4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/slab.h>
27 #include <linux/pagemap.h>
28 #include <linux/ctype.h>
29 #include <linux/utsname.h>
30 #include <linux/mempool.h>
31 #include <linux/delay.h>
32 #include <linux/completion.h>
33 #include <linux/kthread.h>
34 #include <linux/pagevec.h>
35 #include <linux/freezer.h>
36 #include <linux/namei.h>
37 #include <asm/uaccess.h>
38 #include <asm/processor.h>
39 #include <linux/inet.h>
43 #include "cifsproto.h"
44 #include "cifs_unicode.h"
45 #include "cifs_debug.h"
46 #include "cifs_fs_sb.h"
49 #include "rfc1002pdu.h"
53 #define RFC1001_PORT 139
55 /* SMB echo "timeout" -- FIXME: tunable? */
56 #define SMB_ECHO_INTERVAL (60 * HZ)
58 extern mempool_t *cifs_req_poolp;
66 char *iocharset; /* local code page for mapping to and from Unicode */
67 char source_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* clnt nb name */
68 char target_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* srvr nb name */
82 bool no_psx_acl:1; /* set if posix acl support should be disabled */
84 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
85 bool server_ino:1; /* use inode numbers from server ie UniqueId */
87 bool strict_io:1; /* strict cache behavior */
88 bool remap:1; /* set to remap seven reserved chars in filenames */
89 bool posix_paths:1; /* unset to not ask for posix pathnames. */
92 bool nullauth:1; /* attempt to authenticate with null user */
93 bool nocase:1; /* request case insensitive filenames */
94 bool nobrl:1; /* disable sending byte range locks to srv */
95 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
96 bool seal:1; /* request transport encryption on share */
97 bool nodfs:1; /* Do not request DFS, even if available */
98 bool local_lease:1; /* check leases only on local system, not remote */
101 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
102 bool fsc:1; /* enable fscache */
103 bool mfsymlinks:1; /* use Minshall+French Symlinks */
107 bool sockopt_tcp_nodelay:1;
108 unsigned short int port;
109 unsigned long actimeo; /* attribute cache timeout (jiffies) */
111 struct sockaddr_storage srcaddr; /* allow binding to a local IP */
112 struct nls_table *local_nls;
115 /* FIXME: should these be tunable? */
116 #define TLINK_ERROR_EXPIRE (1 * HZ)
117 #define TLINK_IDLE_EXPIRE (600 * HZ)
119 static int ip_connect(struct TCP_Server_Info *server);
120 static int generic_ip_connect(struct TCP_Server_Info *server);
121 static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
122 static void cifs_prune_tlinks(struct work_struct *work);
125 * cifs tcp session reconnection
127 * mark tcp session as reconnecting so temporarily locked
128 * mark all smb sessions as reconnecting for tcp session
129 * reconnect tcp session
130 * wake up waiters on reconnection? - (not needed currently)
133 cifs_reconnect(struct TCP_Server_Info *server)
136 struct list_head *tmp, *tmp2;
137 struct cifsSesInfo *ses;
138 struct cifsTconInfo *tcon;
139 struct mid_q_entry *mid_entry;
140 struct list_head retry_list;
142 spin_lock(&GlobalMid_Lock);
143 if (server->tcpStatus == CifsExiting) {
144 /* the demux thread will exit normally
145 next time through the loop */
146 spin_unlock(&GlobalMid_Lock);
149 server->tcpStatus = CifsNeedReconnect;
150 spin_unlock(&GlobalMid_Lock);
153 cFYI(1, "Reconnecting tcp session");
155 /* before reconnecting the tcp session, mark the smb session (uid)
156 and the tid bad so they are not used until reconnected */
157 cFYI(1, "%s: marking sessions and tcons for reconnect", __func__);
158 spin_lock(&cifs_tcp_ses_lock);
159 list_for_each(tmp, &server->smb_ses_list) {
160 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
161 ses->need_reconnect = true;
163 list_for_each(tmp2, &ses->tcon_list) {
164 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
165 tcon->need_reconnect = true;
168 spin_unlock(&cifs_tcp_ses_lock);
170 /* do not want to be sending data on a socket we are freeing */
171 cFYI(1, "%s: tearing down socket", __func__);
172 mutex_lock(&server->srv_mutex);
173 if (server->ssocket) {
174 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
175 server->ssocket->flags);
176 kernel_sock_shutdown(server->ssocket, SHUT_WR);
177 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
178 server->ssocket->state,
179 server->ssocket->flags);
180 sock_release(server->ssocket);
181 server->ssocket = NULL;
183 server->sequence_number = 0;
184 server->session_estab = false;
185 kfree(server->session_key.response);
186 server->session_key.response = NULL;
187 server->session_key.len = 0;
188 server->lstrp = jiffies;
189 mutex_unlock(&server->srv_mutex);
191 /* mark submitted MIDs for retry and issue callback */
192 INIT_LIST_HEAD(&retry_list);
193 cFYI(1, "%s: moving mids to private list", __func__);
194 spin_lock(&GlobalMid_Lock);
195 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
196 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
197 if (mid_entry->midState == MID_REQUEST_SUBMITTED)
198 mid_entry->midState = MID_RETRY_NEEDED;
199 list_move(&mid_entry->qhead, &retry_list);
201 spin_unlock(&GlobalMid_Lock);
203 cFYI(1, "%s: issuing mid callbacks", __func__);
204 list_for_each_safe(tmp, tmp2, &retry_list) {
205 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
206 list_del_init(&mid_entry->qhead);
207 mid_entry->callback(mid_entry);
210 while (server->tcpStatus == CifsNeedReconnect) {
213 /* we should try only the port we connected to before */
214 rc = generic_ip_connect(server);
216 cFYI(1, "reconnect error %d", rc);
219 atomic_inc(&tcpSesReconnectCount);
220 spin_lock(&GlobalMid_Lock);
221 if (server->tcpStatus != CifsExiting)
222 server->tcpStatus = CifsNeedNegotiate;
223 spin_unlock(&GlobalMid_Lock);
232 0 not a transact2, or all data present
233 >0 transact2 with that much data missing
234 -EINVAL = invalid transact2
237 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
239 struct smb_t2_rsp *pSMBt;
241 __u16 total_data_size, data_in_this_rsp;
243 if (pSMB->Command != SMB_COM_TRANSACTION2)
246 /* check for plausible wct, bcc and t2 data and parm sizes */
247 /* check for parm and data offset going beyond end of smb */
248 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
249 cFYI(1, "invalid transact2 word count");
253 pSMBt = (struct smb_t2_rsp *)pSMB;
255 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
256 data_in_this_rsp = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
258 if (total_data_size == data_in_this_rsp)
260 else if (total_data_size < data_in_this_rsp) {
261 cFYI(1, "total data %d smaller than data in frame %d",
262 total_data_size, data_in_this_rsp);
266 remaining = total_data_size - data_in_this_rsp;
268 cFYI(1, "missing %d bytes from transact2, check next response",
270 if (total_data_size > maxBufSize) {
271 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
272 total_data_size, maxBufSize);
278 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
280 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
281 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
282 char *data_area_of_target;
283 char *data_area_of_buf2;
285 unsigned int byte_count, total_in_buf;
286 __u16 total_data_size, total_in_buf2;
288 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
290 if (total_data_size !=
291 get_unaligned_le16(&pSMB2->t2_rsp.TotalDataCount))
292 cFYI(1, "total data size of primary and secondary t2 differ");
294 total_in_buf = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
296 remaining = total_data_size - total_in_buf;
301 if (remaining == 0) /* nothing to do, ignore */
304 total_in_buf2 = get_unaligned_le16(&pSMB2->t2_rsp.DataCount);
305 if (remaining < total_in_buf2) {
306 cFYI(1, "transact2 2nd response contains too much data");
309 /* find end of first SMB data area */
310 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
311 get_unaligned_le16(&pSMBt->t2_rsp.DataOffset);
312 /* validate target area */
314 data_area_of_buf2 = (char *)&pSMB2->hdr.Protocol +
315 get_unaligned_le16(&pSMB2->t2_rsp.DataOffset);
317 data_area_of_target += total_in_buf;
319 /* copy second buffer into end of first buffer */
320 total_in_buf += total_in_buf2;
321 /* is the result too big for the field? */
322 if (total_in_buf > USHRT_MAX)
324 put_unaligned_le16(total_in_buf, &pSMBt->t2_rsp.DataCount);
327 byte_count = get_bcc(pTargetSMB);
328 byte_count += total_in_buf2;
329 /* is the result too big for the field? */
330 if (byte_count > USHRT_MAX)
332 put_bcc(byte_count, pTargetSMB);
334 byte_count = be32_to_cpu(pTargetSMB->smb_buf_length);
335 byte_count += total_in_buf2;
336 /* don't allow buffer to overflow */
337 if (byte_count > CIFSMaxBufSize)
339 pTargetSMB->smb_buf_length = cpu_to_be32(byte_count);
341 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
343 if (remaining == total_in_buf2) {
344 cFYI(1, "found the last secondary response");
345 return 0; /* we are done */
346 } else /* more responses to go */
351 cifs_echo_request(struct work_struct *work)
354 struct TCP_Server_Info *server = container_of(work,
355 struct TCP_Server_Info, echo.work);
358 * We cannot send an echo until the NEGOTIATE_PROTOCOL request is
359 * done, which is indicated by maxBuf != 0. Also, no need to ping if
360 * we got a response recently
362 if (server->maxBuf == 0 ||
363 time_before(jiffies, server->lstrp + SMB_ECHO_INTERVAL - HZ))
366 rc = CIFSSMBEcho(server);
368 cFYI(1, "Unable to send echo request to server: %s",
372 queue_delayed_work(system_nrt_wq, &server->echo, SMB_ECHO_INTERVAL);
376 cifs_demultiplex_thread(struct TCP_Server_Info *server)
379 unsigned int pdu_length, total_read;
380 struct smb_hdr *smb_buffer = NULL;
381 struct smb_hdr *bigbuf = NULL;
382 struct smb_hdr *smallbuf = NULL;
383 struct msghdr smb_msg;
385 struct socket *csocket = server->ssocket;
386 struct list_head *tmp, *tmp2;
387 struct task_struct *task_to_wake = NULL;
388 struct mid_q_entry *mid_entry;
390 bool isLargeBuf = false;
394 current->flags |= PF_MEMALLOC;
395 cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
397 length = atomic_inc_return(&tcpSesAllocCount);
399 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
403 while (server->tcpStatus != CifsExiting) {
406 if (bigbuf == NULL) {
407 bigbuf = cifs_buf_get();
409 cERROR(1, "No memory for large SMB response");
411 /* retry will check if exiting */
414 } else if (isLargeBuf) {
415 /* we are reusing a dirty large buf, clear its start */
416 memset(bigbuf, 0, sizeof(struct smb_hdr));
419 if (smallbuf == NULL) {
420 smallbuf = cifs_small_buf_get();
422 cERROR(1, "No memory for SMB response");
424 /* retry will check if exiting */
427 /* beginning of smb buffer is cleared in our buf_get */
428 } else /* if existing small buf clear beginning */
429 memset(smallbuf, 0, sizeof(struct smb_hdr));
433 smb_buffer = smallbuf;
434 iov.iov_base = smb_buffer;
436 smb_msg.msg_control = NULL;
437 smb_msg.msg_controllen = 0;
438 pdu_length = 4; /* enough to get RFC1001 header */
441 if (echo_retries > 0 && server->tcpStatus == CifsGood &&
442 time_after(jiffies, server->lstrp +
443 (echo_retries * SMB_ECHO_INTERVAL))) {
444 cERROR(1, "Server %s has not responded in %d seconds. "
445 "Reconnecting...", server->hostname,
446 (echo_retries * SMB_ECHO_INTERVAL / HZ));
447 cifs_reconnect(server);
448 csocket = server->ssocket;
449 wake_up(&server->response_q);
454 kernel_recvmsg(csocket, &smb_msg,
455 &iov, 1, pdu_length, 0 /* BB other flags? */);
457 if (server->tcpStatus == CifsExiting) {
459 } else if (server->tcpStatus == CifsNeedReconnect) {
460 cFYI(1, "Reconnect after server stopped responding");
461 cifs_reconnect(server);
462 cFYI(1, "call to reconnect done");
463 csocket = server->ssocket;
465 } else if (length == -ERESTARTSYS ||
468 msleep(1); /* minimum sleep to prevent looping
469 allowing socket to clear and app threads to set
470 tcpStatus CifsNeedReconnect if server hung */
471 if (pdu_length < 4) {
472 iov.iov_base = (4 - pdu_length) +
474 iov.iov_len = pdu_length;
475 smb_msg.msg_control = NULL;
476 smb_msg.msg_controllen = 0;
480 } else if (length <= 0) {
481 cFYI(1, "Reconnect after unexpected peek error %d",
483 cifs_reconnect(server);
484 csocket = server->ssocket;
485 wake_up(&server->response_q);
487 } else if (length < pdu_length) {
488 cFYI(1, "requested %d bytes but only got %d bytes",
490 pdu_length -= length;
495 /* The right amount was read from socket - 4 bytes */
496 /* so we can now interpret the length field */
498 /* the first byte big endian of the length field,
499 is actually not part of the length but the type
500 with the most common, zero, as regular data */
501 temp = *((char *) smb_buffer);
503 /* Note that FC 1001 length is big endian on the wire,
504 but we convert it here so it is always manipulated
505 as host byte order */
506 pdu_length = be32_to_cpu(smb_buffer->smb_buf_length);
508 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
510 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
512 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
513 cFYI(1, "Good RFC 1002 session rsp");
515 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
516 /* we get this from Windows 98 instead of
517 an error on SMB negprot response */
518 cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
520 /* give server a second to clean up */
522 /* always try 445 first on reconnect since we get NACK
523 * on some if we ever connected to port 139 (the NACK
524 * is since we do not begin with RFC1001 session
527 cifs_set_port((struct sockaddr *)
528 &server->dstaddr, CIFS_PORT);
529 cifs_reconnect(server);
530 csocket = server->ssocket;
531 wake_up(&server->response_q);
533 } else if (temp != (char) 0) {
534 cERROR(1, "Unknown RFC 1002 frame");
535 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
537 cifs_reconnect(server);
538 csocket = server->ssocket;
542 /* else we have an SMB response */
543 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
544 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
545 cERROR(1, "Invalid size SMB length %d pdu_length %d",
546 length, pdu_length+4);
547 cifs_reconnect(server);
548 csocket = server->ssocket;
549 wake_up(&server->response_q);
556 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
558 memcpy(bigbuf, smallbuf, 4);
562 iov.iov_base = 4 + (char *)smb_buffer;
563 iov.iov_len = pdu_length;
564 for (total_read = 0; total_read < pdu_length;
565 total_read += length) {
566 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
567 pdu_length - total_read, 0);
568 if (server->tcpStatus == CifsExiting) {
572 } else if (server->tcpStatus == CifsNeedReconnect) {
573 cifs_reconnect(server);
574 csocket = server->ssocket;
575 /* Reconnect wakes up rspns q */
576 /* Now we will reread sock */
579 } else if (length == -ERESTARTSYS ||
582 msleep(1); /* minimum sleep to prevent looping,
583 allowing socket to clear and app
584 threads to set tcpStatus
585 CifsNeedReconnect if server hung*/
588 } else if (length <= 0) {
589 cERROR(1, "Received no data, expecting %d",
590 pdu_length - total_read);
591 cifs_reconnect(server);
592 csocket = server->ssocket;
599 else if (reconnect == 1)
602 total_read += 4; /* account for rfc1002 hdr */
604 dump_smb(smb_buffer, total_read);
607 * We know that we received enough to get to the MID as we
608 * checked the pdu_length earlier. Now check to see
609 * if the rest of the header is OK. We borrow the length
610 * var for the rest of the loop to avoid a new stack var.
612 * 48 bytes is enough to display the header and a little bit
613 * into the payload for debugging purposes.
615 length = checkSMB(smb_buffer, smb_buffer->Mid, total_read);
617 cifs_dump_mem("Bad SMB: ", smb_buffer,
618 min_t(unsigned int, total_read, 48));
621 server->lstrp = jiffies;
623 spin_lock(&GlobalMid_Lock);
624 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
625 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
627 if (mid_entry->mid != smb_buffer->Mid ||
628 mid_entry->midState != MID_REQUEST_SUBMITTED ||
629 mid_entry->command != smb_buffer->Command) {
635 check2ndT2(smb_buffer, server->maxBuf) > 0) {
636 /* We have a multipart transact2 resp */
638 if (mid_entry->resp_buf) {
639 /* merge response - fix up 1st*/
640 length = coalesce_t2(smb_buffer,
641 mid_entry->resp_buf);
644 mid_entry->multiRsp = true;
647 /* all parts received or
648 * packet is malformed
650 mid_entry->multiEnd = true;
656 * FIXME: switch to already
657 * allocated largebuf?
659 cERROR(1, "1st trans2 resp "
662 /* Have first buffer */
663 mid_entry->resp_buf =
665 mid_entry->largeBuf = true;
671 mid_entry->resp_buf = smb_buffer;
672 mid_entry->largeBuf = isLargeBuf;
675 mid_entry->midState = MID_RESPONSE_RECEIVED;
677 mid_entry->midState = MID_RESPONSE_MALFORMED;
678 #ifdef CONFIG_CIFS_STATS2
679 mid_entry->when_received = jiffies;
681 list_del_init(&mid_entry->qhead);
684 spin_unlock(&GlobalMid_Lock);
686 if (mid_entry != NULL) {
687 mid_entry->callback(mid_entry);
688 /* Was previous buf put in mpx struct for multi-rsp? */
690 /* smb buffer will be freed by user thread */
696 } else if (length != 0) {
697 /* response sanity checks failed */
699 } else if (!is_valid_oplock_break(smb_buffer, server) &&
701 cERROR(1, "No task to wake, unknown frame received! "
702 "NumMids %d", atomic_read(&midCount));
703 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
704 sizeof(struct smb_hdr));
705 #ifdef CONFIG_CIFS_DEBUG2
706 cifs_dump_detail(smb_buffer);
707 cifs_dump_mids(server);
708 #endif /* CIFS_DEBUG2 */
711 } /* end while !EXITING */
713 /* take it off the list, if it's not already */
714 spin_lock(&cifs_tcp_ses_lock);
715 list_del_init(&server->tcp_ses_list);
716 spin_unlock(&cifs_tcp_ses_lock);
718 spin_lock(&GlobalMid_Lock);
719 server->tcpStatus = CifsExiting;
720 spin_unlock(&GlobalMid_Lock);
721 wake_up_all(&server->response_q);
723 /* check if we have blocked requests that need to free */
724 /* Note that cifs_max_pending is normally 50, but
725 can be set at module install time to as little as two */
726 spin_lock(&GlobalMid_Lock);
727 if (atomic_read(&server->inFlight) >= cifs_max_pending)
728 atomic_set(&server->inFlight, cifs_max_pending - 1);
729 /* We do not want to set the max_pending too low or we
730 could end up with the counter going negative */
731 spin_unlock(&GlobalMid_Lock);
732 /* Although there should not be any requests blocked on
733 this queue it can not hurt to be paranoid and try to wake up requests
734 that may haven been blocked when more than 50 at time were on the wire
735 to the same server - they now will see the session is in exit state
736 and get out of SendReceive. */
737 wake_up_all(&server->request_q);
738 /* give those requests time to exit */
741 if (server->ssocket) {
742 sock_release(csocket);
743 server->ssocket = NULL;
745 /* buffer usually freed in free_mid - need to free it here on exit */
746 cifs_buf_release(bigbuf);
747 if (smallbuf) /* no sense logging a debug message if NULL */
748 cifs_small_buf_release(smallbuf);
750 if (!list_empty(&server->pending_mid_q)) {
751 struct list_head dispose_list;
753 INIT_LIST_HEAD(&dispose_list);
754 spin_lock(&GlobalMid_Lock);
755 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
756 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
757 cFYI(1, "Clearing mid 0x%x", mid_entry->mid);
758 mid_entry->midState = MID_SHUTDOWN;
759 list_move(&mid_entry->qhead, &dispose_list);
761 spin_unlock(&GlobalMid_Lock);
763 /* now walk dispose list and issue callbacks */
764 list_for_each_safe(tmp, tmp2, &dispose_list) {
765 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
766 cFYI(1, "Callback mid 0x%x", mid_entry->mid);
767 list_del_init(&mid_entry->qhead);
768 mid_entry->callback(mid_entry);
770 /* 1/8th of sec is more than enough time for them to exit */
774 if (!list_empty(&server->pending_mid_q)) {
775 /* mpx threads have not exited yet give them
776 at least the smb send timeout time for long ops */
777 /* due to delays on oplock break requests, we need
778 to wait at least 45 seconds before giving up
779 on a request getting a response and going ahead
781 cFYI(1, "Wait for exit from demultiplex thread");
783 /* if threads still have not exited they are probably never
784 coming home not much else we can do but free the memory */
787 kfree(server->hostname);
788 task_to_wake = xchg(&server->tsk, NULL);
791 length = atomic_dec_return(&tcpSesAllocCount);
793 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
796 /* if server->tsk was NULL then wait for a signal before exiting */
798 set_current_state(TASK_INTERRUPTIBLE);
799 while (!signal_pending(current)) {
801 set_current_state(TASK_INTERRUPTIBLE);
803 set_current_state(TASK_RUNNING);
806 module_put_and_exit(0);
809 /* extract the host portion of the UNC string */
811 extract_hostname(const char *unc)
817 /* skip double chars at beginning of string */
818 /* BB: check validity of these bytes? */
821 /* delimiter between hostname and sharename is always '\\' now */
822 delim = strchr(src, '\\');
824 return ERR_PTR(-EINVAL);
827 dst = kmalloc((len + 1), GFP_KERNEL);
829 return ERR_PTR(-ENOMEM);
831 memcpy(dst, src, len);
838 cifs_parse_mount_options(const char *mountdata, const char *devname,
841 char *value, *data, *end;
842 char *mountdata_copy, *options;
843 unsigned int temp_len, i, j;
845 short int override_uid = -1;
846 short int override_gid = -1;
847 bool uid_specified = false;
848 bool gid_specified = false;
849 char *nodename = utsname()->nodename;
855 * does not have to be perfect mapping since field is
856 * informational, only used for servers that do not support
857 * port 445 and it can be overridden at mount time
859 memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
860 for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
861 vol->source_rfc1001_name[i] = toupper(nodename[i]);
863 vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
864 /* null target name indicates to use *SMBSERVR default called name
865 if we end up sending RFC1001 session initialize */
866 vol->target_rfc1001_name[0] = 0;
867 vol->cred_uid = current_uid();
868 vol->linux_uid = current_uid();
869 vol->linux_gid = current_gid();
871 /* default to only allowing write access to owner of the mount */
872 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
874 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
875 /* default is always to request posix paths. */
876 vol->posix_paths = 1;
877 /* default to using server inode numbers where available */
880 vol->actimeo = CIFS_DEF_ACTIMEO;
883 goto cifs_parse_mount_err;
885 mountdata_copy = kstrndup(mountdata, PAGE_SIZE, GFP_KERNEL);
887 goto cifs_parse_mount_err;
889 options = mountdata_copy;
890 end = options + strlen(options);
891 if (strncmp(options, "sep=", 4) == 0) {
892 if (options[4] != 0) {
893 separator[0] = options[4];
896 cFYI(1, "Null separator not allowed");
900 while ((data = strsep(&options, separator)) != NULL) {
903 if ((value = strchr(data, '=')) != NULL)
906 /* Have to parse this before we parse for "user" */
907 if (strnicmp(data, "user_xattr", 10) == 0) {
909 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
911 } else if (strnicmp(data, "user", 4) == 0) {
914 "CIFS: invalid or missing username\n");
915 goto cifs_parse_mount_err;
916 } else if (!*value) {
917 /* null user, ie anonymous, authentication */
920 if (strnlen(value, MAX_USERNAME_SIZE) <
922 vol->username = kstrdup(value, GFP_KERNEL);
923 if (!vol->username) {
924 printk(KERN_WARNING "CIFS: no memory "
926 goto cifs_parse_mount_err;
929 printk(KERN_WARNING "CIFS: username too long\n");
930 goto cifs_parse_mount_err;
932 } else if (strnicmp(data, "pass", 4) == 0) {
934 vol->password = NULL;
936 } else if (value[0] == 0) {
937 /* check if string begins with double comma
938 since that would mean the password really
939 does start with a comma, and would not
940 indicate an empty string */
941 if (value[1] != separator[0]) {
942 vol->password = NULL;
946 temp_len = strlen(value);
947 /* removed password length check, NTLM passwords
948 can be arbitrarily long */
950 /* if comma in password, the string will be
951 prematurely null terminated. Commas in password are
952 specified across the cifs mount interface by a double
953 comma ie ,, and a comma used as in other cases ie ','
954 as a parameter delimiter/separator is single and due
955 to the strsep above is temporarily zeroed. */
957 /* NB: password legally can have multiple commas and
958 the only illegal character in a password is null */
960 if ((value[temp_len] == 0) &&
961 (value + temp_len < end) &&
962 (value[temp_len+1] == separator[0])) {
964 value[temp_len] = separator[0];
965 temp_len += 2; /* move after second comma */
966 while (value[temp_len] != 0) {
967 if (value[temp_len] == separator[0]) {
968 if (value[temp_len+1] ==
970 /* skip second comma */
973 /* single comma indicating start
980 if (value[temp_len] == 0) {
984 /* point option to start of next parm */
985 options = value + temp_len + 1;
987 /* go from value to value + temp_len condensing
988 double commas to singles. Note that this ends up
989 allocating a few bytes too many, which is ok */
990 vol->password = kzalloc(temp_len, GFP_KERNEL);
991 if (vol->password == NULL) {
992 printk(KERN_WARNING "CIFS: no memory "
994 goto cifs_parse_mount_err;
996 for (i = 0, j = 0; i < temp_len; i++, j++) {
997 vol->password[j] = value[i];
998 if (value[i] == separator[0]
999 && value[i+1] == separator[0]) {
1000 /* skip second comma */
1004 vol->password[j] = 0;
1006 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
1007 if (vol->password == NULL) {
1008 printk(KERN_WARNING "CIFS: no memory "
1010 goto cifs_parse_mount_err;
1012 strcpy(vol->password, value);
1014 } else if (!strnicmp(data, "ip", 2) ||
1015 !strnicmp(data, "addr", 4)) {
1016 if (!value || !*value) {
1018 } else if (strnlen(value, INET6_ADDRSTRLEN) <
1020 vol->UNCip = kstrdup(value, GFP_KERNEL);
1022 printk(KERN_WARNING "CIFS: no memory "
1024 goto cifs_parse_mount_err;
1027 printk(KERN_WARNING "CIFS: ip address "
1029 goto cifs_parse_mount_err;
1031 } else if (strnicmp(data, "sec", 3) == 0) {
1032 if (!value || !*value) {
1033 cERROR(1, "no security value specified");
1035 } else if (strnicmp(value, "krb5i", 5) == 0) {
1036 vol->secFlg |= CIFSSEC_MAY_KRB5 |
1038 } else if (strnicmp(value, "krb5p", 5) == 0) {
1039 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
1040 CIFSSEC_MAY_KRB5; */
1041 cERROR(1, "Krb5 cifs privacy not supported");
1042 goto cifs_parse_mount_err;
1043 } else if (strnicmp(value, "krb5", 4) == 0) {
1044 vol->secFlg |= CIFSSEC_MAY_KRB5;
1045 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
1046 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
1048 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
1049 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
1050 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
1051 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
1053 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
1054 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1055 } else if (strnicmp(value, "ntlmi", 5) == 0) {
1056 vol->secFlg |= CIFSSEC_MAY_NTLM |
1058 } else if (strnicmp(value, "ntlm", 4) == 0) {
1059 /* ntlm is default so can be turned off too */
1060 vol->secFlg |= CIFSSEC_MAY_NTLM;
1061 } else if (strnicmp(value, "nontlm", 6) == 0) {
1062 /* BB is there a better way to do this? */
1063 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1064 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1065 } else if (strnicmp(value, "lanman", 6) == 0) {
1066 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1068 } else if (strnicmp(value, "none", 4) == 0) {
1071 cERROR(1, "bad security option: %s", value);
1072 goto cifs_parse_mount_err;
1074 } else if (strnicmp(data, "vers", 3) == 0) {
1075 if (!value || !*value) {
1076 cERROR(1, "no protocol version specified"
1077 " after vers= mount option");
1078 } else if ((strnicmp(value, "cifs", 4) == 0) ||
1079 (strnicmp(value, "1", 1) == 0)) {
1080 /* this is the default */
1083 } else if ((strnicmp(data, "unc", 3) == 0)
1084 || (strnicmp(data, "target", 6) == 0)
1085 || (strnicmp(data, "path", 4) == 0)) {
1086 if (!value || !*value) {
1087 printk(KERN_WARNING "CIFS: invalid path to "
1088 "network resource\n");
1089 goto cifs_parse_mount_err;
1091 if ((temp_len = strnlen(value, 300)) < 300) {
1092 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1093 if (vol->UNC == NULL)
1094 goto cifs_parse_mount_err;
1095 strcpy(vol->UNC, value);
1096 if (strncmp(vol->UNC, "//", 2) == 0) {
1099 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1101 "CIFS: UNC Path does not begin "
1102 "with // or \\\\ \n");
1103 goto cifs_parse_mount_err;
1106 printk(KERN_WARNING "CIFS: UNC name too long\n");
1107 goto cifs_parse_mount_err;
1109 } else if ((strnicmp(data, "domain", 3) == 0)
1110 || (strnicmp(data, "workgroup", 5) == 0)) {
1111 if (!value || !*value) {
1112 printk(KERN_WARNING "CIFS: invalid domain name\n");
1113 goto cifs_parse_mount_err;
1115 /* BB are there cases in which a comma can be valid in
1116 a domain name and need special handling? */
1117 if (strnlen(value, 256) < 256) {
1118 vol->domainname = kstrdup(value, GFP_KERNEL);
1119 if (!vol->domainname) {
1120 printk(KERN_WARNING "CIFS: no memory "
1121 "for domainname\n");
1122 goto cifs_parse_mount_err;
1124 cFYI(1, "Domain name set");
1126 printk(KERN_WARNING "CIFS: domain name too "
1128 goto cifs_parse_mount_err;
1130 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1131 vol->srcaddr.ss_family = AF_UNSPEC;
1133 if (!value || !*value) {
1134 printk(KERN_WARNING "CIFS: srcaddr value"
1135 " not specified.\n");
1136 goto cifs_parse_mount_err;
1138 i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1139 value, strlen(value));
1141 printk(KERN_WARNING "CIFS: Could not parse"
1144 goto cifs_parse_mount_err;
1146 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1147 if (!value || !*value) {
1149 "CIFS: invalid path prefix\n");
1150 goto cifs_parse_mount_err;
1152 if ((temp_len = strnlen(value, 1024)) < 1024) {
1153 if (value[0] != '/')
1154 temp_len++; /* missing leading slash */
1155 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1156 if (vol->prepath == NULL)
1157 goto cifs_parse_mount_err;
1158 if (value[0] != '/') {
1159 vol->prepath[0] = '/';
1160 strcpy(vol->prepath+1, value);
1162 strcpy(vol->prepath, value);
1163 cFYI(1, "prefix path %s", vol->prepath);
1165 printk(KERN_WARNING "CIFS: prefix too long\n");
1166 goto cifs_parse_mount_err;
1168 } else if (strnicmp(data, "iocharset", 9) == 0) {
1169 if (!value || !*value) {
1170 printk(KERN_WARNING "CIFS: invalid iocharset "
1172 goto cifs_parse_mount_err;
1174 if (strnlen(value, 65) < 65) {
1175 if (strnicmp(value, "default", 7)) {
1176 vol->iocharset = kstrdup(value,
1179 if (!vol->iocharset) {
1180 printk(KERN_WARNING "CIFS: no "
1183 goto cifs_parse_mount_err;
1186 /* if iocharset not set then load_nls_default
1187 is used by caller */
1188 cFYI(1, "iocharset set to %s", value);
1190 printk(KERN_WARNING "CIFS: iocharset name "
1192 goto cifs_parse_mount_err;
1194 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1195 vol->linux_uid = simple_strtoul(value, &value, 0);
1196 uid_specified = true;
1197 } else if (!strnicmp(data, "cruid", 5) && value && *value) {
1198 vol->cred_uid = simple_strtoul(value, &value, 0);
1199 } else if (!strnicmp(data, "forceuid", 8)) {
1201 } else if (!strnicmp(data, "noforceuid", 10)) {
1203 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1204 vol->linux_gid = simple_strtoul(value, &value, 0);
1205 gid_specified = true;
1206 } else if (!strnicmp(data, "forcegid", 8)) {
1208 } else if (!strnicmp(data, "noforcegid", 10)) {
1210 } else if (strnicmp(data, "file_mode", 4) == 0) {
1211 if (value && *value) {
1213 simple_strtoul(value, &value, 0);
1215 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1216 if (value && *value) {
1218 simple_strtoul(value, &value, 0);
1220 } else if (strnicmp(data, "dirmode", 4) == 0) {
1221 if (value && *value) {
1223 simple_strtoul(value, &value, 0);
1225 } else if (strnicmp(data, "port", 4) == 0) {
1226 if (value && *value) {
1228 simple_strtoul(value, &value, 0);
1230 } else if (strnicmp(data, "rsize", 5) == 0) {
1231 if (value && *value) {
1233 simple_strtoul(value, &value, 0);
1235 } else if (strnicmp(data, "wsize", 5) == 0) {
1236 if (value && *value) {
1238 simple_strtoul(value, &value, 0);
1240 } else if (strnicmp(data, "sockopt", 5) == 0) {
1241 if (!value || !*value) {
1242 cERROR(1, "no socket option specified");
1244 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1245 vol->sockopt_tcp_nodelay = 1;
1247 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1248 if (!value || !*value || (*value == ' ')) {
1249 cFYI(1, "invalid (empty) netbiosname");
1251 memset(vol->source_rfc1001_name, 0x20,
1254 * FIXME: are there cases in which a comma can
1255 * be valid in workstation netbios name (and
1256 * need special handling)?
1258 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1259 /* don't ucase netbiosname for user */
1262 vol->source_rfc1001_name[i] = value[i];
1264 /* The string has 16th byte zero still from
1265 set at top of the function */
1266 if (i == RFC1001_NAME_LEN && value[i] != 0)
1267 printk(KERN_WARNING "CIFS: netbiosname"
1268 " longer than 15 truncated.\n");
1270 } else if (strnicmp(data, "servern", 7) == 0) {
1271 /* servernetbiosname specified override *SMBSERVER */
1272 if (!value || !*value || (*value == ' ')) {
1273 cFYI(1, "empty server netbiosname specified");
1275 /* last byte, type, is 0x20 for servr type */
1276 memset(vol->target_rfc1001_name, 0x20,
1277 RFC1001_NAME_LEN_WITH_NULL);
1279 for (i = 0; i < 15; i++) {
1280 /* BB are there cases in which a comma can be
1281 valid in this workstation netbios name
1282 (and need special handling)? */
1284 /* user or mount helper must uppercase
1289 vol->target_rfc1001_name[i] =
1292 /* The string has 16th byte zero still from
1293 set at top of the function */
1294 if (i == RFC1001_NAME_LEN && value[i] != 0)
1295 printk(KERN_WARNING "CIFS: server net"
1296 "biosname longer than 15 truncated.\n");
1298 } else if (strnicmp(data, "actimeo", 7) == 0) {
1299 if (value && *value) {
1300 vol->actimeo = HZ * simple_strtoul(value,
1302 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1303 cERROR(1, "CIFS: attribute cache"
1304 "timeout too large");
1305 goto cifs_parse_mount_err;
1308 } else if (strnicmp(data, "credentials", 4) == 0) {
1310 } else if (strnicmp(data, "version", 3) == 0) {
1312 } else if (strnicmp(data, "guest", 5) == 0) {
1314 } else if (strnicmp(data, "rw", 2) == 0) {
1316 } else if (strnicmp(data, "ro", 2) == 0) {
1318 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1319 vol->noblocksnd = 1;
1320 } else if (strnicmp(data, "noautotune", 10) == 0) {
1321 vol->noautotune = 1;
1322 } else if ((strnicmp(data, "suid", 4) == 0) ||
1323 (strnicmp(data, "nosuid", 6) == 0) ||
1324 (strnicmp(data, "exec", 4) == 0) ||
1325 (strnicmp(data, "noexec", 6) == 0) ||
1326 (strnicmp(data, "nodev", 5) == 0) ||
1327 (strnicmp(data, "noauto", 6) == 0) ||
1328 (strnicmp(data, "dev", 3) == 0)) {
1329 /* The mount tool or mount.cifs helper (if present)
1330 uses these opts to set flags, and the flags are read
1331 by the kernel vfs layer before we get here (ie
1332 before read super) so there is no point trying to
1333 parse these options again and set anything and it
1334 is ok to just ignore them */
1336 } else if (strnicmp(data, "hard", 4) == 0) {
1338 } else if (strnicmp(data, "soft", 4) == 0) {
1340 } else if (strnicmp(data, "perm", 4) == 0) {
1342 } else if (strnicmp(data, "noperm", 6) == 0) {
1344 } else if (strnicmp(data, "mapchars", 8) == 0) {
1346 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1348 } else if (strnicmp(data, "sfu", 3) == 0) {
1350 } else if (strnicmp(data, "nosfu", 5) == 0) {
1352 } else if (strnicmp(data, "nodfs", 5) == 0) {
1354 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1355 vol->posix_paths = 1;
1356 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1357 vol->posix_paths = 0;
1358 } else if (strnicmp(data, "nounix", 6) == 0) {
1359 vol->no_linux_ext = 1;
1360 } else if (strnicmp(data, "nolinux", 7) == 0) {
1361 vol->no_linux_ext = 1;
1362 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1363 (strnicmp(data, "ignorecase", 10) == 0)) {
1365 } else if (strnicmp(data, "mand", 4) == 0) {
1367 } else if (strnicmp(data, "nomand", 6) == 0) {
1369 } else if (strnicmp(data, "_netdev", 7) == 0) {
1371 } else if (strnicmp(data, "brl", 3) == 0) {
1373 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1374 (strnicmp(data, "nolock", 6) == 0)) {
1376 /* turn off mandatory locking in mode
1377 if remote locking is turned off since the
1378 local vfs will do advisory */
1379 if (vol->file_mode ==
1380 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1381 vol->file_mode = S_IALLUGO;
1382 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1383 /* will take the shorter form "forcemand" as well */
1384 /* This mount option will force use of mandatory
1385 (DOS/Windows style) byte range locks, instead of
1386 using posix advisory byte range locks, even if the
1387 Unix extensions are available and posix locks would
1388 be supported otherwise. If Unix extensions are not
1389 negotiated this has no effect since mandatory locks
1390 would be used (mandatory locks is all that those
1391 those servers support) */
1393 } else if (strnicmp(data, "setuids", 7) == 0) {
1395 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1397 } else if (strnicmp(data, "dynperm", 7) == 0) {
1398 vol->dynperm = true;
1399 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1400 vol->dynperm = false;
1401 } else if (strnicmp(data, "nohard", 6) == 0) {
1403 } else if (strnicmp(data, "nosoft", 6) == 0) {
1405 } else if (strnicmp(data, "nointr", 6) == 0) {
1407 } else if (strnicmp(data, "intr", 4) == 0) {
1409 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1410 vol->nostrictsync = 1;
1411 } else if (strnicmp(data, "strictsync", 10) == 0) {
1412 vol->nostrictsync = 0;
1413 } else if (strnicmp(data, "serverino", 7) == 0) {
1414 vol->server_ino = 1;
1415 } else if (strnicmp(data, "noserverino", 9) == 0) {
1416 vol->server_ino = 0;
1417 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1419 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1421 } else if (strnicmp(data, "acl", 3) == 0) {
1422 vol->no_psx_acl = 0;
1423 } else if (strnicmp(data, "noacl", 5) == 0) {
1424 vol->no_psx_acl = 1;
1425 } else if (strnicmp(data, "locallease", 6) == 0) {
1426 vol->local_lease = 1;
1427 } else if (strnicmp(data, "sign", 4) == 0) {
1428 vol->secFlg |= CIFSSEC_MUST_SIGN;
1429 } else if (strnicmp(data, "seal", 4) == 0) {
1430 /* we do not do the following in secFlags because seal
1431 is a per tree connection (mount) not a per socket
1432 or per-smb connection option in the protocol */
1433 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1435 } else if (strnicmp(data, "direct", 6) == 0) {
1437 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1439 } else if (strnicmp(data, "strictcache", 11) == 0) {
1441 } else if (strnicmp(data, "noac", 4) == 0) {
1442 printk(KERN_WARNING "CIFS: Mount option noac not "
1443 "supported. Instead set "
1444 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1445 } else if (strnicmp(data, "fsc", 3) == 0) {
1446 #ifndef CONFIG_CIFS_FSCACHE
1447 cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE"
1448 "kernel config option set");
1449 goto cifs_parse_mount_err;
1452 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1453 vol->mfsymlinks = true;
1454 } else if (strnicmp(data, "multiuser", 8) == 0) {
1455 vol->multiuser = true;
1457 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1460 if (vol->UNC == NULL) {
1461 if (devname == NULL) {
1462 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1464 goto cifs_parse_mount_err;
1466 if ((temp_len = strnlen(devname, 300)) < 300) {
1467 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1468 if (vol->UNC == NULL)
1469 goto cifs_parse_mount_err;
1470 strcpy(vol->UNC, devname);
1471 if (strncmp(vol->UNC, "//", 2) == 0) {
1474 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1475 printk(KERN_WARNING "CIFS: UNC Path does not "
1476 "begin with // or \\\\ \n");
1477 goto cifs_parse_mount_err;
1479 value = strpbrk(vol->UNC+2, "/\\");
1483 printk(KERN_WARNING "CIFS: UNC name too long\n");
1484 goto cifs_parse_mount_err;
1488 if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1489 cERROR(1, "Multiuser mounts currently require krb5 "
1491 goto cifs_parse_mount_err;
1494 if (vol->UNCip == NULL)
1495 vol->UNCip = &vol->UNC[2];
1498 vol->override_uid = override_uid;
1499 else if (override_uid == 1)
1500 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1501 "specified with no uid= option.\n");
1504 vol->override_gid = override_gid;
1505 else if (override_gid == 1)
1506 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1507 "specified with no gid= option.\n");
1509 kfree(mountdata_copy);
1512 cifs_parse_mount_err:
1513 kfree(mountdata_copy);
1517 /** Returns true if srcaddr isn't specified and rhs isn't
1518 * specified, or if srcaddr is specified and
1519 * matches the IP address of the rhs argument.
1522 srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1524 switch (srcaddr->sa_family) {
1526 return (rhs->sa_family == AF_UNSPEC);
1528 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1529 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1530 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1533 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1534 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1535 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1539 return false; /* don't expect to be here */
1544 * If no port is specified in addr structure, we try to match with 445 port
1545 * and if it fails - with 139 ports. It should be called only if address
1546 * families of server and addr are equal.
1549 match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1551 __be16 port, *sport;
1553 switch (addr->sa_family) {
1555 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1556 port = ((struct sockaddr_in *) addr)->sin_port;
1559 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1560 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1568 port = htons(CIFS_PORT);
1572 port = htons(RFC1001_PORT);
1575 return port == *sport;
1579 match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1580 struct sockaddr *srcaddr)
1582 switch (addr->sa_family) {
1584 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1585 struct sockaddr_in *srv_addr4 =
1586 (struct sockaddr_in *)&server->dstaddr;
1588 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
1593 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1594 struct sockaddr_in6 *srv_addr6 =
1595 (struct sockaddr_in6 *)&server->dstaddr;
1597 if (!ipv6_addr_equal(&addr6->sin6_addr,
1598 &srv_addr6->sin6_addr))
1600 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
1606 return false; /* don't expect to be here */
1609 if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1616 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1618 unsigned int secFlags;
1620 if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1621 secFlags = vol->secFlg;
1623 secFlags = global_secflags | vol->secFlg;
1625 switch (server->secType) {
1627 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1631 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1635 if (!(secFlags & CIFSSEC_MAY_NTLM))
1639 if (!(secFlags & CIFSSEC_MAY_KRB5))
1643 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1647 /* shouldn't happen */
1651 /* now check if signing mode is acceptable */
1652 if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1653 (server->secMode & SECMODE_SIGN_REQUIRED))
1655 else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1657 (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1663 static int match_server(struct TCP_Server_Info *server, struct sockaddr *addr,
1664 struct smb_vol *vol)
1666 if (!net_eq(cifs_net_ns(server), current->nsproxy->net_ns))
1669 if (!match_address(server, addr,
1670 (struct sockaddr *)&vol->srcaddr))
1673 if (!match_port(server, addr))
1676 if (!match_security(server, vol))
1682 static struct TCP_Server_Info *
1683 cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1685 struct TCP_Server_Info *server;
1687 spin_lock(&cifs_tcp_ses_lock);
1688 list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
1689 if (!match_server(server, addr, vol))
1692 ++server->srv_count;
1693 spin_unlock(&cifs_tcp_ses_lock);
1694 cFYI(1, "Existing tcp session with server found");
1697 spin_unlock(&cifs_tcp_ses_lock);
1702 cifs_put_tcp_session(struct TCP_Server_Info *server)
1704 struct task_struct *task;
1706 spin_lock(&cifs_tcp_ses_lock);
1707 if (--server->srv_count > 0) {
1708 spin_unlock(&cifs_tcp_ses_lock);
1712 put_net(cifs_net_ns(server));
1714 list_del_init(&server->tcp_ses_list);
1715 spin_unlock(&cifs_tcp_ses_lock);
1717 cancel_delayed_work_sync(&server->echo);
1719 spin_lock(&GlobalMid_Lock);
1720 server->tcpStatus = CifsExiting;
1721 spin_unlock(&GlobalMid_Lock);
1723 cifs_crypto_shash_release(server);
1724 cifs_fscache_release_client_cookie(server);
1726 kfree(server->session_key.response);
1727 server->session_key.response = NULL;
1728 server->session_key.len = 0;
1730 task = xchg(&server->tsk, NULL);
1732 force_sig(SIGKILL, task);
1735 static struct TCP_Server_Info *
1736 cifs_get_tcp_session(struct smb_vol *volume_info)
1738 struct TCP_Server_Info *tcp_ses = NULL;
1739 struct sockaddr_storage addr;
1740 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1741 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1744 memset(&addr, 0, sizeof(struct sockaddr_storage));
1746 cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
1748 if (volume_info->UNCip && volume_info->UNC) {
1749 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1751 strlen(volume_info->UNCip),
1754 /* we failed translating address */
1758 } else if (volume_info->UNCip) {
1759 /* BB using ip addr as tcp_ses name to connect to the
1761 cERROR(1, "Connecting to DFS root not implemented yet");
1764 } else /* which tcp_sess DFS root would we conect to */ {
1765 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1766 "unc=//192.168.1.100/public) specified");
1771 /* see if we already have a matching tcp_ses */
1772 tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
1776 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1782 rc = cifs_crypto_shash_allocate(tcp_ses);
1784 cERROR(1, "could not setup hash structures rc %d", rc);
1788 cifs_set_net_ns(tcp_ses, get_net(current->nsproxy->net_ns));
1789 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1790 if (IS_ERR(tcp_ses->hostname)) {
1791 rc = PTR_ERR(tcp_ses->hostname);
1792 goto out_err_crypto_release;
1795 tcp_ses->noblocksnd = volume_info->noblocksnd;
1796 tcp_ses->noautotune = volume_info->noautotune;
1797 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1798 atomic_set(&tcp_ses->inFlight, 0);
1799 init_waitqueue_head(&tcp_ses->response_q);
1800 init_waitqueue_head(&tcp_ses->request_q);
1801 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1802 mutex_init(&tcp_ses->srv_mutex);
1803 memcpy(tcp_ses->workstation_RFC1001_name,
1804 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1805 memcpy(tcp_ses->server_RFC1001_name,
1806 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1807 tcp_ses->session_estab = false;
1808 tcp_ses->sequence_number = 0;
1809 tcp_ses->lstrp = jiffies;
1810 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1811 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1812 INIT_DELAYED_WORK(&tcp_ses->echo, cifs_echo_request);
1815 * at this point we are the only ones with the pointer
1816 * to the struct since the kernel thread not created yet
1817 * no need to spinlock this init of tcpStatus or srv_count
1819 tcp_ses->tcpStatus = CifsNew;
1820 memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1821 sizeof(tcp_ses->srcaddr));
1822 ++tcp_ses->srv_count;
1824 if (addr.ss_family == AF_INET6) {
1825 cFYI(1, "attempting ipv6 connect");
1826 /* BB should we allow ipv6 on port 139? */
1827 /* other OS never observed in Wild doing 139 with v6 */
1828 memcpy(&tcp_ses->dstaddr, sin_server6,
1829 sizeof(struct sockaddr_in6));
1831 memcpy(&tcp_ses->dstaddr, sin_server,
1832 sizeof(struct sockaddr_in));
1834 rc = ip_connect(tcp_ses);
1836 cERROR(1, "Error connecting to socket. Aborting operation");
1837 goto out_err_crypto_release;
1841 * since we're in a cifs function already, we know that
1842 * this will succeed. No need for try_module_get().
1844 __module_get(THIS_MODULE);
1845 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1847 if (IS_ERR(tcp_ses->tsk)) {
1848 rc = PTR_ERR(tcp_ses->tsk);
1849 cERROR(1, "error %d create cifsd thread", rc);
1850 module_put(THIS_MODULE);
1851 goto out_err_crypto_release;
1853 tcp_ses->tcpStatus = CifsNeedNegotiate;
1855 /* thread spawned, put it on the list */
1856 spin_lock(&cifs_tcp_ses_lock);
1857 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1858 spin_unlock(&cifs_tcp_ses_lock);
1860 cifs_fscache_get_client_cookie(tcp_ses);
1862 /* queue echo request delayed work */
1863 queue_delayed_work(system_nrt_wq, &tcp_ses->echo, SMB_ECHO_INTERVAL);
1867 out_err_crypto_release:
1868 cifs_crypto_shash_release(tcp_ses);
1870 put_net(cifs_net_ns(tcp_ses));
1874 if (!IS_ERR(tcp_ses->hostname))
1875 kfree(tcp_ses->hostname);
1876 if (tcp_ses->ssocket)
1877 sock_release(tcp_ses->ssocket);
1883 static int match_session(struct cifsSesInfo *ses, struct smb_vol *vol)
1885 switch (ses->server->secType) {
1887 if (vol->cred_uid != ses->cred_uid)
1891 /* anything else takes username/password */
1892 if (ses->user_name == NULL)
1894 if (strncmp(ses->user_name, vol->username,
1897 if (strlen(vol->username) != 0 &&
1898 ses->password != NULL &&
1899 strncmp(ses->password,
1900 vol->password ? vol->password : "",
1907 static struct cifsSesInfo *
1908 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1910 struct cifsSesInfo *ses;
1912 spin_lock(&cifs_tcp_ses_lock);
1913 list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
1914 if (!match_session(ses, vol))
1917 spin_unlock(&cifs_tcp_ses_lock);
1920 spin_unlock(&cifs_tcp_ses_lock);
1925 cifs_put_smb_ses(struct cifsSesInfo *ses)
1928 struct TCP_Server_Info *server = ses->server;
1930 cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
1931 spin_lock(&cifs_tcp_ses_lock);
1932 if (--ses->ses_count > 0) {
1933 spin_unlock(&cifs_tcp_ses_lock);
1937 list_del_init(&ses->smb_ses_list);
1938 spin_unlock(&cifs_tcp_ses_lock);
1940 if (ses->status == CifsGood) {
1942 CIFSSMBLogoff(xid, ses);
1946 cifs_put_tcp_session(server);
1949 static bool warned_on_ntlm; /* globals init to false automatically */
1951 static struct cifsSesInfo *
1952 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1954 int rc = -ENOMEM, xid;
1955 struct cifsSesInfo *ses;
1956 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1957 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
1961 ses = cifs_find_smb_ses(server, volume_info);
1963 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1965 mutex_lock(&ses->session_mutex);
1966 rc = cifs_negotiate_protocol(xid, ses);
1968 mutex_unlock(&ses->session_mutex);
1969 /* problem -- put our ses reference */
1970 cifs_put_smb_ses(ses);
1974 if (ses->need_reconnect) {
1975 cFYI(1, "Session needs reconnect");
1976 rc = cifs_setup_session(xid, ses,
1977 volume_info->local_nls);
1979 mutex_unlock(&ses->session_mutex);
1980 /* problem -- put our reference */
1981 cifs_put_smb_ses(ses);
1986 mutex_unlock(&ses->session_mutex);
1988 /* existing SMB ses has a server reference already */
1989 cifs_put_tcp_session(server);
1994 cFYI(1, "Existing smb sess not found");
1995 ses = sesInfoAlloc();
1999 /* new SMB session uses our server ref */
2000 ses->server = server;
2001 if (server->dstaddr.ss_family == AF_INET6)
2002 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
2004 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
2006 if (volume_info->username) {
2007 ses->user_name = kstrdup(volume_info->username, GFP_KERNEL);
2008 if (!ses->user_name)
2012 /* volume_info->password freed at unmount */
2013 if (volume_info->password) {
2014 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
2018 if (volume_info->domainname) {
2019 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
2020 if (!ses->domainName)
2023 ses->cred_uid = volume_info->cred_uid;
2024 ses->linux_uid = volume_info->linux_uid;
2026 /* ntlmv2 is much stronger than ntlm security, and has been broadly
2027 supported for many years, time to update default security mechanism */
2028 if ((volume_info->secFlg == 0) && warned_on_ntlm == false) {
2029 warned_on_ntlm = true;
2030 cERROR(1, "default security mechanism requested. The default "
2031 "security mechanism will be upgraded from ntlm to "
2032 "ntlmv2 in kernel release 2.6.41");
2034 ses->overrideSecFlg = volume_info->secFlg;
2036 mutex_lock(&ses->session_mutex);
2037 rc = cifs_negotiate_protocol(xid, ses);
2039 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
2040 mutex_unlock(&ses->session_mutex);
2044 /* success, put it on the list */
2045 spin_lock(&cifs_tcp_ses_lock);
2046 list_add(&ses->smb_ses_list, &server->smb_ses_list);
2047 spin_unlock(&cifs_tcp_ses_lock);
2058 static int match_tcon(struct cifsTconInfo *tcon, const char *unc)
2060 if (tcon->tidStatus == CifsExiting)
2062 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
2067 static struct cifsTconInfo *
2068 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
2070 struct list_head *tmp;
2071 struct cifsTconInfo *tcon;
2073 spin_lock(&cifs_tcp_ses_lock);
2074 list_for_each(tmp, &ses->tcon_list) {
2075 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
2076 if (!match_tcon(tcon, unc))
2079 spin_unlock(&cifs_tcp_ses_lock);
2082 spin_unlock(&cifs_tcp_ses_lock);
2087 cifs_put_tcon(struct cifsTconInfo *tcon)
2090 struct cifsSesInfo *ses = tcon->ses;
2092 cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
2093 spin_lock(&cifs_tcp_ses_lock);
2094 if (--tcon->tc_count > 0) {
2095 spin_unlock(&cifs_tcp_ses_lock);
2099 list_del_init(&tcon->tcon_list);
2100 spin_unlock(&cifs_tcp_ses_lock);
2103 CIFSSMBTDis(xid, tcon);
2106 cifs_fscache_release_super_cookie(tcon);
2108 cifs_put_smb_ses(ses);
2111 static struct cifsTconInfo *
2112 cifs_get_tcon(struct cifsSesInfo *ses, struct smb_vol *volume_info)
2115 struct cifsTconInfo *tcon;
2117 tcon = cifs_find_tcon(ses, volume_info->UNC);
2119 cFYI(1, "Found match on UNC path");
2120 /* existing tcon already has a reference */
2121 cifs_put_smb_ses(ses);
2122 if (tcon->seal != volume_info->seal)
2123 cERROR(1, "transport encryption setting "
2124 "conflicts with existing tid");
2128 tcon = tconInfoAlloc();
2135 if (volume_info->password) {
2136 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
2137 if (!tcon->password) {
2143 if (strchr(volume_info->UNC + 3, '\\') == NULL
2144 && strchr(volume_info->UNC + 3, '/') == NULL) {
2145 cERROR(1, "Missing share name");
2150 /* BB Do we need to wrap session_mutex around
2151 * this TCon call and Unix SetFS as
2152 * we do on SessSetup and reconnect? */
2154 rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
2156 cFYI(1, "CIFS Tcon rc = %d", rc);
2160 if (volume_info->nodfs) {
2161 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2162 cFYI(1, "DFS disabled (%d)", tcon->Flags);
2164 tcon->seal = volume_info->seal;
2165 /* we can have only one retry value for a connection
2166 to a share so for resources mounted more than once
2167 to the same server share the last value passed in
2168 for the retry flag is used */
2169 tcon->retry = volume_info->retry;
2170 tcon->nocase = volume_info->nocase;
2171 tcon->local_lease = volume_info->local_lease;
2173 spin_lock(&cifs_tcp_ses_lock);
2174 list_add(&tcon->tcon_list, &ses->tcon_list);
2175 spin_unlock(&cifs_tcp_ses_lock);
2177 cifs_fscache_get_super_cookie(tcon);
2187 cifs_put_tlink(struct tcon_link *tlink)
2189 if (!tlink || IS_ERR(tlink))
2192 if (!atomic_dec_and_test(&tlink->tl_count) ||
2193 test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2194 tlink->tl_time = jiffies;
2198 if (!IS_ERR(tlink_tcon(tlink)))
2199 cifs_put_tcon(tlink_tcon(tlink));
2205 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
2206 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
2207 struct dfs_info3_param **preferrals, int remap)
2212 *pnum_referrals = 0;
2215 if (pSesInfo->ipc_tid == 0) {
2216 temp_unc = kmalloc(2 /* for slashes */ +
2217 strnlen(pSesInfo->serverName,
2218 SERVER_NAME_LEN_WITH_NULL * 2)
2219 + 1 + 4 /* slash IPC$ */ + 2,
2221 if (temp_unc == NULL)
2225 strcpy(temp_unc + 2, pSesInfo->serverName);
2226 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2227 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
2228 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
2232 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
2233 pnum_referrals, nls_codepage, remap);
2234 /* BB map targetUNCs to dfs_info3 structures, here or
2235 in CIFSGetDFSRefer BB */
2240 #ifdef CONFIG_DEBUG_LOCK_ALLOC
2241 static struct lock_class_key cifs_key[2];
2242 static struct lock_class_key cifs_slock_key[2];
2245 cifs_reclassify_socket4(struct socket *sock)
2247 struct sock *sk = sock->sk;
2248 BUG_ON(sock_owned_by_user(sk));
2249 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2250 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2254 cifs_reclassify_socket6(struct socket *sock)
2256 struct sock *sk = sock->sk;
2257 BUG_ON(sock_owned_by_user(sk));
2258 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2259 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2263 cifs_reclassify_socket4(struct socket *sock)
2268 cifs_reclassify_socket6(struct socket *sock)
2273 /* See RFC1001 section 14 on representation of Netbios names */
2274 static void rfc1002mangle(char *target, char *source, unsigned int length)
2278 for (i = 0, j = 0; i < (length); i++) {
2279 /* mask a nibble at a time and encode */
2280 target[j] = 'A' + (0x0F & (source[i] >> 4));
2281 target[j+1] = 'A' + (0x0F & source[i]);
2288 bind_socket(struct TCP_Server_Info *server)
2291 if (server->srcaddr.ss_family != AF_UNSPEC) {
2292 /* Bind to the specified local IP address */
2293 struct socket *socket = server->ssocket;
2294 rc = socket->ops->bind(socket,
2295 (struct sockaddr *) &server->srcaddr,
2296 sizeof(server->srcaddr));
2298 struct sockaddr_in *saddr4;
2299 struct sockaddr_in6 *saddr6;
2300 saddr4 = (struct sockaddr_in *)&server->srcaddr;
2301 saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2302 if (saddr6->sin6_family == AF_INET6)
2304 "Failed to bind to: %pI6c, error: %d\n",
2305 &saddr6->sin6_addr, rc);
2308 "Failed to bind to: %pI4, error: %d\n",
2309 &saddr4->sin_addr.s_addr, rc);
2316 ip_rfc1001_connect(struct TCP_Server_Info *server)
2320 * some servers require RFC1001 sessinit before sending
2321 * negprot - BB check reconnection in case where second
2322 * sessinit is sent but no second negprot
2324 struct rfc1002_session_packet *ses_init_buf;
2325 struct smb_hdr *smb_buf;
2326 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2329 ses_init_buf->trailer.session_req.called_len = 32;
2331 if (server->server_RFC1001_name &&
2332 server->server_RFC1001_name[0] != 0)
2333 rfc1002mangle(ses_init_buf->trailer.
2334 session_req.called_name,
2335 server->server_RFC1001_name,
2336 RFC1001_NAME_LEN_WITH_NULL);
2338 rfc1002mangle(ses_init_buf->trailer.
2339 session_req.called_name,
2340 DEFAULT_CIFS_CALLED_NAME,
2341 RFC1001_NAME_LEN_WITH_NULL);
2343 ses_init_buf->trailer.session_req.calling_len = 32;
2346 * calling name ends in null (byte 16) from old smb
2349 if (server->workstation_RFC1001_name &&
2350 server->workstation_RFC1001_name[0] != 0)
2351 rfc1002mangle(ses_init_buf->trailer.
2352 session_req.calling_name,
2353 server->workstation_RFC1001_name,
2354 RFC1001_NAME_LEN_WITH_NULL);
2356 rfc1002mangle(ses_init_buf->trailer.
2357 session_req.calling_name,
2359 RFC1001_NAME_LEN_WITH_NULL);
2361 ses_init_buf->trailer.session_req.scope1 = 0;
2362 ses_init_buf->trailer.session_req.scope2 = 0;
2363 smb_buf = (struct smb_hdr *)ses_init_buf;
2365 /* sizeof RFC1002_SESSION_REQUEST with no scope */
2366 smb_buf->smb_buf_length = cpu_to_be32(0x81000044);
2367 rc = smb_send(server, smb_buf, 0x44);
2368 kfree(ses_init_buf);
2370 * RFC1001 layer in at least one server
2371 * requires very short break before negprot
2372 * presumably because not expecting negprot
2373 * to follow so fast. This is a simple
2374 * solution that works without
2375 * complicating the code and causes no
2376 * significant slowing down on mount
2379 usleep_range(1000, 2000);
2382 * else the negprot may still work without this
2383 * even though malloc failed
2390 generic_ip_connect(struct TCP_Server_Info *server)
2395 struct socket *socket = server->ssocket;
2396 struct sockaddr *saddr;
2398 saddr = (struct sockaddr *) &server->dstaddr;
2400 if (server->dstaddr.ss_family == AF_INET6) {
2401 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
2402 slen = sizeof(struct sockaddr_in6);
2405 sport = ((struct sockaddr_in *) saddr)->sin_port;
2406 slen = sizeof(struct sockaddr_in);
2410 if (socket == NULL) {
2411 rc = __sock_create(cifs_net_ns(server), sfamily, SOCK_STREAM,
2412 IPPROTO_TCP, &socket, 1);
2414 cERROR(1, "Error %d creating socket", rc);
2415 server->ssocket = NULL;
2419 /* BB other socket options to set KEEPALIVE, NODELAY? */
2420 cFYI(1, "Socket created");
2421 server->ssocket = socket;
2422 socket->sk->sk_allocation = GFP_NOFS;
2423 if (sfamily == AF_INET6)
2424 cifs_reclassify_socket6(socket);
2426 cifs_reclassify_socket4(socket);
2429 rc = bind_socket(server);
2433 rc = socket->ops->connect(socket, saddr, slen, 0);
2435 cFYI(1, "Error %d connecting to server", rc);
2436 sock_release(socket);
2437 server->ssocket = NULL;
2442 * Eventually check for other socket options to change from
2443 * the default. sock_setsockopt not used because it expects
2446 socket->sk->sk_rcvtimeo = 7 * HZ;
2447 socket->sk->sk_sndtimeo = 5 * HZ;
2449 /* make the bufsizes depend on wsize/rsize and max requests */
2450 if (server->noautotune) {
2451 if (socket->sk->sk_sndbuf < (200 * 1024))
2452 socket->sk->sk_sndbuf = 200 * 1024;
2453 if (socket->sk->sk_rcvbuf < (140 * 1024))
2454 socket->sk->sk_rcvbuf = 140 * 1024;
2457 if (server->tcp_nodelay) {
2459 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2460 (char *)&val, sizeof(val));
2462 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2465 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
2466 socket->sk->sk_sndbuf,
2467 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
2469 if (sport == htons(RFC1001_PORT))
2470 rc = ip_rfc1001_connect(server);
2476 ip_connect(struct TCP_Server_Info *server)
2479 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2480 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
2482 if (server->dstaddr.ss_family == AF_INET6)
2483 sport = &addr6->sin6_port;
2485 sport = &addr->sin_port;
2490 /* try with 445 port at first */
2491 *sport = htons(CIFS_PORT);
2493 rc = generic_ip_connect(server);
2497 /* if it failed, try with 139 port */
2498 *sport = htons(RFC1001_PORT);
2501 return generic_ip_connect(server);
2504 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
2505 struct super_block *sb, struct smb_vol *vol_info)
2507 /* if we are reconnecting then should we check to see if
2508 * any requested capabilities changed locally e.g. via
2509 * remount but we can not do much about it here
2510 * if they have (even if we could detect it by the following)
2511 * Perhaps we could add a backpointer to array of sb from tcon
2512 * or if we change to make all sb to same share the same
2513 * sb as NFS - then we only have one backpointer to sb.
2514 * What if we wanted to mount the server share twice once with
2515 * and once without posixacls or posix paths? */
2516 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2518 if (vol_info && vol_info->no_linux_ext) {
2519 tcon->fsUnixInfo.Capability = 0;
2520 tcon->unix_ext = 0; /* Unix Extensions disabled */
2521 cFYI(1, "Linux protocol extensions disabled");
2523 } else if (vol_info)
2524 tcon->unix_ext = 1; /* Unix Extensions supported */
2526 if (tcon->unix_ext == 0) {
2527 cFYI(1, "Unix extensions disabled so not set on reconnect");
2531 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2532 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2534 /* check for reconnect case in which we do not
2535 want to change the mount behavior if we can avoid it */
2536 if (vol_info == NULL) {
2537 /* turn off POSIX ACL and PATHNAMES if not set
2538 originally at mount time */
2539 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2540 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2541 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2542 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2543 cERROR(1, "POSIXPATH support change");
2544 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2545 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2546 cERROR(1, "possible reconnect error");
2547 cERROR(1, "server disabled POSIX path support");
2551 cap &= CIFS_UNIX_CAP_MASK;
2552 if (vol_info && vol_info->no_psx_acl)
2553 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2554 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2555 cFYI(1, "negotiated posix acl support");
2557 sb->s_flags |= MS_POSIXACL;
2560 if (vol_info && vol_info->posix_paths == 0)
2561 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2562 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2563 cFYI(1, "negotiate posix pathnames");
2565 CIFS_SB(sb)->mnt_cifs_flags |=
2566 CIFS_MOUNT_POSIX_PATHS;
2569 /* We might be setting the path sep back to a different
2570 form if we are reconnecting and the server switched its
2571 posix path capability for this share */
2572 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2573 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2575 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2576 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2577 CIFS_SB(sb)->rsize = 127 * 1024;
2578 cFYI(DBG2, "larger reads not supported by srv");
2583 cFYI(1, "Negotiate caps 0x%x", (int)cap);
2584 #ifdef CONFIG_CIFS_DEBUG2
2585 if (cap & CIFS_UNIX_FCNTL_CAP)
2586 cFYI(1, "FCNTL cap");
2587 if (cap & CIFS_UNIX_EXTATTR_CAP)
2588 cFYI(1, "EXTATTR cap");
2589 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2590 cFYI(1, "POSIX path cap");
2591 if (cap & CIFS_UNIX_XATTR_CAP)
2592 cFYI(1, "XATTR cap");
2593 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2594 cFYI(1, "POSIX ACL cap");
2595 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2596 cFYI(1, "very large read cap");
2597 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2598 cFYI(1, "very large write cap");
2599 #endif /* CIFS_DEBUG2 */
2600 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2601 if (vol_info == NULL) {
2602 cFYI(1, "resetting capabilities failed");
2604 cERROR(1, "Negotiating Unix capabilities "
2605 "with the server failed. Consider "
2606 "mounting with the Unix Extensions\n"
2607 "disabled, if problems are found, "
2608 "by specifying the nounix mount "
2616 convert_delimiter(char *path, char delim)
2629 for (i = 0; path[i] != '\0'; i++) {
2630 if (path[i] == old_delim)
2635 void cifs_setup_cifs_sb(struct smb_vol *pvolume_info,
2636 struct cifs_sb_info *cifs_sb)
2638 INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2640 if (pvolume_info->rsize > CIFSMaxBufSize) {
2641 cERROR(1, "rsize %d too large, using MaxBufSize",
2642 pvolume_info->rsize);
2643 cifs_sb->rsize = CIFSMaxBufSize;
2644 } else if ((pvolume_info->rsize) &&
2645 (pvolume_info->rsize <= CIFSMaxBufSize))
2646 cifs_sb->rsize = pvolume_info->rsize;
2648 cifs_sb->rsize = CIFSMaxBufSize;
2650 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2651 cERROR(1, "wsize %d too large, using 4096 instead",
2652 pvolume_info->wsize);
2653 cifs_sb->wsize = 4096;
2654 } else if (pvolume_info->wsize)
2655 cifs_sb->wsize = pvolume_info->wsize;
2657 cifs_sb->wsize = min_t(const int,
2658 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2660 /* old default of CIFSMaxBufSize was too small now
2661 that SMB Write2 can send multiple pages in kvec.
2662 RFC1001 does not describe what happens when frame
2663 bigger than 128K is sent so use that as max in
2664 conjunction with 52K kvec constraint on arch with 4K
2667 if (cifs_sb->rsize < 2048) {
2668 cifs_sb->rsize = 2048;
2669 /* Windows ME may prefer this */
2670 cFYI(1, "readsize set to minimum: 2048");
2672 /* calculate prepath */
2673 cifs_sb->prepath = pvolume_info->prepath;
2674 if (cifs_sb->prepath) {
2675 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2676 /* we can not convert the / to \ in the path
2677 separators in the prefixpath yet because we do not
2678 know (until reset_cifs_unix_caps is called later)
2679 whether POSIX PATH CAP is available. We normalize
2680 the / to \ after reset_cifs_unix_caps is called */
2681 pvolume_info->prepath = NULL;
2683 cifs_sb->prepathlen = 0;
2684 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2685 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2686 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2687 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2688 cFYI(1, "file mode: 0x%x dir mode: 0x%x",
2689 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
2691 cifs_sb->actimeo = pvolume_info->actimeo;
2692 cifs_sb->local_nls = pvolume_info->local_nls;
2694 if (pvolume_info->noperm)
2695 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2696 if (pvolume_info->setuids)
2697 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2698 if (pvolume_info->server_ino)
2699 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2700 if (pvolume_info->remap)
2701 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2702 if (pvolume_info->no_xattr)
2703 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2704 if (pvolume_info->sfu_emul)
2705 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2706 if (pvolume_info->nobrl)
2707 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2708 if (pvolume_info->nostrictsync)
2709 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2710 if (pvolume_info->mand_lock)
2711 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2712 if (pvolume_info->cifs_acl)
2713 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2714 if (pvolume_info->override_uid)
2715 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2716 if (pvolume_info->override_gid)
2717 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2718 if (pvolume_info->dynperm)
2719 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2720 if (pvolume_info->fsc)
2721 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
2722 if (pvolume_info->multiuser)
2723 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2724 CIFS_MOUNT_NO_PERM);
2725 if (pvolume_info->strict_io)
2726 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_STRICT_IO;
2727 if (pvolume_info->direct_io) {
2728 cFYI(1, "mounting share using direct i/o");
2729 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2731 if (pvolume_info->mfsymlinks) {
2732 if (pvolume_info->sfu_emul) {
2733 cERROR(1, "mount option mfsymlinks ignored if sfu "
2734 "mount option is used");
2736 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2740 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2741 cERROR(1, "mount option dynperm ignored if cifsacl "
2742 "mount option supported");
2746 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2747 struct cifs_sb_info *cifs_sb, const char *full_path)
2750 FILE_ALL_INFO *pfile_info;
2752 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2753 if (pfile_info == NULL)
2756 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2757 0 /* not legacy */, cifs_sb->local_nls,
2758 cifs_sb->mnt_cifs_flags &
2759 CIFS_MOUNT_MAP_SPECIAL_CHR);
2761 if (rc == -EOPNOTSUPP || rc == -EINVAL)
2762 rc = SMBQueryInformation(xid, tcon, full_path, pfile_info,
2763 cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
2764 CIFS_MOUNT_MAP_SPECIAL_CHR);
2770 cifs_cleanup_volume_info(struct smb_vol **pvolume_info)
2772 struct smb_vol *volume_info;
2774 if (!pvolume_info || !*pvolume_info)
2777 volume_info = *pvolume_info;
2778 kfree(volume_info->username);
2779 kzfree(volume_info->password);
2780 kfree(volume_info->UNC);
2781 kfree(volume_info->UNCip);
2782 kfree(volume_info->domainname);
2783 kfree(volume_info->iocharset);
2784 kfree(volume_info->prepath);
2786 *pvolume_info = NULL;
2790 #ifdef CONFIG_CIFS_DFS_UPCALL
2791 /* build_path_to_root returns full path to root when
2792 * we do not have an exiting connection (tcon) */
2794 build_unc_path_to_root(const struct smb_vol *volume_info,
2795 const struct cifs_sb_info *cifs_sb)
2799 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2800 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2801 if (full_path == NULL)
2802 return ERR_PTR(-ENOMEM);
2804 strncpy(full_path, volume_info->UNC, unc_len);
2805 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2807 for (i = 0; i < unc_len; i++) {
2808 if (full_path[i] == '\\')
2813 if (cifs_sb->prepathlen)
2814 strncpy(full_path + unc_len, cifs_sb->prepath,
2815 cifs_sb->prepathlen);
2817 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2822 * Perform a dfs referral query for a share and (optionally) prefix
2824 * If a referral is found, cifs_sb->mountdata will be (re-)allocated
2825 * to a string containing updated options for the submount. Otherwise it
2826 * will be left untouched.
2828 * Returns the rc from get_dfs_path to the caller, which can be used to
2829 * determine whether there were referrals.
2832 expand_dfs_referral(int xid, struct cifsSesInfo *pSesInfo,
2833 struct smb_vol *volume_info, struct cifs_sb_info *cifs_sb,
2837 unsigned int num_referrals = 0;
2838 struct dfs_info3_param *referrals = NULL;
2839 char *full_path = NULL, *ref_path = NULL, *mdata = NULL;
2841 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2842 if (IS_ERR(full_path))
2843 return PTR_ERR(full_path);
2845 /* For DFS paths, skip the first '\' of the UNC */
2846 ref_path = check_prefix ? full_path + 1 : volume_info->UNC + 1;
2848 rc = get_dfs_path(xid, pSesInfo , ref_path, cifs_sb->local_nls,
2849 &num_referrals, &referrals,
2850 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2852 if (!rc && num_referrals > 0) {
2853 char *fake_devname = NULL;
2855 mdata = cifs_compose_mount_options(cifs_sb->mountdata,
2856 full_path + 1, referrals,
2859 free_dfs_info_array(referrals, num_referrals);
2860 kfree(fake_devname);
2862 if (cifs_sb->mountdata != NULL)
2863 kfree(cifs_sb->mountdata);
2865 if (IS_ERR(mdata)) {
2866 rc = PTR_ERR(mdata);
2869 cifs_sb->mountdata = mdata;
2876 int cifs_setup_volume_info(struct smb_vol **pvolume_info, char *mount_data,
2877 const char *devname)
2879 struct smb_vol *volume_info;
2882 *pvolume_info = NULL;
2884 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2890 if (cifs_parse_mount_options(mount_data, devname,
2896 if (volume_info->nullauth) {
2897 cFYI(1, "null user");
2898 volume_info->username = "";
2899 } else if (volume_info->username) {
2900 /* BB fixme parse for domain name here */
2901 cFYI(1, "Username: %s", volume_info->username);
2903 cifserror("No username specified");
2904 /* In userspace mount helper we can get user name from alternate
2905 locations such as env variables and files on disk */
2910 /* this is needed for ASCII cp to Unicode converts */
2911 if (volume_info->iocharset == NULL) {
2912 /* load_nls_default cannot return null */
2913 volume_info->local_nls = load_nls_default();
2915 volume_info->local_nls = load_nls(volume_info->iocharset);
2916 if (volume_info->local_nls == NULL) {
2917 cERROR(1, "CIFS mount error: iocharset %s not found",
2918 volume_info->iocharset);
2924 *pvolume_info = volume_info;
2927 cifs_cleanup_volume_info(&volume_info);
2932 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2933 struct smb_vol *volume_info, const char *devname)
2937 struct cifsSesInfo *pSesInfo;
2938 struct cifsTconInfo *tcon;
2939 struct TCP_Server_Info *srvTcp;
2941 struct tcon_link *tlink;
2942 #ifdef CONFIG_CIFS_DFS_UPCALL
2943 int referral_walks_count = 0;
2945 /* cleanup activities if we're chasing a referral */
2946 if (referral_walks_count) {
2948 cifs_put_tcon(tcon);
2950 cifs_put_smb_ses(pSesInfo);
2952 cifs_cleanup_volume_info(&volume_info);
2964 /* get a reference to a tcp session */
2965 srvTcp = cifs_get_tcp_session(volume_info);
2966 if (IS_ERR(srvTcp)) {
2967 rc = PTR_ERR(srvTcp);
2971 /* get a reference to a SMB session */
2972 pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
2973 if (IS_ERR(pSesInfo)) {
2974 rc = PTR_ERR(pSesInfo);
2976 goto mount_fail_check;
2979 if (pSesInfo->capabilities & CAP_LARGE_FILES)
2980 sb->s_maxbytes = MAX_LFS_FILESIZE;
2982 sb->s_maxbytes = MAX_NON_LFS;
2984 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2985 sb->s_time_gran = 100;
2987 /* search for existing tcon to this server share */
2988 tcon = cifs_get_tcon(pSesInfo, volume_info);
2992 goto remote_path_check;
2995 /* do not care if following two calls succeed - informational */
2997 CIFSSMBQFSDeviceInfo(xid, tcon);
2998 CIFSSMBQFSAttributeInfo(xid, tcon);
3001 /* tell server which Unix caps we support */
3002 if (tcon->ses->capabilities & CAP_UNIX)
3003 /* reset of caps checks mount to see if unix extensions
3004 disabled for just this mount */
3005 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
3007 tcon->unix_ext = 0; /* server does not support them */
3009 /* convert forward to back slashes in prepath here if needed */
3010 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
3011 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
3013 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
3014 cifs_sb->rsize = 1024 * 127;
3015 cFYI(DBG2, "no very large read support, rsize now 127K");
3017 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
3018 cifs_sb->wsize = min(cifs_sb->wsize,
3019 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
3020 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
3021 cifs_sb->rsize = min(cifs_sb->rsize,
3022 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
3025 #ifdef CONFIG_CIFS_DFS_UPCALL
3027 * Perform an unconditional check for whether there are DFS
3028 * referrals for this path without prefix, to provide support
3029 * for DFS referrals from w2k8 servers which don't seem to respond
3030 * with PATH_NOT_COVERED to requests that include the prefix.
3031 * Chase the referral if found, otherwise continue normally.
3033 if (referral_walks_count == 0) {
3034 int refrc = expand_dfs_referral(xid, pSesInfo, volume_info,
3037 referral_walks_count++;
3038 goto try_mount_again;
3043 /* check if a whole path (including prepath) is not remote */
3045 /* build_path_to_root works only when we have a valid tcon */
3046 full_path = cifs_build_path_to_root(cifs_sb, tcon);
3047 if (full_path == NULL) {
3049 goto mount_fail_check;
3051 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
3052 if (rc != 0 && rc != -EREMOTE) {
3054 goto mount_fail_check;
3059 /* get referral if needed */
3060 if (rc == -EREMOTE) {
3061 #ifdef CONFIG_CIFS_DFS_UPCALL
3062 if (referral_walks_count > MAX_NESTED_LINKS) {
3064 * BB: when we implement proper loop detection,
3065 * we will remove this check. But now we need it
3066 * to prevent an indefinite loop if 'DFS tree' is
3067 * misconfigured (i.e. has loops).
3070 goto mount_fail_check;
3072 /* convert forward to back slashes in prepath here if needed */
3073 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
3074 convert_delimiter(cifs_sb->prepath,
3075 CIFS_DIR_SEP(cifs_sb));
3077 rc = expand_dfs_referral(xid, pSesInfo, volume_info, cifs_sb,
3081 referral_walks_count++;
3082 goto try_mount_again;
3084 goto mount_fail_check;
3085 #else /* No DFS support, return error on mount */
3091 goto mount_fail_check;
3093 /* now, hang the tcon off of the superblock */
3094 tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
3095 if (tlink == NULL) {
3097 goto mount_fail_check;
3100 tlink->tl_uid = pSesInfo->linux_uid;
3101 tlink->tl_tcon = tcon;
3102 tlink->tl_time = jiffies;
3103 set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
3104 set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3106 cifs_sb->master_tlink = tlink;
3107 spin_lock(&cifs_sb->tlink_tree_lock);
3108 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3109 spin_unlock(&cifs_sb->tlink_tree_lock);
3111 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3115 /* on error free sesinfo and tcon struct if needed */
3117 /* If find_unc succeeded then rc == 0 so we can not end */
3118 /* up accidentally freeing someone elses tcon struct */
3120 cifs_put_tcon(tcon);
3122 cifs_put_smb_ses(pSesInfo);
3124 cifs_put_tcp_session(srvTcp);
3128 /* volume_info->password is freed above when existing session found
3129 (in which case it is not needed anymore) but when new sesion is created
3130 the password ptr is put in the new session structure (in which case the
3131 password will be freed at unmount time) */
3133 /* zero out password before freeing */
3139 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
3140 const char *tree, struct cifsTconInfo *tcon,
3141 const struct nls_table *nls_codepage)
3143 struct smb_hdr *smb_buffer;
3144 struct smb_hdr *smb_buffer_response;
3147 unsigned char *bcc_ptr;
3150 __u16 bytes_left, count;
3155 smb_buffer = cifs_buf_get();
3156 if (smb_buffer == NULL)
3159 smb_buffer_response = smb_buffer;
3161 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
3162 NULL /*no tid */ , 4 /*wct */ );
3164 smb_buffer->Mid = GetNextMid(ses->server);
3165 smb_buffer->Uid = ses->Suid;
3166 pSMB = (TCONX_REQ *) smb_buffer;
3167 pSMBr = (TCONX_RSP *) smb_buffer_response;
3169 pSMB->AndXCommand = 0xFF;
3170 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
3171 bcc_ptr = &pSMB->Password[0];
3172 if ((ses->server->secMode) & SECMODE_USER) {
3173 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
3174 *bcc_ptr = 0; /* password is null byte */
3175 bcc_ptr++; /* skip password */
3176 /* already aligned so no need to do it below */
3178 pSMB->PasswordLength = cpu_to_le16(CIFS_AUTH_RESP_SIZE);
3179 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
3180 specified as required (when that support is added to
3181 the vfs in the future) as only NTLM or the much
3182 weaker LANMAN (which we do not send by default) is accepted
3183 by Samba (not sure whether other servers allow
3184 NTLMv2 password here) */
3185 #ifdef CONFIG_CIFS_WEAK_PW_HASH
3186 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
3187 (ses->server->secType == LANMAN))
3188 calc_lanman_hash(tcon->password, ses->server->cryptkey,
3189 ses->server->secMode &
3190 SECMODE_PW_ENCRYPT ? true : false,
3193 #endif /* CIFS_WEAK_PW_HASH */
3194 rc = SMBNTencrypt(tcon->password, ses->server->cryptkey,
3197 bcc_ptr += CIFS_AUTH_RESP_SIZE;
3198 if (ses->capabilities & CAP_UNICODE) {
3199 /* must align unicode strings */
3200 *bcc_ptr = 0; /* null byte password */
3205 if (ses->server->secMode &
3206 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
3207 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
3209 if (ses->capabilities & CAP_STATUS32) {
3210 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3212 if (ses->capabilities & CAP_DFS) {
3213 smb_buffer->Flags2 |= SMBFLG2_DFS;
3215 if (ses->capabilities & CAP_UNICODE) {
3216 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3218 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
3219 6 /* max utf8 char length in bytes */ *
3220 (/* server len*/ + 256 /* share len */), nls_codepage);
3221 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
3222 bcc_ptr += 2; /* skip trailing null */
3223 } else { /* ASCII */
3224 strcpy(bcc_ptr, tree);
3225 bcc_ptr += strlen(tree) + 1;
3227 strcpy(bcc_ptr, "?????");
3228 bcc_ptr += strlen("?????");
3230 count = bcc_ptr - &pSMB->Password[0];
3231 pSMB->hdr.smb_buf_length = cpu_to_be32(be32_to_cpu(
3232 pSMB->hdr.smb_buf_length) + count);
3233 pSMB->ByteCount = cpu_to_le16(count);
3235 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
3238 /* above now done in SendReceive */
3239 if ((rc == 0) && (tcon != NULL)) {
3242 tcon->tidStatus = CifsGood;
3243 tcon->need_reconnect = false;
3244 tcon->tid = smb_buffer_response->Tid;
3245 bcc_ptr = pByteArea(smb_buffer_response);
3246 bytes_left = get_bcc(smb_buffer_response);
3247 length = strnlen(bcc_ptr, bytes_left - 2);
3248 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3254 /* skip service field (NB: this field is always ASCII) */
3256 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3257 (bcc_ptr[2] == 'C')) {
3258 cFYI(1, "IPC connection");
3261 } else if (length == 2) {
3262 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3263 /* the most common case */
3264 cFYI(1, "disk share connection");
3267 bcc_ptr += length + 1;
3268 bytes_left -= (length + 1);
3269 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
3271 /* mostly informational -- no need to fail on error here */
3272 kfree(tcon->nativeFileSystem);
3273 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
3274 bytes_left, is_unicode,
3277 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
3279 if ((smb_buffer_response->WordCount == 3) ||
3280 (smb_buffer_response->WordCount == 7))
3281 /* field is in same location */
3282 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3285 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
3286 } else if ((rc == 0) && tcon == NULL) {
3287 /* all we need to save for IPC$ connection */
3288 ses->ipc_tid = smb_buffer_response->Tid;
3291 cifs_buf_release(smb_buffer);
3296 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
3298 struct rb_root *root = &cifs_sb->tlink_tree;
3299 struct rb_node *node;
3300 struct tcon_link *tlink;
3303 cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3305 spin_lock(&cifs_sb->tlink_tree_lock);
3306 while ((node = rb_first(root))) {
3307 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3308 cifs_get_tlink(tlink);
3309 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3310 rb_erase(node, root);
3312 spin_unlock(&cifs_sb->tlink_tree_lock);
3313 cifs_put_tlink(tlink);
3314 spin_lock(&cifs_sb->tlink_tree_lock);
3316 spin_unlock(&cifs_sb->tlink_tree_lock);
3318 tmp = cifs_sb->prepath;
3319 cifs_sb->prepathlen = 0;
3320 cifs_sb->prepath = NULL;
3326 int cifs_negotiate_protocol(unsigned int xid, struct cifsSesInfo *ses)
3329 struct TCP_Server_Info *server = ses->server;
3331 /* only send once per connect */
3332 if (server->maxBuf != 0)
3335 rc = CIFSSMBNegotiate(xid, ses);
3336 if (rc == -EAGAIN) {
3337 /* retry only once on 1st time connection */
3338 rc = CIFSSMBNegotiate(xid, ses);
3343 spin_lock(&GlobalMid_Lock);
3344 if (server->tcpStatus != CifsExiting)
3345 server->tcpStatus = CifsGood;
3348 spin_unlock(&GlobalMid_Lock);
3356 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *ses,
3357 struct nls_table *nls_info)
3360 struct TCP_Server_Info *server = ses->server;
3363 ses->capabilities = server->capabilities;
3364 if (linuxExtEnabled == 0)
3365 ses->capabilities &= (~CAP_UNIX);
3367 cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3368 server->secMode, server->capabilities, server->timeAdj);
3370 rc = CIFS_SessSetup(xid, ses, nls_info);
3372 cERROR(1, "Send error in SessSetup = %d", rc);
3374 mutex_lock(&ses->server->srv_mutex);
3375 if (!server->session_estab) {
3376 server->session_key.response = ses->auth_key.response;
3377 server->session_key.len = ses->auth_key.len;
3378 server->sequence_number = 0x2;
3379 server->session_estab = true;
3380 ses->auth_key.response = NULL;
3382 mutex_unlock(&server->srv_mutex);
3384 cFYI(1, "CIFS Session Established successfully");
3385 spin_lock(&GlobalMid_Lock);
3386 ses->status = CifsGood;
3387 ses->need_reconnect = false;
3388 spin_unlock(&GlobalMid_Lock);
3391 kfree(ses->auth_key.response);
3392 ses->auth_key.response = NULL;
3393 ses->auth_key.len = 0;
3394 kfree(ses->ntlmssp);
3395 ses->ntlmssp = NULL;
3400 static struct cifsTconInfo *
3401 cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3403 struct cifsTconInfo *master_tcon = cifs_sb_master_tcon(cifs_sb);
3404 struct cifsSesInfo *ses;
3405 struct cifsTconInfo *tcon = NULL;
3406 struct smb_vol *vol_info;
3407 char username[28]; /* big enough for "krb50x" + hex of ULONG_MAX 6+16 */
3408 /* We used to have this as MAX_USERNAME which is */
3409 /* way too big now (256 instead of 32) */
3411 vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3412 if (vol_info == NULL) {
3413 tcon = ERR_PTR(-ENOMEM);
3417 snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3418 vol_info->username = username;
3419 vol_info->local_nls = cifs_sb->local_nls;
3420 vol_info->linux_uid = fsuid;
3421 vol_info->cred_uid = fsuid;
3422 vol_info->UNC = master_tcon->treeName;
3423 vol_info->retry = master_tcon->retry;
3424 vol_info->nocase = master_tcon->nocase;
3425 vol_info->local_lease = master_tcon->local_lease;
3426 vol_info->no_linux_ext = !master_tcon->unix_ext;
3428 /* FIXME: allow for other secFlg settings */
3429 vol_info->secFlg = CIFSSEC_MUST_KRB5;
3431 /* get a reference for the same TCP session */
3432 spin_lock(&cifs_tcp_ses_lock);
3433 ++master_tcon->ses->server->srv_count;
3434 spin_unlock(&cifs_tcp_ses_lock);
3436 ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3438 tcon = (struct cifsTconInfo *)ses;
3439 cifs_put_tcp_session(master_tcon->ses->server);
3443 tcon = cifs_get_tcon(ses, vol_info);
3445 cifs_put_smb_ses(ses);
3449 if (ses->capabilities & CAP_UNIX)
3450 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3457 static inline struct tcon_link *
3458 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
3460 return cifs_sb->master_tlink;
3463 struct cifsTconInfo *
3464 cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3466 return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3470 cifs_sb_tcon_pending_wait(void *unused)
3473 return signal_pending(current) ? -ERESTARTSYS : 0;
3476 /* find and return a tlink with given uid */
3477 static struct tcon_link *
3478 tlink_rb_search(struct rb_root *root, uid_t uid)
3480 struct rb_node *node = root->rb_node;
3481 struct tcon_link *tlink;
3484 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3486 if (tlink->tl_uid > uid)
3487 node = node->rb_left;
3488 else if (tlink->tl_uid < uid)
3489 node = node->rb_right;
3496 /* insert a tcon_link into the tree */
3498 tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
3500 struct rb_node **new = &(root->rb_node), *parent = NULL;
3501 struct tcon_link *tlink;
3504 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
3507 if (tlink->tl_uid > new_tlink->tl_uid)
3508 new = &((*new)->rb_left);
3510 new = &((*new)->rb_right);
3513 rb_link_node(&new_tlink->tl_rbnode, parent, new);
3514 rb_insert_color(&new_tlink->tl_rbnode, root);
3518 * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3521 * If the superblock doesn't refer to a multiuser mount, then just return
3522 * the master tcon for the mount.
3524 * First, search the rbtree for an existing tcon for this fsuid. If one
3525 * exists, then check to see if it's pending construction. If it is then wait
3526 * for construction to complete. Once it's no longer pending, check to see if
3527 * it failed and either return an error or retry construction, depending on
3530 * If one doesn't exist then insert a new tcon_link struct into the tree and
3531 * try to construct a new one.
3534 cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3537 uid_t fsuid = current_fsuid();
3538 struct tcon_link *tlink, *newtlink;
3540 if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3541 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3543 spin_lock(&cifs_sb->tlink_tree_lock);
3544 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3546 cifs_get_tlink(tlink);
3547 spin_unlock(&cifs_sb->tlink_tree_lock);
3549 if (tlink == NULL) {
3550 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3551 if (newtlink == NULL)
3552 return ERR_PTR(-ENOMEM);
3553 newtlink->tl_uid = fsuid;
3554 newtlink->tl_tcon = ERR_PTR(-EACCES);
3555 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3556 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3557 cifs_get_tlink(newtlink);
3559 spin_lock(&cifs_sb->tlink_tree_lock);
3560 /* was one inserted after previous search? */
3561 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3563 cifs_get_tlink(tlink);
3564 spin_unlock(&cifs_sb->tlink_tree_lock);
3566 goto wait_for_construction;
3569 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3570 spin_unlock(&cifs_sb->tlink_tree_lock);
3572 wait_for_construction:
3573 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3574 cifs_sb_tcon_pending_wait,
3575 TASK_INTERRUPTIBLE);
3577 cifs_put_tlink(tlink);
3578 return ERR_PTR(ret);
3581 /* if it's good, return it */
3582 if (!IS_ERR(tlink->tl_tcon))
3585 /* return error if we tried this already recently */
3586 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3587 cifs_put_tlink(tlink);
3588 return ERR_PTR(-EACCES);
3591 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3592 goto wait_for_construction;
3595 tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3596 clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3597 wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3599 if (IS_ERR(tlink->tl_tcon)) {
3600 cifs_put_tlink(tlink);
3601 return ERR_PTR(-EACCES);
3608 * periodic workqueue job that scans tcon_tree for a superblock and closes
3612 cifs_prune_tlinks(struct work_struct *work)
3614 struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3616 struct rb_root *root = &cifs_sb->tlink_tree;
3617 struct rb_node *node = rb_first(root);
3618 struct rb_node *tmp;
3619 struct tcon_link *tlink;
3622 * Because we drop the spinlock in the loop in order to put the tlink
3623 * it's not guarded against removal of links from the tree. The only
3624 * places that remove entries from the tree are this function and
3625 * umounts. Because this function is non-reentrant and is canceled
3626 * before umount can proceed, this is safe.
3628 spin_lock(&cifs_sb->tlink_tree_lock);
3629 node = rb_first(root);
3630 while (node != NULL) {
3632 node = rb_next(tmp);
3633 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
3635 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
3636 atomic_read(&tlink->tl_count) != 0 ||
3637 time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
3640 cifs_get_tlink(tlink);
3641 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3642 rb_erase(tmp, root);
3644 spin_unlock(&cifs_sb->tlink_tree_lock);
3645 cifs_put_tlink(tlink);
3646 spin_lock(&cifs_sb->tlink_tree_lock);
3648 spin_unlock(&cifs_sb->tlink_tree_lock);
3650 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,