4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/slab.h>
27 #include <linux/pagemap.h>
28 #include <linux/ctype.h>
29 #include <linux/utsname.h>
30 #include <linux/mempool.h>
31 #include <linux/delay.h>
32 #include <linux/completion.h>
33 #include <linux/kthread.h>
34 #include <linux/pagevec.h>
35 #include <linux/freezer.h>
36 #include <linux/namei.h>
37 #include <asm/uaccess.h>
38 #include <asm/processor.h>
39 #include <linux/inet.h>
43 #include "cifsproto.h"
44 #include "cifs_unicode.h"
45 #include "cifs_debug.h"
46 #include "cifs_fs_sb.h"
49 #include "rfc1002pdu.h"
53 #define RFC1001_PORT 139
55 /* SMB echo "timeout" -- FIXME: tunable? */
56 #define SMB_ECHO_INTERVAL (60 * HZ)
58 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
61 extern mempool_t *cifs_req_poolp;
69 char *iocharset; /* local code page for mapping to and from Unicode */
70 char source_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* clnt nb name */
71 char target_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* srvr nb name */
85 bool no_psx_acl:1; /* set if posix acl support should be disabled */
87 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
88 bool server_ino:1; /* use inode numbers from server ie UniqueId */
90 bool remap:1; /* set to remap seven reserved chars in filenames */
91 bool posix_paths:1; /* unset to not ask for posix pathnames. */
94 bool nullauth:1; /* attempt to authenticate with null user */
95 bool nocase:1; /* request case insensitive filenames */
96 bool nobrl:1; /* disable sending byte range locks to srv */
97 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
98 bool seal:1; /* request transport encryption on share */
99 bool nodfs:1; /* Do not request DFS, even if available */
100 bool local_lease:1; /* check leases only on local system, not remote */
103 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
104 bool fsc:1; /* enable fscache */
105 bool mfsymlinks:1; /* use Minshall+French Symlinks */
109 bool sockopt_tcp_nodelay:1;
110 unsigned short int port;
111 unsigned long actimeo; /* attribute cache timeout (jiffies) */
113 struct sockaddr_storage srcaddr; /* allow binding to a local IP */
114 struct nls_table *local_nls;
117 /* FIXME: should these be tunable? */
118 #define TLINK_ERROR_EXPIRE (1 * HZ)
119 #define TLINK_IDLE_EXPIRE (600 * HZ)
121 static int ip_connect(struct TCP_Server_Info *server);
122 static int generic_ip_connect(struct TCP_Server_Info *server);
123 static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
124 static void cifs_prune_tlinks(struct work_struct *work);
127 * cifs tcp session reconnection
129 * mark tcp session as reconnecting so temporarily locked
130 * mark all smb sessions as reconnecting for tcp session
131 * reconnect tcp session
132 * wake up waiters on reconnection? - (not needed currently)
135 cifs_reconnect(struct TCP_Server_Info *server)
138 struct list_head *tmp, *tmp2;
139 struct cifsSesInfo *ses;
140 struct cifsTconInfo *tcon;
141 struct mid_q_entry *mid_entry;
143 spin_lock(&GlobalMid_Lock);
144 if (server->tcpStatus == CifsExiting) {
145 /* the demux thread will exit normally
146 next time through the loop */
147 spin_unlock(&GlobalMid_Lock);
150 server->tcpStatus = CifsNeedReconnect;
151 spin_unlock(&GlobalMid_Lock);
154 cFYI(1, "Reconnecting tcp session");
156 /* before reconnecting the tcp session, mark the smb session (uid)
157 and the tid bad so they are not used until reconnected */
158 cFYI(1, "%s: marking sessions and tcons for reconnect", __func__);
159 spin_lock(&cifs_tcp_ses_lock);
160 list_for_each(tmp, &server->smb_ses_list) {
161 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
162 ses->need_reconnect = true;
164 list_for_each(tmp2, &ses->tcon_list) {
165 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
166 tcon->need_reconnect = true;
169 spin_unlock(&cifs_tcp_ses_lock);
171 /* do not want to be sending data on a socket we are freeing */
172 cFYI(1, "%s: tearing down socket", __func__);
173 mutex_lock(&server->srv_mutex);
174 if (server->ssocket) {
175 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
176 server->ssocket->flags);
177 kernel_sock_shutdown(server->ssocket, SHUT_WR);
178 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
179 server->ssocket->state,
180 server->ssocket->flags);
181 sock_release(server->ssocket);
182 server->ssocket = NULL;
184 server->sequence_number = 0;
185 server->session_estab = false;
186 kfree(server->session_key.response);
187 server->session_key.response = NULL;
188 server->session_key.len = 0;
189 server->lstrp = jiffies;
190 mutex_unlock(&server->srv_mutex);
192 /* mark submitted MIDs for retry and issue callback */
193 cFYI(1, "%s: issuing mid callbacks", __func__);
194 spin_lock(&GlobalMid_Lock);
195 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
196 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
197 if (mid_entry->midState == MID_REQUEST_SUBMITTED)
198 mid_entry->midState = MID_RETRY_NEEDED;
199 list_del_init(&mid_entry->qhead);
200 mid_entry->callback(mid_entry);
202 spin_unlock(&GlobalMid_Lock);
204 while ((server->tcpStatus != CifsExiting) &&
205 (server->tcpStatus != CifsGood)) {
208 /* we should try only the port we connected to before */
209 rc = generic_ip_connect(server);
211 cFYI(1, "reconnect error %d", rc);
214 atomic_inc(&tcpSesReconnectCount);
215 spin_lock(&GlobalMid_Lock);
216 if (server->tcpStatus != CifsExiting)
217 server->tcpStatus = CifsGood;
218 spin_unlock(&GlobalMid_Lock);
227 0 not a transact2, or all data present
228 >0 transact2 with that much data missing
229 -EINVAL = invalid transact2
232 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
234 struct smb_t2_rsp *pSMBt;
236 int data_in_this_rsp;
239 if (pSMB->Command != SMB_COM_TRANSACTION2)
242 /* check for plausible wct, bcc and t2 data and parm sizes */
243 /* check for parm and data offset going beyond end of smb */
244 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
245 cFYI(1, "invalid transact2 word count");
249 pSMBt = (struct smb_t2_rsp *)pSMB;
251 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
252 data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
254 remaining = total_data_size - data_in_this_rsp;
258 else if (remaining < 0) {
259 cFYI(1, "total data %d smaller than data in frame %d",
260 total_data_size, data_in_this_rsp);
263 cFYI(1, "missing %d bytes from transact2, check next response",
265 if (total_data_size > maxBufSize) {
266 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
267 total_data_size, maxBufSize);
274 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
276 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
277 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
282 char *data_area_of_target;
283 char *data_area_of_buf2;
286 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
288 if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
289 cFYI(1, "total data size of primary and secondary t2 differ");
292 total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
294 remaining = total_data_size - total_in_buf;
299 if (remaining == 0) /* nothing to do, ignore */
302 total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
303 if (remaining < total_in_buf2) {
304 cFYI(1, "transact2 2nd response contains too much data");
307 /* find end of first SMB data area */
308 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
309 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
310 /* validate target area */
312 data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
313 le16_to_cpu(pSMB2->t2_rsp.DataOffset);
315 data_area_of_target += total_in_buf;
317 /* copy second buffer into end of first buffer */
318 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
319 total_in_buf += total_in_buf2;
320 pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
321 byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
322 byte_count += total_in_buf2;
323 BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
325 byte_count = pTargetSMB->smb_buf_length;
326 byte_count += total_in_buf2;
328 /* BB also add check that we are not beyond maximum buffer size */
330 pTargetSMB->smb_buf_length = byte_count;
332 if (remaining == total_in_buf2) {
333 cFYI(1, "found the last secondary response");
334 return 0; /* we are done */
335 } else /* more responses to go */
341 cifs_echo_request(struct work_struct *work)
344 struct TCP_Server_Info *server = container_of(work,
345 struct TCP_Server_Info, echo.work);
347 /* no need to ping if we got a response recently */
348 if (time_before(jiffies, server->lstrp + SMB_ECHO_INTERVAL - HZ))
351 rc = CIFSSMBEcho(server);
353 cFYI(1, "Unable to send echo request to server: %s",
357 queue_delayed_work(system_nrt_wq, &server->echo, SMB_ECHO_INTERVAL);
361 cifs_demultiplex_thread(struct TCP_Server_Info *server)
364 unsigned int pdu_length, total_read;
365 struct smb_hdr *smb_buffer = NULL;
366 struct smb_hdr *bigbuf = NULL;
367 struct smb_hdr *smallbuf = NULL;
368 struct msghdr smb_msg;
370 struct socket *csocket = server->ssocket;
371 struct list_head *tmp, *tmp2;
372 struct task_struct *task_to_wake = NULL;
373 struct mid_q_entry *mid_entry;
375 bool isLargeBuf = false;
379 current->flags |= PF_MEMALLOC;
380 cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
382 length = atomic_inc_return(&tcpSesAllocCount);
384 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
388 while (server->tcpStatus != CifsExiting) {
391 if (bigbuf == NULL) {
392 bigbuf = cifs_buf_get();
394 cERROR(1, "No memory for large SMB response");
396 /* retry will check if exiting */
399 } else if (isLargeBuf) {
400 /* we are reusing a dirty large buf, clear its start */
401 memset(bigbuf, 0, sizeof(struct smb_hdr));
404 if (smallbuf == NULL) {
405 smallbuf = cifs_small_buf_get();
407 cERROR(1, "No memory for SMB response");
409 /* retry will check if exiting */
412 /* beginning of smb buffer is cleared in our buf_get */
413 } else /* if existing small buf clear beginning */
414 memset(smallbuf, 0, sizeof(struct smb_hdr));
418 smb_buffer = smallbuf;
419 iov.iov_base = smb_buffer;
421 smb_msg.msg_control = NULL;
422 smb_msg.msg_controllen = 0;
423 pdu_length = 4; /* enough to get RFC1001 header */
426 if (echo_retries > 0 &&
427 time_after(jiffies, server->lstrp +
428 (echo_retries * SMB_ECHO_INTERVAL))) {
429 cERROR(1, "Server %s has not responded in %d seconds. "
430 "Reconnecting...", server->hostname,
431 (echo_retries * SMB_ECHO_INTERVAL / HZ));
432 cifs_reconnect(server);
433 csocket = server->ssocket;
434 wake_up(&server->response_q);
439 kernel_recvmsg(csocket, &smb_msg,
440 &iov, 1, pdu_length, 0 /* BB other flags? */);
442 if (server->tcpStatus == CifsExiting) {
444 } else if (server->tcpStatus == CifsNeedReconnect) {
445 cFYI(1, "Reconnect after server stopped responding");
446 cifs_reconnect(server);
447 cFYI(1, "call to reconnect done");
448 csocket = server->ssocket;
450 } else if (length == -ERESTARTSYS ||
453 msleep(1); /* minimum sleep to prevent looping
454 allowing socket to clear and app threads to set
455 tcpStatus CifsNeedReconnect if server hung */
456 if (pdu_length < 4) {
457 iov.iov_base = (4 - pdu_length) +
459 iov.iov_len = pdu_length;
460 smb_msg.msg_control = NULL;
461 smb_msg.msg_controllen = 0;
465 } else if (length <= 0) {
466 cFYI(1, "Reconnect after unexpected peek error %d",
468 cifs_reconnect(server);
469 csocket = server->ssocket;
470 wake_up(&server->response_q);
472 } else if (length < pdu_length) {
473 cFYI(1, "requested %d bytes but only got %d bytes",
475 pdu_length -= length;
480 /* The right amount was read from socket - 4 bytes */
481 /* so we can now interpret the length field */
483 /* the first byte big endian of the length field,
484 is actually not part of the length but the type
485 with the most common, zero, as regular data */
486 temp = *((char *) smb_buffer);
488 /* Note that FC 1001 length is big endian on the wire,
489 but we convert it here so it is always manipulated
490 as host byte order */
491 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
492 smb_buffer->smb_buf_length = pdu_length;
494 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
496 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
498 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
499 cFYI(1, "Good RFC 1002 session rsp");
501 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
502 /* we get this from Windows 98 instead of
503 an error on SMB negprot response */
504 cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
506 /* give server a second to clean up */
508 /* always try 445 first on reconnect since we get NACK
509 * on some if we ever connected to port 139 (the NACK
510 * is since we do not begin with RFC1001 session
513 cifs_set_port((struct sockaddr *)
514 &server->dstaddr, CIFS_PORT);
515 cifs_reconnect(server);
516 csocket = server->ssocket;
517 wake_up(&server->response_q);
519 } else if (temp != (char) 0) {
520 cERROR(1, "Unknown RFC 1002 frame");
521 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
523 cifs_reconnect(server);
524 csocket = server->ssocket;
528 /* else we have an SMB response */
529 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
530 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
531 cERROR(1, "Invalid size SMB length %d pdu_length %d",
532 length, pdu_length+4);
533 cifs_reconnect(server);
534 csocket = server->ssocket;
535 wake_up(&server->response_q);
542 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
544 memcpy(bigbuf, smallbuf, 4);
548 iov.iov_base = 4 + (char *)smb_buffer;
549 iov.iov_len = pdu_length;
550 for (total_read = 0; total_read < pdu_length;
551 total_read += length) {
552 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
553 pdu_length - total_read, 0);
554 if (server->tcpStatus == CifsExiting) {
558 } else if (server->tcpStatus == CifsNeedReconnect) {
559 cifs_reconnect(server);
560 csocket = server->ssocket;
561 /* Reconnect wakes up rspns q */
562 /* Now we will reread sock */
565 } else if (length == -ERESTARTSYS ||
568 msleep(1); /* minimum sleep to prevent looping,
569 allowing socket to clear and app
570 threads to set tcpStatus
571 CifsNeedReconnect if server hung*/
574 } else if (length <= 0) {
575 cERROR(1, "Received no data, expecting %d",
576 pdu_length - total_read);
577 cifs_reconnect(server);
578 csocket = server->ssocket;
585 else if (reconnect == 1)
588 length += 4; /* account for rfc1002 hdr */
591 dump_smb(smb_buffer, length);
592 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
593 cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
598 server->lstrp = jiffies;
600 spin_lock(&GlobalMid_Lock);
601 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
602 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
604 if ((mid_entry->mid == smb_buffer->Mid) &&
605 (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
606 (mid_entry->command == smb_buffer->Command)) {
607 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
608 /* We have a multipart transact2 resp */
610 if (mid_entry->resp_buf) {
611 /* merge response - fix up 1st*/
612 if (coalesce_t2(smb_buffer,
613 mid_entry->resp_buf)) {
614 mid_entry->multiRsp =
618 /* all parts received */
619 mid_entry->multiEnd =
625 cERROR(1, "1st trans2 resp needs bigbuf");
626 /* BB maybe we can fix this up, switch
627 to already allocated large buffer? */
629 /* Have first buffer */
630 mid_entry->resp_buf =
632 mid_entry->largeBuf =
639 mid_entry->resp_buf = smb_buffer;
640 mid_entry->largeBuf = isLargeBuf;
642 mid_entry->midState = MID_RESPONSE_RECEIVED;
643 list_del_init(&mid_entry->qhead);
644 mid_entry->callback(mid_entry);
645 #ifdef CONFIG_CIFS_STATS2
646 mid_entry->when_received = jiffies;
652 spin_unlock(&GlobalMid_Lock);
654 if (mid_entry != NULL) {
655 /* Was previous buf put in mpx struct for multi-rsp? */
657 /* smb buffer will be freed by user thread */
663 } else if (!is_valid_oplock_break(smb_buffer, server) &&
665 cERROR(1, "No task to wake, unknown frame received! "
666 "NumMids %d", atomic_read(&midCount));
667 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
668 sizeof(struct smb_hdr));
669 #ifdef CONFIG_CIFS_DEBUG2
670 cifs_dump_detail(smb_buffer);
671 cifs_dump_mids(server);
672 #endif /* CIFS_DEBUG2 */
675 } /* end while !EXITING */
677 /* take it off the list, if it's not already */
678 spin_lock(&cifs_tcp_ses_lock);
679 list_del_init(&server->tcp_ses_list);
680 spin_unlock(&cifs_tcp_ses_lock);
682 spin_lock(&GlobalMid_Lock);
683 server->tcpStatus = CifsExiting;
684 spin_unlock(&GlobalMid_Lock);
685 wake_up_all(&server->response_q);
687 /* check if we have blocked requests that need to free */
688 /* Note that cifs_max_pending is normally 50, but
689 can be set at module install time to as little as two */
690 spin_lock(&GlobalMid_Lock);
691 if (atomic_read(&server->inFlight) >= cifs_max_pending)
692 atomic_set(&server->inFlight, cifs_max_pending - 1);
693 /* We do not want to set the max_pending too low or we
694 could end up with the counter going negative */
695 spin_unlock(&GlobalMid_Lock);
696 /* Although there should not be any requests blocked on
697 this queue it can not hurt to be paranoid and try to wake up requests
698 that may haven been blocked when more than 50 at time were on the wire
699 to the same server - they now will see the session is in exit state
700 and get out of SendReceive. */
701 wake_up_all(&server->request_q);
702 /* give those requests time to exit */
705 if (server->ssocket) {
706 sock_release(csocket);
707 server->ssocket = NULL;
709 /* buffer usuallly freed in free_mid - need to free it here on exit */
710 cifs_buf_release(bigbuf);
711 if (smallbuf) /* no sense logging a debug message if NULL */
712 cifs_small_buf_release(smallbuf);
714 if (!list_empty(&server->pending_mid_q)) {
715 spin_lock(&GlobalMid_Lock);
716 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
717 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
718 cFYI(1, "Clearing Mid 0x%x - issuing callback",
720 list_del_init(&mid_entry->qhead);
721 mid_entry->callback(mid_entry);
723 spin_unlock(&GlobalMid_Lock);
724 /* 1/8th of sec is more than enough time for them to exit */
728 if (!list_empty(&server->pending_mid_q)) {
729 /* mpx threads have not exited yet give them
730 at least the smb send timeout time for long ops */
731 /* due to delays on oplock break requests, we need
732 to wait at least 45 seconds before giving up
733 on a request getting a response and going ahead
735 cFYI(1, "Wait for exit from demultiplex thread");
737 /* if threads still have not exited they are probably never
738 coming home not much else we can do but free the memory */
741 kfree(server->hostname);
742 task_to_wake = xchg(&server->tsk, NULL);
745 length = atomic_dec_return(&tcpSesAllocCount);
747 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
750 /* if server->tsk was NULL then wait for a signal before exiting */
752 set_current_state(TASK_INTERRUPTIBLE);
753 while (!signal_pending(current)) {
755 set_current_state(TASK_INTERRUPTIBLE);
757 set_current_state(TASK_RUNNING);
760 module_put_and_exit(0);
763 /* extract the host portion of the UNC string */
765 extract_hostname(const char *unc)
771 /* skip double chars at beginning of string */
772 /* BB: check validity of these bytes? */
775 /* delimiter between hostname and sharename is always '\\' now */
776 delim = strchr(src, '\\');
778 return ERR_PTR(-EINVAL);
781 dst = kmalloc((len + 1), GFP_KERNEL);
783 return ERR_PTR(-ENOMEM);
785 memcpy(dst, src, len);
792 cifs_parse_mount_options(char *options, const char *devname,
797 unsigned int temp_len, i, j;
799 short int override_uid = -1;
800 short int override_gid = -1;
801 bool uid_specified = false;
802 bool gid_specified = false;
803 char *nodename = utsname()->nodename;
809 * does not have to be perfect mapping since field is
810 * informational, only used for servers that do not support
811 * port 445 and it can be overridden at mount time
813 memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
814 for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
815 vol->source_rfc1001_name[i] = toupper(nodename[i]);
817 vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
818 /* null target name indicates to use *SMBSERVR default called name
819 if we end up sending RFC1001 session initialize */
820 vol->target_rfc1001_name[0] = 0;
821 vol->cred_uid = current_uid();
822 vol->linux_uid = current_uid();
823 vol->linux_gid = current_gid();
825 /* default to only allowing write access to owner of the mount */
826 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
828 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
829 /* default is always to request posix paths. */
830 vol->posix_paths = 1;
831 /* default to using server inode numbers where available */
834 vol->actimeo = CIFS_DEF_ACTIMEO;
839 if (strncmp(options, "sep=", 4) == 0) {
840 if (options[4] != 0) {
841 separator[0] = options[4];
844 cFYI(1, "Null separator not allowed");
848 while ((data = strsep(&options, separator)) != NULL) {
851 if ((value = strchr(data, '=')) != NULL)
854 /* Have to parse this before we parse for "user" */
855 if (strnicmp(data, "user_xattr", 10) == 0) {
857 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
859 } else if (strnicmp(data, "user", 4) == 0) {
862 "CIFS: invalid or missing username\n");
863 return 1; /* needs_arg; */
864 } else if (!*value) {
865 /* null user, ie anonymous, authentication */
868 if (strnlen(value, 200) < 200) {
869 vol->username = value;
871 printk(KERN_WARNING "CIFS: username too long\n");
874 } else if (strnicmp(data, "pass", 4) == 0) {
876 vol->password = NULL;
878 } else if (value[0] == 0) {
879 /* check if string begins with double comma
880 since that would mean the password really
881 does start with a comma, and would not
882 indicate an empty string */
883 if (value[1] != separator[0]) {
884 vol->password = NULL;
888 temp_len = strlen(value);
889 /* removed password length check, NTLM passwords
890 can be arbitrarily long */
892 /* if comma in password, the string will be
893 prematurely null terminated. Commas in password are
894 specified across the cifs mount interface by a double
895 comma ie ,, and a comma used as in other cases ie ','
896 as a parameter delimiter/separator is single and due
897 to the strsep above is temporarily zeroed. */
899 /* NB: password legally can have multiple commas and
900 the only illegal character in a password is null */
902 if ((value[temp_len] == 0) &&
903 (value[temp_len+1] == separator[0])) {
905 value[temp_len] = separator[0];
906 temp_len += 2; /* move after second comma */
907 while (value[temp_len] != 0) {
908 if (value[temp_len] == separator[0]) {
909 if (value[temp_len+1] ==
911 /* skip second comma */
914 /* single comma indicating start
921 if (value[temp_len] == 0) {
925 /* point option to start of next parm */
926 options = value + temp_len + 1;
928 /* go from value to value + temp_len condensing
929 double commas to singles. Note that this ends up
930 allocating a few bytes too many, which is ok */
931 vol->password = kzalloc(temp_len, GFP_KERNEL);
932 if (vol->password == NULL) {
933 printk(KERN_WARNING "CIFS: no memory "
937 for (i = 0, j = 0; i < temp_len; i++, j++) {
938 vol->password[j] = value[i];
939 if (value[i] == separator[0]
940 && value[i+1] == separator[0]) {
941 /* skip second comma */
945 vol->password[j] = 0;
947 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
948 if (vol->password == NULL) {
949 printk(KERN_WARNING "CIFS: no memory "
953 strcpy(vol->password, value);
955 } else if (!strnicmp(data, "ip", 2) ||
956 !strnicmp(data, "addr", 4)) {
957 if (!value || !*value) {
959 } else if (strnlen(value, INET6_ADDRSTRLEN) <
963 printk(KERN_WARNING "CIFS: ip address "
967 } else if (strnicmp(data, "sec", 3) == 0) {
968 if (!value || !*value) {
969 cERROR(1, "no security value specified");
971 } else if (strnicmp(value, "krb5i", 5) == 0) {
972 vol->secFlg |= CIFSSEC_MAY_KRB5 |
974 } else if (strnicmp(value, "krb5p", 5) == 0) {
975 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
977 cERROR(1, "Krb5 cifs privacy not supported");
979 } else if (strnicmp(value, "krb5", 4) == 0) {
980 vol->secFlg |= CIFSSEC_MAY_KRB5;
981 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
982 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
984 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
985 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
986 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
987 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
989 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
990 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
991 } else if (strnicmp(value, "ntlmi", 5) == 0) {
992 vol->secFlg |= CIFSSEC_MAY_NTLM |
994 } else if (strnicmp(value, "ntlm", 4) == 0) {
995 /* ntlm is default so can be turned off too */
996 vol->secFlg |= CIFSSEC_MAY_NTLM;
997 } else if (strnicmp(value, "nontlm", 6) == 0) {
998 /* BB is there a better way to do this? */
999 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1000 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1001 } else if (strnicmp(value, "lanman", 6) == 0) {
1002 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1004 } else if (strnicmp(value, "none", 4) == 0) {
1007 cERROR(1, "bad security option: %s", value);
1010 } else if ((strnicmp(data, "unc", 3) == 0)
1011 || (strnicmp(data, "target", 6) == 0)
1012 || (strnicmp(data, "path", 4) == 0)) {
1013 if (!value || !*value) {
1014 printk(KERN_WARNING "CIFS: invalid path to "
1015 "network resource\n");
1016 return 1; /* needs_arg; */
1018 if ((temp_len = strnlen(value, 300)) < 300) {
1019 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1020 if (vol->UNC == NULL)
1022 strcpy(vol->UNC, value);
1023 if (strncmp(vol->UNC, "//", 2) == 0) {
1026 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1028 "CIFS: UNC Path does not begin "
1029 "with // or \\\\ \n");
1033 printk(KERN_WARNING "CIFS: UNC name too long\n");
1036 } else if ((strnicmp(data, "domain", 3) == 0)
1037 || (strnicmp(data, "workgroup", 5) == 0)) {
1038 if (!value || !*value) {
1039 printk(KERN_WARNING "CIFS: invalid domain name\n");
1040 return 1; /* needs_arg; */
1042 /* BB are there cases in which a comma can be valid in
1043 a domain name and need special handling? */
1044 if (strnlen(value, 256) < 256) {
1045 vol->domainname = value;
1046 cFYI(1, "Domain name set");
1048 printk(KERN_WARNING "CIFS: domain name too "
1052 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1053 vol->srcaddr.ss_family = AF_UNSPEC;
1055 if (!value || !*value) {
1056 printk(KERN_WARNING "CIFS: srcaddr value"
1057 " not specified.\n");
1058 return 1; /* needs_arg; */
1060 i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1061 value, strlen(value));
1063 printk(KERN_WARNING "CIFS: Could not parse"
1068 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1069 if (!value || !*value) {
1071 "CIFS: invalid path prefix\n");
1072 return 1; /* needs_argument */
1074 if ((temp_len = strnlen(value, 1024)) < 1024) {
1075 if (value[0] != '/')
1076 temp_len++; /* missing leading slash */
1077 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1078 if (vol->prepath == NULL)
1080 if (value[0] != '/') {
1081 vol->prepath[0] = '/';
1082 strcpy(vol->prepath+1, value);
1084 strcpy(vol->prepath, value);
1085 cFYI(1, "prefix path %s", vol->prepath);
1087 printk(KERN_WARNING "CIFS: prefix too long\n");
1090 } else if (strnicmp(data, "iocharset", 9) == 0) {
1091 if (!value || !*value) {
1092 printk(KERN_WARNING "CIFS: invalid iocharset "
1094 return 1; /* needs_arg; */
1096 if (strnlen(value, 65) < 65) {
1097 if (strnicmp(value, "default", 7))
1098 vol->iocharset = value;
1099 /* if iocharset not set then load_nls_default
1100 is used by caller */
1101 cFYI(1, "iocharset set to %s", value);
1103 printk(KERN_WARNING "CIFS: iocharset name "
1107 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1108 vol->linux_uid = simple_strtoul(value, &value, 0);
1109 uid_specified = true;
1110 } else if (!strnicmp(data, "cruid", 5) && value && *value) {
1111 vol->cred_uid = simple_strtoul(value, &value, 0);
1112 } else if (!strnicmp(data, "forceuid", 8)) {
1114 } else if (!strnicmp(data, "noforceuid", 10)) {
1116 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1117 vol->linux_gid = simple_strtoul(value, &value, 0);
1118 gid_specified = true;
1119 } else if (!strnicmp(data, "forcegid", 8)) {
1121 } else if (!strnicmp(data, "noforcegid", 10)) {
1123 } else if (strnicmp(data, "file_mode", 4) == 0) {
1124 if (value && *value) {
1126 simple_strtoul(value, &value, 0);
1128 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1129 if (value && *value) {
1131 simple_strtoul(value, &value, 0);
1133 } else if (strnicmp(data, "dirmode", 4) == 0) {
1134 if (value && *value) {
1136 simple_strtoul(value, &value, 0);
1138 } else if (strnicmp(data, "port", 4) == 0) {
1139 if (value && *value) {
1141 simple_strtoul(value, &value, 0);
1143 } else if (strnicmp(data, "rsize", 5) == 0) {
1144 if (value && *value) {
1146 simple_strtoul(value, &value, 0);
1148 } else if (strnicmp(data, "wsize", 5) == 0) {
1149 if (value && *value) {
1151 simple_strtoul(value, &value, 0);
1153 } else if (strnicmp(data, "sockopt", 5) == 0) {
1154 if (!value || !*value) {
1155 cERROR(1, "no socket option specified");
1157 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1158 vol->sockopt_tcp_nodelay = 1;
1160 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1161 if (!value || !*value || (*value == ' ')) {
1162 cFYI(1, "invalid (empty) netbiosname");
1164 memset(vol->source_rfc1001_name, 0x20,
1167 * FIXME: are there cases in which a comma can
1168 * be valid in workstation netbios name (and
1169 * need special handling)?
1171 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1172 /* don't ucase netbiosname for user */
1175 vol->source_rfc1001_name[i] = value[i];
1177 /* The string has 16th byte zero still from
1178 set at top of the function */
1179 if (i == RFC1001_NAME_LEN && value[i] != 0)
1180 printk(KERN_WARNING "CIFS: netbiosname"
1181 " longer than 15 truncated.\n");
1183 } else if (strnicmp(data, "servern", 7) == 0) {
1184 /* servernetbiosname specified override *SMBSERVER */
1185 if (!value || !*value || (*value == ' ')) {
1186 cFYI(1, "empty server netbiosname specified");
1188 /* last byte, type, is 0x20 for servr type */
1189 memset(vol->target_rfc1001_name, 0x20,
1190 RFC1001_NAME_LEN_WITH_NULL);
1192 for (i = 0; i < 15; i++) {
1193 /* BB are there cases in which a comma can be
1194 valid in this workstation netbios name
1195 (and need special handling)? */
1197 /* user or mount helper must uppercase
1202 vol->target_rfc1001_name[i] =
1205 /* The string has 16th byte zero still from
1206 set at top of the function */
1207 if (i == RFC1001_NAME_LEN && value[i] != 0)
1208 printk(KERN_WARNING "CIFS: server net"
1209 "biosname longer than 15 truncated.\n");
1211 } else if (strnicmp(data, "actimeo", 7) == 0) {
1212 if (value && *value) {
1213 vol->actimeo = HZ * simple_strtoul(value,
1215 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1216 cERROR(1, "CIFS: attribute cache"
1217 "timeout too large");
1221 } else if (strnicmp(data, "credentials", 4) == 0) {
1223 } else if (strnicmp(data, "version", 3) == 0) {
1225 } else if (strnicmp(data, "guest", 5) == 0) {
1227 } else if (strnicmp(data, "rw", 2) == 0) {
1229 } else if (strnicmp(data, "ro", 2) == 0) {
1231 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1232 vol->noblocksnd = 1;
1233 } else if (strnicmp(data, "noautotune", 10) == 0) {
1234 vol->noautotune = 1;
1235 } else if ((strnicmp(data, "suid", 4) == 0) ||
1236 (strnicmp(data, "nosuid", 6) == 0) ||
1237 (strnicmp(data, "exec", 4) == 0) ||
1238 (strnicmp(data, "noexec", 6) == 0) ||
1239 (strnicmp(data, "nodev", 5) == 0) ||
1240 (strnicmp(data, "noauto", 6) == 0) ||
1241 (strnicmp(data, "dev", 3) == 0)) {
1242 /* The mount tool or mount.cifs helper (if present)
1243 uses these opts to set flags, and the flags are read
1244 by the kernel vfs layer before we get here (ie
1245 before read super) so there is no point trying to
1246 parse these options again and set anything and it
1247 is ok to just ignore them */
1249 } else if (strnicmp(data, "hard", 4) == 0) {
1251 } else if (strnicmp(data, "soft", 4) == 0) {
1253 } else if (strnicmp(data, "perm", 4) == 0) {
1255 } else if (strnicmp(data, "noperm", 6) == 0) {
1257 } else if (strnicmp(data, "mapchars", 8) == 0) {
1259 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1261 } else if (strnicmp(data, "sfu", 3) == 0) {
1263 } else if (strnicmp(data, "nosfu", 5) == 0) {
1265 } else if (strnicmp(data, "nodfs", 5) == 0) {
1267 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1268 vol->posix_paths = 1;
1269 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1270 vol->posix_paths = 0;
1271 } else if (strnicmp(data, "nounix", 6) == 0) {
1272 vol->no_linux_ext = 1;
1273 } else if (strnicmp(data, "nolinux", 7) == 0) {
1274 vol->no_linux_ext = 1;
1275 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1276 (strnicmp(data, "ignorecase", 10) == 0)) {
1278 } else if (strnicmp(data, "mand", 4) == 0) {
1280 } else if (strnicmp(data, "nomand", 6) == 0) {
1282 } else if (strnicmp(data, "_netdev", 7) == 0) {
1284 } else if (strnicmp(data, "brl", 3) == 0) {
1286 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1287 (strnicmp(data, "nolock", 6) == 0)) {
1289 /* turn off mandatory locking in mode
1290 if remote locking is turned off since the
1291 local vfs will do advisory */
1292 if (vol->file_mode ==
1293 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1294 vol->file_mode = S_IALLUGO;
1295 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1296 /* will take the shorter form "forcemand" as well */
1297 /* This mount option will force use of mandatory
1298 (DOS/Windows style) byte range locks, instead of
1299 using posix advisory byte range locks, even if the
1300 Unix extensions are available and posix locks would
1301 be supported otherwise. If Unix extensions are not
1302 negotiated this has no effect since mandatory locks
1303 would be used (mandatory locks is all that those
1304 those servers support) */
1306 } else if (strnicmp(data, "setuids", 7) == 0) {
1308 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1310 } else if (strnicmp(data, "dynperm", 7) == 0) {
1311 vol->dynperm = true;
1312 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1313 vol->dynperm = false;
1314 } else if (strnicmp(data, "nohard", 6) == 0) {
1316 } else if (strnicmp(data, "nosoft", 6) == 0) {
1318 } else if (strnicmp(data, "nointr", 6) == 0) {
1320 } else if (strnicmp(data, "intr", 4) == 0) {
1322 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1323 vol->nostrictsync = 1;
1324 } else if (strnicmp(data, "strictsync", 10) == 0) {
1325 vol->nostrictsync = 0;
1326 } else if (strnicmp(data, "serverino", 7) == 0) {
1327 vol->server_ino = 1;
1328 } else if (strnicmp(data, "noserverino", 9) == 0) {
1329 vol->server_ino = 0;
1330 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1332 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1334 } else if (strnicmp(data, "acl", 3) == 0) {
1335 vol->no_psx_acl = 0;
1336 } else if (strnicmp(data, "noacl", 5) == 0) {
1337 vol->no_psx_acl = 1;
1338 } else if (strnicmp(data, "locallease", 6) == 0) {
1339 vol->local_lease = 1;
1340 } else if (strnicmp(data, "sign", 4) == 0) {
1341 vol->secFlg |= CIFSSEC_MUST_SIGN;
1342 } else if (strnicmp(data, "seal", 4) == 0) {
1343 /* we do not do the following in secFlags because seal
1344 is a per tree connection (mount) not a per socket
1345 or per-smb connection option in the protocol */
1346 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1348 } else if (strnicmp(data, "direct", 6) == 0) {
1350 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1352 } else if (strnicmp(data, "noac", 4) == 0) {
1353 printk(KERN_WARNING "CIFS: Mount option noac not "
1354 "supported. Instead set "
1355 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1356 } else if (strnicmp(data, "fsc", 3) == 0) {
1357 #ifndef CONFIG_CIFS_FSCACHE
1358 cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE"
1359 "kernel config option set");
1363 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1364 vol->mfsymlinks = true;
1365 } else if (strnicmp(data, "multiuser", 8) == 0) {
1366 vol->multiuser = true;
1368 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1371 if (vol->UNC == NULL) {
1372 if (devname == NULL) {
1373 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1377 if ((temp_len = strnlen(devname, 300)) < 300) {
1378 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1379 if (vol->UNC == NULL)
1381 strcpy(vol->UNC, devname);
1382 if (strncmp(vol->UNC, "//", 2) == 0) {
1385 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1386 printk(KERN_WARNING "CIFS: UNC Path does not "
1387 "begin with // or \\\\ \n");
1390 value = strpbrk(vol->UNC+2, "/\\");
1394 printk(KERN_WARNING "CIFS: UNC name too long\n");
1399 if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1400 cERROR(1, "Multiuser mounts currently require krb5 "
1405 if (vol->UNCip == NULL)
1406 vol->UNCip = &vol->UNC[2];
1409 vol->override_uid = override_uid;
1410 else if (override_uid == 1)
1411 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1412 "specified with no uid= option.\n");
1415 vol->override_gid = override_gid;
1416 else if (override_gid == 1)
1417 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1418 "specified with no gid= option.\n");
1423 /** Returns true if srcaddr isn't specified and rhs isn't
1424 * specified, or if srcaddr is specified and
1425 * matches the IP address of the rhs argument.
1428 srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1430 switch (srcaddr->sa_family) {
1432 return (rhs->sa_family == AF_UNSPEC);
1434 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1435 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1436 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1439 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1440 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1441 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1445 return false; /* don't expect to be here */
1450 * If no port is specified in addr structure, we try to match with 445 port
1451 * and if it fails - with 139 ports. It should be called only if address
1452 * families of server and addr are equal.
1455 match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1457 unsigned short int port, *sport;
1459 switch (addr->sa_family) {
1461 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1462 port = ((struct sockaddr_in *) addr)->sin_port;
1465 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1466 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1474 port = htons(CIFS_PORT);
1478 port = htons(RFC1001_PORT);
1481 return port == *sport;
1485 match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1486 struct sockaddr *srcaddr)
1488 switch (addr->sa_family) {
1490 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1491 struct sockaddr_in *srv_addr4 =
1492 (struct sockaddr_in *)&server->dstaddr;
1494 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
1499 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1500 struct sockaddr_in6 *srv_addr6 =
1501 (struct sockaddr_in6 *)&server->dstaddr;
1503 if (!ipv6_addr_equal(&addr6->sin6_addr,
1504 &srv_addr6->sin6_addr))
1506 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
1512 return false; /* don't expect to be here */
1515 if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1522 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1524 unsigned int secFlags;
1526 if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1527 secFlags = vol->secFlg;
1529 secFlags = global_secflags | vol->secFlg;
1531 switch (server->secType) {
1533 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1537 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1541 if (!(secFlags & CIFSSEC_MAY_NTLM))
1545 if (!(secFlags & CIFSSEC_MAY_KRB5))
1549 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1553 /* shouldn't happen */
1557 /* now check if signing mode is acceptible */
1558 if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1559 (server->secMode & SECMODE_SIGN_REQUIRED))
1561 else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1563 (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1569 static struct TCP_Server_Info *
1570 cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1572 struct TCP_Server_Info *server;
1574 spin_lock(&cifs_tcp_ses_lock);
1575 list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
1576 if (!match_address(server, addr,
1577 (struct sockaddr *)&vol->srcaddr))
1580 if (!match_port(server, addr))
1583 if (!match_security(server, vol))
1586 ++server->srv_count;
1587 spin_unlock(&cifs_tcp_ses_lock);
1588 cFYI(1, "Existing tcp session with server found");
1591 spin_unlock(&cifs_tcp_ses_lock);
1596 cifs_put_tcp_session(struct TCP_Server_Info *server)
1598 struct task_struct *task;
1600 spin_lock(&cifs_tcp_ses_lock);
1601 if (--server->srv_count > 0) {
1602 spin_unlock(&cifs_tcp_ses_lock);
1606 list_del_init(&server->tcp_ses_list);
1607 spin_unlock(&cifs_tcp_ses_lock);
1609 cancel_delayed_work_sync(&server->echo);
1611 spin_lock(&GlobalMid_Lock);
1612 server->tcpStatus = CifsExiting;
1613 spin_unlock(&GlobalMid_Lock);
1615 cifs_crypto_shash_release(server);
1616 cifs_fscache_release_client_cookie(server);
1618 kfree(server->session_key.response);
1619 server->session_key.response = NULL;
1620 server->session_key.len = 0;
1622 task = xchg(&server->tsk, NULL);
1624 force_sig(SIGKILL, task);
1627 static struct TCP_Server_Info *
1628 cifs_get_tcp_session(struct smb_vol *volume_info)
1630 struct TCP_Server_Info *tcp_ses = NULL;
1631 struct sockaddr_storage addr;
1632 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1633 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1636 memset(&addr, 0, sizeof(struct sockaddr_storage));
1638 cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
1640 if (volume_info->UNCip && volume_info->UNC) {
1641 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1643 strlen(volume_info->UNCip),
1646 /* we failed translating address */
1650 } else if (volume_info->UNCip) {
1651 /* BB using ip addr as tcp_ses name to connect to the
1653 cERROR(1, "Connecting to DFS root not implemented yet");
1656 } else /* which tcp_sess DFS root would we conect to */ {
1657 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1658 "unc=//192.168.1.100/public) specified");
1663 /* see if we already have a matching tcp_ses */
1664 tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
1668 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1674 rc = cifs_crypto_shash_allocate(tcp_ses);
1676 cERROR(1, "could not setup hash structures rc %d", rc);
1680 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1681 if (IS_ERR(tcp_ses->hostname)) {
1682 rc = PTR_ERR(tcp_ses->hostname);
1683 goto out_err_crypto_release;
1686 tcp_ses->noblocksnd = volume_info->noblocksnd;
1687 tcp_ses->noautotune = volume_info->noautotune;
1688 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1689 atomic_set(&tcp_ses->inFlight, 0);
1690 init_waitqueue_head(&tcp_ses->response_q);
1691 init_waitqueue_head(&tcp_ses->request_q);
1692 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1693 mutex_init(&tcp_ses->srv_mutex);
1694 memcpy(tcp_ses->workstation_RFC1001_name,
1695 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1696 memcpy(tcp_ses->server_RFC1001_name,
1697 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1698 tcp_ses->session_estab = false;
1699 tcp_ses->sequence_number = 0;
1700 tcp_ses->lstrp = jiffies;
1701 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1702 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1703 INIT_DELAYED_WORK(&tcp_ses->echo, cifs_echo_request);
1706 * at this point we are the only ones with the pointer
1707 * to the struct since the kernel thread not created yet
1708 * no need to spinlock this init of tcpStatus or srv_count
1710 tcp_ses->tcpStatus = CifsNew;
1711 memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1712 sizeof(tcp_ses->srcaddr));
1713 ++tcp_ses->srv_count;
1715 if (addr.ss_family == AF_INET6) {
1716 cFYI(1, "attempting ipv6 connect");
1717 /* BB should we allow ipv6 on port 139? */
1718 /* other OS never observed in Wild doing 139 with v6 */
1719 memcpy(&tcp_ses->dstaddr, sin_server6,
1720 sizeof(struct sockaddr_in6));
1722 memcpy(&tcp_ses->dstaddr, sin_server,
1723 sizeof(struct sockaddr_in));
1725 rc = ip_connect(tcp_ses);
1727 cERROR(1, "Error connecting to socket. Aborting operation");
1728 goto out_err_crypto_release;
1732 * since we're in a cifs function already, we know that
1733 * this will succeed. No need for try_module_get().
1735 __module_get(THIS_MODULE);
1736 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1738 if (IS_ERR(tcp_ses->tsk)) {
1739 rc = PTR_ERR(tcp_ses->tsk);
1740 cERROR(1, "error %d create cifsd thread", rc);
1741 module_put(THIS_MODULE);
1742 goto out_err_crypto_release;
1745 /* thread spawned, put it on the list */
1746 spin_lock(&cifs_tcp_ses_lock);
1747 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1748 spin_unlock(&cifs_tcp_ses_lock);
1750 cifs_fscache_get_client_cookie(tcp_ses);
1752 /* queue echo request delayed work */
1753 queue_delayed_work(system_nrt_wq, &tcp_ses->echo, SMB_ECHO_INTERVAL);
1757 out_err_crypto_release:
1758 cifs_crypto_shash_release(tcp_ses);
1762 if (!IS_ERR(tcp_ses->hostname))
1763 kfree(tcp_ses->hostname);
1764 if (tcp_ses->ssocket)
1765 sock_release(tcp_ses->ssocket);
1771 static struct cifsSesInfo *
1772 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1774 struct cifsSesInfo *ses;
1776 spin_lock(&cifs_tcp_ses_lock);
1777 list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
1778 switch (server->secType) {
1780 if (vol->cred_uid != ses->cred_uid)
1784 /* anything else takes username/password */
1785 if (strncmp(ses->userName, vol->username,
1788 if (strlen(vol->username) != 0 &&
1789 ses->password != NULL &&
1790 strncmp(ses->password,
1791 vol->password ? vol->password : "",
1796 spin_unlock(&cifs_tcp_ses_lock);
1799 spin_unlock(&cifs_tcp_ses_lock);
1804 cifs_put_smb_ses(struct cifsSesInfo *ses)
1807 struct TCP_Server_Info *server = ses->server;
1809 cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
1810 spin_lock(&cifs_tcp_ses_lock);
1811 if (--ses->ses_count > 0) {
1812 spin_unlock(&cifs_tcp_ses_lock);
1816 list_del_init(&ses->smb_ses_list);
1817 spin_unlock(&cifs_tcp_ses_lock);
1819 if (ses->status == CifsGood) {
1821 CIFSSMBLogoff(xid, ses);
1825 cifs_put_tcp_session(server);
1828 static struct cifsSesInfo *
1829 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1831 int rc = -ENOMEM, xid;
1832 struct cifsSesInfo *ses;
1833 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1834 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
1838 ses = cifs_find_smb_ses(server, volume_info);
1840 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1842 mutex_lock(&ses->session_mutex);
1843 rc = cifs_negotiate_protocol(xid, ses);
1845 mutex_unlock(&ses->session_mutex);
1846 /* problem -- put our ses reference */
1847 cifs_put_smb_ses(ses);
1851 if (ses->need_reconnect) {
1852 cFYI(1, "Session needs reconnect");
1853 rc = cifs_setup_session(xid, ses,
1854 volume_info->local_nls);
1856 mutex_unlock(&ses->session_mutex);
1857 /* problem -- put our reference */
1858 cifs_put_smb_ses(ses);
1863 mutex_unlock(&ses->session_mutex);
1865 /* existing SMB ses has a server reference already */
1866 cifs_put_tcp_session(server);
1871 cFYI(1, "Existing smb sess not found");
1872 ses = sesInfoAlloc();
1876 /* new SMB session uses our server ref */
1877 ses->server = server;
1878 if (server->dstaddr.ss_family == AF_INET6)
1879 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
1881 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
1883 if (volume_info->username)
1884 strncpy(ses->userName, volume_info->username,
1887 /* volume_info->password freed at unmount */
1888 if (volume_info->password) {
1889 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
1893 if (volume_info->domainname) {
1894 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
1895 if (!ses->domainName)
1898 ses->cred_uid = volume_info->cred_uid;
1899 ses->linux_uid = volume_info->linux_uid;
1900 ses->overrideSecFlg = volume_info->secFlg;
1902 mutex_lock(&ses->session_mutex);
1903 rc = cifs_negotiate_protocol(xid, ses);
1905 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
1906 mutex_unlock(&ses->session_mutex);
1910 /* success, put it on the list */
1911 spin_lock(&cifs_tcp_ses_lock);
1912 list_add(&ses->smb_ses_list, &server->smb_ses_list);
1913 spin_unlock(&cifs_tcp_ses_lock);
1924 static struct cifsTconInfo *
1925 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1927 struct list_head *tmp;
1928 struct cifsTconInfo *tcon;
1930 spin_lock(&cifs_tcp_ses_lock);
1931 list_for_each(tmp, &ses->tcon_list) {
1932 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1933 if (tcon->tidStatus == CifsExiting)
1935 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1939 spin_unlock(&cifs_tcp_ses_lock);
1942 spin_unlock(&cifs_tcp_ses_lock);
1947 cifs_put_tcon(struct cifsTconInfo *tcon)
1950 struct cifsSesInfo *ses = tcon->ses;
1952 cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
1953 spin_lock(&cifs_tcp_ses_lock);
1954 if (--tcon->tc_count > 0) {
1955 spin_unlock(&cifs_tcp_ses_lock);
1959 list_del_init(&tcon->tcon_list);
1960 spin_unlock(&cifs_tcp_ses_lock);
1963 CIFSSMBTDis(xid, tcon);
1966 cifs_fscache_release_super_cookie(tcon);
1968 cifs_put_smb_ses(ses);
1971 static struct cifsTconInfo *
1972 cifs_get_tcon(struct cifsSesInfo *ses, struct smb_vol *volume_info)
1975 struct cifsTconInfo *tcon;
1977 tcon = cifs_find_tcon(ses, volume_info->UNC);
1979 cFYI(1, "Found match on UNC path");
1980 /* existing tcon already has a reference */
1981 cifs_put_smb_ses(ses);
1982 if (tcon->seal != volume_info->seal)
1983 cERROR(1, "transport encryption setting "
1984 "conflicts with existing tid");
1988 tcon = tconInfoAlloc();
1995 if (volume_info->password) {
1996 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
1997 if (!tcon->password) {
2003 if (strchr(volume_info->UNC + 3, '\\') == NULL
2004 && strchr(volume_info->UNC + 3, '/') == NULL) {
2005 cERROR(1, "Missing share name");
2010 /* BB Do we need to wrap session_mutex around
2011 * this TCon call and Unix SetFS as
2012 * we do on SessSetup and reconnect? */
2014 rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
2016 cFYI(1, "CIFS Tcon rc = %d", rc);
2020 if (volume_info->nodfs) {
2021 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2022 cFYI(1, "DFS disabled (%d)", tcon->Flags);
2024 tcon->seal = volume_info->seal;
2025 /* we can have only one retry value for a connection
2026 to a share so for resources mounted more than once
2027 to the same server share the last value passed in
2028 for the retry flag is used */
2029 tcon->retry = volume_info->retry;
2030 tcon->nocase = volume_info->nocase;
2031 tcon->local_lease = volume_info->local_lease;
2033 spin_lock(&cifs_tcp_ses_lock);
2034 list_add(&tcon->tcon_list, &ses->tcon_list);
2035 spin_unlock(&cifs_tcp_ses_lock);
2037 cifs_fscache_get_super_cookie(tcon);
2047 cifs_put_tlink(struct tcon_link *tlink)
2049 if (!tlink || IS_ERR(tlink))
2052 if (!atomic_dec_and_test(&tlink->tl_count) ||
2053 test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2054 tlink->tl_time = jiffies;
2058 if (!IS_ERR(tlink_tcon(tlink)))
2059 cifs_put_tcon(tlink_tcon(tlink));
2065 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
2066 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
2067 struct dfs_info3_param **preferrals, int remap)
2072 *pnum_referrals = 0;
2075 if (pSesInfo->ipc_tid == 0) {
2076 temp_unc = kmalloc(2 /* for slashes */ +
2077 strnlen(pSesInfo->serverName,
2078 SERVER_NAME_LEN_WITH_NULL * 2)
2079 + 1 + 4 /* slash IPC$ */ + 2,
2081 if (temp_unc == NULL)
2085 strcpy(temp_unc + 2, pSesInfo->serverName);
2086 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2087 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
2088 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
2092 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
2093 pnum_referrals, nls_codepage, remap);
2094 /* BB map targetUNCs to dfs_info3 structures, here or
2095 in CIFSGetDFSRefer BB */
2100 #ifdef CONFIG_DEBUG_LOCK_ALLOC
2101 static struct lock_class_key cifs_key[2];
2102 static struct lock_class_key cifs_slock_key[2];
2105 cifs_reclassify_socket4(struct socket *sock)
2107 struct sock *sk = sock->sk;
2108 BUG_ON(sock_owned_by_user(sk));
2109 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2110 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2114 cifs_reclassify_socket6(struct socket *sock)
2116 struct sock *sk = sock->sk;
2117 BUG_ON(sock_owned_by_user(sk));
2118 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2119 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2123 cifs_reclassify_socket4(struct socket *sock)
2128 cifs_reclassify_socket6(struct socket *sock)
2133 /* See RFC1001 section 14 on representation of Netbios names */
2134 static void rfc1002mangle(char *target, char *source, unsigned int length)
2138 for (i = 0, j = 0; i < (length); i++) {
2139 /* mask a nibble at a time and encode */
2140 target[j] = 'A' + (0x0F & (source[i] >> 4));
2141 target[j+1] = 'A' + (0x0F & source[i]);
2148 bind_socket(struct TCP_Server_Info *server)
2151 if (server->srcaddr.ss_family != AF_UNSPEC) {
2152 /* Bind to the specified local IP address */
2153 struct socket *socket = server->ssocket;
2154 rc = socket->ops->bind(socket,
2155 (struct sockaddr *) &server->srcaddr,
2156 sizeof(server->srcaddr));
2158 struct sockaddr_in *saddr4;
2159 struct sockaddr_in6 *saddr6;
2160 saddr4 = (struct sockaddr_in *)&server->srcaddr;
2161 saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2162 if (saddr6->sin6_family == AF_INET6)
2164 "Failed to bind to: %pI6c, error: %d\n",
2165 &saddr6->sin6_addr, rc);
2168 "Failed to bind to: %pI4, error: %d\n",
2169 &saddr4->sin_addr.s_addr, rc);
2176 ip_rfc1001_connect(struct TCP_Server_Info *server)
2180 * some servers require RFC1001 sessinit before sending
2181 * negprot - BB check reconnection in case where second
2182 * sessinit is sent but no second negprot
2184 struct rfc1002_session_packet *ses_init_buf;
2185 struct smb_hdr *smb_buf;
2186 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2189 ses_init_buf->trailer.session_req.called_len = 32;
2191 if (server->server_RFC1001_name &&
2192 server->server_RFC1001_name[0] != 0)
2193 rfc1002mangle(ses_init_buf->trailer.
2194 session_req.called_name,
2195 server->server_RFC1001_name,
2196 RFC1001_NAME_LEN_WITH_NULL);
2198 rfc1002mangle(ses_init_buf->trailer.
2199 session_req.called_name,
2200 DEFAULT_CIFS_CALLED_NAME,
2201 RFC1001_NAME_LEN_WITH_NULL);
2203 ses_init_buf->trailer.session_req.calling_len = 32;
2206 * calling name ends in null (byte 16) from old smb
2209 if (server->workstation_RFC1001_name &&
2210 server->workstation_RFC1001_name[0] != 0)
2211 rfc1002mangle(ses_init_buf->trailer.
2212 session_req.calling_name,
2213 server->workstation_RFC1001_name,
2214 RFC1001_NAME_LEN_WITH_NULL);
2216 rfc1002mangle(ses_init_buf->trailer.
2217 session_req.calling_name,
2219 RFC1001_NAME_LEN_WITH_NULL);
2221 ses_init_buf->trailer.session_req.scope1 = 0;
2222 ses_init_buf->trailer.session_req.scope2 = 0;
2223 smb_buf = (struct smb_hdr *)ses_init_buf;
2225 /* sizeof RFC1002_SESSION_REQUEST with no scope */
2226 smb_buf->smb_buf_length = 0x81000044;
2227 rc = smb_send(server, smb_buf, 0x44);
2228 kfree(ses_init_buf);
2230 * RFC1001 layer in at least one server
2231 * requires very short break before negprot
2232 * presumably because not expecting negprot
2233 * to follow so fast. This is a simple
2234 * solution that works without
2235 * complicating the code and causes no
2236 * significant slowing down on mount
2239 usleep_range(1000, 2000);
2242 * else the negprot may still work without this
2243 * even though malloc failed
2250 generic_ip_connect(struct TCP_Server_Info *server)
2253 unsigned short int sport;
2255 struct socket *socket = server->ssocket;
2256 struct sockaddr *saddr;
2258 saddr = (struct sockaddr *) &server->dstaddr;
2260 if (server->dstaddr.ss_family == AF_INET6) {
2261 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
2262 slen = sizeof(struct sockaddr_in6);
2265 sport = ((struct sockaddr_in *) saddr)->sin_port;
2266 slen = sizeof(struct sockaddr_in);
2270 if (socket == NULL) {
2271 rc = sock_create_kern(sfamily, SOCK_STREAM,
2272 IPPROTO_TCP, &socket);
2274 cERROR(1, "Error %d creating socket", rc);
2275 server->ssocket = NULL;
2279 /* BB other socket options to set KEEPALIVE, NODELAY? */
2280 cFYI(1, "Socket created");
2281 server->ssocket = socket;
2282 socket->sk->sk_allocation = GFP_NOFS;
2283 if (sfamily == AF_INET6)
2284 cifs_reclassify_socket6(socket);
2286 cifs_reclassify_socket4(socket);
2289 rc = bind_socket(server);
2293 rc = socket->ops->connect(socket, saddr, slen, 0);
2295 cFYI(1, "Error %d connecting to server", rc);
2296 sock_release(socket);
2297 server->ssocket = NULL;
2302 * Eventually check for other socket options to change from
2303 * the default. sock_setsockopt not used because it expects
2306 socket->sk->sk_rcvtimeo = 7 * HZ;
2307 socket->sk->sk_sndtimeo = 5 * HZ;
2309 /* make the bufsizes depend on wsize/rsize and max requests */
2310 if (server->noautotune) {
2311 if (socket->sk->sk_sndbuf < (200 * 1024))
2312 socket->sk->sk_sndbuf = 200 * 1024;
2313 if (socket->sk->sk_rcvbuf < (140 * 1024))
2314 socket->sk->sk_rcvbuf = 140 * 1024;
2317 if (server->tcp_nodelay) {
2319 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2320 (char *)&val, sizeof(val));
2322 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2325 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
2326 socket->sk->sk_sndbuf,
2327 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
2329 if (sport == htons(RFC1001_PORT))
2330 rc = ip_rfc1001_connect(server);
2336 ip_connect(struct TCP_Server_Info *server)
2338 unsigned short int *sport;
2339 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2340 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
2342 if (server->dstaddr.ss_family == AF_INET6)
2343 sport = &addr6->sin6_port;
2345 sport = &addr->sin_port;
2350 /* try with 445 port at first */
2351 *sport = htons(CIFS_PORT);
2353 rc = generic_ip_connect(server);
2357 /* if it failed, try with 139 port */
2358 *sport = htons(RFC1001_PORT);
2361 return generic_ip_connect(server);
2364 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
2365 struct super_block *sb, struct smb_vol *vol_info)
2367 /* if we are reconnecting then should we check to see if
2368 * any requested capabilities changed locally e.g. via
2369 * remount but we can not do much about it here
2370 * if they have (even if we could detect it by the following)
2371 * Perhaps we could add a backpointer to array of sb from tcon
2372 * or if we change to make all sb to same share the same
2373 * sb as NFS - then we only have one backpointer to sb.
2374 * What if we wanted to mount the server share twice once with
2375 * and once without posixacls or posix paths? */
2376 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2378 if (vol_info && vol_info->no_linux_ext) {
2379 tcon->fsUnixInfo.Capability = 0;
2380 tcon->unix_ext = 0; /* Unix Extensions disabled */
2381 cFYI(1, "Linux protocol extensions disabled");
2383 } else if (vol_info)
2384 tcon->unix_ext = 1; /* Unix Extensions supported */
2386 if (tcon->unix_ext == 0) {
2387 cFYI(1, "Unix extensions disabled so not set on reconnect");
2391 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2392 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2394 /* check for reconnect case in which we do not
2395 want to change the mount behavior if we can avoid it */
2396 if (vol_info == NULL) {
2397 /* turn off POSIX ACL and PATHNAMES if not set
2398 originally at mount time */
2399 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2400 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2401 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2402 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2403 cERROR(1, "POSIXPATH support change");
2404 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2405 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2406 cERROR(1, "possible reconnect error");
2407 cERROR(1, "server disabled POSIX path support");
2411 cap &= CIFS_UNIX_CAP_MASK;
2412 if (vol_info && vol_info->no_psx_acl)
2413 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2414 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2415 cFYI(1, "negotiated posix acl support");
2417 sb->s_flags |= MS_POSIXACL;
2420 if (vol_info && vol_info->posix_paths == 0)
2421 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2422 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2423 cFYI(1, "negotiate posix pathnames");
2425 CIFS_SB(sb)->mnt_cifs_flags |=
2426 CIFS_MOUNT_POSIX_PATHS;
2429 /* We might be setting the path sep back to a different
2430 form if we are reconnecting and the server switched its
2431 posix path capability for this share */
2432 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2433 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2435 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2436 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2437 CIFS_SB(sb)->rsize = 127 * 1024;
2438 cFYI(DBG2, "larger reads not supported by srv");
2443 cFYI(1, "Negotiate caps 0x%x", (int)cap);
2444 #ifdef CONFIG_CIFS_DEBUG2
2445 if (cap & CIFS_UNIX_FCNTL_CAP)
2446 cFYI(1, "FCNTL cap");
2447 if (cap & CIFS_UNIX_EXTATTR_CAP)
2448 cFYI(1, "EXTATTR cap");
2449 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2450 cFYI(1, "POSIX path cap");
2451 if (cap & CIFS_UNIX_XATTR_CAP)
2452 cFYI(1, "XATTR cap");
2453 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2454 cFYI(1, "POSIX ACL cap");
2455 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2456 cFYI(1, "very large read cap");
2457 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2458 cFYI(1, "very large write cap");
2459 #endif /* CIFS_DEBUG2 */
2460 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2461 if (vol_info == NULL) {
2462 cFYI(1, "resetting capabilities failed");
2464 cERROR(1, "Negotiating Unix capabilities "
2465 "with the server failed. Consider "
2466 "mounting with the Unix Extensions\n"
2467 "disabled, if problems are found, "
2468 "by specifying the nounix mount "
2476 convert_delimiter(char *path, char delim)
2489 for (i = 0; path[i] != '\0'; i++) {
2490 if (path[i] == old_delim)
2495 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2496 struct cifs_sb_info *cifs_sb)
2498 INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2500 if (pvolume_info->rsize > CIFSMaxBufSize) {
2501 cERROR(1, "rsize %d too large, using MaxBufSize",
2502 pvolume_info->rsize);
2503 cifs_sb->rsize = CIFSMaxBufSize;
2504 } else if ((pvolume_info->rsize) &&
2505 (pvolume_info->rsize <= CIFSMaxBufSize))
2506 cifs_sb->rsize = pvolume_info->rsize;
2508 cifs_sb->rsize = CIFSMaxBufSize;
2510 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2511 cERROR(1, "wsize %d too large, using 4096 instead",
2512 pvolume_info->wsize);
2513 cifs_sb->wsize = 4096;
2514 } else if (pvolume_info->wsize)
2515 cifs_sb->wsize = pvolume_info->wsize;
2517 cifs_sb->wsize = min_t(const int,
2518 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2520 /* old default of CIFSMaxBufSize was too small now
2521 that SMB Write2 can send multiple pages in kvec.
2522 RFC1001 does not describe what happens when frame
2523 bigger than 128K is sent so use that as max in
2524 conjunction with 52K kvec constraint on arch with 4K
2527 if (cifs_sb->rsize < 2048) {
2528 cifs_sb->rsize = 2048;
2529 /* Windows ME may prefer this */
2530 cFYI(1, "readsize set to minimum: 2048");
2532 /* calculate prepath */
2533 cifs_sb->prepath = pvolume_info->prepath;
2534 if (cifs_sb->prepath) {
2535 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2536 /* we can not convert the / to \ in the path
2537 separators in the prefixpath yet because we do not
2538 know (until reset_cifs_unix_caps is called later)
2539 whether POSIX PATH CAP is available. We normalize
2540 the / to \ after reset_cifs_unix_caps is called */
2541 pvolume_info->prepath = NULL;
2543 cifs_sb->prepathlen = 0;
2544 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2545 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2546 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2547 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2548 cFYI(1, "file mode: 0x%x dir mode: 0x%x",
2549 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
2551 cifs_sb->actimeo = pvolume_info->actimeo;
2553 if (pvolume_info->noperm)
2554 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2555 if (pvolume_info->setuids)
2556 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2557 if (pvolume_info->server_ino)
2558 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2559 if (pvolume_info->remap)
2560 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2561 if (pvolume_info->no_xattr)
2562 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2563 if (pvolume_info->sfu_emul)
2564 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2565 if (pvolume_info->nobrl)
2566 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2567 if (pvolume_info->nostrictsync)
2568 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2569 if (pvolume_info->mand_lock)
2570 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2571 if (pvolume_info->cifs_acl)
2572 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2573 if (pvolume_info->override_uid)
2574 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2575 if (pvolume_info->override_gid)
2576 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2577 if (pvolume_info->dynperm)
2578 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2579 if (pvolume_info->fsc)
2580 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
2581 if (pvolume_info->multiuser)
2582 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2583 CIFS_MOUNT_NO_PERM);
2584 if (pvolume_info->direct_io) {
2585 cFYI(1, "mounting share using direct i/o");
2586 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2588 if (pvolume_info->mfsymlinks) {
2589 if (pvolume_info->sfu_emul) {
2590 cERROR(1, "mount option mfsymlinks ignored if sfu "
2591 "mount option is used");
2593 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2597 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2598 cERROR(1, "mount option dynperm ignored if cifsacl "
2599 "mount option supported");
2603 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2604 struct cifs_sb_info *cifs_sb, const char *full_path)
2607 FILE_ALL_INFO *pfile_info;
2609 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2610 if (pfile_info == NULL)
2613 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2614 0 /* not legacy */, cifs_sb->local_nls,
2615 cifs_sb->mnt_cifs_flags &
2616 CIFS_MOUNT_MAP_SPECIAL_CHR);
2622 cleanup_volume_info(struct smb_vol **pvolume_info)
2624 struct smb_vol *volume_info;
2626 if (!pvolume_info || !*pvolume_info)
2629 volume_info = *pvolume_info;
2630 kzfree(volume_info->password);
2631 kfree(volume_info->UNC);
2632 kfree(volume_info->prepath);
2634 *pvolume_info = NULL;
2638 #ifdef CONFIG_CIFS_DFS_UPCALL
2639 /* build_path_to_root returns full path to root when
2640 * we do not have an exiting connection (tcon) */
2642 build_unc_path_to_root(const struct smb_vol *volume_info,
2643 const struct cifs_sb_info *cifs_sb)
2647 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2648 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2649 if (full_path == NULL)
2650 return ERR_PTR(-ENOMEM);
2652 strncpy(full_path, volume_info->UNC, unc_len);
2653 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2655 for (i = 0; i < unc_len; i++) {
2656 if (full_path[i] == '\\')
2661 if (cifs_sb->prepathlen)
2662 strncpy(full_path + unc_len, cifs_sb->prepath,
2663 cifs_sb->prepathlen);
2665 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2671 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2672 char *mount_data_global, const char *devname)
2676 struct smb_vol *volume_info;
2677 struct cifsSesInfo *pSesInfo;
2678 struct cifsTconInfo *tcon;
2679 struct TCP_Server_Info *srvTcp;
2681 char *mount_data = mount_data_global;
2682 struct tcon_link *tlink;
2683 #ifdef CONFIG_CIFS_DFS_UPCALL
2684 struct dfs_info3_param *referrals = NULL;
2685 unsigned int num_referrals = 0;
2686 int referral_walks_count = 0;
2698 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2704 if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2709 if (volume_info->nullauth) {
2710 cFYI(1, "null user");
2711 volume_info->username = "";
2712 } else if (volume_info->username) {
2713 /* BB fixme parse for domain name here */
2714 cFYI(1, "Username: %s", volume_info->username);
2716 cifserror("No username specified");
2717 /* In userspace mount helper we can get user name from alternate
2718 locations such as env variables and files on disk */
2723 /* this is needed for ASCII cp to Unicode converts */
2724 if (volume_info->iocharset == NULL) {
2725 /* load_nls_default cannot return null */
2726 volume_info->local_nls = load_nls_default();
2728 volume_info->local_nls = load_nls(volume_info->iocharset);
2729 if (volume_info->local_nls == NULL) {
2730 cERROR(1, "CIFS mount error: iocharset %s not found",
2731 volume_info->iocharset);
2736 cifs_sb->local_nls = volume_info->local_nls;
2738 /* get a reference to a tcp session */
2739 srvTcp = cifs_get_tcp_session(volume_info);
2740 if (IS_ERR(srvTcp)) {
2741 rc = PTR_ERR(srvTcp);
2745 /* get a reference to a SMB session */
2746 pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
2747 if (IS_ERR(pSesInfo)) {
2748 rc = PTR_ERR(pSesInfo);
2750 goto mount_fail_check;
2753 setup_cifs_sb(volume_info, cifs_sb);
2754 if (pSesInfo->capabilities & CAP_LARGE_FILES)
2755 sb->s_maxbytes = MAX_LFS_FILESIZE;
2757 sb->s_maxbytes = MAX_NON_LFS;
2759 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2760 sb->s_time_gran = 100;
2762 /* search for existing tcon to this server share */
2763 tcon = cifs_get_tcon(pSesInfo, volume_info);
2767 goto remote_path_check;
2770 /* do not care if following two calls succeed - informational */
2772 CIFSSMBQFSDeviceInfo(xid, tcon);
2773 CIFSSMBQFSAttributeInfo(xid, tcon);
2776 /* tell server which Unix caps we support */
2777 if (tcon->ses->capabilities & CAP_UNIX)
2778 /* reset of caps checks mount to see if unix extensions
2779 disabled for just this mount */
2780 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2782 tcon->unix_ext = 0; /* server does not support them */
2784 /* convert forward to back slashes in prepath here if needed */
2785 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2786 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2788 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2789 cifs_sb->rsize = 1024 * 127;
2790 cFYI(DBG2, "no very large read support, rsize now 127K");
2792 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2793 cifs_sb->wsize = min(cifs_sb->wsize,
2794 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2795 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2796 cifs_sb->rsize = min(cifs_sb->rsize,
2797 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2800 /* check if a whole path (including prepath) is not remote */
2801 if (!rc && cifs_sb->prepathlen && tcon) {
2802 /* build_path_to_root works only when we have a valid tcon */
2803 full_path = cifs_build_path_to_root(cifs_sb, tcon);
2804 if (full_path == NULL) {
2806 goto mount_fail_check;
2808 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2809 if (rc != 0 && rc != -EREMOTE) {
2811 goto mount_fail_check;
2816 /* get referral if needed */
2817 if (rc == -EREMOTE) {
2818 #ifdef CONFIG_CIFS_DFS_UPCALL
2819 if (referral_walks_count > MAX_NESTED_LINKS) {
2821 * BB: when we implement proper loop detection,
2822 * we will remove this check. But now we need it
2823 * to prevent an indefinite loop if 'DFS tree' is
2824 * misconfigured (i.e. has loops).
2827 goto mount_fail_check;
2829 /* convert forward to back slashes in prepath here if needed */
2830 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2831 convert_delimiter(cifs_sb->prepath,
2832 CIFS_DIR_SEP(cifs_sb));
2833 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2834 if (IS_ERR(full_path)) {
2835 rc = PTR_ERR(full_path);
2836 goto mount_fail_check;
2839 cFYI(1, "Getting referral for: %s", full_path);
2840 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2841 cifs_sb->local_nls, &num_referrals, &referrals,
2842 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2843 if (!rc && num_referrals > 0) {
2844 char *fake_devname = NULL;
2846 if (mount_data != mount_data_global)
2849 mount_data = cifs_compose_mount_options(
2850 cifs_sb->mountdata, full_path + 1,
2851 referrals, &fake_devname);
2853 free_dfs_info_array(referrals, num_referrals);
2854 kfree(fake_devname);
2857 if (IS_ERR(mount_data)) {
2858 rc = PTR_ERR(mount_data);
2860 goto mount_fail_check;
2864 cifs_put_tcon(tcon);
2866 cifs_put_smb_ses(pSesInfo);
2868 cleanup_volume_info(&volume_info);
2869 referral_walks_count++;
2871 goto try_mount_again;
2873 #else /* No DFS support, return error on mount */
2879 goto mount_fail_check;
2881 /* now, hang the tcon off of the superblock */
2882 tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
2883 if (tlink == NULL) {
2885 goto mount_fail_check;
2888 tlink->tl_uid = pSesInfo->linux_uid;
2889 tlink->tl_tcon = tcon;
2890 tlink->tl_time = jiffies;
2891 set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
2892 set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
2894 cifs_sb->master_tlink = tlink;
2895 spin_lock(&cifs_sb->tlink_tree_lock);
2896 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
2897 spin_unlock(&cifs_sb->tlink_tree_lock);
2899 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
2903 /* on error free sesinfo and tcon struct if needed */
2905 if (mount_data != mount_data_global)
2907 /* If find_unc succeeded then rc == 0 so we can not end */
2908 /* up accidently freeing someone elses tcon struct */
2910 cifs_put_tcon(tcon);
2912 cifs_put_smb_ses(pSesInfo);
2914 cifs_put_tcp_session(srvTcp);
2918 /* volume_info->password is freed above when existing session found
2919 (in which case it is not needed anymore) but when new sesion is created
2920 the password ptr is put in the new session structure (in which case the
2921 password will be freed at unmount time) */
2923 /* zero out password before freeing */
2924 cleanup_volume_info(&volume_info);
2930 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2931 const char *tree, struct cifsTconInfo *tcon,
2932 const struct nls_table *nls_codepage)
2934 struct smb_hdr *smb_buffer;
2935 struct smb_hdr *smb_buffer_response;
2938 unsigned char *bcc_ptr;
2940 int length, bytes_left;
2946 smb_buffer = cifs_buf_get();
2947 if (smb_buffer == NULL)
2950 smb_buffer_response = smb_buffer;
2952 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2953 NULL /*no tid */ , 4 /*wct */ );
2955 smb_buffer->Mid = GetNextMid(ses->server);
2956 smb_buffer->Uid = ses->Suid;
2957 pSMB = (TCONX_REQ *) smb_buffer;
2958 pSMBr = (TCONX_RSP *) smb_buffer_response;
2960 pSMB->AndXCommand = 0xFF;
2961 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2962 bcc_ptr = &pSMB->Password[0];
2963 if ((ses->server->secMode) & SECMODE_USER) {
2964 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
2965 *bcc_ptr = 0; /* password is null byte */
2966 bcc_ptr++; /* skip password */
2967 /* already aligned so no need to do it below */
2969 pSMB->PasswordLength = cpu_to_le16(CIFS_AUTH_RESP_SIZE);
2970 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2971 specified as required (when that support is added to
2972 the vfs in the future) as only NTLM or the much
2973 weaker LANMAN (which we do not send by default) is accepted
2974 by Samba (not sure whether other servers allow
2975 NTLMv2 password here) */
2976 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2977 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
2978 (ses->server->secType == LANMAN))
2979 calc_lanman_hash(tcon->password, ses->server->cryptkey,
2980 ses->server->secMode &
2981 SECMODE_PW_ENCRYPT ? true : false,
2984 #endif /* CIFS_WEAK_PW_HASH */
2985 SMBNTencrypt(tcon->password, ses->server->cryptkey, bcc_ptr);
2987 bcc_ptr += CIFS_AUTH_RESP_SIZE;
2988 if (ses->capabilities & CAP_UNICODE) {
2989 /* must align unicode strings */
2990 *bcc_ptr = 0; /* null byte password */
2995 if (ses->server->secMode &
2996 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2997 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2999 if (ses->capabilities & CAP_STATUS32) {
3000 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3002 if (ses->capabilities & CAP_DFS) {
3003 smb_buffer->Flags2 |= SMBFLG2_DFS;
3005 if (ses->capabilities & CAP_UNICODE) {
3006 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3008 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
3009 6 /* max utf8 char length in bytes */ *
3010 (/* server len*/ + 256 /* share len */), nls_codepage);
3011 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
3012 bcc_ptr += 2; /* skip trailing null */
3013 } else { /* ASCII */
3014 strcpy(bcc_ptr, tree);
3015 bcc_ptr += strlen(tree) + 1;
3017 strcpy(bcc_ptr, "?????");
3018 bcc_ptr += strlen("?????");
3020 count = bcc_ptr - &pSMB->Password[0];
3021 pSMB->hdr.smb_buf_length += count;
3022 pSMB->ByteCount = cpu_to_le16(count);
3024 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
3027 /* above now done in SendReceive */
3028 if ((rc == 0) && (tcon != NULL)) {
3031 tcon->tidStatus = CifsGood;
3032 tcon->need_reconnect = false;
3033 tcon->tid = smb_buffer_response->Tid;
3034 bcc_ptr = pByteArea(smb_buffer_response);
3035 bytes_left = BCC(smb_buffer_response);
3036 length = strnlen(bcc_ptr, bytes_left - 2);
3037 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3043 /* skip service field (NB: this field is always ASCII) */
3045 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3046 (bcc_ptr[2] == 'C')) {
3047 cFYI(1, "IPC connection");
3050 } else if (length == 2) {
3051 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3052 /* the most common case */
3053 cFYI(1, "disk share connection");
3056 bcc_ptr += length + 1;
3057 bytes_left -= (length + 1);
3058 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
3060 /* mostly informational -- no need to fail on error here */
3061 kfree(tcon->nativeFileSystem);
3062 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
3063 bytes_left, is_unicode,
3066 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
3068 if ((smb_buffer_response->WordCount == 3) ||
3069 (smb_buffer_response->WordCount == 7))
3070 /* field is in same location */
3071 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3074 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
3075 } else if ((rc == 0) && tcon == NULL) {
3076 /* all we need to save for IPC$ connection */
3077 ses->ipc_tid = smb_buffer_response->Tid;
3080 cifs_buf_release(smb_buffer);
3085 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
3087 struct rb_root *root = &cifs_sb->tlink_tree;
3088 struct rb_node *node;
3089 struct tcon_link *tlink;
3092 cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3094 spin_lock(&cifs_sb->tlink_tree_lock);
3095 while ((node = rb_first(root))) {
3096 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3097 cifs_get_tlink(tlink);
3098 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3099 rb_erase(node, root);
3101 spin_unlock(&cifs_sb->tlink_tree_lock);
3102 cifs_put_tlink(tlink);
3103 spin_lock(&cifs_sb->tlink_tree_lock);
3105 spin_unlock(&cifs_sb->tlink_tree_lock);
3107 tmp = cifs_sb->prepath;
3108 cifs_sb->prepathlen = 0;
3109 cifs_sb->prepath = NULL;
3115 int cifs_negotiate_protocol(unsigned int xid, struct cifsSesInfo *ses)
3118 struct TCP_Server_Info *server = ses->server;
3120 /* only send once per connect */
3121 if (server->maxBuf != 0)
3124 rc = CIFSSMBNegotiate(xid, ses);
3125 if (rc == -EAGAIN) {
3126 /* retry only once on 1st time connection */
3127 rc = CIFSSMBNegotiate(xid, ses);
3132 spin_lock(&GlobalMid_Lock);
3133 if (server->tcpStatus != CifsExiting)
3134 server->tcpStatus = CifsGood;
3137 spin_unlock(&GlobalMid_Lock);
3145 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *ses,
3146 struct nls_table *nls_info)
3149 struct TCP_Server_Info *server = ses->server;
3152 ses->capabilities = server->capabilities;
3153 if (linuxExtEnabled == 0)
3154 ses->capabilities &= (~CAP_UNIX);
3156 cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3157 server->secMode, server->capabilities, server->timeAdj);
3159 rc = CIFS_SessSetup(xid, ses, nls_info);
3161 cERROR(1, "Send error in SessSetup = %d", rc);
3163 mutex_lock(&ses->server->srv_mutex);
3164 if (!server->session_estab) {
3165 server->session_key.response = ses->auth_key.response;
3166 server->session_key.len = ses->auth_key.len;
3167 server->sequence_number = 0x2;
3168 server->session_estab = true;
3169 ses->auth_key.response = NULL;
3171 mutex_unlock(&server->srv_mutex);
3173 cFYI(1, "CIFS Session Established successfully");
3174 spin_lock(&GlobalMid_Lock);
3175 ses->status = CifsGood;
3176 ses->need_reconnect = false;
3177 spin_unlock(&GlobalMid_Lock);
3180 kfree(ses->auth_key.response);
3181 ses->auth_key.response = NULL;
3182 ses->auth_key.len = 0;
3183 kfree(ses->ntlmssp);
3184 ses->ntlmssp = NULL;
3189 static struct cifsTconInfo *
3190 cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3192 struct cifsTconInfo *master_tcon = cifs_sb_master_tcon(cifs_sb);
3193 struct cifsSesInfo *ses;
3194 struct cifsTconInfo *tcon = NULL;
3195 struct smb_vol *vol_info;
3196 char username[MAX_USERNAME_SIZE + 1];
3198 vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3199 if (vol_info == NULL) {
3200 tcon = ERR_PTR(-ENOMEM);
3204 snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3205 vol_info->username = username;
3206 vol_info->local_nls = cifs_sb->local_nls;
3207 vol_info->linux_uid = fsuid;
3208 vol_info->cred_uid = fsuid;
3209 vol_info->UNC = master_tcon->treeName;
3210 vol_info->retry = master_tcon->retry;
3211 vol_info->nocase = master_tcon->nocase;
3212 vol_info->local_lease = master_tcon->local_lease;
3213 vol_info->no_linux_ext = !master_tcon->unix_ext;
3215 /* FIXME: allow for other secFlg settings */
3216 vol_info->secFlg = CIFSSEC_MUST_KRB5;
3218 /* get a reference for the same TCP session */
3219 spin_lock(&cifs_tcp_ses_lock);
3220 ++master_tcon->ses->server->srv_count;
3221 spin_unlock(&cifs_tcp_ses_lock);
3223 ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3225 tcon = (struct cifsTconInfo *)ses;
3226 cifs_put_tcp_session(master_tcon->ses->server);
3230 tcon = cifs_get_tcon(ses, vol_info);
3232 cifs_put_smb_ses(ses);
3236 if (ses->capabilities & CAP_UNIX)
3237 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3244 static inline struct tcon_link *
3245 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
3247 return cifs_sb->master_tlink;
3250 struct cifsTconInfo *
3251 cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3253 return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3257 cifs_sb_tcon_pending_wait(void *unused)
3260 return signal_pending(current) ? -ERESTARTSYS : 0;
3263 /* find and return a tlink with given uid */
3264 static struct tcon_link *
3265 tlink_rb_search(struct rb_root *root, uid_t uid)
3267 struct rb_node *node = root->rb_node;
3268 struct tcon_link *tlink;
3271 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3273 if (tlink->tl_uid > uid)
3274 node = node->rb_left;
3275 else if (tlink->tl_uid < uid)
3276 node = node->rb_right;
3283 /* insert a tcon_link into the tree */
3285 tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
3287 struct rb_node **new = &(root->rb_node), *parent = NULL;
3288 struct tcon_link *tlink;
3291 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
3294 if (tlink->tl_uid > new_tlink->tl_uid)
3295 new = &((*new)->rb_left);
3297 new = &((*new)->rb_right);
3300 rb_link_node(&new_tlink->tl_rbnode, parent, new);
3301 rb_insert_color(&new_tlink->tl_rbnode, root);
3305 * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3308 * If the superblock doesn't refer to a multiuser mount, then just return
3309 * the master tcon for the mount.
3311 * First, search the rbtree for an existing tcon for this fsuid. If one
3312 * exists, then check to see if it's pending construction. If it is then wait
3313 * for construction to complete. Once it's no longer pending, check to see if
3314 * it failed and either return an error or retry construction, depending on
3317 * If one doesn't exist then insert a new tcon_link struct into the tree and
3318 * try to construct a new one.
3321 cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3324 uid_t fsuid = current_fsuid();
3325 struct tcon_link *tlink, *newtlink;
3327 if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3328 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3330 spin_lock(&cifs_sb->tlink_tree_lock);
3331 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3333 cifs_get_tlink(tlink);
3334 spin_unlock(&cifs_sb->tlink_tree_lock);
3336 if (tlink == NULL) {
3337 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3338 if (newtlink == NULL)
3339 return ERR_PTR(-ENOMEM);
3340 newtlink->tl_uid = fsuid;
3341 newtlink->tl_tcon = ERR_PTR(-EACCES);
3342 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3343 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3344 cifs_get_tlink(newtlink);
3346 spin_lock(&cifs_sb->tlink_tree_lock);
3347 /* was one inserted after previous search? */
3348 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3350 cifs_get_tlink(tlink);
3351 spin_unlock(&cifs_sb->tlink_tree_lock);
3353 goto wait_for_construction;
3356 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3357 spin_unlock(&cifs_sb->tlink_tree_lock);
3359 wait_for_construction:
3360 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3361 cifs_sb_tcon_pending_wait,
3362 TASK_INTERRUPTIBLE);
3364 cifs_put_tlink(tlink);
3365 return ERR_PTR(ret);
3368 /* if it's good, return it */
3369 if (!IS_ERR(tlink->tl_tcon))
3372 /* return error if we tried this already recently */
3373 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3374 cifs_put_tlink(tlink);
3375 return ERR_PTR(-EACCES);
3378 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3379 goto wait_for_construction;
3382 tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3383 clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3384 wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3386 if (IS_ERR(tlink->tl_tcon)) {
3387 cifs_put_tlink(tlink);
3388 return ERR_PTR(-EACCES);
3395 * periodic workqueue job that scans tcon_tree for a superblock and closes
3399 cifs_prune_tlinks(struct work_struct *work)
3401 struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3403 struct rb_root *root = &cifs_sb->tlink_tree;
3404 struct rb_node *node = rb_first(root);
3405 struct rb_node *tmp;
3406 struct tcon_link *tlink;
3409 * Because we drop the spinlock in the loop in order to put the tlink
3410 * it's not guarded against removal of links from the tree. The only
3411 * places that remove entries from the tree are this function and
3412 * umounts. Because this function is non-reentrant and is canceled
3413 * before umount can proceed, this is safe.
3415 spin_lock(&cifs_sb->tlink_tree_lock);
3416 node = rb_first(root);
3417 while (node != NULL) {
3419 node = rb_next(tmp);
3420 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
3422 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
3423 atomic_read(&tlink->tl_count) != 0 ||
3424 time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
3427 cifs_get_tlink(tlink);
3428 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3429 rb_erase(tmp, root);
3431 spin_unlock(&cifs_sb->tlink_tree_lock);
3432 cifs_put_tlink(tlink);
3433 spin_lock(&cifs_sb->tlink_tree_lock);
3435 spin_unlock(&cifs_sb->tlink_tree_lock);
3437 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,