_data_size - total_in_buf;
296 if (remaining == 0) /* nothing to do, ignore */
299 total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
300 if (remaining < total_in_buf2) {
301 cFYI(1, "transact2 2nd response contains too much data");
304 /* find end of first SMB data area */
305 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
306 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
307 /* validate target area */
309 data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
310 le16_to_cpu(pSMB2->t2_rsp.DataOffset);
312 data_area_of_target += total_in_buf;
314 /* copy second buffer into end of first buffer */
315 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
316 total_in_buf += total_in_buf2;
317 pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
318 byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
319 byte_count += total_in_buf2;
320 BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
322 byte_count = pTargetSMB->smb_buf_length;
323 byte_count += total_in_buf2;
325 /* BB also add check that we are not beyond maximum buffer size */
327 pTargetSMB->smb_buf_length = byte_count;
329 if (remaining == total_in_buf2) {
330 cFYI(1, "found the last secondary response");
331 return 0; /* we are done */
332 } else /* more responses to go */
338 cifs_demultiplex_thread(struct TCP_Server_Info *server)
341 unsigned int pdu_length, total_read;
342 struct smb_hdr *smb_buffer = NULL;
343 struct smb_hdr *bigbuf = NULL;
344 struct smb_hdr *smallbuf = NULL;
345 struct msghdr smb_msg;
347 struct socket *csocket = server->ssocket;
348 struct list_head *tmp;
349 struct task_struct *task_to_wake = NULL;
350 struct mid_q_entry *mid_entry;
352 bool isLargeBuf = false;
356 current->flags |= PF_MEMALLOC;
357 cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
359 length = atomic_inc_return(&tcpSesAllocCount);
361 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
365 while (server->tcpStatus != CifsExiting) {
368 if (bigbuf == NULL) {
369 bigbuf = cifs_buf_get();
371 cERROR(1, "No memory for large SMB response");
373 /* retry will check if exiting */
376 } else if (isLargeBuf) {
377 /* we are reusing a dirty large buf, clear its start */
378 memset(bigbuf, 0, sizeof(struct smb_hdr));
381 if (smallbuf == NULL) {
382 smallbuf = cifs_small_buf_get();
384 cERROR(1, "No memory for SMB response");
386 /* retry will check if exiting */
389 /* beginning of smb buffer is cleared in our buf_get */
390 } else /* if existing small buf clear beginning */
391 memset(smallbuf, 0, sizeof(struct smb_hdr));
395 smb_buffer = smallbuf;
396 iov.iov_base = smb_buffer;
398 smb_msg.msg_control = NULL;
399 smb_msg.msg_controllen = 0;
400 pdu_length = 4; /* enough to get RFC1001 header */
403 kernel_recvmsg(csocket, &smb_msg,
404 &iov, 1, pdu_length, 0 /* BB other flags? */);
406 if (server->tcpStatus == CifsExiting) {
408 } else if (server->tcpStatus == CifsNeedReconnect) {
409 cFYI(1, "Reconnect after server stopped responding");
410 cifs_reconnect(server);
411 cFYI(1, "call to reconnect done");
412 csocket = server->ssocket;
414 } else if (length == -ERESTARTSYS ||
417 msleep(1); /* minimum sleep to prevent looping
418 allowing socket to clear and app threads to set
419 tcpStatus CifsNeedReconnect if server hung */
420 if (pdu_length < 4) {
421 iov.iov_base = (4 - pdu_length) +
423 iov.iov_len = pdu_length;
424 smb_msg.msg_control = NULL;
425 smb_msg.msg_controllen = 0;
429 } else if (length <= 0) {
430 cFYI(1, "Reconnect after unexpected peek error %d",
432 cifs_reconnect(server);
433 csocket = server->ssocket;
434 wake_up(&server->response_q);
436 } else if (length < pdu_length) {
437 cFYI(1, "requested %d bytes but only got %d bytes",
439 pdu_length -= length;
444 /* The right amount was read from socket - 4 bytes */
445 /* so we can now interpret the length field */
447 /* the first byte big endian of the length field,
448 is actually not part of the length but the type
449 with the most common, zero, as regular data */
450 temp = *((char *) smb_buffer);
452 /* Note that FC 1001 length is big endian on the wire,
453 but we convert it here so it is always manipulated
454 as host byte order */
455 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
456 smb_buffer->smb_buf_length = pdu_length;
458 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
460 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
462 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
463 cFYI(1, "Good RFC 1002 session rsp");
465 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
466 /* we get this from Windows 98 instead of
467 an error on SMB negprot response */
468 cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
470 /* give server a second to clean up */
472 /* always try 445 first on reconnect since we get NACK
473 * on some if we ever connected to port 139 (the NACK
474 * is since we do not begin with RFC1001 session
477 cifs_set_port((struct sockaddr *)
478 &server->dstaddr, CIFS_PORT);
479 cifs_reconnect(server);
480 csocket = server->ssocket;
481 wake_up(&server->response_q);
483 } else if (temp != (char) 0) {
484 cERROR(1, "Unknown RFC 1002 frame");
485 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
487 cifs_reconnect(server);
488 csocket = server->ssocket;
492 /* else we have an SMB response */
493 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
494 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
495 cERROR(1, "Invalid size SMB length %d pdu_length %d",
496 length, pdu_length+4);
497 cifs_reconnect(server);
498 csocket = server->ssocket;
499 wake_up(&server->response_q);
506 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
508 memcpy(bigbuf, smallbuf, 4);
512 iov.iov_base = 4 + (char *)smb_buffer;
513 iov.iov_len = pdu_length;
514 for (total_read = 0; total_read < pdu_length;
515 total_read += length) {
516 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
517 pdu_length - total_read, 0);
518 if (server->tcpStatus == CifsExiting) {
522 } else if (server->tcpStatus == CifsNeedReconnect) {
523 cifs_reconnect(server);
524 csocket = server->ssocket;
525 /* Reconnect wakes up rspns q */
526 /* Now we will reread sock */
529 } else if (length == -ERESTARTSYS ||
532 msleep(1); /* minimum sleep to prevent looping,
533 allowing socket to clear and app
534 threads to set tcpStatus
535 CifsNeedReconnect if server hung*/
538 } else if (length <= 0) {
539 cERROR(1, "Received no data, expecting %d",
540 pdu_length - total_read);
541 cifs_reconnect(server);
542 csocket = server->ssocket;
549 else if (reconnect == 1)
552 length += 4; /* account for rfc1002 hdr */
555 dump_smb(smb_buffer, length);
556 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
557 cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
563 spin_lock(&GlobalMid_Lock);
564 list_for_each(tmp, &server->pending_mid_q) {
565 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
567 if ((mid_entry->mid == smb_buffer->Mid) &&
568 (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
569 (mid_entry->command == smb_buffer->Command)) {
570 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
571 /* We have a multipart transact2 resp */
573 if (mid_entry->resp_buf) {
574 /* merge response - fix up 1st*/
575 if (coalesce_t2(smb_buffer,
576 mid_entry->resp_buf)) {
577 mid_entry->multiRsp =
581 /* all parts received */
582 mid_entry->multiEnd =
588 cERROR(1, "1st trans2 resp needs bigbuf");
589 /* BB maybe we can fix this up, switch
590 to already allocated large buffer? */
592 /* Have first buffer */
593 mid_entry->resp_buf =
595 mid_entry->largeBuf =
602 mid_entry->resp_buf = smb_buffer;
603 mid_entry->largeBuf = isLargeBuf;
605 task_to_wake = mid_entry->tsk;
606 mid_entry->midState = MID_RESPONSE_RECEIVED;
607 #ifdef CONFIG_CIFS_STATS2
608 mid_entry->when_received = jiffies;
610 /* so we do not time out requests to server
611 which is still responding (since server could
612 be busy but not dead) */
613 server->lstrp = jiffies;
617 spin_unlock(&GlobalMid_Lock);
619 /* Was previous buf put in mpx struct for multi-rsp? */
621 /* smb buffer will be freed by user thread */
627 wake_up_process(task_to_wake);
628 } else if (!is_valid_oplock_break(smb_buffer, server) &&
630 cERROR(1, "No task to wake, unknown frame received! "
631 "NumMids %d", atomic_read(&midCount));
632 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
633 sizeof(struct smb_hdr));
634 #ifdef CONFIG_CIFS_DEBUG2
635 cifs_dump_detail(smb_buffer);
636 cifs_dump_mids(server);
637 #endif /* CIFS_DEBUG2 */
640 } /* end while !EXITING */
642 /* take it off the list, if it's not already */
643 spin_lock(&cifs_tcp_ses_lock);
644 list_del_init(&server->tcp_ses_list);
645 spin_unlock(&cifs_tcp_ses_lock);
647 spin_lock(&GlobalMid_Lock);
648 server->tcpStatus = CifsExiting;
649 spin_unlock(&GlobalMid_Lock);
650 wake_up_all(&server->response_q);
652 /* check if we have blocked requests that need to free */
653 /* Note that cifs_max_pending is normally 50, but
654 can be set at module install time to as little as two */
655 spin_lock(&GlobalMid_Lock);
656 if (atomic_read(&server->inFlight) >= cifs_max_pending)
657 atomic_set(&server->inFlight, cifs_max_pending - 1);
658 /* We do not want to set the max_pending too low or we
659 could end up with the counter going negative */
660 spin_unlock(&GlobalMid_Lock);
661 /* Although there should not be any requests blocked on
662 this queue it can not hurt to be paranoid and try to wake up requests
663 that may haven been blocked when more than 50 at time were on the wire
664 to the same server - they now will see the session is in exit state
665 and get out of SendReceive. */
666 wake_up_all(&server->request_q);
667 /* give those requests time to exit */
670 if (server->ssocket) {
671 sock_release(csocket);
672 server->ssocket = NULL;
674 /* buffer usuallly freed in free_mid - need to free it here on exit */
675 cifs_buf_release(bigbuf);
676 if (smallbuf) /* no sense logging a debug message if NULL */
677 cifs_small_buf_release(smallbuf);
679 if (!list_empty(&server->pending_mid_q)) {
680 spin_lock(&GlobalMid_Lock);
681 list_for_each(tmp, &server->pending_mid_q) {
682 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
683 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
684 cFYI(1, "Clearing Mid 0x%x - waking up ",
686 task_to_wake = mid_entry->tsk;
688 wake_up_process(task_to_wake);
691 spin_unlock(&GlobalMid_Lock);
692 /* 1/8th of sec is more than enough time for them to exit */
696 if (!list_empty(&server->pending_mid_q)) {
697 /* mpx threads have not exited yet give them
698 at least the smb send timeout time for long ops */
699 /* due to delays on oplock break requests, we need
700 to wait at least 45 seconds before giving up
701 on a request getting a response and going ahead
703 cFYI(1, "Wait for exit from demultiplex thread");
705 /* if threads still have not exited they are probably never
706 coming home not much else we can do but free the memory */
709 kfree(server->hostname);
710 task_to_wake = xchg(&server->tsk, NULL);
713 length = atomic_dec_return(&tcpSesAllocCount);
715 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
718 /* if server->tsk was NULL then wait for a signal before exiting */
720 set_current_state(TASK_INTERRUPTIBLE);
721 while (!signal_pending(current)) {
723 set_current_state(TASK_INTERRUPTIBLE);
725 set_current_state(TASK_RUNNING);
728 module_put_and_exit(0);
731 /* extract the host portion of the UNC string */
733 extract_hostname(const char *unc)
739 /* skip double chars at beginning of string */
740 /* BB: check validity of these bytes? */
743 /* delimiter between hostname and sharename is always '\\' now */
744 delim = strchr(src, '\\');
746 return ERR_PTR(-EINVAL);
749 dst = kmalloc((len + 1), GFP_KERNEL);
751 return ERR_PTR(-ENOMEM);
753 memcpy(dst, src, len);
760 cifs_parse_mount_options(char *options, const char *devname,
765 unsigned int temp_len, i, j;
767 short int override_uid = -1;
768 short int override_gid = -1;
769 bool uid_specified = false;
770 bool gid_specified = false;
771 char *nodename = utsname()->nodename;
777 * does not have to be perfect mapping since field is
778 * informational, only used for servers that do not support
779 * port 445 and it can be overridden at mount time
781 memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
782 for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
783 vol->source_rfc1001_name[i] = toupper(nodename[i]);
785 vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
786 /* null target name indicates to use *SMBSERVR default called name
787 if we end up sending RFC1001 session initialize */
788 vol->target_rfc1001_name[0] = 0;
789 vol->cred_uid = current_uid();
790 vol->linux_uid = current_uid();
791 vol->linux_gid = current_gid();
793 /* default to only allowing write access to owner of the mount */
794 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
796 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
797 /* default is always to request posix paths. */
798 vol->posix_paths = 1;
799 /* default to using server inode numbers where available */
802 vol->actimeo = CIFS_DEF_ACTIMEO;
807 if (strncmp(options, "sep=", 4) == 0) {
808 if (options[4] != 0) {
809 separator[0] = options[4];
812 cFYI(1, "Null separator not allowed");
816 while ((data = strsep(&options, separator)) != NULL) {
819 if ((value = strchr(data, '=')) != NULL)
822 /* Have to parse this before we parse for "user" */
823 if (strnicmp(data, "user_xattr", 10) == 0) {
825 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
827 } else if (strnicmp(data, "user", 4) == 0) {
830 "CIFS: invalid or missing username\n");
831 return 1; /* needs_arg; */
832 } else if (!*value) {
833 /* null user, ie anonymous, authentication */
836 if (strnlen(value, 200) < 200) {
837 vol->username = value;
839 printk(KERN_WARNING "CIFS: username too long\n");
842 } else if (strnicmp(data, "pass", 4) == 0) {
844 vol->password = NULL;
846 } else if (value[0] == 0) {
847 /* check if string begins with double comma
848 since that would mean the password really
849 does start with a comma, and would not
850 indicate an empty string */
851 if (value[1] != separator[0]) {
852 vol->password = NULL;
856 temp_len = strlen(value);
857 /* removed password length check, NTLM passwords
858 can be arbitrarily long */
860 /* if comma in password, the string will be
861 prematurely null terminated. Commas in password are
862 specified across the cifs mount interface by a double
863 comma ie ,, and a comma used as in other cases ie ','
864 as a parameter delimiter/separator is single and due
865 to the strsep above is temporarily zeroed. */
867 /* NB: password legally can have multiple commas and
868 the only illegal character in a password is null */
870 if ((value[temp_len] == 0) &&
871 (value[temp_len+1] == separator[0])) {
873 value[temp_len] = separator[0];
874 temp_len += 2; /* move after second comma */
875 while (value[temp_len] != 0) {
876 if (value[temp_len] == separator[0]) {
877 if (value[temp_len+1] ==
879 /* skip second comma */
882 /* single comma indicating start
889 if (value[temp_len] == 0) {
893 /* point option to start of next parm */
894 options = value + temp_len + 1;
896 /* go from value to value + temp_len condensing
897 double commas to singles. Note that this ends up
898 allocating a few bytes too many, which is ok */
899 vol->password = kzalloc(temp_len, GFP_KERNEL);
900 if (vol->password == NULL) {
901 printk(KERN_WARNING "CIFS: no memory "
905 for (i = 0, j = 0; i < temp_len; i++, j++) {
906 vol->password[j] = value[i];
907 if (value[i] == separator[0]
908 && value[i+1] == separator[0]) {
909 /* skip second comma */
913 vol->password[j] = 0;
915 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
916 if (vol->password == NULL) {
917 printk(KERN_WARNING "CIFS: no memory "
921 strcpy(vol->password, value);
923 } else if (!strnicmp(data, "ip", 2) ||
924 !strnicmp(data, "addr", 4)) {
925 if (!value || !*value) {
927 } else if (strnlen(value, INET6_ADDRSTRLEN) <
931 printk(KERN_WARNING "CIFS: ip address "
935 } else if (strnicmp(data, "sec", 3) == 0) {
936 if (!value || !*value) {
937 cERROR(1, "no security value specified");
939 } else if (strnicmp(value, "krb5i", 5) == 0) {
940 vol->secFlg |= CIFSSEC_MAY_KRB5 |
942 } else if (strnicmp(value, "krb5p", 5) == 0) {
943 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
945 cERROR(1, "Krb5 cifs privacy not supported");
947 } else if (strnicmp(value, "krb5", 4) == 0) {
948 vol->secFlg |= CIFSSEC_MAY_KRB5;
949 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
950 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
952 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
953 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
954 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
955 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
957 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
958 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
959 } else if (strnicmp(value, "ntlmi", 5) == 0) {
960 vol->secFlg |= CIFSSEC_MAY_NTLM |
962 } else if (strnicmp(value, "ntlm", 4) == 0) {
963 /* ntlm is default so can be turned off too */
964 vol->secFlg |= CIFSSEC_MAY_NTLM;
965 } else if (strnicmp(value, "nontlm", 6) == 0) {
966 /* BB is there a better way to do this? */
967 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
968 #ifdef CONFIG_CIFS_WEAK_PW_HASH
969 } else if (strnicmp(value, "lanman", 6) == 0) {
970 vol->secFlg |= CIFSSEC_MAY_LANMAN;
972 } else if (strnicmp(value, "none", 4) == 0) {
975 cERROR(1, "bad security option: %s", value);
978 } else if ((strnicmp(data, "unc", 3) == 0)
979 || (strnicmp(data, "target", 6) == 0)
980 || (strnicmp(data, "path", 4) == 0)) {
981 if (!value || !*value) {
982 printk(KERN_WARNING "CIFS: invalid path to "
983 "network resource\n");
984 return 1; /* needs_arg; */
986 if ((temp_len = strnlen(value, 300)) < 300) {
987 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
988 if (vol->UNC == NULL)
990 strcpy(vol->UNC, value);
991 if (strncmp(vol->UNC, "//", 2) == 0) {
994 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
996 "CIFS: UNC Path does not begin "
997 "with // or \\\\ \n");
1001 printk(KERN_WARNING "CIFS: UNC name too long\n");
1004 } else if ((strnicmp(data, "domain", 3) == 0)
1005 || (strnicmp(data, "workgroup", 5) == 0)) {
1006 if (!value || !*value) {
1007 printk(KERN_WARNING "CIFS: invalid domain name\n");
1008 return 1; /* needs_arg; */
1010 /* BB are there cases in which a comma can be valid in
1011 a domain name and need special handling? */
1012 if (strnlen(value, 256) < 256) {
1013 vol->domainname = value;
1014 cFYI(1, "Domain name set");
1016 printk(KERN_WARNING "CIFS: domain name too "
1020 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1021 vol->srcaddr.ss_family = AF_UNSPEC;
1023 if (!value || !*value) {
1024 printk(KERN_WARNING "CIFS: srcaddr value"
1025 " not specified.\n");
1026 return 1; /* needs_arg; */
1028 i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1029 value, strlen(value));
1031 printk(KERN_WARNING "CIFS: Could not parse"
1036 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1037 if (!value || !*value) {
1039 "CIFS: invalid path prefix\n");
1040 return 1; /* needs_argument */
1042 if ((temp_len = strnlen(value, 1024)) < 1024) {
1043 if (value[0] != '/')
1044 temp_len++; /* missing leading slash */
1045 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1046 if (vol->prepath == NULL)
1048 if (value[0] != '/') {
1049 vol->prepath[0] = '/';
1050 strcpy(vol->prepath+1, value);
1052 strcpy(vol->prepath, value);
1053 cFYI(1, "prefix path %s", vol->prepath);
1055 printk(KERN_WARNING "CIFS: prefix too long\n");
1058 } else if (strnicmp(data, "iocharset", 9) == 0) {
1059 if (!value || !*value) {
1060 printk(KERN_WARNING "CIFS: invalid iocharset "
1062 return 1; /* needs_arg; */
1064 if (strnlen(value, 65) < 65) {
1065 if (strnicmp(value, "default", 7))
1066 vol->iocharset = value;
1067 /* if iocharset not set then load_nls_default
1068 is used by caller */
1069 cFYI(1, "iocharset set to %s", value);
1071 printk(KERN_WARNING "CIFS: iocharset name "
1075 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1076 vol->linux_uid = simple_strtoul(value, &value, 0);
1077 uid_specified = true;
1078 } else if (!strnicmp(data, "cruid", 5) && value && *value) {
1079 vol->cred_uid = simple_strtoul(value, &value, 0);
1080 } else if (!strnicmp(data, "forceuid", 8)) {
1082 } else if (!strnicmp(data, "noforceuid", 10)) {
1084 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1085 vol->linux_gid = simple_strtoul(value, &value, 0);
1086 gid_specified = true;
1087 } else if (!strnicmp(data, "forcegid", 8)) {
1089 } else if (!strnicmp(data, "noforcegid", 10)) {
1091 } else if (strnicmp(data, "file_mode", 4) == 0) {
1092 if (value && *value) {
1094 simple_strtoul(value, &value, 0);
1096 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1097 if (value && *value) {
1099 simple_strtoul(value, &value, 0);
1101 } else if (strnicmp(data, "dirmode", 4) == 0) {
1102 if (value && *value) {
1104 simple_strtoul(value, &value, 0);
1106 } else if (strnicmp(data, "port", 4) == 0) {
1107 if (value && *value) {
1109 simple_strtoul(value, &value, 0);
1111 } else if (strnicmp(data, "rsize", 5) == 0) {
1112 if (value && *value) {
1114 simple_strtoul(value, &value, 0);
1116 } else if (strnicmp(data, "wsize", 5) == 0) {
1117 if (value && *value) {
1119 simple_strtoul(value, &value, 0);
1121 } else if (strnicmp(data, "sockopt", 5) == 0) {
1122 if (!value || !*value) {
1123 cERROR(1, "no socket option specified");
1125 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1126 vol->sockopt_tcp_nodelay = 1;
1128 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1129 if (!value || !*value || (*value == ' ')) {
1130 cFYI(1, "invalid (empty) netbiosname");
1132 memset(vol->source_rfc1001_name, 0x20,
1135 * FIXME: are there cases in which a comma can
1136 * be valid in workstation netbios name (and
1137 * need special handling)?
1139 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1140 /* don't ucase netbiosname for user */
1143 vol->source_rfc1001_name[i] = value[i];
1145 /* The string has 16th byte zero still from
1146 set at top of the function */
1147 if (i == RFC1001_NAME_LEN && value[i] != 0)
1148 printk(KERN_WARNING "CIFS: netbiosname"
1149 " longer than 15 truncated.\n");
1151 } else if (strnicmp(data, "servern", 7) == 0) {
1152 /* servernetbiosname specified override *SMBSERVER */
1153 if (!value || !*value || (*value == ' ')) {
1154 cFYI(1, "empty server netbiosname specified");
1156 /* last byte, type, is 0x20 for servr type */
1157 memset(vol->target_rfc1001_name, 0x20,
1158 RFC1001_NAME_LEN_WITH_NULL);
1160 for (i = 0; i < 15; i++) {
1161 /* BB are there cases in which a comma can be
1162 valid in this workstation netbios name
1163 (and need special handling)? */
1165 /* user or mount helper must uppercase
1170 vol->target_rfc1001_name[i] =
1173 /* The string has 16th byte zero still from
1174 set at top of the function */
1175 if (i == RFC1001_NAME_LEN && value[i] != 0)
1176 printk(KERN_WARNING "CIFS: server net"
1177 "biosname longer than 15 truncated.\n");
1179 } else if (strnicmp(data, "actimeo", 7) == 0) {
1180 if (value && *value) {
1181 vol->actimeo = HZ * simple_strtoul(value,
1183 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1184 cERROR(1, "CIFS: attribute cache"
1185 "timeout too large");
1189 } else if (strnicmp(data, "credentials", 4) == 0) {
1191 } else if (strnicmp(data, "version", 3) == 0) {
1193 } else if (strnicmp(data, "guest", 5) == 0) {
1195 } else if (strnicmp(data, "rw", 2) == 0) {
1197 } else if (strnicmp(data, "ro", 2) == 0) {
1199 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1200 vol->noblocksnd = 1;
1201 } else if (strnicmp(data, "noautotune", 10) == 0) {
1202 vol->noautotune = 1;
1203 } else if ((strnicmp(data, "suid", 4) == 0) ||
1204 (strnicmp(data, "nosuid", 6) == 0) ||
1205 (strnicmp(data, "exec", 4) == 0) ||
1206 (strnicmp(data, "noexec", 6) == 0) ||
1207 (strnicmp(data, "nodev", 5) == 0) ||
1208 (strnicmp(data, "noauto", 6) == 0) ||
1209 (strnicmp(data, "dev", 3) == 0)) {
1210 /* The mount tool or mount.cifs helper (if present)
1211 uses these opts to set flags, and the flags are read
1212 by the kernel vfs layer before we get here (ie
1213 before read super) so there is no point trying to
1214 parse these options again and set anything and it
1215 is ok to just ignore them */
1217 } else if (strnicmp(data, "hard", 4) == 0) {
1219 } else if (strnicmp(data, "soft", 4) == 0) {
1221 } else if (strnicmp(data, "perm", 4) == 0) {
1223 } else if (strnicmp(data, "noperm", 6) == 0) {
1225 } else if (strnicmp(data, "mapchars", 8) == 0) {
1227 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1229 } else if (strnicmp(data, "sfu", 3) == 0) {
1231 } else if (strnicmp(data, "nosfu", 5) == 0) {
1233 } else if (strnicmp(data, "nodfs", 5) == 0) {
1235 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1236 vol->posix_paths = 1;
1237 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1238 vol->posix_paths = 0;
1239 } else if (strnicmp(data, "nounix", 6) == 0) {
1240 vol->no_linux_ext = 1;
1241 } else if (strnicmp(data, "nolinux", 7) == 0) {
1242 vol->no_linux_ext = 1;
1243 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1244 (strnicmp(data, "ignorecase", 10) == 0)) {
1246 } else if (strnicmp(data, "mand", 4) == 0) {
1248 } else if (strnicmp(data, "nomand", 6) == 0) {
1250 } else if (strnicmp(data, "_netdev", 7) == 0) {
1252 } else if (strnicmp(data, "brl", 3) == 0) {
1254 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1255 (strnicmp(data, "nolock", 6) == 0)) {
1257 /* turn off mandatory locking in mode
1258 if remote locking is turned off since the
1259 local vfs will do advisory */
1260 if (vol->file_mode ==
1261 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1262 vol->file_mode = S_IALLUGO;
1263 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1264 /* will take the shorter form "forcemand" as well */
1265 /* This mount option will force use of mandatory
1266 (DOS/Windows style) byte range locks, instead of
1267 using posix advisory byte range locks, even if the
1268 Unix extensions are available and posix locks would
1269 be supported otherwise. If Unix extensions are not
1270 negotiated this has no effect since mandatory locks
1271 would be used (mandatory locks is all that those
1272 those servers support) */
1274 } else if (strnicmp(data, "setuids", 7) == 0) {
1276 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1278 } else if (strnicmp(data, "dynperm", 7) == 0) {
1279 vol->dynperm = true;
1280 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1281 vol->dynperm = false;
1282 } else if (strnicmp(data, "nohard", 6) == 0) {
1284 } else if (strnicmp(data, "nosoft", 6) == 0) {
1286 } else if (strnicmp(data, "nointr", 6) == 0) {
1288 } else if (strnicmp(data, "intr", 4) == 0) {
1290 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1291 vol->nostrictsync = 1;
1292 } else if (strnicmp(data, "strictsync", 10) == 0) {
1293 vol->nostrictsync = 0;
1294 } else if (strnicmp(data, "serverino", 7) == 0) {
1295 vol->server_ino = 1;
1296 } else if (strnicmp(data, "noserverino", 9) == 0) {
1297 vol->server_ino = 0;
1298 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1300 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1302 } else if (strnicmp(data, "acl", 3) == 0) {
1303 vol->no_psx_acl = 0;
1304 } else if (strnicmp(data, "noacl", 5) == 0) {
1305 vol->no_psx_acl = 1;
1306 } else if (strnicmp(data, "locallease", 6) == 0) {
1307 vol->local_lease = 1;
1308 } else if (strnicmp(data, "sign", 4) == 0) {
1309 vol->secFlg |= CIFSSEC_MUST_SIGN;
1310 } else if (strnicmp(data, "seal", 4) == 0) {
1311 /* we do not do the following in secFlags because seal
1312 is a per tree connection (mount) not a per socket
1313 or per-smb connection option in the protocol */
1314 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1316 } else if (strnicmp(data, "direct", 6) == 0) {
1318 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1320 } else if (strnicmp(data, "noac", 4) == 0) {
1321 printk(KERN_WARNING "CIFS: Mount option noac not "
1322 "supported. Instead set "
1323 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1324 } else if (strnicmp(data, "fsc", 3) == 0) {
1325 #ifndef CONFIG_CIFS_FSCACHE
1326 cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE"
1327 "kernel config option set");
1331 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1332 vol->mfsymlinks = true;
1333 } else if (strnicmp(data, "multiuser", 8) == 0) {
1334 vol->multiuser = true;
1336 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1339 if (vol->UNC == NULL) {
1340 if (devname == NULL) {
1341 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1345 if ((temp_len = strnlen(devname, 300)) < 300) {
1346 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1347 if (vol->UNC == NULL)
1349 strcpy(vol->UNC, devname);
1350 if (strncmp(vol->UNC, "//", 2) == 0) {
1353 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1354 printk(KERN_WARNING "CIFS: UNC Path does not "
1355 "begin with // or \\\\ \n");
1358 value = strpbrk(vol->UNC+2, "/\\");
1362 printk(KERN_WARNING "CIFS: UNC name too long\n");
1367 if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1368 cERROR(1, "Multiuser mounts currently require krb5 "
1373 if (vol->UNCip == NULL)
1374 vol->UNCip = &vol->UNC[2];
1377 vol->override_uid = override_uid;
1378 else if (override_uid == 1)
1379 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1380 "specified with no uid= option.\n");
1383 vol->override_gid = override_gid;
1384 else if (override_gid == 1)
1385 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1386 "specified with no gid= option.\n");
1391 /** Returns true if srcaddr isn't specified and rhs isn't
1392 * specified, or if srcaddr is specified and
1393 * matches the IP address of the rhs argument.
1396 srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1398 switch (srcaddr->sa_family) {
1400 return (rhs->sa_family == AF_UNSPEC);
1402 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1403 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1404 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1407 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1408 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1409 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1413 return false; /* don't expect to be here */
1418 * If no port is specified in addr structure, we try to match with 445 port
1419 * and if it fails - with 139 ports. It should be called only if address
1420 * families of server and addr are equal.
1423 match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1425 unsigned short int port, *sport;
1427 switch (addr->sa_family) {
1429 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1430 port = ((struct sockaddr_in *) addr)->sin_port;
1433 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1434 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1442 port = htons(CIFS_PORT);
1446 port = htons(RFC1001_PORT);
1449 return port == *sport;
1453 match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1454 struct sockaddr *srcaddr)
1456 switch (addr->sa_family) {
1458 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1459 struct sockaddr_in *srv_addr4 =
1460 (struct sockaddr_in *)&server->dstaddr;
1462 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
1467 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1468 struct sockaddr_in6 *srv_addr6 =
1469 (struct sockaddr_in6 *)&server->dstaddr;
1471 if (!ipv6_addr_equal(&addr6->sin6_addr,
1472 &srv_addr6->sin6_addr))
1474 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
1480 return false; /* don't expect to be here */
1483 if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1490 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1492 unsigned int secFlags;
1494 if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1495 secFlags = vol->secFlg;
1497 secFlags = global_secflags | vol->secFlg;
1499 switch (server->secType) {
1501 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1505 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1509 if (!(secFlags & CIFSSEC_MAY_NTLM))
1513 if (!(secFlags & CIFSSEC_MAY_KRB5))
1517 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1521 /* shouldn't happen */
1525 /* now check if signing mode is acceptible */
1526 if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1527 (server->secMode & SECMODE_SIGN_REQUIRED))
1529 else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1531 (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1537 static struct TCP_Server_Info *
1538 cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1540 struct TCP_Server_Info *server;
1542 spin_lock(&cifs_tcp_ses_lock);
1543 list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
1544 if (!match_address(server, addr,
1545 (struct sockaddr *)&vol->srcaddr))
1548 if (!match_port(server, addr))
1551 if (!match_security(server, vol))
1554 ++server->srv_count;
1555 spin_unlock(&cifs_tcp_ses_lock);
1556 cFYI(1, "Existing tcp session with server found");
1559 spin_unlock(&cifs_tcp_ses_lock);
1564 cifs_put_tcp_session(struct TCP_Server_Info *server)
1566 struct task_struct *task;
1568 spin_lock(&cifs_tcp_ses_lock);
1569 if (--server->srv_count > 0) {
1570 spin_unlock(&cifs_tcp_ses_lock);
1574 list_del_init(&server->tcp_ses_list);
1575 spin_unlock(&cifs_tcp_ses_lock);
1577 spin_lock(&GlobalMid_Lock);
1578 server->tcpStatus = CifsExiting;
1579 spin_unlock(&GlobalMid_Lock);
1581 cifs_crypto_shash_release(server);
1582 cifs_fscache_release_client_cookie(server);
1584 kfree(server->session_key.response);
1585 server->session_key.response = NULL;
1586 server->session_key.len = 0;
1588 task = xchg(&server->tsk, NULL);
1590 force_sig(SIGKILL, task);
1593 static struct TCP_Server_Info *
1594 cifs_get_tcp_session(struct smb_vol *volume_info)
1596 struct TCP_Server_Info *tcp_ses = NULL;
1597 struct sockaddr_storage addr;
1598 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1599 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1602 memset(&addr, 0, sizeof(struct sockaddr_storage));
1604 cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
1606 if (volume_info->UNCip && volume_info->UNC) {
1607 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1609 strlen(volume_info->UNCip),
1612 /* we failed translating address */
1616 } else if (volume_info->UNCip) {
1617 /* BB using ip addr as tcp_ses name to connect to the
1619 cERROR(1, "Connecting to DFS root not implemented yet");
1622 } else /* which tcp_sess DFS root would we conect to */ {
1623 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1624 "unc=//192.168.1.100/public) specified");
1629 /* see if we already have a matching tcp_ses */
1630 tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
1634 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1640 rc = cifs_crypto_shash_allocate(tcp_ses);
1642 cERROR(1, "could not setup hash structures rc %d", rc);
1646 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1647 if (IS_ERR(tcp_ses->hostname)) {
1648 rc = PTR_ERR(tcp_ses->hostname);
1649 goto out_err_crypto_release;
1652 tcp_ses->noblocksnd = volume_info->noblocksnd;
1653 tcp_ses->noautotune = volume_info->noautotune;
1654 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1655 atomic_set(&tcp_ses->inFlight, 0);
1656 init_waitqueue_head(&tcp_ses->response_q);
1657 init_waitqueue_head(&tcp_ses->request_q);
1658 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1659 mutex_init(&tcp_ses->srv_mutex);
1660 memcpy(tcp_ses->workstation_RFC1001_name,
1661 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1662 memcpy(tcp_ses->server_RFC1001_name,
1663 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1664 tcp_ses->session_estab = false;
1665 tcp_ses->sequence_number = 0;
1666 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1667 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1670 * at this point we are the only ones with the pointer
1671 * to the struct since the kernel thread not created yet
1672 * no need to spinlock this init of tcpStatus or srv_count
1674 tcp_ses->tcpStatus = CifsNew;
1675 memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1676 sizeof(tcp_ses->srcaddr));
1677 ++tcp_ses->srv_count;
1679 if (addr.ss_family == AF_INET6) {
1680 cFYI(1, "attempting ipv6 connect");
1681 /* BB should we allow ipv6 on port 139? */
1682 /* other OS never observed in Wild doing 139 with v6 */
1683 memcpy(&tcp_ses->dstaddr, sin_server6,
1684 sizeof(struct sockaddr_in6));
1686 memcpy(&tcp_ses->dstaddr, sin_server,
1687 sizeof(struct sockaddr_in));
1689 rc = ip_connect(tcp_ses);
1691 cERROR(1, "Error connecting to socket. Aborting operation");
1692 goto out_err_crypto_release;
1696 * since we're in a cifs function already, we know that
1697 * this will succeed. No need for try_module_get().
1699 __module_get(THIS_MODULE);
1700 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1702 if (IS_ERR(tcp_ses->tsk)) {
1703 rc = PTR_ERR(tcp_ses->tsk);
1704 cERROR(1, "error %d create cifsd thread", rc);
1705 module_put(THIS_MODULE);
1706 goto out_err_crypto_release;
1709 /* thread spawned, put it on the list */
1710 spin_lock(&cifs_tcp_ses_lock);
1711 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1712 spin_unlock(&cifs_tcp_ses_lock);
1714 cifs_fscache_get_client_cookie(tcp_ses);
1718 out_err_crypto_release:
1719 cifs_crypto_shash_release(tcp_ses);
1723 if (!IS_ERR(tcp_ses->hostname))
1724 kfree(tcp_ses->hostname);
1725 if (tcp_ses->ssocket)
1726 sock_release(tcp_ses->ssocket);
1732 static struct cifsSesInfo *
1733 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1735 struct cifsSesInfo *ses;
1737 spin_lock(&cifs_tcp_ses_lock);
1738 list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
1739 switch (server->secType) {
1741 if (vol->cred_uid != ses->cred_uid)
1745 /* anything else takes username/password */
1746 if (strncmp(ses->userName, vol->username,
1749 if (strlen(vol->username) != 0 &&
1750 ses->password != NULL &&
1751 strncmp(ses->password,
1752 vol->password ? vol->password : "",
1757 spin_unlock(&cifs_tcp_ses_lock);
1760 spin_unlock(&cifs_tcp_ses_lock);
1765 cifs_put_smb_ses(struct cifsSesInfo *ses)
1768 struct TCP_Server_Info *server = ses->server;
1770 cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
1771 spin_lock(&cifs_tcp_ses_lock);
1772 if (--ses->ses_count > 0) {
1773 spin_unlock(&cifs_tcp_ses_lock);
1777 list_del_init(&ses->smb_ses_list);
1778 spin_unlock(&cifs_tcp_ses_lock);
1780 if (ses->status == CifsGood) {
1782 CIFSSMBLogoff(xid, ses);
1786 cifs_put_tcp_session(server);
1789 static struct cifsSesInfo *
1790 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1792 int rc = -ENOMEM, xid;
1793 struct cifsSesInfo *ses;
1794 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1795 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
1799 ses = cifs_find_smb_ses(server, volume_info);
1801 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1803 mutex_lock(&ses->session_mutex);
1804 rc = cifs_negotiate_protocol(xid, ses);
1806 mutex_unlock(&ses->session_mutex);
1807 /* problem -- put our ses reference */
1808 cifs_put_smb_ses(ses);
1812 if (ses->need_reconnect) {
1813 cFYI(1, "Session needs reconnect");
1814 rc = cifs_setup_session(xid, ses,
1815 volume_info->local_nls);
1817 mutex_unlock(&ses->session_mutex);
1818 /* problem -- put our reference */
1819 cifs_put_smb_ses(ses);
1824 mutex_unlock(&ses->session_mutex);
1826 /* existing SMB ses has a server reference already */
1827 cifs_put_tcp_session(server);
1832 cFYI(1, "Existing smb sess not found");
1833 ses = sesInfoAlloc();
1837 /* new SMB session uses our server ref */
1838 ses->server = server;
1839 if (server->dstaddr.ss_family == AF_INET6)
1840 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
1842 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
1844 if (volume_info->username)
1845 strncpy(ses->userName, volume_info->username,
1848 /* volume_info->password freed at unmount */
1849 if (volume_info->password) {
1850 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
1854 if (volume_info->domainname) {
1855 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
1856 if (!ses->domainName)
1859 ses->cred_uid = volume_info->cred_uid;
1860 ses->linux_uid = volume_info->linux_uid;
1861 ses->overrideSecFlg = volume_info->secFlg;
1863 mutex_lock(&ses->session_mutex);
1864 rc = cifs_negotiate_protocol(xid, ses);
1866 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
1867 mutex_unlock(&ses->session_mutex);
1871 /* success, put it on the list */
1872 spin_lock(&cifs_tcp_ses_lock);
1873 list_add(&ses->smb_ses_list, &server->smb_ses_list);
1874 spin_unlock(&cifs_tcp_ses_lock);
1885 static struct cifsTconInfo *
1886 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1888 struct list_head *tmp;
1889 struct cifsTconInfo *tcon;
1891 spin_lock(&cifs_tcp_ses_lock);
1892 list_for_each(tmp, &ses->tcon_list) {
1893 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1894 if (tcon->tidStatus == CifsExiting)
1896 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1900 spin_unlock(&cifs_tcp_ses_lock);
1903 spin_unlock(&cifs_tcp_ses_lock);
1908 cifs_put_tcon(struct cifsTconInfo *tcon)
1911 struct cifsSesInfo *ses = tcon->ses;
1913 cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
1914 spin_lock(&cifs_tcp_ses_lock);
1915 if (--tcon->tc_count > 0) {
1916 spin_unlock(&cifs_tcp_ses_lock);
1920 list_del_init(&tcon->tcon_list);
1921 spin_unlock(&cifs_tcp_ses_lock);
1924 CIFSSMBTDis(xid, tcon);
1927 cifs_fscache_release_super_cookie(tcon);
1929 cifs_put_smb_ses(ses);
1932 static struct cifsTconInfo *
1933 cifs_get_tcon(struct cifsSesInfo *ses, struct smb_vol *volume_info)
1936 struct cifsTconInfo *tcon;
1938 tcon = cifs_find_tcon(ses, volume_info->UNC);
1940 cFYI(1, "Found match on UNC path");
1941 /* existing tcon already has a reference */
1942 cifs_put_smb_ses(ses);
1943 if (tcon->seal != volume_info->seal)
1944 cERROR(1, "transport encryption setting "
1945 "conflicts with existing tid");
1949 tcon = tconInfoAlloc();
1956 if (volume_info->password) {
1957 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
1958 if (!tcon->password) {
1964 if (strchr(volume_info->UNC + 3, '\\') == NULL
1965 && strchr(volume_info->UNC + 3, '/') == NULL) {
1966 cERROR(1, "Missing share name");
1971 /* BB Do we need to wrap session_mutex around
1972 * this TCon call and Unix SetFS as
1973 * we do on SessSetup and reconnect? */
1975 rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
1977 cFYI(1, "CIFS Tcon rc = %d", rc);
1981 if (volume_info->nodfs) {
1982 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
1983 cFYI(1, "DFS disabled (%d)", tcon->Flags);
1985 tcon->seal = volume_info->seal;
1986 /* we can have only one retry value for a connection
1987 to a share so for resources mounted more than once
1988 to the same server share the last value passed in
1989 for the retry flag is used */
1990 tcon->retry = volume_info->retry;
1991 tcon->nocase = volume_info->nocase;
1992 tcon->local_lease = volume_info->local_lease;
1994 spin_lock(&cifs_tcp_ses_lock);
1995 list_add(&tcon->tcon_list, &ses->tcon_list);
1996 spin_unlock(&cifs_tcp_ses_lock);
1998 cifs_fscache_get_super_cookie(tcon);
2008 cifs_put_tlink(struct tcon_link *tlink)
2010 if (!tlink || IS_ERR(tlink))
2013 if (!atomic_dec_and_test(&tlink->tl_count) ||
2014 test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2015 tlink->tl_time = jiffies;
2019 if (!IS_ERR(tlink_tcon(tlink)))
2020 cifs_put_tcon(tlink_tcon(tlink));
2026 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
2027 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
2028 struct dfs_info3_param **preferrals, int remap)
2033 *pnum_referrals = 0;
2036 if (pSesInfo->ipc_tid == 0) {
2037 temp_unc = kmalloc(2 /* for slashes */ +
2038 strnlen(pSesInfo->serverName,
2039 SERVER_NAME_LEN_WITH_NULL * 2)
2040 + 1 + 4 /* slash IPC$ */ + 2,
2042 if (temp_unc == NULL)
2046 strcpy(temp_unc + 2, pSesInfo->serverName);
2047 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2048 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
2049 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
2053 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
2054 pnum_referrals, nls_codepage, remap);
2055 /* BB map targetUNCs to dfs_info3 structures, here or
2056 in CIFSGetDFSRefer BB */
2061 #ifdef CONFIG_DEBUG_LOCK_ALLOC
2062 static struct lock_class_key cifs_key[2];
2063 static struct lock_class_key cifs_slock_key[2];
2066 cifs_reclassify_socket4(struct socket *sock)
2068 struct sock *sk = sock->sk;
2069 BUG_ON(sock_owned_by_user(sk));
2070 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2071 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2075 cifs_reclassify_socket6(struct socket *sock)
2077 struct sock *sk = sock->sk;
2078 BUG_ON(sock_owned_by_user(sk));
2079 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2080 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2084 cifs_reclassify_socket4(struct socket *sock)
2089 cifs_reclassify_socket6(struct socket *sock)
2094 /* See RFC1001 section 14 on representation of Netbios names */
2095 static void rfc1002mangle(char *target, char *source, unsigned int length)
2099 for (i = 0, j = 0; i < (length); i++) {
2100 /* mask a nibble at a time and encode */
2101 target[j] = 'A' + (0x0F & (source[i] >> 4));
2102 target[j+1] = 'A' + (0x0F & source[i]);
2109 bind_socket(struct TCP_Server_Info *server)
2112 if (server->srcaddr.ss_family != AF_UNSPEC) {
2113 /* Bind to the specified local IP address */
2114 struct socket *socket = server->ssocket;
2115 rc = socket->ops->bind(socket,
2116 (struct sockaddr *) &server->srcaddr,
2117 sizeof(server->srcaddr));
2119 struct sockaddr_in *saddr4;
2120 struct sockaddr_in6 *saddr6;
2121 saddr4 = (struct sockaddr_in *)&server->srcaddr;
2122 saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2123 if (saddr6->sin6_family == AF_INET6)
2125 "Failed to bind to: %pI6c, error: %d\n",
2126 &saddr6->sin6_addr, rc);
2129 "Failed to bind to: %pI4, error: %d\n",
2130 &saddr4->sin_addr.s_addr, rc);
2137 ip_rfc1001_connect(struct TCP_Server_Info *server)
2141 * some servers require RFC1001 sessinit before sending
2142 * negprot - BB check reconnection in case where second
2143 * sessinit is sent but no second negprot
2145 struct rfc1002_session_packet *ses_init_buf;
2146 struct smb_hdr *smb_buf;
2147 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2150 ses_init_buf->trailer.session_req.called_len = 32;
2152 if (server->server_RFC1001_name &&
2153 server->server_RFC1001_name[0] != 0)
2154 rfc1002mangle(ses_init_buf->trailer.
2155 session_req.called_name,
2156 server->server_RFC1001_name,
2157 RFC1001_NAME_LEN_WITH_NULL);
2159 rfc1002mangle(ses_init_buf->trailer.
2160 session_req.called_name,
2161 DEFAULT_CIFS_CALLED_NAME,
2162 RFC1001_NAME_LEN_WITH_NULL);
2164 ses_init_buf->trailer.session_req.calling_len = 32;
2167 * calling name ends in null (byte 16) from old smb
2170 if (server->workstation_RFC1001_name &&
2171 server->workstation_RFC1001_name[0] != 0)
2172 rfc1002mangle(ses_init_buf->trailer.
2173 session_req.calling_name,
2174 server->workstation_RFC1001_name,
2175 RFC1001_NAME_LEN_WITH_NULL);
2177 rfc1002mangle(ses_init_buf->trailer.
2178 session_req.calling_name,
2180 RFC1001_NAME_LEN_WITH_NULL);
2182 ses_init_buf->trailer.session_req.scope1 = 0;
2183 ses_init_buf->trailer.session_req.scope2 = 0;
2184 smb_buf = (struct smb_hdr *)ses_init_buf;
2186 /* sizeof RFC1002_SESSION_REQUEST with no scope */
2187 smb_buf->smb_buf_length = 0x81000044;
2188 rc = smb_send(server, smb_buf, 0x44);
2189 kfree(ses_init_buf);
2191 * RFC1001 layer in at least one server
2192 * requires very short break before negprot
2193 * presumably because not expecting negprot
2194 * to follow so fast. This is a simple
2195 * solution that works without
2196 * complicating the code and causes no
2197 * significant slowing down on mount
2200 usleep_range(1000, 2000);
2203 * else the negprot may still work without this
2204 * even though malloc failed
2211 generic_ip_connect(struct TCP_Server_Info *server)
2214 unsigned short int sport;
2216 struct socket *socket = server->ssocket;
2217 struct sockaddr *saddr;
2219 saddr = (struct sockaddr *) &server->dstaddr;
2221 if (server->dstaddr.ss_family == AF_INET6) {
2222 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
2223 slen = sizeof(struct sockaddr_in6);
2226 sport = ((struct sockaddr_in *) saddr)->sin_port;
2227 slen = sizeof(struct sockaddr_in);
2231 if (socket == NULL) {
2232 rc = sock_create_kern(sfamily, SOCK_STREAM,
2233 IPPROTO_TCP, &socket);
2235 cERROR(1, "Error %d creating socket", rc);
2236 server->ssocket = NULL;
2240 /* BB other socket options to set KEEPALIVE, NODELAY? */
2241 cFYI(1, "Socket created");
2242 server->ssocket = socket;
2243 socket->sk->sk_allocation = GFP_NOFS;
2244 if (sfamily == AF_INET6)
2245 cifs_reclassify_socket6(socket);
2247 cifs_reclassify_socket4(socket);
2250 rc = bind_socket(server);
2254 rc = socket->ops->connect(socket, saddr, slen, 0);
2256 cFYI(1, "Error %d connecting to server", rc);
2257 sock_release(socket);
2258 server->ssocket = NULL;
2263 * Eventually check for other socket options to change from
2264 * the default. sock_setsockopt not used because it expects
2267 socket->sk->sk_rcvtimeo = 7 * HZ;
2268 socket->sk->sk_sndtimeo = 5 * HZ;
2270 /* make the bufsizes depend on wsize/rsize and max requests */
2271 if (server->noautotune) {
2272 if (socket->sk->sk_sndbuf < (200 * 1024))
2273 socket->sk->sk_sndbuf = 200 * 1024;
2274 if (socket->sk->sk_rcvbuf < (140 * 1024))
2275 socket->sk->sk_rcvbuf = 140 * 1024;
2278 if (server->tcp_nodelay) {
2280 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2281 (char *)&val, sizeof(val));
2283 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2286 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
2287 socket->sk->sk_sndbuf,
2288 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
2290 if (sport == htons(RFC1001_PORT))
2291 rc = ip_rfc1001_connect(server);
2297 ip_connect(struct TCP_Server_Info *server)
2299 unsigned short int *sport;
2300 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2301 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
2303 if (server->dstaddr.ss_family == AF_INET6)
2304 sport = &addr6->sin6_port;
2306 sport = &addr->sin_port;
2311 /* try with 445 port at first */
2312 *sport = htons(CIFS_PORT);
2314 rc = generic_ip_connect(server);
2318 /* if it failed, try with 139 port */
2319 *sport = htons(RFC1001_PORT);
2322 return generic_ip_connect(server);
2325 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
2326 struct super_block *sb, struct smb_vol *vol_info)
2328 /* if we are reconnecting then should we check to see if
2329 * any requested capabilities changed locally e.g. via
2330 * remount but we can not do much about it here
2331 * if they have (even if we could detect it by the following)
2332 * Perhaps we could add a backpointer to array of sb from tcon
2333 * or if we change to make all sb to same share the same
2334 * sb as NFS - then we only have one backpointer to sb.
2335 * What if we wanted to mount the server share twice once with
2336 * and once without posixacls or posix paths? */
2337 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2339 if (vol_info && vol_info->no_linux_ext) {
2340 tcon->fsUnixInfo.Capability = 0;
2341 tcon->unix_ext = 0; /* Unix Extensions disabled */
2342 cFYI(1, "Linux protocol extensions disabled");
2344 } else if (vol_info)
2345 tcon->unix_ext = 1; /* Unix Extensions supported */
2347 if (tcon->unix_ext == 0) {
2348 cFYI(1, "Unix extensions disabled so not set on reconnect");
2352 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2353 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2355 /* check for reconnect case in which we do not
2356 want to change the mount behavior if we can avoid it */
2357 if (vol_info == NULL) {
2358 /* turn off POSIX ACL and PATHNAMES if not set
2359 originally at mount time */
2360 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2361 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2362 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2363 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2364 cERROR(1, "POSIXPATH support change");
2365 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2366 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2367 cERROR(1, "possible reconnect error");
2368 cERROR(1, "server disabled POSIX path support");
2372 cap &= CIFS_UNIX_CAP_MASK;
2373 if (vol_info && vol_info->no_psx_acl)
2374 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2375 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2376 cFYI(1, "negotiated posix acl support");
2378 sb->s_flags |= MS_POSIXACL;
2381 if (vol_info && vol_info->posix_paths == 0)
2382 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2383 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2384 cFYI(1, "negotiate posix pathnames");
2386 CIFS_SB(sb)->mnt_cifs_flags |=
2387 CIFS_MOUNT_POSIX_PATHS;
2390 /* We might be setting the path sep back to a different
2391 form if we are reconnecting and the server switched its
2392 posix path capability for this share */
2393 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2394 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2396 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2397 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2398 CIFS_SB(sb)->rsize = 127 * 1024;
2399 cFYI(DBG2, "larger reads not supported by srv");
2404 cFYI(1, "Negotiate caps 0x%x", (int)cap);
2405 #ifdef CONFIG_CIFS_DEBUG2
2406 if (cap & CIFS_UNIX_FCNTL_CAP)
2407 cFYI(1, "FCNTL cap");
2408 if (cap & CIFS_UNIX_EXTATTR_CAP)
2409 cFYI(1, "EXTATTR cap");
2410 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2411 cFYI(1, "POSIX path cap");
2412 if (cap & CIFS_UNIX_XATTR_CAP)
2413 cFYI(1, "XATTR cap");
2414 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2415 cFYI(1, "POSIX ACL cap");
2416 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2417 cFYI(1, "very large read cap");
2418 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2419 cFYI(1, "very large write cap");
2420 #endif /* CIFS_DEBUG2 */
2421 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2422 if (vol_info == NULL) {
2423 cFYI(1, "resetting capabilities failed");
2425 cERROR(1, "Negotiating Unix capabilities "
2426 "with the server failed. Consider "
2427 "mounting with the Unix Extensions\n"
2428 "disabled, if problems are found, "
2429 "by specifying the nounix mount "
2437 convert_delimiter(char *path, char delim)
2450 for (i = 0; path[i] != '\0'; i++) {
2451 if (path[i] == old_delim)
2456 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2457 struct cifs_sb_info *cifs_sb)
2459 INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2461 if (pvolume_info->rsize > CIFSMaxBufSize) {
2462 cERROR(1, "rsize %d too large, using MaxBufSize",
2463 pvolume_info->rsize);
2464 cifs_sb->rsize = CIFSMaxBufSize;
2465 } else if ((pvolume_info->rsize) &&
2466 (pvolume_info->rsize <= CIFSMaxBufSize))
2467 cifs_sb->rsize = pvolume_info->rsize;
2469 cifs_sb->rsize = CIFSMaxBufSize;
2471 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2472 cERROR(1, "wsize %d too large, using 4096 instead",
2473 pvolume_info->wsize);
2474 cifs_sb->wsize = 4096;
2475 } else if (pvolume_info->wsize)
2476 cifs_sb->wsize = pvolume_info->wsize;
2478 cifs_sb->wsize = min_t(const int,
2479 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2481 /* old default of CIFSMaxBufSize was too small now
2482 that SMB Write2 can send multiple pages in kvec.
2483 RFC1001 does not describe what happens when frame
2484 bigger than 128K is sent so use that as max in
2485 conjunction with 52K kvec constraint on arch with 4K
2488 if (cifs_sb->rsize < 2048) {
2489 cifs_sb->rsize = 2048;
2490 /* Windows ME may prefer this */
2491 cFYI(1, "readsize set to minimum: 2048");
2493 /* calculate prepath */
2494 cifs_sb->prepath = pvolume_info->prepath;
2495 if (cifs_sb->prepath) {
2496 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2497 /* we can not convert the / to \ in the path
2498 separators in the prefixpath yet because we do not
2499 know (until reset_cifs_unix_caps is called later)
2500 whether POSIX PATH CAP is available. We normalize
2501 the / to \ after reset_cifs_unix_caps is called */
2502 pvolume_info->prepath = NULL;
2504 cifs_sb->prepathlen = 0;
2505 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2506 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2507 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2508 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2509 cFYI(1, "file mode: 0x%x dir mode: 0x%x",
2510 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
2512 cifs_sb->actimeo = pvolume_info->actimeo;
2514 if (pvolume_info->noperm)
2515 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2516 if (pvolume_info->setuids)
2517 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2518 if (pvolume_info->server_ino)
2519 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2520 if (pvolume_info->remap)
2521 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2522 if (pvolume_info->no_xattr)
2523 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2524 if (pvolume_info->sfu_emul)
2525 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2526 if (pvolume_info->nobrl)
2527 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2528 if (pvolume_info->nostrictsync)
2529 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2530 if (pvolume_info->mand_lock)
2531 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2532 if (pvolume_info->cifs_acl)
2533 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2534 if (pvolume_info->override_uid)
2535 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2536 if (pvolume_info->override_gid)
2537 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2538 if (pvolume_info->dynperm)
2539 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2540 if (pvolume_info->fsc)
2541 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
2542 if (pvolume_info->multiuser)
2543 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2544 CIFS_MOUNT_NO_PERM);
2545 if (pvolume_info->direct_io) {
2546 cFYI(1, "mounting share using direct i/o");
2547 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2549 if (pvolume_info->mfsymlinks) {
2550 if (pvolume_info->sfu_emul) {
2551 cERROR(1, "mount option mfsymlinks ignored if sfu "
2552 "mount option is used");
2554 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2558 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2559 cERROR(1, "mount option dynperm ignored if cifsacl "
2560 "mount option supported");
2564 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2565 struct cifs_sb_info *cifs_sb, const char *full_path)
2568 FILE_ALL_INFO *pfile_info;
2570 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2571 if (pfile_info == NULL)
2574 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2575 0 /* not legacy */, cifs_sb->local_nls,
2576 cifs_sb->mnt_cifs_flags &
2577 CIFS_MOUNT_MAP_SPECIAL_CHR);
2583 cleanup_volume_info(struct smb_vol **pvolume_info)
2585 struct smb_vol *volume_info;
2587 if (!pvolume_info || !*pvolume_info)
2590 volume_info = *pvolume_info;
2591 kzfree(volume_info->password);
2592 kfree(volume_info->UNC);
2593 kfree(volume_info->prepath);
2595 *pvolume_info = NULL;
2599 #ifdef CONFIG_CIFS_DFS_UPCALL
2600 /* build_path_to_root returns full path to root when
2601 * we do not have an exiting connection (tcon) */
2603 build_unc_path_to_root(const struct smb_vol *volume_info,
2604 const struct cifs_sb_info *cifs_sb)
2608 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2609 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2610 if (full_path == NULL)
2611 return ERR_PTR(-ENOMEM);
2613 strncpy(full_path, volume_info->UNC, unc_len);
2614 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2616 for (i = 0; i < unc_len; i++) {
2617 if (full_path[i] == '\\')
2622 if (cifs_sb->prepathlen)
2623 strncpy(full_path + unc_len, cifs_sb->prepath,
2624 cifs_sb->prepathlen);
2626 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2632 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2633 char *mount_data_global, const char *devname)
2637 struct smb_vol *volume_info;
2638 struct cifsSesInfo *pSesInfo;
2639 struct cifsTconInfo *tcon;
2640 struct TCP_Server_Info *srvTcp;
2642 char *mount_data = mount_data_global;
2643 struct tcon_link *tlink;
2644 #ifdef CONFIG_CIFS_DFS_UPCALL
2645 struct dfs_info3_param *referrals = NULL;
2646 unsigned int num_referrals = 0;
2647 int referral_walks_count = 0;
2659 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2665 if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2670 if (volume_info->nullauth) {
2671 cFYI(1, "null user");
2672 volume_info->username = "";
2673 } else if (volume_info->username) {
2674 /* BB fixme parse for domain name here */
2675 cFYI(1, "Username: %s", volume_info->username);
2677 cifserror("No username specified");
2678 /* In userspace mount helper we can get user name from alternate
2679 locations such as env variables and files on disk */
2684 /* this is needed for ASCII cp to Unicode converts */
2685 if (volume_info->iocharset == NULL) {
2686 /* load_nls_default cannot return null */
2687 volume_info->local_nls = load_nls_default();
2689 volume_info->local_nls = load_nls(volume_info->iocharset);
2690 if (volume_info->local_nls == NULL) {
2691 cERROR(1, "CIFS mount error: iocharset %s not found",
2692 volume_info->iocharset);
2697 cifs_sb->local_nls = volume_info->local_nls;
2699 /* get a reference to a tcp session */
2700 srvTcp = cifs_get_tcp_session(volume_info);
2701 if (IS_ERR(srvTcp)) {
2702 rc = PTR_ERR(srvTcp);
2706 /* get a reference to a SMB session */
2707 pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
2708 if (IS_ERR(pSesInfo)) {
2709 rc = PTR_ERR(pSesInfo);
2711 goto mount_fail_check;
2714 setup_cifs_sb(volume_info, cifs_sb);
2715 if (pSesInfo->capabilities & CAP_LARGE_FILES)
2716 sb->s_maxbytes = MAX_LFS_FILESIZE;
2718 sb->s_maxbytes = MAX_NON_LFS;
2720 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2721 sb->s_time_gran = 100;
2723 /* search for existing tcon to this server share */
2724 tcon = cifs_get_tcon(pSesInfo, volume_info);
2728 goto remote_path_check;
2731 /* do not care if following two calls succeed - informational */
2733 CIFSSMBQFSDeviceInfo(xid, tcon);
2734 CIFSSMBQFSAttributeInfo(xid, tcon);
2737 /* tell server which Unix caps we support */
2738 if (tcon->ses->capabilities & CAP_UNIX)
2739 /* reset of caps checks mount to see if unix extensions
2740 disabled for just this mount */
2741 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2743 tcon->unix_ext = 0; /* server does not support them */
2745 /* convert forward to back slashes in prepath here if needed */
2746 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2747 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2749 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2750 cifs_sb->rsize = 1024 * 127;
2751 cFYI(DBG2, "no very large read support, rsize now 127K");
2753 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2754 cifs_sb->wsize = min(cifs_sb->wsize,
2755 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2756 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2757 cifs_sb->rsize = min(cifs_sb->rsize,
2758 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2761 /* check if a whole path (including prepath) is not remote */
2762 if (!rc && cifs_sb->prepathlen && tcon) {
2763 /* build_path_to_root works only when we have a valid tcon */
2764 full_path = cifs_build_path_to_root(cifs_sb, tcon);
2765 if (full_path == NULL) {
2767 goto mount_fail_check;
2769 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2770 if (rc != 0 && rc != -EREMOTE) {
2772 goto mount_fail_check;
2777 /* get referral if needed */
2778 if (rc == -EREMOTE) {
2779 #ifdef CONFIG_CIFS_DFS_UPCALL
2780 if (referral_walks_count > MAX_NESTED_LINKS) {
2782 * BB: when we implement proper loop detection,
2783 * we will remove this check. But now we need it
2784 * to prevent an indefinite loop if 'DFS tree' is
2785 * misconfigured (i.e. has loops).
2788 goto mount_fail_check;
2790 /* convert forward to back slashes in prepath here if needed */
2791 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2792 convert_delimiter(cifs_sb->prepath,
2793 CIFS_DIR_SEP(cifs_sb));
2794 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2795 if (IS_ERR(full_path)) {
2796 rc = PTR_ERR(full_path);
2797 goto mount_fail_check;
2800 cFYI(1, "Getting referral for: %s", full_path);
2801 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2802 cifs_sb->local_nls, &num_referrals, &referrals,
2803 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2804 if (!rc && num_referrals > 0) {
2805 char *fake_devname = NULL;
2807 if (mount_data != mount_data_global)
2810 mount_data = cifs_compose_mount_options(
2811 cifs_sb->mountdata, full_path + 1,
2812 referrals, &fake_devname);
2814 free_dfs_info_array(referrals, num_referrals);
2815 kfree(fake_devname);
2818 if (IS_ERR(mount_data)) {
2819 rc = PTR_ERR(mount_data);
2821 goto mount_fail_check;
2825 cifs_put_tcon(tcon);
2827 cifs_put_smb_ses(pSesInfo);
2829 cleanup_volume_info(&volume_info);
2830 referral_walks_count++;
2832 goto try_mount_again;
2834 #else /* No DFS support, return error on mount */
2840 goto mount_fail_check;
2842 /* now, hang the tcon off of the superblock */
2843 tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
2844 if (tlink == NULL) {
2846 goto mount_fail_check;
2849 tlink->tl_uid = pSesInfo->linux_uid;
2850 tlink->tl_tcon = tcon;
2851 tlink->tl_time = jiffies;
2852 set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
2853 set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
2855 cifs_sb->master_tlink = tlink;
2856 spin_lock(&cifs_sb->tlink_tree_lock);
2857 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
2858 spin_unlock(&cifs_sb->tlink_tree_lock);
2860 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
2864 /* on error free sesinfo and tcon struct if needed */
2866 if (mount_data != mount_data_global)
2868 /* If find_unc succeeded then rc == 0 so we can not end */
2869 /* up accidently freeing someone elses tcon struct */
2871 cifs_put_tcon(tcon);
2873 cifs_put_smb_ses(pSesInfo);
2875 cifs_put_tcp_session(srvTcp);
2879 /* volume_info->password is freed above when existing session found
2880 (in which case it is not needed anymore) but when new sesion is created
2881 the password ptr is put in the new session structure (in which case the
2882 password will be freed at unmount time) */
2884 /* zero out password before freeing */
2885 cleanup_volume_info(&volume_info);
2891 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2892 const char *tree, struct cifsTconInfo *tcon,
2893 const struct nls_table *nls_codepage)
2895 struct smb_hdr *smb_buffer;
2896 struct smb_hdr *smb_buffer_response;
2899 unsigned char *bcc_ptr;
2901 int length, bytes_left;
2907 smb_buffer = cifs_buf_get();
2908 if (smb_buffer == NULL)
2911 smb_buffer_response = smb_buffer;
2913 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2914 NULL /*no tid */ , 4 /*wct */ );
2916 smb_buffer->Mid = GetNextMid(ses->server);
2917 smb_buffer->Uid = ses->Suid;
2918 pSMB = (TCONX_REQ *) smb_buffer;
2919 pSMBr = (TCONX_RSP *) smb_buffer_response;
2921 pSMB->AndXCommand = 0xFF;
2922 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2923 bcc_ptr = &pSMB->Password[0];
2924 if ((ses->server->secMode) & SECMODE_USER) {
2925 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
2926 *bcc_ptr = 0; /* password is null byte */
2927 bcc_ptr++; /* skip password */
2928 /* already aligned so no need to do it below */
2930 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2931 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2932 specified as required (when that support is added to
2933 the vfs in the future) as only NTLM or the much
2934 weaker LANMAN (which we do not send by default) is accepted
2935 by Samba (not sure whether other servers allow
2936 NTLMv2 password here) */
2937 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2938 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
2939 (ses->server->secType == LANMAN))
2940 calc_lanman_hash(tcon->password, ses->server->cryptkey,
2941 ses->server->secMode &
2942 SECMODE_PW_ENCRYPT ? true : false,
2945 #endif /* CIFS_WEAK_PW_HASH */
2946 SMBNTencrypt(tcon->password, ses->server->cryptkey, bcc_ptr);
2948 bcc_ptr += CIFS_SESS_KEY_SIZE;
2949 if (ses->capabilities & CAP_UNICODE) {
2950 /* must align unicode strings */
2951 *bcc_ptr = 0; /* null byte password */
2956 if (ses->server->secMode &
2957 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2958 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2960 if (ses->capabilities & CAP_STATUS32) {
2961 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2963 if (ses->capabilities & CAP_DFS) {
2964 smb_buffer->Flags2 |= SMBFLG2_DFS;
2966 if (ses->capabilities & CAP_UNICODE) {
2967 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2969 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2970 6 /* max utf8 char length in bytes */ *
2971 (/* server len*/ + 256 /* share len */), nls_codepage);
2972 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
2973 bcc_ptr += 2; /* skip trailing null */
2974 } else { /* ASCII */
2975 strcpy(bcc_ptr, tree);
2976 bcc_ptr += strlen(tree) + 1;
2978 strcpy(bcc_ptr, "?????");
2979 bcc_ptr += strlen("?????");
2981 count = bcc_ptr - &pSMB->Password[0];
2982 pSMB->hdr.smb_buf_length += count;
2983 pSMB->ByteCount = cpu_to_le16(count);
2985 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2988 /* above now done in SendReceive */
2989 if ((rc == 0) && (tcon != NULL)) {
2992 tcon->tidStatus = CifsGood;
2993 tcon->need_reconnect = false;
2994 tcon->tid = smb_buffer_response->Tid;
2995 bcc_ptr = pByteArea(smb_buffer_response);
2996 bytes_left = BCC(smb_buffer_response);
2997 length = strnlen(bcc_ptr, bytes_left - 2);
2998 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3004 /* skip service field (NB: this field is always ASCII) */
3006 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3007 (bcc_ptr[2] == 'C')) {
3008 cFYI(1, "IPC connection");
3011 } else if (length == 2) {
3012 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3013 /* the most common case */
3014 cFYI(1, "disk share connection");
3017 bcc_ptr += length + 1;
3018 bytes_left -= (length + 1);
3019 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
3021 /* mostly informational -- no need to fail on error here */
3022 kfree(tcon->nativeFileSystem);
3023 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
3024 bytes_left, is_unicode,
3027 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
3029 if ((smb_buffer_response->WordCount == 3) ||
3030 (smb_buffer_response->WordCount == 7))
3031 /* field is in same location */
3032 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3035 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
3036 } else if ((rc == 0) && tcon == NULL) {
3037 /* all we need to save for IPC$ connection */
3038 ses->ipc_tid = smb_buffer_response->Tid;
3041 cifs_buf_release(smb_buffer);
3046 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
3048 struct rb_root *root = &cifs_sb->tlink_tree;
3049 struct rb_node *node;
3050 struct tcon_link *tlink;
3053 cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3055 spin_lock(&cifs_sb->tlink_tree_lock);
3056 while ((node = rb_first(root))) {
3057 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3058 cifs_get_tlink(tlink);
3059 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3060 rb_erase(node, root);
3062 spin_unlock(&cifs_sb->tlink_tree_lock);
3063 cifs_put_tlink(tlink);
3064 spin_lock(&cifs_sb->tlink_tree_lock);
3066 spin_unlock(&cifs_sb->tlink_tree_lock);
3068 tmp = cifs_sb->prepath;
3069 cifs_sb->prepathlen = 0;
3070 cifs_sb->prepath = NULL;
3076 int cifs_negotiate_protocol(unsigned int xid, struct cifsSesInfo *ses)
3079 struct TCP_Server_Info *server = ses->server;
3081 /* only send once per connect */
3082 if (server->maxBuf != 0)
3085 rc = CIFSSMBNegotiate(xid, ses);
3086 if (rc == -EAGAIN) {
3087 /* retry only once on 1st time connection */
3088 rc = CIFSSMBNegotiate(xid, ses);
3093 spin_lock(&GlobalMid_Lock);
3094 if (server->tcpStatus != CifsExiting)
3095 server->tcpStatus = CifsGood;
3098 spin_unlock(&GlobalMid_Lock);
3106 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *ses,
3107 struct nls_table *nls_info)
3110 struct TCP_Server_Info *server = ses->server;
3113 ses->capabilities = server->capabilities;
3114 if (linuxExtEnabled == 0)
3115 ses->capabilities &= (~CAP_UNIX);
3117 cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3118 server->secMode, server->capabilities, server->timeAdj);
3120 rc = CIFS_SessSetup(xid, ses, nls_info);
3122 cERROR(1, "Send error in SessSetup = %d", rc);
3124 mutex_lock(&ses->server->srv_mutex);
3125 if (!server->session_estab) {
3126 server->session_key.response = ses->auth_key.response;
3127 server->session_key.len = ses->auth_key.len;
3128 server->sequence_number = 0x2;
3129 server->session_estab = true;
3130 ses->auth_key.response = NULL;
3132 mutex_unlock(&server->srv_mutex);
3134 cFYI(1, "CIFS Session Established successfully");
3135 spin_lock(&GlobalMid_Lock);
3136 ses->status = CifsGood;
3137 ses->need_reconnect = false;
3138 spin_unlock(&GlobalMid_Lock);
3141 kfree(ses->auth_key.response);
3142 ses->auth_key.response = NULL;
3143 ses->auth_key.len = 0;
3144 kfree(ses->ntlmssp);
3145 ses->ntlmssp = NULL;
3150 static struct cifsTconInfo *
3151 cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3153 struct cifsTconInfo *master_tcon = cifs_sb_master_tcon(cifs_sb);
3154 struct cifsSesInfo *ses;
3155 struct cifsTconInfo *tcon = NULL;
3156 struct smb_vol *vol_info;
3157 char username[MAX_USERNAME_SIZE + 1];
3159 vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3160 if (vol_info == NULL) {
3161 tcon = ERR_PTR(-ENOMEM);
3165 snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3166 vol_info->username = username;
3167 vol_info->local_nls = cifs_sb->local_nls;
3168 vol_info->linux_uid = fsuid;
3169 vol_info->cred_uid = fsuid;
3170 vol_info->UNC = master_tcon->treeName;
3171 vol_info->retry = master_tcon->retry;
3172 vol_info->nocase = master_tcon->nocase;
3173 vol_info->local_lease = master_tcon->local_lease;
3174 vol_info->no_linux_ext = !master_tcon->unix_ext;
3176 /* FIXME: allow for other secFlg settings */
3177 vol_info->secFlg = CIFSSEC_MUST_KRB5;
3179 /* get a reference for the same TCP session */
3180 spin_lock(&cifs_tcp_ses_lock);
3181 ++master_tcon->ses->server->srv_count;
3182 spin_unlock(&cifs_tcp_ses_lock);
3184 ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3186 tcon = (struct cifsTconInfo *)ses;
3187 cifs_put_tcp_session(master_tcon->ses->server);
3191 tcon = cifs_get_tcon(ses, vol_info);
3193 cifs_put_smb_ses(ses);
3197 if (ses->capabilities & CAP_UNIX)
3198 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3205 static inline struct tcon_link *
3206 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
3208 return cifs_sb->master_tlink;
3211 struct cifsTconInfo *
3212 cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3214 return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3218 cifs_sb_tcon_pending_wait(void *unused)
3221 return signal_pending(current) ? -ERESTARTSYS : 0;
3224 /* find and return a tlink with given uid */
3225 static struct tcon_link *
3226 tlink_rb_search(struct rb_root *root, uid_t uid)
3228 struct rb_node *node = root->rb_node;
3229 struct tcon_link *tlink;
3232 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3234 if (tlink->tl_uid > uid)
3235 node = node->rb_left;
3236 else if (tlink->tl_uid < uid)
3237 node = node->rb_right;
3244 /* insert a tcon_link into the tree */
3246 tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
3248 struct rb_node **new = &(root->rb_node), *parent = NULL;
3249 struct tcon_link *tlink;
3252 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
3255 if (tlink->tl_uid > new_tlink->tl_uid)
3256 new = &((*new)->rb_left);
3258 new = &((*new)->rb_right);
3261 rb_link_node(&new_tlink->tl_rbnode, parent, new);
3262 rb_insert_color(&new_tlink->tl_rbnode, root);
3266 * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3269 * If the superblock doesn't refer to a multiuser mount, then just return
3270 * the master tcon for the mount.
3272 * First, search the rbtree for an existing tcon for this fsuid. If one
3273 * exists, then check to see if it's pending construction. If it is then wait
3274 * for construction to complete. Once it's no longer pending, check to see if
3275 * it failed and either return an error or retry construction, depending on
3278 * If one doesn't exist then insert a new tcon_link struct into the tree and
3279 * try to construct a new one.
3282 cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3285 uid_t fsuid = current_fsuid();
3286 struct tcon_link *tlink, *newtlink;
3288 if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3289 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3291 spin_lock(&cifs_sb->tlink_tree_lock);
3292 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3294 cifs_get_tlink(tlink);
3295 spin_unlock(&cifs_sb->tlink_tree_lock);
3297 if (tlink == NULL) {
3298 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3299 if (newtlink == NULL)
3300 return ERR_PTR(-ENOMEM);
3301 newtlink->tl_uid = fsuid;
3302 newtlink->tl_tcon = ERR_PTR(-EACCES);
3303 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3304 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3305 cifs_get_tlink(newtlink);
3307 spin_lock(&cifs_sb->tlink_tree_lock);
3308 /* was one inserted after previous search? */
3309 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3311 cifs_get_tlink(tlink);
3312 spin_unlock(&cifs_sb->tlink_tree_lock);
3314 goto wait_for_construction;
3317 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3318 spin_unlock(&cifs_sb->tlink_tree_lock);
3320 wait_for_construction:
3321 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3322 cifs_sb_tcon_pending_wait,
3323 TASK_INTERRUPTIBLE);
3325 cifs_put_tlink(tlink);
3326 return ERR_PTR(ret);
3329 /* if it's good, return it */
3330 if (!IS_ERR(tlink->tl_tcon))
3333 /* return error if we tried this already recently */
3334 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3335 cifs_put_tlink(tlink);
3336 return ERR_PTR(-EACCES);
3339 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3340 goto wait_for_construction;
3343 tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3344 clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3345 wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3347 if (IS_ERR(tlink->tl_tcon)) {
3348 cifs_put_tlink(tlink);
3349 return ERR_PTR(-EACCES);
3356 * periodic workqueue job that scans tcon_tree for a superblock and closes
3360 cifs_prune_tlinks(struct work_struct *work)
3362 struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3364 struct rb_root *root = &cifs_sb->tlink_tree;
3365 struct rb_node *node = rb_first(root);
3366 struct rb_node *tmp;
3367 struct tcon_link *tlink;
3370 * Because we drop the spinlock in the loop in order to put the tlink
3371 * it's not guarded against removal of links from the tree. The only
3372 * places that remove entries from the tree are this function and
3373 * umounts. Because this function is non-reentrant and is canceled
3374 * before umount can proceed, this is safe.
3376 spin_lock(&cifs_sb->tlink_tree_lock);
3377 node = rb_first(root);
3378 while (node != NULL) {
3380 node = rb_next(tmp);
3381 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
3383 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
3384 atomic_read(&tlink->tl_count) != 0 ||
3385 time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
3388 cifs_get_tlink(tlink);
3389 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3390 rb_erase(tmp, root);
3392 spin_unlock(&cifs_sb->tlink_tree_lock);
3393 cifs_put_tlink(tlink);
3394 spin_lock(&cifs_sb->tlink_tree_lock);
3396 spin_unlock(&cifs_sb->tlink_tree_lock);
3398 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,