4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/slab.h>
27 #include <linux/pagemap.h>
28 #include <linux/ctype.h>
29 #include <linux/utsname.h>
30 #include <linux/mempool.h>
31 #include <linux/delay.h>
32 #include <linux/completion.h>
33 #include <linux/kthread.h>
34 #include <linux/pagevec.h>
35 #include <linux/freezer.h>
36 #include <linux/namei.h>
37 #include <asm/uaccess.h>
38 #include <asm/processor.h>
39 #include <linux/inet.h>
43 #include "cifsproto.h"
44 #include "cifs_unicode.h"
45 #include "cifs_debug.h"
46 #include "cifs_fs_sb.h"
49 #include "rfc1002pdu.h"
53 #define RFC1001_PORT 139
55 /* SMB echo "timeout" -- FIXME: tunable? */
56 #define SMB_ECHO_INTERVAL (60 * HZ)
58 extern mempool_t *cifs_req_poolp;
60 /* FIXME: should these be tunable? */
61 #define TLINK_ERROR_EXPIRE (1 * HZ)
62 #define TLINK_IDLE_EXPIRE (600 * HZ)
64 static int ip_connect(struct TCP_Server_Info *server);
65 static int generic_ip_connect(struct TCP_Server_Info *server);
66 static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
67 static void cifs_prune_tlinks(struct work_struct *work);
70 * cifs tcp session reconnection
72 * mark tcp session as reconnecting so temporarily locked
73 * mark all smb sessions as reconnecting for tcp session
74 * reconnect tcp session
75 * wake up waiters on reconnection? - (not needed currently)
78 cifs_reconnect(struct TCP_Server_Info *server)
81 struct list_head *tmp, *tmp2;
82 struct cifsSesInfo *ses;
83 struct cifsTconInfo *tcon;
84 struct mid_q_entry *mid_entry;
85 struct list_head retry_list;
87 spin_lock(&GlobalMid_Lock);
88 if (server->tcpStatus == CifsExiting) {
89 /* the demux thread will exit normally
90 next time through the loop */
91 spin_unlock(&GlobalMid_Lock);
94 server->tcpStatus = CifsNeedReconnect;
95 spin_unlock(&GlobalMid_Lock);
98 cFYI(1, "Reconnecting tcp session");
100 /* before reconnecting the tcp session, mark the smb session (uid)
101 and the tid bad so they are not used until reconnected */
102 cFYI(1, "%s: marking sessions and tcons for reconnect", __func__);
103 spin_lock(&cifs_tcp_ses_lock);
104 list_for_each(tmp, &server->smb_ses_list) {
105 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
106 ses->need_reconnect = true;
108 list_for_each(tmp2, &ses->tcon_list) {
109 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
110 tcon->need_reconnect = true;
113 spin_unlock(&cifs_tcp_ses_lock);
115 /* do not want to be sending data on a socket we are freeing */
116 cFYI(1, "%s: tearing down socket", __func__);
117 mutex_lock(&server->srv_mutex);
118 if (server->ssocket) {
119 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
120 server->ssocket->flags);
121 kernel_sock_shutdown(server->ssocket, SHUT_WR);
122 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
123 server->ssocket->state,
124 server->ssocket->flags);
125 sock_release(server->ssocket);
126 server->ssocket = NULL;
128 server->sequence_number = 0;
129 server->session_estab = false;
130 kfree(server->session_key.response);
131 server->session_key.response = NULL;
132 server->session_key.len = 0;
133 server->lstrp = jiffies;
134 mutex_unlock(&server->srv_mutex);
136 /* mark submitted MIDs for retry and issue callback */
137 INIT_LIST_HEAD(&retry_list);
138 cFYI(1, "%s: moving mids to private list", __func__);
139 spin_lock(&GlobalMid_Lock);
140 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
141 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
142 if (mid_entry->midState == MID_REQUEST_SUBMITTED)
143 mid_entry->midState = MID_RETRY_NEEDED;
144 list_move(&mid_entry->qhead, &retry_list);
146 spin_unlock(&GlobalMid_Lock);
148 cFYI(1, "%s: issuing mid callbacks", __func__);
149 list_for_each_safe(tmp, tmp2, &retry_list) {
150 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
151 list_del_init(&mid_entry->qhead);
152 mid_entry->callback(mid_entry);
155 while (server->tcpStatus == CifsNeedReconnect) {
158 /* we should try only the port we connected to before */
159 rc = generic_ip_connect(server);
161 cFYI(1, "reconnect error %d", rc);
164 atomic_inc(&tcpSesReconnectCount);
165 spin_lock(&GlobalMid_Lock);
166 if (server->tcpStatus != CifsExiting)
167 server->tcpStatus = CifsNeedNegotiate;
168 spin_unlock(&GlobalMid_Lock);
177 0 not a transact2, or all data present
178 >0 transact2 with that much data missing
179 -EINVAL = invalid transact2
182 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
184 struct smb_t2_rsp *pSMBt;
186 __u16 total_data_size, data_in_this_rsp;
188 if (pSMB->Command != SMB_COM_TRANSACTION2)
191 /* check for plausible wct, bcc and t2 data and parm sizes */
192 /* check for parm and data offset going beyond end of smb */
193 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
194 cFYI(1, "invalid transact2 word count");
198 pSMBt = (struct smb_t2_rsp *)pSMB;
200 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
201 data_in_this_rsp = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
203 if (total_data_size == data_in_this_rsp)
205 else if (total_data_size < data_in_this_rsp) {
206 cFYI(1, "total data %d smaller than data in frame %d",
207 total_data_size, data_in_this_rsp);
211 remaining = total_data_size - data_in_this_rsp;
213 cFYI(1, "missing %d bytes from transact2, check next response",
215 if (total_data_size > maxBufSize) {
216 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
217 total_data_size, maxBufSize);
223 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
225 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
226 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
227 char *data_area_of_target;
228 char *data_area_of_buf2;
230 unsigned int byte_count, total_in_buf;
231 __u16 total_data_size, total_in_buf2;
233 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
235 if (total_data_size !=
236 get_unaligned_le16(&pSMB2->t2_rsp.TotalDataCount))
237 cFYI(1, "total data size of primary and secondary t2 differ");
239 total_in_buf = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
241 remaining = total_data_size - total_in_buf;
246 if (remaining == 0) /* nothing to do, ignore */
249 total_in_buf2 = get_unaligned_le16(&pSMB2->t2_rsp.DataCount);
250 if (remaining < total_in_buf2) {
251 cFYI(1, "transact2 2nd response contains too much data");
254 /* find end of first SMB data area */
255 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
256 get_unaligned_le16(&pSMBt->t2_rsp.DataOffset);
257 /* validate target area */
259 data_area_of_buf2 = (char *)&pSMB2->hdr.Protocol +
260 get_unaligned_le16(&pSMB2->t2_rsp.DataOffset);
262 data_area_of_target += total_in_buf;
264 /* copy second buffer into end of first buffer */
265 total_in_buf += total_in_buf2;
266 /* is the result too big for the field? */
267 if (total_in_buf > USHRT_MAX)
269 put_unaligned_le16(total_in_buf, &pSMBt->t2_rsp.DataCount);
272 byte_count = get_bcc(pTargetSMB);
273 byte_count += total_in_buf2;
274 /* is the result too big for the field? */
275 if (byte_count > USHRT_MAX)
277 put_bcc(byte_count, pTargetSMB);
279 byte_count = be32_to_cpu(pTargetSMB->smb_buf_length);
280 byte_count += total_in_buf2;
281 /* don't allow buffer to overflow */
282 if (byte_count > CIFSMaxBufSize)
284 pTargetSMB->smb_buf_length = cpu_to_be32(byte_count);
286 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
288 if (remaining == total_in_buf2) {
289 cFYI(1, "found the last secondary response");
290 return 0; /* we are done */
291 } else /* more responses to go */
296 cifs_echo_request(struct work_struct *work)
299 struct TCP_Server_Info *server = container_of(work,
300 struct TCP_Server_Info, echo.work);
303 * We cannot send an echo until the NEGOTIATE_PROTOCOL request is
304 * done, which is indicated by maxBuf != 0. Also, no need to ping if
305 * we got a response recently
307 if (server->maxBuf == 0 ||
308 time_before(jiffies, server->lstrp + SMB_ECHO_INTERVAL - HZ))
311 rc = CIFSSMBEcho(server);
313 cFYI(1, "Unable to send echo request to server: %s",
317 queue_delayed_work(system_nrt_wq, &server->echo, SMB_ECHO_INTERVAL);
321 cifs_demultiplex_thread(struct TCP_Server_Info *server)
324 unsigned int pdu_length, total_read;
325 struct smb_hdr *smb_buffer = NULL;
326 struct smb_hdr *bigbuf = NULL;
327 struct smb_hdr *smallbuf = NULL;
328 struct msghdr smb_msg;
330 struct socket *csocket = server->ssocket;
331 struct list_head *tmp, *tmp2;
332 struct task_struct *task_to_wake = NULL;
333 struct mid_q_entry *mid_entry;
335 bool isLargeBuf = false;
339 current->flags |= PF_MEMALLOC;
340 cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
342 length = atomic_inc_return(&tcpSesAllocCount);
344 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
348 while (server->tcpStatus != CifsExiting) {
351 if (bigbuf == NULL) {
352 bigbuf = cifs_buf_get();
354 cERROR(1, "No memory for large SMB response");
356 /* retry will check if exiting */
359 } else if (isLargeBuf) {
360 /* we are reusing a dirty large buf, clear its start */
361 memset(bigbuf, 0, sizeof(struct smb_hdr));
364 if (smallbuf == NULL) {
365 smallbuf = cifs_small_buf_get();
367 cERROR(1, "No memory for SMB response");
369 /* retry will check if exiting */
372 /* beginning of smb buffer is cleared in our buf_get */
373 } else /* if existing small buf clear beginning */
374 memset(smallbuf, 0, sizeof(struct smb_hdr));
378 smb_buffer = smallbuf;
379 iov.iov_base = smb_buffer;
381 smb_msg.msg_control = NULL;
382 smb_msg.msg_controllen = 0;
383 pdu_length = 4; /* enough to get RFC1001 header */
386 if (echo_retries > 0 && server->tcpStatus == CifsGood &&
387 time_after(jiffies, server->lstrp +
388 (echo_retries * SMB_ECHO_INTERVAL))) {
389 cERROR(1, "Server %s has not responded in %d seconds. "
390 "Reconnecting...", server->hostname,
391 (echo_retries * SMB_ECHO_INTERVAL / HZ));
392 cifs_reconnect(server);
393 csocket = server->ssocket;
394 wake_up(&server->response_q);
399 kernel_recvmsg(csocket, &smb_msg,
400 &iov, 1, pdu_length, 0 /* BB other flags? */);
402 if (server->tcpStatus == CifsExiting) {
404 } else if (server->tcpStatus == CifsNeedReconnect) {
405 cFYI(1, "Reconnect after server stopped responding");
406 cifs_reconnect(server);
407 cFYI(1, "call to reconnect done");
408 csocket = server->ssocket;
410 } else if (length == -ERESTARTSYS ||
413 msleep(1); /* minimum sleep to prevent looping
414 allowing socket to clear and app threads to set
415 tcpStatus CifsNeedReconnect if server hung */
416 if (pdu_length < 4) {
417 iov.iov_base = (4 - pdu_length) +
419 iov.iov_len = pdu_length;
420 smb_msg.msg_control = NULL;
421 smb_msg.msg_controllen = 0;
425 } else if (length <= 0) {
426 cFYI(1, "Reconnect after unexpected peek error %d",
428 cifs_reconnect(server);
429 csocket = server->ssocket;
430 wake_up(&server->response_q);
432 } else if (length < pdu_length) {
433 cFYI(1, "requested %d bytes but only got %d bytes",
435 pdu_length -= length;
440 /* The right amount was read from socket - 4 bytes */
441 /* so we can now interpret the length field */
443 /* the first byte big endian of the length field,
444 is actually not part of the length but the type
445 with the most common, zero, as regular data */
446 temp = *((char *) smb_buffer);
448 /* Note that FC 1001 length is big endian on the wire,
449 but we convert it here so it is always manipulated
450 as host byte order */
451 pdu_length = be32_to_cpu(smb_buffer->smb_buf_length);
453 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
455 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
457 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
458 cFYI(1, "Good RFC 1002 session rsp");
460 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
461 /* we get this from Windows 98 instead of
462 an error on SMB negprot response */
463 cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
465 /* give server a second to clean up */
467 /* always try 445 first on reconnect since we get NACK
468 * on some if we ever connected to port 139 (the NACK
469 * is since we do not begin with RFC1001 session
472 cifs_set_port((struct sockaddr *)
473 &server->dstaddr, CIFS_PORT);
474 cifs_reconnect(server);
475 csocket = server->ssocket;
476 wake_up(&server->response_q);
478 } else if (temp != (char) 0) {
479 cERROR(1, "Unknown RFC 1002 frame");
480 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
482 cifs_reconnect(server);
483 csocket = server->ssocket;
487 /* else we have an SMB response */
488 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
489 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
490 cERROR(1, "Invalid size SMB length %d pdu_length %d",
491 length, pdu_length+4);
492 cifs_reconnect(server);
493 csocket = server->ssocket;
494 wake_up(&server->response_q);
501 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
503 memcpy(bigbuf, smallbuf, 4);
507 iov.iov_base = 4 + (char *)smb_buffer;
508 iov.iov_len = pdu_length;
509 for (total_read = 0; total_read < pdu_length;
510 total_read += length) {
511 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
512 pdu_length - total_read, 0);
513 if (server->tcpStatus == CifsExiting) {
517 } else if (server->tcpStatus == CifsNeedReconnect) {
518 cifs_reconnect(server);
519 csocket = server->ssocket;
520 /* Reconnect wakes up rspns q */
521 /* Now we will reread sock */
524 } else if (length == -ERESTARTSYS ||
527 msleep(1); /* minimum sleep to prevent looping,
528 allowing socket to clear and app
529 threads to set tcpStatus
530 CifsNeedReconnect if server hung*/
533 } else if (length <= 0) {
534 cERROR(1, "Received no data, expecting %d",
535 pdu_length - total_read);
536 cifs_reconnect(server);
537 csocket = server->ssocket;
544 else if (reconnect == 1)
547 total_read += 4; /* account for rfc1002 hdr */
549 dump_smb(smb_buffer, total_read);
552 * We know that we received enough to get to the MID as we
553 * checked the pdu_length earlier. Now check to see
554 * if the rest of the header is OK. We borrow the length
555 * var for the rest of the loop to avoid a new stack var.
557 * 48 bytes is enough to display the header and a little bit
558 * into the payload for debugging purposes.
560 length = checkSMB(smb_buffer, smb_buffer->Mid, total_read);
562 cifs_dump_mem("Bad SMB: ", smb_buffer,
563 min_t(unsigned int, total_read, 48));
566 server->lstrp = jiffies;
568 spin_lock(&GlobalMid_Lock);
569 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
570 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
572 if (mid_entry->mid != smb_buffer->Mid ||
573 mid_entry->midState != MID_REQUEST_SUBMITTED ||
574 mid_entry->command != smb_buffer->Command) {
580 check2ndT2(smb_buffer, server->maxBuf) > 0) {
581 /* We have a multipart transact2 resp */
583 if (mid_entry->resp_buf) {
584 /* merge response - fix up 1st*/
585 length = coalesce_t2(smb_buffer,
586 mid_entry->resp_buf);
589 mid_entry->multiRsp = true;
592 /* all parts received or
593 * packet is malformed
595 mid_entry->multiEnd = true;
601 * FIXME: switch to already
602 * allocated largebuf?
604 cERROR(1, "1st trans2 resp "
607 /* Have first buffer */
608 mid_entry->resp_buf =
610 mid_entry->largeBuf = true;
616 mid_entry->resp_buf = smb_buffer;
617 mid_entry->largeBuf = isLargeBuf;
620 mid_entry->midState = MID_RESPONSE_RECEIVED;
622 mid_entry->midState = MID_RESPONSE_MALFORMED;
623 #ifdef CONFIG_CIFS_STATS2
624 mid_entry->when_received = jiffies;
626 list_del_init(&mid_entry->qhead);
629 spin_unlock(&GlobalMid_Lock);
631 if (mid_entry != NULL) {
632 mid_entry->callback(mid_entry);
633 /* Was previous buf put in mpx struct for multi-rsp? */
635 /* smb buffer will be freed by user thread */
641 } else if (length != 0) {
642 /* response sanity checks failed */
644 } else if (!is_valid_oplock_break(smb_buffer, server) &&
646 cERROR(1, "No task to wake, unknown frame received! "
647 "NumMids %d", atomic_read(&midCount));
648 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
649 sizeof(struct smb_hdr));
650 #ifdef CONFIG_CIFS_DEBUG2
651 cifs_dump_detail(smb_buffer);
652 cifs_dump_mids(server);
653 #endif /* CIFS_DEBUG2 */
656 } /* end while !EXITING */
658 /* take it off the list, if it's not already */
659 spin_lock(&cifs_tcp_ses_lock);
660 list_del_init(&server->tcp_ses_list);
661 spin_unlock(&cifs_tcp_ses_lock);
663 spin_lock(&GlobalMid_Lock);
664 server->tcpStatus = CifsExiting;
665 spin_unlock(&GlobalMid_Lock);
666 wake_up_all(&server->response_q);
668 /* check if we have blocked requests that need to free */
669 /* Note that cifs_max_pending is normally 50, but
670 can be set at module install time to as little as two */
671 spin_lock(&GlobalMid_Lock);
672 if (atomic_read(&server->inFlight) >= cifs_max_pending)
673 atomic_set(&server->inFlight, cifs_max_pending - 1);
674 /* We do not want to set the max_pending too low or we
675 could end up with the counter going negative */
676 spin_unlock(&GlobalMid_Lock);
677 /* Although there should not be any requests blocked on
678 this queue it can not hurt to be paranoid and try to wake up requests
679 that may haven been blocked when more than 50 at time were on the wire
680 to the same server - they now will see the session is in exit state
681 and get out of SendReceive. */
682 wake_up_all(&server->request_q);
683 /* give those requests time to exit */
686 if (server->ssocket) {
687 sock_release(csocket);
688 server->ssocket = NULL;
690 /* buffer usually freed in free_mid - need to free it here on exit */
691 cifs_buf_release(bigbuf);
692 if (smallbuf) /* no sense logging a debug message if NULL */
693 cifs_small_buf_release(smallbuf);
695 if (!list_empty(&server->pending_mid_q)) {
696 struct list_head dispose_list;
698 INIT_LIST_HEAD(&dispose_list);
699 spin_lock(&GlobalMid_Lock);
700 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
701 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
702 cFYI(1, "Clearing mid 0x%x", mid_entry->mid);
703 mid_entry->midState = MID_SHUTDOWN;
704 list_move(&mid_entry->qhead, &dispose_list);
706 spin_unlock(&GlobalMid_Lock);
708 /* now walk dispose list and issue callbacks */
709 list_for_each_safe(tmp, tmp2, &dispose_list) {
710 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
711 cFYI(1, "Callback mid 0x%x", mid_entry->mid);
712 list_del_init(&mid_entry->qhead);
713 mid_entry->callback(mid_entry);
715 /* 1/8th of sec is more than enough time for them to exit */
719 if (!list_empty(&server->pending_mid_q)) {
720 /* mpx threads have not exited yet give them
721 at least the smb send timeout time for long ops */
722 /* due to delays on oplock break requests, we need
723 to wait at least 45 seconds before giving up
724 on a request getting a response and going ahead
726 cFYI(1, "Wait for exit from demultiplex thread");
728 /* if threads still have not exited they are probably never
729 coming home not much else we can do but free the memory */
732 kfree(server->hostname);
733 task_to_wake = xchg(&server->tsk, NULL);
736 length = atomic_dec_return(&tcpSesAllocCount);
738 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
741 /* if server->tsk was NULL then wait for a signal before exiting */
743 set_current_state(TASK_INTERRUPTIBLE);
744 while (!signal_pending(current)) {
746 set_current_state(TASK_INTERRUPTIBLE);
748 set_current_state(TASK_RUNNING);
751 module_put_and_exit(0);
754 /* extract the host portion of the UNC string */
756 extract_hostname(const char *unc)
762 /* skip double chars at beginning of string */
763 /* BB: check validity of these bytes? */
766 /* delimiter between hostname and sharename is always '\\' now */
767 delim = strchr(src, '\\');
769 return ERR_PTR(-EINVAL);
772 dst = kmalloc((len + 1), GFP_KERNEL);
774 return ERR_PTR(-ENOMEM);
776 memcpy(dst, src, len);
783 cifs_parse_mount_options(const char *mountdata, const char *devname,
786 char *value, *data, *end;
787 char *mountdata_copy, *options;
788 unsigned int temp_len, i, j;
790 short int override_uid = -1;
791 short int override_gid = -1;
792 bool uid_specified = false;
793 bool gid_specified = false;
794 char *nodename = utsname()->nodename;
800 * does not have to be perfect mapping since field is
801 * informational, only used for servers that do not support
802 * port 445 and it can be overridden at mount time
804 memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
805 for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
806 vol->source_rfc1001_name[i] = toupper(nodename[i]);
808 vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
809 /* null target name indicates to use *SMBSERVR default called name
810 if we end up sending RFC1001 session initialize */
811 vol->target_rfc1001_name[0] = 0;
812 vol->cred_uid = current_uid();
813 vol->linux_uid = current_uid();
814 vol->linux_gid = current_gid();
816 /* default to only allowing write access to owner of the mount */
817 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
819 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
820 /* default is always to request posix paths. */
821 vol->posix_paths = 1;
822 /* default to using server inode numbers where available */
825 vol->actimeo = CIFS_DEF_ACTIMEO;
828 goto cifs_parse_mount_err;
830 mountdata_copy = kstrndup(mountdata, PAGE_SIZE, GFP_KERNEL);
832 goto cifs_parse_mount_err;
834 options = mountdata_copy;
835 end = options + strlen(options);
836 if (strncmp(options, "sep=", 4) == 0) {
837 if (options[4] != 0) {
838 separator[0] = options[4];
841 cFYI(1, "Null separator not allowed");
845 while ((data = strsep(&options, separator)) != NULL) {
848 if ((value = strchr(data, '=')) != NULL)
851 /* Have to parse this before we parse for "user" */
852 if (strnicmp(data, "user_xattr", 10) == 0) {
854 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
856 } else if (strnicmp(data, "user", 4) == 0) {
859 "CIFS: invalid or missing username\n");
860 goto cifs_parse_mount_err;
861 } else if (!*value) {
862 /* null user, ie anonymous, authentication */
865 if (strnlen(value, MAX_USERNAME_SIZE) <
867 vol->username = kstrdup(value, GFP_KERNEL);
868 if (!vol->username) {
869 printk(KERN_WARNING "CIFS: no memory "
871 goto cifs_parse_mount_err;
874 printk(KERN_WARNING "CIFS: username too long\n");
875 goto cifs_parse_mount_err;
877 } else if (strnicmp(data, "pass", 4) == 0) {
879 vol->password = NULL;
881 } else if (value[0] == 0) {
882 /* check if string begins with double comma
883 since that would mean the password really
884 does start with a comma, and would not
885 indicate an empty string */
886 if (value[1] != separator[0]) {
887 vol->password = NULL;
891 temp_len = strlen(value);
892 /* removed password length check, NTLM passwords
893 can be arbitrarily long */
895 /* if comma in password, the string will be
896 prematurely null terminated. Commas in password are
897 specified across the cifs mount interface by a double
898 comma ie ,, and a comma used as in other cases ie ','
899 as a parameter delimiter/separator is single and due
900 to the strsep above is temporarily zeroed. */
902 /* NB: password legally can have multiple commas and
903 the only illegal character in a password is null */
905 if ((value[temp_len] == 0) &&
906 (value + temp_len < end) &&
907 (value[temp_len+1] == separator[0])) {
909 value[temp_len] = separator[0];
910 temp_len += 2; /* move after second comma */
911 while (value[temp_len] != 0) {
912 if (value[temp_len] == separator[0]) {
913 if (value[temp_len+1] ==
915 /* skip second comma */
918 /* single comma indicating start
925 if (value[temp_len] == 0) {
929 /* point option to start of next parm */
930 options = value + temp_len + 1;
932 /* go from value to value + temp_len condensing
933 double commas to singles. Note that this ends up
934 allocating a few bytes too many, which is ok */
935 vol->password = kzalloc(temp_len, GFP_KERNEL);
936 if (vol->password == NULL) {
937 printk(KERN_WARNING "CIFS: no memory "
939 goto cifs_parse_mount_err;
941 for (i = 0, j = 0; i < temp_len; i++, j++) {
942 vol->password[j] = value[i];
943 if (value[i] == separator[0]
944 && value[i+1] == separator[0]) {
945 /* skip second comma */
949 vol->password[j] = 0;
951 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
952 if (vol->password == NULL) {
953 printk(KERN_WARNING "CIFS: no memory "
955 goto cifs_parse_mount_err;
957 strcpy(vol->password, value);
959 } else if (!strnicmp(data, "ip", 2) ||
960 !strnicmp(data, "addr", 4)) {
961 if (!value || !*value) {
963 } else if (strnlen(value, INET6_ADDRSTRLEN) <
965 vol->UNCip = kstrdup(value, GFP_KERNEL);
967 printk(KERN_WARNING "CIFS: no memory "
969 goto cifs_parse_mount_err;
972 printk(KERN_WARNING "CIFS: ip address "
974 goto cifs_parse_mount_err;
976 } else if (strnicmp(data, "sec", 3) == 0) {
977 if (!value || !*value) {
978 cERROR(1, "no security value specified");
980 } else if (strnicmp(value, "krb5i", 5) == 0) {
981 vol->secFlg |= CIFSSEC_MAY_KRB5 |
983 } else if (strnicmp(value, "krb5p", 5) == 0) {
984 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
986 cERROR(1, "Krb5 cifs privacy not supported");
987 goto cifs_parse_mount_err;
988 } else if (strnicmp(value, "krb5", 4) == 0) {
989 vol->secFlg |= CIFSSEC_MAY_KRB5;
990 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
991 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
993 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
994 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
995 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
996 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
998 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
999 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1000 } else if (strnicmp(value, "ntlmi", 5) == 0) {
1001 vol->secFlg |= CIFSSEC_MAY_NTLM |
1003 } else if (strnicmp(value, "ntlm", 4) == 0) {
1004 /* ntlm is default so can be turned off too */
1005 vol->secFlg |= CIFSSEC_MAY_NTLM;
1006 } else if (strnicmp(value, "nontlm", 6) == 0) {
1007 /* BB is there a better way to do this? */
1008 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1009 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1010 } else if (strnicmp(value, "lanman", 6) == 0) {
1011 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1013 } else if (strnicmp(value, "none", 4) == 0) {
1016 cERROR(1, "bad security option: %s", value);
1017 goto cifs_parse_mount_err;
1019 } else if (strnicmp(data, "vers", 3) == 0) {
1020 if (!value || !*value) {
1021 cERROR(1, "no protocol version specified"
1022 " after vers= mount option");
1023 } else if ((strnicmp(value, "cifs", 4) == 0) ||
1024 (strnicmp(value, "1", 1) == 0)) {
1025 /* this is the default */
1028 } else if ((strnicmp(data, "unc", 3) == 0)
1029 || (strnicmp(data, "target", 6) == 0)
1030 || (strnicmp(data, "path", 4) == 0)) {
1031 if (!value || !*value) {
1032 printk(KERN_WARNING "CIFS: invalid path to "
1033 "network resource\n");
1034 goto cifs_parse_mount_err;
1036 if ((temp_len = strnlen(value, 300)) < 300) {
1037 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1038 if (vol->UNC == NULL)
1039 goto cifs_parse_mount_err;
1040 strcpy(vol->UNC, value);
1041 if (strncmp(vol->UNC, "//", 2) == 0) {
1044 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1046 "CIFS: UNC Path does not begin "
1047 "with // or \\\\ \n");
1048 goto cifs_parse_mount_err;
1051 printk(KERN_WARNING "CIFS: UNC name too long\n");
1052 goto cifs_parse_mount_err;
1054 } else if ((strnicmp(data, "domain", 3) == 0)
1055 || (strnicmp(data, "workgroup", 5) == 0)) {
1056 if (!value || !*value) {
1057 printk(KERN_WARNING "CIFS: invalid domain name\n");
1058 goto cifs_parse_mount_err;
1060 /* BB are there cases in which a comma can be valid in
1061 a domain name and need special handling? */
1062 if (strnlen(value, 256) < 256) {
1063 vol->domainname = kstrdup(value, GFP_KERNEL);
1064 if (!vol->domainname) {
1065 printk(KERN_WARNING "CIFS: no memory "
1066 "for domainname\n");
1067 goto cifs_parse_mount_err;
1069 cFYI(1, "Domain name set");
1071 printk(KERN_WARNING "CIFS: domain name too "
1073 goto cifs_parse_mount_err;
1075 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1076 vol->srcaddr.ss_family = AF_UNSPEC;
1078 if (!value || !*value) {
1079 printk(KERN_WARNING "CIFS: srcaddr value"
1080 " not specified.\n");
1081 goto cifs_parse_mount_err;
1083 i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1084 value, strlen(value));
1086 printk(KERN_WARNING "CIFS: Could not parse"
1089 goto cifs_parse_mount_err;
1091 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1092 if (!value || !*value) {
1094 "CIFS: invalid path prefix\n");
1095 goto cifs_parse_mount_err;
1097 if ((temp_len = strnlen(value, 1024)) < 1024) {
1098 if (value[0] != '/')
1099 temp_len++; /* missing leading slash */
1100 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1101 if (vol->prepath == NULL)
1102 goto cifs_parse_mount_err;
1103 if (value[0] != '/') {
1104 vol->prepath[0] = '/';
1105 strcpy(vol->prepath+1, value);
1107 strcpy(vol->prepath, value);
1108 cFYI(1, "prefix path %s", vol->prepath);
1110 printk(KERN_WARNING "CIFS: prefix too long\n");
1111 goto cifs_parse_mount_err;
1113 } else if (strnicmp(data, "iocharset", 9) == 0) {
1114 if (!value || !*value) {
1115 printk(KERN_WARNING "CIFS: invalid iocharset "
1117 goto cifs_parse_mount_err;
1119 if (strnlen(value, 65) < 65) {
1120 if (strnicmp(value, "default", 7)) {
1121 vol->iocharset = kstrdup(value,
1124 if (!vol->iocharset) {
1125 printk(KERN_WARNING "CIFS: no "
1128 goto cifs_parse_mount_err;
1131 /* if iocharset not set then load_nls_default
1132 is used by caller */
1133 cFYI(1, "iocharset set to %s", value);
1135 printk(KERN_WARNING "CIFS: iocharset name "
1137 goto cifs_parse_mount_err;
1139 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1140 vol->linux_uid = simple_strtoul(value, &value, 0);
1141 uid_specified = true;
1142 } else if (!strnicmp(data, "cruid", 5) && value && *value) {
1143 vol->cred_uid = simple_strtoul(value, &value, 0);
1144 } else if (!strnicmp(data, "forceuid", 8)) {
1146 } else if (!strnicmp(data, "noforceuid", 10)) {
1148 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1149 vol->linux_gid = simple_strtoul(value, &value, 0);
1150 gid_specified = true;
1151 } else if (!strnicmp(data, "forcegid", 8)) {
1153 } else if (!strnicmp(data, "noforcegid", 10)) {
1155 } else if (strnicmp(data, "file_mode", 4) == 0) {
1156 if (value && *value) {
1158 simple_strtoul(value, &value, 0);
1160 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1161 if (value && *value) {
1163 simple_strtoul(value, &value, 0);
1165 } else if (strnicmp(data, "dirmode", 4) == 0) {
1166 if (value && *value) {
1168 simple_strtoul(value, &value, 0);
1170 } else if (strnicmp(data, "port", 4) == 0) {
1171 if (value && *value) {
1173 simple_strtoul(value, &value, 0);
1175 } else if (strnicmp(data, "rsize", 5) == 0) {
1176 if (value && *value) {
1178 simple_strtoul(value, &value, 0);
1180 } else if (strnicmp(data, "wsize", 5) == 0) {
1181 if (value && *value) {
1183 simple_strtoul(value, &value, 0);
1185 } else if (strnicmp(data, "sockopt", 5) == 0) {
1186 if (!value || !*value) {
1187 cERROR(1, "no socket option specified");
1189 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1190 vol->sockopt_tcp_nodelay = 1;
1192 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1193 if (!value || !*value || (*value == ' ')) {
1194 cFYI(1, "invalid (empty) netbiosname");
1196 memset(vol->source_rfc1001_name, 0x20,
1199 * FIXME: are there cases in which a comma can
1200 * be valid in workstation netbios name (and
1201 * need special handling)?
1203 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1204 /* don't ucase netbiosname for user */
1207 vol->source_rfc1001_name[i] = value[i];
1209 /* The string has 16th byte zero still from
1210 set at top of the function */
1211 if (i == RFC1001_NAME_LEN && value[i] != 0)
1212 printk(KERN_WARNING "CIFS: netbiosname"
1213 " longer than 15 truncated.\n");
1215 } else if (strnicmp(data, "servern", 7) == 0) {
1216 /* servernetbiosname specified override *SMBSERVER */
1217 if (!value || !*value || (*value == ' ')) {
1218 cFYI(1, "empty server netbiosname specified");
1220 /* last byte, type, is 0x20 for servr type */
1221 memset(vol->target_rfc1001_name, 0x20,
1222 RFC1001_NAME_LEN_WITH_NULL);
1224 for (i = 0; i < 15; i++) {
1225 /* BB are there cases in which a comma can be
1226 valid in this workstation netbios name
1227 (and need special handling)? */
1229 /* user or mount helper must uppercase
1234 vol->target_rfc1001_name[i] =
1237 /* The string has 16th byte zero still from
1238 set at top of the function */
1239 if (i == RFC1001_NAME_LEN && value[i] != 0)
1240 printk(KERN_WARNING "CIFS: server net"
1241 "biosname longer than 15 truncated.\n");
1243 } else if (strnicmp(data, "actimeo", 7) == 0) {
1244 if (value && *value) {
1245 vol->actimeo = HZ * simple_strtoul(value,
1247 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1248 cERROR(1, "CIFS: attribute cache"
1249 "timeout too large");
1250 goto cifs_parse_mount_err;
1253 } else if (strnicmp(data, "credentials", 4) == 0) {
1255 } else if (strnicmp(data, "version", 3) == 0) {
1257 } else if (strnicmp(data, "guest", 5) == 0) {
1259 } else if (strnicmp(data, "rw", 2) == 0) {
1261 } else if (strnicmp(data, "ro", 2) == 0) {
1263 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1264 vol->noblocksnd = 1;
1265 } else if (strnicmp(data, "noautotune", 10) == 0) {
1266 vol->noautotune = 1;
1267 } else if ((strnicmp(data, "suid", 4) == 0) ||
1268 (strnicmp(data, "nosuid", 6) == 0) ||
1269 (strnicmp(data, "exec", 4) == 0) ||
1270 (strnicmp(data, "noexec", 6) == 0) ||
1271 (strnicmp(data, "nodev", 5) == 0) ||
1272 (strnicmp(data, "noauto", 6) == 0) ||
1273 (strnicmp(data, "dev", 3) == 0)) {
1274 /* The mount tool or mount.cifs helper (if present)
1275 uses these opts to set flags, and the flags are read
1276 by the kernel vfs layer before we get here (ie
1277 before read super) so there is no point trying to
1278 parse these options again and set anything and it
1279 is ok to just ignore them */
1281 } else if (strnicmp(data, "hard", 4) == 0) {
1283 } else if (strnicmp(data, "soft", 4) == 0) {
1285 } else if (strnicmp(data, "perm", 4) == 0) {
1287 } else if (strnicmp(data, "noperm", 6) == 0) {
1289 } else if (strnicmp(data, "mapchars", 8) == 0) {
1291 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1293 } else if (strnicmp(data, "sfu", 3) == 0) {
1295 } else if (strnicmp(data, "nosfu", 5) == 0) {
1297 } else if (strnicmp(data, "nodfs", 5) == 0) {
1299 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1300 vol->posix_paths = 1;
1301 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1302 vol->posix_paths = 0;
1303 } else if (strnicmp(data, "nounix", 6) == 0) {
1304 vol->no_linux_ext = 1;
1305 } else if (strnicmp(data, "nolinux", 7) == 0) {
1306 vol->no_linux_ext = 1;
1307 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1308 (strnicmp(data, "ignorecase", 10) == 0)) {
1310 } else if (strnicmp(data, "mand", 4) == 0) {
1312 } else if (strnicmp(data, "nomand", 6) == 0) {
1314 } else if (strnicmp(data, "_netdev", 7) == 0) {
1316 } else if (strnicmp(data, "brl", 3) == 0) {
1318 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1319 (strnicmp(data, "nolock", 6) == 0)) {
1321 /* turn off mandatory locking in mode
1322 if remote locking is turned off since the
1323 local vfs will do advisory */
1324 if (vol->file_mode ==
1325 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1326 vol->file_mode = S_IALLUGO;
1327 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1328 /* will take the shorter form "forcemand" as well */
1329 /* This mount option will force use of mandatory
1330 (DOS/Windows style) byte range locks, instead of
1331 using posix advisory byte range locks, even if the
1332 Unix extensions are available and posix locks would
1333 be supported otherwise. If Unix extensions are not
1334 negotiated this has no effect since mandatory locks
1335 would be used (mandatory locks is all that those
1336 those servers support) */
1338 } else if (strnicmp(data, "setuids", 7) == 0) {
1340 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1342 } else if (strnicmp(data, "dynperm", 7) == 0) {
1343 vol->dynperm = true;
1344 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1345 vol->dynperm = false;
1346 } else if (strnicmp(data, "nohard", 6) == 0) {
1348 } else if (strnicmp(data, "nosoft", 6) == 0) {
1350 } else if (strnicmp(data, "nointr", 6) == 0) {
1352 } else if (strnicmp(data, "intr", 4) == 0) {
1354 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1355 vol->nostrictsync = 1;
1356 } else if (strnicmp(data, "strictsync", 10) == 0) {
1357 vol->nostrictsync = 0;
1358 } else if (strnicmp(data, "serverino", 7) == 0) {
1359 vol->server_ino = 1;
1360 } else if (strnicmp(data, "noserverino", 9) == 0) {
1361 vol->server_ino = 0;
1362 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1364 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1366 } else if (strnicmp(data, "acl", 3) == 0) {
1367 vol->no_psx_acl = 0;
1368 } else if (strnicmp(data, "noacl", 5) == 0) {
1369 vol->no_psx_acl = 1;
1370 } else if (strnicmp(data, "locallease", 6) == 0) {
1371 vol->local_lease = 1;
1372 } else if (strnicmp(data, "sign", 4) == 0) {
1373 vol->secFlg |= CIFSSEC_MUST_SIGN;
1374 } else if (strnicmp(data, "seal", 4) == 0) {
1375 /* we do not do the following in secFlags because seal
1376 is a per tree connection (mount) not a per socket
1377 or per-smb connection option in the protocol */
1378 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1380 } else if (strnicmp(data, "direct", 6) == 0) {
1382 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1384 } else if (strnicmp(data, "strictcache", 11) == 0) {
1386 } else if (strnicmp(data, "noac", 4) == 0) {
1387 printk(KERN_WARNING "CIFS: Mount option noac not "
1388 "supported. Instead set "
1389 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1390 } else if (strnicmp(data, "fsc", 3) == 0) {
1391 #ifndef CONFIG_CIFS_FSCACHE
1392 cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE"
1393 "kernel config option set");
1394 goto cifs_parse_mount_err;
1397 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1398 vol->mfsymlinks = true;
1399 } else if (strnicmp(data, "multiuser", 8) == 0) {
1400 vol->multiuser = true;
1402 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1405 if (vol->UNC == NULL) {
1406 if (devname == NULL) {
1407 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1409 goto cifs_parse_mount_err;
1411 if ((temp_len = strnlen(devname, 300)) < 300) {
1412 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1413 if (vol->UNC == NULL)
1414 goto cifs_parse_mount_err;
1415 strcpy(vol->UNC, devname);
1416 if (strncmp(vol->UNC, "//", 2) == 0) {
1419 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1420 printk(KERN_WARNING "CIFS: UNC Path does not "
1421 "begin with // or \\\\ \n");
1422 goto cifs_parse_mount_err;
1424 value = strpbrk(vol->UNC+2, "/\\");
1428 printk(KERN_WARNING "CIFS: UNC name too long\n");
1429 goto cifs_parse_mount_err;
1433 if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1434 cERROR(1, "Multiuser mounts currently require krb5 "
1436 goto cifs_parse_mount_err;
1439 if (vol->UNCip == NULL)
1440 vol->UNCip = &vol->UNC[2];
1443 vol->override_uid = override_uid;
1444 else if (override_uid == 1)
1445 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1446 "specified with no uid= option.\n");
1449 vol->override_gid = override_gid;
1450 else if (override_gid == 1)
1451 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1452 "specified with no gid= option.\n");
1454 kfree(mountdata_copy);
1457 cifs_parse_mount_err:
1458 kfree(mountdata_copy);
1462 /** Returns true if srcaddr isn't specified and rhs isn't
1463 * specified, or if srcaddr is specified and
1464 * matches the IP address of the rhs argument.
1467 srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1469 switch (srcaddr->sa_family) {
1471 return (rhs->sa_family == AF_UNSPEC);
1473 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1474 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1475 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1478 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1479 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1480 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1484 return false; /* don't expect to be here */
1489 * If no port is specified in addr structure, we try to match with 445 port
1490 * and if it fails - with 139 ports. It should be called only if address
1491 * families of server and addr are equal.
1494 match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1496 __be16 port, *sport;
1498 switch (addr->sa_family) {
1500 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1501 port = ((struct sockaddr_in *) addr)->sin_port;
1504 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1505 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1513 port = htons(CIFS_PORT);
1517 port = htons(RFC1001_PORT);
1520 return port == *sport;
1524 match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1525 struct sockaddr *srcaddr)
1527 switch (addr->sa_family) {
1529 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1530 struct sockaddr_in *srv_addr4 =
1531 (struct sockaddr_in *)&server->dstaddr;
1533 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
1538 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1539 struct sockaddr_in6 *srv_addr6 =
1540 (struct sockaddr_in6 *)&server->dstaddr;
1542 if (!ipv6_addr_equal(&addr6->sin6_addr,
1543 &srv_addr6->sin6_addr))
1545 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
1551 return false; /* don't expect to be here */
1554 if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1561 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1563 unsigned int secFlags;
1565 if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1566 secFlags = vol->secFlg;
1568 secFlags = global_secflags | vol->secFlg;
1570 switch (server->secType) {
1572 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1576 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1580 if (!(secFlags & CIFSSEC_MAY_NTLM))
1584 if (!(secFlags & CIFSSEC_MAY_KRB5))
1588 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1592 /* shouldn't happen */
1596 /* now check if signing mode is acceptable */
1597 if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1598 (server->secMode & SECMODE_SIGN_REQUIRED))
1600 else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1602 (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1608 static int match_server(struct TCP_Server_Info *server, struct sockaddr *addr,
1609 struct smb_vol *vol)
1611 if (!net_eq(cifs_net_ns(server), current->nsproxy->net_ns))
1614 if (!match_address(server, addr,
1615 (struct sockaddr *)&vol->srcaddr))
1618 if (!match_port(server, addr))
1621 if (!match_security(server, vol))
1627 static struct TCP_Server_Info *
1628 cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1630 struct TCP_Server_Info *server;
1632 spin_lock(&cifs_tcp_ses_lock);
1633 list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
1634 if (!match_server(server, addr, vol))
1637 ++server->srv_count;
1638 spin_unlock(&cifs_tcp_ses_lock);
1639 cFYI(1, "Existing tcp session with server found");
1642 spin_unlock(&cifs_tcp_ses_lock);
1647 cifs_put_tcp_session(struct TCP_Server_Info *server)
1649 struct task_struct *task;
1651 spin_lock(&cifs_tcp_ses_lock);
1652 if (--server->srv_count > 0) {
1653 spin_unlock(&cifs_tcp_ses_lock);
1657 put_net(cifs_net_ns(server));
1659 list_del_init(&server->tcp_ses_list);
1660 spin_unlock(&cifs_tcp_ses_lock);
1662 cancel_delayed_work_sync(&server->echo);
1664 spin_lock(&GlobalMid_Lock);
1665 server->tcpStatus = CifsExiting;
1666 spin_unlock(&GlobalMid_Lock);
1668 cifs_crypto_shash_release(server);
1669 cifs_fscache_release_client_cookie(server);
1671 kfree(server->session_key.response);
1672 server->session_key.response = NULL;
1673 server->session_key.len = 0;
1675 task = xchg(&server->tsk, NULL);
1677 force_sig(SIGKILL, task);
1680 static struct TCP_Server_Info *
1681 cifs_get_tcp_session(struct smb_vol *volume_info)
1683 struct TCP_Server_Info *tcp_ses = NULL;
1684 struct sockaddr_storage addr;
1685 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1686 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1689 memset(&addr, 0, sizeof(struct sockaddr_storage));
1691 cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
1693 if (volume_info->UNCip && volume_info->UNC) {
1694 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1696 strlen(volume_info->UNCip),
1699 /* we failed translating address */
1703 } else if (volume_info->UNCip) {
1704 /* BB using ip addr as tcp_ses name to connect to the
1706 cERROR(1, "Connecting to DFS root not implemented yet");
1709 } else /* which tcp_sess DFS root would we conect to */ {
1710 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1711 "unc=//192.168.1.100/public) specified");
1716 /* see if we already have a matching tcp_ses */
1717 tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
1721 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1727 rc = cifs_crypto_shash_allocate(tcp_ses);
1729 cERROR(1, "could not setup hash structures rc %d", rc);
1733 cifs_set_net_ns(tcp_ses, get_net(current->nsproxy->net_ns));
1734 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1735 if (IS_ERR(tcp_ses->hostname)) {
1736 rc = PTR_ERR(tcp_ses->hostname);
1737 goto out_err_crypto_release;
1740 tcp_ses->noblocksnd = volume_info->noblocksnd;
1741 tcp_ses->noautotune = volume_info->noautotune;
1742 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1743 atomic_set(&tcp_ses->inFlight, 0);
1744 init_waitqueue_head(&tcp_ses->response_q);
1745 init_waitqueue_head(&tcp_ses->request_q);
1746 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1747 mutex_init(&tcp_ses->srv_mutex);
1748 memcpy(tcp_ses->workstation_RFC1001_name,
1749 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1750 memcpy(tcp_ses->server_RFC1001_name,
1751 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1752 tcp_ses->session_estab = false;
1753 tcp_ses->sequence_number = 0;
1754 tcp_ses->lstrp = jiffies;
1755 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1756 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1757 INIT_DELAYED_WORK(&tcp_ses->echo, cifs_echo_request);
1760 * at this point we are the only ones with the pointer
1761 * to the struct since the kernel thread not created yet
1762 * no need to spinlock this init of tcpStatus or srv_count
1764 tcp_ses->tcpStatus = CifsNew;
1765 memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1766 sizeof(tcp_ses->srcaddr));
1767 ++tcp_ses->srv_count;
1769 if (addr.ss_family == AF_INET6) {
1770 cFYI(1, "attempting ipv6 connect");
1771 /* BB should we allow ipv6 on port 139? */
1772 /* other OS never observed in Wild doing 139 with v6 */
1773 memcpy(&tcp_ses->dstaddr, sin_server6,
1774 sizeof(struct sockaddr_in6));
1776 memcpy(&tcp_ses->dstaddr, sin_server,
1777 sizeof(struct sockaddr_in));
1779 rc = ip_connect(tcp_ses);
1781 cERROR(1, "Error connecting to socket. Aborting operation");
1782 goto out_err_crypto_release;
1786 * since we're in a cifs function already, we know that
1787 * this will succeed. No need for try_module_get().
1789 __module_get(THIS_MODULE);
1790 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1792 if (IS_ERR(tcp_ses->tsk)) {
1793 rc = PTR_ERR(tcp_ses->tsk);
1794 cERROR(1, "error %d create cifsd thread", rc);
1795 module_put(THIS_MODULE);
1796 goto out_err_crypto_release;
1798 tcp_ses->tcpStatus = CifsNeedNegotiate;
1800 /* thread spawned, put it on the list */
1801 spin_lock(&cifs_tcp_ses_lock);
1802 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1803 spin_unlock(&cifs_tcp_ses_lock);
1805 cifs_fscache_get_client_cookie(tcp_ses);
1807 /* queue echo request delayed work */
1808 queue_delayed_work(system_nrt_wq, &tcp_ses->echo, SMB_ECHO_INTERVAL);
1812 out_err_crypto_release:
1813 cifs_crypto_shash_release(tcp_ses);
1815 put_net(cifs_net_ns(tcp_ses));
1819 if (!IS_ERR(tcp_ses->hostname))
1820 kfree(tcp_ses->hostname);
1821 if (tcp_ses->ssocket)
1822 sock_release(tcp_ses->ssocket);
1828 static int match_session(struct cifsSesInfo *ses, struct smb_vol *vol)
1830 switch (ses->server->secType) {
1832 if (vol->cred_uid != ses->cred_uid)
1836 /* anything else takes username/password */
1837 if (ses->user_name == NULL)
1839 if (strncmp(ses->user_name, vol->username,
1842 if (strlen(vol->username) != 0 &&
1843 ses->password != NULL &&
1844 strncmp(ses->password,
1845 vol->password ? vol->password : "",
1852 static struct cifsSesInfo *
1853 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1855 struct cifsSesInfo *ses;
1857 spin_lock(&cifs_tcp_ses_lock);
1858 list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
1859 if (!match_session(ses, vol))
1862 spin_unlock(&cifs_tcp_ses_lock);
1865 spin_unlock(&cifs_tcp_ses_lock);
1870 cifs_put_smb_ses(struct cifsSesInfo *ses)
1873 struct TCP_Server_Info *server = ses->server;
1875 cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
1876 spin_lock(&cifs_tcp_ses_lock);
1877 if (--ses->ses_count > 0) {
1878 spin_unlock(&cifs_tcp_ses_lock);
1882 list_del_init(&ses->smb_ses_list);
1883 spin_unlock(&cifs_tcp_ses_lock);
1885 if (ses->status == CifsGood) {
1887 CIFSSMBLogoff(xid, ses);
1891 cifs_put_tcp_session(server);
1894 static bool warned_on_ntlm; /* globals init to false automatically */
1896 static struct cifsSesInfo *
1897 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1899 int rc = -ENOMEM, xid;
1900 struct cifsSesInfo *ses;
1901 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1902 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
1906 ses = cifs_find_smb_ses(server, volume_info);
1908 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1910 mutex_lock(&ses->session_mutex);
1911 rc = cifs_negotiate_protocol(xid, ses);
1913 mutex_unlock(&ses->session_mutex);
1914 /* problem -- put our ses reference */
1915 cifs_put_smb_ses(ses);
1919 if (ses->need_reconnect) {
1920 cFYI(1, "Session needs reconnect");
1921 rc = cifs_setup_session(xid, ses,
1922 volume_info->local_nls);
1924 mutex_unlock(&ses->session_mutex);
1925 /* problem -- put our reference */
1926 cifs_put_smb_ses(ses);
1931 mutex_unlock(&ses->session_mutex);
1933 /* existing SMB ses has a server reference already */
1934 cifs_put_tcp_session(server);
1939 cFYI(1, "Existing smb sess not found");
1940 ses = sesInfoAlloc();
1944 /* new SMB session uses our server ref */
1945 ses->server = server;
1946 if (server->dstaddr.ss_family == AF_INET6)
1947 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
1949 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
1951 if (volume_info->username) {
1952 ses->user_name = kstrdup(volume_info->username, GFP_KERNEL);
1953 if (!ses->user_name)
1957 /* volume_info->password freed at unmount */
1958 if (volume_info->password) {
1959 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
1963 if (volume_info->domainname) {
1964 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
1965 if (!ses->domainName)
1968 ses->cred_uid = volume_info->cred_uid;
1969 ses->linux_uid = volume_info->linux_uid;
1971 /* ntlmv2 is much stronger than ntlm security, and has been broadly
1972 supported for many years, time to update default security mechanism */
1973 if ((volume_info->secFlg == 0) && warned_on_ntlm == false) {
1974 warned_on_ntlm = true;
1975 cERROR(1, "default security mechanism requested. The default "
1976 "security mechanism will be upgraded from ntlm to "
1977 "ntlmv2 in kernel release 2.6.41");
1979 ses->overrideSecFlg = volume_info->secFlg;
1981 mutex_lock(&ses->session_mutex);
1982 rc = cifs_negotiate_protocol(xid, ses);
1984 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
1985 mutex_unlock(&ses->session_mutex);
1989 /* success, put it on the list */
1990 spin_lock(&cifs_tcp_ses_lock);
1991 list_add(&ses->smb_ses_list, &server->smb_ses_list);
1992 spin_unlock(&cifs_tcp_ses_lock);
2003 static int match_tcon(struct cifsTconInfo *tcon, const char *unc)
2005 if (tcon->tidStatus == CifsExiting)
2007 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
2012 static struct cifsTconInfo *
2013 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
2015 struct list_head *tmp;
2016 struct cifsTconInfo *tcon;
2018 spin_lock(&cifs_tcp_ses_lock);
2019 list_for_each(tmp, &ses->tcon_list) {
2020 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
2021 if (!match_tcon(tcon, unc))
2024 spin_unlock(&cifs_tcp_ses_lock);
2027 spin_unlock(&cifs_tcp_ses_lock);
2032 cifs_put_tcon(struct cifsTconInfo *tcon)
2035 struct cifsSesInfo *ses = tcon->ses;
2037 cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
2038 spin_lock(&cifs_tcp_ses_lock);
2039 if (--tcon->tc_count > 0) {
2040 spin_unlock(&cifs_tcp_ses_lock);
2044 list_del_init(&tcon->tcon_list);
2045 spin_unlock(&cifs_tcp_ses_lock);
2048 CIFSSMBTDis(xid, tcon);
2051 cifs_fscache_release_super_cookie(tcon);
2053 cifs_put_smb_ses(ses);
2056 static struct cifsTconInfo *
2057 cifs_get_tcon(struct cifsSesInfo *ses, struct smb_vol *volume_info)
2060 struct cifsTconInfo *tcon;
2062 tcon = cifs_find_tcon(ses, volume_info->UNC);
2064 cFYI(1, "Found match on UNC path");
2065 /* existing tcon already has a reference */
2066 cifs_put_smb_ses(ses);
2067 if (tcon->seal != volume_info->seal)
2068 cERROR(1, "transport encryption setting "
2069 "conflicts with existing tid");
2073 tcon = tconInfoAlloc();
2080 if (volume_info->password) {
2081 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
2082 if (!tcon->password) {
2088 if (strchr(volume_info->UNC + 3, '\\') == NULL
2089 && strchr(volume_info->UNC + 3, '/') == NULL) {
2090 cERROR(1, "Missing share name");
2095 /* BB Do we need to wrap session_mutex around
2096 * this TCon call and Unix SetFS as
2097 * we do on SessSetup and reconnect? */
2099 rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
2101 cFYI(1, "CIFS Tcon rc = %d", rc);
2105 if (volume_info->nodfs) {
2106 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2107 cFYI(1, "DFS disabled (%d)", tcon->Flags);
2109 tcon->seal = volume_info->seal;
2110 /* we can have only one retry value for a connection
2111 to a share so for resources mounted more than once
2112 to the same server share the last value passed in
2113 for the retry flag is used */
2114 tcon->retry = volume_info->retry;
2115 tcon->nocase = volume_info->nocase;
2116 tcon->local_lease = volume_info->local_lease;
2118 spin_lock(&cifs_tcp_ses_lock);
2119 list_add(&tcon->tcon_list, &ses->tcon_list);
2120 spin_unlock(&cifs_tcp_ses_lock);
2122 cifs_fscache_get_super_cookie(tcon);
2132 cifs_put_tlink(struct tcon_link *tlink)
2134 if (!tlink || IS_ERR(tlink))
2137 if (!atomic_dec_and_test(&tlink->tl_count) ||
2138 test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2139 tlink->tl_time = jiffies;
2143 if (!IS_ERR(tlink_tcon(tlink)))
2144 cifs_put_tcon(tlink_tcon(tlink));
2150 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
2151 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
2152 struct dfs_info3_param **preferrals, int remap)
2157 *pnum_referrals = 0;
2160 if (pSesInfo->ipc_tid == 0) {
2161 temp_unc = kmalloc(2 /* for slashes */ +
2162 strnlen(pSesInfo->serverName,
2163 SERVER_NAME_LEN_WITH_NULL * 2)
2164 + 1 + 4 /* slash IPC$ */ + 2,
2166 if (temp_unc == NULL)
2170 strcpy(temp_unc + 2, pSesInfo->serverName);
2171 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2172 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
2173 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
2177 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
2178 pnum_referrals, nls_codepage, remap);
2179 /* BB map targetUNCs to dfs_info3 structures, here or
2180 in CIFSGetDFSRefer BB */
2185 #ifdef CONFIG_DEBUG_LOCK_ALLOC
2186 static struct lock_class_key cifs_key[2];
2187 static struct lock_class_key cifs_slock_key[2];
2190 cifs_reclassify_socket4(struct socket *sock)
2192 struct sock *sk = sock->sk;
2193 BUG_ON(sock_owned_by_user(sk));
2194 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2195 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2199 cifs_reclassify_socket6(struct socket *sock)
2201 struct sock *sk = sock->sk;
2202 BUG_ON(sock_owned_by_user(sk));
2203 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2204 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2208 cifs_reclassify_socket4(struct socket *sock)
2213 cifs_reclassify_socket6(struct socket *sock)
2218 /* See RFC1001 section 14 on representation of Netbios names */
2219 static void rfc1002mangle(char *target, char *source, unsigned int length)
2223 for (i = 0, j = 0; i < (length); i++) {
2224 /* mask a nibble at a time and encode */
2225 target[j] = 'A' + (0x0F & (source[i] >> 4));
2226 target[j+1] = 'A' + (0x0F & source[i]);
2233 bind_socket(struct TCP_Server_Info *server)
2236 if (server->srcaddr.ss_family != AF_UNSPEC) {
2237 /* Bind to the specified local IP address */
2238 struct socket *socket = server->ssocket;
2239 rc = socket->ops->bind(socket,
2240 (struct sockaddr *) &server->srcaddr,
2241 sizeof(server->srcaddr));
2243 struct sockaddr_in *saddr4;
2244 struct sockaddr_in6 *saddr6;
2245 saddr4 = (struct sockaddr_in *)&server->srcaddr;
2246 saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2247 if (saddr6->sin6_family == AF_INET6)
2249 "Failed to bind to: %pI6c, error: %d\n",
2250 &saddr6->sin6_addr, rc);
2253 "Failed to bind to: %pI4, error: %d\n",
2254 &saddr4->sin_addr.s_addr, rc);
2261 ip_rfc1001_connect(struct TCP_Server_Info *server)
2265 * some servers require RFC1001 sessinit before sending
2266 * negprot - BB check reconnection in case where second
2267 * sessinit is sent but no second negprot
2269 struct rfc1002_session_packet *ses_init_buf;
2270 struct smb_hdr *smb_buf;
2271 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2274 ses_init_buf->trailer.session_req.called_len = 32;
2276 if (server->server_RFC1001_name &&
2277 server->server_RFC1001_name[0] != 0)
2278 rfc1002mangle(ses_init_buf->trailer.
2279 session_req.called_name,
2280 server->server_RFC1001_name,
2281 RFC1001_NAME_LEN_WITH_NULL);
2283 rfc1002mangle(ses_init_buf->trailer.
2284 session_req.called_name,
2285 DEFAULT_CIFS_CALLED_NAME,
2286 RFC1001_NAME_LEN_WITH_NULL);
2288 ses_init_buf->trailer.session_req.calling_len = 32;
2291 * calling name ends in null (byte 16) from old smb
2294 if (server->workstation_RFC1001_name &&
2295 server->workstation_RFC1001_name[0] != 0)
2296 rfc1002mangle(ses_init_buf->trailer.
2297 session_req.calling_name,
2298 server->workstation_RFC1001_name,
2299 RFC1001_NAME_LEN_WITH_NULL);
2301 rfc1002mangle(ses_init_buf->trailer.
2302 session_req.calling_name,
2304 RFC1001_NAME_LEN_WITH_NULL);
2306 ses_init_buf->trailer.session_req.scope1 = 0;
2307 ses_init_buf->trailer.session_req.scope2 = 0;
2308 smb_buf = (struct smb_hdr *)ses_init_buf;
2310 /* sizeof RFC1002_SESSION_REQUEST with no scope */
2311 smb_buf->smb_buf_length = cpu_to_be32(0x81000044);
2312 rc = smb_send(server, smb_buf, 0x44);
2313 kfree(ses_init_buf);
2315 * RFC1001 layer in at least one server
2316 * requires very short break before negprot
2317 * presumably because not expecting negprot
2318 * to follow so fast. This is a simple
2319 * solution that works without
2320 * complicating the code and causes no
2321 * significant slowing down on mount
2324 usleep_range(1000, 2000);
2327 * else the negprot may still work without this
2328 * even though malloc failed
2335 generic_ip_connect(struct TCP_Server_Info *server)
2340 struct socket *socket = server->ssocket;
2341 struct sockaddr *saddr;
2343 saddr = (struct sockaddr *) &server->dstaddr;
2345 if (server->dstaddr.ss_family == AF_INET6) {
2346 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
2347 slen = sizeof(struct sockaddr_in6);
2350 sport = ((struct sockaddr_in *) saddr)->sin_port;
2351 slen = sizeof(struct sockaddr_in);
2355 if (socket == NULL) {
2356 rc = __sock_create(cifs_net_ns(server), sfamily, SOCK_STREAM,
2357 IPPROTO_TCP, &socket, 1);
2359 cERROR(1, "Error %d creating socket", rc);
2360 server->ssocket = NULL;
2364 /* BB other socket options to set KEEPALIVE, NODELAY? */
2365 cFYI(1, "Socket created");
2366 server->ssocket = socket;
2367 socket->sk->sk_allocation = GFP_NOFS;
2368 if (sfamily == AF_INET6)
2369 cifs_reclassify_socket6(socket);
2371 cifs_reclassify_socket4(socket);
2374 rc = bind_socket(server);
2378 rc = socket->ops->connect(socket, saddr, slen, 0);
2380 cFYI(1, "Error %d connecting to server", rc);
2381 sock_release(socket);
2382 server->ssocket = NULL;
2387 * Eventually check for other socket options to change from
2388 * the default. sock_setsockopt not used because it expects
2391 socket->sk->sk_rcvtimeo = 7 * HZ;
2392 socket->sk->sk_sndtimeo = 5 * HZ;
2394 /* make the bufsizes depend on wsize/rsize and max requests */
2395 if (server->noautotune) {
2396 if (socket->sk->sk_sndbuf < (200 * 1024))
2397 socket->sk->sk_sndbuf = 200 * 1024;
2398 if (socket->sk->sk_rcvbuf < (140 * 1024))
2399 socket->sk->sk_rcvbuf = 140 * 1024;
2402 if (server->tcp_nodelay) {
2404 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2405 (char *)&val, sizeof(val));
2407 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2410 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
2411 socket->sk->sk_sndbuf,
2412 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
2414 if (sport == htons(RFC1001_PORT))
2415 rc = ip_rfc1001_connect(server);
2421 ip_connect(struct TCP_Server_Info *server)
2424 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2425 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
2427 if (server->dstaddr.ss_family == AF_INET6)
2428 sport = &addr6->sin6_port;
2430 sport = &addr->sin_port;
2435 /* try with 445 port at first */
2436 *sport = htons(CIFS_PORT);
2438 rc = generic_ip_connect(server);
2442 /* if it failed, try with 139 port */
2443 *sport = htons(RFC1001_PORT);
2446 return generic_ip_connect(server);
2449 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
2450 struct super_block *sb, struct smb_vol *vol_info)
2452 /* if we are reconnecting then should we check to see if
2453 * any requested capabilities changed locally e.g. via
2454 * remount but we can not do much about it here
2455 * if they have (even if we could detect it by the following)
2456 * Perhaps we could add a backpointer to array of sb from tcon
2457 * or if we change to make all sb to same share the same
2458 * sb as NFS - then we only have one backpointer to sb.
2459 * What if we wanted to mount the server share twice once with
2460 * and once without posixacls or posix paths? */
2461 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2463 if (vol_info && vol_info->no_linux_ext) {
2464 tcon->fsUnixInfo.Capability = 0;
2465 tcon->unix_ext = 0; /* Unix Extensions disabled */
2466 cFYI(1, "Linux protocol extensions disabled");
2468 } else if (vol_info)
2469 tcon->unix_ext = 1; /* Unix Extensions supported */
2471 if (tcon->unix_ext == 0) {
2472 cFYI(1, "Unix extensions disabled so not set on reconnect");
2476 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2477 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2478 cFYI(1, "unix caps which server supports %lld", cap);
2479 /* check for reconnect case in which we do not
2480 want to change the mount behavior if we can avoid it */
2481 if (vol_info == NULL) {
2482 /* turn off POSIX ACL and PATHNAMES if not set
2483 originally at mount time */
2484 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2485 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2486 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2487 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2488 cERROR(1, "POSIXPATH support change");
2489 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2490 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2491 cERROR(1, "possible reconnect error");
2492 cERROR(1, "server disabled POSIX path support");
2496 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2497 cERROR(1, "per-share encryption not supported yet");
2499 cap &= CIFS_UNIX_CAP_MASK;
2500 if (vol_info && vol_info->no_psx_acl)
2501 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2502 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2503 cFYI(1, "negotiated posix acl support");
2505 sb->s_flags |= MS_POSIXACL;
2508 if (vol_info && vol_info->posix_paths == 0)
2509 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2510 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2511 cFYI(1, "negotiate posix pathnames");
2513 CIFS_SB(sb)->mnt_cifs_flags |=
2514 CIFS_MOUNT_POSIX_PATHS;
2517 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2518 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2519 CIFS_SB(sb)->rsize = 127 * 1024;
2520 cFYI(DBG2, "larger reads not supported by srv");
2525 cFYI(1, "Negotiate caps 0x%x", (int)cap);
2526 #ifdef CONFIG_CIFS_DEBUG2
2527 if (cap & CIFS_UNIX_FCNTL_CAP)
2528 cFYI(1, "FCNTL cap");
2529 if (cap & CIFS_UNIX_EXTATTR_CAP)
2530 cFYI(1, "EXTATTR cap");
2531 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2532 cFYI(1, "POSIX path cap");
2533 if (cap & CIFS_UNIX_XATTR_CAP)
2534 cFYI(1, "XATTR cap");
2535 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2536 cFYI(1, "POSIX ACL cap");
2537 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2538 cFYI(1, "very large read cap");
2539 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2540 cFYI(1, "very large write cap");
2541 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP)
2542 cFYI(1, "transport encryption cap");
2543 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2544 cFYI(1, "mandatory transport encryption cap");
2545 #endif /* CIFS_DEBUG2 */
2546 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2547 if (vol_info == NULL) {
2548 cFYI(1, "resetting capabilities failed");
2550 cERROR(1, "Negotiating Unix capabilities "
2551 "with the server failed. Consider "
2552 "mounting with the Unix Extensions\n"
2553 "disabled, if problems are found, "
2554 "by specifying the nounix mount "
2561 void cifs_setup_cifs_sb(struct smb_vol *pvolume_info,
2562 struct cifs_sb_info *cifs_sb)
2564 INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2566 if (pvolume_info->rsize > CIFSMaxBufSize) {
2567 cERROR(1, "rsize %d too large, using MaxBufSize",
2568 pvolume_info->rsize);
2569 cifs_sb->rsize = CIFSMaxBufSize;
2570 } else if ((pvolume_info->rsize) &&
2571 (pvolume_info->rsize <= CIFSMaxBufSize))
2572 cifs_sb->rsize = pvolume_info->rsize;
2574 cifs_sb->rsize = CIFSMaxBufSize;
2576 if (cifs_sb->rsize < 2048) {
2577 cifs_sb->rsize = 2048;
2578 /* Windows ME may prefer this */
2579 cFYI(1, "readsize set to minimum: 2048");
2581 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2582 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2583 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2584 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2585 cFYI(1, "file mode: 0x%x dir mode: 0x%x",
2586 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
2588 cifs_sb->actimeo = pvolume_info->actimeo;
2589 cifs_sb->local_nls = pvolume_info->local_nls;
2591 if (pvolume_info->noperm)
2592 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2593 if (pvolume_info->setuids)
2594 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2595 if (pvolume_info->server_ino)
2596 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2597 if (pvolume_info->remap)
2598 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2599 if (pvolume_info->no_xattr)
2600 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2601 if (pvolume_info->sfu_emul)
2602 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2603 if (pvolume_info->nobrl)
2604 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2605 if (pvolume_info->nostrictsync)
2606 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2607 if (pvolume_info->mand_lock)
2608 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2609 if (pvolume_info->cifs_acl)
2610 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2611 if (pvolume_info->override_uid)
2612 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2613 if (pvolume_info->override_gid)
2614 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2615 if (pvolume_info->dynperm)
2616 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2617 if (pvolume_info->fsc)
2618 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
2619 if (pvolume_info->multiuser)
2620 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2621 CIFS_MOUNT_NO_PERM);
2622 if (pvolume_info->strict_io)
2623 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_STRICT_IO;
2624 if (pvolume_info->direct_io) {
2625 cFYI(1, "mounting share using direct i/o");
2626 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2628 if (pvolume_info->mfsymlinks) {
2629 if (pvolume_info->sfu_emul) {
2630 cERROR(1, "mount option mfsymlinks ignored if sfu "
2631 "mount option is used");
2633 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2637 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2638 cERROR(1, "mount option dynperm ignored if cifsacl "
2639 "mount option supported");
2643 * When the server supports very large writes via POSIX extensions, we can
2644 * allow up to 2^24 - PAGE_CACHE_SIZE.
2646 * Note that this might make for "interesting" allocation problems during
2647 * writeback however (as we have to allocate an array of pointers for the
2648 * pages). A 16M write means ~32kb page array with PAGE_CACHE_SIZE == 4096.
2650 #define CIFS_MAX_WSIZE ((1<<24) - PAGE_CACHE_SIZE)
2653 * When the server doesn't allow large posix writes, default to a wsize of
2654 * 128k - PAGE_CACHE_SIZE -- one page less than the largest frame size
2655 * described in RFC1001. This allows space for the header without going over
2658 #define CIFS_MAX_RFC1001_WSIZE (128 * 1024 - PAGE_CACHE_SIZE)
2661 * The default wsize is 1M. find_get_pages seems to return a maximum of 256
2662 * pages in a single call. With PAGE_CACHE_SIZE == 4k, this means we can fill
2663 * a single wsize request with a single call.
2665 #define CIFS_DEFAULT_WSIZE (1024 * 1024)
2668 cifs_negotiate_wsize(struct cifsTconInfo *tcon, struct smb_vol *pvolume_info)
2670 __u64 unix_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2671 struct TCP_Server_Info *server = tcon->ses->server;
2672 unsigned int wsize = pvolume_info->wsize ? pvolume_info->wsize :
2675 /* can server support 24-bit write sizes? (via UNIX extensions) */
2676 if (!tcon->unix_ext || !(unix_cap & CIFS_UNIX_LARGE_WRITE_CAP))
2677 wsize = min_t(unsigned int, wsize, CIFS_MAX_RFC1001_WSIZE);
2679 /* no CAP_LARGE_WRITE_X? Limit it to 16 bits */
2680 if (!(server->capabilities & CAP_LARGE_WRITE_X))
2681 wsize = min_t(unsigned int, wsize, USHRT_MAX);
2683 /* hard limit of CIFS_MAX_WSIZE */
2684 wsize = min_t(unsigned int, wsize, CIFS_MAX_WSIZE);
2690 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2691 struct cifs_sb_info *cifs_sb, const char *full_path)
2694 FILE_ALL_INFO *pfile_info;
2696 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2697 if (pfile_info == NULL)
2700 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2701 0 /* not legacy */, cifs_sb->local_nls,
2702 cifs_sb->mnt_cifs_flags &
2703 CIFS_MOUNT_MAP_SPECIAL_CHR);
2705 if (rc == -EOPNOTSUPP || rc == -EINVAL)
2706 rc = SMBQueryInformation(xid, tcon, full_path, pfile_info,
2707 cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
2708 CIFS_MOUNT_MAP_SPECIAL_CHR);
2714 cifs_cleanup_volume_info(struct smb_vol **pvolume_info)
2716 struct smb_vol *volume_info;
2718 if (!pvolume_info || !*pvolume_info)
2721 volume_info = *pvolume_info;
2722 kfree(volume_info->username);
2723 kzfree(volume_info->password);
2724 kfree(volume_info->UNC);
2725 kfree(volume_info->UNCip);
2726 kfree(volume_info->domainname);
2727 kfree(volume_info->iocharset);
2728 kfree(volume_info->prepath);
2730 *pvolume_info = NULL;
2734 #ifdef CONFIG_CIFS_DFS_UPCALL
2735 /* build_path_to_root returns full path to root when
2736 * we do not have an exiting connection (tcon) */
2738 build_unc_path_to_root(const struct smb_vol *volume_info,
2739 const struct cifs_sb_info *cifs_sb)
2743 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2744 full_path = kmalloc(unc_len + 1, GFP_KERNEL);
2745 if (full_path == NULL)
2746 return ERR_PTR(-ENOMEM);
2748 strncpy(full_path, volume_info->UNC, unc_len);
2749 full_path[unc_len] = 0; /* add trailing null */
2750 convert_delimiter(full_path, CIFS_DIR_SEP(cifs_sb));
2755 * Perform a dfs referral query for a share and (optionally) prefix
2757 * If a referral is found, cifs_sb->mountdata will be (re-)allocated
2758 * to a string containing updated options for the submount. Otherwise it
2759 * will be left untouched.
2761 * Returns the rc from get_dfs_path to the caller, which can be used to
2762 * determine whether there were referrals.
2765 expand_dfs_referral(int xid, struct cifsSesInfo *pSesInfo,
2766 struct smb_vol *volume_info, struct cifs_sb_info *cifs_sb,
2770 unsigned int num_referrals = 0;
2771 struct dfs_info3_param *referrals = NULL;
2772 char *full_path = NULL, *ref_path = NULL, *mdata = NULL;
2774 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2775 if (IS_ERR(full_path))
2776 return PTR_ERR(full_path);
2778 /* For DFS paths, skip the first '\' of the UNC */
2779 ref_path = check_prefix ? full_path + 1 : volume_info->UNC + 1;
2781 rc = get_dfs_path(xid, pSesInfo , ref_path, cifs_sb->local_nls,
2782 &num_referrals, &referrals,
2783 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2785 if (!rc && num_referrals > 0) {
2786 char *fake_devname = NULL;
2788 mdata = cifs_compose_mount_options(cifs_sb->mountdata,
2789 full_path + 1, referrals,
2792 free_dfs_info_array(referrals, num_referrals);
2793 kfree(fake_devname);
2795 if (cifs_sb->mountdata != NULL)
2796 kfree(cifs_sb->mountdata);
2798 if (IS_ERR(mdata)) {
2799 rc = PTR_ERR(mdata);
2802 cifs_sb->mountdata = mdata;
2809 int cifs_setup_volume_info(struct smb_vol **pvolume_info, char *mount_data,
2810 const char *devname)
2812 struct smb_vol *volume_info;
2815 *pvolume_info = NULL;
2817 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2823 if (cifs_parse_mount_options(mount_data, devname,
2829 if (volume_info->nullauth) {
2830 cFYI(1, "null user");
2831 volume_info->username = "";
2832 } else if (volume_info->username) {
2833 /* BB fixme parse for domain name here */
2834 cFYI(1, "Username: %s", volume_info->username);
2836 cifserror("No username specified");
2837 /* In userspace mount helper we can get user name from alternate
2838 locations such as env variables and files on disk */
2843 /* this is needed for ASCII cp to Unicode converts */
2844 if (volume_info->iocharset == NULL) {
2845 /* load_nls_default cannot return null */
2846 volume_info->local_nls = load_nls_default();
2848 volume_info->local_nls = load_nls(volume_info->iocharset);
2849 if (volume_info->local_nls == NULL) {
2850 cERROR(1, "CIFS mount error: iocharset %s not found",
2851 volume_info->iocharset);
2857 *pvolume_info = volume_info;
2860 cifs_cleanup_volume_info(&volume_info);
2865 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2866 struct smb_vol *volume_info, const char *devname)
2870 struct cifsSesInfo *pSesInfo;
2871 struct cifsTconInfo *tcon;
2872 struct TCP_Server_Info *srvTcp;
2874 struct tcon_link *tlink;
2875 #ifdef CONFIG_CIFS_DFS_UPCALL
2876 int referral_walks_count = 0;
2878 /* cleanup activities if we're chasing a referral */
2879 if (referral_walks_count) {
2881 cifs_put_tcon(tcon);
2883 cifs_put_smb_ses(pSesInfo);
2885 cifs_cleanup_volume_info(&volume_info);
2897 /* get a reference to a tcp session */
2898 srvTcp = cifs_get_tcp_session(volume_info);
2899 if (IS_ERR(srvTcp)) {
2900 rc = PTR_ERR(srvTcp);
2904 /* get a reference to a SMB session */
2905 pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
2906 if (IS_ERR(pSesInfo)) {
2907 rc = PTR_ERR(pSesInfo);
2909 goto mount_fail_check;
2912 if (pSesInfo->capabilities & CAP_LARGE_FILES)
2913 sb->s_maxbytes = MAX_LFS_FILESIZE;
2915 sb->s_maxbytes = MAX_NON_LFS;
2917 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2918 sb->s_time_gran = 100;
2920 /* search for existing tcon to this server share */
2921 tcon = cifs_get_tcon(pSesInfo, volume_info);
2925 goto remote_path_check;
2928 /* tell server which Unix caps we support */
2929 if (tcon->ses->capabilities & CAP_UNIX) {
2930 /* reset of caps checks mount to see if unix extensions
2931 disabled for just this mount */
2932 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2933 if ((tcon->ses->server->tcpStatus == CifsNeedReconnect) &&
2934 (le64_to_cpu(tcon->fsUnixInfo.Capability) &
2935 CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)) {
2937 goto mount_fail_check;
2940 tcon->unix_ext = 0; /* server does not support them */
2942 /* do not care if following two calls succeed - informational */
2944 CIFSSMBQFSDeviceInfo(xid, tcon);
2945 CIFSSMBQFSAttributeInfo(xid, tcon);
2948 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2949 cifs_sb->rsize = 1024 * 127;
2950 cFYI(DBG2, "no very large read support, rsize now 127K");
2952 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2953 cifs_sb->rsize = min(cifs_sb->rsize,
2954 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2956 cifs_sb->wsize = cifs_negotiate_wsize(tcon, volume_info);
2959 #ifdef CONFIG_CIFS_DFS_UPCALL
2961 * Perform an unconditional check for whether there are DFS
2962 * referrals for this path without prefix, to provide support
2963 * for DFS referrals from w2k8 servers which don't seem to respond
2964 * with PATH_NOT_COVERED to requests that include the prefix.
2965 * Chase the referral if found, otherwise continue normally.
2967 if (referral_walks_count == 0) {
2968 int refrc = expand_dfs_referral(xid, pSesInfo, volume_info,
2971 referral_walks_count++;
2972 goto try_mount_again;
2977 /* check if a whole path is not remote */
2979 /* build_path_to_root works only when we have a valid tcon */
2980 full_path = cifs_build_path_to_root(volume_info, cifs_sb, tcon);
2981 if (full_path == NULL) {
2983 goto mount_fail_check;
2985 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2986 if (rc != 0 && rc != -EREMOTE) {
2988 goto mount_fail_check;
2993 /* get referral if needed */
2994 if (rc == -EREMOTE) {
2995 #ifdef CONFIG_CIFS_DFS_UPCALL
2996 if (referral_walks_count > MAX_NESTED_LINKS) {
2998 * BB: when we implement proper loop detection,
2999 * we will remove this check. But now we need it
3000 * to prevent an indefinite loop if 'DFS tree' is
3001 * misconfigured (i.e. has loops).
3004 goto mount_fail_check;
3007 rc = expand_dfs_referral(xid, pSesInfo, volume_info, cifs_sb,
3011 referral_walks_count++;
3012 goto try_mount_again;
3014 goto mount_fail_check;
3015 #else /* No DFS support, return error on mount */
3021 goto mount_fail_check;
3023 /* now, hang the tcon off of the superblock */
3024 tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
3025 if (tlink == NULL) {
3027 goto mount_fail_check;
3030 tlink->tl_uid = pSesInfo->linux_uid;
3031 tlink->tl_tcon = tcon;
3032 tlink->tl_time = jiffies;
3033 set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
3034 set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3036 cifs_sb->master_tlink = tlink;
3037 spin_lock(&cifs_sb->tlink_tree_lock);
3038 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3039 spin_unlock(&cifs_sb->tlink_tree_lock);
3041 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3045 /* on error free sesinfo and tcon struct if needed */
3047 /* If find_unc succeeded then rc == 0 so we can not end */
3048 /* up accidentally freeing someone elses tcon struct */
3050 cifs_put_tcon(tcon);
3052 cifs_put_smb_ses(pSesInfo);
3054 cifs_put_tcp_session(srvTcp);
3058 /* volume_info->password is freed above when existing session found
3059 (in which case it is not needed anymore) but when new sesion is created
3060 the password ptr is put in the new session structure (in which case the
3061 password will be freed at unmount time) */
3063 /* zero out password before freeing */
3069 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
3070 const char *tree, struct cifsTconInfo *tcon,
3071 const struct nls_table *nls_codepage)
3073 struct smb_hdr *smb_buffer;
3074 struct smb_hdr *smb_buffer_response;
3077 unsigned char *bcc_ptr;
3080 __u16 bytes_left, count;
3085 smb_buffer = cifs_buf_get();
3086 if (smb_buffer == NULL)
3089 smb_buffer_response = smb_buffer;
3091 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
3092 NULL /*no tid */ , 4 /*wct */ );
3094 smb_buffer->Mid = GetNextMid(ses->server);
3095 smb_buffer->Uid = ses->Suid;
3096 pSMB = (TCONX_REQ *) smb_buffer;
3097 pSMBr = (TCONX_RSP *) smb_buffer_response;
3099 pSMB->AndXCommand = 0xFF;
3100 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
3101 bcc_ptr = &pSMB->Password[0];
3102 if ((ses->server->secMode) & SECMODE_USER) {
3103 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
3104 *bcc_ptr = 0; /* password is null byte */
3105 bcc_ptr++; /* skip password */
3106 /* already aligned so no need to do it below */
3108 pSMB->PasswordLength = cpu_to_le16(CIFS_AUTH_RESP_SIZE);
3109 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
3110 specified as required (when that support is added to
3111 the vfs in the future) as only NTLM or the much
3112 weaker LANMAN (which we do not send by default) is accepted
3113 by Samba (not sure whether other servers allow
3114 NTLMv2 password here) */
3115 #ifdef CONFIG_CIFS_WEAK_PW_HASH
3116 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
3117 (ses->server->secType == LANMAN))
3118 calc_lanman_hash(tcon->password, ses->server->cryptkey,
3119 ses->server->secMode &
3120 SECMODE_PW_ENCRYPT ? true : false,
3123 #endif /* CIFS_WEAK_PW_HASH */
3124 rc = SMBNTencrypt(tcon->password, ses->server->cryptkey,
3127 bcc_ptr += CIFS_AUTH_RESP_SIZE;
3128 if (ses->capabilities & CAP_UNICODE) {
3129 /* must align unicode strings */
3130 *bcc_ptr = 0; /* null byte password */
3135 if (ses->server->secMode &
3136 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
3137 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
3139 if (ses->capabilities & CAP_STATUS32) {
3140 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3142 if (ses->capabilities & CAP_DFS) {
3143 smb_buffer->Flags2 |= SMBFLG2_DFS;
3145 if (ses->capabilities & CAP_UNICODE) {
3146 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3148 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
3149 6 /* max utf8 char length in bytes */ *
3150 (/* server len*/ + 256 /* share len */), nls_codepage);
3151 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
3152 bcc_ptr += 2; /* skip trailing null */
3153 } else { /* ASCII */
3154 strcpy(bcc_ptr, tree);
3155 bcc_ptr += strlen(tree) + 1;
3157 strcpy(bcc_ptr, "?????");
3158 bcc_ptr += strlen("?????");
3160 count = bcc_ptr - &pSMB->Password[0];
3161 pSMB->hdr.smb_buf_length = cpu_to_be32(be32_to_cpu(
3162 pSMB->hdr.smb_buf_length) + count);
3163 pSMB->ByteCount = cpu_to_le16(count);
3165 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
3168 /* above now done in SendReceive */
3169 if ((rc == 0) && (tcon != NULL)) {
3172 tcon->tidStatus = CifsGood;
3173 tcon->need_reconnect = false;
3174 tcon->tid = smb_buffer_response->Tid;
3175 bcc_ptr = pByteArea(smb_buffer_response);
3176 bytes_left = get_bcc(smb_buffer_response);
3177 length = strnlen(bcc_ptr, bytes_left - 2);
3178 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3184 /* skip service field (NB: this field is always ASCII) */
3186 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3187 (bcc_ptr[2] == 'C')) {
3188 cFYI(1, "IPC connection");
3191 } else if (length == 2) {
3192 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3193 /* the most common case */
3194 cFYI(1, "disk share connection");
3197 bcc_ptr += length + 1;
3198 bytes_left -= (length + 1);
3199 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
3201 /* mostly informational -- no need to fail on error here */
3202 kfree(tcon->nativeFileSystem);
3203 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
3204 bytes_left, is_unicode,
3207 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
3209 if ((smb_buffer_response->WordCount == 3) ||
3210 (smb_buffer_response->WordCount == 7))
3211 /* field is in same location */
3212 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3215 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
3216 } else if ((rc == 0) && tcon == NULL) {
3217 /* all we need to save for IPC$ connection */
3218 ses->ipc_tid = smb_buffer_response->Tid;
3221 cifs_buf_release(smb_buffer);
3226 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
3228 struct rb_root *root = &cifs_sb->tlink_tree;
3229 struct rb_node *node;
3230 struct tcon_link *tlink;
3232 cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3234 spin_lock(&cifs_sb->tlink_tree_lock);
3235 while ((node = rb_first(root))) {
3236 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3237 cifs_get_tlink(tlink);
3238 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3239 rb_erase(node, root);
3241 spin_unlock(&cifs_sb->tlink_tree_lock);
3242 cifs_put_tlink(tlink);
3243 spin_lock(&cifs_sb->tlink_tree_lock);
3245 spin_unlock(&cifs_sb->tlink_tree_lock);
3250 int cifs_negotiate_protocol(unsigned int xid, struct cifsSesInfo *ses)
3253 struct TCP_Server_Info *server = ses->server;
3255 /* only send once per connect */
3256 if (server->maxBuf != 0)
3259 rc = CIFSSMBNegotiate(xid, ses);
3260 if (rc == -EAGAIN) {
3261 /* retry only once on 1st time connection */
3262 rc = CIFSSMBNegotiate(xid, ses);
3267 spin_lock(&GlobalMid_Lock);
3268 if (server->tcpStatus != CifsExiting)
3269 server->tcpStatus = CifsGood;
3272 spin_unlock(&GlobalMid_Lock);
3280 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *ses,
3281 struct nls_table *nls_info)
3284 struct TCP_Server_Info *server = ses->server;
3287 ses->capabilities = server->capabilities;
3288 if (linuxExtEnabled == 0)
3289 ses->capabilities &= (~CAP_UNIX);
3291 cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3292 server->secMode, server->capabilities, server->timeAdj);
3294 rc = CIFS_SessSetup(xid, ses, nls_info);
3296 cERROR(1, "Send error in SessSetup = %d", rc);
3298 mutex_lock(&ses->server->srv_mutex);
3299 if (!server->session_estab) {
3300 server->session_key.response = ses->auth_key.response;
3301 server->session_key.len = ses->auth_key.len;
3302 server->sequence_number = 0x2;
3303 server->session_estab = true;
3304 ses->auth_key.response = NULL;
3306 mutex_unlock(&server->srv_mutex);
3308 cFYI(1, "CIFS Session Established successfully");
3309 spin_lock(&GlobalMid_Lock);
3310 ses->status = CifsGood;
3311 ses->need_reconnect = false;
3312 spin_unlock(&GlobalMid_Lock);
3315 kfree(ses->auth_key.response);
3316 ses->auth_key.response = NULL;
3317 ses->auth_key.len = 0;
3318 kfree(ses->ntlmssp);
3319 ses->ntlmssp = NULL;
3324 static struct cifsTconInfo *
3325 cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3327 struct cifsTconInfo *master_tcon = cifs_sb_master_tcon(cifs_sb);
3328 struct cifsSesInfo *ses;
3329 struct cifsTconInfo *tcon = NULL;
3330 struct smb_vol *vol_info;
3331 char username[28]; /* big enough for "krb50x" + hex of ULONG_MAX 6+16 */
3332 /* We used to have this as MAX_USERNAME which is */
3333 /* way too big now (256 instead of 32) */
3335 vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3336 if (vol_info == NULL) {
3337 tcon = ERR_PTR(-ENOMEM);
3341 snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3342 vol_info->username = username;
3343 vol_info->local_nls = cifs_sb->local_nls;
3344 vol_info->linux_uid = fsuid;
3345 vol_info->cred_uid = fsuid;
3346 vol_info->UNC = master_tcon->treeName;
3347 vol_info->retry = master_tcon->retry;
3348 vol_info->nocase = master_tcon->nocase;
3349 vol_info->local_lease = master_tcon->local_lease;
3350 vol_info->no_linux_ext = !master_tcon->unix_ext;
3352 /* FIXME: allow for other secFlg settings */
3353 vol_info->secFlg = CIFSSEC_MUST_KRB5;
3355 /* get a reference for the same TCP session */
3356 spin_lock(&cifs_tcp_ses_lock);
3357 ++master_tcon->ses->server->srv_count;
3358 spin_unlock(&cifs_tcp_ses_lock);
3360 ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3362 tcon = (struct cifsTconInfo *)ses;
3363 cifs_put_tcp_session(master_tcon->ses->server);
3367 tcon = cifs_get_tcon(ses, vol_info);
3369 cifs_put_smb_ses(ses);
3373 if (ses->capabilities & CAP_UNIX)
3374 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3381 static inline struct tcon_link *
3382 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
3384 return cifs_sb->master_tlink;
3387 struct cifsTconInfo *
3388 cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3390 return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3394 cifs_sb_tcon_pending_wait(void *unused)
3397 return signal_pending(current) ? -ERESTARTSYS : 0;
3400 /* find and return a tlink with given uid */
3401 static struct tcon_link *
3402 tlink_rb_search(struct rb_root *root, uid_t uid)
3404 struct rb_node *node = root->rb_node;
3405 struct tcon_link *tlink;
3408 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3410 if (tlink->tl_uid > uid)
3411 node = node->rb_left;
3412 else if (tlink->tl_uid < uid)
3413 node = node->rb_right;
3420 /* insert a tcon_link into the tree */
3422 tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
3424 struct rb_node **new = &(root->rb_node), *parent = NULL;
3425 struct tcon_link *tlink;
3428 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
3431 if (tlink->tl_uid > new_tlink->tl_uid)
3432 new = &((*new)->rb_left);
3434 new = &((*new)->rb_right);
3437 rb_link_node(&new_tlink->tl_rbnode, parent, new);
3438 rb_insert_color(&new_tlink->tl_rbnode, root);
3442 * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3445 * If the superblock doesn't refer to a multiuser mount, then just return
3446 * the master tcon for the mount.
3448 * First, search the rbtree for an existing tcon for this fsuid. If one
3449 * exists, then check to see if it's pending construction. If it is then wait
3450 * for construction to complete. Once it's no longer pending, check to see if
3451 * it failed and either return an error or retry construction, depending on
3454 * If one doesn't exist then insert a new tcon_link struct into the tree and
3455 * try to construct a new one.
3458 cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3461 uid_t fsuid = current_fsuid();
3462 struct tcon_link *tlink, *newtlink;
3464 if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3465 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3467 spin_lock(&cifs_sb->tlink_tree_lock);
3468 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3470 cifs_get_tlink(tlink);
3471 spin_unlock(&cifs_sb->tlink_tree_lock);
3473 if (tlink == NULL) {
3474 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3475 if (newtlink == NULL)
3476 return ERR_PTR(-ENOMEM);
3477 newtlink->tl_uid = fsuid;
3478 newtlink->tl_tcon = ERR_PTR(-EACCES);
3479 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3480 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3481 cifs_get_tlink(newtlink);
3483 spin_lock(&cifs_sb->tlink_tree_lock);
3484 /* was one inserted after previous search? */
3485 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3487 cifs_get_tlink(tlink);
3488 spin_unlock(&cifs_sb->tlink_tree_lock);
3490 goto wait_for_construction;
3493 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3494 spin_unlock(&cifs_sb->tlink_tree_lock);
3496 wait_for_construction:
3497 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3498 cifs_sb_tcon_pending_wait,
3499 TASK_INTERRUPTIBLE);
3501 cifs_put_tlink(tlink);
3502 return ERR_PTR(ret);
3505 /* if it's good, return it */
3506 if (!IS_ERR(tlink->tl_tcon))
3509 /* return error if we tried this already recently */
3510 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3511 cifs_put_tlink(tlink);
3512 return ERR_PTR(-EACCES);
3515 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3516 goto wait_for_construction;
3519 tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3520 clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3521 wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3523 if (IS_ERR(tlink->tl_tcon)) {
3524 cifs_put_tlink(tlink);
3525 return ERR_PTR(-EACCES);
3532 * periodic workqueue job that scans tcon_tree for a superblock and closes
3536 cifs_prune_tlinks(struct work_struct *work)
3538 struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3540 struct rb_root *root = &cifs_sb->tlink_tree;
3541 struct rb_node *node = rb_first(root);
3542 struct rb_node *tmp;
3543 struct tcon_link *tlink;
3546 * Because we drop the spinlock in the loop in order to put the tlink
3547 * it's not guarded against removal of links from the tree. The only
3548 * places that remove entries from the tree are this function and
3549 * umounts. Because this function is non-reentrant and is canceled
3550 * before umount can proceed, this is safe.
3552 spin_lock(&cifs_sb->tlink_tree_lock);
3553 node = rb_first(root);
3554 while (node != NULL) {
3556 node = rb_next(tmp);
3557 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
3559 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
3560 atomic_read(&tlink->tl_count) != 0 ||
3561 time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
3564 cifs_get_tlink(tlink);
3565 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3566 rb_erase(tmp, root);
3568 spin_unlock(&cifs_sb->tlink_tree_lock);
3569 cifs_put_tlink(tlink);
3570 spin_lock(&cifs_sb->tlink_tree_lock);
3572 spin_unlock(&cifs_sb->tlink_tree_lock);
3574 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,